Runtime Error! DllHost.exe terminated

[AnnMarie]

I see that you have been running a registry cleaner and it's possible that your profile has been corrupted. Try the steps here and let me know if they helped.

[marco]

Sorry I did not see the page 2 posts. Anyway I tried creating another account. When I copied user data according the ms bulletin I get the same message in the user account that I created. My only guess is to start user a new account period. Any other suggestions?

[AnnMarie]

Marco, when you created the new account (and before you copied your data across), did you have the same problem?

[marco]

No. The problem disappeared. After I copied the user data, except ntuser.dat.log, it appeared immediately.

[AnnMarie]

There were three files that you shouldn't have copied across:

Ntuser.dat

Ntuser.dat.log

Ntuser.ini

If you copied any of the above, try again.

[marco]

I didn't copy the Ntuser.dat Ntuser.dat.log Ntuser.ini files. To make sure I tried again. The same thing happened. The new user had the same runtime error. I then tried copying clean user data in the new user and the runtime error disappeared! How about copying clean user data in "my" account. What can happen with my account?

[AnnMarie]

What is clean user data?

[marco]

I created another "new account" and copied all data to the new account. If I do this with my account what can happen to all the app settings?

[AnnMarie]

Marco can you please elaborate. I am not sure what you mean. Have you done something differently to the instructions in the the link I posted?

[marco]

AnnMarie,

I followed the microsoft instructions on how to create a new user profile and copying into it the old user profile files including hidden system files and excluding Ntuser.dat Ntuser.dat.log Ntuser.inifiles. Every time that I tried, the new user file (that I will call "ME"), if at first didn't have the runtime error, after I copied the files into it, the runtime error came up. At that point I created another user profile (that I will call "TEMP"). I erased everything in the "ME" profile and copied into it everything from the "TEMP" profile. At this point the "ME" profile didn't have the runtime error. With your help, I would like do try something like this in my user profile because I have Picasa 3 with thousands of pictures with face recognition that I haven't figured out how to transfer to a new PC or another user profile. I hope this was clearer.

Marco

[AnnMarie]

Yes, that's clearer but it points right back to the issue being caused by third party software yet you still got an error when you clean booted. Very puzzling.

How long have you had this problem? If just in the past few weeks, have you tried running System Restore? If not, give it a go. To do this, click on the Start Orb and type System Restore in the Start Search box and it will appear at the top of the menu. Rightclick on it and choose "Run as Administrator". Pick a date before the problem occurred and follow the prompts.

Reboot when asked.

[marco]

I've had this problem for the past few weeks. I tried looking in the system restore but I don't have any restore points. The only one I have is dated today. If it's not automatic, I don't have any ither restore points. The program AWC that I have has a restore function but it restores modules: Spyware Removal, Security Defense, Registry Fix and System Optimization. Now What?

[AnnMarie]

Well, you could try running RSIT on one of the accounts that doesnt have the issue and post both logs here. I will compare them and see if I can pick up what software may be causing the issue but I cant offer a guarantee that this approach will work.

[marco]

Let's give it a Try!

Logfile of random's system information tool 1.08 (written by random/random)
Run by Marco at 2010-12-10 22:33:59
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 3 GB (6%) free of 57 GB
Total RAM: 2037 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22.34.58, on 10/12/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18975)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Evernote\Evernote\EvernoteClipper.exe
C:\Users\Marco\AppData\Roaming\Dropbox\bin\Dropbox .exe
C:\Program Files\Synaptics\SynTP\SynToshiba.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\System32\hkcmd.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Evernote\Evernote\EvernoteClipper.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynToshiba.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServer.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Users\Anna\Desktop\RSIT.exe
C:\Program Files\trend micro\Marco.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.libero.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll
O2 - BHO: (no name) - {78875F5C-A685-4405-8DC5-D48DC65452B0} - (no file)
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\s wg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKCU\..\Run: [SmartRAM] "C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe" /m
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-21-1925610512-189826699-490347785-1006\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Anna')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Startup: Dropbox.lnk = C:\Users\Marco\AppData\Roaming\Dropbox\bin\Dropbox .exe
O4 - Global Startup: Evernote Clipper.lnk = ?
O8 - Extra context menu item: Add to Evernote 4.0 - res://C:\Program Files\Evernote\Evernote\EvernoteIE.dll/204
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?IT (file missing)
O16 - DPF: {80AEEC0E-A2BE-4B8D-985F-350FE869DC40} - http://h20264.www2.hp.com/ediags/dd/...sticsVista.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe
O23 - Service: Servizio Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Google Update Service (gupdate1c98a0799186b7c) (gupdate1c98a0799186b7c) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: ONDA Autorun CDROM Monitor - Unknown owner - C:\Windows\system32\SupportAppXL\onda_mon.exe
O23 - Service: PCLEPCI - Pinnacle Systems GmbH - C:\Windows\system32\drivers\pclepci.sys
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: XobniService - Xobni Corporation - C:\Program Files\Xobni\XobniService.exe

