• Registrarse
  • Iniciar sesión


  • Página 3 de 3 PrimeroPrimero 123
    Resultados 21 al 26 de 26

    Autorun.inf - $RECYCLE.BIN - System Volume Information

    , esas carpetas son del S.O. (son ocultas pero es normal que aparezcan). Ok, pues desintala los siguientes programas: VirtualDJ, WinToFlash de la siguiente forma: Desinstalalos, los desinstalas con el revo uninstaller descargalo de: Revo ...

    1. #21
      Ex-Colaborador Avatar de Marr0n
      Registrado
      mar 2010
      Ubicación
      Catalunya
      Mensajes
      5.871

      Re: Autorun.inf - $RECYCLE.BIN - System Volume Information

      , esas carpetas son del S.O. (son ocultas pero es normal que aparezcan).

      Ok, pues desintala los siguientes programas: VirtualDJ, WinToFlash de la siguiente forma:

      Desinstalalos, los desinstalas con el revo uninstaller descargalo de: Revo Uninstaller | InfoSpyware y aquí te dejo su manual: Manual de Revo Uninstaller lo ejecutas en modo avanzado y borras todo lo que te detecte el programa como: claves del registro, archivos...

      Y si te lo pide reinicias la PC y si no pues no.

      Descarga y instala Argente - Registry Cleaner, lo ejecutas y siguiendo su Manual de Argente - Registry Cleaner - Foro de InfoSpyware, realizas lo siguiente:

      1. Haz una copia de seguridad completa de tu registro de Windows.
      2. Ve a Configuración>Escanear, y pones el motor de búsqueda de errores en profundo.
      3. Pulsa en Limpiar el registro y cuando finalice el escaneo haces clic en Reparar errores ahora!
      Si quieres seguir usando el programa para limpiar tu registro, seria conveniente que el motor de búsqueda lo vuelvas a poner en normal.

      Reinicias el PC.

      ¿Como sigue?

      Salu2.
      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    2. #22
      Usuario Avatar de [anD]
      Registrado
      sep 2008
      Ubicación
      Peru
      Mensajes
      65

      Re: Autorun.inf - $RECYCLE.BIN - System Volume Information

      Ya esta Marr0n aquí dejo las demás capturas que logre subir ( por Moxilla ).














      USBS :







      Si son carpetas del SO, no solo estarian en C?. Lo que me pareció dudoso fue que la supuesta infección comenzamos en C y en los demás solo aparecía lo de RECYCLER, luego de meter los usbs infectados para también analizarlos, comenzó a aparecer el Autorun.inf, por eso fue mi preocupación, y hay un problema ahora ultimo mi hermano me dijo que metió su USB y aparecieron sus carpetas Ocultas mas la de RECYCLER.

      Sigo sintiendo ala computadora mas lenta, al iniciar, al correr juegos, y ejecutar varios programas, las carpetas siguen ahí, también las de los USB.

      Gracias por tu constante ayuda!, Espero tu respuesta salu2!.


      Editada:
      PD: El modo profundo en Registry Cleaner no lo encontré, ni aparece en el manual.
      En las carpetas Autorun.inf encuentro este archivo:
      Última edición por [anD] fecha: 07/10/12 a las 00:55:02

    3. #23
      Ex-Colaborador Avatar de Marr0n
      Registrado
      mar 2010
      Ubicación
      Catalunya
      Mensajes
      5.871

      Re: Autorun.inf - $RECYCLE.BIN - System Volume Information

      PD: El modo profundo en Registry Cleaner no lo encontré, ni aparece en el manual.
      Ok, eso es porqué no actualicé dicha plantilla perdón.

      En las carpetas Autorun.inf encuentro este archivo:

      Tranquilo que es del usbfix.

      Desinstala los programas que et dije.

      Descarga TDSSKiller | InfoSpyware a tu escritorio, desconectas tu PC de internet.

      .Descomprimes el TDSSKiller.zip y extraes el archivo TDSSKiller.exe

      .Ejecutas el TDSSKiller.exe (si tienes windows 7/vista haz clic con el botón derecho del mouse y seleccionas ejecutar como administrador).

      .Verifica que estén activadas las siguientes casillas:

      1. Services and Drivers
      2. Boot Sectors
      .Presionas Star Scan.



      .Si el equipo esta infectado, haz lo siguiente:

      • Objetos Maliciosos: La acción predeterminada es Cure (desinfectar) o Delete (eliminar). El programa seleccionará de forma automática la acción a realizar.
      • Eliminalos como te muestro en la siguiente imagen:




      • Objetos Sospechosos: Siempre que el programa detecte un objeto como sospechoso (puede estar infectado, pero no tiene porqué) utilizas la opción Skip (saltar), (vale + prevenir, ya que podría ser que estuviera infectado o no).
      • Utiliza la opción Skip para ingorarlos, como te muestro en la siguiente imagen:









      • No olvides en guardar el reporte (si tienes que reiniciar el PC), el reporte lo se ubica en: C:\TDSSKiller.2.5.0_xx.xx.xxxx_xx.xx.xx_log.txt

      sALU2.
      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    4. #24
      Usuario Avatar de [anD]
      Registrado
      sep 2008
      Ubicación
      Peru
      Mensajes
      65

      Re: Autorun.inf - $RECYCLE.BIN - System Volume Information

      Hola nuevamente Marr0n, si desistale los programas, hize lo que acabas de mencionarme, me salio un problemas le di Skip como me lo indicabas ya que no era Malicioso. Aqui el reporte que aproposito es muy largo .

