My daughter's puter is a mess. Please help here too.

[puterboss]

I had to run the scans in safemode because the computer kept freezing.
Thanks in advance for helping.
.
DDS (Ver_2011-08-26.01) - NTFSx86 NETWORK
Internet Explorer: 8.0.6001.19170  BrowserJavaVersion: 1.6.0_26
Run by Totsian at 20:42:27 on 2012-01-22
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.1.1033.18.1915.1485 [GMT -5:00]
.
AV: AVG Internet Security 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Internet Security 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: AVG Firewall *Enabled* {621CC794-9486-F902-D092-0484E8EA828B}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\Explorer.EXE
C:\Windows\helppane.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uSearch Page = hxxp://www.google.com
uStart Page = hxxp://www.facebook.com/?ref=hp
uDefault_Page_URL = hxxp://www.toshibadirect.com/dpdstart
uSearch Bar = hxxp://www.google.com/ie
mDefault_Page_URL = hxxp://www.toshibadirect.com/dpdstart
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg2012\avgssie.dll
BHO: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - c:\program files\avg secure search\9.0.0.23\AVG Secure Search_toolbar.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.7.7227.1100\swg.dll
BHO: Panda Security Toolbar: {b821bf60-5c2d-41eb-92dc-3e4ccd3a22e4} - c:\program files\panda security\panda security toolbar\PandaSecurityDx.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: Panda Security Toolbar: {b821bf60-5c2d-41eb-92dc-3e4ccd3a22e4} - c:\program files\panda security\panda security toolbar\PandaSecurityDx.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - c:\program files\avg secure search\9.0.0.23\AVG Secure Search_toolbar.dll
TB: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} -
{e7df6bff-55a5-4eb7-a673-4ed3e9456d39}
EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll
uRun: [TOSCDSPD] c:\program files\toshiba\toscdspd\TOSCDSPD.exe
uRun: [Google Update] "c:\users\totsian\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [cdloader] "c:\users\totsian\appdata\roaming\mjusbsp\cdloader2.exe" MAGICJACK
uRun: [RegistryMechanic] c:\program files\registry mechanic\rmtray.exe /H
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
mRun: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
mRun: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
mRun: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [NDSTray.exe] NDSTray.exe
mRun: [cfFncEnabler.exe] cfFncEnabler.exe
mRun: [ToshibaServiceStation] "c:\program files\toshiba\toshiba service station\TSS.exe" /hide
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [Skytel] Skytel.exe
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [<NO NAME>]
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SSDMonitor] c:\program files\common files\pc tools\smonitor\SSDMonitor.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [InstaLAN] "c:\program files\belkin\router setup and monitor\BelkinRouterMonitor.exe" startup
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
mRun: [AVG_TRAY] "c:\program files\avg\avg2012\avgtray.exe"
mRun: [vProt] "c:\program files\avg secure search\vprot.exe"
dRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\FlashUtil10h_ActiveX.exe -update activex
StartupFolder: c:\users\totsian\appdata\roaming\micros~1\windows\startm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
Trusted Zone: internet
Trusted Zone: mcafee.com
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 209.18.47.61 209.18.47.62
TCP: Interfaces\{288E31B4-26B6-4BBD-92AE-5F369DC471F3} : DhcpNameServer = 209.18.47.61 209.18.47.62
TCP: Interfaces\{AA1D2E6B-27DC-480A-9180-32E1C617E191} : DhcpNameServer = 192.168.100.254
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg2012\avgpp.dll
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\9.0.1\ViProtocol.dll
Notify: igfxcui - igfxdev.dll
AppInit_DLLs: c:\progra~1\google\google~1\GOEC62~1.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\totsian\appdata\roaming\mozilla\firefox\profiles\4ue6lkkj.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com/?ref=logo
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=panda&type=PCAFSI1143&p=
FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff5.dll
FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff6.dll
FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff7.dll
FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff8.dll
FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff9.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpClipBook.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpClipBookDB.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpNeoLogger.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSaturn.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSeymour.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSmartSelect.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSmartWebPrinting.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSWPOperation.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXPLogging.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXPMTC.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXPMTL.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXREStub.dll
FF - component: c:\users\totsian\appdata\roaming\mozilla\firefox\profiles\4ue6lkkj.default\extensions\{69d1a568-ffdf-4ef5-8919-7003582e0ee8}\components\FFExternalAlert.dll
FF - component: c:\users\totsian\appdata\roaming\mozilla\firefox\profiles\4ue6lkkj.default\extensions\{69d1a568-ffdf-4ef5-8919-7003582e0ee8}\components\RadioWMPCore.dll
FF - component: c:\users\totsian\appdata\roaming\mozilla\firefox\profiles\4ue6lkkj.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
FF - component: c:\users\totsian\appdata\roaming\mozilla\firefox\profiles\4ue6lkkj.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
FF - component: c:\users\totsian\appdata\roaming\mozilla\firefox\profiles\4ue6lkkj.default\extensions\{b821bf60-5c2d-41eb-92dc-3e4ccd3a22e4}\components\dtTransparency.dll
FF - component: c:\users\totsian\appdata\roaming\mozilla\firefox\profiles\4ue6lkkj.default\extensions\{b821bf60-5c2d-41eb-92dc-3e4ccd3a22e4}\components\dtTransparency3.5.dll
FF - component: c:\users\totsian\appdata\roaming\mozilla\firefox\profiles\4ue6lkkj.default\extensions\{b821bf60-5c2d-41eb-92dc-3e4ccd3a22e4}\components\dtTransparency3.6.dll
FF - plugin: c:\program files\google\update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.3.21.53\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.57\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.65\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.69\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\plugins\nphpclipbook.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\wildtangent games\app\browserintegration\registered\2\NP_wtapp.dll
FF - plugin: c:\users\totsian\appdata\local\google\update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: c:\users\totsian\appdata\roaming\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\users\totsian\appdata\roaming\mozilla\plugins\npgtpo3dautoplugin.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Playdom Toolbar: {69d1a568-ffdf-4ef5-8919-7003582e0ee8} - %profile%\extensions\{69d1a568-ffdf-4ef5-8919-7003582e0ee8}
FF - Ext: Gamers Unite! Snag Bar: {afe43e80-0abc-4df2-81a0-3fe44b74abe8} - %profile%\extensions\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}
FF - Ext: Zynga Toolbar: {7b13ec3e-999a-4b70-b9cb-2617b8323822} - %profile%\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
FF - Ext: Panda Security Toolbar: {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - %profile%\extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}
FF - Ext: Charles Autoconfiguration: {3e9a3920-1b27-11da-8cd6-0800200c9a66} - %profile%\extensions\{3e9a3920-1b27-11da-8cd6-0800200c9a66}
FF - Ext: Diccionario español Venezuela: es-ve@dictionaries.addons.mozilla.org - %profile%\extensions\es-ve@dictionaries.addons.mozilla.org
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: HP Smart Web Printing: smartwebprinting@hp.com - c:\program files\hp\digital imaging\smart web printing\MozillaAddOn3
FF - Ext: AVG Safe Search: {1E73965B-8B48-48be-9C8D-68B920ABC1C4} - c:\program files\avg\avg2012\Firefox4
FF - Ext: AVG Security Toolbar: avg@toolbar - c:\programdata\avg secure search\9.0.0.23
FF - Ext: HP Smart Web Printing: smartwebprinting@hp.com - c:\program files\hp\digital imaging\smart web printing\MozillaAddOn3
.
---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2011-7-11 23120]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2011-9-13 32592]
R1 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwd6x.sys [2011-5-23 47968]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2011-7-11 295248]
R1 jswpslwf;JumpStart Wireless Filter Driver;c:\windows\system32\drivers\jswpslwf.sys [2009-7-13 20384]
R3 FwLnk;FwLnk Driver;c:\windows\system32\drivers\FwLnk.sys [2008-8-18 7168]
S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2011-10-7 230608]
S1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2011-8-8 40016]
S2 avgfws;AVG Firewall;c:\program files\avg\avg2012\avgfws.exe [2011-11-23 2391832]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2012\AVGIDSAgent.exe [2011-10-12 4433248]
S2 avgwd;AVG WatchDog;c:\program files\avg\avg2012\avgwdsvc.exe [2011-8-2 192776]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 ConfigFree Service;ConfigFree Service;c:\program files\toshiba\configfree\CFSvcs.exe [2008-4-17 40960]
S2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-7 135664]
S2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-1-22 652872]
S2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files\common files\pc tools\smonitor\StartManSvc.exe [2010-8-18 632792]
S2 TMachInfo;TMachInfo;c:\program files\toshiba\toshiba service station\TMachInfo.exe [2008-8-18 46392]
S2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;c:\program files\toshiba\smartlogservice\TosIPCSrv.exe [2007-12-3 126976]
S2 vToolbarUpdater;vToolbarUpdater;c:\program files\common files\avg secure search\vtoolbarupdater\9.0.1\ToolbarUpdater.exe [2012-1-22 869216]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2011-7-11 134736]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2011-7-11 24272]
S3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2011-10-4 16720]
S3 GamesAppService;GamesAppService;c:\program files\wildtangent games\app\GamesAppService.exe [2010-10-12 206072]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\google\google desktop search\GoogleDesktop.exe [2008-8-21 30192]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-2-7 135664]
S3 jswpsapi;Jumpstart Wifi Protected Setup;c:\program files\jumpstart\jswpsapi.exe [2009-7-13 954368]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-1-22 20464]
S3 phaudlwr;Philips Audio Filter;c:\windows\system32\drivers\phaudlwr.sys [2009-7-22 88704]
S3 SPC1300;USB2.0 PC Camera (SPC1300);c:\windows\system32\drivers\spc1300.sys [2009-7-22 3036032]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S3 WSDPrintDevice;WSD Print Support via UMB;c:\windows\system32\drivers\WSDPrint.sys [2008-1-20 16896]
.
=============== Created Last 30 ================
.
2012-01-22 19:16:35   --------   d-----w-   c:\users\totsian\appdata\roaming\AVG2012
2012-01-22 19:15:25   --------   d-----w-   c:\programdata\AVG Secure Search
2012-01-22 19:15:21   --------   d-----w-   c:\program files\common files\AVG Secure Search
2012-01-22 19:15:20   --------   d-----w-   c:\program files\AVG Secure Search
2012-01-22 19:15:17   --------   d--h--w-   c:\programdata\Common Files
2012-01-22 19:12:59   --------   d-----w-   c:\windows\system32\drivers\AVG
2012-01-22 19:12:59   --------   d-----w-   c:\programdata\AVG2012
2012-01-22 19:11:50   --------   d-----w-   c:\program files\AVG
2012-01-22 19:03:30   --------   d-----w-   c:\programdata\MFAData
2012-01-22 16:04:14   --------   d-----w-   c:\users\totsian\8F1A20DC251D47B091B7DCA2523EE6C9.TMP
2012-01-22 13:21:49   --------   d-----w-   c:\users\totsian\appdata\roaming\Malwarebytes
2012-01-22 13:18:22   --------   d-----w-   c:\programdata\Malwarebytes
2012-01-22 13:18:21   20464   ----a-w-   c:\windows\system32\drivers\mbam.sys
2012-01-22 13:18:21   --------   d-----w-   c:\program files\Malwarebytes' Anti-Malware
2012-01-20 06:50:59   6557240   ----a-w-   c:\programdata\microsoft\windows defender\definition updates\{adb23dc3-2311-45f7-a218-0d49c30ec96a}\mpengine.dll
2012-01-19 02:04:44   9728   ----a-w-   c:\windows\system32\lsass.exe
2012-01-19 02:04:44   72704   ----a-w-   c:\windows\system32\secur32.dll
2012-01-19 02:04:44   440192   ----a-w-   c:\windows\system32\drivers\ksecdd.sys
2012-01-19 02:04:44   377344   ----a-w-   c:\windows\system32\winhttp.dll
2012-01-19 02:04:44   278528   ----a-w-   c:\windows\system32\schannel.dll
2012-01-19 02:04:44   1259008   ----a-w-   c:\windows\system32\lsasrv.dll
2012-01-17 23:07:59   23552   ----a-w-   c:\windows\system32\mciseq.dll
2012-01-17 23:07:59   189952   ----a-w-   c:\windows\system32\winmm.dll
2012-01-17 23:07:55   1205064   ----a-w-   c:\windows\system32\ntdll.dll
2012-01-17 23:07:51   66560   ----a-w-   c:\windows\system32\packager.dll
2012-01-17 23:07:49   376320   ----a-w-   c:\windows\system32\winsrv.dll
2012-01-17 23:07:46   2409784   ----a-w-   c:\program files\windows mail\OESpamFilter.dat
2012-01-17 23:07:39   497152   ----a-w-   c:\windows\system32\qdvd.dll
2012-01-17 23:07:39   1314816   ----a-w-   c:\windows\system32\quartz.dll
.
==================== Find3M  ====================
.
2011-11-23 13:37:27   2043904   ----a-w-   c:\windows\system32\win32k.sys
2011-11-15 19:29:56   222080   ------w-   c:\windows\system32\MpSigStub.exe
2011-11-08 14:42:19   2048   ----a-w-   c:\windows\system32\tzres.dll
2011-11-03 06:22:04   916992   ----a-w-   c:\windows\system32\wininet.dll
2011-11-03 06:17:38   43520   ----a-w-   c:\windows\system32\licmgr10.dll
2011-11-03 06:17:23   1469440   ----a-w-   c:\windows\system32\inetcpl.cpl
2011-11-03 06:17:08   71680   ----a-w-   c:\windows\system32\iesetup.dll
2011-11-03 06:17:08   109056   ----a-w-   c:\windows\system32\iesysprep.dll
2011-11-03 05:22:43   385024   ----a-w-   c:\windows\system32\html.iec
2011-11-03 04:45:39   133632   ----a-w-   c:\windows\system32\ieUnatt.exe
2011-11-03 04:43:59   1638912   ----a-w-   c:\windows\system32\mshtml.tlb
2011-10-27 08:01:53   3602816   ----a-w-   c:\windows\system32\ntkrnlpa.exe
2011-10-27 08:01:53   3550080   ----a-w-   c:\windows\system32\ntoskrnl.exe
2011-10-25 15:56:04   49152   ----a-w-   c:\windows\system32\csrsrv.dll
.
============= FINISH: 20:43:44.45 ===============



