System Check Virus - How to Remove

P

Papasmurf89

Member
Hi Guys,

So it appears that I somehow got the System Check virus...after searching around online I haven't been able to find a free program to remove it. I've been running avast!, SUPERAntiSpyware, and Malwarebytes but it seems to keep coming back. I tried to run PC Tools Spyware Doctor but then found out that I need to pay for it to actually remove the virus. Is there anyway to remove it for free?

Also, I am unable to see anything on my computer. My "All Programs" tab is completely empty and I am unable to see "My Computer", "Control Panel", "Devices and Printers", "Default Programs", etc. How would I get these back? My bookmarks for Google Chrome are also completely gone. Is there anyway to get these back?

I'm running Windows 7. Would a simple System Restore fix my computer and bring back everything?

Any help would be greatly appreciated! Thank you!
 
Did you run the latest version of malwarebytes? Do the following in order.

1.

Download and run UNHIDE.EXE to unhide all your icons and start menu programs.

2.

Please download and run TDSSkiller

When the program opens, click on the start scan button.

TDSSKiller will now scan your computer for the TDSS infection. When the scan has finished it will display a result screen stating whether or not the infection was found on your computer. If it was found it will display a screen similar to the one below.

infection-found.jpg


To remove the infection simply click on the Continue button and TDSSKiller will attempt to clean the infection.

When it has finished cleaning the infection you will see a report stating whether or not it was successful as shown below.

scan-completed.jpg


If the log says will be cured after reboot, please reboot the system by pressing the reboot now button.

After running there will be a log that will be located at the root of your c:\ drive labeled tdsskiller with a series of numbers after it. Please open the log and copy and paste it back here.

3.

Download and Run ComboFix
If you already have Combofix, please delete this copy and download it again as it's being updated regularly.
  • Download this file here :

    Combofix

  • When the page loads click on the blue combofix download link next to the BleepingComputer Mirror.
  • Save the file to your windows desktop. The combofix icon will look like this when it has downloaded to your desktop.

    cf-icon.jpg
  • We are almost ready to start ComboFix, but before we do so, we need to take some preventative measures so that there are no conflicts with other programs when running ComboFix. At this point you should do the following:

  • Close all open Windows including this one.
  • Close or disable all running Antivirus, Antispyware, and Firewall programs as they may interfere with the proper running of ComboFix. Instructions on disabling these type of programs can be found here.
    Once these two steps have been completed, double-click on the ComboFix icon found on your desktop. Please note, that once you start ComboFix you should not click anywhere on the ComboFix window as it can cause the program to stall. In fact, when ComboFix is running, do not touch your computer at all. The scan could take a while, so please be patient.
  • Please click on I agree on the disclaimer window.
  • ComboFix will now install itself on to your computer. When it is done, a blue screen will appear as shown below.

    cf-preparing.jpg

  • ComboFix is now preparing to run. When it has finished ComboFix will automatically attempt to create a System Restore point so that if any problems occur while using the program you can restore back to your previous configuration. When ComboFix has finished creating the restore point, it will then backup your Windows Registry as shown in the image below.

    erunt.jpg

  • Once the Windows Registry has finished being backed up, ComboFix will attempt to detect if you have the Windows Recovery Console installed. If you already have it installed, you can skip to this section and continue reading. Otherwise you will see the following message as shown below:

    recovery-console-prompt.jpg

  • At the above message box, please click on the Yes button in order for ComboFix to continue. Please follow the steps and instructions given by ComboFix in order to finish the installation of the Recovery Console.
  • Please click on yes in the next window to continue scanning for malware.
  • ComboFix will now disconnect your computer from the Internet, so do not be surprised or concerned if you receive any warnings stating that you are no longer on the Internet. When ComboFix has finished it will automatically restore your Internet connection.
  • ComboFix will now start scanning your computer for known infections. This procedure can take some time, so please be patient.
  • While the program is scanning your computer, it will change your clock format, so do not be concerned when you see this happen. When ComboFix is finished it will restore your clock settings to their previous settings. You will also see the text in the ComboFix window being updated as it goes through the various stages of its scan. An example of this can be seen below.

    still-scanning-clockchanges.jpg

  • When ComboFix has finished running, you will see a screen stating that it is preparing the log report.
  • This can take a while, so please be patient. If you see your Windows desktop disappear, do not worry. This is normal and ComboFix will restore your desktop before it is finished. Eventually you will see a new screen that states the program is almost finished and telling you the programs log file, or report, will be located at C:\ComboFix.txt.
  • When ComboFix has finished, it will automatically close the program and change your clock back to its original format. It will then display the log file automatically for you.
  • Now you just click on the edit menu and click on select all, then click on the edit menu again and click on copy. Then come to the forum in your reply and right click on your mouse and click on paste.


In your next reply please post:
  • The ComboFix log
  • A fresh HiJackThis log
  • An update on how your computer is running
 
Last edited:
Hey John this is one of those virus' that marks everything as hidden (and also deletes the start menu icons) so you'll want to mention Unhide and how to restore the start menu shortcuts.
 
voyagerfan99 said:
Hey John this is one of those virus' that marks everything as hidden (and also deletes the start menu icons) so you'll want to mention Unhide and how to restore the start menu shortcuts.
Click to expand...

Edited my post, glad you caught that. Combofix would delete the temp files where the programs and icons were moved to. I'm in the middle of building a computer and talking with a client on the phone.
 
Thanks for the lengthy, detailed reply John...really, really appreciate it. Ran in to my first problem, downloaded TDSSKiller but when I tried to open it to install nothing happens. My mouse pointer has the circle that moves for a second like it's about to start loading, and then nothing. I tried it in Safe Mode and normally. Nothing. Any suggestions?

Also, tried running the Unhide and I still can't see the "Default Programs", "Control Panel", etc. on the start menu. I can see my "Computer" now but that's it. Before I saw the Unhide program you posted I did it manually through a guide I found online, that had me go to Computer, Tools, Folder Options and unhiding everything. And then highlighting all my files, going to Properties and then unchecking the hidden box. Could that be problematic? I also ran Unhide.exe after because I thought it would bring back my "Control Panel", "Default Programs", etc. but no dice.

Thanks again for the help.
 
I need you to do the following then so I can see whats going on.

Make sure you run the rkill file.

Please download Malwarebytes' Anti-Malware from here or here and save it to your desktop.
  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to
    • Update Malwarebytes' Anti-Malware
    • and Launch Malwarebytes' Anti-Malware
  • then click Finish.
  • If an update is found, it will download and install the latest version. Please keep updating until it says you have the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • A log will be saved automatically which you can access by clicking on the Logs tab within Malwarebytes' Anti-Malware

If for some reason Malwarebytes will not install or run please download and run Rkill.scr, Rkill.exe, or Rkill.com. If you are still having issues running rkill then try downloading these renamed versions of the same program.

EXPLORER.EXE
IEXPLORE.EXE
USERINIT.EXE
WINLOGON.EXE

But DO NOT reboot the system and then try installing or running Malwarebytes. If Rkill (which is a black box) appears and then disappears right away or you get a message saying rkill is infected, keep trying to run rkill until it over powers the infection and temporarily kills it. Once a log appears on the screen, you can try running malwarebytes or downloading other programs.



Download the HijackThis installer from here.
Run the installer and choose Install, indicating that you accept the licence agreement. The installer will place a shortcut on your desktop and launch HijackThis.

Click Do a system scan and save a logfile

Most of what HijackThis lists will be harmless or even essential, don't fix anything yet.

When the hijackthis log appears in a notepad file, click on the edit menu, click select all, then click on the edit menu again and click on copy. Come back to your reply and right click on your mouse and click on paste.

Post the logfile that HijackThis produces along with the Malwarebytes Anti-Malware log
 
So after some google searching I ran the FixTDSS.exe file. It said that an infected MBR was found but that it was repaired. I was then able to run TDSSKiller. The scan only took 10 seconds maybe and said that it found no infected files. Here is the log:


