TrackMyHack504: August 2013

Monday, August 26, 2013

from phone

ueventd.smdk4x12.rc

/dev/mali 0666 system system
/dev/ump 0666 system graphics
/dev/ion 0666 system system
/dev/exynos-mem 0666 system graphics

/dev/media0 0660 system system
/dev/media1 0660 system camera
/dev/media2 0660 system camera
/dev/v4l-subdev0 0660 system system
/dev/v4l-subdev1 0660 system system
/dev/v4l-subdev3 0660 system system
/dev/v4l-subdev4 0660 system system
/dev/v4l-subdev5 0660 system system
/dev/v4l-subdev6 0660 system system
/dev/v4l-subdev7 0660 system system
/dev/v4l-subdev8 0660 system system
/dev/v4l-subdev9 0660 system system
/dev/v4l-subdev10 0660 system system
/dev/v4l-subdev11 0660 system system
/dev/v4l-subdev12 0660 system system
/dev/v4l-subdev13 0660 system system
/dev/v4l-subdev14 0660 system system
/dev/v4l-subdev15 0660 system system
/dev/v4l-subdev16 0660 system system
/dev/v4l-subdev17 0660 system system

/dev/video0 0666 system m2m
/dev/video1 0666 system camera
/dev/video2 0666 system m2m
/dev/video3 0666 system m2m
/dev/video4 0666 system m2m
/dev/video11 0666 system system
/dev/video12 0666 system system
/dev/video16 0666 system system
/dev/video20 0666 system system
/dev/video6 0660 media graphics
/dev/video7 0660 media graphics

/dev/video11 0666 system graphics
/dev/video12 0660 system camera

/dev/video16 0660 system system
/dev/video17 0660 system system
/dev/video18 0660 system system
/dev/video19 0660 system system

# Rotator
/dev/video21 0660 system system

/dev/video23 0660 system system
/dev/video24 0660 system system
/dev/video25 0660 system camera
/dev/video26 0666 media m2m
/dev/video29 0666 media m2m
/dev/video32 0660 media m2m

/dev/video33 0660 system system
/dev/video34 0660 system system

/dev/video40 0660 system camera
/dev/video41 0660 system camera
/dev/video42 0660 system camera
/dev/video43 0660 system camera

/dev/i2c-2 0660 system system
/dev/i2c-5 0660 system system
/dev/CEC 0660 system system
/dev/HPD 0660 system system
/dev/fimg2d 0666 system graphics

#ALP Audio
/dev/srp 0660 system audio

/dev/s3c-mfc 0666 system graphics
/dev/s5p-mfc 0666 system graphics

/dev/block/mmcblk0p7 0660 system root
/dev/block/mmcblk0p10 0660 system radio
/dev/block/mmcblk0p4 0660 system radio
/dev/block/mmcblk0p5 0660 system radio
/dev/block/mmcblk0p6 0660 system radio
/dev/block/mmcblk0p11 0660 system radio
/dev/mdm 0660 system system
#CPRM
/dev/block/mmcblk1 0660 root system
/dev/ttyUSB0 0660 system system
/dev/ttyUSB1 0666 system system
/dev/ttyUSB2 0666 system system
/dev/hsic* 0660 system radio
/dev/usb/lp* 0660 system usb

/dev/ttySAC* 0660 root system

# sensor sysfs properties
/sys/devices/virtual/input/input* acc_poll_delay 0660 system radio
/sys/devices/virtual/input/input* gyro_poll_delay 0660 system radio
/sys/devices/virtual/input/input* pressure_poll_delay 0660 system radio
/sys/devices/virtual/input/input* light_poll_delay 0660 system radio
/sys/devices/virtual/input/input* prox_poll_delay 0660 system radio

# sensorhub
/dev/ssp_sensorhub 0660 system input

# for felica
/dev/felica 0666 root root
/dev/felica_pon 0666 root root
/dev/felica_cen 0666 root root
/dev/felica_rfs 0444 root root
/dev/felica_rws 0666 root root
/dev/felica_ant 0666 root root
/dev/felica_int_poll 0400 root root
/dev/felica_uid 0222 root root

# for felica end

more from phone

zoneinfo

Node 0, zone Normal
pages free 2073
min 892
low 1115
high 1338
scanned 0
spanned 200704
present 199136
nr_free_pages 2073
nr_inactive_anon 0
nr_active_anon 41494
nr_inactive_file 5089
nr_active_file 2154
nr_unevictable 0
nr_mlock 0
nr_anon_pages 41494
nr_mapped 120
nr_file_pages 7261
nr_dirty 0
nr_writeback 0
nr_slab_reclaimable 2663
nr_slab_unreclaimable 5428
nr_page_table_pages 8518
nr_kernel_stack 1220
nr_unstable 0
nr_bounce 0
nr_vmscan_write 0
nr_writeback_temp 0
nr_isolated_anon 0
nr_isolated_file 0
nr_shmem 0
nr_dirtied 3933
nr_written 3933
nr_anon_transparent_hugepages 0
protection: (0, 10025, 10025)
pagesets
cpu: 0
count: 31
high: 186
batch: 31
vm stats threshold: 24
cpu: 1
count: 160
high: 186
batch: 31
vm stats threshold: 24
cpu: 2
count: 158
high: 186
batch: 31
vm stats threshold: 24
cpu: 3
count: 167
high: 186
batch: 31
vm stats threshold: 24
all_unreclaimable: 0
start_pfn: 262144
inactive_ratio: 1
Node 0, zone HighMem
pages free 721
min 128
low 487
high 846
scanned 0
spanned 323328
present 320802
nr_free_pages 721
nr_inactive_anon 293
nr_active_anon 198599
nr_inactive_file 57104
nr_active_file 25730
nr_unevictable 86
nr_mlock 0
nr_anon_pages 198602
nr_mapped 27766
nr_file_pages 83252
nr_dirty 0
nr_writeback 0
nr_slab_reclaimable 0
nr_slab_unreclaimable 0
nr_page_table_pages 0
nr_kernel_stack 0
nr_unstable 0
nr_bounce 0
nr_vmscan_write 0
nr_writeback_temp 0
nr_isolated_anon 0
nr_isolated_file 0
nr_shmem 304
nr_dirtied 12215
nr_written 11727
nr_anon_transparent_hugepages 0
protection: (0, 0, 0)
pagesets
cpu: 0
count: 30
high: 186
batch: 31
vm stats threshold: 30
cpu: 1
count: 160
high: 186
batch: 31
vm stats threshold: 30
cpu: 2
count: 81
high: 186
batch: 31
vm stats threshold: 30
cpu: 3
count: 22
high: 186
batch: 31
vm stats threshold: 30
all_unreclaimable: 0
start_pfn: 462848
inactive_ratio: 3
partitions

major minor #blocks name

7 0 16664 loop0
179 0 15388672 mmcblk0
179 1 4096 mmcblk0p1
179 2 4096 mmcblk0p2
179 3 20480 mmcblk0p3
179 4 4096 mmcblk0p4
179 5 4096 mmcblk0p5
179 6 4096 mmcblk0p6
179 7 8192 mmcblk0p7
179 8 8192 mmcblk0p8
179 9 8192 mmcblk0p9
179 10 90112 mmcblk0p10
179 11 262144 mmcblk0p11
179 12 1310720 mmcblk0p12
179 13 1835008 mmcblk0p13
179 14 20480 mmcblk0p14
179 15 8192 mmcblk0p15
259 0 11788288 mmcblk0p16
254 0 16663 dm-0

rootfs / rootfs ro,relatime 0 0
tmpfs /dev tmpfs rw,nosuid,relatime,mode=755 0 0
devpts /dev/pts devpts rw,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,relatime 0 0
none /acct cgroup rw,relatime,cpuacct 0 0
tmpfs /mnt/asec tmpfs rw,relatime,mode=755,gid=1000 0 0
tmpfs /mnt/obb tmpfs rw,relatime,mode=755,gid=1000 0 0
none /dev/cpuctl cgroup rw,relatime,cpu 0 0
/dev/block/mmcblk0p13 /system ext4 ro,relatime,barrier=1,data=ordered 0 0
/dev/block/mmcblk0p3 /efs ext4 rw,nosuid,nodev,noatime,barrier=1,journal_async_commit,data=ordered 0 0
/dev/block/mmcblk0p12 /cache ext4 rw,nosuid,nodev,noatime,barrier=1,journal_async_commit,data=ordered 0 0
/dev/block/mmcblk0p16 /data ext4 rw,nosuid,nodev,noatime,barrier=1,journal_async_commit,data=ordered,noauto_da_alloc,discard 0 0
/dev/block/mmcblk0p11 /tombstones ext4 rw,nosuid,nodev,noatime,barrier=1,journal_async_commit,data=ordered 0 0
/dev/block/mmcblk0p10 /firmware vfat ro,relatime,fmask=0133,dmask=0022,codepage=cp437,iocharset=iso8859-1,shortname=mixed,errors=remount-ro 0 0
/sys/kernel/debug /sys/kernel/debug debugfs rw,relatime 0 0
/dev/fuse /storage/sdcard0 fuse rw,nosuid,nodev,noexec,relatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0
/dev/block/dm-0 /mnt/asec/com.jrummy.liberty.toolboxpro-1 ext4 ro,dirsync,nosuid,nodev,noatime,barrier=1 0 0

next_______

vpnclient 93650 0 - Live 0x00000000
exfat_fs 17643 0 - Live 0x00000000 (P)
exfat_core 62003 1 exfat_fs, Live 0x00000000 (P)

0-0 Linux [kernel]

Character devices:
1 mem
4 /dev/vc/0
4 tty
4 ttyS
5 /dev/tty
5 /dev/console
5 /dev/ptmx
7 vcs
10 misc
13 input
21 sg
29 fb
81 video4linux
89 i2c
108 ppp
116 alsa
128 ptm
136 pts
153 spi
180 usb
188 ttyUSB
189 usb_device
204 ttySAC
216 rfcomm
243 ump
244 mali
246 roccat
247 BaseRemoteCtl
248 media
249 ttyGS
250 usbmon
251 hsicctl
252 tzic
253 dia
254 rtc

Block devices:
1 ramdisk
259 blkext
7 loop
8 sd
65 sd
66 sd
67 sd
68 sd
69 sd
70 sd
71 sd
128 sd
129 sd
130 sd
131 sd
132 sd
133 sd
134 sd
135 sd
179 mmc
254 device-mapper

READ THIS from phone

Num RefCount Protocol Flags Type St Inode Path
00000000: 00000002 00000000 00010000 0001 01 4269 /data/.socket_stream
00000000: 00000002 00000000 00010000 0001 01 3168 /data/.pcsync_stream
00000000: 00000002 00000000 00010000 0001 01 1843 /data/.npswifi_stream
00000000: 00000002 00000000 00010000 0005 01 2210 /data/TMAudioSocketServer
00000000: 00000002 00000000 00010000 0005 01 4345 /data/TMAudioSocketClient
00000000: 00000002 00000000 00010000 0001 01 4314 @QMulticlient
00000000: 00000002 00000000 00010000 0001 01 1824 /dev/socket/keystore
00000000: 00000002 00000000 00010000 0001 01 2081 /dev/socket/property_service
00000000: 00000002 00000000 00010000 0001 01 3126 /dev/socket/dir_enc_report
00000000: 00000002 00000000 00010000 0001 01 3128 /dev/socket/vold
00000000: 00000002 00000000 00010000 0001 01 2106 /dev/socket/qmux_radio/proxy_tether_connect_socket
00000000: 00000002 00000000 00010000 0001 01 2023 @SecrilServer
00000000: 00000002 00000000 00010000 0001 01 1880 @mcdaemon
00000000: 00000002 00000000 00010000 0001 01 3173 @FactoryClientSend
00000000: 00000003 00000000 00000000 0001 03 1883 /dev/socket/qmux_radio/qmux_client_socket 1983
00000000: 00000002 00000000 00010000 0001 01 3170 /dev/socket/qmux_radio/proxy_qmux_connect_socket
00000000: 00000002 00000000 00010000 0001 01 4241 /dev/socket/mdns
00000000: 00000002 00000000 00010000 0001 01 4243 /dev/socket/dnsproxyd
00000000: 00000002 00000000 00010000 0001 01 4245 /dev/socket/netd
00000000: 00000002 00000000 00010000 0001 01 4247 /dev/socket/zygote
00000000: 00000002 00000000 00010000 0001 01 4249 /dev/socket/dbus
00000000: 00000002 00000000 00000000 0002 01 1837 /data/data/com.ipsec.vpnclient/vpnc_gui_to_starter
00000000: 00000002 00000000 00010000 0001 01 3165 @android:debuggerd
00000000: 00000002 00000000 00010000 0001 01 4262 /dev/socket/installd
00000000: 00000002 00000000 00010000 0001 01 4264 /dev/socket/rild-debug
00000000: 00000002 00000000 00010000 0001 01 4266 /dev/socket/rild
00000000: 00000002 00000000 00010000 0001 01 3172 @FactoryClientRecv
00000000: 00000003 00000000 00000000 0001 03 1984 /dev/socket/qmux_radio/qmux_client_socket 2208
00000000: 00000002 00000000 00010000 0001 01 2135 @Multiclient
00000000: 00000002 00000000 00010000 0001 01 1986 /dev/socket/qmux_radio/qmux_connect_socket
00000000: 00000002 00000000 00010000 0001 01 1988 /dev/socket/qmux_audio/qmux_connect_socket
00000000: 00000002 00000000 00010000 0001 01 1991 /dev/socket/qmux_gps/qmux_connect_socket
00000000: 00000003 00000000 00000000 0001 03 2011 /dev/socket/qmux_gps/qmux_client_socket 2209
00000000: 00000002 00000000 00010000 0001 01 3174 @DiagApp
00000000: 00000003 00000000 00000000 0005 03 10958
00000000: 00000003 00000000 00000000 0005 03 10957
00000000: 00000003 00000000 00000000 0005 03 13143
00000000: 00000003 00000000 00000000 0005 03 13142
00000000: 00000003 00000000 00000000 0001 03 11745
00000000: 00000003 00000000 00000000 0001 03 11744
00000000: 00000003 00000000 00000000 0001 03 10843
00000000: 00000003 00000000 00000000 0001 03 10842
00000000: 00000003 00000000 00000000 0001 03 11735
00000000: 00000003 00000000 00000000 0001 03 11734
00000000: 00000003 00000000 00000000 0001 03 11729
00000000: 00000003 00000000 00000000 0001 03 11728
00000000: 00000003 00000000 00000000 0001 03 11696
00000000: 00000003 00000000 00000000 0001 03 11695
00000000: 00000003 00000000 00000000 0005 03 12952
00000000: 00000003 00000000 00000000 0005 03 12951
00000000: 00000003 00000000 00000000 0005 03 10682
00000000: 00000003 00000000 00000000 0005 03 10681
00000000: 00000003 00000000 00000000 0001 03 3065
00000000: 00000003 00000000 00000000 0001 03 3064
00000000: 00000003 00000000 00000000 0005 03 3060
00000000: 00000003 00000000 00000000 0005 03 3059
00000000: 00000003 00000000 00000000 0001 03 5489 @mcdaemon
00000000: 00000003 00000000 00000000 0001 03 2881
00000000: 00000003 00000000 00000000 0001 03 3715 @Multiclient
00000000: 00000003 00000000 00000000 0001 03 4642
00000000: 00000003 00000000 00000000 0005 03 3632
00000000: 00000003 00000000 00000000 0001 03 4642
00000000: 00000003 00000000 00000000 0005 03 3632
00000000: 00000003 00000000 00000000 0005 03 3631
00000000: 00000003 00000000 00000000 0005 03 4531
00000000: 00000003 00000000 00000000 0005 03 4530
00000000: 00000003 00000000 00000000 0005 03 4529
00000000: 00000003 00000000 00000000 0005 03 4528
00000000: 00000003 00000000 00000000 0005 03 2746
00000000: 00000003 00000000 00000000 0005 03 2745
00000000: 00000003 00000000 00000000 0001 03 4521 /dev/socket/rild
00000000: 00000003 00000000 00000000 0001 03 3609
00000000: 00000003 00000000 00000000 0005 03 2739
00000000: 00000003 00000000 00000000 0005 03 2738
00000000: 00000003 00000000 00000000 0005 03 3563
00000000: 00000003 00000000 00000000 0005 03 3562
00000000: 00000003 00000000 00000000 0001 03 2653 @SecrilServer
00000000: 00000003 00000000 00000000 0001 03 2652
00000000: 00000003 00000000 00000000 0005 03 3492
00000000: 00000003 00000000 00000000 0005 03 3491
00000000: 00000003 00000000 00000000 0005 03 3490
00000000: 00000003 00000000 00000000 0005 03 3489
00000000: 00000003 00000000 00000000 0001 03 2639 /dev/socket/zygote
00000000: 00000003 00000000 00000000 0001 03 2638
00000000: 00000003 00000000 00000000 0001 03 2045 /dev/socket/qmux_radio/qmux_connect_socket
00000000: 00000003 00000000 00000000 0005 03 2618
00000000: 00000003 00000000 00000000 0005 03 2617
00000000: 00000003 00000000 00000000 0001 03 2013 /dev/socket/qmux_gps/qmux_connect_socket
00000000: 00000003 00000000 00000000 0001 03 1994 /dev/socket/qmux_radio/qmux_connect_socket
00000000: 00000003 00000000 00000000 0001 03 4404 /dev/socket/mdns
00000000: 00000003 00000000 00000000 0001 03 3471
00000000: 00000003 00000000 00000000 0001 03 4395 /dev/socket/netd
00000000: 00000003 00000000 00000000 0001 03 4394
00000000: 00000003 00000000 00000000 0001 03 1983 /dev/socket/vold
00000000: 00000003 00000000 00000000 0001 03 2459
00000000: 00000003 00000000 00000000 0001 03 1980 /dev/socket/dbus
00000000: 00000003 00000000 00000000 0001 03 3455
00000000: 00000003 00000000 00000000 0005 03 1979
00000000: 00000003 00000000 00000000 0005 03 1978
00000000: 00000003 00000000 00000000 0005 03 2452
00000000: 00000003 00000000 00000000 0005 03 2451
00000000: 00000003 00000000 00000000 0005 03 4382
00000000: 00000003 00000000 00000000 0005 03 4381
00000000: 00000003 00000000 00000000 0001 03 3438 /dev/socket/dir_enc_report
00000000: 00000003 00000000 00000000 0001 03 1963
00000000: 00000003 00000000 00000000 0001 03 2097 /dev/socket/installd
00000000: 00000003 00000000 00000000 0001 03 3418
00000000: 00000003 00000000 00000000 0005 03 4349
00000000: 00000003 00000000 00000000 0005 03 4348
00000000: 00000003 00000000 00000000 0001 03 1903 @Multiclient
00000000: 00000003 00000000 00000000 0001 03 3228
00000000: 00000003 00000000 00000000 0005 03 2200
00000000: 00000003 00000000 00000000 0005 03 2199
00000000: 00000003 00000000 00000000 0001 03 3235 @DiagApp
00000000: 00000003 00000000 00000000 0001 03 2190
00000000: 00000003 00000000 00000000 0001 03 2175
00000000: 00000003 00000000 00000000 0001 03 2174
00000000: 00000003 00000000 00000000 0001 03 2197 /data/.socket_stream
00000000: 00000003 00000000 00000000 0001 03 3169
00000000: 00000003 00000000 00000000 0001 03 2191 /data/.socket_stream
00000000: 00000003 00000000 00000000 0001 03 2100
00000000: 00000003 00000000 00000000 0001 03 4270 /data/.socket_stream
00000000: 00000003 00000000 00000000 0001 03 2099
00000000: 00000003 00000000 00000000 0001 03 1839
00000000: 00000003 00000000 00000000 0001 03 1838
00000000: 00000003 00000000 00000000 0001 03 2084
00000000: 00000003 00000000 00000000 0001 03 2083