.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 7/13/2009 5:20:11 PM
System Uptime: 1/22/2012 8:40:25 PM (0 hours ago)
.
Motherboard: TOSHIBA |  | Portable PC
Processor: Intel(R) Pentium(R) Dual  CPU  T3400  @ 2.16GHz | CPU | 2161/667mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 140 GiB total, 79.324 GiB free.
D: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
.
==== Installed Programs ======================
.
32 Bit HP CIO Components Installer
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 8.2.5
Adobe Shockwave Player 11.5
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Atheros Driver Installation Program
Atheros Wi-Fi Protected Setup Library
AVG 2012
Bejeweled 2 Deluxe 1.1
Belkin Setup and Router Monitor
Bonjour
BufferChm
CD/DVD Drive Acoustic Silencer
Charles
Chuzzle Deluxe 1.01
Cisco EAP-FAST Module
Cisco LEAP Module
Cisco PEAP Module
Compatibility Pack for the 2007 Office system
Copy
Destinations
DeviceDiscovery
DJ_AIO_06_F2400_SW_Min
DVD MovieFactory for TOSHIBA
F2400
FrostWire 4.20.9
Google Desktop
Google Talk Plugin
Google Toolbar for Internet Explorer
Google Update Helper
GPBaseService2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
HP Customer Participation Program 13.0
HP Deskjet F2400 All-In-One Driver Software 13.0 Rel .6
HP Imaging Device Functions 13.0
HP Print Projects 1.0
HP Smart Web Printing 4.5
HP Solution Center 13.0
HP Update
HPPhotoGadget
hpPrintProjects
HPProductAssistant
hpWLPGInstaller
Intel(R) Graphics Media Accelerator Driver
Intel® Matrix Storage Manager
iPod for Windows 2006-01-10
iTunes
Java Auto Updater
Java(TM) 6 Update 20
Java(TM) 6 Update 26
Java(TM) 6 Update 6
LiveUpdate (Symantec Corporation)
Malwarebytes Anti-Malware version 1.60.0.1800
MarketResearch
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft Application Error Reporting
Microsoft Easy Assist v2
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Silverlight
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Works
Microsoft XML Parser
Mozilla Firefox (3.6.25)
MSXML 4.0 SP2 (KB941833)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
OGA Notifier 2.0.0048.0
OpenOffice.org 3.2
Panda Security Toolbar
Picasa 2
QuickTime
Realtek 8169 8168 8101E 8102E Ethernet Driver
Realtek High Definition Audio Driver
Realtek USB 2.0 Card Reader
Registry Mechanic 9.0
Scan
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Windows Media Encoder (KB2447961)
Security Update for Windows Media Encoder (KB954156)
Security Update for Windows Media Encoder (KB979332)
SmartWebPrinting
SolutionCenter
Sony USB Driver
Spelling Dictionaries Support For Adobe Reader 8
Status
Synaptics Pointing Device Driver
System Requirements Lab for Intel
Toolbox
TOSHIBA Assist
TOSHIBA ConfigFree
TOSHIBA Desktop Links
TOSHIBA Disc Creator
TOSHIBA DVD PLAYER
TOSHIBA Extended Tiles for Windows Mobility Center
TOSHIBA Hardware Setup
TOSHIBA Recovery Disc Creator
Toshiba Registration
TOSHIBA Service Station
TOSHIBA Software Modem
TOSHIBA Speech System Applications
TOSHIBA Speech System SR Engine(U.S.) Version1.0
TOSHIBA Speech System TTS Engine(U.S.) Version1.0
TOSHIBA Supervisor Password
TOSHIBA Value Added Package
TrayApp
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update Installer for WildTangent Games App
WebReg
WildTangent Games
WildTangent Games App (Toshiba Games)
Windows Media Encoder 9 Series
Yahoo! Messenger
Yahoo! Software Update
.
==== Event Viewer Messages From Past Week ========
.
1/22/2012 8:43:07 PM, Error: Service Control Manager [7001]  - The PnP-X IP Bus Enumerator service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The dependency service or group failed to start.
1/22/2012 8:41:53 PM, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  Avgldx86 Avgmfx86 spldr Wanarpv6
1/22/2012 8:41:53 PM, Error: Service Control Manager [7001]  - The Computer Browser service depends on the Server service which failed to start because of the following error:  The dependency service or group failed to start.
1/22/2012 8:41:50 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
1/22/2012 8:41:42 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
1/22/2012 8:41:35 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}
1/22/2012 8:41:34 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
1/22/2012 8:41:26 PM, Error: Microsoft-Windows-WLAN-AutoConfig [10000]  - WLAN Extensibility Module has failed to start. Module Path: C:\Windows\system32\athihvs.dll Error Code: 21
1/22/2012 8:41:26 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
1/22/2012 8:41:01 PM, Error: EventLog [6008]  - The previous system shutdown at 8:38:15 PM on 1/22/2012 was unexpected.
1/22/2012 8:21:43 PM, Error: Microsoft-Windows-DistributedCOM [10016]  - The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID  {C97FCC79-E628-407D-AE68-A06AD6D8B4D1}  to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
1/22/2012 8:20:29 PM, Error: EventLog [6008]  - The previous system shutdown at 8:14:57 PM on 1/22/2012 was unexpected.
1/22/2012 7:58:13 PM, Error: EventLog [6008]  - The previous system shutdown at 7:49:20 PM on 1/22/2012 was unexpected.
1/22/2012 7:32:35 PM, Error: EventLog [6008]  - The previous system shutdown at 7:27:50 PM on 1/22/2012 was unexpected.
1/22/2012 11:16:39 AM, Error: Service Control Manager [7031]  - The Windows Search service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.
1/22/2012 11:16:39 AM, Error: Service Control Manager [7024]  - The Windows Search service terminated with service-specific error 2147749155 (0x80040D23).
1/22/2012 11:03:19 AM, Error: Service Control Manager [7034]  - The IS360service service terminated unexpectedly.  It has done this 1 time(s).
1/19/2012 8:38:42 AM, Error: bowser [8003]  - The master browser has received a server announcement from the computer MOOCH-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{288E31B4-26B6-4BBD-92AE-5F369DC47. The master browser is stopping or an election is being forced.
1/19/2012 8:05:42 PM, Error: Service Control Manager [7034]  - The Bonjour Service service terminated unexpectedly.  It has done this 1 time(s).
1/18/2012 9:01:59 PM, Error: Microsoft-Windows-Dhcp-Client [1002]  - The IP address lease 192.168.1.105 for the Network Card with network address 0024D2172BE5 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
1/18/2012 9:00:12 PM, Error: Microsoft-Windows-Dhcp-Client [1002]  - The IP address lease 192.168.1.100 for the Network Card with network address 0024D2172BE5 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
1/18/2012 8:58:12 PM, Error: Tcpip [4199]  - The system detected an address conflict for IP address 192.168.1.100 with the system having network hardware address 3C-D9-2B-E8-86-25. Network operations on this system may be disrupted as a result.
1/18/2012 12:10:54 PM, Error: Microsoft-Windows-Dhcp-Client [1002]  - The IP address lease 192.168.1.109 for the Network Card with network address 0024D2172BE5 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
1/17/2012 5:54:38 PM, Error: EventLog [6008]  - The previous system shutdown at 7:35:56 PM on 1/1/2012 was unexpected.
.
==== End Of File ===========================

[Jintan]

Hello here puterboss,

From years of experience I know that when someone runs two or more repair threads at the same time, repairs get mixed between the two systems, and one suffers as the other gets priority. I see parts of Panda, and what looks like a very recent install of AVG. I would like to suggest for this system you temp disable all security software, and uninstall AVG. It may have become corrupted, and is now causing problems. Also RegistryMechanic. "Reg fixit/cure/mechanic/optimizer" programs all look good, do little, and almost always make the wrong changes. If it is a paid version please save any registration key info, should you choose to reinstall it later.

