次にOTL.txt 2/2です。
なぜか英字の「ビーアールティー」というキーワードが禁止ワードらしいので★を間にいれました。
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2015/10/14 20:02:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\マカフィー
[2015/10/14 04:10:51 | 000,000,000 | ---D | C] -- C:\Users\Tatsu\AppData\Roaming\NewSoft
[2015/10/14 00:14:43 | 000,000,000 | ---D | C] -- C:\Users\Tatsu\AppData\Roaming\Malwarebytes
[2015/10/14 00:14:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2015/10/13 21:29:59 | 000,000,000 | ---D | C] -- C:\_OTL
[2015/10/11 14:32:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2015/10/11 14:31:56 | 000,000,000 | ---D | C] -- C:\Users\Tatsu\AppData\Roaming\Sun
[2015/10/11 14:31:55 | 000,000,000 | ---D | C] -- C:\Users\Tatsu\.oracle_jre_usage
[2015/10/11 14:29:08 | 000,000,000 | ---D | C] -- C:\Users\Tatsu\AppData\Roaming\Oracle
[2015/10/11 14:23:59 | 000,000,000 | ---D | C] -- C:\Users\Tatsu\AppData\Roaming\Geek Uninstaller
[2015/10/11 09:58:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2015/10/11 09:58:05 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2015/10/11 09:54:00 | 000,000,000 | ---D | C] -- C:\Users\Tatsu\Desktop\work
[2015/10/04 09:00:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\apa
[2015/09/20 09:00:17 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\tavb
[2015/09/20 09:00:16 | 000,000,000 | ---D | C] -- C:\Windows\TEMPfolder
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2015/10/14 21:39:00 | 000,000,690 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2015/10/14 21:24:00 | 000,000,626 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015/10/14 18:36:47 | 000,022,464 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015/10/14 18:36:47 | 000,022,464 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015/10/14 17:39:00 | 000,000,686 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015/10/14 12:24:28 | 000,780,488 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2015/10/14 12:24:28 | 000,142,536 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2015/10/14 04:09:28 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015/10/14 04:09:24 | 3113,574,400 | -HS- | M] () -- C:\hiberfil.sys
[2015/10/13 21:32:35 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts
[2015/10/11 14:57:54 | 000,000,264 | ---- | M] () -- C:\Windows\tasks\elbyExecuteWithUAC.job
[2015/10/11 14:37:52 | 000,097,888 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2015/10/11 14:19:14 | 000,002,050 | ---- | M] () -- C:\Users\Tatsu\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2015/10/11 09:58:08 | 000,000,824 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2015/10/09 06:14:59 | 000,007,612 | ---- | M] () -- C:\Users\Tatsu\AppData\Local\Resmon.ResmonCfg
[2015/09/23 23:01:44 | 001,313,238 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2015/09/23 23:01:44 | 000,654,270 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2015/09/23 23:01:44 | 000,411,178 | ---- | M] () -- C:\Windows\SysNative\perfh011.dat
[2015/09/23 23:01:44 | 000,122,224 | ---- | M] () -- C:\Windows\SysNative\perfc011.dat
[2015/09/23 23:01:44 | 000,122,142 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2015/10/11 14:57:54 | 000,000,264 | ---- | C] () -- C:\Windows\tasks\elbyExecuteWithUAC.job
[2015/10/11 09:58:08 | 000,000,824 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2014/12/30 11:34:16 | 000,013,816 | ---- | C] () -- C:\Windows\BRRBCOM.INI
[2014/12/30 11:34:16 | 000,000,139 | ---- | C] () -- C:\Windows\BROPJ557N.INI
[2014/06/02 13:13:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\BR★TCPCON.DLL
[2014/06/02 13:13:15 | 000,000,114 | ---- | C] () -- C:\Windows\SysWow64\BRLMW03A.INI
[2014/04/13 23:32:09 | 000,007,612 | ---- | C] () -- C:\Users\Tatsu\AppData\Local\Resmon.ResmonCfg
[2013/11/26 23:26:10 | 001,292,086 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011/03/14 13:41:47 | 000,000,048 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[color=#E56717]========== ZeroAccess Check ==========[/color]