19:55:56.0068 0652 TDSS rootkit removing tool 2.7.7.0 Jan 24 2012 16:44:27
19:55:56.0567 0652 ============================================================
19:55:56.0567 0652 Current date / time: 2012/01/28 19:55:56.0567
19:55:56.0567 0652 SystemInfo:
19:55:56.0567 0652
19:55:56.0567 0652 OS Version: 6.1.7600 ServicePack: 0.0
19:55:56.0567 0652 Product type: Workstation
19:55:56.0567 0652 ComputerName: MYCOMP
19:55:56.0567 0652 UserName: Pang
19:55:56.0567 0652 Windows directory: C:\windows
19:55:56.0567 0652 System windows directory: C:\windows
19:55:56.0567 0652 Running under WOW64
19:55:56.0567 0652 Processor architecture: Intel x64
19:55:56.0567 0652 Number of processors: 4
19:55:56.0567 0652 Page size: 0x1000
19:55:56.0567 0652 Boot type: Normal boot
19:55:56.0567 0652 ============================================================
19:55:59.0235 0652 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:55:59.0313 0652 Initialize success
19:56:03.0915 4800 ============================================================
19:56:03.0915 4800 Scan started
19:56:03.0915 4800 Mode: Manual;
19:56:03.0915 4800 ============================================================
19:56:04.0492 4800 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\windows\system32\DRIVERS\1394ohci.sys
19:56:04.0492 4800 1394ohci - ok
19:56:04.0539 4800 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\windows\system32\DRIVERS\ACPI.sys
19:56:04.0539 4800 ACPI - ok
19:56:04.0570 4800 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\windows\system32\DRIVERS\acpipmi.sys
19:56:04.0570 4800 AcpiPmi - ok
19:56:04.0617 4800 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\windows\system32\DRIVERS\adp94xx.sys
19:56:04.0632 4800 adp94xx - ok
19:56:04.0648 4800 adpahci (597f78224ee9224ea1a13d6350ced962) C:\windows\system32\DRIVERS\adpahci.sys
19:56:04.0663 4800 adpahci - ok
19:56:04.0679 4800 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\windows\system32\DRIVERS\adpu320.sys
19:56:04.0695 4800 adpu320 - ok
19:56:04.0757 4800 AFD (6ef20ddf3172e97d69f596fb90602f29) C:\windows\system32\drivers\afd.sys
19:56:04.0773 4800 AFD - ok
19:56:04.0835 4800 AgereSoftModem (af4748ef93416159459769a24a0053af) C:\windows\system32\DRIVERS\agrsm64.sys
19:56:04.0851 4800 AgereSoftModem - ok
19:56:04.0866 4800 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\windows\system32\DRIVERS\agp440.sys
19:56:04.0882 4800 agp440 - ok
19:56:04.0913 4800 aliide (5812713a477a3ad7363c7438ca2ee038) C:\windows\system32\DRIVERS\aliide.sys
19:56:04.0913 4800 aliide - ok
19:56:04.0944 4800 amdide (1ff8b4431c353ce385c875f194924c0c) C:\windows\system32\DRIVERS\amdide.sys
19:56:04.0944 4800 amdide - ok
19:56:04.0975 4800 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\windows\system32\DRIVERS\amdk8.sys
19:56:04.0991 4800 AmdK8 - ok
19:56:05.0147 4800 amdkmdag (c6c0f73a038ff38ebbd9c16f79f8d3e3) C:\windows\system32\DRIVERS\atikmdag.sys
19:56:05.0287 4800 amdkmdag - ok
19:56:05.0381 4800 amdkmdap (4647d713cff04fae4f862b3144725bc1) C:\windows\system32\DRIVERS\atikmpag.sys
19:56:05.0381 4800 amdkmdap - ok
19:56:05.0412 4800 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\windows\system32\DRIVERS\amdppm.sys
19:56:05.0412 4800 AmdPPM - ok
19:56:05.0443 4800 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\windows\system32\drivers\amdsata.sys
19:56:05.0443 4800 amdsata - ok
19:56:05.0490 4800 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\windows\system32\DRIVERS\amdsbs.sys
19:56:05.0490 4800 amdsbs - ok
19:56:05.0506 4800 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\windows\system32\drivers\amdxata.sys
19:56:05.0521 4800 amdxata - ok
19:56:05.0553 4800 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\windows\system32\drivers\appid.sys
19:56:05.0568 4800 AppID - ok
19:56:05.0599 4800 arc (c484f8ceb1717c540242531db7845c4e) C:\windows\system32\DRIVERS\arc.sys
19:56:05.0599 4800 arc - ok
19:56:05.0631 4800 arcsas (019af6924aefe7839f61c830227fe79c) C:\windows\system32\DRIVERS\arcsas.sys
19:56:05.0631 4800 arcsas - ok
19:56:05.0662 4800 ArcSoftKsUFilter (c130bc4a51b1382b2be8e44579ec4c0a) C:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys
19:56:05.0662 4800 ArcSoftKsUFilter - ok
19:56:05.0693 4800 aswFsBlk (ce6d8bcc4787704ea4feeb92b0d0caf8) C:\windows\system32\drivers\aswFsBlk.sys
19:56:05.0693 4800 aswFsBlk - ok
19:56:05.0755 4800 aswMonFlt (0debeb2e3fbd0bf5343125cce617f105) C:\windows\system32\drivers\aswMonFlt.sys
19:56:05.0755 4800 aswMonFlt - ok
19:56:05.0771 4800 aswRdr (952edc2e81f85d1781958d4128bf59f8) C:\windows\system32\drivers\aswRdr.sys
19:56:05.0771 4800 aswRdr - ok
19:56:05.0818 4800 aswSnx (dd383e2ac941c545a85ab72503da6c12) C:\windows\system32\drivers\aswSnx.sys
19:56:05.0833 4800 aswSnx - ok
19:56:05.0849 4800 aswSP (ef5403fb8b2dcb791ec365fdf6040a4a) C:\windows\system32\drivers\aswSP.sys
19:56:05.0849 4800 aswSP - ok
19:56:05.0880 4800 aswTdi (34165da5c6b30c0f9d61246bf8a28040) C:\windows\system32\drivers\aswTdi.sys
19:56:05.0880 4800 aswTdi - ok
19:56:05.0896 4800 AsyncMac (769765ce2cc62867468cea93969b2242) C:\windows\system32\DRIVERS\asyncmac.sys
19:56:05.0896 4800 AsyncMac - ok
19:56:05.0927 4800 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\windows\system32\DRIVERS\atapi.sys
19:56:05.0927 4800 atapi - ok
19:56:05.0989 4800 athr (b2c3a8618867404475228f7dd260698b) C:\windows\system32\DRIVERS\athrx.sys
19:56:06.0036 4800 athr - ok
19:56:06.0083 4800 AtiHdmiService (637e0753bd6deb8ea5314a5c357ec1a0) C:\windows\system32\drivers\AtiHdmi.sys
19:56:06.0083 4800 AtiHdmiService - ok
19:56:06.0130 4800 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\windows\system32\DRIVERS\bxvbda.sys
19:56:06.0145 4800 b06bdrv - ok
19:56:06.0177 4800 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\windows\system32\DRIVERS\b57nd60a.sys
19:56:06.0192 4800 b57nd60a - ok
19:56:06.0223 4800 Beep (16a47ce2decc9b099349a5f840654746) C:\windows\system32\drivers\Beep.sys
19:56:06.0223 4800 Beep - ok
19:56:06.0270 4800 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\windows\system32\DRIVERS\blbdrive.sys
19:56:06.0270 4800 blbdrive - ok
19:56:06.0317 4800 bowser (19d20159708e152267e53b66677a4995) C:\windows\system32\DRIVERS\bowser.sys
19:56:06.0317 4800 bowser - ok
19:56:06.0348 4800 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\windows\system32\DRIVERS\BrFiltLo.sys
19:56:06.0364 4800 BrFiltLo - ok
19:56:06.0379 4800 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\windows\system32\DRIVERS\BrFiltUp.sys
19:56:06.0379 4800 BrFiltUp - ok
19:56:06.0426 4800 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\windows\System32\Drivers\Brserid.sys
19:56:06.0426 4800 Brserid - ok
19:56:06.0457 4800 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\windows\System32\Drivers\BrSerWdm.sys
19:56:06.0457 4800 BrSerWdm - ok
19:56:06.0473 4800 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\windows\System32\Drivers\BrUsbMdm.sys
19:56:06.0489 4800 BrUsbMdm - ok
19:56:06.0504 4800 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\windows\System32\Drivers\BrUsbSer.sys
19:56:06.0504 4800 BrUsbSer - ok
19:56:06.0567 4800 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\windows\system32\drivers\BthEnum.sys
19:56:06.0582 4800 BthEnum - ok
19:56:06.0598 4800 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\windows\system32\DRIVERS\bthmodem.sys
19:56:06.0598 4800 BTHMODEM - ok
19:56:06.0613 4800 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\windows\system32\DRIVERS\bthpan.sys
19:56:06.0613 4800 BthPan - ok
19:56:06.0660 4800 BTHPORT (21084ceb85280468c9aca3c805c0f8cf) C:\windows\System32\Drivers\BTHport.sys
19:56:06.0676 4800 BTHPORT - ok
19:56:06.0723 4800 BTHUSB (8504842634dd144c075b6b0c982ccec4) C:\windows\System32\Drivers\BTHUSB.sys
19:56:06.0723 4800 BTHUSB - ok
19:56:06.0754 4800 BTMCOM - ok
19:56:06.0785 4800 cdfs (b8bd2bb284668c84865658c77574381a) C:\windows\system32\DRIVERS\cdfs.sys
19:56:06.0785 4800 cdfs - ok
19:56:06.0832 4800 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\windows\system32\DRIVERS\cdrom.sys
19:56:06.0832 4800 cdrom - ok
19:56:06.0863 4800 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\windows\system32\DRIVERS\circlass.sys
19:56:06.0863 4800 circlass - ok
19:56:06.0894 4800 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\windows\system32\CLFS.sys
19:56:06.0910 4800 CLFS - ok
19:56:06.0941 4800 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\windows\system32\DRIVERS\CmBatt.sys
19:56:06.0941 4800 CmBatt - ok
19:56:06.0957 4800 cmdide (e19d3f095812725d88f9001985b94edd) C:\windows\system32\DRIVERS\cmdide.sys
19:56:06.0957 4800 cmdide - ok
19:56:07.0003 4800 CNG (937beb186a735aca91d717044a49d17e) C:\windows\system32\Drivers\cng.sys
19:56:07.0019 4800 CNG - ok
19:56:07.0050 4800 Compbatt (102de219c3f61415f964c88e9085ad14) C:\windows\system32\DRIVERS\compbatt.sys
19:56:07.0050 4800 Compbatt - ok
19:56:07.0081 4800 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\windows\system32\DRIVERS\CompositeBus.sys
19:56:07.0081 4800 CompositeBus - ok
19:56:07.0113 4800 crcdisk (1c827878a998c18847245fe1f34ee597) C:\windows\system32\DRIVERS\crcdisk.sys
19:56:07.0113 4800 crcdisk - ok
19:56:07.0175 4800 DfsC (9c253ce7311ca60fc11c774692a13208) C:\windows\system32\Drivers\dfsc.sys
19:56:07.0191 4800 DfsC - ok
19:56:07.0237 4800 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\windows\system32\drivers\discache.sys
19:56:07.0253 4800 discache - ok
19:56:07.0284 4800 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\windows\system32\DRIVERS\disk.sys
19:56:07.0284 4800 Disk - ok
19:56:07.0315 4800 drmkaud (9b19f34400d24df84c858a421c205754) C:\windows\system32\drivers\drmkaud.sys
19:56:07.0331 4800 drmkaud - ok
19:56:07.0378 4800 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\windows\System32\drivers\dxgkrnl.sys
19:56:07.0393 4800 DXGKrnl - ok
19:56:07.0503 4800 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\windows\system32\DRIVERS\evbda.sys
19:56:07.0596 4800 ebdrv - ok
19:56:07.0659 4800 ElbyCDIO (a05fc7eca0966ebb70e4d17b855a853b) C:\windows\system32\Drivers\ElbyCDIO.sys
19:56:07.0659 4800 ElbyCDIO - ok
19:56:07.0705 4800 elxstor (0e5da5369a0fcaea12456dd852545184) C:\windows\system32\DRIVERS\elxstor.sys
19:56:07.0721 4800 elxstor - ok
19:56:07.0752 4800 enecir (a9ec08727c64d985678f5b64c03823f0) C:\windows\system32\DRIVERS\enecir.sys
19:56:07.0752 4800 enecir - ok
19:56:07.0783 4800 enecirhid (e17eb95358f396e27d573a1b20f891f8) C:\windows\system32\DRIVERS\enecirhid.sys
19:56:07.0783 4800 enecirhid - ok
19:56:07.0799 4800 enecirhidma (8492d808c79bd6fe439f77be84956cdf) C:\windows\system32\DRIVERS\enecirhidma.sys
19:56:07.0799 4800 enecirhidma - ok
19:56:07.0815 4800 ErrDev (34a3c54752046e79a126e15c51db409b) C:\windows\system32\DRIVERS\errdev.sys
19:56:07.0815 4800 ErrDev - ok
19:56:07.0846 4800 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\windows\system32\drivers\exfat.sys
19:56:07.0861 4800 exfat - ok
19:56:07.0908 4800 fastfat (0adc83218b66a6db380c330836f3e36d) C:\windows\system32\drivers\fastfat.sys
19:56:07.0908 4800 fastfat - ok
19:56:07.0924 4800 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\windows\system32\DRIVERS\fdc.sys
19:56:07.0924 4800 fdc - ok
19:56:07.0971 4800 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\windows\system32\drivers\fileinfo.sys
19:56:07.0986 4800 FileInfo - ok
19:56:08.0002 4800 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\windows\system32\drivers\filetrace.sys
19:56:08.0002 4800 Filetrace - ok
19:56:08.0064 4800 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\windows\system32\DRIVERS\flpydisk.sys
19:56:08.0064 4800 flpydisk - ok
19:56:08.0111 4800 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\windows\system32\drivers\fltmgr.sys
19:56:08.0111 4800 FltMgr - ok
19:56:08.0173 4800 FsDepends (d43703496149971890703b4b1b723eac) C:\windows\system32\drivers\FsDepends.sys
19:56:08.0173 4800 FsDepends - ok
19:56:08.0236 4800 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\windows\system32\drivers\Fs_Rec.sys
19:56:08.0236 4800 Fs_Rec - ok
19:56:08.0267 4800 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\windows\system32\DRIVERS\fvevol.sys
19:56:08.0283 4800 fvevol - ok
19:56:08.0298 4800 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\windows\system32\DRIVERS\gagp30kx.sys
19:56:08.0298 4800 gagp30kx - ok
19:56:08.0361 4800 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\windows\system32\drivers\hcw85cir.sys
19:56:08.0361 4800 hcw85cir - ok
19:56:08.0392 4800 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\windows\system32\drivers\HdAudio.sys
19:56:08.0407 4800 HdAudAddService - ok