--
End of file - 11851 bytes

======Scheduled tasks folder======

C:\Windows\tasks\AWC AutoSweep.job
C:\Windows\tasks\AWC Startup.job
C:\Windows\tasks\AWC Update.job
C:\Windows\tasks\Google Software Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1925610512-189826699-490347785-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1925610512-189826699-490347785-1000UA.job
C:\Windows\tasks\RegistryBooster.job
C:\Windows\tasks\User_Feed_Synchronization-{D9B30BB4-63C0-47D4-A444-A174F9308500}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG10\avgssie.dll [2010-11-04 2731360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{78875F5C-A685-4405-8DC5-D48DC65452B0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]
AVG Security Toolbar

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll [2010-10-06 2475336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\s wg.dll [2009-12-11 761840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-09-15 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{A057A204-BACC-4D26-9990-79A187E2698E} -
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll [2010-10-06 2475336]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2007-03-29 411192]
"SynTPStart"=C:\Program Files\Synaptics\SynTP\SynTPStart.exe [2007-10-29 102400]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-08-14 1348904]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"SmoothView"=C:\Program Files\Toshiba\SmoothView\SmoothView.exe [2007-06-15 448080]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2006-11-07 3772416]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-09-08 421888]
"Persistence"=C:\Windows\system32\igfxpers.exe [2008-06-18 133656]
"NvSvc"=C:\Windows\system32\nvsvc.dll [2006-12-07 90191]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.d ll [2006-12-07 81920]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2006-12-07 7766016]
"LogMeIn GUI"=C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [2010-01-27 63048]
"Kernel and Hardware Abstraction Layer"=C:\Windows\KHALMNPR.EXE [2007-04-11 56080]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-09-24 421160]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-06-18 141848]
"HSON"=C:\Program Files\TOSHIBA\TBS\HSON.exe [2006-12-07 55416]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-06-18 166424]
"AVG_TRAY"=C:\Program Files\AVG\AVG10\avgtray.exe [2010-10-22 2745696]
"00TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2007-08-03 714080]
"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [2010-10-08 47904]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run]
"SmartRAM"=C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe [2010-07-21 198864]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"AnyDVD"=C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe [2010-12-04 4721224]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Evernote Clipper.lnk - C:\Windows\Installer\{F761359C-9CED-45AE-9A51-9D6605CD55C4}\Evernote.ico

C:\Users\Marco\AppData\Roaming\Microsoft\Windows\S tart Menu\Programs\Startup
Dropbox.lnk - C:\Users\Marco\AppData\Roaming\Dropbox\bin\Dropbox .exe

[marco]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2008-06-18 204800]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\standard profile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\domainpr ofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - "C:\Windows\system32\NOTEPAD.EXE" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 3 months======

