lisa58 Posted November 18, 2011 ID:496002 Share Posted November 18, 2011 dds.txtattach.zipI ran Malwarebytes and it quarantined a lot of files. Howeve, I seem to be missing a lot of thins like my disk scan and defragmenter. What do I do now?.DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_02Run by Owner at 15:50:24 on 2011-11-18Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.894.563 [GMT -6:00].AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}.============== Running Processes ===============.C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exec:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exeC:\WINDOWS\system32\HPZipm12.exeC:\WINDOWS\system32\svchost.exe -k imgsvcC:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Java\jre1.6.0_02\bin\jusched.exeC:\WINDOWS\SOUNDMAN.EXEC:\WINDOWS\system32\hphmon05.exeC:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exeC:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exeC:\Program Files\HP\hpcoretech\hpcmpmgr.exeC:\WINDOWS\ehome\ehtray.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Microsoft Security Client\msseces.exeC:\program files\real\realplayer\update\realsched.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Messenger\msmsgs.exeC:\Program Files\Gamesbar\SearchEngineProtection.exeC:\WINDOWS\system32\wuauclt.exeC:\WINDOWS\System32\svchost.exe -k HTTPFilterC:\Program Files\iPod\bin\iPodService.exeC:\Program Files\Yahoo!\Messenger\ymsgr_tray.exeC:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe.============== Pseudo HJT Report ===============.uSearch Bar = hxxp://www.yahoo.com/search/ie.htmluStart Page = hxxp://www.google.com/uSearch Page = hxxp://search.imesh.com/sidebar.html?src=ssbuSearchMigratedDefaultURL = hxxp://www.Google.com/uDefault_Search_URL = hxxp://www.Google.com/mDefault_Search_URL = hxxp://www.Google.com/mSearch Page = hxxp://www.Google.com/mStart Page = hxxp://www.yahoo.comuInternet Settings,ProxyOverride = *.localuSearchAssistant = hxxp://www.Google.com/mSearchURL = hxxp://www.Google.com/mSearchAssistant = hxxp://search.imesh.com/sidebar.html?src=ssbuURLSearchHooks: UrlSearchHook Class: {00000000-6e41-4fd3-8538-502f5495e5fc} - c:\program files\ask.com\GenericAskToolbar.dlluURLSearchHooks: FCToolbarURLSearchHook Class: {da879c19-9088-418b-a63a-2e6fb294eaf0} - c:\program files\aadvantage eshoppingsm toolbar\Helper.dlluURLSearchHooks: H - No FilemURLSearchHooks: H - No FileBHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn1\yt.dllBHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll{19b9cd57-3043-442f-8dff-f9924af056bd}BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dllBHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dllBHO: AAdvantage eShoppingSM Toolbar BHO: {5712a6bb-b6c8-4e52-a152-1ba741c9a6a2} - c:\program files\aadvantage eshoppingsm toolbar\Toolbar.dllBHO: Yahoo! IE Services Button: {5bab4b5b-68bc-4b02-94d6-2fc0de4a7897} - c:\program files\yahoo!\common\yiesrvc.dllBHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_02\bin\ssv.dllBHO: {A8FB8EB3-183B-4598-924D-86F0E5E37085} - No FileBHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dllBHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.7.6406.1642\swg.dllBHO: GamesBarBHO Class: {cb0d163c-e9f4-4236-9496-0597e24b23a5} - c:\program files\gamesbar\2.0.1.67\oberontb.dllBHO: {cb123249-5059-40db-a51c-728222fccd8e} - No FileBHO: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll{fc8c94fa-2bdd-4395-b59d-df429a34eb85}BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn1\YTSingleInstance.dllTB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn1\yt.dllTB: GamesBar: {6f282b65-56bf-4bd1-a8b2-a4449a05863d} - c:\program files\gamesbar\2.0.1.67\oberontb.dllTB: AAdvantage eShoppingSM Toolbar: {85741f1d-ed47-4dcf-9109-07d10213c4d0} - c:\program files\aadvantage eshoppingsm toolbar\Toolbar.dllTB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dllTB: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dllTB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No FileuRun: [ctfmon.exe] c:\windows\system32\ctfmon.exeuRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /backgrounduRun: [Messenger (Yahoo!)] "c:\progra~1\yahoo!\messen~1\YahooMessenger.exe" -quietuRun: [searchEngineProtection] c:\program files\gamesbar\SearchEngineProtection.exeuRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exemRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kmRun: [sunJavaUpdateSched] "c:\program files\java\jre1.6.0_02\bin\jusched.exe"mRun: [soundMan] SOUNDMAN.EXEmRun: [HPHUPD05] c:\program files\hewlett-packard\\{5372b9a6-6e51-4f90-9b40-e0a3b8475c4e}\hphupd05.exemRun: [HPHmon05] c:\windows\system32\hphmon05.exemRun: [HPDJ Taskbar Utility] c:\windows\system32\spool\drivers\w32x86\3\hpztsb09.exemRun: [HP Software Update] c:\program files\hewlett-packard\hp software update\HPWuSchd2.exemRun: [HP Component Manager] "c:\program files\hp\hpcoretech\hpcmpmgr.exe"mRun: [ehTray] c:\windows\ehome\ehtray.exemRun: [eFax 4.2] "c:\program files\efax messenger 4.2\J2GDllCmd.exe" /RmRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottimemRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkeymRun: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osbootmRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttraydRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -tStartupFolder: c:\docume~1\owner\startm~1\programs\startup\limewire on startup.lnk - c:\program files\limewire\LimeWire.exeIE: &Yahoo! Search - file:///c:\program files\yahoo!\Common/ycsrch.htmIE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.htmlIE: Yahoo! &Dictionary - file:///c:\program files\yahoo!\Common/ycdict.htmIE: Yahoo! &Maps - file:///c:\program files\yahoo!\Common/ycmap.htmIE: Yahoo! &SMS - file:///c:\program files\yahoo!\Common/ycsms.htmIE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exeIE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exeIE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_02\bin\ssv.dllIE: {1A93C934-025B-4c3a-B38E-9654A7003239} - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - c:\program files\gamesbar\2.0.1.67\oberontb.dllIE: {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - c:\program files\yahoo!\common\yiesrvc.dllIE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLLTrusted Zone: americanexpress.com\wwwTrusted Zone: associatedbank.com\wwwTrusted Zone: boxtops4education.com\wwwTrusted Zone: linksynergy.comTrusted Zone: pogo.com\wwwTrusted Zone: state.wi.us\wiscjobsTrusted Zone: turbotax.comDPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cabDPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - hxxp://www.drivecleaner.com/.freeware/installdrivecleanerstart.cabDPF: {31435657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cabDPF: {4EFA317A-8569-4788-B175-5BAF9731A549} - hxxps://www.microsoft.com/resources/virtuallabs/ActiveX/VMRCActiveXClient1.cabDPF: {93EFDAB8-8800-4896-B428-76F943140E1B} - hxxp://www.consumerinput.com.edgesuite.net/panel/maple/dcainst.cabDPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} - hxxp://a19.g.akamai.net/7/19/7125/4056/ftp.coupons.com/r3302/Coupons.cabDPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - hxxp://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cabDPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cabDPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cabTCP: NameServer = 208.67.220.220,208.67.222.222 TCP: DhcpNameServer = 10.0.0.1TCP: Interfaces\{8BA4481C-D190-47CA-A479-1DF41738DB49} : DhcpNameServer = 10.0.0.1Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - c:\program files\hp\hpcoretech\comp\hpuiprot.dllNotify: AtiExtEvent - Ati2evxx.dllNotify: gdiwxp - gdiwxp.dllNotify: pmnOEurp - pmnOEurp.dllSTS: {db763ed8-100a-481b-8913-50a2f41dcdc3}: exegeses{19b9cd57-3043-442f-8dff-f9924af056bd}LSA: Authentication Packages = msv1_0 nwprovau c:\windows\system32\ddcBQijK.============= SERVICES / DRIVERS ===============.R0 BtHidBus;Bluetooth HID Bus Service;c:\windows\system32\drivers\BtHidBus.sys [2009-6-17 20744]R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2009-6-18 165648]R1 MpKsl46f5b3dd;MpKsl46f5b3dd;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{da053c66-2d6d-49b6-811a-c858a241f8d6}\MpKsl46f5b3dd.sys [2011-11-17 28752]R1 MpKsl4d39c53c;MpKsl4d39c53c;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{da053c66-2d6d-49b6-811a-c858a241f8d6}\MpKsl4d39c53c.sys [2011-11-17 28752]R1 MpKslabd28ac4;MpKslabd28ac4;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{da053c66-2d6d-49b6-811a-c858a241f8d6}\MpKslabd28ac4.sys [2011-11-17 28752]R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-11-5 366152]R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-11-5 22216]S1 gdiw2k;GDI kernel srvc; [x]S1 hoiqslbv;hoiqslbv;\??\c:\windows\system32\drivers\hoiqslbv.sys --> c:\windows\system32\drivers\hoiqslbv.sys [?]S1 MpKsl1053e1c2;MpKsl1053e1c2;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3aefff37-2753-474d-ba06-9019f6ff2da0}\mpksl1053e1c2.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3aefff37-2753-474d-ba06-9019f6ff2da0}\MpKsl1053e1c2.sys [?]S1 MpKsl128603ce;MpKsl128603ce;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0a612a94-91a8-46a0-80c4-1c250e6c9306}\mpksl128603ce.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0a612a94-91a8-46a0-80c4-1c250e6c9306}\MpKsl128603ce.sys [?]S1 MpKsl18edb515;MpKsl18edb515;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0956a73a-a855-41d9-9d6d-7b644a96ecae}\mpksl18edb515.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0956a73a-a855-41d9-9d6d-7b644a96ecae}\MpKsl18edb515.sys [?]S1 MpKsl193d2b14;MpKsl193d2b14;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9de97637-e5ff-4862-aaa3-8e0589b88a71}\mpksl193d2b14.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9de97637-e5ff-4862-aaa3-8e0589b88a71}\MpKsl193d2b14.sys [?]S1 MpKsl1ba45776;MpKsl1ba45776;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{40b5ae33-b5c6-4569-93a0-0526e6381de8}\mpksl1ba45776.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{40b5ae33-b5c6-4569-93a0-0526e6381de8}\MpKsl1ba45776.sys [?]S1 MpKsl1c44341c;MpKsl1c44341c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{96d2a7f3-c8a7-48c1-860f-ed0b547a4e6d}\mpksl1c44341c.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{96d2a7f3-c8a7-48c1-860f-ed0b547a4e6d}\MpKsl1c44341c.sys [?]S1 MpKsl1e518544;MpKsl1e518544;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{03ee36ec-ad29-4a98-b643-1b69a4731a92}\mpksl1e518544.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{03ee36ec-ad29-4a98-b643-1b69a4731a92}\MpKsl1e518544.sys [?]S1 MpKsl225d22a0;MpKsl225d22a0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b1e366be-5ef2-4051-b062-7078ba214e62}\mpksl225d22a0.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b1e366be-5ef2-4051-b062-7078ba214e62}\MpKsl225d22a0.sys [?]S1 MpKsl26734daa;MpKsl26734daa;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{78c6770e-2263-4f47-bd1a-e7dceeb30345}\mpksl26734daa.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{78c6770e-2263-4f47-bd1a-e7dceeb30345}\MpKsl26734daa.sys [?]S1 MpKsl27dfd542;MpKsl27dfd542;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8255628b-d6af-41d1-a86c-0e62b8f067a9}\mpksl27dfd542.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8255628b-d6af-41d1-a86c-0e62b8f067a9}\MpKsl27dfd542.sys [?]S1 MpKsl2aa06fd3;MpKsl2aa06fd3;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{96018d4f-44a2-4e57-9147-e2fb42735a64}\mpksl2aa06fd3.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{96018d4f-44a2-4e57-9147-e2fb42735a64}\MpKsl2aa06fd3.sys [?]S1 MpKsl395783ad;MpKsl395783ad;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8f073ec6-d6f8-47b0-bc57-ca38da2141ab}\mpksl395783ad.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8f073ec6-d6f8-47b0-bc57-ca38da2141ab}\MpKsl395783ad.sys [?]S1 MpKsl461ab117;MpKsl461ab117;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b1e366be-5ef2-4051-b062-7078ba214e62}\mpksl461ab117.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b1e366be-5ef2-4051-b062-7078ba214e62}\MpKsl461ab117.sys [?]S1 MpKsl568fd414;MpKsl568fd414;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{31c98713-47c4-4fe4-847f-867782ccb4e3}\mpksl568fd414.