Reboot after, and check for improvement. There is some adware here, and we can address that as we go. But I still await the log results in your other thread.

[puterboss]

I am following the steps in this instruction while the scan continues for the other thread. it is only at 24% after 2 hours of scanning. It has found 13 infected files.
 Will reply after restart on daughter's system.

[puterboss]

Avg will not uninstall nor will registry cleaner. Everytime I try to uninstall one of them, the puter freezes.  I have tried several times to restart the computer in safe mode but apparently, some of the AVG files are now missing so the puter just hangs. Is there another way to go about this repair? Maybe a hard reboot,, (which I have only heard about and don't know how to do). She doesn't have much on the computer that will be lost, so that isn't an issue.

[puterboss]

Okay, finally got programs off of computer. I still have the same problem with the computer freezing though. I am not sure of what to do next.

[Jintan]

Go here and download and run the AVG uninstaller.

Reboot, then run and post a new OTL scan log please.

----------

Also click here and download the installer for Gmer to your desktop, then click that file to run Gmer.


Once the opening scan finishes, click on Scan (again, before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while this scan completes. Also do not use your computer during the scan). 

When completed, click on the Copy button and rightclick on your Desktop, choose "New" > Text document.  Once the file is created, open it and rightclick again and choose Paste.  Copy the information and post it here please.

Note - If Gmer shows it has located infection once it's opening scan completes, do not click the Scan button. We don't want hidden malware settings to cause any problems. Instead, just click on the Copy button and rightclick on your Desktop, choose "New" > Text document.  Once the file is created, open it and rightclick again and choose Paste.  Copy the information and post it here please.

-----------

Download aswMBR ( 511KB ) to your desktop.

• Double click the aswMBR.exe icon to run it
  
• If you can have an open Internet connection, and allow it to download the latest Avast engine detections.
• {i}If avast! antivirus is already installed, just do the next step.{/i}
• Click the Scan button to start the scan
  
• On completion of the scan, click the  save log button, save it to your desktop and post it in your next reply.
  

[puterboss]

Here are the scan. I am putting the gmer scan in the next post and will rum the MBR now.
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.19170  BrowserJavaVersion: 1.6.0_26
Run by Totsian at 20:15:37 on 2012-01-23
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.1.1033.18.1915.859 [GMT -5:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: AVG Firewall *Disabled* {621CC794-9486-F902-D092-0484E8EA828B}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe
C:\Windows\system32\agrsmsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
C:\Windows\system32\TODDSrv.exe
C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\Toshiba\TOSHIBA Service Station\TSS.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\system32\igfxext.exe
C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Belkin\Router Setup and Monitor\BelkinSetup.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Windows\system32\taskeng.exe
C:\Users\Totsian\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uSearch Page = hxxp://www.google.com
uStart Page = hxxp://www.facebook.com/?ref=hp
uDefault_Page_URL = hxxp://www.toshibadirect.com/dpdstart
uSearch Bar = hxxp://www.google.com/ie
mDefault_Page_URL = hxxp://www.toshibadirect.com/dpdstart
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.7.7227.1100\swg.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} -
{e7df6bff-55a5-4eb7-a673-4ed3e9456d39}
EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll
uRun: [TOSCDSPD] c:\program files\toshiba\toscdspd\TOSCDSPD.exe
uRun: [Google Update] "c:\users\totsian\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [cdloader] "c:\users\totsian\appdata\roaming\mjusbsp\cdloader2.exe" MAGICJACK
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
mRun: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
mRun: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
mRun: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [NDSTray.exe] NDSTray.exe
mRun: [cfFncEnabler.exe] cfFncEnabler.exe
mRun: [ToshibaServiceStation] "c:\program files\toshiba\toshiba service station\TSS.exe" /hide
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [Skytel] Skytel.exe
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [<NO NAME>]
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [InstaLAN] "c:\program files\belkin\router setup and monitor\BelkinRouterMonitor.exe" startup
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
dRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\FlashUtil10h_ActiveX.exe -update activex
StartupFolder: c:\users\totsian\appdata\roaming\micros~1\windows\startm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
Trusted Zone: internet
Trusted Zone: mcafee.com
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 209.18.47.61 209.18.47.62
TCP: Interfaces\{288E31B4-26B6-4BBD-92AE-5F369DC471F3} : DhcpNameServer = 209.18.47.61 209.18.47.62
TCP: Interfaces\{AA1D2E6B-27DC-480A-9180-32E1C617E191} : DhcpNameServer = 192.168.100.254
Notify: igfxcui - igfxdev.dll
AppInit_DLLs: c:\progra~1\google\google~1\GOEC62~1.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\totsian\appdata\roaming\mozilla\firefox\profiles\4ue6lkkj.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com/?ref=logo
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=panda&type=PCAFSI1143&p=
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpClipBook.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpClipBookDB.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpNeoLogger.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSaturn.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSeymour.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSmartSelect.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSmartWebPrinting.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSWPOperation.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXPLogging.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXPMTC.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXPMTL.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXREStub.dll
FF - component: c:\users\totsian\appdata\roaming\mozilla\firefox\profiles\4ue6lkkj.default\extensions\{69d1a568-ffdf-4ef5-8919-7003582e0ee8}\components\FFExternalAlert.dll
FF - component: c:\users\totsian\appdata\roaming\mozilla\firefox\profiles\4ue6lkkj.default\extensions\{69d1a568-ffdf-4ef5-8919-7003582e0ee8}\components\RadioWMPCore.dll
FF - component: c:\users\totsian\appdata\roaming\mozilla\firefox\profiles\4ue6lkkj.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
FF - component: c:\users\totsian\appdata\roaming\mozilla\firefox\profiles\4ue6lkkj.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
FF - plugin: c:\program files\google\update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.3.21.53\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.57\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.65\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.69\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\plugins\nphpclipbook.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\wildtangent games\app\browserintegration\registered\2\NP_wtapp.dll
FF - plugin: c:\users\totsian\appdata\local\google\update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: c:\users\totsian\appdata\roaming\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\users\totsian\appdata\roaming\mozilla\plugins\npgtpo3dautoplugin.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Playdom Toolbar: {69d1a568-ffdf-4ef5-8919-7003582e0ee8} - %profile%\extensions\{69d1a568-ffdf-4ef5-8919-7003582e0ee8}
FF - Ext: Gamers Unite! Snag Bar: {afe43e80-0abc-4df2-81a0-3fe44b74abe8} - %profile%\extensions\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}
FF - Ext: Zynga Toolbar: {7b13ec3e-999a-4b70-b9cb-2617b8323822} - %profile%\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
FF - Ext: Charles Autoconfiguration: {3e9a3920-1b27-11da-8cd6-0800200c9a66} - %profile%\extensions\{3e9a3920-1b27-11da-8cd6-0800200c9a66}
FF - Ext: Diccionario español Venezuela: es-ve@dictionaries.addons.mozilla.org - %profile%\extensions\es-ve@dictionaries.addons.mozilla.org
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: HP Smart Web Printing: smartwebprinting@hp.com - c:\program files\hp\digital imaging\smart web printing\MozillaAddOn3
FF - Ext: HP Smart Web Printing: smartwebprinting@hp.com - c:\program files\hp\digital imaging\smart web printing\MozillaAddOn3
.
---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true
============= SERVICES / DRIVERS ===============
.
R1 jswpslwf;JumpStart Wireless Filter Driver;c:\windows\system32\drivers\jswpslwf.sys [2009-7-13 20384]
R2 ConfigFree Service;ConfigFree Service;c:\program files\toshiba\configfree\CFSvcs.exe [2008-4-17 40960]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-1-22 652872]
R2 TMachInfo;TMachInfo;c:\program files\toshiba\toshiba service station\TMachInfo.exe [2008-8-18 46392]
R2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;c:\program files\toshiba\smartlogservice\TosIPCSrv.exe [2007-12-3 126976]
R3 FwLnk;FwLnk Driver;c:\windows\system32\drivers\FwLnk.sys [2008-8-18 7168]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-1-22 20464]
S2 avgfws;AVG Firewall;c:\program files\avg\avg2012\avgfws.exe [2011-11-23 2391832]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2012\AVGIDSAgent.exe [2011-10-12 4433248]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-7 135664]
S3 GamesAppService;GamesAppService;c:\program files\wildtangent games\app\GamesAppService.exe [2010-10-12 206072]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\google\google desktop search\GoogleDesktop.exe [2008-8-21 30192]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-2-7 135664]
S3 jswpsapi;Jumpstart Wifi Protected Setup;c:\program files\jumpstart\jswpsapi.exe [2009-7-13 954368]
S3 phaudlwr;Philips Audio Filter;c:\windows\system32\drivers\phaudlwr.sys [2009-7-22 88704]
S3 SPC1300;USB2.0 PC Camera (SPC1300);c:\windows\system32\drivers\spc1300.sys [2009-7-22 3036032]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S3 WSDPrintDevice;WSD Print Support via UMB;c:\windows\system32\drivers\WSDPrint.sys [2008-1-20 16896]
.
=============== Created Last 30 ================
.
2012-01-23 03:08:52   --------   d-sh--w-   C:\found.000
2012-01-22 19:15:17   --------   d--h--w-   c:\programdata\Common Files
2012-01-22 19:12:59   --------   d-----w-   c:\windows\system32\drivers\AVG
2012-01-22 19:11:50   --------   d-----w-   c:\program files\AVG
2012-01-22 19:03:30   --------   d-----w-   c:\programdata\MFAData
2012-01-22 16:04:14   --------   d-----w-   c:\users\totsian\8F1A20DC251D47B091B7DCA2523EE6C9.TMP
2012-01-22 13:21:49   --------   d-----w-   c:\users\totsian\appdata\roaming\Malwarebytes
2012-01-22 13:18:22   --------   d-----w-   c:\programdata\Malwarebytes
2012-01-22 13:18:21   20464   ----a-w-   c:\windows\system32\drivers\mbam.sys
2012-01-22 13:18:21   --------   d-----w-   c:\program files\Malwarebytes' Anti-Malware
2012-01-20 06:50:59   6557240   ----a-w-   c:\programdata\microsoft\windows defender\definition updates\{adb23dc3-2311-45f7-a218-0d49c30ec96a}\mpengine.dll
2012-01-19 02:04:44   9728   ----a-w-   c:\windows\system32\lsass.exe
2012-01-19 02:04:44   72704   ----a-w-   c:\windows\system32\secur32.dll
2012-01-19 02:04:44   440192   ----a-w-   c:\windows\system32\drivers\ksecdd.sys
2012-01-19 02:04:44   377344   ----a-w-   c:\windows\system32\winhttp.dll
2012-01-19 02:04:44   278528   ----a-w-   c:\windows\system32\schannel.dll
2012-01-19 02:04:44   1259008   ----a-w-   c:\windows\system32\lsasrv.dll
2012-01-17 23:07:59   23552   ----a-w-   c:\windows\system32\mciseq.dll
2012-01-17 23:07:59   189952   ----a-w-   c:\windows\system32\winmm.dll
2012-01-17 23:07:55   1205064   ----a-w-   c:\windows\system32\ntdll.dll
2012-01-17 23:07:51   66560   ----a-w-   c:\windows\system32\packager.dll
2012-01-17 23:07:49   376320   ----a-w-   c:\windows\system32\winsrv.dll
2012-01-17 23:07:46   2409784   ----a-w-   c:\program files\windows mail\OESpamFilter.dat
2012-01-17 23:07:39   497152   ----a-w-   c:\windows\system32\qdvd.dll
2012-01-17 23:07:39   1314816   ----a-w-   c:\windows\system32\quartz.dll
.
==================== Find3M  ====================
.
2011-11-23 13:37:27   2043904   ----a-w-   c:\windows\system32\win32k.sys
2011-11-15 19:29:56   222080   ------w-   c:\windows\system32\MpSigStub.exe
2011-11-08 14:42:19   2048   ----a-w-   c:\windows\system32\tzres.dll
2011-11-03 06:22:04   916992   ----a-w-   c:\windows\system32\wininet.dll
2011-11-03 06:17:38   43520   ----a-w-   c:\windows\system32\licmgr10.dll
2011-11-03 06:17:23   1469440   ----a-w-   c:\windows\system32\inetcpl.cpl
2011-11-03 06:17:08   71680   ----a-w-   c:\windows\system32\iesetup.dll
2011-11-03 06:17:08   109056   ----a-w-   c:\windows\system32\iesysprep.dll
2011-11-03 05:22:43   385024   ----a-w-   c:\windows\system32\html.iec
2011-11-03 04:45:39   133632   ----a-w-   c:\windows\system32\ieUnatt.exe
2011-11-03 04:43:59   1638912   ----a-w-   c:\windows\system32\mshtml.tlb
2011-10-27 08:01:53   3602816   ----a-w-   c:\windows\system32\ntkrnlpa.exe
2011-10-27 08:01:53   3550080   ----a-w-   c:\windows\system32\ntoskrnl.exe
.
============= FINISH: 20:16:18.97 ===============

