Заразена система

19 април 201313 г.

Системата ми е заразена и моля за малко помощ.

Има някакъв троянец и още нещо - показва ми 7 заразени файла от които 4 не могат да се премахнат, а след рестарт премахнатите три отново се появяват.

Log с DDS:

DDS (Ver_2011-09-30.01) - NTFS_AMD64 Internet Explorer: 9.0.8112.16421 Run by Dimo at 17:05:49 on 2013-04-19 Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1033.18.3957.2639 [GMT 3:00] . SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:Windowssystem32wininit.exe C:Windowssystem32lsm.exe C:Windowssystem32svchost.exe -k DcomLaunch C:Windowssystem32svchost.exe -k RPCSS C:Windowssystem32atiesrxx.exe C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted C:Windowssystem32svchost.exe -k LocalService C:Windowssystem32svchost.exe -k netsvcs C:WindowsSystem32DriverStoreFileRepositorystwrt64.inf_amd64_neutral_0057cbec48a2d7cfSTacSV64.exe C:Windowssystem32AUDIODG.EXE C:Windowssystem32svchost.exe -k NetworkService C:Windowssystem32atieclxx.exe C:Program FilesDellDell Wireless WLAN CardWLTRYSVC.EXE C:Windowssystem32WLANExt.exe C:Windowssystem32conhost.exe C:WindowsSystem32spoolsv.exe C:Program Files (x86)LSoft Technologies IncActive@ Hard Disk MonitorDiskMonitorService.exe C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe C:WindowsSystem32DriverStoreFileRepositorystwrt64.inf_amd64_neutral_0057cbec48a2d7cfAESTSr64.exe C:WindowsSystem32svchost.exe -k LocalServiceNoNetwork C:Program Files (x86)IntelIntel® Management Engine ComponentsLMSLMS.exe C:Program Files (x86)QUALCOMMQDLService2kQDLService2kDell.exe C:Windowssystem32svchost.exe -k imgsvc C:Program Files (x86)DellDell WWANWMCoremini_WMCore.exe C:Windowssystem32taskhost.exe C:Windowssystem32taskeng.exe C:Windowssystem32Dwm.exe C:WindowsExplorer.EXE C:WindowsSystem32svchost.exe -k WerSvcGroup C:Program FilesDellDell Wireless WLAN CardWLTRAY.EXE C:Program FilesDellQuickSetquickset.exe C:Program FilesIDTWDMsttray64.exe C:Program Files (x86)uTorrentuTorrent.exe C:Windowssystem32wbemwmiprvse.exe C:Program Files (x86)NokiaNokia PC Suite 7PCSuite.exe C:Program FilesDellDell Wireless WLAN Cardbcmwltry.exe C:Program Files (x86)PC Connectivity SolutionServiceLayer.exe C:Program Files (x86)PC Connectivity SolutionTransportsNclUSBSrv64.exe C:Program Files (x86)PC Connectivity SolutionTransportsNclRSSrv.exe C:UsersDimoAppDataRoamingvIwRIinsidminer.exe C:Windowssystem32SearchIndexer.exe C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticMOM.exe C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCCC.exe C:Windowssystem32conhost.exe C:Windowssystem32wbemwmiprvse.exe C:WindowsSystem32cscript.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://eagles.zapto.org:8077/ uSearch Bar = hxxp://www.google.com/ie uSearch Page = hxxp://www.google.com uDefault_Search_URL = hxxp://www.google.com/ie uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s uURLSearchHooks: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - <orphaned> uURLSearchHooks: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - <orphaned> uURLSearchHooks: {687578b9-7132-4a7a-80e4-30ee31099e03} - <orphaned> mWinlogon: Userinit = userinit.exe BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program Files (x86)Common FilesAdobeAcrobatActiveXAcroIEHelperShim.dll BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:Program Files (x86)Microsoft OfficeOffice12GrooveShellExtensions.dll uRun: [uTorrent] "C:Program Files (x86)uTorrentuTorrent.exe" /MINIMIZED uRun: [PC Suite Tray] "C:Program Files (x86)NokiaNokia PC Suite 7PCSuite.exe" -onlytray uRun: [Facebook Update] "C:UsersDimoAppDataLocalFacebookUpdateFacebookUpdate.exe" /c /nocrashserver uRun: [AudioCodec] C:UsersDimoAppDataRoamingvIwRIinsidminer.exe mRun: [startCCC] "C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLIStart.exe" MSRun mRun: [iAStorIcon] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe mRun: [Adobe ARM] "C:Program Files (x86)Common FilesAdobeARM1.0AdobeARM.exe" mPolicies-Explorer: NoActiveDesktop = dword:1 mPolicies-Explorer: NoActiveDesktopChanges = dword:1 mPolicies-System: ConsentPromptBehaviorAdmin = dword:5 mPolicies-System: ConsentPromptBehaviorUser = dword:3 mPolicies-System: EnableUIADesktopToggle = dword:0 IE: Add to Google Photos Screensa&ver - C:WindowsSystem32GPhotos.scr/200 IE: E&xport to Microsoft Excel - C:PROGRA~2MICROS~1Office12EXCEL.EXE/3000 IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:Program Files (x86)Microsoft OfficeOffice12ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} LSP: mswsock.dll DPF: {1DB93715-3B60-43EE-93E6-279BB3E1DF76} - hxxp://80.72.93.213:5555/cab/OCXChecker_6110.cab DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {3C8A6608-67D1-4AD1-AFE3-967ED0929248} - hxxp://arditicn.com/XWebPlay.CAB DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab TCP: NameServer = 192.168.2.1 TCP: Interfaces{822127DC-F8F6-44F6-8D72-F778C5FCCA13} : NameServer = 8.8.8.8,8.8.4.4 TCP: Interfaces{822127DC-F8F6-44F6-8D72-F778C5FCCA13} : DHCPNameServer = 192.168.1.1 TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4} : NameServer = 8.8.8.8,8.8.4.4 TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4} : DHCPNameServer = 192.168.2.1 TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}35D434 : NameServer = 8.8.8.8,8.8.4.4 TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}35D434 : DHCPNameServer = 192.168.2.1 TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}4505D2C696E6B66363 : NameServer = 8.8.8.8,8.8.4.4 TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}4505D2C696E6B66363 : DHCPNameServer = 212.39.90.42 212.39.90.43 TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}4656661657C647 : NameServer = 8.8.8.8,8.8.4.4 TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}4656661657C647 : DHCPNameServer = 192.168.1.1 8.8.8.8 TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}541676C6563713 : DHCPNameServer = 192.168.2.1 TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}84F64756C6D2C42443 : NameServer = 8.8.8.8,8.8.4.4 TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}84F64756C6D2C42443 : DHCPNameServer = 192.168.0.1 Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:Program Files (x86)Microsoft OfficeOffice12GrooveSystemServices.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:Program Files (x86)Common FilesSkypeSkype4COM.dll SSODL: WebCheck - <orphaned> SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:Program Files (x86)Microsoft OfficeOffice12GrooveShellExtensions.dll x64-Run: [broadcom Wireless Manager UI] C:Program FilesDellDell Wireless WLAN CardWLTRAY.exe x64-Run: [QuickSet] C:Program FilesDellQuickSetQuickSet.exe x64-Run: [synTPEnh] C:Program Files (x86)SynapticsSynTPSynTPEnh.exe x64-Run: [sysTrayApp] C:Program FilesIDTWDMsttray64.exe x64-DPF: {3C8A6608-67D1-4AD1-AFE3-967ED0929248} - hxxp://192.168.1.4:8077/XWebPlay.CAB x64-Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - <orphaned> x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned> x64-SSODL: WebCheck - <orphaned> . ================= FIREFOX =================== . FF - ProfilePath - C:UsersDimoAppDataRoamingMozillaFirefoxProfiles99hveu5v.default FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=3&q={searchTerms} FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.google.bg/ FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2475029&q= FF - component: C:ProgramDataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}NAV_18.1.0.37IPSFFPlgncomponentsIPSFFPl.dll FF - component: C:UsersDimoAppDataRoamingMozillaFirefoxProfiles99hveu5v.defaultextensions{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}componentsRadioWMPCoreGecko19.dll FF - component: C:UsersDimoAppDataRoamingMozillaFirefoxProfiles99hveu5v.defaultextensionsengine@conduit.comcomponentsRadioWMPCoreGecko19.dll FF - plugin: C:Program Files (x86)AdobeReader 11.0ReaderAIRnppdf32.dll FF - plugin: C:Program Files (x86)GoogleGoogle Earthpluginnpgeplugin.dll FF - plugin: C:Program Files (x86)GooglePicasa3npPicasa3.dll FF - plugin: C:Program Files (x86)GoogleUpdate1.3.21.135npGoogleUpdate3.dll FF - plugin: C:Program Files (x86)Mozilla Firefoxpluginsnpwachk.dll FF - plugin: C:UsersDimoAppDataLocalFacebookVideoSkypenpFacebookVideoCalling.dll FF - plugin: C:WindowsSysWOW64MacromedFlashNPSWF32_11_3_300_270.dll FF - plugin: C:WindowsSysWOW64MacromedFlashNPSWF32_11_6_602_180.dll FF - plugin: C:WindowsSysWOW64npdeployJava1.dll FF - plugin: C:WindowsSysWOW64npmproxy.dll . ---- FIREFOX POLICIES ---- FF - user.js: network.http.max-persistent-connections-per-server - 4 FF - user.js: nglayout.initialpaint.delay - 600 FF - user.js: content.notify.interval - 600000 FF - user.js: content.max.tokenizing.time - 1800000 FF - user.js: content.switch.threshold - 600000 . ============= SERVICES / DRIVERS =============== . R1 vwififlt;Virtual WiFi Filter Driver;C:WindowsSystem32driversvwififlt.sys [2009-7-14 59904] R2 Active@ Disk Monitor;Active@ Disk Monitor;C:Program Files (x86)LSoft Technologies IncActive@ Hard Disk MonitorDiskMonitorService.exe [2012-2-28 1465016] R2 AdobeARMservice;Adobe Acrobat Update Service;C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe [2012-12-18 65192] R2 AESTFilters;Andrea ST Filters Service;C:WindowsSystem32DriverStoreFileRepositorystwrt64.inf_amd64_neutral_0057cbec48a2d7cfAESTSr64.exe [2010-9-22 89600] R2 AMD External Events Utility;AMD External Events Utility;C:WindowsSystem32atiesrxx.exe [2010-9-15 203264] R2 QDLService2kDell;Qualcomm Gobi 2000 Download Service (Dell);C:Program Files (x86)QUALCOMMQDLService2kQDLService2kDell.exe [2010-1-14 330488] R2 rimspci;rimspci;C:WindowsSystem32driversrimspe64.sys [2010-9-15 60416] R2 risdpcie;risdpcie;C:WindowsSystem32driversrisdpe64.sys [2010-9-15 80896] R2 rixdpcie;rixdpcie;C:WindowsSystem32driversrixdpe64.sys [2010-9-15 55808] R2 TurboB;Turbo Boost UI Monitor driver;C:WindowsSystem32driversTurboB.sys [2009-11-2 13784] R2 WMCoreService;Mobile Broadband Service;C:Program Files (x86)DellDell WWANWMCoremini_WMCore.exe servicemode --> C:Program Files (x86)DellDell WWANWMCoremini_WMCore.exe servicemode [?] R3 amdkmdag;amdkmdag;C:WindowsSystem32driversatikmdag.sys [2010-9-15 6857728] R3 amdkmdap;amdkmdap;C:WindowsSystem32driversatikmpag.sys [2010-9-15 264192] R3 HECIx64;Intel® Management Engine Interface;C:WindowsSystem32driversHECIx64.sys [2010-9-15 56344] R3 RTL8167;Realtek 8167 NT Driver;C:WindowsSystem32driversRt64win7.sys [2010-9-15 239616] R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:WindowsSystem32driversvwifimp.sys [2009-7-14 17920] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:WindowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [2010-3-18 138576] S2 gupdate;Услуга Google Update (gupdate);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2011-2-25 136176] S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe [2010-9-15 13336] S2 UNS;Intel® Management & Security Application User Notification Service;C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSUNS.exe [2010-9-15 2320920] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:WindowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe [2012-4-16 253656] S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;C:WindowsSystem32driversssadadb.sys [2011-5-13 36328] S3 DKRtWrt;DKRtWrt;C:WindowsSystem32driversDKRtWrt.sys [2012-2-28 44624] S3 gupdatem;Google Update Service (gupdatem);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2011-2-25 136176] S3 MozillaMaintenance;Mozilla Maintenance Service;C:Program Files (x86)Mozilla Maintenance Servicemaintenanceservice.exe [2012-4-25 115608] S3 PCDSRVC{1E208CE0-FB7451FF-06020200}_0;PCDSRVC{1E208CE0-FB7451FF-06020200}_0 - PCDR Kernel Mode Service Helper Driver;C:Program FilesDell Support Centerpcdsrvc_x64.pkms [2012-8-18 25584] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:WindowsSystem32driversrdpvideominiport.sys [2011-6-23 20992] S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);C:WindowsSystem32driversssadbus.sys [2011-5-13 157672] S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);C:WindowsSystem32driversssadmdfl.sys [2011-5-13 16872] S3 ssadmdm;SAMSUNG Android USB Modem Drivers;C:WindowsSystem32driversssadmdm.sys [2011-5-13 177640] S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);C:WindowsSystem32driversssadserd.sys [2011-5-13 146920] S3 TsUsbFlt;TsUsbFlt;C:WindowsSystem32driversTsUsbFlt.sys [2011-6-23 59392] S3 TurboBoost;TurboBoost;C:Program FilesIntelTurboBoostTurboBoost.exe [2009-11-2 126352] S3 WatAdminSvc;Услуга на технологиите за активиране на Windows;C:WindowsSystem32WatWatAdminSvc.exe [2011-7-1 1255736] S3 WDC_SAM;WD SCSI Pass Thru driver;C:WindowsSystem32driverswdcsam64.sys [2008-5-6 14464] SUnknown tsusbhub;tsusbhub; [x] . =============== File Associations =============== . ShellExec: DigitalTheatre.exe: open="C:Program Files (x86)ArcSoftTotalMedia Theatre 3uDTStart.exe" "%1" . =============== Created Last 30 ================ . 2013-04-19 14:03:27 -------- d-----w- C:UsersDimoAppDataLocalAvg2013 2013-04-19 13:50:32 -------- d-----w- C:Program Files (x86)Loaris 2013-04-19 13:50:17 -------- d-----w- C:UsersDimoAppDataLocalPrograms 2013-04-19 13:22:00 -------- d--h--w- C:ProgramDataCommon Files 2013-04-19 13:22:00 -------- d-----w- C:UsersDimoAppDataLocalMFAData 2013-04-19 13:22:00 -------- d-----w- C:ProgramDataMFAData 2013-04-19 13:04:57 -------- d-----w- C:UsersDimoAppDataRoamingvIwRI 2013-04-19 13:04:22 18816 ----a-w- C:WindowsSystem32roboot64.exe 2013-04-19 13:04:19 -------- d-----w- C:UsersDimoAppDataRoamingsystweak 2013-04-19 07:12:17 9317456 ----a-w- C:ProgramDataMicrosoftWindows DefenderDefinition Updates{5C6905E3-A0C4-4A77-9132-53C07B27A865}mpengine.dll 2013-04-18 12:49:12 71680 ----a-w- C:ProgramData321D.exe 2013-04-11 11:17:24 2382848 ----a-w- C:WindowsSysWow64mshtml.tlb 2013-04-10 18:40:38 3717632 ----a-w- C:WindowsSystem32mstscax.dll 2013-04-10 18:40:37 44032 ----a-w- C:WindowsSystem32tsgqec.dll 2013-04-10 18:40:37 36864 ----a-w- C:WindowsSysWow64tsgqec.dll 2013-04-10 18:40:37 3217408 ----a-w- C:WindowsSysWow64mstscax.dll 2013-04-10 18:40:37 158720 ----a-w- C:WindowsSystem32aaclient.dll 2013-04-10 18:40:37 131584 ----a-w- C:WindowsSysWow64aaclient.dll 2013-04-10 18:40:30 3153408 ----a-w- C:WindowsSystem32win32k.sys 2013-04-10 18:40:25 1655656 ----a-w- C:WindowsSystem32driversntfs.sys 2013-04-10 18:35:19 223752 ----a-w- C:WindowsSystem32driversfvevol.sys 2013-04-10 18:35:18 5550424 ----a-w- C:WindowsSystem32ntoskrnl.exe 2013-04-10 18:35:17 3968856 ----a-w- C:WindowsSysWow64ntkrnlpa.exe 2013-04-10 18:35:17 3913560 ----a-w- C:WindowsSysWow64ntoskrnl.exe 2013-04-10 18:35:16 6656 ----a-w- C:WindowsSysWow64apisetschema.dll 2013-04-10 18:35:16 43520 ----a-w- C:WindowsSystem32csrsrv.dll 2013-04-10 18:35:16 112640 ----a-w- C:WindowsSystem32smss.exe 2013-04-02 16:12:11 -------- d-----w- C:Program Files (x86)Mozilla Firefox.bak 2013-04-02 14:09:52 4550656 ----a-w- C:WindowsSysWow64GPhotos.scr . ==================== Find3M ==================== . 2013-04-05 06:28:14 861088 ----a-w- C:WindowsSysWow64npdeployJava1.dll 2013-04-05 06:28:14 782240 ----a-w- C:WindowsSysWow64deployJava1.dll 2013-03-13 08:21:47 73432 ----a-w- C:WindowsSysWow64FlashPlayerCPLApp.cpl 2013-03-13 08:21:47 693976 ----a-w- C:WindowsSysWow64FlashPlayerApp.exe 2013-03-13 08:21:38 16486616 ----a-w- C:WindowsSysWow64FlashPlayerInstaller.exe 2013-03-11 22:10:56 282744 ------w- C:WindowsSystem32MpSigStub.exe 2013-02-22 06:27:49 2312704 ----a-w- C:WindowsSystem32jscript9.dll 2013-02-22 06:20:51 1392128 ----a-w- C:WindowsSystem32wininet.dll 2013-02-22 06:19:37 1494528 ----a-w- C:WindowsSystem32inetcpl.cpl 2013-02-22 06:15:48 173056 ----a-w- C:WindowsSystem32ieUnatt.exe 2013-02-22 06:15:23 599040 ----a-w- C:WindowsSystem32vbscript.dll 2013-02-22 06:12:41 2382848 ----a-w- C:WindowsSystem32mshtml.tlb 2013-02-22 03:46:00 1800704 ----a-w- C:WindowsSysWow64jscript9.dll 2013-02-22 03:38:00 1129472 ----a-w- C:WindowsSysWow64wininet.dll 2013-02-22 03:37:50 1427968 ----a-w- C:WindowsSysWow64inetcpl.cpl 2013-02-22 03:34:17 142848 ----a-w- C:WindowsSysWow64ieUnatt.exe 2013-02-22 03:34:03 420864 ----a-w- C:WindowsSysWow64vbscript.dll 2013-02-12 05:45:24 135168 ----a-w- C:WindowsapppatchAppPatch64AcXtrnal.dll 2013-02-12 05:45:22 350208 ----a-w- C:WindowsapppatchAppPatch64AcLayers.dll 2013-02-12 05:45:22 308736 ----a-w- C:WindowsapppatchAppPatch64AcGenral.dll 2013-02-12 05:45:22 111104 ----a-w- C:WindowsapppatchAppPatch64acspecfc.dll 2013-02-12 04:48:31 474112 ----a-w- C:WindowsapppatchAcSpecfc.dll 2013-02-12 04:48:26 2176512 ----a-w- C:WindowsapppatchAcGenral.dll 2013-02-12 04:12:05 19968 ----a-w- C:WindowsSystem32driversusb8023.sys . ============= FINISH: 17:07:34.16 ===============

Attach log:

. UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-09-30.01) . Microsoft Windows 7 Ultimate Boot Device: DeviceHarddiskVolume2 Install Date: 9/16/2010 5:15:48 AM System Uptime: 4/19/2013 5:04:41 PM (0 hours ago) . Motherboard: Dell Inc. | | 0874P6 Processor: Intel® Core i3 CPU M 350 @ 2.27GHz | U2E1 | 2266/133mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 98 GiB total, 16.141 GiB free. D: is FIXED (NTFS) - 368 GiB total, 89.073 GiB free. E: is CDROM () F: is CDROM () . ==== Disabled Device Manager Items ============= . Class GUID: Description: Device ID: ACPISMO88001 Manufacturer: Name: PNP Device ID: ACPISMO88001 Service: . ==== System Restore Points =================== . RP282: 4/16/2013 8:46:49 AM - Windows Update RP283: 4/19/2013 10:10:45 AM - Windows Update RP285: 4/19/2013 10:15:19 AM - Windows Defender Checkpoint RP286: 4/19/2013 4:24:25 PM - Installed AVG 2013 RP287: 4/19/2013 4:25:15 PM - Installed AVG 2013 RP288: 4/19/2013 5:01:45 PM - Removed AVG 2013 RP289: 4/19/2013 5:03:28 PM - Removed AVG 2013 . ==== Installed Programs ====================== . µTorrent 2007 Microsoft Office Suite Service Pack 1 (SP1) Active@ Hard Disk Monitor Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin Adobe Reader XI (11.0.02) Adobe Shockwave Player 11.6 Apple Application Support Apple Software Update ArcSoft TotalMedia Theatre 3 Ashampoo Burning Studio 6 FREE v.6.80 ATI AVIVO64 Codecs ATI Catalyst Install Manager Catalyst Control Center - Branding Catalyst Control Center Graphics Previews Common Catalyst Control Center Graphics Previews Vista Catalyst Control Center InstallProxy Catalyst Control Center Localization All ccc-core-static ccc-utility64 CCC Help Chinese Standard CCC Help Chinese Traditional CCC Help Danish CCC Help Dutch CCC Help English CCC Help Finnish CCC Help French CCC Help German CCC Help Italian CCC Help Japanese CCC Help Korean CCC Help Norwegian CCC Help Portuguese CCC Help Russian CCC Help Spanish CCC Help Swedish Cisco EAP-FAST Module Cisco LEAP Module Cisco PEAP Module Combined Community Codec Pack 2009-09-09 Dell Driver Download Manager Dell Support Center Dell Touchpad Dell Wireless HSPA Mini-Card Drivers Dell Wireless WLAN Card Utility Diskeeper 2011 DMMultiView Facebook Video Calling 1.2.0.287 Google Earth Plug-in Google Update Helper IDT Audio Intel® Control Center Intel® Management Engine Components Intel® Rapid Storage Technology Intel® Turbo Boost Technology Monitor Media Player Classic - Home Cinema v1.4.2499.0 x64 Microsoft .NET Framework 4 Client Profile Microsoft Office Access MUI (Bulgarian) 2007 Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (Bulgarian) 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Groove MUI (Bulgarian) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office InfoPath MUI (Bulgarian) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office Language Pack 2007 - Bulgarian/български Microsoft Office O MUI (Bulgarian) 2007 Microsoft Office Office 64-bit Components 2007 Microsoft Office OneNote MUI (Bulgarian) 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office Outlook MUI (Bulgarian) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (Bulgarian) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office Proof (Bulgarian) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (German) 2007 Microsoft Office Proof (Russian) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (Bulgarian) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Publisher MUI (Bulgarian) 2007 Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared 64-bit MUI (Bulgarian) 2007 Microsoft Office Shared 64-bit MUI (English) 2007 Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 Microsoft Office Shared MUI (Bulgarian) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (Bulgarian) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Office X MUI (Bulgarian) 2007 Microsoft Visual C++ 2005 Redistributable (x64) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 MobileMe Control Panel Mozilla Firefox 20.0.1 (x86 bg) Mozilla Maintenance Service MSVC90_x64 MSVC90_x86 Nokia Connectivity Cable Driver Nokia PC Suite O&O DiskRecovery Octoshape add-in for Adobe Flash Player PC Connectivity Solution Picasa 3 Qualcomm Gobi 2000 Package for Dell Quickset64 QuickTime Realtek Ethernet Controller Driver For Windows Vista and Later RICOH Media Driver ver.2.07.01.04 Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449) Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019) Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595) Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642) Skype™ 4.2 swMSM The KMPlayer (remove only) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) Visual Studio 2010 x64 Redistributables VLC media player 1.1.4 Winamp Winamp Detector Plug-in Windows Driver Package - Nokia Modem (02/25/2011 4.7) Windows Driver Package - Nokia Modem (02/25/2011 7.01.0.9) Windows Driver Package - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) Windows Media Player Firefox Plugin WinRAR archiver . ==== Event Viewer Messages From Past Week ======== . 4/19/2013 5:05:06 PM, Error: Service Control Manager [7023] - Услуга Function Discovery Resource Publication прекъсна със следната грешка: %%-2147024891 4/19/2013 5:05:06 PM, Error: Service Control Manager [7003] - Услуга IPsec Policy Agent зависи от следната услуга: BFE. Услугата може да не е инсталирана. 4/19/2013 5:05:06 PM, Error: Service Control Manager [7003] - Услуга IKE and AuthIP IPsec Keying Modules зависи от следната услуга: BFE. Услугата може да не е инсталирана. 4/19/2013 5:05:05 PM, Error: Service Control Manager [7023] - Услуга Computer Browser прекъсна със следната грешка: Указаната услуга не съществува като инсталирана услуга. 4/19/2013 4:38:37 PM, Error: Service Control Manager [7023] - Услуга Function Discovery Resource Publication прекъсна със следната грешка: %%-2147024891 4/19/2013 4:38:37 PM, Error: Service Control Manager [7003] - Услуга IPsec Policy Agent зависи от следната услуга: BFE. Услугата може да не е инсталирана. 4/19/2013 4:38:37 PM, Error: Service Control Manager [7003] - Услуга IKE and AuthIP IPsec Keying Modules зависи от следната услуга: BFE. Услугата може да не е инсталирана. 4/19/2013 4:38:35 PM, Error: Service Control Manager [7023] - Услуга Computer Browser прекъсна със следната грешка: Указаната услуга не съществува като инсталирана услуга. 4/19/2013 4:37:30 PM, Error: Service Control Manager [7006] - Обръщението към ScRegSetValueExW е неуспешно заради FailureActions със следната грешка: Достъпът е отказан. 4/19/2013 4:19:15 PM, Error: Service Control Manager [7023] - Услуга Function Discovery Resource Publication прекъсна със следната грешка: %%-2147024891 4/19/2013 4:19:15 PM, Error: Service Control Manager [7003] - Услуга IPsec Policy Agent зависи от следната услуга: BFE. Услугата може да не е инсталирана. 4/19/2013 4:19:15 PM, Error: Service Control Manager [7003] - Услуга IKE and AuthIP IPsec Keying Modules зависи от следната услуга: BFE. Услугата може да не е инсталирана. 4/19/2013 4:19:12 PM, Error: Service Control Manager [7023] - Услуга Computer Browser прекъсна със следната грешка: Указаната услуга не съществува като инсталирана услуга. 4/19/2013 4:12:10 PM, Error: Service Control Manager [7023] - Услуга Function Discovery Resource Publication прекъсна със следната грешка: %%-2147024891 4/19/2013 4:12:10 PM, Error: Service Control Manager [7003] - Услуга IPsec Policy Agent зависи от следната услуга: BFE. Услугата може да не е инсталирана. 4/19/2013 4:12:10 PM, Error: Service Control Manager [7003] - Услуга IKE and AuthIP IPsec Keying Modules зависи от следната услуга: BFE. Услугата може да не е инсталирана. 4/19/2013 4:12:08 PM, Error: Service Control Manager [7023] - Услуга Computer Browser прекъсна със следната грешка: Указаната услуга не съществува като инсталирана услуга. 4/19/2013 4:09:48 PM, Error: Service Control Manager [7032] - Диспечерът за управление на услуги се опита да предприеме коригиращо действие (Restart the service) след неочакваното прекъсване на услуга Norton AntiVirus, но това действие се оказа неуспешно поради следната грешка: Вече се изпълнява екземпляр на услугата. 4/19/2013 4:09:30 PM, Error: Service Control Manager [7031] - Услуга Norton AntiVirus беше прекъсната неочаквано. Това се е случвало с нея 2 път(и). След 120000 милисекунди ще бъде предприето следното коригиращо действие: Restart the service. 4/19/2013 4:07:48 PM, Error: Service Control Manager [7031] - Услуга Norton AntiVirus беше прекъсната неочаквано. Това се е случвало с нея 1 път(и). След 120000 милисекунди ще бъде предприето следното коригиращо действие: Restart the service. 4/18/2013 8:07:06 PM, Error: Server [2505] - The server could not bind to the transport DeviceNetBT_Tcpip_{98766407-4437-4A25-BBBD-1EFF22306AC4} because another computer on the network has the same name. The server could not start. 4/18/2013 8:07:06 PM, Error: NetBT [4321] - The name "DIMO-PC :20" could not be registered on the interface with IP address 192.168.2.100. The computer with the IP address 192.168.2.101 did not allow the name to be claimed by this computer. 4/18/2013 8:07:06 PM, Error: NetBT [4321] - The name "DIMO-PC :0" could not be registered on the interface with IP address 192.168.2.100. The computer with the IP address 192.168.2.101 did not allow the name to be claimed by this computer. 4/17/2013 7:30:11 PM, Error: Microsoft-Windows-DistributedCOM [10001] - Unable to start a DCOM Server: {F87B28F1-DA9A-4F35-8EC0-800EFCF26B83} as /. The error: "5" Happened while starting this command: C:WindowsSystem32slui.exe -Embedding 4/17/2013 4:20:11 PM, Error: Service Control Manager [7034] - Услуга Услуга Google Update (gupdate) беше прекъсната неочаквано. Това се е случвало с нея 1 път(и). 4/15/2013 8:19:47 AM, Error: Microsoft-Windows-WMPNSS-Service [14332] - Услугата "WMPNetworkSvc" не е стартирана правилно, понеже CoCreateInstance(CLSID_UPnPDeviceFinder) откри грешка "0x80004005". Уверете се, че се изпълнява услугата UPnPHost и че компонентът UPnPHost на Windows е инсталиран правилно. 4/15/2013 8:09:33 PM, Error: NetBT [4321] - The name "DIMO-PC :20" could not be registered on the interface with IP address 192.168.2.100. The computer with the IP address 192.168.2.109 did not allow the name to be claimed by this computer. 4/14/2013 10:37:41 PM, Error: NetBT [4321] - The name "DIMO-PC :0" could not be registered on the interface with IP address 192.168.2.100. The computer with the IP address 192.168.2.109 did not allow the name to be claimed by this computer. . ==== End Of File ===========================

Редактирано 23 април 201313 г. от B-boy[StyLe] (преглед на промените)

20 април 201313 г.

Автор

Малко по-подробно - намира следните вируси:

Trj/Sirefef.D - на няколко места -3

Trj/OCJ.A

Trj/CI.A

ZeroAccess

Aнтивирусните програми ги махат, но после пак се появяват.

Друг проблем е, че мога да стартирам само Safe mode.

При нормално стартиране на Windows екранът става черен с голям бял курсор.

Редактирано 20 април 201313 г. от Pokrust (преглед на промените)

20 април 201313 г.

Здравейте,

[*]Изтеглете

RogueKiller.exe и го запазете на десктопа. [*]Стартирайте приложението и натиснете бутона SCAN. [*]Ще се създаде лог файл на десктопа с името RKreport.txt на десктопа. [*]Публикувайте лог файла в следващия си пост.

20 април 201313 г.

Автор

RogueKiller V8.5.4 [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/
Website : http://tigzy.geekstogo.com/roguekiller.php
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Safe mode with network support
User : Dimo [Admin rights]
Mode : Scan -- Date : 04/20/2013 22:09:18
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 7 ¤¤¤
[RUN][sUSP PATH] HKCU[...]Run : AudioCodec (C:UsersDimoAppDataRoamingvIwRIinsidminer.exe) [-] -> FOUND
[RUN][sUSP PATH] HKUSS-1-5-21-516114103-4245724797-1933576057-1001[...]Run : AudioCodec (C:UsersDimoAppDataRoamingvIwRIinsidminer.exe) [-] -> FOUND
[HJ DESK] HKLM[...]NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM[...]NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
[HJ INPROC][ZeroAccess] HKCR[...]InprocServer32 : (C:$Recycle.BinS-1-5-21-516114103-4245724797-1933576057-1001$d81a54d461f85f85303029164fc20bc0n.) [x] -> FOUND
[HJ INPROC][ZeroAccess] HKCR[...]InprocServer32 : (C:$Recycle.BinS-1-5-18$d81a54d461f85f85303029164fc20bc0n.) [x] -> FOUND
[HJ INPROC][ZeroAccess] HKLM[...]InprocServer32 : (C:$Recycle.BinS-1-5-18$d81a54d461f85f85303029164fc20bc0n.) [x] -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤
[ZeroAccess][FILE] @ : C:$recycle.binS-1-5-18$d81a54d461f85f85303029164fc20bc0@ [-] --> FOUND
[ZeroAccess][FILE] @ : C:$recycle.binS-1-5-21-516114103-4245724797-1933576057-1001$d81a54d461f85f85303029164fc20bc0@ [-] --> FOUND
[ZeroAccess][FOLDER] U : C:$recycle.binS-1-5-18$d81a54d461f85f85303029164fc20bc0U --> FOUND
[ZeroAccess][FOLDER] U : C:$recycle.binS-1-5-21-516114103-4245724797-1933576057-1001$d81a54d461f85f85303029164fc20bc0U --> FOUND
[ZeroAccess][FOLDER] L : C:$recycle.binS-1-5-18$d81a54d461f85f85303029164fc20bc0L --> FOUND
[ZeroAccess][FOLDER] L : C:$recycle.binS-1-5-21-516114103-4245724797-1933576057-1001$d81a54d461f85f85303029164fc20bc0L --> FOUND

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ Infection : ZeroAccess ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> C:Windowssystem32driversetchosts

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: ST9500420AS +++++
--- User ---
[MBR] 14a1f7f78d2fbcfafd21a174e0703626
[bSP] 78e4add0c5f5a9615093a1e1048a7063 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 39 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 286720 | Size: 99900 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 204881920 | Size: 376899 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[1]_S_04202013_02d2209.txt >>
RKreport[1]_S_04202013_02d2209.txt

20 април 201313 г.

Стартирайте отново RogueKiller и натиснете бутона Scan.

Изчакайте проверката да приключи и след това натиснете табът Registry.

Маркирайте следните обекти:

[RUN][sUSP PATH] HKCU[...]Run : AudioCodec (C:UsersDimoAppDataRoamingvIwRIinsidminer.exe) [-] -> FOUND
[RUN][sUSP PATH] HKUSS-1-5-21-516114103-4245724797-1933576057-1001[...]Run : AudioCodec (C:UsersDimoAppDataRoamingvIwRIinsidminer.exe) [-] -> FOUND
[HJ INPROC][ZeroAccess] HKCR[...]InprocServer32 : (C:$Recycle.BinS-1-5-21-516114103-4245724797-1933576057-1001$d81a54d461f85f85303029164fc20bc0n.) [x] -> FOUND
[HJ INPROC][ZeroAccess] HKCR[...]InprocServer32 : (C:$Recycle.BinS-1-5-18$d81a54d461f85f85303029164fc20bc0n.) [x] -> FOUND
[HJ INPROC][ZeroAccess] HKLM[...]InprocServer32 : (C:$Recycle.BinS-1-5-18$d81a54d461f85f85303029164fc20bc0n.) [x] -> FOUND

и натиснете Delete.

След това отидете до табът Files и сложете отметки пред:

[ZeroAccess][FILE] @ : C:$recycle.binS-1-5-18$d81a54d461f85f85303029164fc20bc0@ [-] --> FOUND
[ZeroAccess][FILE] @ : C:$recycle.binS-1-5-21-516114103-4245724797-1933576057-1001$d81a54d461f85f85303029164fc20bc0@ [-] --> FOUND
[ZeroAccess][FOLDER] U : C:$recycle.binS-1-5-18$d81a54d461f85f85303029164fc20bc0U --> FOUND
[ZeroAccess][FOLDER] U : C:$recycle.binS-1-5-21-516114103-4245724797-1933576057-1001$d81a54d461f85f85303029164fc20bc0U --> FOUND
[ZeroAccess][FOLDER] L : C:$recycle.binS-1-5-18$d81a54d461f85f85303029164fc20bc0L --> FOUND
[ZeroAccess][FOLDER] L : C:$recycle.binS-1-5-21-516114103-4245724797-1933576057-1001$d81a54d461f85f85303029164fc20bc0L --> FOUND

и натиснете Delete.

Ако бъдете попитани за рестарт съгласете се.

След рестарта вижте дали можете вече да заредите в normal mode. Ако да отворете последния лог файл RKreport[3] и го публикувайте в следващия си коментар.

Ако ли не, заредете в Safe Mode отново и публикувайте лог файла оттам.

Поздрави!

20 април 201313 г.

Автор

Това е лога от RK 3 ....предполагам, че RK 2 и RK 4 не ви интересуват за сега.

След няколко crash -а вече сме в Normal mode.

Нямаше възможност за слагане и махане на отметки в tab Files ...прозорецът на програмата беше отрязан, затова предполагам че съм премахнал всички - дано не е голям проблем.

RogueKiller V8.5.4 [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/
Website : http://tigzy.geekstogo.com/roguekiller.php
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Dimo [Admin rights]
Mode : Remove -- Date : 04/20/2013 22:27:19
| ARK || FAK || MBR |

¤¤¤ Bad processes : 1 ¤¤¤
[sUSP PATH] insidminer.exe -- C:UsersDimoAppDataRoamingvIwRIinsidminer.exe [-] -> KILLED [TermProc]

¤¤¤ Registry Entries : 5 ¤¤¤
[RUN][sUSP PATH] HKCU[...]Run : AudioCodec (C:UsersDimoAppDataRoamingvIwRIinsidminer.exe) [-] -> DELETED
[HJ DESK] HKLM[...]NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NOT SELECTED
[HJ DESK] HKLM[...]NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NOT SELECTED
[HJ INPROC][ZeroAccess] HKCR[...]InprocServer32 : (C:$Recycle.BinS-1-5-21-516114103-4245724797-1933576057-1001$d81a54d461f85f85303029164fc20bc0n.) [x] -> REPLACED (C:Windowssystem32shell32.dll)
[HJ INPROC][ZeroAccess] HKCR[...]InprocServer32 : (C:$Recycle.BinS-1-5-18$d81a54d461f85f85303029164fc20bc0n.) [x] -> REPLACED (C:Windowssystem32wbemfastprox.dll)

¤¤¤ Particular Files / Folders: ¤¤¤
[ZeroAccess][FILE] @ : C:$recycle.binS-1-5-18$d81a54d461f85f85303029164fc20bc0@ [-] --> REMOVED
[ZeroAccess][FILE] @ : C:$recycle.binS-1-5-21-516114103-4245724797-1933576057-1001$d81a54d461f85f85303029164fc20bc0@ [-] --> REMOVED
[ZeroAccess][FOLDER] ROOT : C:$recycle.binS-1-5-18$d81a54d461f85f85303029164fc20bc0U --> REMOVED
[ZeroAccess][FOLDER] ROOT : C:$recycle.binS-1-5-21-516114103-4245724797-1933576057-1001$d81a54d461f85f85303029164fc20bc0U --> REMOVED
[Del.Parent][FILE] 00000004.@ : C:$recycle.binS-1-5-18$d81a54d461f85f85303029164fc20bc0L00000004.@ [-] --> REMOVED
[Del.Parent][FILE] 201d3dde : C:$recycle.binS-1-5-18$d81a54d461f85f85303029164fc20bc0L201d3dde [-] --> REMOVED
[Del.Parent][FILE] 76603ac3 : C:$recycle.binS-1-5-18$d81a54d461f85f85303029164fc20bc0L76603ac3 [-] --> REMOVED
[ZeroAccess][FOLDER] ROOT : C:$recycle.binS-1-5-18$d81a54d461f85f85303029164fc20bc0L --> REMOVED
[ZeroAccess][FOLDER] ROOT : C:$recycle.binS-1-5-21-516114103-4245724797-1933576057-1001$d81a54d461f85f85303029164fc20bc0L --> REMOVED

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ Infection : ZeroAccess ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> C:Windowssystem32driversetchosts

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: ST9500420AS +++++
--- User ---
[MBR] 14a1f7f78d2fbcfafd21a174e0703626
[bSP] 78e4add0c5f5a9615093a1e1048a7063 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 39 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 286720 | Size: 99900 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 204881920 | Size: 376899 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[3]_D_04202013_02d2227.txt >>
RKreport[1]_S_04202013_02d2209.txt ; RKreport[2]_S_04202013_02d2223.txt ; RKreport[3]_D_04202013_02d2227.txt

Редактирано 20 април 201313 г. от Pokrust (преглед на промените)

20 април 201313 г.

Не, не е проблем, точно това трябваше да се случи.

Сега продължаваме...

Изтеглете OTL.exe и го запазете на десктопа.

[*]Стартирайте

OTL (ако е необходимо, потвърдете през UAC). [*]Направете следните настройки: [*]Сложете отметка пред Scan All Users [*]Под менюто File Age изберете 90 days [*]Под менюто Standard Registry променете на ALL [*]Сложете отметки пред LOP и Purity Check

Под с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):

netsvcsmsconfigsafebootminimalsafebootnetworkactivexdrivers32%SYSTEMDRIVE%*.*%USERPROFILE%*.*%USERPROFILE%temp*.exe%USERPROFILE%AppDataLocal*.*%USERPROFILE%AppDataLocal*.%USERPROFILE%AppDataLocaltemp*.exe%USERPROFILE%AppDataRoaming*.*%USERPROFILE%AppDataRoaming*.%Public%DocumentsFonts*.exe%Public%DocumentsConfig*.exe%Public%Documents*.*%ProgramData%*.*%ProgramData%*.%CommonProgramFiles%*.*%CommonProgramFiles%ComObjects*.exe%commonprogramfiles(x86)%*.*%ProgramFiles%*.*%ProgramFiles%*.%ProgramFiles(x86)%*.*%ProgramFiles(x86)%*.%programdata%MicrosoftWindowsDRM*.tmp%programdata%MicrosoftDRM*.tmp%systemroot%system32configsystemprofileAppDataLocal*.*%systemroot%system32configsystemprofileAppDataRoaming*.*%windir%SysWOW64configsystemprofileAppDataLocal*.*%windir%SysWOW64configsystemprofileAppDataRoaming*.*%windir%ServiceProfilesLocalServiceAppDataLocalTemp*.tlb%windir%ServiceProfilesNetworkServiceAppDataLocalTemp*.tlb%windir%temp*.exe%windir%*.%windir%installer*.%windir%system32*.%windir%sysnative*.%Temp%smtmp1*.*%Temp%smtmp2*.*%Temp%smtmp3*.*%Temp%smtmp4*.*%systemroot%system32*.dll /lockedfiles%systemroot%syswow64*.dll /lockedfiles%systemroot%Tasks*.job /lockedfiles%systemroot%system32drivers*.sys /90%systemroot%system32drivers*.sys /lockedfiles%systemroot%syswow64drivers*.sys /90%systemroot%syswow64drivers*.sys /lockedfiles%systemroot%system32Spoolprtprocsw32x86*.dll%systemroot%*. /rp /s%systemroot%assemblytmp*.* /S /MD5%systemroot%assemblytemp*.* /S /MD5%systemroot%assemblyGAC*.ini%systemroot%assemblyGAC_32*.ini%systemroot%assemblyGAC_64*.ini%SystemRoot%assemblyGAC_MSIL*.iniwsSystemRoot|l,n,u,@;True;False;True;$,{ /fn%systemdrive%$Recycle.Bin|@;true;true;true /fpHKEY_CLASSES_ROOTCLSID{7C857801-7381-11CF-884D-00AA004B2E24} /sHKEY_CLASSES_ROOTCLSID{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /sHKEY_CURRENT_USERSoftwareClassesCLSID{42aedc87-2188-41fd-b9a3-0c966feabec1} /sHKEY_LOCAL_MACHINESOFTWAREClassesCLSID{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /sHKEY_LOCAL_MACHINESOFTWAREClassesCLSID{42aedc87-2188-41fd-b9a3-0c966feabec1} /sHKEY_LOCAL_MACHINESOFTWAREClassesCLSID{a2a9545d-a0c2-42b4-9708-a0b2badd77c8} /sHKEY_LOCAL_MACHINESOFTWAREClassesCLSID{7C857801-7381-11CF-884D-00AA004B2E24} /sHKEY_CLASSES_ROOTclsid{5839FCA9-774D-42A1-ACDA-D6A79037F57F} /sHKEY_CLASSES_ROOTclsid{fbeb8a05-beee-4442-804e-409d6c4515e9} /sHKEY_CURRENT_USERSoftwareClassesclsid{fbeb8a05-beee-4442-804e-409d6c4515e9} /sHKEY_LOCAL_MACHINESOFTWAREClassesCLSID{5839FCA9-774D-42A1-ACDA-D6A79037F57F} /sHKEY_CURRENT_USERSoftwareClassesclsid{12d0253a-7c96-815c-11e0-3034bbd97cc0}] /sHKEY_CLASSES_ROOTCLSID{312BFDCE-A901-4203-B4F2-ADCB957D1887} /sHKEY_CLASSES_ROOTDirectoryShellexCopyHookHandlersMSCopy /sHKEY_CURRENT_USERSoftwareMSOLoad /sbcdedit /enum all /v >C:boot.txt /c>C:commands.txt echo list vol /raw /hide /c/wait>C:DiskReport.txt diskpart /s C:commands.txt /raw /hide /c/waittype c:diskreport.txt /c/waiterase c:commands.txt /hide /c/waiterase c:diskreport.txt /hide /c/md5starteventlog.dllscecli.dllnetlogon.dllcngaudit.dllsceclt.dllntelogon.dlllogevent.dllconsrv.dllservices.exeexplorer.exelsass.exesvchost.exewininit.exewinlogon.exeuserinit.exeatapi.sysiaStor.sysserial.sysvolsnap.sysdisk.sysredbook.sysi8042prt.sysafd.sysnetbt.syscsc.systcpip.sysdfsc.syshlp.datstr.syscrexv.ocxwow.dllwow64.dll/md5stop

[*]Натиснете маркираният в синьо бутон:

Run Scan. [*]Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt. Прикачете тези два файла в следващия си коментар (погледнете опцията Прикачени файлове, когато публикувате мнение).

20 април 201313 г.

Автор

Логовете от OTL:

OTL.Txt

Extras.Txt

20 април 201313 г.

[*]Стартирайте файла с двукратен клик на мишката.

[*]Под с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):

:OTL

IE - HKLM..SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2475029

IE - HKUS-1-5-21-516114103-4245724797-1933576057-1001..SearchScopes{FD73071C-14A1-4BBD-A128-779D4601088B}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253

FF - prefs.js..browser.search.defaultenginename: "Secure Search"

FF - prefs.js..browser.search.defaultthis.engineName: "uTorrentControl2 Customized Web Search"

FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=3&q={searchTerms}"

FF - prefs.js..extensions.enabledItems: [email protected]:3.2.5.2

FF - prefs.js..extensions.enabledItems: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4}:3.2.5.2

FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2475029&q="

O3 - HKUS-1-5-21-516114103-4245724797-1933576057-1001..ToolbarWebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.

O3 - HKUS-1-5-21-516114103-4245724797-1933576057-1001..ToolbarWebBrowser: (no name) - {687578B9-7132-4A7A-80E4-30EE31099E03} - No CLSID value found.

O3 - HKUS-1-5-21-516114103-4245724797-1933576057-1001..ToolbarWebBrowser: (no name) - {A1E75A0E-4397-4BA8-BB50-E19FB66890F4} - No CLSID value found.

O3 - HKUS-1-5-21-516114103-4245724797-1933576057-1001..ToolbarWebBrowser: (no name) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No CLSID value found.

O3 - HKUS-1-5-21-516114103-4245724797-1933576057-1001..ToolbarWebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.

[2012/05/05 18:10:18 | 000,000,000 | ---D | M] -- C:UsersDimoAppDataLocalConduit

[2012/05/05 08:46:12 | 000,000,000 | ---D | M] -- C:Program Files (x86)Conduit

@Alternate Data Stream - 176 bytes -> C:ProgramDataTEMP:39413AC3

@Alternate Data Stream - 104 bytes -> C:ProgramDataTEMP:D1B5B4F1

:files

netsh winsock reset catalog /c

ipconfig /flushdns /c

:commands

[emptytemp]

[*]След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix

[*]Windows ще се рестартира и ще се създаде лог файл - OTL fix log. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.

20 април 201313 г.

Автор

След изпълняването на скрипта и след рестарта компютърът забива на отворения лог файл.

Половин час го чаках в това състояние преди да рестартирам.Проблемът сега е,че при всеки рестарт отново забива

Така че в момента отново пиша от Safe mode ...лог-а не мога да публикувам по понятни причини просто го видях преди да рестартирам първия път.

Не знам дали не е прекалено лоша идеята да повторя операцията със последния скрипт от Safe mode.

Редактирано 20 април 201313 г. от Pokrust (преглед на промените)

21 април 201313 г.

Лог файла можете да намерите в папката C:_OTLMovedFiles.

Публикувайте го в следващия си коментар.

Колкото до забиването, нека да видим дали ще спрем OTL от стартиране в Normal Mode.

Първо да направим бекъп на регистрите:

[*]Изтегли и инсталирай

Tweaking.com-Registry Backup [*]Отвори Tweaking.com-Registry Backup и натисни Backup Now. [*]Затвори приложението.

Отворете Start => Run => въведете CMD и натиснете Enter.

С copy/paste въведете командата:

Reg Delete "HKLMSOFTWAREOldTimer Tools" /f

и натиснете Enter

След това вижте дали можете да стартирате успешно в Normal Mode.

21 април 201313 г.

Автор

В папката C:_OTLMovedFiles е само това, което е доста по- малко от онова което видях при забиването:

FilesFolders moved on Reboot... File move failed. C:UsersDimoAppDataLocalTempFXSAPIDebugLogFile.txt scheduled to be moved on reboot. PendingFileRenameOperations files... Registry entries deleted on Reboot...