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{31c98713-47c4-4fe4-847f-867782ccb4e3}\MpKsl568fd414.sys [?]S1 MpKsl68117935;MpKsl68117935;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{df1e6e2a-0fe9-4241-92cb-089994ea3e96}\mpksl68117935.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{df1e6e2a-0fe9-4241-92cb-089994ea3e96}\MpKsl68117935.sys [?]S1 MpKsl6dc75969;MpKsl6dc75969;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f5921e83-fa82-4d65-86a6-22ccf72e30f1}\mpksl6dc75969.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f5921e83-fa82-4d65-86a6-22ccf72e30f1}\MpKsl6dc75969.sys [?]S1 MpKsl8804e3c8;MpKsl8804e3c8;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4b076487-dc76-4c21-9735-77bcfd84535f}\mpksl8804e3c8.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4b076487-dc76-4c21-9735-77bcfd84535f}\MpKsl8804e3c8.sys [?]S1 MpKsl8e5aeb5b;MpKsl8e5aeb5b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0956a73a-a855-41d9-9d6d-7b644a96ecae}\mpksl8e5aeb5b.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0956a73a-a855-41d9-9d6d-7b644a96ecae}\MpKsl8e5aeb5b.sys [?]S1 MpKsl91b90cc1;MpKsl91b90cc1;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{516507bb-90e7-41c2-9c14-25f14430b4b4}\mpksl91b90cc1.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{516507bb-90e7-41c2-9c14-25f14430b4b4}\MpKsl91b90cc1.sys [?]S1 MpKsl9c78c2b4;MpKsl9c78c2b4;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{02d7820b-f76e-41b6-bdfe-d806ff663b88}\mpksl9c78c2b4.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{02d7820b-f76e-41b6-bdfe-d806ff663b88}\MpKsl9c78c2b4.sys [?]S1 MpKsl9d14898e;MpKsl9d14898e;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5dfd3906-f374-4540-a241-e87f3feb4d03}\mpksl9d14898e.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5dfd3906-f374-4540-a241-e87f3feb4d03}\MpKsl9d14898e.sys [?]S1 MpKsl9d44a0f9;MpKsl9d44a0f9;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b1e366be-5ef2-4051-b062-7078ba214e62}\mpksl9d44a0f9.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b1e366be-5ef2-4051-b062-7078ba214e62}\MpKsl9d44a0f9.sys [?]S1 MpKsla1335bc1;MpKsla1335bc1;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ac31e344-97ec-42f7-b6d0-49fd2622ec4b}\mpksla1335bc1.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ac31e344-97ec-42f7-b6d0-49fd2622ec4b}\MpKsla1335bc1.sys [?]S1 MpKsla9238964;MpKsla9238964;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ac31e344-97ec-42f7-b6d0-49fd2622ec4b}\mpksla9238964.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ac31e344-97ec-42f7-b6d0-49fd2622ec4b}\MpKsla9238964.sys [?]S1 MpKslad7d60bc;MpKslad7d60bc;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{31c1aac8-5c49-4f4f-b300-6b39ec6a0f2c}\mpkslad7d60bc.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{31c1aac8-5c49-4f4f-b300-6b39ec6a0f2c}\MpKslad7d60bc.sys [?]S1 MpKslb1b803d0;MpKslb1b803d0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e68d0f31-693b-4144-9a7b-acb98ca3f918}\mpkslb1b803d0.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e68d0f31-693b-4144-9a7b-acb98ca3f918}\MpKslb1b803d0.sys [?]S1 MpKslb320f895;MpKslb320f895;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a8ddc5b0-264e-435a-99a8-e636c5cfca56}\mpkslb320f895.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a8ddc5b0-264e-435a-99a8-e636c5cfca56}\MpKslb320f895.sys [?]S1 MpKslb907d62f;MpKslb907d62f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8e72f0f0-95fb-4019-a556-5bbabebcc588}\mpkslb907d62f.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8e72f0f0-95fb-4019-a556-5bbabebcc588}\MpKslb907d62f.sys [?]S1 MpKslbc933e7f;MpKslbc933e7f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0e9c6b73-42ec-4632-8379-a677dd4b5e9f}\mpkslbc933e7f.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0e9c6b73-42ec-4632-8379-a677dd4b5e9f}\MpKslbc933e7f.sys [?]S1 MpKslbe40c4b0;MpKslbe40c4b0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{516507bb-90e7-41c2-9c14-25f14430b4b4}\mpkslbe40c4b0.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{516507bb-90e7-41c2-9c14-25f14430b4b4}\MpKslbe40c4b0.sys [?]S1 MpKslcb5a29e0;MpKslcb5a29e0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d024a632-4faa-4163-a8d0-363781ae9318}\mpkslcb5a29e0.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d024a632-4faa-4163-a8d0-363781ae9318}\MpKslcb5a29e0.sys [?]S1 MpKsld616c37b;MpKsld616c37b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c305c6a8-6d21-4f87-bb9d-78ed305c7bce}\mpksld616c37b.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c305c6a8-6d21-4f87-bb9d-78ed305c7bce}\MpKsld616c37b.sys [?]S1 MpKsld7ca0242;MpKsld7ca0242;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2fa158b6-7ce3-4949-833c-ca9d0cd2d5e6}\mpksld7ca0242.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2fa158b6-7ce3-4949-833c-ca9d0cd2d5e6}\MpKsld7ca0242.sys [?]S1 MpKsld99e6c53;MpKsld99e6c53;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{1d4a3193-3910-43db-b8b8-8887f5b1bcb4}\mpksld99e6c53.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{1d4a3193-3910-43db-b8b8-8887f5b1bcb4}\MpKsld99e6c53.sys [?]S1 MpKsle3de4626;MpKsle3de4626;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a957e7a0-b016-46c1-b5b7-d8bb862659fe}\mpksle3de4626.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a957e7a0-b016-46c1-b5b7-d8bb862659fe}\MpKsle3de4626.sys [?]S1 MpKslf22068e3;MpKslf22068e3;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{dd5e06d5-d9fd-490a-b155-ec8fc55190d9}\mpkslf22068e3.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{dd5e06d5-d9fd-490a-b155-ec8fc55190d9}\MpKslf22068e3.sys [?]S1 MpKslf8f79d2e;MpKslf8f79d2e;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{db3fef7b-c81e-428a-b7af-d3ebed105f57}\mpkslf8f79d2e.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{db3fef7b-c81e-428a-b7af-d3ebed105f57}\MpKslf8f79d2e.sys [?]S1 MpKslfbe4fd56;MpKslfbe4fd56;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ac31e344-97ec-42f7-b6d0-49fd2622ec4b}\mpkslfbe4fd56.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ac31e344-97ec-42f7-b6d0-49fd2622ec4b}\MpKslfbe4fd56.sys [?]S1 pifcwnbm;pifcwnbm;\??\c:\windows\system32\drivers\pifcwnbm.sys --> c:\windows\system32\drivers\pifcwnbm.sys [?]S1 zabslmsf;zabslmsf;\??\c:\windows\system32\drivers\zabslmsf.sys --> c:\windows\system32\drivers\zabslmsf.sys [?]S1 zvuueeds;zvuueeds;\??\c:\windows\system32\drivers\zvuueeds.sys --> c:\windows\system32\drivers\zvuueeds.sys [?]S3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\drivers\btnetBus.sys [2009-6-17 29192]S3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\drivers\IvtBtBus.sys [2009-6-17 25480]S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]S3 NPF;WinPcap Packet Driver (NPF);c:\windows\system32\drivers\npf.sys [2010-10-10 50704].=============== Created Last 30 ================.2011-11-18 01:54:52 28752 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{da053c66-2d6d-49b6-811a-c858a241f8d6}\MpKsl46f5b3dd.sys2011-11-17 23:49:33 28752 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{da053c66-2d6d-49b6-811a-c858a241f8d6}\MpKsl4d39c53c.sys2011-11-17 14:07:27 28752 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{da053c66-2d6d-49b6-811a-c858a241f8d6}\MpKslabd28ac4.sys2011-11-17 14:07:01 56200 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{da053c66-2d6d-49b6-811a-c858a241f8d6}\offreg.dll2011-11-17 14:06:54 6668624 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{da053c66-2d6d-49b6-811a-c858a241f8d6}\mpengine.dll2011-11-11 01:46:01 575520 ----a-w- c:\windows\system32\PerfStringBackup.TMP2011-11-10 06:18:29 -------- d-----w- c:\windows\system32\drivers\nss\0306000.01F2011-11-10 06:18:29 -------- d-----w- c:\windows\system32\drivers\NSS2011-11-10 06:18:29 -------- d-----w- c:\program files\Norton Security Scan2011-11-10 06:18:29 -------- d-----w- c:\documents and settings\all users\application data\Norton2011-11-10 06:18:25 -------- d-----w- c:\program files\NortonInstaller2011-11-10 06:18:25 -------- d-----w- c:\documents and settings\all users\application data\NortonInstaller2011-11-10 04:17:51 -------- d-----w- c:\windows\system32\Adobe2011-11-07 22:03:27 -------- d-----w- c:\documents and settings\owner\local settings\application data\Yahoo!2011-11-05 22:39:03 -------- d-----w- c:\documents and settings\owner\application data\Malwarebytes2011-11-05 21:34:20 -------- d-----w- c:\documents and settings\all users\application data\Malwarebytes2011-11-05 21:34:17 22216 ----a-w- c:\windows\system32\drivers\mbam.sys2011-11-05 21:34:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware.==================== Find3M ====================.2011-10-15 02:38:39 499712 ---ha-w- c:\windows\system32\msvcp71.dll2011-09-26 16:41:20 611328 ---ha-w- c:\windows\system32\uiautomationcore.dll2011-09-26 16:41:20 220160 ---ha-w- c:\windows\system32\oleacc.dll2011-09-26 16:41:14 20480 ---ha-w- c:\windows\system32\oleaccrc.dll2011-09-17 22:09:59 404640 ---ha-w- c:\windows\system32\FlashPlayerCPLApp.cpl2011-09-09 09:12:13 599040 ---ha-w- c:\windows\system32\crypt32.dll2011-09-06 13:20:51 1858944 ---ha-w- c:\windows\system32\win32k.sys2011-08-22 23:48:55 916480 ---ha-w- c:\windows\system32\wininet.dll2011-08-22 23:48:54 43520 ---ha-w- c:\windows\system32\licmgr10.dll2011-08-22 23:48:54 1469440 ---h--w- c:\windows\system32\inetcpl.cpl2011-08-22 11:56:39 385024 ---ha-w- c:\windows\system32\html.iec2008-05-26 02:27:53 262144 ----a-w- c:\program files\Uninstall Ask Toolbar.dll.=================== ROOTKIT ====================.Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.netWindows 5.1.2600 .CreateFile("\\.\PHYSICALDRIVE0"): The maximum number of secrets that may be stored in a single system has been exceeded.device: opened successfullyuser: error reading MBR .Disk trace:called modules: ntkrnlpa.exe >>UNKNOWN [0x856EA8E3]<< >>UNKNOWN [0xF551C466]<< _asm { JMP 0x6fe31b83; }1 ntkrnlpa!IofCallDriver[0x804EE130] -> \Device\Harddisk0\DR0[0x8573AAB8]kernel: MBR read successfully_asm { XOR DI, DI; MOV SI, 0x200; MOV SS, DI; MOV SP, 0x7a00; MOV BX, 0x7a0; MOV CX, SI; MOV DS, BX; MOV ES, BX; REP MOVSB ; JMP FAR 0x7a0:0x5f; }user != kernel MBR !!! .============= FINISH: 15:50:38.64 ===============What do I have to do to get a reply? It seems like all the other posts have been replies to, but not mine. Did I do something wrong? Link to post Share on other sites More sharing options...
LDTate Posted November 20, 2011 ID:496463 Share Posted November 20, 2011 Logs will be closed if you haven't replied within 3 days Please don't attach the scans / logs from these scans, use "copy/paste".DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.Doing so could make your pc inoperatible and could require a full reinstall of your OS, losing all your programs and data.Vista and Windows 7 users:1. These tools MUST be run from the executable. (.exe) every time you run them 2. With Admin Rights (Right click, choose "Run as Administrator")Stay with this topic until I give you the all clean post.You might want to print these instructions out.Please download GooredFix from one of the locations below and save it to your DesktopDownload Mirror #1Download Mirror #2Ensure all Firefox windows are closed.To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).When prompted to run the scan, click Yes.It doesn't take long to run, once it is finished move onto the next stepNext:Note: if the Cure option is not there, please select 'Skip'. Please read carefully and follow these steps. Download TDSSKiller and save it to your Desktop.Extract its contents to your desktop.Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.please post the contents of that log TDSSKiller log.Also please describe how your computer behaves at the moment. Link to post Share on other sites More sharing options...
lisa58 Posted November 20, 2011 Author ID:496483 Share Posted November 20, 2011 While running the TDSSKiller, it found a threat, Rootkit.Win32.TDSS.tdl2, but the only options are skip, copy to quarantine, and delete. There is no cure option. Which option do I choose? Link to post Share on other sites More sharing options...
