• Registrarse
  • Iniciar sesión


  • Página 2 de 4 PrimeroPrimero 1234 ÚltimoÚltimo
    Resultados 11 al 20 de 38

    No puedo actualizar windows 7 home premium

    OK, mi pc de sobre messa lleva desde antes de navidades que tiene el archivo: c:\windows\system32\services.exe infectado, no sabia como solucionarlo ya que es un archivo del sistema, hasta intente reemplazarlo pero no encontré ningun ...

    1. #11
      Usuario Avatar de abelique
      Registrado
      dic 2011
      Ubicación
      barcelona
      Mensajes
      24

      Re: No puedo actualizar windows 7 home premium

      OK, mi pc de sobre messa lleva desde antes de navidades que tiene el archivo: c:\windows\system32\services.exe infectado, no sabia como solucionarlo ya que es un archivo del sistema, hasta intente reemplazarlo pero no encontré
      ningun metodo para hacerlo, si no te importa Anleg_30 realizo tus pasos en los dos ordenadores y te dejo los reportes,

      Sobre messa=========>
      reporte de TDSSKiller:
      13:24:40.0020 4756 TDSS rootkit removing tool 2.8.13.0 Oct 12 2012 17:26:47
      13:24:40.0200 4756 ============================================================
      13:24:40.0200 4756 Current date / time: 2012/10/31 13:24:40.0200
      13:24:40.0200 4756 SystemInfo:
      13:24:40.0200 4756
      13:24:40.0200 4756 OS Version: 6.0.6002 ServicePack: 2.0
      13:24:40.0200 4756 Product type: Workstation
      13:24:40.0200 4756 ComputerName: ULTIMATE
      13:24:40.0200 4756 UserName: Abelique
      13:24:40.0200 4756 Windows directory: C:\Windows
      13:24:40.0200 4756 System windows directory: C:\Windows
      13:24:40.0200 4756 Running under WOW64
      13:24:40.0200 4756 Processor architecture: Intel x64
      13:24:40.0200 4756 Number of processors: 2
      13:24:40.0201 4756 Page size: 0x1000
      13:24:40.0201 4756 Boot type: Normal boot
      13:24:40.0201 4756 ============================================================
      13:24:42.0434 4756 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
      13:24:42.0439 4756 ============================================================
      13:24:42.0439 4756 \Device\Harddisk0\DR0:
      13:24:42.0439 4756 MBR partitions:
      13:24:42.0439 4756 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xC803400
      13:24:42.0439 4756 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xC80343F, BlocksNum 0x190029BD
      13:24:42.0439 4756 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x25805DFC, BlocksNum 0x14B7EE45
      13:24:42.0439 4756 ============================================================
      13:24:42.0517 4756 C: <-> \Device\Harddisk0\DR0\Partition1
      13:24:42.0661 4756 D: <-> \Device\Harddisk0\DR0\Partition2
      13:24:42.0715 4756 E: <-> \Device\Harddisk0\DR0\Partition3
      13:24:42.0715 4756 ============================================================
      13:24:42.0715 4756 Initialize success
      13:24:42.0715 4756 ============================================================
      13:25:05.0527 4776 ============================================================
      13:25:05.0528 4776 Scan started
      13:25:05.0528 4776 Mode: Manual; SigCheck; TDLFS;
      13:25:05.0528 4776 ============================================================
      13:25:06.0601 4776 ================ Scan system memory ========================
      13:25:06.0601 4776 System memory - ok
      13:25:06.0601 4776 ================ Scan services =============================
      13:25:06.0815 4776 [ 1965AAFFAB07E3FB03C77F81BEBA3547 ] ACPI C:\Windows\system32\drivers\acpi.sys
      13:25:07.0004 4776 ACPI - ok
      13:25:07.0103 4776 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
      13:25:07.0121 4776 AdobeARMservice - ok
      13:25:07.0263 4776 [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
      13:25:07.0285 4776 AdobeFlashPlayerUpdateSvc - ok
      13:25:07.0340 4776 [ 9137451D37BA1C325CD6C2DEF3D2D692 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
      13:25:07.0369 4776 adp94xx - ok
      13:25:07.0415 4776 [ 01F80898DF5CC7DF19B3B11351846263 ] adpahci C:\Windows\system32\drivers\adpahci.sys
      13:25:07.0505 4776 adpahci - ok
      13:25:07.0535 4776 [ DA001DB13FFF45DFE9109936E265B7CC ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
      13:25:07.0551 4776 adpu160m - ok
      13:25:07.0570 4776 [ 2B10C35C5B7C5C0C28F572E035319602 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
      13:25:07.0585 4776 adpu320 - ok
      13:25:07.0682 4776 [ 96D6CDD0B32846E8CFBE592F4F32E608 ] AdvancedSystemCareService5 C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
      13:25:07.0708 4776 AdvancedSystemCareService5 - ok
      13:25:07.0784 4776 [ 0F421175574BFE0BF2F4D8E910A253BB ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
      13:25:07.0959 4776 AeLookupSvc - ok
      13:25:08.0009 4776 [ C4F6CE6087760AD70960C9EB130E7943 ] AFD C:\Windows\system32\drivers\afd.sys
      13:25:08.0081 4776 AFD - ok
      13:25:08.0099 4776 [ 5CCDD13BC602AE33CD8B62D33C29AB72 ] agp440 C:\Windows\system32\drivers\agp440.sys
      13:25:08.0115 4776 agp440 - ok
      13:25:08.0136 4776 [ 222CB641B4B8A1D1126F8033F9FD6A00 ] aic78xx C:\Windows\system32\drivers\djsvs.sys
      13:25:08.0154 4776 aic78xx - ok
      13:25:08.0185 4776 [ 5922F4F59B7868F3D74BBBBEB7B825A3 ] ALG C:\Windows\System32\alg.exe
      13:25:08.0327 4776 ALG - ok
      13:25:08.0361 4776 [ 157D0898D4B73F075CE9FA26B482DF98 ] aliide C:\Windows\system32\drivers\aliide.sys
      13:25:08.0378 4776 aliide - ok
      13:25:08.0392 4776 [ 970FA5059E61E30D25307B99903E991E ] amdide C:\Windows\system32\drivers\amdide.sys
      13:25:08.0410 4776 amdide - ok
      13:25:08.0427 4776 [ DE55DC52F7CEB89A967572D6B491ADA2 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
      13:25:08.0577 4776 AmdK8 - ok
      13:25:08.0604 4776 [ 71336E77F98A65EFAAEB950902611D3F ] AmFSM C:\Windows\system32\DRIVERS\amm6460.sys
      13:25:08.0630 4776 AmFSM - ok
      13:25:08.0721 4776 [ B11291CBC71231C373743055FB7F5B48 ] AppHostSvc C:\Windows\system32\inetsrv\apphostsvc.dll
      13:25:08.0762 4776 AppHostSvc - ok
      13:25:08.0813 4776 [ 9C37B3FD5615477CB9A0CD116CF43F5C ] Appinfo C:\Windows\System32\appinfo.dll
      13:25:08.0862 4776 Appinfo - ok
      13:25:08.0921 4776 [ 3DA98C07B18A676180FE7EED924D1673 ] AppMgmt C:\Windows\System32\appmgmts.dll
      13:25:08.0970 4776 AppMgmt - ok
      13:25:08.0984 4776 [ 2E8623F2FED998A97129A3DB919551C8 ] arc C:\Windows\system32\drivers\arc.sys
      13:25:09.0001 4776 arc - ok
      13:25:09.0038 4776 [ 741A003C041A3EC480A2E71AF71E9654 ] arcsas C:\Windows\system32\drivers\arcsas.sys
      13:25:09.0058 4776 arcsas - ok
      13:25:09.0099 4776 [ 68726474C69B738EAC3A62E06B33ADDC ] AsIO C:\Windows\syswow64\drivers\AsIO.sys
      13:25:09.0114 4776 AsIO - ok
      13:25:09.0169 4776 [ 22D13FF3DAFEC2A80634752B1EAA2DE6 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
      13:25:09.0242 4776 AsyncMac - ok
      13:25:09.0269 4776 [ E68D9B3A3905619732F7FE039466A623 ] atapi C:\Windows\system32\drivers\atapi.sys
      13:25:09.0291 4776 atapi - ok
      13:25:09.0365 4776 [ 788914C42AD8318F1DD7A565EAFFB049 ] athrusb C:\Windows\system32\DRIVERS\athrxusb.sys
      13:25:09.0481 4776 athrusb - ok
      13:25:09.0525 4776 [ 79318C744693EC983D20E9337A2F8196 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
      13:25:09.0599 4776 AudioEndpointBuilder - ok
      13:25:09.0609 4776 [ 79318C744693EC983D20E9337A2F8196 ] AudioSrv C:\Windows\System32\Audiosrv.dll
      13:25:09.0654 4776 AudioSrv - ok
      13:25:09.0688 4776 Beep - ok
      13:25:09.0737 4776 [ FFB96C2589FFA60473EAD78B39FBDE29 ] BFE C:\Windows\System32\bfe.dll
      13:25:09.0808 4776 BFE - ok
      13:25:09.0893 4776 [ 6D316F4859634071CC25C4FD4589AD2C ] BITS C:\Windows\System32\qmgr.dll
      13:25:10.0019 4776 BITS - ok
      13:25:10.0024 4776 blbdrive - ok
      13:25:10.0100 4776 [ 2348447A80920B2493A9B582A23E81E1 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
      13:25:10.0146 4776 bowser - ok
      13:25:10.0174 4776 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
      13:25:10.0226 4776 BrFiltLo - ok
      13:25:10.0254 4776 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
      13:25:10.0326 4776 BrFiltUp - ok
      13:25:10.0364 4776 [ A1B39DE453433B115B4EA69EE0343816 ] Browser C:\Windows\System32\browser.dll
      13:25:10.0416 4776 Browser - ok
      13:25:10.0438 4776 [ F0F0BA4D815BE446AA6A4583CA3BCA9B ] Brserid C:\Windows\system32\drivers\brserid.sys
      13:25:10.0511 4776 Brserid - ok
      13:25:10.0529 4776 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
      13:25:10.0606 4776 BrSerWdm - ok
      13:25:10.0631 4776 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
      13:25:10.0716 4776 BrUsbMdm - ok
      13:25:10.0734 4776 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
      13:25:10.0808 4776 BrUsbSer - ok
      13:25:10.0870 4776 [ 09F926A0D9C0BAFD8417A4307D2ED13C ] BthEnum C:\Windows\system32\DRIVERS\BthEnum.sys
      13:25:10.0916 4776 BthEnum - ok
      13:25:10.0940 4776 [ 72F70A38BB15252EB7C4DA7BA3BD4ED1 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
      13:25:10.0991 4776 BTHMODEM - ok
      13:25:11.0019 4776 [ BEFC5311736B475AC5B60C14FF7C775A ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
      13:25:11.0064 4776 BthPan - ok
      13:25:11.0144 4776 [ E1466882252FF51EDDE48C3F7EDA2591 ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys
      13:25:11.0226 4776 BTHPORT - ok
      13:25:11.0264 4776 [ 22E65FFD640F16968F855F5B3528D366 ] BthServ C:\Windows\System32\bthserv.dll
      13:25:11.0297 4776 BthServ - ok
      13:25:11.0352 4776 [ 970192CDED77A128E7E30722E5EE6B9C ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys
      13:25:11.0375 4776 BTHUSB - ok
      13:25:11.0391 4776 catchme - ok
      13:25:11.0436 4776 [ B4D787DB8D30793A4D4DF9FEED18F136 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
      13:25:11.0486 4776 cdfs - ok
      13:25:11.0540 4776 [ C025AA69BE3D0D25C7A2E746EF6F94FC ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
      13:25:11.0597 4776 cdrom - ok
      13:25:11.0660 4776 [ 5A268127633C7EE2A7FB87F39D748D56 ] CertPropSvc C:\Windows\System32\certprop.dll
      13:25:11.0698 4776 CertPropSvc - ok
      13:25:11.0754 4776 [ F28F00596824058BC61D5EDF434C9B82 ] circlass C:\Windows\system32\drivers\circlass.sys
      13:25:11.0845 4776 circlass - ok
      13:25:11.0873 4776 [ 2C0F16506BCBC80097D58099BC6BE4C0 ] CISVC C:\Windows\system32\CISVC.EXE
      13:25:11.0900 4776 CISVC - ok
      13:25:11.0930 4776 [ 3DCA9A18B204939CFB24BEA53E31EB48 ] CLFS C:\Windows\system32\CLFS.sys
      13:25:11.0991 4776 CLFS - ok
      13:25:12.0082 4776 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
      13:25:12.0111 4776 clr_optimization_v2.0.50727_32 - ok
      13:25:12.0157 4776 [ CE07A466201096F021CD09D631B21540 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
      13:25:12.0177 4776 clr_optimization_v2.0.50727_64 - ok
      13:25:12.0260 4776 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      13:25:12.0280 4776 clr_optimization_v4.0.30319_32 - ok
      13:25:12.0335 4776 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
      13:25:12.0352 4776 clr_optimization_v4.0.30319_64 - ok
      13:25:12.0368 4776 [ E5D5499A1C50A54B5161296B6AFE6192 ] cmdide C:\Windows\system32\drivers\cmdide.sys
      13:25:12.0385 4776 cmdide - ok
      13:25:12.0398 4776 [ 0E77A445640BF310817F60941C50560C ] Compbatt C:\Windows\system32\drivers\compbatt.sys
      13:25:12.0414 4776 Compbatt - ok
      13:25:12.0419 4776 COMSysApp - ok
      13:25:12.0453 4776 [ B1192DCD5B9CF46BEED0E2A9E5BCF59A ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
      13:25:12.0467 4776 crcdisk - ok
      13:25:12.0515 4776 [ CA78B312C44E4D52E842C2C8BD48E452 ] CryptSvc C:\Windows\system32\cryptsvc.dll
      13:25:12.0555 4776 CryptSvc - ok
      13:25:12.0605 4776 [ F60F50C8ED3FCBE358430B95FE27D09C ] CSC C:\Windows\system32\drivers\csc.sys
      13:25:12.0673 4776 CSC - ok
      13:25:12.0718 4776 [ 1B5F256D31836ED2BA60B3A6C800200C ] CscService C:\Windows\System32\cscsvc.dll
      13:25:12.0758 4776 CscService - ok
      13:25:12.0807 4776 [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] DcomLaunch C:\Windows\system32\rpcss.dll
      13:25:12.0853 4776 DcomLaunch - ok
      13:25:12.0887 4776 [ 8B722BA35205C71E7951CDC4CDBADE19 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
      13:25:12.0930 4776 DfsC - ok
      13:25:13.0042 4776 [ C647F468F7DE343DF8C143655C5557D4 ] DFSR C:\Windows\system32\DFSR.exe
      13:25:13.0281 4776 DFSR - ok
      13:25:13.0313 4776 [ 3ED0321127CE70ACDAABBF77E157C2A7 ] Dhcp C:\Windows\System32\dhcpcsvc.dll
      13:25:13.0353 4776 Dhcp - ok
      13:25:13.0401 4776 [ B0107E40ECDB5FA692EBF832F295D905 ] disk C:\Windows\system32\drivers\disk.sys
      13:25:13.0417 4776 disk - ok
      13:25:13.0452 4776 [ 06230F1B721494A6DF8D47FD395BB1B0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
      13:25:13.0482 4776 Dnscache - ok
      13:25:13.0524 4776 [ 1A7156DD1E850E9914E5E991E3225B94 ] dot3svc C:\Windows\System32\dot3svc.dll
      13:25:13.0572 4776 dot3svc - ok
      13:25:13.0607 4776 [ 1583B39790DB3EAEC7EDB0CB0140C708 ] DPS C:\Windows\system32\dps.dll
      13:25:13.0658 4776 DPS - ok
      13:25:13.0696 4776 [ F1A78A98CFC2EE02144C6BEC945447E6 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
      13:25:13.0742 4776 drmkaud - ok
      13:25:13.0811 4776 [ B8E554E502D5123BC111F99D6A2181B4 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
      13:25:13.0856 4776 DXGKrnl - ok
      13:25:13.0901 4776 [ D57FE09B575545738A73A0C193D0616A ] E1G60 C:\Windows\system32\DRIVERS\E1G6032E.sys
      13:25:13.0967 4776 E1G60 - ok
      13:25:14.0025 4776 [ C2303883FD9BE49DC36A6400643002EA ] EapHost C:\Windows\System32\eapsvc.dll
      13:25:14.0078 4776 EapHost - ok
      13:25:14.0106 4776 [ 5F94962BE5A62DB6E447FF6470C4F48A ] Ecache C:\Windows\system32\drivers\ecache.sys
      13:25:14.0129 4776 Ecache - ok
      13:25:14.0176 4776 [ 14CE384D2E27B64C256BDA4DC39C312D ] ehRecvr C:\Windows\ehome\ehRecvr.exe
      13:25:14.0232 4776 ehRecvr - ok
      13:25:14.0253 4776 [ B93159C1313D66FDFBBE876F5189CD52 ] ehSched C:\Windows\ehome\ehsched.exe
      13:25:14.0271 4776 ehSched - ok
      13:25:14.0309 4776 [ F5EE2527D74449868E3C3227A59BCD28 ] ehstart C:\Windows\ehome\ehstart.dll
      13:25:14.0355 4776 ehstart - ok
      13:25:14.0378 4776 [ 3D6298AFF3FE06C0616CE5D090A3EEAA ] elxstor C:\Windows\system32\drivers\elxstor.sys
      13:25:14.0402 4776 elxstor - ok
      13:25:14.0456 4776 [ A9B18B63A4FD6BAAB83326706D857FAB ] EMDMgmt C:\Windows\system32\emdmgmt.dll
      13:25:14.0520 4776 EMDMgmt - ok
      13:25:14.0575 4776 [ E12F22B73F153DECE721CD45EC05B4AF ] EventSystem C:\Windows\system32\es.dll
      13:25:14.0630 4776 EventSystem - ok
      13:25:14.0653 4776 [ 486844F47B6636044A42454614ED4523 ] exfat C:\Windows\system32\drivers\exfat.sys
      13:25:14.0706 4776 exfat - ok
      13:25:14.0731 4776 [ 1A4BEE34277784619DDAF0422C0C6E23 ] fastfat C:\Windows\system32\drivers\fastfat.sys
      13:25:14.0783 4776 fastfat - ok
      13:25:14.0857 4776 [ 989A776A2FF32A148FCF15C44058B129 ] Fax C:\Windows\system32\fxssvc.exe
      13:25:14.0906 4776 Fax - ok
      13:25:14.0932 4776 [ 61B6DBD1AD1143F008364D4E9A96B224 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
      13:25:14.0996 4776 fdc - ok
      13:25:15.0022 4776 [ BB9267ACACD8B7533DD936C34A0CBA5E ] fdPHost C:\Windows\system32\fdPHost.dll
      13:25:15.0102 4776 fdPHost - ok
      13:25:15.0146 4776 [ 300C80931EABBE1DB7591C516EFE8D0F ] FDResPub C:\Windows\system32\fdrespub.dll
      13:25:15.0238 4776 FDResPub - ok
      13:25:15.0275 4776 [ 457B7D1D533E4BD62A99AED9C7BB4C59 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
      13:25:15.0298 4776 FileInfo - ok
      13:25:15.0352 4776 [ 7A0E303A18B04771A9DFA64932B5AEE0 ] FileMonitor C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\wlh_amd64\FileMonitor.sys
      13:25:15.0385 4776 FileMonitor - ok
      13:25:15.0428 4776 [ D421327FD6EFCCAF884A54C58E1B0D7F ] Filetrace C:\Windows\system32\drivers\filetrace.sys
      13:25:15.0565 4776 Filetrace - ok
      13:25:15.0584 4776 [ 12C3D1B4D0CE49E1CE343BA2F22F15E0 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
      13:25:15.0708 4776 flpydisk - ok
      13:25:15.0750 4776 [ E3041BC26D6930D61F42AEDB79C91720 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
      13:25:15.0778 4776 FltMgr - ok
      13:25:15.0869 4776 [ BE1C5BD1CA7ED015BC6FA1AE67E592C8 ] FontCache C:\Windows\system32\FntCache.dll
      13:25:16.0003 4776 FontCache - ok
      13:25:16.0070 4776 [ BC5B0BE5AF3510B0FD8C140EE42C6D3E ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
      13:25:16.0090 4776 FontCache3.0.0.0 - ok
      13:25:16.0141 4776 [ 5779B86CD8B32519FBECB136394D946A ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
      13:25:16.0191 4776 Fs_Rec - ok
      13:25:16.0216 4776 [ 849E38DB7D829962D0233A0A252B60C3 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
      13:25:16.0242 4776 fvevol - ok
      13:25:16.0265 4776 [ B54520CC7B4B55134D7527B1CD3FC1F2 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
      13:25:16.0287 4776 gagp30kx - ok
      13:25:16.0343 4776 [ A0E1B575BA8F504968CD40C0FAEB2384 ] gpsvc C:\Windows\System32\gpsvc.dll
      13:25:16.0411 4776 gpsvc - ok
      13:25:16.0444 4776 [ BA207B48AA3D9D73FD4856400F852458 ] hcmon C:\Windows\system32\drivers\hcmon.sys
      13:25:16.0462 4776 hcmon - ok
      13:25:16.0516 4776 [ DF45F8142DC6DF9D18C39B3EFFBD0409 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
      13:25:16.0618 4776 HdAudAddService - ok
      13:25:16.0653 4776 [ F942C5820205F2FB453243EDFEC82A3D ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
      13:25:16.0738 4776 HDAudBus - ok
      13:25:16.0773 4776 [ B4881C84A180E75B8C25DC1D726C375F ] HidBth C:\Windows\system32\drivers\hidbth.sys
      13:25:16.0847 4776 HidBth - ok
      13:25:16.0864 4776 [ 4E77A77E2C986E8F88F996BB3E1AD829 ] HidIr C:\Windows\system32\drivers\hidir.sys
      13:25:16.0940 4776 HidIr - ok
      13:25:16.0976 4776 [ 59361D38A297755D46A540E450202B2A ] hidserv C:\Windows\System32\hidserv.dll
      13:25:17.0014 4776 hidserv - ok
      13:25:17.0057 4776 [ 443BDD2D30BB4F00795C797E2CF99EDF ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
      13:25:17.0133 4776 HidUsb - ok
      13:25:17.0175 4776 [ B12F367EA39C0795FD57E31242CE1A5A ] hkmsvc C:\Windows\system32\kmsvc.dll
      13:25:17.0250 4776 hkmsvc - ok
      13:25:17.0291 4776 [ 8EDC820115DF1E04763B2923676EA5B2 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
      13:25:17.0311 4776 HpCISSs - ok
      13:25:17.0361 4776 [ 098F1E4E5C9CB5B0063A959063631610 ] HTTP C:\Windows\system32\drivers\HTTP.sys
      13:25:17.0411 4776 HTTP - ok
      13:25:17.0438 4776 [ F2901763845570ECAC48E6A50EC50812 ] i2omp C:\Windows\system32\drivers\i2omp.sys
      13:25:17.0456 4776 i2omp - ok
      13:25:17.0514 4776 [ CBB597659A2713CE0C9CC20C88C7591F ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
      13:25:17.0547 4776 i8042prt - ok
      13:25:17.0578 4776 [ 72C3EE7EA3CD75A772E62AE0E5DF8B8C ] iaStorV C:\Windows\system32\drivers\iastorv.sys
      13:25:17.0601 4776 iaStorV - ok
      13:25:17.0666 4776 [ 749F5F8CEDCA70F2A512945325FC489D ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
      13:25:17.0720 4776 idsvc - ok
      13:25:17.0754 4776 [ 8C3951AD2FE886EF76C7B5027C3125D3 ] iirsp C:\Windows\system32\drivers\iirsp.sys
      13:25:17.0767 4776 iirsp - ok
      13:25:17.0831 4776 [ 0C9EA6E654E7B0471741E343A6C671AF ] IKEEXT C:\Windows\System32\ikeext.dll
      13:25:17.0865 4776 IKEEXT - ok
      13:25:17.0962 4776 [ 8AE99EBE30E8338907361018D9030835 ] IMFservice C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
      13:25:17.0984 4776 IMFservice - ok
      13:25:18.0085 4776 [ F04D22D7A49A1B2210DBADF0B803E870 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
      13:25:18.0173 4776 IntcAzAudAddService - ok
      13:25:18.0237 4776 [ DF797A12176F11B2D301C5B234BB200E ] intelide C:\Windows\system32\drivers\intelide.sys
      13:25:18.0252 4776 intelide - ok
      13:25:18.0289 4776 [ BFD84AF32FA1BAD6231C4585CB469630 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
      13:25:18.0341 4776 intelppm - ok
      13:25:18.0360 4776 [ 5624BC1BC5EEB49C0AB76A8114F05EA3 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
      13:25:18.0399 4776 IPBusEnum - ok
      13:25:18.0436 4776 [ D8AABC341311E4780D6FCE8C73C0AD81 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
      13:25:18.0484 4776 IpFilterDriver - ok
      13:25:18.0517 4776 [ BF0DBFA9792C5C14FA00F61C75116C1B ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
      13:25:18.0551 4776 iphlpsvc - ok
      13:25:18.0556 4776 IpInIp - ok
      13:25:18.0588 4776 [ EACDBBE429C6D170BDEEE0EFFCBC317B ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
      13:25:18.0650 4776 IPMIDRV - ok
      13:25:18.0679 4776 [ B7E6212F581EA5F6AB0C3A6CEEEB89BE ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
      13:25:18.0727 4776 IPNAT - ok
      13:25:18.0765 4776 [ 8C42CA155343A2F11D29FECA67FAA88D ] IRENUM C:\Windows\system32\drivers\irenum.sys
      13:25:18.0803 4776 IRENUM - ok
      13:25:18.0838 4776 [ D3BB520B31F28C1A065CD058E762EE73 ] isapnp C:\Windows\system32\drivers\isapnp.sys
      13:25:18.0854 4776 isapnp - ok
      13:25:18.0907 4776 [ E4FDF99599F27EC25D2CF6D754243520 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
      13:25:18.0929 4776 iScsiPrt - ok
      13:25:18.0951 4776 [ 63C766CDC609FF8206CB447A65ABBA4A ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
      13:25:18.0966 4776 iteatapi - ok
      13:25:19.0003 4776 [ 1281FE73B17664631D12F643CBEA3F59 ] iteraid C:\Windows\system32\drivers\iteraid.sys