Колкото до скрипта в cmd :"ERROR: The system unable to find the specified registry key or value."

След рестартa вече сме в Normal mode.

Редактирано 21 април 201313 г. от Pokrust (преглед на промените)

22 април 201313 г.

Ок...засега ще прескочим OTL и ще преминем към основните проверки и поправки, които ни остават:

СТЪПКА 1

Моля изтеглете последната версия на TDSSKiller оттук и я запазете на вашия декстоп.

[*]Стартирайте

TDSSKiller.exe за да стартирате приложението. След това кликнете върху бутона Change parameters.

[*]Сложете отметка през Loaded Modules.

[*]Необходим е рестарт за осъществяване на промените. Направете го! [*]TDSSKiller ще стартира автоматично след рестарта. Важно е да се отбележи, че вашия компютър може да изглежда по-бавен, на моменти неизползваем и с по-ниска производителност. Това е нормално и ще трае само един рестарт. Дайте му достатъчно време да зареди приложенията стартиращи с Операционната Система във фонов режим. [*]След това натиснете Change parameters в TDSSKiller отново. [*]Сложете всички отметки (този път рестарт не се изисква).

[*]Натиснете бутона Start Scan.

[*]Проверката не би трябвало да отмене повече от 2 minutes. [*]Ако подозрителен обект бъде засечен, действието по подразбиране ще бъде Skip, кликнете върху Continue.

[*]Ако зловредни обекти бъдат намерени, тогава от падащото меню ще имате три възможности.
Бъдете сигурни, че избраното действие е Cure и натиснете върху Continue > Рестартирайте за да бъде завършена поправката.

Забележка: Ако Cure бутона не е наличен от възможностите, тогава моля изберете Skip бутона, не избирайте Delete освен ако не сте инструктирани затова. [*]Лог файл ще бъде създаден в свободната директория на дял C: . Потърсете за лог с името "TDSSKiller.[Version]_[Date]_[Time]_log.txt" и копирайте съдържанието му в следващия си пост.

СТЪПКА 2

Изтеглете програмата AdwCleaner (by Xplode).

[*]Затворете всички стартирани програми и браузъри. [*]Кликнете два пъти върху

adwcleaner.exe за да стартирате инструмента. [*]Този път маркирайте Delete. [*]Вашият компютър ще се рестартира автоматично. Текстовия файл ще се отвори след рестарта. [*]Моля, да публикувате съдържанието на този лог в отговора си [*]Можете да намерите лога,който автоматично се запомня тук C:AdwCleaner[s1].txt

СТЪПКА 3

Моля изтеглете Junkware Removal Tool на вашия десктоп.

[*]Спрете временно работата на защитните програми. [*]Стартирайте инструмента

JRT.exe [*]Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата. [*]Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши. [*]Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt). [*]Моля копирайте съдържанието на лог файла в следващия си пост.

СТЪПКА 4

Изтеглете Malwarebytes' Anti-Malware

[*]Кликнете два пъти върху

mbam-setup.exe, за да инсталирате програмата. [*]Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish. [*]Ако има намерени обновявания, тя ще ги изтегли и инсталира. [*]Стартирайте програмата и изберете "Perform Quick Scan", след това кликнете на Scan. [*]Сканирането ще отнеме малко време, затова моля да бъдете търпеливи. [*]Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата. [*]Натиснете Save Log (не натискайте Remove Selected засега) и запазете лог файла на десктопа. [*]Копирайте този лог и го публикувайте в следващия си коментар по темата.

СТЪПКА 5

1) Изтеглете: ESET Online Scanner
2) Стартирайте esetsmartinstaller_enu.exe
3) Сложете отметка на YES, I accept the Terms of Use и изберете Start
4) Скенерът ще започне да изтегля компонентите, които са му необходими.
5) Уверете се, че има отметки на следните редове, включително и тези от менюто Advanced Settings:

[*]

Scan archives [*]Scan for potentially unwanted applications [*]Scan for potentially unsafe applications [*]Enable Anti-Stealth technology

И премахнете отметката пред Remove found threats
И накрая изберете Start

6) Скенерът ще започне да изтегля последните дефиниции.
7) След, като сканирането завърши изберете Finish.
8) Отидете в:C:Program FilesESETESET Online Scanner.

9) Отворете файла log.txt , копирайте съдържанието му и го поставете в следващия си пост.

СТЪПКА 6

Моля изтеглете Farbar Service Scanner и я стартирайте.

[*]Сложете всички отметки и натиснете бутона "

Scan". [*]Ще се създаде лог файл с името (FSS.txt) в папката откъдето стартирате инструмента. [*]Копирайте съдържанието на лог файла в следващия си пост.

СТЪПКА 8

Изтеглете MiniToolBox.exe и го запазете на десктопа.
Сложете всички отметки и натиснете Go.
Прикачете файла Result.txt в следващия си пост.

СТЪПКА 9

Изтеглете Security Check от screen317 от този линк или и го запаметете на вашия десктоп.

[*]Кликнете два пъти върху

SecurityCheck.exe и следвайте инструкциите. [*]Накрая, автоматично ще се отвори текстов документ, наречен checkup.txt, моля поставете съдържанието му в следващия Ви коментар в тази тема. [*]Направете и нова проверка с DDS и прикачете двата файла които ще се създадат.

СТЪПКА 10

[*]Отворете

следния сайт и изтеглете RKill.exe и ги запазете на вашия десктоп. [*]Стартирате програмата с двоен клик върху файла и изчакайте търпеливо. [*]След приключване на проверката ще се генерира лог файл с извършените процедури. [*]Прикачете лог файла в следващия си пост.

22 април 201313 г.

Автор

Здравейте, първо искам да ви благодаря за отделеното време и неоценимата, поне от ъгъла на моите познания по темата помощ. Икам да се извиня за забавянето от моя страна, което искам да отбележа не се дължи на моята ангажираност, несериозност или нежелание да се справя с проблема, с който се борим, а на непреодолими трудности на пръв поглед, с които се зблъсках при изпълнението на поставените ми задачи: cлед стартирането на TDSSKiller и последвалия рестарт - TDSSKiller инициализацията забива на 40% със малко съобщение за грешка с текст : "Erorr Handling". След доста четене по темата от Safe mode и установяването на появяване на непознато устройство в Device manager разбрах, че съм най-подло предаден от така наречения ПС акселометър (ST Microelectronics) или по-точно от драйвера който го управлява - ST Microelectronics DE351DL Motion Sensor Driver. Последвалото сваляне и инсталаця на въпросния драйвър през Safe mode (от официалния сайт на DELL) мина нормално и изпълнен надежда отново се отправих към Normal mode. Всички мои надежди бяха тотално разбити отново на 40%-ят процент от инициализацията на TDSSKiller и единствените разлики от преди са: липсата на съобщение за грешка и това че нямам непознато устройство в Divice manager. В последвалите няколко часа пробвах всякакви варианти за стартиране включващи забраната на PC accelerometer, деинсталация и преинсталация на въпросния драйвър...и т.н. - всички неуспешни - т.е. със или без това устройство, със или без драйвър резултатът е забиване на 20-та -30-та секунда от стартиране в Normal mode . С други думи подлото предателство не е било проблемът или поне не единствения проблем. След като установих това се насочих към Kaspersky TDSSKiller - ако го стартирам след рестарт-а системата забива на 40-ят %, ако не го стартирам - системата замръзва след 20-30 секунди - приблизително по същото време, което ми навява скръбното усещане, че и той не е причинителя на проблема. Пиша това след като установих правилността на старата максима, че няма начин ако правя едно и също, да очаквам различен резултат - в състояние на пълна липса на идеи и леко обземащо ме усещане на безнадежност, освен ако вие не предложите нещо.

Редактирано 22 април 201313 г. от Pokrust (преглед на промените)

22 април 201313 г.

Пробвайте да деинсталирате временно AVG 2013 и Loaris.

След това почистете остатъциоте от AVG с този инструмент:

AVG Remover(64bit) 2013 (avg_remover_stf_x64_2013_2706.exe)

Сега вече пробвайте отново с TDSSKiller, ако отново забие просто продължете с останалите стъпки...странни неща стават с вашата система - и OTL и TDSSKiller правят проблеми, което не е невъзможно, но не е често явление. Ще го чоплим.

22 април 201313 г.

Автор

След изпълняване на указаният стартирах нормално.

Ето и първия лог от TDSSKiller:

18:11:10.0361 2936 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42 18:11:10.0704 2936 ============================================================ 18:11:10.0704 2936 Current date / time: 2013/04/22 18:11:10.0704 18:11:10.0704 2936 SystemInfo: 18:11:10.0704 2936 18:11:10.0704 2936 OS Version: 6.1.7601 ServicePack: 1.0 18:11:10.0704 2936 Product type: Workstation 18:11:10.0704 2936 ComputerName: DIMO-PC 18:11:10.0704 2936 UserName: Dimo 18:11:10.0704 2936 Windows directory: C:Windows 18:11:10.0704 2936 System windows directory: C:Windows 18:11:10.0704 2936 Running under WOW64 18:11:10.0704 2936 Processor architecture: Intel x64 18:11:10.0704 2936 Number of processors: 4 18:11:10.0704 2936 Page size: 0x1000 18:11:10.0704 2936 Boot type: Normal boot 18:11:10.0704 2936 ============================================================ 18:11:18.0247 2936 BG loaded 18:11:18.0856 2936 Drive DeviceHarddisk0DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 18:11:18.0872 2936 ============================================================ 18:11:18.0872 2936 DeviceHarddisk0DR0: 18:11:18.0872 2936 MBR partitions: 18:11:18.0872 2936 DeviceHarddisk0DR0Partition1: MBR, Type 0x7, StartLBA 0x46000, BlocksNum 0xC31E000 18:11:18.0872 2936 DeviceHarddisk0DR0Partition2: MBR, Type 0x7, StartLBA 0xC364000, BlocksNum 0x2E021800 18:11:18.0872 2936 ============================================================ 18:11:18.0997 2936 C: <-> DeviceHarddisk0DR0Partition1 18:11:19.0075 2936 D: <-> DeviceHarddisk0DR0Partition2 18:11:19.0075 2936 ============================================================ 18:11:19.0075 2936 Initialize success 18:11:19.0075 2936 ============================================================ 18:15:50.0434 2188 ============================================================ 18:15:50.0434 2188 Scan started 18:15:50.0434 2188 Mode: Manual; SigCheck; TDLFS; 18:15:50.0434 2188 ============================================================ 18:15:51.0167 2188 ================ Scan system memory ======================== 18:15:51.0167 2188 System memory - ok 18:15:51.0167 2188 ================ Scan services ============================= 18:15:51.0338 2188 [ 0BDA0890A7366895F57A58A66F39BC72 ] 04616106 C:Windowssystem32drivers12052621.sys 18:15:51.0338 2188 Suspicious file (Forged): C:Windowssystem32drivers12052621.sys. Real md5: 0BDA0890A7366895F57A58A66F39BC72, Fake md5: 8CCC23B22BB3F48403FD6AA37B6B0772 18:15:51.0338 2188 04616106 ( ForgedFile.Multi.Generic ) - warning 18:15:51.0338 2188 04616106 - detected ForgedFile.Multi.Generic (1) 18:15:51.0370 2188 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:Windowssystem32drivers1394ohci.sys 18:15:51.0463 2188 1394ohci - ok 18:15:51.0526 2188 [ F146E2BA475893DD77B2370DC1211FC6 ] 37537167 C:Windowssystem32drivers96211183.sys 18:15:51.0557 2188 37537167 - ok 18:15:51.0604 2188 [ F146E2BA475893DD77B2370DC1211FC6 ] 41619005 C:Windowssystem32drivers05894890.sys 18:15:51.0604 2188 41619005 - ok 18:15:51.0666 2188 [ F146E2BA475893DD77B2370DC1211FC6 ] 44778042 C:Windowssystem32drivers25194003.sys 18:15:51.0682 2188 44778042 - ok 18:15:51.0728 2188 [ F146E2BA475893DD77B2370DC1211FC6 ] 51690739 C:Windowssystem32drivers12380158.sys 18:15:51.0744 2188 51690739 - ok 18:15:51.0760 2188 [ F146E2BA475893DD77B2370DC1211FC6 ] 63780279 C:Windowssystem32drivers80241514.sys 18:15:51.0775 2188 63780279 - ok 18:15:51.0806 2188 [ C49C56B35BFC6CDA8D1FDCAD2885568F ] Acceler C:Windowssystem32DRIVERSAcceler.sys 18:15:51.0822 2188 Acceler - ok 18:15:51.0853 2188 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:Windowssystem32driversACPI.sys 18:15:51.0869 2188 ACPI - ok 18:15:51.0916 2188 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:Windowssystem32driversacpipmi.sys 18:15:51.0994 2188 AcpiPmi - ok 18:15:52.0118 2188 [ D63D78442F0F100DF213E36B705C92FD ] Active@ Disk Monitor C:Program Files (x86)LSoft Technologies IncActive@ Hard Disk MonitorDiskMonitorService.exe 18:15:52.0150 2188 Active@ Disk Monitor - ok 18:15:52.0228 2188 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe 18:15:52.0243 2188 AdobeARMservice - ok 18:15:52.0384 2188 [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:WindowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe 18:15:52.0399 2188 AdobeFlashPlayerUpdateSvc - ok 18:15:52.0430 2188 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:Windowssystem32DRIVERSadp94xx.sys 18:15:52.0446 2188 adp94xx - ok 18:15:52.0477 2188 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:Windowssystem32DRIVERSadpahci.sys 18:15:52.0493 2188 adpahci - ok 18:15:52.0540 2188 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:Windowssystem32DRIVERSadpu320.sys 18:15:52.0555 2188 adpu320 - ok 18:15:52.0571 2188 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:WindowsSystem32aelupsvc.dll 18:15:52.0727 2188 AeLookupSvc - ok 18:15:52.0836 2188 [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters C:WindowsSystem32DriverStoreFileRepositorystwrt64.inf_amd64_neutral_0057cbec48a2d7cfAESTSr64.exe 18:15:52.0898 2188 AESTFilters - ok 18:15:52.0914 2188 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:Windowssystem32driversafd.sys 18:15:52.0976 2188 AFD - ok 18:15:53.0008 2188 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:Windowssystem32driversagp440.sys 18:15:53.0023 2188 agp440 - ok 18:15:53.0054 2188 [ 3290D6946B5E30E70414990574883DDB ] ALG C:WindowsSystem32alg.exe 18:15:53.0086 2188 ALG - ok 18:15:53.0101 2188 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:Windowssystem32driversaliide.sys 18:15:53.0117 2188 aliide - ok 18:15:53.0148 2188 [ 388E79AF1C9E4D84A8559FA77F804CF6 ] AMD External Events Utility C:Windowssystem32atiesrxx.exe 18:15:53.0210 2188 AMD External Events Utility - ok 18:15:53.0210 2188 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:Windowssystem32driversamdide.sys 18:15:53.0226 2188 amdide - ok 18:15:53.0242 2188 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:Windowssystem32DRIVERSamdk8.sys 18:15:53.0304 2188 AmdK8 - ok 18:15:53.0429 2188 [ 79A11CB10FF02A8425DABBB040249F7D ] amdkmdag C:Windowssystem32DRIVERSatikmdag.sys 18:15:53.0554 2188 amdkmdag - ok 18:15:53.0569 2188 [ 6F6D47246FBB0CF65619684A0F89179E ] amdkmdap C:Windowssystem32DRIVERSatikmpag.sys 18:15:53.0616 2188 amdkmdap - ok 18:15:53.0647 2188 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:Windowssystem32DRIVERSamdppm.sys 18:15:53.0678 2188 AmdPPM - ok 18:15:53.0710 2188 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:Windowssystem32driversamdsata.sys 18:15:53.0725 2188 amdsata - ok 18:15:53.0741 2188 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:Windowssystem32DRIVERSamdsbs.sys 18:15:53.0756 2188 amdsbs - ok 18:15:53.0772 2188 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:Windowssystem32driversamdxata.sys 18:15:53.0788 2188 amdxata - ok 18:15:53.0819 2188 [ 4DE0D5D747A73797C95A97DCCE5018B5 ] androidusb C:Windowssystem32Driversssadadb.sys 18:15:53.0834 2188 androidusb - ok 18:15:53.0866 2188 [ 89A69C3F2F319B43379399547526D952 ] AppID C:Windowssystem32driversappid.sys 18:15:54.0037 2188 AppID - ok 18:15:54.0053 2188 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:WindowsSystem32appidsvc.dll 18:15:54.0131 2188 AppIDSvc - ok 18:15:54.0162 2188 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:WindowsSystem32appinfo.dll 18:15:54.0224 2188 Appinfo - ok 18:15:54.0240 2188 [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt C:WindowsSystem32appmgmts.dll 18:15:54.0271 2188 AppMgmt - ok 18:15:54.0287 2188 [ C484F8CEB1717C540242531DB7845C4E ] arc C:Windowssystem32DRIVERSarc.sys 18:15:54.0302 2188 arc - ok 18:15:54.0334 2188 [ 29E7252FA743B15BCE1A2245C5643A02 ] archlp C:Windowssyswow64driversarchlp.sys 18:15:54.0349 2188 archlp - ok 18:15:54.0365 2188 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:Windowssystem32DRIVERSarcsas.sys 18:15:54.0380 2188 arcsas - ok 18:15:54.0412 2188 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:Windowssystem32DRIVERSasyncmac.sys 18:15:54.0458 2188 AsyncMac - ok 18:15:54.0490 2188 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:Windowssystem32driversatapi.sys 18:15:54.0505 2188 atapi - ok 18:15:54.0536 2188 [ 2D648572BA9A610952FCAFBA1E119C2D ] AtiHdmiService C:Windowssystem32driversAtiHdmi.sys 18:15:54.0536 2188 AtiHdmiService - ok 18:15:54.0568 2188 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:WindowsSystem32Audiosrv.dll 18:15:54.0646 2188 AudioEndpointBuilder - ok 18:15:54.0661 2188 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:WindowsSystem32Audiosrv.dll 18:15:54.0708 2188 AudioSrv - ok 18:15:54.0739 2188 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:WindowsSystem32AxInstSV.dll 18:15:54.0786 2188 AxInstSV - ok 18:15:54.0802 2188 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:Windowssystem32DRIVERSbxvbda.sys 18:15:54.0848 2188 b06bdrv - ok 18:15:54.0864 2188 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:Windowssystem32DRIVERSb57nd60a.sys 18:15:54.0911 2188 b57nd60a - ok 18:15:54.0926 2188 [ E001DD475A7C27EBE5A0DB45C11BAD71 ] BCM42RLY C:Windowssystem32driversBCM42RLY.sys 18:15:54.0942 2188 BCM42RLY - ok 18:15:55.0004 2188 [ 37394D3553E220FB732C21E217E1BD8B ] BCM43XX C:Windowssystem32DRIVERSbcmwl664.sys 18:15:55.0051 2188 BCM43XX - ok 18:15:55.0082 2188 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:WindowsSystem32bdesvc.dll 18:15:55.0098 2188 BDESVC - ok 18:15:55.0098 2188 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:Windowssystem32driversBeep.sys 18:15:55.0160 2188 Beep - ok 18:15:55.0176 2188 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:Windowssystem32DRIVERSblbdrive.sys 18:15:55.0207 2188 blbdrive - ok 18:15:55.0238 2188 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:Windowssystem32DRIVERSbowser.sys 18:15:55.0270 2188 bowser - ok 18:15:55.0285 2188 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:Windowssystem32DRIVERSBrFiltLo.sys 18:15:55.0348 2188 BrFiltLo - ok 18:15:55.0363 2188 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:Windowssystem32DRIVERSBrFiltUp.sys 18:15:55.0379 2188 BrFiltUp - ok 18:15:55.0426 2188 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:WindowsSystem32browser.dll 18:15:55.0441 2188 Browser - ok 18:15:55.0457 2188 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:WindowsSystem32DriversBrserid.sys 18:15:55.0504 2188 Brserid - ok 18:15:55.0519 2188 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:WindowsSystem32DriversBrSerWdm.sys 18:15:55.0550 2188 BrSerWdm - ok 18:15:55.0566 2188 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:WindowsSystem32DriversBrUsbMdm.sys 18:15:55.0597 2188 BrUsbMdm - ok 18:15:55.0613 2188 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:WindowsSystem32DriversBrUsbSer.sys 18:15:55.0644 2188 BrUsbSer - ok 18:15:55.0660 2188 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:Windowssystem32DRIVERSbthmodem.sys 18:15:55.0691 2188 BTHMODEM - ok 18:15:55.0722 2188 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:Windowssystem32bthserv.dll 18:15:55.0769 2188 bthserv - ok 18:15:55.0784 2188 [ B8BD2BB284668C84865658C77574381A ] cdfs C:Windowssystem32DRIVERScdfs.sys 18:15:55.0831 2188 cdfs - ok 18:15:55.0862 2188 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:Windowssystem32driverscdrom.sys 18:15:55.0878 2188 cdrom - ok 18:15:55.0909 2188 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:WindowsSystem32certprop.dll 18:15:55.0956 2188 CertPropSvc - ok 18:15:55.0972 2188 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:Windowssystem32DRIVERScirclass.sys 18:15:55.0987 2188 circlass - ok 18:15:56.0003 2188 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:Windowssystem32CLFS.sys 18:15:56.0034 2188 CLFS - ok 18:15:56.0081 2188 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:WindowsMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe 18:15:56.0096 2188 clr_optimization_v2.0.50727_32 - ok 18:15:56.0128 2188 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:WindowsMicrosoft.NETFramework64v2.0.50727mscorsvw.exe 18:15:56.0143 2188 clr_optimization_v2.0.50727_64 - ok 18:15:56.0190 2188 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe 18:15:56.0206 2188 clr_optimization_v4.0.30319_32 - ok 18:15:56.0252 2188 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:WindowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe 18:15:56.0268 2188 clr_optimization_v4.0.30319_64 - ok 18:15:56.0268 2188 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:Windowssystem32DRIVERSCmBatt.sys 18:15:56.0299 2188 CmBatt - ok 18:15:56.0330 2188 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:Windowssystem32driverscmdide.sys 18:15:56.0346 2188 cmdide - ok 18:15:56.0377 2188 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:Windowssystem32Driverscng.sys 18:15:56.0408 2188 CNG - ok 18:15:56.0424 2188 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:Windowssystem32DRIVERScompbatt.sys 18:15:56.0440 2188 Compbatt - ok 18:15:56.0455 2188 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:Windowssystem32driversCompositeBus.sys 18:15:56.0486 2188 CompositeBus - ok 18:15:56.0486 2188 COMSysApp - ok 18:15:56.0502 2188 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:Windowssystem32DRIVERScrcdisk.sys 18:15:56.0518 2188 crcdisk - ok 18:15:56.0564 2188 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:Windowssystem32cryptsvc.dll 18:15:56.0596 2188 CryptSvc - ok 18:15:56.0627 2188 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC C:Windowssystem32driverscsc.sys 18:15:56.0689 2188 CSC - ok 18:15:56.0720 2188 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService C:WindowsSystem32cscsvc.dll 18:15:56.0736 2188 CscService - ok 18:15:56.0783 2188 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:Windowssystem32rpcss.dll 18:15:56.0830 2188 DcomLaunch - ok 18:15:56.0845 2188 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:WindowsSystem32defragsvc.dll 18:15:56.0908 2188 defragsvc - ok 18:15:56.0939 2188 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:Windowssystem32Driversdfsc.sys 18:15:56.0986 2188 DfsC - ok 18:15:57.0017 2188 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:Windowssystem32dhcpcore.dll 18:15:57.0048 2188 Dhcp - ok 18:15:57.0079 2188 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:Windowssystem32driversdiscache.sys 18:15:57.0126 2188 discache - ok 18:15:57.0142 2188 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:Windowssystem32DRIVERSdisk.sys 18:15:57.0157 2188 Disk - ok 18:15:57.0298 2188 [ 429986F0BCFC31C254AB392722CAFFF0 ] Diskeeper C:Program FilesDiskeeper CorporationDiskeeperDkService.exe 18:15:57.0344 2188 Diskeeper - ok 18:15:57.0376 2188 [ 20C394C80113D77406DF8F1ADC720B01 ] DKRtWrt C:Windowssystem32DRIVERSDKRtWrt.sys 18:15:57.0376 2188 DKRtWrt - ok 18:15:57.0407 2188 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:WindowsSystem32dnsrslvr.dll 18:15:57.0454 2188 Dnscache - ok 18:15:57.0469 2188 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:WindowsSystem32dot3svc.dll 18:15:57.0532 2188 dot3svc - ok 18:15:57.0547 2188 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:Windowssystem32dps.dll 18:15:57.0594 2188 DPS - ok 18:15:57.0610 2188 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:Windowssystem32driversdrmkaud.sys 18:15:57.0641 2188 drmkaud - ok 18:15:57.0688 2188 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:WindowsSystem32driversdxgkrnl.sys 18:15:57.0703 2188 DXGKrnl - ok 18:15:57.0734 2188 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:WindowsSystem32eapsvc.dll 18:15:57.0781 2188 EapHost - ok 18:15:57.0859 2188 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:Windowssystem32DRIVERSevbda.sys 18:15:57.0968 2188 ebdrv - ok 18:15:58.0000 2188 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:WindowsSystem32lsass.exe 18:15:58.0031 2188 EFS - ok 18:15:58.0078 2188 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:WindowsehomeehRecvr.exe 18:15:58.0124 2188 ehRecvr - ok 18:15:58.0156 2188 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:Windowsehomeehsched.exe 18:15:58.0187 2188 ehSched - ok 18:15:58.0218 2188 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:Windowssystem32DRIVERSelxstor.sys 18:15:58.0234 2188 elxstor - ok 18:15:58.0249 2188 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:Windowssystem32driverserrdev.sys 18:15:58.0280 2188 ErrDev - ok 18:15:58.0312 2188 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:Windowssystem32es.dll 18:15:58.0358 2188 EventSystem - ok 18:15:58.0374 2188 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:Windowssystem32driversexfat.sys 18:15:58.0436 2188 exfat - ok 18:15:58.0452 2188 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:Windowssystem32driversfastfat.sys 18:15:58.0514 2188 fastfat - ok 18:15:58.0546 2188 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:Windowssystem32fxssvc.exe 18:15:58.0577 2188 Fax - ok 18:15:58.0592 2188 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:Windowssystem32DRIVERSfdc.sys 18:15:58.0639 2188 fdc - ok 18:15:58.0655 2188 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:Windowssystem32fdPHost.dll 18:15:58.0702 2188 fdPHost - ok 18:15:58.0733 2188 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:Windowssystem32fdrespub.dll 18:15:58.0780 2188 FDResPub - ok 18:15:58.0795 2188 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:Windowssystem32driversfileinfo.sys 18:15:58.0811 2188 FileInfo - ok 18:15:58.0826 2188 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:Windowssystem32driversfiletrace.sys 18:15:58.0873 2188 Filetrace - ok 18:15:58.0873 2188 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:Windowssystem32DRIVERSflpydisk.sys 18:15:58.0889 2188 flpydisk - ok 18:15:58.0920 2188 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:Windowssystem32driversfltmgr.sys 18:15:58.0936 2188 FltMgr - ok 18:15:58.0982 2188 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:Windowssystem32FntCache.dll 18:15:59.0014 2188 FontCache - ok 18:15:59.0076 2188 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:WindowsMicrosoft.NetFramework64v3.0WPFPresentationFontCache.exe 18:15:59.0092 2188 FontCache3.0.0.0 - ok 18:15:59.0107 2188 [ D43703496149971890703B4B1B723EAC ] FsDepends C:Windowssystem32driversFsDepends.sys 18:15:59.0123 2188 FsDepends - ok 18:15:59.0138 2188 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:Windowssystem32driversFs_Rec.sys 18:15:59.0154 2188 Fs_Rec - ok 18:15:59.0185 2188 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:Windowssystem32DRIVERSfvevol.sys 18:15:59.0201 2188 fvevol - ok 18:15:59.0216 2188 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:Windowssystem32DRIVERSgagp30kx.sys 18:15:59.0232 2188 gagp30kx - ok 18:15:59.0294 2188 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:WindowsSystem32gpsvc.dll 18:15:59.0341 2188 gpsvc - ok 18:15:59.0435 2188 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:Program Files (x86)GoogleUpdateGoogleUpdate.exe 18:15:59.0450 2188 gupdate - ok 18:15:59.0497 2188 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:Program Files (x86)GoogleUpdateGoogleUpdate.exe 18:15:59.0497 2188 gupdatem - ok 18:15:59.0528 2188 [ C1B577B2169900F4CF7190C39F085794 ] gusvc C:Program Files (x86)GoogleCommonGoogle UpdaterGoogleUpdaterService.exe 18:15:59.0544 2188 gusvc - ok 18:15:59.0560 2188 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:Windowssystem32drivershcw85cir.sys 18:15:59.0575 2188 hcw85cir - ok 18:15:59.0606 2188 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:Windowssystem32driversHdAudio.sys 18:15:59.0638 2188 HdAudAddService - ok 18:15:59.0653 2188 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:Windowssystem32driversHDAudBus.sys 18:15:59.0684 2188 HDAudBus - ok 18:15:59.0716 2188 [ B6AC71AAA2B10848F57FC49D55A651AF ] HECIx64 C:Windowssystem32DRIVERSHECIx64.sys 18:15:59.0716 2188 HECIx64 - ok 18:15:59.0747 2188 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:Windowssystem32DRIVERSHidBatt.sys 18:15:59.0762 2188 HidBatt - ok 18:15:59.0794 2188 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:Windowssystem32DRIVERShidbth.sys 18:15:59.0809 2188 HidBth - ok 18:15:59.0840 2188 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:Windowssystem32DRIVERShidir.sys 18:15:59.0872 2188 HidIr - ok 18:15:59.0887 2188 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:Windowssystem32hidserv.dll 18:15:59.0950 2188 hidserv - ok 18:15:59.0981 2188 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:Windowssystem32DRIVERShidusb.sys 18:15:59.0996 2188 HidUsb - ok 18:16:00.0028 2188 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:Windowssystem32kmsvc.dll 18:16:00.0090 2188 hkmsvc - ok 18:16:00.0121 2188 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:Windowssystem32ListSvc.dll 18:16:00.0137 2188 HomeGroupListener - ok 18:16:00.0152 2188 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:Windowssystem32provsvc.dll 18:16:00.0168 2188 HomeGroupProvider - ok 18:16:00.0199 2188 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:Windowssystem32driversHpSAMD.sys 18:16:00.0215 2188 HpSAMD - ok 18:16:00.0246 2188 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:Windowssystem32driversHTTP.sys 18:16:00.0324 2188 HTTP - ok 18:16:00.0340 2188 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:Windowssystem32drivershwpolicy.sys 18:16:00.0355 2188 hwpolicy - ok 18:16:00.0371 2188 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:Windowssystem32driversi8042prt.sys 18:16:00.0386 2188 i8042prt - ok 18:16:00.0402 2188 [ ABBF174CB394F5C437410A788B7E404A ] iaStor C:Windowssystem32DRIVERSiaStor.sys 18:16:00.0418 2188 iaStor - ok 18:16:00.0480 2188 [ 31A0E93CDF29007D6C6FFFB632F375ED ] IAStorDataMgrSvc C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe 18:16:00.0480 2188 IAStorDataMgrSvc - ok 18:16:00.0542 2188 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:Windowssystem32driversiaStorV.sys 18:16:00.0558 2188 iaStorV - ok 18:16:00.0605 2188 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:WindowsMicrosoft.NETFramework64v3.0Windows Communication Foundationinfocard.exe 18:16:00.0652 2188 idsvc - ok 18:16:00.0683 2188 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:Windowssystem32DRIVERSiirsp.sys 18:16:00.0698 2188 iirsp - ok 18:16:00.0745 2188 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:WindowsSystem32ikeext.dll 18:16:00.0823 2188 IKEEXT - ok 18:16:00.0886 2188 [ FD5EF1D0210CB9C0773BBA7CA360D762 ] InstallFilterService C:Program Files (x86)STMicroelectronicsAccelerometerInstallFilterService.exe 18:16:00.0901 2188 InstallFilterService ( UnsignedFile.Multi.Generic ) - warning 18:16:00.0901 2188 InstallFilterService - detected UnsignedFile.Multi.Generic (1) 18:16:00.0917 2188 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:Windowssystem32driversintelide.sys 18:16:00.0932 2188 intelide - ok 18:16:00.0948 2188 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:Windowssystem32DRIVERSintelppm.sys 18:16:00.0964 2188 intelppm - ok 18:16:01.0010 2188 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:Windowssystem32ipbusenum.dll 18:16:01.0057 2188 IPBusEnum - ok 18:16:01.0088 2188 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:Windowssystem32DRIVERSipfltdrv.sys 18:16:01.0135 2188 IpFilterDriver - ok 18:16:01.0182 2188 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:Windowssystem32driversIPMIDrv.sys 18:16:01.0213 2188 IPMIDRV - ok 18:16:01.0229 2188 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:Windowssystem32driversipnat.sys 18:16:01.0291 2188 IPNAT - ok 18:16:01.0307 2188 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:Windowssystem32driversirenum.sys 18:16:01.0369 2188 IRENUM - ok 18:16:01.0385 2188 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:Windowssystem32driversisapnp.sys 18:16:01.0400 2188 isapnp - ok 18:16:01.0416 2188 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:Windowssystem32driversmsiscsi.sys 18:16:01.0432 2188 iScsiPrt - ok 18:16:01.0447 2188 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:Windowssystem32DRIVERSkbdclass.sys 18:16:01.0463 2188 kbdclass - ok 18:16:01.0463 2188 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:Windowssystem32DRIVERSkbdhid.sys 18:16:01.0494 2188 kbdhid - ok 18:16:01.0510 2188 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:Windowssystem32lsass.exe 18:16:01.0525 2188 KeyIso - ok 18:16:01.0556 2188 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:Windowssystem32Driversksecdd.sys 18:16:01.0572 2188 KSecDD - ok 18:16:01.0603 2188 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:Windowssystem32Driversksecpkg.sys 18:16:01.0619 2188 KSecPkg - ok 18:16:01.0619 2188 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:Windowssystem32driversksthunk.sys 18:16:01.0681 2188 ksthunk - ok 18:16:01.0697 2188 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:Windowssystem32msdtckrm.dll 18:16:01.0759 2188 KtmRm - ok 18:16:01.0790 2188 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:Windowssystem32srvsvc.dll 18:16:01.0853 2188 LanmanServer - ok 18:16:01.0884 2188 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:WindowsSystem32wkssvc.dll 18:16:01.0931 2188 LanmanWorkstation - ok 18:16:01.0946 2188 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:Windowssystem32DRIVERSlltdio.sys 18:16:02.0009 2188 lltdio - ok 18:16:02.0056 2188 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:WindowsSystem32lltdsvc.dll 18:16:02.0102 2188 lltdsvc - ok 18:16:02.0118 2188 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:WindowsSystem32lmhsvc.dll 18:16:02.0149 2188 lmhosts - ok 18:16:02.0196 2188 [ 7485FBCEF9136F530953575E2977859D ] LMS C:Program Files (x86)IntelIntel® Management Engine ComponentsLMSLMS.exe 18:16:02.0196 2188 LMS - ok 18:16:02.0212 2188 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:Windowssystem32DRIVERSlsi_fc.sys 18:16:02.0227 2188 LSI_FC - ok 18:16:02.0243 2188 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:Windowssystem32DRIVERSlsi_sas.sys 18:16:02.0258 2188 LSI_SAS - ok 18:16:02.0274 2188 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:Windowssystem32DRIVERSlsi_sas2.sys 18:16:02.0290 2188 LSI_SAS2 - ok 18:16:02.0305 2188 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:Windowssystem32DRIVERSlsi_scsi.sys 18:16:02.0321 2188 LSI_SCSI - ok 18:16:02.0336 2188 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:Windowssystem32driversluafv.sys 18:16:02.0383 2188 luafv - ok 18:16:02.0399 2188 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:Windowssystem32Mcx2Svc.dll 18:16:02.0414 2188 Mcx2Svc - ok 18:16:02.0430 2188 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:Windowssystem32DRIVERSmegasas.sys 18:16:02.0446 2188 megasas - ok 18:16:02.0461 2188 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:Windowssystem32DRIVERSMegaSR.sys 18:16:02.0477 2188 MegaSR - ok 18:16:02.0539 2188 [ 033B947AF4A997820E86FCB070B1F450 ] Microsoft Office Groove Audit Service C:Program Files (x86)Microsoft OfficeOffice12GrooveAuditService.exe 18:16:02.0555 2188 Microsoft Office Groove Audit Service - ok 18:16:02.0570 2188 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:Windowssystem32mmcss.dll 18:16:02.0633 2188 MMCSS - ok 18:16:02.0648 2188 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:Windowssystem32driversmodem.sys 18:16:02.0711 2188 Modem - ok 18:16:02.0726 2188 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:Windowssystem32DRIVERSmonitor.sys 18:16:02.0758 2188 monitor - ok 18:16:02.0789 2188 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:Windowssystem32DRIVERSmouclass.sys 18:16:02.0789 2188 mouclass - ok 18:16:02.0804 2188 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:Windowssystem32DRIVERSmouhid.sys 18:16:02.0836 2188 mouhid - ok 18:16:02.0867 2188 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:Windowssystem32driversmountmgr.sys 18:16:02.0882 2188 mountmgr - ok 18:16:02.0976 2188 [ 7EDBBB9351A38C6BB0FE98CFD44DB430 ] MozillaMaintenance C:Program Files (x86)Mozilla Maintenance Servicemaintenanceservice.exe 18:16:02.0992 2188 MozillaMaintenance - ok 18:16:03.0023 2188 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:Windowssystem32driversmpio.sys 18:16:03.0038 2188 mpio - ok 18:16:03.0054 2188 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:Windowssystem32driversmpsdrv.sys 18:16:03.0101 2188 mpsdrv - ok 18:16:03.0132 2188 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:Windowssystem32driversmrxdav.sys 18:16:03.0163 2188 MRxDAV - ok 18:16:03.0194 2188 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:Windowssystem32DRIVERSmrxsmb.sys 18:16:03.0226 2188 mrxsmb - ok 18:16:03.0257 2188 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:Windowssystem32DRIVERSmrxsmb10.sys 18:16:03.0288 2188 mrxsmb10 - ok 18:16:03.0304 2188 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:Windowssystem32DRIVERSmrxsmb20.sys 18:16:03.0319 2188 mrxsmb20 - ok 18:16:03.0350 2188 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:Windowssystem32driversmsahci.sys 18:16:03.0366 2188 msahci - ok 18:16:03.0382 2188 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:Windowssystem32driversmsdsm.sys 18:16:03.0397 2188 msdsm - ok 18:16:03.0428 2188 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:WindowsSystem32msdtc.exe 18:16:03.0444 2188 MSDTC - ok 18:16:03.0475 2188 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:Windowssystem32driversMsfs.sys 18:16:03.0506 2188 Msfs - ok 18:16:03.0522 2188 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:WindowsSystem32driversmshidkmdf.sys 18:16:03.0569 2188 mshidkmdf - ok 18:16:03.0600 2188 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:Windowssystem32driversmsisadrv.sys 18:16:03.0600 2188 msisadrv - ok 18:16:03.0647 2188 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:Windowssystem32iscsiexe.dll 18:16:03.0694 2188 MSiSCSI - ok 18:16:03.0709 2188 msiserver - ok 18:16:03.0725 2188 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:Windowssystem32driversMSKSSRV.sys 18:16:03.0772 2188 MSKSSRV - ok 18:16:03.0787 2188 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:Windowssystem32driversMSPCLOCK.sys 18:16:03.0850 2188 MSPCLOCK - ok 18:16:03.0865 2188 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:Windowssystem32driversMSPQM.sys 18:16:03.0928 2188 MSPQM - ok 18:16:03.0959 2188 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:Windowssystem32driversMsRPC.sys 18:16:03.0974 2188 MsRPC - ok 18:16:03.0990 2188 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:Windowssystem32driversmssmbios.sys 18:16:03.0990 2188 mssmbios - ok 18:16:04.0006 2188 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:Windowssystem32driversMSTEE.sys 18:16:04.0068 2188 MSTEE - ok 18:16:04.0084 2188 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:Windowssystem32DRIVERSMTConfig.sys 18:16:04.0099 2188 MTConfig - ok 18:16:04.0115 2188 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:Windowssystem32Driversmup.sys 18:16:04.0130 2188 Mup - ok 18:16:04.0177 2188 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:Windowssystem32qagentRT.dll 18:16:04.0240 2188 napagent - ok 18:16:04.0271 2188 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:Windowssystem32DRIVERSnwifi.sys 18:16:04.0302 2188 NativeWifiP - ok 18:16:04.0333 2188 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:Windowssystem32driversndis.sys 18:16:04.0380 2188 NDIS - ok 18:16:04.0396 2188 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:Windowssystem32DRIVERSndiscap.sys 18:16:04.0442 2188 NdisCap - ok 18:16:04.0474 2188 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:Windowssystem32DRIVERSndistapi.sys 18:16:04.0520 2188 NdisTapi - ok 18:16:04.0552 2188 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:Windowssystem32DRIVERSndisuio.sys 18:16:04.0598 2188 Ndisuio - ok 18:16:04.0630 2188 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:Windowssystem32DRIVERSndiswan.sys 18:16:04.0692 2188 NdisWan - ok 18:16:04.0723 2188 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:Windowssystem32driversNDProxy.sys 18:16:04.0770 2188 NDProxy - ok 18:16:04.0786 2188 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:Windowssystem32DRIVERSnetbios.sys 18:16:04.0848 2188 NetBIOS - ok 18:16:04.0879 2188 [ 09594D1089C523423B32A4229263F068 ] NetBT C:Windowssystem32DRIVERSnetbt.sys 18:16:04.0926 2188 NetBT - ok 18:16:04.0942 2188 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:Windowssystem32lsass.exe 18:16:04.0957 2188 Netlogon - ok 18:16:04.0973 2188 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:WindowsSystem32netman.dll 18:16:05.0035 2188 Netman - ok 18:16:05.0066 2188 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:WindowsSystem32netprofm.dll 18:16:05.0113 2188 netprofm - ok 18:16:05.0144 2188 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:WindowsMicrosoft.NETFramework64v3.0Windows Communication FoundationSMSvcHost.exe 18:16:05.0160 2188 NetTcpPortSharing - ok 18:16:05.0176 2188 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:Windowssystem32DRIVERSnfrd960.sys 18:16:05.0176 2188 nfrd960 - ok 18:16:05.0207 2188 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:WindowsSystem32nlasvc.dll 18:16:05.0254 2188 NlaSvc - ok 18:16:05.0316 2188 [ 5FE6F8C05F0769BBB74AFAC11453B182 ] nmwcd C:Windowssystem32driversccdcmbx64.sys 18:16:05.0347 2188 nmwcd - ok 18:16:05.0378 2188 [ 73C929945C0850B8D1FE2FEA05FDF05D ] nmwcdc C:Windowssystem32driversccdcmbox64.sys 18:16:05.0394 2188 nmwcdc - ok 18:16:05.0410 2188 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:Windowssystem32driversNpfs.sys 18:16:05.0456 2188 Npfs - ok 18:16:05.0472 2188 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:Windowssystem32nsisvc.dll 18:16:05.0519 2188 nsi - ok 18:16:05.0534 2188 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:Windowssystem32driversnsiproxy.sys 18:16:05.0597 2188 nsiproxy - ok 18:16:05.0644 2188 [ B8965FB53551B5455630A4B804D0791F ] Ntfs C:Windowssystem32driversNtfs.sys 18:16:05.0706 2188 Ntfs - ok 18:16:05.0722 2188 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:Windowssystem32driversNull.sys 18:16:05.0784 2188 Null - ok 18:16:05.0800 2188 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:Windowssystem32driversnvraid.sys 18:16:05.0815 2188 nvraid - ok 18:16:05.0846 2188 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:Windowssystem32driversnvstor.sys 18:16:05.0862 2188 nvstor - ok 18:16:05.0893 2188 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:Windowssystem32driversnv_agp.sys 18:16:05.0909 2188 nv_agp - ok 18:16:05.0971 2188 [ E54AA592A65F317390EEE386A8821692 ] odserv C:Program Files (x86)Common FilesMicrosoft SharedOFFICE12ODSERV.EXE 18:16:05.0987 2188 odserv - ok 18:16:06.0018 2188 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:Windowssystem32driversohci1394.sys 18:16:06.0049 2188 ohci1394 - ok 18:16:06.0065 2188 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:Program Files (x86)Common FilesMicrosoft SharedSource EngineOSE.EXE 18:16:06.0080 2188 ose - ok 18:16:06.0096 2188 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:Windowssystem32pnrpsvc.dll 18:16:06.0143 2188 p2pimsvc - ok 18:16:06.0190 2188 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:Windowssystem32p2psvc.dll 18:16:06.0205 2188 p2psvc - ok 18:16:06.0236 2188 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:Windowssystem32DRIVERSparport.sys 18:16:06.0252 2188 Parport - ok 18:16:06.0283 2188 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:Windowssystem32driverspartmgr.sys 18:16:06.0299 2188 partmgr - ok 18:16:06.0299 2188 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:WindowsSystem32pcasvc.dll 18:16:06.0346 2188 PcaSvc - ok 18:16:06.0392 2188 [ 3FDE033DFB0D07F8B7D5C9A3044AA121 ] pccsmcfd C:Windowssystem32DRIVERSpccsmcfdx64.sys 18:16:06.0424 2188 pccsmcfd - ok 18:16:06.0502 2188 [ 4B5F5774FF1C577B9515FDD2B5C535C5 ] PCDSRVC{1E208CE0-FB7451FF-06020200}_0 c:program filesdell support centerpcdsrvc_x64.pkms 18:16:06.0580 2188 PCDSRVC{1E208CE0-FB7451FF-06020200}_0 - ok 18:16:06.0595 2188 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:Windowssystem32driverspci.sys 18:16:06.0611 2188 pci - ok 18:16:06.0642 2188 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:Windowssystem32driverspciide.sys 18:16:06.0658 2188 pciide - ok 18:16:06.0673 2188 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:Windowssystem32DRIVERSpcmcia.sys 18:16:06.0704 2188 pcmcia - ok 18:16:06.0704 2188 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:Windowssystem32driverspcw.sys 18:16:06.0720 2188 pcw - ok 18:16:06.0736 2188 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:Windowssystem32driverspeauth.sys 18:16:06.0798 2188 PEAUTH - ok 18:16:06.0860 2188 [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc C:Windowssystem32peerdistsvc.dll 18:16:06.0907 2188 PeerDistSvc - ok 18:16:07.0001 2188 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:WindowsSysWow64perfhost.exe 18:16:07.0016 2188 PerfHost - ok 18:16:07.0079 2188 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:Windowssystem32pla.dll 18:16:07.0172 2188 pla - ok 18:16:07.0219 2188 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:Windowssystem32umpnpmgr.dll 18:16:07.0250 2188 PlugPlay - ok 18:16:07.0266 2188 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:Windowssystem32pnrpauto.dll 18:16:07.0297 2188 PNRPAutoReg - ok 18:16:07.0313 2188 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:Windowssystem32pnrpsvc.dll 18:16:07.0328 2188 PNRPsvc - ok 18:16:07.0344 2188 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:WindowsSystem32ipsecsvc.dll 18:16:07.0422 2188 PolicyAgent - ok 18:16:07.0453 2188 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:Windowssystem32umpo.dll 18:16:07.0500 2188 Power - ok 18:16:07.0547 2188 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:Windowssystem32DRIVERSraspptp.sys 18:16:07.0594 2188 PptpMiniport - ok 18:16:07.0609 2188 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:Windowssystem32DRIVERSprocessr.sys 18:16:07.0625 2188 Processor - ok 18:16:07.0656 2188 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:Windowssystem32profsvc.dll 18:16:07.0687 2188 ProfSvc - ok 18:16:07.0703 2188 Prot6Flt - ok 18:16:07.0718 2188 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:Windowssystem32lsass.exe 18:16:07.0734 2188 ProtectedStorage - ok 18:16:07.0765 2188 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:Windowssystem32DRIVERSpacer.sys 18:16:07.0812 2188 Psched - ok 18:16:07.0843 2188 [ DA4ECE4EC909E1791339F3FFAF36418A ] QDLService2kDell C:Program Files (x86)QUALCOMMQDLService2kQDLService2kDell.exe 18:16:07.0859 2188 QDLService2kDell - ok 18:16:07.0890 2188 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:Windowssystem32DRIVERSql2300.sys 18:16:07.0952 2188 ql2300 - ok 18:16:07.0968 2188 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:Windowssystem32DRIVERSql40xx.sys 18:16:07.0984 2188 ql40xx - ok 18:16:08.0015 2188 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:Windowssystem32qwave.dll 18:16:08.0030 2188 QWAVE - ok 18:16:08.0046 2188 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:Windowssystem32driversqwavedrv.sys 18:16:08.0077 2188 QWAVEdrv - ok 18:16:08.0093 2188 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:Windowssystem32DRIVERSrasacd.sys 18:16:08.0124 2188 RasAcd - ok 18:16:08.0155 2188 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:Windowssystem32DRIVERSAgileVpn.sys 18:16:08.0186 2188 RasAgileVpn - ok 18:16:08.0202 2188 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:WindowsSystem32rasauto.dll 18:16:08.0264 2188 RasAuto - ok 18:16:08.0280 2188 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:Windowssystem32DRIVERSrasl2tp.sys 18:16:08.0342 2188 Rasl2tp - ok 18:16:08.0374 2188 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:WindowsSystem32rasmans.dll 18:16:08.0420 2188 RasMan - ok 18:16:08.0420 2188 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:Windowssystem32DRIVERSraspppoe.sys 18:16:08.0483 2188 RasPppoe - ok 18:16:08.0498 2188 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:Windowssystem32DRIVERSrassstp.sys 18:16:08.0545 2188 RasSstp - ok 18:16:08.0576 2188 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:Windowssystem32DRIVERSrdbss.sys 18:16:08.0623 2188 rdbss - ok 18:16:08.0654 2188 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:Windowssystem32DRIVERSrdpbus.sys 18:16:08.0670 2188 rdpbus - ok 18:16:08.0670 2188 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:Windowssystem32DRIVERSRDPCDD.sys 18:16:08.0717 2188 RDPCDD - ok 18:16:08.0764 2188 [ 1B6163C503398B23FF8B939C67747683 ] RDPDR C:Windowssystem32driversrdpdr.sys 18:16:08.0795 2188 RDPDR - ok 18:16:08.0810 2188 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:Windowssystem32driversrdpencdd.sys 18:16:08.0888 2188 RDPENCDD - ok 18:16:08.0920 2188 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:Windowssystem32driversrdprefmp.sys 18:16:08.0998 2188 RDPREFMP - ok 18:16:09.0060 2188 [ 70CBA1A0C98600A2AA1863479B35CB90 ] RdpVideoMiniport C:Windowssystem32driversrdpvideominiport.sys 18:16:09.0091 2188 RdpVideoMiniport - ok 18:16:09.0122 2188 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:Windowssystem32driversRDPWD.sys 18:16:09.0154 2188 RDPWD - ok 18:16:09.0169 2188 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:Windowssystem32driversrdyboost.sys 18:16:09.0185 2188 rdyboost - ok 18:16:09.0232 2188 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:WindowsSystem32mprdim.dll 18:16:09.0278 2188 RemoteAccess - ok 18:16:09.0325 2188 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:Windowssystem32regsvc.dll 18:16:09.0372 2188 RemoteRegistry - ok 18:16:09.0403 2188 [ E20B1907FC72A3664ECE21E3C20FC63D ] rimspci C:Windowssystem32DRIVERSrimspe64.sys 18:16:09.0419 2188 rimspci - ok 18:16:09.0450 2188 [ A6DA2B0C8F5BB3F9F5423CFF8D6A02D9 ] risdpcie C:Windowssystem32DRIVERSrisdpe64.sys 18:16:09.0481 2188 risdpcie - ok 18:16:09.0497 2188 [ 6A1CD4674505E6791390A1AB71DA1FBE ] rixdpcie C:Windowssystem32DRIVERSrixdpe64.sys 18:16:09.0544 2188 rixdpcie - ok 18:16:09.0559 2188 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:WindowsSystem32RpcEpMap.dll 18:16:09.0606 2188 RpcEptMapper - ok 18:16:09.0637 2188 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:Windowssystem32locator.exe 18:16:09.0668 2188 RpcLocator - ok 18:16:09.0715 2188 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:Windowssystem32rpcss.dll 18:16:09.0762 2188 RpcSs - ok 18:16:09.0793 2188 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:Windowssystem32DRIVERSrspndr.sys 18:16:09.0824 2188 rspndr - ok 18:16:09.0871 2188 [ 3B01789EE4EAEE97F5EB46B711387D5E ] RTL8167 C:Windowssystem32DRIVERSRt64win7.sys 18:16:09.0902 2188 RTL8167 - ok 18:16:09.0934 2188 [ E60C0A09F997826C7627B244195AB581 ] s3cap C:Windowssystem32driversvms3cap.sys 18:16:09.0949 2188 s3cap - ok 18:16:09.0980 2188 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:Windowssystem32lsass.exe 18:16:09.0980 2188 SamSs - ok 18:16:10.0012 2188 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:Windowssystem32driverssbp2port.sys 18:16:10.0027 2188 sbp2port - ok 18:16:10.0074 2188 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:WindowsSystem32SCardSvr.dll 18:16:10.0121 2188 SCardSvr - ok 18:16:10.0152 2188 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:Windowssystem32DRIVERSscfilter.sys 18:16:10.0199 2188 scfilter - ok 18:16:10.0246 2188 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:Windowssystem32schedsvc.dll 18:16:10.0292 2188 Schedule - ok 18:16:10.0339 2188 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:WindowsSystem32certprop.dll 18:16:10.0370 2188 SCPolicySvc - ok 18:16:10.0417 2188 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:Windowssystem32driverssdbus.sys 18:16:10.0448 2188 sdbus - ok 18:16:10.0464 2188 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:WindowsSystem32SDRSVC.dll 18:16:10.0495 2188 SDRSVC - ok 18:16:10.0526 2188 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:Windowssystem32driverssecdrv.sys 18:16:10.0573 2188 secdrv - ok 18:16:10.0604 2188 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:Windowssystem32seclogon.dll 18:16:10.0651 2188 seclogon - ok 18:16:10.0682 2188 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:WindowsSystem32sens.dll 18:16:10.0729 2188 SENS - ok 18:16:10.0745 2188 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:Windowssystem32sensrsvc.dll 18:16:10.0776 2188 SensrSvc - ok 18:16:10.0792 2188 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:Windowssystem32DRIVERSserenum.sys 18:16:10.0823 2188 Serenum - ok 18:16:10.0838 2188 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:Windowssystem32DRIVERSserial.sys 18:16:10.0854 2188 Serial - ok 18:16:10.0885 2188 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:Windowssystem32DRIVERSsermouse.sys 18:16:10.0916 2188 sermouse - ok 18:16:11.0041 2188 [ C3BB6CF8F9EE199005A2AAE2815AD756 ] ServiceLayer C:Program Files (x86)PC Connectivity SolutionServiceLayer.exe 18:16:11.0072 2188 ServiceLayer - ok 18:16:11.0119 2188 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:Windowssystem32sessenv.dll 18:16:11.0166 2188 SessionEnv - ok 18:16:11.0213 2188 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:Windowssystem32driverssffdisk.sys 18:16:11.0244 2188 sffdisk - ok 18:16:11.0260 2188 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:Windowssystem32driverssffp_mmc.sys 18:16:11.0291 2188 sffp_mmc - ok 18:16:11.0306 2188 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:Windowssystem32driverssffp_sd.sys 18:16:11.0338 2188 sffp_sd - ok 18:16:11.0384 2188 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:Windowssystem32DRIVERSsfloppy.sys 18:16:11.0416 2188 sfloppy - ok 18:16:11.0462 2188 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:WindowsSystem32shsvcs.dll 18:16:11.0509 2188 ShellHWDetection - ok 18:16:11.0540 2188 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:Windowssystem32DRIVERSSiSRaid2.sys 18:16:11.0556 2188 SiSRaid2 - ok 18:16:11.0556 2188 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:Windowssystem32DRIVERSsisraid4.sys 18:16:11.0572 2188 SiSRaid4 - ok 18:16:11.0587 2188 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:Windowssystem32DRIVERSsmb.sys 18:16:11.0634 2188 Smb - ok 18:16:11.0665 2188 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:WindowsSystem32snmptrap.exe 18:16:11.0681 2188 SNMPTRAP - ok 18:16:11.0712 2188 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:Windowssystem32driversspldr.sys 18:16:11.0728 2188 spldr - ok 18:16:11.0743 2188 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:WindowsSystem32spoolsv.exe 18:16:11.0774 2188 Spooler - ok 18:16:11.0852 2188 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:Windowssystem32sppsvc.exe 18:16:11.0993 2188 sppsvc - ok 18:16:12.0024 2188 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:Windowssystem32sppuinotify.dll 18:16:12.0071 2188 sppuinotify - ok 18:16:12.0102 2188 [ 602884696850C86434530790B110E8EB ] sptd C:Windowssystem32Driverssptd.sys 18:16:12.0102 2188 Suspicious file (NoAccess): C:Windowssystem32Driverssptd.sys. md5: 602884696850C86434530790B110E8EB 18:16:12.0118 2188 sptd ( LockedFile.Multi.Generic ) - warning 18:16:12.0118 2188 sptd - detected LockedFile.Multi.Generic (1) 18:16:12.0149 2188 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:Windowssystem32DRIVERSsrv.sys 18:16:12.0196 2188 srv - ok 18:16:12.0211 2188 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:Windowssystem32DRIVERSsrv2.sys 18:16:12.0242 2188 srv2 - ok 18:16:12.0274 2188 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:Windowssystem32DRIVERSsrvnet.sys 18:16:12.0305 2188 srvnet - ok 18:16:12.0352 2188 [ 8F8324ED1DE63FFC7B1A02CD2D963C72 ] ssadbus C:Windowssystem32DRIVERSssadbus.sys 18:16:12.0383 2188 ssadbus - ok 18:16:12.0430 2188 [ 58221EFCB74167B73667F0024C661CE0 ] ssadmdfl C:Windowssystem32DRIVERSssadmdfl.sys 18:16:12.0445 2188 ssadmdfl - ok 18:16:12.0461 2188 [ 4DA7C71BFAC5AD71255B7E4CAB980163 ] ssadmdm C:Windowssystem32DRIVERSssadmdm.sys 18:16:12.0492 2188 ssadmdm - ok 18:16:12.0523 2188 [ D33D1BD3EC0E766211A234F56A12726D ] ssadserd C:Windowssystem32DRIVERSssadserd.sys 18:16:12.0554 2188 ssadserd - ok 18:16:12.0586 2188 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:WindowsSystem32ssdpsrv.dll 18:16:12.0632 2188 SSDPSRV - ok 18:16:12.0648 2188 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:Windowssystem32sstpsvc.dll 18:16:12.0695 2188 SstpSvc - ok 18:16:12.0820 2188 [ DA7702025DFD169B909C4DA3126762CC ] STacSV C:WindowsSystem32DriverStoreFileRepositorystwrt64.inf_amd64_neutral_0057cbec48a2d7cfSTacSV64.exe 18:16:12.0835 2188 STacSV - ok 18:16:12.0882 2188 [ C48E0745D33897C7A73394214F2B9B4F ] Stdflt C:Windowssystem32DRIVERSstdflt.sys 18:16:12.0898 2188 Stdflt - ok 18:16:12.0929 2188 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:Windowssystem32DRIVERSstexstor.sys 18:16:12.0944 2188 stexstor - ok 18:16:12.0976 2188 [ CAF5A9708671B14B9670260735B22C4E ] STHDA C:Windowssystem32DRIVERSstwrt64.sys 18:16:13.0007 2188 STHDA - ok 18:16:13.0038 2188 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:WindowsSystem32wiaservc.dll 18:16:13.0085 2188 stisvc - ok 18:16:13.0100 2188 [ 7785DC213270D2FC066538DAF94087E7 ] storflt C:Windowssystem32driversvmstorfl.sys 18:16:13.0116 2188 storflt - ok 18:16:13.0132 2188 [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc C:Windowssystem32driversstorvsc.sys 18:16:13.0147 2188 storvsc - ok 18:16:13.0178 2188 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:Windowssystem32driversswenum.sys 18:16:13.0178 2188 swenum - ok 18:16:13.0210 2188 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:WindowsSystem32swprv.dll 18:16:13.0288 2188 swprv - ok 18:16:13.0319 2188 Synth3dVsc - ok 18:16:13.0350 2188 [ 639B57DC871BE4B86283027FAF1F4E30 ] SynTP C:Windowssystem32DRIVERSSynTP.sys 18:16:13.0366 2188 SynTP - ok 18:16:13.0444 2188 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:Windowssystem32sysmain.dll 18:16:13.0490 2188 SysMain - ok 18:16:13.0522 2188 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:WindowsSystem32TabSvc.dll 18:16:13.0553 2188 TabletInputService - ok 18:16:13.0584 2188 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:WindowsSystem32tapisrv.dll 18:16:13.0646 2188 TapiSrv - ok 18:16:13.0662 2188 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:WindowsSystem32tbssvc.dll 18:16:13.0709 2188 TBS - ok 18:16:13.0756 2188 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:Windowssystem32driverstcpip.sys 18:16:13.0834 2188 Tcpip - ok 18:16:13.0880 2188 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:Windowssystem32DRIVERStcpip.sys 18:16:13.0927 2188 TCPIP6 - ok 18:16:13.0958 2188 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:Windowssystem32driverstcpipreg.sys 18:16:13.0974 2188 tcpipreg - ok 18:16:14.0005 2188 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:Windowssystem32driverstdpipe.sys 18:16:14.0036 2188 TDPIPE - ok 18:16:14.0083 2188 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:Windowssystem32driverstdtcp.sys 18:16:14.0099 2188 TDTCP - ok 18:16:14.0146 2188 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:Windowssystem32DRIVERStdx.sys 18:16:14.0177 2188 tdx - ok 18:16:14.0208 2188 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:Windowssystem32driverstermdd.sys 18:16:14.0224 2188 TermDD - ok 18:16:14.0239 2188 [ 2E648163254233755035B46DD7B89123 ] TermService C:WindowsSystem32termsrv.dll 18:16:14.0317 2188 TermService - ok 18:16:14.0348 2188 [ F0344071948D1A1FA732231785A0664C ] Themes C:Windowssystem32themeservice.dll 18:16:14.0380 2188 Themes - ok 18:16:14.0411 2188 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:Windowssystem32mmcss.dll 18:16:14.0442 2188 THREADORDER - ok 18:16:14.0473 2188 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:WindowsSystem32trkwks.dll 18:16:14.0520 2188 TrkWks - ok 18:16:14.0582 2188 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:WindowsservicingTrustedInstaller.exe 18:16:14.0629 2188 TrustedInstaller - ok 18:16:14.0660 2188 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:Windowssystem32DRIVERStssecsrv.sys 18:16:14.0707 2188 tssecsrv - ok 18:16:14.0754 2188 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:Windowssystem32driverstsusbflt.sys 18:16:14.0785 2188 TsUsbFlt - ok 18:16:14.0785 2188 tsusbhub - ok 18:16:14.0816 2188 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:Windowssystem32DRIVERStunnel.sys 18:16:14.0879 2188 tunnel - ok 18:16:14.0894 2188 [ 825E7A1F48FB8BCFBA27C178AAB4E275 ] TurboB C:Windowssystem32DRIVERSTurboB.sys 18:16:14.0910 2188 TurboB - ok 18:16:14.0957 2188 [ B206BE1174D5964D49A56BB6C4E0524A ] TurboBoost C:Program FilesIntelTurboBoostTurboBoost.exe 18:16:14.0972 2188 TurboBoost - ok 18:16:15.0004 2188 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:Windowssystem32DRIVERSuagp35.sys 18:16:15.0019 2188 uagp35 - ok 18:16:15.0050 2188 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:Windowssystem32DRIVERSudfs.sys 18:16:15.0113 2188 udfs - ok 18:16:15.0144 2188 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:Windowssystem32UI0Detect.exe 18:16:15.0160 2188 UI0Detect - ok 18:16:15.0191 2188 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:Windowssystem32driversuliagpkx.sys 18:16:15.0206 2188 uliagpkx - ok 18:16:15.0238 2188 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:Windowssystem32DRIVERSumbus.sys 18:16:15.0253 2188 umbus - ok 18:16:15.0284 2188 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:Windowssystem32DRIVERSumpass.sys 18:16:15.0316 2188 UmPass - ok 18:16:15.0331 2188 [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService C:WindowsSystem32umrdp.dll 18:16:15.0362 2188 UmRdpService - ok 18:16:15.0440 2188 [ 765F2DD351BA064F657751D8D75E58C0 ] UNS C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSUNS.exe 18:16:15.0487 2188 UNS - ok 18:16:15.0503 2188 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:WindowsSystem32upnphost.dll 18:16:15.0565 2188 upnphost - ok 18:16:15.0612 2188 [ 34AFB83C7BBA370E404E52CC2290350C ] upperdev C:Windowssystem32DRIVERSusbser_lowerfltx64.sys 18:16:15.0643 2188 upperdev - ok 18:16:15.0674 2188 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:Windowssystem32DRIVERSusbccgp.sys 18:16:15.0690 2188 usbccgp - ok 18:16:15.0721 2188 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:Windowssystem32driversusbcir.sys 18:16:15.0752 2188 usbcir - ok 18:16:15.0784 2188 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:Windowssystem32driversusbehci.sys 18:16:15.0815 2188 usbehci - ok 18:16:15.0830 2188 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:Windowssystem32DRIVERSusbhub.sys 18:16:15.0862 2188 usbhub - ok 18:16:15.0877 2188 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:Windowssystem32driversusbohci.sys 18:16:15.0908 2188 usbohci - ok 18:16:15.0940 2188 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:Windowssystem32DRIVERSusbprint.sys 18:16:15.0971 2188 usbprint - ok 18:16:16.0018 2188 [ 4ACEE387FA8FD39F83564FCD2FC234F2 ] usbser C:Windowssystem32driversusbser.sys 18:16:16.0033 2188 usbser - ok 18:16:16.0064 2188 [ AA75E1EFBEE7186B4CBAAACF1F15E6CA ] UsbserFilt C:Windowssystem32DRIVERSusbser_lowerfltjx64.sys 18:16:16.0096 2188 UsbserFilt - ok 18:16:16.0111 2188 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:Windowssystem32DRIVERSUSBSTOR.SYS 18:16:16.0142 2188 USBSTOR - ok 18:16:16.0158 2188 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:Windowssystem32driversusbuhci.sys 18:16:16.0189 2188 usbuhci - ok 18:16:16.0220 2188 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:WindowsSystem32Driversusbvideo.sys 18:16:16.0252 2188 usbvideo - ok 18:16:16.0283 2188 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:WindowsSystem32uxsms.dll 18:16:16.0345 2188 UxSms - ok 18:16:16.0361 2188 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:Windowssystem32lsass.exe 18:16:16.0376 2188 VaultSvc - ok 18:16:16.0392 2188 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:Windowssystem32driversvdrvroot.sys 18:16:16.0392 2188 vdrvroot - ok 18:16:16.0439 2188 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:WindowsSystem32vds.exe 18:16:16.0501 2188 vds - ok 18:16:16.0532 2188 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:Windowssystem32DRIVERSvgapnp.sys 18:16:16.0548 2188 vga - ok 18:16:16.0564 2188 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:WindowsSystem32driversvga.sys 18:16:16.0610 2188 VgaSave - ok 18:16:16.0642 2188 VGPU - ok 18:16:16.0657 2188 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:Windowssystem32driversvhdmp.sys 18:16:16.0673 2188 vhdmp - ok 18:16:16.0704 2188 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:Windowssystem32driversviaide.sys 18:16:16.0720 2188 viaide - ok 18:16:16.0751 2188 [ 86EA3E79AE350FEA5331A1303054005F ] vmbus C:Windowssystem32driversvmbus.sys 18:16:16.0766 2188 vmbus - ok 18:16:16.0782 2188 [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID C:Windowssystem32driversVMBusHID.sys 18:16:16.0813 2188 VMBusHID - ok 18:16:16.0829 2188 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:Windowssystem32driversvolmgr.sys 18:16:16.0844 2188 volmgr - ok 18:16:16.0876 2188 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:Windowssystem32driversvolmgrx.sys 18:16:16.0891 2188 volmgrx - ok 18:16:16.0922 2188 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:Windowssystem32driversvolsnap.sys 18:16:16.0938 2188 volsnap - ok 18:16:16.0954 2188 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:Windowssystem32DRIVERSvsmraid.sys 18:16:16.0969 2188 vsmraid - ok 18:16:17.0032 2188 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:Windowssystem32vssvc.exe 18:16:17.0125 2188 VSS - ok 18:16:17.0141 2188 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:Windowssystem32DRIVERSvwifibus.sys 18:16:17.0156 2188 vwifibus - ok 18:16:17.0188 2188 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:Windowssystem32DRIVERSvwififlt.sys 18:16:17.0219 2188 vwififlt - ok 18:16:17.0234 2188 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:Windowssystem32DRIVERSvwifimp.sys 18:16:17.0266 2188 vwifimp - ok 18:16:17.0297 2188 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:Windowssystem32w32time.dll 18:16:17.0359 2188 W32Time - ok 18:16:17.0390 2188 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:Windowssystem32DRIVERSwacompen.sys 18:16:17.0406 2188 WacomPen - ok 18:16:17.0422 2188 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:Windowssystem32DRIVERSwanarp.sys 18:16:17.0484 2188 WANARP - ok 18:16:17.0484 2188 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:Windowssystem32DRIVERSwanarp.sys 18:16:17.0531 2188 Wanarpv6 - ok 18:16:17.0609 2188 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:Windowssystem32WatWatAdminSvc.exe 18:16:17.0656 2188 WatAdminSvc - ok 18:16:17.0702 2188 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:Windowssystem32wbengine.exe 18:16:17.0765 2188 wbengine - ok 18:16:17.0796 2188 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:WindowsSystem32wbiosrvc.dll 18:16:17.0812 2188 WbioSrvc - ok 18:16:17.0843 2188 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:WindowsSystem32wcncsvc.dll 18:16:17.0890 2188 wcncsvc - ok 18:16:17.0905 2188 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:WindowsSystem32WcsPlugInService.dll 18:16:17.0921 2188 WcsPlugInService - ok 18:16:17.0952 2188 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:Windowssystem32DRIVERSwd.sys 18:16:17.0968 2188 Wd - ok 18:16:17.0999 2188 [ A3D04EBF5227886029B4532F20D026F7 ] WDC_SAM C:Windowssystem32DRIVERSwdcsam64.sys 18:16:18.0014 2188 WDC_SAM - ok 18:16:18.0046 2188 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:Windowssystem32driversWdf01000.sys 18:16:18.0092 2188 Wdf01000 - ok 18:16:18.0108 2188 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:Windowssystem32wdi.dll 18:16:18.0155 2188 WdiServiceHost - ok 18:16:18.0170 2188 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:Windowssystem32wdi.dll 18:16:18.0186 2188 WdiSystemHost - ok 18:16:18.0233 2188 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:WindowsSystem32webclnt.dll 18:16:18.0264 2188 WebClient - ok 18:16:18.0280 2188 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:Windowssystem32wecsvc.dll 18:16:18.0342 2188 Wecsvc - ok 18:16:18.0342 2188 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:WindowsSystem32wercplsupport.dll 18:16:18.0404 2188 wercplsupport - ok 18:16:18.0420 2188 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:WindowsSystem32WerSvc.dll 18:16:18.0451 2188 WerSvc - ok 18:16:18.0467 2188 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:Windowssystem32DRIVERSwfplwf.sys 18:16:18.0529 2188 WfpLwf - ok 18:16:18.0545 2188 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:Windowssystem32driverswimmount.sys 18:16:18.0560 2188 WIMMount - ok 18:16:18.0560 2188 WinHttpAutoProxySvc - ok 18:16:18.0623 2188 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:Windowssystem32wbemWMIsvc.dll 18:16:18.0670 2188 Winmgmt - ok 18:16:18.0732 2188 [ BCB1310604AA415C4508708975B3931E ] WinRM C:Windowssystem32WsmSvc.dll 18:16:18.0826 2188 WinRM - ok 18:16:18.0872 2188 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:Windowssystem32DRIVERSWinUsb.sys 18:16:18.0888 2188 WinUsb - ok 18:16:18.0919 2188 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:WindowsSystem32wlansvc.dll 18:16:18.0966 2188 Wlansvc - ok 18:16:18.0997 2188 [ 13B0A570E1AE451C92DA550085D72CF3 ] wltrysvc C:Program FilesDellDell Wireless WLAN CardWLTRYSVC.EXE 18:16:19.0013 2188 wltrysvc ( UnsignedFile.Multi.Generic ) - warning 18:16:19.0013 2188 wltrysvc - detected UnsignedFile.Multi.Generic (1) 18:16:19.0060 2188 WMCoreService - ok 18:16:19.0091 2188 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:Windowssystem32driverswmiacpi.sys 18:16:19.0106 2188 WmiAcpi - ok 18:16:19.0153 2188 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:Windowssystem32wbemWmiApSrv.exe 18:16:19.0184 2188 wmiApSrv - ok 18:16:19.0216 2188 WMPNetworkSvc - ok 18:16:19.0231 2188 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:WindowsSystem32wpcsvc.dll 18:16:19.0247 2188 WPCSvc - ok 18:16:19.0294 2188 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:Windowssystem32wpdbusenum.dll 18:16:19.0309 2188 WPDBusEnum - ok 18:16:19.0325 2188 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:Windowssystem32driversws2ifsl.sys 18:16:19.0387 2188 ws2ifsl - ok 18:16:19.0387 2188 WSearch - ok 18:16:19.0465 2188 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:Windowssystem32driversWudfPf.sys 18:16:19.0481 2188 WudfPf - ok 18:16:19.0496 2188 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:Windowssystem32DRIVERSWUDFRd.sys 18:16:19.0528 2188 WUDFRd - ok 18:16:19.0543 2188 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:WindowsSystem32WUDFSvc.dll 18:16:19.0559 2188 wudfsvc - ok 18:16:19.0590 2188 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:WindowsSystem32wwansvc.dll 18:16:19.0637 2188 WwanSvc - ok 18:16:19.0668 2188 ================ Scan global =============================== 18:16:19.0684 2188 [ BA0CD8C393E8C9F83354106093832C7B ] C:Windowssystem32basesrv.dll 18:16:19.0715 2188 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:Windowssystem32winsrv.dll 18:16:19.0730 2188 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:Windowssystem32winsrv.dll 18:16:19.0746 2188 [ D6160F9D869BA3AF0B787F971DB56368 ] C:Windowssystem32sxssrv.dll 18:16:19.0762 2188 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:Windowssystem32services.exe 18:16:19.0777 2188 [Global] - ok 18:16:19.0777 2188 ================ Scan MBR ================================== 18:16:19.0777 2188 [ A36C5E4F47E84449FF07ED3517B43A31 ] DeviceHarddisk0DR0 18:16:20.0136 2188 DeviceHarddisk0DR0 - ok 18:16:20.0136 2188 ================ Scan VBR ================================== 18:16:20.0136 2188 [ 9D93EF20CD0743668ACD4A3562A144E8 ] DeviceHarddisk0DR0Partition1 18:16:20.0136 2188 DeviceHarddisk0DR0Partition1 - ok 18:16:20.0167 2188 [ 77FE17C1E312B6E31959E60491B0B792 ] DeviceHarddisk0DR0Partition2 18:16:20.0183 2188 DeviceHarddisk0DR0Partition2 - ok