      11:58:57.0894 4412 TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
      11:58:57.0902 4412 ============================================================
      11:58:57.0902 4412 Current date / time: 2012/10/07 11:58:57.0902
      11:58:57.0902 4412 SystemInfo:
      11:58:57.0902 4412
      11:58:57.0902 4412 OS Version: 6.1.7601 ServicePack: 1.0
      11:58:57.0902 4412 Product type: Workstation
      11:58:57.0902 4412 ComputerName: PCNEW
      11:58:57.0902 4412 UserName: Usuario
      11:58:57.0902 4412 Windows directory: C:\Windows
      11:58:57.0902 4412 System windows directory: C:\Windows
      11:58:57.0902 4412 Processor architecture: Intel x86
      11:58:57.0902 4412 Number of processors: 4
      11:58:57.0902 4412 Page size: 0x1000
      11:58:57.0902 4412 Boot type: Normal boot
      11:58:57.0902 4412 ============================================================
      11:59:00.0547 4412 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
      11:59:00.0554 4412 Drive \Device\Harddisk1\DR1 - Size: 0xE90E8000 (3.64 Gb), SectorSize: 0x200, Cylinders: 0x1DB, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
      11:59:00.0560 4412 Drive \Device\Harddisk2\DR2 - Size: 0x1D11B0000 (7.27 Gb), SectorSize: 0x200, Cylinders: 0x3B4, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
      11:59:00.0562 4412 ============================================================
      11:59:00.0562 4412 \Device\Harddisk0\DR0:
      11:59:00.0577 4412 MBR partitions:
      11:59:00.0577 4412 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xC803400
      11:59:00.0590 4412 \Device\Harddisk1\DR1:
      11:59:00.0592 4412 MBR partitions:
      11:59:00.0592 4412 \Device\Harddisk1\DR1\Partition1: MBR, Type 0xC, StartLBA 0x2680, BlocksNum 0x7460C0
      11:59:00.0592 4412 \Device\Harddisk2\DR2:
      11:59:00.0593 4412 MBR partitions:
      11:59:00.0593 4412 \Device\Harddisk2\DR2\Partition1: MBR, Type 0xC, StartLBA 0x1F80, BlocksNum 0xE86E00
      11:59:00.0593 4412 ============================================================
      11:59:00.0646 4412 C: <-> \Device\Harddisk0\DR0\Partition1
      11:59:00.0646 4412 ============================================================
      11:59:00.0646 4412 Initialize success
      11:59:00.0646 4412 ============================================================
      11:59:02.0995 0192 ============================================================
      11:59:02.0995 0192 Scan started
      11:59:02.0995 0192 Mode: Manual;
      11:59:02.0995 0192 ============================================================
      11:59:05.0398 0192 ================ Scan system memory ========================
      11:59:05.0398 0192 System memory - ok
      11:59:05.0398 0192 ================ Scan services =============================
      11:59:05.0472 0192 1394hub - ok
      11:59:05.0539 0192 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\DRIVERS\1394ohci.sys
      11:59:05.0540 0192 1394ohci - ok
      11:59:05.0573 0192 [ 3985CF1771BD0D38BEDB58EDF640632D ] 3xHybrid C:\Windows\system32\DRIVERS\3xHybrid.sys
      11:59:05.0577 0192 3xHybrid - ok
      11:59:05.0596 0192 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys
      11:59:05.0597 0192 ACPI - ok
      11:59:05.0609 0192 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
      11:59:05.0609 0192 AcpiPmi - ok
      11:59:05.0689 0192 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
      11:59:05.0690 0192 AdobeARMservice - ok
      11:59:05.0747 0192 [ 0D4C486A24A711A45FD83ACDF4D18506 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
      11:59:05.0748 0192 AdobeFlashPlayerUpdateSvc - ok
      11:59:05.0778 0192 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
      11:59:05.0780 0192 adp94xx - ok
      11:59:05.0786 0192 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
      11:59:05.0787 0192 adpahci - ok
      11:59:05.0791 0192 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
      11:59:05.0792 0192 adpu320 - ok
      11:59:05.0820 0192 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
      11:59:05.0821 0192 AeLookupSvc - ok
      11:59:05.0848 0192 [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD C:\Windows\system32\drivers\afd.sys
      11:59:05.0850 0192 AFD - ok
      11:59:05.0866 0192 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys
      11:59:05.0866 0192 agp440 - ok
      11:59:05.0870 0192 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
      11:59:05.0870 0192 aic78xx - ok
      11:59:05.0910 0192 [ 20683082D2730669071367716793CF14 ] AIDA64Driver C:\Program Files\FinalWire\AIDA64 Extreme Edition\kerneld.x32
      11:59:05.0910 0192 AIDA64Driver - ok
      11:59:05.0920 0192 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
      11:59:05.0920 0192 ALG - ok
      11:59:05.0931 0192 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys
      11:59:05.0932 0192 aliide - ok
      11:59:05.0965 0192 [ 87F8E98FCD859D2F0C291DCF9F1A5543 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
      11:59:05.0967 0192 AMD External Events Utility - ok
      11:59:06.0028 0192 AMD FUEL Service - ok
      11:59:06.0042 0192 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys
      11:59:06.0042 0192 amdagp - ok
      11:59:06.0055 0192 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys
      11:59:06.0055 0192 amdide - ok
      11:59:06.0070 0192 [ FF258424F0B2EF25EB98F04EE386E6E3 ] amdiox86 C:\Windows\system32\DRIVERS\amdiox86.sys
      11:59:06.0071 0192 amdiox86 - ok
      11:59:06.0087 0192 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
      11:59:06.0087 0192 AmdK8 - ok
      11:59:06.0234 0192 [ 6617FED21C91E821E3D00484741B302F ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
      11:59:06.0279 0192 amdkmdag - ok
      11:59:06.0299 0192 [ 0CD80C1ABE5507B4ADBFC8338E3698E0 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
      11:59:06.0301 0192 amdkmdap - ok
      11:59:06.0304 0192 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
      11:59:06.0304 0192 AmdPPM - ok
      11:59:06.0350 0192 [ 04B2587C961C084634054D60D3EB385B ] amdsata C:\Windows\system32\DRIVERS\amdsata.sys
      11:59:06.0351 0192 amdsata - ok
      11:59:06.0355 0192 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
      11:59:06.0355 0192 amdsbs - ok
      11:59:06.0363 0192 [ C078B06811670B90A52AE51AC3808E1E ] amdxata C:\Windows\system32\drivers\amdxata.sys
      11:59:06.0363 0192 amdxata - ok
      11:59:06.0386 0192 [ 48E008CF2EDCF8FC91A9D3507865A51D ] anodlwf C:\Windows\system32\DRIVERS\anodlwf.sys
      11:59:06.0387 0192 anodlwf - ok
      11:59:06.0393 0192 [ 40C15CE1B832B78CC2A2F61807058763 ] AODDriver4.01 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys
      11:59:06.0394 0192 AODDriver4.01 - ok
      11:59:06.0411 0192 [ 40C15CE1B832B78CC2A2F61807058763 ] AODDriver4.1 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys
      11:59:06.0411 0192 AODDriver4.1 - ok
      11:59:06.0436 0192 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys
      11:59:06.0436 0192 AppID - ok
      11:59:06.0447 0192 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
      11:59:06.0447 0192 AppIDSvc - ok
      11:59:06.0472 0192 [ FB1959012294D6AD43E5304DF65E3C26 ] Appinfo C:\Windows\System32\appinfo.dll
      11:59:06.0473 0192 Appinfo - ok
      11:59:06.0492 0192 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
      11:59:06.0493 0192 AppMgmt - ok
      11:59:06.0497 0192 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
      11:59:06.0498 0192 arc - ok
      11:59:06.0501 0192 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
      11:59:06.0501 0192 arcsas - ok
      11:59:06.0582 0192 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
      11:59:06.0582 0192 aspnet_state - ok
      11:59:06.0590 0192 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
      11:59:06.0590 0192 AsyncMac - ok
      11:59:06.0598 0192 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys
      11:59:06.0598 0192 atapi - ok
      11:59:06.0634 0192 [ 76BAB0C824E2D05B940C4DD40A9B08BF ] athr C:\Windows\system32\DRIVERS\athr.sys
      11:59:06.0640 0192 athr - ok
      11:59:06.0672 0192 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
      11:59:06.0674 0192 AudioEndpointBuilder - ok
      11:59:06.0680 0192 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll
      11:59:06.0682 0192 Audiosrv - ok
      11:59:06.0698 0192 [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV C:\Windows\System32\AxInstSV.dll
      11:59:06.0699 0192 AxInstSV - ok
      11:59:06.0717 0192 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
      11:59:06.0719 0192 b06bdrv - ok
      11:59:06.0738 0192 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
      11:59:06.0739 0192 b57nd60x - ok
      11:59:06.0755 0192 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
      11:59:06.0756 0192 BDESVC - ok
      11:59:06.0769 0192 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
      11:59:06.0769 0192 Beep - ok
      11:59:06.0797 0192 [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE C:\Windows\System32\bfe.dll
      11:59:06.0800 0192 BFE - ok
      11:59:06.0826 0192 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll
      11:59:06.0831 0192 BITS - ok
      11:59:06.0834 0192 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
      11:59:06.0834 0192 blbdrive - ok
      11:59:06.0866 0192 [ 73686FE0B2E0469F89FD2075BE724704 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
      11:59:06.0867 0192 Bonjour Service - ok
      11:59:06.0890 0192 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
      11:59:06.0890 0192 bowser - ok
      11:59:06.0901 0192 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
      11:59:06.0902 0192 BrFiltLo - ok
      11:59:06.0911 0192 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
      11:59:06.0911 0192 BrFiltUp - ok
      11:59:06.0928 0192 [ 6E11F33D14D020F58D5E02E4D67DFA19 ] Browser C:\Windows\System32\browser.dll
      11:59:06.0929 0192 Browser - ok
      11:59:06.0949 0192 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
      11:59:06.0951 0192 Brserid - ok
      11:59:06.0969 0192 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
      11:59:06.0969 0192 BrSerWdm - ok
      11:59:06.0979 0192 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
      11:59:06.0979 0192 BrUsbMdm - ok
      11:59:06.0984 0192 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
      11:59:06.0984 0192 BrUsbSer - ok
      11:59:07.0001 0192 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