2010-12-01 20:06:29 ----A---- C:\Windows\system32\drivers\AnyDVD.sys
2010-11-30 21:43:26 ----A---- C:\Windows\system32\drivers\ElbyCDIO.sys
2010-11-29 22:14:45 ----D---- C:\Windows\pss
2010-11-25 19:29:05 ----A---- C:\Windows\system32\ElbyCDIO.dll
2010-11-23 22:39:51 ----D---- C:\Program Files\trend micro
2010-11-23 22:39:50 ----D---- C:\rsit
2010-11-20 22:05:37 ----D---- C:\Users\Marco\AppData\Roaming\Uniblue
2010-11-20 22:05:05 ----HDC---- C:\ProgramData\{6DAA3B20-D487-4FA2-81D5-50404CCB868D}
2010-11-20 22:05:00 ----D---- C:\Program Files\Uniblue
2010-11-09 22:20:58 ----A---- C:\Windows\system32\drivers\avgtdix.sys
2010-11-05 17:48:21 ----A---- C:\Windows\system32\javaws.exe
2010-11-05 17:48:21 ----A---- C:\Windows\system32\javaw.exe
2010-11-05 17:48:21 ----A---- C:\Windows\system32\java.exe
2010-11-03 23:23:48 ----D---- C:\Program Files\iPod
2010-11-03 23:23:46 ----D---- C:\Program Files\iTunes
2010-11-03 23:21:24 ----D---- C:\Program Files\QuickTime
2010-11-03 23:20:27 ----D---- C:\Program Files\Apple Software Update
2010-11-03 23:17:53 ----D---- C:\Program Files\Bonjour
2010-11-03 23:17:32 ----D---- C:\Program Files\Common Files\Apple
2010-11-03 23:03:06 ----D---- C:\Program Files\Windows Installer Clean Up
2010-11-01 08:24:14 ----D---- C:\Program Files\Evernote
2010-10-31 11:50:36 ----D---- C:\Program Files\Common Files\Skype
2010-10-31 11:50:34 ----RD---- C:\Program Files\Skype
2010-10-27 21:38:33 ----A---- C:\Windows\system32\gameux.dll
2010-10-27 21:38:29 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-10-27 21:38:28 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-10-25 21:31:56 ----D---- C:\Users\Marco\AppData\Roaming\Foxit Software
2010-10-23 19:38:38 ----D---- C:\Program Files\Foxit Software
2010-10-15 19:24:23 ----A---- C:\Windows\system32\wmp.dll
2010-10-15 19:24:20 ----A---- C:\Windows\system32\wmploc.DLL
2010-10-15 19:24:03 ----A---- C:\Windows\system32\win32k.sys
2010-10-15 19:23:59 ----A---- C:\Windows\system32\msshsq.dll
2010-10-15 19:23:56 ----A---- C:\Windows\system32\t2embed.dll
2010-10-15 19:23:48 ----A---- C:\Windows\system32\srvsvc.dll
2010-10-15 19:23:48 ----A---- C:\Windows\system32\netevent.dll
2010-10-15 19:23:48 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-10-15 19:23:48 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-10-15 19:23:48 ----A---- C:\Windows\system32\drivers\srv.sys
2010-10-15 19:23:36 ----A---- C:\Windows\system32\schannel.dll
2010-10-15 19:23:32 ----A---- C:\Windows\system32\mshtml.dll
2010-10-15 19:23:31 ----A---- C:\Windows\system32\ieframe.dll