19:56:08.0439 4800 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\windows\system32\DRIVERS\HDAudBus.sys
19:56:08.0439 4800 HDAudBus - ok
19:56:08.0454 4800 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\windows\system32\DRIVERS\HidBatt.sys
19:56:08.0454 4800 HidBatt - ok
19:56:08.0470 4800 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\windows\system32\DRIVERS\hidbth.sys
19:56:08.0470 4800 HidBth - ok
19:56:08.0485 4800 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\windows\system32\DRIVERS\hidir.sys
19:56:08.0485 4800 HidIr - ok
19:56:08.0532 4800 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\windows\system32\DRIVERS\hidusb.sys
19:56:08.0532 4800 HidUsb - ok
19:56:08.0579 4800 HpSAMD (0886d440058f203eba0e1825e4355914) C:\windows\system32\DRIVERS\HpSAMD.sys
19:56:08.0579 4800 HpSAMD - ok
19:56:08.0610 4800 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\windows\system32\drivers\HTTP.sys
19:56:08.0641 4800 HTTP - ok
19:56:08.0673 4800 hwpolicy (f17766a19145f111856378df337a5d79) C:\windows\system32\drivers\hwpolicy.sys
19:56:08.0673 4800 hwpolicy - ok
19:56:08.0688 4800 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\windows\system32\DRIVERS\i8042prt.sys
19:56:08.0704 4800 i8042prt - ok
19:56:08.0719 4800 iaStor (abbf174cb394f5c437410a788b7e404a) C:\windows\system32\DRIVERS\iaStor.sys
19:56:08.0735 4800 iaStor - ok
19:56:08.0766 4800 iaStorV (b75e45c564e944a2657167d197ab29da) C:\windows\system32\drivers\iaStorV.sys
19:56:08.0782 4800 iaStorV - ok
19:56:08.0797 4800 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\windows\system32\DRIVERS\iirsp.sys
19:56:08.0813 4800 iirsp - ok
19:56:08.0891 4800 IntcAzAudAddService (dcf6afba140af3f880a427c2656be44d) C:\windows\system32\drivers\RTKVHD64.sys
19:56:08.0907 4800 IntcAzAudAddService - ok
19:56:08.0938 4800 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\windows\system32\DRIVERS\intelide.sys
19:56:08.0938 4800 intelide - ok
19:56:08.0953 4800 intelppm (ada036632c664caa754079041cf1f8c1) C:\windows\system32\DRIVERS\intelppm.sys
19:56:08.0953 4800 intelppm - ok
19:56:09.0000 4800 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\windows\system32\DRIVERS\ipfltdrv.sys
19:56:09.0000 4800 IpFilterDriver - ok
19:56:09.0016 4800 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\windows\system32\DRIVERS\IPMIDrv.sys
19:56:09.0016 4800 IPMIDRV - ok
19:56:09.0031 4800 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\windows\system32\drivers\ipnat.sys
19:56:09.0031 4800 IPNAT - ok
19:56:09.0047 4800 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\windows\system32\drivers\irenum.sys
19:56:09.0063 4800 IRENUM - ok
19:56:09.0078 4800 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\windows\system32\DRIVERS\isapnp.sys
19:56:09.0078 4800 isapnp - ok
19:56:09.0109 4800 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\windows\system32\DRIVERS\msiscsi.sys
19:56:09.0109 4800 iScsiPrt - ok
19:56:09.0156 4800 JMCR (02bd12c2ee52f0849a5d6f9a2fa67b4e) C:\windows\system32\DRIVERS\jmcr.sys
19:56:09.0156 4800 JMCR - ok
19:56:09.0187 4800 johci (e662cb468a1cff3a57e120a212fadd57) C:\windows\system32\DRIVERS\johci.sys
19:56:09.0187 4800 johci - ok
19:56:09.0219 4800 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\windows\system32\DRIVERS\kbdclass.sys
19:56:09.0219 4800 kbdclass - ok
19:56:09.0250 4800 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\windows\system32\DRIVERS\kbdhid.sys
19:56:09.0250 4800 kbdhid - ok
19:56:09.0281 4800 KSecDD (16c1b906fc5ead84769f90b736b6bf0e) C:\windows\system32\Drivers\ksecdd.sys
19:56:09.0281 4800 KSecDD - ok
19:56:09.0312 4800 KSecPkg (0b711550c56444879d71c7daabda6c83) C:\windows\system32\Drivers\ksecpkg.sys
19:56:09.0312 4800 KSecPkg - ok
19:56:09.0328 4800 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\windows\system32\drivers\ksthunk.sys
19:56:09.0328 4800 ksthunk - ok
19:56:09.0406 4800 LHidFilt (241f2648adf090e2a10095bd6d6f5dcb) C:\windows\system32\DRIVERS\LHidFilt.Sys
19:56:09.0406 4800 LHidFilt - ok
19:56:09.0437 4800 lltdio (1538831cf8ad2979a04c423779465827) C:\windows\system32\DRIVERS\lltdio.sys
19:56:09.0453 4800 lltdio - ok
19:56:09.0484 4800 LMouFilt (342ed5a4b3326014438f36d22d803737) C:\windows\system32\DRIVERS\LMouFilt.Sys
19:56:09.0484 4800 LMouFilt - ok
19:56:09.0515 4800 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\windows\system32\DRIVERS\lsi_fc.sys
19:56:09.0515 4800 LSI_FC - ok
19:56:09.0546 4800 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\windows\system32\DRIVERS\lsi_sas.sys
19:56:09.0546 4800 LSI_SAS - ok
19:56:09.0562 4800 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\windows\system32\DRIVERS\lsi_sas2.sys
19:56:09.0562 4800 LSI_SAS2 - ok
19:56:09.0593 4800 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\windows\system32\DRIVERS\lsi_scsi.sys
19:56:09.0593 4800 LSI_SCSI - ok
19:56:09.0609 4800 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\windows\system32\drivers\luafv.sys
19:56:09.0609 4800 luafv - ok
19:56:09.0640 4800 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\windows\system32\DRIVERS\megasas.sys
19:56:09.0640 4800 megasas - ok
19:56:09.0655 4800 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\windows\system32\DRIVERS\MegaSR.sys
19:56:09.0671 4800 MegaSR - ok
19:56:09.0718 4800 MGHwCtrl - ok
19:56:09.0765 4800 Modem (800ba92f7010378b09f9ed9270f07137) C:\windows\system32\drivers\modem.sys
19:56:09.0765 4800 Modem - ok
19:56:09.0796 4800 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\windows\system32\DRIVERS\monitor.sys
19:56:09.0796 4800 monitor - ok
19:56:09.0827 4800 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\windows\system32\DRIVERS\mouclass.sys
19:56:09.0827 4800 mouclass - ok
19:56:09.0874 4800 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\windows\system32\DRIVERS\mouhid.sys
19:56:09.0874 4800 mouhid - ok
19:56:09.0905 4800 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\windows\system32\drivers\mountmgr.sys
19:56:09.0905 4800 mountmgr - ok
19:56:09.0936 4800 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\windows\system32\DRIVERS\mpio.sys
19:56:09.0936 4800 mpio - ok
19:56:09.0967 4800 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\windows\system32\drivers\mpsdrv.sys
19:56:09.0967 4800 mpsdrv - ok
19:56:10.0014 4800 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\windows\system32\drivers\mrxdav.sys
19:56:10.0014 4800 MRxDAV - ok
19:56:10.0061 4800 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\windows\system32\DRIVERS\mrxsmb.sys
19:56:10.0077 4800 mrxsmb - ok
19:56:10.0123 4800 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\windows\system32\DRIVERS\mrxsmb10.sys
19:56:10.0139 4800 mrxsmb10 - ok
19:56:10.0155 4800 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\windows\system32\DRIVERS\mrxsmb20.sys
19:56:10.0170 4800 mrxsmb20 - ok
19:56:10.0201 4800 msahci (5c37497276e3b3a5488b23a326a754b7) C:\windows\system32\DRIVERS\msahci.sys
19:56:10.0201 4800 msahci - ok
19:56:10.0233 4800 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\windows\system32\DRIVERS\msdsm.sys
19:56:10.0233 4800 msdsm - ok
19:56:10.0264 4800 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\windows\system32\drivers\Msfs.sys
19:56:10.0279 4800 Msfs - ok
19:56:10.0311 4800 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\windows\System32\drivers\mshidkmdf.sys
19:56:10.0311 4800 mshidkmdf - ok
19:56:10.0342 4800 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\windows\system32\DRIVERS\msisadrv.sys
19:56:10.0342 4800 msisadrv - ok
19:56:10.0404 4800 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\windows\system32\drivers\MSKSSRV.sys
19:56:10.0404 4800 MSKSSRV - ok
19:56:10.0420 4800 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\windows\system32\drivers\MSPCLOCK.sys
19:56:10.0420 4800 MSPCLOCK - ok
19:56:10.0451 4800 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\windows\system32\drivers\MSPQM.sys
19:56:10.0451 4800 MSPQM - ok
19:56:10.0482 4800 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\windows\system32\drivers\MsRPC.sys
19:56:10.0498 4800 MsRPC - ok
19:56:10.0529 4800 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\windows\system32\DRIVERS\mssmbios.sys
19:56:10.0529 4800 mssmbios - ok
19:56:10.0560 4800 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\windows\system32\drivers\MSTEE.sys
19:56:10.0576 4800 MSTEE - ok
19:56:10.0591 4800 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\windows\system32\DRIVERS\MTConfig.sys
19:56:10.0591 4800 MTConfig - ok
19:56:10.0623 4800 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\windows\system32\Drivers\mup.sys
19:56:10.0623 4800 Mup - ok
19:56:10.0685 4800 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\windows\system32\DRIVERS\nwifi.sys
19:56:10.0701 4800 NativeWifiP - ok
19:56:10.0747 4800 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\windows\system32\drivers\ndis.sys
19:56:10.0779 4800 NDIS - ok
19:56:10.0810 4800 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\windows\system32\DRIVERS\ndiscap.sys
19:56:10.0810 4800 NdisCap - ok
19:56:10.0857 4800 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\windows\system32\DRIVERS\ndistapi.sys
19:56:10.0857 4800 NdisTapi - ok
19:56:10.0888 4800 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\windows\system32\DRIVERS\ndisuio.sys
19:56:10.0888 4800 Ndisuio - ok
19:56:10.0919 4800 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\windows\system32\DRIVERS\ndiswan.sys
19:56:10.0919 4800 NdisWan - ok
19:56:10.0950 4800 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\windows\system32\drivers\NDProxy.sys
19:56:10.0966 4800 NDProxy - ok
19:56:10.0997 4800 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\windows\system32\DRIVERS\netbios.sys
19:56:10.0997 4800 NetBIOS - ok
19:56:11.0028 4800 NetBT (9162b273a44ab9dce5b44362731d062a) C:\windows\system32\DRIVERS\netbt.sys
19:56:11.0028 4800 NetBT - ok
19:56:11.0106 4800 netr28x (b6e1bf8dbff4b18f1a2d65da6e40bc7c) C:\windows\system32\DRIVERS\netr28x.sys
19:56:11.0137 4800 netr28x - ok
19:56:11.0293 4800 NETw5s64 (4d85a450edef10c38882182753a49aae) C:\windows\system32\DRIVERS\NETw5s64.sys
19:56:11.0418 4800 NETw5s64 - ok
19:56:11.0465 4800 nfrd960 (77889813be4d166cdab78ddba990da92) C:\windows\system32\DRIVERS\nfrd960.sys
19:56:11.0481 4800 nfrd960 - ok
19:56:11.0512 4800 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\windows\system32\drivers\Npfs.sys
19:56:11.0527 4800 Npfs - ok
19:56:11.0559 4800 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\windows\system32\drivers\nsiproxy.sys
19:56:11.0559 4800 nsiproxy - ok
19:56:11.0637 4800 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\windows\system32\drivers\Ntfs.sys
19:56:11.0683 4800 Ntfs - ok
19:56:11.0730 4800 Null (9899284589f75fa8724ff3d16aed75c1) C:\windows\system32\drivers\Null.sys
19:56:11.0730 4800 Null - ok
19:56:11.0761 4800 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\windows\system32\drivers\nvraid.sys
19:56:11.0761 4800 nvraid - ok
19:56:11.0793 4800 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\windows\system32\drivers\nvstor.sys
19:56:11.0808 4800 nvstor - ok
19:56:11.0824 4800 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\windows\system32\DRIVERS\nv_agp.sys
19:56:11.0839 4800 nv_agp - ok
19:56:11.0855 4800 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\windows\system32\DRIVERS\ohci1394.sys
19:56:11.0855 4800 ohci1394 - ok
19:56:11.0886 4800 Parport (0086431c29c35be1dbc43f52cc273887) C:\windows\system32\DRIVERS\parport.sys
19:56:11.0902 4800 Parport - ok
19:56:11.0917 4800 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\windows\system32\drivers\partmgr.sys
19:56:11.0917 4800 partmgr - ok
19:56:11.0949 4800 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\windows\system32\DRIVERS\pci.sys
19:56:11.0949 4800 pci - ok
19:56:11.0980 4800 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\windows\system32\DRIVERS\pciide.sys
19:56:11.0980 4800 pciide - ok
19:56:12.0027 4800 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\windows\system32\DRIVERS\pcmcia.sys
19:56:12.0027 4800 pcmcia - ok
19:56:12.0058 4800 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\windows\system32\drivers\pcw.sys
19:56:12.0058 4800 pcw - ok
19:56:12.0105 4800 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\windows\system32\drivers\peauth.sys
19:56:12.0120 4800 PEAUTH - ok
19:56:12.0214 4800 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\windows\system32\DRIVERS\raspptp.sys
19:56:12.0214 4800 PptpMiniport - ok
19:56:12.0245 4800 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\windows\system32\DRIVERS\processr.sys
19:56:12.0245 4800 Processor - ok
19:56:12.0292 4800 Psched (ee992183bd8eaefd9973f352e587a299) C:\windows\system32\DRIVERS\pacer.sys