lisa58 Posted November 20, 2011 Author ID:496524 Share Posted November 20, 2011 Sorry, I missed the line that said to skip. Here is the log file.09:22:46.0526 19928 TDSS rootkit removing tool 2.6.19.0 Nov 16 2011 12:18:5009:22:46.0995 19928 ============================================================09:22:46.0995 19928 Current date / time: 2011/11/20 09:22:46.099509:22:46.0995 19928 SystemInfo:09:22:46.0995 19928 09:22:46.0995 19928 OS Version: 5.1.2600 ServicePack: 3.009:22:46.0995 19928 Product type: Workstation09:22:46.0995 19928 ComputerName: EMACHINE09:22:46.0995 19928 UserName: Owner09:22:46.0995 19928 Windows directory: C:\WINDOWS09:22:46.0995 19928 System windows directory: C:\WINDOWS09:22:46.0995 19928 Processor architecture: Intel x8609:22:46.0995 19928 Number of processors: 109:22:46.0995 19928 Page size: 0x100009:22:46.0995 19928 Boot type: Normal boot09:22:46.0995 19928 ============================================================09:22:48.0808 19928 Initialize success09:22:57.0901 15668 ============================================================09:22:57.0901 15668 Scan started09:22:57.0901 15668 Mode: Manual; 09:22:57.0901 15668 ============================================================09:22:58.0276 15668 Abiosdsk - ok09:22:58.0604 15668 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS09:22:58.0604 15668 abp480n5 - ok09:22:58.0979 15668 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys09:22:58.0979 15668 ACPI - ok09:22:59.0307 15668 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys09:22:59.0307 15668 ACPIEC - ok09:22:59.0635 15668 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys09:22:59.0635 15668 adpu160m - ok09:23:00.0073 15668 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys09:23:00.0073 15668 aec - ok09:23:00.0432 15668 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys09:23:00.0448 15668 AFD - ok09:23:00.0776 15668 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys09:23:00.0791 15668 agp440 - ok09:23:01.0119 15668 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys09:23:01.0135 15668 agpCPQ - ok09:23:01.0448 15668 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys09:23:01.0448 15668 Aha154x - ok09:23:01.0760 15668 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys09:23:01.0760 15668 aic78u2 - ok09:23:02.0088 15668 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys09:23:02.0088 15668 aic78xx - ok09:23:02.0526 15668 ALCXWDM (95aa37bec6c72c277c2caeaee736dd2d) C:\WINDOWS\system32\drivers\ALCXWDM.SYS09:23:02.0604 15668 ALCXWDM - ok09:23:02.0932 15668 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys09:23:02.0932 15668 AliIde - ok09:23:03.0276 15668 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys09:23:03.0276 15668 alim1541 - ok09:23:03.0635 15668 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys09:23:03.0635 15668 amdagp - ok09:23:03.0947 15668 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys09:23:03.0963 15668 amsint - ok09:23:04.0338 15668 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys09:23:04.0354 15668 Arp1394 - ok09:23:04.0651 15668 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys09:23:04.0651 15668 asc - ok09:23:04.0979 15668 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys09:23:04.0979 15668 asc3350p - ok09:23:05.0275 15668 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys09:23:05.0275 15668 asc3550 - ok09:23:05.0650 15668 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys09:23:05.0650 15668 AsyncMac - ok09:23:06.0010 15668 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys09:23:06.0010 15668 atapi - ok09:23:06.0338 15668 Atdisk - ok09:23:06.0729 15668 ati2mtag (8759322ffc1a50569c1e5528ee8026b7) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys09:23:06.0744 15668 ati2mtag - ok09:23:07.0104 15668 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys09:23:07.0104 15668 Atmarpc - ok09:23:07.0432 15668 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys09:23:07.0432 15668 audstub - ok09:23:07.0760 15668 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys09:23:07.0760 15668 Beep - ok09:23:08.0088 15668 BT - ok09:23:08.0400 15668 Btcsrusb - ok09:23:08.0744 15668 BtHidBus (ac2e61482a57ea50730f8c2679f37040) C:\WINDOWS\system32\Drivers\BtHidBus.sys09:23:08.0744 15668 BtHidBus - ok09:23:09.0072 15668 btnetBUs (6783c5c81bfb640469468a80dfa1ccb3) C:\WINDOWS\system32\Drivers\btnetBus.sys09:23:09.0072 15668 btnetBUs - ok09:23:09.0400 15668 BVRPMPR5 (248dfa5762dde38dfddbbd44149e9d7a) C:\WINDOWS\system32\drivers\BVRPMPR5.SYS09:23:09.0400 15668 BVRPMPR5 - ok09:23:09.0697 15668 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys09:23:09.0697 15668 cbidf - ok09:23:09.0994 15668 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys09:23:09.0994 15668 cbidf2k - ok09:23:10.0431 15668 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys09:23:10.0431 15668 cd20xrnt - ok09:23:10.0775 15668 CdaD10BA (841cefab8228ee691705d059e7f21c47) C:\WINDOWS\system32\drivers\CdaD10BA.SYS09:23:10.0775 15668 CdaD10BA - ok09:23:11.0088 15668 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys09:23:11.0088 15668 Cdaudio - ok09:23:11.0447 15668 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys09:23:11.0447 15668 Cdfs - ok09:23:11.0791 15668 Cdr4_xp (837eef65af62d4e8a37c41d3879f7274) C:\WINDOWS\system32\drivers\Cdr4_xp.sys09:23:11.0791 15668 Cdr4_xp - ok09:23:12.0119 15668 Cdralw2k (579da2f9f5401f55dae2cf8779d61dfc) C:\WINDOWS\system32\drivers\Cdralw2k.sys09:23:12.0119 15668 Cdralw2k - ok09:23:12.0447 15668 Cdrom (4b0a100eaf5c49ef3cca8c641431eacc) C:\WINDOWS\system32\DRIVERS\cdrom.sys09:23:12.0447 15668 Cdrom - ok09:23:12.0744 15668 Changer - ok09:23:13.0103 15668 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys09:23:13.0103 15668 CmdIde - ok09:23:13.0463 15668 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys09:23:13.0463 15668 Cpqarray - ok09:23:13.0822 15668 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys09:23:13.0838 15668 dac2w2k - ok09:23:14.0197 15668 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys09:23:14.0197 15668 dac960nt - ok09:23:14.0556 15668 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys09:23:14.0556 15668 Disk - ok09:23:14.0931 15668 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys09:23:14.0947 15668 dmboot - ok09:23:15.0337 15668 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys09:23:15.0353 15668 dmio - ok09:23:15.0697 15668 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys09:23:15.0697 15668 dmload - ok09:23:16.0056 15668 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys09:23:16.0056 15668 DMusic - ok09:23:16.0462 15668 dot4 (3e4b043f8bc6be1d4820cc6c9c500306) C:\WINDOWS\system32\DRIVERS\Dot4.sys09:23:16.0462 15668 dot4 - ok09:23:16.0822 15668 Dot4Print (77ce63a8a34ae23d9fe4c7896d1debe7) C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys09:23:16.0822 15668 Dot4Print - ok09:23:17.0197 15668 Dot4Scan (bd05306428da63369692477ddc0f6f5f) C:\WINDOWS\system32\DRIVERS\Dot4Scan.sys09:23:17.0197 15668 Dot4Scan - ok09:23:17.0540 15668 dot4usb (6ec3af6bb5b30e488a0c559921f012e1) C:\WINDOWS\system32\DRIVERS\dot4usb.sys09:23:17.0556 15668 dot4usb - ok09:23:17.0900 15668 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys09:23:17.0900 15668 dpti2o - ok09:23:18.0244 15668 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys09:23:18.0244 15668 drmkaud - ok09:23:18.0619 15668 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys09:23:18.0634 15668 Fastfat - ok09:23:18.0994 15668 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys09:23:18.0994 15668 Fdc - ok09:23:19.0337 15668 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys09:23:19.0337 15668 Fips - ok09:23:19.0697 15668 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys09:23:19.0697 15668 Flpydisk - ok09:23:20.0040 15668 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys09:23:20.0056 15668 FltMgr - ok09:23:20.0447 15668 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys09:23:20.0447 15668 Fs_Rec - ok09:23:20.0806 15668 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys09:23:20.0822 15668 Ftdisk - ok09:23:21.0134 15668 gdiw2k - ok09:23:21.0509 15668 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys09:23:21.0509 15668 GEARAspiWDM - ok09:23:21.0853 15668 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys09:23:21.0853 15668 Gpc - ok09:23:22.0212 15668 hoiqslbv - ok09:23:22.0571 15668 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys09:23:22.0571 15668 hpn - ok09:23:22.0915 15668 HPZid412 (5faba4775d4c61e55ec669d643ffc71f) C:\WINDOWS\system32\DRIVERS\HPZid412.sys09:23:22.0931 15668 HPZid412 - ok09:23:23.0275 15668 HPZipr12 (a3c43980ee1f1beac778b44ea65dbdd4) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys09:23:23.0275 15668 HPZipr12 - ok09:23:23.0618 15668 HPZius12 (2906949bd4e206f2bb0dd1896ce9f66f) C:\WINDOWS\system32\DRIVERS\HPZius12.sys09:23:23.0618 15668 HPZius12 - ok09:23:23.0993 15668 HSFHWBS2 (33dfc0afa95f9a2c753ff2adb7d4a21f) C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys09:23:23.0993 15668 HSFHWBS2 - ok09:23:24.0368 15668 HSF_DP (b2dfc168d6f7512faea085253c5a37ad) C:\WINDOWS\system32\DRIVERS\HSF_DP.sys09:23:24.0415 15668 HSF_DP - ok09:23:24.0759 15668 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys09:23:24.0774 15668 HTTP - ok09:23:25.0134 15668 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys09:23:25.0134 15668 i2omgmt - ok09:23:25.0493 15668 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys09:23:25.0493 15668 i2omp - ok09:23:25.0946 15668 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys09:23:25.0946 15668 i8042prt - ok09:23:26.0321 15668 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys09:23:26.0321 15668 Imapi - ok09:23:26.0665 15668 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys09:23:26.0681 15668 ini910u - ok09:23:27.0071 15668 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys09:23:27.0071 15668 IntelIde - ok09:23:27.0415 15668 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys09:23:27.0415 15668 Ip6Fw - ok09:23:27.0759 15668 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys09:23:27.0759 15668 IpFilterDriver - ok09:23:28.0102 15668 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys09:23:28.0102 15668 IpInIp - ok09:23:28.0477 15668 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys09:23:28.0477 15668 IpNat - ok09:23:28.0852 15668 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys09:23:28.0852 15668 IPSec - ok09:23:29.0196 15668 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys09:23:29.0196 15668 IRENUM - ok09:23:29.0571 15668 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys09:23:29.0571 15668 isapnp - ok09:23:29.0915 15668 IvtBtBUs (01cbb39001afda1152f3fce15ab646ea) C:\WINDOWS\system32\Drivers\IvtBtBus.sys09:23:29.0915 15668 IvtBtBUs - ok09:23:30.0274 15668 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys09:23:30.0290 15668 Kbdclass - ok09:23:30.0634 15668 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys09:23:30.0649 15668 kmixer - ok09:23:30.0977 15668 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys09:23:30.0977 15668 KSecDD - ok09:23:31.0274 15668 lbrtfdc - ok09:23:31.0618 15668 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\WINDOWS\system32\drivers\mbam.sys09:23:31.0618 15668 MBAMProtector - ok09:23:31.0915 15668 MBAMSwissArmy - ok09:23:32.0258 15668 mdmxsdk (195741aee20369980796b557358cd774) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys09:23:32.0258 15668 mdmxsdk - ok09:23:32.0618 15668 MHNDRV (7f2f1d2815a6449d346fcccbc569fbd6) C:\WINDOWS\system32\DRIVERS\mhndrv.sys09:23:32.0618 15668 MHNDRV - ok09:23:32.0962 15668 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys09:23:32.0962 15668 mnmdd - ok09:23:33.0352 15668 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys09:23:33.0352 15668 Modem - ok09:23:33.0696 15668 motmodem (fe80c18ba448ddd76b7bead9eb203d37) C:\WINDOWS\system32\DRIVERS\motmodem.sys09:23:33.0696 15668 motmodem - ok09:23:34.0024 15668 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys09:23:34.0024 15668 Mouclass - ok09:23:34.0399 15668 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys09:23:34.0399 15668 MountMgr - ok09:23:34.0743 15668 MpFilter (fee0baded54222e9f1dae9541212aab1) C:\WINDOWS\system32\DRIVERS\MpFilter.sys09:23:34.0743 15668 MpFilter - ok09:23:34.0868 15668 MpKsl1053e1c2 - ok09:23:34.0883 15668 MpKsl128603ce - ok09:23:34.0899 15668 MpKsl18edb515 - ok09:23:34.0930 15668 MpKsl193d2b14 - ok09:23:34.0946 15668 MpKsl1ba45776 - ok09:23:34.0961 15668 MpKsl1c44341c - ok09:23:34.0961 15668 MpKsl1e518544 - ok09:23:34.0993 15668 MpKsl225d22a0 - ok09:23:35.0008 15668 MpKsl26734daa - ok09:23:35.0024 15668 MpKsl27dfd542 - ok09:23:35.0040 15668 MpKsl2aa06fd3 - ok09:23:35.0040 15668 MpKsl395783ad - ok09:23:35.0055 15668 MpKsl461ab117 - ok09:23:35.0102 15668 MpKsl4d39c53c - ok09:23:35.0118 15668 MpKsl568fd414 - ok09:23:35.0133 15668 MpKsl68117935 - ok09:23:35.0149 15668 MpKsl6dc75969 - ok09:23:35.0211 15668 MpKsl7a65edff (5f53edfead46fa7adb78eee9ecce8fdf) c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{23DAE217-F878-437E-8974-7462E982B2FC}\MpKsl7a65edff.sys09:23:35.0211 15668 MpKsl7a65edff - ok09:23:35.0352 15668 MpKsl8804e3c8 - ok09:23:35.0368 15668 MpKsl8e5aeb5b - ok09:23:35.0383 15668 