TcpExt: SyncookiesSent SyncookiesRecv SyncookiesFailed EmbryonicRsts PruneCalled RcvPruned OfoPruned OutOfWindowIcmps LockDroppedIcmps ArpFilter TW TWRecycled TWKilled PAWSPassive PAWSActive PAWSEstab DelayedACKs DelayedACKLocked DelayedACKLost ListenOverflows ListenDrops TCPPrequeued TCPDirectCopyFromBacklog TCPDirectCopyFromPrequeue TCPPrequeueDropped TCPHPHits TCPHPHitsToUser TCPPureAcks TCPHPAcks TCPRenoRecovery TCPSackRecovery TCPSACKReneging TCPFACKReorder TCPSACKReorder TCPRenoReorder TCPTSReorder TCPFullUndo TCPPartialUndo TCPDSACKUndo TCPLossUndo TCPLoss TCPLostRetransmit TCPRenoFailures TCPSackFailures TCPLossFailures TCPFastRetrans TCPForwardRetrans TCPSlowStartRetrans TCPTimeouts TCPRenoRecoveryFail TCPSackRecoveryFail TCPSchedulerFailed TCPRcvCollapsed TCPDSACKOldSent TCPDSACKOfoSent TCPDSACKRecv TCPDSACKOfoRecv TCPAbortOnSyn TCPAbortOnData TCPAbortOnClose TCPAbortOnMemory TCPAbortOnTimeout TCPAbortOnLinger TCPAbortFailed TCPMemoryPressures TCPSACKDiscard TCPDSACKIgnoredOld TCPDSACKIgnoredNoUndo TCPSpuriousRTOs TCPMD5NotFound TCPMD5Unexpected TCPSackShifted TCPSackMerged TCPSackShiftFallback TCPBacklogDrop TCPMinTTLDrop TCPDeferAcceptDrop IPReversePathFilter TCPTimeWaitOverflow
TcpExt: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
IpExt: InNoRoutes InTruncatedPkts InMcastPkts OutMcastPkts InBcastPkts OutBcastPkts InOctets OutOctets InMcastOctets OutMcastOctets InBcastOctets OutBcastOctets
IpExt: 0 0 0 0 0 0 28 28 0 0 0 0

sk Eth Pid Groups Rmem Wmem Dump Locks Drops Inode
00000000 0 1962 00000001 0 0 00000000 2 0 2169
00000000 0 3660 00000112 0 0 00000000 2 0 11197
00000000 0 3979 00000112 0 0 00000000 2 0 3067
00000000 0 3999 00000112 0 0 00000000 2 0 11698
00000000 0 2208 00000113 0 0 00000000 2 0 2624
00000000 0 0 00000000 0 0 00000000 2 0 7
00000000 4 0 00000000 0 0 00000000 2 0 1526
00000000 5 1962 00000001 0 0 00000000 2 0 2171
00000000 5 0 00000000 0 0 00000000 2 0 1525
00000000 10 0 00000000 0 0 00000000 2 0 1217
00000000 12 0 00000000 0 0 00000000 2 0 1524
00000000 15 1970 ffffffff 0 0 00000000 2 0 4332
00000000 15 1962 ffffffff 0 0 00000000 2 0 2167
00000000 15 1331 ffffffff 0 0 00000000 2 0 3082
00000000 15 2387 ffffffff 0 0 00000000 2 0 1967
00000000 15 0 00000000 0 0 00000000 2 0 9
00000000 15 1958 ffffffff 0 0 00000000 2 0 4320
00000000 16 0 00000000 0 0 00000000 2 0 105
00000000 16 2208 40000000 0 0 00000000 2 0 2625
00000000 16 1983 40000000 0 0 00000000 2 0 4413
00000000 17 -1 00000000 0 0 00000000 2 0 1882
00000000 17 0 00000000 0 0 00000000 2 0 1377

1 lo ff020000000000000000000000000001 1 0000000C 0
2 sit0 ff020000000000000000000000000001 1 0000000C 0
3 ip6tnl0 ff020000000000000000000000000001 1 0000000C 0
4 vip0 ff020000000000000000000000000001 1 0000000C 0
5 rmnet_usb0 ff020000000000000000000000000001 1 0000000C 0
6 rmnet_usb1 ff020000000000000000000000000001 1 0000000C 0
7 rmnet_usb2 ff020000000000000000000000000001 1 0000000C 0

zygote�/bin/app_process�-Xzygote�/system/bin�--zygote�--start-system-server�

4 vip0 1 0 333300000001
5 rmnet_usb0 1 0
6 rmnet_usb1 1 0
7 rmnet_usb2 1 0

00000000000000000000000000000000 00 00000000000000000000000000000000 00 00000000000000000000000000000000 ffffffff 00000001 00000043 00200200 lo
00000000000000000000000000000000 00 00000000000000000000000000000000 00 00000000000000000000000000000000 ffffffff 00000001 00000043 00200200 lo
00000000000000000000000000000001 80 00000000000000000000000000000000 00 00000000000000000000000000000000 00000000 00000001 00000001 80200001 lo
00000000000000000000000000000000 00 00000000000000000000000000000000 00 00000000000000000000000000000000 ffffffff 00000001 00000043 00200200 lo

proc 1970 ipv6_route

proc 1970 ipv6_Num RefCount Protocol Flags Type St Inode Path
00000000: 00000002 00000000 00010000 0001 01 4269 /data/.socket_stream
00000000: 00000002 00000000 00010000 0001 01 3168 /data/.pcsync_stream
00000000: 00000002 00000000 00010000 0001 01 1843 /data/.npswifi_stream
00000000: 00000002 00000000 00010000 0005 01 2210 /data/TMAudioSocketServer
00000000: 00000002 00000000 00010000 0005 01 4345 /data/TMAudioSocketClient
00000000: 00000002 00000000 00010000 0001 01 4314 @QMulticlient
00000000: 00000002 00000000 00010000 0001 01 1824 /dev/socket/keystore
00000000: 00000002 00000000 00010000 0001 01 2081 /dev/socket/property_service
00000000: 00000002 00000000 00010000 0001 01 3126 /dev/socket/dir_enc_report
00000000: 00000002 00000000 00010000 0001 01 3128 /dev/socket/vold
00000000: 00000002 00000000 00010000 0001 01 2106 /dev/socket/qmux_radio/proxy_tether_connect_socket
00000000: 00000002 00000000 00010000 0001 01 2023 @SecrilServer
00000000: 00000002 00000000 00010000 0001 01 1880 @mcdaemon
00000000: 00000002 00000000 00010000 0001 01 3173 @FactoryClientSend
00000000: 00000003 00000000 00000000 0001 03 1883 /dev/socket/qmux_radio/qmux_client_socket 1983
00000000: 00000002 00000000 00010000 0001 01 3170 /dev/socket/qmux_radio/proxy_qmux_connect_socket
00000000: 00000002 00000000 00010000 0001 01 4241 /dev/socket/mdns
00000000: 00000002 00000000 00010000 0001 01 4243 /dev/socket/dnsproxyd
00000000: 00000002 00000000 00010000 0001 01 4245 /dev/socket/netd
00000000: 00000002 00000000 00010000 0001 01 4247 /dev/socket/zygote
00000000: 00000002 00000000 00010000 0001 01 4249 /dev/socket/dbus
00000000: 00000002 00000000 00000000 0002 01 1837 /data/data/com.ipsec.vpnclient/vpnc_gui_to_starter
00000000: 00000002 00000000 00010000 0001 01 3165 @android:debuggerd
00000000: 00000002 00000000 00010000 0001 01 4262 /dev/socket/installd
00000000: 00000002 00000000 00010000 0001 01 4264 /dev/socket/rild-debug
00000000: 00000002 00000000 00010000 0001 01 4266 /dev/socket/rild
00000000: 00000002 00000000 00010000 0001 01 3172 @FactoryClientRecv
00000000: 00000003 00000000 00000000 0001 03 1984 /dev/socket/qmux_radio/qmux_client_socket 2208
00000000: 00000002 00000000 00010000 0001 01 2135 @Multiclient
00000000: 00000002 00000000 00010000 0001 01 1986 /dev/socket/qmux_radio/qmux_connect_socket
00000000: 00000002 00000000 00010000 0001 01 1988 /dev/socket/qmux_audio/qmux_connect_socket
00000000: 00000002 00000000 00010000 0001 01 1991 /dev/socket/qmux_gps/qmux_connect_socket
00000000: 00000003 00000000 00000000 0001 03 2011 /dev/socket/qmux_gps/qmux_client_socket 2209
00000000: 00000002 00000000 00010000 0001 01 3174 @DiagApp
00000000: 00000003 00000000 00000000 0005 03 14903
00000000: 00000003 00000000 00000000 0005 03 14902
00000000: 00000003 00000000 00000000 0005 03 12259
00000000: 00000003 00000000 00000000 0005 03 12258
00000000: 00000003 00000000 00000000 0001 03 13709
00000000: 00000003 00000000 00000000 0001 03 13708
00000000: 00000003 00000000 00000000 0005 03 11940
00000000: 00000003 00000000 00000000 0005 03 11939
00000000: 00000003 00000000 00000000 0001 03 11195
00000000: 00000003 00000000 00000000 0001 03 11194
00000000: 00000003 00000000 00000000 0005 03 13495
00000000: 00000003 00000000 00000000 0005 03 13494
00000000: 00000003 00000000 00000000 0005 03 13410
00000000: 00000003 00000000 00000000 0005 03 13409
00000000: 00000003 00000000 00000000 0005 03 11094
00000000: 00000003 00000000 00000000 0005 03 11093
00000000: 00000003 00000000 00000000 0005 03 11087
00000000: 00000003 00000000 00000000 0005 03 11086
00000000: 00000003 00000000 00000000 0005 03 11067
00000000: 00000003 00000000 00000000 0005 03 11066
00000000: 00000003 00000000 00000000 0005 03 11065
00000000: 00000003 00000000 00000000 0005 03 11064
00000000: 00000003 00000000 00000000 0005 03 11063
00000000: 00000003 00000000 00000000 0005 03 11062
00000000: 00000003 00000000 00000000 0005 03 11019
00000000: 00000003 00000000 00000000 0005 03 11018
00000000: 00000003 00000000 00000000 0005 03 13288
00000000: 00000003 00000000 00000000 0005 03 11018
00000000: 00000003 00000000 00000000 0005 03 13288
00000000: 00000003 00000000 00000000 0005 03 13287
00000000: 00000003 00000000 00000000 0005 03 11017
00000000: 00000003 00000000 00000000 0005 03 11016
00000000: 00000003 00000000 00000000 0005 03 10973
00000000: 00000003 00000000 00000000 0005 03 10972
00000000: 00000003 00000000 00000000 0005 03 10971
00000000: 00000003 00000000 00000000 0005 03 10970
00000000: 00000003 00000000 00000000 0001 03 11745
00000000: 00000003 00000000 00000000 0001 03 11744
00000000: 00000003 00000000 00000000 0001 03 10843
00000000: 00000003 00000000 00000000 0001 03 10842
00000000: 00000003 00000000 00000000 0001 03 11735
00000000: 00000003 00000000 00000000 0001 03 11734
00000000: 00000003 00000000 00000000 0001 03 11729
00000000: 00000003 00000000 00000000 0001 03 11728
00000000: 00000003 00000000 00000000 0001 03 11696
00000000: 00000003 00000000 00000000 0001 03 11695
00000000: 00000003 00000000 00000000 0005 03 12952
00000000: 00000003 00000000 00000000 0005 03 12951
00000000: 00000003 00000000 00000000 0005 03 10682
00000000: 00000003 00000000 00000000 0005 03 10681
00000000: 00000003 00000000 00000000 0001 03 3065
00000000: 00000003 00000000 00000000 0001 03 3064
00000000: 00000003 00000000 00000000 0005 03 3060
00000000: 00000003 00000000 00000000 0005 03 3059
00000000: 00000003 00000000 00000000 0001 03 5489 @mcdaemon
00000000: 00000003 00000000 00000000 0001 03 2881
00000000: 00000003 00000000 00000000 0001 03 3715 @Multiclient
00000000: 00000003 00000000 00000000 0001 03 4642
00000000: 00000003 00000000 00000000 0005 03 3632
00000000: 00000003 00000000 00000000 0005 03 3631
00000000: 00000003 00000000 00000000 0005 03 4531
00000000: 00000003 00000000 00000000 0005 03 4530
00000000: 00000003 00000000 00000000 0005 03 4529
00000000: 00000003 00000000 00000000 0005 03 4528
00000000: 00000003 00000000 00000000 0005 03 2746
00000000: 00000003 00000000 00000000 0005 03 2745
00000000: 00000003 00000000 00000000 0001 03 4521 /dev/socket/rild
00000000: 00000003 00000000 00000000 0001 03 3609
00000000: 00000003 00000000 00000000 0005 03 2739
00000000: 00000003 00000000 00000000 0005 03 2738
00000000: 00000003 00000000 00000000 0005 03 3563
00000000: 00000003 00000000 00000000 0005 03 3562
00000000: 00000003 00000000 00000000 0001 03 2653 @SecrilServer
00000000: 00000003 00000000 00000000 0001 03 2652
00000000: 00000003 00000000 00000000 0005 03 3492
00000000: 00000003 00000000 00000000 0005 03 3491
00000000: 00000003 00000000 00000000 0005 03 3490
00000000: 00000003 00000000 00000000 0005 03 3489
00000000: 00000003 00000000 00000000 0001 03 2639 /dev/socket/zygote
00000000: 00000003 00000000 00000000 0001 03 2638
00000000: 00000003 00000000 00000000 0001 03 2045 /dev/socket/qmux_radio/qmux_connect_socket
00000000: 00000003 00000000 00000000 0005 03 2618
00000000: 00000003 00000000 00000000 0005 03 2617
00000000: 00000003 00000000 00000000 0001 03 2013 /dev/socket/qmux_gps/qmux_connect_socket
00000000: 00000003 00000000 00000000 0001 03 1994 /dev/socket/qmux_radio/qmux_connect_socket
00000000: 00000003 00000000 00000000 0001 03 4404 /dev/socket/mdns
00000000: 00000003 00000000 00000000 0001 03 3471
00000000: 00000003 00000000 00000000 0001 03 4395 /dev/socket/netd
00000000: 00000003 00000000 00000000 0001 03 4394
00000000: 00000003 00000000 00000000 0001 03 1983 /dev/socket/vold
00000000: 00000003 00000000 00000000 0001 03 2459
00000000: 00000003 00000000 00000000 0001 03 1980 /dev/socket/dbus
00000000: 00000003 00000000 00000000 0001 03 3455
00000000: 00000003 00000000 00000000 0005 03 1979
00000000: 00000003 00000000 00000000 0005 03 1978
00000000: 00000003 00000000 00000000 0005 03 2452
00000000: 00000003 00000000 00000000 0005 03 2451
00000000: 00000003 00000000 00000000 0005 03 4382
00000000: 00000003 00000000 00000000 0005 03 4381
00000000: 00000003 00000000 00000000 0001 03 3438 /dev/socket/dir_enc_report
00000000: 00000003 00000000 00000000 0001 03 1963
00000000: 00000003 00000000 00000000 0001 03 2097 /dev/socket/installd
00000000: 00000003 00000000 00000000 0001 03 3418
00000000: 00000003 00000000 00000000 0005 03 4349
00000000: 00000003 00000000 00000000 0005 03 4348
00000000: 00000003 00000000 00000000 0001 03 1903 @Multiclient
00000000: 00000003 00000000 00000000 0001 03 3228
00000000: 00000003 00000000 00000000 0005 03 2200
00000000: 00000003 00000000 00000000 0005 03 2199
00000000: 00000003 00000000 00000000 0001 03 3235 @DiagApp
00000000: 00000003 00000000 00000000 0001 03 2190
00000000: 00000003 00000000 00000000 0001 03 2175
00000000: 00000003 00000000 00000000 0001 03 2174
00000000: 00000003 00000000 00000000 0001 03 2197 /data/.socket_stream
00000000: 00000003 00000000 00000000 0001 03 3169
00000000: 00000003 00000000 00000000 0001 03 2191 /data/.socket_stream
00000000: 00000003 00000000 00000000 0001 03 2100
00000000: 00000003 00000000 00000000 0001 03 4270 /data/.socket_stream
00000000: 00000003 00000000 00000000 0001 03 2099
00000000: 00000003 00000000 00000000 0001 03 1839
00000000: 00000003 00000000 00000000 0001 03 1838
00000000: 00000003 00000000 00000000 0001 03 2084
00000000: 00000003 00000000 00000000 0001 03 2083

_____

____

____

____

Saturday, August 24, 2013

url my out of area phone

url my out of area Note 2 tries to connect to:http://1.1.1.1/http.clients3.google.com/login.cgi

Wednesday, August 21, 2013

super power mode

Many of you enjoyed the God Mode "trick" so here's a few more released
by Microsoft (courtesy of CNET). While they don't give you total
dominance, they'll let you control many areas!Officially, these are
called the "Canonical Names of Control Panel Items."NOTE: For the
original God Mode trick, go here:
http://community.spiceworks.com/how_to/show/9471.