19:56:12.0292 4800 Psched - ok
19:56:12.0354 4800 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\windows\system32\DRIVERS\ql2300.sys
19:56:12.0385 4800 ql2300 - ok
19:56:12.0417 4800 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\windows\system32\DRIVERS\ql40xx.sys
19:56:12.0417 4800 ql40xx - ok
19:56:12.0448 4800 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\windows\system32\drivers\qwavedrv.sys
19:56:12.0448 4800 QWAVEdrv - ok
19:56:12.0479 4800 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\windows\system32\DRIVERS\rasacd.sys
19:56:12.0479 4800 RasAcd - ok
19:56:12.0510 4800 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\windows\system32\DRIVERS\AgileVpn.sys
19:56:12.0510 4800 RasAgileVpn - ok
19:56:12.0541 4800 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\windows\system32\DRIVERS\rasl2tp.sys
19:56:12.0541 4800 Rasl2tp - ok
19:56:12.0588 4800 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\windows\system32\DRIVERS\raspppoe.sys
19:56:12.0588 4800 RasPppoe - ok
19:56:12.0619 4800 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\windows\system32\DRIVERS\rassstp.sys
19:56:12.0619 4800 RasSstp - ok
19:56:12.0651 4800 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\windows\system32\DRIVERS\rdbss.sys
19:56:12.0651 4800 rdbss - ok
19:56:12.0697 4800 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\windows\system32\DRIVERS\rdpbus.sys
19:56:12.0697 4800 rdpbus - ok
19:56:12.0729 4800 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\windows\system32\DRIVERS\RDPCDD.sys
19:56:12.0729 4800 RDPCDD - ok
19:56:12.0760 4800 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\windows\system32\drivers\rdpencdd.sys
19:56:12.0760 4800 RDPENCDD - ok
19:56:12.0791 4800 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\windows\system32\drivers\rdprefmp.sys
19:56:12.0791 4800 RDPREFMP - ok
19:56:12.0838 4800 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\windows\system32\drivers\RDPWD.sys
19:56:12.0838 4800 RDPWD - ok
19:56:12.0869 4800 rdyboost (634b9a2181d98f15941236886164ec8b) C:\windows\system32\drivers\rdyboost.sys
19:56:12.0869 4800 rdyboost - ok
19:56:12.0931 4800 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\windows\system32\DRIVERS\rfcomm.sys
19:56:12.0931 4800 RFCOMM - ok
19:56:12.0978 4800 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\windows\system32\DRIVERS\rspndr.sys
19:56:12.0978 4800 rspndr - ok
19:56:13.0025 4800 RTHDMIAzAudService (4e821c740a675f6d040be41d59a62b1d) C:\windows\system32\drivers\RtHDMIVX.sys
19:56:13.0041 4800 RTHDMIAzAudService - ok
19:56:13.0072 4800 RTL8167 (b49dc435ae3695bac5623dd94b05732d) C:\windows\system32\DRIVERS\Rt64win7.sys
19:56:13.0072 4800 RTL8167 - ok
19:56:13.0150 4800 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
19:56:13.0150 4800 SASDIFSV - ok
19:56:13.0165 4800 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
19:56:13.0165 4800 SASKUTIL - ok
19:56:13.0197 4800 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\windows\system32\DRIVERS\sbp2port.sys
19:56:13.0197 4800 sbp2port - ok
19:56:13.0228 4800 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\windows\system32\DRIVERS\scfilter.sys
19:56:13.0243 4800 scfilter - ok
19:56:13.0290 4800 sdbus (54e47ad086782d3ae9417c155cdceb9b) C:\windows\system32\DRIVERS\sdbus.sys
19:56:13.0290 4800 sdbus - ok
19:56:13.0353 4800 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\windows\system32\drivers\secdrv.sys
19:56:13.0353 4800 secdrv - ok
19:56:13.0384 4800 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\windows\system32\DRIVERS\serenum.sys
19:56:13.0399 4800 Serenum - ok
19:56:13.0431 4800 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\windows\system32\DRIVERS\serial.sys
19:56:13.0431 4800 Serial - ok
19:56:13.0477 4800 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\windows\system32\DRIVERS\sermouse.sys
19:56:13.0477 4800 sermouse - ok
19:56:13.0509 4800 sffdisk (a554811bcd09279536440c964ae35bbf) C:\windows\system32\DRIVERS\sffdisk.sys
19:56:13.0509 4800 sffdisk - ok
19:56:13.0540 4800 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\windows\system32\DRIVERS\sffp_mmc.sys
19:56:13.0555 4800 sffp_mmc - ok
19:56:13.0571 4800 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\windows\system32\DRIVERS\sffp_sd.sys
19:56:13.0571 4800 sffp_sd - ok
19:56:13.0602 4800 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\windows\system32\DRIVERS\sfloppy.sys
19:56:13.0602 4800 sfloppy - ok
19:56:13.0649 4800 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\windows\system32\DRIVERS\SiSRaid2.sys
19:56:13.0649 4800 SiSRaid2 - ok
19:56:13.0680 4800 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\windows\system32\DRIVERS\sisraid4.sys
19:56:13.0680 4800 SiSRaid4 - ok
19:56:13.0711 4800 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\windows\system32\DRIVERS\smb.sys
19:56:13.0727 4800 Smb - ok
19:56:13.0774 4800 smserial (aa59ba9348ebdeb455027c455538a08e) C:\windows\system32\DRIVERS\smserial.sys
19:56:13.0805 4800 smserial - ok
19:56:13.0852 4800 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\windows\system32\drivers\spldr.sys
19:56:13.0852 4800 spldr - ok
19:56:13.0899 4800 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\windows\system32\DRIVERS\srv.sys
19:56:13.0914 4800 srv - ok
19:56:13.0945 4800 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\windows\system32\DRIVERS\srv2.sys
19:56:13.0961 4800 srv2 - ok
19:56:14.0008 4800 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\windows\system32\DRIVERS\srvnet.sys
19:56:14.0008 4800 srvnet - ok
19:56:14.0086 4800 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\windows\system32\DRIVERS\stexstor.sys
19:56:14.0086 4800 stexstor - ok
19:56:14.0117 4800 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\windows\system32\DRIVERS\swenum.sys
19:56:14.0117 4800 swenum - ok
19:56:14.0226 4800 Tcpip (f18f56efc0bfb9c87ba01c37b27f4da5) C:\windows\system32\drivers\tcpip.sys
19:56:14.0273 4800 Tcpip - ok
19:56:14.0320 4800 TCPIP6 (f18f56efc0bfb9c87ba01c37b27f4da5) C:\windows\system32\DRIVERS\tcpip.sys
19:56:14.0335 4800 TCPIP6 - ok
19:56:14.0367 4800 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\windows\system32\drivers\tcpipreg.sys
19:56:14.0367 4800 tcpipreg - ok
19:56:14.0382 4800 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\windows\system32\drivers\tdpipe.sys
19:56:14.0398 4800 TDPIPE - ok
19:56:14.0398 4800 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\windows\system32\drivers\tdtcp.sys
19:56:14.0398 4800 TDTCP - ok
19:56:14.0413 4800 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\windows\system32\DRIVERS\tdx.sys
19:56:14.0429 4800 tdx - ok
19:56:14.0445 4800 TermDD (c448651339196c0e869a355171875522) C:\windows\system32\DRIVERS\termdd.sys
19:56:14.0445 4800 TermDD - ok
19:56:14.0476 4800 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\windows\system32\DRIVERS\tssecsrv.sys
19:56:14.0491 4800 tssecsrv - ok
19:56:14.0523 4800 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\windows\system32\DRIVERS\tunnel.sys
19:56:14.0523 4800 tunnel - ok
19:56:14.0538 4800 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\windows\system32\DRIVERS\uagp35.sys
19:56:14.0554 4800 uagp35 - ok
19:56:14.0585 4800 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\windows\system32\DRIVERS\udfs.sys
19:56:14.0585 4800 udfs - ok
19:56:14.0616 4800 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\windows\system32\DRIVERS\uliagpkx.sys
19:56:14.0616 4800 uliagpkx - ok
19:56:14.0647 4800 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\windows\system32\DRIVERS\umbus.sys
19:56:14.0647 4800 umbus - ok
19:56:14.0679 4800 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\windows\system32\DRIVERS\umpass.sys
19:56:14.0679 4800 UmPass - ok
19:56:14.0741 4800 usbccgp (7b6a127c93ee590e4d79a5f2a76fe46f) C:\windows\system32\DRIVERS\usbccgp.sys
19:56:14.0741 4800 usbccgp - ok
19:56:14.0757 4800 usbcir (af0892a803fdda7492f595368e3b68e7) C:\windows\system32\DRIVERS\usbcir.sys
19:56:14.0772 4800 usbcir - ok
19:56:14.0803 4800 usbehci (92969ba5ac44e229c55a332864f79677) C:\windows\system32\drivers\usbehci.sys
19:56:14.0803 4800 usbehci - ok
19:56:14.0850 4800 usbhub (e7df1cfd28ca86b35ef5add0735ceef3) C:\windows\system32\DRIVERS\usbhub.sys
19:56:14.0850 4800 usbhub - ok
19:56:14.0881 4800 usbohci (f1bb1e55f1e7a65c5839ccc7b36d773e) C:\windows\system32\drivers\usbohci.sys
19:56:14.0897 4800 usbohci - ok
19:56:14.0913 4800 usbprint (73188f58fb384e75c4063d29413cee3d) C:\windows\system32\DRIVERS\usbprint.sys
19:56:14.0913 4800 usbprint - ok
19:56:14.0944 4800 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\windows\system32\DRIVERS\USBSTOR.SYS
19:56:14.0944 4800 USBSTOR - ok
19:56:14.0975 4800 usbuhci (bc3070350a491d84b518d7cca9abd36f) C:\windows\system32\drivers\usbuhci.sys
19:56:14.0975 4800 usbuhci - ok
19:56:15.0022 4800 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\windows\System32\Drivers\usbvideo.sys
19:56:15.0022 4800 usbvideo - ok
19:56:15.0084 4800 VClone (fd911873c0bb6945fa38c16e9a2b58f9) C:\windows\system32\DRIVERS\VClone.sys
19:56:15.0084 4800 VClone - ok
19:56:15.0115 4800 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\windows\system32\DRIVERS\vdrvroot.sys
19:56:15.0115 4800 vdrvroot - ok
19:56:15.0147 4800 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\windows\system32\DRIVERS\vgapnp.sys
19:56:15.0147 4800 vga - ok
19:56:15.0162 4800 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\windows\System32\drivers\vga.sys
19:56:15.0162 4800 VgaSave - ok
19:56:15.0193 4800 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\windows\system32\DRIVERS\vhdmp.sys
19:56:15.0193 4800 vhdmp - ok
19:56:15.0209 4800 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\windows\system32\DRIVERS\viaide.sys
19:56:15.0225 4800 viaide - ok
19:56:15.0256 4800 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\windows\system32\DRIVERS\volmgr.sys
19:56:15.0256 4800 volmgr - ok
19:56:15.0287 4800 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\windows\system32\drivers\volmgrx.sys
19:56:15.0303 4800 volmgrx - ok
19:56:15.0334 4800 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\windows\system32\DRIVERS\volsnap.sys
19:56:15.0334 4800 volsnap - ok
19:56:15.0396 4800 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\windows\system32\DRIVERS\vsmraid.sys
19:56:15.0396 4800 vsmraid - ok
19:56:15.0443 4800 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\windows\system32\DRIVERS\vwifibus.sys
19:56:15.0443 4800 vwifibus - ok
19:56:15.0474 4800 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\windows\system32\DRIVERS\vwififlt.sys
19:56:15.0474 4800 vwififlt - ok
19:56:15.0505 4800 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\windows\system32\DRIVERS\wacompen.sys
19:56:15.0521 4800 WacomPen - ok
19:56:15.0552 4800 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\windows\system32\DRIVERS\wanarp.sys
19:56:15.0568 4800 WANARP - ok
19:56:15.0568 4800 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\windows\system32\DRIVERS\wanarp.sys
19:56:15.0568 4800 Wanarpv6 - ok
19:56:15.0615 4800 Wd (72889e16ff12ba0f235467d6091b17dc) C:\windows\system32\DRIVERS\wd.sys
19:56:15.0615 4800 Wd - ok
19:56:15.0661 4800 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\windows\system32\drivers\Wdf01000.sys
19:56:15.0677 4800 Wdf01000 - ok
19:56:15.0817 4800 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\windows\system32\DRIVERS\wfplwf.sys
19:56:15.0833 4800 WfpLwf - ok
19:56:15.0864 4800 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\windows\system32\drivers\wimmount.sys
19:56:15.0864 4800 WIMMount - ok
19:56:15.0942 4800 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\windows\system32\DRIVERS\wmiacpi.sys
19:56:15.0942 4800 WmiAcpi - ok
19:56:15.0989 4800 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\windows\system32\drivers\ws2ifsl.sys
19:56:15.0989 4800 ws2ifsl - ok
19:56:16.0020 4800 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\windows\system32\drivers\WudfPf.sys
19:56:16.0020 4800 WudfPf - ok
19:56:16.0067 4800 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\windows\system32\DRIVERS\WUDFRd.sys
19:56:16.0083 4800 WUDFRd - ok
19:56:16.0129 4800 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
19:56:16.0207 4800 \Device\Harddisk0\DR0 - ok
19:56:16.0223 4800 Boot (0x1200) (cc7cb5581600994c7c9564b0027b6a7c) \Device\Harddisk0\DR0\Partition0
19:56:16.0223 4800 \Device\Harddisk0\DR0\Partition0 - ok
19:56:16.0254 4800 Boot (0x1200) (356b07735afdbcb2464d9d7507a2b488) \Device\Harddisk0\DR0\Partition1
19:56:16.0254 4800 \Device\Harddisk0\DR0\Partition1 - ok
19:56:16.0254 4800
 