      11:59:07.0001 0192 BTHMODEM - ok
      11:59:07.0021 0192 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
      11:59:07.0022 0192 bthserv - ok
      11:59:07.0041 0192 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
      11:59:07.0042 0192 cdfs - ok
      11:59:07.0056 0192 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
      11:59:07.0057 0192 cdrom - ok
      11:59:07.0068 0192 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll
      11:59:07.0069 0192 CertPropSvc - ok
      11:59:07.0081 0192 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
      11:59:07.0081 0192 circlass - ok
      11:59:07.0098 0192 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
      11:59:07.0099 0192 CLFS - ok
      11:59:07.0167 0192 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
      11:59:07.0168 0192 clr_optimization_v2.0.50727_32 - ok
      11:59:07.0179 0192 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      11:59:07.0180 0192 clr_optimization_v4.0.30319_32 - ok
      11:59:07.0194 0192 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
      11:59:07.0194 0192 CmBatt - ok
      11:59:07.0206 0192 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys
      11:59:07.0206 0192 cmdide - ok
      11:59:07.0230 0192 [ 6427525D76F61D0C519B008D3680E8E7 ] CNG C:\Windows\system32\Drivers\cng.sys
      11:59:07.0232 0192 CNG - ok
      11:59:07.0261 0192 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
      11:59:07.0271 0192 Compbatt - ok
      11:59:07.0285 0192 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
      11:59:07.0285 0192 CompositeBus - ok
      11:59:07.0288 0192 COMSysApp - ok
      11:59:07.0308 0192 [ C2EB4539A4F6AB6EDD01BDC191619975 ] cpuz135 C:\Windows\system32\drivers\cpuz135_x32.sys
      11:59:07.0308 0192 cpuz135 - ok
      11:59:07.0311 0192 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
      11:59:07.0312 0192 crcdisk - ok
      11:59:07.0333 0192 [ A585BEBF7D054BD9618EDA0922D5484A ] CryptSvc C:\Windows\system32\cryptsvc.dll
      11:59:07.0335 0192 CryptSvc - ok
      11:59:07.0346 0192 [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC C:\Windows\system32\drivers\csc.sys
      11:59:07.0348 0192 CSC - ok
      11:59:07.0366 0192 [ 15F93B37F6801943360D9EB42485D5D3 ] CscService C:\Windows\System32\cscsvc.dll
      11:59:07.0369 0192 CscService - ok
      11:59:07.0400 0192 [ ED316D4C3D39C5B6C23DE067E275C183 ] ctdvda2k C:\Windows\system32\drivers\ctdvda2k.sys
      11:59:07.0402 0192 ctdvda2k - ok
      11:59:07.0423 0192 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32\rpcss.dll
      11:59:07.0427 0192 DcomLaunch - ok
      11:59:07.0444 0192 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
      11:59:07.0445 0192 defragsvc - ok
      11:59:07.0476 0192 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
      11:59:07.0476 0192 DfsC - ok
      11:59:07.0495 0192 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll
      11:59:07.0497 0192 Dhcp - ok
      11:59:07.0501 0192 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
      11:59:07.0501 0192 discache - ok
      11:59:07.0505 0192 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
      11:59:07.0505 0192 Disk - ok
      11:59:07.0526 0192 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
      11:59:07.0528 0192 Dnscache - ok
      11:59:07.0537 0192 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll
      11:59:07.0539 0192 dot3svc - ok
      11:59:07.0557 0192 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll
      11:59:07.0558 0192 DPS - ok
      11:59:07.0581 0192 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
      11:59:07.0581 0192 drmkaud - ok
      11:59:07.0611 0192 [ 23F5D28378A160352BA8F817BD8C71CB ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
      11:59:07.0615 0192 DXGKrnl - ok
      11:59:07.0631 0192 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
      11:59:07.0633 0192 EapHost - ok
      11:59:07.0689 0192 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
      11:59:07.0704 0192 ebdrv - ok
      11:59:07.0754 0192 [ 81951F51E318AECC2D68559E47485CC4 ] EFS C:\Windows\System32\lsass.exe
      11:59:07.0755 0192 EFS - ok
      11:59:07.0784 0192 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
      11:59:07.0787 0192 ehRecvr - ok
      11:59:07.0823 0192 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
      11:59:07.0824 0192 ehSched - ok
      11:59:07.0852 0192 [ 075D91E4DE09A6F1EDE77C341803D454 ] ElbyCDFL C:\Windows\system32\Drivers\ElbyCDFL.sys
      11:59:07.0852 0192 ElbyCDFL - ok
      11:59:07.0857 0192 [ C9C7113F5E15F70FCC576E835C859D56 ] ElbyCDIO C:\Windows\system32\Drivers\ElbyCDIO.sys
      11:59:07.0858 0192 ElbyCDIO - ok
      11:59:07.0865 0192 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
      11:59:07.0867 0192 elxstor - ok
      11:59:07.0882 0192 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys
      11:59:07.0882 0192 ErrDev - ok
      11:59:07.0918 0192 [ 1E478A9ED0DC626ABEFC29EF8A02F46F ] EtronHub3 C:\Windows\system32\Drivers\EtronHub3.sys
      11:59:07.0918 0192 EtronHub3 - ok
      11:59:07.0929 0192 [ 95B46DACC254A3CB98C81C3D794C5A62 ] EtronXHCI C:\Windows\system32\Drivers\EtronXHCI.sys
      11:59:07.0929 0192 EtronXHCI - ok
      11:59:07.0972 0192 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
      11:59:07.0974 0192 EventSystem - ok
      11:59:08.0024 0192 [ 898AD7D508F6ADE242D94752E09F4152 ] EverestDriver C:\Program Files\Lavalys\EVEREST Ultimate Edition 5.5\kerneld.wnt
      11:59:08.0024 0192 EverestDriver - ok
      11:59:08.0043 0192 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
      11:59:08.0044 0192 exfat - ok
      11:59:08.0059 0192 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
      11:59:08.0060 0192 fastfat - ok
      11:59:08.0085 0192 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe
      11:59:08.0089 0192 Fax - ok
      11:59:08.0114 0192 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
      11:59:08.0115 0192 fdc - ok
      11:59:08.0128 0192 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
      11:59:08.0130 0192 fdPHost - ok
      11:59:08.0142 0192 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
      11:59:08.0143 0192 FDResPub - ok
      11:59:08.0146 0192 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
      11:59:08.0147 0192 FileInfo - ok
      11:59:08.0150 0192 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
      11:59:08.0151 0192 Filetrace - ok
      11:59:08.0177 0192 [ F76D04F7413B07DAA029F6520B64B4E8 ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
      11:59:08.0181 0192 FLEXnet Licensing Service - ok
      11:59:08.0194 0192 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
      11:59:08.0194 0192 flpydisk - ok
      11:59:08.0199 0192 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
      11:59:08.0200 0192 FltMgr - ok
      11:59:08.0226 0192 [ B3A5EC6B6B6673DB7E87C2BCDBDDC074 ] FontCache C:\Windows\system32\FntCache.dll
      11:59:08.0231 0192 FontCache - ok
      11:59:08.0272 0192 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
      11:59:08.0273 0192 FontCache3.0.0.0 - ok
      11:59:08.0276 0192 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
      11:59:08.0277 0192 FsDepends - ok
      11:59:08.0290 0192 [ A574B4360E438977038AAE4BF60D79A2 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
      11:59:08.0291 0192 Fs_Rec - ok
      11:59:08.0301 0192 [ 8A73E79089B282100B9393B644CB853B ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
      11:59:08.0302 0192 fvevol - ok
      11:59:08.0313 0192 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
      11:59:08.0314 0192 gagp30kx - ok
      11:59:08.0316 0192 GGSAFERDriver - ok
      11:59:08.0349 0192 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll
      11:59:08.0353 0192 gpsvc - ok
      11:59:08.0413 0192 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
      11:59:08.0414 0192 gupdate - ok
      11:59:08.0417 0192 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
      11:59:08.0418 0192 gupdatem - ok
      11:59:08.0433 0192 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
      11:59:08.0433 0192 hcw85cir - ok
      11:59:08.0446 0192 [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
      11:59:08.0448 0192 HdAudAddService - ok
      11:59:08.0466 0192 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
      11:59:08.0467 0192 HDAudBus - ok
      11:59:08.0477 0192 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
      11:59:08.0477 0192 HidBatt - ok
      11:59:08.0481 0192 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
      11:59:08.0482 0192 HidBth - ok
      11:59:08.0496 0192 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
      11:59:08.0496 0192 HidIr - ok
      11:59:08.0509 0192 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
      11:59:08.0510 0192 hidserv - ok
      11:59:08.0523 0192 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
      11:59:08.0523 0192 HidUsb - ok
      11:59:08.0561 0192 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll
      11:59:08.0563 0192 hkmsvc - ok
      11:59:08.0579 0192 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
      11:59:08.0581 0192 HomeGroupListener - ok
      11:59:08.0595 0192 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
      11:59:08.0598 0192 HomeGroupProvider - ok
      11:59:08.0615 0192 [ 8E0968B308040261C53B216E3CE7559A ] hotcore3 C:\Windows\system32\DRIVERS\hotcore3.sys
      11:59:08.0616 0192 hotcore3 - ok
      11:59:08.0630 0192 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
      11:59:08.0631 0192 HpSAMD - ok
      11:59:08.0655 0192 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys
      11:59:08.0658 0192 HTTP - ok
      11:59:08.0675 0192 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
      11:59:08.0675 0192 hwpolicy - ok
      11:59:08.0690 0192 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
      11:59:08.0691 0192 i8042prt - ok
      11:59:08.0726 0192 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
      11:59:08.0728 0192 iaStorV - ok
      11:59:08.0770 0192 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
      11:59:08.0775 0192 idsvc - ok
      11:59:08.0779 0192 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
      11:59:08.0779 0192 iirsp - ok
      11:59:08.0808 0192 [ F95622F161474511B8D80D6B093AA610 ] IKEEXT C:\Windows\System32\ikeext.dll
      11:59:08.0812 0192 IKEEXT - ok