2010-10-15 19:23:29 ----A---- C:\Windows\system32\msfeeds.dll
2010-10-15 19:23:29 ----A---- C:\Windows\system32\licmgr10.dll
2010-10-15 19:23:28 ----A---- C:\Windows\system32\wininet.dll
2010-10-15 19:23:28 ----A---- C:\Windows\system32\urlmon.dll
2010-10-15 19:23:28 ----A---- C:\Windows\system32\mshtmled.dll
2010-10-15 19:23:27 ----A---- C:\Windows\system32\mstime.dll
2010-10-15 19:23:27 ----A---- C:\Windows\system32\iertutil.dll
2010-10-15 19:23:26 ----A---- C:\Windows\system32\occache.dll
2010-10-15 19:23:26 ----A---- C:\Windows\system32\msfeedssync.exe
2010-10-15 19:23:26 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-10-15 19:23:26 ----A---- C:\Windows\system32\jsproxy.dll
2010-10-15 19:23:26 ----A---- C:\Windows\system32\ieUnatt.exe
2010-10-15 19:23:26 ----A---- C:\Windows\system32\ieui.dll
2010-10-15 19:23:26 ----A---- C:\Windows\system32\iesysprep.dll
2010-10-15 19:23:26 ----A---- C:\Windows\system32\iesetup.dll
2010-10-15 19:23:26 ----A---- C:\Windows\system32\iernonce.dll
2010-10-15 19:23:26 ----A---- C:\Windows\system32\iepeers.dll
2010-10-15 19:23:26 ----A---- C:\Windows\system32\iedkcs32.dll
2010-10-15 19:23:26 ----A---- C:\Windows\system32\ie4uinit.exe
2010-10-15 19:23:22 ----A---- C:\Windows\system32\mfc40u.dll
2010-10-15 19:23:22 ----A---- C:\Windows\system32\mfc40.dll
2010-10-15 19:23:18 ----A---- C:\Windows\system32\ole32.dll
2010-10-15 19:23:14 ----A---- C:\Windows\system32\wmpmde.dll
2010-10-15 19:15:24 ----A---- C:\Windows\system32\comctl32.dll
2010-09-29 22:10:31 ----D---- C:\Users\Marco\AppData\Roaming\AVG10
2010-09-29 22:08:24 ----HD---- C:\ProgramData\Common Files
2010-09-29 22:07:18 ----D---- C:\ProgramData\AVG Security Toolbar
2010-09-29 22:04:36 ----D---- C:\Windows\system32\drivers\AVG
2010-09-29 22:04:36 ----D---- C:\ProgramData\AVG10
2010-09-29 21:04:27 ----D---- C:\ProgramData\MFAData
2010-09-28 21:11:14 ----A---- C:\Windows\system32\tzres.dll
2010-09-26 15:31:21 ----D---- C:\Users\Marco\AppData\Roaming\com.mypicturetown.m yptuploader.F9C4985A082C78528AFA4529A49FFE7D3454A6 4B.1
2010-09-26 15:31:03 ----D---- C:\Program Files\my Picturetown
2010-09-26 15:30:53 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-09-17 23:18:45 ----A---- C:\Windows\system32\usp10.dll
2010-09-17 23:18:39 ----A---- C:\Windows\system32\spoolsv.exe
2010-09-17 23:18:38 ----A---- C:\Windows\system32\MP4SDECD.DLL
2010-09-17 23:18:36 ----A---- C:\Windows\system32\inetcomm.dll
2010-09-13 15:27:40 ----A---- C:\Windows\system32\drivers\AVGIDSEH.sys
2010-09-12 00:20:21 ----D---- C:\Program Files\PokerStars.IT