Continued...

============================================================
19:56:16.0254 4800 Scan finished
19:56:16.0254 4800 ============================================================
19:56:16.0270 4776 Detected object count: 0
19:56:16.0270 4776 Actual detected object count: 0
19:56:55.0457 4780 ============================================================
19:56:55.0457 4780 Scan started
19:56:55.0457 4780 Mode: Manual;
19:56:55.0457 4780 ============================================================
19:56:55.0831 4780 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\windows\system32\DRIVERS\1394ohci.sys
19:56:55.0831 4780 1394ohci - ok
19:56:55.0863 4780 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\windows\system32\DRIVERS\ACPI.sys
19:56:55.0863 4780 ACPI - ok
19:56:55.0878 4780 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\windows\system32\DRIVERS\acpipmi.sys
19:56:55.0878 4780 AcpiPmi - ok
19:56:55.0909 4780 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\windows\system32\DRIVERS\adp94xx.sys
19:56:55.0925 4780 adp94xx - ok
19:56:55.0956 4780 adpahci (597f78224ee9224ea1a13d6350ced962) C:\windows\system32\DRIVERS\adpahci.sys
19:56:55.0956 4780 adpahci - ok
19:56:55.0972 4780 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\windows\system32\DRIVERS\adpu320.sys
19:56:55.0972 4780 adpu320 - ok
19:56:56.0034 4780 AFD (6ef20ddf3172e97d69f596fb90602f29) C:\windows\system32\drivers\afd.sys
19:56:56.0034 4780 AFD - ok
19:56:56.0081 4780 AgereSoftModem (af4748ef93416159459769a24a0053af) C:\windows\system32\DRIVERS\agrsm64.sys
19:56:56.0097 4780 AgereSoftModem - ok
19:56:56.0128 4780 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\windows\system32\DRIVERS\agp440.sys
19:56:56.0128 4780 agp440 - ok
19:56:56.0159 4780 aliide (5812713a477a3ad7363c7438ca2ee038) C:\windows\system32\DRIVERS\aliide.sys
19:56:56.0159 4780 aliide - ok
19:56:56.0175 4780 amdide (1ff8b4431c353ce385c875f194924c0c) C:\windows\system32\DRIVERS\amdide.sys
19:56:56.0175 4780 amdide - ok
19:56:56.0190 4780 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\windows\system32\DRIVERS\amdk8.sys
19:56:56.0190 4780 AmdK8 - ok
19:56:56.0331 4780 amdkmdag (c6c0f73a038ff38ebbd9c16f79f8d3e3) C:\windows\system32\DRIVERS\atikmdag.sys
19:56:56.0362 4780 amdkmdag - ok
19:56:56.0393 4780 amdkmdap (4647d713cff04fae4f862b3144725bc1) C:\windows\system32\DRIVERS\atikmpag.sys
19:56:56.0393 4780 amdkmdap - ok
19:56:56.0409 4780 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\windows\system32\DRIVERS\amdppm.sys
19:56:56.0409 4780 AmdPPM - ok
19:56:56.0440 4780 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\windows\system32\drivers\amdsata.sys
19:56:56.0440 4780 amdsata - ok
19:56:56.0455 4780 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\windows\system32\DRIVERS\amdsbs.sys
19:56:56.0471 4780 amdsbs - ok
19:56:56.0487 4780 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\windows\system32\drivers\amdxata.sys
19:56:56.0487 4780 amdxata - ok
19:56:56.0502 4780 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\windows\system32\drivers\appid.sys
19:56:56.0502 4780 AppID - ok
19:56:56.0533 4780 arc (c484f8ceb1717c540242531db7845c4e) C:\windows\system32\DRIVERS\arc.sys
19:56:56.0533 4780 arc - ok
19:56:56.0549 4780 arcsas (019af6924aefe7839f61c830227fe79c) C:\windows\system32\DRIVERS\arcsas.sys
19:56:56.0565 4780 arcsas - ok
19:56:56.0580 4780 ArcSoftKsUFilter (c130bc4a51b1382b2be8e44579ec4c0a) C:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys
19:56:56.0596 4780 ArcSoftKsUFilter - ok
19:56:56.0627 4780 aswFsBlk (ce6d8bcc4787704ea4feeb92b0d0caf8) C:\windows\system32\drivers\aswFsBlk.sys
19:56:56.0627 4780 aswFsBlk - ok
19:56:56.0658 4780 aswMonFlt (0debeb2e3fbd0bf5343125cce617f105) C:\windows\system32\drivers\aswMonFlt.sys
19:56:56.0658 4780 aswMonFlt - ok
19:56:56.0674 4780 aswRdr (952edc2e81f85d1781958d4128bf59f8) C:\windows\system32\drivers\aswRdr.sys
19:56:56.0674 4780 aswRdr - ok
19:56:56.0767 4780 aswSnx (dd383e2ac941c545a85ab72503da6c12) C:\windows\system32\drivers\aswSnx.sys
19:56:56.0767 4780 aswSnx - ok
19:56:56.0799 4780 aswSP (ef5403fb8b2dcb791ec365fdf6040a4a) C:\windows\system32\drivers\aswSP.sys
19:56:56.0799 4780 aswSP - ok
19:56:56.0814 4780 aswTdi (34165da5c6b30c0f9d61246bf8a28040) C:\windows\system32\drivers\aswTdi.sys
19:56:56.0814 4780 aswTdi - ok
19:56:56.0861 4780 AsyncMac (769765ce2cc62867468cea93969b2242) C:\windows\system32\DRIVERS\asyncmac.sys
19:56:56.0861 4780 AsyncMac - ok
19:56:56.0892 4780 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\windows\system32\DRIVERS\atapi.sys
19:56:56.0892 4780 atapi - ok
19:56:56.0939 4780 athr (b2c3a8618867404475228f7dd260698b) C:\windows\system32\DRIVERS\athrx.sys
19:56:56.0955 4780 athr - ok
19:56:56.0970 4780 AtiHdmiService (637e0753bd6deb8ea5314a5c357ec1a0) C:\windows\system32\drivers\AtiHdmi.sys
19:56:56.0970 4780 AtiHdmiService - ok
19:56:57.0017 4780 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\windows\system32\DRIVERS\bxvbda.sys
19:56:57.0017 4780 b06bdrv - ok
19:56:57.0064 4780 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\windows\system32\DRIVERS\b57nd60a.sys
19:56:57.0064 4780 b57nd60a - ok
19:56:57.0079 4780 Beep (16a47ce2decc9b099349a5f840654746) C:\windows\system32\drivers\Beep.sys
19:56:57.0095 4780 Beep - ok
19:56:57.0111 4780 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\windows\system32\DRIVERS\blbdrive.sys
19:56:57.0111 4780 blbdrive - ok
19:56:57.0142 4780 bowser (19d20159708e152267e53b66677a4995) C:\windows\system32\DRIVERS\bowser.sys
19:56:57.0142 4780 bowser - ok
19:56:57.0157 4780 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\windows\system32\DRIVERS\BrFiltLo.sys
19:56:57.0157 4780 BrFiltLo - ok
19:56:57.0173 4780 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\windows\system32\DRIVERS\BrFiltUp.sys
19:56:57.0173 4780 BrFiltUp - ok
19:56:57.0235 4780 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\windows\System32\Drivers\Brserid.sys
19:56:57.0235 4780 Brserid - ok
19:56:57.0251 4780 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\windows\System32\Drivers\BrSerWdm.sys
19:56:57.0251 4780 BrSerWdm - ok
19:56:57.0251 4780 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\windows\System32\Drivers\BrUsbMdm.sys
19:56:57.0251 4780 BrUsbMdm - ok
19:56:57.0282 4780 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\windows\System32\Drivers\BrUsbSer.sys
19:56:57.0282 4780 BrUsbSer - ok
19:56:57.0298 4780 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\windows\system32\drivers\BthEnum.sys
19:56:57.0313 4780 BthEnum - ok
19:56:57.0313 4780 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\windows\system32\DRIVERS\bthmodem.sys
19:56:57.0329 4780 BTHMODEM - ok
19:56:57.0345 4780 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\windows\system32\DRIVERS\bthpan.sys
19:56:57.0345 4780 BthPan - ok
19:56:57.0407 4780 BTHPORT (21084ceb85280468c9aca3c805c0f8cf) C:\windows\System32\Drivers\BTHport.sys
19:56:57.0407 4780 BTHPORT - ok
19:56:57.0438 4780 BTHUSB (8504842634dd144c075b6b0c982ccec4) C:\windows\System32\Drivers\BTHUSB.sys
19:56:57.0438 4780 BTHUSB - ok
19:56:57.0454 4780 BTMCOM - ok
19:56:57.0501 4780 cdfs (b8bd2bb284668c84865658c77574381a) C:\windows\system32\DRIVERS\cdfs.sys
19:56:57.0501 4780 cdfs - ok
19:56:57.0532 4780 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\windows\system32\DRIVERS\cdrom.sys
19:56:57.0532 4780 cdrom - ok
19:56:57.0563 4780 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\windows\system32\DRIVERS\circlass.sys
19:56:57.0563 4780 circlass - ok
19:56:57.0594 4780 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\windows\system32\CLFS.sys
19:56:57.0594 4780 CLFS - ok
19:56:57.0657 4780 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\windows\system32\DRIVERS\CmBatt.sys
19:56:57.0657 4780 CmBatt - ok
19:56:57.0672 4780 cmdide (e19d3f095812725d88f9001985b94edd) C:\windows\system32\DRIVERS\cmdide.sys
19:56:57.0672 4780 cmdide - ok
19:56:57.0719 4780 CNG (937beb186a735aca91d717044a49d17e) C:\windows\system32\Drivers\cng.sys
19:56:57.0719 4780 CNG - ok
19:56:57.0750 4780 Compbatt (102de219c3f61415f964c88e9085ad14) C:\windows\system32\DRIVERS\compbatt.sys
19:56:57.0750 4780 Compbatt - ok
19:56:57.0766 4780 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\windows\system32\DRIVERS\CompositeBus.sys
19:56:57.0766 4780 CompositeBus - ok
19:56:57.0797 4780 crcdisk (1c827878a998c18847245fe1f34ee597) C:\windows\system32\DRIVERS\crcdisk.sys
19:56:57.0797 4780 crcdisk - ok
19:56:57.0859 4780 DfsC (9c253ce7311ca60fc11c774692a13208) C:\windows\system32\Drivers\dfsc.sys
19:56:57.0859 4780 DfsC - ok
19:56:57.0875 4780 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\windows\system32\drivers\discache.sys
19:56:57.0875 4780 discache - ok
19:56:57.0891 4780 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\windows\system32\DRIVERS\disk.sys
19:56:57.0891 4780 Disk - ok
19:56:57.0922 4780 drmkaud (9b19f34400d24df84c858a421c205754) C:\windows\system32\drivers\drmkaud.sys
19:56:57.0922 4780 drmkaud - ok
19:56:58.0000 4780 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\windows\System32\drivers\dxgkrnl.sys
19:56:58.0015 4780 DXGKrnl - ok
19:56:58.0203 4780 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\windows\system32\DRIVERS\evbda.sys
19:56:58.0218 4780 ebdrv - ok
19:56:58.0265 4780 ElbyCDIO (a05fc7eca0966ebb70e4d17b855a853b) C:\windows\system32\Drivers\ElbyCDIO.sys
19:56:58.0281 4780 ElbyCDIO - ok
19:56:58.0343 4780 elxstor (0e5da5369a0fcaea12456dd852545184) C:\windows\system32\DRIVERS\elxstor.sys
19:56:58.0343 4780 elxstor - ok
19:56:58.0374 4780 enecir (a9ec08727c64d985678f5b64c03823f0) C:\windows\system32\DRIVERS\enecir.sys
19:56:58.0374 4780 enecir - ok
19:56:58.0405 4780 enecirhid (e17eb95358f396e27d573a1b20f891f8) C:\windows\system32\DRIVERS\enecirhid.sys
19:56:58.0405 4780 enecirhid - ok
19:56:58.0421 4780 enecirhidma (8492d808c79bd6fe439f77be84956cdf) C:\windows\system32\DRIVERS\enecirhidma.sys
19:56:58.0421 4780 enecirhidma - ok
19:56:58.0437 4780 ErrDev (34a3c54752046e79a126e15c51db409b) C:\windows\system32\DRIVERS\errdev.sys
19:56:58.0437 4780 ErrDev - ok
19:56:58.0499 4780 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\windows\system32\drivers\exfat.sys
19:56:58.0499 4780 exfat - ok
19:56:58.0546 4780 fastfat (0adc83218b66a6db380c330836f3e36d) C:\windows\system32\drivers\fastfat.sys
19:56:58.0561 4780 fastfat - ok
19:56:58.0593 4780 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\windows\system32\DRIVERS\fdc.sys
19:56:58.0593 4780 fdc - ok
19:56:58.0624 4780 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\windows\system32\drivers\fileinfo.sys
19:56:58.0624 4780 FileInfo - ok
19:56:58.0655 4780 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\windows\system32\drivers\filetrace.sys
19:56:58.0655 4780 Filetrace - ok
19:56:58.0702 4780 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\windows\system32\DRIVERS\flpydisk.sys
19:56:58.0702 4780 flpydisk - ok
19:56:58.0733 4780 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\windows\system32\drivers\fltmgr.sys
19:56:58.0733 4780 FltMgr - ok
19:56:58.0764 4780 FsDepends (d43703496149971890703b4b1b723eac) C:\windows\system32\drivers\FsDepends.sys
19:56:58.0764 4780 FsDepends - ok
19:56:58.0795 4780 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\windows\system32\drivers\Fs_Rec.sys
19:56:58.0795 4780 Fs_Rec - ok
19:56:58.0842 4780 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\windows\system32\DRIVERS\fvevol.sys
19:56:58.0858 4780 fvevol - ok
19:56:58.0873 4780 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\windows\system32\DRIVERS\gagp30kx.sys
19:56:58.0873 4780 gagp30kx - ok
19:56:58.0983 4780 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\windows\system32\drivers\hcw85cir.sys
19:56:58.0983 4780 hcw85cir - ok
19:56:58.0998 4780 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\windows\system32\drivers\HdAudio.sys
19:56:58.0998 4780 HdAudAddService - ok
19:56:59.0014 4780 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\windows\system32\DRIVERS\HDAudBus.sys
19:56:59.0014 4780 HDAudBus - ok
19:56:59.0029 4780 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\windows\system32\DRIVERS\HidBatt.sys
19:56:59.0029 4780 HidBatt - ok
19:56:59.0045 4780 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\windows\system32\DRIVERS\hidbth.sys
19:56:59.0045 4780 HidBth - ok
19:56:59.0107 4780 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\windows\system32\DRIVERS\hidir.sys
19:56:59.0107 4780 HidIr - ok