      13:25:19.0019 4776 iteraid - ok
      13:25:19.0049 4776 [ 423696F3BA6472DD17699209B933BC26 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
      13:25:19.0068 4776 kbdclass - ok
      13:25:19.0080 4776 [ DBDF75D51464FBC47D0104EC3D572C05 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
      13:25:19.0113 4776 kbdhid - ok
      13:25:19.0134 4776 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] KeyIso C:\Windows\system32\lsass.exe
      13:25:19.0191 4776 KeyIso - ok
      13:25:19.0265 4776 [ 88956AD9FA510848AD176777A6C6C1F5 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
      13:25:19.0310 4776 KSecDD - ok
      13:25:19.0349 4776 [ 1D419CF43DB29396ECD7113D129D94EB ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
      13:25:19.0403 4776 ksthunk - ok
      13:25:19.0455 4776 [ 1FAF6926F3416D3DA05C5B265491BDAE ] KtmRm C:\Windows\system32\msdtckrm.dll
      13:25:19.0557 4776 KtmRm - ok
      13:25:19.0616 4776 [ 073508533E422CE8BCEE234EB35CEEBF ] L1E C:\Windows\system32\DRIVERS\L1E60x64.sys
      13:25:19.0648 4776 L1E - ok
      13:25:19.0688 4776 [ 50C7A3CB427E9BB5ED0708A669956AB5 ] LanmanServer C:\Windows\System32\srvsvc.dll
      13:25:19.0739 4776 LanmanServer - ok
      13:25:19.0764 4776 [ CAF86FC1388BE1E470F1A7B43E348ADB ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
      13:25:19.0826 4776 LanmanWorkstation - ok
      13:25:19.0868 4776 [ 96ECE2659B6654C10A0C310AE3A6D02C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
      13:25:19.0919 4776 lltdio - ok
      13:25:19.0963 4776 [ 961CCBD0B1CCB5675D64976FAE37D092 ] lltdsvc C:\Windows\System32\lltdsvc.dll
      13:25:20.0023 4776 lltdsvc - ok
      13:25:20.0048 4776 [ A47F8080CACC23C91FE823AD19AA5612 ] lmhosts C:\Windows\System32\lmhsvc.dll
      13:25:20.0099 4776 lmhosts - ok
      13:25:20.0138 4776 [ 1572F8D999C0AB4376AFDCE058A78DF9 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
      13:25:20.0162 4776 LSI_FC - ok
      13:25:20.0186 4776 [ 64470979C3E3C9FF60EDFB5230C56E0E ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
      13:25:20.0210 4776 LSI_SAS - ok
      13:25:20.0240 4776 [ 4CED7D3B54BFC5BBAE75C4A73C7F7428 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
      13:25:20.0262 4776 LSI_SCSI - ok
      13:25:20.0307 4776 [ 52F87B9CC8932C2A7375C3B2A9BE5E3E ] luafv C:\Windows\system32\drivers\luafv.sys
      13:25:20.0372 4776 luafv - ok
      13:25:20.0408 4776 [ A8FE8F2783B2929B56F5370A89356CE9 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
      13:25:20.0429 4776 MBAMProtector - ok
      13:25:20.0488 4776 [ 85B16A92B117A5A800032ECD904B86DB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
      13:25:20.0517 4776 MBAMScheduler - ok
      13:25:20.0569 4776 [ 20E2469DB709FC675E655CEAA11BE312 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
      13:25:20.0604 4776 MBAMService - ok
      13:25:20.0640 4776 [ 76A58DF02BD4EA29F189B82D0BEF17F8 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
      13:25:20.0754 4776 Mcx2Svc - ok
      13:25:20.0785 4776 [ 2F631C2939D5F2E8958935EE701D70D7 ] megasas C:\Windows\system32\drivers\megasas.sys
      13:25:20.0845 4776 megasas - ok
      13:25:20.0960 4776 Microsoft SharePoint Workspace Audit Service - ok
      13:25:20.0992 4776 [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] MMCSS C:\Windows\system32\mmcss.dll
      13:25:21.0057 4776 MMCSS - ok
      13:25:21.0082 4776 [ 59848D5CC74606F0EE7557983BB73C2E ] Modem C:\Windows\system32\drivers\modem.sys
      13:25:21.0132 4776 Modem - ok
      13:25:21.0169 4776 [ C247CC2A57E0A0C8C6DCCF7807B3E9E5 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
      13:25:21.0238 4776 monitor - ok
      13:25:21.0291 4776 [ 9367304E5E412B120CF5F4EA14E4E4F1 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
      13:25:21.0313 4776 mouclass - ok
      13:25:21.0341 4776 [ C2C2BD5C5CE5AAF786DDD74B75D2AC69 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
      13:25:21.0387 4776 mouhid - ok
      13:25:21.0408 4776 [ 11BC9B1E8801B01F7F6ADB9EAD30019B ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
      13:25:21.0427 4776 MountMgr - ok
      13:25:21.0504 4776 [ 4D7F2682D29B92A6251B17957AA0B985 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
      13:25:21.0523 4776 MozillaMaintenance - ok
      13:25:21.0555 4776 [ ED48EAC719EE28DB773359EB1B06E2B5 ] mpio C:\Windows\system32\drivers\mpio.sys
      13:25:21.0575 4776 mpio - ok
      13:25:21.0611 4776 [ C92B9ABDB65A5991E00C28F13491DBA2 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
      13:25:21.0671 4776 mpsdrv - ok
      13:25:21.0721 4776 [ 897E3BAF68BA406A61682AE39C83900C ] MpsSvc C:\Windows\system32\mpssvc.dll
      13:25:21.0775 4776 MpsSvc - ok
      13:25:21.0798 4776 [ 3C200630A89EF2C0864D515B7A75802E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
      13:25:21.0820 4776 Mraid35x - ok
      13:25:21.0837 4776 [ 7C1DE4AA96DC0C071611F9E7DE02A68D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
      13:25:21.0875 4776 MRxDAV - ok
      13:25:21.0923 4776 [ 1485811B320FF8C7EDAD1CAEBB1C6C2B ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
      13:25:21.0967 4776 mrxsmb - ok
      13:25:22.0025 4776 [ 3B929A60C833FC615FD97FBA82BC7632 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
      13:25:22.0071 4776 mrxsmb10 - ok
      13:25:22.0086 4776 [ C64AB3E1F53B4F5B5BB6D796B2D7BEC3 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
      13:25:22.0112 4776 mrxsmb20 - ok
      13:25:22.0135 4776 [ EEADF970795148BFBB1DB3ABCC89C16B ] msahci C:\Windows\system32\drivers\msahci.sys
      13:25:22.0156 4776 msahci - ok
      13:25:22.0186 4776 [ 96D7C0A1B98434C6E4FF0C2E26A0E20A ] msdsm C:\Windows\system32\drivers\msdsm.sys
      13:25:22.0209 4776 msdsm - ok
      13:25:22.0248 4776 [ 7EC02CE772F068ED0BEAFA3DA341A9BC ] MSDTC C:\Windows\System32\msdtc.exe
      13:25:22.0302 4776 MSDTC - ok
      13:25:22.0356 4776 [ 704F59BFC4512D2BB0146AEC31B10A7C ] Msfs C:\Windows\system32\drivers\Msfs.sys
      13:25:22.0413 4776 Msfs - ok
      13:25:22.0461 4776 [ 00EBC952961664780D43DCA157E79B27 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
      13:25:22.0477 4776 msisadrv - ok
      13:25:22.0517 4776 [ 366B0C1F4478B519C181E37D43DCDA32 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
      13:25:22.0569 4776 MSiSCSI - ok
      13:25:22.0574 4776 msiserver - ok
      13:25:22.0601 4776 [ 0EA73E498F53B96D83DBFCA074AD4CF8 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
      13:25:22.0642 4776 MSKSSRV - ok
      13:25:22.0660 4776 [ 52E59B7E992A58E740AA63F57EDBAE8B ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
      13:25:22.0705 4776 MSPCLOCK - ok
      13:25:22.0738 4776 [ 49084A75BAE043AE02D5B44D02991BB2 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
      13:25:22.0776 4776 MSPQM - ok
      13:25:22.0825 4776 [ DC6CCF440CDEDE4293DB41C37A5060A5 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
      13:25:22.0842 4776 MsRPC - ok
      13:25:22.0854 4776 [ 855796E59DF77EA93AF46F20155BF55B ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
      13:25:22.0867 4776 mssmbios - ok
      13:25:22.0901 4776 [ 86D632D75D05D5B7C7C043FA3564AE86 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
      13:25:22.0938 4776 MSTEE - ok
      13:25:23.0012 4776 [ 6936198F2CC25B39CF5262436C80DF46 ] MTsensor C:\Windows\system32\DRIVERS\ASACPI.sys
      13:25:23.0024 4776 MTsensor - ok
      13:25:23.0059 4776 [ 0CC49F78D8ACA0877D885F149084E543 ] Mup C:\Windows\system32\Drivers\mup.sys
      13:25:23.0078 4776 Mup - ok
      13:25:23.0123 4776 [ A5B10C845E7538C60C0F5D87A57CB3F5 ] napagent C:\Windows\system32\qagentRT.dll
      13:25:23.0172 4776 napagent - ok
      13:25:23.0228 4776 [ 2007B826C4ACD94AE32232B41F0842B9 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
      13:25:23.0267 4776 NativeWifiP - ok
      13:25:23.0315 4776 [ 65950E07329FCEE8E6516B17C8D0ABB6 ] NDIS C:\Windows\system32\drivers\ndis.sys
      13:25:23.0362 4776 NDIS - ok
      13:25:23.0396 4776 [ 64DF698A425478E321981431AC171334 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
      13:25:23.0443 4776 NdisTapi - ok
      13:25:23.0460 4776 [ 8BAA43196D7B5BB972C9A6B2BBF61A19 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
      13:25:23.0499 4776 Ndisuio - ok
      13:25:23.0520 4776 [ F8158771905260982CE724076419EF19 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
      13:25:23.0567 4776 NdisWan - ok
      13:25:23.0584 4776 [ 9CB77ED7CB72850253E973A2D6AFDF49 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
      13:25:23.0625 4776 NDProxy - ok
      13:25:23.0784 4776 [ 40D7D0A208EE863BCA8D89E299216F15 ] Nero BackItUp Scheduler 3 C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
      13:25:23.0814 4776 Nero BackItUp Scheduler 3 - ok
      13:25:23.0870 4776 [ A499294F5029A7862ADC115BDA7371CE ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
      13:25:23.0926 4776 NetBIOS - ok
      13:25:23.0950 4776 [ FC2C792EBDDC8E28DF939D6A92C83D61 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
      13:25:23.0986 4776 netbt - ok
      13:25:23.0993 4776 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] Netlogon C:\Windows\system32\lsass.exe
      13:25:24.0013 4776 Netlogon - ok
      13:25:24.0056 4776 [ 9B63B29DEFC0F3115A559D2597BF5D75 ] Netman C:\Windows\System32\netman.dll
      13:25:24.0107 4776 Netman - ok
      13:25:24.0138 4776 [ 7846D0136CC2B264926A73047BA7688A ] netprofm C:\Windows\System32\netprofm.dll
      13:25:24.0203 4776 netprofm - ok
      13:25:24.0286 4776 [ 61EBE29D1112D368F6E135916897531D ] netr28ux C:\Windows\system32\DRIVERS\netr28ux.sys
      13:25:24.0327 4776 netr28ux - ok
      13:25:24.0388 4776 [ 4D457321124EF6031875DA01E9C402B3 ] netr7364 C:\Windows\system32\DRIVERS\netr7364.sys
      13:25:24.0427 4776 netr7364 - ok
      13:25:24.0456 4776 [ 74751DDA198165947FD7454D83F49825 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
      13:25:24.0479 4776 NetTcpPortSharing - ok
      13:25:24.0521 4776 [ 4AC08BD6AF2DF42E0C3196D826C8AEA7 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
      13:25:24.0542 4776 nfrd960 - ok
      13:25:24.0586 4776 [ F145BF4C4668E7E312069F81EF847CFC ] NlaSvc C:\Windows\System32\nlasvc.dll
      13:25:24.0677 4776 NlaSvc - ok
      13:25:24.0785 4776 [ EBA1B4BF2E2375ABDADEDB649F283541 ] NMIndexingService C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
      13:25:24.0834 4776 NMIndexingService - ok
      13:25:24.0908 4776 [ 109338286793775088CB5A3A13C874DB ] NPF C:\Windows\system32\drivers\npf.sys
      13:25:24.0925 4776 NPF - ok
      13:25:24.0963 4776 [ B298874F8E0EA93F06EC40AA8D146478 ] Npfs C:\Windows\system32\drivers\Npfs.sys
      13:25:24.0997 4776 Npfs - ok
      13:25:25.0065 4776 [ ACB62BAA1C319B17752553DF3026EEEB ] nsi C:\Windows\system32\nsisvc.dll
      13:25:25.0109 4776 nsi - ok
      13:25:25.0131 4776 [ 1523AF19EE8B030BA682F7A53537EAEB ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
      13:25:25.0200 4776 nsiproxy - ok
      13:25:25.0272 4776 [ BAC869DFB98E499BA4D9BB1FB43270E1 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
      13:25:25.0338 4776 Ntfs - ok
      13:25:25.0364 4776 [ DD5D684975352B85B52E3FD5347C20CB ] Null C:\Windows\system32\drivers\Null.sys
      13:25:25.0424 4776 Null - ok
      13:25:25.0680 4776 [ F12C5F17D48D9F5C70E4408B3CCB5443 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
      13:25:26.0321 4776 nvlddmkm - ok
      13:25:26.0346 4776 [ 840EEB44DC49317A6161961F7682CD99 ] nvraid C:\Windows\system32\drivers\nvraid.sys
      13:25:26.0363 4776 nvraid - ok
      13:25:26.0387 4776 [ 94C5334040A5D500897F4C5FD12AEEDE ] nvstor C:\Windows\system32\drivers\nvstor.sys
      13:25:26.0403 4776 nvstor - ok
      13:25:26.0453 4776 [ 8A55543C379B0582F0C33DB447D1C892 ] NVSvc C:\Windows\system32\nvvsvc.exe
      13:25:26.0512 4776 NVSvc - ok
      13:25:26.0539 4776 [ AA1B6C86A4763502E20B65C025F39BAD ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
      13:25:26.0558 4776 nv_agp - ok
      13:25:26.0564 4776 NwlnkFlt - ok
      13:25:26.0570 4776 NwlnkFwd - ok
      13:25:26.0604 4776 [ 7B58953E2F263421FDBB09A192712A85 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
      13:25:26.0680 4776 ohci1394 - ok
      13:25:26.0758 4776 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
      13:25:26.0778 4776 ose - ok
      13:25:26.0948 4776 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
      13:25:27.0200 4776 osppsvc - ok
      13:25:27.0265 4776 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2pimsvc C:\Windows\system32\p2psvc.dll
      13:25:27.0361 4776 p2pimsvc - ok
      13:25:27.0396 4776 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2psvc C:\Windows\system32\p2psvc.dll
      13:25:27.0420 4776 p2psvc - ok
      13:25:27.0543 4776 [ 78B7642B0C51F24F0835C0226540D58B ] Panda Software Controller C:\Program Files (x86)\Panda Security\Panda Antivirus Pro 2012\PsCtrls.exe
      13:25:27.0556 4776 Panda Software Controller - ok
      13:25:27.0617 4776 [ 4C6A7FD04DDF4DB88791048382E3EDB1 ] Parport C:\Windows\system32\DRIVERS\parport.sys
      13:25:27.0661 4776 Parport - ok
      13:25:27.0702 4776 [ B43751085E2ABE389DA466BC62A4B987 ] partmgr C:\Windows\system32\drivers\partmgr.sys
      13:25:27.0721 4776 partmgr - ok
      13:25:27.0790 4776 [ 337A81B3FF34F9851D245D42A725FC22 ] pavboot C:\Windows\system32\Drivers\pavboot64.sys
      13:25:27.0803 4776 pavboot - ok
      13:25:27.0914 4776 [ AE848C1613C8738BB83ADAB4F0845E84 ] PAVFNSVR C:\Program Files (x86)\Panda Security\Panda Antivirus Pro 2012\PavFnSvr.exe
      13:25:27.0993 4776 PAVFNSVR - ok
      13:25:28.0048 4776 [ 2AE3F6B23448443BBEF5DE207159213B ] PavPrSrv C:\Program Files (x86)\Common Files\Panda Security\PavShld\pavprsrv.exe
      13:25:28.0062 4776 PavPrSrv - ok
      13:25:28.0078 4776 [ 97005413310966001FB6F4A5C503149C ] PAVSRV C:\Program Files (x86)\Panda Security\Panda Antivirus Pro 2012\pavsrvx86.exe
      13:25:28.0096 4776 PAVSRV - ok
      13:25:28.0108 4776 PavTPK.sys - ok
      13:25:28.0161 4776 [ 9AB157B374192FF276C1628FBDBA2B0E ] PcaSvc C:\Windows\System32\pcasvc.dll
      13:25:28.0220 4776 PcaSvc - ok
      13:25:28.0263 4776 [ 47AB1E0FC9D0E12BB53BA246E3A0906D ] pci C:\Windows\system32\drivers\pci.sys
      13:25:28.0283 4776 pci - ok
      13:25:28.0306 4776 [ 8D618C829034479985A9ED56106CC732 ] pciide C:\Windows\system32\drivers\pciide.sys
      13:25:28.0321 4776 pciide - ok
      13:25:28.0342 4776 [ 037661F3D7C507C9993B7010CEEE6288 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
      13:25:28.0364 4776 pcmcia - ok
      13:25:28.0416 4776 [ AF7CE12C4F3DC8CB2B07685C916BBCFE ] pcouffin C:\Windows\system32\Drivers\pcouffin.sys
      13:25:28.0457 4776 pcouffin - ok
      13:25:28.0485 4776 [ 58865916F53592A61549B04941BFD80D ] PEAUTH C:\Windows\system32\drivers\peauth.sys
      13:25:28.0583 4776 PEAUTH - ok
      13:25:28.0684 4776 [ 0ED8727EA0172860F47258456C06CAEA ] PerfHost C:\Windows\SysWow64\perfhost.exe
      13:25:28.0727 4776 PerfHost - ok
      13:25:28.0812 4776 [ E9E68C1A0F25CF4A7AC966EEA74EE89E ] pla C:\Windows\system32\pla.dll
      13:25:28.0862 4776 pla - ok
      13:25:28.0914 4776 [ 875E4E0661F3A5994DF9E5E3A0A4F96B ] PLFlash DeviceIoControl Service C:\Windows\SysWOW64\IoctlSvc.exe
      13:25:28.0935 4776 PLFlash DeviceIoControl Service ( UnsignedFile.Multi.Generic ) - warning
      13:25:28.0935 4776 PLFlash DeviceIoControl Service - detected UnsignedFile.Multi.Generic (1)
      13:25:28.0982 4776 [ FE6B0F59215C9FD9F9D26539C58C8B82 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
      13:25:29.0024 4776 PlugPlay - ok
      13:25:29.0063 4776 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
      13:25:29.0091 4776 PNRPAutoReg - ok
      13:25:29.0147 4776 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPsvc C:\Windows\system32\p2psvc.dll
      13:25:29.0172 4776 PNRPsvc - ok
      13:25:29.0212 4776 [ 89A5560671C2D8B4A4B51F3E1AA069D8 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
      13:25:29.0265 4776 PolicyAgent - ok
      13:25:29.0316 4776 [ 23386E9952025F5F21C368971E2E7301 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
      13:25:29.0355 4776 PptpMiniport - ok
      13:25:29.0399 4776 [ 6BC78E5F12CBB74E7930AAAA4A0DB387 ] Processor C:\Windows\system32\drivers\processr.sys
      13:25:29.0457 4776 Processor - ok
      13:25:29.0497 4776 [ E058CE4FC2449D8BFA14739C83B7FF2A ] ProfSvc C:\Windows\system32\profsvc.dll
      13:25:29.0537 4776 ProfSvc - ok
      13:25:29.0554 4776 Prot6Flt - ok
      13:25:29.0579 4776 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] ProtectedStorage C:\Windows\system32\lsass.exe
      13:25:29.0625 4776 ProtectedStorage - ok
      13:25:29.0673 4776 [ C5AB7F0809392D0DA027F4A2A81BFA31 ] PSched C:\Windows\system32\DRIVERS\pacer.sys
      13:25:29.0705 4776 PSched - ok
      13:25:29.0754 4776 [ 196C450F2779D0B462C444DA4906EA7F ] PSIMSVC C:\Program Files (x86)\Panda Security\Panda Antivirus Pro 2012\PsImSvc.exe
      13:25:29.0767 4776 PSIMSVC - ok
      13:25:29.0787 4776 [ 341457B79B3FC31A80C346C767045879 ] PskSvcRetail C:\Program Files (x86)\Panda Security\Panda Antivirus Pro 2012\PskSvc.exe
      13:25:29.0801 4776 PskSvcRetail - ok
      13:25:29.0839 4776 [ 4A29D25704917161BAD9B4659A248DFD ] ql2300 C:\Windows\system32\drivers\ql2300.sys
      13:25:29.0873 4776 ql2300 - ok
      13:25:29.0903 4776 [ E1C80F8D4D1E39EF9595809C1369BF2A ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
      13:25:29.0918 4776 ql40xx - ok
      13:25:29.0970 4776 [ 90574842C3DA781E279061A3EFF91F07 ] QWAVE C:\Windows\system32\qwave.dll
      13:25:29.0991 4776 QWAVE - ok
      13:25:30.0009 4776 [ E8D76EDAB77EC9C634C27B8EAC33ADC5 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
      13:25:30.0037 4776 QWAVEdrv - ok
      13:25:30.0072 4776 [ 1013B3B663A56D3DDD784F581C1BD005 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
      13:25:30.0122 4776 RasAcd - ok
      13:25:30.0167 4776 [ B2AE18F847D07F0044404DDF7CB04497 ] RasAuto C:\Windows\System32\rasauto.dll
      13:25:30.0210 4776 RasAuto - ok
      13:25:30.0258 4776 [ AC7BC4D42A7E558718DFDEC599BBFC2C ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
      13:25:30.0298 4776 Rasl2tp - ok
      13:25:30.0321 4776 [ 3AD83E4046C43BE510DE681588ACB8AF ] RasMan C:\Windows\System32\rasmans.dll
      13:25:30.0367 4776 RasMan - ok
      13:25:30.0394 4776 [ 4517FBF8B42524AFE4EDE1DE102AAE3E ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
      13:25:30.0428 4776 RasPppoe - ok
      13:25:30.0476 4776 [ C6A593B51F34C33E5474539544072527 ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
      13:25:30.0492 4776 RasSstp - ok
      13:25:30.0513 4776 [ 322DB5C6B55E8D8EE8D6F358B2AAABB1 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
      13:25:30.0556 4776 rdbss - ok
      13:25:30.0584 4776 [ 603900CC05F6BE65CCBF373800AF3716 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
      13:25:30.0638 4776 RDPCDD - ok
      13:25:30.0677 4776 [ AE23E79B13FEB62939E2CA1189E71735 ] rdpdr C:\Windows\system32\DRIVERS\rdpdr.sys
      13:25:30.0719 4776 rdpdr - ok
      13:25:30.0724 4776 [ CAB9421DAF3D97B33D0D055858E2C3AB ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
      13:25:30.0757 4776 RDPENCDD - ok
      13:25:30.0806 4776 [ AE4BD9E1C33D351D8E607FC81F15160C ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
      13:25:30.0834 4776 RDPWD - ok
      13:25:30.0912 4776 [ D7AEA5375DB1D6632A4120AD06C52F6B ] RegFilter C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\wlh_amd64\regfilter.sys
      13:25:30.0923 4776 RegFilter - ok
      13:25:30.0988 4776 [ C612B9557DA73F70D41F8A6FBC8E5344 ] RemoteAccess C:\Windows\System32\mprdim.dll
      13:25:31.0077 4776 RemoteAccess - ok
      13:25:31.0120 4776 [ 44B9D8EC2F3EF3A0EFB00857AF70D861 ] RemoteRegistry C:\Windows\system32\regsvc.dll
      13:25:31.0186 4776 RemoteRegistry - ok
      13:25:31.0228 4776 [ CD71E053D7260E4102D99A28F9196070 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
      13:25:31.0253 4776 RFCOMM - ok
      13:25:31.0279 4776 [ F46C457840D4B7A4DAAFEE739CE04102 ] RpcLocator C:\Windows\system32\locator.exe
      13:25:31.0328 4776 RpcLocator - ok
      13:25:31.0381 4776 [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] RpcSs C:\Windows\system32\rpcss.dll
      13:25:31.0423 4776 RpcSs - ok
      13:25:31.0468 4776 [ 22A9CB08B1A6707C1550C6BF099AAE73 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
      13:25:31.0510 4776 rspndr - ok
      13:25:31.0535 4776 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] SamSs C:\Windows\system32\lsass.exe
      13:25:31.0549 4776 SamSs - ok
      13:25:31.0581 4776 [ CD9C693589C60AD59BBBCFB0E524E01B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
      13:25:31.0594 4776 sbp2port - ok
      13:25:31.0617 4776 [ FD1CDCF108D5EF3366F00D18B70FB89B ] SCardSvr C:\Windows\System32\SCardSvr.dll
      13:25:31.0643 4776 SCardSvr - ok
      13:25:31.0696 4776 [ 0F838C811AD295D2A4489B9993096C63 ] Schedule C:\Windows\system32\schedsvc.dll
      13:25:31.0735 4776 Schedule - ok
      13:25:31.0782 4776 [ 5A268127633C7EE2A7FB87F39D748D56 ] SCPolicySvc C:\Windows\System32\certprop.dll
      13:25:31.0808 4776 SCPolicySvc - ok
      13:25:31.0880 4776 [ 4FF71B076A7760FE75EA5AE2D0EE0018 ] SDRSVC C:\Windows\System32\SDRSVC.dll
      13:25:31.0910 4776 SDRSVC - ok
      13:25:31.0998 4776 [ D98E936BDD4A6CFE39535F3696D0EC6F ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
      13:25:32.0027 4776 SDScannerService - ok
      13:25:32.0136 4776 [ 2D5088524613D1ED55D20195AF42DDC7 ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
      13:25:32.0189 4776 SDUpdateService - ok
      13:25:32.0225 4776 [ 59DCE6783F9ED27EB72C81466E363BF8 ] SDWSCService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