MpKsl91b90cc1 - ok09:23:35.0399 15668 MpKsl9c78c2b4 - ok09:23:35.0415 15668 MpKsl9d14898e - ok09:23:35.0430 15668 MpKsl9d44a0f9 - ok09:23:35.0446 15668 MpKsla1335bc1 - ok09:23:35.0461 15668 MpKsla9238964 - ok09:23:35.0477 15668 MpKslabd28ac4 - ok09:23:35.0493 15668 MpKslad7d60bc - ok09:23:35.0508 15668 MpKslb1b803d0 - ok09:23:35.0524 15668 MpKslb320f895 - ok09:23:35.0540 15668 MpKslb907d62f - ok09:23:35.0555 15668 MpKslbc933e7f - ok09:23:35.0571 15668 MpKslbe40c4b0 - ok09:23:35.0586 15668 MpKslcb5a29e0 - ok09:23:35.0602 15668 MpKsld616c37b - ok09:23:35.0618 15668 MpKsld7ca0242 - ok09:23:35.0633 15668 MpKsld99e6c53 - ok09:23:35.0649 15668 MpKsle3de4626 - ok09:23:35.0665 15668 MpKslf22068e3 - ok09:23:35.0680 15668 MpKslf8f79d2e - ok09:23:35.0696 15668 MpKslfbe4fd56 - ok09:23:36.0040 15668 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys09:23:36.0040 15668 mraid35x - ok09:23:36.0399 15668 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys09:23:36.0399 15668 MRxDAV - ok09:23:36.0758 15668 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys09:23:36.0789 15668 MRxSmb - ok09:23:37.0133 15668 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys09:23:37.0133 15668 Msfs - ok09:23:37.0493 15668 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys09:23:37.0493 15668 MSKSSRV - ok09:23:37.0914 15668 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys09:23:37.0977 15668 MSPCLOCK - ok09:23:38.0696 15668 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys09:23:38.0696 15668 MSPQM - ok09:23:39.0071 15668 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys09:23:39.0071 15668 mssmbios - ok09:23:39.0446 15668 MSW_USB (b648018aabe80d62a099e105f4164596) C:\WINDOWS\system32\DRIVERS\MN510-51.sys09:23:39.0461 15668 MSW_USB - ok09:23:39.0805 15668 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys09:23:39.0805 15668 Mup - ok09:23:40.0149 15668 mxnic (e1cdf20697d992cf83ff86dd04df1285) C:\WINDOWS\system32\DRIVERS\mxnic.sys09:23:40.0149 15668 mxnic - ok09:23:40.0555 15668 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys09:23:40.0571 15668 NDIS - ok09:23:40.0883 15668 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys09:23:40.0899 15668 NdisTapi - ok09:23:41.0242 15668 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys09:23:41.0242 15668 Ndisuio - ok09:23:41.0617 15668 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys09:23:41.0617 15668 NdisWan - ok09:23:41.0961 15668 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys09:23:41.0961 15668 NDProxy - ok09:23:42.0289 15668 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys09:23:42.0289 15668 NetBIOS - ok09:23:42.0649 15668 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys09:23:42.0649 15668 NetBT - ok09:23:43.0055 15668 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys09:23:43.0055 15668 NIC1394 - ok09:23:43.0414 15668 nm (1e421a6bcf2203cc61b821ada9de878b) C:\WINDOWS\system32\DRIVERS\NMnt.sys09:23:43.0414 15668 nm - ok09:23:43.0774 15668 NPF (b9730495e0cf674680121e34bd95a73b) C:\WINDOWS\system32\drivers\NPF.sys09:23:43.0774 15668 NPF - ok09:23:44.0117 15668 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys09:23:44.0117 15668 Npfs - ok09:23:44.0508 15668 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys09:23:44.0523 15668 Ntfs - ok09:23:44.0898 15668 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys09:23:44.0898 15668 Null - ok09:23:45.0289 15668 nv (2b298519edbfcf451d43e0f1e8f1006d) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys09:23:45.0352 15668 nv - ok09:23:45.0695 15668 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys09:23:45.0695 15668 NwlnkFlt - ok09:23:46.0023 15668 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys09:23:46.0023 15668 NwlnkFwd - ok09:23:46.0367 15668 NwlnkIpx (8b8b1be2dba4025da6786c645f77f123) C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys09:23:46.0367 15668 NwlnkIpx - ok09:23:46.0726 15668 NwlnkNb (56d34a67c05e94e16377c60609741ff8) C:\WINDOWS\system32\DRIVERS\nwlnknb.sys09:23:46.0726 15668 NwlnkNb - ok09:23:47.0086 15668 NwlnkSpx (c0bb7d1615e1acbdc99757f6ceaf8cf0) C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys09:23:47.0086 15668 NwlnkSpx - ok09:23:47.0430 15668 NWRDR (36b9b950e3d2e100970a48d8bad86740) C:\WINDOWS\system32\DRIVERS\nwrdr.sys09:23:47.0430 15668 NWRDR - ok09:23:47.0805 15668 odysseyIM3 (dd03bdd1459d1966ee640f63221c175a) C:\WINDOWS\system32\DRIVERS\odysseyIM3.sys09:23:47.0805 15668 odysseyIM3 - ok09:23:48.0133 15668 ohci1394 (8b61e22e07eeb703e2168fbfe1073545) C:\WINDOWS\system32\DRIVERS\ohci1394.sys09:23:48.0148 15668 ohci1394 - ok09:23:48.0492 15668 P3 (c90018bafdc7098619a4a95b046b30f3) C:\WINDOWS\system32\DRIVERS\p3.sys09:23:48.0492 15668 P3 - ok09:23:48.0836 15668 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys09:23:48.0836 15668 Parport - ok09:23:49.0273 15668 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys09:23:49.0273 15668 PartMgr - ok09:23:49.0633 15668 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys09:23:49.0633 15668 ParVdm - ok09:23:49.0976 15668 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys09:23:49.0976 15668 pccsmcfd - ok09:23:50.0320 15668 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys09:23:50.0320 15668 PCI - ok09:23:50.0648 15668 PCIDump - ok09:23:51.0008 15668 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys09:23:51.0008 15668 PCIIde - ok09:23:51.0351 15668 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys09:23:51.0351 15668 Pcmcia - ok09:23:51.0632 15668 PDCOMP - ok09:23:51.0945 15668 PDFRAME - ok09:23:52.0257 15668 PDRELI - ok09:23:52.0570 15668 PDRFRAME - ok09:23:52.0929 15668 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys09:23:52.0929 15668 perc2 - ok09:23:53.0289 15668 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys09:23:53.0289 15668 perc2hib - ok09:23:53.0664 15668 pfc (6c1618a07b49e3873582b6449e744088) C:\WINDOWS\system32\drivers\pfc.sys09:23:53.0664 15668 pfc - ok09:23:53.0960 15668 pifcwnbm - ok09:23:54.0320 15668 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys09:23:54.0335 15668 PptpMiniport - ok09:23:54.0695 15668 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys09:23:54.0695 15668 Processor - ok09:23:55.0054 15668 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys09:23:55.0054 15668 PSched - ok09:23:55.0429 15668 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys09:23:55.0429 15668 Ptilink - ok09:23:55.0773 15668 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\WINDOWS\system32\Drivers\PxHelp20.sys09:23:55.0773 15668 PxHelp20 - ok09:23:56.0117 15668 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys09:23:56.0117 15668 ql1080 - ok09:23:56.0476 15668 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys09:23:56.0476 15668 Ql10wnt - ok09:23:56.0820 15668 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys09:23:56.0820 15668 ql12160 - ok09:23:57.0179 15668 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys09:23:57.0179 15668 ql1240 - ok09:23:57.0523 15668 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys09:23:57.0538 15668 ql1280 - ok09:23:57.0898 15668 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys09:23:57.0898 15668 RasAcd - ok09:23:58.0257 15668 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys09:23:58.0257 15668 Rasl2tp - ok09:23:58.0601 15668 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys09:23:58.0601 15668 RasPppoe - ok09:23:58.0960 15668 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys09:23:58.0976 15668 Raspti - ok09:23:59.0366 15668 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys09:23:59.0366 15668 Rdbss - ok09:23:59.0726 15668 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys09:23:59.0726 15668 RDPCDD - ok09:24:00.0085 15668 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys09:24:00.0085 15668 rdpdr - ok09:24:00.0476 15668 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys09:24:00.0476 15668 RDPWD - ok09:24:00.0820 15668 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys09:24:00.0820 15668 redbook - ok09:24:01.0163 15668 RimUsb (f17713d108aca124a139fde877eef68a) C:\WINDOWS\system32\Drivers\RimUsb.sys09:24:01.0163 15668 RimUsb - ok09:24:01.0507 15668 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys09:24:01.0507 15668 ROOTMODEM - ok09:24:01.0851 15668 RT73 (bf4709c002d632170dc15a282813d6b3) C:\WINDOWS\system32\DRIVERS\rt73.sys09:24:01.0851 15668 RT73 - ok09:24:02.0210 15668 RTL8023xp (e9877aa069dc11b03dbd1d33b8b2a3ca) C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys09:24:02.0210 15668 RTL8023xp - ok09:24:02.0585 15668 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys09:24:02.0585 15668 Secdrv - ok09:24:02.0944 15668 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\drivers\Serial.sys09:24:02.0944 15668 Serial - ok09:24:03.0351 15668 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys09:24:03.0351 15668 Sfloppy - ok09:24:03.0663 15668 Simbad - ok09:24:04.0022 15668 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys09:24:04.0022 15668 sisagp - ok09:24:04.0397 15668 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys09:24:04.0397 15668 Sparrow - ok09:24:04.0757 15668 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys09:24:04.0757 15668 splitter - ok09:24:05.0101 15668 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys09:24:05.0116 15668 sr - ok09:24:05.0507 15668 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys09:24:05.0522 15668 Srv - ok09:24:05.0882 15668 SunkFilt (86ca1a5c15a5a98d5533945fb1120b05) C:\WINDOWS\System32\Drivers\sunkfilt.sys09:24:05.0882 15668 SunkFilt - ok09:24:06.0225 15668 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys09:24:06.0225 15668 swenum - ok09:24:06.0585 15668 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys09:24:06.0585 15668 swmidi - ok09:24:06.0913 15668 SWMX00 - ok09:24:07.0210 15668 SWNC5E00 - ok09:24:07.0569 15668 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys09:24:07.0569 15668 symc810 - ok09:24:07.0913 15668 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys09:24:07.0913 15668 symc8xx - ok09:24:08.0272 15668 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys09:24:08.0272 15668 sym_hi - ok09:24:08.0632 15668 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys09:24:08.0632 15668 sym_u3 - ok09:24:08.0960 15668 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys09:24:08.0975 15668 sysaudio - ok09:24:09.0350 15668 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys09:24:09.0366 15668 Tcpip - ok09:24:09.0710 15668 Tcpip6 (4e53bbcc4be37d7a4bd6ef1098c89ff7) C:\WINDOWS\system32\DRIVERS\tcpip6.sys09:24:09.0710 15668 Tcpip6 - ok09:24:10.0038 15668 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys09:24:10.0038 15668 TDPIPE - ok09:24:10.0366 15668 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys09:24:10.0366 15668 TDTCP - ok09:24:10.0741 15668 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys09:24:10.0741 15668 TermDD - ok09:24:11.0100 15668 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\system32\DRIVERS\toside.sys09:24:11.0100 15668 TosIde - ok09:24:11.0475 15668 tunmp (8f861eda21c05857eb8197300a92501c) C:\WINDOWS\system32\DRIVERS\tunmp.sys09:24:11.0475 15668 tunmp - ok09:24:11.0491 15668 Suspicious service (Hidden): UACd.sys09:24:11.0803 15668 UACd.sys (ffd7cfafe1ffdc032087a7a6636b99a2) C:\WINDOWS\system32\drivers\UACyaacntahwdornkuhw.sys09:24:11.0803 15668 Suspicious file (NoAccess): C:\WINDOWS\system32\drivers\UACyaacntahwdornkuhw.sys. md5: ffd7cfafe1ffdc032087a7a6636b99a209:24:11.0803 15668 Suspicious file (Hidden): C:\WINDOWS\system32\drivers\UACyaacntahwdornkuhw.sys. md5: ffd7cfafe1ffdc032087a7a6636b99a209:24:11.0803 15668 UACd.sys ( Rootkit.Win32.TDSS.tdl2 ) - infected09:24:11.0803 15668 UACd.sys - detected Rootkit.Win32.TDSS.tdl2 (0)09:24:12.0147 15668 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys09:24:12.0147 15668 Udfs - ok09:24:12.0491 15668 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys09:24:12.0491 15668 ultra - ok09:24:12.0866 15668 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys09:24:12.0881 15668 Update - ok09:24:13.0241 15668 USBAAPL (4b8a9c16b6d9258ed99c512aecb8c555) C:\WINDOWS\system32\Drivers\usbaapl.sys09:24:13.0241 15668 USBAAPL - ok09:24:13.0553 15668 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys09:24:13.0569 15668 usbccgp - ok09:24:13.0913 15668 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys09:24:13.0913 15668 usbehci - ok09:24:14.0288 15668 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys09:24:14.0288 15668 usbhub - ok09:24:14.0647 15668 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys09:24:14.0647 15668 usbohci - ok09:24:14.0991 15668 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys09:24:14.0991 15668 usbprint - ok09:24:15.0319 15668 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys09:24:15.0319 15668 usbscan - ok09:24:15.0694 15668 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS09:24:15.0694 15668 USBSTOR - ok09:24:16.0006 15668 VComm - ok09:24:16.0319 15668 VcommMgr - ok09:24:16.0662 15668 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys09:24:16.0662 15668 VgaSave - ok09:24:17.0022 15668 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys09:24:17.0022 15668 viaagp - ok09:24:17.0366 15668 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys09:24:17.0366 