Open Windows Explorer and create a new folder

NOTE: Creating the folder on the Desktop might or might not work. The
feedback seems to vary, so you'll just have to experiment with it.2.

Rename the folder by pasting the name below exactly as it appears:

Microsoft.ActionCenter.{BB64F8A7-BEE7-4E1A-AB8D-7D8273F7FDB6}
Microsoft.AdministrativeTools.{D20EA4E1-3957-11d2-A40B-0C5020524153}
Microsoft.AutoPlay.{9C60DE1E-E5FC-40f4-A487-460851A8D915}
Microsoft.BackupAndRestore.{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}
Microsoft.BiometricDevices .{0142e4d0-fb7a-11dc-ba4a-000ffe7ab428}
Microsoft.BitLockerDriveEncryption.{D9EF8727-CAC2-4e60-809E-86F80A666C91}
Microsoft.ColorManagement.{B2C761C6-29BC-4f19-9251-E6195265BAF1}
Microsoft.CredentialManager.{1206F5F1-0569-412C-8FEC-3204630DFB70}
Microsoft.DateAndTime.{E2E7934B-DCE5-43C4-9576-7FE4F75E7480}
Microsoft.DefaultLocation.{00C6D95F-329C-409a-81D7-C46C66EA7F33}
Microsoft.DefaultPrograms.{17cd9488-1228-4b2f-88ce-4298e93e0966}
Microsoft.DesktopGadgets .{37efd44d-ef8d-41b1-940d-96973a50e9e0}
Microsoft.DeviceManager.{74246bfc-4c96-11d0-abef-0020af6b0b7a}
Microsoft.DevicesAndPrinters .{A8A91A66-3A7D-4424-8D24-04E180695C7A}
Microsoft.Display.{C555438B-3C23-4769-A71F-B6D3D9B6053A}
Microsoft.EaseOfAccessCenter.{D555645E-D4F8-4c29-A827-D93C859C4F2A}
Microsoft.FolderOptions.{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF}
Microsoft.Fonts.{93412589-74D4-4E4E-AD0E-E0CB621440FD}Microsoft.GameControllers.{259EF4B1-E6C9-4176-B574-481532C9BCE8}
Microsoft.GetPrograms.{15eae92e-f17a-4431-9f28-805e482dafd4}
Microsoft.GettingStarted.{CB1B7F8C-C50A-4176-B604-9E24DEE8D4D1}
Microsoft.HomeGroup.{67CA7650-96E6-4FDD-BB43-A8E774F73A57}
Microsoft.IndexingOptions.{87D66A43-7B11-4A28-9811-C86EE395ACF7}
Microsoft.Infrared.{A0275511-0E86-4ECA-97C2-ECD8F1221D08}
Microsoft.InternetOptions.{A3DD4F92-658A-410F-84FD-6FBBBEF2FFFE}
Microsoft.iSCSIInitiator.{A304259D-52B8-4526-8B1A-A1D6CECC8243}
Microsoft.Keyboard.{725BE8F7-668E-4C7B-8F90-46BDB0936430}
Microsoft.LocationAndOtherSensors.{E9950154-C418-419e-A90A-20C5287AE24B}
Microsoft.Mouse.{6C8EEC18-8D75-41B2-A177-8831D59D2D50}
Microsoft.NetworkAndSharingCenter.{8E908FC9-BECC-40f6-915B-F4CA0E70D03D}
Microsoft.NotificationAreaIcons.{05d7b0f4-2121-4eff-bf6b-ed3f69b894d9}
Microsoft.OfflineFiles.{D24F75AA-4F2B-4D07-A3C4-469B3D9030C4}
Microsoft.ParentalControls.{96AE8D84-A250-4520-95A5-A47A7E3C548B}
Microsoft.PenAndTouch.{F82DF8F7-8B9F-442E-A48C-818EA735FF9B}
Microsoft.PeopleNearMe.{5224F545-A443-4859-BA23-7B5A95BDC8EF}
Microsoft.PerformanceInformationAndTools.{78F3955E-3B90-4184-BD14-5397C15F1EFC}
Microsoft.Personalization.{ED834ED6-4B5A-4bfe-8F11-A626DCB6A921}
Microsoft.PhoneAndModem.{40419485-C444-4567-851A-2DD7BFA1684D}
Microsoft.PowerOptions.{025A5937-A6BE-4686-A844-36FE4BEC8B6D}
Microsoft.ProgramsAndFeatures.{7b81be6a-ce2b-4676-a29e-eb907a5126c5}
Microsoft.Recovery.{9FE63AFD-59CF-4419-9775-ABCC3849F861}
Microsoft.RegionAndLanguage.{62D8ED13-C9D0-4CE8-A914-47DD628FB1B0}
Microsoft.RemoteAppAndDesktopConnections.{241D7C96-F8BF-4F85-B01F-E2B043341A4B}
Microsoft.ScannersAndCameras.{00f2886f-cd64-4fc9-8ec5-30ef6cdbe8c3}
Microsoft.Sound.{F2DDFC82-8F12-4CDD-B7DC-D4FE1425AA4D}
Microsoft.SpeechRecognition.{58E3C745-D971-4081-9034-86E34B30836A}
Microsoft.SyncCenter.{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}
Microsoft.System.{BB06C0E4-D293-4f75-8A90-CB05B6477EEE}
Microsoft.TabletPCSettings.{80F3F1D5-FECA-45F3-BC32-752C152E456E}
Microsoft.TaskbarAndStartMenu.{0DF44EAA-FF21-4412-828E-260A8728E7F1}
Microsoft.TextToSpeech.{D17D1D6D-CC3F-4815-8FE3-607E7D5D10B3}
Microsoft.Troubleshooting.{C58C4893-3BE0-4B45-ABB5-A63E4B8C8651}
Microsoft.UserAccounts.{60632754-c52Sysprep your Machine

11. Sysprep is the process of stripping the machine so it doesn't have
any product activation information and removes any specific data from
Windows. 12. Before you Sysprep your machine you have to remove
Windows AIK otherwise it will be in your standard build. 13. Go to
c:/windows/system32/sysprep and run sysprep as administrator 14. For
system clean up action select (OOBE) check the generalize box and
shutdown options reboot.

3-4b62-b45c-4172da012619}
Microsoft.WindowsAnytimeUpgrade.{BE122A0E-4503-11DA-8BDE-F66BAD1E3F3A}
Microsoft.CardSpace.{78CB147A-98EA-4AA6-B0DF-C8681F69341C}
Microsoft.WindowsDefender.{D8559EB9-20C0-410E-BEDA-7ED416AECC2A}
Microsoft.WindowsFirewall.{4026492F-2F69-46B8-B9BF-5654FC07E423}
Microsoft.MobilityCenter.{5ea4f148-308c-46d7-98a9-49041b1dd468}
Microsoft.WindowsSideShow.{E95A4861-D57A-4be1-AD0F-35267E261739}
Microsoft.WindowsUpdate.{36eef7db-88ad-4e81-ad49-0e313f0c35f8}{208D2C60-3AEA-1069-A2D7-08002B30309D}
// Current Network Folder** Don't copy "//" above or anything after
it. Those are my comments.

from my ssg note

/dev/mali 0666 system system
/dev/ump 0666 system graphics
/dev/ion 0666 system system
/dev/exynos-mem 0666 system graphics

/dev/media0 0660 system system
/dev/media1 0660 system camera
/dev/media2 0660 system camera
/dev/v4l-subdev0 0660 system system
/dev/v4l-subdev1 0660 system system
/dev/v4l-subdev3 0660 system system
/dev/v4l-subdev4 0660 system system
/dev/v4l-subdev5 0660 system system
/dev/v4l-subdev6 0660 system system
/dev/v4l-subdev7 0660 system system
/dev/v4l-subdev8 0660 system system
/dev/v4l-subdev9 0660 system system
/dev/v4l-subdev10 0660 system system
/dev/v4l-subdev11 0660 system system
/dev/v4l-subdev12 0660 system system
/dev/v4l-subdev13 0660 system system
/dev/v4l-subdev14 0660 system system
/dev/v4l-subdev15 0660 system system
/dev/v4l-subdev16 0660 system system
/dev/v4l-subdev17 0660 system system

/dev/video0 0666 system m2m
/dev/video1 0666 system camera
/dev/video2 0666 system m2m
/dev/video3 0666 system m2m
/dev/video4 0666 system m2m
/dev/video11 0666 system system
/dev/video12 0666 system system
/dev/video16 0666 system system
/dev/video20 0666 system system
/dev/video6 0660 media graphics
/dev/video7 0660 media graphics

/dev/video11 0666 system graphics
/dev/video12 0660 system camera

/dev/video16 0660 system system
/dev/video17 0660 system system
/dev/video18 0660 system system
/dev/video19 0660 system system

# Rotator
/dev/video21 0660 system system

/dev/video23 0660 system system
/dev/video24 0660 system system
/dev/video25 0660 system camera
/dev/video26 0666 media m2m
/dev/video29 0666 media m2m
/dev/video32 0660 media m2m

/dev/video33 0660 system system
/dev/video34 0660 system system

/dev/video40 0660 system camera
/dev/video41 0660 system camera
/dev/video42 0660 system camera
/dev/video43 0660 system camera

/dev/i2c-2 0660 system system
/dev/i2c-5 0660 system system
/dev/CEC 0660 system system
/dev/HPD 0660 system system
/dev/fimg2d 0666 system graphics

#ALP Audio
/dev/srp 0660 system audio

/dev/s3c-mfc 0666 system graphics
/dev/s5p-mfc 0666 system graphics

/dev/block/mmcblk0p7 0660 system root
/dev/block/mmcblk0p10 0660 system radio
/dev/block/mmcblk0p4 0660 system radio
/dev/block/mmcblk0p5 0660 system radio
/dev/block/mmcblk0p6 0660 system radio
/dev/block/mmcblk0p11 0660 system radio
/dev/mdm 0660 system system
#CPRM
/dev/block/mmcblk1 0660 root system
/dev/ttyUSB0 0660 system system
/dev/ttyUSB1 0666 system system
/dev/ttyUSB2 0666 system system
/dev/hsic* 0660 system radio
/dev/usb/lp* 0660 system usb

/dev/ttySAC* 0660 root system

# sensor sysfs properties
/sys/devices/virtual/input/input* acc_poll_delay 0660 system radio
/sys/devices/virtual/input/input* gyro_poll_delay 0660 system radio
/sys/devices/virtual/input/input* pressure_poll_delay 0660 system radio
/sys/devices/virtual/input/input* light_poll_delay 0660 system radio
/sys/devices/virtual/input/input* prox_poll_delay 0660 system radio

# sensorhub
/dev/ssp_sensorhub 0660 system input

# for felica
/dev/felica 0666 root root
/dev/felica_pon 0666 root root
/dev/felica_cen 0666 root root
/dev/felica_rfs 0444 root root
/dev/felica_rws 0666 root root
/dev/felica_ant 0666 root root
/dev/felica_int_poll 0400 root root
/dev/felica_uid 0222 root root

# for felica end

keyguard.no_require_sim
persist.radio.adb_log_on
ro.com.google.clientidbase.yt
net.streaming.rtsp.uaprof
/sdcard
http://wap.samsungmobile.com/uaprof/
id
ro.com.google.gmsversion
4.1_r3

on early-init
start ueventd

on init

export PATH /sbin:/vendor/bin:/system/sbin:/system/bin:/system/xbin
export LD_LIBRARY_PATH /vendor/lib:/system/lib
export ANDROID_ROOT /system
export ANDROID_DATA /data
export EXTERNAL_STORAGE /sdcard

symlink /system/etc /etc

mkdir /sdcard
mkdir /preload
mkdir /system
mkdir /data
mkdir /cache
mkdir /efs
mkdir /tmp
mkdir /dbdata
mkdir /mnt 0775 root root
#mount /tmp /tmp tmpfs

on early-fs
insmod /lib/modules/vibrator.ko

mount ext4 /dev/block/mmcblk0p13 /system ro wait noatime
mount ext4 /dev/block/mmcblk0p3 /efs noatime nosuid nodev journal_async_commit

mkdir /data/log 0777

chmod 0666 /dev/log/radio
chmod 0666 /dev/log/main
chmod 0666 /dev/log/event

on boot
# write /sys/class/sec/switch/usb_sel PDA

# CPU Frequency Governor
write /sys/devices/system/cpu/cpu0/cpufreq/scaling_governor pegasusq

# EHCI runtime enable for LPA
write /sys/devices/platform/s5p-ehci/power/control auto

ifup lo
hostname localhost
domainname localdomain

class_start default

service debuggerd /system/bin/debuggerd

service ueventd /sbin/ueventd
critical

#service console /bin/sh
service console /system/bin/sh
console

service playlpm /system/bin/playlpm
user root

service immvibed /system/bin/immvibed
oneshot

service lpmkey /system/bin/lpmkey
user root

# adbd is controlled by the persist.service.adb.enable system property
service adbd /sbin/adbd
disabled

# adbd on at boot in emulator
on property:ro.kernel.qemu=1
start adbd

on property:persist.service.adb.enable=1
start adbd

on property:persist.service.adb.enable=0
stop adbd

/dev/mali 0666 system system
/dev/ump 0666 system graphics
/dev/ion 0666 system system
/dev/exynos-mem 0666 system graphics

/dev/media0 0660 system system
/dev/media1 0660 system camera
/dev/media2 0660 system camera
/dev/v4l-subdev0 0660 system system
/dev/v4l-subdev1 0660 system system
/dev/v4l-subdev3 0660 system system
/dev/v4l-subdev4 0660 system system
/dev/v4l-subdev5 0660 system system
/dev/v4l-subdev6 0660 system system
/dev/v4l-subdev7 0660 system system
/dev/v4l-subdev8 0660 system system
/dev/v4l-subdev9 0660 system system
/dev/v4l-subdev10 0660 system system
/dev/v4l-subdev11 0660 system system
/dev/v4l-subdev12 0660 system system
/dev/v4l-subdev13 0660 system system
/dev/v4l-subdev14 0660 system system
/dev/v4l-subdev15 0660 system system
/dev/v4l-subdev16 0660 system system
/dev/v4l-subdev17 0660 system system

/dev/video0 0666 system m2m
/dev/video1 0666 system camera
/dev/video2 0666 system m2m
/dev/video3 0666 system m2m
/dev/video4 0666 system m2m
/dev/video11 0666 system system
/dev/video12 0666 system system
/dev/video16 0666 system system
/dev/video20 0666 system system
/dev/video6 0660 media graphics
/dev/video7 0660 media graphics

/dev/video11 0666 system graphics
/dev/video12 0660 system camera

/dev/video16 0660 system system
/dev/video17 0660 system system
/dev/video18 0660 system system
/dev/video19 0660 system system

# Rotator
/dev/video21 0660 system system

/dev/video23 0660 system system
/dev/video24 0660 system system
/dev/video25 0660 system camera
/dev/video26 0666 media m2m
/dev/video29 0666 media m2m
/dev/video32 0660 media m2m

/dev/video33 0660 system system
/dev/video34 0660 system system

/dev/video40 0660 system camera
/dev/video41 0660 system camera
/dev/video42 0660 system camera
/dev/video43 0660 system camera

/dev/i2c-2 0660 system system
/dev/i2c-5 0660 system system
/dev/CEC 0660 system system
/dev/HPD 0660 system system
/dev/fimg2d 0666 system graphics

#ALP Audio
/dev/srp 0660 system audio

/dev/s3c-mfc 0666 system graphics
/dev/s5p-mfc 0666 system graphics

/dev/block/mmcblk0p7 0660 system root
/dev/block/mmcblk0p10 0660 system radio
/dev/block/mmcblk0p4 0660 system radio
/dev/block/mmcblk0p5 0660 system radio
/dev/block/mmcblk0p6 0660 system radio
/dev/block/mmcblk0p11 0660 system radio
/dev/mdm 0660 system system
#CPRM
/dev/block/mmcblk1 0660 root system
/dev/ttyUSB0 0660 system system
/dev/ttyUSB1 0666 system system
/dev/ttyUSB2 0666 system system
/dev/hsic* 0660 system radio
/dev/usb/lp* 0660 system usb

/dev/ttySAC* 0660 root system

# sensor sysfs properties
/sys/devices/virtual/input/input* acc_poll_delay 0660 system radio
/sys/devices/virtual/input/input* gyro_poll_delay 0660 system radio
/sys/devices/virtual/input/input* pressure_poll_delay 0660 system radio
/sys/devices/virtual/input/input* light_poll_delay 0660 system radio
/sys/devices/virtual/input/input* prox_poll_delay 0660 system radio

# sensorhub
/dev/ssp_sensorhub 0660 system input

# for felica
/dev/felica 0666 root root
/dev/felica_pon 0666 root root
/dev/felica_cen 0666 root root
/dev/felica_rfs 0444 root root
/dev/felica_rws 0666 root root
/dev/felica_ant 0666 root root
/dev/felica_int_poll 0400 root root
/dev/felica_uid 0222 root root