      13:25:32.0240 4776 SDWSCService - ok
      13:25:32.0266 4776 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
      13:25:32.0336 4776 secdrv - ok
      13:25:32.0357 4776 [ 5ACDCBC67FCF894A1815B9F96D704490 ] seclogon C:\Windows\system32\seclogon.dll
      13:25:32.0387 4776 seclogon - ok
      13:25:32.0429 4776 [ 90973A64B96CD647FF81C79443618EED ] SENS C:\Windows\system32\sens.dll
      13:25:32.0461 4776 SENS - ok
      13:25:32.0507 4776 [ 2449316316411D65BD2C761A6FFB2CE2 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
      13:25:32.0540 4776 Serenum - ok
      13:25:32.0582 4776 [ 4B438170BE2FC8E0BD35EE87A960F84F ] Serial C:\Windows\system32\DRIVERS\serial.sys
      13:25:32.0615 4776 Serial - ok
      13:25:32.0642 4776 [ A842F04833684BCEEA7336211BE478DF ] sermouse C:\Windows\system32\drivers\sermouse.sys
      13:25:32.0692 4776 sermouse - ok
      13:25:32.0746 4776 [ A8E4A4407A09F35DCCC3771AF590B0C4 ] SessionEnv C:\Windows\system32\sessenv.dll
      13:25:32.0798 4776 SessionEnv - ok
      13:25:32.0816 4776 [ 541B32F8D6B2DCB92EC43BAB267E79EA ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
      13:25:32.0879 4776 sffdisk - ok
      13:25:32.0899 4776 [ 446E7CCA3325C7E0AE0FDE7F73CDD9C2 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
      13:25:32.0948 4776 sffp_mmc - ok
      13:25:32.0972 4776 [ 67EDC221348911E895AF51C57D9A3725 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
      13:25:33.0013 4776 sffp_sd - ok
      13:25:33.0027 4776 [ 6B7838C94135768BD455CBDC23E39E5F ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
      13:25:33.0083 4776 sfloppy - ok
      13:25:33.0127 4776 [ 4C5AEE179DA7E1EE9A9CCB9DA289AF34 ] SharedAccess C:\Windows\System32\ipnathlp.dll
      13:25:33.0165 4776 SharedAccess - ok
      13:25:33.0212 4776 [ 56793271ECDEDD350C5ADD305603E963 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
      13:25:33.0261 4776 ShellHWDetection - ok
      13:25:33.0281 4776 [ 03639A3B26AA808BAE79D89FDB4B151C ] ShldFlt C:\Windows\system32\DRIVERS\ShldFlt.sys
      13:25:33.0294 4776 ShldFlt - ok
      13:25:33.0320 4776 [ 08DDA16573FA44F8B13AFE74597AD2E5 ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
      13:25:33.0333 4776 SiSRaid2 - ok
      13:25:33.0357 4776 [ C52259E9DAAF3890D572D87FFEE0979E ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
      13:25:33.0407 4776 SiSRaid4 - ok
      13:25:33.0488 4776 [ A9A27A8E257B45A604FDAD4F26FE7241 ] slsvc C:\Windows\system32\SLsvc.exe
      13:25:33.0660 4776 slsvc - ok
      13:25:33.0682 4776 [ FD74B4B7C2088E390A30C85A896FC3AF ] SLUINotify C:\Windows\system32\SLUINotify.dll
      13:25:33.0723 4776 SLUINotify - ok
      13:25:33.0776 4776 [ B68385FD0CB677A1BB3EAB0BEB2999B7 ] SmartDefragDriver C:\Windows\system32\Drivers\SmartDefragDriver.sys
      13:25:33.0787 4776 SmartDefragDriver - ok
      13:25:33.0816 4776 [ 290B6F6A0EC4FCDFC90F5CB6D7020473 ] Smb C:\Windows\system32\DRIVERS\smb.sys
      13:25:33.0841 4776 Smb - ok
      13:25:33.0885 4776 [ F8F47F38909823B1AF28D60B96340CFF ] SNMPTRAP C:\Windows\System32\snmptrap.exe
      13:25:33.0912 4776 SNMPTRAP - ok
      13:25:33.0938 4776 [ 386C3C63F00A7040C7EC5E384217E89D ] spldr C:\Windows\system32\drivers\spldr.sys
      13:25:33.0954 4776 spldr - ok
      13:25:33.0984 4776 [ F66FF751E7EFC816D266977939EF5DC3 ] Spooler C:\Windows\System32\spoolsv.exe
      13:25:34.0009 4776 Spooler - ok
      13:25:34.0055 4776 [ 880A57FCCB571EBD063D4DD50E93E46D ] srv C:\Windows\system32\DRIVERS\srv.sys
      13:25:34.0089 4776 srv - ok
      13:25:34.0120 4776 [ A1AD14A6D7A37891FFFECA35EBBB0730 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
      13:25:34.0176 4776 srv2 - ok
      13:25:34.0211 4776 [ 4BED62F4FA4D8300973F1151F4C4D8A7 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
      13:25:34.0249 4776 srvnet - ok
      13:25:34.0321 4776 [ 192C74646EC5725AEF3F80D19FF75F6A ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
      13:25:34.0375 4776 SSDPSRV - ok
      13:25:34.0426 4776 [ 2EE3FA0308E6185BA64A9A7F2E74332B ] SstpSvc C:\Windows\system32\sstpsvc.dll
      13:25:34.0455 4776 SstpSvc - ok
      13:25:34.0507 4776 [ 15825C1FBFB8779992CB65087F316AF5 ] stisvc C:\Windows\System32\wiaservc.dll
      13:25:34.0537 4776 stisvc - ok
      13:25:34.0569 4776 [ 8A851CA908B8B974F89C50D2E18D4F0C ] swenum C:\Windows\system32\DRIVERS\swenum.sys
      13:25:34.0585 4776 swenum - ok
      13:25:34.0637 4776 [ 6DE37F4DE19D4EFD9C48C43ADDBC949A ] swprv C:\Windows\System32\swprv.dll
      13:25:34.0688 4776 swprv - ok
      13:25:34.0703 4776 [ 2F26A2C6FC96B29BEFF5D8ED74E6625B ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
      13:25:34.0719 4776 Symc8xx - ok
      13:25:34.0733 4776 [ A909667976D3BCCD1DF813FED517D837 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
      13:25:34.0751 4776 Sym_hi - ok
      13:25:34.0765 4776 [ 36887B56EC2D98B9C362F6AE4DE5B7B0 ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
      13:25:34.0783 4776 Sym_u3 - ok
      13:25:34.0832 4776 [ 92D7A8B0F87B036F17D25885937897A6 ] SysMain C:\Windows\system32\sysmain.dll
      13:25:34.0939 4776 SysMain - ok
      13:25:34.0971 4776 [ 005CE42567F9113A3BCCB3B20073B029 ] TabletInputService C:\Windows\System32\TabSvc.dll
      13:25:35.0010 4776 TabletInputService - ok
      13:25:35.0060 4776 [ CC2562B4D55E0B6A4758C65407F63B79 ] TapiSrv C:\Windows\System32\tapisrv.dll
      13:25:35.0114 4776 TapiSrv - ok
      13:25:35.0167 4776 [ CDBE8D7C1E201B911CDC346D06617FB5 ] TBS C:\Windows\System32\tbssvc.dll
      13:25:35.0220 4776 TBS - ok
      13:25:35.0286 4776 [ 46D448E9117464E4D3BBF36D7E3FA48E ] Tcpip C:\Windows\system32\drivers\tcpip.sys
      13:25:35.0349 4776 Tcpip - ok
      13:25:35.0394 4776 [ 46D448E9117464E4D3BBF36D7E3FA48E ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
      13:25:35.0470 4776 Tcpip6 - ok
      13:25:35.0533 4776 [ C7E72A4071EE0200E3C075DACFB2B334 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
      13:25:35.0589 4776 tcpipreg - ok
      13:25:35.0627 4776 [ 1D8BF4AAA5FB7A2761475781DC1195BC ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
      13:25:35.0682 4776 TDPIPE - ok
      13:25:35.0727 4776 [ 7F7E00CDF609DF657F4CDA02DD1C9BB1 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
      13:25:35.0770 4776 TDTCP - ok
      13:25:35.0795 4776 [ 458919C8C42E398DC4802178D5FFEE27 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
      13:25:35.0829 4776 tdx - ok
      13:25:35.0949 4776 [ FE559178000347D2CA1B7847F0379749 ] TeamViewer6 C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
      13:25:36.0052 4776 TeamViewer6 - ok
      13:25:36.0087 4776 [ 8C19678D22649EC002EF2282EAE92F98 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
      13:25:36.0110 4776 TermDD - ok
      13:25:36.0172 4776 [ 5CDD30BC217082DAC71A9878D9BFD566 ] TermService C:\Windows\System32\termsrv.dll
      13:25:36.0474 4776 TermService - ok
      13:25:36.0500 4776 [ 56793271ECDEDD350C5ADD305603E963 ] Themes C:\Windows\system32\shsvcs.dll
      13:25:36.0527 4776 Themes - ok
      13:25:36.0567 4776 [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] THREADORDER C:\Windows\system32\mmcss.dll
      13:25:36.0617 4776 THREADORDER - ok
      13:25:36.0652 4776 [ B88C4D29CEE2BF7465FA4BF426A24E4E ] TPSrv C:\Program Files (x86)\Panda Security\Panda Antivirus Pro 2012\TPSrvWow.exe
      13:25:36.0671 4776 TPSrv - ok
      13:25:36.0707 4776 [ F4689F05AF472A651A7B1B7B02D200E7 ] TrkWks C:\Windows\System32\trkwks.dll
      13:25:36.0761 4776 TrkWks - ok
      13:25:36.0806 4776 [ 66328B08EF5A9305D8EDE36B93930369 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
      13:25:36.0858 4776 TrustedInstaller - ok
      13:25:36.0897 4776 [ 9E5409CD17C8BEF193AAD498F3BC2CB8 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
      13:25:36.0962 4776 tssecsrv - ok
      13:25:37.0004 4776 [ 89EC74A9E602D16A75A4170511029B3C ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
      13:25:37.0032 4776 tunmp - ok
      13:25:37.0080 4776 [ 30A9B3F45AD081BFFC3BCAA9C812B609 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
      13:25:37.0105 4776 tunnel - ok
      13:25:37.0153 4776 [ E4722DFBD6232ACF17543EF2C2DCE8D2 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
      13:25:37.0176 4776 uagp35 - ok
      13:25:37.0232 4776 [ FAF2640A2A76ED03D449E443194C4C34 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
      13:25:37.0278 4776 udfs - ok
      13:25:37.0337 4776 [ 215462AE7E6A897D675E84DD1E3B3B56 ] ufad-ws60 C:\Program Files (x86)\VMware\VMware Workstation\vmware-ufad.exe
      13:25:37.0357 4776 ufad-ws60 - ok
      13:25:37.0401 4776 [ 060507C4113391394478F6953A79EEDC ] UI0Detect C:\Windows\system32\UI0Detect.exe
      13:25:37.0442 4776 UI0Detect - ok
      13:25:37.0459 4776 [ 5663D7696ABBE71F8C9D915C5374118A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
      13:25:37.0474 4776 uliagpkx - ok
      13:25:37.0497 4776 [ 6030B68E86A30D1B315B51C4D7778B16 ] uliahci C:\Windows\system32\drivers\uliahci.sys
      13:25:37.0516 4776 uliahci - ok
      13:25:37.0538 4776 [ 31707F09846056651EA2C37858F5DDB0 ] UlSata C:\Windows\system32\drivers\ulsata.sys
      13:25:37.0554 4776 UlSata - ok
      13:25:37.0574 4776 [ 85E5E43ED5B48C8376281BAB519271B7 ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
      13:25:37.0591 4776 ulsata2 - ok
      13:25:37.0626 4776 [ 46E9A994C4FED537DD951F60B86AD3F4 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
      13:25:37.0677 4776 umbus - ok
      13:25:37.0707 4776 [ DC5E34F189B827199B9CC8481C648269 ] UmRdpService C:\Windows\System32\umrdp.dll
      13:25:37.0749 4776 UmRdpService - ok
      13:25:37.0791 4776 [ 7093799FF80E9DECA0680D2E3535BE60 ] upnphost C:\Windows\System32\upnphost.dll
      13:25:37.0856 4776 upnphost - ok
      13:25:37.0925 4776 [ 55BA05042FEBB956BE4A54BC5E621593 ] UrlFilter C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\wlh_amd64\UrlFilter.sys
      13:25:37.0938 4776 UrlFilter - ok
      13:25:37.0976 4776 [ 07E3498FC60834219D2356293DA0FECC ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
      13:25:38.0006 4776 usbccgp - ok
      13:25:38.0030 4776 [ 9247F7E0B65852C1F6631480984D6ED2 ] usbcir C:\Windows\system32\drivers\usbcir.sys
      13:25:38.0086 4776 usbcir - ok
      13:25:38.0126 4776 [ 827E44DE934A736EA31E91D353EB126F ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
      13:25:38.0155 4776 usbehci - ok
      13:25:38.0168 4776 [ BB35CD80A2ECECFADC73569B3D70C7D1 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
      13:25:38.0210 4776 usbhub - ok
      13:25:38.0233 4776 [ EBA14EF0C07CEC233F1529C698D0D154 ] usbohci C:\Windows\system32\drivers\usbohci.sys
      13:25:38.0283 4776 usbohci - ok
      13:25:38.0322 4776 [ 28B693B6D31E7B9332C1BDCEFEF228C1 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
      13:25:38.0355 4776 usbprint - ok
      13:25:38.0397 4776 [ EA0BF666868964FBE8CB10E50C97B9F1 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
      13:25:38.0424 4776 usbscan - ok
      13:25:38.0462 4776 [ B854C1558FCA0C269A38663E8B59B581 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
      13:25:38.0510 4776 USBSTOR - ok
      13:25:38.0550 4776 [ B2872CBF9F47316ABD0E0C74A1ABA507 ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
      13:25:38.0579 4776 usbuhci - ok
      13:25:38.0618 4776 [ D76E231E4850BB3F88A3D9A78DF191E3 ] UxSms C:\Windows\System32\uxsms.dll
      13:25:38.0648 4776 UxSms - ok
      13:25:38.0743 4776 [ C83D714B7CA4286515B5954B8F8C3C1F ] VBoxDrv C:\Program Files (x86)\YouWave_Android\vb\VBoxDrv.sys
      13:25:38.0764 4776 VBoxDrv - ok
      13:25:38.0810 4776 [ 294945381DFA7CE58CECF0A9896AF327 ] vds C:\Windows\System32\vds.exe
      13:25:38.0879 4776 vds - ok
      13:25:38.0921 4776 [ 2998DC48905E9B4821AD8FD75B3E070C ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
      13:25:38.0983 4776 vga - ok
      13:25:39.0004 4776 [ B83AB16B51FEDA65DD81B8C59D114D63 ] VgaSave C:\Windows\System32\drivers\vga.sys
      13:25:39.0045 4776 VgaSave - ok
      13:25:39.0072 4776 [ 8294B6C3FDB6C33F24E150DE647ECDAA ] viaide C:\Windows\system32\drivers\viaide.sys
      13:25:39.0088 4776 viaide - ok
      13:25:39.0121 4776 [ 6FC9B272B838EE8F5FA0E4A7E971154A ] VMAuthdService C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
      13:25:39.0137 4776 VMAuthdService - ok
      13:25:39.0168 4776 [ B49CB94DB99519F9DC7F77D2D1F215B5 ] vmci C:\Windows\system32\drivers\vmci.sys
      13:25:39.0182 4776 vmci - ok
      13:25:39.0210 4776 [ 1AF6462718E5AB0ED55014A6EF3790EF ] vmkbd C:\Windows\system32\drivers\VMkbd.sys
      13:25:39.0224 4776 vmkbd - ok
      13:25:39.0250 4776 [ 9D54F1339E78C95BF3D9939EBCB66378 ] VMnetAdapter C:\Windows\system32\DRIVERS\vmnetadapter.sys
      13:25:39.0264 4776 VMnetAdapter - ok
      13:25:39.0311 4776 [ FB54EF3AA613D2832FD3812E7CB2FC75 ] VMnetBridge C:\Windows\system32\DRIVERS\vmnetbridge.sys
      13:25:39.0324 4776 VMnetBridge - ok
      13:25:39.0331 4776 VMnetDHCP - ok
      13:25:39.0382 4776 [ 163B05050FCD9635242EC5206C19A182 ] VMnetuserif C:\Windows\system32\drivers\vmnetuserif.sys
      13:25:39.0397 4776 VMnetuserif - ok
      13:25:39.0461 4776 [ C8EB96D0C78B1CF67167DAFC617EE960 ] VMparport C:\Windows\system32\drivers\VMparport.sys
      13:25:39.0476 4776 VMparport - ok
      13:25:39.0512 4776 [ 415B167695C4B5960A13098622EF3D80 ] vmusb C:\Windows\system32\Drivers\vmusb.sys
      13:25:39.0527 4776 vmusb - ok
      13:25:39.0576 4776 [ F22098DBDD13C1221C274496B3E18DA7 ] VMUSBArbService C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
      13:25:39.0601 4776 VMUSBArbService - ok
      13:25:39.0614 4776 VMware NAT Service - ok
      13:25:39.0650 4776 [ F2A8EE62D7161E1598CDD269BF22A03D ] vmx86 C:\Windows\system32\drivers\vmx86.sys
      13:25:39.0666 4776 vmx86 - ok
      13:25:39.0699 4776 [ 2B7E885ED951519A12C450D24535DFCA ] volmgr C:\Windows\system32\drivers\volmgr.sys
      13:25:39.0723 4776 volmgr - ok
      13:25:39.0793 4776 [ CEC5AC15277D75D9E5DEC2E1C6EAF877 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
      13:25:39.0826 4776 volmgrx - ok
      13:25:39.0866 4776 [ 5280AADA24AB36B01A84A6424C475C8D ] volsnap C:\Windows\system32\drivers\volsnap.sys
      13:25:39.0894 4776 volsnap - ok
      13:25:39.0925 4776 [ 410AE2C141142C58BC617FC2C677F8B0 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
      13:25:39.0948 4776 vsmraid - ok
      13:25:39.0990 4776 [ B75232DAD33BFD95BF6F0A3E6BFF51E1 ] VSS C:\Windows\system32\vssvc.exe
      13:25:40.0132 4776 VSS - ok
      13:25:40.0175 4776 [ E61C910E2DDF4797C1B1F9239636E894 ] vstor2-ws60 C:\Program Files (x86)\VMware\VMware Workstation\vstor2-ws60.sys
      13:25:40.0193 4776 vstor2-ws60 - ok
      13:25:40.0227 4776 [ F14A7DE2EA41883E250892E1E5230A9A ] W32Time C:\Windows\system32\w32time.dll
      13:25:40.0308 4776 W32Time - ok
      13:25:40.0348 4776 [ FEF8FE5923FEAD2CEE4DFABFCE3393A7 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
      13:25:40.0439 4776 WacomPen - ok
      13:25:40.0474 4776 [ B8E7049622300D20BA6D8BE0C47C0CFD ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
      13:25:40.0524 4776 Wanarp - ok
      13:25:40.0532 4776 [ B8E7049622300D20BA6D8BE0C47C0CFD ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
      13:25:40.0571 4776 Wanarpv6 - ok
      13:25:40.0659 4776 [ 33F26FEF446C4AD9FDB0932601FD017B ] WAS C:\Windows\system32\inetsrv\iisw3adm.dll
      13:25:40.0738 4776 WAS - ok
      13:25:40.0825 4776 [ 48EEE289DF9E4989128B2283F3EEACC6 ] wbengine C:\Windows\system32\wbengine.exe
      13:25:40.0927 4776 wbengine - ok
      13:25:40.0971 4776 [ B4E4C37D0AA6100090A53213EE2BF1C1 ] wcncsvc C:\Windows\System32\wcncsvc.dll
      13:25:41.0051 4776 wcncsvc - ok
      13:25:41.0119 4776 [ EA4B369560E986F19D93F45A881484AC ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
      13:25:41.0162 4776 WcsPlugInService - ok
      13:25:41.0197 4776 [ 59B501B0A04C9672142B7FFA2BDBF663 ] Wd C:\Windows\system32\drivers\wd.sys
      13:25:41.0217 4776 Wd - ok
      13:25:41.0271 4776 [ D02E7E4567DA1E7582FBF6A91144B0DF ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
      13:25:41.0317 4776 Wdf01000 - ok
      13:25:41.0338 4776 [ C5EFDA73EBFCA8B02A094898DE0A9276 ] WdiServiceHost C:\Windows\system32\wdi.dll
      13:25:41.0401 4776 WdiServiceHost - ok
      13:25:41.0409 4776 [ C5EFDA73EBFCA8B02A094898DE0A9276 ] WdiSystemHost C:\Windows\system32\wdi.dll
      13:25:41.0461 4776 WdiSystemHost - ok
      13:25:41.0502 4776 [ 3E6D05381CF35F75EBB055544A8ED9AC ] WebClient C:\Windows\System32\webclnt.dll
      13:25:41.0563 4776 WebClient - ok
      13:25:41.0608 4776 [ 8D40BC587993F876658BF9FB0F7D3462 ] Wecsvc C:\Windows\system32\wecsvc.dll
      13:25:41.0664 4776 Wecsvc - ok
      13:25:41.0682 4776 [ 9C980351D7E96288EA0C23AE232BD065 ] wercplsupport C:\Windows\System32\wercplsupport.dll
      13:25:41.0743 4776 wercplsupport - ok
      13:25:41.0764 4776 [ 66B9ECEBC46683F47EDC06333C075FEF ] WerSvc C:\Windows\System32\WerSvc.dll
      13:25:41.0819 4776 WerSvc - ok
      13:25:41.0858 4776 WinDefend - ok
      13:25:41.0873 4776 WinHttpAutoProxySvc - ok
      13:25:41.0952 4776 [ D2E7296ED1BD26D8DB2799770C077A02 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
      13:25:41.0994 4776 Winmgmt - ok
      13:25:42.0077 4776 [ 6CBB0C68F13B9C2EC1B16F5FA5E7C869 ] WinRM C:\Windows\system32\WsmSvc.dll
      13:25:42.0230 4776 WinRM - ok
      13:25:42.0311 4776 Winstep Xtreme Service - ok
      13:25:42.0368 4776 [ EC339C8115E91BAED835957E9A677F16 ] Wlansvc C:\Windows\System32\wlansvc.dll
      13:25:42.0442 4776 Wlansvc - ok
      13:25:42.0582 4776 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
      13:25:42.0694 4776 wlidsvc - ok
      13:25:42.0743 4776 [ AE34218455D5DC12D1E45DE85F160346 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
      13:25:42.0823 4776 WmiAcpi - ok
      13:25:42.0854 4776 [ 21FA389E65A852698B6A1341F36EE02D ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
      13:25:42.0909 4776 wmiApSrv - ok
      13:25:42.0940 4776 WMPNetworkSvc - ok
      13:25:42.0979 4776 [ CBC156C913F099E6680D1DF9307DB7A8 ] WPCSvc C:\Windows\System32\wpcsvc.dll
      13:25:43.0032 4776 WPCSvc - ok
      13:25:43.0128 4776 [ 490A18B4E4D53DC10879DEAA8E8B70D9 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
      13:25:43.0160 4776 WPDBusEnum - ok
      13:25:43.0289 4776 [ 991E2C2CF3BC204C2BB2EE1476149E4E ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe
      13:25:43.0331 4776 WPFFontCache_v0400 - ok
      13:25:43.0391 4776 [ 8A900348370E359B6BFF6A550E4649E1 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
      13:25:43.0440 4776 ws2ifsl - ok
      13:25:43.0496 4776 [ 9EA3E6D0EF7A5C2B9181961052A4B01A ] wscsvc C:\Windows\system32\wscsvc.dll
      13:25:43.0525 4776 wscsvc - ok
      13:25:43.0534 4776 WSearch - ok
      13:25:43.0624 4776 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
      13:25:43.0747 4776 wuauserv - ok
      13:25:43.0774 4776 [ 501A65252617B495C0F1832F908D54D8 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
      13:25:43.0825 4776 WUDFRd - ok
      13:25:43.0848 4776 [ 6CBD51FF913C851D56ED9DC7F2A27DDE ] wudfsvc C:\Windows\System32\WUDFSvc.dll
      13:25:43.0911 4776 wudfsvc - ok
      13:25:44.0054 4776 ================ Scan global ===============================
      13:25:44.0099 4776 [ 060DC3A7A9A2626031EB23D90151428D ] C:\Windows\system32\basesrv.dll
      13:25:44.0141 4776 [ AA137104CDFC81818A309CDE32ABB74A ] C:\Windows\system32\winsrv.dll
      13:25:44.0158 4776 [ AA137104CDFC81818A309CDE32ABB74A ] C:\Windows\system32\winsrv.dll
      13:25:44.0180 4776 [ BC81150939BD52DBC7A08C245F1FB229 ] C:\Windows\system32\services.exe
      13:25:44.0189 4776 C:\Windows\system32\services.exe ( Virus.Win64.ZAccess.b ) - infected
      13:25:44.0189 4776 C:\Windows\system32\services.exe - detected Virus.Win64.ZAccess.b (0)
      13:25:44.0189 4776 ================ Scan MBR ==================================
      13:25:44.0206 4776 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
      13:25:44.0449 4776 \Device\Harddisk0\DR0 - ok
      13:25:44.0450 4776 ================ Scan VBR ==================================
      13:25:44.0453 4776 [ 23BF0B1E0C996B8CB16E17C42A0947C9 ] \Device\Harddisk0\DR0\Partition1
      13:25:44.0455 4776 \Device\Harddisk0\DR0\Partition1 - ok
      13:25:44.0483 4776 [ 7923FDD9FA9CECAC8BAA2DE8EBF31280 ] \Device\Harddisk0\DR0\Partition2
      13:25:44.0485 4776 \Device\Harddisk0\DR0\Partition2 - ok
      13:25:44.0505 4776 [ C8DD793D2A1094D87262A3E84C3AD2CC ] \Device\Harddisk0\DR0\Partition3
      13:25:44.0506 4776 \Device\Harddisk0\DR0\Partition3 - ok
      13:25:44.0507 4776 ============================================================
      13:25:44.0507 4776 Scan finished
      13:25:44.0507 4776 ============================================================
      13:25:44.0524 4596 Detected object count: 2
      13:25:44.0524 4596 Actual detected object count: 2
      13:26:03.0810 4596 PLFlash DeviceIoControl Service ( UnsignedFile.Multi.Generic ) - skipped by user
      13:26:03.0811 4596 PLFlash DeviceIoControl Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
      13:26:03.0851 4596 C:\Windows\system32\services.exe - copied to quarantine
      13:26:05.0330 4596 C:\Users\Abelique\AppData\Local\{8ca7d3ce-f44a-a27b-a041-8f83e3901998}\@ - copied to quarantine
      13:26:44.0570 4596 Backup copy found, using it..
      13:26:44.0669 4596 C:\Users\Abelique\AppData\Local\{8ca7d3ce-f44a-a27b-a041-8f83e3901998}\@ - will be deleted on reboot
      13:26:44.0671 4596 C:\Windows\system32\services.exe - will be cured on reboot
      13:26:44.0671 4596 C:\Windows\system32\services.exe ( Virus.Win64.ZAccess.b ) - User select action: Cure
      13:33:58.0738 3028 Deinitialize success
      .