18:16:20.0183 2188 ================ Scan active images ======================== 18:16:20.0183 2188 [ 3E588B60EC061686BA05D33574A344C6 ] C:WindowsSystem32driverscrashdmp.sys 18:16:20.0183 2188 C:WindowsSystem32driverscrashdmp.sys - ok 18:16:20.0183 2188 [ ABBF174CB394F5C437410A788B7E404A ] C:WindowsSystem32driversiaStor.sys 18:16:20.0183 2188 C:WindowsSystem32driversiaStor.sys - ok 18:16:20.0183 2188 [ 814DB88F2641691575A455CF25354098 ] C:WindowsSystem32driversdumpfve.sys 18:16:20.0183 2188 C:WindowsSystem32driversdumpfve.sys - ok 18:16:20.0183 2188 [ 16A47CE2DECC9B099349A5F840654746 ] C:WindowsSystem32driversbeep.sys 18:16:20.0183 2188 C:WindowsSystem32driversbeep.sys - ok 18:16:20.0198 2188 [ F036CE71586E93D94DAB220D7BDF4416 ] C:WindowsSystem32driverscdrom.sys 18:16:20.0198 2188 C:WindowsSystem32driverscdrom.sys - ok 18:16:20.0198 2188 [ 9899284589F75FA8724FF3D16AED75C1 ] C:WindowsSystem32driversnull.sys 18:16:20.0198 2188 C:WindowsSystem32driversnull.sys - ok 18:16:20.0198 2188 [ CEA6CC257FC9B7715F1C2B4849286D24 ] C:WindowsSystem32driversRDPCDD.sys 18:16:20.0198 2188 C:WindowsSystem32driversRDPCDD.sys - ok 18:16:20.0198 2188 [ 53E92A310193CB3C03BEA963DE7D9CFC ] C:WindowsSystem32driversvga.sys 18:16:20.0198 2188 C:WindowsSystem32driversvga.sys - ok 18:16:20.0214 2188 [ E7353D59C9842BC7299FAEB7E7E09340 ] C:WindowsSystem32driversvideoprt.sys 18:16:20.0214 2188 C:WindowsSystem32driversvideoprt.sys - ok 18:16:20.0214 2188 [ FC438D1430B28618E2D0C7C332A710AD ] C:WindowsSystem32driverswatchdog.sys 18:16:20.0214 2188 C:WindowsSystem32driverswatchdog.sys - ok 18:16:20.0214 2188 [ BB5971A4F00659529A5C44831AF22365 ] C:WindowsSystem32driversRDPENCDD.sys 18:16:20.0214 2188 C:WindowsSystem32driversRDPENCDD.sys - ok 18:16:20.0214 2188 [ 216F3FA57533D98E1F74DED70113177A ] C:WindowsSystem32driversRDPREFMP.sys 18:16:20.0214 2188 C:WindowsSystem32driversRDPREFMP.sys - ok 18:16:20.0230 2188 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] C:WindowsSystem32driversmsfs.sys 18:16:20.0230 2188 C:WindowsSystem32driversmsfs.sys - ok 18:16:20.0230 2188 [ 09594D1089C523423B32A4229263F068 ] C:WindowsSystem32driversnetbt.sys 18:16:20.0230 2188 C:WindowsSystem32driversnetbt.sys - ok 18:16:20.0230 2188 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] C:WindowsSystem32driversnpfs.sys 18:16:20.0230 2188 C:WindowsSystem32driversnpfs.sys - ok 18:16:20.0230 2188 [ 6F020A220388ECA0AB6062DC27BD16B6 ] C:WindowsSystem32driverstdi.sys 18:16:20.0230 2188 C:WindowsSystem32driverstdi.sys - ok 18:16:20.0245 2188 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] C:WindowsSystem32driverstdx.sys 18:16:20.0245 2188 C:WindowsSystem32driverstdx.sys - ok 18:16:20.0245 2188 [ 1C7857B62DE5994A75B054A9FD4C3825 ] C:WindowsSystem32driversafd.sys 18:16:20.0245 2188 C:WindowsSystem32driversafd.sys - ok 18:16:20.0245 2188 [ 86743D9F5D2B1048062B14B1D84501C4 ] C:WindowsSystem32driversnetbios.sys 18:16:20.0245 2188 C:WindowsSystem32driversnetbios.sys - ok 18:16:20.0245 2188 [ 0557CF5A2556BD58E26384169D72438D ] C:WindowsSystem32driverspacer.sys 18:16:20.0245 2188 C:WindowsSystem32driverspacer.sys - ok 18:16:20.0261 2188 [ 6A3D66263414FF0D6FA754C646612F3F ] C:WindowsSystem32driversvwififlt.sys 18:16:20.0261 2188 C:WindowsSystem32driversvwififlt.sys - ok 18:16:20.0261 2188 [ 611B23304BF067451A9FDEE01FBDD725 ] C:WindowsSystem32driverswfplwf.sys 18:16:20.0261 2188 C:WindowsSystem32driverswfplwf.sys - ok 18:16:20.0261 2188 [ 13096B05847EC78F0977F2C0F79E9AB3 ] C:WindowsSystem32driversdiscache.sys 18:16:20.0261 2188 C:WindowsSystem32driversdiscache.sys - ok 18:16:20.0261 2188 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] C:WindowsSystem32driversmssmbios.sys 18:16:20.0261 2188 C:WindowsSystem32driversmssmbios.sys - ok 18:16:20.0276 2188 [ E7F5AE18AF4168178A642A9247C63001 ] C:WindowsSystem32driversnsiproxy.sys 18:16:20.0276 2188 C:WindowsSystem32driversnsiproxy.sys - ok 18:16:20.0276 2188 [ 77F665941019A1594D887A74F301FA2F ] C:WindowsSystem32driversrdbss.sys 18:16:20.0276 2188 C:WindowsSystem32driversrdbss.sys - ok 18:16:20.0276 2188 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] C:WindowsSystem32driverstermdd.sys 18:16:20.0276 2188 C:WindowsSystem32driverstermdd.sys - ok 18:16:20.0276 2188 [ 356AFD78A6ED4457169241AC3965230C ] C:WindowsSystem32driverswanarp.sys 18:16:20.0276 2188 C:WindowsSystem32driverswanarp.sys - ok 18:16:20.0292 2188 [ 61583EE3C3A17003C4ACD0475646B4D3 ] C:WindowsSystem32driversblbdrive.sys 18:16:20.0292 2188 C:WindowsSystem32driversblbdrive.sys - ok 18:16:20.0292 2188 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] C:WindowsSystem32driverscsc.sys 18:16:20.0292 2188 C:WindowsSystem32driverscsc.sys - ok 18:16:20.0292 2188 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] C:WindowsSystem32driversdfsc.sys 18:16:20.0292 2188 C:WindowsSystem32driversdfsc.sys - ok 18:16:20.0292 2188 [ 6F6D47246FBB0CF65619684A0F89179E ] C:WindowsSystem32driversatikmpag.sys 18:16:20.0292 2188 C:WindowsSystem32driversatikmpag.sys - ok 18:16:20.0308 2188 [ 3566A8DAAFA27AF944F5D705EAA64894 ] C:WindowsSystem32driverstunnel.sys 18:16:20.0308 2188 C:WindowsSystem32driverstunnel.sys - ok 18:16:20.0308 2188 [ CF95B85FF8D128385ABD411C8CA74DED ] C:WindowsSystem32ntdll.dll 18:16:20.0308 2188 C:WindowsSystem32ntdll.dll - ok 18:16:20.0308 2188 [ F0371DE302FFFF8F086661611BE60848 ] C:WindowsSystem32smss.exe 18:16:20.0308 2188 C:WindowsSystem32smss.exe - ok 18:16:20.0308 2188 [ 29E7252FA743B15BCE1A2245C5643A02 ] C:WindowsSysWOW64driversArcHlp.sys 18:16:20.0308 2188 C:WindowsSysWOW64driversArcHlp.sys - ok 18:16:20.0323 2188 [ 3B536A8BEC3B4F23FFDFD78B11A2AB93 ] C:WindowsSystem32autochk.exe 18:16:20.0323 2188 C:WindowsSystem32autochk.exe - ok 18:16:20.0323 2188 [ 79A11CB10FF02A8425DABBB040249F7D ] C:WindowsSystem32driversatikmdag.sys 18:16:20.0323 2188 C:WindowsSystem32driversatikmdag.sys - ok 18:16:20.0323 2188 [ F5BEE30450E18E6B83A5012C100616FD ] C:WindowsSystem32driversdxgkrnl.sys 18:16:20.0323 2188 C:WindowsSystem32driversdxgkrnl.sys - ok 18:16:20.0323 2188 [ 9CD68BDDF322535C02ADC8331013D13D ] C:WindowsSystem32driversdxgmms1.sys 18:16:20.0323 2188 C:WindowsSystem32driversdxgmms1.sys - ok 18:16:20.0339 2188 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] C:WindowsSystem32drivershdaudbus.sys 18:16:20.0339 2188 C:WindowsSystem32drivershdaudbus.sys - ok 18:16:20.0339 2188 [ B6AC71AAA2B10848F57FC49D55A651AF ] C:WindowsSystem32driversHECIx64.sys 18:16:20.0339 2188 C:WindowsSystem32driversHECIx64.sys - ok 18:16:20.0339 2188 [ AE259C75F9A0B057B6BF9E9695632B09 ] C:WindowsSystem32driversusbport.sys 18:16:20.0339 2188 C:WindowsSystem32driversusbport.sys - ok 18:16:20.0339 2188 [ C025055FE7B87701EB042095DF1A2D7B ] C:WindowsSystem32driversusbehci.sys 18:16:20.0339 2188 C:WindowsSystem32driversusbehci.sys - ok 18:16:20.0354 2188 [ 37394D3553E220FB732C21E217E1BD8B ] C:WindowsSystem32driversBCMWL664.SYS 18:16:20.0354 2188 C:WindowsSystem32driversBCMWL664.SYS - ok 18:16:20.0354 2188 [ A87D604AEA360176311474C87A63BB88 ] C:WindowsSystem32drivers1394ohci.sys 18:16:20.0354 2188 C:WindowsSystem32drivers1394ohci.sys - ok 18:16:20.0354 2188 [ E20B1907FC72A3664ECE21E3C20FC63D ] C:WindowsSystem32driversrimspe64.sys 18:16:20.0354 2188 C:WindowsSystem32driversrimspe64.sys - ok 18:16:20.0354 2188 [ A6DA2B0C8F5BB3F9F5423CFF8D6A02D9 ] C:WindowsSystem32driversrisdpe64.sys 18:16:20.0354 2188 C:WindowsSystem32driversrisdpe64.sys - ok 18:16:20.0370 2188 [ 6A1CD4674505E6791390A1AB71DA1FBE ] C:WindowsSystem32driversrixdpe64.sys 18:16:20.0370 2188 C:WindowsSystem32driversrixdpe64.sys - ok 18:16:20.0370 2188 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] C:WindowsSystem32driversvwifibus.sys 18:16:20.0370 2188 C:WindowsSystem32driversvwifibus.sys - ok 18:16:20.0370 2188 [ 3B01789EE4EAEE97F5EB46B711387D5E ] C:WindowsSystem32driversRt64win7.sys 18:16:20.0370 2188 C:WindowsSystem32driversRt64win7.sys - ok 18:16:20.0370 2188 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] C:WindowsSystem32driversi8042prt.sys 18:16:20.0370 2188 C:WindowsSystem32driversi8042prt.sys - ok 18:16:20.0370 2188 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] C:WindowsSystem32driverskbdclass.sys 18:16:20.0370 2188 C:WindowsSystem32driverskbdclass.sys - ok 18:16:20.0386 2188 [ CCA2AB1752A61F29C3C941CD79D78CEA ] C:WindowsSystem32driversusbd.sys 18:16:20.0386 2188 C:WindowsSystem32driversusbd.sys - ok 18:16:20.0386 2188 [ 7D27EA49F3C1F687D357E77A470AEA99 ] C:WindowsSystem32driversmouclass.sys 18:16:20.0386 2188 C:WindowsSystem32driversmouclass.sys - ok 18:16:20.0386 2188 [ 639B57DC871BE4B86283027FAF1F4E30 ] C:WindowsSystem32driversSynTP.sys 18:16:20.0386 2188 C:WindowsSystem32driversSynTP.sys - ok 18:16:20.0386 2188 [ 9A6342C69B411005C0EEEFFA9B98630B ] Device1609658402 18:16:20.0386 2188 Device1609658402 - ok 18:16:20.0401 2188 [ 4E4FFB09D895AA000DD56D1404F69A7E ] C:WindowsSystem32Wldap32.dll 18:16:20.0401 2188 C:WindowsSystem32Wldap32.dll - ok 18:16:20.0401 2188 [ 25983DE69B57142039AC8D95E71CD9C9 ] C:WindowsSystem32clbcatq.dll 18:16:20.0401 2188 C:WindowsSystem32clbcatq.dll - ok 18:16:20.0401 2188 [ AA2C08CE85653B1A0D2E4AB407FA176C ] C:WindowsSystem32imm32.dll 18:16:20.0401 2188 C:WindowsSystem32imm32.dll - ok 18:16:20.0401 2188 [ 65C113214F7B05820F6D8A65B1485196 ] C:WindowsSystem32kernel32.dll 18:16:20.0401 2188 C:WindowsSystem32kernel32.dll - ok 18:16:20.0417 2188 [ C06B32165E23A72A898B7A89679AD754 ] C:WindowsSystem32oleaut32.dll 18:16:20.0417 2188 C:WindowsSystem32oleaut32.dll - ok 18:16:20.0417 2188 [ C431EAF5CAA1C82CAC2534A2EAB348A3 ] C:WindowsSystem32msctf.dll 18:16:20.0417 2188 C:WindowsSystem32msctf.dll - ok 18:16:20.0417 2188 [ A4F6142CABA82FB7293ECE5FF864B440 ] C:WindowsSystem32wininet.dll 18:16:20.0417 2188 C:WindowsSystem32wininet.dll - ok 18:16:20.0417 2188 [ 9835E63E09F824D22B689D2BB789BAB9 ] C:WindowsSystem32comdlg32.dll 18:16:20.0417 2188 C:WindowsSystem32comdlg32.dll - ok 18:16:20.0432 2188 [ C391FC68282A000CDF953F8B6B55D2EF ] C:WindowsSystem32msvcrt.dll 18:16:20.0432 2188 C:WindowsSystem32msvcrt.dll - ok 18:16:20.0432 2188 [ 8D4DEA45FCDF9FCFD9E31232A07E6EF9 ] C:WindowsSystem32iertutil.dll 18:16:20.0432 2188 C:WindowsSystem32iertutil.dll - ok 18:16:20.0432 2188 [ A1BE6A720D02E37F72E9CD89AE9CB3CF ] C:WindowsSystem32imagehlp.dll 18:16:20.0432 2188 C:WindowsSystem32imagehlp.dll - ok 18:16:20.0432 2188 [ D202223587518B13D72D68937B7E3F70 ] C:WindowsSystem32lpk.dll 18:16:20.0432 2188 C:WindowsSystem32lpk.dll - ok 18:16:20.0432 2188 [ D87E1E59C73C1F98D5DED5B3850C40F5 ] C:WindowsSystem32psapi.dll 18:16:20.0432 2188 C:WindowsSystem32psapi.dll - ok 18:16:20.0448 2188 [ 5D8E6C95156ED1F79A63D1EADE6F9ED5 ] C:WindowsSystem32setupapi.dll 18:16:20.0448 2188 C:WindowsSystem32setupapi.dll - ok 18:16:20.0448 2188 [ 6DF46D2BD74E3DA1B45F08F10D172732 ] C:WindowsSystem32advapi32.dll 18:16:20.0448 2188 C:WindowsSystem32advapi32.dll - ok 18:16:20.0448 2188 [ D3A6792AED4841B4D055C7C80C815BB7 ] C:WindowsSystem32urlmon.dll 18:16:20.0448 2188 C:WindowsSystem32urlmon.dll - ok 18:16:20.0448 2188 [ EAF32CB8C1F810E4715B4DFBE785C7FF ] C:WindowsSystem32shlwapi.dll 18:16:20.0448 2188 C:WindowsSystem32shlwapi.dll - ok 18:16:20.0464 2188 [ F7CE0C81C545364020ED8203CF0A633E ] C:WindowsSystem32difxapi.dll 18:16:20.0464 2188 C:WindowsSystem32difxapi.dll - ok 18:16:20.0464 2188 [ 2C353B6CE0C8D03225CAA2AF33B68D79 ] C:WindowsSystem32user32.dll 18:16:20.0464 2188 C:WindowsSystem32user32.dll - ok 18:16:20.0464 2188 [ 044FE45FFD6AD40E3BBBE60B7F41BABE ] C:WindowsSystem32nsi.dll 18:16:20.0464 2188 C:WindowsSystem32nsi.dll - ok 18:16:20.0464 2188 [ DBF99FD9CAF75CA66D042BD8D050FF71 ] C:WindowsSystem32usp10.dll 18:16:20.0464 2188 C:WindowsSystem32usp10.dll - ok 18:16:20.0479 2188 [ 6C60B5ACA7442EFB794082CDACFC001C ] C:WindowsSystem32ole32.dll 18:16:20.0479 2188 C:WindowsSystem32ole32.dll - ok 18:16:20.0479 2188 [ 4BBFA57F594F7E8A8EDC8F377184C3F0 ] C:WindowsSystem32ws2_32.dll 18:16:20.0479 2188 C:WindowsSystem32ws2_32.dll - ok 18:16:20.0479 2188 [ 1084AA52CCC324EA54C7121FA24C2221 ] C:WindowsSystem32gdi32.dll 18:16:20.0479 2188 C:WindowsSystem32gdi32.dll - ok 18:16:20.0479 2188 [ 0611473C1AD9E2D991CD9482068417F7 ] C:WindowsSystem32rpcrt4.dll 18:16:20.0479 2188 C:WindowsSystem32rpcrt4.dll - ok 18:16:20.0495 2188 [ 83404DCBCE4925B6A5A77C5170F46D86 ] C:WindowsSystem32sechost.dll 18:16:20.0495 2188 C:WindowsSystem32sechost.dll - ok 18:16:20.0495 2188 [ C6689007B3A749C49A5438DCF36E0CE4 ] C:WindowsSystem32shell32.dll 18:16:20.0495 2188 C:WindowsSystem32shell32.dll - ok 18:16:20.0495 2188 [ 28C0B5024F5C5A438E78B188CFC81B7F ] C:WindowsSystem32normaliz.dll 18:16:20.0495 2188 C:WindowsSystem32normaliz.dll - ok 18:16:20.0495 2188 [ AA06902362B1422D7A7DA7061E07C624 ] C:WindowsSystem32wintrust.dll 18:16:20.0495 2188 C:WindowsSystem32wintrust.dll - ok 18:16:20.0510 2188 [ 12EE6FE9268CEE6D90FDCCBF89236C65 ] C:WindowsSystem32crypt32.dll 18:16:20.0510 2188 C:WindowsSystem32crypt32.dll - ok 18:16:20.0510 2188 [ 1F56F209585F350A5666E3CC7931FD67 ] C:WindowsSystem32KernelBase.dll 18:16:20.0510 2188 C:WindowsSystem32KernelBase.dll - ok 18:16:20.0510 2188 [ 14DFDEAF4E589ED3F1FF187A86B9408C ] C:WindowsSystem32comctl32.dll 18:16:20.0510 2188 C:WindowsSystem32comctl32.dll - ok 18:16:20.0510 2188 [ 2477A28081BDAEE622CF045ACF8EE124 ] C:WindowsSystem32cfgmgr32.dll 18:16:20.0510 2188 C:WindowsSystem32cfgmgr32.dll - ok 18:16:20.0526 2188 [ 06FEC9E8117103BB1141A560E98077DA ] C:WindowsSystem32devobj.dll 18:16:20.0526 2188 C:WindowsSystem32devobj.dll - ok 18:16:20.0526 2188 [ 884415BD4269C02EAF8E2613BF85500D ] C:WindowsSystem32msasn1.dll 18:16:20.0526 2188 C:WindowsSystem32msasn1.dll - ok 18:16:20.0526 2188 [ 9C278785347BCC991F8EA2999D90F58D ] C:WindowsSysWOW64normaliz.dll 18:16:20.0526 2188 C:WindowsSysWOW64normaliz.dll - ok 18:16:20.0526 2188 [ ADA036632C664CAA754079041CF1F8C1 ] C:WindowsSystem32driversintelppm.sys 18:16:20.0526 2188 C:WindowsSystem32driversintelppm.sys - ok 18:16:20.0526 2188 [ 0840155D0BDDF1190F84A663C284BD33 ] C:WindowsSystem32driversCmBatt.sys 18:16:20.0542 2188 C:WindowsSystem32driversCmBatt.sys - ok 18:16:20.0542 2188 [ 03EDB043586CCEBA243D689BDDA370A8 ] C:WindowsSystem32driversCompositeBus.sys 18:16:20.0542 2188 C:WindowsSystem32driversCompositeBus.sys - ok 18:16:20.0542 2188 [ F6FF8944478594D0E414D3F048F0D778 ] C:WindowsSystem32driverswmiacpi.sys 18:16:20.0542 2188 C:WindowsSystem32driverswmiacpi.sys - ok 18:16:20.0542 2188 [ 7ECFF9B22276B73F43A99A15A6094E90 ] C:WindowsSystem32driversagilevpn.sys 18:16:20.0542 2188 C:WindowsSystem32driversagilevpn.sys - ok 18:16:20.0557 2188 [ 30639C932D9FEF22B31268FE25A1B6E5 ] C:WindowsSystem32driversndistapi.sys 18:16:20.0557 2188 C:WindowsSystem32driversndistapi.sys - ok 18:16:20.0557 2188 [ 53F7305169863F0A2BDDC49E116C2E11 ] C:WindowsSystem32driversndiswan.sys 18:16:20.0557 2188 C:WindowsSystem32driversndiswan.sys - ok 18:16:20.0557 2188 [ 471815800AE33E6F1C32FB1B97C490CA ] C:WindowsSystem32driversrasl2tp.sys 18:16:20.0557 2188 C:WindowsSystem32driversrasl2tp.sys - ok 18:16:20.0557 2188 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] C:WindowsSystem32driversraspppoe.sys 18:16:20.0557 2188 C:WindowsSystem32driversraspppoe.sys - ok 18:16:20.0557 2188 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] C:WindowsSystem32driversraspptp.sys 18:16:20.0557 2188 C:WindowsSystem32driversraspptp.sys - ok 18:16:20.0573 2188 [ 24FBF5CC5C04150073C315A7C83521EE ] C:WindowsSystem32driversks.sys 18:16:20.0573 2188 C:WindowsSystem32driversks.sys - ok 18:16:20.0573 2188 [ E8B1E447B008D07FF47D016C2B0EEECB ] C:WindowsSystem32driversrassstp.sys 18:16:20.0573 2188 C:WindowsSystem32driversrassstp.sys - ok 18:16:20.0573 2188 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] C:WindowsSystem32driversrdpbus.sys 18:16:20.0573 2188 C:WindowsSystem32driversrdpbus.sys - ok 18:16:20.0573 2188 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] C:WindowsSystem32driversswenum.sys 18:16:20.0573 2188 C:WindowsSystem32driversswenum.sys - ok 18:16:20.0588 2188 [ DC54A574663A895C8763AF0FA1FF7561 ] C:WindowsSystem32driversumbus.sys 18:16:20.0588 2188 C:WindowsSystem32driversumbus.sys - ok 18:16:20.0588 2188 [ 287C6C9410B111B68B52CA298F7B8C24 ] C:WindowsSystem32driversusbhub.sys 18:16:20.0588 2188 C:WindowsSystem32driversusbhub.sys - ok 18:16:20.0588 2188 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] C:WindowsSystem32driversndproxy.sys 18:16:20.0588 2188 C:WindowsSystem32driversndproxy.sys - ok 18:16:20.0588 2188 [ 21D26064AEDB4988F785BB4A3A2C051E ] C:WindowsSystem32driversdrmk.sys 18:16:20.0588 2188 C:WindowsSystem32driversdrmk.sys - ok 18:16:20.0604 2188 [ 2D648572BA9A610952FCAFBA1E119C2D ] C:WindowsSystem32driversAtiHdmi.sys 18:16:20.0604 2188 C:WindowsSystem32driversAtiHdmi.sys - ok 18:16:20.0604 2188 [ 6869281E78CB31A43E969F06B57347C4 ] C:WindowsSystem32driversksthunk.sys 18:16:20.0604 2188 C:WindowsSystem32driversksthunk.sys - ok 18:16:20.0604 2188 [ 32E11315B5126921FFD9074840EF13D3 ] C:WindowsSystem32driversportcls.sys 18:16:20.0604 2188 C:WindowsSystem32driversportcls.sys - ok 18:16:20.0604 2188 [ CAF5A9708671B14B9670260735B22C4E ] C:WindowsSystem32driversstwrt64.sys 18:16:20.0604 2188 C:WindowsSystem32driversstwrt64.sys - ok 18:16:20.0620 2188 [ BF24D6F2ED97FE830BFD52B246F98E67 ] C:WindowsSystem32driversdxapi.sys 18:16:20.0620 2188 C:WindowsSystem32driversdxapi.sys - ok 18:16:20.0620 2188 [ 86F96630D28523F1C402C783F046DEF1 ] C:WindowsSystem32win32k.sys 18:16:20.0620 2188 C:WindowsSystem32win32k.sys - ok 18:16:20.0620 2188 [ CEC1EDF4022DC4DCA40384DCEC672B0E ] C:WindowsSystem32csrsrv.dll 18:16:20.0620 2188 C:WindowsSystem32csrsrv.dll - ok 18:16:20.0620 2188 [ 60C2862B4BF0FD9F582EF344C2B1EC72 ] C:WindowsSystem32csrss.exe 18:16:20.0620 2188 C:WindowsSystem32csrss.exe - ok 18:16:20.0635 2188 [ BA0CD8C393E8C9F83354106093832C7B ] C:WindowsSystem32basesrv.dll 18:16:20.0635 2188 C:WindowsSystem32basesrv.dll - ok 18:16:20.0635 2188 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:WindowsSystem32winsrv.dll 18:16:20.0635 2188 C:WindowsSystem32winsrv.dll - ok 18:16:20.0635 2188 [ 49EE2E52E6CD03947DAD72F65367BE06 ] C:WindowsSystem32drivershidparse.sys 18:16:20.0635 2188 C:WindowsSystem32drivershidparse.sys - ok 18:16:20.0635 2188 [ B03D591DC7DA45ECE20B3B467E6AADAA ] C:WindowsSystem32driversmonitor.sys 18:16:20.0635 2188 C:WindowsSystem32driversmonitor.sys - ok 18:16:20.0651 2188 [ 8B0E40E7E8BBF5ACF390465609D89FF1 ] C:WindowsSystem32drivershidclass.sys 18:16:20.0651 2188 C:WindowsSystem32drivershidclass.sys - ok 18:16:20.0651 2188 [ 9592090A7E2B61CD582B612B6DF70536 ] C:WindowsSystem32drivershidusb.sys 18:16:20.0651 2188 C:WindowsSystem32drivershidusb.sys - ok 18:16:20.0651 2188 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] C:WindowsSystem32driversmouhid.sys 18:16:20.0651 2188 C:WindowsSystem32driversmouhid.sys - ok 18:16:20.0651 2188 [ 6F1A3157A1C89435352CEB543CDB359C ] C:WindowsSystem32driversusbccgp.sys 18:16:20.0651 2188 C:WindowsSystem32driversusbccgp.sys - ok 18:16:20.0666 2188 [ 454800C2BC7F3927CE030141EE4F4C50 ] C:WindowsSystem32driversusbvideo.sys 18:16:20.0666 2188 C:WindowsSystem32driversusbvideo.sys - ok 18:16:20.0666 2188 [ F29FE765E1448EF371CFE05BFAC74ADB ] C:WindowsSystem32tsddd.dll 18:16:20.0666 2188 C:WindowsSystem32tsddd.dll - ok 18:16:20.0666 2188 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] C:WindowsSystem32driverskbdhid.sys 18:16:20.0666 2188 C:WindowsSystem32driverskbdhid.sys - ok 18:16:20.0666 2188 [ 78523A26F5604C0568FE9D1CE86E36F4 ] C:WindowsSystem32KBDUS.DLL 18:16:20.0666 2188 C:WindowsSystem32KBDUS.DLL - ok 18:16:20.0666 2188 [ 2C942733A5983DD4502219FF37C7EBC7 ] C:WindowsSystem32profapi.dll 18:16:20.0666 2188 C:WindowsSystem32profapi.dll - ok 18:16:20.0682 2188 [ C2A8CB1275ECB85D246A9ECC02A728E3 ] C:WindowsSystem32RpcRtRemote.dll 18:16:20.0682 2188 C:WindowsSystem32RpcRtRemote.dll - ok 18:16:20.0682 2188 [ D6160F9D869BA3AF0B787F971DB56368 ] C:WindowsSystem32sxssrv.dll 18:16:20.0682 2188 C:WindowsSystem32sxssrv.dll - ok 18:16:20.0682 2188 [ 94355C28C1970635A31B3FE52EB7CEBA ] C:WindowsSystem32wininit.exe 18:16:20.0682 2188 C:WindowsSystem32wininit.exe - ok 18:16:20.0682 2188 [ 05569A79BF4693670B709144382D02D4 ] C:WindowsSystem32cdd.dll 18:16:20.0682 2188 C:WindowsSystem32cdd.dll - ok 18:16:20.0698 2188 [ 9CEAD32E79A62150FE9F8557E58E008B ] C:WindowsSystem32sxs.dll 18:16:20.0698 2188 C:WindowsSystem32sxs.dll - ok 18:16:20.0698 2188 [ B26B1801356760841C3BC69F9F91537F ] C:WindowsSystem32WlS0WndH.dll 18:16:20.0698 2188 C:WindowsSystem32WlS0WndH.dll - ok 18:16:20.0698 2188 [ 784FA3DF338E2E8F5F0389D6FAC428AF ] C:WindowsSystem32cryptbase.dll 18:16:20.0698 2188 C:WindowsSystem32cryptbase.dll - ok 18:16:20.0698 2188 [ 90499F3163A9F815CF196A205EA3CD5D ] C:WindowsSystem32apphelp.dll 18:16:20.0698 2188 C:WindowsSystem32apphelp.dll - ok 18:16:20.0713 2188 [ C118A82CD78818C29AB228366EBF81C3 ] C:WindowsSystem32lsass.exe 18:16:20.0713 2188 C:WindowsSystem32lsass.exe - ok 18:16:20.0713 2188 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:WindowsSystem32services.exe 18:16:20.0713 2188 C:WindowsSystem32services.exe - ok 18:16:20.0713 2188 [ 66A6063D0BAAD3F7B2B9868859E0743B ] C:WindowsSystem32lsasrv.dll 18:16:20.0713 2188 C:WindowsSystem32lsasrv.dll - ok 18:16:20.0713 2188 [ 9662EE182644511439F1C53745DC1C88 ] C:WindowsSystem32lsm.exe 18:16:20.0713 2188 C:WindowsSystem32lsm.exe - ok 18:16:20.0729 2188 [ BBCDF350817BA86416C0F06B6981BE8D ] C:WindowsSystem32scesrv.dll 18:16:20.0729 2188 C:WindowsSystem32scesrv.dll - ok 18:16:20.0729 2188 [ E914A50A151DFFE63D3935226DB5E2C1 ] C:WindowsSystem32scext.dll 18:16:20.0729 2188 C:WindowsSystem32scext.dll - ok 18:16:20.0729 2188 [ 0144D8D75A0B12938AEEE859E3310A46 ] C:WindowsSystem32secur32.dll 18:16:20.0729 2188 C:WindowsSystem32secur32.dll - ok 18:16:20.0729 2188 [ B66BC8B20B7F33975865B1DF99783FD8 ] C:WindowsSystem32sspicli.dll 18:16:20.0729 2188 C:WindowsSystem32sspicli.dll - ok 18:16:20.0744 2188 [ 3A0CE5FE781708CD6ABD55313607EC8B ] C:WindowsSystem32sspisrv.dll 18:16:20.0744 2188 C:WindowsSystem32sspisrv.dll - ok 18:16:20.0744 2188 [ 68083118797CAF30FB2EA3E71494D67E ] C:WindowsSystem32sysntfy.dll 18:16:20.0744 2188 C:WindowsSystem32sysntfy.dll - ok 18:16:20.0744 2188 [ DEE7267C5D232A3B816866872CE199E6 ] C:WindowsSystem32wmsgapi.dll 18:16:20.0744 2188 C:WindowsSystem32wmsgapi.dll - ok 18:16:20.0744 2188 [ A744BA6E04C8AA4592818178DBF89521 ] C:WindowsSystem32samsrv.dll 18:16:20.0744 2188 C:WindowsSystem32samsrv.dll - ok 18:16:20.0744 2188 [ 3A9C9BAF610B0DD4967086040B3B62A9 ] C:WindowsSystem32srvcli.dll 18:16:20.0744 2188 C:WindowsSystem32srvcli.dll - ok 18:16:20.0760 2188 [ 3A061472B38233BAFF9CFEFF2E49C46B ] C:WindowsSystem32cryptdll.dll 18:16:20.0760 2188 C:WindowsSystem32cryptdll.dll - ok 18:16:20.0760 2188 [ 3C073B0C596A0AF84933E7406766B040 ] C:WindowsSystem32wevtapi.dll 18:16:20.0760 2188 C:WindowsSystem32wevtapi.dll - ok 18:16:20.0760 2188 [ 7FBEBD2229EA5FD48D41B199EC2D541C ] C:WindowsSystem32authz.dll 18:16:20.0760 2188 C:WindowsSystem32authz.dll - ok 18:16:20.0760 2188 [ 86FE1B1F8FD42CD0DB641AB1CDB13093 ] C:WindowsSystem32cngaudit.dll 18:16:20.0760 2188 C:WindowsSystem32cngaudit.dll - ok 18:16:20.0776 2188 [ 5F3307352216618221A17CFEF273EEE2 ] C:WindowsSystem32ncrypt.dll 18:16:20.0776 2188 C:WindowsSystem32ncrypt.dll - ok 18:16:20.0776 2188 [ B9A95365E52F421A20E1501935FADDA5 ] C:WindowsSystem32bcrypt.dll 18:16:20.0776 2188 C:WindowsSystem32bcrypt.dll - ok 18:16:20.0776 2188 [ 02B64609F865A39365FF88580DF11738 ] C:WindowsSystem32msprivs.dll 18:16:20.0776 2188 C:WindowsSystem32msprivs.dll - ok 18:16:20.0776 2188 [ C6505DE3561537BA1004D638C2F93F2F ] C:WindowsSystem32netjoin.dll 18:16:20.0776 2188 C:WindowsSystem32netjoin.dll - ok 18:16:20.0791 2188 [ 50532FCD7ECF02DD169CE5C485F02534 ] C:WindowsSystem32negoexts.dll 18:16:20.0791 2188 C:WindowsSystem32negoexts.dll - ok 18:16:20.0791 2188 [ D0C2FBB6D97416B0166478FC7AE2B212 ] C:WindowsSystem32cryptsp.dll 18:16:20.0791 2188 C:WindowsSystem32cryptsp.dll - ok 18:16:20.0791 2188 [ 44E1A196DFCB53B01FE4B855C3B56A15 ] C:WindowsSystem32kerberos.dll 18:16:20.0791 2188 C:WindowsSystem32kerberos.dll - ok 18:16:20.0791 2188 [ 1D5185A4C7E6695431AE4B55C3D7D333 ] C:WindowsSystem32mswsock.dll 18:16:20.0791 2188 C:WindowsSystem32mswsock.dll - ok 18:16:20.0807 2188 [ EF12B8385AA2849999008A977918F96B ] C:WindowsSystem32msv1_0.dll 18:16:20.0807 2188 C:WindowsSystem32msv1_0.dll - ok 18:16:20.0807 2188 [ EC7CBFF96B05ECF3D366355B3C64ADCF ] C:WindowsSystem32wship6.dll 18:16:20.0807 2188 C:WindowsSystem32wship6.dll - ok 18:16:20.0807 2188 [ AA339DD8BB128EF66660DFBBB59043D3 ] C:WindowsSystem32netlogon.dll 18:16:20.0807 2188 C:WindowsSystem32netlogon.dll - ok 18:16:20.0807 2188 [ 492D07D79E7024CA310867B526D9636D ] C:WindowsSystem32dnsapi.dll 18:16:20.0807 2188 C:WindowsSystem32dnsapi.dll - ok 18:16:20.0822 2188 [ 8FFE297B8449386E7B6851458B6E474E ] C:WindowsSystem32logoncli.dll 18:16:20.0822 2188 C:WindowsSystem32logoncli.dll - ok 18:16:20.0822 2188 [ 1573C45E65DE32B1BC3572634F8F1E8E ] C:WindowsSystem32schannel.dll 18:16:20.0822 2188 C:WindowsSystem32schannel.dll - ok 18:16:20.0822 2188 [ 1151B1BAA6F350B1DB6598E0FEA7C457 ] C:WindowsSystem32winlogon.exe 18:16:20.0822 2188 C:WindowsSystem32winlogon.exe - ok 18:16:20.0822 2188 [ 95FB6CA4374E343DDD653FCC43F9D26B ] C:WindowsSystem32wdigest.dll 18:16:20.0822 2188 C:WindowsSystem32wdigest.dll - ok 18:16:20.0838 2188 [ 0D9764D58C5EFD672B7184854B152E5E ] C:WindowsSystem32winsta.dll 18:16:20.0838 2188 C:WindowsSystem32winsta.dll - ok 18:16:20.0838 2188 [ 5D8874A8C11DDDDE29E12DE0E2013493 ] C:WindowsSystem32rsaenh.dll 18:16:20.0838 2188 C:WindowsSystem32rsaenh.dll - ok 18:16:20.0838 2188 [ 8A25506B6948EFBD5A7F37E53CCD36D9 ] C:WindowsSystem32TSpkg.dll 18:16:20.0838 2188 C:WindowsSystem32TSpkg.dll - ok 18:16:20.0838 2188 [ E08088A97F95345E181C3DFCE2C615EF ] C:WindowsSystem32pku2u.dll 18:16:20.0838 2188 C:WindowsSystem32pku2u.dll - ok 18:16:20.0838 2188 [ D6C7780A364C6BBACFA796BAB9F1B374 ] C:WindowsSystem32bcryptprimitives.dll 18:16:20.0838 2188 C:WindowsSystem32bcryptprimitives.dll - ok 18:16:20.0854 2188 [ 52D3D5E3586988D4D9E34ACAAC33105C ] C:WindowsSystem32credssp.dll 18:16:20.0854 2188 C:WindowsSystem32credssp.dll - ok 18:16:20.0854 2188 [ 90BDEFC5DF334E5100EAA781D798DE1A ] C:WindowsSystem32efslsaext.dll 18:16:20.0854 2188 C:WindowsSystem32efslsaext.dll - ok 18:16:20.0854 2188 [ ED78427259134C63ED69804D2132B86C ] C:WindowsSystem32scecli.dll 18:16:20.0854 2188 C:WindowsSystem32scecli.dll - ok 18:16:20.0854 2188 [ 7CC7DF5B654DA579613F811D8C637E29 ] C:WindowsSystem32ubpm.dll 18:16:20.0854 2188 C:WindowsSystem32ubpm.dll - ok 18:16:20.0869 2188 [ C78655BC80301D76ED4FEF1C1EA40A7D ] C:WindowsSystem32svchost.exe 18:16:20.0869 2188 C:WindowsSystem32svchost.exe - ok 18:16:20.0869 2188 [ 25FBDEF06C4D92815B353F6E792C8129 ] C:WindowsSystem32umpnpmgr.dll 18:16:20.0869 2188 C:WindowsSystem32umpnpmgr.dll - ok 18:16:20.0869 2188 [ E6EB44ABAAF1F330119F854856C53EBE ] C:WindowsSystem32SPInf.dll 18:16:20.0869 2188 C:WindowsSystem32SPInf.dll - ok 18:16:20.0869 2188 [ CD1B5AD07E5F7FEF30E055DCC9E96180 ] C:WindowsSystem32devrtl.dll 18:16:20.0869 2188 C:WindowsSystem32devrtl.dll - ok 18:16:20.0885 2188 [ 9C9307C95671AC962F3D6EB3A4A89BAE ] C:WindowsSystem32gpapi.dll 18:16:20.0885 2188 C:WindowsSystem32gpapi.dll - ok 18:16:20.0885 2188 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] C:WindowsSystem32umpo.dll 18:16:20.0885 2188 C:WindowsSystem32umpo.dll - ok 18:16:20.0885 2188 [ 7A17485DC7D8A7AC81321A42CD034519 ] C:WindowsSystem32userenv.dll 18:16:20.0885 2188 C:WindowsSystem32userenv.dll - ok 18:16:20.0885 2188 [ F6C011B46FAEEF33536B2E80F48B5CBE ] C:WindowsSystem32pcwum.dll 18:16:20.0885 2188 C:WindowsSystem32pcwum.dll - ok 18:16:20.0900 2188 [ 716175021BDA290504CE434273F666BC ] C:WindowsSystem32powrprof.dll 18:16:20.0900 2188 C:WindowsSystem32powrprof.dll - ok 18:16:20.0900 2188 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] C:WindowsSystem32driversluafv.sys 18:16:20.0900 2188 C:WindowsSystem32driversluafv.sys - ok 18:16:20.0900 2188 [ 5C627D1B1138676C0A7AB2C2C190D123 ] C:WindowsSystem32rpcss.dll 18:16:20.0900 2188 C:WindowsSystem32rpcss.dll - ok 18:16:20.0900 2188 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] C:WindowsSystem32RpcEpMap.dll 18:16:20.0900 2188 C:WindowsSystem32RpcEpMap.dll - ok 18:16:20.0916 2188 [ 31559F3244C6BC00A52030CAA83B6B91 ] C:WindowsSystem32WSHTCPIP.DLL 18:16:20.0916 2188 C:WindowsSystem32WSHTCPIP.DLL - ok 18:16:20.0916 2188 [ 388E79AF1C9E4D84A8559FA77F804CF6 ] C:WindowsSystem32atiesrxx.exe 18:16:20.0916 2188 C:WindowsSystem32atiesrxx.exe - ok 18:16:20.0916 2188 [ 9AD9E06F8656F296D91FAE8EE5B95A27 ] C:WindowsSystem32FirewallAPI.dll 18:16:20.0916 2188 C:WindowsSystem32FirewallAPI.dll - ok 18:16:20.0916 2188 [ BD3674BE7FC9D8D3732C83E8499576ED ] C:WindowsSystem32wtsapi32.dll 18:16:20.0916 2188 C:WindowsSystem32wtsapi32.dll - ok 18:16:20.0932 2188 [ 94E026870A55AAEAFF7853C1754091E9 ] C:WindowsSystem32version.dll 18:16:20.0932 2188 C:WindowsSystem32version.dll - ok 18:16:20.0932 2188 [ 6011714C8C5C55CBFFAD24D61E879FBD ] C:WindowsSystem32wevtsvc.dll 18:16:20.0932 2188 C:WindowsSystem32wevtsvc.dll - ok 18:16:20.0932 2188 [ F23FEF6D569FCE88671949894A8BECF1 ] C:WindowsSystem32audiosrv.dll 18:16:20.0932 2188 C:WindowsSystem32audiosrv.dll - ok 18:16:20.0932 2188 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] C:WindowsSystem32profsvc.dll 18:16:20.0932 2188 C:WindowsSystem32profsvc.dll - ok 18:16:20.0932 2188 [ 588CD0C78A7FAAE4186B5EEA0AF3ED67 ] C:WindowsSystem32adtschema.dll 18:16:20.0932 2188 C:WindowsSystem32adtschema.dll - ok 18:16:20.0947 2188 [ C4C183E6551084039EC862DA1C945E3D ] C:WindowsSystem32FntCache.dll 18:16:20.0947 2188 C:WindowsSystem32FntCache.dll - ok 18:16:20.0947 2188 [ 78A1E65207484B7F8D3217507745F47C ] C:WindowsSystem32avrt.dll 18:16:20.0947 2188 C:WindowsSystem32avrt.dll - ok 18:16:20.0947 2188 [ DA7702025DFD169B909C4DA3126762CC ] C:WindowsSystem32DriverStoreFileRepositorystwrt64.inf_amd64_neutral_0057cbec48a2d7cfstacsv64.exe 18:16:20.0947 2188 C:WindowsSystem32DriverStoreFileRepositorystwrt64.inf_amd64_neutral_0057cbec48a2d7cfstacsv64.exe - ok 18:16:20.0947 2188 [ E40E80D0304A73E8D269F7141D77250B ] C:WindowsSystem32mmcss.dll 18:16:20.0947 2188 C:WindowsSystem32mmcss.dll - ok 18:16:20.0963 2188 [ 227E2C382A1E02F8D4965E664D3BBE43 ] C:WindowsSystem32MMDevAPI.dll 18:16:20.0963 2188 C:WindowsSystem32MMDevAPI.dll - ok 18:16:20.0963 2188 [ F06BB4E336EA57511FDBAFAFCC47DE62 ] C:WindowsSystem32propsys.dll 18:16:20.0963 2188 C:WindowsSystem32propsys.dll - ok 18:16:20.0963 2188 [ 9110FFAD124283F37D38771BB60556AF ] C:WindowsSystem32dsound.dll 18:16:20.0963 2188 C:WindowsSystem32dsound.dll - ok 18:16:20.0963 2188 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] C:WindowsSystem32wlansvc.dll 18:16:20.0963 2188 C:WindowsSystem32wlansvc.dll - ok 18:16:20.0978 2188 [ DA6B67270FD9DB3697B20FCE94950741 ] C:WindowsSystem32driversfltMgr.sys 18:16:20.0978 2188 C:WindowsSystem32driversfltMgr.sys - ok 18:16:20.0978 2188 [ EF2AE43BCD46ABB13FC3E5B2B1935C73 ] C:WindowsSystem32winmm.dll 18:16:20.0978 2188 C:WindowsSystem32winmm.dll - ok 18:16:20.0978 2188 [ 25CFD5B46A42A3C8DE2983DE93B0E807 ] C:WindowsSystem32stapi64.dll 18:16:20.0978 2188 C:WindowsSystem32stapi64.dll - ok 18:16:20.0978 2188 [ A3DB3C17EE6CAE65D53602B4E80BCCBC ] C:WindowsSystem32PSHED.DLL 18:16:20.0978 2188 C:WindowsSystem32PSHED.DLL - ok 18:16:20.0994 2188 [ D5CCA1453B98A5801E6D5FF0FF89DC6C ] C:WindowsSystem32audiodg.exe 18:16:20.0994 2188 C:WindowsSystem32audiodg.exe - ok 18:16:20.0994 2188 [ 50544D04AD845C43130B70212EC05CCD ] C:WindowsSystem32microsoft-windows-kernel-power-events.dll 18:16:20.0994 2188 C:WindowsSystem32microsoft-windows-kernel-power-events.dll - ok 18:16:20.0994 2188 [ 11338E0557B07BC32CDB980B6EDB35AA ] C:WindowsSystem32ci.dll 18:16:20.0994 2188 C:WindowsSystem32ci.dll - ok 18:16:20.0994 2188 [ 1F4492FE41767CDB8B89D17655847CDD ] C:WindowsSystem32ntmarta.dll 18:16:20.0994 2188 C:WindowsSystem32ntmarta.dll - ok 18:16:21.0010 2188 [ B0945E538CF906BBDDC5A11C8EE868CC ] C:WindowsSystem32microsoft-windows-kernel-processor-power-events.dll 18:16:21.0010 2188 C:WindowsSystem32microsoft-windows-kernel-processor-power-events.dll - ok 18:16:21.0010 2188 [ DC220AE6F64819099F7EBD6F137E32E7 ] C:WindowsSystem32AudioSes.dll 18:16:21.0010 2188 C:WindowsSystem32AudioSes.dll - ok 18:16:21.0010 2188 [ 5EDBB34736DD7AC1A73CF8792A835E10 ] C:WindowsSystem32AudioEng.dll 18:16:21.0010 2188 C:WindowsSystem32AudioEng.dll - ok 18:16:21.0010 2188 [ C1395286B822E306B4FE1568A8A77813 ] C:WindowsSystem32AUDIOKSE.dll 18:16:21.0010 2188 C:WindowsSystem32AUDIOKSE.dll - ok 18:16:21.0025 2188 [ 8560FFFC8EB3A806DCD4F82252CFC8C6 ] C:WindowsSystem32ksuser.dll 18:16:21.0025 2188 C:WindowsSystem32ksuser.dll - ok 18:16:21.0025 2188 [ 73C1D54F4683C75B98EDB25B03016089 ] C:WindowsSystem32stapo64.dll 18:16:21.0025 2188 C:WindowsSystem32stapo64.dll - ok 18:16:21.0025 2188 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] C:WindowsSystem32cscsvc.dll 18:16:21.0025 2188 C:WindowsSystem32cscsvc.dll - ok 18:16:21.0025 2188 [ 715F03B4C7223349768013EA95D9E5B7 ] C:WindowsSystem32LogonUI.exe 18:16:21.0025 2188 C:WindowsSystem32LogonUI.exe - ok 18:16:21.0025 2188 [ 8578CD6C0C1BCE8FD6C26F16F1404920 ] C:WindowsSystem32AESTAC64.dll 18:16:21.0025 2188 C:WindowsSystem32AESTAC64.dll - ok 18:16:21.0041 2188 [ 0BEE002C68E28CE6DA161DCF1376D7D7 ] C:WindowsSystem32authui.dll 18:16:21.0041 2188 C:WindowsSystem32authui.dll - ok 18:16:21.0041 2188 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] C:WindowsSystem32gpsvc.dll 18:16:21.0041 2188 C:WindowsSystem32gpsvc.dll - ok 18:16:21.0041 2188 [ B4F1BFD9165FDD72C03B7D9C20A39F71 ] C:WindowsSystem32ctapo64.dll 18:16:21.0041 2188 C:WindowsSystem32ctapo64.dll - ok 18:16:21.0041 2188 [ B3BFBD758506ECB50C5804AAA76318F9 ] C:WindowsSystem32cryptui.dll 18:16:21.0041 2188 C:WindowsSystem32cryptui.dll - ok 18:16:21.0056 2188 [ 29910D50542B1AA0F162EF3339C61B6D ] C:WindowsSystem32PeerDist.dll 18:16:21.0056 2188 C:WindowsSystem32PeerDist.dll - ok 18:16:21.0056 2188 [ 46BB91A169B9B31FF44EB04C48EC1D41 ] C:WindowsSystem32nlaapi.dll 18:16:21.0056 2188 C:WindowsSystem32nlaapi.dll - ok 18:16:21.0056 2188 [ 58775492FFD419248B08325E583C527F ] C:WindowsSystem32atl.dll 18:16:21.0056 2188 C:WindowsSystem32atl.dll - ok 18:16:21.0056 2188 [ 2B81776DA02017A37FE26C662827470E ] C:WindowsSystem32IPHLPAPI.DLL 18:16:21.0056 2188 C:WindowsSystem32IPHLPAPI.DLL - ok 18:16:21.0072 2188 [ 4C9210E8F4E052F6A4EB87716DA0C24C ] C:WindowsSystem32winnsi.dll 18:16:21.0072 2188 C:WindowsSystem32winnsi.dll - ok 18:16:21.0072 2188 [ BAAFAF9CEAEC0B73C2A3550A01F6CECB ] C:WindowsSystem32taskschd.dll 18:16:21.0072 2188 C:WindowsSystem32taskschd.dll - ok 18:16:21.0072 2188 [ 4166F82BE4D24938977DD1746BE9B8A0 ] C:WindowsSystem32es.dll 18:16:21.0072 2188 C:WindowsSystem32es.dll - ok 18:16:21.0072 