# for felica end

# begin build properties
# autogenerated by buildinfo.sh
ro.build.id=JZO54K
ro.build.display.id=JZO54K.I317UCALK7
ro.build.version.incremental=I317UCALK7
ro.build.version.sdk=16
ro.build.version.codename=REL
ro.build.version.release=4.1.2
ro.build.date=Fri Nov 30 18:54:29 KST 2012
ro.build.date.utc=1354269269
ro.build.type=user
ro.build.user=se.infra
ro.build.host=SEP-79
ro.build.tags=release-keys
ro.product.model=SAMSUNG-SGH-I317
ro.product.brand=samsung
ro.product.name=t0lteatt
ro.product.device=t0lteatt
ro.product.board=smdk4x12
ro.product.cpu.abi=armeabi-v7a
ro.product.cpu.abi2=armeabi
ro.product_ship=true
ro.product.manufacturer=samsung
ro.product.locale.language=en
ro.product.locale.region=GB
ro.wifi.channels=
ro.board.platform=exynos4
# ro.build.product is obsolete; use ro.product.device
ro.build.product=t0lteatt
# Do not try to parse ro.build.description or .fingerprint
ro.build.description=t0lteatt-user 4.1.2 JZO54K I317UCALK7 release-keys
ro.build.fingerprint=samsung/t0lteatt/t0lteatt:4.1.2/JZO54K/I317UCALK7:user/release-keys
ro.build.characteristics=att
# Samsung Specific Properties
ro.build.PDA=I317UCALK7
ro.build.hidden_ver=I317UCALK7
ro.build.changelist=578342
# end build properties
#
# system.prop for smdk4x12
#

rild.libpath=/system/lib/libril-qc-qmi-1.so
rild.libargs=-d /dev/ttyS0
ro.sf.lcd_density=320
ro.lcd_min_brightness=20

ro.kernel.qemu=0

ro.tvout.enable=true
persist.sys.storage_preload=1

net.streaming.rtsp.uaprof=http://wap.samsungmobile.com/uaprof/

# Multimedia property for Smart View
media.enable-commonsource=true

# System property ril adb log on
persist.radio.adb_log_on=1

# System property for SIM
persist.radio.apm_sim_not_pwdn=1

# System property for Default touch key light duration
ro.button_key_light=6000

# System proverty for sys info indication
persist.radio.add_power_save=1

#
# ADDITIONAL_BUILD_PROPERTIES
#
ro.opengles.version=131072
debug.hwui.render_dirty_regions=false
ro.sf.lcd_density=320
ro.error.receiver.default=com.samsung.receiver.error
dalvik.vm.heapstartsize=8m
dalvik.vm.heapgrowthlimit=64m
dalvik.vm.heapsize=256m
ro.hdcp2.rx=tz
ro.secwvk=220
ro.sec.fle.encryption=true
ro.config.ringtone=ATT_Firefly.ogg
ro.config.notification_sound=S_Whistle.ogg
ro.config.alarm_alert=Walk_in_the_forest.ogg
ro.config.media_sound=Media_preview_Touch_the_light.ogg
ro.monkey=0
keyguard.no_require_sim=true
ro.com.android.dateformat=MM-dd-yyyy
ro.carrier=unknown
ro.com.google.clientidbase=android-samsung
ro.ril.hsxpa=1
ro.ril.gprsclass=10
ro.adb.qemud=1
ro.setupwizard.mode=DISABLED
ro.com.google.apphider=off
ro.com.google.clientidbase.ms=android-att-us
ro.com.google.clientidbase.am=android-att-us
ro.com.google.clientidbase.yt=android-samsung
ro.com.google.clientidbase.gmm=android-samsung
ro.com.google.gmsversion=4.1_r3
dalvik.vm.dexopt-flags=m=y
net.bt.name=Android
dalvik.vm.stack-trace-file=/data/anr/traces.txt
/storage/sdcard0/romtoolbox/fonts/previews
libjackpal-androidterm4.so

ueventd.smdk4x12.rc

libjackpal-androidterm4.so

audio_effects.conf

# List of effect libraries to load. Each library element must contain a "path" element
# giving the full path of the library .so file.
# libraries {
# <lib name> {
# path <lib path>
# }
# }
libraries {
bundle {
path /system/lib/soundfx/libbundlewrapper.so
}
reverb {
path /system/lib/soundfx/libreverbwrapper.so
}
visualizer {
path /system/lib/soundfx/libvisualizer.so
}
downmix {
path /system/lib/soundfx/libdownmix.so
}
output_processing {
path /vendor/lib/liblvverx.so
}
pre_processing {
path /vendor/lib/liblvvetx.so
}
}

# list of effects to load. Each effect element must contain a "library" and a "uuid" element.
# The value of the "library" element must correspond to the name of one library element in the
# "libraries" element.
# The name of the effect element is indicative, only the value of the "uuid" element
# designates the effect.
# effects {
# <fx name> {
# library <lib name>
# uuid <effect uuid>
# }
# :
# }

effects {
bassboost {
library bundle
uuid 8631f300-72e2-11df-b57e-0002a5d5c51b
}
virtualizer {
library bundle
uuid 1d4033c0-8557-11df-9f2d-0002a5d5c51b
}
equalizer {
library bundle
uuid ce772f20-847d-11df-bb17-0002a5d5c51b
}
volume {
library bundle
uuid 119341a0-8469-11df-81f9-0002a5d5c51b
}
reverb_env_aux {
library reverb
uuid 4a387fc0-8ab3-11df-8bad-0002a5d5c51b
}
reverb_env_ins {
library reverb
uuid c7a511a0-a3bb-11df-860e-0002a5d5c51b
}
reverb_pre_aux {
library reverb
uuid f29a1400-a3bb-11df-8ddc-0002a5d5c51b
}
reverb_pre_ins {
library reverb
uuid 172cdf00-a3bc-11df-a72f-0002a5d5c51b
}
visualizer {
library visualizer
uuid d069d9e0-8329-11df-9168-0002a5d5c51b
}
downmix {
library downmix
uuid 93f04452-e4fe-41cc-91f9-e475b6d1d69f
}
agc {
library pre_processing
uuid 3b75f00-93ce-11e0-9fb8-0002a5d5c51b
}
aec {
library pre_processing
uuid d6dbf400-93ce-11e0-bcd7-0002a5d5c51b
}
ns {
library pre_processing
uuid df0afc20-93ce-11e0-98de-0002a5d5c51b
}
lmfv {
library output_processing
uuid 989d9460-413d-11e1-8b0d-0002a5d5c51b
}
fens {
library output_processing
uuid cbcc5980-476d-11e1-82ee-0002a5d5c51b
}
}

# Audio preprocessor configurations.
# The pre processor configuration consists in a list of elements each describing
# pre processor settings for a given input source. Valid input source names are:
# "mic", "camcorder", "voice_recognition", "voice_communication"
# Each input source element contains a list of effects elements. The name of the effect
# element must be the name of one of the effects in the "effects" list of the file.
# Each effect element may optionally contain a list of parameters and their
# default value to apply when the pre processor effect is created.
# A parameter is defined by a "key" element and a "value" element. Each of these elements
# consists in one or more elements specifying a type followed by a value.
# The types defined are: "int", "short", "float", "bool" and "string"
# pre_processing {
# <input source name> {
# <fx name> {
# <param name> {
# key {
# int|short|float|bool|string <value>
# int|short|float|bool|string <value>
# :
# }
# value {
# int|short|float|bool|string <value>
# int|short|float|bool|string <value>
# :
# }
# }
# :
# }
# :
# }
# :
# }

# level {
# key {
# int test
# }
# value {
# short 9000
# }
# }

pre_processing {
mic {
agc {}
ns {}
aec{}
}
camcorder {
# ns {}
}
voice_communication {
agc {}
ns {}
aec {}
}
sec_voice_recognition{ # for BargeIn
agc {}
ns {}
aec {}
}
sec_voice_communication{
agc {}
ns {}
aec {}
}
}

output_processing {

voice_call {
fens {}
lmfv {}
}

sec_voice_communication {
fens {}
lmfv {}
}

}

.....

...

...

more files

ဌ῁ꠀ��쀍�뀄」h䵿䀿ဌ῁T倀਀ဌ @῁ 䀴—စ【 〔‌【꠰Ì��Ü��楬散獮㵥假L敤捳楲瑰潩㵮獕牥氠癥汥搠楲敶⁲畳灰牯⁴潦⁲呂氠捯k畡桴牯圽湥楢⁮留㰠敷扮湩畹所潲摡潣⹭潣㹭�敤数摮㵳瘀牥慭楧㵣⸳⸰ㄳ㔭㠷㐳′䵓⁐牰敥灭⁴潭彤湵潬摡洠摯敶獲潩獮䄠䵒㝶瀠瘲‸�⌣⌣┠⁳瑢潬正敟楸㩴
�⌣⌣┠⁳潬正爠汥慥敳Ɽ挠潯楫㩥┠ੳ�啎䱌��⌣⌣┠⁳敲敬獡ⱥ挠潯楫彥業浳瑡档┺ⱳ漠湷牥┺ੳ�⌣⌣┠⁳楫汬摥
⌣⌣┠⁳潬正愠煣極敲Ɽ┠ੳ�⌣⌣┠⁳牴⁹慦汩摥
⌣⌣┠⁳牴⁹畳捣獥ੳ��⌣⌣┠⁳湩瑩
�⌣⌣┠⁳牅潲㩲映楡敬⁤潴爠来獩整⁲楍捳搠楲敶Ⱳ†敲⁴‽搥
�瑢潬正��,�H�h��뒂潭畤敬江祡畯t��乚彵敭獭瑥��඄業捳牟来獩整r��軴穲灵��꿝८潤湷歟汩慬汢e��ꑞྡྷ彟敭穭牥o��氊粲潤湷瑟祲潬正��佤﯇彟潣祰晟潲彭獵牥��業捳摟牥来獩整r��ꁉ⟡牰湩歴��⣠놭彟湧彵捭畯瑮湟c��à�Ę��瑢潬正��乇U萟깚飑Ꚓ䲐ꤞﷸώ䜀䍃›䜨啎 ⸴⸴3䜀䍃›䜨啎 ⸴⸴3⩁�愀慥楢Ā �㜅䄭؀܊ࡁሁᐄᔁᜁ᠃ᤁᨁḂ献浹慴b献牴慴b献獨牴慴b爮汥琮硥t爮汥攮楸⹴整瑸⸀敲⹬湩瑩琮硥t爮汥爮摯瑡a洮摯湩潦⸀潲慤慴献牴⸱4爮汥彟捭畯瑮江捯开癟牥楳湯s爮汥搮瑡a爮汥朮畮氮湩潫据⹥桴獩浟摯汵e渮瑯⹥湧⹵畢汩ⵤ摩⸀獢s挮浯敭瑮⸀潮整䜮啎猭慴正⸀剁⹍瑡牴扩瑵獥��4�Ȭ�� ሌ�¸��)��ɠ�<��

more1111111111111

more111111111

nore111111

Tuesday, August 20, 2013

Hidden files in my samsungnote

þÿÿëÀ ã€ áÜ@Kâ� á á á á êã á00Kâí@ãP ãTà�åp ãà ã4`KâÀ�å`�åH`Kâ@à�å`�å8`KâP�å`�åL`KâHp�å`�å<`KâP�å`�å@`Kâ À�å$`�å8`„â(à�å,`�å` ã4à�å0`�å@`„âOUT 0x%04x/0x%x (%s[%d]->%s[%d]) len %d type=0x%08x %08x -> %08x dst 0x%p dev (%s[%d])packet passed throughloopback packet passed throughlen=%d%08x: %02x%02x %02x%02x %02x%02x %02x%02x %02x%02x %02x%02x %02x%02x %02x%02x %08x: %02x%slocal IPv6 broadcast loopback packet passed throughNeighbour discovery packet passed throughlength %d dumping %d bytes%s:%d: Assertion failed: %s #condoutgoing packet 0x%p, len %d proto 0x%x [%s] iface %d [%s]ipv6Local packet, fragmentation allowed.encapsulation failed, packet dropped [hwcsum]outgoing packet, len=%d flags=0x%08lx%slocal IPv4 broadcast loopback packet passed throughipv4IN 0x%04x/0x%x (%s[%d]->%s[%d]) len %d type=0x%08x %08x -> %08x dst 0x%p dev (%s[%d])incoming packet 0x%p, len %d proto 0x%x [%s] iface %d [%s]incoming packet, len=%d flags=0x%08lx%sinit called when hooks are initialized already. <3>VPNClient netfilter %s hook failed to install. networknowherestackarpunknownethernetsending packet to %s, len=%d flags=0x%08lx ifnum_out=%lu protocol=%s[0x%x]packet, len %dInterface %lu has disappeared, dropping packet 0x%pCould not add headroom to skbp, dropping packet 0x%pPassing unmodified packet to networkInvalid skb->dst, dropping packetpp->protocol 0x%x ipp->skb->protocol 0x%x%s:%d: Unreachable code reached!Hardware performs checksumming.Checksum calculated in software.No checksumming required.Unable to reroute skb 0x%pPassing unmodified packet to stackPassing skb 0x%p to ip_rcv_finishPassing skb 0x%p to ip6_rcv_finishChecksum is verified in softwareHardware claims to have verified checksumHardware has verified checksum, csum 0x%xInvalid HW checksum flag %dCould not access IP headerCould not access IPv6 headerTrimming skb down from %d to %luskb->protocol 0x%xInvalid packet direction flagsipv4 inipv4 outipv6 inipv6 out%s:%d: Assertion failed: %s drivers/interceptor/linux_ipm.c#condMemory leak detected: %d ipm messages leaked! <6>ipm channel closed, dropping ipm message len %d Dropping reliable ipm message type %d len %d <6>Dropping unreliable ipm message type %d len %d ssh_kernel_free: Malloc object corrupted (invalid magic %x)%s:%d: Assertion failed: %s drivers/interceptor/linux_kernel_alloc.c#cond%s:%d: drivers/interceptor/linux_main.cinterceptor opened <3>VPNClient packet processing engine failed to start (engine start error). <3>VPNClient packet processing engine failed to start (interface notifier installation error). <3>VPNClient packet processing engine failed to start (firewall glue installation error). %s:%d: Assertion failed: %s #cond<3>VPNClient packet processing engine failed to start (out of memory). <3>VPNClient packet processing engine failed to start, dst cache initialization failed.<3>VPNClient packet processing engine failed to start (proc filesystem initialization error) <6>VPNClient built on Nov 30 2012 18:49:16 interceptor stopping%d interface callbacks pending, can't stopinterceptor stopped%s:%d: drivers/interceptor/linux_usermode.cyesnoReturning dst entry ID %lu, pp 0x%p, %lu items in cache, update %s Removed cache ID %lu, left %lu items in dst cacheCache ID %lu was not found, left %lu items in dst cacheDst entry cache, caching dst for pp 0x%p, %lu items in cache%s:%d: Assertion failed: %s #condCache ID %lu, left %lu items in dst cacheDst entry cache timeout %lu items in cacheDst entry cache timeout freeing head ID %luDst entry cache timeout freeing ID %luLeft %lu items in dst cacheDst entry cache flush, %lu items in cacheReleasing dst cache entryDst entry cache uninit, %lu items in cacheInitialising dst entry cache%s:%d: Assertion failed: %s drivers/interceptor/linux_virtual_adapter.c#cond%s:%d: Packet is too short to contain IPv4 header Packet too short to contain IPv6 headerCan not handle protocol %dVirtual adapter %d does not existunknownDestroying virtual adapter %d [%s]Virtual adapter %d [%s] detached%sDevice %d [%s] is not attached to a SshVirtualAdapterVirtual adapter %d [%s] not initialized / no cb.Could not allocate packet header, virtual adapter %d [%s]Passing skb %p from virtual adapter %d [%s] to engineAttach failed for virtual adapter %dMaximum value for num_virtual_adapters is %dCould not allocate virtual adapter%s%dvipalloc_netdev failedregister_netdev failed: %dVirtual adapter %d [%s] attached successfullyCould not attach virtual adapter %s to system.Virtual adapter %lu [%s] createdMaximum number of virtual adapters reached%s:%d: Assertion failed: %s drivers/interceptor/linux_mutex.c#cond%s:%d: Assertion failed: %s drivers/interceptor/linux_packet.c#cond%s:%d: skb does not have enough headroom for device %d, reallocating skb headroom Unable to import internal packet dataUnable to import internal packet data, no skbUnable to export internal packet data, sk buffUnable to export internal packet dataskb dup: len %d extra %d offset %d headroom %d tailroom %dAligning skb->data %p at offset %d to word boundary (word_size %d), headroom %d tailroom %dalloc header: skb len %d headroom %d tailroom %dalloc packet: skb len %d headroom %d tailroom %d%s%svpnclientengine%s:%d: Assertion failed: %s drivers/interceptor/linux_procfs.c#condversion%s:%d: Could not create /proc/%s <6>interceptor_ipm_proc_entry_fop_open: -EBUSY <6>interceptor_ipm_proc_entry_fop_write: -ERESTARTSYS <0>interceptor_ipm_proc_entry_fop_write: copy_from_user failed, dropping message <0>interceptor_ipm_proc_entry_fop_write: Out of receive buffer space <6>interceptor_ipm_proc_entry_fop_read: -EBUSY <6>interceptor_ipm_proc_entry_fop_read: -ERESTARTSYS <0>interceptor_ipm_proc_entry_fop_read: copy_to_user failed, dropping message VPNClient built on Nov 30 2012 18:49:18 include/net/dst.h%s:%d: Assertion failed: %s drivers/interceptor/linux_route.c#cond%s:%d: Allocated child %p dst_entry for dst %p mtu %d Could not access IPv6 headerFailed to get nf afinfoFailed to get route from IPv6 NFip6_route_output failed.dst %08x: %02x%ssrc noneoif %d[%s]Creating a new child entry for dst %p, child %p %luCould not create child dst_entry for dst %pCould not access IP headerip_route_input failed. (0x%08x -> 0x%08x)dst 0x%08x src 0x%08x iif %d[%s] proto %d tos 0x%02x fwmark 0x%xip_route_output_key failed (0x%08x -> 0x%08x): %ddst 0x%08x src 0x%08x oif %d[%s] proto %d tos 0x%02xfwmark 0x%xRoute lookup: dst %s src %s ifnum %dup rejectRoute result: %s via %s ifnum %d[%s] mtu %d flags 0x%08x[%s%s]Route lookup for %s failed with code %dRoute lookup: dst %s src %s ifnum %d ipproto %d tos 0x%02x fwmark 0x%lxunknownRoute result: dst %s via %s ifnum %d[%s] mtu %d type %s [%d]Route lookup: dst %s src %s ifnum %d[%s] ipproto %d tos 0x%02x fwmark 0x%xRoute lookup failed, unknown dst address typeunspecunicastlocalbroadcastanycastmulticastblackholeunreachableprohibitthrownatxresolve%s:%d: Assertion failed: %s drivers/interceptor/sshinetbits.c#cond%x%%%u%d.%d.%d.%d%s:%d: drivers/interceptor/usermodeforwarder.cSetting debug level to "%s" Bad virtual adapter send request from PM%08x: %02x%02x %02x%02x %02x%02x %02x%02x %02x%02x %02x%02x %02x%02x %02x%02x %08x: %02x%sfailed to allocate packetcopyin failed, dropping packetinternal import failed, dropping packetbad ipm_packet fixed partgarbage at end of ipm_packetbad ipm_enable_interception packetEnablingDisabling%s packet interceptionbad extension selector in ipm_packetbad ipm route packet len=%dbad ipaddr encodingroute request to %s (id %d)User level module closed connection.failed to allocate engine objectopening the real interceptor failedSSH forwarder engine started%s:%d: Assertion failed: %s #condBad virtual adapter get status request from PMBad virtual adapter configure request from PMBad virtual adapter detach request from PMBad virtual adapter attach request from PM<0>Unknown packet type %ussh_engine_packet_from_ipm: unexpected packet %u in kernel; probably wrong policy managerinvalid packet from engine, type=%usending route reply id=%d reachable=%d ifnum=%d mtu=%d next_hop=%ssending route reply id=%d not reachableUser level module opened connection.User-Mode Forwarder 1.0ifs[i].addrs[%d].protocol == %d is not supported4¸Øô@`€È(„´T D d " ¼LàØ P!ˆ"#0$L%5œ5Ð5T6Ì6(AðIP(V V˜XÄhðh`i4jtnœopHpÐpôqÜsüst(uLuüuxvàvÜwLx ytz"{°{ì{|P~´€tƒÌ„X…ô…†0†ü†P‡„ˆ8ŒÈŽ�´�'L'Ì"ì" –Ì˜$�X�˜�Ø�(žàžŸLŸˆŸ¨Ÿ° à ¡Ä¡h£ä¤¦l©0«Ä¯"²ô²L³ ³´¤¶è¶\·ð·Ä¸d¹„¼8¿œÀDÃ¬ÇðÌ$ÑDÕØÙÌÛÜÜÞ´ÞPßá\á¼áXâ|â(åØçÐéôî(ô¤ôõŒö ÷xø„úÄýÐÿìÔøˆ¨üD($¬8$¨H$¤X$ d$ø$°$ $parmtype=out6_priority:intparmtype=in6_priority:intparmtype=out_priority:intparmtype=in_priority:intparm=out6_priority:Netfilter hook priority at IPv6 POSTROUTINGparm=in6_priority:Netfilter hook priority at IPv6 PREROUTINGparm=out_priority:Netfilter hook priority at IPv4 POSTROUTINGparm=in_priority:Netfilter hook priority at IPv4 PREROUTINGlicense=GPLdescription=VPNClientparmtype=ssh_debug_level:uintparm=ssh_debug_level:Debug levelparmtype=num_virtual_adapters:intparm=num_virtual_adapters:Number of virtual adapters to createparmtype=ssh_procfs_gid:uintparm=ssh_procfs_gid:Procfs gidparmtype=ssh_procfs_uid:uintparm=ssh_procfs_uid:Procfs uiddepends=vermagic=3.0.31-578342 SMP preempt mod_unload modversions ARMv7 p2v8 Ü‚´module_layout²[Ú__kmallocdOÇû__copy_from_usercy1_raw_spin_unlockoˆÈ>param_ops_intTúÂg__copy_to_userß[%—strlen°°´¶dev_get_flagsÿéE>register_inetaddr_notifiermfÊ_raw_read_lock¢bF dst_releaseCÙ‹_raw_spin_lock_bhÜÔŠ:interruptible_sleep_onSìcregister_netdevice_notifier'©]remove_proc_entryÅºÎregister_inet6addr_notifierŽF¡dev_base_lockà(±__gnu_mcount_ncÖßãê__const_udelay({Ë†init_timer_keyÊ¾·nf_register_hook–KÒqskb_realloc_headroomÈE®Ain_dev_finish_destroym2;dst_allochÂ}jiffiesV"vþunregister_netdevice_notifier´'gskb_trim‰Š¬Fnetif_rxº†€Ý__pskb_pull_tail&éA__init_waitqueue_headÀƒƒSunregister_inet6addr_notifier^¤¢__memzeroÂtµ÷del_timer_syncZNu_memsetI á'printk€__tracepoint_module_get‡Éqmemcmp‰nœ_raw_write_unlockR}_raw_read_unlock*YRpanicxÏómfree_netdevñŠ2strncpyéh£register_netdeveÑ›skb_push1òT_raw_write_lock~UÔnmod_timer�i$__rcu_read_unlockŽØ"add_timery'`synchronize_rcuÃÉ°Cpreempt_schedule©init_netâqšºdev_kfree_skb_any¾„-module_put#ö?local_bh_disableß'Š*ip_route_input_common$ÀJ__alloc_skbzCvunregister_inetaddr_notifier¨ü"__get_free_pages‰ìh³_raw_spin_unlock_bh?ƒ,Öschedule_timeoutQschedule¤¬™local_bh_enablePw�}alloc_netdev_mqsHÝ7eth_type_transÝ‡tÂ__bug°vZcreate_proc_entry5'æŽtimeval_to_jiffiesH‹Ñjether_setup3Â_raw_spin_lock£¿4__per_cpu_offsetëÐCfree_pages…,Tr__wake_up;Àëönet_ratelimitË‰É®nf_unregister_hookmœ'2nf_afinfož<âin6_dev_finish_destroyºzkfreec—f�memcpy¼#ãunregister_netdev½psnprintfˆ»™memmoveíŽkIconsume_skb'R�__rcu_read_lock|v-skb_putÈ‡þÃparam_ops_uintPð}Xouter_cacheäéstrcpy€€ €( €€€€€vpnclientGNUÁ_©Ž¹NFkŠ�atø‡¶M–—,GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3GCC: (GNU) 4.4.3A*aeabi 7-A A.symtab.strtab.shstrtab.rel.text.rel.exit.text.rel.init.text.rel.rodata.rodata.str1.4.rel__mcount_loc.rel__param.modinfo__versions.rel.data.rel.gnu.linkonce.this_module.note.gnu.build-id.bss.comment.ARM.attributes.note.GNU-stack4ô „‹Z)(@% "å88h4 ÌåG„´C ÔåÐO28˜*bÐ<l^ ¤æØ s�Âì>€+ì„,ì¬ °w¸Ë¼ˆÀ+ìÄ,ìÐ9üÖ®$„¬¬À>ÔÂ²0>d+ìh,ì� "wœË ˆ¤+ì¨,ì´9Ð¬è¬ì+ìð,ì ê,+ì0,ì< X+ì\,ìŒ¨¨µ°µ¸µÌµØµàµ¬µµ$µD¬Tµ`µhµˆ¬˜µ µ¨µÀ¬ÐµØµàµø¬¬µ$µ,µ@µLµTµX+ì\,ìx¬|ä€'„ˆŒ�"˜Wœ ¤¨ì¬°´¸¼ÀÄÈààÂ+$,HÜ\Â`+d,ˆÜœÂ +¨,ÄÜØÂÜ+à,Üˆ(9h lw¤{D+ìH,ì°cÐcðc c0 µ< µD µ\ ¬p ¬„ ¬˜ ¬œ ì ¤ ¨ ¬ ° ´ ¸ ¼ À Ä Ø à,!¬0!k4!8!î,>D>µL>µT>µp>µ?µ?µ8?µ@?µt?µŒ?µ¤?¬¼?µL@µ`@µŒ@µ"@µ¬@¬°@W´@¸@¼@À@Ä@È@Ì@Ð@Ô@Ø@Ü@à@ä@è@ì@ð@ô@ø@ü@AAAAA(AàPA+ìTA,ì€Aî AØAîBTBîpB"BµœBµ¤BµÈBµÔBµÜBµCµ$Cµ8Cµ@CµHCµpC+ìtC,ìˆCˆÔC½DîPDTD@hD›lDw„Dµ8Ö…lÖÂôÖï×E0×H