    2. #12
      Usuario Avatar de abelique
      Registrado
      dic 2011
      Ubicación
      barcelona
      Mensajes
      24

      Re: No puedo actualizar windows 7 home premium

      Sobre messa reporte ComboFix:

      ComboFix 12-10-31.03 - Abelique 31/10/2012 13:48:10.6.2 - x64
      Microsoft® Windows Vista™ Ultimate 6.0.6002.2.1252.34.3082.18.3070.1599 [GMT 1:00]
      Running from: c:\users\Abelique\Desktop\ComboFix.exe
      AV: Panda Antivirus Pro 2012 *Disabled/Updated* {86971480-9989-6750-B122-681A86518D59}
      SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}
      SP: Panda Antivirus Pro 2012 *Disabled/Updated* {3DF6F564-BFB3-68DE-8B92-5368FDD6C7E4}
      SP: Spybot - Search and Destroy *Enabled/Outdated* {1EAF1D03-5480-F3B2-EB14-11F0F5EE2699}
      SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
      .
      .
      ((((((((((((((((((((((((( Files Created from 2012-09-28 to 2012-10-31 )))))))))))))))))))))))))))))))
      .
      .
      2012-10-31 12:55 . 2012-10-31 12:55 -------- d-----w- c:\users\Default\AppData\Local\temp
      2012-10-31 12:26 . 2012-10-31 12:26 -------- d-----w- C:\TDSSKiller_Quarantine
      2012-10-31 12:16 . 2012-10-31 12:46 -------- d-----w- C:\32788R22FWJFW
      2012-10-31 11:03 . 2012-10-12 07:19 9291768 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{39414680-8659-448F-AB7E-8FFDBD371896}\mpengine.dll
      2012-10-25 07:27 . 2012-10-25 07:27 -------- d-----w- c:\program files (x86)\Ares
      2012-10-10 21:52 . 2007-07-22 02:50 1043258 ----a-w- c:\windows\allp42.dll
      2012-10-10 21:52 . 2007-07-22 02:49 2388304 ----a-w- c:\windows\alld42.dll
      2012-10-10 21:39 . 2012-10-26 23:42 -------- d-----w- c:\users\Abelique\AppData\Roaming\codeblocks
      2012-10-10 21:39 . 2012-10-10 21:39 -------- d-----w- c:\program files (x86)\CodeBlocks
      2012-10-10 11:46 . 2012-09-13 13:45 2048 ----a-w- c:\windows\system32\tzres.dll
      2012-10-10 11:46 . 2012-09-13 13:28 2048 ----a-w- c:\windows\SysWow64\tzres.dll
      2012-10-10 11:46 . 2012-08-24 16:07 218624 ----a-w- c:\windows\system32\wintrust.dll
      2012-10-10 11:46 . 2012-08-24 15:53 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
      2012-10-10 11:46 . 2012-06-02 00:20 1268736 ----a-w- c:\windows\system32\crypt32.dll
      2012-10-10 11:46 . 2012-06-02 00:02 985088 ----a-w- c:\windows\SysWow64\crypt32.dll
      2012-10-10 11:46 . 2012-06-02 00:20 174592 ----a-w- c:\windows\system32\cryptsvc.dll
      2012-10-10 11:46 . 2012-06-02 00:20 132096 ----a-w- c:\windows\system32\cryptnet.dll
      2012-10-10 11:46 . 2012-06-02 00:02 98304 ----a-w- c:\windows\SysWow64\cryptnet.dll
      2012-10-10 11:46 . 2012-06-02 00:02 133120 ----a-w- c:\windows\SysWow64\cryptsvc.dll
      2012-10-10 11:46 . 2012-08-29 11:40 4699520 ----a-w- c:\windows\system32\ntoskrnl.exe
      2012-10-09 09:29 . 2012-10-09 09:29 -------- d-----w- c:\windows\FltMgr
      2012-10-09 09:28 . 2012-10-09 09:28 -------- d-----w- c:\users\Abelique\AppData\Local\Panda Security
      2012-10-09 08:52 . 2010-06-22 16:20 30792 ----a-w- c:\windows\system32\drivers\pavboot64.sys
      2012-10-09 08:52 . 2012-10-09 09:27 -------- d-----w- c:\program files (x86)\Panda Security
      2012-10-08 18:45 . 2012-10-08 18:50 -------- d-----w- c:\programdata\SecTaskMan
      2012-10-08 18:45 . 2012-10-08 18:45 -------- d-----w- c:\program files (x86)\Security Task Manager
      2012-10-08 05:53 . 2012-10-08 05:53 -------- d-----w- c:\users\Abelique\AppData\Roaming\Uniblue
      2012-10-08 05:53 . 2012-10-08 05:53 -------- d-----w- c:\program files (x86)\Uniblue
      2012-10-07 20:17 . 2012-07-04 14:33 2769408 ----a-w- c:\windows\system32\win32k.sys
      2012-10-07 17:04 . 2012-06-05 16:47 708608 ----a-w- c:\program files (x86)\Common Files\System\ado\msado15.dll
      2012-10-07 17:04 . 2012-06-05 16:22 974848 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
      2012-10-07 17:04 . 2012-06-05 16:47 1401856 ----a-w- c:\windows\SysWow64\msxml6.dll
      2012-10-07 17:04 . 2012-06-05 16:47 1248768 ----a-w- c:\windows\SysWow64\msxml3.dll
      2012-10-07 17:04 . 2012-06-05 16:22 1797120 ----a-w- c:\windows\system32\msxml6.dll
      2012-10-07 17:04 . 2012-06-05 16:22 1869824 ----a-w- c:\windows\system32\msxml3.dll
      2012-10-07 17:04 . 2012-06-04 15:29 516480 ----a-w- c:\windows\system32\drivers\ksecdd.sys
      2012-10-07 17:04 . 2012-06-02 00:22 347136 ----a-w- c:\windows\system32\schannel.dll
      2012-10-07 17:04 . 2012-06-02 00:22 254464 ----a-w- c:\windows\system32\ncrypt.dll
      2012-10-07 17:04 . 2012-06-02 00:03 204288 ----a-w- c:\windows\SysWow64\ncrypt.dll
      2012-10-07 17:04 . 2012-06-02 00:05 77312 ----a-w- c:\windows\SysWow64\secur32.dll
      2012-10-07 17:04 . 2012-06-02 00:04 278528 ----a-w- c:\windows\SysWow64\schannel.dll
      2012-10-07 17:03 . 2012-05-11 16:34 788480 ----a-w- c:\windows\system32\localspl.dll
      2012-10-07 17:03 . 2012-05-11 15:57 623616 ----a-w- c:\windows\SysWow64\localspl.dll
      2012-10-07 17:03 . 2012-06-29 16:20 648192 ----a-w- c:\windows\system32\netapi32.dll
      2012-10-07 17:03 . 2012-06-08 17:59 12899840 ----a-w- c:\windows\system32\shell32.dll
      2012-10-07 13:39 . 2012-10-07 13:39 -------- d-----w- c:\users\Abelique\AppData\Roaming\Malwarebytes
      2012-10-07 13:38 . 2012-10-30 20:52 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
      2012-10-07 13:38 . 2012-10-07 13:38 -------- d-----w- c:\programdata\Malwarebytes
      2012-10-07 13:38 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
      2012-10-07 13:34 . 2012-10-07 13:34 -------- d-----w- c:\program files\CCleaner
      2012-10-06 14:12 . 2012-10-07 08:49 -------- d-----w- c:\programdata\Spybot - Search & Destroy
      2012-10-06 14:12 . 2009-01-25 11:14 17272 ----a-w- c:\windows\system32\sdnclean64.exe
      2012-10-06 14:12 . 2012-10-06 14:12 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
      2012-10-06 14:09 . 2012-10-06 14:09 -------- d-----w- c:\users\Abelique\AppData\Roaming\AVG2013
      2012-10-06 14:07 . 2012-10-06 14:07 -------- d-----w- c:\users\Abelique\AppData\Roaming\TuneUp Software
      2012-10-06 14:04 . 2012-10-08 19:25 -------- d-----w- C:\$AVG
      2012-10-06 14:04 . 2012-10-08 19:25 -------- d-----w- c:\programdata\AVG2013
      2012-10-06 14:00 . 2012-10-08 19:26 -------- d-----w- c:\programdata\MFAData
      2012-10-06 14:00 . 2012-10-07 10:43 -------- d-----w- c:\users\Abelique\AppData\Local\Avg2013
      2012-10-06 14:00 . 2012-10-06 14:00 -------- d--h--w- c:\programdata\Common Files
      2012-10-06 14:00 . 2012-10-06 14:00 -------- d-----w- c:\users\Abelique\AppData\Local\MFAData
      2012-10-03 16:54 . 2012-10-18 20:22 1032582 ----a-w- c:\windows\SysWow64\alleg42.dll
      .
      .
      .
      (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2012-10-31 12:38 . 2011-02-17 10:16 384512 ----a-w- c:\windows\system32\services.exe
      2012-10-15 06:42 . 2012-04-04 16:07 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
      2012-10-15 06:42 . 2011-05-14 19:18 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
      2012-10-10 12:37 . 2006-11-02 12:35 65309168 ----a-w- c:\windows\system32\mrt.exe
      .
      .
      ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* empty entries & legit default entries are not shown
      REGEDIT4
      .
      [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
      2012-08-10 22:54 194928 ----a-w- c:\program files (x86)\Yontoo\YontooIEClient.dll
      .
      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Advanced SystemCare 5"="c:\program files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" [2012-05-28 288128]
      "ares"="c:\program files (x86)\Ares\Ares.exe" [2012-02-02 3209216]
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
      "NBKeyScan"="c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-02-18 2221352]
      "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
      "IObit Malware Fighter"="c:\program files (x86)\IObit\IObit Malware Fighter\IMF.exe" [2012-07-02 4473728]
      "SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2012-08-30 3904536]
      "APVXDWIN"="c:\program files (x86)\Panda Security\Panda Antivirus Pro 2012\APVXDWIN.EXE" [2011-04-13 1000768]
      "SCANINICIO"="c:\program files (x86)\Panda Security\Panda Antivirus Pro 2012\Inicio.exe" [2011-02-02 70464]
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
      "EnableLUA"= 0 (0x0)
      "EnableUIADesktopToggle"= 0 (0x0)
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
      "LoadAppInit_DLLs"=0 (0x0)
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
      "aux"=wdmaud.drv
      .
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
      @="Service"
      .
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PskSvcRetail]
      @="Service"
      .
      R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-15 250808]
      S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
      S2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files (x86)\IObit\Advanced SystemCare 5\ASCService.exe [2012-05-26 913792]
      .
      .
      --- Other Services/Drivers In Memory ---
      .
      *NewlyCreated* - 08450674
      *NewlyCreated* - 52982273
      *Deregistered* - 08450674
      *Deregistered* - 52982273
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
      iissvcs REG_MULTI_SZ w3svc was
      apphost REG_MULTI_SZ apphostsvc
      .
      HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
      Themes
      .
      Contents of the 'Scheduled Tasks' folder
      .
      2012-10-31 c:\windows\Tasks\Adobe Flash Player Updater.job
      - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-04 06:42]
      .
      2012-10-31 c:\windows\Tasks\Check for updates (Spybot - Search & Destroy).job
      - c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2012-10-06 12:11]
      .
      2012-10-31 c:\windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
      - c:\program files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2012-10-06 12:10]
      .
      2012-10-07 c:\windows\Tasks\Scan the system (Spybot - Search & Destroy).job
      - c:\program files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2012-10-06 12:11]
      .
      2012-10-08 c:\windows\Tasks\SpeedUpMyPC.job
      - c:\program files (x86)\Uniblue\SpeedUpMyPC\spmonitor.exe [2012-10-08 13:38]
      .
      .
      --------- X64 Entries -----------
      .
      .
      ------- Supplementary Scan -------
      .
      uLocal Page = c:\windows\system32\blank.htm
      uStart Page = hxxp://www.google.es/
      mLocal Page = c:\windows\SysWOW64\blank.htm
      mSearchAssistant = hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=b6ea7de400000000000000027212faae&tlver=1.4.19.19&affID=17160
      IE: &Enviar a OneNote - c:\progra~2\MICROS~4\Office14\ONBttnIE.dll/105
      IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~4\Office12\EXCEL.EXE/3000
      IE: E&xportar a Microsoft Excel - c:\progra~2\MICROS~4\Office14\EXCEL.EXE/3000
      LSP: c:\program files (x86)\VMware\VMware Workstation\vsocklib.dll
      TCP: DhcpNameServer = 192.168.2.1
      FF - ProfilePath - c:\users\Abelique\AppData\Roaming\Mozilla\Firefox\Profiles\yxzh3f70.default\
      FF - ExtSQL: 2012-09-05 17:30; {23fcfd51-4958-4f00-80a3-ae97e717ed8b}; c:\program files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
      FF - ExtSQL: 2012-10-03 13:05; {EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}; c:\program files (x86)\Mozilla Firefox\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
      .
      .
      ------- File Associations -------
      .
      JSEFile=c:\progra~2\PANDAS~1\PANDAA~1\PAVSCRIP.EXE "%1" %*
      .
      - - - - ORPHANS REMOVED - - - -
      .
      BHO-{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - (no file)
      Notify-SDWinLogon - SDWinLogon.dll
      SafeBoot-52982273.sys
      AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
      .
      .
      .
      [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\Winstep Xtreme Service]
      "ImagePath"="c:\program files (x86)\Winstep\WsxService"
      .
      --------------------- LOCKED REGISTRY KEYS ---------------------
      .
      [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
      @Denied: (2) (LocalSystem)
      "{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc,
      1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7
      "{3049C3E9-B461-4BC5-8870-4C09146192CA}"=hex:51,66,7a,6c,4c,1d,38,12,87,c0,5a,
      34,53,fa,ab,0e,f7,66,0f,49,11,3f,d6,de
      "{64182481-4F71-486B-A045-B233BD0DA8FC}"=hex:51,66,7a,6c,4c,1d,38,12,ef,27,0b,
      60,43,01,05,0d,df,53,f1,73,b8,53,ec,e8
      "{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
      94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
      "{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
      df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
      "{929801A8-4AEF-4D12-BE31-D85BF666452B}"=hex:51,66,7a,6c,4c,1d,38,12,c6,02,8b,
      96,dd,04,7c,08,c1,27,9b,1b,f3,38,01,3f
      "{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}"=hex:51,66,7a,6c,4c,1d,38,12,35,fc,e1,
      93,3e,68,a1,09,fc,5c,6e,9a,4b,77,a7,8a
      .
      [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
      @Denied: (2) (LocalSystem)
      "Timestamp"=hex:75,57,f3,97,8c,fd,cb,01
      .
      [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
      @Denied: (2) (LocalSystem)
      "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
      d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,77,bf,a8,e9,37,09,0e,4f,9a,5f,39,\
      "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
      d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,77,bf,a8,e9,37,09,0e,4f,9a,5f,39,\
      .
      [HKEY_USERS\S-1-5-21-1392155237-1964330354-2939998967-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{35EFDA95-B0F6-79E9-B12A-D81CA5A3FCC6}*]
      "jafmkjjniblmmephbpob"=hex:66,61,6b,67,64,67,64,6c,63,6c,67,6b,00,fa
      "panmlegkmlmjmcigenimpfofoogclmob"=hex:63,61,6d,67,64,62,00,00
      "hafmkjjniblmmeph"=hex:6e,62,65,6d,6e,64,66,6a,6d,61,6e,6d,64,64,6a,64,6b,69,
      62,62,70,69,6a,6d,6e,64,61,6b,61,68,68,61,6e,67,6c,6b,64,65,6b,68,6e,63,61,\
      .
      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
      @Denied: (A 2) (Everyone)
      @="FlashBroker"
      "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
      "Enabled"=dword:00000001
      .
      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
      @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
      @Denied: (A 2) (Everyone)
      @="IFlashBroker5"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
      @="{00020424-0000-0000-C000-000000000046}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      "Version"="1.0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
      @Denied: (A 2) (Everyone)
      @="FlashBroker"
      "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
      "Enabled"=dword:00000001
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
      @Denied: (A 2) (Everyone)
      @="Shockwave Flash Object"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"
      "ThreadingModel"="Apartment"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
      @="0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
      @="ShockwaveFlash.ShockwaveFlash.11"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
      @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
      @="1.0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
      @="ShockwaveFlash.ShockwaveFlash"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
      @Denied: (A 2) (Everyone)
      @="Macromedia Flash Factory Object"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"
      "ThreadingModel"="Apartment"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
      @="FlashFactory.FlashFactory.1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
      @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
      @="1.0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
      @="FlashFactory.FlashFactory"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
      @Denied: (A 2) (Everyone)
      @="IFlashBroker5"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
      @="{00020424-0000-0000-C000-000000000046}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      "Version"="1.0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
      @Denied: (A 2) (Everyone)
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
      @="Shockwave Flash"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
      @Denied: (A 2) (Everyone)
      @=""
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
      @="FlashBroker"
      .
      [HKEY_LOCAL_MACHINE\software\Wow6432Node\Classes]
      "SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
      00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
      .
      [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
      @Denied: (A) (Everyone)
      "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
      .
      [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
      @Denied: (A) (Everyone)
      .
      [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
      "Key"="ActionsPane3"
      "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
      .
      [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
      @Denied: (A) (Users)
      @Denied: (A) (Everyone)
      @Allowed: (B 1 2 3 4 5) (S-1-5-20)
      "BlindDial"=dword:00000000
      .
      [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
      @Denied: (A) (Users)
      @Denied: (A) (Everyone)
      @Allowed: (B 1 2 3 4 5) (S-1-5-20)
      "BlindDial"=dword:00000000
      .
      Completion time: 2012-10-31 13:59:17
      ComboFix-quarantined-files.txt 2012-10-31 12:59
      .
      Pre-Run: 37.960.855.552 bytes libres
      Post-Run: 37.706.731.520 bytes libres
      .
      - - End Of File - - 6DF47FC67745F7FE577A492B650D10E2
      ///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