      11:59:08.0883 0192 [ 4B8D05BD842D634DC138AFDB1325172E ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
      11:59:08.0902 0192 IntcAzAudAddService - ok
      11:59:08.0937 0192 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys
      11:59:08.0937 0192 intelide - ok
      11:59:08.0941 0192 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
      11:59:08.0942 0192 intelppm - ok
      11:59:08.0952 0192 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
      11:59:08.0953 0192 IPBusEnum - ok
      11:59:08.0967 0192 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
      11:59:08.0968 0192 IpFilterDriver - ok
      11:59:09.0000 0192 [ 4D65A07B795D6674312F879D09AA7663 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
      11:59:09.0004 0192 iphlpsvc - ok
      11:59:09.0015 0192 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
      11:59:09.0015 0192 IPMIDRV - ok
      11:59:09.0019 0192 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
      11:59:09.0020 0192 IPNAT - ok
      11:59:09.0033 0192 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
      11:59:09.0033 0192 IRENUM - ok
      11:59:09.0042 0192 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys
      11:59:09.0043 0192 isapnp - ok
      11:59:09.0059 0192 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
      11:59:09.0060 0192 iScsiPrt - ok
      11:59:09.0074 0192 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
      11:59:09.0074 0192 kbdclass - ok
      11:59:09.0088 0192 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
      11:59:09.0089 0192 kbdhid - ok
      11:59:09.0098 0192 [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso C:\Windows\system32\lsass.exe
      11:59:09.0100 0192 KeyIso - ok
      11:59:09.0125 0192 [ F4647BB23DB9038A7536CF6B68F4207F ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
      11:59:09.0126 0192 KSecDD - ok
      11:59:09.0143 0192 [ E73CAE53BBB72BA26918492C6B4C229D ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
      11:59:09.0144 0192 KSecPkg - ok
      11:59:09.0158 0192 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
      11:59:09.0161 0192 KtmRm - ok
      11:59:09.0182 0192 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\system32\srvsvc.dll
      11:59:09.0185 0192 LanmanServer - ok
      11:59:09.0199 0192 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
      11:59:09.0202 0192 LanmanWorkstation - ok
      11:59:09.0214 0192 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
      11:59:09.0214 0192 lltdio - ok
      11:59:09.0231 0192 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
      11:59:09.0233 0192 lltdsvc - ok
      11:59:09.0248 0192 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
      11:59:09.0249 0192 lmhosts - ok
      11:59:09.0278 0192 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
      11:59:09.0278 0192 LSI_FC - ok
      11:59:09.0283 0192 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
      11:59:09.0284 0192 LSI_SAS - ok
      11:59:09.0288 0192 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
      11:59:09.0289 0192 LSI_SAS2 - ok
      11:59:09.0293 0192 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
      11:59:09.0294 0192 LSI_SCSI - ok
      11:59:09.0298 0192 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
      11:59:09.0299 0192 luafv - ok
      11:59:09.0316 0192 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
      11:59:09.0318 0192 Mcx2Svc - ok
      11:59:09.0368 0192 [ 7CF1B716372B89568AE4C0FE769F5869 ] MDM C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
      11:59:09.0370 0192 MDM - ok
      11:59:09.0374 0192 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
      11:59:09.0375 0192 megasas - ok
      11:59:09.0380 0192 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
      11:59:09.0382 0192 MegaSR - ok
      11:59:09.0436 0192 Microsoft SharePoint Workspace Audit Service - ok
      11:59:09.0440 0192 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
      11:59:09.0442 0192 MMCSS - ok
      11:59:09.0482 0192 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
      11:59:09.0482 0192 Modem - ok
      11:59:09.0493 0192 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
      11:59:09.0494 0192 monitor - ok
      11:59:09.0506 0192 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
      11:59:09.0506 0192 mouclass - ok
      11:59:09.0523 0192 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
      11:59:09.0523 0192 mouhid - ok
      11:59:09.0550 0192 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
      11:59:09.0550 0192 mountmgr - ok
      11:59:09.0607 0192 [ 96AA8BA23142CC8E2B30F3CAE0C80254 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
      11:59:09.0608 0192 MozillaMaintenance - ok
      11:59:09.0645 0192 [ FEE0BADED54222E9F1DAE9541212AAB1 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
      11:59:09.0646 0192 MpFilter - ok
      11:59:09.0656 0192 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys
      11:59:09.0657 0192 mpio - ok
      11:59:09.0676 0192 [ 2C3489660D4A8D514C123C3F0D67DF46 ] MpNWMon C:\Windows\system32\DRIVERS\MpNWMon.sys
      11:59:09.0676 0192 MpNWMon - ok
      11:59:09.0681 0192 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
      11:59:09.0681 0192 mpsdrv - ok
      11:59:09.0703 0192 [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc C:\Windows\system32\mpssvc.dll
      11:59:09.0708 0192 MpsSvc - ok
      11:59:09.0730 0192 [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
      11:59:09.0731 0192 MRxDAV - ok
      11:59:09.0766 0192 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
      11:59:09.0767 0192 mrxsmb - ok
      11:59:09.0778 0192 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
      11:59:09.0779 0192 mrxsmb10 - ok
      11:59:09.0817 0192 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
      11:59:09.0818 0192 mrxsmb20 - ok
      11:59:09.0822 0192 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys
      11:59:09.0823 0192 msahci - ok
      11:59:09.0852 0192 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys
      11:59:09.0852 0192 msdsm - ok
      11:59:09.0873 0192 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
      11:59:09.0875 0192 MSDTC - ok
      11:59:09.0917 0192 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
      11:59:09.0917 0192 Msfs - ok
      11:59:09.0932 0192 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
      11:59:09.0932 0192 mshidkmdf - ok
      11:59:09.0959 0192 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
      11:59:09.0959 0192 msisadrv - ok
      11:59:09.0980 0192 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
      11:59:09.0982 0192 MSiSCSI - ok
      11:59:09.0986 0192 msiserver - ok
      11:59:10.0006 0192 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
      11:59:10.0006 0192 MSKSSRV - ok
      11:59:10.0030 0192 [ CFCE43B70CA0CC4DCC8ADB62B792B173 ] MsMpSvc C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
      11:59:10.0030 0192 MsMpSvc - ok
      11:59:10.0043 0192 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
      11:59:10.0043 0192 MSPCLOCK - ok
      11:59:10.0050 0192 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
      11:59:10.0050 0192 MSPQM - ok
      11:59:10.0079 0192 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
      11:59:10.0080 0192 MsRPC - ok
      11:59:10.0091 0192 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
      11:59:10.0091 0192 mssmbios - ok
      11:59:10.0138 0192 MSSQL$SQLEXPRESS - ok
      11:59:10.0185 0192 [ F1761C8FB2B25A32C6D63E36BB88C3AE ] MSSQLServerADHelper100 C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE
      11:59:10.0186 0192 MSSQLServerADHelper100 - ok
      11:59:10.0190 0192 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
      11:59:10.0191 0192 MSTEE - ok
      11:59:10.0202 0192 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
      11:59:10.0203 0192 MTConfig - ok
      11:59:10.0207 0192 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
      11:59:10.0208 0192 Mup - ok
      11:59:10.0224 0192 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll
      11:59:10.0228 0192 napagent - ok
      11:59:10.0234 0192 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
      11:59:10.0236 0192 NativeWifiP - ok
      11:59:10.0256 0192 [ E7C54812A2AAF43316EB6930C1FFA108 ] NDIS C:\Windows\system32\drivers\ndis.sys
      11:59:10.0260 0192 NDIS - ok
      11:59:10.0277 0192 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
      11:59:10.0278 0192 NdisCap - ok
      11:59:10.0291 0192 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
      11:59:10.0291 0192 NdisTapi - ok
      11:59:10.0322 0192 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
      11:59:10.0323 0192 Ndisuio - ok
      11:59:10.0344 0192 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
      11:59:10.0345 0192 NdisWan - ok
      11:59:10.0365 0192 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
      11:59:10.0366 0192 NDProxy - ok
      11:59:10.0371 0192 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
      11:59:10.0371 0192 NetBIOS - ok
      11:59:10.0400 0192 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
      11:59:10.0402 0192 NetBT - ok
      11:59:10.0688 0192 [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon C:\Windows\system32\lsass.exe
      11:59:10.0689 0192 Netlogon - ok
      11:59:10.0777 0192 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
      11:59:10.0780 0192 Netman - ok
      11:59:10.0981 0192 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
      11:59:10.0982 0192 NetMsmqActivator - ok
      11:59:11.0007 0192 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
      11:59:11.0008 0192 NetPipeActivator - ok
      11:59:11.0037 0192 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
      11:59:11.0040 0192 netprofm - ok
      11:59:11.0052 0192 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
      11:59:11.0053 0192 NetTcpActivator - ok
      11:59:11.0057 0192 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
      11:59:11.0058 0192 NetTcpPortSharing - ok
      11:59:11.0066 0192 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
      11:59:11.0066 0192 nfrd960 - ok
      11:59:11.0109 0192 [ 7B01C6172CFD0B10116175E09200D4B4 ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys
      11:59:11.0110 0192 NisDrv - ok
      11:59:11.0121 0192 [ A5CB074F34BBD89948E34A630D459C0C ] NisSrv C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
      11:59:11.0122 0192 NisSrv - ok