Sunday, August 18, 2013

Pavilion From HP TDSSKiller.2.8.16.0_30.06.2013_08.48.15_log.txt

08:48:15.0577 1148 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
08:48:16.0076 1148 ============================================================
08:48:16.0076 1148 Current date / time: 2013/06/30 08:48:16.0076
08:48:16.0076 1148 SystemInfo:
08:48:16.0076 1148
08:48:16.0076 1148 OS Version: 6.1.7601 ServicePack: 1.0
08:48:16.0076 1148 Product type: Workstation
08:48:16.0076 1148 ComputerName: WINDOWSSEVEN
08:48:16.0076 1148 UserName: Windows
08:48:16.0076 1148 Windows directory: C:\Windows
08:48:16.0076 1148 System windows directory: C:\Windows
08:48:16.0076 1148 Running under WOW64
08:48:16.0076 1148 Processor architecture: Intel x64
08:48:16.0076 1148 Number of processors: 2
08:48:16.0076 1148 Page size: 0x1000
08:48:16.0076 1148 Boot type: Safe boot with network
08:48:16.0076 1148 ============================================================
08:48:17.0246 1148 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000
(298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack:
0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
08:48:17.0246 1148 ============================================================
08:48:17.0246 1148 \Device\Harddisk0\DR0:
08:48:17.0246 1148 MBR partitions:
08:48:17.0246 1148 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7,
StartLBA 0x800, BlocksNum 0x2542D800
08:48:17.0246 1148 ============================================================
08:48:17.0277 1148 C: <-> \Device\Harddisk0\DR0\Partition1
08:48:17.0277 1148 ============================================================
08:48:17.0277 1148 Initialize success
08:48:17.0277 1148 ============================================================
08:48:34.0874 0540 ============================================================
08:48:34.0874 0540 Scan started
08:48:34.0874 0540 Mode: Manual;
08:48:34.0874 0540 ============================================================
08:48:36.0059 0540 ================ Scan system memory ========================
08:48:36.0059 0540 System memory - ok
08:48:36.0059 0540 ================ Scan services =============================
08:48:36.0184 0540 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci
C:\Windows\system32\drivers\1394ohci.sys
08:48:36.0200 0540 1394ohci - ok
08:48:36.0215 0540 [ 5C368F4B04ED2A923E6AFCA2D37BAFF5 ] Accelerometer
C:\Windows\system32\DRIVERS\Accelerometer.sys
08:48:36.0215 0540 Accelerometer - ok
08:48:36.0231 0540 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI
C:\Windows\system32\drivers\ACPI.sys
08:48:36.0247 0540 ACPI - ok
08:48:36.0262 0540 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi
C:\Windows\system32\drivers\acpipmi.sys
08:48:36.0262 0540 AcpiPmi - ok
08:48:36.0325 0540 [ ADDA5E1951B90D3D23C56D3CF0622ADC ]
AdobeARMservice C:\Program Files (x86)\Common
Files\Adobe\ARM\1.0\armsvc.exe
08:48:36.0325 0540 AdobeARMservice - ok
08:48:36.0356 0540 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx
C:\Windows\system32\drivers\adp94xx.sys
08:48:36.0371 0540 adp94xx - ok
08:48:36.0387 0540 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci
C:\Windows\system32\drivers\adpahci.sys
08:48:36.0387 0540 adpahci - ok
08:48:36.0403 0540 [ E109549C90F62FB570B9540C4B148E54 ] adpu320
C:\Windows\system32\drivers\adpu320.sys
08:48:36.0418 0540 adpu320 - ok
08:48:36.0449 0540 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc
C:\Windows\System32\aelupsvc.dll
08:48:36.0449 0540 AeLookupSvc - ok
08:48:36.0481 0540 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD
C:\Windows\system32\drivers\afd.sys
08:48:36.0481 0540 AFD - ok
08:48:36.0496 0540 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440
C:\Windows\system32\drivers\agp440.sys
08:48:36.0496 0540 agp440 - ok
08:48:36.0512 0540 [ 3290D6946B5E30E70414990574883DDB ] ALG
C:\Windows\System32\alg.exe
08:48:36.0512 0540 ALG - ok
08:48:36.0527 0540 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide
C:\Windows\system32\drivers\aliide.sys
08:48:36.0527 0540 aliide - ok
08:48:36.0543 0540 [ 1FF8B4431C353CE385C875F194924C0C ] amdide
C:\Windows\system32\drivers\amdide.sys
08:48:36.0543 0540 amdide - ok
08:48:36.0574 0540 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8
C:\Windows\system32\drivers\amdk8.sys
08:48:36.0590 0540 AmdK8 - ok
08:48:36.0605 0540 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM
C:\Windows\system32\drivers\amdppm.sys
08:48:36.0605 0540 AmdPPM - ok
08:48:36.0621 0540 [ 6EC6D772EAE38DC17C14AED9B178D24B ] amdsata
C:\Windows\system32\drivers\amdsata.sys
08:48:36.0621 0540 amdsata - ok
08:48:36.0637 0540 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs
C:\Windows\system32\drivers\amdsbs.sys
08:48:36.0637 0540 amdsbs - ok
08:48:36.0652 0540 [ 1142A21DB581A84EA5597B03A26EBAA0 ] amdxata
C:\Windows\system32\drivers\amdxata.sys
08:48:36.0652 0540 amdxata - ok
08:48:36.0668 0540 [ 89A69C3F2F319B43379399547526D952 ] AppID
C:\Windows\system32\drivers\appid.sys
08:48:36.0668 0540 AppID - ok
08:48:36.0683 0540 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc
C:\Windows\System32\appidsvc.dll
08:48:36.0683 0540 AppIDSvc - ok
08:48:36.0715 0540 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo
C:\Windows\System32\appinfo.dll
08:48:36.0715 0540 Appinfo - ok
08:48:36.0746 0540 [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt
C:\Windows\System32\appmgmts.dll
08:48:36.0761 0540 AppMgmt - ok
08:48:36.0777 0540 [ C484F8CEB1717C540242531DB7845C4E ] arc
C:\Windows\system32\drivers\arc.sys
08:48:36.0777 0540 arc - ok
08:48:36.0793 0540 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas
C:\Windows\system32\drivers\arcsas.sys
08:48:36.0793 0540 arcsas - ok
08:48:36.0808 0540 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac
C:\Windows\system32\DRIVERS\asyncmac.sys
08:48:36.0824 0540 AsyncMac - ok
08:48:36.0839 0540 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi
C:\Windows\system32\drivers\atapi.sys
08:48:36.0839 0540 atapi - ok
08:48:36.0886 0540 [ E857EEE6B92AAA473EBB3465ADD8F7E7 ] athr
C:\Windows\system32\DRIVERS\athrx.sys
08:48:36.0917 0540 athr - ok
08:48:36.0949 0540 [ F23FEF6D569FCE88671949894A8BECF1 ]
AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
08:48:36.0964 0540 AudioEndpointBuilder - ok
08:48:36.0980 0540 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv
C:\Windows\System32\Audiosrv.dll
08:48:36.0980 0540 AudioSrv - ok
08:48:36.0995 0540 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV
C:\Windows\System32\AxInstSV.dll
08:48:36.0995 0540 AxInstSV - ok
08:48:37.0011 0540 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv
C:\Windows\system32\drivers\bxvbda.sys
08:48:37.0027 0540 b06bdrv - ok
08:48:37.0042 0540 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a
C:\Windows\system32\DRIVERS\b57nd60a.sys
08:48:37.0042 0540 b57nd60a - ok
08:48:37.0058 0540 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC
C:\Windows\System32\bdesvc.dll
08:48:37.0073 0540 BDESVC - ok
08:48:37.0089 0540 [ 16A47CE2DECC9B099349A5F840654746 ] Beep
C:\Windows\system32\drivers\Beep.sys
08:48:37.0089 0540 Beep - ok
08:48:37.0120 0540 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE
C:\Windows\System32\bfe.dll
08:48:37.0136 0540 BFE - ok
08:48:37.0183 0540 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS
C:\Windows\System32\qmgr.dll
08:48:37.0198 0540 BITS - ok
08:48:37.0229 0540 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive
C:\Windows\system32\DRIVERS\blbdrive.sys
08:48:37.0229 0540 blbdrive - ok
08:48:37.0245 0540 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser
C:\Windows\system32\DRIVERS\bowser.sys
08:48:37.0245 0540 bowser - ok
08:48:37.0276 0540 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo
C:\Windows\system32\drivers\BrFiltLo.sys
08:48:37.0276 0540 BrFiltLo - ok
08:48:37.0276 0540 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp
C:\Windows\system32\drivers\BrFiltUp.sys
08:48:37.0276 0540 BrFiltUp - ok
08:48:37.0307 0540 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser
C:\Windows\System32\browser.dll
08:48:37.0307 0540 Browser - ok
08:48:37.0417 0540 [ 013A330F16B1CECBDE5CB6F921689523 ]
BrowserDefendert
C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
08:48:37.0417 0540 Suspicious file (NoAccess):
C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe.
md5: 013A330F16B1CECBDE5CB6F921689523
08:48:37.0417 0540 BrowserDefendert ( LockedFile.Multi.Generic ) - warning
08:48:37.0417 0540 BrowserDefendert - detected LockedFile.Multi.Generic (1)
08:48:37.0448 0540 [ 63A00CDBEB300522C49EC7CA77324060 ] BrSerIb
C:\Windows\system32\DRIVERS\BrSerIb.sys
08:48:37.0463 0540 BrSerIb - ok
08:48:37.0479 0540 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid
C:\Windows\System32\Drivers\Brserid.sys
08:48:37.0495 0540 Brserid - ok
08:48:37.0510 0540 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm
C:\Windows\System32\Drivers\BrSerWdm.sys
08:48:37.0510 0540 BrSerWdm - ok
08:48:37.0526 0540 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm
C:\Windows\System32\Drivers\BrUsbMdm.sys
08:48:37.0526 0540 BrUsbMdm - ok
08:48:37.0541 0540 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer
C:\Windows\System32\Drivers\BrUsbSer.sys
08:48:37.0541 0540 BrUsbSer - ok
08:48:37.0573 0540 [ BBCFD6C6EF66449F55AF1BFDB08C9B12 ] BrUsbSIb
C:\Windows\system32\DRIVERS\BrUsbSIb.sys
08:48:37.0573 0540 BrUsbSIb - ok
08:48:37.0573 0540 BTHMODEM - ok
08:48:37.0682 0540 bthserv - ok
08:48:37.0697 0540 cdfs - ok
08:48:37.0729 0540 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom
C:\Windows\system32\DRIVERS\cdrom.sys
08:48:37.0729 0540 cdrom - ok
08:48:37.0760 0540 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc
C:\Windows\System32\certprop.dll
08:48:37.0760 0540 CertPropSvc - ok
08:48:37.0775 0540 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass
C:\Windows\system32\drivers\circlass.sys
08:48:37.0775 0540 circlass - ok
08:48:37.0791 0540 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS
C:\Windows\system32\CLFS.sys
08:48:37.0807 0540 CLFS - ok
08:48:37.0869 0540 [ D88040F816FDA31C3B466F0FA0918F29 ]
clr_optimization_v2.0.50727_32
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
08:48:37.0869 0540 clr_optimization_v2.0.50727_32 - ok
08:48:37.0885 0540 [ D1CEEA2B47CB998321C579651CE3E4F8 ]
clr_optimization_v2.0.50727_64
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
08:48:37.0885 0540 clr_optimization_v2.0.50727_64 - ok
08:48:37.0931 0540 [ C5A75EB48E2344ABDC162BDA79E16841 ]
clr_optimization_v4.0.30319_32
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
08:48:37.0947 0540 clr_optimization_v4.0.30319_32 - ok
08:48:37.0978 0540 [ C6F9AF94DCD58122A4D7E89DB6BED29D ]
clr_optimization_v4.0.30319_64
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
08:48:37.0978 0540 clr_optimization_v4.0.30319_64 - ok
08:48:37.0994 0540 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt
C:\Windows\system32\DRIVERS\CmBatt.sys
08:48:37.0994 0540 CmBatt - ok
08:48:38.0009 0540 [ E19D3F095812725D88F9001985B94EDD ] cmdide
C:\Windows\system32\drivers\cmdide.sys
08:48:38.0009 0540 cmdide - ok
08:48:38.0041 0540 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG
C:\Windows\system32\Drivers\cng.sys
08:48:38.0056 0540 CNG - ok
08:48:38.0072 0540 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt
C:\Windows\system32\DRIVERS\compbatt.sys
08:48:38.0072 0540 Compbatt - ok
08:48:38.0087 0540 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus
C:\Windows\system32\DRIVERS\CompositeBus.sys
08:48:38.0087 0540 CompositeBus - ok
08:48:38.0103 0540 COMSysApp - ok
08:48:38.0119 0540 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk
C:\Windows\system32\drivers\crcdisk.sys
08:48:38.0119 0540 crcdisk - ok
08:48:38.0150 0540 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc
C:\Windows\system32\cryptsvc.dll
08:48:38.0150 0540 CryptSvc - ok
08:48:38.0181 0540 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC
C:\Windows\system32\drivers\csc.sys
08:48:38.0181 0540 CSC - ok
08:48:38.0212 0540 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService
C:\Windows\System32\cscsvc.dll
08:48:38.0228 0540 CscService - ok
08:48:38.0275 0540 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch
C:\Windows\system32\rpcss.dll
08:48:38.0275 0540 DcomLaunch - ok
08:48:38.0306 0540 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc
C:\Windows\System32\defragsvc.dll
08:48:38.0321 0540 defragsvc - ok
08:48:38.0353 0540 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC
C:\Windows\system32\Drivers\dfsc.sys
08:48:38.0353 0540 DfsC - ok
08:48:38.0368 0540 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp
C:\Windows\system32\dhcpcore.dll
08:48:38.0384 0540 Dhcp - ok
08:48:38.0399 0540 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache
C:\Windows\system32\drivers\discache.sys
08:48:38.0399 0540 discache - ok
08:48:38.0431 0540 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk
C:\Windows\system32\drivers\disk.sys
08:48:38.0431 0540 Disk - ok
08:48:38.0462 0540 [ 5DB085A8A6600BE6401F2B24EECB5415 ] dmvsc
C:\Windows\system32\drivers\dmvsc.sys
08:48:38.0462 0540 dmvsc - ok
08:48:38.0493 0540 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache
C:\Windows\System32\dnsrslvr.dll
08:48:38.0493 0540 Dnscache - ok
08:48:38.0509 0540 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc
C:\Windows\System32\dot3svc.dll
08:48:38.0524 0540 dot3svc - ok
08:48:38.0540 0540 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS
C:\Windows\system32\dps.dll
08:48:38.0540 0540 DPS - ok
08:48:38.0571 0540 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud
C:\Windows\system32\drivers\drmkaud.sys
08:48:38.0571 0540 drmkaud - ok
08:48:38.0602 0540 [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl
C:\Windows\System32\drivers\dxgkrnl.sys
08:48:38.0618 0540 DXGKrnl - ok
08:48:38.0633 0540 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost
C:\Windows\System32\eapsvc.dll
08:48:38.0633 0540 EapHost - ok
08:48:38.0727 0540 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv
C:\Windows\system32\drivers\evbda.sys
08:48:38.0805 0540 ebdrv - ok
08:48:38.0836 0540 [ C118A82CD78818C29AB228366EBF81C3 ] EFS
C:\Windows\System32\lsass.exe
08:48:38.0836 0540 EFS - ok
08:48:38.0883 0540 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr
C:\Windows\ehome\ehRecvr.exe
08:48:38.0914 0540 ehRecvr - ok
08:48:38.0930 0540 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched
C:\Windows\ehome\ehsched.exe
08:48:38.0930 0540 ehSched - ok
08:48:38.0977 0540 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor
C:\Windows\system32\drivers\elxstor.sys
08:48:38.0977 0540 elxstor - ok
08:48:38.0992 0540 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev
C:\Windows\system32\drivers\errdev.sys
08:48:38.0992 0540 ErrDev - ok
08:48:39.0023 0540 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem
C:\Windows\system32\es.dll
08:48:39.0039 0540 EventSystem - ok
08:48:39.0039 0540 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat
C:\Windows\system32\drivers\exfat.sys
08:48:39.0055 0540 exfat - ok
08:48:39.0055 0540 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat
C:\Windows\system32\drivers\fastfat.sys
08:48:39.0055 0540 fastfat - ok