15668 ViaIde - ok09:24:17.0725 15668 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys09:24:17.0725 15668 VolSnap - ok09:24:18.0084 15668 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys09:24:18.0084 15668 Wanarp - ok09:24:18.0397 15668 wanatw - ok09:24:18.0756 15668 Wdf01000 (fd47474bd21794508af449d9d91af6e6) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys09:24:18.0772 15668 Wdf01000 - ok09:24:19.0069 15668 WDICA - ok09:24:19.0475 15668 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys09:24:19.0475 15668 wdmaud - ok09:24:19.0850 15668 winachsf (2dc7c0b6175a0a8ed84a4f70199c93b5) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys09:24:19.0881 15668 winachsf - ok09:24:20.0287 15668 WpdUsb (d87ea9f191df6731818ffd93659badf4) C:\WINDOWS\system32\Drivers\wpdusb.sys09:24:20.0287 15668 WpdUsb - ok09:24:20.0647 15668 zabslmsf - ok09:24:20.0959 15668 zvuueeds - ok09:24:21.0037 15668 MBR (0x1B8) (b20939cd98b7710036274839082ae757) \Device\Harddisk0\DR009:24:21.0053 15668 \Device\Harddisk0\DR0 - ok09:24:21.0084 15668 Boot (0x1200) (4d98067400fe9c2200a8bda154034897) \Device\Harddisk0\DR0\Partition009:24:21.0084 15668 \Device\Harddisk0\DR0\Partition0 - ok09:24:21.0084 15668 ============================================================09:24:21.0084 15668 Scan finished09:24:21.0084 15668 ============================================================09:24:21.0115 7512 Detected object count: 109:24:21.0115 7512 Actual detected object count: 109:25:17.0316 7512 UACd.sys ( Rootkit.Win32.TDSS.tdl2 ) - skipped by user09:25:17.0316 7512 UACd.sys ( Rootkit.Win32.TDSS.tdl2 ) - User select action: Skip 09:26:33.0530 12964 ============================================================09:26:33.0530 12964 Scan started09:26:33.0530 12964 Mode: Manual; 09:26:33.0530 12964 ============================================================09:26:34.0046 12964 Abiosdsk - ok09:26:34.0359 12964 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS09:26:34.0359 12964 abp480n5 - ok09:26:34.0718 12964 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys09:26:34.0718 12964 ACPI - ok09:26:35.0046 12964 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys09:26:35.0046 12964 ACPIEC - ok09:26:35.0358 12964 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys09:26:35.0358 12964 adpu160m - ok09:26:35.0718 12964 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys09:26:35.0718 12964 aec - ok09:26:36.0077 12964 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys09:26:36.0077 12964 AFD - ok09:26:36.0421 12964 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys09:26:36.0421 12964 agp440 - ok09:26:36.0765 12964 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys09:26:36.0765 12964 agpCPQ - ok09:26:37.0062 12964 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys09:26:37.0062 12964 Aha154x - ok09:26:37.0390 12964 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys09:26:37.0390 12964 aic78u2 - ok09:26:37.0702 12964 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys09:26:37.0702 12964 aic78xx - ok09:26:38.0140 12964 ALCXWDM (95aa37bec6c72c277c2caeaee736dd2d) C:\WINDOWS\system32\drivers\ALCXWDM.SYS09:26:38.0155 12964 ALCXWDM - ok09:26:38.0483 12964 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys09:26:38.0483 12964 AliIde - ok09:26:38.0843 12964 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys09:26:38.0843 12964 alim1541 - ok09:26:39.0186 12964 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys09:26:39.0186 12964 amdagp - ok09:26:39.0515 12964 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys09:26:39.0515 12964 amsint - ok09:26:39.0874 12964 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys09:26:39.0874 12964 Arp1394 - ok09:26:40.0218 12964 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys09:26:40.0218 12964 asc - ok09:26:40.0546 12964 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys09:26:40.0546 12964 asc3350p - ok09:26:40.0858 12964 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys09:26:40.0858 12964 asc3550 - ok09:26:41.0233 12964 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys09:26:41.0233 12964 AsyncMac - ok09:26:41.0593 12964 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys09:26:41.0593 12964 atapi - ok09:26:41.0905 12964 Atdisk - ok09:26:42.0264 12964 ati2mtag (8759322ffc1a50569c1e5528ee8026b7) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys09:26:42.0280 12964 ati2mtag - ok09:26:42.0639 12964 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys09:26:42.0639 12964 Atmarpc - ok09:26:42.0952 12964 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys09:26:42.0952 12964 audstub - ok09:26:43.0296 12964 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys09:26:43.0296 12964 Beep - ok09:26:43.0608 12964 BT - ok09:26:43.0936 12964 Btcsrusb - ok09:26:44.0264 12964 BtHidBus (ac2e61482a57ea50730f8c2679f37040) C:\WINDOWS\system32\Drivers\BtHidBus.sys09:26:44.0264 12964 BtHidBus - ok09:26:44.0608 12964 btnetBUs (6783c5c81bfb640469468a80dfa1ccb3) C:\WINDOWS\system32\Drivers\btnetBus.sys09:26:44.0608 12964 btnetBUs - ok09:26:44.0905 12964 BVRPMPR5 (248dfa5762dde38dfddbbd44149e9d7a) C:\WINDOWS\system32\drivers\BVRPMPR5.SYS09:26:44.0905 12964 BVRPMPR5 - ok09:26:45.0202 12964 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys09:26:45.0202 12964 cbidf - ok09:26:45.0514 12964 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys09:26:45.0514 12964 cbidf2k - ok09:26:45.0827 12964 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys09:26:45.0827 12964 cd20xrnt - ok09:26:46.0186 12964 CdaD10BA (841cefab8228ee691705d059e7f21c47) C:\WINDOWS\system32\drivers\CdaD10BA.SYS09:26:46.0186 12964 CdaD10BA - ok09:26:46.0530 12964 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys09:26:46.0545 12964 Cdaudio - ok09:26:46.0889 12964 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys09:26:46.0889 12964 Cdfs - ok09:26:47.0217 12964 Cdr4_xp (837eef65af62d4e8a37c41d3879f7274) C:\WINDOWS\system32\drivers\Cdr4_xp.sys09:26:47.0217 12964 Cdr4_xp - ok09:26:47.0545 12964 Cdralw2k (579da2f9f5401f55dae2cf8779d61dfc) C:\WINDOWS\system32\drivers\Cdralw2k.sys09:26:47.0545 12964 Cdralw2k - ok09:26:47.0873 12964 Cdrom (4b0a100eaf5c49ef3cca8c641431eacc) C:\WINDOWS\system32\DRIVERS\cdrom.sys09:26:47.0873 12964 Cdrom - ok09:26:48.0170 12964 Changer - ok09:26:48.0561 12964 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys09:26:48.0561 12964 CmdIde - ok09:26:48.0905 12964 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys09:26:48.0905 12964 Cpqarray - ok09:26:49.0264 12964 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys09:26:49.0264 12964 dac2w2k - ok09:26:49.0623 12964 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys09:26:49.0623 12964 dac960nt - ok09:26:49.0998 12964 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys09:26:49.0998 12964 Disk - ok09:26:50.0373 12964 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys09:26:50.0389 12964 dmboot - ok09:26:50.0780 12964 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys09:26:50.0780 12964 dmio - ok09:26:51.0139 12964 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys09:26:51.0139 12964 dmload - ok09:26:51.0498 12964 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys09:26:51.0498 12964 DMusic - ok09:26:51.0873 12964 dot4 (3e4b043f8bc6be1d4820cc6c9c500306) C:\WINDOWS\system32\DRIVERS\Dot4.sys09:26:51.0873 12964 dot4 - ok09:26:52.0217 12964 Dot4Print (77ce63a8a34ae23d9fe4c7896d1debe7) C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys09:26:52.0217 12964 Dot4Print - ok09:26:52.0576 12964 Dot4Scan (bd05306428da63369692477ddc0f6f5f) C:\WINDOWS\system32\DRIVERS\Dot4Scan.sys09:26:52.0576 12964 Dot4Scan - ok09:26:52.0592 12964 Scan interrupted by user!09:26:52.0592 12964 Scan interrupted by user!09:26:52.0592 12964 Scan interrupted by user!09:26:52.0592 12964 ============================================================09:26:52.0592 12964 Scan finished09:26:52.0592 12964 ============================================================09:26:52.0608 10016 Detected object count: 009:26:52.0608 10016 Actual detected object count: 009:26:59.0935 4724 ============================================================09:26:59.0935 4724 Scan started09:26:59.0935 4724 Mode: Manual; 09:26:59.0935 4724 ============================================================09:27:00.0310 4724 Abiosdsk - ok09:27:00.0607 4724 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS09:27:00.0607 4724 abp480n5 - ok09:27:01.0013 4724 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys09:27:01.0013 4724 ACPI - ok09:27:01.0342 4724 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys09:27:01.0342 4724 ACPIEC - ok09:27:01.0623 4724 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys09:27:01.0623 4724 adpu160m - ok09:27:01.0982 4724 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys09:27:01.0982 4724 aec - ok09:27:02.0326 4724 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys09:27:02.0326 4724 AFD - ok09:27:02.0670 4724 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys09:27:02.0670 4724 agp440 - ok09:27:02.0998 4724 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys09:27:02.0998 4724 agpCPQ - ok09:27:03.0341 4724 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys09:27:03.0341 4724 Aha154x - ok09:27:03.0670 4724 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys09:27:03.0670 4724 aic78u2 - ok09:27:03.0998 4724 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys09:27:03.0998 4724 aic78xx - ok09:27:04.0419 4724 ALCXWDM (95aa37bec6c72c277c2caeaee736dd2d) C:\WINDOWS\system32\drivers\ALCXWDM.SYS09:27:04.0435 4724 ALCXWDM - ok09:27:04.0748 4724 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys09:27:04.0748 4724 AliIde - ok09:27:05.0107 4724 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys09:27:05.0107 4724 alim1541 - ok09:27:05.0466 4724 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys09:27:05.0466 4724 amdagp - ok09:27:05.0763 4724 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys09:27:05.0763 4724 amsint - ok09:27:06.0123 4724 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys09:27:06.0123 4724 Arp1394 - ok09:27:06.0435 4724 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys09:27:06.0451 4724 asc - ok09:27:06.0747 4724 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys09:27:06.0747 4724 asc3350p - ok09:27:07.0060 4724 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys09:27:07.0060 4724 asc3550 - ok09:27:07.0435 4724 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys09:27:07.0435 4724 AsyncMac - ok09:27:07.0794 4724 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys09:27:07.0794 4724 atapi - ok09:27:08.0107 4724 Atdisk - ok09:27:08.0497 4724 ati2mtag (8759322ffc1a50569c1e5528ee8026b7) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys09:27:08.0513 4724 ati2mtag - ok09:27:08.0857 4724 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys09:27:08.0857 4724 Atmarpc - ok09:27:09.0169 4724 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys09:27:09.0169 4724 audstub - ok09:27:09.0482 4724 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys09:27:09.0482 4724 Beep - ok09:27:09.0810 4724 BT - ok09:27:10.0122 4724 Btcsrusb - ok09:27:10.0450 4724 BtHidBus (ac2e61482a57ea50730f8c2679f37040) C:\WINDOWS\system32\Drivers\BtHidBus.sys09:27:10.0450 4724 BtHidBus - ok09:27:10.0779 4724 btnetBUs (6783c5c81bfb640469468a80dfa1ccb3) C:\WINDOWS\system32\Drivers\btnetBus.sys09:27:10.0779 4724 btnetBUs - ok09:27:11.0122 4724 BVRPMPR5 (248dfa5762dde38dfddbbd44149e9d7a) C:\WINDOWS\system32\drivers\BVRPMPR5.SYS09:27:11.0122 4724 BVRPMPR5 - ok09:27:11.0419 4724 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys09:27:11.0419 4724 cbidf - ok09:27:11.0732 4724 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys09:27:11.0732 4724 cbidf2k - ok09:27:12.0091 4724 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys09:27:12.0091 4724 cd20xrnt - ok09:27:12.0450 4724 CdaD10BA (841cefab8228ee691705d059e7f21c47) C:\WINDOWS\system32\drivers\CdaD10BA.SYS09:27:12.0450 4724 CdaD10BA - ok09:27:12.0794 4724 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys09:27:12.0794 4724 Cdaudio - ok09:27:13.0153 4724 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys09:27:13.0153 4724 Cdfs - ok09:27:13.0497 4724 Cdr4_xp (837eef65af62d4e8a37c41d3879f7274) C:\WINDOWS\system32\drivers\Cdr4_xp.sys09:27:13.0497 4724 Cdr4_xp - ok09:27:13.0810 4724 Cdralw2k (579da2f9f5401f55dae2cf8779d61dfc) C:\WINDOWS\system32\drivers\Cdralw2k.sys09:27:13.0810 4724 Cdralw2k - ok09:27:14.0153 4724 Cdrom (4b0a100eaf5c49ef3cca8c641431eacc) C:\WINDOWS\system32\DRIVERS\cdrom.sys09:27:14.0153 4724 Cdrom - ok09:27:14.0435 4724 Changer - ok09:27:14.0794 4724 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys09:27:14.0794 4724 CmdIde - ok09:27:15.0169 4724 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys09:27:15.0169 4724 Cpqarray - ok09:27:15.0528 4724 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys09:27:15.0528 4724 dac2w2k - ok09:27:15.0888 4724 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys09:27:15.0888 4724 dac960nt - ok09:27:16.0263 4724 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys09:27:16.0263 4724 Disk - ok09:27:16.0638 4724 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys09:27:16.0638 