2188 [ 7FA8FDC2C2A27817FD0F624E78D3B50C ] C:Windowswinsxsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9accomctl32.dll 18:16:21.0072 2188 C:Windowswinsxsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9accomctl32.dll - ok 18:16:21.0088 2188 [ 1A47D52E303B7543E4E6026595B95422 ] C:WindowsSystem32comres.dll 18:16:21.0088 2188 C:WindowsSystem32comres.dll - ok 18:16:21.0088 2188 [ 5B3EBFC3DA142324B388DDCC4465E1FF ] C:WindowsSystem32samlib.dll 18:16:21.0088 2188 C:WindowsSystem32samlib.dll - ok 18:16:21.0088 2188 [ 4E9C2DB10F7E6AE91BF761139D4B745B ] C:WindowsSystem32shacct.dll 18:16:21.0088 2188 C:WindowsSystem32shacct.dll - ok 18:16:21.0088 2188 [ 862596399AAFD2A21DB2AF9270CD4F70 ] C:WindowsSystem32mstask.dll 18:16:21.0088 2188 C:WindowsSystem32mstask.dll - ok 18:16:21.0103 2188 [ D29E998E8277666982B4F0303BF4E7AF ] C:WindowsSystem32uxtheme.dll 18:16:21.0103 2188 C:WindowsSystem32uxtheme.dll - ok 18:16:21.0103 2188 [ 179E8401224D557ECFF3695F2016EA5B ] C:Windowswinsxsamd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c8271ec7765GdiPlus.dll 18:16:21.0103 2188 C:Windowswinsxsamd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c8271ec7765GdiPlus.dll - ok 18:16:21.0103 2188 [ 3CB6A7286422C72C34DAB54A5DFF1A34 ] C:WindowsSystem32dui70.dll 18:16:21.0103 2188 C:WindowsSystem32dui70.dll - ok 18:16:21.0103 2188 [ 8CCDE014A4CDF84564E03ACE064CA753 ] C:WindowsSystem32duser.dll 18:16:21.0103 2188 C:WindowsSystem32duser.dll - ok 18:16:21.0119 2188 [ D7F1EF374A90709B31591823B002F918 ] C:WindowsSystem32SndVolSSO.dll 18:16:21.0119 2188 C:WindowsSystem32SndVolSSO.dll - ok 18:16:21.0119 2188 [ DA1B7075260F3872585BFCDD668C648B ] C:WindowsSystem32dwmapi.dll 18:16:21.0119 2188 C:WindowsSystem32dwmapi.dll - ok 18:16:21.0119 2188 [ 896F15A6434D93EDB42519D5E18E6B50 ] C:WindowsSystem32hid.dll 18:16:21.0119 2188 C:WindowsSystem32hid.dll - ok 18:16:21.0119 2188 [ 6F8B48F3D343E4B186AB6A9E302B7E16 ] C:WindowsSystem32xmllite.dll 18:16:21.0119 2188 C:WindowsSystem32xmllite.dll - ok 18:16:21.0119 2188 [ BDDF242A49E7B7DC5CCEC291BCE53ACB ] C:WindowsSystem32WindowsCodecs.dll 18:16:21.0119 2188 C:WindowsSystem32WindowsCodecs.dll - ok 18:16:21.0134 2188 [ 9F2BACD5E1776A4BB7CC0EC3C3A4F96D ] C:WindowsSystem32winbrand.dll 18:16:21.0134 2188 C:WindowsSystem32winbrand.dll - ok 18:16:21.0134 2188 [ C2762A57DF0EE85E63CE4893C5215313 ] C:WindowsSystem32VaultCredProvider.dll 18:16:21.0134 2188 C:WindowsSystem32VaultCredProvider.dll - ok 18:16:21.0134 2188 [ CA2985996BB49924B677113DF95CFEA7 ] C:WindowsSystem32SmartcardCredentialProvider.dll 18:16:21.0134 2188 C:WindowsSystem32SmartcardCredentialProvider.dll - ok 18:16:21.0134 2188 [ BF352E73615F5461AA6884472435A544 ] C:WindowsSystem32BioCredProv.dll 18:16:21.0134 2188 C:WindowsSystem32BioCredProv.dll - ok 18:16:21.0150 2188 [ CC0AB40F02D2C2A12209715A3C1B07B8 ] C:WindowsSystem32credui.dll 18:16:21.0150 2188 C:WindowsSystem32credui.dll - ok 18:16:21.0150 2188 [ 796B8123A7859AFD3A4AE10514DBAEB5 ] C:WindowsSystem32winbio.dll 18:16:21.0150 2188 C:WindowsSystem32winbio.dll - ok 18:16:21.0150 2188 [ EEEA40F0EDB0A6E5359E539E15D0BC77 ] C:WindowsSystem32netapi32.dll 18:16:21.0150 2188 C:WindowsSystem32netapi32.dll - ok 18:16:21.0150 2188 [ 6CECA4C6A489C9B2E6073AFDAAE3F607 ] C:WindowsSystem32netutils.dll 18:16:21.0150 2188 C:WindowsSystem32netutils.dll - ok 18:16:21.0166 2188 [ 44B9C66177651F3F53C87B665D58D17A ] C:WindowsSystem32vaultcli.dll 18:16:21.0166 2188 C:WindowsSystem32vaultcli.dll - ok 18:16:21.0166 2188 [ 3C91392D448F6E5D525A85B7550D8BA9 ] C:WindowsSystem32wkscli.dll 18:16:21.0166 2188 C:WindowsSystem32wkscli.dll - ok 18:16:21.0166 2188 [ 972C3301DB3DA91AE06A95F6B4160B1B ] C:WindowsSystem32certCredProvider.dll 18:16:21.0166 2188 C:WindowsSystem32certCredProvider.dll - ok 18:16:21.0166 2188 [ FC51229C7D4AFA0D6F186133728B95AB ] C:WindowsSystem32samcli.dll 18:16:21.0166 2188 C:WindowsSystem32samcli.dll - ok 18:16:21.0181 2188 [ 87FA0C48C3B2E9FEE518818FE26B15B5 ] C:WindowsSystem32rasplap.dll 18:16:21.0181 2188 C:WindowsSystem32rasplap.dll - ok 18:16:21.0181 2188 [ 019CD868461B646E09BDF04474C19341 ] C:WindowsSystem32rasapi32.dll 18:16:21.0181 2188 C:WindowsSystem32rasapi32.dll - ok 18:16:21.0181 2188 [ B28DEEC597C8DEB70C744C7CF9210E3E ] C:WindowsSystem32rasman.dll 18:16:21.0181 2188 C:WindowsSystem32rasman.dll - ok 18:16:21.0181 2188 [ B53C4B69B695EDA1B7E41D35CA4244E2 ] C:WindowsSystem32rtutils.dll 18:16:21.0181 2188 C:WindowsSystem32rtutils.dll - ok 18:16:21.0197 2188 [ CF636C92B762B26F0B39B38E92380A09 ] C:WindowsSystem32oleacc.dll 18:16:21.0197 2188 C:WindowsSystem32oleacc.dll - ok 18:16:21.0197 2188 [ 019BDD35DE269CB98B22DE8923C2AA3B ] C:WindowsSystem32UIAutomationCore.dll 18:16:21.0197 2188 C:WindowsSystem32UIAutomationCore.dll - ok 18:16:21.0197 2188 [ C32AB8FA018EF34C0F113BD501436D21 ] C:WindowsSystem32Sens.dll 18:16:21.0197 2188 C:WindowsSystem32Sens.dll - ok 18:16:21.0197 2188 [ F0344071948D1A1FA732231785A0664C ] C:WindowsSystem32themeservice.dll 18:16:21.0197 2188 C:WindowsSystem32themeservice.dll - ok 18:16:21.0197 2188 [ A77BE7CB3222B4FB0AC6C71D1C2698D4 ] C:WindowsSystem32dsrole.dll 18:16:21.0197 2188 C:WindowsSystem32dsrole.dll - ok 18:16:21.0212 2188 [ BE097F5BB10F9079FCEB2DC4E7E20F02 ] C:WindowsSystem32slc.dll 18:16:21.0212 2188 C:WindowsSystem32slc.dll - ok 18:16:21.0212 2188 [ 1538831CF8AD2979A04C423779465827 ] C:WindowsSystem32driverslltdio.sys 18:16:21.0212 2188 C:WindowsSystem32driverslltdio.sys - ok 18:16:21.0212 2188 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] C:WindowsSystem32uxsms.dll 18:16:21.0212 2188 C:WindowsSystem32uxsms.dll - ok 18:16:21.0212 2188 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] C:WindowsSystem32driversnwifi.sys 18:16:21.0212 2188 C:WindowsSystem32driversnwifi.sys - ok 18:16:21.0228 2188 [ 136185F9FB2CC61E573E676AA5402356 ] C:WindowsSystem32driversndisuio.sys 18:16:21.0228 2188 C:WindowsSystem32driversndisuio.sys - ok 18:16:21.0228 2188 [ 2DE06CDF3C2C7A5251F7AFAB5A481F53 ] C:WindowsSystem32atieclxx.exe 18:16:21.0228 2188 C:WindowsSystem32atieclxx.exe - ok 18:16:21.0228 2188 [ 9BC8610C32C96A2983A65DC21CAFA921 ] C:WindowsSystem32UXInit.dll 18:16:21.0228 2188 C:WindowsSystem32UXInit.dll - ok 18:16:21.0228 2188 [ 8DAC25E9D057292C6060D5B91E77E8DB ] C:WindowsSystem32atiadlxx.dll 18:16:21.0228 2188 C:WindowsSystem32atiadlxx.dll - ok 18:16:21.0244 2188 [ F3F570A51EAE3C9635623DCC52E474F5 ] C:WindowsSystem32atimuixx.dll 18:16:21.0244 2188 C:WindowsSystem32atimuixx.dll - ok 18:16:21.0244 2188 [ 5AA945234E9D4CCE4F715276B9AA712C ] C:WindowsSystem32imageres.dll 18:16:21.0244 2188 C:WindowsSystem32imageres.dll - ok 18:16:21.0244 2188 [ 893C44082C97F7AED3E7C180FA1F93D8 ] C:WindowsSystem32mpnotify.exe 18:16:21.0244 2188 C:WindowsSystem32mpnotify.exe - ok 18:16:21.0244 2188 [ DDC86E4F8E7456261E637E3552E804FF ] C:WindowsSystem32driversrspndr.sys 18:16:21.0244 2188 C:WindowsSystem32driversrspndr.sys - ok 18:16:21.0259 2188 [ 825E7A1F48FB8BCFBA27C178AAB4E275 ] C:WindowsSystem32driversTurboB.sys 18:16:21.0259 2188 C:WindowsSystem32driversTurboB.sys - ok 18:16:21.0259 2188 [ D54BFDF3E0C953F823B3D0BFE4732528 ] C:WindowsSystem32nsisvc.dll 18:16:21.0259 2188 C:WindowsSystem32nsisvc.dll - ok 18:16:21.0259 2188 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] C:WindowsSystem32eapsvc.dll 18:16:21.0259 2188 C:WindowsSystem32eapsvc.dll - ok 18:16:21.0259 2188 [ F9EC845C5EECF20E9A67F9F805F2EF1F ] C:WindowsSystem32keyiso.dll 18:16:21.0259 2188 C:WindowsSystem32keyiso.dll - ok 18:16:21.0275 2188 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] C:WindowsSystem32dnsrslvr.dll 18:16:21.0275 2188 C:WindowsSystem32dnsrslvr.dll - ok 18:16:21.0275 2188 [ 87356377F31DA5F20A833811CD59499C ] C:WindowsSystem32eapphost.dll 18:16:21.0275 2188 C:WindowsSystem32eapphost.dll - ok 18:16:21.0275 2188 [ F993A32249B66C9D622EA5592A8B76B8 ] C:WindowsSystem32lmhsvc.dll 18:16:21.0275 2188 C:WindowsSystem32lmhsvc.dll - ok 18:16:21.0275 2188 [ B73A6E4B319AFFE64582AC5C1801BB3F ] C:WindowsSystem32nrpsrv.dll 18:16:21.0275 2188 C:WindowsSystem32nrpsrv.dll - ok 18:16:21.0290 2188 [ 0040C486584A8E582C861CFB57AB5387 ] C:WindowsSystem32FWPUCLNT.DLL 18:16:21.0290 2188 C:WindowsSystem32FWPUCLNT.DLL - ok 18:16:21.0290 2188 [ 9FCA3A84338ADEF2AFF67CDA46EF8539 ] C:WindowsSystem32umb.dll 18:16:21.0290 2188 C:WindowsSystem32umb.dll - ok 18:16:21.0290 2188 [ A648C4A06DE367065B24056D067B4460 ] C:WindowsSystem32wlanmsm.dll 18:16:21.0290 2188 C:WindowsSystem32wlanmsm.dll - ok 18:16:21.0290 2188 [ 06A1386B6E3A0CBC368665C1840906F4 ] C:WindowsSystem32wlansec.dll 18:16:21.0290 2188 C:WindowsSystem32wlansec.dll - ok 18:16:21.0306 2188 [ F568F7C08458D69E4FCD8675BBB107E4 ] C:WindowsSystem32dhcpcsvc.dll 18:16:21.0306 2188 C:WindowsSystem32dhcpcsvc.dll - ok 18:16:21.0306 2188 [ 65522E77A1360DBC8D199DA3BF5EFFE4 ] C:WindowsSystem32eappprxy.dll 18:16:21.0306 2188 C:WindowsSystem32eappprxy.dll - ok 18:16:21.0306 2188 [ 73FCB7919DEE80EE556F2E498594EBAE ] C:WindowsSystem32onex.dll 18:16:21.0306 2188 C:WindowsSystem32onex.dll - ok 18:16:21.0306 2188 [ 0D753307D274F3688BD21C377B616700 ] C:WindowsSystem32eappcfg.dll 18:16:21.0306 2188 C:WindowsSystem32eappcfg.dll - ok 18:16:21.0306 2188 [ 97E43F324BE1503CB2FFB058534688DA ] C:WindowsSystem32l2gpstore.dll 18:16:21.0306 2188 C:WindowsSystem32l2gpstore.dll - ok 18:16:21.0322 2188 [ 7F1B4C6FF3B85F9ADF74055187B8A22C ] C:WindowsSystem32wlanutil.dll 18:16:21.0322 2188 C:WindowsSystem32wlanutil.dll - ok 18:16:21.0322 2188 [ 730BF204A595D5B6D7DC57A247CC741C ] C:WindowsSystem32wlgpclnt.dll 18:16:21.0322 2188 C:WindowsSystem32wlgpclnt.dll - ok 18:16:21.0322 2188 [ 7D5645EE0EA77D539828433D9B95F5EB ] C:WindowsSystem32WinSCard.dll 18:16:21.0322 2188 C:WindowsSystem32WinSCard.dll - ok 18:16:21.0322 2188 [ 99B91C5D2FCEF218CAD3600ECB62A799 ] C:WindowsSystem32msxml6.dll 18:16:21.0322 2188 C:WindowsSystem32msxml6.dll - ok 18:16:21.0337 2188 [ 43FAB56AE5F639AD59D7209693F4C4C2 ] C:WindowsSystem32wlanext.exe 18:16:21.0337 2188 C:WindowsSystem32wlanext.exe - ok 18:16:21.0337 2188 [ 1BCDB508143B517F21BBDAC10F5777BF ] C:WindowsSystem32conhost.exe 18:16:21.0337 2188 C:WindowsSystem32conhost.exe - ok 18:16:21.0337 2188 [ 28B97AF4BE035D73684A066253CF3CAB ] C:WindowsSystem32bcmihvsrv64.dll 18:16:21.0337 2188 C:WindowsSystem32bcmihvsrv64.dll - ok 18:16:21.0337 2188 [ 6CEF7856A3EFAC59470F6208F0F585CE ] C:WindowsSystem32mpr.dll 18:16:21.0337 2188 C:WindowsSystem32mpr.dll - ok 18:16:21.0353 2188 [ 80223885B9EB2DACEC4595D88F8345CB ] C:WindowsSystem32BCMLogon.dll 18:16:21.0353 2188 C:WindowsSystem32BCMLogon.dll - ok 18:16:21.0353 2188 [ A08C010D859F8EB42BDD7E1D55B8CA27 ] C:WindowsSystem32mscoree.dll 18:16:21.0353 2188 C:WindowsSystem32mscoree.dll - ok 18:16:21.0353 2188 [ E9017D8024BD96E95791DB3957C4230A ] C:Windowswinsxsamd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.4148_none_04480933ab2137b1mfc90u.dll 18:16:21.0353 2188 C:Windowswinsxsamd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.4148_none_04480933ab2137b1mfc90u.dll - ok 18:16:21.0353 2188 [ 0D7BE936A44E6B70F822D272A5CEBC22 ] C:Windowswinsxsamd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3cmsvcr90.dll 18:16:21.0353 2188 C:Windowswinsxsamd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3cmsvcr90.dll - ok 18:16:21.0368 2188 [ 14DFDEAF4E589ED3F1FF187A86B9408C ] C:Windowswinsxsamd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9comctl32.dll 18:16:21.0368 2188 C:Windowswinsxsamd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9comctl32.dll - ok 18:16:21.0368 2188 [ E424B3EF666B184CEE0B6871AAA8C9F6 ] C:WindowsSystem32msimg32.dll 18:16:21.0368 2188 C:WindowsSystem32msimg32.dll - ok 18:16:21.0368 2188 [ 5A4B1828E7CECC9C41C64F1A8142F42A ] C:Windowswinsxsamd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3cmsvcm90.dll 18:16:21.0368 2188 C:Windowswinsxsamd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3cmsvcm90.dll - ok 18:16:21.0368 2188 [ FC70F49F1B15802F5AE7F818AE3ECBC8 ] C:Windowswinsxsamd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.4148_none_01c6b44660ce74c3MFC90ENU.DLL 18:16:21.0368 2188 C:Windowswinsxsamd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.4148_none_01c6b44660ce74c3MFC90ENU.DLL - ok 18:16:21.0384 2188 [ AA794B099F776B37ACCDEAD00E0FBFC9 ] C:WindowsMicrosoft.NETFramework64v4.0.30319mscoreei.dll 18:16:21.0384 2188 C:WindowsMicrosoft.NETFramework64v4.0.30319mscoreei.dll - ok 18:16:21.0384 2188 [ 02CD5B2C3B017122CAC00BDB520CD7AC ] C:WindowsMicrosoft.NETFramework64v2.0.50727mscorwks.dll 18:16:21.0384 2188 C:WindowsMicrosoft.NETFramework64v2.0.50727mscorwks.dll - ok 18:16:21.0384 2188 [ 885D0942E0F28DB90919BE3129ECF279 ] C:WindowsSystem32dnsext.dll 18:16:21.0384 2188 C:WindowsSystem32dnsext.dll - ok 18:16:21.0384 2188 [ 357BE883C5236BFC7341CB9E82308908 ] C:WindowsSystem32wlanapi.dll 18:16:21.0384 2188 C:WindowsSystem32wlanapi.dll - ok 18:16:21.0400 2188 [ 3C06D5A929B798D0B13F6481242A0FD2 ] C:WindowsSystem32dhcpcsvc6.dll 18:16:21.0400 2188 C:WindowsSystem32dhcpcsvc6.dll - ok 18:16:21.0400 2188 [ 7373DE70D405FF08DC53336B83989138 ] C:WindowsSystem32rastls.dll 18:16:21.0400 2188 C:WindowsSystem32rastls.dll - ok 18:16:21.0400 2188 [ 6A84E68B538B8B04608BF2F0D426CE6F ] C:WindowsSystem32raschap.dll 18:16:21.0400 2188 C:WindowsSystem32raschap.dll - ok 18:16:21.0400 2188 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] C:WindowsSystem32dhcpcore.dll 18:16:21.0400 2188 C:WindowsSystem32dhcpcore.dll - ok 18:16:21.0415 2188 [ 13B0A570E1AE451C92DA550085D72CF3 ] C:Program FilesDellDell Wireless WLAN CardWLTRYSVC.EXE 18:16:21.0415 2188 C:Program FilesDellDell Wireless WLAN CardWLTRYSVC.EXE - ok 18:16:21.0415 2188 [ 3CC16A849E6092E43909F48EF0E60306 ] C:WindowsSystem32dhcpcore6.dll 18:16:21.0415 2188 C:WindowsSystem32dhcpcore6.dll - ok 18:16:21.0415 2188 [ AD3283C6BD152824A35E0E9B497AEACB ] C:Program FilesDellDell Wireless WLAN CardBCMWLTRY.EXE 18:16:21.0415 2188 C:Program FilesDellDell Wireless WLAN CardBCMWLTRY.EXE - ok 18:16:21.0415 2188 [ AAF932B4011D14052955D4B212A4DA8D ] C:WindowsSystem32shsvcs.dll 18:16:21.0415 2188 C:WindowsSystem32shsvcs.dll - ok 18:16:21.0431 2188 [ 262F6592C3299C005FD6BEC90FC4463A ] C:WindowsSystem32schedsvc.dll 18:16:21.0431 2188 C:WindowsSystem32schedsvc.dll - ok 18:16:21.0431 2188 [ BC414631876B2F28B8DAB08E849C12C5 ] C:WindowsSystem32ktmw32.dll 18:16:21.0431 2188 C:WindowsSystem32ktmw32.dll - ok 18:16:21.0431 2188 [ BE165318E0052A91F7EA36F515B5F2B1 ] C:Windowswinsxsamd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3cmsvcp90.dll 18:16:21.0431 2188 C:Windowswinsxsamd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3cmsvcp90.dll - ok 18:16:21.0431 2188 [ E36112A8A6C7F840169A7E92C12F4203 ] C:WindowsSystem32wsock32.dll 18:16:21.0431 2188 C:WindowsSystem32wsock32.dll - ok 18:16:21.0446 2188 [ 945E54F23C72D37B8CD1987AF0DB63BF ] C:WindowsSystem32fveapi.dll 18:16:21.0446 2188 C:WindowsSystem32fveapi.dll - ok 18:16:21.0446 2188 [ 891ECFD08E2C538B7948CBC45106D697 ] C:WindowsSystem32fvecerts.dll 18:16:21.0446 2188 C:WindowsSystem32fvecerts.dll - ok 18:16:21.0446 2188 [ 694865362F0965779F92BCFE97712323 ] C:WindowsSystem32tbs.dll 18:16:21.0446 2188 C:WindowsSystem32tbs.dll - ok 18:16:21.0446 2188 [ 6DC4A7242F565C9E9C9CCC7BB0FA75C7 ] C:WindowsSystem32taskcomp.dll 18:16:21.0446 2188 C:WindowsSystem32taskcomp.dll - ok 18:16:21.0462 2188 [ 8269210DAF3B12BC8300631B28A2A442 ] C:WindowsSystem32wiarpc.dll 18:16:21.0462 2188 C:WindowsSystem32wiarpc.dll - ok 18:16:21.0462 2188 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] C:WindowsSystem32drivershttp.sys 18:16:21.0462 2188 C:WindowsSystem32drivershttp.sys - ok 18:16:21.0462 2188 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] C:WindowsSystem32spoolsv.exe 18:16:21.0462 2188 C:WindowsSystem32spoolsv.exe - ok 18:16:21.0462 2188 [ 03706015DB44368375AEBE6339490E66 ] C:WindowsSystem32netcfgx.dll 18:16:21.0462 2188 C:WindowsSystem32netcfgx.dll - ok 18:16:21.0478 2188 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] C:WindowsSystem32driversvwifimp.sys 18:16:21.0478 2188 C:WindowsSystem32driversvwifimp.sys - ok 18:16:21.0478 2188 [ 27E461F0BE5BFF5FC737328F749538C3 ] C:WindowsSystem32driverssrvnet.sys 18:16:21.0478 2188 C:WindowsSystem32driverssrvnet.sys - ok 18:16:21.0478 2188 [ 6C02A83164F5CC0A262F4199F0871CF5 ] C:WindowsSystem32driversbowser.sys 18:16:21.0478 2188 C:WindowsSystem32driversbowser.sys - ok 18:16:21.0478 2188 [ A5D9106A73DC88564C825D317CAC68AC ] C:WindowsSystem32driversmrxsmb.sys 18:16:21.0478 2188 C:WindowsSystem32driversmrxsmb.sys - ok 18:16:21.0493 2188 [ D711B3C1D5F42C0C2415687BE09FC163 ] C:WindowsSystem32driversmrxsmb10.sys 18:16:21.0493 2188 C:WindowsSystem32driversmrxsmb10.sys - ok 18:16:21.0493 2188 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] C:WindowsSystem32driversmrxsmb20.sys 18:16:21.0493 2188 C:WindowsSystem32driversmrxsmb20.sys - ok 18:16:21.0493 2188 [ 06A754FE28A06F780A099703CFCAAA22 ] C:Windowswinsxsamd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6msvcr80.dll 18:16:21.0493 2188 C:Windowswinsxsamd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6msvcr80.dll - ok 18:16:21.0493 2188 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] C:WindowsSystem32driverssrv2.sys 18:16:21.0493 2188 C:WindowsSystem32driverssrv2.sys - ok 18:16:21.0509 2188 [ 851A1382EED3E3A7476DB004F4EE3E1A ] C:WindowsSystem32wkssvc.dll 18:16:21.0509 2188 C:WindowsSystem32wkssvc.dll - ok 18:16:21.0509 2188 [ 2C1BB3AD51826AA96C9802CBC123814F ] C:WindowsassemblyNativeImages_v2.0.50727_64mscorlib51a23687fdafc32b697f5a719e364651mscorlib.ni.dll 18:16:21.0509 2188 C:WindowsassemblyNativeImages_v2.0.50727_64mscorlib51a23687fdafc32b697f5a719e364651mscorlib.ni.dll - ok 18:16:21.0509 2188 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] C:WindowsSystem32driverssrv.sys 18:16:21.0509 2188 C:WindowsSystem32driverssrv.sys - ok 18:16:21.0509 2188 [ D9F42719019740BAA6D1C6D536CBDAA6 ] C:WindowsSystem32srvsvc.dll 18:16:21.0509 2188 C:WindowsSystem32srvsvc.dll - ok 18:16:21.0524 2188 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] C:WindowsSystem32browser.dll 18:16:21.0524 2188 C:WindowsSystem32browser.dll - ok 18:16:21.0524 2188 [ CFEFA40DDE34659BE5211966EAD86437 ] C:WindowsSystem32netmsg.dll 18:16:21.0524 2188 C:WindowsSystem32netmsg.dll - ok 18:16:21.0524 2188 [ FF80CAD87555E8E4D2CFD7B9058343F8 ] C:WindowsSystem32sscore.dll 18:16:21.0524 2188 C:WindowsSystem32sscore.dll - ok 18:16:21.0524 2188 [ 81749E073AC5857B044A686B406E5244 ] C:WindowsSystem32clusapi.dll 18:16:21.0524 2188 C:WindowsSystem32clusapi.dll - ok 18:16:21.0524 2188 [ 344FCC9850C3A8A3B4D3C65151AF8E4C ] C:WindowsSystem32resutils.dll 18:16:21.0540 2188 C:WindowsSystem32resutils.dll - ok 18:16:21.0540 2188 [ 88351B29B622B30962D2FEB6CA8D860B ] C:WindowsSystem32rasadhlp.dll 18:16:21.0540 2188 C:WindowsSystem32rasadhlp.dll - ok 18:16:21.0540 2188 [ D63D78442F0F100DF213E36B705C92FD ] C:Program Files (x86)LSoft Technologies IncActive@ Hard Disk MonitorDiskMonitorService.exe 18:16:21.0540 2188 C:Program Files (x86)LSoft Technologies IncActive@ Hard Disk MonitorDiskMonitorService.exe - ok 18:16:21.0540 2188 [ E73B0F1819602CB6EF176FB78D76A47B ] C:WindowsSysWOW64ntdll.dll 18:16:21.0540 2188 C:WindowsSysWOW64ntdll.dll - ok 18:16:21.0556 2188 [ 259EB5F7D95A29842B476C5B3EB6E186 ] C:WindowsSystem32wow64.dll 18:16:21.0556 2188 C:WindowsSystem32wow64.dll - ok 18:16:21.0556 2188 [ 5674E21E82CFBEA36DDAD5DB285D6DBC ] C:WindowsSystem32wow64win.dll 18:16:21.0556 2188 C:WindowsSystem32wow64win.dll - ok 18:16:21.0556 2188 [ 3EE3AA76D8AB6D5644C4C8F34471CEB3 ] C:WindowsSystem32wow64cpu.dll 18:16:21.0556 2188 C:WindowsSystem32wow64cpu.dll - ok 18:16:21.0556 2188 [ AC0B6F41882FC6ED186962D770EBF1D2 ] C:WindowsSysWOW64kernel32.dll 18:16:21.0556 2188 C:WindowsSysWOW64kernel32.dll - ok 18:16:21.0556 2188 [ E954A79D6A754A5475582CACED1565E6 ] C:WindowsSysWOW64KernelBase.dll 18:16:21.0556 2188 C:WindowsSysWOW64KernelBase.dll - ok 18:16:21.0571 2188 [ 9DC80A8AAAAAC397BDAB3C67165A824E ] C:WindowsSysWOW64msvcrt.dll 18:16:21.0571 2188 C:WindowsSysWOW64msvcrt.dll - ok 18:16:21.0571 2188 [ 7FF15A4F092CD4A96055BA69F903E3E9 ] C:WindowsSysWOW64ws2_32.dll 18:16:21.0571 2188 C:WindowsSysWOW64ws2_32.dll - ok 18:16:21.0571 2188 [ C5AD8083CF94201F1F8084ECC696A8B7 ] C:WindowsSysWOW64rpcrt4.dll 18:16:21.0571 2188 C:WindowsSysWOW64rpcrt4.dll - ok 18:16:21.0571 2188 [ F08F6FCD09F9BE94C37ACC1B344685FF ] C:WindowsSysWOW64cryptbase.dll 18:16:21.0571 2188 C:WindowsSysWOW64cryptbase.dll - ok 18:16:21.0587 2188 [ 6377051C63D5552A311935C67E9FDFDC ] C:WindowsSysWOW64nsi.dll 18:16:21.0587 2188 C:WindowsSysWOW64nsi.dll - ok 18:16:21.0587 2188 [ CFC97F07904067A1E5FAE195D534DA3A ] C:WindowsSysWOW64sechost.dll 18:16:21.0587 2188 C:WindowsSysWOW64sechost.dll - ok 18:16:21.0587 2188 [ EDA7AD21DF8945528F01F0A86D69E524 ] C:WindowsSysWOW64sspicli.dll 18:16:21.0587 2188 C:WindowsSysWOW64sspicli.dll - ok 18:16:21.0587 2188 [ 2FCA0D2C59A855C54BAFA22AA329DF0F ] C:WindowsSysWOW64netapi32.dll 18:16:21.0587 2188 C:WindowsSysWOW64netapi32.dll - ok 18:16:21.0602 2188 [ 20B3934DB73EABA2B49B7177873CB81F ] C:WindowsSysWOW64netutils.dll 18:16:21.0602 2188 C:WindowsSysWOW64netutils.dll - ok 18:16:21.0602 2188 [ 5CCDCD40E732D54E0F7451AC66AC1C87 ] C:WindowsSysWOW64srvcli.dll 18:16:21.0602 2188 C:WindowsSysWOW64srvcli.dll - ok 18:16:21.0602 2188 [ 68ECCA523ED760AAFC03C5D587569859 ] C:WindowsSysWOW64samcli.dll 18:16:21.0602 2188 C:WindowsSysWOW64samcli.dll - ok 18:16:21.0602 2188 [ 861C4346F9281DC0380DE72C8D55D6BE ] C:WindowsSysWOW64user32.dll 18:16:21.0602 2188 C:WindowsSysWOW64user32.dll - ok 18:16:21.0618 2188 [ E5A4A1326A02F8E7B59E6C3270CE7202 ] C:WindowsSysWOW64wkscli.dll 18:16:21.0618 2188 C:WindowsSysWOW64wkscli.dll - ok 18:16:21.0618 2188 [ 95E2376B3323F062EB562B8586D0F14A ] C:WindowsSysWOW64advapi32.dll 18:16:21.0618 2188 C:WindowsSysWOW64advapi32.dll - ok 18:16:21.0618 2188 [ D6D3AD7BF1D6F6CE9547613ED5E170A2 ] C:WindowsSysWOW64gdi32.dll 18:16:21.0618 2188 C:WindowsSysWOW64gdi32.dll - ok 18:16:21.0618 2188 [ 384721EF4024890092625E20CADFAF85 ] C:WindowsSysWOW64lpk.dll 18:16:21.0618 2188 C:WindowsSysWOW64lpk.dll - ok 18:16:21.0618 2188 [ B7230010D97787AF3D25E4C82F2B06B9 ] C:WindowsSysWOW64usp10.dll 18:16:21.0618 2188 C:WindowsSysWOW64usp10.dll - ok 18:16:21.0634 2188 [ 29E9794708DF51DB5DC89FB2E903A0F6 ] C:WindowsSysWOW64shell32.dll 18:16:21.0634 2188 C:WindowsSysWOW64shell32.dll - ok 18:16:21.0634 2188 [ 1B1431D9520C7578AD5633ED2A70625F ] C:WindowsMicrosoft.NETFramework64v2.0.50727mscorjit.dll 18:16:21.0634 2188 C:WindowsMicrosoft.NETFramework64v2.0.50727mscorjit.dll - ok 18:16:21.0634 2188 [ 928CF7268086631F54C3D8E17238C6DD ] C:WindowsSysWOW64ole32.dll 18:16:21.0634 2188 C:WindowsSysWOW64ole32.dll - ok 18:16:21.0634 2188 [ 8CC3C111D653E96F3EA1590891491D71 ] C:WindowsSysWOW64shlwapi.dll 18:16:21.0634 2188 C:WindowsSysWOW64shlwapi.dll - ok 18:16:21.0649 2188 [ A6F09E5669D9A19035F6D942CAA15882 ] C:WindowsSysWOW64imm32.dll 18:16:21.0649 2188 C:WindowsSysWOW64imm32.dll - ok 18:16:21.0649 2188 [ C9618BC9B2B0FD7C1138D8774795A79B ] C:WindowsSysWOW64msctf.dll 18:16:21.0649 2188 C:WindowsSysWOW64msctf.dll - ok 18:16:21.0649 2188 [ F436E847FA799ECD75AD8C313673F450 ] C:WindowsSysWOW64cfgmgr32.dll 18:16:21.0649 2188 C:WindowsSysWOW64cfgmgr32.dll - ok 18:16:21.0649 2188 [ 8999B8631C7FD9F7F9EC3CAFD953BA24 ] C:WindowsSysWOW64mswsock.dll 18:16:21.0649 2188 C:WindowsSysWOW64mswsock.dll - ok 18:16:21.0665 2188 [ D5AEFAD57C08349A4393D987DF7C715D ] C:WindowsSysWOW64winmm.dll 18:16:21.0665 2188 C:WindowsSysWOW64winmm.dll - ok 18:16:21.0665 2188 [ EE5C8E27C37B79CB54A2FCEEED2DC262 ] C:WindowsSysWOW64WSHTCPIP.DLL 18:16:21.0665 2188 C:WindowsSysWOW64WSHTCPIP.DLL - ok 18:16:21.0665 2188 [ 720971F2603EF221AA4EF33980EF8137 ] C:Program FilesDellDell Wireless WLAN Cardbcmwlrmt.dll 18:16:21.0665 2188 C:Program FilesDellDell Wireless WLAN Cardbcmwlrmt.dll - ok 18:16:21.0665 2188 [ 05DEB6BF3C7F0C241FFB9A7C3503BDFB ] C:WindowsSystem32wltrynt.dll 18:16:21.0665 2188 C:WindowsSystem32wltrynt.dll - ok 18:16:21.0680 2188 [ 18E756E0FE2FFCD5DE35F6B9F91244A6 ] C:Windowswinsxsamd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_0a1d2fcba76b3f00ATL90.dll 18:16:21.0680 2188 C:Windowswinsxsamd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_0a1d2fcba76b3f00ATL90.dll - ok 18:16:21.0680 2188 [ 3927397AC60D943DAF8808AFFED582B7 ] C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe 18:16:21.0680 2188 C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe - ok 18:16:21.0680 2188 [ 6C765E82B57F2E66CE9C54AC238471D9 ] C:WindowsSysWOW64oleaut32.dll 18:16:21.0680 2188 C:WindowsSysWOW64oleaut32.dll - ok 18:16:21.0680 2188 [ 60D21799A4AF4EDCE65FB98830E4B0C8 ] C:WindowsSysWOW64crypt32.dll 18:16:21.0680 2188 C:WindowsSysWOW64crypt32.dll - ok 18:16:21.0696 2188 [ 938F39B50BAFE13D6F58C7790682C010 ] C:WindowsSysWOW64msasn1.dll 18:16:21.0696 2188 C:WindowsSysWOW64msasn1.dll - ok 18:16:21.0696 2188 [ 17448AF0BBA9E7AB5EC955AF93F271BD ] C:WindowsSysWOW64wintrust.dll 18:16:21.0696 2188 C:WindowsSysWOW64wintrust.dll - ok 18:16:21.0696 2188 [ 9682D5B9D9309377C1A7E08C3E6B7B3D ] C:WindowsassemblyNativeImages_v2.0.50727_64System6be6efa1e2ffc9d46e99839edac5c5a8System.ni.dll 18:16:21.0696 2188 C:WindowsassemblyNativeImages_v2.0.50727_64System6be6efa1e2ffc9d46e99839edac5c5a8System.ni.dll - ok 18:16:21.0696 2188 [ A8EDB86FC2A4D6D1285E4C70384AC35A ] C:WindowsSystem32dllhost.exe 18:16:21.0696 2188 C:WindowsSystem32dllhost.exe - ok 18:16:21.0712 2188 [ A0A2C1D812C231C9BFE119FDC68E341B ] C:WindowsSystem32IDStore.dll 18:16:21.0712 2188 C:WindowsSystem32IDStore.dll - ok 18:16:21.0712 2188 [ F7E9784AB526E85AC3B09B7E48DC3192 ] C:WindowsSystem32KBDBGPH1.DLL 18:16:21.0712 2188 C:WindowsSystem32KBDBGPH1.DLL - ok 18:16:21.0712 2188 [ B3892E6DA8E2C8CE4B0A9D3EB9A185E5 ] C:Windowswinsxsx86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742msvcr90.dll 18:16:21.0712 2188 C:Windowswinsxsx86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742msvcr90.dll - ok 18:16:21.0712 2188 [ 65EA57712340C09B1B0C427B4848AE05 ] C:WindowsSystem32taskeng.exe 18:16:21.0712 2188 C:WindowsSystem32taskeng.exe - ok 18:16:21.0727 2188 [ 45CFBFA8EDC3DF4E2B7FB0D0260FE051 ] C:WindowsSystem32localspl.dll 18:16:21.0727 2188 C:WindowsSystem32localspl.dll - ok 18:16:21.0727 2188 [ 639774C9ACD063F028F6084ABF5593AD ] C:WindowsSystem32taskhost.exe 18:16:21.0727 2188 C:WindowsSystem32taskhost.exe - ok 18:16:21.0727 2188 [ 805A52C5AE26C28E88FDD9BCCFE6F312 ] C:WindowsSystem32TSChannel.dll 18:16:21.0727 2188 C:WindowsSystem32TSChannel.dll - ok 18:16:21.0727 2188 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] C:WindowsSystem32cryptsvc.dll 18:16:21.0727 2188 C:WindowsSystem32cryptsvc.dll - ok 18:16:21.0743 2188 [ A6FB9DB8F1A86861D955FD6975977AE0 ] C:WindowsSystem32DriverStoreFileRepositorystwrt64.inf_amd64_neutral_0057cbec48a2d7cfAESTSr64.exe 18:16:21.0743 2188 C:WindowsSystem32DriverStoreFileRepositorystwrt64.inf_amd64_neutral_0057cbec48a2d7cfAESTSr64.exe - ok 18:16:21.0743 2188 [ F02A533F517EB38333CB12A9E8963773 ] C:Program Files (x86)GoogleUpdateGoogleUpdate.exe 18:16:21.0743 2188 C:Program Files (x86)GoogleUpdateGoogleUpdate.exe - ok 18:16:21.0743 2188 [ 8792BAB371B4B1589E015B6FD1ED3B15 ] C:WindowsSystem32cryptnet.dll 18:16:21.0743 2188 C:WindowsSystem32cryptnet.dll - ok 18:16:21.0743 2188 [ 802496CB59A30349F9A6DD22D6947644 ] C:WindowsSystem32FDResPub.dll 18:16:21.0743 2188 C:WindowsSystem32FDResPub.dll - ok 18:16:21.0758 2188 [ 0E2F58F6E698EDCB9E58FAD0CBCD0567 ] C:WindowsSystem32vssapi.dll 18:16:21.0758 2188 C:WindowsSystem32vssapi.dll - ok 18:16:21.0758 2188 [ F1B205F932F62F94506A5F332C895DAF ] C:WindowsSystem32WSDApi.dll 18:16:21.0758 2188 C:WindowsSystem32WSDApi.dll - ok 18:16:21.0758 2188 [ 23566F9723771108D2E6CD768AC27407 ] C:WindowsSystem32AtBroker.exe 18:16:21.0758 2188 C:WindowsSystem32AtBroker.exe - ok 18:16:21.0758 2188 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] C:WindowsSystem32dps.dll 18:16:21.0758 2188 C:WindowsSystem32dps.dll - ok 18:16:21.0774 2188 [ 94EEAC26F57811BD1AEFC164412F7FCE ] C:WindowsSystem32PlaySndSrv.dll 18:16:21.0774 2188 C:WindowsSystem32PlaySndSrv.dll - ok 18:16:21.0774 2188 [ 2E5672EEA419A4DC9DACD714632E1DC3 ] C:Program Files (x86)GoogleUpdate1.3.21.135goopdate.dll 18:16:21.0774 2188 C:Program Files (x86)GoogleUpdate1.3.21.135goopdate.dll - ok 18:16:21.0774 2188 [ 9BB99503D6A4DD62569EDE9E5E2672A5 ] C:WindowsSystem32HotStartUserAgent.dll 18:16:21.0774 2188 C:WindowsSystem32HotStartUserAgent.dll - ok 18:16:21.0774 2188 [ 1F1CA9E99DD5BF918BE0BF30B5A42FDA ] C:WindowsSystem32MsCtfMonitor.dll 18:16:21.0774 2188 C:WindowsSystem32MsCtfMonitor.dll - ok 18:16:21.0790 2188 [ 61AC3EFDFACFDD3F0F11DD4FD4044223 ] C:WindowsSysWOW64userinit.exe 18:16:21.0790 2188 C:WindowsSysWOW64userinit.exe - ok 18:16:21.0790 2188 [ 39C5F32747B3414D1BB216FDB1DEFC58 ] C:WindowsSysWOW64dwmapi.dll 18:16:21.0790 2188 C:WindowsSysWOW64dwmapi.dll - ok 18:16:21.0790 2188 [ C733D233B623B7FFCE5031E4B756EE26 ] C:WindowsSysWOW64profapi.dll 18:16:21.0790 2188 C:WindowsSysWOW64profapi.dll - ok 18:16:21.0790 2188 [ D15618A0FF8DBC2C5BF3726BACC75A0B ] C:WindowsSysWOW64userenv.dll 18:16:21.0790 2188 C:WindowsSysWOW64userenv.dll - ok 18:16:21.0790 2188 [ F162D5F5E845B9DC352DD1BAD8CEF1BC ] C:WindowsSystem32dwm.exe 18:16:21.0790 2188 C:WindowsSystem32dwm.exe - ok 18:16:21.0805 2188 [ FCFCD1101C5DA23B4B95F93D02B2C169 ] C:WindowsSystem32dwmredir.dll 18:16:21.0805 2188 C:WindowsSystem32dwmredir.dll - ok 18:16:21.0805 2188 [ F09A9A1AD21FE618C4C8B0A0D830C886 ] C:WindowsSystem32msutb.dll 18:16:21.0805 2188 C:WindowsSystem32msutb.dll - ok 18:16:21.0805 2188 [ C55516D98DD5D8F0153C2A9B4227DA86 ] C:WindowsSystem32webservices.dll 18:16:21.0805 2188 C:WindowsSystem32webservices.dll - ok 18:16:21.0805 2188 [ 4BA77A5EF71C14C764B0ED4701683E3E ] C:WindowsSystem32dwmcore.dll 18:16:21.0805 2188 C:WindowsSystem32dwmcore.dll - ok 18:16:21.0821 2188 [ 287923557447D7E4BDD7E65B1F0F5428 ] C:WindowsSystem32vsstrace.dll 18:16:21.0821 2188 C:WindowsSystem32vsstrace.dll - ok 18:16:21.0821 2188 [ B5055B51BAA0FD0A736A88653DA3C1C0 ] C:WindowsSystem32fundisc.dll 18:16:21.0821 2188 C:WindowsSystem32fundisc.dll - ok 18:16:21.0821 2188 [ FD5EF1D0210CB9C0773BBA7CA360D762 ] C:Program Files (x86)STMicroelectronicsAccelerometerInstallFilterService.exe 18:16:21.0821 2188 C:Program Files (x86)STMicroelectronicsAccelerometerInstallFilterService.exe - ok 18:16:21.0821 2188 [ 7485FBCEF9136F530953575E2977859D ] C:Program Files (x86)IntelIntel® Management Engine ComponentsLMSLMS.exe 18:16:21.0821 2188 C:Program Files (x86)IntelIntel® Management Engine ComponentsLMSLMS.exe - ok 18:16:21.0836 2188 [ 10FB16B50AFFDA6D44588F3C445DC273 ] C:WindowsSysWOW64setupapi.dll 18:16:21.0836 2188 C:WindowsSysWOW64setupapi.dll - ok 18:16:21.0836 2188 [ A90DC9ABD65DB1A8902F361103029952 ] C:WindowsSysWOW64IPHLPAPI.DLL 18:16:21.0836 2188 C:WindowsSysWOW64IPHLPAPI.DLL - ok 18:16:21.0836 2188 [ 332FEAB1435662FC6C672E25BEB37BE3 ] C:Windowsexplorer.exe 18:16:21.0836 2188 C:Windowsexplorer.exe - ok 18:16:21.0836 2188 [ 863F793D15B4026B1A5FDECA873D4D84 ] C:WindowsSysWOW64apphelp.dll 18:16:21.0836 2188 C:WindowsSysWOW64apphelp.dll - ok 18:16:21.0852 2188 [ CFF35B879D1618D42C86644C717BA947 ] C:WindowsSysWOW64winnsi.dll 18:16:21.0852 2188 C:WindowsSysWOW64winnsi.dll - ok 18:16:21.0852 2188 [ 352B3DC62A0D259A82A052238425C872 ] C:Windowswinsxsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2comctl32.dll 18:16:21.0852 2188 C:Windowswinsxsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2comctl32.dll - ok 18:16:21.0852 2188 [ 2EEFF4502F5E13B1BED4A04CCAD64C08 ] C:WindowsSysWOW64devobj.dll 18:16:21.0852 2188 C:WindowsSysWOW64devobj.dll - ok 18:16:21.0852 2188 [ 9AE80F6A66B30E3ED8CDF858CF28B11B ] C:WindowsSystem32d3d10_1.dll 18:16:21.0852 2188 C:WindowsSystem32d3d10_1.dll - ok 18:16:21.0868 2188 [ B40420876B9288E0A1C8CCA8A84E5DC9 ] C:WindowsSysWOW64dnsapi.dll 18:16:21.0868 2188 C:WindowsSysWOW64dnsapi.dll - ok 18:16:21.0868 2188 [ 8AD77806D336673F270DB31645267293 ] C:WindowsSystem32nlasvc.dll 18:16:21.0868 2188 C:WindowsSystem32nlasvc.dll - ok 18:16:21.0868 2188 [ 3AEAA8B561E63452C655DC0584922257 ] C:WindowsSystem32pcasvc.dll 18:16:21.0868 2188 C:WindowsSystem32pcasvc.dll - ok 18:16:21.0868 2188 [ 1727B2A2F379A32B864C096FA794AADC ] C:WindowsSystem32aepic.dll 18:16:21.0868 2188 C:WindowsSystem32aepic.dll - ok 18:16:21.0883 2188 [ C6DCD1D11ED6827F05C00773C3E7053C ] C:WindowsSystem32sfc.dll 18:16:21.0883 2188 C:WindowsSystem32sfc.dll - ok 18:16:21.0883 2188 [ 895C9AB0A855547445C4181195230757 ] C:WindowsSystem32sfc_os.dll 18:16:21.0883 2188 C:WindowsSystem32sfc_os.dll - ok 18:16:21.0883 2188 [ B2DB6ABA2E292235749B80A9C3DFA867 ] C:WindowsSysWOW64imagehlp.dll 18:16:21.0883 2188 C:WindowsSysWOW64imagehlp.dll - ok 18:16:21.0883 2188 [ 68769C3356B3BE5D1C732C97B9A80D6E ] C:WindowsSystem32driversPEAuth.sys 18:16:21.0883 2188 C:WindowsSystem32driversPEAuth.sys - ok 18:16:21.0899 2188 [ EED05D42D91835064703E2318552ED25 ] C:WindowsSystem32ExplorerFrame.dll 18:16:21.0899 2188 C:WindowsSystem32ExplorerFrame.dll - ok 18:16:21.0899 2188 [ A6C29DB53ECA94FA8591C5388D604B82 ] C:WindowsSysWOW64msi.dll 18:16:21.0899 2188 C:WindowsSysWOW64msi.dll - ok 18:16:21.0899 2188 [ D4FAC263861BAE06971C7F7D0A8EBF15 ] C:WindowsSystem32ncsi.dll 18:16:21.0899 2188 C:WindowsSystem32ncsi.dll - ok 18:16:21.0899 2188 [ 58F4493BF748A3A89689997B7BD00E95 ] C:WindowsSystem32winhttp.dll 18:16:21.0899 2188 C:WindowsSystem32winhttp.dll - ok 18:16:21.0899 2188 [ 63F72417CA38D8FC8F53709649B589E3 ] C:WindowsSystem32d3d10_1core.dll 18:16:21.0899 2188 C:WindowsSystem32d3d10_1core.dll - ok 18:16:21.0914 2188 [ 2BBF3FDB70B8965DFA0258CBAB41ECCE ] C:WindowsSystem32ssdpapi.dll 18:16:21.0914 2188 C:WindowsSystem32ssdpapi.dll - ok 18:16:21.0914 2188 [ 603EBD34E216C5654A2D774EAC98D278 ] C:WindowsSystem32webio.dll 18:16:21.0914 2188 C:WindowsSystem32webio.dll - ok 18:16:21.0914 2188 [ 8965A4CAA8E006F5F32D084CABD3679E ] C:WindowsassemblyNativeImages_v2.0.50727_64System.Runtime.Remo#ad25afb3a0820b92f311d6897df82e5fSystem.Runtime.Remoting.ni.dll 18:16:21.0914 2188 C:WindowsassemblyNativeImages_v2.0.50727_64System.Runtime.Remo#ad25afb3a0820b92f311d6897df82e5fSystem.Runtime.Remoting.ni.dll - ok 18:16:21.0930 2188 [ DA4ECE4EC909E1791339F3FFAF36418A ] C:Program Files (x86)QUALCOMMQDLService2kQDLService2kDell.exe 18:16:21.0930 2188 C:Program Files (x86)QUALCOMMQDLService2kQDLService2kDell.exe - ok 18:16:21.0930 2188 [ 8DFB5752FCE145A6B295093C0A8BE131 ] C:WindowsSystem32dxgi.dll 18:16:21.0930 2188 C:WindowsSystem32dxgi.dll - ok 18:16:21.0930 2188 [ D1DE1EAFDE97BE41CF6585027FF3E732 ] C:WindowsSysWOW64comdlg32.dll 18:16:21.0930 2188 C:WindowsSysWOW64comdlg32.dll - ok 18:16:21.0930 2188 [ 448B02AD260EC3E1E892FCE6DFDDEEBD ] C:WindowsSystem32d3d11.dll 18:16:21.0930 2188 C:WindowsSystem32d3d11.dll - ok 18:16:21.0946 2188 [ 024352FEEC9042260BB4CFB4D79A206B ] C:WindowsSystem32EhStorShell.dll