      11:59:11.0174 0192 [ B6AB14440CF8A954DC43F53413B89667 ] NitroDriverReadSpool2 C:\Program Files\Nitro PDF\Professional 7\NitroPDFDriverService2.exe
      11:59:11.0176 0192 NitroDriverReadSpool2 - ok
      11:59:11.0213 0192 [ 912084381D30D8B89EC4E293053F4710 ] NlaSvc C:\Windows\System32\nlasvc.dll
      11:59:11.0216 0192 NlaSvc - ok
      11:59:11.0251 0192 [ 9A5F53B55E09ECC2DAB8C74E4DD18B8D ] nlsX86cc C:\Windows\system32\NLSSRV32.EXE
      11:59:11.0253 0192 nlsX86cc - ok
      11:59:11.0264 0192 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
      11:59:11.0265 0192 Npfs - ok
      11:59:11.0302 0192 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
      11:59:11.0304 0192 nsi - ok
      11:59:11.0317 0192 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
      11:59:11.0317 0192 nsiproxy - ok
      11:59:11.0356 0192 [ 81189C3D7763838E55C397759D49007A ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
      11:59:11.0362 0192 Ntfs - ok
      11:59:11.0376 0192 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
      11:59:11.0377 0192 Null - ok
      11:59:11.0394 0192 [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid C:\Windows\system32\drivers\nvraid.sys
      11:59:11.0395 0192 nvraid - ok
      11:59:11.0408 0192 [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor C:\Windows\system32\drivers\nvstor.sys
      11:59:11.0409 0192 nvstor - ok
      11:59:11.0420 0192 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
      11:59:11.0421 0192 nv_agp - ok
      11:59:11.0452 0192 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
      11:59:11.0453 0192 ohci1394 - ok
      11:59:11.0490 0192 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
      11:59:11.0491 0192 ose - ok
      11:59:11.0590 0192 [ 358A9CCA612C68EB2F07DDAD4CE1D8D7 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
      11:59:11.0614 0192 osppsvc - ok
      11:59:11.0676 0192 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
      11:59:11.0679 0192 p2pimsvc - ok
      11:59:11.0708 0192 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
      11:59:11.0711 0192 p2psvc - ok
      11:59:11.0717 0192 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
      11:59:11.0717 0192 Parport - ok
      11:59:11.0733 0192 [ BF8F6AF06DA75B336F07E23AEF97D93B ] partmgr C:\Windows\system32\drivers\partmgr.sys
      11:59:11.0733 0192 partmgr - ok
      11:59:11.0750 0192 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
      11:59:11.0750 0192 Parvdm - ok
      11:59:11.0756 0192 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
      11:59:11.0759 0192 PcaSvc - ok
      11:59:11.0775 0192 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys
      11:59:11.0776 0192 pci - ok
      11:59:11.0793 0192 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys
      11:59:11.0793 0192 pciide - ok
      11:59:11.0809 0192 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
      11:59:11.0810 0192 pcmcia - ok
      11:59:11.0816 0192 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
      11:59:11.0816 0192 pcw - ok
      11:59:11.0826 0192 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
      11:59:11.0829 0192 PEAUTH - ok
      11:59:11.0912 0192 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
      11:59:11.0918 0192 PeerDistSvc - ok
      11:59:12.0016 0192 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll
      11:59:12.0025 0192 pla - ok
      11:59:12.0056 0192 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay C:\Windows\system32\umpnpmgr.dll
      11:59:12.0060 0192 PlugPlay - ok
      11:59:12.0072 0192 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
      11:59:12.0074 0192 PNRPAutoReg - ok
      11:59:12.0082 0192 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
      11:59:12.0085 0192 PNRPsvc - ok
      11:59:12.0104 0192 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
      11:59:12.0107 0192 PolicyAgent - ok
      11:59:12.0126 0192 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll
      11:59:12.0129 0192 Power - ok
      11:59:12.0144 0192 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
      11:59:12.0145 0192 PptpMiniport - ok
      11:59:12.0164 0192 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
      11:59:12.0164 0192 Processor - ok
      11:59:12.0184 0192 [ 43CA4CCC22D52FB58E8988F0198851D0 ] ProfSvc C:\Windows\system32\profsvc.dll
      11:59:12.0187 0192 ProfSvc - ok
      11:59:12.0199 0192 [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe
      11:59:12.0200 0192 ProtectedStorage - ok
      11:59:12.0206 0192 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
      11:59:12.0207 0192 Psched - ok
      11:59:12.0252 0192 [ 0B6DEA0A1662CAB8F2BF339DC0752EF4 ] PSI_SVC_2 c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
      11:59:12.0253 0192 PSI_SVC_2 - ok
      11:59:12.0291 0192 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
      11:59:12.0298 0192 ql2300 - ok
      11:59:12.0305 0192 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
      11:59:12.0305 0192 ql40xx - ok
      11:59:12.0355 0192 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
      11:59:12.0358 0192 QWAVE - ok
      11:59:12.0364 0192 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
      11:59:12.0364 0192 QWAVEdrv - ok
      11:59:12.0375 0192 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
      11:59:12.0375 0192 RasAcd - ok
      11:59:12.0393 0192 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
      11:59:12.0394 0192 RasAgileVpn - ok
      11:59:12.0406 0192 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
      11:59:12.0409 0192 RasAuto - ok
      11:59:12.0415 0192 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
      11:59:12.0416 0192 Rasl2tp - ok
      11:59:12.0431 0192 [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan C:\Windows\System32\rasmans.dll
      11:59:12.0435 0192 RasMan - ok
      11:59:12.0440 0192 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
      11:59:12.0441 0192 RasPppoe - ok
      11:59:12.0447 0192 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
      11:59:12.0447 0192 RasSstp - ok
      11:59:12.0476 0192 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
      11:59:12.0478 0192 rdbss - ok
      11:59:12.0483 0192 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
      11:59:12.0483 0192 rdpbus - ok
      11:59:12.0506 0192 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
      11:59:12.0507 0192 RDPCDD - ok
      11:59:12.0526 0192 [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
      11:59:12.0527 0192 RDPDR - ok
      11:59:12.0553 0192 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
      11:59:12.0553 0192 RDPENCDD - ok
      11:59:12.0572 0192 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
      11:59:12.0573 0192 RDPREFMP - ok
      11:59:12.0589 0192 [ 68A0387F58E226DEEE23D9715955572A ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
      11:59:12.0589 0192 RdpVideoMiniport - ok
      11:59:12.0617 0192 [ 288B06960D78428FF89E811632684E20 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
      11:59:12.0618 0192 RDPWD - ok
      11:59:12.0652 0192 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
      11:59:12.0653 0192 rdyboost - ok
      11:59:12.0679 0192 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
      11:59:12.0681 0192 RemoteAccess - ok
      11:59:12.0694 0192 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
      11:59:12.0696 0192 RemoteRegistry - ok
      11:59:12.0757 0192 [ F12A68ED55053940CADD59CA5E3468DD ] RichVideo C:\Program Files\CyberLink\Shared files\RichVideo.exe
      11:59:12.0759 0192 RichVideo - ok
      11:59:12.0765 0192 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
      11:59:12.0767 0192 RpcEptMapper - ok
      11:59:12.0791 0192 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
      11:59:12.0792 0192 RpcLocator - ok
      11:59:12.0813 0192 [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs C:\Windows\system32\rpcss.dll
      11:59:12.0817 0192 RpcSs - ok
      11:59:12.0855 0192 [ FD692C6FFADE58F7C4C3C3C9A0EC35BD ] RsFx0103 C:\Windows\system32\DRIVERS\RsFx0103.sys
      11:59:12.0856 0192 RsFx0103 - ok
      11:59:12.0862 0192 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
      11:59:12.0862 0192 rspndr - ok
      11:59:12.0904 0192 [ 027158280EDF528EE322CFD00AE9E9BE ] RT61 C:\Windows\system32\DRIVERS\rt61.sys
      11:59:12.0906 0192 RT61 - ok
      11:59:12.0983 0192 [ 2C358271F0A50167BA3DFB6A2C35607A ] RTHDMIAzAudService C:\Windows\system32\drivers\RtHDMIV.sys
      11:59:12.0985 0192 RTHDMIAzAudService - ok
      11:59:13.0019 0192 [ 64CA613324D8BD0B278420ED4959AFD9 ] RTL8167 C:\Windows\system32\DRIVERS\Rt86win7.sys
      11:59:13.0020 0192 RTL8167 - ok
      11:59:13.0051 0192 [ 7FA7F2E249A5DCBB7970630E15E1F482 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
      11:59:13.0051 0192 s3cap - ok
      11:59:13.0066 0192 [ 81951F51E318AECC2D68559E47485CC4 ] SamSs C:\Windows\system32\lsass.exe
      11:59:13.0067 0192 SamSs - ok
      11:59:13.0092 0192 [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
      11:59:13.0093 0192 sbp2port - ok
      11:59:13.0100 0192 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
      11:59:13.0102 0192 SCardSvr - ok
      11:59:13.0108 0192 [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
      11:59:13.0108 0192 scfilter - ok
      11:59:13.0147 0192 [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule C:\Windows\system32\schedsvc.dll
      11:59:13.0153 0192 Schedule - ok
      11:59:13.0206 0192 [ 738187CE167D51240EC945F42743D0E5 ] SCPDFReadSpool C:\Windows\Installer\MSI6E53.tmp
      11:59:13.0207 0192 SCPDFReadSpool - ok
      11:59:13.0225 0192 [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc C:\Windows\System32\certprop.dll
      11:59:13.0225 0192 SCPolicySvc - ok
      11:59:13.0248 0192 [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC C:\Windows\System32\SDRSVC.dll
      11:59:13.0251 0192 SDRSVC - ok
      11:59:13.0268 0192 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
      11:59:13.0268 0192 secdrv - ok
      11:59:13.0274 0192 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
      11:59:13.0276 0192 seclogon - ok
      11:59:13.0282 0192 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll
      11:59:13.0285 0192 SENS - ok
      11:59:13.0308 0192 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
      11:59:13.0310 0192 SensrSvc - ok
      11:59:13.0321 0192 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