19:56:59.0139 4780 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\windows\system32\DRIVERS\hidusb.sys
19:56:59.0139 4780 HidUsb - ok
19:56:59.0170 4780 HpSAMD (0886d440058f203eba0e1825e4355914) C:\windows\system32\DRIVERS\HpSAMD.sys
19:56:59.0170 4780 HpSAMD - ok
19:56:59.0201 4780 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\windows\system32\drivers\HTTP.sys
19:56:59.0201 4780 HTTP - ok
19:56:59.0217 4780 hwpolicy (f17766a19145f111856378df337a5d79) C:\windows\system32\drivers\hwpolicy.sys
19:56:59.0232 4780 hwpolicy - ok
19:56:59.0248 4780 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\windows\system32\DRIVERS\i8042prt.sys
19:56:59.0248 4780 i8042prt - ok
19:56:59.0279 4780 iaStor (abbf174cb394f5c437410a788b7e404a) C:\windows\system32\DRIVERS\iaStor.sys
19:56:59.0279 4780 iaStor - ok
19:56:59.0326 4780 iaStorV (b75e45c564e944a2657167d197ab29da) C:\windows\system32\drivers\iaStorV.sys
19:56:59.0326 4780 iaStorV - ok
19:56:59.0341 4780 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\windows\system32\DRIVERS\iirsp.sys
19:56:59.0341 4780 iirsp - ok
19:56:59.0419 4780 IntcAzAudAddService (dcf6afba140af3f880a427c2656be44d) C:\windows\system32\drivers\RTKVHD64.sys
19:56:59.0435 4780 IntcAzAudAddService - ok
19:56:59.0451 4780 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\windows\system32\DRIVERS\intelide.sys
19:56:59.0451 4780 intelide - ok
19:56:59.0466 4780 intelppm (ada036632c664caa754079041cf1f8c1) C:\windows\system32\DRIVERS\intelppm.sys
19:56:59.0466 4780 intelppm - ok
19:56:59.0497 4780 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\windows\system32\DRIVERS\ipfltdrv.sys
19:56:59.0497 4780 IpFilterDriver - ok
19:56:59.0513 4780 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\windows\system32\DRIVERS\IPMIDrv.sys
19:56:59.0513 4780 IPMIDRV - ok
19:56:59.0529 4780 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\windows\system32\drivers\ipnat.sys
19:56:59.0529 4780 IPNAT - ok
19:56:59.0529 4780 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\windows\system32\drivers\irenum.sys
19:56:59.0529 4780 IRENUM - ok
19:56:59.0560 4780 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\windows\system32\DRIVERS\isapnp.sys
19:56:59.0560 4780 isapnp - ok
19:56:59.0575 4780 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\windows\system32\DRIVERS\msiscsi.sys
19:56:59.0575 4780 iScsiPrt - ok
19:56:59.0591 4780 JMCR (02bd12c2ee52f0849a5d6f9a2fa67b4e) C:\windows\system32\DRIVERS\jmcr.sys
19:56:59.0591 4780 JMCR - ok
19:56:59.0607 4780 johci (e662cb468a1cff3a57e120a212fadd57) C:\windows\system32\DRIVERS\johci.sys
19:56:59.0607 4780 johci - ok
19:56:59.0638 4780 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\windows\system32\DRIVERS\kbdclass.sys
19:56:59.0638 4780 kbdclass - ok
19:56:59.0653 4780 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\windows\system32\DRIVERS\kbdhid.sys
19:56:59.0653 4780 kbdhid - ok
19:56:59.0700 4780 KSecDD (16c1b906fc5ead84769f90b736b6bf0e) C:\windows\system32\Drivers\ksecdd.sys
19:56:59.0700 4780 KSecDD - ok
19:56:59.0731 4780 KSecPkg (0b711550c56444879d71c7daabda6c83) C:\windows\system32\Drivers\ksecpkg.sys
19:56:59.0731 4780 KSecPkg - ok
19:56:59.0763 4780 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\windows\system32\drivers\ksthunk.sys
19:56:59.0763 4780 ksthunk - ok
19:56:59.0809 4780 LHidFilt (241f2648adf090e2a10095bd6d6f5dcb) C:\windows\system32\DRIVERS\LHidFilt.Sys
19:56:59.0809 4780 LHidFilt - ok
19:56:59.0841 4780 lltdio (1538831cf8ad2979a04c423779465827) C:\windows\system32\DRIVERS\lltdio.sys
19:56:59.0841 4780 lltdio - ok
19:56:59.0887 4780 LMouFilt (342ed5a4b3326014438f36d22d803737) C:\windows\system32\DRIVERS\LMouFilt.Sys
19:56:59.0887 4780 LMouFilt - ok
19:56:59.0950 4780 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\windows\system32\DRIVERS\lsi_fc.sys
19:56:59.0950 4780 LSI_FC - ok
19:56:59.0981 4780 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\windows\system32\DRIVERS\lsi_sas.sys
19:56:59.0981 4780 LSI_SAS - ok
19:57:00.0012 4780 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\windows\system32\DRIVERS\lsi_sas2.sys
19:57:00.0012 4780 LSI_SAS2 - ok
19:57:00.0043 4780 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\windows\system32\DRIVERS\lsi_scsi.sys
19:57:00.0043 4780 LSI_SCSI - ok
19:57:00.0075 4780 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\windows\system32\drivers\luafv.sys
19:57:00.0075 4780 luafv - ok
19:57:00.0106 4780 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\windows\system32\DRIVERS\megasas.sys
19:57:00.0106 4780 megasas - ok
19:57:00.0137 4780 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\windows\system32\DRIVERS\MegaSR.sys
19:57:00.0137 4780 MegaSR - ok
19:57:00.0168 4780 MGHwCtrl - ok
19:57:00.0215 4780 Modem (800ba92f7010378b09f9ed9270f07137) C:\windows\system32\drivers\modem.sys
19:57:00.0215 4780 Modem - ok
19:57:00.0246 4780 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\windows\system32\DRIVERS\monitor.sys
19:57:00.0246 4780 monitor - ok
19:57:00.0277 4780 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\windows\system32\DRIVERS\mouclass.sys
19:57:00.0277 4780 mouclass - ok
19:57:00.0324 4780 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\windows\system32\DRIVERS\mouhid.sys
19:57:00.0324 4780 mouhid - ok
19:57:00.0355 4780 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\windows\system32\drivers\mountmgr.sys
19:57:00.0355 4780 mountmgr - ok
19:57:00.0387 4780 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\windows\system32\DRIVERS\mpio.sys
19:57:00.0387 4780 mpio - ok
19:57:00.0402 4780 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\windows\system32\drivers\mpsdrv.sys
19:57:00.0418 4780 mpsdrv - ok
19:57:00.0449 4780 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\windows\system32\drivers\mrxdav.sys
19:57:00.0449 4780 MRxDAV - ok
19:57:00.0511 4780 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\windows\system32\DRIVERS\mrxsmb.sys
19:57:00.0511 4780 mrxsmb - ok
19:57:00.0574 4780 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\windows\system32\DRIVERS\mrxsmb10.sys
19:57:00.0574 4780 mrxsmb10 - ok
19:57:00.0605 4780 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\windows\system32\DRIVERS\mrxsmb20.sys
19:57:00.0605 4780 mrxsmb20 - ok
19:57:00.0636 4780 msahci (5c37497276e3b3a5488b23a326a754b7) C:\windows\system32\DRIVERS\msahci.sys
19:57:00.0636 4780 msahci - ok
19:57:00.0683 4780 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\windows\system32\DRIVERS\msdsm.sys
19:57:00.0683 4780 msdsm - ok
19:57:00.0730 4780 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\windows\system32\drivers\Msfs.sys
19:57:00.0730 4780 Msfs - ok
19:57:00.0761 4780 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\windows\System32\drivers\mshidkmdf.sys
19:57:00.0761 4780 mshidkmdf - ok
19:57:00.0808 4780 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\windows\system32\DRIVERS\msisadrv.sys
19:57:00.0808 4780 msisadrv - ok
19:57:00.0839 4780 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\windows\system32\drivers\MSKSSRV.sys
19:57:00.0839 4780 MSKSSRV - ok
19:57:00.0855 4780 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\windows\system32\drivers\MSPCLOCK.sys
19:57:00.0855 4780 MSPCLOCK - ok
19:57:00.0886 4780 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\windows\system32\drivers\MSPQM.sys
19:57:00.0886 4780 MSPQM - ok
19:57:00.0917 4780 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\windows\system32\drivers\MsRPC.sys
19:57:00.0933 4780 MsRPC - ok
19:57:00.0964 4780 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\windows\system32\DRIVERS\mssmbios.sys
19:57:00.0964 4780 mssmbios - ok
19:57:00.0995 4780 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\windows\system32\drivers\MSTEE.sys
19:57:00.0995 4780 MSTEE - ok
19:57:01.0011 4780 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\windows\system32\DRIVERS\MTConfig.sys
19:57:01.0011 4780 MTConfig - ok
19:57:01.0042 4780 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\windows\system32\Drivers\mup.sys
19:57:01.0042 4780 Mup - ok
19:57:01.0089 4780 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\windows\system32\DRIVERS\nwifi.sys
19:57:01.0089 4780 NativeWifiP - ok
19:57:01.0135 4780 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\windows\system32\drivers\ndis.sys
19:57:01.0151 4780 NDIS - ok
19:57:01.0198 4780 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\windows\system32\DRIVERS\ndiscap.sys
19:57:01.0198 4780 NdisCap - ok
19:57:01.0229 4780 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\windows\system32\DRIVERS\ndistapi.sys
19:57:01.0229 4780 NdisTapi - ok
19:57:01.0260 4780 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\windows\system32\DRIVERS\ndisuio.sys
19:57:01.0260 4780 Ndisuio - ok
19:57:01.0291 4780 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\windows\system32\DRIVERS\ndiswan.sys
19:57:01.0291 4780 NdisWan - ok
19:57:01.0338 4780 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\windows\system32\drivers\NDProxy.sys
19:57:01.0338 4780 NDProxy - ok
19:57:01.0354 4780 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\windows\system32\DRIVERS\netbios.sys
19:57:01.0369 4780 NetBIOS - ok
19:57:01.0401 4780 NetBT (9162b273a44ab9dce5b44362731d062a) C:\windows\system32\DRIVERS\netbt.sys
19:57:01.0401 4780 NetBT - ok
19:57:01.0447 4780 netr28x (b6e1bf8dbff4b18f1a2d65da6e40bc7c) C:\windows\system32\DRIVERS\netr28x.sys
19:57:01.0463 4780 netr28x - ok
19:57:01.0619 4780 NETw5s64 (4d85a450edef10c38882182753a49aae) C:\windows\system32\DRIVERS\NETw5s64.sys
19:57:01.0650 4780 NETw5s64 - ok
19:57:01.0697 4780 nfrd960 (77889813be4d166cdab78ddba990da92) C:\windows\system32\DRIVERS\nfrd960.sys
19:57:01.0697 4780 nfrd960 - ok
19:57:01.0728 4780 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\windows\system32\drivers\Npfs.sys
19:57:01.0728 4780 Npfs - ok
19:57:01.0759 4780 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\windows\system32\drivers\nsiproxy.sys
19:57:01.0759 4780 nsiproxy - ok
19:57:01.0837 4780 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\windows\system32\drivers\Ntfs.sys
19:57:01.0853 4780 Ntfs - ok
19:57:01.0869 4780 Null (9899284589f75fa8724ff3d16aed75c1) C:\windows\system32\drivers\Null.sys
19:57:01.0869 4780 Null - ok
19:57:01.0900 4780 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\windows\system32\drivers\nvraid.sys
19:57:01.0900 4780 nvraid - ok
19:57:01.0915 4780 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\windows\system32\drivers\nvstor.sys
19:57:01.0915 4780 nvstor - ok
19:57:01.0947 4780 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\windows\system32\DRIVERS\nv_agp.sys
19:57:01.0947 4780 nv_agp - ok
19:57:01.0978 4780 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\windows\system32\DRIVERS\ohci1394.sys
19:57:01.0978 4780 ohci1394 - ok
19:57:01.0993 4780 Parport (0086431c29c35be1dbc43f52cc273887) C:\windows\system32\DRIVERS\parport.sys
19:57:01.0993 4780 Parport - ok
19:57:02.0009 4780 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\windows\system32\drivers\partmgr.sys
19:57:02.0009 4780 partmgr - ok
19:57:02.0040 4780 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\windows\system32\DRIVERS\pci.sys
19:57:02.0040 4780 pci - ok
19:57:02.0056 4780 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\windows\system32\DRIVERS\pciide.sys
19:57:02.0056 4780 pciide - ok
19:57:02.0087 4780 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\windows\system32\DRIVERS\pcmcia.sys
19:57:02.0087 4780 pcmcia - ok
19:57:02.0103 4780 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\windows\system32\drivers\pcw.sys
19:57:02.0103 4780 pcw - ok
19:57:02.0134 4780 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\windows\system32\drivers\peauth.sys
19:57:02.0149 4780 PEAUTH - ok
19:57:02.0181 4780 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\windows\system32\DRIVERS\raspptp.sys
19:57:02.0181 4780 PptpMiniport - ok
19:57:02.0196 4780 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\windows\system32\DRIVERS\processr.sys
19:57:02.0212 4780 Processor - ok
19:57:02.0227 4780 Psched (ee992183bd8eaefd9973f352e587a299) C:\windows\system32\DRIVERS\pacer.sys
19:57:02.0227 4780 Psched - ok
19:57:02.0274 4780 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\windows\system32\DRIVERS\ql2300.sys
19:57:02.0290 4780 ql2300 - ok
19:57:02.0305 4780 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\windows\system32\DRIVERS\ql40xx.sys
19:57:02.0305 4780 ql40xx - ok
19:57:02.0321 4780 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\windows\system32\drivers\qwavedrv.sys