08:48:39.0101 0540 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax
C:\Windows\system32\fxssvc.exe
08:48:39.0117 0540 Fax - ok
08:48:39.0117 0540 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc
C:\Windows\system32\drivers\fdc.sys
08:48:39.0117 0540 fdc - ok
08:48:39.0133 0540 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost
C:\Windows\system32\fdPHost.dll
08:48:39.0133 0540 fdPHost - ok
08:48:39.0148 0540 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub
C:\Windows\system32\fdrespub.dll
08:48:39.0148 0540 FDResPub - ok
08:48:39.0179 0540 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo
C:\Windows\system32\drivers\fileinfo.sys
08:48:39.0179 0540 FileInfo - ok
08:48:39.0195 0540 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace
C:\Windows\system32\drivers\filetrace.sys
08:48:39.0195 0540 Filetrace - ok
08:48:39.0195 0540 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk
C:\Windows\system32\drivers\flpydisk.sys
08:48:39.0195 0540 flpydisk - ok
08:48:39.0226 0540 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr
C:\Windows\system32\drivers\fltmgr.sys
08:48:39.0226 0540 FltMgr - ok
08:48:39.0289 0540 [ C4C183E6551084039EC862DA1C945E3D ] FontCache
C:\Windows\system32\FntCache.dll
08:48:39.0304 0540 FontCache - ok
08:48:39.0351 0540 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ]
FontCache3.0.0.0
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
08:48:39.0351 0540 FontCache3.0.0.0 - ok
08:48:39.0367 0540 [ D43703496149971890703B4B1B723EAC ] FsDepends
C:\Windows\system32\drivers\FsDepends.sys
08:48:39.0367 0540 FsDepends - ok
08:48:39.0398 0540 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec
C:\Windows\system32\drivers\Fs_Rec.sys
08:48:39.0398 0540 Fs_Rec - ok
08:48:39.0413 0540 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol
C:\Windows\system32\DRIVERS\fvevol.sys
08:48:39.0429 0540 fvevol - ok
08:48:39.0445 0540 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx
C:\Windows\system32\drivers\gagp30kx.sys
08:48:39.0445 0540 gagp30kx - ok
08:48:39.0476 0540 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc
C:\Windows\System32\gpsvc.dll
08:48:39.0491 0540 gpsvc - ok
08:48:39.0538 0540 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
08:48:39.0554 0540 gupdate - ok
08:48:39.0554 0540 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
08:48:39.0554 0540 gupdatem - ok
08:48:39.0585 0540 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir
C:\Windows\system32\drivers\hcw85cir.sys
08:48:39.0585 0540 hcw85cir - ok
08:48:39.0616 0540 [ 975761C778E33CD22498059B91E7373A ]
HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
08:48:39.0616 0540 HdAudAddService - ok
08:48:39.0632 0540 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus
C:\Windows\system32\DRIVERS\HDAudBus.sys
08:48:39.0632 0540 HDAudBus - ok
08:48:39.0647 0540 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt
C:\Windows\system32\drivers\HidBatt.sys
08:48:39.0647 0540 HidBatt - ok
08:48:39.0647 0540 HidBth - ok
08:48:39.0663 0540 HidIr - ok
08:48:39.0679 0540 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv
C:\Windows\system32\hidserv.dll
08:48:39.0679 0540 hidserv - ok
08:48:39.0694 0540 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb
C:\Windows\system32\DRIVERS\hidusb.sys
08:48:39.0694 0540 HidUsb - ok
08:48:39.0741 0540 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc
C:\Windows\system32\kmsvc.dll
08:48:39.0741 0540 hkmsvc - ok
08:48:39.0741 0540 [ EFDFB3DD38A4376F93E7985173813ABD ]
HomeGroupListener C:\Windows\system32\ListSvc.dll
08:48:39.0757 0540 HomeGroupListener - ok
08:48:39.0772 0540 [ 908ACB1F594274965A53926B10C81E89 ]
HomeGroupProvider C:\Windows\system32\provsvc.dll
08:48:39.0788 0540 HomeGroupProvider - ok
08:48:39.0803 0540 [ 4E0BEC0F78096FFD6D3314B497FC49D3 ] hpdskflt
C:\Windows\system32\DRIVERS\hpdskflt.sys
08:48:39.0803 0540 hpdskflt - ok
08:48:39.0835 0540 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD
C:\Windows\system32\drivers\HpSAMD.sys
08:48:39.0835 0540 HpSAMD - ok
08:48:39.0835 0540 [ FC7C13B5A9E9BE23B7AE72BBC7FDB278 ] hpsrv
C:\Windows\system32\Hpservice.exe
08:48:39.0850 0540 hpsrv - ok
08:48:39.0881 0540 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP
C:\Windows\system32\drivers\HTTP.sys
08:48:39.0881 0540 HTTP - ok
08:48:39.0897 0540 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy
C:\Windows\system32\drivers\hwpolicy.sys
08:48:39.0897 0540 hwpolicy - ok
08:48:39.0928 0540 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt
C:\Windows\system32\DRIVERS\i8042prt.sys
08:48:39.0928 0540 i8042prt - ok
08:48:39.0944 0540 [ 3DF4395A7CF8B7A72A5F4606366B8C2D ] iaStorV
C:\Windows\system32\drivers\iaStorV.sys
08:48:39.0944 0540 iaStorV - ok
08:48:40.0006 0540 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc
C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication
Foundation\infocard.exe
08:48:40.0022 0540 idsvc - ok
08:48:40.0162 0540 [ A87261EF1546325B559374F5689CF5BC ] igfx
C:\Windows\system32\DRIVERS\igdkmd64.sys
08:48:40.0287 0540 igfx - ok
08:48:40.0303 0540 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp
C:\Windows\system32\drivers\iirsp.sys
08:48:40.0303 0540 iirsp - ok
08:48:40.0334 0540 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT
C:\Windows\System32\ikeext.dll
08:48:40.0349 0540 IKEEXT - ok
08:48:40.0381 0540 [ F00F20E70C6EC3AA366910083A0518AA ] intelide
C:\Windows\system32\drivers\intelide.sys
08:48:40.0381 0540 intelide - ok
08:48:40.0396 0540 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm
C:\Windows\system32\DRIVERS\intelppm.sys
08:48:40.0396 0540 intelppm - ok
08:48:40.0427 0540 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum
C:\Windows\system32\ipbusenum.dll
08:48:40.0427 0540 IPBusEnum - ok
08:48:40.0443 0540 [ C9F0E1BD74365A8771590E9008D22AB6 ]
IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
08:48:40.0443 0540 IpFilterDriver - ok
08:48:40.0474 0540 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc
C:\Windows\System32\iphlpsvc.dll
08:48:40.0474 0540 iphlpsvc - ok
08:48:40.0505 0540 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV
C:\Windows\system32\drivers\IPMIDrv.sys
08:48:40.0505 0540 IPMIDRV - ok
08:48:40.0521 0540 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT
C:\Windows\system32\drivers\ipnat.sys
08:48:40.0537 0540 IPNAT - ok
08:48:40.0552 0540 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM
C:\Windows\system32\drivers\irenum.sys
08:48:40.0552 0540 IRENUM - ok
08:48:40.0568 0540 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp
C:\Windows\system32\drivers\isapnp.sys
08:48:40.0568 0540 isapnp - ok
08:48:40.0583 0540 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt
C:\Windows\system32\drivers\msiscsi.sys
08:48:40.0599 0540 iScsiPrt - ok
08:48:40.0615 0540 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass
C:\Windows\system32\DRIVERS\kbdclass.sys
08:48:40.0615 0540 kbdclass - ok
08:48:40.0630 0540 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid
C:\Windows\system32\drivers\kbdhid.sys
08:48:40.0630 0540 kbdhid - ok
08:48:40.0646 0540 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso
C:\Windows\system32\lsass.exe
08:48:40.0646 0540 KeyIso - ok
08:48:40.0677 0540 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD
C:\Windows\system32\Drivers\ksecdd.sys
08:48:40.0677 0540 KSecDD - ok
08:48:40.0693 0540 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg
C:\Windows\system32\Drivers\ksecpkg.sys
08:48:40.0693 0540 KSecPkg - ok
08:48:40.0708 0540 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk
C:\Windows\system32\drivers\ksthunk.sys
08:48:40.0708 0540 ksthunk - ok
08:48:40.0739 0540 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm
C:\Windows\system32\msdtckrm.dll
08:48:40.0755 0540 KtmRm - ok
08:48:40.0771 0540 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer
C:\Windows\system32\srvsvc.dll
08:48:40.0771 0540 LanmanServer - ok
08:48:40.0802 0540 [ 851A1382EED3E3A7476DB004F4EE3E1A ]
LanmanWorkstation C:\Windows\System32\wkssvc.dll
08:48:40.0802 0540 LanmanWorkstation - ok
08:48:40.0833 0540 [ 1538831CF8AD2979A04C423779465827 ] lltdio
C:\Windows\system32\DRIVERS\lltdio.sys
08:48:40.0833 0540 lltdio - ok
08:48:40.0864 0540 [ C1185803384AB3FEED115F79F109427F ] lltdsvc
C:\Windows\System32\lltdsvc.dll
08:48:40.0880 0540 lltdsvc - ok
08:48:40.0895 0540 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts
C:\Windows\System32\lmhsvc.dll
08:48:40.0895 0540 lmhosts - ok
08:48:41.0020 0540 [ 14B0B207DEDFAB58B157B5A66CABB937 ]
LMIRescue_3d7d03d3-4d79-4e38-ba84-e699afcf6346
C:\Users\Windows\AppData\Local\LOGMEI~1\LMIR0001.tmp\LMI_Rescue_srv.exe
08:48:41.0083 0540 LMIRescue_3d7d03d3-4d79-4e38-ba84-e699afcf6346 - ok
08:48:41.0114 0540 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC
C:\Windows\system32\drivers\lsi_fc.sys
08:48:41.0114 0540 LSI_FC - ok
08:48:41.0129 0540 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS
C:\Windows\system32\drivers\lsi_sas.sys
08:48:41.0129 0540 LSI_SAS - ok
08:48:41.0145 0540 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2
C:\Windows\system32\drivers\lsi_sas2.sys
08:48:41.0145 0540 LSI_SAS2 - ok
08:48:41.0161 0540 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI
C:\Windows\system32\drivers\lsi_scsi.sys
08:48:41.0161 0540 LSI_SCSI - ok
08:48:41.0176 0540 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv
C:\Windows\system32\drivers\luafv.sys
08:48:41.0176 0540 luafv - ok
08:48:41.0207 0540 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc
C:\Windows\system32\Mcx2Svc.dll
08:48:41.0207 0540 Mcx2Svc - ok
08:48:41.0223 0540 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas
C:\Windows\system32\drivers\megasas.sys
08:48:41.0223 0540 megasas - ok
08:48:41.0239 0540 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR
C:\Windows\system32\drivers\MegaSR.sys
08:48:41.0254 0540 MegaSR - ok
08:48:41.0270 0540 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS
C:\Windows\system32\mmcss.dll
08:48:41.0270 0540 MMCSS - ok
08:48:41.0285 0540 [ 800BA92F7010378B09F9ED9270F07137 ] Modem
C:\Windows\system32\drivers\modem.sys
08:48:41.0285 0540 Modem - ok
08:48:41.0301 0540 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor
C:\Windows\system32\DRIVERS\monitor.sys
08:48:41.0301 0540 monitor - ok
08:48:41.0332 0540 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass
C:\Windows\system32\DRIVERS\mouclass.sys
08:48:41.0332 0540 mouclass - ok
08:48:41.0332 0540 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid
C:\Windows\system32\DRIVERS\mouhid.sys
08:48:41.0348 0540 mouhid - ok
08:48:41.0348 0540 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr
C:\Windows\system32\drivers\mountmgr.sys
08:48:41.0348 0540 mountmgr - ok
08:48:41.0379 0540 [ F8A10560B35C66F9DE212F03DAD5BFA7 ] MpFilter
C:\Windows\system32\DRIVERS\MpFilter.sys
08:48:41.0379 0540 MpFilter - ok
08:48:41.0395 0540 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio
C:\Windows\system32\drivers\mpio.sys
08:48:41.0395 0540 mpio - ok
08:48:41.0410 0540 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv
C:\Windows\system32\drivers\mpsdrv.sys
08:48:41.0410 0540 mpsdrv - ok
08:48:41.0441 0540 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc
C:\Windows\system32\mpssvc.dll
08:48:41.0457 0540 MpsSvc - ok
08:48:41.0488 0540 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV
C:\Windows\system32\drivers\mrxdav.sys
08:48:41.0488 0540 MRxDAV - ok
08:48:41.0519 0540 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb
C:\Windows\system32\DRIVERS\mrxsmb.sys
08:48:41.0519 0540 mrxsmb - ok
08:48:41.0551 0540 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10
C:\Windows\system32\DRIVERS\mrxsmb10.sys
08:48:41.0551 0540 mrxsmb10 - ok
08:48:41.0582 0540 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20
C:\Windows\system32\DRIVERS\mrxsmb20.sys
08:48:41.0582 0540 mrxsmb20 - ok
08:48:41.0597 0540 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci
C:\Windows\system32\drivers\msahci.sys
08:48:41.0597 0540 msahci - ok
08:48:41.0613 0540 [ DB801A638D011B9633829EB6F663C900 ] msdsm
C:\Windows\system32\drivers\msdsm.sys
08:48:41.0613 0540 msdsm - ok
08:48:41.0644 0540 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC
C:\Windows\System32\msdtc.exe
08:48:41.0644 0540 MSDTC - ok
08:48:41.0660 0540 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs
C:\Windows\system32\drivers\Msfs.sys
08:48:41.0660 0540 Msfs - ok
08:48:41.0675 0540 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf
C:\Windows\System32\drivers\mshidkmdf.sys
08:48:41.0691 0540 mshidkmdf - ok
08:48:41.0691 0540 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv
C:\Windows\system32\drivers\msisadrv.sys
08:48:41.0691 0540 msisadrv - ok
08:48:41.0722 0540 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI
C:\Windows\system32\iscsiexe.dll
08:48:41.0722 0540 MSiSCSI - ok
08:48:41.0738 0540 msiserver - ok
08:48:41.0753 0540 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV
C:\Windows\system32\drivers\MSKSSRV.sys
08:48:41.0769 0540 MSKSSRV - ok
08:48:41.0816 0540 [ E07DEC52FF801841BA9B6878A60304FB ] MsMpSvc
c:\Program Files\Microsoft Security Client\MsMpEng.exe
08:48:41.0816 0540 MsMpSvc - ok
08:48:41.0847 0540 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK
C:\Windows\system32\drivers\MSPCLOCK.sys
08:48:41.0847 0540 MSPCLOCK - ok
08:48:41.0863 0540 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM
C:\Windows\system32\drivers\MSPQM.sys
08:48:41.0863 0540 MSPQM - ok
08:48:41.0878 0540 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC
C:\Windows\system32\drivers\MsRPC.sys
08:48:41.0878 0540 MsRPC - ok
08:48:41.0894 0540 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios
C:\Windows\system32\DRIVERS\mssmbios.sys
08:48:41.0909 0540 mssmbios - ok
08:48:41.0909 0540 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE
C:\Windows\system32\drivers\MSTEE.sys
08:48:41.0925 0540 MSTEE - ok
08:48:41.0941 0540 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig
C:\Windows\system32\drivers\MTConfig.sys
08:48:41.0941 0540 MTConfig - ok
08:48:41.0956 0540 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup
C:\Windows\system32\Drivers\mup.sys
08:48:41.0956 0540 Mup - ok
08:48:41.0987 0540 [ 582AC6D9873E31DFA28A4547270862DD ] napagent
C:\Windows\system32\qagentRT.dll
08:48:42.0003 0540 napagent - ok
08:48:42.0019 0540 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP
C:\Windows\system32\DRIVERS\nwifi.sys
08:48:42.0019 0540 NativeWifiP - ok
08:48:42.0065 0540 [ 760E38053BF56E501D562B70AD796B88 ] NDIS
C:\Windows\system32\drivers\ndis.sys
08:48:42.0097 0540 NDIS - ok
08:48:42.0112 0540 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap
C:\Windows\system32\DRIVERS\ndiscap.sys
08:48:42.0112 0540 NdisCap - ok
08:48:42.0128 0540 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi
C:\Windows\system32\DRIVERS\ndistapi.sys
08:48:42.0128 0540 NdisTapi - ok
08:48:42.0159 0540 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio
C:\Windows\system32\DRIVERS\ndisuio.sys
08:48:42.0159 0540 Ndisuio - ok
08:48:42.0175 0540 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan
C:\Windows\system32\DRIVERS\ndiswan.sys
08:48:42.0175 0540 NdisWan - ok