      11:59:13.0321 0192 Serenum - ok
      11:59:13.0327 0192 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
      11:59:13.0328 0192 Serial - ok
      11:59:13.0368 0192 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
      11:59:13.0368 0192 sermouse - ok
      11:59:13.0393 0192 [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv C:\Windows\system32\sessenv.dll
      11:59:13.0396 0192 SessionEnv - ok
      11:59:13.0409 0192 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
      11:59:13.0409 0192 sffdisk - ok
      11:59:13.0423 0192 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
      11:59:13.0423 0192 sffp_mmc - ok
      11:59:13.0433 0192 [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
      11:59:13.0433 0192 sffp_sd - ok
      11:59:13.0446 0192 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
      11:59:13.0446 0192 sfloppy - ok
      11:59:13.0489 0192 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
      11:59:13.0491 0192 SharedAccess - ok
      11:59:13.0517 0192 [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
      11:59:13.0521 0192 ShellHWDetection - ok
      11:59:13.0537 0192 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\drivers\sisagp.sys
      11:59:13.0538 0192 sisagp - ok
      11:59:13.0544 0192 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
      11:59:13.0544 0192 SiSRaid2 - ok
      11:59:13.0550 0192 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
      11:59:13.0551 0192 SiSRaid4 - ok
      11:59:13.0669 0192 [ 753D254205E0A62100A050BD8B458D06 ] Skype C2C Service C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
      11:59:13.0684 0192 Skype C2C Service - ok
      11:59:13.0751 0192 [ DDAA5F4A6B958FC313EBD02DD925752F ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
      11:59:13.0752 0192 SkypeUpdate - ok
      11:59:13.0769 0192 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
      11:59:13.0770 0192 Smb - ok
      11:59:13.0800 0192 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
      11:59:13.0803 0192 SNMPTRAP - ok
      11:59:13.0812 0192 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
      11:59:13.0812 0192 spldr - ok
      11:59:13.0848 0192 [ 866A43013535DC8587C258E43579C764 ] Spooler C:\Windows\System32\spoolsv.exe
      11:59:13.0851 0192 Spooler - ok
      11:59:13.0916 0192 [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc C:\Windows\system32\sppsvc.exe
      11:59:13.0934 0192 sppsvc - ok
      11:59:13.0972 0192 [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify C:\Windows\system32\sppuinotify.dll
      11:59:13.0974 0192 sppuinotify - ok
      11:59:14.0003 0192 [ CDDDEC541BC3C96F91ECB48759673505 ] sptd C:\Windows\system32\Drivers\sptd.sys
      11:59:14.0004 0192 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: CDDDEC541BC3C96F91ECB48759673505
      11:59:14.0008 0192 sptd ( LockedFile.Multi.Generic ) - warning
      11:59:14.0008 0192 sptd - detected LockedFile.Multi.Generic (1)
      11:59:14.0036 0192 [ A687B5B326AFCFCF182C4931D1FF9771 ] SQLAgent$SQLEXPRESS C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE
      11:59:14.0038 0192 SQLAgent$SQLEXPRESS - ok
      11:59:14.0102 0192 [ B54B48F6D92423440C264E91225C5FF1 ] SQLBrowser C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
      11:59:14.0104 0192 SQLBrowser - ok
      11:59:14.0147 0192 [ 637A0F23F9012358E92E6F99835494D1 ] SQLWriter C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
      11:59:14.0148 0192 SQLWriter - ok
      11:59:14.0175 0192 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv C:\Windows\system32\DRIVERS\srv.sys
      11:59:14.0177 0192 srv - ok
      11:59:14.0186 0192 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
      11:59:14.0188 0192 srv2 - ok
      11:59:14.0202 0192 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
      11:59:14.0203 0192 srvnet - ok
      11:59:14.0210 0192 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
      11:59:14.0213 0192 SSDPSRV - ok
      11:59:14.0221 0192 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
      11:59:14.0223 0192 SstpSvc - ok
      11:59:14.0248 0192 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
      11:59:14.0248 0192 stexstor - ok
      11:59:14.0269 0192 [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc C:\Windows\System32\wiaservc.dll
      11:59:14.0274 0192 StiSvc - ok
      11:59:14.0303 0192 [ 472AF0311073DCECEAA8FA18BA2BDF89 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
      11:59:14.0303 0192 storflt - ok
      11:59:14.0316 0192 [ DCAFFD62259E0BDB433DD67B5BB37619 ] storvsc C:\Windows\system32\drivers\storvsc.sys
      11:59:14.0317 0192 storvsc - ok
      11:59:14.0323 0192 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\drivers\swenum.sys
      11:59:14.0323 0192 swenum - ok
      11:59:14.0338 0192 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
      11:59:14.0342 0192 swprv - ok
      11:59:14.0403 0192 [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain C:\Windows\system32\sysmain.dll
      11:59:14.0411 0192 SysMain - ok
      11:59:14.0429 0192 [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll
      11:59:14.0432 0192 TabletInputService - ok
      11:59:14.0466 0192 [ 613BF4820361543956909043A265C6AC ] TapiSrv C:\Windows\System32\tapisrv.dll
      11:59:14.0470 0192 TapiSrv - ok
      11:59:14.0476 0192 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
      11:59:14.0479 0192 TBS - ok
      11:59:14.0558 0192 [ 65D10B191C59C5501A1263FC33F6894B ] Tcpip C:\Windows\system32\drivers\tcpip.sys
      11:59:14.0565 0192 Tcpip - ok
      11:59:14.0592 0192 [ 65D10B191C59C5501A1263FC33F6894B ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
      11:59:14.0598 0192 TCPIP6 - ok
      11:59:14.0637 0192 [ CCA24162E055C3714CE5A88B100C64ED ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
      11:59:14.0637 0192 tcpipreg - ok
      11:59:14.0672 0192 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
      11:59:14.0673 0192 TDPIPE - ok
      11:59:14.0691 0192 [ 2C10395BAA4847F83042813C515CC289 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
      11:59:14.0692 0192 TDTCP - ok
      11:59:14.0713 0192 [ B459575348C20E8121D6039DA063C704 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
      11:59:14.0714 0192 tdx - ok
      11:59:14.0732 0192 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD C:\Windows\system32\drivers\termdd.sys
      11:59:14.0732 0192 TermDD - ok
      11:59:14.0759 0192 [ 382C804C92811BE57829D8E550A900E2 ] TermService C:\Windows\System32\termsrv.dll
      11:59:14.0764 0192 TermService - ok
      11:59:14.0771 0192 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
      11:59:14.0774 0192 Themes - ok
      11:59:14.0845 0192 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
      11:59:14.0847 0192 THREADORDER - ok
      11:59:14.0854 0192 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
      11:59:14.0856 0192 TrkWks - ok
      11:59:14.0928 0192 [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
      11:59:14.0929 0192 TrustedInstaller - ok
      11:59:14.0953 0192 [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
      11:59:14.0954 0192 tssecsrv - ok
      11:59:14.0975 0192 [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
      11:59:14.0976 0192 TsUsbFlt - ok
      11:59:15.0030 0192 [ 17A24330E757F11A1B0A29C8AA99E93A ] TuneUp.UtilitiesSvc C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
      11:59:15.0038 0192 TuneUp.UtilitiesSvc - ok
      11:59:15.0053 0192 [ F2107C9D85EC0DF116939CCCE06AE697 ] TuneUpUtilitiesDrv C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys
      11:59:15.0054 0192 TuneUpUtilitiesDrv - ok
      11:59:15.0088 0192 [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
      11:59:15.0089 0192 tunnel - ok
      11:59:15.0103 0192 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
      11:59:15.0104 0192 uagp35 - ok
      11:59:15.0120 0192 [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs C:\Windows\system32\DRIVERS\udfs.sys
      11:59:15.0122 0192 udfs - ok
      11:59:15.0138 0192 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
      11:59:15.0141 0192 UI0Detect - ok
      11:59:15.0181 0192 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
      11:59:15.0182 0192 uliagpkx - ok
      11:59:15.0191 0192 [ D295BED4B898F0FD999FCFA9B32B071B ] umbus C:\Windows\system32\drivers\umbus.sys
      11:59:15.0192 0192 umbus - ok
      11:59:15.0212 0192 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
      11:59:15.0213 0192 UmPass - ok
      11:59:15.0237 0192 [ 409994A8EACEEE4E328749C0353527A0 ] UmRdpService C:\Windows\System32\umrdp.dll
      11:59:15.0240 0192 UmRdpService - ok
      11:59:15.0279 0192 [ D0CB75386D9E89C864D808D64EC9160F ] UnlockerDriver5 C:\Program Files\Unlocker\UnlockerDriver5.sys
      11:59:15.0279 0192 UnlockerDriver5 - ok
      11:59:15.0296 0192 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
      11:59:15.0300 0192 upnphost - ok
      11:59:15.0340 0192 [ 1D9F2BD026E8E2D45033A4DF3F16B78C ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
      11:59:15.0341 0192 usbaudio - ok
      11:59:15.0353 0192 [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
      11:59:15.0353 0192 usbccgp - ok
      11:59:15.0367 0192 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\drivers\usbcir.sys
      11:59:15.0368 0192 usbcir - ok
      11:59:15.0382 0192 [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
      11:59:15.0383 0192 usbehci - ok
      11:59:15.0469 0192 [ E5B14557793164DB879EE56F5B59C3E2 ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys
      11:59:15.0470 0192 usbfilter - ok
      11:59:15.0482 0192 [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
      11:59:15.0483 0192 usbhub - ok
      11:59:15.0496 0192 [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
      11:59:15.0496 0192 usbohci - ok
      11:59:15.0512 0192 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
      11:59:15.0512 0192 usbprint - ok
      11:59:15.0527 0192 [ F991AB9CC6B908DB552166768176896A ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
      11:59:15.0528 0192 USBSTOR - ok
      11:59:15.0540 0192 [ 68DF884CF41CDADA664BEB01DAF67E3D ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
      11:59:15.0541 0192 usbuhci - ok
      11:59:15.0561 0192 [ 45F4E7BF43DB40A6C6B4D92C76CBC3F2 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
      11:59:15.0562 0192 usbvideo - ok
      11:59:15.0584 0192 [ 2CDEA42B09DC5B3705F06939ADBD2FE4 ] UserAccess7 C:\Windows\system32\UAService7.exe