4724 dmboot - ok09:27:16.0997 4724 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys09:27:16.0997 4724 dmio - ok09:27:17.0341 4724 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys09:27:17.0341 4724 dmload - ok09:27:17.0747 4724 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys09:27:17.0747 4724 DMusic - ok09:27:18.0106 4724 dot4 (3e4b043f8bc6be1d4820cc6c9c500306) C:\WINDOWS\system32\DRIVERS\Dot4.sys09:27:18.0106 4724 dot4 - ok09:27:18.0497 4724 Dot4Print (77ce63a8a34ae23d9fe4c7896d1debe7) C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys09:27:18.0497 4724 Dot4Print - ok09:27:18.0856 4724 Dot4Scan (bd05306428da63369692477ddc0f6f5f) C:\WINDOWS\system32\DRIVERS\Dot4Scan.sys09:27:18.0856 4724 Dot4Scan - ok09:27:19.0216 4724 dot4usb (6ec3af6bb5b30e488a0c559921f012e1) C:\WINDOWS\system32\DRIVERS\dot4usb.sys09:27:19.0216 4724 dot4usb - ok09:27:19.0528 4724 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys09:27:19.0544 4724 dpti2o - ok09:27:19.0887 4724 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys09:27:19.0887 4724 drmkaud - ok09:27:20.0262 4724 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys09:27:20.0262 4724 Fastfat - ok09:27:20.0622 4724 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys09:27:20.0622 4724 Fdc - ok09:27:20.0981 4724 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys09:27:20.0981 4724 Fips - ok09:27:21.0356 4724 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys09:27:21.0356 4724 Flpydisk - ok09:27:21.0715 4724 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys09:27:21.0715 4724 FltMgr - ok09:27:22.0075 4724 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys09:27:22.0075 4724 Fs_Rec - ok09:27:22.0434 4724 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys09:27:22.0434 4724 Ftdisk - ok09:27:22.0731 4724 gdiw2k - ok09:27:23.0075 4724 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys09:27:23.0090 4724 GEARAspiWDM - ok09:27:23.0450 4724 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys09:27:23.0450 4724 Gpc - ok09:27:23.0762 4724 hoiqslbv - ok09:27:24.0137 4724 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys09:27:24.0137 4724 hpn - ok09:27:24.0497 4724 HPZid412 (5faba4775d4c61e55ec669d643ffc71f) C:\WINDOWS\system32\DRIVERS\HPZid412.sys09:27:24.0497 4724 HPZid412 - ok09:27:24.0856 4724 HPZipr12 (a3c43980ee1f1beac778b44ea65dbdd4) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys09:27:24.0856 4724 HPZipr12 - ok09:27:25.0200 4724 HPZius12 (2906949bd4e206f2bb0dd1896ce9f66f) C:\WINDOWS\system32\DRIVERS\HPZius12.sys09:27:25.0200 4724 HPZius12 - ok09:27:25.0559 4724 HSFHWBS2 (33dfc0afa95f9a2c753ff2adb7d4a21f) C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys09:27:25.0559 4724 HSFHWBS2 - ok09:27:25.0950 4724 HSF_DP (b2dfc168d6f7512faea085253c5a37ad) C:\WINDOWS\system32\DRIVERS\HSF_DP.sys09:27:25.0950 4724 HSF_DP - ok09:27:26.0293 4724 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys09:27:26.0309 4724 HTTP - ok09:27:26.0653 4724 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys09:27:26.0653 4724 i2omgmt - ok09:27:27.0012 4724 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys09:27:27.0012 4724 i2omp - ok09:27:27.0356 4724 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys09:27:27.0371 4724 i8042prt - ok09:27:27.0715 4724 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys09:27:27.0715 4724 Imapi - ok09:27:28.0090 4724 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys09:27:28.0090 4724 ini910u - ok09:27:28.0465 4724 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys09:27:28.0465 4724 IntelIde - ok09:27:28.0824 4724 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys09:27:28.0824 4724 Ip6Fw - ok09:27:29.0168 4724 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys09:27:29.0168 4724 IpFilterDriver - ok09:27:29.0528 4724 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys09:27:29.0528 4724 IpInIp - ok09:27:29.0871 4724 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys09:27:29.0887 4724 IpNat - ok09:27:30.0246 4724 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys09:27:30.0246 4724 IPSec - ok09:27:30.0590 4724 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys09:27:30.0590 4724 IRENUM - ok09:27:30.0965 4724 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys09:27:30.0965 4724 isapnp - ok09:27:31.0340 4724 IvtBtBUs (01cbb39001afda1152f3fce15ab646ea) C:\WINDOWS\system32\Drivers\IvtBtBus.sys09:27:31.0340 4724 IvtBtBUs - ok09:27:31.0668 4724 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys09:27:31.0668 4724 Kbdclass - ok09:27:32.0027 4724 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys09:27:32.0027 4724 kmixer - ok09:27:32.0371 4724 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys09:27:32.0371 4724 KSecDD - ok09:27:32.0684 4724 lbrtfdc - ok09:27:33.0043 4724 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\WINDOWS\system32\drivers\mbam.sys09:27:33.0043 4724 MBAMProtector - ok09:27:33.0355 4724 MBAMSwissArmy - ok09:27:33.0699 4724 mdmxsdk (195741aee20369980796b557358cd774) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys09:27:33.0699 4724 mdmxsdk - ok09:27:34.0059 4724 MHNDRV (7f2f1d2815a6449d346fcccbc569fbd6) C:\WINDOWS\system32\DRIVERS\mhndrv.sys09:27:34.0059 4724 MHNDRV - ok09:27:34.0418 4724 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys09:27:34.0418 4724 mnmdd - ok09:27:34.0777 4724 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys09:27:34.0777 4724 Modem - ok09:27:35.0121 4724 motmodem (fe80c18ba448ddd76b7bead9eb203d37) C:\WINDOWS\system32\DRIVERS\motmodem.sys09:27:35.0121 4724 motmodem - ok09:27:35.0465 4724 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys09:27:35.0465 4724 Mouclass - ok09:27:35.0824 4724 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys09:27:35.0824 4724 MountMgr - ok09:27:36.0152 4724 MpFilter (fee0baded54222e9f1dae9541212aab1) C:\WINDOWS\system32\DRIVERS\MpFilter.sys09:27:36.0152 4724 MpFilter - ok09:27:36.0293 4724 MpKsl1053e1c2 - ok09:27:36.0308 4724 MpKsl128603ce - ok09:27:36.0324 4724 MpKsl18edb515 - ok09:27:36.0340 4724 MpKsl193d2b14 - ok09:27:36.0355 4724 MpKsl1ba45776 - ok09:27:36.0371 4724 MpKsl1c44341c - ok09:27:36.0387 4724 MpKsl1e518544 - ok09:27:36.0402 4724 MpKsl225d22a0 - ok09:27:36.0418 4724 MpKsl26734daa - ok09:27:36.0433 4724 MpKsl27dfd542 - ok09:27:36.0449 4724 MpKsl2aa06fd3 - ok09:27:36.0465 4724 MpKsl395783ad - ok09:27:36.0496 4724 MpKsl461ab117 - ok09:27:36.0496 4724 MpKsl4d39c53c - ok09:27:36.0512 4724 MpKsl568fd414 - ok09:27:36.0527 4724 MpKsl68117935 - ok09:27:36.0543 4724 MpKsl6dc75969 - ok09:27:36.0590 4724 MpKsl7a65edff (5f53edfead46fa7adb78eee9ecce8fdf) c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{23DAE217-F878-437E-8974-7462E982B2FC}\MpKsl7a65edff.sys09:27:36.0590 4724 MpKsl7a65edff - ok09:27:36.0605 4724 MpKsl8804e3c8 - ok09:27:36.0621 4724 MpKsl8e5aeb5b - ok09:27:36.0637 4724 MpKsl91b90cc1 - ok09:27:36.0652 4724 MpKsl9c78c2b4 - ok09:27:36.0668 4724 MpKsl9d14898e - ok09:27:36.0683 4724 MpKsl9d44a0f9 - ok09:27:36.0699 4724 MpKsla1335bc1 - ok09:27:36.0715 4724 MpKsla9238964 - ok09:27:36.0730 4724 MpKslabd28ac4 - ok09:27:36.0746 4724 MpKslad7d60bc - ok09:27:36.0762 4724 MpKslb1b803d0 - ok09:27:36.0777 4724 MpKslb320f895 - ok09:27:36.0793 4724 MpKslb907d62f - ok09:27:36.0824 4724 MpKslbc933e7f - ok09:27:36.0840 4724 MpKslbe40c4b0 - ok09:27:36.0855 4724 MpKslcb5a29e0 - ok09:27:36.0871 4724 MpKsld616c37b - ok09:27:36.0887 4724 MpKsld7ca0242 - ok09:27:36.0902 4724 MpKsld99e6c53 - ok09:27:36.0918 4724 MpKsle3de4626 - ok09:27:36.0933 4724 MpKslf22068e3 - ok09:27:36.0949 4724 MpKslf8f79d2e - ok09:27:36.0965 4724 MpKslfbe4fd56 - ok09:27:37.0277 4724 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys09:27:37.0277 4724 mraid35x - ok09:27:37.0637 4724 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys09:27:37.0637 4724 MRxDAV - ok09:27:38.0215 4724 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys09:27:38.0230 4724 MRxSmb - ok09:27:38.0621 4724 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys09:27:38.0621 4724 Msfs - ok09:27:38.0965 4724 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys09:27:38.0965 4724 MSKSSRV - ok09:27:39.0308 4724 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys09:27:39.0308 4724 MSPCLOCK - ok09:27:39.0652 4724 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys09:27:39.0652 4724 MSPQM - ok09:27:39.0996 4724 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys09:27:39.0996 4724 mssmbios - ok09:27:40.0324 4724 MSW_USB (b648018aabe80d62a099e105f4164596) C:\WINDOWS\system32\DRIVERS\MN510-51.sys09:27:40.0324 4724 MSW_USB - ok09:27:40.0668 4724 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys09:27:40.0668 4724 Mup - ok09:27:40.0996 4724 mxnic (e1cdf20697d992cf83ff86dd04df1285) C:\WINDOWS\system32\DRIVERS\mxnic.sys09:27:41.0011 4724 mxnic - ok09:27:41.0386 4724 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys09:27:41.0386 4724 NDIS - ok09:27:41.0714 4724 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys09:27:41.0714 4724 NdisTapi - ok09:27:42.0058 4724 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys09:27:42.0058 4724 Ndisuio - ok09:27:42.0418 4724 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys09:27:42.0418 4724 NdisWan - ok09:27:42.0761 4724 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys09:27:42.0761 4724 NDProxy - ok09:27:43.0105 4724 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys09:27:43.0105 4724 NetBIOS - ok09:27:43.0480 4724 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys09:27:43.0480 4724 NetBT - ok09:27:43.0871 4724 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys09:27:43.0871 4724 NIC1394 - ok09:27:44.0230 4724 nm (1e421a6bcf2203cc61b821ada9de878b) C:\WINDOWS\system32\DRIVERS\NMnt.sys09:27:44.0230 4724 nm - ok09:27:44.0574 4724 NPF (b9730495e0cf674680121e34bd95a73b) C:\WINDOWS\system32\drivers\NPF.sys09:27:44.0574 4724 NPF - ok09:27:44.0902 4724 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys09:27:44.0902 4724 Npfs - ok09:27:45.0277 4724 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys09:27:45.0277 4724 Ntfs - ok09:27:45.0636 4724 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys09:27:45.0636 4724 Null - ok09:27:46.0027 4724 nv (2b298519edbfcf451d43e0f1e8f1006d) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys09:27:46.0042 4724 nv - ok09:27:46.0370 4724 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys09:27:46.0386 4724 NwlnkFlt - ok09:27:46.0714 4724 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys09:27:46.0714 4724 NwlnkFwd - ok09:27:47.0058 4724 NwlnkIpx (8b8b1be2dba4025da6786c645f77f123) C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys09:27:47.0058 4724 NwlnkIpx - ok09:27:47.0417 4724 NwlnkNb (56d34a67c05e94e16377c60609741ff8) C:\WINDOWS\system32\DRIVERS\nwlnknb.sys09:27:47.0417 4724 NwlnkNb - ok09:27:47.0777 4724 NwlnkSpx (c0bb7d1615e1acbdc99757f6ceaf8cf0) C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys09:27:47.0777 4724 NwlnkSpx - ok09:27:48.0136 4724 NWRDR (36b9b950e3d2e100970a48d8bad86740) C:\WINDOWS\system32\DRIVERS\nwrdr.sys09:27:48.0136 4724 NWRDR - ok09:27:48.0511 4724 odysseyIM3 (dd03bdd1459d1966ee640f63221c175a) C:\WINDOWS\system32\DRIVERS\odysseyIM3.sys09:27:48.0511 4724 odysseyIM3 - ok09:27:48.0855 4724 ohci1394 (8b61e22e07eeb703e2168fbfe1073545) C:\WINDOWS\system32\DRIVERS\ohci1394.sys09:27:48.0855 4724 ohci1394 - ok09:27:49.0214 4724 P3 (c90018bafdc7098619a4a95b046b30f3) C:\WINDOWS\system32\DRIVERS\p3.sys09:27:49.0214 4724 P3 - ok09:27:49.0558 4724 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys09:27:49.0558 4724 Parport - ok09:27:49.0902 4724 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys09:27:49.0917 4724 PartMgr - ok09:27:50.0261 4724 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys09:27:50.0277 4724 ParVdm - ok09:27:50.0620 4724 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys09:27:50.0620 4724 pccsmcfd - ok09:27:50.0964 4724 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys09:27:50.0964 4724 PCI - ok09:27:51.0276 4724 PCIDump - ok09:27:51.0636 4724 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys09:27:51.0636 4724 PCIIde - ok09:27:51.0980 4724 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys09:27:51.0980 4724 Pcmcia - ok09:27:52.0261 4724 PDCOMP - ok09:27:52.0573 4724 PDFRAME - ok09:27:52.0870 4724 PDRELI - ok09:27:53.0183 4724 PDRFRAME - ok09:27:53.0589 4724 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys09:27:53.0589 4724 perc2 - ok09:27:53.0964 4724 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys09:27:53.0964 4724 perc2hib - ok09:27:54.0339 4724 pfc (6c1618a07b49e3873582b6449e744088) C:\WINDOWS\system32\drivers\pfc.sys09:27:54.0339 4724 pfc - ok09:27:54.0651 4724 pifcwnbm - ok09:27:55.0011 4724 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys09:27:55.0011 4724 PptpMiniport - ok09:27:55.0401 4724 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys09:27:55.0401 4724 Processor - ok09:27:55.0745 4724 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys09:27:55.0745 4724 PSched - ok09:27:56.0104 4724 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys09:27:56.0104 4724 Ptilink - ok09:27:56.0448 4724 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\WINDOWS\system32\Drivers\PxHelp20.sys09:27:56.0448 