      Los reportes del portatil los colgaré mas tarde ya que el combofix esta tardando en hacer el analisis, Gracias otra vez

    3. #13
      Usuario Avatar de abelique
      Registrado
      dic 2011
      Ubicación
      barcelona
      Mensajes
      24

      Re: No puedo actualizar windows 7 home premium

      Los reportes del PORTATIL:
      TDSSKiller:
      13:24:10.0795 1604 TDSS rootkit removing tool 2.8.13.0 Oct 12 2012 17:26:47
      13:24:11.0092 1604 ============================================================
      13:24:11.0092 1604 Current date / time: 2012/10/31 13:24:11.0092
      13:24:11.0092 1604 SystemInfo:
      13:24:11.0092 1604
      13:24:11.0092 1604 OS Version: 6.1.7600 ServicePack: 0.0
      13:24:11.0092 1604 Product type: Workstation
      13:24:11.0092 1604 ComputerName: SILVI
      13:24:11.0092 1604 UserName: Silvia
      13:24:11.0092 1604 Windows directory: C:\Windows
      13:24:11.0092 1604 System windows directory: C:\Windows
      13:24:11.0092 1604 Running under WOW64
      13:24:11.0092 1604 Processor architecture: Intel x64
      13:24:11.0092 1604 Number of processors: 2
      13:24:11.0092 1604 Page size: 0x1000
      13:24:11.0092 1604 Boot type: Normal boot
      13:24:11.0092 1604 ============================================================
      13:24:12.0979 1604 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
      13:24:12.0995 1604 ============================================================
      13:24:12.0995 1604 \Device\Harddisk0\DR0:
      13:24:13.0011 1604 MBR partitions:
      13:24:13.0011 1604 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1D4B178, BlocksNum 0xE8E0360
      13:24:13.0026 1604 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1062B517, BlocksNum 0x29D5972A
      13:24:13.0026 1604 ============================================================
      13:24:13.0057 1604 C: <-> \Device\Harddisk0\DR0\Partition1
      13:24:13.0089 1604 D: <-> \Device\Harddisk0\DR0\Partition2
      13:24:13.0089 1604 ============================================================
      13:24:13.0089 1604 Initialize success
      13:24:13.0089 1604 ============================================================
      13:25:20.0059 4352 ============================================================
      13:25:20.0059 4352 Scan started
      13:25:20.0059 4352 Mode: Manual; SigCheck; TDLFS;
      13:25:20.0059 4352 ============================================================
      13:25:20.0543 4352 ================ Scan system memory ========================
      13:25:20.0543 4352 System memory - ok
      13:25:20.0543 4352 ================ Scan services =============================
      13:25:20.0730 4352 [ 1B00662092F9F9568B995902F0CC40D5 ] 1394ohci C:\Windows\system32\DRIVERS\1394ohci.sys
      13:25:20.0964 4352 1394ohci - ok
      13:25:20.0980 4352 [ 6F11E88748CDEFD2F76AA215F97DDFE5 ] ACPI C:\Windows\system32\DRIVERS\ACPI.sys
      13:25:21.0011 4352 ACPI - ok
      13:25:21.0027 4352 [ 63B05A0420CE4BF0E4AF6DCC7CADA254 ] AcpiPmi C:\Windows\system32\DRIVERS\acpipmi.sys
      13:25:21.0073 4352 AcpiPmi - ok
      13:25:21.0214 4352 [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
      13:25:21.0245 4352 AdobeFlashPlayerUpdateSvc - ok
      13:25:21.0261 4352 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
      13:25:21.0292 4352 adp94xx - ok
      13:25:21.0307 4352 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
      13:25:21.0339 4352 adpahci - ok
      13:25:21.0370 4352 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
      13:25:21.0385 4352 adpu320 - ok
      13:25:21.0697 4352 [ C0BF554D2277F7A4C735D475ADE2E3B2 ] ADSMService C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
      13:25:21.0713 4352 ADSMService ( UnsignedFile.Multi.Generic ) - warning
      13:25:21.0713 4352 ADSMService - detected UnsignedFile.Multi.Generic (1)
      13:25:21.0760 4352 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
      13:25:21.0822 4352 AeLookupSvc - ok
      13:25:21.0869 4352 [ B9384E03479D2506BC924C16A3DB87BC ] AFD C:\Windows\system32\drivers\afd.sys
      13:25:21.0931 4352 AFD - ok
      13:25:21.0963 4352 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\DRIVERS\agp440.sys
      13:25:21.0978 4352 agp440 - ok
      13:25:22.0009 4352 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
      13:25:22.0056 4352 ALG - ok
      13:25:22.0087 4352 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\DRIVERS\aliide.sys
      13:25:22.0103 4352 aliide - ok
      13:25:22.0119 4352 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\DRIVERS\amdide.sys
      13:25:22.0134 4352 amdide - ok
      13:25:22.0150 4352 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
      13:25:22.0197 4352 AmdK8 - ok
      13:25:22.0212 4352 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
      13:25:22.0259 4352 AmdPPM - ok
      13:25:22.0275 4352 [ 7A4B413614C055935567CF88A9734D38 ] amdsata C:\Windows\system32\DRIVERS\amdsata.sys
      13:25:22.0290 4352 amdsata - ok
      13:25:22.0321 4352 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
      13:25:22.0337 4352 amdsbs - ok
      13:25:22.0368 4352 [ B4AD0CACBAB298671DD6F6EF7E20679D ] amdxata C:\Windows\system32\DRIVERS\amdxata.sys
      13:25:22.0384 4352 amdxata - ok
      13:25:22.0446 4352 [ 391887990CDAA83DE5C56C3FDE966DA1 ] AmUStor C:\Windows\system32\drivers\AmUStor.SYS
      13:25:22.0493 4352 AmUStor - ok
      13:25:22.0509 4352 [ 42FD751B27FA0E9C69BB39F39E409594 ] AppID C:\Windows\system32\drivers\appid.sys
      13:25:22.0540 4352 AppID - ok
      13:25:22.0571 4352 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
      13:25:22.0618 4352 AppIDSvc - ok
      13:25:22.0633 4352 [ D065BE66822847B7F127D1F90158376E ] Appinfo C:\Windows\System32\appinfo.dll
      13:25:22.0680 4352 Appinfo - ok
      13:25:22.0727 4352 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
      13:25:22.0743 4352 arc - ok
      13:25:22.0758 4352 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
      13:25:22.0789 4352 arcsas - ok
      13:25:22.0805 4352 [ 88FBC8BEBFD38566235EAA5E4DBC4E05 ] AsDsm C:\Windows\system32\drivers\AsDsm.sys
      13:25:22.0852 4352 AsDsm - ok
      13:25:22.0930 4352 [ 18E5C2F937F9DEB8C282DF66A3761925 ] ASLDRService C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
      13:25:22.0961 4352 ASLDRService - ok
      13:25:23.0039 4352 [ 2DB34EDD17D3A8DA7105A19C95A3DD68 ] ASMMAP64 C:\Program Files\ATKGFNEX\ASMMAP64.sys
      13:25:23.0055 4352 ASMMAP64 - ok
      13:25:23.0086 4352 [ 55142B4F7A7E4C9C151C6000A6BF7809 ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
      13:25:23.0117 4352 aswFsBlk - ok
      13:25:23.0148 4352 [ AA9FDE3D630160B47DAB21BF8250111C ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
      13:25:23.0164 4352 aswMonFlt - ok
      13:25:23.0195 4352 [ 2A6675C24DF5159A9506CD13ECE5ABE9 ] aswRdr C:\Windows\System32\Drivers\aswrdr2.sys
      13:25:23.0211 4352 aswRdr - ok
      13:25:23.0304 4352 [ 4E38475BDB51A867CCBA7D5DF7FDFC0C ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
      13:25:23.0351 4352 aswSnx - ok
      13:25:23.0382 4352 [ 9A49D80D65451AF22913AEF772CC3DA9 ] aswSP C:\Windows\system32\drivers\aswSP.sys
      13:25:23.0398 4352 aswSP - ok
      13:25:23.0413 4352 [ C3EC420451AC5300A22190AE38418FBA ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
      13:25:23.0445 4352 aswTdi - ok
      13:25:23.0460 4352 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
      13:25:23.0523 4352 AsyncMac - ok
      13:25:23.0554 4352 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\DRIVERS\atapi.sys
      13:25:23.0569 4352 atapi - ok
      13:25:23.0632 4352 [ 0ACC06FCF46F64ED4F11E57EE461C1F4 ] athr C:\Windows\system32\DRIVERS\athrx.sys
      13:25:23.0694 4352 athr - ok
      13:25:23.0819 4352 [ 7C157574A181B19B9DCF5F339E25337E ] ATKGFNEXSrv C:\Program Files\ATKGFNEX\GFNEXSrv.exe
      13:25:23.0835 4352 ATKGFNEXSrv ( UnsignedFile.Multi.Generic ) - warning
      13:25:23.0835 4352 ATKGFNEXSrv - detected UnsignedFile.Multi.Generic (1)
      13:25:23.0881 4352 [ 07721A77180EDD4D39CCB865BF63C7FD ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
      13:25:23.0944 4352 AudioEndpointBuilder - ok
      13:25:23.0959 4352 [ 07721A77180EDD4D39CCB865BF63C7FD ] AudioSrv C:\Windows\System32\Audiosrv.dll
      13:25:24.0022 4352 AudioSrv - ok
      13:25:24.0084 4352 [ 04AC21E821F259845BD7367CEE057290 ] avast! Antivirus C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
      13:25:24.0100 4352 avast! Antivirus - ok
      13:25:24.0287 4352 [ F6A528DE535396C2FB1A4E3C6F00CEC4 ] AVGIDSAgent C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe
      13:25:24.0381 4352 AVGIDSAgent - ok
      13:25:24.0443 4352 [ 1B2E9FCDC26DC7C81D4131430E2DC936 ] AVGIDSDriver C:\Windows\system32\DRIVERS\avgidsdrivera.sys
      13:25:24.0474 4352 AVGIDSDriver - ok
      13:25:24.0521 4352 [ 0F293406F64B48D5D2F0D3A1117F3A83 ] AVGIDSFilter C:\Windows\system32\DRIVERS\avgidsfiltera.sys
      13:25:24.0537 4352 AVGIDSFilter - ok
      13:25:24.0568 4352 [ CFFC3A4A638F462E0561CB368B9A7A3A ] AVGIDSHA C:\Windows\system32\DRIVERS\avgidsha.sys
      13:25:24.0583 4352 AVGIDSHA - ok
      13:25:24.0615 4352 [ 221FEBAB02D6C97C95558348CC354A85 ] Avgldx64 C:\Windows\system32\DRIVERS\avgldx64.sys
      13:25:24.0646 4352 Avgldx64 - ok
      13:25:24.0661 4352 [ A6AEC362AAE5E2DDA7445E7690CB0F33 ] Avgmfx64 C:\Windows\system32\DRIVERS\avgmfx64.sys
      13:25:24.0677 4352 Avgmfx64 - ok
      13:25:24.0724 4352 [ 645C7F0A0E39758A0024A9B1748273C0 ] Avgrkx64 C:\Windows\system32\DRIVERS\avgrkx64.sys
      13:25:24.0739 4352 Avgrkx64 - ok
      13:25:24.0771 4352 [ F8C3C7ED612A41B05C66358FC9786BFD ] Avgtdia C:\Windows\system32\DRIVERS\avgtdia.sys
      13:25:24.0786 4352 Avgtdia - ok
      13:25:24.0849 4352 [ DE24B2CA078FC6A7EAA53B1DFD3F61CF ] avgtp C:\Windows\system32\drivers\avgtpx64.sys
      13:25:24.0864 4352 avgtp - ok
      13:25:24.0895 4352 [ EA1145DEBCD508FD25BD1E95C4346929 ] avgwd C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
      13:25:24.0911 4352 avgwd - ok
      13:25:24.0942 4352 [ B20B5FA5CA050E9926E4D1DB81501B32 ] AxInstSV C:\Windows\System32\AxInstSV.dll
      13:25:24.0973 4352 AxInstSV - ok
      13:25:25.0020 4352 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
      13:25:25.0067 4352 b06bdrv - ok
      13:25:25.0098 4352 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
      13:25:25.0145 4352 b57nd60a - ok
      13:25:25.0207 4352 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
      13:25:25.0239 4352 BDESVC - ok
      13:25:25.0270 4352 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
      13:25:25.0348 4352 Beep - ok
      13:25:25.0379 4352 [ 4992C609A6315671463E30F6512BC022 ] BFE C:\Windows\System32\bfe.dll
      13:25:25.0457 4352 BFE - ok
      13:25:25.0519 4352 [ 7F0C323FE3DA28AA4AA1BDA3F575707F ] BITS C:\Windows\System32\qmgr.dll
      13:25:25.0629 4352 BITS - ok
      13:25:25.0675 4352 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
      13:25:25.0707 4352 blbdrive - ok
      13:25:25.0738 4352 [ 91CE0D3DC57DD377E690A2D324022B08 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
      13:25:25.0800 4352 bowser - ok
      13:25:25.0816 4352 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
      13:25:25.0847 4352 BrFiltLo - ok
      13:25:25.0863 4352 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
      13:25:25.0894 4352 BrFiltUp - ok
      13:25:25.0941 4352 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
      13:25:26.0003 4352 BridgeMP - ok
      13:25:26.0034 4352 [ 94FBC06F294D58D02361918418F996E3 ] Browser C:\Windows\System32\browser.dll
      13:25:26.0097 4352 Browser - ok
      13:25:26.0112 4352 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
      13:25:26.0159 4352 Brserid - ok
      13:25:26.0175 4352 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
      13:25:26.0206 4352 BrSerWdm - ok
      13:25:26.0237 4352 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
      13:25:26.0268 4352 BrUsbMdm - ok
      13:25:26.0299 4352 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
      13:25:26.0346 4352 BrUsbSer - ok
      13:25:26.0377 4352 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
      13:25:26.0409 4352 BTHMODEM - ok
      13:25:26.0440 4352 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
      13:25:26.0518 4352 bthserv - ok
      13:25:26.0549 4352 catchme - ok
      13:25:26.0565 4352 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
      13:25:26.0643 4352 cdfs - ok
      13:25:26.0674 4352 [ 83D2D75E1EFB81B3450C18131443F7DB ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
      13:25:26.0705 4352 cdrom - ok
      13:25:26.0752 4352 [ 312E2F82AF11E79906898AC3E3D58A1F ] CertPropSvc C:\Windows\System32\certprop.dll
      13:25:26.0830 4352 CertPropSvc - ok
      13:25:26.0861 4352 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
      13:25:26.0908 4352 circlass - ok
      13:25:26.0939 4352 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
      13:25:26.0970 4352 CLFS - ok
      13:25:27.0033 4352 clr_optimization_v2.0.50727_32 - ok
      13:25:27.0095 4352 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
      13:25:27.0157 4352 clr_optimization_v2.0.50727_64 - ok
      13:25:27.0251 4352 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      13:25:27.0298 4352 clr_optimization_v4.0.30319_32 - ok
      13:25:27.0360 4352 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
      13:25:27.0423 4352 clr_optimization_v4.0.30319_64 - ok
      13:25:27.0469 4352 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
      13:25:27.0485 4352 CmBatt - ok
      13:25:27.0516 4352 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\DRIVERS\cmdide.sys
      13:25:27.0532 4352 cmdide - ok
      13:25:27.0563 4352 [ F95FD4CB7DA00BA2A63CE9F6B5C053E1 ] CNG C:\Windows\system32\Drivers\cng.sys
      13:25:27.0594 4352 CNG - ok
      13:25:27.0594 4352 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
      13:25:27.0625 4352 Compbatt - ok
      13:25:27.0641 4352 [ F26B3A86F6FA87CA360B879581AB4123 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
      13:25:27.0688 4352 CompositeBus - ok
      13:25:27.0688 4352 COMSysApp - ok
      13:25:27.0719 4352 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
      13:25:27.0750 4352 crcdisk - ok
      13:25:27.0781 4352 [ 8C57411B66282C01533CB776F98AD384 ] CryptSvc C:\Windows\system32\cryptsvc.dll
      13:25:27.0844 4352 CryptSvc - ok
      13:25:27.0906 4352 [ 7266972E86890E2B30C0C322E906B027 ] DcomLaunch C:\Windows\system32\rpcss.dll
      13:25:28.0000 4352 DcomLaunch - ok
      13:25:28.0031 4352 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
      13:25:28.0093 4352 defragsvc - ok
      13:25:28.0140 4352 [ 3F1DC527070ACB87E40AFE46EF6DA749 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
      13:25:28.0203 4352 DfsC - ok
      13:25:28.0218 4352 [ CE3B9562D997F69B330D181A8875960F ] Dhcp C:\Windows\system32\dhcpcore.dll
      13:25:28.0281 4352 Dhcp - ok
      13:25:28.0296 4352 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
      13:25:28.0343 4352 discache - ok
      13:25:28.0374 4352 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
      13:25:28.0390 4352 Disk - ok
      13:25:28.0421 4352 [ 676108C4E3AA6F6B34633748BD0BEBD9 ] Dnscache C:\Windows\System32\dnsrslvr.dll
      13:25:28.0483 4352 Dnscache - ok
      13:25:28.0499 4352 [ 14452ACDB09B70964C8C21BF80A13ACB ] dot3svc C:\Windows\System32\dot3svc.dll
      13:25:28.0733 4352 dot3svc - ok
      13:25:28.0811 4352 [ 8C2BA6BEA949EE6E68385F5692BAFB94 ] DPS C:\Windows\system32\dps.dll
      13:25:28.0905 4352 DPS - ok
      13:25:28.0983 4352 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
      13:25:29.0029 4352 drmkaud - ok
      13:25:29.0092 4352 [ 24CE1ECF9D0AE0301775B07F5FEA175B ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
      13:25:29.0139 4352 DXGKrnl - ok
      13:25:29.0185 4352 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
      13:25:29.0263 4352 EapHost - ok
      13:25:29.0357 4352 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
      13:25:29.0482 4352 ebdrv - ok
      13:25:29.0513 4352 [ 0793F40B9B8A1BDD266296409DBD91EA ] EFS C:\Windows\System32\lsass.exe
      13:25:29.0544 4352 EFS - ok
      13:25:29.0622 4352 [ 47C071994C3F649F23D9CD075AC9304A ] ehRecvr C:\Windows\ehome\ehRecvr.exe
      13:25:29.0685 4352 ehRecvr - ok
      13:25:29.0716 4352 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
      13:25:29.0763 4352 ehSched - ok
      13:25:29.0794 4352 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
      13:25:29.0825 4352 elxstor - ok
      13:25:29.0841 4352 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\DRIVERS\errdev.sys
      13:25:29.0872 4352 ErrDev - ok
      13:25:29.0919 4352 [ 3C38648375B7F3988691F53A7AAE10A9 ] ETD C:\Windows\system32\DRIVERS\ETD.sys
      13:25:29.0950 4352 ETD - ok
      13:25:30.0012 4352 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
      13:25:30.0075 4352 EventSystem - ok
      13:25:30.0106 4352 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
      13:25:30.0168 4352 exfat - ok
      13:25:30.0215 4352 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
      13:25:30.0293 4352 fastfat - ok
      13:25:30.0324 4352 [ D607B2F1BEE3992AA6C2C92C0A2F0855 ] Fax C:\Windows\system32\fxssvc.exe
      13:25:30.0402 4352 Fax - ok
      13:25:30.0433 4352 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
      13:25:30.0465 4352 fdc - ok
      13:25:30.0496 4352 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
      13:25:30.0558 4352 fdPHost - ok
      13:25:30.0589 4352 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
      13:25:30.0636 4352 FDResPub - ok
      13:25:30.0667 4352 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
      13:25:30.0683 4352 FileInfo - ok
      13:25:30.0823 4352 [ 060CC45CECAE2FEAFF9C8C52D8FAFAA8 ] FileMonitor C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys
      13:25:30.0839 4352 FileMonitor - ok
      13:25:30.0855 4352 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
      13:25:30.0901 4352 Filetrace - ok
      13:25:30.0948 4352 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
      13:25:31.0011 4352 flpydisk - ok
      13:25:31.0057 4352 [ F7866AF72ABBAF84B1FA5AA195378C59 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
      13:25:31.0089 4352 FltMgr - ok
      13:25:31.0151 4352 [ BC00505CFDA789ED3BE95D2FF38C4875 ] FontCache C:\Windows\system32\FntCache.dll
      13:25:31.0229 4352 FontCache - ok
      13:25:31.0276 4352 [ 8D89E3131C27FDD6932189CB785E1B7A ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
      13:25:31.0307 4352 FontCache3.0.0.0 - ok
      13:25:31.0338 4352 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
      13:25:31.0369 4352 FsDepends - ok
      13:25:31.0401 4352 [ 07DA62C960DDCCC2D35836AEAB4FC578 ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
      13:25:31.0432 4352 fssfltr - ok
      13:25:31.0557 4352 [ 28DDEEEC44E988657B732CF404D504CB ] fsssvc C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
      13:25:31.0635 4352 fsssvc - ok
      13:25:31.0666 4352 [ E95EF8547DE20CF0603557C0CF7A9462 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
      13:25:31.0681 4352 Fs_Rec - ok
      13:25:31.0728 4352 [ AE87BA80D0EC3B57126ED2CDC15B24ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
      13:25:31.0759 4352 fvevol - ok
      13:25:31.0775 4352 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
      13:25:31.0806 4352 gagp30kx - ok
      13:25:31.0853 4352 [ FE5AB4525BC2EC68B9119A6E5D40128B ] gpsvc C:\Windows\System32\gpsvc.dll
      13:25:31.0915 4352 gpsvc - ok
      13:25:32.0056 4352 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
      13:25:32.0087 4352 gupdate - ok
      13:25:32.0118 4352 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
      13:25:32.0149 4352 gupdatem - ok
      13:25:32.0181 4352 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
      13:25:32.0227 4352 hcw85cir - ok
      13:25:32.0259 4352 [ 6410F6F415B2A5A9037224C41DA8BF12 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
      13:25:32.0305 4352 HdAudAddService - ok