08:48:42.0175 0540 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy
C:\Windows\system32\drivers\NDProxy.sys
08:48:42.0190 0540 NDProxy - ok
08:48:42.0206 0540 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS
C:\Windows\system32\DRIVERS\netbios.sys
08:48:42.0206 0540 NetBIOS - ok
08:48:42.0221 0540 [ 09594D1089C523423B32A4229263F068 ] NetBT
C:\Windows\system32\DRIVERS\netbt.sys
08:48:42.0221 0540 NetBT - ok
08:48:42.0221 0540 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon
C:\Windows\system32\lsass.exe
08:48:42.0221 0540 Netlogon - ok
08:48:42.0268 0540 [ 847D3AE376C0817161A14A82C8922A9E ] Netman
C:\Windows\System32\netman.dll
08:48:42.0268 0540 Netman - ok
08:48:42.0299 0540 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm
C:\Windows\System32\netprofm.dll
08:48:42.0299 0540 netprofm - ok
08:48:42.0315 0540 [ 3E5A36127E201DDF663176B66828FAFE ]
NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows
Communication Foundation\SMSvcHost.exe
08:48:42.0331 0540 NetTcpPortSharing - ok
08:48:42.0346 0540 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960
C:\Windows\system32\drivers\nfrd960.sys
08:48:42.0362 0540 nfrd960 - ok
08:48:42.0393 0540 [ 162100E0BC8377710F9D170631921C03 ] NisDrv
C:\Windows\system32\DRIVERS\NisDrvWFP.sys
08:48:42.0393 0540 NisDrv - ok
08:48:42.0409 0540 [ C6E15F2F95F9C0A6098D43510B604E52 ] NisSrv
c:\Program Files\Microsoft Security Client\NisSrv.exe
08:48:42.0424 0540 NisSrv - ok
08:48:42.0455 0540 [ 8AD77806D336673F270DB31645267293 ] NlaSvc
C:\Windows\System32\nlasvc.dll
08:48:42.0455 0540 NlaSvc - ok
08:48:42.0471 0540 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs
C:\Windows\system32\drivers\Npfs.sys
08:48:42.0471 0540 Npfs - ok
08:48:42.0487 0540 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi
C:\Windows\system32\nsisvc.dll
08:48:42.0487 0540 nsi - ok
08:48:42.0502 0540 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy
C:\Windows\system32\drivers\nsiproxy.sys
08:48:42.0502 0540 nsiproxy - ok
08:48:42.0565 0540 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs
C:\Windows\system32\drivers\Ntfs.sys
08:48:42.0596 0540 Ntfs - ok
08:48:42.0611 0540 [ 9899284589F75FA8724FF3D16AED75C1 ] Null
C:\Windows\system32\drivers\Null.sys
08:48:42.0611 0540 Null - ok
08:48:42.0627 0540 [ 5D9FD91F3D38DC9DA01E3CB5FA89CD48 ] nvraid
C:\Windows\system32\drivers\nvraid.sys
08:48:42.0627 0540 nvraid - ok
08:48:42.0643 0540 [ F7CD50FE7139F07E77DA8AC8033D1832 ] nvstor
C:\Windows\system32\drivers\nvstor.sys
08:48:42.0658 0540 nvstor - ok
08:48:42.0674 0540 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp
C:\Windows\system32\drivers\nv_agp.sys
08:48:42.0674 0540 nv_agp - ok
08:48:42.0689 0540 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394
C:\Windows\system32\drivers\ohci1394.sys
08:48:42.0689 0540 ohci1394 - ok
08:48:42.0721 0540 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc
C:\Windows\system32\pnrpsvc.dll
08:48:42.0721 0540 p2pimsvc - ok
08:48:42.0736 0540 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc
C:\Windows\system32\p2psvc.dll
08:48:42.0752 0540 p2psvc - ok
08:48:42.0767 0540 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport
C:\Windows\system32\drivers\parport.sys
08:48:42.0767 0540 Parport - ok
08:48:42.0799 0540 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr
C:\Windows\system32\drivers\partmgr.sys
08:48:42.0799 0540 partmgr - ok
08:48:42.0814 0540 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc
C:\Windows\System32\pcasvc.dll
08:48:42.0814 0540 PcaSvc - ok
08:48:42.0830 0540 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci
C:\Windows\system32\drivers\pci.sys
08:48:42.0845 0540 pci - ok
08:48:42.0861 0540 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide
C:\Windows\system32\drivers\pciide.sys
08:48:42.0861 0540 pciide - ok
08:48:42.0877 0540 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia
C:\Windows\system32\drivers\pcmcia.sys
08:48:42.0877 0540 pcmcia - ok
08:48:42.0892 0540 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw
C:\Windows\system32\drivers\pcw.sys
08:48:42.0892 0540 pcw - ok
08:48:42.0923 0540 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH
C:\Windows\system32\drivers\peauth.sys
08:48:42.0923 0540 PEAUTH - ok
08:48:42.0970 0540 [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc
C:\Windows\system32\peerdistsvc.dll
08:48:43.0001 0540 PeerDistSvc - ok
08:48:43.0064 0540 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost
C:\Windows\SysWow64\perfhost.exe
08:48:43.0064 0540 PerfHost - ok
08:48:43.0126 0540 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla
C:\Windows\system32\pla.dll
08:48:43.0173 0540 pla - ok
08:48:43.0204 0540 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay
C:\Windows\system32\umpnpmgr.dll
08:48:43.0220 0540 PlugPlay - ok
08:48:43.0235 0540 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg
C:\Windows\system32\pnrpauto.dll
08:48:43.0235 0540 PNRPAutoReg - ok
08:48:43.0251 0540 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc
C:\Windows\system32\pnrpsvc.dll
08:48:43.0251 0540 PNRPsvc - ok
08:48:43.0298 0540 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent
C:\Windows\System32\ipsecsvc.dll
08:48:43.0313 0540 PolicyAgent - ok
08:48:43.0329 0540 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power
C:\Windows\system32\umpo.dll
08:48:43.0345 0540 Power - ok
08:48:43.0360 0540 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport
C:\Windows\system32\DRIVERS\raspptp.sys
08:48:43.0360 0540 PptpMiniport - ok
08:48:43.0376 0540 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor
C:\Windows\system32\drivers\processr.sys
08:48:43.0376 0540 Processor - ok
08:48:43.0407 0540 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc
C:\Windows\system32\profsvc.dll
08:48:43.0407 0540 ProfSvc - ok
08:48:43.0423 0540 [ C118A82CD78818C29AB228366EBF81C3 ]
ProtectedStorage C:\Windows\system32\lsass.exe
08:48:43.0423 0540 ProtectedStorage - ok
08:48:43.0454 0540 [ 0557CF5A2556BD58E26384169D72438D ] Psched
C:\Windows\system32\DRIVERS\pacer.sys
08:48:43.0454 0540 Psched - ok
08:48:43.0501 0540 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300
C:\Windows\system32\drivers\ql2300.sys
08:48:43.0532 0540 ql2300 - ok
08:48:43.0547 0540 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx
C:\Windows\system32\drivers\ql40xx.sys
08:48:43.0547 0540 ql40xx - ok
08:48:43.0579 0540 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE
C:\Windows\system32\qwave.dll
08:48:43.0594 0540 QWAVE - ok
08:48:43.0594 0540 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv
C:\Windows\system32\drivers\qwavedrv.sys
08:48:43.0594 0540 QWAVEdrv - ok
08:48:43.0610 0540 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd
C:\Windows\system32\DRIVERS\rasacd.sys
08:48:43.0610 0540 RasAcd - ok
08:48:43.0641 0540 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn
C:\Windows\system32\DRIVERS\AgileVpn.sys
08:48:43.0641 0540 RasAgileVpn - ok
08:48:43.0672 0540 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto
C:\Windows\System32\rasauto.dll
08:48:43.0672 0540 RasAuto - ok
08:48:43.0688 0540 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp
C:\Windows\system32\DRIVERS\rasl2tp.sys
08:48:43.0688 0540 Rasl2tp - ok
08:48:43.0703 0540 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan
C:\Windows\System32\rasmans.dll
08:48:43.0719 0540 RasMan - ok
08:48:43.0735 0540 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe
C:\Windows\system32\DRIVERS\raspppoe.sys
08:48:43.0735 0540 RasPppoe - ok
08:48:43.0750 0540 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp
C:\Windows\system32\DRIVERS\rassstp.sys
08:48:43.0750 0540 RasSstp - ok
08:48:43.0766 0540 [ 77F665941019A1594D887A74F301FA2F ] rdbss
C:\Windows\system32\DRIVERS\rdbss.sys
08:48:43.0766 0540 rdbss - ok
08:48:43.0781 0540 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus
C:\Windows\system32\DRIVERS\rdpbus.sys
08:48:43.0781 0540 rdpbus - ok
08:48:43.0797 0540 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD
C:\Windows\system32\DRIVERS\RDPCDD.sys
08:48:43.0797 0540 RDPCDD - ok
08:48:43.0828 0540 [ 1B6163C503398B23FF8B939C67747683 ] RDPDR
C:\Windows\system32\drivers\rdpdr.sys
08:48:43.0828 0540 RDPDR - ok
08:48:43.0844 0540 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD
C:\Windows\system32\drivers\rdpencdd.sys
08:48:43.0844 0540 RDPENCDD - ok
08:48:43.0859 0540 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP
C:\Windows\system32\drivers\rdprefmp.sys
08:48:43.0859 0540 RDPREFMP - ok
08:48:43.0891 0540 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD
C:\Windows\system32\drivers\RDPWD.sys
08:48:43.0906 0540 RDPWD - ok
08:48:43.0922 0540 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost
C:\Windows\system32\drivers\rdyboost.sys
08:48:43.0922 0540 rdyboost - ok
08:48:43.0953 0540 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess
C:\Windows\System32\mprdim.dll
08:48:43.0953 0540 RemoteAccess - ok
08:48:43.0984 0540 [ E4D94F24081440B5FC5AA556C7C62702 ]
RemoteRegistry C:\Windows\system32\regsvc.dll
08:48:43.0984 0540 RemoteRegistry - ok
08:48:44.0015 0540 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper
C:\Windows\System32\RpcEpMap.dll
08:48:44.0015 0540 RpcEptMapper - ok
08:48:44.0031 0540 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator
C:\Windows\system32\locator.exe
08:48:44.0031 0540 RpcLocator - ok
08:48:44.0062 0540 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs
C:\Windows\system32\rpcss.dll
08:48:44.0078 0540 RpcSs - ok
08:48:44.0093 0540 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr
C:\Windows\system32\DRIVERS\rspndr.sys
08:48:44.0093 0540 rspndr - ok
08:48:44.0125 0540 [ BAEFEE35D27A5440D35092CE10267BEC ] RTL8167
C:\Windows\system32\DRIVERS\Rt64win7.sys
08:48:44.0125 0540 RTL8167 - ok
08:48:44.0140 0540 [ E60C0A09F997826C7627B244195AB581 ] s3cap
C:\Windows\system32\drivers\vms3cap.sys
08:48:44.0140 0540 s3cap - ok
08:48:44.0171 0540 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs
C:\Windows\system32\lsass.exe
08:48:44.0171 0540 SamSs - ok
08:48:44.0187 0540 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port
C:\Windows\system32\drivers\sbp2port.sys
08:48:44.0187 0540 sbp2port - ok
08:48:44.0203 0540 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr
C:\Windows\System32\SCardSvr.dll
08:48:44.0218 0540 SCardSvr - ok
08:48:44.0234 0540 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter
C:\Windows\system32\DRIVERS\scfilter.sys
08:48:44.0234 0540 scfilter - ok
08:48:44.0265 0540 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule
C:\Windows\system32\schedsvc.dll
08:48:44.0296 0540 Schedule - ok
08:48:44.0312 0540 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc
C:\Windows\System32\certprop.dll
08:48:44.0312 0540 SCPolicySvc - ok
08:48:44.0327 0540 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus
C:\Windows\system32\DRIVERS\sdbus.sys
08:48:44.0343 0540 sdbus - ok
08:48:44.0359 0540 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC
C:\Windows\System32\SDRSVC.dll
08:48:44.0359 0540 SDRSVC - ok
08:48:44.0374 0540 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv
C:\Windows\system32\drivers\secdrv.sys
08:48:44.0374 0540 secdrv - ok
08:48:44.0390 0540 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon
C:\Windows\system32\seclogon.dll
08:48:44.0390 0540 seclogon - ok
08:48:44.0405 0540 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS
C:\Windows\System32\sens.dll
08:48:44.0405 0540 SENS - ok
08:48:44.0421 0540 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc
C:\Windows\system32\sensrsvc.dll
08:48:44.0421 0540 SensrSvc - ok
08:48:44.0437 0540 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum
C:\Windows\system32\drivers\serenum.sys
08:48:44.0437 0540 Serenum - ok
08:48:44.0452 0540 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial
C:\Windows\system32\drivers\serial.sys
08:48:44.0452 0540 Serial - ok
08:48:44.0483 0540 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse
C:\Windows\system32\drivers\sermouse.sys
08:48:44.0483 0540 sermouse - ok
08:48:44.0530 0540 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv
C:\Windows\system32\sessenv.dll
08:48:44.0546 0540 SessionEnv - ok
08:48:44.0546 0540 [ A554811BCD09279536440C964AE35BBF ] sffdisk
C:\Windows\system32\drivers\sffdisk.sys
08:48:44.0561 0540 sffdisk - ok
08:48:44.0577 0540 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc
C:\Windows\system32\drivers\sffp_mmc.sys
08:48:44.0577 0540 sffp_mmc - ok
08:48:44.0577 0540 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd
C:\Windows\system32\drivers\sffp_sd.sys
08:48:44.0577 0540 sffp_sd - ok
08:48:44.0593 0540 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy
C:\Windows\system32\drivers\sfloppy.sys
08:48:44.0593 0540 sfloppy - ok
08:48:44.0624 0540 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess
C:\Windows\System32\ipnathlp.dll
08:48:44.0624 0540 SharedAccess - ok
08:48:44.0639 0540 [ AAF932B4011D14052955D4B212A4DA8D ]
ShellHWDetection C:\Windows\System32\shsvcs.dll
08:48:44.0655 0540 ShellHWDetection - ok
08:48:44.0671 0540 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2
C:\Windows\system32\drivers\SiSRaid2.sys
08:48:44.0671 0540 SiSRaid2 - ok
08:48:44.0686 0540 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4
C:\Windows\system32\drivers\sisraid4.sys
08:48:44.0686 0540 SiSRaid4 - ok
08:48:44.0702 0540 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb
C:\Windows\system32\DRIVERS\smb.sys
08:48:44.0717 0540 Smb - ok
08:48:44.0733 0540 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP
C:\Windows\System32\snmptrap.exe
08:48:44.0733 0540 SNMPTRAP - ok
08:48:44.0749 0540 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr
C:\Windows\system32\drivers\spldr.sys
08:48:44.0749 0540 spldr - ok
08:48:44.0780 0540 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler
C:\Windows\System32\spoolsv.exe
08:48:44.0795 0540 Spooler - ok
08:48:44.0873 0540 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc
C:\Windows\system32\sppsvc.exe
08:48:44.0936 0540 sppsvc - ok
08:48:44.0951 0540 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify
C:\Windows\system32\sppuinotify.dll
08:48:44.0951 0540 sppuinotify - ok
08:48:44.0998 0540 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv
C:\Windows\system32\DRIVERS\srv.sys
08:48:44.0998 0540 srv - ok
08:48:45.0014 0540 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2
C:\Windows\system32\DRIVERS\srv2.sys
08:48:45.0014 0540 srv2 - ok
08:48:45.0029 0540 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet
C:\Windows\system32\DRIVERS\srvnet.sys
08:48:45.0029 0540 srvnet - ok
08:48:45.0061 0540 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV
C:\Windows\System32\ssdpsrv.dll
08:48:45.0061 0540 SSDPSRV - ok
08:48:45.0076 0540 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc
C:\Windows\system32\sstpsvc.dll
08:48:45.0076 0540 SstpSvc - ok
08:48:45.0092 0540 [ F3817967ED533D08327DC73BC4D5542A ] stexstor
C:\Windows\system32\drivers\stexstor.sys
08:48:45.0092 0540 stexstor - ok
08:48:45.0139 0540 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc
C:\Windows\System32\wiaservc.dll
08:48:45.0154 0540 stisvc - ok
08:48:45.0185 0540 [ 7785DC213270D2FC066538DAF94087E7 ] storflt