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 7/13/2009 5:20:11 PM
System Uptime: 1/23/2012 7:51:50 PM (1 hours ago)
.
Motherboard: TOSHIBA |  | Portable PC
Processor: Intel(R) Pentium(R) Dual  CPU  T3400  @ 2.16GHz | CPU | 2166/667mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 140 GiB total, 79.033 GiB free.
D: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
.
==== Installed Programs ======================
.
32 Bit HP CIO Components Installer
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 8.2.5
Adobe Shockwave Player 11.5
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Atheros Driver Installation Program
Atheros Wi-Fi Protected Setup Library
Bejeweled 2 Deluxe 1.1
Belkin Setup and Router Monitor
Bonjour
BufferChm
CD/DVD Drive Acoustic Silencer
Charles
Chuzzle Deluxe 1.01
Cisco EAP-FAST Module
Cisco LEAP Module
Cisco PEAP Module
Compatibility Pack for the 2007 Office system
Copy
Destinations
DeviceDiscovery
DJ_AIO_06_F2400_SW_Min
DVD MovieFactory for TOSHIBA
F2400
FrostWire 4.20.9
Google Desktop
Google Talk Plugin
Google Toolbar for Internet Explorer
Google Update Helper
GPBaseService2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
HP Customer Participation Program 13.0
HP Deskjet F2400 All-In-One Driver Software 13.0 Rel .6
HP Imaging Device Functions 13.0
HP Print Projects 1.0
HP Smart Web Printing 4.5
HP Solution Center 13.0
HP Update
HPPhotoGadget
hpPrintProjects
HPProductAssistant
hpWLPGInstaller
Intel(R) Graphics Media Accelerator Driver
Intel® Matrix Storage Manager
iPod for Windows 2006-01-10
iTunes
Java Auto Updater
Java(TM) 6 Update 20
Java(TM) 6 Update 26
Java(TM) 6 Update 6
LiveUpdate (Symantec Corporation)
Malwarebytes Anti-Malware version 1.60.0.1800
MarketResearch
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft Application Error Reporting
Microsoft Easy Assist v2
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Silverlight
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Works
Microsoft XML Parser
Mozilla Firefox (3.6.25)
MSXML 4.0 SP2 (KB941833)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
OGA Notifier 2.0.0048.0
OpenOffice.org 3.2
Picasa 2
QuickTime
Realtek 8169 8168 8101E 8102E Ethernet Driver
Realtek High Definition Audio Driver
Realtek USB 2.0 Card Reader
Scan
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Windows Media Encoder (KB2447961)
Security Update for Windows Media Encoder (KB954156)
Security Update for Windows Media Encoder (KB979332)
SmartWebPrinting
SolutionCenter
Sony USB Driver
Spelling Dictionaries Support For Adobe Reader 8
Status
Synaptics Pointing Device Driver
System Requirements Lab for Intel
Toolbox
TOSHIBA Assist
TOSHIBA ConfigFree
TOSHIBA Desktop Links
TOSHIBA Disc Creator
TOSHIBA DVD PLAYER
TOSHIBA Extended Tiles for Windows Mobility Center
TOSHIBA Hardware Setup
TOSHIBA Recovery Disc Creator
Toshiba Registration
TOSHIBA Service Station
TOSHIBA Software Modem
TOSHIBA Speech System Applications
TOSHIBA Speech System SR Engine(U.S.) Version1.0
TOSHIBA Speech System TTS Engine(U.S.) Version1.0
TOSHIBA Supervisor Password
TOSHIBA Value Added Package
TrayApp
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update Installer for WildTangent Games App
WebReg
WildTangent Games
WildTangent Games App (Toshiba Games)
Windows Media Encoder 9 Series
Yahoo! Messenger
Yahoo! Software Update
.
==== Event Viewer Messages From Past Week ========
.
1/23/2012 8:01:54 AM, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the AVG Firewall service to connect.
1/23/2012 8:01:54 AM, Error: Service Control Manager [7003]  - The AVGIDSAgent service depends the following service: AVGIDSDriver. This service might not be installed.
1/23/2012 8:01:54 AM, Error: Service Control Manager [7000]  - The AVG Firewall service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
1/23/2012 8:01:38 AM, Error: Microsoft-Windows-DistributedCOM [10016]  - The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID  {C97FCC79-E628-407D-AE68-A06AD6D8B4D1}  to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
1/23/2012 7:55:38 AM, Error: Service Control Manager [7001]  - The PnP-X IP Bus Enumerator service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The dependency service or group failed to start.
1/23/2012 7:54:32 AM, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  Avgldx86 Avgmfx86 spldr Wanarpv6
1/23/2012 7:54:32 AM, Error: Service Control Manager [7001]  - The Computer Browser service depends on the Server service which failed to start because of the following error:  The dependency service or group failed to start.
1/23/2012 7:54:27 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
1/23/2012 7:54:27 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
1/23/2012 7:54:18 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}
1/23/2012 7:54:17 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
1/23/2012 7:54:10 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
1/23/2012 7:53:56 AM, Error: Microsoft-Windows-WLAN-AutoConfig [10000]  - WLAN Extensibility Module has failed to start. Module Path: C:\Windows\system32\athihvs.dll Error Code: 21
1/23/2012 7:53:31 AM, Error: EventLog [6008]  - The previous system shutdown at 7:22:43 AM on 1/23/2012 was unexpected.
1/23/2012 7:08:48 AM, Error: Service Control Manager [7000]  - The AVG Anti-Rootkit Driver service failed to start due to the following error:  The system cannot find the file specified.
1/23/2012 6:56:30 AM, Error: Service Control Manager [7001]  - The AVGIDSAgent service depends on the AVGIDSDriver service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
1/23/2012 6:48:08 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error:  An instance of the service is already running.
1/23/2012 6:47:58 AM, Error: Service Control Manager [7031]  - The Windows Search service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.
1/23/2012 6:47:58 AM, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  Avgldx86
1/23/2012 6:47:58 AM, Error: Service Control Manager [7024]  - The Windows Search service terminated with service-specific error 2147749155 (0x80040D23).
1/23/2012 6:47:58 AM, Error: Service Control Manager [7024]  - The AVG Firewall service terminated with service-specific error 3758161994 (0xE001004A).
1/23/2012 6:47:58 AM, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect.
1/23/2012 6:47:58 AM, Error: Service Control Manager [7000]  - The Windows Search service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
1/23/2012 6:47:57 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
1/23/2012 6:47:19 AM, Error: EventLog [6008]  - The previous system shutdown at 10:47:33 PM on 1/22/2012 was unexpected.
1/22/2012 9:48:53 PM, Error: EventLog [6008]  - The previous system shutdown at 9:44:32 PM on 1/22/2012 was unexpected.
1/22/2012 9:39:34 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
1/22/2012 9:38:45 PM, Error: EventLog [6008]  - The previous system shutdown at 9:02:06 PM on 1/22/2012 was unexpected.
1/22/2012 8:41:01 PM, Error: EventLog [6008]  - The previous system shutdown at 8:38:15 PM on 1/22/2012 was unexpected.
1/22/2012 8:20:29 PM, Error: EventLog [6008]  - The previous system shutdown at 8:14:57 PM on 1/22/2012 was unexpected.
1/22/2012 7:58:13 PM, Error: EventLog [6008]  - The previous system shutdown at 7:49:20 PM on 1/22/2012 was unexpected.
1/22/2012 7:32:35 PM, Error: EventLog [6008]  - The previous system shutdown at 7:27:50 PM on 1/22/2012 was unexpected.
1/22/2012 11:03:19 AM, Error: Service Control Manager [7034]  - The IS360service service terminated unexpectedly.  It has done this 1 time(s).
1/22/2012 10:43:41 PM, Error: EventLog [6008]  - The previous system shutdown at 10:29:22 PM on 1/22/2012 was unexpected.
1/22/2012 10:24:32 PM, Error: EventLog [6008]  - The previous system shutdown at 10:15:30 PM on 1/22/2012 was unexpected.
1/22/2012 10:12:38 PM, Error: EventLog [6008]  - The previous system shutdown at 10:01:41 PM on 1/22/2012 was unexpected.
1/19/2012 8:38:42 AM, Error: bowser [8003]  - The master browser has received a server announcement from the computer MOOCH-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{288E31B4-26B6-4BBD-92AE-5F369DC47. The master browser is stopping or an election is being forced.
1/19/2012 8:05:42 PM, Error: Service Control Manager [7034]  - The Bonjour Service service terminated unexpectedly.  It has done this 1 time(s).
1/18/2012 9:01:59 PM, Error: Microsoft-Windows-Dhcp-Client [1002]  - The IP address lease 192.168.1.105 for the Network Card with network address 0024D2172BE5 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
1/18/2012 9:00:12 PM, Error: Microsoft-Windows-Dhcp-Client [1002]  - The IP address lease 192.168.1.100 for the Network Card with network address 0024D2172BE5 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
1/18/2012 8:58:12 PM, Error: Tcpip [4199]  - The system detected an address conflict for IP address 192.168.1.100 with the system having network hardware address 3C-D9-2B-E8-86-25. Network operations on this system may be disrupted as a result.
1/18/2012 12:10:54 PM, Error: Microsoft-Windows-Dhcp-Client [1002]  - The IP address lease 192.168.1.109 for the Network Card with network address 0024D2172BE5 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
1/17/2012 5:54:38 PM, Error: EventLog [6008]  - The previous system shutdown at 7:35:56 PM on 1/1/2012 was unexpected.
.
==== End Of File ===========================