19:57:02.0321 4780 QWAVEdrv - ok
19:57:02.0337 4780 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\windows\system32\DRIVERS\rasacd.sys
19:57:02.0337 4780 RasAcd - ok
19:57:02.0352 4780 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\windows\system32\DRIVERS\AgileVpn.sys
19:57:02.0352 4780 RasAgileVpn - ok
19:57:02.0383 4780 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\windows\system32\DRIVERS\rasl2tp.sys
19:57:02.0383 4780 Rasl2tp - ok
19:57:02.0399 4780 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\windows\system32\DRIVERS\raspppoe.sys
19:57:02.0399 4780 RasPppoe - ok
19:57:02.0415 4780 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\windows\system32\DRIVERS\rassstp.sys
19:57:02.0415 4780 RasSstp - ok
19:57:02.0446 4780 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\windows\system32\DRIVERS\rdbss.sys
19:57:02.0446 4780 rdbss - ok
19:57:02.0477 4780 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\windows\system32\DRIVERS\rdpbus.sys
19:57:02.0477 4780 rdpbus - ok
19:57:02.0493 4780 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\windows\system32\DRIVERS\RDPCDD.sys
19:57:02.0493 4780 RDPCDD - ok
19:57:02.0508 4780 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\windows\system32\drivers\rdpencdd.sys
19:57:02.0508 4780 RDPENCDD - ok
19:57:02.0524 4780 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\windows\system32\drivers\rdprefmp.sys
19:57:02.0524 4780 RDPREFMP - ok
19:57:02.0539 4780 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\windows\system32\drivers\RDPWD.sys
19:57:02.0539 4780 RDPWD - ok
19:57:02.0571 4780 rdyboost (634b9a2181d98f15941236886164ec8b) C:\windows\system32\drivers\rdyboost.sys
19:57:02.0571 4780 rdyboost - ok
19:57:02.0586 4780 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\windows\system32\DRIVERS\rfcomm.sys
19:57:02.0586 4780 RFCOMM - ok
19:57:02.0602 4780 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\windows\system32\DRIVERS\rspndr.sys
19:57:02.0602 4780 rspndr - ok
19:57:02.0633 4780 RTHDMIAzAudService (4e821c740a675f6d040be41d59a62b1d) C:\windows\system32\drivers\RtHDMIVX.sys
19:57:02.0633 4780 RTHDMIAzAudService - ok
19:57:02.0649 4780 RTL8167 (b49dc435ae3695bac5623dd94b05732d) C:\windows\system32\DRIVERS\Rt64win7.sys
19:57:02.0649 4780 RTL8167 - ok
19:57:02.0727 4780 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
19:57:02.0727 4780 SASDIFSV - ok
19:57:02.0742 4780 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
19:57:02.0742 4780 SASKUTIL - ok
19:57:02.0758 4780 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\windows\system32\DRIVERS\sbp2port.sys
19:57:02.0773 4780 sbp2port - ok
19:57:02.0789 4780 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\windows\system32\DRIVERS\scfilter.sys
19:57:02.0805 4780 scfilter - ok
19:57:02.0820 4780 sdbus (54e47ad086782d3ae9417c155cdceb9b) C:\windows\system32\DRIVERS\sdbus.sys
19:57:02.0820 4780 sdbus - ok
19:57:02.0851 4780 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\windows\system32\drivers\secdrv.sys
19:57:02.0851 4780 secdrv - ok
19:57:02.0867 4780 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\windows\system32\DRIVERS\serenum.sys
19:57:02.0867 4780 Serenum - ok
19:57:02.0883 4780 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\windows\system32\DRIVERS\serial.sys
19:57:02.0883 4780 Serial - ok
19:57:02.0898 4780 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\windows\system32\DRIVERS\sermouse.sys
19:57:02.0898 4780 sermouse - ok
19:57:02.0929 4780 sffdisk (a554811bcd09279536440c964ae35bbf) C:\windows\system32\DRIVERS\sffdisk.sys
19:57:02.0929 4780 sffdisk - ok
19:57:02.0929 4780 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\windows\system32\DRIVERS\sffp_mmc.sys
19:57:02.0929 4780 sffp_mmc - ok
19:57:02.0945 4780 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\windows\system32\DRIVERS\sffp_sd.sys
19:57:02.0945 4780 sffp_sd - ok
19:57:02.0976 4780 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\windows\system32\DRIVERS\sfloppy.sys
19:57:02.0976 4780 sfloppy - ok
19:57:03.0007 4780 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\windows\system32\DRIVERS\SiSRaid2.sys
19:57:03.0007 4780 SiSRaid2 - ok
19:57:03.0023 4780 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\windows\system32\DRIVERS\sisraid4.sys
19:57:03.0023 4780 SiSRaid4 - ok
19:57:03.0039 4780 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\windows\system32\DRIVERS\smb.sys
19:57:03.0039 4780 Smb - ok
19:57:03.0070 4780 smserial (aa59ba9348ebdeb455027c455538a08e) C:\windows\system32\DRIVERS\smserial.sys
19:57:03.0085 4780 smserial - ok
19:57:03.0117 4780 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\windows\system32\drivers\spldr.sys
19:57:03.0117 4780 spldr - ok
19:57:03.0163 4780 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\windows\system32\DRIVERS\srv.sys
19:57:03.0163 4780 srv - ok
19:57:03.0195 4780 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\windows\system32\DRIVERS\srv2.sys
19:57:03.0195 4780 srv2 - ok
19:57:03.0210 4780 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\windows\system32\DRIVERS\srvnet.sys
19:57:03.0210 4780 srvnet - ok
19:57:03.0257 4780 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\windows\system32\DRIVERS\stexstor.sys
19:57:03.0257 4780 stexstor - ok
19:57:03.0288 4780 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\windows\system32\DRIVERS\swenum.sys
19:57:03.0288 4780 swenum - ok
19:57:03.0382 4780 Tcpip (f18f56efc0bfb9c87ba01c37b27f4da5) C:\windows\system32\drivers\tcpip.sys
19:57:03.0397 4780 Tcpip - ok
19:57:03.0444 4780 TCPIP6 (f18f56efc0bfb9c87ba01c37b27f4da5) C:\windows\system32\DRIVERS\tcpip.sys
19:57:03.0460 4780 TCPIP6 - ok
19:57:03.0475 4780 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\windows\system32\drivers\tcpipreg.sys
19:57:03.0475 4780 tcpipreg - ok
19:57:03.0491 4780 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\windows\system32\drivers\tdpipe.sys
19:57:03.0491 4780 TDPIPE - ok
19:57:03.0507 4780 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\windows\system32\drivers\tdtcp.sys
19:57:03.0507 4780 TDTCP - ok
19:57:03.0538 4780 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\windows\system32\DRIVERS\tdx.sys
19:57:03.0538 4780 tdx - ok
19:57:03.0553 4780 TermDD (c448651339196c0e869a355171875522) C:\windows\system32\DRIVERS\termdd.sys
19:57:03.0553 4780 TermDD - ok
19:57:03.0585 4780 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\windows\system32\DRIVERS\tssecsrv.sys
19:57:03.0585 4780 tssecsrv - ok
19:57:03.0600 4780 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\windows\system32\DRIVERS\tunnel.sys
19:57:03.0600 4780 tunnel - ok
19:57:03.0616 4780 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\windows\system32\DRIVERS\uagp35.sys
19:57:03.0616 4780 uagp35 - ok
19:57:03.0647 4780 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\windows\system32\DRIVERS\udfs.sys
19:57:03.0647 4780 udfs - ok
19:57:03.0678 4780 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\windows\system32\DRIVERS\uliagpkx.sys
19:57:03.0678 4780 uliagpkx - ok
19:57:03.0694 4780 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\windows\system32\DRIVERS\umbus.sys
19:57:03.0694 4780 umbus - ok
19:57:03.0725 4780 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\windows\system32\DRIVERS\umpass.sys
19:57:03.0725 4780 UmPass - ok
19:57:03.0756 4780 usbccgp (7b6a127c93ee590e4d79a5f2a76fe46f) C:\windows\system32\DRIVERS\usbccgp.sys
19:57:03.0756 4780 usbccgp - ok
19:57:03.0772 4780 usbcir (af0892a803fdda7492f595368e3b68e7) C:\windows\system32\DRIVERS\usbcir.sys
19:57:03.0772 4780 usbcir - ok
19:57:03.0787 4780 usbehci (92969ba5ac44e229c55a332864f79677) C:\windows\system32\drivers\usbehci.sys
19:57:03.0787 4780 usbehci - ok
19:57:03.0834 4780 usbhub (e7df1cfd28ca86b35ef5add0735ceef3) C:\windows\system32\DRIVERS\usbhub.sys
19:57:03.0834 4780 usbhub - ok
19:57:03.0865 4780 usbohci (f1bb1e55f1e7a65c5839ccc7b36d773e) C:\windows\system32\drivers\usbohci.sys
19:57:03.0865 4780 usbohci - ok
19:57:03.0881 4780 usbprint (73188f58fb384e75c4063d29413cee3d) C:\windows\system32\DRIVERS\usbprint.sys
19:57:03.0881 4780 usbprint - ok
19:57:03.0912 4780 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\windows\system32\DRIVERS\USBSTOR.SYS
19:57:03.0912 4780 USBSTOR - ok
19:57:03.0943 4780 usbuhci (bc3070350a491d84b518d7cca9abd36f) C:\windows\system32\drivers\usbuhci.sys
19:57:03.0943 4780 usbuhci - ok
19:57:03.0975 4780 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\windows\System32\Drivers\usbvideo.sys
19:57:03.0975 4780 usbvideo - ok
19:57:04.0021 4780 VClone (fd911873c0bb6945fa38c16e9a2b58f9) C:\windows\system32\DRIVERS\VClone.sys
19:57:04.0021 4780 VClone - ok
19:57:04.0037 4780 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\windows\system32\DRIVERS\vdrvroot.sys
19:57:04.0037 4780 vdrvroot - ok
19:57:04.0053 4780 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\windows\system32\DRIVERS\vgapnp.sys
19:57:04.0053 4780 vga - ok
19:57:04.0084 4780 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\windows\System32\drivers\vga.sys
19:57:04.0084 4780 VgaSave - ok
19:57:04.0099 4780 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\windows\system32\DRIVERS\vhdmp.sys
19:57:04.0115 4780 vhdmp - ok
19:57:04.0131 4780 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\windows\system32\DRIVERS\viaide.sys
19:57:04.0131 4780 viaide - ok
19:57:04.0162 4780 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\windows\system32\DRIVERS\volmgr.sys
19:57:04.0162 4780 volmgr - ok
19:57:04.0193 4780 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\windows\system32\drivers\volmgrx.sys
19:57:04.0193 4780 volmgrx - ok
19:57:04.0224 4780 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\windows\system32\DRIVERS\volsnap.sys
19:57:04.0224 4780 volsnap - ok
19:57:04.0240 4780 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\windows\system32\DRIVERS\vsmraid.sys
19:57:04.0255 4780 vsmraid - ok
19:57:04.0271 4780 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\windows\system32\DRIVERS\vwifibus.sys
19:57:04.0271 4780 vwifibus - ok
19:57:04.0302 4780 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\windows\system32\DRIVERS\vwififlt.sys
19:57:04.0302 4780 vwififlt - ok
19:57:04.0333 4780 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\windows\system32\DRIVERS\wacompen.sys
19:57:04.0333 4780 WacomPen - ok
19:57:04.0365 4780 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\windows\system32\DRIVERS\wanarp.sys
19:57:04.0365 4780 WANARP - ok
19:57:04.0380 4780 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\windows\system32\DRIVERS\wanarp.sys
19:57:04.0380 4780 Wanarpv6 - ok
19:57:04.0411 4780 Wd (72889e16ff12ba0f235467d6091b17dc) C:\windows\system32\DRIVERS\wd.sys
19:57:04.0411 4780 Wd - ok
19:57:04.0443 4780 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\windows\system32\drivers\Wdf01000.sys
19:57:04.0443 4780 Wdf01000 - ok
19:57:04.0474 4780 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\windows\system32\DRIVERS\wfplwf.sys
19:57:04.0474 4780 WfpLwf - ok
19:57:04.0489 4780 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\windows\system32\drivers\wimmount.sys
19:57:04.0489 4780 WIMMount - ok
19:57:04.0521 4780 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\windows\system32\DRIVERS\wmiacpi.sys
19:57:04.0521 4780 WmiAcpi - ok
19:57:04.0552 4780 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\windows\system32\drivers\ws2ifsl.sys
19:57:04.0552 4780 ws2ifsl - ok
19:57:04.0583 4780 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\windows\system32\drivers\WudfPf.sys
19:57:04.0583 4780 WudfPf - ok
19:57:04.0599 4780 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\windows\system32\DRIVERS\WUDFRd.sys
19:57:04.0599 4780 WUDFRd - ok
19:57:04.0630 4780 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
19:57:04.0692 4780 \Device\Harddisk0\DR0 - ok
19:57:04.0708 4780 Boot (0x1200) (cc7cb5581600994c7c9564b0027b6a7c) \Device\Harddisk0\DR0\Partition0
19:57:04.0708 4780 \Device\Harddisk0\DR0\Partition0 - ok
19:57:04.0739 4780 Boot (0x1200) (356b07735afdbcb2464d9d7507a2b488) \Device\Harddisk0\DR0\Partition1
19:57:04.0739 4780 \Device\Harddisk0\DR0\Partition1 - ok
19:57:04.0739 4780 ============================================================
19:57:04.0739 4780 Scan finished
19:57:04.0739 4780 ============================================================
19:57:04.0755 4612 Detected object count: 0
19:57:04.0755 4612 Actual detected object count: 0