18:16:21.0946 2188 C:WindowsSystem32EhStorShell.dll - ok 18:16:21.0946 2188 [ BDAC1AA64495D0F7E1FF810EBBF1F018 ] C:Windowswinsxsx86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149afcomctl32.dll 18:16:21.0946 2188 C:Windowswinsxsx86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149afcomctl32.dll - ok 18:16:21.0946 2188 [ 32802C0F6FC7C8F561B9D91F52A46421 ] C:WindowsSystem32cscui.dll 18:16:21.0946 2188 C:WindowsSystem32cscui.dll - ok 18:16:21.0946 2188 [ 210FCACAF902B2CD47CF9FD17D846146 ] C:WindowsSystem32aeevts.dll 18:16:21.0946 2188 C:WindowsSystem32aeevts.dll - ok 18:16:21.0961 2188 [ 0181B4C10F409299E0D8EE130EF87353 ] C:WindowsassemblyNativeImages_v2.0.50727_64System.Managementc54fc0cac648a174c5e35bd6589c9390System.Management.ni.dll 18:16:21.0961 2188 C:WindowsassemblyNativeImages_v2.0.50727_64System.Managementc54fc0cac648a174c5e35bd6589c9390System.Management.ni.dll - ok 18:16:21.0961 2188 [ C5B6468422DB1C8AA36C32CBB0197E5E ] C:WindowsSysWOW64wininet.dll 18:16:21.0961 2188 C:WindowsSysWOW64wininet.dll - ok 18:16:21.0961 2188 [ 9E4B0E7472B4CEBA9E17F440B8CB0AB8 ] C:WindowsSysWOW64winspool.drv 18:16:21.0961 2188 C:WindowsSysWOW64winspool.drv - ok 18:16:21.0961 2188 [ 1BF0CB861A48FEB1638228760750F3CB ] C:WindowsSystem32cscapi.dll 18:16:21.0961 2188 C:WindowsSystem32cscapi.dll - ok 18:16:21.0977 2188 [ 7EE5F17A21D9A9101207DF4BC37B085D ] C:WindowsSystem32cscdll.dll 18:16:21.0977 2188 C:WindowsSystem32cscdll.dll - ok 18:16:21.0977 2188 [ 037A719DAD50603202C978CD802623E4 ] C:WindowsSystem32ntshrui.dll 18:16:21.0977 2188 C:WindowsSystem32ntshrui.dll - ok 18:16:21.0977 2188 [ 3EA8A16169C26AFBEB544E0E48421186 ] C:WindowsSystem32driverssecdrv.sys 18:16:21.0977 2188 C:WindowsSystem32driverssecdrv.sys - ok 18:16:21.0977 2188 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] C:WindowsSystem32driverstcpipreg.sys 18:16:21.0977 2188 C:WindowsSystem32driverstcpipreg.sys - ok 18:16:21.0992 2188 [ 1D63F4366288B8A7595397E27010FD44 ] C:WindowsSystem32IconCodecService.dll 18:16:21.0992 2188 C:WindowsSystem32IconCodecService.dll - ok 18:16:21.0992 2188 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] C:WindowsSystem32sysmain.dll 18:16:21.0992 2188 C:WindowsSystem32sysmain.dll - ok 18:16:21.0992 2188 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] C:WindowsSystem32wiaservc.dll 18:16:21.0992 2188 C:WindowsSystem32wiaservc.dll - ok 18:16:21.0992 2188 [ 9BDDA34DC4890169DE5BA21134B33EFB ] C:WindowsSysWOW64iertutil.dll 18:16:21.0992 2188 C:WindowsSysWOW64iertutil.dll - ok 18:16:21.0992 2188 [ 0364256B4A2A93A8C8CDA6B3B5A0EFF5 ] C:WindowsSystem32wiatrace.dll 18:16:21.0992 2188 C:WindowsSystem32wiatrace.dll - ok 18:16:22.0008 2188 [ 4E7F83E1F6AEFA38E270EA7353D6911E ] C:WindowsSysWOW64urlmon.dll 18:16:22.0008 2188 C:WindowsSysWOW64urlmon.dll - ok 18:16:22.0008 2188 [ 85DE2007400903302577EAEB656030AA ] C:WindowsSystem32aticfx64.dll 18:16:22.0008 2188 C:WindowsSystem32aticfx64.dll - ok 18:16:22.0008 2188 [ 285844B076601249E27BA43DD171D5EC ] C:WindowsSystem32atiuxp64.dll 18:16:22.0008 2188 C:WindowsSystem32atiuxp64.dll - ok 18:16:22.0008 2188 [ 465BEA35F7ED4A4A57686DEA7EA10F47 ] C:WindowsSysWOW64cscapi.dll 18:16:22.0008 2188 C:WindowsSysWOW64cscapi.dll - ok 18:16:22.0024 2188 [ 3FD15B4611D9BDA3F8013548C0ECAECA ] C:WindowsSysWOW64ntmarta.dll 18:16:22.0024 2188 C:WindowsSysWOW64ntmarta.dll - ok 18:16:22.0024 2188 [ 702254574E7E52052DE39408457B7149 ] C:WindowsSysWOW64version.dll 18:16:22.0024 2188 C:WindowsSysWOW64version.dll - ok 18:16:22.0024 2188 [ A8BB45F9ECAD993461E0FEF8E2A99152 ] C:WindowsSysWOW64Wldap32.dll 18:16:22.0024 2188 C:WindowsSysWOW64Wldap32.dll - ok 18:16:22.0024 2188 [ 918D907E12145461C9BCAF2A5F73AD8B ] C:WindowsSystem32atidxx64.dll 18:16:22.0024 2188 C:WindowsSystem32atidxx64.dll - ok 18:16:22.0039 2188 [ 53223B673A3FA2F9A4D1C31C8D3F6CD8 ] C:WindowsSysWOW64dbghelp.dll 18:16:22.0039 2188 C:WindowsSysWOW64dbghelp.dll - ok 18:16:22.0039 2188 [ BECDDA0990DEBD72A30096533521AD73 ] C:Program Files (x86)GoogleUpdate1.3.21.135GoogleCrashHandler.exe 18:16:22.0039 2188 C:Program Files (x86)GoogleUpdate1.3.21.135GoogleCrashHandler.exe - ok 18:16:22.0039 2188 [ 7E7AFD841694F6AC397E99D75CEAD49D ] C:WindowsSystem32trkwks.dll 18:16:22.0039 2188 C:WindowsSystem32trkwks.dll - ok 18:16:22.0039 2188 [ 45809CED8DF00A8062CA834A2E68B040 ] C:Program Files (x86)DellDell WWANWMCoremini_WMCore.exe 18:16:22.0039 2188 C:Program Files (x86)DellDell WWANWMCoremini_WMCore.exe - ok 18:16:22.0055 2188 [ CA9F7888B524D8100B977C81F44C3234 ] C:WindowsSysWOW64winhttp.dll 18:16:22.0055 2188 C:WindowsSysWOW64winhttp.dll - ok 18:16:22.0055 2188 [ FB19FC5951A88F3C523E35C2C98D23C0 ] C:WindowsSysWOW64webio.dll 18:16:22.0055 2188 C:WindowsSysWOW64webio.dll - ok 18:16:22.0055 2188 [ 399FF9A96E8BB80E5DD3B028FFD0E44C ] C:Program Files (x86)DellDell WWANWMCoreMBMDebug.dll 18:16:22.0055 2188 C:Program Files (x86)DellDell WWANWMCoreMBMDebug.dll - ok 18:16:22.0055 2188 [ E001DD475A7C27EBE5A0DB45C11BAD71 ] C:WindowsSystem32driversbcm42rly.sys 18:16:22.0055 2188 C:WindowsSystem32driversbcm42rly.sys - ok 18:16:22.0070 2188 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] C:WindowsSystem32appinfo.dll 18:16:22.0070 2188 C:WindowsSystem32appinfo.dll - ok 18:16:22.0070 2188 [ E629F1A051C82795DDFFD3E8D4855811 ] C:WindowsSystem32dimsjob.dll 18:16:22.0070 2188 C:WindowsSystem32dimsjob.dll - ok 18:16:22.0070 2188 [ BD9EB3958F213F96B97B1D897DEE006D ] C:WindowsSystem32hidserv.dll 18:16:22.0070 2188 C:WindowsSystem32hidserv.dll - ok 18:16:22.0070 2188 [ BF1FC3F79B863C914687A737C2F3D681 ] C:WindowsSystem32wdi.dll 18:16:22.0070 2188 C:WindowsSystem32wdi.dll - ok 18:16:22.0086 2188 [ 93221146D4EBBF314C29B23CD6CC391D ] C:WindowsSystem32wpdbusenum.dll 18:16:22.0086 2188 C:WindowsSystem32wpdbusenum.dll - ok 18:16:22.0086 2188 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] C:WindowsSystem32netprofm.dll 18:16:22.0086 2188 C:WindowsSystem32netprofm.dll - ok 18:16:22.0086 2188 [ FF5688D309347F2720911D8796912834 ] C:WindowsSysWOW64clbcatq.dll 18:16:22.0086 2188 C:WindowsSysWOW64clbcatq.dll - ok 18:16:22.0086 2188 [ B676429E44F2F8ACC3BAE7C89F46B212 ] C:Program Files (x86)GoogleUpdate1.3.21.135GoogleCrashHandler64.exe 18:16:22.0086 2188 C:Program Files (x86)GoogleUpdate1.3.21.135GoogleCrashHandler64.exe - ok 18:16:22.0102 2188 [ C5A99A4C0DC9F0F5A95BA0C83D30A549 ] C:WindowsSysWOW64mstask.dll 18:16:22.0102 2188 C:WindowsSysWOW64mstask.dll - ok 18:16:22.0102 2188 [ E64D9EC8018C55873B40FDEE9DBEF5B3 ] C:WindowsSystem32PortableDeviceApi.dll 18:16:22.0102 2188 C:WindowsSystem32PortableDeviceApi.dll - ok 18:16:22.0102 2188 [ BF4AC709BE5BF64F331F5D67773A0C82 ] C:WindowsSystem32perftrack.dll 18:16:22.0102 2188 C:WindowsSystem32perftrack.dll - ok 18:16:22.0102 2188 [ A7A8CA53D9C9FD90C07AB0EB38E5316B ] C:WindowsSystem32dbghelp.dll 18:16:22.0102 2188 C:WindowsSystem32dbghelp.dll - ok 18:16:22.0117 2188 [ E1B22739C933BE33F53DB58C5393ADD3 ] C:WindowsSystem32Apphlpdm.dll 18:16:22.0117 2188 C:WindowsSystem32Apphlpdm.dll - ok 18:16:22.0117 2188 [ 4449D23E8F197862F1B16F1E6C89C36C ] C:WindowsSystem32diagperf.dll 18:16:22.0117 2188 C:WindowsSystem32diagperf.dll - ok 18:16:22.0117 2188 [ 9689A9C7F7C2A1A423CDA2C3B43FFF65 ] C:WindowsSystem32wer.dll 18:16:22.0117 2188 C:WindowsSystem32wer.dll - ok 18:16:22.0117 2188 [ AFA79C343F9D1555F7E5D5FA70BB2A14 ] C:WindowsSystem32PortableDeviceConnectApi.dll 18:16:22.0117 2188 C:WindowsSystem32PortableDeviceConnectApi.dll - ok 18:16:22.0117 2188 [ F7073C962C4FB7C415565DDE109DE49F ] C:WindowsSystem32npmproxy.dll 18:16:22.0117 2188 C:WindowsSystem32npmproxy.dll - ok 18:16:22.0133 2188 [ 9719E3D834F5C8C43F56A93DFA497023 ] C:WindowsSystem32pnpts.dll 18:16:22.0133 2188 C:WindowsSystem32pnpts.dll - ok 18:16:22.0133 2188 [ 46863C4CC5B68EB09EA2D5EEF0F1193A ] C:WindowsSystem32radardt.dll 18:16:22.0133 2188 C:WindowsSystem32radardt.dll - ok 18:16:22.0133 2188 [ E811F8510B133E70CF6E509FB809824F ] C:WindowsSystem32wdiasqmmodule.dll 18:16:22.0133 2188 C:WindowsSystem32wdiasqmmodule.dll - ok 18:16:22.0133 2188 [ 025E7DBDB98866ED3CB2D4DDA70B364D ] C:WindowsSystem32runonce.exe 18:16:22.0133 2188 C:WindowsSystem32runonce.exe - ok 18:16:22.0148 2188 [ 3285481F5C12305CA104A6C493CA5A0B ] C:WindowsSystem32spoolss.dll 18:16:22.0148 2188 C:WindowsSystem32spoolss.dll - ok 18:16:22.0148 2188 [ D44741F65A1D71F65814A12CF6E2400A ] C:WindowsSysWOW64runonce.exe 18:16:22.0148 2188 C:WindowsSysWOW64runonce.exe - ok 18:16:22.0148 2188 [ 12C45E3CB6D65F73209549E2D02ECA7A ] C:WindowsSysWOW64propsys.dll 18:16:22.0148 2188 C:WindowsSysWOW64propsys.dll - ok 18:16:22.0148 2188 [ 32C4927E013C018A13D8DFBDA4148812 ] C:Program Files (x86)Microsoft OfficeOffice12GrooveShellExtensions.dll 18:16:22.0148 2188 C:Program Files (x86)Microsoft OfficeOffice12GrooveShellExtensions.dll - ok 18:16:22.0164 2188 [ B7AC38F727B5D26D3D272CE71740A519 ] C:Program Files (x86)Microsoft OfficeOffice12GrooveUtil.dll 18:16:22.0164 2188 C:Program Files (x86)Microsoft OfficeOffice12GrooveUtil.dll - ok 18:16:22.0164 2188 [ 5FF5E12F28725D14CAA3B408848ADFFC ] C:Windowswinsxsx86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fcmsvcr80.dll 18:16:22.0164 2188 C:Windowswinsxsx86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fcmsvcr80.dll - ok 18:16:22.0164 2188 [ 3EE4C95BD106DF72606DBDC40166FA7C ] C:Program Files (x86)Microsoft OfficeOffice12GrooveNew.dll 18:16:22.0164 2188 C:Program Files (x86)Microsoft OfficeOffice12GrooveNew.dll - ok 18:16:22.0164 2188 [ 7321F18D1F820612ED0E9F2D4B578A7E ] C:WindowsSysWOW64cryptsp.dll 18:16:22.0164 2188 C:WindowsSysWOW64cryptsp.dll - ok 18:16:22.0180 2188 [ 3C7DEF3CBBCA6284867AA4621D5D8A54 ] C:Windowswinsxsx86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.762_none_11ecb0ab9b2caf3cATL80.dll 18:16:22.0180 2188 C:Windowswinsxsx86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.762_none_11ecb0ab9b2caf3cATL80.dll - ok 18:16:22.0180 2188 [ 18AB2E5A40064ED5F7791AC5946A90F3 ] C:WindowsSysWOW64msimg32.dll 18:16:22.0180 2188 C:WindowsSysWOW64msimg32.dll - ok 18:16:22.0180 2188 [ ED8EC63F7522DF4852147C84EC62C36A ] C:WindowsSysWOW64rsaenh.dll 18:16:22.0180 2188 C:WindowsSysWOW64rsaenh.dll - ok 18:16:22.0180 2188 [ 43964FA89CCF97BA6BE34D69455AC65F ] C:WindowsSysWOW64uxtheme.dll 18:16:22.0180 2188 C:WindowsSysWOW64uxtheme.dll - ok 18:16:22.0195 2188 [ C48CBBD38D7FBB0E86F4364062EBC66E ] C:Program Files (x86)Microsoft OfficeOffice12GrooveSystemServices.dll 18:16:22.0195 2188 C:Program Files (x86)Microsoft OfficeOffice12GrooveSystemServices.dll - ok 18:16:22.0195 2188 [ 0BAF2B21469FD995A92AB7E5F2646027 ] C:Program Files (x86)Microsoft OfficeOffice12GrooveMisc.dll 18:16:22.0195 2188 C:Program Files (x86)Microsoft OfficeOffice12GrooveMisc.dll - ok 18:16:22.0195 2188 [ 21D3A18769EC2C4E56756D04E989A221 ] C:WindowsSysWOW64msxml3.dll 18:16:22.0195 2188 C:WindowsSysWOW64msxml3.dll - ok 18:16:22.0195 2188 [ F93674263F6B07C77956E966953242D9 ] C:WindowsSysWOW64secur32.dll 18:16:22.0195 2188 C:WindowsSysWOW64secur32.dll - ok 18:16:22.0211 2188 [ AD7B9C14083B52BC532FBA5948342B98 ] C:WindowsSysWOW64cmd.exe 18:16:22.0211 2188 C:WindowsSysWOW64cmd.exe - ok 18:16:22.0211 2188 [ 58A0CDABEA255616827B1C22C9994466 ] C:WindowsSystem32NapiNSP.dll 18:16:22.0211 2188 C:WindowsSystem32NapiNSP.dll - ok 18:16:22.0211 2188 [ 613C8CE10A5FDE582BA5FA64C4D56AAA ] C:WindowsSystem32pnrpnsp.dll 18:16:22.0211 2188 C:WindowsSystem32pnrpnsp.dll - ok 18:16:22.0211 2188 [ 2E2072EB48238FCA8FBB7A9F5FABAC45 ] C:WindowsSystem32winrnr.dll 18:16:22.0211 2188 C:WindowsSystem32winrnr.dll - ok 18:16:22.0226 2188 [ 4B78B431F225FD8624C5655CB1DE7B61 ] C:WindowsSystem32aelupsvc.dll 18:16:22.0226 2188 C:WindowsSystem32aelupsvc.dll - ok 18:16:22.0226 2188 [ 326C7F76A29897A892AA7726E91C1C67 ] C:WindowsSysWOW64winbrand.dll 18:16:22.0226 2188 C:WindowsSysWOW64winbrand.dll - ok 18:16:22.0226 2188 [ DFE118C95C6571B87D1923DAB3FA0A77 ] C:WindowsSysWOW64ieframe.dll 18:16:22.0226 2188 C:WindowsSysWOW64ieframe.dll - ok 18:16:22.0226 2188 [ A543AC1F7138376D778D630A35FCBC4C ] C:WindowsSysWOW64psapi.dll 18:16:22.0226 2188 C:WindowsSysWOW64psapi.dll - ok 18:16:22.0242 2188 [ 8E01332CC4B68BC6B5B7EFFE374442AA ] C:WindowsSysWOW64oleacc.dll 18:16:22.0242 2188 C:WindowsSysWOW64oleacc.dll - ok 18:16:22.0242 2188 [ BE247AE996A9FDE007A27B51413A6C79 ] C:WindowsSysWOW64shdocvw.dll 18:16:22.0242 2188 C:WindowsSysWOW64shdocvw.dll - ok 18:16:22.0242 2188 [ 178A34E5554DCE485E1262DDF027960C ] C:UsersDimoAppDataLocalTemp36E9568C-823D-4537-83E5-E1B7CBA92F59.exe 18:16:22.0242 2188 C:UsersDimoAppDataLocalTemp36E9568C-823D-4537-83E5-E1B7CBA92F59.exe - ok 18:16:22.0242 2188 [ BF6D6ED5FADCEEE885BD0144ECF1BA27 ] C:WindowsSysWOW64ncrypt.dll 18:16:22.0242 2188 C:WindowsSysWOW64ncrypt.dll - ok 18:16:22.0258 2188 [ CE71B9119A258EDD0A05B37D7B0F92E3 ] C:WindowsSysWOW64bcrypt.dll 18:16:22.0258 2188 C:WindowsSysWOW64bcrypt.dll - ok 18:16:22.0258 2188 [ E8449FE262D7406BCB2AC2A45C53EC5F ] C:WindowsSysWOW64bcryptprimitives.dll 18:16:22.0258 2188 C:WindowsSysWOW64bcryptprimitives.dll - ok 18:16:22.0258 2188 [ 35CB97CBC3EDC463418ED4997AAB29B6 ] C:WindowsSystem32pautoenr.dll 18:16:22.0258 2188 C:WindowsSystem32pautoenr.dll - ok 18:16:22.0258 2188 [ 94DFBB481BF51158B216E23C5C1C9D6E ] C:WindowsSystem32certcli.dll 18:16:22.0258 2188 C:WindowsSystem32certcli.dll - ok 18:16:22.0273 2188 [ 263B26106606A010CF877472B535E4BB ] C:WindowsSystem32CertEnroll.dll 18:16:22.0273 2188 C:WindowsSystem32CertEnroll.dll - ok 18:16:22.0273 2188 [ 1097F3035BAF46CED8B332B3564C5108 ] C:WindowsSysWOW64gpapi.dll 18:16:22.0273 2188 C:WindowsSysWOW64gpapi.dll - ok 18:16:22.0273 2188 [ CA79539D3D4C0BA66F0F051A5EE5E923 ] C:WindowsSysWOW64cryptnet.dll 18:16:22.0273 2188 C:WindowsSysWOW64cryptnet.dll - ok 18:16:22.0273 2188 [ 6F8E3B7B70E1BBA871212940C1FBDF60 ] C:WindowsSysWOW64SensApi.dll 18:16:22.0273 2188 C:WindowsSysWOW64SensApi.dll - ok 18:16:22.0273 2188 [ 3BCECD87AB4E6743BFB45B352AD1A529 ] C:WindowsSysWOW64WindowsCodecs.dll 18:16:22.0273 2188 C:WindowsSysWOW64WindowsCodecs.dll - ok 18:16:22.0289 2188 [ 846D0E4DB261CFAF363902E41498E961 ] C:WindowsSysWOW64EhStorShell.dll 18:16:22.0289 2188 C:WindowsSysWOW64EhStorShell.dll - ok 18:16:22.0289 2188 [ 03F3B770DFBED6131653CEDA8CA780F0 ] C:WindowsSysWOW64ntshrui.dll 18:16:22.0289 2188 C:WindowsSysWOW64ntshrui.dll - ok 18:16:22.0289 2188 [ 8B74CEC6980D4816B0037AE9A27E538F ] C:WindowsSysWOW64slc.dll 18:16:22.0289 2188 C:WindowsSysWOW64slc.dll - ok 18:16:22.0289 2188 [ 827CB0D6C3F8057EA037FF271F8E9795 ] C:WindowsSysWOW64imageres.dll 18:16:22.0289 2188 C:WindowsSysWOW64imageres.dll - ok 18:16:22.0304 2188 [ 523CF74A52C9A1762DA8B83AEE734498 ] C:WindowsSysWOW64IconCodecService.dll 18:16:22.0304 2188 C:WindowsSysWOW64IconCodecService.dll - ok 18:16:22.0304 2188 [ 0015ACFBBDD164A8A730009908868CA7 ] C:WindowsSystem32winspool.drv 18:16:22.0304 2188 C:WindowsSystem32winspool.drv - ok 18:16:22.0304 2188 [ C5AC93CF3BA30D367FB49148A2B673B9 ] C:WindowsSystem32PrintIsolationProxy.dll 18:16:22.0304 2188 C:WindowsSystem32PrintIsolationProxy.dll - ok 18:16:22.0304 2188 [ 19E41CCCEE697CC9465396B370929792 ] C:WindowsSystem32FXSMON.dll 18:16:22.0304 2188 C:WindowsSystem32FXSMON.dll - ok 18:16:22.0320 2188 [ 32A3C8600AF124CBAAD845F13CFAE3CB ] C:WindowsSystem32tcpmon.dll 18:16:22.0320 2188 C:WindowsSystem32tcpmon.dll - ok 18:16:22.0320 2188 [ 93518C6EDE0B61BCBD02BDB02BD05FEE ] C:WindowsSystem32snmpapi.dll 18:16:22.0320 2188 C:WindowsSystem32snmpapi.dll - ok 18:16:22.0320 2188 [ FFF9D00CF16397C64317F213484F94BD ] C:WindowsSystem32wsnmp32.dll 18:16:22.0320 2188 C:WindowsSystem32wsnmp32.dll - ok 18:16:22.0320 2188 [ DF72A9936D0C3F517083119648814B09 ] C:WindowsSystem32usbmon.dll 18:16:22.0320 2188 C:WindowsSystem32usbmon.dll - ok 18:16:22.0336 2188 [ A1D7E3ADCDB07DDB6F423862DCB1A52B ] C:WindowsSystem32WSDMon.dll 18:16:22.0336 2188 C:WindowsSystem32WSDMon.dll - ok 18:16:22.0336 2188 [ 4581716B4BF76ACFD8E167EB0B26D82A ] C:WindowsSystem32fdPnp.dll 18:16:22.0336 2188 C:WindowsSystem32fdPnp.dll - ok 18:16:22.0336 2188 [ 1D626FE2E13C1CE49CA0136CFF214E93 ] C:WindowsSystem32spoolprtprocsx64winprint.dll 18:16:22.0336 2188 C:WindowsSystem32spoolprtprocsx64winprint.dll - ok 18:16:22.0336 2188 [ 0353B239C28B0E9EBC7FA3D1F6181661 ] C:WindowsSystem32win32spl.dll 18:16:22.0336 2188 C:WindowsSystem32win32spl.dll - ok 18:16:22.0351 2188 [ 507D5567A0A4EE86C4B0CE2CE1777025 ] C:WindowsSystem32inetpp.dll 18:16:22.0351 2188 C:WindowsSystem32inetpp.dll - ok 18:16:22.0351 2188 [ 40CAEEE0EAF1B8569F7C8DF6420F2CB9 ] C:WindowsSysWOW64sfc.dll 18:16:22.0351 2188 C:WindowsSysWOW64sfc.dll - ok 18:16:22.0351 2188 [ 84799328D87B3091A3BDD251E1AD31F9 ] C:WindowsSysWOW64sfc_os.dll 18:16:22.0351 2188 C:WindowsSysWOW64sfc_os.dll - ok 18:16:22.0351 2188 [ 162D247E995EAEBF3EF4289069E1111C ] C:WindowsSysWOW64devrtl.dll 18:16:22.0351 2188 C:WindowsSysWOW64devrtl.dll - ok 18:16:22.0367 2188 [ B9A8CBCFCD3EC9D2EA4740AF347BF108 ] C:WindowsSysWOW64mpr.dll 18:16:22.0367 2188 C:WindowsSysWOW64mpr.dll - ok 18:16:22.0367 2188 [ B519848DFA30AE2B306576B51321D102 ] C:WindowsSystem32ie4uinit.exe 18:16:22.0367 2188 C:WindowsSystem32ie4uinit.exe - ok 18:16:22.0367 2188 [ C3E98C42EDF7EF237A4BAB91FEAC7426 ] C:WindowsSystem32iedkcs32.dll 18:16:22.0367 2188 C:WindowsSystem32iedkcs32.dll - ok 18:16:22.0367 2188 [ FB10715E4099AF9FA389C71873245226 ] C:WindowsSystem32timedate.cpl 18:16:22.0367 2188 C:WindowsSystem32timedate.cpl - ok 18:16:22.0367 2188 [ E6F0F82788E8BD0F7A616350EFA0761C ] C:WindowsSystem32actxprxy.dll 18:16:22.0367 2188 C:WindowsSystem32actxprxy.dll - ok 18:16:22.0382 2188 [ C4F40F6CACD796A8E16671D0E9A2F319 ] C:WindowsSystem32shdocvw.dll 18:16:22.0382 2188 C:WindowsSystem32shdocvw.dll - ok 18:16:22.0382 2188 [ A0A65D306A5490D2EB8E7DE66898ECFD ] C:WindowsSystem32linkinfo.dll 18:16:22.0382 2188 C:WindowsSystem32linkinfo.dll - ok 18:16:22.0382 2188 [ 2BCBA6052374959A30BD7948444DBB79 ] C:WindowsSystem32gameux.dll 18:16:22.0382 2188 C:WindowsSystem32gameux.dll - ok 18:16:22.0382 2188 [ 1EAC1A8CA6874BF5B15E2EFB9A9A7B86 ] C:WindowsSystem32msftedit.dll 18:16:22.0382 2188 C:WindowsSystem32msftedit.dll - ok 18:16:22.0398 2188 [ 7FCAB194F01E3403C300EB034E480B36 ] C:WindowsSystem32msls31.dll 18:16:22.0398 2188 C:WindowsSystem32msls31.dll - ok 18:16:22.0398 2188 [ 7DBA84667DC18877AEF693E3543DFAD7 ] C:Program FilesCommon FilesMicrosoft Sharedinktiptsf.dll 18:16:22.0398 2188 C:Program FilesCommon FilesMicrosoft Sharedinktiptsf.dll - ok 18:16:22.0398 2188 [ 4E5FE39C1076D115EC8BFCFE14D75B80 ] C:WindowsSysWOW64credssp.dll 18:16:22.0398 2188 C:WindowsSysWOW64credssp.dll - ok 18:16:22.0398 2188 [ ED6EE83D61EBC683C2CD8E899EA6FEBE ] C:WindowsSysWOW64rasadhlp.dll 18:16:22.0398 2188 C:WindowsSysWOW64rasadhlp.dll - ok 18:16:22.0414 2188 [ 73E8667A19FEEDD856DF2695E9E511D4 ] C:WindowsSysWOW64wship6.dll 18:16:22.0414 2188 C:WindowsSysWOW64wship6.dll - ok 18:16:22.0414 2188 [ 5EB6E9C8BE1ACC5830780E0F9A846255 ] C:WindowsSystem32msi.dll 18:16:22.0414 2188 C:WindowsSystem32msi.dll - ok 18:16:22.0414 2188 [ 69754747274B76E7FAF287239333D7E6 ] C:WindowsSystem32msiltcfg.dll 18:16:22.0414 2188 C:WindowsSystem32msiltcfg.dll - ok 18:16:22.0414 2188 [ 03A03A453F1AAAE0C73AAAF895321C7A ] C:WindowsSysWOW64FWPUCLNT.DLL 18:16:22.0414 2188 C:WindowsSysWOW64FWPUCLNT.DLL - ok 18:16:22.0429 2188 [ 1F83CB91A9830038DBE7CD1BA1921205 ] C:Program FilesDellDell Wireless WLAN CardWLTRAY.EXE 18:16:22.0429 2188 C:Program FilesDellDell Wireless WLAN CardWLTRAY.EXE - ok 18:16:22.0429 2188 [ 24F4B480F335A6C724AF352253C5D98B ] C:WindowsSystem32thumbcache.dll 18:16:22.0429 2188 C:WindowsSystem32thumbcache.dll - ok 18:16:22.0429 2188 [ 7E5740243755C217DD4F4EEE1C05A33B ] C:Program FilesDellQuickSetquickset.exe 18:16:22.0429 2188 C:Program FilesDellQuickSetquickset.exe - ok 18:16:22.0429 2188 [ 4C2C4640BF23AAFCF90519E0F34436CE ] C:WindowsSystem32DeviceCenter.dll 18:16:22.0429 2188 C:WindowsSystem32DeviceCenter.dll - ok 18:16:22.0445 2188 [ 405F4D32D2185F1F1BD753D8EEAFFB3A ] C:WindowsSystem32networkexplorer.dll 18:16:22.0445 2188 C:WindowsSystem32networkexplorer.dll - ok 18:16:22.0445 2188 [ 263E9A047D17CD50BAA9D3C02910D18D ] C:WindowsSystem32oledlg.dll 18:16:22.0445 2188 C:WindowsSystem32oledlg.dll - ok 18:16:22.0445 2188 [ 7DB5AA22A8A8E5C2D335F44853C1F6DE ] C:WindowsSystem32wbemcomn.dll 18:16:22.0445 2188 C:WindowsSystem32wbemcomn.dll - ok 18:16:22.0445 2188 [ 666A60F6F5E719856FF6254E0966EFF7 ] C:WindowsSystem32wbemwbemprox.dll 18:16:22.0445 2188 C:WindowsSystem32wbemwbemprox.dll - ok 18:16:22.0460 2188 [ 19B07E7E8915D701225DA41CB3877306 ] C:WindowsSystem32wbemWMIsvc.dll 18:16:22.0460 2188 C:WindowsSystem32wbemWMIsvc.dll - ok 18:16:22.0460 2188 [ A3F5E8EC1316C3E2562B82694A251C9E ] C:WindowsSystem32wbemfastprox.dll 18:16:22.0460 2188 C:WindowsSystem32wbemfastprox.dll - ok 18:16:22.0460 2188 [ 0C52762C606BCF6A377D5E4688191A6B ] C:WindowsSystem32wbemWmiDcPrv.dll 18:16:22.0460 2188 C:WindowsSystem32wbemWmiDcPrv.dll - ok 18:16:22.0460 2188 [ 0255C22D99602534F15CBB8D9B6F152F ] C:WindowsSystem32wbemWinMgmtR.dll 18:16:22.0460 2188 C:WindowsSystem32wbemWinMgmtR.dll - ok 18:16:22.0476 2188 [ 023C55185495F1066F4C7F893658C4ED ] C:Program FilesIDTWDMsttray64.exe 18:16:22.0476 2188 C:Program FilesIDTWDMsttray64.exe - ok 18:16:22.0476 2188 [ 19F9B524A525D202194247E96656CB88 ] C:WindowsSystem32mfc42u.dll 18:16:22.0476 2188 C:WindowsSystem32mfc42u.dll - ok 18:16:22.0476 2188 [ EE26D130808D16C0E417BBBED0451B34 ] C:WindowsSystem32ntdsapi.dll 18:16:22.0476 2188 C:WindowsSystem32ntdsapi.dll - ok 18:16:22.0476 2188 [ B3A33600DCDFB84D7FBE09ADEB1C9B8A ] C:WindowsSystem32davclnt.dll 18:16:22.0476 2188 C:WindowsSystem32davclnt.dll - ok 18:16:22.0492 2188 [ 45B24A357C801CE62052FE0CDC8BD4D2 ] C:WindowsSystem32davhlpr.dll 18:16:22.0492 2188 C:WindowsSystem32davhlpr.dll - ok 18:16:22.0492 2188 [ 5F639198C4137075DA50E61C23963C11 ] C:WindowsSystem32drprov.dll 18:16:22.0492 2188 C:WindowsSystem32drprov.dll - ok 18:16:22.0492 2188 [ BC566D17914B07ABAAB3A5A385CC3300 ] C:WindowsSystem32ntlanman.dll 18:16:22.0492 2188 C:WindowsSystem32ntlanman.dll - ok 18:16:22.0492 2188 [ 5EB55F661DEBF156E126160BCD4D89F8 ] C:WindowsSystem32wbemwbemcore.dll 18:16:22.0492 2188 C:WindowsSystem32wbemwbemcore.dll - ok 18:16:22.0492 2188 [ 7FF8E121AFA05BDAB23B9FEDCDAB7A33 ] C:WindowsSystem32odbc32.dll 18:16:22.0492 2188 C:WindowsSystem32odbc32.dll - ok 18:16:22.0507 2188 [ 62481AEC780B08A891A7158997887E84 ] C:Program Files (x86)STMicroelectronicsAccelerometerFF_Protection.exe 18:16:22.0507 2188 C:Program Files (x86)STMicroelectronicsAccelerometerFF_Protection.exe - ok 18:16:22.0507 2188 [ 2A3FB4C98F139038E23330D2439DB8A4 ] C:UsersDimoAppDataLocalFacebookUpdateFacebookUpdate.exe 18:16:22.0507 2188 C:UsersDimoAppDataLocalFacebookUpdateFacebookUpdate.exe - ok 18:16:22.0507 2188 [ DB1976563498431B55D1A5D6F0548663 ] C:UsersDimoAppDataLocalFacebookUpdate1.2.205.0goopdate.dll 18:16:22.0507 2188 C:UsersDimoAppDataLocalFacebookUpdate1.2.205.0goopdate.dll - ok 18:16:22.0523 2188 [ 087D8668C71634A3A3761135ABF16EEE ] C:WindowsSystem32wbemesscli.dll 18:16:22.0523 2188 C:WindowsSystem32wbemesscli.dll - ok 18:16:22.0523 2188 [ 718B6F51AB7F6FE2988A36868F9AD3AB ] C:WindowsSystem32wbemwbemsvc.dll 18:16:22.0523 2188 C:WindowsSystem32wbemwbemsvc.dll - ok 18:16:22.0523 2188 [ 0AB34456654C283DAA13B8D2BA21439B ] C:WindowsSystem32wbemrepdrvfs.dll 18:16:22.0523 2188 C:WindowsSystem32wbemrepdrvfs.dll - ok 18:16:22.0523 2188 [ 0143DB80DACFB7C2B5B7009ED9063353 ] C:WindowsSystem32wbemwmiutils.dll 18:16:22.0523 2188 C:WindowsSystem32wbemwmiutils.dll - ok 18:16:22.0538 2188 [ E0D992FF33FF646148028DB6AF744F69 ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLIStart.exe 18:16:22.0538 2188 C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLIStart.exe - ok 18:16:22.0538 2188 [ 25107F58D1B8F60D67D1EE95798C0DE8 ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe 18:16:22.0538 2188 C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe - ok 18:16:22.0538 2188 [ 6CA49C3EF62D132B97697B62B31F9B55 ] C:WindowsSysWOW64atiadlxy.dll 18:16:22.0538 2188 C:WindowsSysWOW64atiadlxy.dll - ok 18:16:22.0538 2188 [ E7704CBF568815C1CAA6E513387BD3F2 ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticMOM.exe 18:16:22.0538 2188 C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticMOM.exe - ok 18:16:22.0554 2188 [ F5DF6846F30E9F54EA60CCAEB3FB2055 ] C:WindowsMicrosoft.NETFrameworkv4.0.30319mscoreei.dll 18:16:22.0554 2188 C:WindowsMicrosoft.NETFrameworkv4.0.30319mscoreei.dll - ok 18:16:22.0554 2188 [ D83947A58613E9091B4C9CC0F1546A8D ] C:WindowsSysWOW64mscoree.dll 18:16:22.0554 2188 C:WindowsSysWOW64mscoree.dll - ok 18:16:22.0554 2188 [ 3CB07566302BCEEB898DE270A0BEC175 ] C:Program Files (x86)Common FilesAdobeARM1.0AdobeARM.exe 18:16:22.0554 2188 C:Program Files (x86)Common FilesAdobeARM1.0AdobeARM.exe - ok 18:16:22.0554 2188 [ 8B92BED5B8D4A8480E7AA631F35A6F35 ] C:WindowsMicrosoft.NETFrameworkv2.0.50727mscorwks.dll 18:16:22.0554 2188 C:WindowsMicrosoft.NETFrameworkv2.0.50727mscorwks.dll - ok 18:16:22.0570 2188 [ 28638660E651578C354BF43CD646EF6D ] C:WindowsassemblyNativeImages_v2.0.50727_64System.Drawing672fc9526d8954656bcb46e42082e09cSystem.Drawing.ni.dll 18:16:22.0570 2188 C:WindowsassemblyNativeImages_v2.0.50727_64System.Drawing672fc9526d8954656bcb46e42082e09cSystem.Drawing.ni.dll - ok 18:16:22.0570 2188 [ C3E39FB1398EEE8E612C2FE53A9192EF ] C:WindowsassemblyNativeImages_v2.0.50727_32mscorlib7150b9136fad5b79e88f6c7f9d3d2c39mscorlib.ni.dll 18:16:22.0570 2188 C:WindowsassemblyNativeImages_v2.0.50727_32mscorlib7150b9136fad5b79e88f6c7f9d3d2c39mscorlib.ni.dll - ok 18:16:22.0570 2188 [ 1473768973453DE50DC738C2955FC4DD ] C:WindowsSystem32wdmaud.drv 18:16:22.0570 2188 C:WindowsSystem32wdmaud.drv - ok 18:16:22.0570 2188 [ 850BD2D2D9CB5894935C3B6333CAD6FD ] C:WindowsSystem32riched20.dll 18:16:22.0570 2188 C:WindowsSystem32riched20.dll - ok 18:16:22.0585 2188 [ 3181F76ED237CC3D50D10CEA05AF8B60 ] C:WindowsSystem32riched32.dll 18:16:22.0585 2188 C:WindowsSystem32riched32.dll - ok 18:16:22.0585 2188 [ 050E000D89D4FB750B124380020674E9 ] C:WindowsassemblyNativeImages_v2.0.50727_64System.Web09a751d0d4d6e7af82c1d2844eefd34aSystem.Web.ni.dll 18:16:22.0585 2188 C:WindowsassemblyNativeImages_v2.0.50727_64System.Web09a751d0d4d6e7af82c1d2844eefd34aSystem.Web.ni.dll - ok 18:16:22.0585 2188 [ 12DBA51A6D1126E88F78D79AE0F7600F ] C:Program Files (x86)AdobeReader 11.0ReaderAcroRd32.exe 18:16:22.0585 2188 C:Program Files (x86)AdobeReader 11.0ReaderAcroRd32.exe - ok 18:16:22.0585 2188 [ 90875C687266C41AE8F0B6DD6EFA31E0 ] C:Program FilesIDTWDMstlang64.dll 18:16:22.0585 2188 C:Program FilesIDTWDMstlang64.dll - ok 18:16:22.0601 2188 [ 58B8702C20DE211D1FCB248D2FDD71D1 ] C:Program Files (x86)AdobeReader 11.0Readerreader_sl.exe 18:16:22.0601 2188 C:Program Files (x86)AdobeReader 11.0Readerreader_sl.exe - ok 18:16:22.0601 2188 [ 3E466073C3B1033FF92ADE9031E3D4A2 ] C:WindowsSystem32odbcint.dll 18:16:22.0601 2188 C:WindowsSystem32odbcint.dll - ok 18:16:22.0601 2188 [ B78E390C802B8F0D2BAF4F8B181318A0 ] C:WindowsassemblyNativeImages_v2.0.50727_64System.Windows.Formse644aa1f8f3898d38876168757db0d9bSystem.Windows.Forms.ni.dll 18:16:22.0601 2188 C:WindowsassemblyNativeImages_v2.0.50727_64System.Windows.Formse644aa1f8f3898d38876168757db0d9bSystem.Windows.Forms.ni.dll - ok 18:16:22.0601 2188 [ DDD0357A92FA843EFF8915ED17253D6C ] C:WindowsSystem32wbemWmiPrvSD.dll 18:16:22.0601 2188 C:WindowsSystem32wbemWmiPrvSD.dll - ok 18:16:22.0616 2188 [ E3C817F7FE44CC870ECDBCBC3EA36132 ] C:WindowsSysWOW64msvcp100.dll 18:16:22.0616 2188 C:WindowsSysWOW64msvcp100.dll - ok 18:16:22.0616 2188 [ D41FEBD098234F02485A4EA98D4730A4 ] C:WindowsSystem32ncobjapi.dll 18:16:22.0616 2188 C:WindowsSystem32ncobjapi.dll - ok 18:16:22.0616 2188 [ BF38660A9125935658CFA3E53FDC7D65 ] C:WindowsSysWOW64msvcr100.dll 18:16:22.0616 2188 C:WindowsSysWOW64msvcr100.dll - ok 18:16:22.0616 2188 [ 6F40D6FB05E0C1E5402812B426971AF0 ] C:WindowsSystem32wbemwbemess.dll 18:16:22.0616 2188 C:WindowsSystem32wbemwbemess.dll - ok 18:16:22.0632 2188 [ 619A67C9F617B7E69315BB28ECD5E1DF ] C:WindowsSystem32wbemWmiPrvSE.exe 18:16:22.0632 2188 C:WindowsSystem32wbemWmiPrvSE.exe - ok 18:16:22.0632 2188 [ 07AD88DF9EF73215458867EFC1BFFE9E ] C:WindowsSystem32wbemwmiprov.dll 18:16:22.0632 2188 C:WindowsSystem32wbemwmiprov.dll - ok 18:16:22.0632 2188 [ 936F728E04ACCF3F38801CFFCF1E3F40 ] C:WindowsSysWOW64oledlg.dll 18:16:22.0632 2188 C:WindowsSysWOW64oledlg.dll - ok 18:16:22.0632 2188 [ 220159496484D34009DE71CA1A68E0D4 ] C:WindowsSystem32wbemNCProv.dll 18:16:22.0632 2188 C:WindowsSystem32wbemNCProv.dll - ok 18:16:22.0648 2188 [ 1B7C3A37362C7B2890168C5FC61C8D9B ] C:WindowsSystem32msacm32.drv 18:16:22.0648 2188 C:WindowsSystem32msacm32.drv - ok 18:16:22.0648 2188 [ 09A116FB06C5E362EF8938D29CDAB27B ] C:WindowsMicrosoft.NETFrameworkv2.0.50727mscorjit.dll 18:16:22.0648 2188 C:WindowsMicrosoft.NETFrameworkv2.0.50727mscorjit.dll - ok 18:16:22.0648 2188 [ CA2A0750ED830678997695FF61B04C30 ] C:WindowsSystem32midimap.dll 18:16:22.0648 2188 C:WindowsSystem32midimap.dll - ok 18:16:22.0648 2188 [ 10AC5CE9F78DC281A1BBD9B8CC587B8A ] C:WindowsSystem32msacm32.dll 18:16:22.0648 2188 C:WindowsSystem32msacm32.dll - ok 18:16:22.0663 2188 [ 885A88C268C23618AFB937F1ECE56A20 ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorUtil.dll 18:16:22.0663 2188 C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorUtil.dll - ok 18:16:22.0663 2188 [ 54B5DCD55B223BC5DF50B82E1E9E86B1 ] C:WindowsSystem32mfplat.dll 18:16:22.0663 2188 C:WindowsSystem32mfplat.dll - ok 18:16:22.0663 2188 [ 6F3C559B82F2912354BE5B098744CC8C ] C:WindowsSystem32WMALFXGFXDSP.dll 18:16:22.0663 2188 C:WindowsSystem32WMALFXGFXDSP.dll - ok 18:16:22.0663 2188 [ 3518CB4E2D896CAB53D5386F15AC0566 ] C:WindowsassemblyNativeImages_v2.0.50727_32System369f8bdca364e2b4936d18dea582912cSystem.ni.dll 18:16:22.0663 2188 C:WindowsassemblyNativeImages_v2.0.50727_32System369f8bdca364e2b4936d18dea582912cSystem.ni.dll - ok 18:16:22.0679 2188 [ C469893743E18BA547DB3C7ED98B32F5 ] C:WindowsSystem32AESTAR64.dll 18:16:22.0679 2188 C:WindowsSystem32AESTAR64.dll - ok 18:16:22.0679 2188 [ 3D9FC44CA93001B423F89876369F1348 ] C:WindowsSystem32SRSLabs{176F4E15-8F7C-4833-ADED-81FAE8CCD186}sluapo64.dll 18:16:22.0679 2188 C:WindowsSystem32SRSLabs{176F4E15-8F7C-4833-ADED-81FAE8CCD186}sluapo64.dll - ok 18:16:22.0679 2188 [ B6F0676FC23D543452FE81D8B71D24E7 ] C:WindowsSystem32SRSLabs{176F4E15-8F7C-4833-ADED-81FAE8CCD186}slcshp64.dll 18:16:22.0679 2188 C:WindowsSystem32SRSLabs{176F4E15-8F7C-4833-ADED-81FAE8CCD186}slcshp64.dll - ok 18:16:22.0679 2188 [ F7BA79CEFBD9DF4AF781E00356FBF48E ] C:WindowsSystem32SRSLabs{176F4E15-8F7C-4833-ADED-81FAE8CCD186}slh36064.dll 18:16:22.0679 2188 C:WindowsSystem32SRSLabs{176F4E15-8F7C-4833-ADED-81FAE8CCD186}slh36064.dll - ok 18:16:22.0694 2188 [ 79E25E0628A2FF7A74356EAEF5011C26 ] C:WindowsSystem32SRSLabs{176F4E15-8F7C-4833-ADED-81FAE8CCD186}sltshd64.dll 18:16:22.0694 2188 C:WindowsSystem32SRSLabs{176F4E15-8F7C-4833-ADED-81FAE8CCD186}sltshd64.dll - ok 18:16:22.0694 2188 [ D64D99EC088B54FFE8EE67A480386C20 ] C:WindowsMicrosoft.NETFramework64v2.0.50727Culture.dll 18:16:22.0694 2188 C:WindowsMicrosoft.NETFramework64v2.0.50727Culture.dll - ok 18:16:22.0694 2188 [ C490E31E7F1006E1DA62C5021C56E165 ] C:WindowsassemblyNativeImages_v2.0.50727_32IAStorUtilf7cb3ae5de64f8cbde3ccc57c780743aIAStorUtil.ni.dll 18:16:22.0694 2188 C:WindowsassemblyNativeImages_v2.0.50727_32IAStorUtilf7cb3ae5de64f8cbde3ccc57c780743aIAStorUtil.ni.dll - ok 18:16:22.0710 2188 [ CDAD3376DFF3D9AC7FDCBE2B94B0D3C8 ] C:WindowsSystem32shfolder.dll 18:16:22.0710 2188 C:WindowsSystem32shfolder.dll - ok 18:16:22.0710 2188 [ 5997D769CDB108390DCFAEBF442BF816 ] C:WindowsSysWOW64RpcRtRemote.dll 18:16:22.0710 2188 C:WindowsSysWOW64RpcRtRemote.dll - ok 18:16:22.0710 2188 [ 27E79A455EF80647F4F57FA3C2B09C94 ] C:WindowsassemblyNativeImages_v2.0.50727_32System.Drawingeead6629e384a5b69f9ae35284b7eeedSystem.Drawing.ni.dll 18:16:22.0710 2188 C:WindowsassemblyNativeImages_v2.0.50727_32System.Drawingeead6629e384a5b69f9ae35284b7eeedSystem.Drawing.ni.dll - ok 18:16:22.0710 2188 [ 652B60C9C4D5391FF0970B9086702E8F ] C:WindowsSystem32ieframe.dll 18:16:22.0710 2188 C:WindowsSystem32ieframe.dll - ok 18:16:22.0726 2188 [ 8B1590C627138166C015A5680ABF6BB2 ] C:WindowsassemblyNativeImages_v2.0.50727_32System.Windows.Formscb562e2e4f74ae607f1186f6ec50cec7System.Windows.Forms.ni.dll 18:16:22.0726 2188 C:WindowsassemblyNativeImages_v2.0.50727_32System.Windows.Formscb562e2e4f74ae607f1186f6ec50cec7System.Windows.Forms.ni.dll - ok 18:16:22.0726 2188 [ 74EF310FAC89341CE2897B7F2C4A7B0F ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCCC.exe 18:16:22.0726 2188 C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCCC.exe - ok 18:16:22.0726 2188 [ 21E110FF1C0E948860458BD7B692DE13 ] C:WindowsassemblyNativeImages_v2.0.50727_32System.Configuration195a77fcc6206f8bb35d419ff2cf0d72System.Configuration.ni.dll 18:16:22.0726 2188 C:WindowsassemblyNativeImages_v2.0.50727_32System.Configuration195a77fcc6206f8bb35d419ff2cf0d72System.Configuration.ni.dll - ok 18:16:22.0726 2188 [ 871F7F32E3441580138E61A4AA072DF6 ] C:WindowsassemblyNativeImages_v2.0.50727_32System.Xmlf687c43e9fdec031988b33ae722c4613System.Xml.ni.dll 18:16:22.0726 2188 C:WindowsassemblyNativeImages_v2.0.50727_32System.Xmlf687c43e9fdec031988b33ae722c4613System.Xml.ni.dll - ok 18:16:22.0741 2188 [ F832EEEA97CDDA1AF577E721F652A0D1 ] C:WindowsSystem32batmeter.dll 18:16:22.0741 2188 C:WindowsSystem32batmeter.dll - ok 18:16:22.0741 2188 [ C3761661C17C2248A9379A8FB89E3DE1 ] C:WindowsSystem32stobject.dll 18:16:22.0741 2188 C:WindowsSystem32stobject.dll - ok 18:16:22.0741 2188 [ 2D2A6EC8EAD30EC3ACE2FD6FB1B3E122 ] C:WindowsSystem32prnfldr.dll 18:16:22.0741 2188 C:WindowsSystem32prnfldr.dll - ok 18:16:22.0741 2188 [ 2A436796758BF2555A26C770FE8A6FEE ] C:WindowsSystem32fdProxy.dll 18:16:22.0741 2188 C:WindowsSystem32fdProxy.dll - ok 18:16:22.0757 2188 [ 908ACB1F594274965A53926B10C81E89 ] C:WindowsSystem32provsvc.dll 18:16:22.0757 2188 C:WindowsSystem32provsvc.dll - ok 18:16:22.0757 2188 [ 42A9CB6906D9A8BEDC83B57163E62924 ] C:WindowsSystem32DXP.dll 18:16:22.0757 2188 C:WindowsSystem32DXP.dll - ok 18:16:22.0757 2188 [ 2BC7C9FD0A9F2C9AFC373F3AD1EE3891 ] C:WindowsSystem32Syncreg.dll 18:16:22.0757 2188 C:WindowsSystem32Syncreg.dll - ok 18:16:22.0757 2188 [ C836175870E00ACC546066632E15BD10 ] C:WindowsehomeehSSO.dll 18:16:22.0757 2188 C:WindowsehomeehSSO.dll - ok 18:16:22.0772 2188 [ 5CCD5B62076D4432D4728BB6CB3DEBFD ] C:WindowsassemblyNativeImages_v2.0.50727_64System.Xml7a560781987776298120763de1df8f77System.Xml.ni.dll 18:16:22.0772 2188 C:WindowsassemblyNativeImages_v2.0.50727_64System.Xml7a560781987776298120763de1df8f77System.Xml.ni.dll - ok 18:16:22.0772 2188 [ A0617B5753E31126AD29C03154F4F329 ] C:WindowsMicrosoft.NETFrameworkv2.0.50727Culture.dll 18:16:22.0772 2188 C:WindowsMicrosoft.NETFrameworkv2.0.50727Culture.dll - ok 18:16:22.0772 2188 [ A42F2C1EB3B66C54FB3C7B79D30C1A6D ] C:WindowsSystem32netshell.dll 18:16:22.0772 2188 C:WindowsSystem32netshell.dll - ok 18:16:22.0772 2188 [ 3D7D2E825C63FF501E896CF008C70D75 ] C:WindowsMicrosoft.NETFrameworkv2.0.50727csc.exe 18:16:22.0772 2188 C:WindowsMicrosoft.NETFrameworkv2.0.50727csc.exe - ok 18:16:22.0788 2188 [ C1B5307377C98F87E0152C44E9FF8DEE ] C:WindowsMicrosoft.NETFrameworkv2.0.50727cscomp.dll 18:16:22.0788 2188 C:WindowsMicrosoft.NETFrameworkv2.0.50727cscomp.dll - ok 18:16:22.0788 2188 [ 24FCC3CDAE327F632CB8696E1E40F772 ] C:WindowsMicrosoft.NETFrameworkv2.0.50727alink.dll 18:16:22.0788 2188 C:WindowsMicrosoft.NETFrameworkv2.0.50727alink.dll - ok 18:16:22.0788 2188 [ E955300DF949977878C705EC8681009A ] C:WindowsMicrosoft.NETFrameworkv2.0.50727mscorpe.dll 18:16:22.0788 2188 C:WindowsMicrosoft.NETFrameworkv2.0.50727mscorpe.dll - ok 18:16:22.0788 2188 [ ED797D8DC2C92401985D162E42FFA450 ] C:WindowsMicrosoft.NETFrameworkv2.0.50727cvtres.exe 18:16:22.0788 2188 C:WindowsMicrosoft.NETFrameworkv2.0.50727cvtres.exe - ok 18:16:22.0804 2188 [ 97A8968A66F15FD3B2F09C6F56B2170D ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIntelVisualDesign.dll 18:16:22.0804 2188 C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIntelVisualDesign.dll - ok 18:16:22.0804 2188 [ 539C49CEBB3C50957AC8A09D95ECD880 ] C:WindowsSysWOW64shfolder.dll 18:16:22.0804 2188 C:WindowsSysWOW64shfolder.dll - ok 18:16:22.0804 2188 [ 7717F84F483002815490033BF069DABD ] C:Windowswinsxsx86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06bGdiPlus.dll 18:16:22.0804 2188 C:Windowswinsxsx86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06bGdiPlus.dll - ok 18:16:22.0804 2188 [ E7368F0A8D19445EAF5C5D0DBB8B8DAB ] C:WindowsSystem32AltTab.dll 18:16:22.0804 2188 C:WindowsSystem32AltTab.dll - ok 18:16:22.0819 2188 [ C8FDF0FA9E97E2FAAF3F814716AAA881 ] C:WindowsSystem32WPDShServiceObj.dll 18:16:22.0819 2188 C:WindowsSystem32WPDShServiceObj.dll - ok 18:16:22.0819 2188 [ C3670CD073CAF4866F600CDA2E8CD0E5 ] C:WindowsassemblyNativeImages_v2.0.50727_32System.Runtime.Remo#90b89f6e8032310e9ac72a309fd49e83System.Runtime.Remoting.ni.dll 18:16:22.0819 2188 C:WindowsassemblyNativeImages_v2.0.50727_32System.Runtime.Remo#90b89f6e8032310e9ac72a309fd49e83System.Runtime.Remoting.ni.dll - ok 18:16:22.0819 2188 [ 10F815BE90A66AAFC6C713D1BD626064 ] C:WindowsSystem32pnidui.dll 18:16:22.0819 2188 C:WindowsSystem32pnidui.dll - ok 18:16:22.0819 2188 [ 7B46A076184B73AEDC1A66A71D9131E8 ] C:WindowsMicrosoft.NETFrameworkv2.0.50727diasymreader.dll 18:16:22.0819 2188 C:WindowsMicrosoft.NETFrameworkv2.0.50727diasymreader.dll - ok 18:16:22.0835 2188 [ B9F0A4020AA98B7A20287BF7FE99A1FD ] C:WindowsSystem32QUTIL.DLL 18:16:22.0835 2188 C:WindowsSystem32QUTIL.DLL - ok 18:16:22.0835 2188 [ 4F3CD1C59EA71401E155C432BCECE180 ] C:WindowsSystem32PortableDeviceTypes.dll 18:16:22.0835 2188 C:WindowsSystem32PortableDeviceTypes.dll - ok 18:16:22.0835 2188 [ 71E8EEE760FEF22F9B40FC0A8132A2A5 ] C:Program Files (x86)NokiaNokia PC Suite 7PhoneBrowser64.dll 18:16:22.0835 2188 C:Program Files (x86)NokiaNokia PC Suite 7PhoneBrowser64.dll - ok 18:16:22.0835 2188 [ 1C3791F096BDEAFC4C2B8DCB1DA1793A ] C:Program Files (x86)NokiaNokia PC Suite 7NGSCM64.dll 18:16:22.0835 2188 C:Program Files (x86)NokiaNokia PC Suite 7NGSCM64.dll - ok 18:16:22.0850 2188 [ B4964A8643C49A90AAD82BE106A2850E ] C:Program Files (x86)NokiaNokia PC Suite 7LangPhoneBrowser_eng-us.NLR 18:16:22.0850 2188 C:Program Files (x86)NokiaNokia PC Suite 7LangPhoneBrowser_eng-us.NLR - ok 18:16:22.0850 2188 [ 9AA3281572BBB1CCA4B85C8975C11A87 ] C:Program Files (x86)NokiaNokia PC Suite 7PCSL64.dll 18:16:22.0850 2188 C:Program Files (x86)NokiaNokia PC Suite 7PCSL64.dll - ok 18:16:22.0850 2188 [ A09FF9F0F262488624DBDB3A88B1CF23 ] C:Program Files (x86)NokiaNokia PC Suite 7ResourcePhoneBrowser_Nokia.NGR 18:16:22.0850 2188 C:Program Files (x86)NokiaNokia PC Suite 7ResourcePhoneBrowser_Nokia.NGR - ok 18:16:22.0866 2188 [ F7A256EC899C72B4ECDD2C02CB592EFD ] C:WindowsSystem32bthprops.cpl 18:16:22.0866 2188 C:WindowsSystem32bthprops.cpl - ok 18:16:22.0866 2188 [ F146E2BA475893DD77B2370DC1211FC6 ] C:WindowsSystem32drivers84217679.sys 18:16:22.0866 2188 C:WindowsSystem32drivers84217679.sys - ok 18:16:22.0866 2188 [ 234AFA322624B3203A2E720F08292B03 ] C:WindowsSystem32cscobj.dll 18:16:22.0866 2188 C:WindowsSystem32cscobj.dll - ok 18:16:22.0866 2188 [ 8569E35D00F45972E506502EEE622BA4 ] C:WindowsSystem32srchadmin.dll 18:16:22.0866 2188 C:WindowsSystem32srchadmin.dll - ok 18:16:22.0866 2188 [ E0B340996A41C9A75DFA3B99BBA9C500 ] C:WindowsSystem32SearchIndexer.exe 18:16:22.0866 2188 C:WindowsSystem32SearchIndexer.exe - ok 18:16:22.0882 2188 [ 8323B32A6FC3FCD7E5C8BA94B36CE162 ] C:WindowsassemblyNativeImages_v2.0.50727_64System.Configuration3762e80651ff8d0bbcdb0ccebfb3b3f7System.Configuration.ni.dll 18:16:22.0882 2188 C:WindowsassemblyNativeImages_v2.0.50727_64System.Configuration3762e80651ff8d0bbcdb0ccebfb3b3f7System.Configuration.ni.dll - ok 18:16:22.0882 2188 [ 55AD9CAF8890CA4E77A1A16351217E05 ] C:WindowsSystem32atipdl64.dll 18:16:22.0882 2188 C:WindowsSystem32atipdl64.dll - ok 18:16:22.0882 2188 [ 102CF6879887BBE846A00C459E6D4ABC ] C:WindowsSysWOW64riched20.dll 18:16:22.0882 2188 C:WindowsSysWOW64riched20.dll - ok 18:16:22.0882 2188 [ 589DF683A6C81424A6CECE52ABF98A50 ] C:WindowsSystem32tquery.dll 18:16:22.0882 2188 C:WindowsSystem32tquery.dll - ok 18:16:22.0897 2188 [ E2A17BCC08D92F42E08AF6BA2F93ABA7 ] C:WindowsSysWOW64ExplorerFrame.dll 18:16:22.0897 2188 C:WindowsSysWOW64ExplorerFrame.dll - ok 18:16:22.0897 2188 [ 7568CC720ACE4D03B84AF97817E745EF ] C:WindowsSystem32mssrch.dll 18:16:22.0897 2188 C:WindowsSystem32mssrch.dll - ok 18:16:22.0897 2188 [ 522B0466ED967A0762E9AF5B37D8F40A ] C:WindowsSystem32esent.dll 18:16:22.0897 2188 C:WindowsSystem32esent.dll - ok 18:16:22.0897 2188 [ 6E1F8165C365D35C8E3C045AF0CDD481 ] C:WindowsSysWOW64duser.dll 18:16:22.0897 2188 C:WindowsSysWOW64duser.dll - ok 18:16:22.0913 2188 [ EE06B85BC69F18826302348A2AD089E0 ] C:WindowsSysWOW64dui70.dll 18:16:22.0913 2188 C:WindowsSysWOW64dui70.dll - ok 18:16:22.0913 2188 [ 3121A79D13A61562BE9CC902CD46B542 ] C:WindowsSystem32msidle.dll 18:16:22.0913 2188 C:WindowsSystem32msidle.dll - ok 18:16:22.0913 2188 [ 847D3AE376C0817161A14A82C8922A9E ] C:WindowsSystem32netman.dll 18:16:22.0913 2188 C:WindowsSystem32netman.dll - ok 18:16:22.0913 2188 [ ACE1BB07E0377E37A2C514CD2EC119B1 ] C:WindowsSystem32mssprxy.dll 18:16:22.0913 2188 C:WindowsSystem32mssprxy.dll - ok 18:16:22.0928 2188 [ C9FB9038B15036CA28CF0B4BE2BED9BD ] C:WindowsSystem32en-UStquery.dll.mui 18:16:22.0928 2188 C:WindowsSystem32en-UStquery.dll.mui - ok 18:16:22.0928 2188 [ D2155709E336C3BC15729EB87FEC6064 ] C:WindowsSystem32rasdlg.dll 18:16:22.0928 2188 C:WindowsSystem32rasdlg.dll - ok 18:16:22.0928 2188 [ 04CB7C8FDC6D9640DD82A527208F72C4 ] C:WindowsSystem32UIAnimation.dll 18:16:22.0928 2188 C:WindowsSystem32UIAnimation.dll - ok 18:16:22.0928 2188 [ 2DF29664ED261F0FC448E58F338F0671 ] C:WindowsSystem32mprapi.dll 18:16:22.0928 2188 C:WindowsSystem32mprapi.dll - ok 18:16:22.0944 2188 [ F9AFD12BB4B1CFA5FCC0A5B37C604FD2 ] C:WindowsSystem32dot3api.dll 18:16:22.0944 2188 C:WindowsSystem32dot3api.dll - ok 18:16:22.0944 2188 [ E4FCA0F99A41E460C84016DEFD31E6EF ] C:WindowsSystem32wlanhlp.dll 18:16:22.0944 2188 C:WindowsSystem32wlanhlp.dll - ok 18:16:22.0944 2188 [ 3B367397320C26DBA890B260F80D1B1B ] C:WindowsSystem32hnetcfg.dll 18:16:22.0944 2188 C:WindowsSystem32hnetcfg.dll - ok 18:16:22.0944 2188 [ 5DA219F57A9076FB6FBD3C9C3713A672 ] C:WindowsSystem32WWanAPI.dll 18:16:22.0944 2188 C:WindowsSystem32WWanAPI.dll - ok 18:16:22.0944 2188 [ 62C7AACC746C9723468A8F2169ED3E85 ] C:WindowsSystem32wwapi.dll 18:16:22.0944 2188 C:WindowsSystem32wwapi.dll - ok 18:16:22.0960 2188 [ 6B851E682A36453E1B1EE297FFB6E2AB ] C:WindowsSystem32QAGENT.DLL 18:16:22.0960 2188 C:WindowsSystem32QAGENT.DLL - ok 18:16:22.0960 2188 [ D7CEAEDD5F75D2C8A2E80887D7C114CE ] C:WindowsSystem32webcheck.dll 18:16:22.0960 2188 C:WindowsSystem32webcheck.dll - ok 18:16:22.0960 2188 [ 8494E126F0B10180F3293AF861CE1F7A ] C:WindowsSystem32mlang.dll 18:16:22.0960 2188 C:WindowsSystem32mlang.dll - ok 18:16:22.0960 2188 [ 101797BA603D227946B4B5109867EB19 ] C:WindowsSystem32SyncCenter.dll 18:16:22.0960 2188 C:WindowsSystem32SyncCenter.dll - ok 18:16:22.0975 2188 [ C746F3BF98E92FB137B5BD2B8B5925BD ] C:WindowsSystem32FXSST.dll 18:16:22.0975 2188 C:WindowsSystem32FXSST.dll - ok 18:16:22.0975 2188 [ 650CAEA856943E29F25A25D31E004B18 ] C:WindowsSystem32FXSAPI.dll 18:16:22.0975 2188 C:WindowsSystem32FXSAPI.dll - ok 18:16:22.0975 2188 [ 8130391F82D52D36C0441F714136957F ] C:WindowsSystem32imapi2.dll 18:16:22.0975 2188 C:WindowsSystem32imapi2.dll - ok 18:16:22.0975 2188 [ D9E21CBF9E6A87847AFFD39EA3FA28EE ] C:WindowsSystem32SearchProtocolHost.exe 18:16:22.0975 2188 C:WindowsSystem32SearchProtocolHost.exe - ok 18:16:22.0991 2188 [ C8E8B8239FCF17BEA10E751BE5854631 ] C:WindowsSystem32FXSRESM.dll 18:16:22.0991 2188 C:WindowsSystem32FXSRESM.dll - ok 18:16:22.0991 2188 [ D2A5B2B09F2AF5ED13BF494508B09788 ] C:WindowsSystem32msshooks.dll 18:16:22.0991 2188 C:WindowsSystem32msshooks.dll - ok 18:16:22.0991 2188 [ 49A3AD5CE578CD77F445F3D244AEAB2D ] C:WindowsSystem32SearchFilterHost.exe 18:16:22.0991 2188 C:WindowsSystem32SearchFilterHost.exe - ok 18:16:22.0991 2188 [ 8F4BB0CFECED925D440ABC2481278360 ] C:WindowsSystem32mapi32.dll 18:16:22.0991 2188 C:WindowsSystem32mapi32.dll - ok 18:16:23.0006 2188 [ 48041BAEB60CE5F34F13CC2A1361E49C ] C:WindowsSystem32mssph.dll 18:16:23.0006 2188 C:WindowsSystem32mssph.dll - ok 18:16:23.0006 2188 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] C:WindowsSystem32FXSSVC.exe 18:16:23.0006 2188 C:WindowsSystem32FXSSVC.exe - ok 18:16:23.0006 2188 [ CB02AF3616A7475468ED1BF251FB7EC3 ] C:Program FilesCommon FilesATI TechnologiesMultimediaatixcode64.dll 18:16:23.0006 2188 C:Program FilesCommon FilesATI TechnologiesMultimediaatixcode64.dll - ok 18:16:23.0006 2188 [ 7AE92C896AF9ABFBDB18C1D055B6EBA7 ] C:Windowswinsxsamd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6msvcp80.dll 18:16:23.0006 2188 C:Windowswinsxsamd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6msvcp80.dll - ok 18:16:23.0022 2188 [ 6A5C1A8AC0B572679361026D0E900420 ] C:WindowsSystem32hgcpl.dll 18:16:23.0022 2188 C:WindowsSystem32hgcpl.dll - ok 18:16:23.0022 2188 [ 9DC1EAF0EF733DB86AF96A6FC0AF07F4 ] C:Program FilesCommon FilesATI TechnologiesMultimediaatimpenc64.dll 18:16:23.0022 2188 C:Program FilesCommon FilesATI TechnologiesMultimediaatimpenc64.dll - ok 18:16:23.0022 2188 [ 4C3DAEE652B005B483F16B8E9131C99D ] C:WindowsSystem32d3d9.dll 18:16:23.0022 2188 C:WindowsSystem32d3d9.dll - ok 18:16:23.0022 2188 [ 3044D07ABDF4BBEA27E2EE7B1E0C0C65 ] C:WindowsSystem32d3d8thk.dll 18:16:23.0022 2188 C:WindowsSystem32d3d8thk.dll - ok 18:16:23.0038 2188 [ 0ADC83218B66A6DB380C330836F3E36D ] C:WindowsSystem32driversfastfat.sys 18:16:23.0038 2188 C:WindowsSystem32driversfastfat.sys - ok 18:16:23.0038 2188 [ 712D9EB4CD8D64AC78FBB3C9AE6A6DAC ] C:Program FilesInternet Explorerieproxy.dll 18:16:23.0038 2188 C:Program FilesInternet Explorerieproxy.dll - ok 18:16:23.0038 2188 [ 6F5386A655598F71BAAB2D6B63A69D6A ] C:Program Files (x86)Mozilla Firefoxfirefox.exe 18:16:23.0038 2188 C:Program Files (x86)Mozilla Firefoxfirefox.exe - ok 18:16:23.0038 2188 [ E0FD85DADD7EF3E892ECBB0DC4D68E0A ] C:Program Files (x86)Mozilla Firefoxmozglue.dll 18:16:23.0038 2188 C:Program Files (x86)Mozilla Firefoxmozglue.dll - ok 18:16:23.0053 2188 [ 03E9314004F504A14A61C3D364B62F66 ] C:Program Files (x86)Mozilla Firefoxmsvcp100.dll 18:16:23.0053 2188 C:Program Files (x86)Mozilla Firefoxmsvcp100.dll - ok 18:16:23.0053 2188 [ 67EC459E42D3081DD8FD34356F7CAFC1 ] C:Program Files (x86)Mozilla Firefoxmsvcr100.dll 18:16:23.0053 2188 C:Program Files (x86)Mozilla Firefoxmsvcr100.dll - ok 18:16:23.0053 2188 [ 4F94DC9D7156DF622FB1AEFEC85B0F85 ] C:Program Files (x86)Mozilla Firefoxnspr4.dll 18:16:23.0053 2188 C:Program Files (x86)Mozilla Firefoxnspr4.dll - ok 18:16:23.0053 2188 [ DF13A51A5C591887D2EC6AE64CEED0FA ] C:WindowsSysWOW64wsock32.dll 18:16:23.0053 2188 C:WindowsSysWOW64wsock32.dll - ok 18:16:23.0053 2188 [ 5957AA52E13272E041E009F9176CF702 ] C:Program Files (x86)Mozilla Firefoxmozjs.dll 18:16:23.0069 2188 C:Program Files (x86)Mozilla Firefoxmozjs.dll - ok 18:16:23.0069 2188 [ 30F13CC50B40AC23A25861BDB8FDEDE9 ] C:Program Files (x86)Mozilla Firefoxmozalloc.dll 18:16:23.0069 2188 C:Program Files (x86)Mozilla Firefoxmozalloc.dll - ok 18:16:23.0069 2188 [ EB03052F8D4343CFA74BDAA0FC9781B1 ] C:Program Files (x86)Mozilla Firefoxmozsqlite3.dll 18:16:23.0069 2188 C:Program Files (x86)Mozilla Firefoxmozsqlite3.dll - ok 18:16:23.0069 2188 [ 37CF212AE1AE34852C08950868C99451 ] C:Program Files (x86)Mozilla Firefoxnss3.dll 18:16:23.0069 2188 C:Program Files (x86)Mozilla Firefoxnss3.dll - ok 18:16:23.0084 2188 [ E64EF4732DC96115AFD6902739FEDEA9 ] C:Program Files (x86)Mozilla Firefoxnssutil3.dll 18:16:23.0084 2188 C:Program Files (x86)Mozilla Firefoxnssutil3.dll - ok 18:16:23.0084 2188 [ AC1782CDBAF09F3AE2845BCAE25863C0 ] C:Program Files (x86)Mozilla Firefoxplc4.dll 18:16:23.0084 2188 C:Program Files (x86)Mozilla Firefoxplc4.dll - ok 18:16:23.0084 2188 [ 9FAB315A6F54DDAFF67C45C6B0E8180A ] C:Program Files (x86)Mozilla Firefoxplds4.dll 18:16:23.0084 2188 C:Program Files (x86)Mozilla Firefoxplds4.dll - ok 18:16:23.0084 2188 [ 6B030923B2ED4341FA0FC2439EBA6937 ] C:Program Files (x86)Mozilla Firefoxsmime3.dll 18:16:23.0084 2188 C:Program Files (x86)Mozilla Firefoxsmime3.dll - ok 18:16:23.0100 2188 [ 71CD356DD1CB8D414906797912093AB7 ] C:Program Files (x86)Mozilla Firefoxssl3.dll 18:16:23.0100 2188 C:Program Files (x86)Mozilla Firefoxssl3.dll - ok 18:16:23.0100 2188 [ 03C0475B64A49A531A1FCA445EFAF714 ] C:Program Files (x86)Mozilla Firefoxgkmedias.dll 18:16:23.0100 2188 C:Program Files (x86)Mozilla Firefoxgkmedias.dll - ok 18:16:23.0100 2188 [ ED24A2D1D94A90E188FFCA4A21453E39 ] C:Program Files (x86)Mozilla Firefoxxul.dll 18:16:23.0100 2188 C:Program Files (x86)Mozilla Firefoxxul.dll - ok 18:16:23.0100 2188 [ 7069AAB8536F29ED7323140973A2894B ] C:WindowsSysWOW64msdmo.dll 18:16:23.0100 2188 C:WindowsSysWOW64msdmo.dll - ok 18:16:23.0116 2188 [ 0D1A879E307914CA59724450690DABBA ] C:Program Files (x86)Mozilla Firefoxxpcom.dll 18:16:23.0116 2188 C:Program Files (x86)Mozilla Firefoxxpcom.dll - ok 18:16:23.0116 2188 [ 4277F5164DE9B7C665BB928B9145BEE0 ] C:WindowsSysWOW64DWrite.dll 18:16:23.0116 2188 C:WindowsSysWOW64DWrite.dll - ok 18:16:23.0116 2188 [ 51FA7CB7C76E56D478768F64A1AEF24B ] C:Program Files (x86)Mozilla Firefoxcomponentsbrowsercomps.dll 18:16:23.0116 2188 C:Program Files (x86)Mozilla Firefoxcomponentsbrowsercomps.dll - ok 18:16:23.0116 2188 [ 81F08948A0F1475894C99D4D19A158A8 ] C:WindowsSysWOW64wshqos.dll 18:16:23.0116 2188 C:WindowsSysWOW64wshqos.dll - ok 18:16:23.0131 2188 [ 243974EC02F7AE49E4179C54624143AB ] C:WindowsSysWOW64MMDevAPI.dll 18:16:23.0131 2188 C:WindowsSysWOW64MMDevAPI.dll - ok 18:16:23.0131 2188 [ C940F2F5C60B3727C5F18840735B229C ] C:WindowsSysWOW64AudioSes.dll 18:16:23.0131 2188 C:WindowsSysWOW64AudioSes.dll - ok 18:16:23.0131 2188 [ A2631C4465BBCE72B7E371DFB924A9D3 ] C:WindowsSysWOW64feclient.dll 18:16:23.0131 2188 C:WindowsSysWOW64feclient.dll - ok 18:16:23.0147 2188 [ 3C1936A12C62254F914A01BBC6A8DC69 ] C:WindowsSysWOW64d3d10_1.dll 18:16:23.0147 2188 C:WindowsSysWOW64d3d10_1.dll - ok 18:16:23.0147 2188 [ D4212AB475A3B25EC4DF574536C3EDC5 ] C:WindowsSysWOW64d3d10_1core.dll 18:16:23.0147 2188 C:WindowsSysWOW64d3d10_1core.dll - ok 18:16:23.0147 2188 [ D4F264FE23F8953D840904418220C15E ] C:WindowsSysWOW64dxgi.dll 18:16:23.0147 2188 C:WindowsSysWOW64dxgi.dll - ok 18:16:23.0147 2188 [ 7ACDFB4CC67F4993DF0E0731576309B2 ] C:WindowsSysWOW64d3d11.dll 18:16:23.0147 2188 C:WindowsSysWOW64d3d11.dll - ok 18:16:23.0162 2188 [ B7043D11BB8C26BBBFD04B28A484D8AA ] C:WindowsSysWOW64aticfx32.dll 18:16:23.0162 2188 C:WindowsSysWOW64aticfx32.dll - ok 18:16:23.0162 2188 [ FB5A687FEA2CD54E8EBB8C1FEA2A6ECE ] C:WindowsSysWOW64atidxx32.dll 18:16:23.0162 2188 C:WindowsSysWOW64atidxx32.dll - ok 18:16:23.0162 2188 [ 901134EDF0690DA61674EFD23AF1D88D ] C:WindowsSysWOW64atiuxpag.dll 18:16:23.0162 2188 C:WindowsSysWOW64atiuxpag.dll - ok 18:16:23.0178 2188 [ 9FF8F684BACF326082E5562F7C104A79 ] C:WindowsSysWOW64d2d1.dll 18:16:23.0178 2188 C:WindowsSysWOW64d2d1.dll - ok 18:16:23.0178 2188 [ 0B7E85364CB878E2AD531DB7B601A9E5 ] C:WindowsSysWOW64NapiNSP.dll 18:16:23.0178 2188 C:WindowsSysWOW64NapiNSP.dll - ok 18:16:23.0178 2188 [ 5CF640EDDB1E40A5AB1BB743BCDEC610 ] C:WindowsSysWOW64pnrpnsp.dll 18:16:23.0178 2188 C:WindowsSysWOW64pnrpnsp.dll - ok 18:16:23.0178 2188 [ 5DF5D8CFD9B9573FA3B2C89D9061A240 ] C:WindowsSysWOW64winrnr.dll 18:16:23.0178 2188 C:WindowsSysWOW64winrnr.dll - ok 18:16:23.0194 2188 [ 7F8678C59F188528D60104E697C2361E ] C:WindowsSysWOW64mscms.dll 18:16:23.0194 2188 C:WindowsSysWOW64mscms.dll - ok 18:16:23.0194 2188 [ 839F96DBAAFD3353E0B248A5E0BD2A51 ] C:WindowsSysWOW64rasapi32.dll 18:16:23.0194 2188 C:WindowsSysWOW64rasapi32.dll - ok 18:16:23.0194 2188 [ FFA7172354B9256DBB2CDD75F16F33FE ] C:WindowsSysWOW64rasman.dll 18:16:23.0194 2188 C:WindowsSysWOW64rasman.dll - ok 18:16:23.0209 2188 [ 0915C4DB6DBC3BB9E11B7ECBBE4B7159 ] C:WindowsSysWOW64rtutils.dll 18:16:23.0209 2188 C:WindowsSysWOW64rtutils.dll - ok 18:16:23.0209 2188 [ 0028FFB55B16A31CA25F87007A87CCEF ] C:Program Files (x86)Mozilla Firefoxsoftokn3.dll 18:16:23.0209 2188 C:Program Files (x86)Mozilla Firefoxsoftokn3.dll - ok 18:16:23.0209 2188 [ E714F5AB9D7C81E56AE3D99B61267D9A ] C:Program Files (x86)Mozilla Firefoxnssdbm3.dll 18:16:23.0209 2188 C:Program Files (x86)Mozilla Firefoxnssdbm3.dll - ok 18:16:23.0209 2188 [ 81C39B4B7FC14493958860AC06057AD9 ] C:Program Files (x86)Mozilla Firefoxfreebl3.dll 18:16:23.0209 2188 C:Program Files (x86)Mozilla Firefoxfreebl3.dll - ok 18:16:23.0225 2188 [ DDE3A1D8D9A0AE1999CAD3EC6F0ED1F3 ] C:Program Files (x86)Mozilla Firefoxnssckbi.dll 18:16:23.0225 2188 C:Program Files (x86)Mozilla Firefoxnssckbi.dll - ok 18:16:23.0225 2188 [ EC3D1A16E221E6B27850FDD278EB6929 ] C:Program Files (x86)QuickTimeQuickTimePlayer.exe 18:16:23.0225 2188 C:Program Files (x86)QuickTimeQuickTimePlayer.exe - ok 18:16:23.0225 2188 [ A80C173AC5C75706BB74AE4D78F2A53D ] C:Program Files (x86)Windows Media Playerwmplayer.exe 18:16:23.0225 2188 C:Program Files (x86)Windows Media Playerwmplayer.exe - ok 18:16:23.0225 2188 [ C5A75EB48E2344ABDC162BDA79E16841 ] C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe 18:16:23.0225 2188 C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe - ok 18:16:23.0240 2188 [ E5F7C30EDF0892667933BE879F067D67 ] C:WindowsSysWOW64msvcr100_clr0400.dll 18:16:23.0240 2188 C:WindowsSysWOW64msvcr100_clr0400.dll - ok 18:16:23.0240 2188 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] C:WindowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe 18:16:23.0240 2188 C:WindowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe - ok 18:16:23.0240 2188 [ CB21CD39637AC13F3455454B2F648257 ] C:WindowsSystem32msvcr100_clr0400.dll 18:16:23.0240 2188 C:WindowsSystem32msvcr100_clr0400.dll - ok 18:16:23.0256 2188 [ 429986F0BCFC31C254AB392722CAFFF0 ] C:Program FilesDiskeeper CorporationDiskeeperDkService.exe 18:16:23.0256 2188 C:Program FilesDiskeeper CorporationDiskeeperDkService.exe - ok 18:16:23.0256 2188 [ CF6850A72BEB4845A3BFFB3F5E8014B2 ] C:WindowsSystem32pdh.dll 18:16:23.0256 2188 C:WindowsSystem32pdh.dll - ok 18:16:23.0256 2188 [ 265885FCE6BB05669F8D2C225016C307 ] C:Program FilesDiskeeper CorporationDiskeeperMJS.dll 18:16:23.0256 2188 C:Program FilesDiskeeper CorporationDiskeeperMJS.dll - ok 18:16:23.0256 2188 [ F3D202F53A222D5F6944D459B73CF967 ] C:WindowsSystem32fltLib.dll 18:16:23.0256 2188 C:WindowsSystem32fltLib.dll - ok 18:16:23.0272 2188 [ 01F770FFB9FB80AFA28C0038FFF7C215 ] C:Program FilesDiskeeper CorporationDiskeeperDKLib.dll 18:16:23.0272 2188 C:Program FilesDiskeeper CorporationDiskeeperDKLib.dll - ok 18:16:23.0272 2188 [ 366FD6F3A451351B5DF2D7C4ECF4C73A ] C:WindowsSystem32msvcr100.dll 18:16:23.0272 2188 C:WindowsSystem32msvcr100.dll - ok 18:16:23.0272 2188 [ D029339C0F59CF662094EDDF8C42B2B5 ] C:WindowsSystem32msvcp100.dll 18:16:23.0272 2188 C:WindowsSystem32msvcp100.dll - ok 18:16:23.0287 2188 [ 406A8B04F689AD7DC259F1F19D7B2E1A ] C:Program FilesDiskeeper CorporationDiskeeperPrFacade.dll 18:16:23.0287 2188 C:Program FilesDiskeeper CorporationDiskeeperPrFacade.dll - ok 18:16:23.0287 2188 [ 029CF8B0BC07B1F4423CCBA826150410 ] C:Program FilesDiskeeper CorporationDiskeeperTab.dll 18:16:23.0287 2188 C:Program FilesDiskeeper CorporationDiskeeperTab.dll - ok 18:16:23.0287 2188 [ 8DF01290E42F0E15B334DE4916951C3B ] C:Program FilesDiskeeper CorporationDiskeeper1033DkRes.dll 18:16:23.0287 2188 C:Program FilesDiskeeper CorporationDiskeeper1033DkRes.dll - ok 18:16:23.0287 2188 [ 456F76CA862138B6C5FC639C5E3E09CE ] C:Program FilesDiskeeper CorporationDiskeeperDkTabProvider.dll 18:16:23.0287 2188 C:Program FilesDiskeeper CorporationDiskeeperDkTabProvider.dll - ok 18:16:23.0303 2188 [ 35DB83C4DE9FA3889E937125D115EAA0 ] C:Program Files (x86)GoogleUpdate1.3.21.135goopdateres_en.dll 18:16:23.0303 2188 C:Program Files (x86)GoogleUpdate1.3.21.135goopdateres_en.dll - ok 18:16:23.0303 2188 [ 31A0E93CDF29007D6C6FFFB632F375ED ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe 18:16:23.0303 2188 C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe - ok 18:16:23.0303 2188 [ 45589E89343FDF8171E3DB802EEDFD37 ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgr.dll 18:16:23.0303 2188 C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgr.dll - ok 18:16:23.0318 2188 [ 291509EA0561948888E41BD17176A2F0 ] C:WindowsassemblyNativeImages_v2.0.50727_32IAStorDataMgrSvcca7e342fcf00b94f89bb332ec4ea03f5IAStorDataMgrSvc.ni.exe 18:16:23.0318 2188 C:WindowsassemblyNativeImages_v2.0.50727_32IAStorDataMgrSvcca7e342fcf00b94f89bb332ec4ea03f5IAStorDataMgrSvc.ni.exe - ok 18:16:23.0318 2188 [ 7765680E25E329708CB034B180CF9FCD ] C:WindowsassemblyNativeImages_v2.0.50727_32System.ServiceProce#7ff638de44686eab4afaa8b3c8a9cfcaSystem.ServiceProcess.ni.dll 18:16:23.0318 2188 C:WindowsassemblyNativeImages_v2.0.50727_32System.ServiceProce#7ff638de44686eab4afaa8b3c8a9cfcaSystem.ServiceProcess.ni.dll - ok 18:16:23.0318 2188 [ 760C39AB75B456B86C926B04DEDA9D80 ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIsdiInterop.dll 18:16:23.0318 2188 C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIsdiInterop.dll - ok 18:16:23.0318 2188 [ 1B78B3C8B9F30FF7060E3FA46E946730 ] C:WindowsassemblyNativeImages_v2.0.50727_32IAStorDataMgr6aa310d29389daab7d490cfffef5e803IAStorDataMgr.ni.dll 18:16:23.0318 2188 C:WindowsassemblyNativeImages_v2.0.50727_32IAStorDataMgr6aa310d29389daab7d490cfffef5e803IAStorDataMgr.ni.dll - ok 18:16:23.0334 2188 [ 1572A25B31B8A555757ED6E6D09C6F16 ] C:WindowsassemblyNativeImages_v2.0.50727_32IsdiInterop1ad8638fee6b8f2152118441b9554d18IsdiInterop.ni.dll 18:16:23.0334 2188 C:WindowsassemblyNativeImages_v2.0.50727_32IsdiInterop1ad8638fee6b8f2152118441b9554d18IsdiInterop.ni.dll - ok 18:16:23.0334 2188 [ A093ED015173A0952817B05ADE79E5C0 ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyISDI.dll 18:16:23.0334 2188 C:Program Files (x86)IntelIntel® Rapid Storage TechnologyISDI.dll - ok 18:16:23.0334 2188 [ 0438CAB2E03F4FB61455A7956026FE86 ] C:WindowsSystem32fdPHost.dll 18:16:23.0334 2188 C:WindowsSystem32fdPHost.dll - ok 18:16:23.0350 2188 [ 7200DCA324F3D1ECD11B2B1250B2D6C7 ] C:Windowswinsxsx86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742msvcm90.dll 18:16:23.0350 2188 C:Windowswinsxsx86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742msvcm90.dll - ok 18:16:23.0350 2188 [ FBA4773ECFEFFC6566FB2AD13CEC4940 ] C:WindowsassemblyNativeImages_v2.0.50727_32WindowsBasecf827fe7bc99d9bcf0ba3621054ef527WindowsBase.ni.dll 18:16:23.0350 2188 C:WindowsassemblyNativeImages_v2.0.50727_32WindowsBasecf827fe7bc99d9bcf0ba3621054ef527WindowsBase.ni.dll - ok 18:16:23.0350 2188 [ 171D7DB433314A868507C4326E8209DC ] C:WindowsSystem32fdWSD.dll 18:16:23.0350 2188 C:WindowsSystem32fdWSD.dll - ok 18:16:23.0350 2188 [ A2E5B2D20954210DCE1A75A1FC8CC36D ] C:WindowsSystem32fdSSDP.dll 18:16:23.0350 2188 C:WindowsSystem32fdSSDP.dll - ok 18:16:23.0365 2188 [ 098A91C54546A3B878DAD6A7E90A455B ] C:WindowsSystem32IPBusEnum.dll 18:16:23.0365 2188 C:WindowsSystem32IPBusEnum.dll - ok 18:16:23.0365 2188 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] C:WindowsSystem32ssdpsrv.dll 18:16:23.0365 2188 C:WindowsSystem32ssdpsrv.dll - ok 18:16:23.0365 2188 [ 765F2DD351BA064F657751D8D75E58C0 ] C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSUNS.exe 18:16:23.0365 2188 C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSUNS.exe - ok 18:16:23.0381 2188 [ D480C9220BFE667DE65A46CDE80EA7E9 ] C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSStatusStrings.dll 18:16:23.0381 2188 C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSStatusStrings.dll - ok 18:16:23.0381 2188 [ 122F89E0905FC656D56F65CD7A2E9B4D ] C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSxerces-c_2_7.dll 18:16:23.0381 2188 C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSxerces-c_2_7.dll - ok 18:16:23.0381 2188 [ 1CBAD5EEE017FAFEA2BF75E82330783D ] C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSDTMessageLib.dll 18:16:23.0381 2188 C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSDTMessageLib.dll - ok 18:16:23.0396 2188 [ A59268D51A7D8EBE14D58064B36229F3 ] C:Program FilesCommon FilesDiskeeper CorporationMJSMJSCR.dll 18:16:23.0396 2188 C:Program FilesCommon FilesDiskeeper CorporationMJSMJSCR.dll - ok 18:16:23.0396 2188 [ A9F3BFC9345F49614D5859EC95B9E994 ] C:Program FilesWindows Media Playerwmpnetwk.exe 18:16:23.0396 2188 C:Program FilesWindows Media Playerwmpnetwk.exe - ok 18:16:23.0396 2188 [ 371948BC5911ABA06168FAC91ED25F06 ] C:WindowsSystem32msxml3.dll 18:16:23.0396 2188 C:WindowsSystem32msxml3.dll - ok 18:16:23.0396 2188 [ 423982DD851406A52B6399DDB196C606 ] C:WindowsSystem32wmdrmdev.dll 18:16:23.0396 2188 C:WindowsSystem32wmdrmdev.dll - ok 18:16:23.0412 2188 [ 2C1055E2C6D42753241FB2A129136994 ] C:WindowsSystem32drmv2clt.dll 18:16:23.0412 2188 C:WindowsSystem32drmv2clt.dll - ok 18:16:23.0412 2188 [ DD80D3894F5E1D36864D9727214605CD ] C:WindowsassemblyNativeImages_v2.0.50727_32System.Web5ecf01964c70e453d71e5d7653912ff9System.Web.ni.dll 18:16:23.0412 2188 C:WindowsassemblyNativeImages_v2.0.50727_32System.Web5ecf01964c70e453d71e5d7653912ff9System.Web.ni.dll - ok 18:16:23.0412 2188 [ 7E28518A35A795EFE5CCE7A5E5464818 ] C:ProgramDataMicrosoftWindowsDRMCacheIndiv_SID_S-1-5-20Indiv01_64.key 18:16:23.0412 2188 C:ProgramDataMicrosoftWindowsDRMCacheIndiv_SID_S-1-5-20Indiv01_64.key - ok 18:16:23.0428 2188 [ 96DB78C9C50CEED9DA5050EFFEE272A2 ] C:WindowsSystem32upnp.dll 18:16:23.0428 2188 C:WindowsSystem32upnp.dll - ok 18:16:23.0428 2188 [ 20C394C80113D77406DF8F1ADC720B01 ] C:WindowsSystem32driversDKRtWrt.sys 18:16:23.0428 2188 C:WindowsSystem32driversDKRtWrt.sys - ok 18:16:23.0428 2188 [ 1EB82516F21F27EED1833B4F9FD9614E ] C:WindowsSystem32wmp.dll 18:16:23.0428 2188 C:WindowsSystem32wmp.dll - ok 18:16:23.0428 2188 [ 143578987A9CDC24F90958FA3EC07624 ] C:Program FilesDiskeeper CorporationDiskeeperNsIfaastMeas.dll 18:16:23.0428 2188 C:Program FilesDiskeeper CorporationDiskeeperNsIfaastMeas.dll - ok 18:16:23.0443 2188 [ E19AD0D49BFF5938B3E374873AC174DE ] C:WindowsSystem32wmploc.DLL 18:16:23.0443 2188 C:WindowsSystem32wmploc.DLL - ok 18:16:23.0443 2188 [ BBEE9BBFD1F3C339059D96C4C42B455F ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorUIHelper.dll 18:16:23.0443 2188 C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorUIHelper.dll - ok 18:16:23.0443 2188 [ 355A138ABDFD43FBABCAE3A1B06AB93D ] C:WindowsSystem32wmpps.dll 18:16:23.0443 2188 C:WindowsSystem32wmpps.dll - ok 18:16:23.0443 2188 [ F149E8CAE538DBF7059B00326673F602 ] C:WindowsSystem32wmpmde.dll 18:16:23.0443 2188 C:WindowsSystem32wmpmde.dll - ok 18:16:23.0459 2188 [ BCEA9AB347E53BC03B2E36BE0B8BA0EF ] C:WindowsSystem32httpapi.dll 18:16:23.0459 2188 C:WindowsSystem32httpapi.dll - ok 18:16:23.0459 2188 [ 021287C2050FD5DB4A8B084E2C38139C ] C:WindowsSystem32WinSATAPI.dll 18:16:23.0459 2188 C:WindowsSystem32WinSATAPI.dll - ok 18:16:23.0459 2188 [ C99C6E70B3625D0E5600B361007B6CA1 ] C:Program FilesCommon FilesMicrosoft SharedOFFICE12MSOXMLMF.DLL 18:16:23.0459 2188 C:Program FilesCommon FilesMicrosoft SharedOFFICE12MSOXMLMF.DLL - ok 18:16:23.0474 2188 [ 28A7D7C7E2FDD1D55F12F750CD6331EC ] C:WindowsSystem32MSMPEG2ENC.DLL 18:16:23.0474 2188 C:WindowsSystem32MSMPEG2ENC.DLL - ok 18:16:23.0474 2188 [ 46767946E7B559D981C1DC04EC0AB36F ] C:WindowsSystem32devenum.dll 18:16:23.0474 2188 C:WindowsSystem32devenum.dll - ok 18:16:23.0474 2188 [ 558C42D165DB5799B4072DC0A9C27C0B ] C:WindowsSystem32msdmo.dll 18:16:23.0474 2188 C:WindowsSystem32msdmo.dll - ok 18:16:23.0474 2188 [ D47EC6A8E81633DD18D2436B19BAF6DE ] C:WindowsSystem32upnphost.dll 18:16:23.0474 2188 C:WindowsSystem32upnphost.dll - ok 18:16:23.0490 2188 [ 71E68F2443A80BD4DA89181889C457EA ] C:WindowsSystem32udhisapi.dll 18:16:23.0490 2188 C:WindowsSystem32udhisapi.dll - ok 18:16:23.0490 2188 [ 2B5D729A8B869E5B5940B49EA6F65F91 ] C:Program FilesDiskeeper CorporationDiskeeperNsNtfsAutoAnalyze.dll 18:16:23.0490 2188 C:Program FilesDiskeeper CorporationDiskeeperNsNtfsAutoAnalyze.dll - ok 18:16:23.0490 2188 [ 5987EA8A82C53359BCD2C29D6588583E ] C:WindowsSysWOW64linkinfo.dll 18:16:23.0490 2188 C:WindowsSysWOW64linkinfo.dll - ok 18:16:23.0490 2188 [ E503E15C88B4BBDA3F6345E34FED3E92 ] C:WindowsSystem32mssvp.dll 18:16:23.0490 2188 C:WindowsSystem32mssvp.dll - ok 18:16:23.0506 2188 [ 01E2855FB06C422E721D890AF201C2D7 ] C:WindowsSystem32NaturalLanguage6.dll 18:16:23.0506 2188 C:WindowsSystem32NaturalLanguage6.dll - ok 18:16:23.0506 2188 [ 701D9F5F3F21580936638D5C5F86B460 ] C:WindowsSystem32NlsData0009.dll 18:16:23.0506 2188 C:WindowsSystem32NlsData0009.dll - ok 18:16:23.0506 2188 [ 148A733B93A2AC104280495DA09D3CC2 ] C:WindowsSystem32NlsLexicons0009.dll 18:16:23.0506 2188 C:WindowsSystem32NlsLexicons0009.dll - ok 18:16:23.0506 2188 [ FF2B106909EED48C536DA04742C0324A ] C:WindowsSystem32Query.dll 18:16:23.0506 2188 C:WindowsSystem32Query.dll - ok 18:16:23.0521 2188 [ C116A638C1F59730DF8F097F8070AA99 ] C:UsersDimoDesktopavg_remover_stf_x64_2013_2706.exe 18:16:23.0521 2188 C:UsersDimoDesktopavg_remover_stf_x64_2013_2706.exe - ok 18:16:23.0521 2188 [ 08C840E880C35731EEC57E23A6EA2572 ] C:WindowsSystem32NlsData0002.dll 18:16:23.0521 2188 C:WindowsSystem32NlsData0002.dll - ok 18:16:23.0521 2188 [ 02F643275B6A7E713088DCF6E54FF5EF ] C:WindowsSystem32NlsLexicons0002.dll 18:16:23.0521 2188 C:WindowsSystem32NlsLexicons0002.dll - ok 18:16:23.0521 2188 [ 76D86E65FF7D10292886A1F2DB93A911 ] C:WindowsSystem32ELSCore.dll 18:16:23.0521 2188 C:WindowsSystem32ELSCore.dll - ok 18:16:23.0537 2188 [ 12929BDE96189F4E968AD035573424F0 ] C:WindowsSystem32elsTrans.dll 18:16:23.0537 2188 C:WindowsSystem32elsTrans.dll - ok 18:16:23.0537 2188 [ AEE087CF7423BA44CC2DE03CC565E399 ] C:WindowsSystem32elslad.dll 18:16:23.0537 2188 C:WindowsSystem32elslad.dll - ok 18:16:23.0537 2188 [ 65D8758A4006B1637245DC9A8A508FC1 ] C:Program FilesDiskeeper CorporationDiskeeperNsNtfsJIT.dll 18:16:23.0537 2188 C:Program FilesDiskeeper CorporationDiskeeperNsNtfsJIT.dll - ok 18:16:23.0537 2188 [ 005247E3057BC5D5C3F8C6F886FFC10C ] C:WindowsSystem32wbemWMIADAP.exe 18:16:23.0537 2188 C:WindowsSystem32wbemWMIADAP.exe - ok 18:16:23.0552 2188 [ 9FE3ED67345F0FF829A4A53B90E09672 ] C:WindowsSystem32loadperf.dll 18:16:23.0552 2188 C:WindowsSystem32loadperf.dll - ok 18:16:23.0552 2188 [ BE5C7690D94F9DAB63BEED73D8FFABBE ] C:WindowsSystem32wbemWmiApRes.dll 18:16:23.0552 2188 C:WindowsSystem32wbemWmiApRes.dll - ok 18:16:23.0552 2188 ============================================================ 18:16:23.0552 2188 Scan finished 18:16:23.0552 2188 ============================================================ 18:16:23.0568 2648 Detected object count: 4 18:16:23.0568 2648 Actual detected object count: 4 18:17:51.0739 2648 04616106 ( ForgedFile.Multi.Generic ) - skipped by user 18:17:51.0739 2648 04616106 ( ForgedFile.Multi.Generic ) - User select action: Skip 18:17:51.0739 2648 InstallFilterService ( UnsignedFile.Multi.Generic ) - skipped by user 18:17:51.0739 2648 InstallFilterService ( UnsignedFile.Multi.Generic ) - User select action: Skip 18:17:51.0739 2648 sptd ( LockedFile.Multi.Generic ) - skipped by user 18:17:51.0739 2648 sptd ( LockedFile.Multi.Generic ) - User select action: Skip 18:17:51.0739 2648 wltrysvc ( UnsignedFile.Multi.Generic ) - skipped by user 18:17:51.0739 2648 wltrysvc ( UnsignedFile.Multi.Generic ) - User select action: Skip