[2009/07/14 13:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2015/07/11 02:51:25 | 014,177,280 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2015/07/11 02:34:07 | 012,875,776 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 10:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 21:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 10:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
[color=#E56717]========== Custom Scans ==========[/color]
[2010/09/11 00:11:29 | 000,000,000 | RH-D | M] -- C:\MSOCache
[2015/10/14 03:47:57 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2015/07/19 23:40:20 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2015/07/19 23:45:03 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Common Files\Sony Shared\OpenMG\OMGRIGHT
[2011/01/05 22:46:01 | 000,000,000 | -H-D | M] -- C:\Program Files\CanonBJ
[2011/01/05 22:46:01 | 000,000,000 | -H-D | M] -- C:\Program Files\CanonBJ\IJPrinter
[2011/01/05 22:46:14 | 000,000,000 | -H-D | M] -- C:\Program Files\CanonBJ\IJPrinter\Canon MP610 series
[2011/01/05 22:46:17 | 000,000,000 | -H-D | M] -- C:\ProgramData\CanonBJ
[2010/07/30 02:12:20 | 000,000,000 | -H-D | M] -- C:\ProgramData\{D19C2D22-6043-47E7-B400-83A351841204}
[2011/01/05 22:46:17 | 000,000,000 | -H-D | M] -- C:\ProgramData\CanonBJ\IJPrinter
[2011/01/05 22:46:17 | 000,000,000 | -H-D | M] -- C:\ProgramData\CanonBJ\IJPrinter\CNMWindows
[2011/06/01 16:43:53 | 000,000,000 | -H-D | M] -- C:\ProgramData\CanonBJ\IJPrinter\CNMWindows\Canon MP610 series Printer
[2015/09/20 17:45:15 | 000,000,000 | -H-D | M] -- C:\ProgramData\CyberLink\EvoParser
[2011/01/05 23:09:28 | 000,000,000 | -H-D | M] -- C:\ProgramData\CyberLink\EvoParser\PowerDVD\8.3
[2009/07/14 14:32:38 | 000,000,000 | -H-D | M] -- C:\ProgramData\Microsoft\WwanSvc
[2009/07/14 20:16:07 | 000,000,000 | RH-D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
[2009/07/14 14:32:38 | 000,000,000 | -H-D | M] -- C:\ProgramData\Microsoft\WwanSvc\Profiles
[2010/08/28 18:17:21 | 000,000,000 | RH-D | M] -- C:\Users\Default
[2011/01/05 22:46:17 | 000,000,000 | -H-D | M] -- C:\Users\All Users\CanonBJ
[2010/07/30 02:12:20 | 000,000,000 | -H-D | M] -- C:\Users\All Users\{D19C2D22-6043-47E7-B400-83A351841204}
[2011/01/05 22:46:17 | 000,000,000 | -H-D | M] -- C:\Users\All Users\CanonBJ\IJPrinter
[2011/01/05 22:46:17 | 000,000,000 | -H-D | M] -- C:\Users\All Users\CanonBJ\IJPrinter\CNMWindows
[2011/06/01 16:43:53 | 000,000,000 | -H-D | M] -- C:\Users\All Users\CanonBJ\IJPrinter\CNMWindows\Canon MP610 series Printer
[2015/09/20 17:45:15 | 000,000,000 | -H-D | M] -- C:\Users\All Users\CyberLink\EvoParser
[2011/01/05 23:09:28 | 000,000,000 | -H-D | M] -- C:\Users\All Users\CyberLink\EvoParser\PowerDVD\8.3
[2009/07/14 14:32:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Microsoft\WwanSvc
[2009/07/14 20:16:07 | 000,000,000 | RH-D | M] -- C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Tablet PC
[2009/07/14 14:32:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Microsoft\WwanSvc\Profiles
[2009/07/14 12:20:08 | 000,000,000 | -H-D | M] -- C:\Users\Default\AppData
[2015/10/14 03:47:06 | 000,000,000 | RH-D | M] -- C:\Users\Public\Desktop
[2009/07/14 11:34:59 | 000,000,000 | RH-D | M] -- C:\Users\Public\Favorites
[2010/08/29 18:36:15 | 000,000,000 | RH-D | M] -- C:\Users\Public\Libraries
[2010/09/04 17:57:57 | 000,000,000 | -H-D | M] -- C:\Users\Public\Music\Sony MediaPlayerX\Shared\Fringe
[2010/09/04 17:57:57 | 000,000,000 | -H-D | M] -- C:\Users\Public\Pictures\Sony MediaPlayerX\Fringe
[2010/12/24 22:14:24 | 000,000,000 | -H-D | M] -- C:\Users\Public\Recorded TV\TempRec
[2010/08/28 18:17:27 | 000,000,000 | -H-D | M] -- C:\Users\Tatsu\AppData
[2015/10/14 21:31:02 | 000,000,000 | -H-D | M] -- C:\Users\Tatsu\AppData\Local\Temp