======List of files/folders modified in the last 3 months======

2010-12-10 22:34:55 ----D---- C:\Windows\Prefetch
2010-12-10 22:33:44 ----D---- C:\Windows\Temp
2010-12-10 22:30:45 ----D---- C:\Users\Marco\AppData\Roaming\Dropbox
2010-12-10 21:33:40 ----D---- C:\Windows\Tasks
2010-12-10 21:30:51 ----D---- C:\Windows\System32
2010-12-10 21:30:38 ----D---- C:\Program Files\LogMeIn
2010-12-08 23:19:55 ----SHD---- C:\System Volume Information
2010-12-08 19:41:00 ----RD---- C:\Users
2010-12-07 23:42:23 ----D---- C:\Windows\system32\Tasks
2010-12-07 23:19:35 ----SHD---- C:\Windows\Installer
2010-12-07 23:19:24 ----HD---- C:\Config.Msi
2010-12-05 17:25:47 ----SHD---- C:\$Recycle.Bin
2010-12-05 12:51:38 ----D---- C:\Users\Marco\AppData\Roaming\Mozilla
2010-12-04 15:52:42 ----D---- C:\Windows\system32\catroot2
2010-12-04 09:29:38 ----D---- C:\Windows\winsxs
2010-12-04 09:29:37 ----D---- C:\Program Files\Internet Explorer
2010-12-04 09:26:44 ----D---- C:\Windows\system32\catroot
2010-12-04 07:00:12 ----RSD---- C:\Windows\assembly
2010-12-04 07:00:07 ----RD---- C:\Program Files
2010-12-04 07:00:07 ----D---- C:\ProgramData\Autodesk
2010-12-04 07:00:07 ----D---- C:\Program Files\Microsoft Office
2010-12-04 07:00:07 ----D---- C:\Program Files\Common Files\DESIGNER
2010-12-04 07:00:07 ----D---- C:\Program Files\Common Files\Autodesk Shared
2010-12-04 06:59:57 ----RSD---- C:\Windows\Fonts
2010-12-04 06:59:47 ----D---- C:\Windows\Help
2010-11-30 19:34:24 ----D---- C:\Windows\inf
2010-11-30 19:34:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-11-29 22:14:45 ----AD---- C:\Windows
2010-11-29 22:08:21 ----D---- C:\ProgramData\pdf995
2010-11-26 21:48:06 ----D---- C:\Program Files\Microsoft Silverlight
2010-11-23 21:48:00 ----D---- C:\Windows\system32\drivers
2010-11-20 23:06:28 ----D---- C:\Windows\system32\config
2010-11-20 22:05:05 ----HD---- C:\ProgramData
2010-11-19 22:58:05 ----D---- C:\Users\Marco\AppData\Roaming\Skype
2010-11-19 22:07:49 ----D---- C:\Users\Marco\AppData\Roaming\skypePM
2010-11-09 21:16:34 ----D---- C:\Program Files\Windows Mail
2010-11-09 21:13:15 ----A---- C:\Windows\system32\mrt.exe
2010-11-05 17:46:35 ----D---- C:\Program Files\Java
2010-11-05 05:54:43 ----D---- C:\Windows\Microsoft.NET
2010-11-05 00:07:36 ----D---- C:\Program Files\Xobni
2010-11-03 23:17:32 ----D---- C:\Program Files\Common Files
2010-11-03 22:10:43 ----D---- C:\Users\Marco\AppData\Roaming\GoodSync
2010-10-31 11:50:20 ----D---- C:\ProgramData\Skype
2010-10-29 21:19:52 ----D---- C:\Program Files\Mozilla Firefox
2010-10-27 21:43:32 ----D---- C:\Windows\AppPatch
2010-10-23 16:19:26 ----D---- C:\Program Files\Adobe
2010-10-23 16:19:25 ----D---- C:\ProgramData\Adobe
2010-10-15 19:56:39 ----D---- C:\Windows\rescache
2010-10-15 19:34:55 ----D---- C:\Windows\system32\it-IT
2010-10-15 19:34:55 ----D---- C:\Program Files\Windows Media Player
2010-10-15 19:34:53 ----D---- C:\Windows\system32\migration
2010-10-03 10:49:19 ----D---- C:\Program Files\Safari
2010-09-30 20:52:11 ----A---- C:\Windows\system32\LMIRfsClientNP.dll
2010-09-30 20:52:10 ----A---- C:\Windows\system32\LMIport.dll
2010-09-30 20:52:10 ----A---- C:\Windows\system32\LMIinit.dll
2010-09-29 22:05:40 ----D---- C:\Program Files\Windows Sidebar
2010-09-29 21:21:07 ----D---- C:\ProgramData\avg9
2010-09-29 21:12:38 ----D---- C:\Program Files\AVG
2010-09-26 15:29:45 ----D---- C:\Users\Marco\AppData\Roaming\Adobe
2010-09-15 04:50:37 ----A---- C:\Windows\system32\deployJava1.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSEH;AVGIDSEH; C:\Windows\system32\DRIVERS\AVGIDSEH.Sys [2010-09-13 25680]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2010-09-07 26064]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2008-11-20 43872]
R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [2007-11-09 23640]
R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2010-09-07 249424]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2010-09-07 34384]
R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2010-11-09 299984]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2010-11-30 30888]
R2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys [2010-01-27 12856]
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\Windows\system32\drivers\LMIRfsDriver.sys [2010-01-27 47640]
R3 AgereSoftModem;TOSHIBA V92 Software Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2006-08-31 1161152]
R3 AnyDVD;AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [2010-12-01 108104]