Лог от ADW Cleaner:

# AdwCleaner v2.201 - Logfile created 04/22/2013 at 18:41:25 # Updated 21/04/2013 by Xplode # Operating system : Windows 7 Ultimate Service Pack 1 (64 bits) # User : Dimo - DIMO-PC # Boot Mode : Normal # Running from : C:UsersDimoDesktopadwcleaner.exe # Option [Delete] ***** [services] ***** ***** [Files / Folders] ***** Folder Deleted : C:UsersDimoAppDataLocalLowConduit Folder Deleted : C:UsersDimoAppDataLocalLowPriceGong ***** [Registry] ***** Key Deleted : HKCUSoftwareAppDataLowSoftwareConduit Key Deleted : HKCUSoftwareAppDataLowSoftwareConduitSearchScopes Key Deleted : HKCUSoftwareAppDataLowSoftwareCrossrider Key Deleted : HKCUSoftwareAppDataLowSoftwarePriceGong Key Deleted : HKCUSoftwareAppDataLowSoftwareSmartBar Key Deleted : HKCUSoftwareCr_Installer Key Deleted : HKCUSoftwareSoftonic Key Deleted : HKCUSoftwareeefdbdfeadfbcefsacfsfdsf Key Deleted : HKCUSoftwareMicrosoftInternet ExplorerSearchScopes{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Key Deleted : HKLMSOFTWAREClassesConduit.Engine Key Deleted : HKLMSOFTWAREClassesToolbar.CT2475029 Key Deleted : HKLMSOFTWAREClassesToolbar.CT3072253 Key Deleted : HKLMSoftwareConduit Key Deleted : HKLMSOFTWAREMicrosoftTracingVid-Saver_RASAPI32 Key Deleted : HKLMSOFTWAREMicrosoftTracingVid-Saver_RASMANCS Key Deleted : HKLMSOFTWAREWow6432NodeClassesCLSID{3C471948-F874-49F5-B338-4F214A2EE0B1} Value Deleted : HKCUSoftwareMicrosoftInternet ExplorerNew WindowsAllow [*.crossrider.com] Value Deleted : HKCUSoftwareMicrosoftInternet ExplorerURLSearchHooks [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}] Value Deleted : HKLMSOFTWAREMicrosoftInternet ExplorerNew WindowsAllow [*.crossrider.com] ***** [internet Browsers] ***** - Internet Explorer v9.0.8112.16476 [OK] Registry is clean. - Mozilla Firefox v20.0.1 (bg) File : C:UsersDimoAppDataRoamingMozillaFirefoxProfiles99hveu5v.defaultprefs.js C:UsersDimoAppDataRoamingMozillaFirefoxProfiles99hveu5v.defaultuser.js ... Deleted ! Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&Sea[...] - Google Chrome v [unable to get version] File : C:UsersDimoAppDataLocalGoogleChromeUser DataDefaultPreferences Deleted [l.882] : urls_to_restore_on_startup = [ "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=48" ] Deleted [l.884] : homepage = "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=48", ************************* AdwCleaner[s1].txt - [311 octets] - [22/04/2013 18:41:01] AdwCleaner[s2].txt - [2642 octets] - [22/04/2013 18:41:25] ########## EOF - C:AdwCleaner[s2].txt - [2702 octets] ##########