4724 PxHelp20 - ok09:27:56.0792 4724 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys09:27:56.0792 4724 ql1080 - ok09:27:57.0151 4724 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys09:27:57.0151 4724 Ql10wnt - ok09:27:57.0511 4724 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys09:27:57.0511 4724 ql12160 - ok09:27:57.0854 4724 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys09:27:57.0854 4724 ql1240 - ok09:27:58.0214 4724 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys09:27:58.0214 4724 ql1280 - ok09:27:58.0573 4724 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys09:27:58.0573 4724 RasAcd - ok09:27:58.0948 4724 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys09:27:58.0948 4724 Rasl2tp - ok09:27:59.0323 4724 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys09:27:59.0323 4724 RasPppoe - ok09:27:59.0667 4724 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys09:27:59.0667 4724 Raspti - ok09:28:00.0026 4724 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys09:28:00.0026 4724 Rdbss - ok09:28:00.0370 4724 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys09:28:00.0370 4724 RDPCDD - ok09:28:00.0745 4724 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys09:28:00.0745 4724 rdpdr - ok09:28:01.0104 4724 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys09:28:01.0104 4724 RDPWD - ok09:28:01.0479 4724 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys09:28:01.0479 4724 redbook - ok09:28:01.0885 4724 RimUsb (f17713d108aca124a139fde877eef68a) C:\WINDOWS\system32\Drivers\RimUsb.sys09:28:01.0885 4724 RimUsb - ok09:28:02.0198 4724 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys09:28:02.0198 4724 ROOTMODEM - ok09:28:02.0557 4724 RT73 (bf4709c002d632170dc15a282813d6b3) C:\WINDOWS\system32\DRIVERS\rt73.sys09:28:02.0573 4724 RT73 - ok09:28:02.0901 4724 RTL8023xp (e9877aa069dc11b03dbd1d33b8b2a3ca) C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys09:28:02.0916 4724 RTL8023xp - ok09:28:03.0323 4724 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys09:28:03.0323 4724 Secdrv - ok09:28:03.0698 4724 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\drivers\Serial.sys09:28:03.0698 4724 Serial - ok09:28:04.0073 4724 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys09:28:04.0073 4724 Sfloppy - ok09:28:04.0385 4724 Simbad - ok09:28:04.0745 4724 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys09:28:04.0745 4724 sisagp - ok09:28:05.0104 4724 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys09:28:05.0104 4724 Sparrow - ok09:28:05.0463 4724 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys09:28:05.0463 4724 splitter - ok09:28:05.0823 4724 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys09:28:05.0823 4724 sr - ok09:28:06.0182 4724 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys09:28:06.0182 4724 Srv - ok09:28:06.0557 4724 SunkFilt (86ca1a5c15a5a98d5533945fb1120b05) C:\WINDOWS\System32\Drivers\sunkfilt.sys09:28:06.0557 4724 SunkFilt - ok09:28:06.0901 4724 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys09:28:06.0901 4724 swenum - ok09:28:07.0244 4724 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys09:28:07.0244 4724 swmidi - ok09:28:07.0541 4724 SWMX00 - ok09:28:07.0838 4724 SWNC5E00 - ok09:28:08.0197 4724 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys09:28:08.0197 4724 symc810 - ok09:28:08.0541 4724 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys09:28:08.0541 4724 symc8xx - ok09:28:08.0901 4724 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys09:28:08.0901 4724 sym_hi - ok09:28:09.0244 4724 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys09:28:09.0244 4724 sym_u3 - ok09:28:09.0604 4724 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys09:28:09.0604 4724 sysaudio - ok09:28:09.0963 4724 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys09:28:09.0963 4724 Tcpip - ok09:28:10.0307 4724 Tcpip6 (4e53bbcc4be37d7a4bd6ef1098c89ff7) C:\WINDOWS\system32\DRIVERS\tcpip6.sys09:28:10.0307 4724 Tcpip6 - ok09:28:10.0635 4724 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys09:28:10.0635 4724 TDPIPE - ok09:28:10.0963 4724 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys09:28:10.0963 4724 TDTCP - ok09:28:11.0322 4724 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys09:28:11.0322 4724 TermDD - ok09:28:11.0744 4724 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\system32\DRIVERS\toside.sys09:28:11.0744 4724 TosIde - ok09:28:12.0104 4724 tunmp (8f861eda21c05857eb8197300a92501c) C:\WINDOWS\system32\DRIVERS\tunmp.sys09:28:12.0104 4724 tunmp - ok09:28:12.0104 4724 Suspicious service (Hidden): UACd.sys09:28:12.0447 4724 UACd.sys (ffd7cfafe1ffdc032087a7a6636b99a2) C:\WINDOWS\system32\drivers\UACyaacntahwdornkuhw.sys09:28:12.0447 4724 Suspicious file (NoAccess): C:\WINDOWS\system32\drivers\UACyaacntahwdornkuhw.sys. md5: ffd7cfafe1ffdc032087a7a6636b99a209:28:12.0447 4724 Suspicious file (Hidden): C:\WINDOWS\system32\drivers\UACyaacntahwdornkuhw.sys. md5: ffd7cfafe1ffdc032087a7a6636b99a209:28:12.0447 4724 UACd.sys ( Rootkit.Win32.TDSS.tdl2 ) - infected09:28:12.0447 4724 UACd.sys - detected Rootkit.Win32.TDSS.tdl2 (0)09:28:12.0760 4724 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys09:28:12.0775 4724 Udfs - ok09:28:13.0103 4724 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys09:28:13.0103 4724 ultra - ok09:28:13.0478 4724 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys09:28:13.0494 4724 Update - ok09:28:13.0838 4724 USBAAPL (4b8a9c16b6d9258ed99c512aecb8c555) C:\WINDOWS\system32\Drivers\usbaapl.sys09:28:13.0838 4724 USBAAPL - ok09:28:14.0182 4724 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys09:28:14.0182 4724 usbccgp - ok09:28:14.0541 4724 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys09:28:14.0541 4724 usbehci - ok09:28:14.0885 4724 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys09:28:14.0885 4724 usbhub - ok09:28:15.0244 4724 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys09:28:15.0244 4724 usbohci - ok09:28:15.0588 4724 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys09:28:15.0588 4724 usbprint - ok09:28:15.0931 4724 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys09:28:15.0931 4724 usbscan - ok09:28:16.0275 4724 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS09:28:16.0275 4724 USBSTOR - ok09:28:16.0588 4724 VComm - ok09:28:16.0900 4724 VcommMgr - ok09:28:17.0259 4724 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys09:28:17.0259 4724 VgaSave - ok09:28:17.0619 4724 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys09:28:17.0619 4724 viaagp - ok09:28:17.0978 4724 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys09:28:17.0978 4724 ViaIde - ok09:28:18.0338 4724 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys09:28:18.0338 4724 VolSnap - ok09:28:18.0697 4724 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys09:28:18.0697 4724 Wanarp - ok09:28:19.0009 4724 wanatw - ok09:28:19.0353 4724 Wdf01000 (fd47474bd21794508af449d9d91af6e6) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys09:28:19.0369 4724 Wdf01000 - ok09:28:19.0650 4724 WDICA - ok09:28:20.0009 4724 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys09:28:20.0009 4724 wdmaud - ok09:28:20.0384 4724 winachsf (2dc7c0b6175a0a8ed84a4f70199c93b5) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys09:28:20.0400 4724 winachsf - ok09:28:20.0775 4724 WpdUsb (d87ea9f191df6731818ffd93659badf4) C:\WINDOWS\system32\Drivers\wpdusb.sys09:28:20.0791 4724 WpdUsb - ok09:28:21.0134 4724 zabslmsf - ok09:28:21.0447 4724 zvuueeds - ok09:28:21.0525 4724 MBR (0x1B8) (b20939cd98b7710036274839082ae757) \Device\Harddisk0\DR009:28:21.0541 4724 \Device\Harddisk0\DR0 - ok09:28:21.0556 4724 Boot (0x1200) (4d98067400fe9c2200a8bda154034897) \Device\Harddisk0\DR0\Partition009:28:21.0556 4724 \Device\Harddisk0\DR0\Partition0 - ok09:28:21.0572 4724 ============================================================09:28:21.0572 4724 Scan finished09:28:21.0572 4724 ============================================================09:28:21.0587 17072 Detected object count: 109:28:21.0587 17072 Actual detected object count: 113:44:36.0490 17072 UACd.sys ( Rootkit.Win32.TDSS.tdl2 ) - skipped by user13:44:36.0490 17072 UACd.sys ( Rootkit.Win32.TDSS.tdl2 ) - User select action: Skip Link to post Share on other sites More sharing options...
lisa58 Posted November 20, 2011 Author ID:496526 Share Posted November 20, 2011 Also, my browser, Internet Explorer keeps dropping. Link to post Share on other sites More sharing options...
LDTate Posted November 20, 2011 ID:496565 Share Posted November 20, 2011 Please do not attach the scan results from Combofx. Use copy/paste.Vista and Windows 7 users:1. These tools MUST be run from the executable. (.exe) every time you run them 2. With Admin Rights (Right click, choose "Run as Administrator")Download ComboFix from one of these locations:Link 1Link 2 If using this link, Right Click and select Save As.* IMPORTANT !!! Save ComboFix.exe to your DesktopDisable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : Protective ProgramsDouble click on ComboFix.exe & follow the prompts.Notes: Combofix will run without the Recovery Console installed. Skip the Recovery Console part if you're running Vista or Windows 7. Note: If you have XP SP3, use the XP SP2 package.If Vista or Windows 7, skip the Recovery Console partAs part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:Click on Yes, to continue scanning for malware.When finished, it shall produce a log for you. Please include the C:\ComboFix.txt using Copy / Paste in your next reply.Notes:1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you -- please tell your helper. 4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.Give it atleast 20-30 minutes to finish if needed.Please do not attach the scan results from Combofx. Use copy/paste.Also please describe how your computer behaves at the moment. Link to post Share on other sites More sharing options...
LDTate Posted November 23, 2011 ID:497466 Share Posted November 23, 2011 Are you still with us? This topic will be closed in a few days if we do not hear back from you. Link to post Share on other sites More sharing options...
lisa58 Posted November 23, 2011 Author ID:497551 Share Posted November 23, 2011 Yes, we are still working on this. I will have the results posted later today. Thanks. Link to post Share on other sites More sharing options...
LDTate Posted November 23, 2011 ID:497618 Share Posted November 23, 2011 OK Link to post Share on other sites More sharing options...
lisa58 Posted November 24, 2011 Author ID:497644 Share Posted November 24, 2011 Nothing happens when I double-click on ComboFix.exe. It has been saved to the Desktop. Link to post Share on other sites More sharing options...
LDTate Posted November 24, 2011 ID:497645 Share Posted November 24, 2011 Right Click on it and select run Link to post Share on other sites More sharing options...
lisa58 Posted November 24, 2011 Author ID:497676 Share Posted November 24, 2011 I get the option to Run as current user, or Administrator. I tried both, but neither one works. Link to post Share on other sites More sharing options...
LDTate Posted November 25, 2011 ID:498172 Share Posted November 25, 2011 Try it this way Now physically disconnect from the internet and STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) Click on your START button and choose Run. Then copy/paste the entire content of the following quotebox (Including the "" marks and the Symbols) into the run box.Go to -> Run -> copy/paste in the following single line command & click OK"%userprofile%\desktop\combofix.exe" /killall Click OK and this will start ComboFix in a special way. When finished, it will produce a log. Please save that log to a Notepad File to post in your next reply along with a fresh HJT log.Note:Do not mouse-click combofix's window while it is running. That may cause it to stall.* After you have saved the logs, restart your system to re-enable all the programs that were disabled during the running of ComboFix.* Reconnect to the internet* Post the following logs/Reports: ComboFix.txt Link to post Share on other sites More sharing options...
lisa58 Posted November 26, 2011 Author ID:498306 Share Posted November 26, 2011 I did exactly what you instructed, but nothing happened. Link to post Share on other sites More sharing options...
LDTate Posted November 27, 2011 ID:498410 Share Posted November 27, 2011 Delete this file;c:\windows\system32\ddcBQijKNext:Launch Notepad (Start>All Programs>Accessories), and copy/paste all the Quoted REGEDIT below to it. Don't forget to include REGEDIT4.Save in: DesktopFile Name: fixme.regSave as Type: All filesClick: SaveREGEDIT4 [-HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\Notify\gdiwxp][-HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\Notify\pmnOEurp]On the desktop, doubleclick fixme.reg and allow it to run. Let it merge.Now try Combofix Link to post Share on other sites More sharing options...
lisa58 Posted November 27, 2011 Author ID:498702 Share Posted November 27, 2011 I could not find that file to delete. I ran the next steps anyway. The fixme.reg worked, but the ComboFix still would not run. Link to post Share on other sites More sharing options...