[puterboss]

GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-01-24 03:43:06
Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 TOSHIBA_ rev.LB11
Running: bgck1pno.exe; Driver: C:\Users\Totsian\AppData\Local\Temp\pwlirfoc.sys


---- Kernel code sections - GMER 1.0.15 ----

.text           C:\Windows\system32\DRIVERS\tos_sps32.sys                                                            section is writeable [0x88155480, 0x3C939, 0xE8000020]
.dsrt           C:\Windows\system32\DRIVERS\tos_sps32.sys                                                            unknown last section [0x88196900, 0x3CA, 0x48000040]
?               C:\Users\Totsian\AppData\Local\Temp\mbr.sys                                                          The system cannot find the file specified. !

---- User code sections - GMER 1.0.15 ----

.text           C:\Program Files\Mozilla Firefox\firefox.exe[504] ntdll.dll!LdrLoadDll                               77A89378 5 Bytes  JMP 009D131F C:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation)

---- User IAT/EAT - GMER 1.0.15 ----

IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown]                [73B57817] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage]                 [73BAA86D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI]             [73B5BB22] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode]       [73B4F695] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup]                 [73B575E9] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC]              [73B4E7CA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStreamICM]  [73B88395] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStream]     [73B5DA60] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight]             [73B4FFFA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth]              [73B4FF61] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage]               [73B471CF] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFileICM]       [73BDCAE2] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFile]          [73B7C8D8] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics]             [73B4D968] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree]                       [73B46853] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc]                      [73B4687E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[1392] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode]         [73B52AD1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

---- Devices - GMER 1.0.15 ----

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0                                                              Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation)
AttachedDevice  \Driver\kbdclass \Device\KeyboardClass1                                                              Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation)

---- EOF - GMER 1.0.15 ----

[puterboss]

aswMBR version 0.9.9.1509 Copyright(c) 2011 AVAST Software
Run date: 2012-01-24 03:56:01
-----------------------------
03:56:01.372    OS Version: Windows 6.0.6002 Service Pack 2
03:56:01.372    Number of processors: 2 586 0xF0D
03:56:01.374    ComputerName: TOTSIAN-PC  UserName: Totsian
03:56:02.320    Initialize success
03:56:52.510    AVAST engine defs: 12012301
03:57:17.939    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
03:57:17.942    Disk 0 Vendor: TOSHIBA_ LB11 Size: 152627MB BusType: 3
03:57:18.205    Disk 0 MBR read successfully
03:57:18.208    Disk 0 MBR scan
03:57:18.212    Disk 0 Windows VISTA default MBR code
03:57:18.296    Disk 0 Partition 1 00     27 Hidden NTFS WinRE NTFS         1500 MB offset 2048
03:57:18.374    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS       143707 MB offset 3074048
03:57:18.475    Disk 0 Partition 3 00     17 Hidd HPFS/NTFS NTFS         7419 MB offset 297385984
03:57:18.715    Disk 0 scanning sectors +312580096
03:57:19.210    Disk 0 scanning C:\Windows\system32\drivers
03:59:26.337    Service scanning
03:59:27.851    Modules scanning
04:01:43.511    Disk 0 trace - called modules:
04:01:43.961    ntkrnlpa.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll
04:01:43.970    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85c19210]
04:01:43.980    3 CLASSPNP.SYS[87f7c8b3] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0x85171028]
04:01:45.808    AVAST engine scan C:\Windows
04:03:52.935    AVAST engine scan C:\Windows\system32
04:12:47.841    AVAST engine scan C:\Windows\system32\drivers
04:13:39.136    AVAST engine scan C:\Users\Totsian
05:08:57.903    AVAST engine scan C:\ProgramData
05:23:44.503    Scan finished successfully
06:24:10.975    Disk 0 MBR has been saved successfully to "C:\Users\Totsian\Desktop\MBR.dat"
06:24:11.005    The log file has been saved successfully to "C:\Users\Totsian\Desktop\aswMBR.txt"

[Jintan]

The logs suggest quite a few system shutdowns. See if any produced dump files we can check.

Navigate (right click Computer, left click Explore/Open) to the following folder:

c:\windows\minidump

And if one is there, locate in it any recent minidump(date-somenumber).dmp files created, where "date-somenumber" matches dates of any recent crashes there. If they exist, then just zip a copy of it, and send it to [noparse]jintan@malwarecrypt.com[/noparse] as an attachment. Please place "Submitted Files - puterboss/mc/dmp" as the email Subject.

[puterboss]

The most recent mini dump was from 2/2011 and it stated that the file could not be found when I tried to zip it. Yes, we have to shot the computer down by holding the power button whenever it freezes, (which seems to be quite often).

[Jintan]

Let's see what a bootkit/rootkit check finds, though nothing yet has quite suggested that approach.


Be sure to continue to temporarily disable any protective software when running the scan tools we use here.

Click here and download Kaspersky's TDSSKiller to your desktop, but as you download it, rename it to larry.com then click that file to run TDSSKiller.

In the display that opens click Start scan. Once that completes, follow any prompts to act on anything it located, including as reboot if requested.

When the scan completes it will create a log file on your C drive.

Similar in name to this:

C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt

Your copy will be different - some of those numbers will reflect the date/time it was just run by you there.

Copy/paste those contents back here please.

[Jintan]

Once you have completed that, download ComboFix.exe from here to your desktop, then click that to run that scan. Agree to any warnings you might receive.

A caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop.

Allow the scan to run. When completed a text window will appear - please copy/paste the contents back here. This log can also be found at C:\ComboFix.txt.

[puterboss]

I've downloaded the Kapersky program but it did not give me the option of renaming it. Should I go ahead and run it?

[puterboss]

I went ahead and scanned it. I know ur time is limited and didn't want to take up too much.

Here are the results for the Kaspersky scan. I am doing the other scan now

20:06:13.0625 5988   TDSS rootkit removing tool 2.7.7.0 Jan 24 2012 16:44:27
20:06:14.0000 5988   ============================================================
20:06:14.0000 5988   Current date / time: 2012/01/24 20:06:14.0000
20:06:14.0000 5988   SystemInfo:
20:06:14.0000 5988   
20:06:14.0000 5988   OS Version: 6.0.6002 ServicePack: 2.0
20:06:14.0000 5988   Product type: Workstation
20:06:14.0000 5988   ComputerName: TOTSIAN-PC
20:06:14.0001 5988   UserName: Totsian
20:06:14.0001 5988   Windows directory: C:\Windows
20:06:14.0001 5988   System windows directory: C:\Windows
20:06:14.0001 5988   Processor architecture: Intel x86
20:06:14.0001 5988   Number of processors: 2
20:06:14.0001 5988   Page size: 0x1000
20:06:14.0001 5988   Boot type: Normal boot
20:06:14.0001 5988   ============================================================
20:06:14.0588 5988   Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
20:06:15.0127 5988   Initialize success
20:06:28.0752 3476   Deinitialize success