C:\Windows\system32\drivers\vmstorfl.sys
08:48:45.0185 0540 storflt - ok
08:48:45.0201 0540 [ C40841817EF57D491F22EB103DA587CC ] StorSvc
C:\Windows\system32\storsvc.dll
08:48:45.0201 0540 StorSvc - ok
08:48:45.0232 0540 [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc
C:\Windows\system32\drivers\storvsc.sys
08:48:45.0232 0540 storvsc - ok
08:48:45.0232 0540 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum
C:\Windows\system32\DRIVERS\swenum.sys
08:48:45.0232 0540 swenum - ok
08:48:45.0263 0540 [ E08E46FDD841B7184194011CA1955A0B ] swprv
C:\Windows\System32\swprv.dll
08:48:45.0279 0540 swprv - ok
08:48:45.0326 0540 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain
C:\Windows\system32\sysmain.dll
08:48:45.0357 0540 SysMain - ok
08:48:45.0388 0540 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ]
TabletInputService C:\Windows\System32\TabSvc.dll
08:48:45.0388 0540 TabletInputService - ok
08:48:45.0404 0540 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv
C:\Windows\System32\tapisrv.dll
08:48:45.0404 0540 TapiSrv - ok
08:48:45.0419 0540 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS
C:\Windows\System32\tbssvc.dll
08:48:45.0419 0540 TBS - ok
08:48:45.0482 0540 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip
C:\Windows\system32\drivers\tcpip.sys
08:48:45.0529 0540 Tcpip - ok
08:48:45.0575 0540 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6
C:\Windows\system32\DRIVERS\tcpip.sys
08:48:45.0575 0540 TCPIP6 - ok
08:48:45.0622 0540 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg
C:\Windows\system32\drivers\tcpipreg.sys
08:48:45.0622 0540 tcpipreg - ok
08:48:45.0638 0540 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE
C:\Windows\system32\drivers\tdpipe.sys
08:48:45.0638 0540 TDPIPE - ok
08:48:45.0669 0540 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP
C:\Windows\system32\drivers\tdtcp.sys
08:48:45.0669 0540 TDTCP - ok
08:48:45.0700 0540 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx
C:\Windows\system32\DRIVERS\tdx.sys
08:48:45.0700 0540 tdx - ok
08:48:45.0716 0540 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD
C:\Windows\system32\DRIVERS\termdd.sys
08:48:45.0716 0540 TermDD - ok
08:48:45.0747 0540 [ 2E648163254233755035B46DD7B89123 ] TermService
C:\Windows\System32\termsrv.dll
08:48:45.0763 0540 TermService - ok
08:48:45.0763 0540 [ F0344071948D1A1FA732231785A0664C ] Themes
C:\Windows\system32\themeservice.dll
08:48:45.0778 0540 Themes - ok
08:48:45.0778 0540 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER
C:\Windows\system32\mmcss.dll
08:48:45.0778 0540 THREADORDER - ok
08:48:45.0794 0540 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks
C:\Windows\System32\trkwks.dll
08:48:45.0794 0540 TrkWks - ok
08:48:45.0841 0540 [ 773212B2AAA24C1E31F10246B15B276C ]
TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
08:48:45.0841 0540 TrustedInstaller - ok
08:48:45.0856 0540 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv
C:\Windows\system32\DRIVERS\tssecsrv.sys
08:48:45.0856 0540 tssecsrv - ok
08:48:45.0872 0540 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt
C:\Windows\system32\drivers\tsusbflt.sys
08:48:45.0872 0540 TsUsbFlt - ok
08:48:45.0872 0540 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD
C:\Windows\system32\drivers\TsUsbGD.sys
08:48:45.0887 0540 TsUsbGD - ok
08:48:45.0903 0540 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel
C:\Windows\system32\DRIVERS\tunnel.sys
08:48:45.0903 0540 tunnel - ok
08:48:45.0919 0540 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35
C:\Windows\system32\drivers\uagp35.sys
08:48:45.0919 0540 uagp35 - ok
08:48:45.0934 0540 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs
C:\Windows\system32\DRIVERS\udfs.sys
08:48:45.0934 0540 udfs - ok
08:48:45.0965 0540 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect
C:\Windows\system32\UI0Detect.exe
08:48:45.0981 0540 UI0Detect - ok
08:48:45.0981 0540 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx
C:\Windows\system32\drivers\uliagpkx.sys
08:48:45.0981 0540 uliagpkx - ok
08:48:46.0012 0540 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus
C:\Windows\system32\DRIVERS\umbus.sys
08:48:46.0012 0540 umbus - ok
08:48:46.0012 0540 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass
C:\Windows\system32\drivers\umpass.sys
08:48:46.0012 0540 UmPass - ok
08:48:46.0043 0540 [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService
C:\Windows\System32\umrdp.dll
08:48:46.0059 0540 UmRdpService - ok
08:48:46.0075 0540 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost
C:\Windows\System32\upnphost.dll
08:48:46.0075 0540 upnphost - ok
08:48:46.0090 0540 [ 481DFF26B4DCA8F4CBAC1F7DCE1D6829 ] usbccgp
C:\Windows\system32\DRIVERS\usbccgp.sys
08:48:46.0090 0540 usbccgp - ok
08:48:46.0106 0540 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir
C:\Windows\system32\drivers\usbcir.sys
08:48:46.0106 0540 usbcir - ok
08:48:46.0137 0540 [ 74EE782B1D9C241EFE425565854C661C ] usbehci
C:\Windows\system32\DRIVERS\usbehci.sys
08:48:46.0137 0540 usbehci - ok
08:48:46.0153 0540 [ DC96BD9CCB8403251BCF25047573558E ] usbhub
C:\Windows\system32\DRIVERS\usbhub.sys
08:48:46.0153 0540 usbhub - ok
08:48:46.0168 0540 [ 58E546BBAF87664FC57E0F6081E4F609 ] usbohci
C:\Windows\system32\drivers\usbohci.sys
08:48:46.0168 0540 usbohci - ok
08:48:46.0184 0540 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint
C:\Windows\system32\DRIVERS\usbprint.sys
08:48:46.0199 0540 usbprint - ok
08:48:46.0215 0540 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan
C:\Windows\system32\DRIVERS\usbscan.sys
08:48:46.0215 0540 usbscan - ok
08:48:46.0231 0540 [ D76510CFA0FC09023077F22C2F979D86 ] USBSTOR
C:\Windows\system32\DRIVERS\USBSTOR.SYS
08:48:46.0231 0540 USBSTOR - ok
08:48:46.0246 0540 [ 81FB2216D3A60D1284455D511797DB3D ] usbuhci
C:\Windows\system32\DRIVERS\usbuhci.sys
08:48:46.0246 0540 usbuhci - ok
08:48:46.0277 0540 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo
C:\Windows\system32\Drivers\usbvideo.sys
08:48:46.0293 0540 usbvideo - ok
08:48:46.0293 0540 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms
C:\Windows\System32\uxsms.dll
08:48:46.0293 0540 UxSms - ok
08:48:46.0309 0540 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc
C:\Windows\system32\lsass.exe
08:48:46.0309 0540 VaultSvc - ok
08:48:46.0324 0540 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot
C:\Windows\system32\drivers\vdrvroot.sys
08:48:46.0324 0540 vdrvroot - ok
08:48:46.0355 0540 [ 8D6B481601D01A456E75C3210F1830BE ] vds
C:\Windows\System32\vds.exe
08:48:46.0371 0540 vds - ok
08:48:46.0387 0540 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga
C:\Windows\system32\DRIVERS\vgapnp.sys
08:48:46.0387 0540 vga - ok
08:48:46.0418 0540 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave
C:\Windows\System32\drivers\vga.sys
08:48:46.0418 0540 VgaSave - ok
08:48:46.0433 0540 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp
C:\Windows\system32\drivers\vhdmp.sys
08:48:46.0433 0540 vhdmp - ok
08:48:46.0449 0540 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide
C:\Windows\system32\drivers\viaide.sys
08:48:46.0449 0540 viaide - ok
08:48:46.0480 0540 [ 86EA3E79AE350FEA5331A1303054005F ] vmbus
C:\Windows\system32\drivers\vmbus.sys
08:48:46.0480 0540 vmbus - ok
08:48:46.0496 0540 [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID
C:\Windows\system32\drivers\VMBusHID.sys
08:48:46.0511 0540 VMBusHID - ok
08:48:46.0527 0540 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr
C:\Windows\system32\drivers\volmgr.sys
08:48:46.0527 0540 volmgr - ok
08:48:46.0543 0540 [ A255814907C89BE58B79EF2F189B843B ] volmgrx
C:\Windows\system32\drivers\volmgrx.sys
08:48:46.0543 0540 volmgrx - ok
08:48:46.0558 0540 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap
C:\Windows\system32\drivers\volsnap.sys
08:48:46.0574 0540 volsnap - ok
08:48:46.0589 0540 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid
C:\Windows\system32\drivers\vsmraid.sys
08:48:46.0589 0540 vsmraid - ok
08:48:46.0636 0540 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS
C:\Windows\system32\vssvc.exe
08:48:46.0683 0540 VSS - ok
08:48:46.0683 0540 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus
C:\Windows\system32\DRIVERS\vwifibus.sys
08:48:46.0683 0540 vwifibus - ok
08:48:46.0714 0540 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt
C:\Windows\system32\DRIVERS\vwififlt.sys
08:48:46.0714 0540 vwififlt - ok
08:48:46.0730 0540 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time
C:\Windows\system32\w32time.dll
08:48:46.0730 0540 W32Time - ok
08:48:46.0745 0540 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen
C:\Windows\system32\drivers\wacompen.sys
08:48:46.0745 0540 WacomPen - ok
08:48:46.0761 0540 [ 356AFD78A6ED4457169241AC3965230C ] WANARP
C:\Windows\system32\DRIVERS\wanarp.sys
08:48:46.0761 0540 WANARP - ok
08:48:46.0777 0540 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6
C:\Windows\system32\DRIVERS\wanarp.sys
08:48:46.0777 0540 Wanarpv6 - ok
08:48:46.0839 0540 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc
C:\Windows\system32\Wat\WatAdminSvc.exe
08:48:46.0870 0540 WatAdminSvc - ok
08:48:46.0901 0540 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine
C:\Windows\system32\wbengine.exe
08:48:46.0948 0540 wbengine - ok
08:48:46.0964 0540 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc
C:\Windows\System32\wbiosrvc.dll
08:48:46.0964 0540 WbioSrvc - ok
08:48:46.0995 0540 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc
C:\Windows\System32\wcncsvc.dll
08:48:46.0995 0540 wcncsvc - ok
08:48:47.0011 0540 [ 20F7441334B18CEE52027661DF4A6129 ]
WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
08:48:47.0011 0540 WcsPlugInService - ok
08:48:47.0026 0540 [ 72889E16FF12BA0F235467D6091B17DC ] Wd
C:\Windows\system32\drivers\wd.sys
08:48:47.0026 0540 Wd - ok
08:48:47.0073 0540 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000
C:\Windows\system32\drivers\Wdf01000.sys
08:48:47.0089 0540 Wdf01000 - ok
08:48:47.0104 0540 [ BF1FC3F79B863C914687A737C2F3D681 ]
WdiServiceHost C:\Windows\system32\wdi.dll
08:48:47.0104 0540 WdiServiceHost - ok
08:48:47.0104 0540 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost
C:\Windows\system32\wdi.dll
08:48:47.0104 0540 WdiSystemHost - ok
08:48:47.0135 0540 WebCake Desktop Updater - ok
08:48:47.0151 0540 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient
C:\Windows\System32\webclnt.dll
08:48:47.0167 0540 WebClient - ok
08:48:47.0182 0540 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc
C:\Windows\system32\wecsvc.dll
08:48:47.0182 0540 Wecsvc - ok
08:48:47.0198 0540 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport
C:\Windows\System32\wercplsupport.dll
08:48:47.0213 0540 wercplsupport - ok
08:48:47.0213 0540 [ 6D137963730144698CBD10F202E9F251 ] WerSvc
C:\Windows\System32\WerSvc.dll
08:48:47.0229 0540 WerSvc - ok
08:48:47.0245 0540 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf
C:\Windows\system32\DRIVERS\wfplwf.sys
08:48:47.0245 0540 WfpLwf - ok
08:48:47.0260 0540 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount
C:\Windows\system32\drivers\wimmount.sys
08:48:47.0260 0540 WIMMount - ok
08:48:47.0276 0540 WinDefend - ok
08:48:47.0276 0540 WinHttpAutoProxySvc - ok
08:48:47.0338 0540 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt
C:\Windows\system32\wbem\WMIsvc.dll
08:48:47.0338 0540 Winmgmt - ok
08:48:47.0401 0540 [ BCB1310604AA415C4508708975B3931E ] WinRM
C:\Windows\system32\WsmSvc.dll
08:48:47.0432 0540 WinRM - ok
08:48:47.0479 0540 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb
C:\Windows\system32\DRIVERS\WinUsb.sys
08:48:47.0479 0540 WinUsb - ok
08:48:47.0525 0540 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc
C:\Windows\System32\wlansvc.dll
08:48:47.0541 0540 Wlansvc - ok
08:48:47.0557 0540 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi
C:\Windows\system32\DRIVERS\wmiacpi.sys
08:48:47.0557 0540 WmiAcpi - ok
08:48:47.0588 0540 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv
C:\Windows\system32\wbem\WmiApSrv.exe
08:48:47.0588 0540 wmiApSrv - ok
08:48:47.0588 0540 WMPNetworkSvc - ok
08:48:47.0619 0540 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc
C:\Windows\System32\wpcsvc.dll
08:48:47.0619 0540 WPCSvc - ok
08:48:47.0635 0540 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum
C:\Windows\system32\wpdbusenum.dll
08:48:47.0635 0540 WPDBusEnum - ok
08:48:47.0650 0540 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl
C:\Windows\system32\drivers\ws2ifsl.sys
08:48:47.0650 0540 ws2ifsl - ok
08:48:47.0666 0540 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc
C:\Windows\System32\wscsvc.dll
08:48:47.0666 0540 wscsvc - ok
08:48:47.0681 0540 WSearch - ok
08:48:47.0759 0540 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv
C:\Windows\system32\wuaueng.dll
08:48:47.0806 0540 wuauserv - ok
08:48:47.0837 0540 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf
C:\Windows\system32\drivers\WudfPf.sys
08:48:47.0837 0540 WudfPf - ok
08:48:47.0853 0540 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd
C:\Windows\system32\DRIVERS\WUDFRd.sys
08:48:47.0869 0540 WUDFRd - ok
08:48:47.0900 0540 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc
C:\Windows\System32\WUDFSvc.dll
08:48:47.0900 0540 wudfsvc - ok
08:48:47.0915 0540 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc
C:\Windows\System32\wwansvc.dll
08:48:47.0915 0540 WwanSvc - ok
08:48:47.0931 0540 ================ Scan global ===============================
08:48:47.0962 0540 [ BA0CD8C393E8C9F83354106093832C7B ]
C:\Windows\system32\basesrv.dll
08:48:47.0978 0540 [ 0C27239FEA4DB8A2AAC9E502186B7264 ]
C:\Windows\system32\winsrv.dll
08:48:47.0993 0540 [ 0C27239FEA4DB8A2AAC9E502186B7264 ]
C:\Windows\system32\winsrv.dll
08:48:48.0025 0540 [ D6160F9D869BA3AF0B787F971DB56368 ]
C:\Windows\system32\sxssrv.dll
08:48:48.0040 0540 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ]
C:\Windows\system32\services.exe
08:48:48.0056 0540 [Global] - ok
08:48:48.0056 0540 ================ Scan MBR ==================================
08:48:48.0056 0540 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
08:48:48.0274 0540 \Device\Harddisk0\DR0 - ok
08:48:48.0274 0540 ================ Scan VBR ==================================
08:48:48.0274 0540 [ 3AEF3D88BA7A0C8296D06365FC6F50B8 ]
\Device\Harddisk0\DR0\Partition1
08:48:48.0274 0540 \Device\Harddisk0\DR0\Partition1 - ok
08:48:48.0290 0540 ============================================================
08:48:48.0290 0540 Scan finished
08:48:48.0290 0540 ============================================================
08:48:48.0290 2036 Detected object count: 1
08:48:48.0290 2036 Actual detected object count: 1
08:50:27.0537 2036
C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
- copied to quarantine
08:50:27.0537 2036
HKLM\SYSTEM\ControlSet001\services\BrowserDefendert - will be deleted
on reboot
08:50:27.0553 2036
HKLM\SYSTEM\ControlSet002\services\BrowserDefendert - will be deleted
on reboot
08:50:27.0709 2036
C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
- will be deleted on reboot
08:50:27.0709 2036 BrowserDefendert ( LockedFile.Multi.Generic ) -
User select action: Delete
08:52:32.0852 0584 Deinitialize success