R3 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys [2010-08-19 123472]
R3 AVGIDSFilter;AVGIDSFilter; C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys [2010-08-19 30288]
R3 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\AVGIDSShim.Sys [2010-08-19 27216]
R3 E100B;Driver scheda Intel(R) PRO; C:\Windows\system32\DRIVERS\e100b325.sys [2008-01-19 159744]
R3 FwLnk;FwLnk Driver; C:\Windows\system32\DRIVERS\FwLnk.sys [2006-11-19 7168]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-06-18 2307584]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2006-11-17 1651752]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2007-04-11 34832]
R3 lmimirr;lmimirr; C:\Windows\system32\DRIVERS\lmimirr.sys [2010-01-27 10144]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2007-04-11 36112]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2007-04-11 28688]
R3 MarvinBus;Pinnacle Marvin Bus; C:\Windows\system32\DRIVERS\MarvinBus.sys [2007-01-04 171520]
R3 NETw4v32;Driver scheda Intel(R) Wireless WiFi Link per Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-12-28 2251776]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-08-14 203312]
R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [2006-10-18 16128]
R3 tifm21;tifm21; C:\Windows\system32\drivers\tifm21.sys [2006-07-06 168448]
S0 Lbd;Lbd; C:\Windows\system32\DRIVERS\Lbd.sys []
S1 Tosrfcom;Tosrfcom; C:\Windows\system32\drivers\Tosrfcom.sys [2005-08-01 64896]
S3 61883;Dispositivo unità 61883; C:\Windows\system32\DRIVERS\61883.sys [2008-01-19 45696]
S3 Avc;Dispositivo AVC; C:\Windows\system32\DRIVERS\avc.sys [2008-01-19 40448]
S3 Dot4;Driver MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584]
S3 Dot4Print;Driver classe Print per IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864]
S3 drmkaud;Decodificatore audio DRM del kernel Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Driver di funzioni Microsoft 1.1 UAA per servizio High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 hxctlflt;hxctlflt; C:\Windows\System32\Drivers\hxctlflt.sys [2009-02-09 99968]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-06-18 2307584]
S3 Iviaspi;IVI ASPI Shell; C:\Windows\system32\drivers\iviaspi.sys []
S3 LVUSBSta;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBSta.sys [2007-10-12 41752]
S3 MSDV;Microsoft DV Camera and VCR; C:\Windows\system32\DRIVERS\msdv.sys [2008-01-19 52608]
S3 MSKSSRV;Proxy di servizio di flusso Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Proxy clock di flusso Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Proxy di gestione qualità di flusso Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Convertitore a T/Sito a sito per flusso Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl.sys []
S3 NETw3v32;Driver per scheda di rete Intel(R) PRO/Wireless 3945ABG per Windows Vista a 32 bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-10-30 1786880]
S3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2006-12-07 4456416]
S3 ONDAusbmdm6k;ONDA Proprietary USB Driver; C:\Windows\system32\DRIVERS\ONDAusbmdm6k.sys [2008-09-16 104960]
S3 ONDAusbnet;ONDA USB-NDIS miniport; C:\Windows\system32\DRIVERS\ONDAusbnet.sys [2008-09-16 110080]
S3 ONDAusbnmea;ONDA NMEA Port; C:\Windows\system32\DRIVERS\ONDAusbnmea.sys [2008-09-16 104960]
S3 ONDAusbser6k;ONDA Diagnostic Port; C:\Windows\system32\DRIVERS\ONDAusbser6k.sys [2008-09-16 104960]
S3 PID_0928;Logitech QuickCam Express(PID_0928); C:\Windows\system32\DRIVERS\LV561AV.SYS [2007-10-12 490776]
S3 SNP2UVC;Hercules Webcam; C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-04-22 3482112]
S3 tosrfec;Bluetooth ACPI; C:\Windows\system32\DRIVERS\tosrfec.sys [2006-10-23 9216]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2010-04-19 41984]
S3 usbaudio;Driver audio USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]
S3 usbscan;Driver scanner USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 usbvideo;Dispositivo video USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]
S3 WISTechVIDCAP;WIS GO7007SB A/V Capture; C:\Windows\system32\drivers\wisgostrm.sys [2005-10-03 245376]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S4 KR10I;KR10I; C:\Windows\system32\drivers\kr10i.sys [2006-02-14 216320]
S4 KR10N;KR10N; C:\Windows\system32\drivers\kr10n.sys [2006-02-14 208256]
S4 LMIRfsClientNP;LMIRfsClientNP; C:\Windows\system32\drivers\LMIRfsClientNP.sys []