[2015/02/08 09:27:09 | 000,000,000 | -H-D | M] -- C:\Users\Tatsu\AppData\Local\Microsoft\Device Metadata\dmrccache\downloads
[2010/08/28 18:18:37 | 000,000,000 | -H-D | M] -- C:\Users\Tatsu\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
[2012/01/10 12:49:10 | 000,000,000 | -H-D | M] -- C:\Users\Tatsu\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
[2010/09/04 12:55:07 | 000,000,000 | -H-D | M] -- C:\Users\Tatsu\AppData\Local\Microsoft\Media Player\アート キャッシュ
[2015/10/14 01:29:21 | 000,000,000 | RH-D | M] -- C:\Users\Tatsu\AppData\Local\Microsoft\Windows\Burn\Burn
[2013/05/11 20:12:39 | 000,000,000 | RH-D | M] -- C:\Users\Tatsu\AppData\Local\Microsoft\Windows\Burn\Burn1
[2013/05/11 22:46:45 | 000,000,000 | RH-D | M] -- C:\Users\Tatsu\AppData\Local\Microsoft\Windows\Burn\Burn2
[2015/04/17 15:18:10 | 000,000,000 | RH-D | M] -- C:\Users\Tatsu\AppData\Local\Microsoft\Windows\Burn\Burn3
[2015/05/14 20:17:16 | 000,000,000 | RH-D | M] -- C:\Users\Tatsu\AppData\Local\Microsoft\Windows\Burn\Burn4
[2015/10/14 21:11:33 | 000,000,000 | -H-D | M] -- C:\Users\Tatsu\AppData\Local\Temp\acro_rd_dir
[2010/09/11 03:18:18 | 000,000,000 | -H-D | M] -- C:\Users\Tatsu\AppData\Local\VirtualStore\ProgramData
[2010/10/21 04:21:14 | 000,000,000 | -H-D | M] -- C:\Users\Tatsu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2014/02/28 20:23:13 | 000,000,000 | -H-D | M] -- C:\Users\Tatsu\AppData\Roaming\Microsoft\Windows\DNTException\Low
[2012/09/12 01:59:18 | 000,000,000 | -H-D | M] -- C:\Users\Tatsu\Desktop\DVD音声抽出\xrecode\lame3.99.5\images\CVS
[2012/09/12 01:59:18 | 000,000,000 | -H-D | M] -- C:\Users\Tatsu\Desktop\DVD音声抽出\xrecode\lame3.99.5\styles\CVS
[2010/08/31 22:53:32 | 000,000,000 | -H-D | M] -- C:\Windows\ServiceProfiles\LocalService\AppData
[2010/12/24 22:14:30 | 000,000,000 | -H-D | M] -- C:\Windows\ServiceProfiles\NetworkService\AppData
[2010/08/29 18:36:26 | 000,000,000 | -H-D | M] -- C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Media Player\アート キャッシュ
[2011/01/05 22:46:14 | 000,000,000 | -H-D | M] -- C:\Windows\SysNative\CanonIJ Uninstaller Information
[color=#A23BEC]< %windir%\tasks\*.job >[/color]
[2015/10/14 21:24:00 | 000,000,626 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015/10/11 14:57:54 | 000,000,264 | ---- | M] () -- C:\Windows\tasks\elbyExecuteWithUAC.job
[2015/10/14 17:39:00 | 000,000,686 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015/10/14 21:39:00 | 000,000,690 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[color=#E56717]========== Drive Information ==========[/color]
Physical Drives
---------------
Drive: \\\\.\\PHYSICALDRIVE0 - Fixed hard disk media
Interface type: IDE
Media Type: Fixed hard disk media
Model: SAMSUNG HD103SJ ATA Device
Partitions: 4
Status: OK
Status Info: 0
Drive: \\\\.\\PHYSICALDRIVE1 -
Interface type: USB
Media Type:
Model: Generic- SD/MMC USB Device
Partitions: 0
Status: OK
Status Info: 0
Drive: \\\\.\\PHYSICALDRIVE2 -
Interface type: USB
Media Type:
Model: Generic- Compact Flash USB Device
Partitions: 0
Status: OK
Status Info: 0
Drive: \\\\.\\PHYSICALDRIVE3 -
Interface type: USB
Media Type:
Model: Generic- SM/xD-Picture USB Device
Partitions: 0
Status: OK
Status Info: 0
Drive: \\\\.\\PHYSICALDRIVE4 -
Interface type: USB
Media Type:
Model: Generic- MS/MS-Pro USB Device
Partitions: 0
Status: OK
Status Info: 0
Partitions
---------------
DeviceID: Disk #0, Partition #0
PartitionType: Unknown
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 102.00MB
Starting Offset: 32256
Hidden sectors: 0
DeviceID: Disk #0, Partition #1
PartitionType: Installable File System
Bootable: True
BootPartition: True
PrimaryPartition: True
Size: 8.00GB
Starting Offset: 106954752
Hidden sectors: 0
DeviceID: Disk #0, Partition #2
PartitionType: Installable File System
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 463.00GB
Starting Offset: 9143582720
Hidden sectors: 0