      11:59:15.0587 0192 UserAccess7 - ok
      11:59:15.0594 0192 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
      11:59:15.0597 0192 UxSms - ok
      11:59:15.0653 0192 [ 0BFBA6CC496C832FCF96605885B0AA4B ] UxTuneUp C:\Windows\System32\uxtuneup.dll
      11:59:15.0656 0192 UxTuneUp - ok
      11:59:15.0666 0192 [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc C:\Windows\system32\lsass.exe
      11:59:15.0667 0192 VaultSvc - ok
      11:59:15.0702 0192 [ 1D7E97B590D36CFB228C7DB30DA83992 ] VBoxDrv C:\Windows\system32\DRIVERS\VBoxDrv.sys
      11:59:15.0703 0192 VBoxDrv - ok
      11:59:15.0710 0192 [ 67DD12DDA776F1CDF449B88BB65287B7 ] VBoxNetFlt C:\Windows\system32\DRIVERS\VBoxNetFlt.sys
      11:59:15.0711 0192 VBoxNetFlt - ok
      11:59:15.0743 0192 [ 7459A6F18B334BE79C0546AC9A7B5A3C ] VBoxUSB C:\Windows\system32\Drivers\VBoxUSB.sys
      11:59:15.0744 0192 VBoxUSB - ok
      11:59:15.0788 0192 [ 3530AE9D65AB9CDA3F5E3ACBC485895E ] VBoxUSBMon C:\Windows\system32\DRIVERS\VBoxUSBMon.sys
      11:59:15.0789 0192 VBoxUSBMon - ok
      11:59:15.0811 0192 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
      11:59:15.0812 0192 vdrvroot - ok
      11:59:15.0849 0192 [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds C:\Windows\System32\vds.exe
      11:59:15.0854 0192 vds - ok
      11:59:15.0875 0192 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
      11:59:15.0876 0192 vga - ok
      11:59:15.0899 0192 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
      11:59:15.0900 0192 VgaSave - ok
      11:59:15.0908 0192 [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
      11:59:15.0909 0192 vhdmp - ok
      11:59:15.0928 0192 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\drivers\viaagp.sys
      11:59:15.0929 0192 viaagp - ok
      11:59:15.0952 0192 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
      11:59:15.0953 0192 ViaC7 - ok
      11:59:16.0169 0192 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\drivers\viaide.sys
      11:59:16.0169 0192 viaide - ok
      11:59:16.0184 0192 [ C2F2911156FDC7817C52829C86DA494E ] vmbus C:\Windows\system32\drivers\vmbus.sys
      11:59:16.0185 0192 vmbus - ok
      11:59:16.0200 0192 [ D4D77455211E204F370D08F4963063CE ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
      11:59:16.0200 0192 VMBusHID - ok
      11:59:16.0219 0192 [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr C:\Windows\system32\drivers\volmgr.sys
      11:59:16.0219 0192 volmgr - ok
      11:59:16.0232 0192 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
      11:59:16.0234 0192 volmgrx - ok
      11:59:16.0252 0192 [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap C:\Windows\system32\drivers\volsnap.sys
      11:59:16.0253 0192 volsnap - ok
      11:59:16.0261 0192 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
      11:59:16.0262 0192 vsmraid - ok
      11:59:16.0339 0192 [ 5A2DDC5411A092BEDB1A07755E087784 ] VSPerfDrv100 C:\Program Files\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\VSPerfDrv100.sys
      11:59:16.0339 0192 VSPerfDrv100 - ok
      11:59:16.0377 0192 [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS C:\Windows\system32\vssvc.exe
      11:59:16.0385 0192 VSS - ok
      11:59:16.0397 0192 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
      11:59:16.0397 0192 vwifibus - ok
      11:59:16.0404 0192 [ 7090D3436EEB4E7DA3373090A23448F7 ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
      11:59:16.0405 0192 vwififlt - ok
      11:59:16.0414 0192 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
      11:59:16.0418 0192 W32Time - ok
      11:59:16.0440 0192 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
      11:59:16.0441 0192 WacomPen - ok
      11:59:16.0476 0192 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
      11:59:16.0477 0192 WANARP - ok
      11:59:16.0483 0192 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
      11:59:16.0483 0192 Wanarpv6 - ok
      11:59:16.0540 0192 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
      11:59:16.0547 0192 WatAdminSvc - ok
      11:59:16.0609 0192 [ 691E3285E53DCA558E1A84667F13E15A ] wbengine C:\Windows\system32\wbengine.exe
      11:59:16.0618 0192 wbengine - ok
      11:59:16.0627 0192 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
      11:59:16.0630 0192 WbioSrvc - ok
      11:59:16.0696 0192 [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc C:\Windows\System32\wcncsvc.dll
      11:59:16.0700 0192 wcncsvc - ok
      11:59:16.0713 0192 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
      11:59:16.0716 0192 WcsPlugInService - ok
      11:59:16.0727 0192 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
      11:59:16.0727 0192 Wd - ok
      11:59:16.0738 0192 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
      11:59:16.0740 0192 Wdf01000 - ok
      11:59:16.0748 0192 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
      11:59:16.0751 0192 WdiServiceHost - ok
      11:59:16.0758 0192 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
      11:59:16.0760 0192 WdiSystemHost - ok
      11:59:16.0782 0192 [ A9D880F97530D5B8FEE278923349929D ] WebClient C:\Windows\System32\webclnt.dll
      11:59:16.0786 0192 WebClient - ok
      11:59:16.0794 0192 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
      11:59:16.0797 0192 Wecsvc - ok
      11:59:16.0805 0192 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
      11:59:16.0807 0192 wercplsupport - ok
      11:59:16.0815 0192 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
      11:59:16.0818 0192 WerSvc - ok
      11:59:16.0829 0192 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
      11:59:16.0830 0192 WfpLwf - ok
      11:59:16.0848 0192 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
      11:59:16.0848 0192 WIMMount - ok
      11:59:16.0919 0192 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
      11:59:16.0923 0192 WinDefend - ok
      11:59:16.0940 0192 WinHttpAutoProxySvc - ok
      11:59:16.0995 0192 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
      11:59:16.0996 0192 Winmgmt - ok
      11:59:17.0027 0192 [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM C:\Windows\system32\WsmSvc.dll
      11:59:17.0036 0192 WinRM - ok
      11:59:17.0067 0192 [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
      11:59:17.0067 0192 WinUsb - ok
      11:59:17.0096 0192 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
      11:59:17.0103 0192 Wlansvc - ok
      11:59:17.0176 0192 [ FB01D4AE207B9EFDBABFC55DC95C7E31 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
      11:59:17.0184 0192 wlidsvc - ok
      11:59:17.0210 0192 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
      11:59:17.0211 0192 WmiAcpi - ok
      11:59:17.0249 0192 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
      11:59:17.0250 0192 wmiApSrv - ok
      11:59:17.0304 0192 [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
      11:59:17.0310 0192 WMPNetworkSvc - ok
      11:59:17.0328 0192 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
      11:59:17.0330 0192 WPCSvc - ok
      11:59:17.0355 0192 [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
      11:59:17.0358 0192 WPDBusEnum - ok
      11:59:17.0374 0192 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
      11:59:17.0374 0192 ws2ifsl - ok
      11:59:17.0389 0192 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\System32\wscsvc.dll
      11:59:17.0392 0192 wscsvc - ok
      11:59:17.0399 0192 WSearch - ok
      11:59:17.0479 0192 [ 3026418A50C5B4761BEFA632CEDB7406 ] wuauserv C:\Windows\system32\wuaueng.dll
      11:59:17.0491 0192 wuauserv - ok
      11:59:17.0561 0192 [ E714A1C0354636837E20CCBF00888EE7 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
      11:59:17.0562 0192 WudfPf - ok
      11:59:17.0577 0192 [ 1023EE888C9B47178C5293ED5336AB69 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
      11:59:17.0578 0192 WUDFRd - ok
      11:59:17.0595 0192 [ 8D1E1E529A2C9E9B6A85B55A345F7629 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
      11:59:17.0598 0192 wudfsvc - ok
      11:59:17.0636 0192 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll
      11:59:17.0640 0192 WwanSvc - ok
      11:59:17.0709 0192 [ 74EC37B9EAF9FCA015B933A526825C7A ] {B154377D-700F-42cc-9474-23858FBDF4BD} C:\Program Files\CyberLink\PowerDVD9\000.fcl
      11:59:17.0710 0192 {B154377D-700F-42cc-9474-23858FBDF4BD} - ok
      11:59:17.0727 0192 ================ Scan global ===============================
      11:59:17.0763 0192 [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll
      11:59:17.0784 0192 [ 183B4188D5D91B271613EC3EFD1B3CEF ] C:\Windows\system32\winsrv.dll
      11:59:17.0791 0192 [ 183B4188D5D91B271613EC3EFD1B3CEF ] C:\Windows\system32\winsrv.dll
      11:59:17.0803 0192 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
      11:59:17.0808 0192 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
      11:59:17.0812 0192 [Global] - ok
      11:59:17.0812 0192 ================ Scan MBR ==================================
      11:59:17.0824 0192 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
      11:59:18.0136 0192 \Device\Harddisk0\DR0 - ok
      11:59:18.0140 0192 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
      11:59:19.0949 0192 \Device\Harddisk1\DR1 - ok
      11:59:19.0953 0192 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk2\DR2
      11:59:21.0786 0192 \Device\Harddisk2\DR2 - ok
      11:59:21.0786 0192 ================ Scan VBR ==================================
      11:59:21.0802 0192 [ F62B85EF94D904AD3AE9E3459F29B5B3 ] \Device\Harddisk0\DR0\Partition1
      11:59:21.0803 0192 \Device\Harddisk0\DR0\Partition1 - ok
      11:59:21.0806 0192 [ 76F0121DDF994D33D7445CE825360BDA ] \Device\Harddisk1\DR1\Partition1
      11:59:21.0807 0192 \Device\Harddisk1\DR1\Partition1 - ok
      11:59:21.0811 0192 [ 47C238410983A91EF5482CE98DB99AFF ] \Device\Harddisk2\DR2\Partition1
      11:59:21.0812 0192 \Device\Harddisk2\DR2\Partition1 - ok
      11:59:21.0812 0192 ============================================================
      11:59:21.0812 0192 Scan finished
      11:59:21.0812 0192 ============================================================
      11:59:21.0818 2596 Detected object count: 1
      11:59:21.0818 2596 Actual detected object count: 1
      11:59:27.0281 2596 sptd ( LockedFile.Multi.Generic ) - skipped by user
      11:59:27.0281 2596 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
      Espero tu respuesta. Gracias :).