Лог от Junkware Removal Tool

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 4.8.8 (04.21.2013:2) OS: Windows 7 Ultimate x64 Ran by Dimo on Mon 04/22/2013 at 18:47:42.44 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USERSoftwaresystweak ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:UsersDimoAppDataRoamingregistry mechanic" Successfully deleted: [Folder] "C:UsersDimoAppDataRoamingsystweak" ~~~ FireFox Successfully deleted: [File] C:UsersDimoAppDataRoamingmozillafirefoxprofiles99hveu5v.defaultinvalidprefs.js Successfully deleted the following from C:UsersDimoAppDataRoamingmozillafirefoxprofiles99hveu5v.defaultprefs.js user_pref("extensions.crossrider.bic", "1371bb1f4fa18a19e11d179f79b2db07"); Emptied folder: C:UsersDimoAppDataRoamingmozillafirefoxprofiles99hveu5v.defaultminidumps [767 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on Mon 04/22/2013 at 18:51:08.47 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Malwarebytes Anti-Malware (Пробна версия) 1.75.0.1300 www.malwarebytes.org Версия на базата от данни: v2013.04.22.05 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Dimo :: DIMO-PC [администратор] Защита: изключена 4/22/2013 6:56:14 PM mbam-log-2013-04-22 (18-56-14).txt Тип сканиране: Бързо сканиране Включени опции за сканиране: Памет | Автоматично зареждане | Системен регистър | Файлова система | Евристики/Допълнителни | Евристики/Shuriken | PUP | PUM Изключени опции за сканиране: P2P Сканирани обекти: 210784 Изминало време: 2 минута(и), 46 секунда(и) Открити процеси в паметта: 0 (Не бяха открити зловредни обекти) Открити модули в паметта: 0 (Не бяха открити зловредни обекти) Открити ключове в системния регистър: 0 (Не бяха открити зловредни обекти) Открити стойности в системния регистър: 0 (Не бяха открити зловредни обекти) Открити информационни обекти в системния регистър: 0 (Не бяха открити зловредни обекти) Открити папки: 0 (Не бяха открити зловредни обекти) Открити файлове: 0 (Не бяха открити зловредни обекти) (край)

22 април 201313 г.

Автор

Продължавам към стъпка 5 ESET Online Scanner

Искам да направя малко уточнение относно Malwarebytes Anti-Malware за да не ви заблудя - програмата съм я ползвал преди да се свържа с вас и тогава тя премахна някакви обекти преди да я деинсталирам.

Докато търсих днешния лог видях стария от преди 4-5 дни лог. Не знам дали ви е нужна подобна информация, но за всеки случай ето го и него:

Malwarebytes Anti-Malware (Пробна версия) 1.75.0.1300 www.malwarebytes.org Версия на базата от данни: v2013.04.17.08 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Dimo :: DIMO-PC [администратор] Защита: включена 4/17/2013 9:02:56 PM mbam-log-2013-04-17 (21-02-56).txt Тип сканиране: Бързо сканиране Включени опции за сканиране: Памет | Автоматично зареждане | Системен регистър | Файлова система | Евристики/Допълнителни | Евристики/Shuriken | PUP | PUM Изключени опции за сканиране: P2P Сканирани обекти: 233001 Изминало време: 5 минута(и), 49 секунда(и) Открити процеси в паметта: 0 (Не бяха открити зловредни обекти) Открити модули в паметта: 0 (Не бяха открити зловредни обекти) Открити ключове в системния регистър: 4 HKLMSOFTWAREMicrosoftWindowsCurrentVersionExtPreApproved{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> Поставен под карантина и изтрит успешно. HKCUSOFTWAREKOO9RV9K4Z (Trojan.FakeAlert) -> Поставен под карантина и изтрит успешно. HKCUSOFTWARESMH2B46TDP (Trojan.FakeAlert) -> Поставен под карантина и изтрит успешно. HKCUSOFTWAREMicrosoftHandle (Malware.Trace) -> Поставен под карантина и изтрит успешно. Открити стойности в системния регистър: 0 (Не бяха открити зловредни обекти) Открити информационни обекти в системния регистър: 0 (Не бяха открити зловредни обекти) Открити папки: 0 (Не бяха открити зловредни обекти) Открити файлове: 1 C:UsersDimoAppDataRoamingvIwRIminer.dll (PUP.BitCoinMiner) -> Поставен под карантина и изтрит успешно. (край)

22 април 201313 г.

Автор

Лог от ESET Online Scanner:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=737c6e42b39a264fbfccb52d994e6085
# engine=13671
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2013-04-22 05:35:24
# local_time=2013-04-22 08:35:24 )
# country="United States"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 66 94 278935 118281974 0 0
# scanned=191828
# found=0
# cleaned=0
# scan_time=4650

Лог от Farbar Service Scanner:

Farbar Service Scanner Version: 14-04-2013
Ran by Dimo (administrator) on 22-04-2013 at 20:40:25
Running from "C:UsersDimoDesktop"
Windows 7 Ultimate Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Attempt to access Yahoo IP returned error. Yahoo IP is offline
Yahoo.com is accessible.

Windows Firewall:
=============
mpsdrv Service is not running. Checking service configuration:
The start type of mpsdrv service is OK.
The ImagePath of mpsdrv service is OK.

MpsSvc Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open MpsSvc registry key. The service key does not exist.
Checking ImagePath: ATTENTION!=====> Unable to open MpsSvc registry key. The service key does not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open MpsSvc registry key. The service key does not exist.

bfe Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open bfe registry key. The service key does not exist.
Checking ImagePath: ATTENTION!=====> Unable to open bfe registry key. The service key does not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open bfe registry key. The service key does not exist.

Firewall Disabled Policy:
==================

System Restore:
============

System Restore Disabled Policy:
========================

Action Center:
============
wscsvc Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open wscsvc registry key. The service key does not exist.
Checking ImagePath: ATTENTION!=====> Unable to open wscsvc registry key. The service key does not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open wscsvc registry key. The service key does not exist.

Windows Update:
============
wuauserv Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open wuauserv registry key. The service key does not exist.
Checking ImagePath: ATTENTION!=====> Unable to open wuauserv registry key. The service key does not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open wuauserv registry key. The service key does not exist.

BITS Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open BITS registry key. The service key does not exist.
Checking ImagePath: ATTENTION!=====> Unable to open BITS registry key. The service key does not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open BITS registry key. The service key does not exist.

Windows Autoupdate Disabled Policy:
============================

Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open WinDefend registry key. The service key does not exist.
Checking ImagePath: ATTENTION!=====> Unable to open WinDefend registry key. The service key does not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open WinDefend registry key. The service key does not exist.

Other Services:
==============
Checking Start type of SharedAccess: ATTENTION!=====> Unable to retrieve start type of SharedAccess. The value does not exist.
Checking ImagePath of SharedAccess: ATTENTION!=====> Unable to retrieve ImagePath of SharedAccess. The value does not exist.
Checking ServiceDll of SharedAccess: ATTENTION!=====> Unable to open SharedAccess registry key. The service key does not exist.
Checking Start type of iphlpsvc: ATTENTION!=====> Unable to open iphlpsvc registry key. The service key does not exist.
Checking ImagePath of iphlpsvc: ATTENTION!=====> Unable to open iphlpsvc registry key. The service key does not exist.
Checking ServiceDll of iphlpsvc: ATTENTION!=====> Unable to open iphlpsvc registry key. The service key does not exist.