DeviceID: Disk #0, Partition #3
PartitionType: Extended w/Extended Int 13
Bootable: False
BootPartition: False
PrimaryPartition: False
Size: 460.00GB
Starting Offset: 506210549760
Hidden sectors: 0
[color=#E56717]========== Base Services ==========[/color]
SRV:[b]64bit:[/b] - [2015/03/04 13:41:26 | 000,072,192 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\aelupsvc.dll -- (AeLookupSvc)
SRV:[b]64bit:[/b] - [2015/06/25 19:01:17 | 000,070,656 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appinfo.dll -- (Appinfo)
SRV:[b]64bit:[/b] - [2009/07/14 10:38:55 | 000,079,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\alg.exe -- (ALG)
SRV:[b]64bit:[/b] - [2010/11/20 22:27:23 | 000,849,920 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\qmgr.dll -- (BITS)
SRV:[b]64bit:[/b] - [2010/11/20 22:25:45 | 000,705,024 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\BFE.DLL -- (BFE)
SRV:[b]64bit:[/b] - [2015/07/23 09:01:53 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lsass.exe -- (KeyIso)
SRV:[b]64bit:[/b] - [2009/07/14 10:40:50 | 000,402,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\es.dll -- (EventSystem)
SRV - [2009/07/14 10:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\es.dll -- (EventSystem)
SRV:[b]64bit:[/b] - [2012/07/05 07:13:27 | 000,136,704 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\browser.dll -- (Browser)
SRV:[b]64bit:[/b] - [2015/04/28 04:23:13 | 000,188,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cryptsvc.dll -- (CryptSvc)
SRV - [2015/04/28 04:04:37 | 000,143,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\cryptsvc.dll -- (CryptSvc)
SRV:[b]64bit:[/b] - [2010/11/20 22:27:24 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (DcomLaunch)
SRV:[b]64bit:[/b] - [2010/11/20 22:26:04 | 000,317,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
SRV - [2010/11/20 21:18:30 | 000,254,464 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
SRV:[b]64bit:[/b] - [2011/03/03 15:24:16 | 000,183,296 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dnsrslvr.dll -- (Dnscache)
SRV:[b]64bit:[/b] - [2009/07/14 10:40:35 | 000,111,104 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\eapsvc.dll -- (EapHost)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hidserv.dll -- (hidserv)
SRV - [2009/07/14 10:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\hidserv.dll -- (hidserv)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:10 | 000,359,424 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\ipnathlp.dll -- (SharedAccess)
SRV:[b]64bit:[/b] - [2010/11/20 22:26:39 | 000,501,248 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\IPSECSVC.DLL -- (PolicyAgent)
No service found with a name of MsMpSvc
No service found with a name of NisSrv
SRV:[b]64bit:[/b] - [2009/07/14 10:41:54 | 000,524,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\swprv.dll -- (swprv)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:26 | 000,067,584 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\mmcss.dll -- (MMCSS)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:52 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netman.dll -- (Netman)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:52 | 000,459,776 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofm.dll -- (netprofm)
SRV - [2009/07/14 10:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\netprofm.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2014/12/06 13:17:27 | 000,303,616 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nlasvc.dll -- (NlaSvc)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:53 | 000,025,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nsisvc.dll -- (nsi)
SRV:[b]64bit:[/b] - [2011/05/24 20:42:55 | 000,404,480 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpnpmgr.dll -- (PlugPlay)
SRV:[b]64bit:[/b] - [2012/02/11 15:36:02 | 000,559,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\spoolsv.exe -- (Spooler)