      13:25:32.0337 4352 [ 0A49913402747A0B67DE940FB42CBDBB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
      13:25:32.0383 4352 HDAudBus - ok
      13:25:32.0399 4352 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
      13:25:32.0446 4352 HidBatt - ok
      13:25:32.0461 4352 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
      13:25:32.0508 4352 HidBth - ok
      13:25:32.0524 4352 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
      13:25:32.0555 4352 HidIr - ok
      13:25:32.0602 4352 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll
      13:25:32.0664 4352 hidserv - ok
      13:25:32.0695 4352 [ B3BF6B5B50006DEF50B66306D99FCF6F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
      13:25:32.0711 4352 HidUsb - ok
      13:25:32.0727 4352 [ EFA58EDE58DD74388FFD04CB32681518 ] hkmsvc C:\Windows\system32\kmsvc.dll
      13:25:32.0789 4352 hkmsvc - ok
      13:25:32.0820 4352 [ 046B2673767CA626E2CFB7FDF735E9E8 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
      13:25:32.0867 4352 HomeGroupListener - ok
      13:25:32.0898 4352 [ 06A7422224D9865A5613710A089987DF ] HomeGroupProvider C:\Windows\system32\provsvc.dll
      13:25:32.0961 4352 HomeGroupProvider - ok
      13:25:32.0976 4352 [ 0886D440058F203EBA0E1825E4355914 ] HpSAMD C:\Windows\system32\DRIVERS\HpSAMD.sys
      13:25:33.0023 4352 HpSAMD - ok
      13:25:33.0085 4352 [ CEE049CAC4EFA7F4E1E4AD014414A5D4 ] HTTP C:\Windows\system32\drivers\HTTP.sys
      13:25:33.0148 4352 HTTP - ok
      13:25:33.0163 4352 [ F17766A19145F111856378DF337A5D79 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
      13:25:33.0179 4352 hwpolicy - ok
      13:25:33.0257 4352 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
      13:25:33.0304 4352 i8042prt - ok
      13:25:33.0319 4352 [ D83EFB6FD45DF9D55E9A1AFC63640D50 ] iaStorV C:\Windows\system32\DRIVERS\iaStorV.sys
      13:25:33.0351 4352 iaStorV - ok
      13:25:33.0429 4352 [ 2F2BE70D3E02B6FA877921AB9516D43C ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
      13:25:33.0522 4352 idsvc - ok
      13:25:33.0553 4352 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
      13:25:33.0569 4352 iirsp - ok
      13:25:33.0631 4352 [ C5B4683680DF085B57BC53E5EF34861F ] IKEEXT C:\Windows\System32\ikeext.dll
      13:25:33.0741 4352 IKEEXT - ok
      13:25:33.0803 4352 [ 8AE99EBE30E8338907361018D9030835 ] IMFservice C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
      13:25:33.0850 4352 IMFservice - ok
      13:25:33.0928 4352 [ 5BA1779E2C84FDE2A5E201FFF9C42C9C ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
      13:25:33.0990 4352 IntcAzAudAddService - ok
      13:25:34.0068 4352 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\DRIVERS\intelide.sys
      13:25:34.0099 4352 intelide - ok
      13:25:34.0146 4352 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
      13:25:34.0193 4352 intelppm - ok
      13:25:34.0224 4352 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
      13:25:34.0271 4352 IPBusEnum - ok
      13:25:34.0287 4352 [ 722DD294DF62483CECAAE6E094B4D695 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
      13:25:34.0349 4352 IpFilterDriver - ok
      13:25:34.0380 4352 [ F8E058D17363EC580E4B7232778B6CB5 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
      13:25:34.0474 4352 iphlpsvc - ok
      13:25:34.0489 4352 [ E2B4A4494DB7CB9B89B55CA268C337C5 ] IPMIDRV C:\Windows\system32\DRIVERS\IPMIDrv.sys
      13:25:34.0536 4352 IPMIDRV - ok
      13:25:34.0567 4352 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
      13:25:34.0614 4352 IPNAT - ok
      13:25:34.0630 4352 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
      13:25:34.0677 4352 IRENUM - ok
      13:25:34.0708 4352 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\DRIVERS\isapnp.sys
      13:25:34.0723 4352 isapnp - ok
      13:25:34.0739 4352 [ FA4D2557DE56D45B0A346F93564BE6E1 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
      13:25:34.0770 4352 iScsiPrt - ok
      13:25:34.0801 4352 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
      13:25:34.0817 4352 kbdclass - ok
      13:25:34.0833 4352 [ 6DEF98F8541E1B5DCEB2C822A11F7323 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
      13:25:34.0879 4352 kbdhid - ok
      13:25:34.0911 4352 [ E63EF8C3271D014F14E2469CE75FECB4 ] kbfiltr C:\Windows\system32\DRIVERS\kbfiltr.sys
      13:25:34.0926 4352 kbfiltr - ok
      13:25:34.0957 4352 [ 0793F40B9B8A1BDD266296409DBD91EA ] KeyIso C:\Windows\system32\lsass.exe
      13:25:34.0989 4352 KeyIso - ok
      13:25:35.0020 4352 [ E8B6FCC9C83535C67F835D407620BD27 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
      13:25:35.0035 4352 KSecDD - ok
      13:25:35.0067 4352 [ A8C63880EF6F4D3FEC7B616B9C060215 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
      13:25:35.0098 4352 KSecPkg - ok
      13:25:35.0098 4352 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
      13:25:35.0176 4352 ksthunk - ok
      13:25:35.0207 4352 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
      13:25:35.0301 4352 KtmRm - ok
      13:25:35.0332 4352 [ 81F1D04D4D0E433099365127375FD501 ] LanmanServer C:\Windows\System32\srvsvc.dll
      13:25:35.0410 4352 LanmanServer - ok
      13:25:35.0457 4352 [ 27026EAC8818E8A6C00A1CAD2F11D29A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
      13:25:35.0519 4352 LanmanWorkstation - ok
      13:25:35.0550 4352 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
      13:25:35.0613 4352 lltdio - ok
      13:25:35.0644 4352 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
      13:25:35.0706 4352 lltdsvc - ok
      13:25:35.0737 4352 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
      13:25:35.0815 4352 lmhosts - ok
      13:25:35.0831 4352 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
      13:25:35.0847 4352 LSI_FC - ok
      13:25:35.0893 4352 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
      13:25:35.0909 4352 LSI_SAS - ok
      13:25:35.0925 4352 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
      13:25:35.0956 4352 LSI_SAS2 - ok
      13:25:35.0971 4352 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
      13:25:36.0003 4352 LSI_SCSI - ok
      13:25:36.0034 4352 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
      13:25:36.0081 4352 luafv - ok
      13:25:36.0112 4352 [ A8FE8F2783B2929B56F5370A89356CE9 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
      13:25:36.0127 4352 MBAMProtector - ok
      13:25:36.0190 4352 [ 85B16A92B117A5A800032ECD904B86DB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
      13:25:36.0221 4352 MBAMScheduler - ok
      13:25:36.0252 4352 [ 20E2469DB709FC675E655CEAA11BE312 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
      13:25:36.0283 4352 MBAMService - ok
      13:25:36.0330 4352 [ F84C8F1000BC11E3B7B23CBD3BAFF111 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
      13:25:36.0377 4352 Mcx2Svc - ok
      13:25:36.0408 4352 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
      13:25:36.0424 4352 megasas - ok
      13:25:36.0439 4352 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
      13:25:36.0471 4352 MegaSR - ok
      13:25:36.0486 4352 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
      13:25:36.0564 4352 MMCSS - ok
      13:25:36.0580 4352 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
      13:25:36.0642 4352 Modem - ok
      13:25:36.0673 4352 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
      13:25:36.0720 4352 monitor - ok
      13:25:36.0736 4352 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
      13:25:36.0751 4352 mouclass - ok
      13:25:36.0767 4352 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
      13:25:36.0814 4352 mouhid - ok
      13:25:36.0845 4352 [ 791AF66C4D0E7C90A3646066386FB571 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
      13:25:36.0861 4352 mountmgr - ok
      13:25:36.0892 4352 [ 609D1D87649ECC19796F4D76D4C15CEA ] mpio C:\Windows\system32\DRIVERS\mpio.sys
      13:25:36.0907 4352 mpio - ok
      13:25:36.0939 4352 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
      13:25:36.0985 4352 mpsdrv - ok
      13:25:37.0032 4352 [ AECAB449567D1846DAD63ECE49E893E3 ] MpsSvc C:\Windows\system32\mpssvc.dll
      13:25:37.0126 4352 MpsSvc - ok
      13:25:37.0157 4352 [ 30524261BB51D96D6FCBAC20C810183C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
      13:25:37.0188 4352 MRxDAV - ok
      13:25:37.0219 4352 [ 767A4C3BCF9410C286CED15A2DB17108 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
      13:25:37.0251 4352 mrxsmb - ok
      13:25:37.0282 4352 [ 920EE0FF995FCFDEB08C41605A959E1C ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
      13:25:37.0313 4352 mrxsmb10 - ok
      13:25:37.0360 4352 [ 740D7EA9D72C981510A5292CF6ADC941 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
      13:25:37.0407 4352 mrxsmb20 - ok
      13:25:37.0438 4352 [ 5C37497276E3B3A5488B23A326A754B7 ] msahci C:\Windows\system32\DRIVERS\msahci.sys
      13:25:37.0453 4352 msahci - ok
      13:25:37.0469 4352 [ 8D27B597229AED79430FB9DB3BCBFBD0 ] msdsm C:\Windows\system32\DRIVERS\msdsm.sys
      13:25:37.0500 4352 msdsm - ok
      13:25:37.0516 4352 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
      13:25:37.0578 4352 MSDTC - ok
      13:25:37.0609 4352 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
      13:25:37.0672 4352 Msfs - ok
      13:25:37.0703 4352 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
      13:25:37.0765 4352 mshidkmdf - ok
      13:25:37.0781 4352 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\DRIVERS\msisadrv.sys
      13:25:37.0797 4352 msisadrv - ok
      13:25:37.0843 4352 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
      13:25:37.0921 4352 MSiSCSI - ok
      13:25:37.0937 4352 msiserver - ok
      13:25:37.0968 4352 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
      13:25:38.0031 4352 MSKSSRV - ok
      13:25:38.0062 4352 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
      13:25:38.0124 4352 MSPCLOCK - ok
      13:25:38.0155 4352 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
      13:25:38.0218 4352 MSPQM - ok
      13:25:38.0233 4352 [ 89CB141AA8616D8C6A4610FA26C60964 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
      13:25:38.0265 4352 MsRPC - ok
      13:25:38.0296 4352 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
      13:25:38.0327 4352 mssmbios - ok
      13:25:38.0343 4352 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
      13:25:38.0405 4352 MSTEE - ok
      13:25:38.0421 4352 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
      13:25:38.0452 4352 MTConfig - ok
      13:25:38.0467 4352 [ 032D35C996F21D19A205A7C8F0B76F3C ] MTsensor C:\Windows\system32\DRIVERS\ATK64AMD.sys
      13:25:38.0483 4352 MTsensor - ok
      13:25:38.0514 4352 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
      13:25:38.0530 4352 Mup - ok
      13:25:38.0561 4352 [ 4987E079A4530FA737A128BE54B63B12 ] napagent C:\Windows\system32\qagentRT.dll
      13:25:38.0639 4352 napagent - ok
      13:25:38.0686 4352 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
      13:25:38.0733 4352 NativeWifiP - ok
      13:25:38.0779 4352 [ CAD515DBD07D082BB317D9928CE8962C ] NDIS C:\Windows\system32\drivers\ndis.sys
      13:25:38.0811 4352 NDIS - ok
      13:25:38.0842 4352 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
      13:25:38.0889 4352 NdisCap - ok
      13:25:38.0904 4352 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
      13:25:38.0951 4352 NdisTapi - ok
      13:25:38.0998 4352 [ F105BA1E22BF1F2EE8F005D4305E4BEC ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
      13:25:39.0060 4352 Ndisuio - ok
      13:25:39.0091 4352 [ 557DFAB9CA1FCB036AC77564C010DAD3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
      13:25:39.0154 4352 NdisWan - ok
      13:25:39.0169 4352 [ 659B74FB74B86228D6338D643CD3E3CF ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
      13:25:39.0232 4352 NDProxy - ok
      13:25:39.0247 4352 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
      13:25:39.0310 4352 NetBIOS - ok
      13:25:39.0357 4352 [ 9162B273A44AB9DCE5B44362731D062A ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
      13:25:39.0419 4352 NetBT - ok
      13:25:39.0435 4352 [ 0793F40B9B8A1BDD266296409DBD91EA ] Netlogon C:\Windows\system32\lsass.exe
      13:25:39.0481 4352 Netlogon - ok
      13:25:39.0528 4352 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
      13:25:39.0622 4352 Netman - ok
      13:25:39.0653 4352 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
      13:25:39.0715 4352 netprofm - ok
      13:25:39.0762 4352 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
      13:25:39.0778 4352 NetTcpPortSharing - ok
      13:25:39.0809 4352 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
      13:25:39.0825 4352 nfrd960 - ok
      13:25:39.0856 4352 [ D9A0CE66046D6EFA0C61BAA885CBA0A8 ] NlaSvc C:\Windows\System32\nlasvc.dll
      13:25:39.0934 4352 NlaSvc - ok
      13:25:39.0949 4352 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
      13:25:40.0012 4352 Npfs - ok
      13:25:40.0027 4352 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
      13:25:40.0105 4352 nsi - ok
      13:25:40.0152 4352 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
      13:25:40.0215 4352 nsiproxy - ok
      13:25:40.0277 4352 [ 356698A13C4630D5B31C37378D469196 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
      13:25:40.0324 4352 Ntfs - ok
      13:25:40.0339 4352 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
      13:25:40.0402 4352 Null - ok
      13:25:40.0417 4352 [ 6E41A4DF26340A07A489B721F9721EC1 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
      13:25:40.0433 4352 NVHDA - ok
      13:25:40.0714 4352 [ 25B51A9FB639DC59221CB3A5B7836E30 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
      13:25:40.0917 4352 nvlddmkm - ok
      13:25:40.0948 4352 [ 3E38712941E9BB4DDBEE00AFFE3FED3D ] nvraid C:\Windows\system32\DRIVERS\nvraid.sys
      13:25:40.0979 4352 nvraid - ok
      13:25:40.0995 4352 [ E58D81FB8616D0CB55C1E36AA0B213C9 ] nvsmu C:\Windows\system32\DRIVERS\nvsmu.sys
      13:25:41.0010 4352 nvsmu - ok
      13:25:41.0041 4352 [ 477DC4D6DEB99BE37084C9AC6D013DA1 ] nvstor C:\Windows\system32\DRIVERS\nvstor.sys
      13:25:41.0057 4352 nvstor - ok
      13:25:41.0088 4352 [ 1978DD2EE567287D040B5A9468ECEB72 ] nvstor64 C:\Windows\system32\DRIVERS\nvstor64.sys
      13:25:41.0104 4352 nvstor64 - ok
      13:25:41.0151 4352 [ 74AA0D3F4768D8DEDE6471F07075567A ] nvsvc C:\Windows\system32\nvvsvc.exe
      13:25:41.0182 4352 nvsvc - ok
      13:25:41.0213 4352 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\DRIVERS\nv_agp.sys
      13:25:41.0229 4352 nv_agp - ok
      13:25:41.0338 4352 [ 1F0E05DFF4F5A833168E49BE1256F002 ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
      13:25:41.0400 4352 odserv - ok
      13:25:41.0431 4352 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
      13:25:41.0478 4352 ohci1394 - ok
      13:25:41.0541 4352 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
      13:25:41.0556 4352 ose - ok
      13:25:41.0603 4352 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
      13:25:41.0681 4352 p2pimsvc - ok
      13:25:41.0712 4352 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
      13:25:41.0775 4352 p2psvc - ok
      13:25:41.0821 4352 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
      13:25:41.0853 4352 Parport - ok
      13:25:41.0884 4352 [ 7DAA117143316C4A1537E074A5A9EAF0 ] partmgr C:\Windows\system32\drivers\partmgr.sys
      13:25:41.0899 4352 partmgr - ok
      13:25:41.0931 4352 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
      13:25:41.0977 4352 PcaSvc - ok
      13:25:42.0009 4352 [ F36F6504009F2FB0DFD1B17A116AD74B ] pci C:\Windows\system32\DRIVERS\pci.sys
      13:25:42.0024 4352 pci - ok
      13:25:42.0040 4352 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
      13:25:42.0055 4352 pciide - ok
      13:25:42.0087 4352 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
      13:25:42.0118 4352 pcmcia - ok
      13:25:42.0133 4352 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
      13:25:42.0149 4352 pcw - ok
      13:25:42.0180 4352 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
      13:25:42.0258 4352 PEAUTH - ok
      13:25:42.0321 4352 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
      13:25:42.0367 4352 PerfHost - ok
      13:25:42.0445 4352 [ 557E9A86F65F0DE18C9B6751DFE9D3F1 ] pla C:\Windows\system32\pla.dll
      13:25:42.0570 4352 pla - ok
      13:25:42.0617 4352 [ 23157D583244400E1D7FBAEE2E4B31B7 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
      13:25:42.0695 4352 PlugPlay - ok
      13:25:42.0711 4352 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
      13:25:42.0773 4352 PNRPAutoReg - ok
      13:25:42.0789 4352 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
      13:25:42.0835 4352 PNRPsvc - ok
      13:25:42.0882 4352 [ 166EB40D1F5B47E615DE3D0FFFE5F243 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
      13:25:42.0976 4352 PolicyAgent - ok
      13:25:43.0007 4352 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
      13:25:43.0069 4352 Power - ok
      13:25:43.0101 4352 [ 27CC19E81BA5E3403C48302127BDA717 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
      13:25:43.0163 4352 PptpMiniport - ok
      13:25:43.0194 4352 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
      13:25:43.0225 4352 Processor - ok
      13:25:43.0257 4352 [ F381975E1F4346DE875CB07339CE8D3A ] ProfSvc C:\Windows\system32\profsvc.dll
      13:25:43.0319 4352 ProfSvc - ok
      13:25:43.0335 4352 [ 0793F40B9B8A1BDD266296409DBD91EA ] ProtectedStorage C:\Windows\system32\lsass.exe
      13:25:43.0366 4352 ProtectedStorage - ok
      13:25:43.0381 4352 [ EE992183BD8EAEFD9973F352E587A299 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
      13:25:43.0444 4352 Psched - ok
      13:25:43.0506 4352 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
      13:25:43.0569 4352 ql2300 - ok
      13:25:43.0615 4352 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
      13:25:43.0631 4352 ql40xx - ok
      13:25:43.0678 4352 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
      13:25:43.0740 4352 QWAVE - ok
      13:25:43.0740 4352 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
      13:25:43.0787 4352 QWAVEdrv - ok
      13:25:43.0818 4352 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
      13:25:43.0865 4352 RasAcd - ok
      13:25:43.0896 4352 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
      13:25:43.0959 4352 RasAgileVpn - ok
      13:25:44.0068 4352 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
      13:25:44.0146 4352 RasAuto - ok
      13:25:44.0161 4352 [ 87A6E852A22991580D6D39ADC4790463 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
      13:25:44.0224 4352 Rasl2tp - ok
      13:25:44.0255 4352 [ 47394ED3D16D053F5906EFE5AB51CC83 ] RasMan C:\Windows\System32\rasmans.dll
      13:25:44.0349 4352 RasMan - ok
      13:25:44.0364 4352 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
      13:25:44.0427 4352 RasPppoe - ok
      13:25:44.0442 4352 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
      13:25:44.0505 4352 RasSstp - ok
      13:25:44.0551 4352 [ 3BAC8142102C15D59A87757C1D41DCE5 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
      13:25:44.0614 4352 rdbss - ok
      13:25:44.0629 4352 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
      13:25:44.0661 4352 rdpbus - ok
      13:25:44.0707 4352 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
      13:25:44.0770 4352 RDPCDD - ok
      13:25:44.0785 4352 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
      13:25:44.0863 4352 RDPENCDD - ok
      13:25:44.0879 4352 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
      13:25:44.0941 4352 RDPREFMP - ok
      13:25:44.0957 4352 [ 8A3E6BEA1C53EA6177FE2B6EBA2C80D7 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
      13:25:45.0004 4352 RDPWD - ok
      13:25:45.0035 4352 [ 634B9A2181D98F15941236886164EC8B ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
      13:25:45.0051 4352 rdyboost - ok
      13:25:45.0097 4352 [ C7DE6F41B1A734EA70BD2DC67235BECC ] RegFilter C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys
      13:25:45.0113 4352 RegFilter - ok
      13:25:45.0175 4352 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
      13:25:45.0269 4352 RemoteAccess - ok
      13:25:45.0300 4352 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
      13:25:45.0394 4352 RemoteRegistry - ok
      13:25:45.0409 4352 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
      13:25:45.0487 4352 RpcEptMapper - ok
      13:25:45.0534 4352 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
      13:25:45.0565 4352 RpcLocator - ok
      13:25:45.0597 4352 [ 7266972E86890E2B30C0C322E906B027 ] RpcSs C:\Windows\system32\rpcss.dll
      13:25:45.0659 4352 RpcSs - ok
      13:25:45.0706 4352 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
      13:25:45.0753 4352 rspndr - ok
      13:25:45.0799 4352 [ B49DC435AE3695BAC5623DD94B05732D ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
      13:25:45.0846 4352 RTL8167 - ok
      13:25:45.0862 4352 [ 0793F40B9B8A1BDD266296409DBD91EA ] SamSs C:\Windows\system32\lsass.exe
      13:25:45.0893 4352 SamSs - ok
      13:25:45.0971 4352 SASDIFSV - ok
      13:25:46.0002 4352 SASKUTIL - ok
      13:25:46.0049 4352 [ E3BBB89983DAF5622C1D50CF49F28227 ] sbp2port C:\Windows\system32\DRIVERS\sbp2port.sys
      13:25:46.0096 4352 sbp2port - ok
      13:25:46.0127 4352 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
      13:25:46.0221 4352 SCardSvr - ok
      13:25:46.0252 4352 [ C94DA20C7E3BA1DCA269BC8460D98387 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
      13:25:46.0299 4352 scfilter - ok
      13:25:46.0361 4352 [ 624D0F5FF99428BB90A5B8A4123E918E ] Schedule C:\Windows\system32\schedsvc.dll
      13:25:46.0423 4352 Schedule - ok
      13:25:46.0455 4352 [ 312E2F82AF11E79906898AC3E3D58A1F ] SCPolicySvc C:\Windows\System32\certprop.dll
      13:25:46.0501 4352 SCPolicySvc - ok
      13:25:46.0548 4352 [ 765A27C3279CE11D14CB9E4F5869FCA5 ] SDRSVC C:\Windows\System32\SDRSVC.dll
      13:25:46.0626 4352 SDRSVC - ok
      13:25:46.0704 4352 [ 16A252022535B680046F6E34E136D378 ] SeaPort C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
      13:25:46.0720 4352 SeaPort - ok
      13:25:46.0767 4352 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
      13:25:46.0829 4352 secdrv - ok
      13:25:46.0876 4352 [ 463B386EBC70F98DA5DFF85F7E654346 ] seclogon C:\Windows\system32\seclogon.dll
      13:25:46.0954 4352 seclogon - ok
      13:25:46.0969 4352 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\system32\sens.dll
      13:25:47.0047 4352 SENS - ok
      13:25:47.0079 4352 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
      13:25:47.0125 4352 SensrSvc - ok
      13:25:47.0141 4352 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
      13:25:47.0188 4352 Serenum - ok
      13:25:47.0219 4352 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
      13:25:47.0266 4352 Serial - ok
      13:25:47.0281 4352 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
      13:25:47.0328 4352 sermouse - ok
      13:25:47.0375 4352 [ C3BC61CE47FF6F4E88AB8A3B429A36AF ] SessionEnv C:\Windows\system32\sessenv.dll
      13:25:47.0453 4352 SessionEnv - ok
      13:25:47.0469 4352 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\DRIVERS\sffdisk.sys
      13:25:47.0500 4352 sffdisk - ok
      13:25:47.0515 4352 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\DRIVERS\sffp_mmc.sys
      13:25:47.0547 4352 sffp_mmc - ok
      13:25:47.0578 4352 [ 5588B8C6193EB1522490C122EB94DFFA ] sffp_sd C:\Windows\system32\DRIVERS\sffp_sd.sys
      13:25:47.0609 4352 sffp_sd - ok
      13:25:47.0625 4352 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
      13:25:47.0671 4352 sfloppy - ok
      13:25:47.0718 4352 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
      13:25:47.0812 4352 SharedAccess - ok
      13:25:47.0859 4352 [ 0298AC45D0EFFFB2DB4BAA7DD186E7BF ] ShellHWDetection C:\Windows\System32\shsvcs.dll
      13:25:47.0937 4352 ShellHWDetection - ok
      13:25:47.0983 4352 [ 1BC348CF6BAA90EC8E533EF6E6A69933 ] SiSGbeLH C:\Windows\system32\DRIVERS\SiSG664.sys
      13:25:48.0015 4352 SiSGbeLH - ok
      13:25:48.0030 4352 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
      13:25:48.0046 4352 SiSRaid2 - ok
      13:25:48.0061 4352 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
      13:25:48.0093 4352 SiSRaid4 - ok
      13:25:48.0108 4352 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
      13:25:48.0171 4352 Smb - ok
      13:25:48.0217 4352 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
      13:25:48.0264 4352 SNMPTRAP - ok
      13:25:48.0327 4352 [ 1D8474722CDFFBB8FCA5FA12C50A05A2 ] SNP2UVC C:\Windows\system32\DRIVERS\snp2uvc.sys
      13:25:48.0373 4352 SNP2UVC - ok
      13:25:48.0389 4352 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
      13:25:48.0405 4352 spldr - ok
      13:25:48.0436 4352 [ F8E1FA03CB70D54A9892AC88B91D1E7B ] Spooler C:\Windows\System32\spoolsv.exe
      13:25:48.0483 4352 Spooler - ok
      13:25:48.0607 4352 [ 913D843498553A1BC8F8DBAD6358E49F ] sppsvc C:\Windows\system32\sppsvc.exe
      13:25:48.0685 4352 sppsvc - ok
      13:25:48.0717 4352 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
      13:25:48.0795 4352 sppuinotify - ok
      13:25:48.0857 4352 [ DE6F5658DA951C4BC8E498570B5B0D5F ] srv C:\Windows\system32\DRIVERS\srv.sys
      13:25:48.0904 4352 srv - ok
      13:25:48.0951 4352 [ 4D33D59C0B930C523D29F9BD40CDA9D2 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
      13:25:48.0997 4352 srv2 - ok
      13:25:49.0029 4352 [ 5A663FD67049267BC5C3F3279E631FFB ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
      13:25:49.0060 4352 srvnet - ok
      13:25:49.0122 4352 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
      13:25:49.0247 4352 SSDPSRV - ok
      13:25:49.0294 4352 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
      13:25:49.0372 4352 SstpSvc - ok
      13:25:49.0403 4352 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
      13:25:49.0434 4352 stexstor - ok
      13:25:49.0481 4352 [ 52D0E33B681BD0F33FDC08812FEE4F7D ] stisvc C:\Windows\System32\wiaservc.dll
      13:25:49.0559 4352 stisvc - ok
      13:25:49.0575 4352 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
      13:25:49.0606 4352 swenum - ok
      13:25:49.0621 4352 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
      13:25:49.0715 4352 swprv - ok
      13:25:49.0762 4352 [ 3C1284516A62078FB68F768DE4F1A7BE ] SysMain C:\Windows\system32\sysmain.dll
      13:25:49.0840 4352 SysMain - ok
      13:25:49.0855 4352 [ 238935C3CF2854886DC7CBB2A0E2CC66 ] TabletInputService C:\Windows\System32\TabSvc.dll
      13:25:49.0933 4352 TabletInputService - ok
      13:25:49.0965 4352 [ 884264AC597B690C5707C89723BB8E7B ] TapiSrv C:\Windows\System32\tapisrv.dll
      13:25:50.0058 4352 TapiSrv - ok
      13:25:50.0089 4352 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
      13:25:50.0183 4352 TBS - ok
      13:25:50.0261 4352 [ 90A2D722CF64D911879D6C4A4F802A4D ] Tcpip C:\Windows\system32\drivers\tcpip.sys
      13:25:50.0308 4352 Tcpip - ok
      13:25:50.0370 4352 [ 90A2D722CF64D911879D6C4A4F802A4D ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
      13:25:50.0417 4352 TCPIP6 - ok
      13:25:50.0479 4352 [ 76D078AF6F587B162D50210F761EB9ED ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
      13:25:50.0542 4352 tcpipreg - ok
      13:25:50.0557 4352 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
      13:25:50.0635 4352 TDPIPE - ok
      13:25:50.0651 4352 [ E4245BDA3190A582D55ED09E137401A9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
      13:25:50.0713 4352 TDTCP - ok
      13:25:50.0745 4352 [ 079125C4B17B01FCAEEBCE0BCB290C0F ] tdx C:\Windows\system32\DRIVERS\tdx.sys
      13:25:50.0791 4352 tdx - ok
      13:25:50.0932 4352 [ 3E85BDD019E3DB66D9471DAD7FD6A887 ] TeamViewer7 C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
      13:25:50.0994 4352 TeamViewer7 - ok
      13:25:51.0010 4352 [ C448651339196C0E869A355171875522 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
      13:25:51.0041 4352 TermDD - ok
      13:25:51.0088 4352 [ 0F05EC2887BFE197AD82A13287D2F404 ] TermService C:\Windows\System32\termsrv.dll
      13:25:51.0197 4352 TermService - ok
      13:25:51.0213 4352 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
      13:25:51.0275 4352 Themes - ok
      13:25:51.0306 4352 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
      13:25:51.0353 4352 THREADORDER - ok
      13:25:51.0415 4352 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
      13:25:51.0603 4352 TrkWks - ok
      13:25:51.0712 4352 [ 840F7FB849F5887A49BA18C13B2DA920 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
      13:25:51.0790 4352 TrustedInstaller - ok
      13:25:51.0805 4352 [ 61B96C26131E37B24E93327A0BD1FB95 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
      13:25:51.0883 4352 tssecsrv - ok
      13:25:51.0915 4352 [ 3836171A2CDF3AF8EF10856DB9835A70 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
      13:25:51.0977 4352 tunnel - ok
      13:25:51.0993 4352 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
      13:25:52.0024 4352 uagp35 - ok
      13:25:52.0039 4352 [ D47BAEAD86C65D4F4069D7CE0A4EDCEB ] udfs C:\Windows\system32\DRIVERS\udfs.sys
      13:25:52.0086 4352 udfs - ok
      13:25:52.0117 4352 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
      13:25:52.0195 4352 UI0Detect - ok
      13:25:52.0211 4352 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\DRIVERS\uliagpkx.sys
      13:25:52.0242 4352 uliagpkx - ok
      13:25:52.0273 4352 [ EAB6C35E62B1B0DB0D1B48B671D3A117 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
      13:25:52.0289 4352 umbus - ok
      13:25:52.0320 4352 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
      13:25:52.0336 4352 UmPass - ok
      13:25:52.0383 4352 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
      13:25:52.0461 4352 upnphost - ok
      13:25:52.0507 4352 [ 82520FE7A49765E76281DCC7D90C09F6 ] UrlFilter C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys
      13:25:52.0523 4352 UrlFilter - ok
      13:25:52.0554 4352 [ B26AFB54A534D634523C4FB66765B026 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
      13:25:52.0585 4352 usbccgp - ok
      13:25:52.0617 4352 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\DRIVERS\usbcir.sys
      13:25:52.0663 4352 usbcir - ok
      13:25:52.0695 4352 [ DF9F9AFC9AAABD8ED47975D44E38169A ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
      13:25:52.0726 4352 usbehci - ok
      13:25:52.0757 4352 [ 372A91BC3C6603080A793880B0873785 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
      13:25:52.0788 4352 usbhub - ok
      13:25:52.0804 4352 [ 58E546BBAF87664FC57E0F6081E4F609 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
      13:25:52.0851 4352 usbohci - ok
      13:25:52.0897 4352 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
      13:25:52.0929 4352 usbprint - ok
      13:25:52.0975 4352 [ 080D3820DA6C046BE82FC8B45A893E83 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
      13:25:53.0007 4352 USBSTOR - ok
      13:25:53.0022 4352 [ 81FB2216D3A60D1284455D511797DB3D ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
      13:25:53.0038 4352 usbuhci - ok
      13:25:53.0069 4352 [ 7CB8C573C6E4A2714402CC0A36EAB4FE ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
      13:25:53.0100 4352 usbvideo - ok
      13:25:53.0131 4352 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
      13:25:53.0209 4352 UxSms - ok
      13:25:53.0241 4352 [ 0793F40B9B8A1BDD266296409DBD91EA ] VaultSvc C:\Windows\system32\lsass.exe
      13:25:53.0272 4352 VaultSvc - ok
      13:25:53.0319 4352 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\DRIVERS\vdrvroot.sys
      13:25:53.0334 4352 vdrvroot - ok
      13:25:53.0381 4352 [ 44D73E0BBC1D3C8981304BA15135C2F2 ] vds C:\Windows\System32\vds.exe
      13:25:53.0459 4352 vds - ok
      13:25:53.0475 4352 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
      13:25:53.0506 4352 vga - ok
      13:25:53.0537 4352 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
      13:25:53.0599 4352 VgaSave - ok
      13:25:53.0631 4352 [ C82E748660F62A242B2DFAC1442F22A4 ] vhdmp C:\Windows\system32\DRIVERS\vhdmp.sys
      13:25:53.0662 4352 vhdmp - ok
      13:25:53.0677 4352 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\DRIVERS\viaide.sys
      13:25:53.0693 4352 viaide - ok
      13:25:53.0709 4352 [ 2B1A3DAE2B4E70DBBA822B7A03FBD4A3 ] volmgr C:\Windows\system32\DRIVERS\volmgr.sys
      13:25:53.0740 4352 volmgr - ok
      13:25:53.0771 4352 [ 99B0CBB569CA79ACAED8C91461D765FB ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
      13:25:53.0802 4352 volmgrx - ok
      13:25:53.0849 4352 [ 58F82EED8CA24B461441F9C3E4F0BF5C ] volsnap C:\Windows\system32\DRIVERS\volsnap.sys
      13:25:53.0865 4352 volsnap - ok
      13:25:53.0896 4352 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
      13:25:53.0927 4352 vsmraid - ok
      13:25:53.0989 4352 [ 787898BF9FB6D7BD87A36E2D95C899BA ] VSS C:\Windows\system32\vssvc.exe
      13:25:54.0114 4352 VSS - ok
      13:25:54.0223 4352 [ 40DBA03782BCC10685A8C200C5EBDCD0 ] vToolbarUpdater12.2.6 C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe
      13:25:54.0255 4352 vToolbarUpdater12.2.6 - ok
      13:25:54.0270 4352 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
      13:25:54.0301 4352 vwifibus - ok
      13:25:54.0333 4352 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
      13:25:54.0364 4352 vwififlt - ok
      13:25:54.0395 4352 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
      13:25:54.0426 4352 vwifimp - ok
      13:25:54.0457 4352 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
      13:25:54.0535 4352 W32Time - ok
      13:25:54.0582 4352 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
      13:25:54.0613 4352 WacomPen - ok
      13:25:54.0629 4352 [ 47CA49400643EFFD3F1C9A27E1D69324 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
      13:25:54.0676 4352 WANARP - ok
      13:25:54.0691 4352 [ 47CA49400643EFFD3F1C9A27E1D69324 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
      13:25:54.0754 4352 Wanarpv6 - ok
      13:25:54.0816 4352 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
      13:25:54.0879 4352 WatAdminSvc - ok
      13:25:54.0941 4352 [ 5AB1BB85BD8B5089CC5D64200DEDAE68 ] wbengine C:\Windows\system32\wbengine.exe
      13:25:55.0066 4352 wbengine - ok
      13:25:55.0081 4352 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
      13:25:55.0159 4352 WbioSrvc - ok
      13:25:55.0191 4352 [ 8321C2CA3B62B61B293CDA3451984468 ] wcncsvc C:\Windows\System32\wcncsvc.dll
      13:25:55.0284 4352 wcncsvc - ok
      13:25:55.0300 4352 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
      13:25:55.0362 4352 WcsPlugInService - ok
      13:25:55.0393 4352 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
      13:25:55.0409 4352 Wd - ok
      13:25:55.0440 4352 [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
      13:25:55.0471 4352 Wdf01000 - ok
      13:25:55.0503 4352 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
      13:25:55.0565 4352 WdiServiceHost - ok
      13:25:55.0581 4352 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
      13:25:55.0627 4352 WdiSystemHost - ok
      13:25:55.0659 4352 [ 8A438CBB8C032A0C798B0C642FFBE572 ] WebClient C:\Windows\System32\webclnt.dll
      13:25:55.0752 4352 WebClient - ok
      13:25:55.0768 4352 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
      13:25:55.0861 4352 Wecsvc - ok
      13:25:55.0893 4352 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
      13:25:55.0986 4352 wercplsupport - ok
      13:25:56.0002 4352 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
      13:25:56.0095 4352 WerSvc - ok
      13:25:56.0111 4352 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
      13:25:56.0173 4352 WfpLwf - ok
      13:25:56.0220 4352 [ 52DED146E4797E6CCF94799E8E22BB2A ] WimFltr C:\Windows\system32\DRIVERS\wimfltr.sys
      13:25:56.0267 4352 WimFltr - ok
      13:25:56.0283 4352 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
      13:25:56.0298 4352 WIMMount - ok
      13:25:56.0329 4352 WinDefend - ok
      13:25:56.0329 4352 WinHttpAutoProxySvc - ok
      13:25:56.0407 4352 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
      13:25:56.0485 4352 Winmgmt - ok
      13:25:56.0563 4352 [ 41FBB751936B387F9179E7F03A74FE29 ] WinRM C:\Windows\system32\WsmSvc.dll
      13:25:56.0704 4352 WinRM - ok
      13:25:56.0782 4352 [ 817EAFF5D38674EDD7713B9DFB8E9791 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
      13:25:56.0813 4352 WinUsb - ok
      13:25:56.0875 4352 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
      13:25:56.0938 4352 Wlansvc - ok
      13:25:57.0078 4352 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
      13:25:57.0125 4352 wlidsvc - ok
      13:25:57.0156 4352 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
      13:25:57.0187 4352 WmiAcpi - ok
      13:25:57.0234 4352 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
      13:25:57.0281 4352 wmiApSrv - ok
      13:25:57.0312 4352 WMPNetworkSvc - ok
      13:25:57.0343 4352 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
      13:25:57.0390 4352 WPCSvc - ok
      13:25:57.0406 4352 [ 2E57DDF2880A7E52E76F41C7E96D327B ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
      13:25:57.0484 4352 WPDBusEnum - ok
      13:25:57.0515 4352 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
      13:25:57.0577 4352 ws2ifsl - ok
      13:25:57.0609 4352 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
      13:25:57.0687 4352 wscsvc - ok
      13:25:57.0702 4352 WSearch - ok
      13:25:57.0811 4352 [ 38340204A2D0228F1E87740FC5E554A7 ] wuauserv C:\Windows\system32\wuaueng.dll
      13:25:57.0983 4352 wuauserv - ok
      13:25:58.0045 4352 [ 7CADC74271DD6461C452C271B30BD378 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
      13:25:58.0092 4352 WudfPf - ok
      13:25:58.0123 4352 [ 3B197AF0FFF08AA66B6B2241CA538D64 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
      13:25:58.0170 4352 WUDFRd - ok
      13:25:58.0217 4352 [ B551D6637AA0E132C18AC6E504F7B79B ] wudfsvc C:\Windows\System32\WUDFSvc.dll
      13:25:58.0279 4352 wudfsvc - ok
      13:25:58.0311 4352 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
      13:25:58.0373 4352 WwanSvc - ok
      13:25:58.0404 4352 ================ Scan global ===============================
      13:25:58.0451 4352 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
      13:25:58.0498 4352 [ 457B44AB6D502E55F64A867D4F35C76C ] C:\Windows\system32\winsrv.dll
      13:25:58.0560 4352 [ 457B44AB6D502E55F64A867D4F35C76C ] C:\Windows\system32\winsrv.dll
      13:25:58.0607 4352 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
      13:25:58.0669 4352 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
      13:25:58.0701 4352 [Global] - ok
      13:25:58.0701 4352 ================ Scan MBR ==================================
      13:25:58.0701 4352 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
      13:25:59.0559 4352 \Device\Harddisk0\DR0 - ok
      13:25:59.0559 4352 ================ Scan VBR ==================================
      13:25:59.0559 4352 [ 1A66275F14C45CA630BC147CDAA88DF9 ] \Device\Harddisk0\DR0\Partition1
      13:25:59.0559 4352 \Device\Harddisk0\DR0\Partition1 - ok
      13:25:59.0574 4352 [ BE9EF6A7B01A665656BE9ABDC916351B ] \Device\Harddisk0\DR0\Partition2
      13:25:59.0574 4352 \Device\Harddisk0\DR0\Partition2 - ok
      13:25:59.0574 4352 ============================================================
      13:25:59.0574 4352 Scan finished
      13:25:59.0574 4352 ============================================================
      13:25:59.0590 5396 Detected object count: 2
      13:25:59.0590 5396 Actual detected object count: 2
      13:26:33.0925 5396 ADSMService ( UnsignedFile.Multi.Generic ) - skipped by user
      13:26:33.0925 5396 ADSMService ( UnsignedFile.Multi.Generic ) - User select action: Skip
      13:26:33.0941 5396 ATKGFNEXSrv ( UnsignedFile.Multi.Generic ) - skipped by user
      13:26:33.0941 5396 ATKGFNEXSrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
      13:26:40.0150 2360 Deinitialize success