20:08:08.0247 4532   TDSS rootkit removing tool 2.7.7.0 Jan 24 2012 16:44:27
20:08:08.0540 4532   ============================================================
20:08:08.0541 4532   Current date / time: 2012/01/24 20:08:08.0540
20:08:08.0541 4532   SystemInfo:
20:08:08.0541 4532   
20:08:08.0541 4532   OS Version: 6.0.6002 ServicePack: 2.0
20:08:08.0541 4532   Product type: Workstation
20:08:08.0541 4532   ComputerName: TOTSIAN-PC
20:08:08.0542 4532   UserName: Totsian
20:08:08.0542 4532   Windows directory: C:\Windows
20:08:08.0542 4532   System windows directory: C:\Windows
20:08:08.0542 4532   Processor architecture: Intel x86
20:08:08.0542 4532   Number of processors: 2
20:08:08.0542 4532   Page size: 0x1000
20:08:08.0542 4532   Boot type: Normal boot
20:08:08.0542 4532   ============================================================
20:08:08.0980 4532   Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
20:08:09.0362 4532   Initialize success
20:20:54.0360 3504   ============================================================
20:20:54.0360 3504   Scan started
20:20:54.0360 3504   Mode: Manual;
20:20:54.0360 3504   ============================================================
20:20:54.0851 3504   ACPI            (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
20:20:54.0858 3504   ACPI - ok
20:20:54.0953 3504   adp94xx         (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys
20:20:54.0963 3504   adp94xx - ok
20:20:55.0092 3504   adpahci         (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys
20:20:55.0101 3504   adpahci - ok
20:20:55.0164 3504   adpu160m        (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys
20:20:55.0168 3504   adpu160m - ok
20:20:55.0277 3504   adpu320         (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys
20:20:55.0282 3504   adpu320 - ok
20:20:55.0422 3504   AFD             (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
20:20:55.0429 3504   AFD - ok
20:20:55.0650 3504   AgereSoftModem  (ce91b158fa490cf4c4d487a4130f4660) C:\Windows\system32\DRIVERS\AGRSM.sys
20:20:55.0679 3504   AgereSoftModem - ok
20:20:55.0810 3504   agp440          (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys
20:20:55.0812 3504   agp440 - ok
20:20:55.0859 3504   aic78xx         (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
20:20:55.0862 3504   aic78xx - ok
20:20:56.0020 3504   aliide          (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys
20:20:56.0022 3504   aliide - ok
20:20:56.0103 3504   amdagp          (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys
20:20:56.0105 3504   amdagp - ok
20:20:56.0208 3504   amdide          (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys
20:20:56.0210 3504   amdide - ok
20:20:56.0397 3504   AmdK7           (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys
20:20:56.0398 3504   AmdK7 - ok
20:20:56.0448 3504   AmdK8           (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys
20:20:56.0451 3504   AmdK8 - ok
20:20:56.0616 3504   arc             (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys
20:20:56.0619 3504   arc - ok
20:20:56.0697 3504   arcsas          (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys
20:20:56.0700 3504   arcsas - ok
20:20:56.0843 3504   AsyncMac        (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
20:20:56.0845 3504   AsyncMac - ok
20:20:56.0877 3504   atapi           (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
20:20:56.0878 3504   atapi - ok
20:20:56.0991 3504   athr            (09a644da1f4c144df1c9fe3cd75e22ed) C:\Windows\system32\DRIVERS\athr.sys
20:20:57.0017 3504   athr - ok
20:20:57.0196 3504   Beep            (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
20:20:57.0197 3504   Beep - ok
20:20:57.0251 3504   blbdrive        (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys
20:20:57.0252 3504   blbdrive - ok
20:20:57.0388 3504   bowser          (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
20:20:57.0389 3504   bowser - ok
20:20:57.0432 3504   BrFiltLo        (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
20:20:57.0433 3504   BrFiltLo - ok
20:20:57.0524 3504   BrFiltUp        (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
20:20:57.0525 3504   BrFiltUp - ok
20:20:57.0559 3504   Brserid         (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
20:20:57.0561 3504   Brserid - ok
20:20:57.0610 3504   BrSerWdm        (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
20:20:57.0612 3504   BrSerWdm - ok
20:20:57.0718 3504   BrUsbMdm        (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
20:20:57.0719 3504   BrUsbMdm - ok
20:20:57.0741 3504   BrUsbSer        (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
20:20:57.0742 3504   BrUsbSer - ok
20:20:57.0801 3504   BTHMODEM        (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
20:20:57.0803 3504   BTHMODEM - ok
20:20:57.0909 3504   cdfs            (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
20:20:57.0910 3504   cdfs - ok
20:20:57.0954 3504   cdrom           (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
20:20:57.0957 3504   cdrom - ok
20:20:58.0079 3504   circlass        (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\drivers\circlass.sys
20:20:58.0081 3504   circlass - ok
20:20:58.0125 3504   CLFS            (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
20:20:58.0131 3504   CLFS - ok
20:20:58.0278 3504   CmBatt          (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
20:20:58.0279 3504   CmBatt - ok
20:20:58.0306 3504   cmdide          (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys
20:20:58.0307 3504   cmdide - ok
20:20:58.0329 3504   Compbatt        (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
20:20:58.0329 3504   Compbatt - ok
20:20:58.0462 3504   crcdisk         (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys
20:20:58.0462 3504   crcdisk - ok
20:20:58.0494 3504   Crusoe          (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys
20:20:58.0496 3504   Crusoe - ok
20:20:58.0623 3504   DfsC            (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
20:20:58.0625 3504   DfsC - ok
20:20:58.0768 3504   disk            (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
20:20:58.0769 3504   disk - ok
20:20:58.0840 3504   Dot4            (4f59c172c094e1a1d46463a8dc061cbd) C:\Windows\system32\DRIVERS\Dot4.sys
20:20:58.0843 3504   Dot4 - ok
20:20:58.0951 3504   Dot4Print       (80bf3ba09f6f2523c8f6b7cc6dbf7bd5) C:\Windows\system32\DRIVERS\Dot4Prt.sys
20:20:58.0953 3504   Dot4Print - ok
20:20:58.0985 3504   dot4usb         (c55004ca6b419b6695970dfe849b122f) C:\Windows\system32\DRIVERS\dot4usb.sys
20:20:58.0987 3504   dot4usb - ok
20:20:59.0052 3504   drmkaud         (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
20:20:59.0053 3504   drmkaud - ok
20:20:59.0167 3504   DXGKrnl         (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
20:20:59.0181 3504   DXGKrnl - ok
20:20:59.0229 3504   E1G60           (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys
20:20:59.0233 3504   E1G60 - ok
20:20:59.0345 3504   Ecache          (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
20:20:59.0348 3504   Ecache - ok
20:20:59.0423 3504   elxstor         (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys
20:20:59.0431 3504   elxstor - ok
20:20:59.0531 3504   ErrDev          (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys
20:20:59.0533 3504   ErrDev - ok
20:20:59.0628 3504   exfat           (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
20:20:59.0633 3504   exfat - ok
20:20:59.0739 3504   fastfat         (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
20:20:59.0742 3504   fastfat - ok
20:20:59.0799 3504   fdc             (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys
20:20:59.0800 3504   fdc - ok
20:20:59.0909 3504   FileInfo        (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
20:20:59.0911 3504   FileInfo - ok
20:20:59.0960 3504   Filetrace       (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
20:20:59.0962 3504   Filetrace - ok
20:20:59.0983 3504   flpydisk        (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
20:20:59.0984 3504   flpydisk - ok
20:21:00.0031 3504   FltMgr          (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
20:21:00.0034 3504   FltMgr - ok
20:21:00.0171 3504   Fs_Rec          (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
20:21:00.0172 3504   Fs_Rec - ok
20:21:00.0216 3504   FwLnk           (cbc22823628544735625b280665e434e) C:\Windows\system32\DRIVERS\FwLnk.sys
20:21:00.0217 3504   FwLnk - ok
20:21:00.0258 3504   gagp30kx        (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys
20:21:00.0260 3504   gagp30kx - ok
20:21:00.0361 3504   GEARAspiWDM     (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
20:21:00.0362 3504   GEARAspiWDM - ok
20:21:00.0542 3504   HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
20:21:00.0548 3504   HdAudAddService - ok
20:21:00.0598 3504   HDAudBus        (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
20:21:00.0610 3504   HDAudBus - ok
20:21:00.0729 3504   HidBth          (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
20:21:00.0731 3504   HidBth - ok
20:21:00.0745 3504   HidIr           (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
20:21:00.0748 3504   HidIr - ok
20:21:00.0792 3504   HidUsb          (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
20:21:00.0794 3504   HidUsb - ok
20:21:00.0904 3504   HpCISSs         (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys
20:21:00.0907 3504   HpCISSs - ok
20:21:00.0949 3504   HTCAND32 - ok
20:21:01.0032 3504   HTTP            (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
20:21:01.0042 3504   HTTP - ok
20:21:01.0154 3504   i2omp           (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys
20:21:01.0156 3504   i2omp - ok
20:21:01.0213 3504   i8042prt        (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
20:21:01.0215 3504   i8042prt - ok
20:21:01.0355 3504   iaStor          (db0cc620b27a928d968c1a1e9cd9cb87) C:\Windows\system32\DRIVERS\iaStor.sys
20:21:01.0360 3504   iaStor - ok
20:21:01.0403 3504   iaStorV         (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys
20:21:01.0409 3504   iaStorV - ok
20:21:01.0629 3504   igfx            (6fb1858d1f0923d122b0331865695041) C:\Windows\system32\DRIVERS\igdkmd32.sys
20:21:01.0684 3504   igfx - ok
20:21:01.0803 3504   iirsp           (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
20:21:01.0805 3504   iirsp - ok
20:21:01.0929 3504   IntcAzAudAddService (b9cbd3dea7ca02868621173bf7a2af9f) C:\Windows\system32\drivers\RTKVHDA.sys
20:21:01.0975 3504   IntcAzAudAddService - ok
20:21:02.0106 3504   intelide        (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
20:21:02.0108 3504   intelide - ok
20:21:02.0157 3504   intelppm        (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
20:21:02.0158 3504   intelppm - ok
20:21:02.0394 3504   IpFilterDriver  (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:21:02.0395 3504   IpFilterDriver - ok
20:21:02.0644 3504   IpInIp - ok
20:21:02.0868 3504   IPMIDRV         (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys
20:21:02.0871 3504   IPMIDRV - ok
20:21:03.0045 3504   IPNAT           (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
20:21:03.0048 3504   IPNAT - ok
20:21:03.0182 3504   IRENUM          (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
20:21:03.0184 3504   IRENUM - ok
20:21:03.0221 3504   isapnp          (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys
20:21:03.0224 3504   isapnp - ok
20:21:03.0402 3504   iScsiPrt        (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
20:21:03.0405 3504   iScsiPrt - ok
20:21:03.0668 3504   iteatapi        (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
20:21:03.0670 3504   iteatapi - ok
20:21:03.0920 3504   iteraid         (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
20:21:03.0923 3504   iteraid - ok
20:21:04.0111 3504   jswpslwf        (11ad410f41af42ba12e63187e3ec141a) C:\Windows\system32\DRIVERS\jswpslwf.sys
20:21:04.0112 3504   jswpslwf - ok
20:21:04.0325 3504   kbdclass        (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
20:21:04.0326 3504   kbdclass - ok
20:21:04.0630 3504   kbdhid          (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys
20:21:04.0632 3504   kbdhid - ok
20:21:05.0047 3504   KR10I           (e8ca038f51f7761bd6e3a3b0b8014263) C:\Windows\system32\drivers\kr10i.sys
20:21:05.0053 3504   KR10I - ok
20:21:05.0259 3504   KR10N           (6a4adb9186dd0e114e623daf57e42b31) C:\Windows\system32\drivers\kr10n.sys
20:21:05.0265 3504   KR10N - ok
20:21:05.0521 3504   KSecDD          (2b2f1638466e8cb091400c9019cc730e) C:\Windows\system32\Drivers\ksecdd.sys
20:21:05.0531 3504   KSecDD - ok
20:21:05.0718 3504   lltdio          (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
20:21:05.0720 3504   lltdio - ok
20:21:05.0818 3504   LSI_FC          (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys
20:21:05.0821 3504   LSI_FC - ok
20:21:05.0908 3504   LSI_SAS         (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys
20:21:05.0911 3504   LSI_SAS - ok
20:21:05.0944 3504   LSI_SCSI        (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys
20:21:05.0948 3504   LSI_SCSI - ok
20:21:06.0033 3504   luafv           (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
20:21:06.0035 3504   luafv - ok
20:21:06.0154 3504   MBAMProtector   (b7ca8cc3f978201856b6ab82f40953c3) C:\Windows\system32\drivers\mbam.sys
20:21:06.0155 3504   MBAMProtector - ok
20:21:06.0368 3504   megasas         (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys
20:21:06.0370 3504   megasas - ok
20:21:06.0554 3504   MegaSR          (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys
20:21:06.0564 3504   MegaSR - ok
20:21:06.0641 3504   Modem           (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
20:21:06.0642 3504   Modem - ok
20:21:06.0689 3504   monitor         (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
20:21:06.0690 3504   monitor - ok
20:21:06.0739 3504   mouclass        (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
20:21:06.0741 3504   mouclass - ok
20:21:06.0775 3504   mouhid          (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
20:21:06.0777 3504   mouhid - ok
20:21:06.0869 3504   MountMgr        (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
20:21:06.0871 3504   MountMgr - ok
20:21:06.0933 3504   mpio            (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys
20:21:06.0937 3504   mpio - ok
20:21:07.0037 3504   mpsdrv          (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
20:21:07.0039 3504   mpsdrv - ok
20:21:07.0065 3504   Mraid35x        (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
20:21:07.0067 3504   Mraid35x - ok
20:21:07.0107 3504   MRxDAV          (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
20:21:07.0109 3504   MRxDAV - ok
20:21:07.0150 3504   mrxsmb          (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
20:21:07.0152 3504   mrxsmb - ok
20:21:07.0271 3504   mrxsmb10        (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:21:07.0275 3504   mrxsmb10 - ok
20:21:07.0327 3504   mrxsmb20        (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:21:07.0329 3504   mrxsmb20 - ok
20:21:07.0435 3504   msahci          (f70590424eefbf5c27a40c67afdb8383) C:\Windows\system32\drivers\msahci.sys
20:21:07.0435 3504   msahci - ok
20:21:07.0491 3504   msdsm           (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys
20:21:07.0493 3504   msdsm - ok
20:21:07.0546 3504   Msfs            (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
20:21:07.0547 3504   Msfs - ok
20:21:07.0608 3504   msisadrv        (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
20:21:07.0609 3504   msisadrv - ok
20:21:07.0700 3504   MSKSSRV         (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
20:21:07.0701 3504   MSKSSRV - ok
20:21:07.0752 3504   MSPCLOCK        (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
20:21:07.0753 3504   MSPCLOCK - ok
20:21:07.0813 3504   MSPQM           (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
20:21:07.0814 3504   MSPQM - ok
20:21:07.0881 3504   MsRPC           (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
20:21:07.0887 3504   MsRPC - ok
20:21:08.0075 3504   mssmbios        (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
20:21:08.0077 3504   mssmbios - ok
20:21:08.0328 3504   MSTEE           (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
20:21:08.0329 3504   MSTEE - ok
20:21:08.0456 3504   Mup             (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
20:21:08.0458 3504   Mup - ok
20:21:08.0571 3504   NativeWifiP     (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
20:21:08.0574 3504   NativeWifiP - ok
20:21:08.0862 3504   NDIS            (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
20:21:08.0875 3504   NDIS - ok
20:21:09.0033 3504   NdisTapi        (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
20:21:09.0035 3504   NdisTapi - ok
20:21:09.0158 3504   Ndisuio         (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
20:21:09.0160 3504   Ndisuio - ok
20:21:09.0206 3504   NdisWan         (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
20:21:09.0210 3504   NdisWan - ok
20:21:09.0323 3504   NDProxy         (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
20:21:09.0325 3504   NDProxy - ok
20:21:09.0360 3504   NetBIOS         (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
20:21:09.0362 3504   NetBIOS - ok
20:21:09.0415 3504   netbt           (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
20:21:09.0421 3504   netbt - ok
20:21:09.0544 3504   nfrd960         (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
20:21:09.0546 3504   nfrd960 - ok
20:21:09.0589 3504   Npfs            (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
20:21:09.0590 3504   Npfs - ok
20:21:09.0621 3504   nsiproxy        (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
20:21:09.0623 3504   nsiproxy - ok
20:21:09.0780 3504   Ntfs            (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
20:21:09.0805 3504   Ntfs - ok
20:21:09.0911 3504   ntrigdigi       (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
20:21:09.0913 3504   ntrigdigi - ok
20:21:09.0964 3504   NuidFltr        (cf7e041663119e09d2e118521ada9300) C:\Windows\system32\DRIVERS\NuidFltr.sys
20:21:09.0966 3504   NuidFltr - ok
20:21:09.0996 3504   Null            (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
20:21:09.0998 3504   Null - ok
20:21:10.0107 3504   nvraid          (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys
20:21:10.0112 3504   nvraid - ok
20:21:10.0144 3504   nvstor          (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys
20:21:10.0147 3504   nvstor - ok
20:21:10.0189 3504   nv_agp          (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys
20:21:10.0193 3504   nv_agp - ok
20:21:10.0207 3504   NwlnkFlt - ok
20:21:10.0226 3504   NwlnkFwd - ok
20:21:10.0357 3504   ohci1394        (be32da025a0be1878f0ee8d6d9386cd5) C:\Windows\system32\drivers\ohci1394.sys
20:21:10.0360 3504   ohci1394 - ok
20:21:10.0386 3504   Parport         (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
20:21:10.0390 3504   Parport - ok
20:21:10.0426 3504   partmgr         (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
20:21:10.0428 3504   partmgr - ok
20:21:10.0455 3504   Parvdm          (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
20:21:10.0457 3504   Parvdm - ok
20:21:10.0578 3504   pci             (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
20:21:10.0580 3504   pci - ok
20:21:10.0632 3504   pciide          (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\DRIVERS\pciide.sys
20:21:10.0633 3504   pciide - ok
20:21:10.0667 3504   pcmcia          (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
20:21:10.0673 3504   pcmcia - ok
20:21:10.0801 3504   PEAUTH          (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
20:21:10.0822 3504   PEAUTH - ok
20:21:10.0975 3504   phaudlwr        (427e58b9357fba0fdcec08f3930a7325) C:\Windows\system32\DRIVERS\phaudlwr.sys
20:21:10.0997 3504   phaudlwr - ok
20:21:11.0078 3504   Point32         (04df0452fbededf9297fd2e5440cb3c9) C:\Windows\system32\DRIVERS\point32k.sys
20:21:11.0080 3504   Point32 - ok
20:21:11.0138 3504   PptpMiniport    (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
20:21:11.0142 3504   PptpMiniport - ok
20:21:11.0240 3504   Processor       (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys
20:21:11.0243 3504   Processor - ok
20:21:11.0293 3504   PSched          (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
20:21:11.0294 3504   PSched - ok
20:21:11.0408 3504   PxHelp20        (49452bfcec22f36a7a9b9c2181bc3042) C:\Windows\system32\Drivers\PxHelp20.sys
20:21:11.0410 3504   PxHelp20 - ok
20:21:11.0488 3504   ql2300          (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys
20:21:11.0515 3504   ql2300 - ok
20:21:11.0624 3504   ql40xx          (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
20:21:11.0628 3504   ql40xx - ok
20:21:11.0657 3504   QWAVEdrv        (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
20:21:11.0658 3504   QWAVEdrv - ok
20:21:11.0687 3504   RasAcd          (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
20:21:11.0689 3504   RasAcd - ok
20:21:11.0720 3504   Rasl2tp         (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
20:21:11.0723 3504   Rasl2tp - ok
20:21:11.0837 3504   RasPppoe        (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
20:21:11.0840 3504   RasPppoe - ok
20:21:11.0860 3504   RasSstp         (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
20:21:11.0864 3504   RasSstp - ok
20:21:11.0908 3504   rdbss           (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
20:21:11.0914 3504   rdbss - ok
20:21:12.0019 3504   RDPCDD          (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
20:21:12.0020 3504   RDPCDD - ok
20:21:12.0061 3504   rdpdr           (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys
20:21:12.0068 3504   rdpdr - ok
20:21:12.0084 3504   RDPENCDD        (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
20:21:12.0086 3504   RDPENCDD - ok