SRV:[b]64bit:[/b] - [2015/07/23 09:01:53 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (ProtectedStorage)
No service found with a name of EMDMgmt
SRV:[b]64bit:[/b] - [2009/07/14 10:41:53 | 000,099,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasauto.dll -- (RasAuto)
SRV:[b]64bit:[/b] - [2010/11/20 22:27:24 | 000,344,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasmans.dll -- (RasMan)
SRV:[b]64bit:[/b] - [2010/11/20 22:27:24 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (RpcSs)
SRV:[b]64bit:[/b] - [2010/11/20 22:27:25 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\seclogon.dll -- (seclogon)
SRV:[b]64bit:[/b] - [2015/07/23 09:01:53 | 000,031,232 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsass.exe -- (SamSs)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:58 | 000,097,280 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wscsvc.dll -- (wscsvc)
SRV:[b]64bit:[/b] - [2010/11/20 22:27:26 | 000,236,032 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\srvsvc.dll -- (LanmanServer)
SRV:[b]64bit:[/b] - [2010/11/20 22:27:25 | 000,370,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\shsvcs.dll -- (ShellHWDetection)
SRV - [2010/11/20 21:21:19 | 000,328,192 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\shsvcs.dll -- (ShellHWDetection)
No service found with a name of slsvc
SRV:[b]64bit:[/b] - [2015/08/06 02:56:14 | 001,110,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\schedsvc.dll -- (Schedule)
SRV:[b]64bit:[/b] - [2010/11/20 22:27:26 | 000,316,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tapisrv.dll -- (TapiSrv)
SRV - [2010/11/20 21:21:28 | 000,242,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\tapisrv.dll -- (TapiSrv)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes)
SRV:[b]64bit:[/b] - [2014/12/19 12:06:55 | 000,210,432 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\profsvc.dll -- (ProfSvc)
SRV:[b]64bit:[/b] - [2010/11/20 22:25:27 | 001,600,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\VSSVC.exe -- (VSS)
SRV:[b]64bit:[/b] - [2015/02/03 12:30:55 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioSrv)
SRV:[b]64bit:[/b] - [2015/02/03 12:30:55 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioEndpointBuilder)
SRV:[b]64bit:[/b] - [2010/11/20 22:27:25 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sdrsvc.dll -- (SDRSVC)
SRV:[b]64bit:[/b] - [2013/05/27 14:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2010/11/20 22:27:28 | 001,646,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wevtsvc.dll -- (eventlog)
SRV:[b]64bit:[/b] - [2010/11/20 22:26:59 | 000,828,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\MPSSVC.dll -- (MpsSvc)
SRV:[b]64bit:[/b] - [2010/11/20 22:27:28 | 000,580,096 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wiaservc.dll -- (stisvc)
SRV:[b]64bit:[/b] - [2015/06/16 06:44:47 | 000,128,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msiexec.exe -- (msiserver)
SRV - [2015/06/16 06:42:49 | 000,073,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\msiexec.exe -- (msiserver)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:56 | 000,242,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wbem\WMIsvc.dll -- (Winmgmt)
SRV:[b]64bit:[/b] - [2015/08/27 03:07:11 | 002,606,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wuaueng.dll -- (wuauserv)
SRV:[b]64bit:[/b] - [2010/11/20 22:26:07 | 000,252,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dot3svc.dll -- (dot3svc)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:56 | 000,886,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wlansvc.dll -- (Wlansvc)
SRV:[b]64bit:[/b] - [2010/11/20 22:27:28 | 000,118,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wkssvc.dll -- (LanmanWorkstation)
[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
< End of report >