    4. #14
      Usuario Avatar de abelique
      Registrado
      dic 2011
      Ubicación
      barcelona
      Mensajes
      24

      Re: No puedo actualizar windows 7 home premium

      Y el reporte de ComboFix del portatil:
      ComboFix 12-10-31.03 - Silvia 31/10/2012 13:57:08.2.2 - x64
      Microsoft Windows 7 Home Premium 6.1.7600.0.1252.34.3082.18.4095.2796 [GMT 1:00]
      Running from: c:\users\Silvia\Desktop\ComboFix.exe
      AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
      AV: AVG Internet Security 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
      SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
      SP: AVG Internet Security 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
      SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}
      SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
      .
      .
      ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      c:\windows\SysWow64\userinit.exe . . . is infected!!
      .
      .
      ((((((((((((((((((((((((( Files Created from 2012-09-28 to 2012-10-31 )))))))))))))))))))))))))))))))
      .
      .
      2012-10-31 13:47 . 2012-10-31 13:47 -------- d-----w- c:\users\Default\AppData\Local\temp
      2012-10-30 21:20 . 2012-10-30 21:21 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
      2012-10-26 23:25 . 2012-06-29 11:55 22528 ----a-w- c:\windows\AT-Uninstall.exe
      2012-10-26 23:25 . 2012-03-12 21:27 11776 ----a-w- c:\windows\Colous.exe
      2012-10-26 23:25 . 2008-03-25 08:39 69660 ----a-w- c:\windows\Fart.exe
      2012-10-26 18:58 . 2012-10-26 18:58 -------- d-----w- c:\users\Silvia\DoctorWeb
      2012-10-10 19:46 . 2012-10-10 19:46 -------- d-----w- c:\programdata\NVIDIA
      2012-10-10 19:00 . 2012-10-10 19:00 -------- d-----w- c:\users\Silvia\AppData\Roaming\AVG2012
      2012-10-10 17:15 . 2012-10-10 17:15 -------- d-----w- c:\users\Silvia\AppData\Local\AVG Secure Search
      2012-10-10 17:15 . 2012-10-11 12:43 -------- d-----w- c:\programdata\AVG Secure Search
      2012-10-10 17:14 . 2012-10-10 17:14 31080 ----a-w- c:\windows\system32\drivers\avgtpx64.sys
      2012-10-10 17:14 . 2012-10-10 17:14 -------- d-----w- c:\program files (x86)\Common Files\AVG Secure Search
      2012-10-10 17:14 . 2012-10-10 17:15 -------- d-----w- c:\program files (x86)\AVG Secure Search
      2012-10-10 17:13 . 2012-10-10 17:13 -------- d-----w- C:\$AVG
      2012-10-10 17:13 . 2012-10-10 19:49 -------- d-----w- c:\programdata\AVG2012
      2012-10-10 17:13 . 2012-10-10 17:13 -------- d-----w- c:\program files (x86)\AVG
      2012-10-10 16:06 . 2012-10-10 16:06 -------- d-----w- C:\SpybotPortable
      .
      .
      .
      (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2012-10-08 23:04 . 2012-06-15 12:59 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
      2012-10-08 23:04 . 2011-06-02 13:10 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
      2012-09-29 18:54 . 2011-01-27 18:23 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
      2012-08-24 13:43 . 2012-08-24 13:43 384352 ----a-w- c:\windows\system32\drivers\avgtdia.sys
      2012-08-21 09:13 . 2011-06-22 16:09 969200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
      2012-08-21 09:13 . 2011-01-27 23:43 359464 ----a-w- c:\windows\system32\drivers\aswSP.sys
      2012-08-21 09:13 . 2011-01-27 23:43 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys
      2012-08-21 09:13 . 2012-03-24 15:17 54072 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
      2012-08-21 09:13 . 2011-01-27 23:43 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
      2012-08-21 09:13 . 2011-01-27 23:43 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
      2012-08-21 09:12 . 2011-01-27 23:37 41224 ----a-w- c:\windows\avastSS.scr
      2012-08-21 09:12 . 2011-01-27 23:37 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe
      2012-08-21 09:12 . 2011-01-26 22:48 285328 ----a-w- c:\windows\system32\aswBoot.exe
      .
      .
      ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* empty entries & legit default entries are not shown
      REGEDIT4
      .
      [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{28387537-e3f9-4ed7-860c-11e69af4a8a0}]
      2012-02-27 08:49 89008 ----a-w- c:\progra~2\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll
      .
      [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
      2012-10-10 17:14 1734240 ----a-w- c:\program files (x86)\AVG Secure Search\12.2.5.34\AVG Secure Search_toolbar.dll
      .
      [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{BE7A24F5-69CB-4708-B77B-B1EDA6043B95}]
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
      "{28387537-e3f9-4ed7-860c-11e69af4a8a0}"= "c:\progra~2\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll" [2012-02-27 89008]
      "{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\12.2.5.34\AVG Secure Search_toolbar.dll" [2012-10-10 1734240]
      .
      [HKEY_CLASSES_ROOT\clsid\{28387537-e3f9-4ed7-860c-11e69af4a8a0}]
      .
      [HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
      [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
      [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
      @="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
      [HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
      2007-06-02 01:08 143360 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
      .
      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
      "uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2012-09-29 1022352]
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
      "HControlUser"="c:\program files (x86)\ASUS\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
      "ATKOSD2"="c:\program files (x86)\ASUS\ATKOSD2\ATKOSD2.exe" [2009-08-17 6859392]
      "ATKMEDIA"="c:\program files (x86)\ASUS\ATK Media\DMedia.exe" [2009-08-20 170624]
      "CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2009-11-02 103720]
      "ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2010-01-14 3058304]
      "ADSMTray"="c:\program files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe" [2009-06-24 272952]
      "avast"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2012-08-21 4282728]
      "AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-07-31 2596984]
      "vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2012-10-10 947808]
      "ROC_ROC_NT"="c:\program files (x86)\AVG Secure Search\ROC_ROC_NT.exe" [2012-10-10 856160]
      "IObit Malware Fighter"="c:\program files (x86)\IObit\IObit Malware Fighter\IMF.exe" [2012-01-12 4453208]
      .
      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
      "DeleteEngineAfterUpdate"="reg DELETE HKCU\Software\AppDataLow\Software\ConduitEngine" [X]
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
      "ConsentPromptBehaviorAdmin"= 5 (0x5)
      "ConsentPromptBehaviorUser"= 3 (0x3)
      "EnableUIADesktopToggle"= 0 (0x0)
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
      "LoadAppInit_DLLs"=1 (0x1)
      "AppInit_DLLs"=c:\progra~2\IMESHA~1\MediaBar\Datamngr\datamngr.dll c:\progra~2\IMESHA~1\MediaBar\Datamngr\IEBHO.dll
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
      "aux"=wdmaud.drv
      .
      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
      BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart
      .
      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
      Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
      .
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
      @="Service"
      .
      R1 SASDIFSV;SASDIFSV;c:\users\Silvia\AppData\Local\Temp\SAS_SelfExtract\SASDIFSV64.SYS [x]
      R1 SASKUTIL;SASKUTIL;c:\users\Silvia\AppData\Local\Temp\SAS_SelfExtract\SASKUTIL64.SYS [x]
      R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\avgidsagent.exe [2012-08-13 5167736]
      R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
      R2 gupdate;Servicio Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-06-18 136176]
      R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-29 676936]
      R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-08 250808]
      R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [2009-08-12 40448]
      R3 gupdatem;Servicio de Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-06-18 136176]
      R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-29 25928]
      R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
      R3 UrlFilter;UrlFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [2011-09-20 21872]
      R3 WatAdminSvc;Servicio de tecnologías de activación de Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-25 1255736]
      R4 FileMonitor;FileMonitor;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2012-01-05 21384]
      S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2012-04-19 28480]
      S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2012-01-31 36944]
      S1 aswSnx;aswSnx; [x]
      S1 aswSP;aswSP; [x]
      S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2012-07-26 291680]
      S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2011-12-23 47696]
      S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2012-08-24 384352]
      S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys [2012-10-10 31080]
      S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
      S2 ASMMAP64;ASMMAP64;c:\program files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
      S2 aswFsBlk;aswFsBlk; [x]
      S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-08-21 71600]
      S2 avgwd;WatchDog de AVG;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]
      S2 IMFservice;IMF Service;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2012-01-09 821592]
      S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-09-29 399432]
      S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-01-19 3027840]
      S2 vToolbarUpdater12.2.6;vToolbarUpdater12.2.6;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe [2012-10-10 722528]
      S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2011-12-23 124496]
      S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfiltera.sys [2011-12-23 29776]
      S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2009-10-15 117760]
      S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2009-05-01 81440]
      S3 RegFilter;RegFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [2011-09-20 33184]
      S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-05-22 215040]
      S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
      .
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}]
      2010-02-16 18:02 114688 ----a-w- c:\program files (x86)\PixiePack Codec Pack\InstallerHelper.exe
      .
      Contents of the 'Scheduled Tasks' folder
      .
      2012-10-31 c:\windows\Tasks\Adobe Flash Player Updater.job
      - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-15 23:04]
      .
      2012-10-10 c:\windows\Tasks\avast! Emergency Update.job
      - c:\program files\Alwil Software\Avast5\AvastEmUpdate.exe [2012-10-10 09:12]
      .
      2012-10-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
      - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-06-18 12:01]
      .
      2012-10-31 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
      - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-06-18 12:01]
      .
      .
      --------- X64 Entries -----------
      .
      .
      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{BE7A24F5-69CB-4708-B77B-B1EDA6043B95}]
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
      @="{472083B0-C522-11CF-8763-00608CC02F24}"
      [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
      2012-08-21 09:11 133400 ----a-w- c:\program files\Alwil Software\Avast5\ashShA64.dll
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
      @="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
      [HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
      2007-06-02 00:52 159744 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
      @="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
      [HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
      2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
      @="{64174815-8D98-4CE6-8646-4C039977D808}"
      [HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
      2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2009-09-30 621440]
      "EeeStorageBackup"="c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe" [2009-11-26 1732608]
      "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-08-15 16336416]
      "AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-08-12 323072]
      "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-09-11 8114720]
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
      "AppInit_DLLs"=c:\progra~2\IMESHA~1\MediaBar\Datamngr\x64\datamngr.dll c:\progra~2\IMESHA~1\MediaBar\Datamngr\x64\IEBHO.dll
      .
      ------- Supplementary Scan -------
      .
      uStart Page = hxxp://www.google.es/
      uLocal Page = c:\windows\system32\blank.htm
      mStart Page = hxxp://www.google.com
      mLocal Page = c:\windows\SysWOW64\blank.htm
      IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
      IE: E&xportar a Microsoft Excel - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
      IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
      TCP: DhcpNameServer = 192.168.2.1
      Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\12.2.6\ViProtocol.dll
      .
      - - - - ORPHANS REMOVED - - - -
      .
      Toolbar-Locked - (no file)
      Toolbar-10 - (no file)
      WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
      WebBrowser-{977AE9CC-AF83-45E8-9E03-E2798216E2D5} - (no file)
      WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)
      AddRemove-ASUS_Screensaver - c:\windows\system32\ASUS_Screensaver.scr
      .
      .
      .
      --------------------- LOCKED REGISTRY KEYS ---------------------
      .
      [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
      @Denied: (2) (LocalSystem)
      "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
      d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,d5,52,aa,c9,cc,3b,c6,44,a8,9c,dd,\
      "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
      d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,d5,52,aa,c9,cc,3b,c6,44,a8,9c,dd,\
      .
      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
      @Denied: (A 2) (Everyone)
      @="FlashBroker"
      "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
      "Enabled"=dword:00000001
      .
      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
      @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
      @Denied: (A 2) (Everyone)
      @="IFlashBroker5"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
      @="{00020424-0000-0000-C000-000000000046}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      "Version"="1.0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
      @Denied: (A 2) (Everyone)
      @="FlashBroker"
      "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
      "Enabled"=dword:00000001
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
      @Denied: (A 2) (Everyone)
      @="Shockwave Flash Object"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"
      "ThreadingModel"="Apartment"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
      @="0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
      @="ShockwaveFlash.ShockwaveFlash.11"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
      @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
      @="1.0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
      @="ShockwaveFlash.ShockwaveFlash"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
      @Denied: (A 2) (Everyone)
      @="Macromedia Flash Factory Object"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"
      "ThreadingModel"="Apartment"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
      @="FlashFactory.FlashFactory.1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
      @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
      @="1.0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
      @="FlashFactory.FlashFactory"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
      @Denied: (A 2) (Everyone)
      @="IFlashBroker5"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
      @="{00020424-0000-0000-C000-000000000046}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      "Version"="1.0"
      .
      [HKEY_LOCAL_MACHINE\system\ControlSet002\Control\PCW\Security]
      @Denied: (Full) (Everyone)
      .
      Completion time: 2012-10-31 14:50:23
      ComboFix-quarantined-files.txt 2012-10-31 13:50
      ComboFix2.txt 2012-10-10 17:10
      .
      Pre-Run: 92.051.324.928 bytes libres
      Post-Run: 91.853.873.152 bytes libres
      .
      - - End Of File - - 5CBCF5654C1D7BD7BFBE906E801CF4CB

    5. #15
      Ex-Colaborador Avatar de Anleg_30
      Registrado
      dic 2007
      Ubicación
      Bna-Venezuela
      Mensajes
      10.545

      Re: No puedo actualizar windows 7 home premium

      Hola

      Bien pero vamos a ir en orden, así que realiza los pasos solo en el equipo que te indique ok.

      Para terminar con la de sobremesa, Desinstala el Spybot S&D, actualiza MalwareBytes y realiza un escaneo completo.
      Elimina lo que consiga y me traes es reporte. Luego te daré otros pasos para la portatil.



      Blog | Antivirus Online | Eliminar Malwares | Antivirus Gratis

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    6. #16
      Usuario Avatar de abelique
      Registrado
      dic 2011
      Ubicación
      barcelona
      Mensajes
      24

      Re: No puedo actualizar windows 7 home premium

      Hola de nuevo, ok los pasos anteriores y pasar el Malwarebytes actualizado
      te dejo el reporte:
      Malwarebytes Anti-Malware 1.65.1.1000
      Malwarebytes : Free anti-malware download

      Versión de la Base de Datos: v2012.10.31.08

      Windows Vista Service Pack 2 x64 NTFS
      Internet Explorer 9.0.8112.16421
      Abelique :: ULTIMATE [administrador]

      31/10/2012 21:17:54
      mbam-log-2012-10-31 (21-17-54).txt

      Tipos de Análisis: Análisis Completo (C:\|D:\|E:\|F:\|)
      Opciones de análisis activado: Memoria | Inicio | Registro | Sistema de archivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
      Opciones de análisis desactivados: P2P
      Objetos examinados: 465001
      Tiempo transcurrido: 1 hora(s), 13 minuto(s), 33 segundo(s)

      Procesos en Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Módulos de Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Claves del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Valores del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Elementos de Datos del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Carpetas Detectadas: 0
      (No se han detectado elementos maliciosos)

      Archivos Detectados: 0
      (No se han detectado elementos maliciosos)

      fin)

    7. #17
      Ex-Colaborador Avatar de Anleg_30
      Registrado
      dic 2007
      Ubicación
      Bna-Venezuela
      Mensajes
      10.545

      Re: No puedo actualizar windows 7 home premium

      Bien, ahora pasaremos a la portatil.

      Usas Avast y AVG al mismo tiempo ?¿

      Ve a la web de Virus Total + Leer Manual y con el examinador ubica este archivo para que los subas.

      c:\windows\SysWow64\userinit.exe

      Si te alerta que la muestra ya fué analizada, has caso omiso del mensaje y vuelve a reanalizar ok
      Dejame el reporte o el Link que te genere.


      Seguidamente usa esta herramienta ( ServicesRepair.exe) que está al final de la guia. Me dejas el reporte si lo genera y me comentas si las actualizaciones vuleven a funcionar.



      Blog | Antivirus Online | Eliminar Malwares | Antivirus Gratis

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    8. #18
      Usuario Avatar de abelique
      Registrado
      dic 2011
      Ubicación
      barcelona
      Mensajes
      24

      Re: No puedo actualizar windows 7 home premium

      Hola,
      del portatil he pasado el archivo userinit.exe por dicha pagina, y no me detecta ningun virus, te dejo el link
      https://www.virustotal.com/file/7784...is/1351762311/
      y le he pasado el servicesrepair.exe y que no me ha dejado ningun log.
      y siguo sin poder actualizar.
      Gracias

    9. #19
      Ex-Colaborador Avatar de Anleg_30
      Registrado
      dic 2007
      Ubicación
      Bna-Venezuela
      Mensajes
      10.545

      Re: No puedo actualizar windows 7 home premium

      Ok,

      Desinstala un Antivirus por favor.

      Verifica en el panel de control, centro de seguridad si las actualizaciones estan habilitadas, de no estarlo las habilitas.

      Ve a inicio->ejecutar->escribe: services.msc
      En la ventana que se abrirá busca el servicio de Actualización automática, haz doble clic y verifica el apartado "Tipo de Inicio" cambialo a Automático de no estar así, aplicas y aceptas

      Luego busca Servicio de transferencia inteligente en segundo plano (BITS) y verifica el apartado "Tipo de Inicio" cambialo a manual de no estar así, aplicas y aceptas.

      Reinicia el computador y verifica si va todo normal.

      Si siguen sin funcionar realiza lo siguiente:

      Descarga Tweaking Windows repair al escritorio.
      Ejecuatalo como Administrador y ve a la pestaña "Start Repair"
      Selecciona "Custom Mode" y pulsa Start, cuando el programa te avise para hacer una copia de seguridad, pulsas en SI.
      Luego de hacer la copia deja marcadas solamente las siguientes casillas:
      • Repair registry Permissions
      • Repair WMI
      • Repair Widows Update
      • Set Windows services to default startup


      Pulsa en Start.
      Reinicia el equipo y me comentas, si aun siguen el fallo



      Blog | Antivirus Online | Eliminar Malwares | Antivirus Gratis

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    10. #20
      Usuario Avatar de abelique
      Registrado
      dic 2011
      Ubicación
      barcelona
      Mensajes
      24

      Re: No puedo actualizar windows 7 home premium

      He realizado los pasos anteriores y despues de reiniciar no puedo actualizar,
      Nota: con el "services.msc" cuando inicio el servicio BITS se inicia con normalidad pero el servicio windows update
      lo primero que hace al darle a iniciar es enviar un mensaje a la pantalla"el servicio windows update no puede iniciar el servicio, error 126, no se pudo encontrar....",aun asi se llega a cambiar el "tipo de inicio" a automatico en este caso, y despues de reiniciar con "msconfig" en la pestaña servicios de windows aparece el windows update "detenido".

      te dejo el log de Windows repair por si acaso, gracias de todos modos:
      Log:
      Starting Repairs...
      Start (02/11/2012 0:18:11)

      Reset Registry Permissions 01/03
      HKEY_CURRENT_USER & Sub Keys
      Start (02/11/2012 0:18:11)
      Done (02/11/2012 0:18:16)

      Reset Registry Permissions 02/03
      HKEY_LOCAL_MACHINE & Sub Keys
      Start (02/11/2012 0:18:16)
      Done (02/11/2012 0:18:21)

      Reset Registry Permissions 03/03
      HKEY_CLASSES_ROOT & Sub Keys
      Start (02/11/2012 0:18:21)
      Done (02/11/2012 0:18:25)

      Repair WMI
      Start (02/11/2012 0:18:25)
      Step 01/03 - Deleting WMI Repository...
      Step 02/03 - Rebuilding WMI Repository...
      Step 03/03 - Registering WMI...
      Done (02/11/2012 0:20:33)

      Repair Windows Updates
      Start (02/11/2012 0:20:33)
      Done (02/11/2012 0:21:04)

      Set Windows Services To Default Startup
      Start (02/11/2012 0:21:04)
      Done (02/11/2012 0:21:13)

      Cleaning up empty logs...

      All Selected Repairs Done.
      Done (02/11/2012 0:21:13)
      Total Repair Time: 00:03:02


      ...YOU MUST RESTART YOUR SYSTEM...