20:21:12.0139 3504   RDPWD           (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
20:21:12.0145 3504   RDPWD - ok
20:21:12.0294 3504   rspndr          (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
20:21:12.0297 3504   rspndr - ok
20:21:12.0346 3504   RTL8169         (2d19a7469ea19993d0c12e627f4530bc) C:\Windows\system32\DRIVERS\Rtlh86.sys
20:21:12.0353 3504   RTL8169 - ok
20:21:12.0492 3504   RTSTOR          (9ff7d9cf3a5f296613588b0e8db83afe) C:\Windows\system32\drivers\RTSTOR.SYS
20:21:12.0495 3504   RTSTOR - ok
20:21:12.0554 3504   sbp2port        (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
20:21:12.0557 3504   sbp2port - ok
20:21:12.0612 3504   secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
20:21:12.0614 3504   secdrv - ok
20:21:12.0741 3504   Serenum         (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
20:21:12.0743 3504   Serenum - ok
20:21:12.0766 3504   Serial          (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
20:21:12.0771 3504   Serial - ok
20:21:12.0802 3504   sermouse        (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
20:21:12.0804 3504   sermouse - ok
20:21:12.0839 3504   sffdisk         (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys
20:21:12.0842 3504   sffdisk - ok
20:21:12.0868 3504   sffp_mmc        (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys
20:21:12.0869 3504   sffp_mmc - ok
20:21:12.0974 3504   sffp_sd         (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys
20:21:12.0976 3504   sffp_sd - ok
20:21:12.0997 3504   sfloppy         (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
20:21:12.0998 3504   sfloppy - ok
20:21:13.0043 3504   sisagp          (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys
20:21:13.0044 3504   sisagp - ok
20:21:13.0077 3504   SiSRaid2        (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys
20:21:13.0078 3504   SiSRaid2 - ok
20:21:13.0127 3504   SiSRaid4        (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys
20:21:13.0130 3504   SiSRaid4 - ok
20:21:13.0209 3504   Smb             (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
20:21:13.0211 3504   Smb - ok
20:21:13.0363 3504   SPC1300         (c4f22f3883df52269bb595f3e0b6c628) C:\Windows\system32\DRIVERS\spc1300.sys
20:21:13.0422 3504   SPC1300 - ok
20:21:13.0547 3504   spldr           (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
20:21:13.0548 3504   spldr - ok
20:21:13.0599 3504   srv             (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
20:21:13.0603 3504   srv - ok
20:21:13.0713 3504   srv2            (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys
20:21:13.0716 3504   srv2 - ok
20:21:13.0738 3504   srvnet          (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys
20:21:13.0740 3504   srvnet - ok
20:21:13.0801 3504   swenum          (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
20:21:13.0803 3504   swenum - ok
20:21:13.0911 3504   Symc8xx         (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
20:21:13.0913 3504   Symc8xx - ok
20:21:13.0935 3504   Sym_hi          (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
20:21:13.0937 3504   Sym_hi - ok
20:21:13.0954 3504   Sym_u3          (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
20:21:13.0957 3504   Sym_u3 - ok
20:21:14.0009 3504   SynTP           (70534d1e4f9ac990536d5fb5b550b3de) C:\Windows\system32\DRIVERS\SynTP.sys
20:21:14.0015 3504   SynTP - ok
20:21:14.0187 3504   Tcpip           (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\drivers\tcpip.sys
20:21:14.0208 3504   Tcpip - ok
20:21:14.0272 3504   Tcpip6          (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\DRIVERS\tcpip.sys
20:21:14.0285 3504   Tcpip6 - ok
20:21:14.0325 3504   tcpipreg        (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys
20:21:14.0327 3504   tcpipreg - ok
20:21:14.0398 3504   tdcmdpst        (6fdfba25002ce4bac463ac866ae71405) C:\Windows\system32\DRIVERS\tdcmdpst.sys
20:21:14.0401 3504   tdcmdpst - ok
20:21:14.0432 3504   TDPIPE          (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
20:21:14.0434 3504   TDPIPE - ok
20:21:14.0457 3504   TDTCP           (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
20:21:14.0460 3504   TDTCP - ok
20:21:14.0539 3504   tdx             (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
20:21:14.0542 3504   tdx - ok
20:21:14.0613 3504   TermDD          (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
20:21:14.0616 3504   TermDD - ok
20:21:14.0801 3504   tos_sps32       (4399a9bf7d8f49991a07fd86590a1619) C:\Windows\system32\DRIVERS\tos_sps32.sys
20:21:14.0808 3504   tos_sps32 - ok
20:21:14.0857 3504   tssecsrv        (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
20:21:14.0860 3504   tssecsrv - ok
20:21:14.0956 3504   tunmp           (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
20:21:14.0958 3504   tunmp - ok
20:21:14.0981 3504   tunnel          (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
20:21:14.0983 3504   tunnel - ok
20:21:15.0021 3504   TVALZ           (792a8b80f8188aba4b2be271583f3e46) C:\Windows\system32\DRIVERS\TVALZ_O.SYS
20:21:15.0022 3504   TVALZ - ok
20:21:15.0123 3504   uagp35          (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys
20:21:15.0126 3504   uagp35 - ok
20:21:15.0178 3504   udfs            (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
20:21:15.0184 3504   udfs - ok
20:21:15.0322 3504   uliagpkx        (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys
20:21:15.0324 3504   uliagpkx - ok
20:21:15.0364 3504   uliahci         (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys
20:21:15.0371 3504   uliahci - ok
20:21:15.0393 3504   UlSata          (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
20:21:15.0398 3504   UlSata - ok
20:21:15.0445 3504   ulsata2         (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
20:21:15.0449 3504   ulsata2 - ok
20:21:15.0563 3504   umbus           (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
20:21:15.0565 3504   umbus - ok
20:21:15.0628 3504   usbaudio        (32db9517628ff0d070682aab61e688f0) C:\Windows\system32\drivers\usbaudio.sys
20:21:15.0632 3504   usbaudio - ok
20:21:15.0790 3504   usbbus          (5353218b3265e3b8190335059f697a11) C:\Windows\system32\DRIVERS\lgusbbus.sys
20:21:15.0793 3504   usbbus - ok
20:21:15.0848 3504   usbccgp         (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
20:21:15.0851 3504   usbccgp - ok
20:21:15.0954 3504   usbcir          (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
20:21:15.0958 3504   usbcir - ok
20:21:16.0027 3504   UsbDiag         (7dd3eefc62a1ef44e5f940fa651ed9ed) C:\Windows\system32\DRIVERS\lgusbdiag.sys
20:21:16.0030 3504   UsbDiag - ok
20:21:16.0173 3504   usbehci         (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
20:21:16.0175 3504   usbehci - ok
20:21:16.0205 3504   usbhub          (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
20:21:16.0211 3504   usbhub - ok
20:21:16.0285 3504   USBModem        (083031a78822eccbd7510bccd3e20d4c) C:\Windows\system32\DRIVERS\lgusbmodem.sys
20:21:16.0287 3504   USBModem - ok
20:21:16.0394 3504   usbohci         (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
20:21:16.0395 3504   usbohci - ok
20:21:16.0463 3504   usbprint        (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
20:21:16.0464 3504   usbprint - ok
20:21:16.0592 3504   usbscan         (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys
20:21:16.0594 3504   usbscan - ok
20:21:16.0679 3504   USBSTOR         (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:21:16.0681 3504   USBSTOR - ok
20:21:16.0798 3504   usbuhci         (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys
20:21:16.0799 3504   usbuhci - ok
20:21:17.0035 3504   usbvideo        (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
20:21:17.0039 3504   usbvideo - ok
20:21:17.0207 3504   usb_rndisx      (35c9095fa7076466afbfc5b9ec4b779e) C:\Windows\system32\DRIVERS\usb8023x.sys
20:21:17.0209 3504   usb_rndisx - ok
20:21:17.0327 3504   vga             (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys
20:21:17.0329 3504   vga - ok
20:21:17.0423 3504   VgaSave         (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
20:21:17.0426 3504   VgaSave - ok
20:21:17.0526 3504   viaagp          (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys
20:21:17.0529 3504   viaagp - ok
20:21:17.0580 3504   ViaC7           (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys
20:21:17.0583 3504   ViaC7 - ok
20:21:17.0673 3504   viaide          (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys
20:21:17.0675 3504   viaide - ok
20:21:17.0762 3504   volmgr          (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
20:21:17.0764 3504   volmgr - ok
20:21:17.0939 3504   volmgrx         (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
20:21:17.0944 3504   volmgrx - ok
20:21:18.0132 3504   volsnap         (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
20:21:18.0137 3504   volsnap - ok
20:21:18.0346 3504   vsmraid         (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys
20:21:18.0349 3504   vsmraid - ok
20:21:18.0600 3504   WacomPen        (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
20:21:18.0603 3504   WacomPen - ok
20:21:18.0725 3504   Wanarp          (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
20:21:18.0728 3504   Wanarp - ok
20:21:18.0762 3504   Wanarpv6        (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
20:21:18.0764 3504   Wanarpv6 - ok
20:21:18.0807 3504   Wd              (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys
20:21:18.0809 3504   Wd - ok
20:21:19.0085 3504   Wdf01000        (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
20:21:19.0095 3504   Wdf01000 - ok
20:21:19.0322 3504   winusb          (676f4b665bdd8053eaa53ac1695b8074) C:\Windows\system32\DRIVERS\WinUSB.SYS
20:21:19.0324 3504   winusb - ok
20:21:19.0396 3504   WmiAcpi         (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\drivers\wmiacpi.sys
20:21:19.0399 3504   WmiAcpi - ok
20:21:19.0513 3504   WpdUsb          (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
20:21:19.0515 3504   WpdUsb - ok
20:21:19.0586 3504   ws2ifsl         (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
20:21:19.0588 3504   ws2ifsl - ok
20:21:19.0627 3504   WSDPrintDevice  (4422ac5ed8d4c2f0db63e71d4c069dd7) C:\Windows\system32\DRIVERS\WSDPrint.sys
20:21:19.0629 3504   WSDPrintDevice - ok
20:21:19.0721 3504   WUDFRd          (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
20:21:19.0723 3504   WUDFRd - ok
20:21:19.0798 3504   MBR (0x1B8)     (5b5e648d12fcadc244c1ec30318e1eb9) \Device\Harddisk0\DR0
20:21:19.0873 3504   \Device\Harddisk0\DR0 - ok
20:21:19.0879 3504   Boot (0x1200)   (6c3f4254290860c4dabdf880e0425b76) \Device\Harddisk0\DR0\Partition0
20:21:19.0880 3504   \Device\Harddisk0\DR0\Partition0 - ok
20:21:19.0883 3504   ============================================================
20:21:19.0883 3504   Scan finished
20:21:19.0883 3504   ============================================================
20:21:19.0904 1792   Detected object count: 0
20:21:19.0904 1792   Actual detected object count: 0