    5. #25
      Usuario Avatar de [anD]
      Registrado
      sep 2008
      Ubicación
      Peru
      Mensajes
      65

      Re: Autorun.inf - $RECYCLE.BIN - System Volume Information

      Hola MArr0n, espero no te olvides de mi! u.u
      Solo quería decir que probé en los usbs y borre manualmente el RECYCLER de uno y no volvió a aparecer ni a contagiarlo al insertarlo ala PC, encontré carpetas ocultas que no puedo ponerlas normal, bueno al parecer ya no hay virus pero de eso no estoy tan seguro, la Pc aun se prende mas lenta de lo que era antes de la contaminación, espero saber de ti pronto!

      Gracias y Saludos!

    6. #26
      Ex-Colaborador Avatar de Marr0n
      Registrado
      mar 2010
      Ubicación
      Catalunya
      Mensajes
      5.871

      Re: Autorun.inf - $RECYCLE.BIN - System Volume Information

      De nada.

      Perdona por tardar tanto en contestar, he estado muy liado.

      Sube dicho archivo que te detectaba el tdskiller a: www.virustotal.com y me pones el link ya con el archivo subido para que yo pueda verlo.

      Pon me capturas de pantalla (ya te lo expliqué) de las carpetas/dispositivos en los cuales antes te aparecían (Autorun.inf - $RECYCLE.BIN - System Volume Information).

      De la lentitud ya hablaremos.

      Salu2.
      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    Página 3 de 3 PrimeroPrimero 123