File Check:
========
C:WindowsSystem32nsisvc.dll => MD5 is legit
C:WindowsSystem32driversnsiproxy.sys => MD5 is legit
C:WindowsSystem32dhcpcore.dll => MD5 is legit
C:WindowsSystem32driversafd.sys => MD5 is legit
C:WindowsSystem32driverstdx.sys => MD5 is legit
C:WindowsSystem32Driverstcpip.sys => MD5 is legit
C:WindowsSystem32dnsrslvr.dll => MD5 is legit
C:WindowsSystem32mpssvc.dll => MD5 is legit
C:WindowsSystem32bfe.dll => MD5 is legit
C:WindowsSystem32driversmpsdrv.sys => MD5 is legit
C:WindowsSystem32SDRSVC.dll => MD5 is legit
C:WindowsSystem32vssvc.exe => MD5 is legit
C:WindowsSystem32wscsvc.dll => MD5 is legit
C:WindowsSystem32wbemWMIsvc.dll => MD5 is legit
C:WindowsSystem32wuaueng.dll => MD5 is legit
C:WindowsSystem32qmgr.dll => MD5 is legit
C:WindowsSystem32es.dll => MD5 is legit
C:WindowsSystem32cryptsvc.dll => MD5 is legit
C:Program FilesWindows DefenderMpSvc.dll => MD5 is legit
C:WindowsSystem32ipnathlp.dll => MD5 is legit
C:WindowsSystem32iphlpsvc.dll => MD5 is legit
C:WindowsSystem32svchost.exe => MD5 is legit
C:WindowsSystem32rpcss.dll => MD5 is legit

**** End of log ****

Лог от MiniToolBox:

MiniToolBox by Farbar Version:21-04-2013
Ran by Dimo (administrator) on 22-04-2013 at 20:45:31
Running from "C:UsersDimoDesktop"
Windows 7 Ultimate Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================

"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

========================= IP Configuration: ================================

Realtek PCIe GBE Family Controller = Local Area Connection (Connected)
Dell Wireless 1520 Wireless-N WLAN Mini-Card = Wireless Network Connection (Connected)
Microsoft Virtual WiFi Miniport Adapter = Wireless Network Connection 2 (Media disconnected)

# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled

popd
# End of IPv4 configuration

Windows IP Configuration

Host Name . . . . . . . . . . . . : Dimo-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Peer-Peer
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : sz.cablebg.net

Wireless LAN adapter Wireless Network Connection 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter
Physical Address. . . . . . . . . : F0-7B-CB-7F-B3-CF
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wireless Network Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Dell Wireless 1520 Wireless-N WLAN Mini-Card
Physical Address. . . . . . . . . : F0-7B-CB-7F-B3-CF
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::9190:33ef:1e7d:4485%11(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.2.161(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Monday, April 22, 2013 6:44:18 PM
Lease Expires . . . . . . . . . . : Tuesday, January 19, 2038 6:14:06 AM
Default Gateway . . . . . . . . . : 192.168.2.1
DHCP Server . . . . . . . . . . . : 192.168.2.1
DHCPv6 IAID . . . . . . . . . . . : 334527435
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-23-35-D4-B8-AC-6F-64-C3-C9
DNS Servers . . . . . . . . . . . : 8.8.8.8
8.8.4.4
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : sz.cablebg.net
Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
Physical Address. . . . . . . . . : B8-AC-6F-64-C3-C9
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::10ff:9bce:8bb:59a8%10(Preferred)
IPv4 Address. . . . . . . . . . . : 77.236.187.141(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.248.0
Lease Obtained. . . . . . . . . . : Monday, April 22, 2013 6:43:57 PM
Lease Expires . . . . . . . . . . : Monday, April 22, 2013 9:58:11 PM
Default Gateway . . . . . . . . . : 77.236.184.1
DHCP Server . . . . . . . . . . . : 77.236.184.1
DHCPv6 IAID . . . . . . . . . . . : 246983791
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-23-35-D4-B8-AC-6F-64-C3-C9
DNS Servers . . . . . . . . . . . : 8.8.8.8
8.8.4.4
NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Reusable ISATAP Interface {B3BE5233-FC23-49AA-B3C5-86B0EB2EA882}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{79C77F71-18DD-42A4-86CD-6A6545405A38}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.VIVACOM-adsl:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #5
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Server: google-public-dns-a.google.com
Address: 8.8.8.8

Name: google.com
Addresses: 2a00:1450:4017:801::1002
173.194.39.224
173.194.39.229
173.194.39.232
173.194.39.226
173.194.39.227
173.194.39.225
173.194.39.228
173.194.39.233
173.194.39.231
173.194.39.238
173.194.39.230

Pinging google.com [173.194.39.224] with 32 bytes of data:
Reply from 173.194.39.224: bytes=32 time=9ms TTL=59
Reply from 173.194.39.224: bytes=32 time=10ms TTL=59

Ping statistics for 173.194.39.224:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 9ms, Maximum = 10ms, Average = 9ms
Server: google-public-dns-a.google.com
Address: 8.8.8.8

Name: yahoo.com
Addresses: 206.190.36.45
98.138.253.109
98.139.183.24

Pinging yahoo.com [206.190.36.45] with 32 bytes of data:
Reply from 206.190.36.45: bytes=32 time=971ms TTL=50
Reply from 206.190.36.45: bytes=32 time=508ms TTL=50

Ping statistics for 206.190.36.45:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 508ms, Maximum = 971ms, Average = 739ms

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
15...f0 7b cb 7f b3 cf ......Microsoft Virtual WiFi Miniport Adapter
11...f0 7b cb 7f b3 cf ......Dell Wireless 1520 Wireless-N WLAN Mini-Card
10...b8 ac 6f 64 c3 c9 ......Realtek PCIe GBE Family Controller
1...........................Software Loopback Interface 1
19...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
14...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
18...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #5
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 77.236.184.1 77.236.187.141 10
0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.161 25
77.236.184.0 255.255.248.0 On-link 77.236.187.141 266
77.236.187.141 255.255.255.255 On-link 77.236.187.141 266
77.236.191.255 255.255.255.255 On-link 77.236.187.141 266
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.2.0 255.255.255.0 On-link 192.168.2.161 281
192.168.2.161 255.255.255.255 On-link 192.168.2.161 281
192.168.2.255 255.255.255.255 On-link 192.168.2.161 281
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 77.236.187.141 266
224.0.0.0 240.0.0.0 On-link 192.168.2.161 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 77.236.187.141 266
255.255.255.255 255.255.255.255 On-link 192.168.2.161 281
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
10 266 fe80::/64 On-link
11 281 fe80::/64 On-link
10 266 fe80::10ff:9bce:8bb:59a8/128
On-link
11 281 fe80::9190:33ef:1e7d:4485/128
On-link
1 306 ff00::/8 On-link
10 266 ff00::/8 On-link
11 281 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 mswsock.dll [File Not found] ()
ATTENTION: The LibraryPath should be "%SystemRoot%system32NLAapi.dll"

Catalog5 02 C:WindowsSysWOW64napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:WindowsSysWOW64pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:WindowsSysWOW64pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 mswsock.dll [File Not found] ()
ATTENTION: The LibraryPath should be "%SystemRoot%System32mswsock.dll"

Catalog5 06 C:WindowsSysWOW64winrnr.dll [20992] (Microsoft Corporation)
Catalog9 01 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
x64-Catalog5 01 mswsock.dll [File Not found] ()
ATTENTION: The LibraryPath should be "%SystemRoot%system32NLAapi.dll"

x64-Catalog5 02 C:WindowsSystem32napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:WindowsSystem32pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:WindowsSystem32pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 mswsock.dll [File Not found] ()
ATTENTION: The LibraryPath should be "%SystemRoot%System32mswsock.dll"

x64-Catalog5 06 C:WindowsSystem32winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog9 01 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 02 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 03 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 04 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 05 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 06 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 07 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 08 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 09 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 10 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (04/22/2013 08:36:18 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:WindowsWinSxSmanifestsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/22/2013 07:54:52 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:WindowsWinSxSmanifestsamd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:WindowsWinSxSmanifestsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2013-04-22 18:43:50.053
Description: Windows is unable to verify the image integrity of the file DeviceHarddiskVolume2WindowsSystem32driversAcceler.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-04-22 18:43:49.897
Description: Windows is unable to verify the image integrity of the file DeviceHarddiskVolume2WindowsSystem32driversAcceler.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-04-22 18:10:17.022
Description: Windows is unable to verify the image integrity of the file DeviceHarddiskVolume2WindowsSystem32driversAcceler.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-04-22 18:10:16.850
Description: Windows is unable to verify the image integrity of the file DeviceHarddiskVolume2WindowsSystem32driversAcceler.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-04-22 18:03:41.700
Description: Windows is unable to verify the image integrity of the file DeviceHarddiskVolume2WindowsSystem32driversAcceler.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-04-22 18:03:41.528
Description: Windows is unable to verify the image integrity of the file DeviceHarddiskVolume2WindowsSystem32driversAcceler.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-04-22 17:58:16.570
Description: Windows is unable to verify the image integrity of the file DeviceHarddiskVolume2WindowsSystem32driversAcceler.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-04-22 17:58:16.414
Description: Windows is unable to verify the image integrity of the file DeviceHarddiskVolume2WindowsSystem32driversAcceler.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

=========================== Installed Programs ============================

µTorrent (Version: 3.3.0.29544)
2007 Microsoft Office Suite Service Pack 1 (SP1)
Accelerometer (Version: 1.06.08.17)
Active@ Hard Disk Monitor (Version: 3.0.2)
Adobe Flash Player 11 ActiveX (Version: 11.6.602.180)
Adobe Flash Player 11 Plugin (Version: 11.6.602.180)
Adobe Reader XI (11.0.02) (Version: 11.0.02)
Adobe Shockwave Player 11.6 (Version: 11.6.4.634)
Apple Application Support (Version: 1.4.1)
Apple Software Update (Version: 2.1.1.116)
ArcSoft TotalMedia Theatre 3 (Version: 3.0.1.120)
Ashampoo Burning Studio 6 FREE v.6.80 (Version: 6.8.0)
ATI AVIVO64 Codecs (Version: 11.6.0.50601)
ATI Catalyst Install Manager (Version: 3.0.786.0)
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (Version: 2010.0601.2152.37421)
Catalyst Control Center Graphics Previews Vista (Version: 2010.0601.2152.37421)
Catalyst Control Center InstallProxy (Version: 2010.0803.2125.36577)
Catalyst Control Center Localization All (Version: 2010.0601.2152.37421)
CCC Help Chinese Standard (Version: 2010.0601.2151.37421)
CCC Help Chinese Traditional (Version: 2010.0601.2151.37421)
CCC Help Danish (Version: 2010.0601.2151.37421)
CCC Help Dutch (Version: 2010.0601.2151.37421)
CCC Help English (Version: 2010.0601.2151.37421)
CCC Help Finnish (Version: 2010.0601.2151.37421)
CCC Help French (Version: 2010.0601.2151.37421)
CCC Help German (Version: 2010.0601.2151.37421)
CCC Help Italian (Version: 2010.0601.2151.37421)
CCC Help Japanese (Version: 2010.0601.2151.37421)
CCC Help Korean (Version: 2010.0601.2151.37421)
CCC Help Norwegian (Version: 2010.0601.2151.37421)
CCC Help Portuguese (Version: 2010.0601.2151.37421)
CCC Help Russian (Version: 2010.0601.2151.37421)
CCC Help Spanish (Version: 2010.0601.2151.37421)
CCC Help Swedish (Version: 2010.0601.2151.37421)
ccc-core-static (Version: 2010.0601.2152.37421)
ccc-utility64 (Version: 2010.0601.2152.37421)
Cisco EAP-FAST Module (Version: 2.2.14)
Cisco LEAP Module (Version: 1.0.19)
Cisco PEAP Module (Version: 1.1.6)
Combined Community Codec Pack 2009-09-09 (Version: 2009.09.09.0)
Dell Driver Download Manager (Version: 2.1.0.0)
Dell Support Center (Version: 3.2.6032.125)
Dell Touchpad (Version: 14.0.2.0)
Dell Wireless HSPA Mini-Card Drivers (Version: 6.1.13.8)
Dell Wireless WLAN Card Utility (Version: 5.30.21.0)
Diskeeper 2011 (Version: 15.0.954.64)
DMMultiView
ESET Online Scanner v3
Facebook Video Calling 1.2.0.287 (Version: 1.2.287)
Google Earth Plug-in (Version: 7.0.3.8542)
Google Update Helper (Version: 1.3.21.135)
IDT Audio (Version: 1.0.6267.0)
Intel® Control Center (Version: 1.2.1.1007)
Intel® Management Engine Components (Version: 6.0.0.1179)
Intel® Rapid Storage Technology (Version: 9.6.0.1014)
Intel® Turbo Boost Technology Monitor (Version: 1.0.186.6)
Malwarebytes Anti-Malware, версия 1.75.0.1300 (Version: 1.75.0.1300)
Media Player Classic - Home Cinema v1.4.2499.0 x64 (Version: 1.4.2499.0)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Office Access MUI (Bulgarian) 2007 (Version: 12.0.6215.1000)
Microsoft Office Access MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Enterprise 2007 (Version: 12.0.6215.1000)
Microsoft Office Excel MUI (Bulgarian) 2007 (Version: 12.0.6215.1000)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Groove MUI (Bulgarian) 2007 (Version: 12.0.6215.1000)
Microsoft Office Groove MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Groove Setup Metadata MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office InfoPath MUI (Bulgarian) 2007 (Version: 12.0.6215.1000)
Microsoft Office InfoPath MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Language Pack 2007 - Bulgarian/български (Version: 12.0.6215.1000)
Microsoft Office O MUI (Bulgarian) 2007 (Version: 12.0.6215.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6215.1000)
Microsoft Office OneNote MUI (Bulgarian) 2007 (Version: 12.0.6215.1000)
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Outlook MUI (Bulgarian) 2007 (Version: 12.0.6215.1000)
Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office PowerPoint MUI (Bulgarian) 2007 (Version: 12.0.6215.1000)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proof (Bulgarian) 2007 (Version: 12.0.6213.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6213.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6213.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6213.1000)
Microsoft Office Proof (Russian) 2007 (Version: 12.0.6213.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6213.1000)
Microsoft Office Proofing (Bulgarian) 2007 (Version: 12.0.4518.1043)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (Bulgarian) 2007 (Version: 12.0.6215.1000)
Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared 64-bit MUI (Bulgarian) 2007 (Version: 12.0.6215.1000)
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6215.1000)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6215.1000)
Microsoft Office Shared MUI (Bulgarian) 2007 (Version: 12.0.6215.1000)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6215.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6215.1000)
Microsoft Office Word MUI (Bulgarian) 2007 (Version: 12.0.6215.1000)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office X MUI (Bulgarian) 2007 (Version: 12.0.6215.1000)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
MobileMe Control Panel (Version: 3.1.3.0)
Mozilla Firefox 20.0.1 (x86 bg) (Version: 20.0.1)
Mozilla Maintenance Service (Version: 20.0.1)
MSVC90_x64 (Version: 1.0.1.2)
MSVC90_x86 (Version: 1.0.1.2)
Nokia Connectivity Cable Driver (Version: 7.1.78.0)
Nokia PC Suite (Version: 7.1.180.94)
O&O DiskRecovery (Version: 7.1.187)
Octoshape add-in for Adobe Flash Player
Panda Antivirus Pro 2013 (Version: 12.01.00)
PC Connectivity Solution (Version: 12.0.27.0)
Picasa 3 (Version: 3.9)
Qualcomm Gobi 2000 Package for Dell (Version: 1.1.100)
Quickset64 (Version: 9.6.18)
QuickTime (Version: 7.69.80.9)
Realtek Ethernet Controller Driver For Windows Vista and Later (Version: 1.00.0009)
RICOH Media Driver ver.2.07.01.04 (Version: 2.07.01.04)
Skype™ 4.2 (Version: 4.2.187)
swMSM (Version: 12.0.0.1)
The KMPlayer (remove only)
Tweaking.com - Registry Backup (Version: 1.6.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)
VLC media player 1.1.4 (Version: 1.1.4)
Winamp (Version: 5.581 )
Winamp Detector Plug-in (Version: 1.0.0.1)
Windows Driver Package - Nokia Modem (02/25/2011 4.7) (Version: 02/25/2011 4.7)
Windows Driver Package - Nokia Modem (02/25/2011 7.01.0.9) (Version: 02/25/2011 7.01.0.9)
Windows Driver Package - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
WinRAR archiver

========================= Devices: ================================

========================= Memory info: ===================================

Percentage of memory in use: 47%
Total physical RAM: 3956.52 MB
Available physical RAM: 2080.1 MB
Total Pagefile: 7911.23 MB
Available Pagefile: 5951.3 MB
Total Virtual: 4095.88 MB
Available Virtual: 3958.83 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:97.56 GB) (Free:14.58 GB) NTFS
2 Drive d: () (Fixed) (Total:368.07 GB) (Free:89.1 GB) NTFS

========================= Users: ========================================

User accounts for DIMO-PC

Administrator Dimo Guest

========================= Minidump Files ==================================

========================= Restore Points ==================================

16-04-2013 05:46:49 Windows Update
19-04-2013 07:10:45 Windows Update
19-04-2013 07:15:19 Windows Defender Checkpoint
19-04-2013 13:24:25 Installed AVG 2013
19-04-2013 13:25:15 Installed AVG 2013
19-04-2013 14:01:45 Removed AVG 2013
19-04-2013 14:03:28 Removed AVG 2013
21-04-2013 13:29:55 Installed AccelerometerP11

**** End of log ****

Относно стъпка 9 - Security Check

UNSUPPORTED OPERATING SYSTEM! ABORTED!

Лог с DDS :

DDS (Ver_2011-09-30.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16421
Run by Dimo at 21:00:54 on 2013-04-22
Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1033.18.3957.2038 [GMT 3:00]
.
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:Windowssystem32wininit.exe
C:Windowssystem32lsm.exe
C:Windowssystem32svchost.exe -k DcomLaunch
C:Windowssystem32svchost.exe -k RPCSS
C:Windowssystem32atiesrxx.exe
C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted
C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted
C:Windowssystem32svchost.exe -k LocalService
C:Windowssystem32svchost.exe -k netsvcs
C:WindowsSystem32DriverStoreFileRepositorystwrt64.inf_amd64_neutral_0057cbec48a2d7cfSTacSV64.exe
C:Windowssystem32atieclxx.exe
C:Windowssystem32svchost.exe -k NetworkService
C:Windowssystem32Dwm.exe
C:Program FilesDellDell Wireless WLAN CardWLTRYSVC.EXE
C:Windowssystem32WLANExt.exe
C:Program FilesDellDell Wireless WLAN Cardbcmwltry.exe
C:Windowssystem32taskhost.exe
C:WindowsSystem32spoolsv.exe
C:Windowssystem32conhost.exe
C:Program FilesDellDell Wireless WLAN CardWLTRAY.EXE
C:Program FilesDellQuickSetquickset.exe
C:Program FilesIDTWDMsttray64.exe
C:Program Files (x86)LSoft Technologies IncActive@ Hard Disk MonitorDiskMonitorService.exe
C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe
C:WindowsSystem32DriverStoreFileRepositorystwrt64.inf_amd64_neutral_0057cbec48a2d7cfAESTSr64.exe
C:WindowsSystem32svchost.exe -k LocalServiceNoNetwork
C:Program Files (x86)STMicroelectronicsAccelerometerInstallFilterService.exe
C:Program Files (x86)IntelIntel® Management Engine ComponentsLMSLMS.exe
C:Program Files (x86)QUALCOMMQDLService2kQDLService2kDell.exe
C:Windowssystem32svchost.exe -k imgsvc
C:Program Files (x86)DellDell WWANWMCoremini_WMCore.exe
C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticMOM.exe
C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe
C:Windowssystem32SearchIndexer.exe
C:Windowssystem32wbemwmiprvse.exe
C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCCC.exe
C:Program FilesDiskeeper CorporationDiskeeperDkService.exe
C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe
C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation
C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSUNS.exe
C:Program FilesWindows Media Playerwmpnetwk.exe
C:Windowsexplorer.exe
C:Program Files (x86)Internet ExplorerIELowutil.exe
C:Windowssystem32taskhost.exe
C:Program Files (x86)Mozilla Firefoxfirefox.exe
C:Windowssystem32svchost.exe -k SDRSVC
C:Windowssystem32SearchProtocolHost.exe
C:Windowssystem32SearchFilterHost.exe
C:Windowssystem32conhost.exe
C:Windowssystem32wbemwmiprvse.exe
C:WindowsSystem32cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://eagles.zapto.org:8077/
uSearch Bar = hxxp://www.google.com/ie
uSearch Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
uURLSearchHooks: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - <orphaned>
uURLSearchHooks: {687578b9-7132-4a7a-80e4-30ee31099e03} - <orphaned>
mWinlogon: Userinit = C:WindowsSysWOW64userinit.exe,
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program Files (x86)Common FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:Program Files (x86)Microsoft OfficeOffice12GrooveShellExtensions.dll
uRun: [Facebook Update] "C:UsersDimoAppDataLocalFacebookUpdateFacebookUpdate.exe" /c /nocrashserver
mRun: [startCCC] "C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLIStart.exe" MSRun
mRun: [iAStorIcon] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe
mRun: [Adobe ARM] "C:Program Files (x86)Common FilesAdobeARM1.0AdobeARM.exe"
mRunOnce: [Malwarebytes Anti-Malware] C:Program Files (x86)Malwarebytes' Anti-Malwarembamgui.exe /install /silent
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: Add to Google Photos Screensa&ver - C:WindowsSystem32GPhotos.scr/200
IE: E&xport to Microsoft Excel - C:PROGRA~2MICROS~1Office12EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:Program Files (x86)Microsoft OfficeOffice12ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
DPF: {1DB93715-3B60-43EE-93E6-279BB3E1DF76} - hxxp://80.72.93.213:5555/cab/OCXChecker_6110.cab
DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {3C8A6608-67D1-4AD1-AFE3-967ED0929248} - hxxp://arditicn.com/XWebPlay.CAB
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: NameServer = 77.236.168.101 80.253.48.7
TCP: Interfaces{822127DC-F8F6-44F6-8D72-F778C5FCCA13} : NameServer = 8.8.8.8,8.8.4.4
TCP: Interfaces{822127DC-F8F6-44F6-8D72-F778C5FCCA13} : DHCPNameServer = 77.236.168.101 80.253.48.7
TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4} : NameServer = 8.8.8.8,8.8.4.4
TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4} : DHCPNameServer = 192.168.2.1
TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}35D434 : NameServer = 8.8.8.8,8.8.4.4
TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}35D434 : DHCPNameServer = 192.168.2.1
TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}4505D2C696E6B66363 : NameServer = 8.8.8.8,8.8.4.4
TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}4505D2C696E6B66363 : DHCPNameServer = 212.39.90.42 212.39.90.43
TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}4646772747 : NameServer = 8.8.8.8,8.8.4.4
TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}4646772747 : DHCPNameServer = 192.168.1.1
TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}4656661657C647 : NameServer = 8.8.8.8,8.8.4.4
TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}4656661657C647 : DHCPNameServer = 192.168.1.1 8.8.8.8
TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}541676C6563713 : DHCPNameServer = 192.168.2.1
TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}84F64756C6D2C42443 : NameServer = 8.8.8.8,8.8.4.4
TCP: Interfaces{98766407-4437-4A25-BBBD-1EFF22306AC4}84F64756C6D2C42443 : DHCPNameServer = 192.168.0.1
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:Program Files (x86)Microsoft OfficeOffice12GrooveSystemServices.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:Program Files (x86)Common FilesSkypeSkype4COM.dll
SSODL: WebCheck - <orphaned>
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:Program Files (x86)Microsoft OfficeOffice12GrooveShellExtensions.dll
x64-mWinlogon: Userinit = C:WindowsSysWOW64userinit.exe,
x64-Run: [broadcom Wireless Manager UI] C:Program FilesDellDell Wireless WLAN CardWLTRAY.exe
x64-Run: [QuickSet] C:Program FilesDellQuickSetQuickSet.exe
x64-Run: [synTPEnh] C:Program Files (x86)SynapticsSynTPSynTPEnh.exe
x64-Run: [sysTrayApp] C:Program FilesIDTWDMsttray64.exe
x64-Run: [FreeFallProtection] C:Program Files (x86)STMicroelectronicsAccelerometerFF_Protection.exe
x64-DPF: {3C8A6608-67D1-4AD1-AFE3-967ED0929248} - hxxp://192.168.1.4:8077/XWebPlay.CAB
x64-Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - <orphaned>
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:UsersDimoAppDataRoamingMozillaFirefoxProfiles99hveu5v.default
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.bg/
FF - component: C:ProgramDataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}NAV_18.1.0.37IPSFFPlgncomponentsIPSFFPl.dll
FF - component: C:UsersDimoAppDataRoamingMozillaFirefoxProfiles99hveu5v.defaultextensions{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}componentsRadioWMPCoreGecko19.dll
FF - component: C:UsersDimoAppDataRoamingMozillaFirefoxProfiles99hveu5v.defaultextensionsengine@conduit.comcomponentsRadioWMPCoreGecko19.dll
FF - plugin: C:Program Files (x86)AdobeReader 11.0ReaderAIRnppdf32.dll
FF - plugin: C:Program Files (x86)GoogleGoogle Earthpluginnpgeplugin.dll
FF - plugin: C:Program Files (x86)GooglePicasa3npPicasa3.dll
FF - plugin: C:Program Files (x86)GoogleUpdate1.3.21.135npGoogleUpdate3.dll
FF - plugin: C:Program Files (x86)Mozilla Firefoxpluginsnpwachk.dll
FF - plugin: C:UsersDimoAppDataLocalFacebookVideoSkypenpFacebookVideoCalling.dll
FF - plugin: C:WindowsSysWOW64MacromedFlashNPSWF32_11_3_300_270.dll
FF - plugin: C:WindowsSysWOW64MacromedFlashNPSWF32_11_6_602_180.dll
FF - plugin: C:WindowsSysWOW64npdeployJava1.dll
FF - plugin: C:WindowsSysWOW64npmproxy.dll
.
============= SERVICES / DRIVERS ===============
.
R0 Stdflt;Disk Filter Driver for Accelerometer;C:WindowsSystem32driversstdflt.sys [2013-4-22 18792]
R1 vwififlt;Virtual WiFi Filter Driver;C:WindowsSystem32driversvwififlt.sys [2009-7-14 59904]
R2 Active@ Disk Monitor;Active@ Disk Monitor;C:Program Files (x86)LSoft Technologies IncActive@ Hard Disk MonitorDiskMonitorService.exe [2012-2-28 1465016]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe [2012-12-18 65192]
R2 AESTFilters;Andrea ST Filters Service;C:WindowsSystem32DriverStoreFileRepositorystwrt64.inf_amd64_neutral_0057cbec48a2d7cfAESTSr64.exe [2010-9-22 89600]
R2 AMD External Events Utility;AMD External Events Utility;C:WindowsSystem32atiesrxx.exe [2010-9-15 203264]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe [2010-9-15 13336]
R2 InstallFilterService;FF Install Filter Service;C:Program Files (x86)STMicroelectronicsAccelerometerInstallFilterService.exe [2013-4-22 60928]
R2 QDLService2kDell;Qualcomm Gobi 2000 Download Service (Dell);C:Program Files (x86)QUALCOMMQDLService2kQDLService2kDell.exe [2010-1-14 330488]
R2 rimspci;rimspci;C:WindowsSystem32driversrimspe64.sys [2010-9-15 60416]
R2 risdpcie;risdpcie;C:WindowsSystem32driversrisdpe64.sys [2010-9-15 80896]
R2 rixdpcie;rixdpcie;C:WindowsSystem32driversrixdpe64.sys [2010-9-15 55808]
R2 TurboB;Turbo Boost UI Monitor driver;C:WindowsSystem32driversTurboB.sys [2009-11-2 13784]
R2 UNS;Intel® Management & Security Application User Notification Service;C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSUNS.exe [2010-9-15 2320920]
R2 WMCoreService;Mobile Broadband Service;C:Program Files (x86)DellDell WWANWMCoremini_WMCore.exe servicemode --> C:Program Files (x86)DellDell WWANWMCoremini_WMCore.exe servicemode [?]
R3 amdkmdag;amdkmdag;C:WindowsSystem32driversatikmdag.sys [2010-9-15 6857728]
R3 amdkmdap;amdkmdap;C:WindowsSystem32driversatikmpag.sys [2010-9-15 264192]
R3 DKRtWrt;DKRtWrt;C:WindowsSystem32driversDKRtWrt.sys [2012-2-28 44624]
R3 HECIx64;Intel® Management Engine Interface;C:WindowsSystem32driversHECIx64.sys [2010-9-15 56344]
R3 RTL8167;Realtek 8167 NT Driver;C:WindowsSystem32driversRt64win7.sys [2010-9-15 239616]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:WindowsSystem32driversvwifimp.sys [2009-7-14 17920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:WindowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Услуга Google Update (gupdate);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2011-2-25 136176]
S3 04616106;04616106;C:WindowsSystem32drivers12052621.sys [2013-4-22 208216]
S3 37537167;37537167;C:WindowsSystem32drivers96211183.sys [2013-4-22 208216]
S3 41619005;41619005;C:WindowsSystem32drivers05894890.sys [2013-4-22 208216]
S3 44778042;44778042;C:WindowsSystem32drivers25194003.sys [2013-4-22 208216]
S3 51690739;51690739;C:WindowsSystem32drivers12380158.sys [2013-4-22 208216]
S3 63780279;63780279;C:WindowsSystem32drivers80241514.sys [2013-4-22 208216]
S3 Acceler;Accelerometer Service;C:WindowsSystem32driversAcceler.sys [2013-4-22 23912]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:WindowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe [2012-4-16 253656]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;C:WindowsSystem32driversssadadb.sys [2011-5-13 36328]
S3 gupdatem;Google Update Service (gupdatem);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2011-2-25 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service;C:Program Files (x86)Mozilla Maintenance Servicemaintenanceservice.exe [2012-4-25 115608]
S3 PCDSRVC{1E208CE0-FB7451FF-06020200}_0;PCDSRVC{1E208CE0-FB7451FF-06020200}_0 - PCDR Kernel Mode Service Helper Driver;C:Program FilesDell Support Centerpcdsrvc_x64.pkms [2012-8-18 25584]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:WindowsSystem32driversrdpvideominiport.sys [2011-6-23 20992]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);C:WindowsSystem32driversssadbus.sys [2011-5-13 157672]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);C:WindowsSystem32driversssadmdfl.sys [2011-5-13 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;C:WindowsSystem32driversssadmdm.sys [2011-5-13 177640]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);C:WindowsSystem32driversssadserd.sys [2011-5-13 146920]
S3 TsUsbFlt;TsUsbFlt;C:WindowsSystem32driversTsUsbFlt.sys [2011-6-23 59392]
S3 TurboBoost;TurboBoost;C:Program FilesIntelTurboBoostTurboBoost.exe [2009-11-2 126352]
S3 WatAdminSvc;Услуга на технологиите за активиране на Windows;C:WindowsSystem32WatWatAdminSvc.exe [2011-7-1 1255736]
S3 WDC_SAM;WD SCSI Pass Thru driver;C:WindowsSystem32driverswdcsam64.sys [2008-5-6 14464]
SUnknown tsusbhub;tsusbhub; [x]
.
=============== File Associations ===============
.
ShellExec: DigitalTheatre.exe: open="C:Program Files (x86)ArcSoftTotalMedia Theatre 3uDTStart.exe" "%1"
.
=============== Created Last 30 ================
.
2013-04-22 16:15:33 -------- d-----w- C:Program Files (x86)ESET
2013-04-22 15:54:57 25928 ----a-w- C:WindowsSystem32driversmbam.sys
2013-04-22 15:54:57 -------- d-----w- C:Program Files (x86)Malwarebytes' Anti-Malware
2013-04-22 15:47:41 -------- d-----w- C:WindowsERUNT
2013-04-22 15:47:33 -------- d-----w- C:JRT
2013-04-22 13:52:31 208216 ----a-w- C:WindowsSystem32drivers83058104.sys
2013-04-22 11:44:55 208216 ----a-w- C:WindowsSystem32drivers12380158.sys
2013-04-22 11:35:50 208216 ----a-w- C:WindowsSystem32drivers96211183.sys
2013-04-22 11:31:07 23912 ----a-w- C:WindowsSystem32driversAcceler.sys
2013-04-22 11:31:07 18792 ----a-w- C:WindowsSystem32driversstdflt.sys
2013-04-22 11:31:07 -------- d-----w- C:Program Files (x86)STMicroelectronics
2013-04-22 10:55:11 208216 ----a-w- C:WindowsSystem32drivers86739664.sys
2013-04-22 10:39:48 208216 ----a-w- C:WindowsSystem32drivers48609649.sys
2013-04-22 10:29:31 208216 ----a-w- C:WindowsSystem32drivers80241514.sys
2013-04-22 10:03:09 208216 ----a-w- C:WindowsSystem32drivers05894890.sys
2013-04-22 09:56:43 208216 ----a-w- C:WindowsSystem32drivers25194003.sys
2013-04-22 09:26:50 208216 ----a-w- C:WindowsSystem32drivers59892858.sys
2013-04-22 09:22:19 208216 ----a-w- C:WindowsSystem32drivers12052621.sys
2013-04-21 13:30:38 22128 ----a-w- C:WindowsSystem32driversstdcfltn.sys
2013-04-21 13:30:17 81520 ----a-w- C:WindowsSystem32accelernco01.dll
2013-04-21 13:10:15 -------- d-----w- C:RegBackup
2013-04-21 13:06:44 -------- d-----w- C:Program Files (x86)Tweaking.com
2013-04-20 21:27:08 -------- d-----w- C:_OTL
2013-04-20 18:01:59 -------- d-----w- C:UsersDimoAppDataRoamingMalwarebytes
2013-04-20 18:01:45 -------- d-----w- C:ProgramDataMalwarebytes
2013-04-20 15:58:21 -------- d-----w- C:WindowsFltMgr
2013-04-19 13:50:17 -------- d-----w- C:UsersDimoAppDataLocalPrograms
2013-04-19 13:22:00 -------- d--h--w- C:ProgramDataCommon Files
2013-04-19 13:04:57 -------- d-----w- C:UsersDimoAppDataRoamingvIwRI
2013-04-19 13:04:22 18816 ----a-w- C:WindowsSystem32roboot64.exe
2013-04-19 07:12:17 9317456 ----a-w- C:ProgramDataMicrosoftWindows DefenderDefinition Updates{5C6905E3-A0C4-4A77-9132-53C07B27A865}mpengine.dll
2013-04-11 11:17:24 2382848 ----a-w- C:WindowsSysWow64mshtml.tlb
2013-04-10 18:40:38 3717632 ----a-w- C:WindowsSystem32mstscax.dll
2013-04-10 18:40:37 44032 ----a-w- C:WindowsSystem32tsgqec.dll
2013-04-10 18:40:37 36864 ----a-w- C:WindowsSysWow64tsgqec.dll
2013-04-10 18:40:37 3217408 ----a-w- C:WindowsSysWow64mstscax.dll
2013-04-10 18:40:37 158720 ----a-w- C:WindowsSystem32aaclient.dll
2013-04-10 18:40:37 131584 ----a-w- C:WindowsSysWow64aaclient.dll
2013-04-10 18:40:30 3153408 ----a-w- C:WindowsSystem32win32k.sys
2013-04-10 18:40:25 1655656 ----a-w- C:WindowsSystem32driversntfs.sys
2013-04-10 18:35:19 223752 ----a-w- C:WindowsSystem32driversfvevol.sys
2013-04-10 18:35:18 5550424 ----a-w- C:WindowsSystem32ntoskrnl.exe
2013-04-10 18:35:17 3968856 ----a-w- C:WindowsSysWow64ntkrnlpa.exe
2013-04-10 18:35:17 3913560 ----a-w- C:WindowsSysWow64ntoskrnl.exe
2013-04-10 18:35:16 6656 ----a-w- C:WindowsSysWow64apisetschema.dll
2013-04-10 18:35:16 43520 ----a-w- C:WindowsSystem32csrsrv.dll
2013-04-10 18:35:16 112640 ----a-w- C:WindowsSystem32smss.exe
2013-04-02 16:12:11 -------- d-----w- C:Program Files (x86)Mozilla Firefox.bak
2013-04-02 14:09:52 4550656 ----a-w- C:WindowsSysWow64GPhotos.scr
.
==================== Find3M ====================
.
2013-04-05 06:28:14 861088 ----a-w- C:WindowsSysWow64npdeployJava1.dll
2013-04-05 06:28:14 782240 ----a-w- C:WindowsSysWow64deployJava1.dll
2013-03-13 08:21:47 73432 ----a-w- C:WindowsSysWow64FlashPlayerCPLApp.cpl
2013-03-13 08:21:47 693976 ----a-w- C:WindowsSysWow64FlashPlayerApp.exe
2013-03-13 08:21:38 16486616 ----a-w- C:WindowsSysWow64FlashPlayerInstaller.exe
2013-03-11 22:10:56 282744 ------w- C:WindowsSystem32MpSigStub.exe
2013-02-22 06:27:49 2312704 ----a-w- C:WindowsSystem32jscript9.dll
2013-02-22 06:20:51 1392128 ----a-w- C:WindowsSystem32wininet.dll
2013-02-22 06:19:37 1494528 ----a-w- C:WindowsSystem32inetcpl.cpl
2013-02-22 06:15:48 173056 ----a-w- C:WindowsSystem32ieUnatt.exe
2013-02-22 06:15:23 599040 ----a-w- C:WindowsSystem32vbscript.dll
2013-02-22 06:12:41 2382848 ----a-w- C:WindowsSystem32mshtml.tlb
2013-02-22 03:46:00 1800704 ----a-w- C:WindowsSysWow64jscript9.dll
2013-02-22 03:38:00 1129472 ----a-w- C:WindowsSysWow64wininet.dll
2013-02-22 03:37:50 1427968 ----a-w- C:WindowsSysWow64inetcpl.cpl
2013-02-22 03:34:17 142848 ----a-w- C:WindowsSysWow64ieUnatt.exe
2013-02-22 03:34:03 420864 ----a-w- C:WindowsSysWow64vbscript.dll
2013-02-12 05:45:24 135168 ----a-w- C:WindowsapppatchAppPatch64AcXtrnal.dll
2013-02-12 05:45:22 350208 ----a-w- C:WindowsapppatchAppPatch64AcLayers.dll
2013-02-12 05:45:22 308736 ----a-w- C:WindowsapppatchAppPatch64AcGenral.dll
2013-02-12 05:45:22 111104 ----a-w- C:WindowsapppatchAppPatch64acspecfc.dll
2013-02-12 04:48:31 474112 ----a-w- C:WindowsapppatchAcSpecfc.dll
2013-02-12 04:48:26 2176512 ----a-w- C:WindowsapppatchAcGenral.dll
2013-02-12 04:12:05 19968 ----a-w- C:WindowsSystem32driversusb8023.sys
.
============= FINISH: 21:01:25.96 ===============

Лог от DDS - Attach:

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-09-30.01)
.
Microsoft Windows 7 Ultimate
Boot Device: DeviceHarddiskVolume2
Install Date: 9/16/2010 5:15:48 AM
System Uptime: 4/22/2013 6:42:55 PM (3 hours ago)
.
Motherboard: Dell Inc. | | 0874P6
Processor: Intel® Core i3 CPU M 350 @ 2.27GHz | U2E1 | 2266/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 98 GiB total, 14.573 GiB free.
D: is FIXED (NTFS) - 368 GiB total, 89.103 GiB free.
E: is CDROM ()
F: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e97d-e325-11ce-bfc1-08002be10318}
Description: ST Micro Accelerometer
Device ID: ACPISMO88001
Manufacturer: ST Microelectronics
Name: ST Micro Accelerometer
PNP Device ID: ACPISMO88001
Service: Acceler
.
==== System Restore Points ===================
.
RP282: 4/16/2013 8:46:49 AM - Windows Update
RP283: 4/19/2013 10:10:45 AM - Windows Update
RP285: 4/19/2013 10:15:19 AM - Windows Defender Checkpoint
RP286: 4/19/2013 4:24:25 PM - Installed AVG 2013
RP287: 4/19/2013 4:25:15 PM - Installed AVG 2013
RP288: 4/19/2013 5:01:45 PM - Removed AVG 2013
RP289: 4/19/2013 5:03:28 PM - Removed AVG 2013
RP290: 4/21/2013 4:29:55 PM - Installed AccelerometerP11
.
==== Installed Programs ======================
.
µTorrent
2007 Microsoft Office Suite Service Pack 1 (SP1)
Accelerometer
Active@ Hard Disk Monitor
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader XI (11.0.02)
Adobe Shockwave Player 11.6
Apple Application Support
Apple Software Update
ArcSoft TotalMedia Theatre 3
Ashampoo Burning Studio 6 FREE v.6.80
ATI AVIVO64 Codecs
ATI Catalyst Install Manager
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center Graphics Previews Vista
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-core-static
ccc-utility64
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
Cisco EAP-FAST Module
Cisco LEAP Module
Cisco PEAP Module
Combined Community Codec Pack 2009-09-09
Dell Driver Download Manager
Dell Support Center
Dell Touchpad
Dell Wireless HSPA Mini-Card Drivers
Dell Wireless WLAN Card Utility
Diskeeper 2011
DMMultiView
ESET Online Scanner v3
Facebook Video Calling 1.2.0.287
Google Earth Plug-in
Google Update Helper
IDT Audio
Intel® Control Center
Intel® Management Engine Components
Intel® Rapid Storage Technology
Intel® Turbo Boost Technology Monitor
Malwarebytes Anti-Malware, версия 1.75.0.1300
Media Player Classic - Home Cinema v1.4.2499.0 x64
Microsoft .NET Framework 4 Client Profile
Microsoft Office Access MUI (Bulgarian) 2007
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (Bulgarian) 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (Bulgarian) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (Bulgarian) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office Language Pack 2007 - Bulgarian/български
Microsoft Office O MUI (Bulgarian) 2007
Microsoft Office Office 64-bit Components 2007
Microsoft Office OneNote MUI (Bulgarian) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (Bulgarian) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (Bulgarian) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (Bulgarian) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (German) 2007
Microsoft Office Proof (Russian) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (Bulgarian) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (Bulgarian) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared 64-bit MUI (Bulgarian) 2007
Microsoft Office Shared 64-bit MUI (English) 2007
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
Microsoft Office Shared MUI (Bulgarian) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (Bulgarian) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Office X MUI (Bulgarian) 2007
Microsoft Visual C++ 2005 Redistributable (x64)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
MobileMe Control Panel
Mozilla Firefox 20.0.1 (x86 bg)
Mozilla Maintenance Service
MSVC90_x64
MSVC90_x86
Nokia Connectivity Cable Driver
Nokia PC Suite
O&O DiskRecovery
Octoshape add-in for Adobe Flash Player
Panda Antivirus Pro 2013
PC Connectivity Solution
Picasa 3
Qualcomm Gobi 2000 Package for Dell
Quickset64
QuickTime
Realtek Ethernet Controller Driver For Windows Vista and Later
RICOH Media Driver ver.2.07.01.04
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Skype™ 4.2
swMSM
The KMPlayer (remove only)
Tweaking.com - Registry Backup
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Visual Studio 2010 x64 Redistributables
VLC media player 1.1.4
Winamp
Winamp Detector Plug-in
Windows Driver Package - Nokia Modem (02/25/2011 4.7)
Windows Driver Package - Nokia Modem (02/25/2011 7.01.0.9)
Windows Driver Package - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0)
Windows Media Player Firefox Plugin
WinRAR archiver
.
==== End Of File ===========================

Лог от RKill:

Rkill 2.4.7 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 04/22/2013 09:12:42 PM in x64 mode.
Windows Version: Windows 7 Ultimate Service Pack 1

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* Explorer Policy Removed: NoActiveDesktopChanges [HKLM]

Backup Registry file created at:
C:UsersDimoDesktoprkillrkill-04-22-2013-09-12-45.reg

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
* HKLMSoftwareClassesexefileshellopencommandIsolatedCommand was changed. It was reset to "%1" %*!

* HKLMSoftwareClassesexefileshellrunascommandIsolatedCommand was changed. It was reset to "%1" %*!

Performing miscellaneous checks:

* No issues found.

Checking Windows Service Integrity:

* Windows Firewall Authorization Driver (mpsdrv) is not Running.
Startup Type set to: Manual

* BFE [Missing Service]
* BITS [Missing Service]
* iphlpsvc [Missing Service]
* MpsSvc [Missing Service]
* WinDefend [Missing Service]
* wscsvc [Missing Service]
* wuauserv [Missing Service]

* SharedAccess [Missing ImagePath]

* FontCache => %SystemRoot%system32svchost.exe -k LocalService [incorrect ImagePath]

Searching for Missing Digital Signatures:

* C:WindowsSystem32user32.dll [NoSig]
+-> C:WindowsSoftwareDistributionDownloade2f8ec1abbe2ddd27a68bbc083445bc1amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973user32.dll : 1,008,128 : 11/20/2010 03:27 PM : fe70103391a64039a921dbfff9c7ab1b [Pos Repl]
+-> C:WindowsSoftwareDistributionDownloade2f8ec1abbe2ddd27a68bbc083445bc1wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6euser32.dll : 833,024 : 11/20/2010 02:08 PM : 5e0db2d8b2750543cd2ebb9ea8e6cdd3 [Pos Repl]
+-> C:WindowsSysWOW64user32.dll : 833,024 : 07/01/2011 01:17 PM : 861c4346f9281dc0380de72c8d55d6be [Pos Repl]
+-> C:Windowswinsxsamd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9user32.dll : 1,008,640 : 07/14/2009 00:41 AM : 72d7b3ea16946e8f0cf7458150031cc6 [Pos Repl]
+-> C:Windowswinsxsamd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973user32.dll : 1,008,128 : 11/20/2010 03:27 PM : fe70103391a64039a921dbfff9c7ab1b [Pos Repl]
+-> C:Windowswinsxswow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4user32.dll : 833,024 : 07/14/2009 03:11 AM : e8b0ffc209e504cb7e79fc24e6c085f0 [Pos Repl]
+-> C:Windowswinsxswow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6euser32.dll : 833,024 : 11/20/2010 02:08 PM : 5e0db2d8b2750543cd2ebb9ea8e6cdd3 [Pos Repl]

Checking HOSTS File:

* No issues found.

Program finished at: 04/22/2013 09:13:21 PM
Execution time: 0 hours(s), 0 minute(s), and 38 seconds(s)

22 април 201313 г.

Здравейте,

Моля изтеглете BFERestore.exe и го запазете на вашия десктоп.

Стартирайте файла. Ще му отнеме няколко секунди за да приключи.

Когато сканирането завърши щесе появи следното съобщение: "Done! Please check if BFE service is running now"

Рестартирайте компютъра.

След това изтеглете следните файлове и ги запазете на десктопа:

mpsdrv.reg

MpsSvc.reg

BFE.reg

wscsvc.reg

wuauserv.reg

BITS.reg

WinDefend.reg

SharedAccess.reg

iphlpsvc.reg

FontCache.reg

Стартирайте ги един по един и изберете YES на диалоговия прозорец.
Рестартирайте още веднъж!

Отворете Notepad.exe и се уверете, че пред Format => няма отметка пред Word Wrap (ако има я махнете).

с copy/paste поставете следната информация:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesWinSock2ParametersNameSpace_Catalog5Catalog_Entries000000000001]
"LibraryPath"="%SystemRoot%system32NLAapi.dll"

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesWinSock2ParametersNameSpace_Catalog5Catalog_Entries000000000005]
"LibraryPath"="%SystemRoot%System32mswsock.dll"

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesWinSock2ParametersNameSpace_Catalog5Catalog_Entries64000000000001]
"LibraryPath"="%SystemRoot%system32NLAapi.dll"

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesWinSock2ParametersNameSpace_Catalog5Catalog_Entries64000000000005]
"LibraryPath"="%SystemRoot%System32mswsock.dll"

Запазете файла с име fix.reg и го стартирайте.
Изберете YES на диалоговия прозорец.

След това отворете Start => въведете CMD.exe => кликнете с десен бутон върху CMD.exe и изберете Run as administrator.

Въведете следните команди една по една и след всяка натискайте Enter

netsh winsock reset

ipconfig /flushdns

После рестартирайте компютъра и направете нови проверки с Farbar Service Scanner и MiniToolbox (сложете отметка само на List Winsock Entries този път).

Прикачете логовете им в следващия си коментар.

И за финал пратете този файл - C:WindowsSystem32user32.dll за проверка на VirusTotal.

Натиснете бутона reanalyse ако вече е бил анализиран.

Публикувайте линка с резултатите - не самите резултати в следващия си комантар.

22 април 201313 г.

Автор

След направените действия Лог от FSS:

Farbar Service Scanner Version: 14-04-2013
Ran by Dimo (administrator) on 22-04-2013 at 22:53:38
Running from "C:UsersDimoDesktop"
Windows 7 Ultimate Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Attempt to access Yahoo IP returned error. Yahoo IP is offline
Yahoo.com is accessible.

Windows Firewall:
=============
MpsSvc Service is not running. Checking service configuration:
The start type of MpsSvc service is OK.
The ImagePath of MpsSvc service is OK.
The ServiceDll of MpsSvc service is OK.

Firewall Disabled Policy:
==================

System Restore:
============

System Restore Disabled Policy:
========================

Action Center:
============
wscsvc Service is not running. Checking service configuration:
The start type of wscsvc service is OK.
The ImagePath of wscsvc service is OK.
The ServiceDll of wscsvc service is OK.

Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv service is OK.

Windows Autoupdate Disabled Policy:
============================

Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is OK.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.

Other Services:
==============

File Check:
========
C:WindowsSystem32nsisvc.dll => MD5 is legit
C:WindowsSystem32driversnsiproxy.sys => MD5 is legit
C:WindowsSystem32dhcpcore.dll => MD5 is legit
C:WindowsSystem32driversafd.sys => MD5 is legit
C:WindowsSystem32driverstdx.sys => MD5 is legit
C:WindowsSystem32Driverstcpip.sys => MD5 is legit
C:WindowsSystem32dnsrslvr.dll => MD5 is legit
C:WindowsSystem32mpssvc.dll => MD5 is legit
C:WindowsSystem32bfe.dll => MD5 is legit
C:WindowsSystem32driversmpsdrv.sys => MD5 is legit
C:WindowsSystem32SDRSVC.dll => MD5 is legit
C:WindowsSystem32vssvc.exe => MD5 is legit
C:WindowsSystem32wscsvc.dll => MD5 is legit
C:WindowsSystem32wbemWMIsvc.dll => MD5 is legit
C:WindowsSystem32wuaueng.dll => MD5 is legit
C:WindowsSystem32qmgr.dll => MD5 is legit
C:WindowsSystem32es.dll => MD5 is legit
C:WindowsSystem32cryptsvc.dll => MD5 is legit
C:Program FilesWindows DefenderMpSvc.dll => MD5 is legit
C:WindowsSystem32ipnathlp.dll => MD5 is legit
C:WindowsSystem32iphlpsvc.dll => MD5 is legit
C:WindowsSystem32svchost.exe => MD5 is legit
C:WindowsSystem32rpcss.dll => MD5 is legit

**** End of log ****

Лог от MiniToolbox:

MiniToolBox by Farbar Version:21-04-2013
Ran by Dimo (administrator) on 22-04-2013 at 22:56:40
Running from "C:UsersDimoDesktop"
Windows 7 Ultimate Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************
========================= Winsock entries =====================================

Catalog5 01 C:WindowsSysWOW64NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:WindowsSysWOW64napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:WindowsSysWOW64pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:WindowsSysWOW64pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog5 06 C:WindowsSysWOW64winrnr.dll [20992] (Microsoft Corporation)
Catalog9 01 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:WindowsSysWOW64mswsock.dll [232448] (Microsoft Corporation)
x64-Catalog5 01 C:WindowsSystem32NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:WindowsSystem32napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:WindowsSystem32pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:WindowsSystem32pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog5 06 C:WindowsSystem32winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog9 01 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 02 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 03 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 04 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 05 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 06 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 07 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 08 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 09 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 10 C:WindowsSystem32mswsock.dll [326144] (Microsoft Corporation)

**** End of log ****

ето линка от анализа на user32.dll :

https://www.virustotal.com/bg/file/fdc6b8e08ae234fa4302b6552a3935714755fe51d11b8dd3e3c24415e1ed8731/analysis/1366660849/

22 април 201313 г.

Чудесно...почти сме готови.

Изтеглете този инструмент - Windows Repair All in one

Инсталирайте приложението и го стартирайте.

от стъпка 4 направете бекъп на системата натискайки Create (под System Restore) и backup (под Registry Backup).

от Start Repairs натиснете Start

и оттук вече сложете всички отметки показани на снимката:

Сложете отметка пред restart system when finished и натиснете Start.

Желателно е да изключите защитните си програми и да неизползвате компютъра си по време на поправките.

След рестарта направете нова проверка с Farbar Service Scanner и прикачете лог файла.

22 април 201313 г.

Автор

Всичко изпълнено.

Ето лог-а от FSS:

Farbar Service Scanner Version: 14-04-2013 Ran by Dimo (administrator) on 23-04-2013 at 00:50:46 Running from "C:UsersDimoDesktop" Windows 7 Ultimate Service Pack 1 (X64) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Attempt to access Yahoo IP returned error. Yahoo IP is offline Yahoo.com is accessible. Windows Firewall: ============= Firewall Disabled Policy: ================== System Restore: ============ System Restore Disabled Policy: ======================== Action Center: ============ Windows Update: ============ Windows Autoupdate Disabled Policy: ============================ Windows Defender: ============== Other Services: ============== File Check: ======== C:WindowsSystem32nsisvc.dll => MD5 is legit C:WindowsSystem32driversnsiproxy.sys => MD5 is legit C:WindowsSystem32dhcpcore.dll => MD5 is legit C:WindowsSystem32driversafd.sys => MD5 is legit C:WindowsSystem32driverstdx.sys => MD5 is legit C:WindowsSystem32Driverstcpip.sys => MD5 is legit C:WindowsSystem32dnsrslvr.dll => MD5 is legit C:WindowsSystem32mpssvc.dll => MD5 is legit C:WindowsSystem32bfe.dll => MD5 is legit C:WindowsSystem32driversmpsdrv.sys => MD5 is legit C:WindowsSystem32SDRSVC.dll => MD5 is legit C:WindowsSystem32vssvc.exe => MD5 is legit C:WindowsSystem32wscsvc.dll => MD5 is legit C:WindowsSystem32wbemWMIsvc.dll => MD5 is legit C:WindowsSystem32wuaueng.dll => MD5 is legit C:WindowsSystem32qmgr.dll => MD5 is legit C:WindowsSystem32es.dll => MD5 is legit C:WindowsSystem32cryptsvc.dll => MD5 is legit C:Program FilesWindows DefenderMpSvc.dll => MD5 is legit C:WindowsSystem32ipnathlp.dll => MD5 is legit C:WindowsSystem32iphlpsvc.dll => MD5 is legit C:WindowsSystem32svchost.exe => MD5 is legit C:WindowsSystem32rpcss.dll => MD5 is legit **** End of log ****

22 април 201313 г.

Супер, много се радвам че оправихме всичко.

Остава само да почистим:

Изтеглете OTC.exe и го стартирайте. Натиснете бутона CleanUp!.
Рестартирайте компютъра, ако ви попита!

Изтеглете Delfix.exe и го стартирайте. Сложете отметка пред Remove disinfection tools => натиснете бутона Run

Инструмента ще се самоизтрие след като приключи своята задача!

Изтеглете прикачения файл => delete.zip и го разархивирайте на десктопа.

Стартирайте го - след като приключи - той ще се самоизтрие и компютъра ще се рестартира.

Почистете остатъците от Panda с този инструмент.

Обновете всички старти приложения, ако има засечени такива с помощта на PatchMyPC

Деинсталирайте Eset Online Scanner-a от Control Panel-a, но си оставете Malwarebytes' Anti-Malware за профилактични проверки.

Тъй като деинсталирахме AVG ще се наложи да си качите наново антивирусна програма по-избор. Аз ви препоръчвам да не е пак AVG, защото май създава доста конфликти при вас и попречи на работата на TDSSKiller и OTL, но все пак вие си решете коя ще ви пасне най-добре.

Сменете всички пароли за акаунтите си особено ако се занимавате с чувствителни операции като онлайн банкиране например

Желая ви приятна и спокойна вечер!

Справихте се блестящо!

23 април 201313 г.

Автор

Изключително благодарен и задължен съм ви заради помоща която ми оказахте.

Имаше момент в който мислех, че форматът няма да се размине, но всичко завърши благополучно.

Продължавайте с страхотната работа която вършите.

Всичко добро и лек ден ви пожелавам.

Добре дошли!

Заразена система

Featured Replies

Архивирана тема

Разглеждащи това в момента 0

Дарение

Бюлетин

Профил

Навигация

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)