How should I proceed from here? Do you still want me to run ComboFix? Thanks for being so patient with me.
 
I also have Malwarebytes' Anti-Malware already installed. Should I still perform a Quick Scan? I did one this morning. If you do want me to run it again, do you want me to uninstall and reinstall or should I just update the one that I already have installed? And would you like me to post the log here?
 
Yes, rerun a scan, but open malwarebytes, click on the updates tab, click on check for updates. Keep doing it until it says you have the latest version then do the quick scan and post the logfile for me.
 
Finished the Malwarebytes Quick Scan...no malicious items were detected. I did not reinstall but made sure that I had the most recent version. Updated twice just to make sure. Here is the log:


Malwarebytes Anti-Malware 1.60.0.1800
www.malwarebytes.org

Database version: v2012.01.28.06

Windows 7 x64 NTFS
Internet Explorer 8.0.7600.16385
Pang :: MYCOMP [administrator]

1/28/2012 8:06:41 PM
mbam-log-2012-01-28 (20-06-41).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 192504
Time elapsed: 4 minute(s), 9 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Would you still like me to run ComboFix?
 
Not yet, run hijackthis for me first. Instructions were in the same post as malwarebytes.
 
Ran HijackThis and about halfway through it this popped up:

http://imageshack.us/photo/my-images/507/screenhunter02jan282029.jpg/

Followed by this:

http://imageshack.us/photo/my-images/534/screenhunter03jan282031.jpg/

There was nothing in Notepad.

As I was going to post this my computer crashed and I got the "blue screen of death". I wasn't able to read what it said before it restarted. I restarted it in "Safe Mode with Networking". I said what the heck and tried HijackThis again and this time it worked. Here's the log:


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:37:01 PM, on 1/28/2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16912)
Boot mode: Safe mode with network support

Running processes:
C:\Users\Pang\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Pang\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Pang\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Pang\AppData\Local\Google\Chrome\Application\chrome.exe
C:\windows\SysWOW64\rundll32.exe
C:\Users\Pang\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://msi.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msi.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
R3 - URLSearchHook: (no name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - (no file)
F3 - REG:win.ini: load=C:\Users\Pang\LOCALS~1\Temp\djwokavx.com
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: WeCareReminder - {D824F0DE-3D60-4F57-9EB1-66033ECD8ABB} - C:\ProgramData\WeCareReminder\IEHelperv2.5.0.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [MGSysCtrl] C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Pang\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Pang\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Micro Star SCM - Micro-Star International Co., Ltd. - C:\Program Files (x86)\System Control Manager\MSIService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10197 bytes
 
OK, before we run combofix, try doing a system restore back to a few days before getting infected. If we run combofix now, you'll lose the ability to get your program entries back. If the restore is successful let me know if there are any signs of still being infected.
 
System Restore just finished. All my settings are back and everything looks to be working okay. Going to play a game for an hour or so and see if any problems pop up. I'll check back and let you know how it goes.
 
Phew indeed! So far so good. Thank god! :) From what you saw from my logs John, does it appear that everything is okay? From the scans that I ran it appeared that the virus is gone...just want to make sure.
 
Just make sure you run scans with malwarebytes and your antivirus program. I would also recommend to do an online scan using ESET.

Please download and run the ESET Online Scanner
Disable any antivirus/security programs.
IMPORTANT! UN-check Remove found threats
Accept any security warnings from your browser.
Check Scan archives
Click Start
ESET will then download updates, install and then start scanning your system.
When the scan is done, push list of found threats
Click on Export to text file , and save the file to your desktop using a file name, such as ESETlog. Include the contents of this report in your next reply.
If no threats are found then it won't produce a log.

If it finds any infected files within the sytem restore program, the directory will be called system volume information, then we will have to flush out the restore points.
 
How long is the ESET Scan supposed to take? Mine has been stuck on 99% for quite a while now. It's still going through files but has been running for an hour and 40 minutes now. Is this normal?
 
You must log in or register to reply here.
Back
Top