LDTate Posted November 27, 2011 ID:498704 Share Posted November 27, 2011 Run a new DDS scan and TDSSKillerPost the results Link to post Share on other sites More sharing options...
lisa58 Posted November 27, 2011 Author ID:498720 Share Posted November 27, 2011 here are the results.DDS.txt.DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_02Run by Owner at 14:13:53 on 2011-11-27Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.894.303 [GMT -6:00].AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}.============== Running Processes ===============.C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exec:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exeC:\WINDOWS\system32\svchost.exe -k imgsvcC:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Java\jre1.6.0_02\bin\jusched.exeC:\WINDOWS\system32\hphmon05.exeC:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exeC:\Program Files\HP\hpcoretech\hpcmpmgr.exeC:\WINDOWS\ehome\ehtray.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Microsoft Security Client\msseces.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Gamesbar\SearchEngineProtection.exeC:\WINDOWS\system32\wuauclt.exeC:\WINDOWS\System32\svchost.exe -k HTTPFilterC:\Program Files\iPod\bin\iPodService.exeC:\WINDOWS\system32\HPZipm12.exec:\program files\real\realplayer\update\realsched.exec:\program files\real\realplayer\RealPlay.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exe.============== Pseudo HJT Report ===============.uSearch Bar = hxxp://www.yahoo.com/search/ie.htmluStart Page = hxxp://www.yahoo.com/uSearch Page = hxxp://search.imesh.com/sidebar.html?src=ssbuSearchMigratedDefaultURL = hxxp://www.Google.com/uDefault_Search_URL = hxxp://www.Google.com/mDefault_Search_URL = hxxp://www.Google.com/mSearch Page = hxxp://www.Google.com/mStart Page = hxxp://www.yahoo.comuInternet Settings,ProxyOverride = *.localuSearchAssistant = hxxp://www.Google.com/mSearchURL = hxxp://www.Google.com/mSearchAssistant = hxxp://search.imesh.com/sidebar.html?src=ssbuURLSearchHooks: UrlSearchHook Class: {00000000-6e41-4fd3-8538-502f5495e5fc} - c:\program files\ask.com\GenericAskToolbar.dlluURLSearchHooks: FCToolbarURLSearchHook Class: {da879c19-9088-418b-a63a-2e6fb294eaf0} - c:\program files\aadvantage eshoppingsm toolbar\Helper.dlluURLSearchHooks: H - No FilemURLSearchHooks: H - No FileBHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn1\yt.dllBHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll{19b9cd57-3043-442f-8dff-f9924af056bd}BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dllBHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dllBHO: AAdvantage eShoppingSM Toolbar BHO: {5712a6bb-b6c8-4e52-a152-1ba741c9a6a2} - c:\program files\aadvantage eshoppingsm toolbar\Toolbar.dllBHO: Yahoo! IE Services Button: {5bab4b5b-68bc-4b02-94d6-2fc0de4a7897} - c:\program files\yahoo!\common\yiesrvc.dllBHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_02\bin\ssv.dllBHO: {A8FB8EB3-183B-4598-924D-86F0E5E37085} - No FileBHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dllBHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.7.6406.1642\swg.dllBHO: GamesBarBHO Class: {cb0d163c-e9f4-4236-9496-0597e24b23a5} - c:\program files\gamesbar\2.0.1.67\oberontb.dllBHO: {cb123249-5059-40db-a51c-728222fccd8e} - No FileBHO: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll{fc8c94fa-2bdd-4395-b59d-df429a34eb85}BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn1\YTSingleInstance.dllTB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn1\yt.dllTB: GamesBar: {6f282b65-56bf-4bd1-a8b2-a4449a05863d} - c:\program files\gamesbar\2.0.1.67\oberontb.dllTB: AAdvantage eShoppingSM Toolbar: {85741f1d-ed47-4dcf-9109-07d10213c4d0} - c:\program files\aadvantage eshoppingsm toolbar\Toolbar.dllTB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dllTB: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dllTB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No FileuRun: [ctfmon.exe] c:\windows\system32\ctfmon.exeuRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /backgrounduRun: [Messenger (Yahoo!)] "c:\progra~1\yahoo!\messen~1\YahooMessenger.exe" -quietuRun: [searchEngineProtection] c:\program files\gamesbar\SearchEngineProtection.exeuRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exeuRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\FlashUtil11c_ActiveX.exe -update activexmRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kmRun: [sunJavaUpdateSched] "c:\program files\java\jre1.6.0_02\bin\jusched.exe"mRun: [soundMan] SOUNDMAN.EXEmRun: [HPHUPD05] c:\program files\hewlett-packard\\{5372b9a6-6e51-4f90-9b40-e0a3b8475c4e}\hphupd05.exemRun: [HPHmon05] c:\windows\system32\hphmon05.exemRun: [HPDJ Taskbar Utility] c:\windows\system32\spool\drivers\w32x86\3\hpztsb09.exemRun: [HP Software Update] c:\program files\hewlett-packard\hp software update\HPWuSchd2.exemRun: [HP Component Manager] "c:\program files\hp\hpcoretech\hpcmpmgr.exe"mRun: [ehTray] c:\windows\ehome\ehtray.exemRun: [eFax 4.2] "c:\program files\efax messenger 4.2\J2GDllCmd.exe" /RmRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottimemRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkeymRun: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osbootmRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttraydRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -tIE: &Yahoo! Search - file:///c:\program files\yahoo!\Common/ycsrch.htmIE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.htmlIE: Yahoo! &Dictionary - file:///c:\program files\yahoo!\Common/ycdict.htmIE: Yahoo! &Maps - file:///c:\program files\yahoo!\Common/ycmap.htmIE: Yahoo! &SMS - file:///c:\program files\yahoo!\Common/ycsms.htmIE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exeIE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exeIE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_02\bin\ssv.dllIE: {1A93C934-025B-4c3a-B38E-9654A7003239} - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - c:\program files\gamesbar\2.0.1.67\oberontb.dllIE: {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - c:\program files\yahoo!\common\yiesrvc.dllIE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLLTrusted Zone: americanexpress.com\wwwTrusted Zone: associatedbank.com\wwwTrusted Zone: boxtops4education.com\wwwTrusted Zone: linksynergy.comTrusted Zone: pogo.com\wwwTrusted Zone: state.wi.us\wiscjobsTrusted Zone: turbotax.comDPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cabDPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - hxxp://www.drivecleaner.com/.freeware/installdrivecleanerstart.cabDPF: {31435657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cabDPF: {4EFA317A-8569-4788-B175-5BAF9731A549} - hxxps://www.microsoft.com/resources/virtuallabs/ActiveX/VMRCActiveXClient1.cabDPF: {93EFDAB8-8800-4896-B428-76F943140E1B} - hxxp://www.consumerinput.com.edgesuite.net/panel/maple/dcainst.cabDPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} - hxxp://a19.g.akamai.net/7/19/7125/4056/ftp.coupons.com/r3302/Coupons.cabDPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - hxxp://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cabDPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cabDPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cabTCP: NameServer = 208.67.220.220,208.67.222.222 TCP: DhcpNameServer = 10.0.0.1TCP: Interfaces\{8BA4481C-D190-47CA-A479-1DF41738DB49} : DhcpNameServer = 10.0.0.1Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - c:\program files\hp\hpcoretech\comp\hpuiprot.dllNotify: AtiExtEvent - Ati2evxx.dllNotify: gdiwxp - gdiwxp.dllNotify: pmnOEurp - pmnOEurp.dllSTS: {db763ed8-100a-481b-8913-50a2f41dcdc3}: exegeses{19b9cd57-3043-442f-8dff-f9924af056bd}LSA: Authentication Packages = msv1_0 nwprovau c:\windows\system32\ddcBQijK.============= SERVICES / DRIVERS ===============.R0 BtHidBus;Bluetooth HID Bus Service;c:\windows\system32\drivers\BtHidBus.sys [2009-6-17 20744]R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2009-6-18 165648]R1 MpKsl4d39c53c;MpKsl4d39c53c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{da053c66-2d6d-49b6-811a-c858a241f8d6}\mpksl4d39c53c.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{da053c66-2d6d-49b6-811a-c858a241f8d6}\MpKsl4d39c53c.sys [?]R1 MpKslabd28ac4;MpKslabd28ac4;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{da053c66-2d6d-49b6-811a-c858a241f8d6}\mpkslabd28ac4.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{da053c66-2d6d-49b6-811a-c858a241f8d6}\MpKslabd28ac4.sys [?]R1 MpKsld1bff95c;MpKsld1bff95c;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8be61cd4-9022-4c23-b143-ca4b1a92242b}\MpKsld1bff95c.sys [2011-11-27 28752]R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-11-5 366152]R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-11-5 22216]S1 gdiw2k;GDI kernel srvc; [x]S1 hoiqslbv;hoiqslbv;\??\c:\windows\system32\drivers\hoiqslbv.sys --> c:\windows\system32\drivers\hoiqslbv.sys [?]S1 MpKsl1053e1c2;MpKsl1053e1c2;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3aefff37-2753-474d-ba06-9019f6ff2da0}\mpksl1053e1c2.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3aefff37-2753-474d-ba06-9019f6ff2da0}\MpKsl1053e1c2.sys [?]S1 MpKsl128603ce;MpKsl128603ce;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0a612a94-91a8-46a0-80c4-1c250e6c9306}\mpksl128603ce.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0a612a94-91a8-46a0-80c4-1c250e6c9306}\MpKsl128603ce.sys [?]S1 MpKsl18edb515;MpKsl18edb515;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0956a73a-a855-41d9-9d6d-7b644a96ecae}\mpksl18edb515.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0956a73a-a855-41d9-9d6d-7b644a96ecae}\MpKsl18edb515.sys [?]S1 MpKsl193d2b14;MpKsl193d2b14;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9de97637-e5ff-4862-aaa3-8e0589b88a71}\mpksl193d2b14.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9de97637-e5ff-4862-aaa3-8e0589b88a71}\MpKsl193d2b14.sys [?]S1 MpKsl1ba45776;MpKsl1ba45776;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{40b5ae33-b5c6-4569-93a0-0526e6381de8}\mpksl1ba45776.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{40b5ae33-b5c6-4569-93a0-0526e6381de8}\MpKsl1ba45776.sys [?]S1 MpKsl1c44341c;MpKsl1c44341c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{96d2a7f3-c8a7-48c1-860f-ed0b547a4e6d}\mpksl1c44341c.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{96d2a7f3-c8a7-48c1-860f-ed0b547a4e6d}\MpKsl1c44341c.sys [?]S1 MpKsl1e518544;MpKsl1e518544;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{03ee36ec-ad29-4a98-b643-1b69a4731a92}\mpksl1e518544.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{03ee36ec-ad29-4a98-b643-1b69a4731a92}\MpKsl1e518544.sys [?]S1 MpKsl225d22a0;MpKsl225d22a0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b1e366be-5ef2-4051-b062-7078ba214e62}\mpksl225d22a0.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b1e366be-5ef2-4051-b062-7078ba214e62}\MpKsl225d22a0.sys [?]S1 MpKsl26734daa;MpKsl26734daa;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{78c6770e-2263-4f47-bd1a-e7dceeb30345}\mpksl26734daa.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{78c6770e-2263-4f47-bd1a-e7dceeb30345}\MpKsl26734daa.sys [?]S1 MpKsl27dfd542;MpKsl27dfd542;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8255628b-d6af-41d1-a86c-0e62b8f067a9}\mpksl27dfd542.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8255628b-d6af-41d1-a86c-0e62b8f067a9}\MpKsl27dfd542.sys [?]S1 MpKsl2aa06fd3;MpKsl2aa06fd3;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{96018d4f-44a2-4e57-9147-e2fb42735a64}\mpksl2aa06fd3.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{96018d4f-44a2-4e57-9147-e2fb42735a64}\MpKsl2aa06fd3.sys [?]S1 MpKsl395783ad;MpKsl395783ad;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8f073ec6-d6f8-47b0-bc57-ca38da2141ab}\mpksl395783ad.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8f073ec6-d6f8-47b0-bc57-ca38da2141ab}\MpKsl395783ad.sys [?]S1 MpKsl461ab117;MpKsl461ab117;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b1e366be-5ef2-4051-b062-7078ba214e62}\mpksl461ab117.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b1e366be-5ef2-4051-b062-7078ba214e62}\MpKsl461ab117.sys [?]S1 MpKsl568fd414;MpKsl568fd414;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{31c98713-47c4-4fe4-847f-867782ccb4e3}\mpksl568fd414.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{31c98713-47c4-4fe4-847f-867782ccb4e3}\MpKsl568fd414.sys [?]S1 MpKsl68117935;MpKsl68117935;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{df1e6e2a-0fe9-4241-92cb-089994ea3e96}\mpksl68117935.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{df1e6e2a-0fe9-4241-92cb-089994ea3e96}\MpKsl68117935.sys [?]S1 MpKsl6dc75969;MpKsl6dc75969;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f5921e83-fa82-4d65-86a6-22ccf72e30f1}\mpksl6dc75969.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f5921e83-fa82-4d65-86a6-22ccf72e30f1}\MpKsl6dc75969.sys [?]S1 MpKsl8804e3c8;MpKsl8804e3c8;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4b076487-dc76-4c21-9735-77bcfd84535f}\mpksl8804e3c8.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4b076487-dc76-4c21-9735-77bcfd84535f}\MpKsl8804e3c8.sys [?]S1 MpKsl8e5aeb5b;MpKsl8e5aeb5b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0956a73a-a855-41d9-9d6d-7b644a96ecae}\mpksl8e5aeb5b.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0956a73a-a855-41d9-9d6d-7b644a96ecae}\MpKsl8e5aeb5b.sys [?]S1 MpKsl91b90cc1;MpKsl91b90cc1;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{516507bb-90e7-41c2-9c14-25f14430b4b4}\mpksl91b90cc1.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{516507bb-90e7-41c2-9c14-25f14430b4b4}\MpKsl91b90cc1.sys [?]S1 MpKsl9c78c2b4;MpKsl9c78c2b4;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{02d7820b-f76e-41b6-bdfe-d806ff663b88}\mpksl9c78c2b4.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{02d7820b-f76e-41b6-bdfe-d806ff663b88}\MpKsl9c78c2b4.sys [?]S1 MpKsl9d14898e;MpKsl9d14898e;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5dfd3906-f374-4540-a241-e87f3feb4d03}\mpksl9d14898e.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5dfd3906-f374-4540-a241-e87f3feb4d03}\MpKsl9d14898e.sys [?]S1 MpKsl9d44a0f9;MpKsl9d44a0f9;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b1e366be-5ef2-4051-b062-7078ba214e62}\mpksl9d44a0f9.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b1e366be-5ef2-4051-b062-7078ba214e62}\MpKsl9d44a0f9.sys [?]S1 MpKsla1335bc1;MpKsla1335bc1;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ac31e344-97ec-42f7-b6d0-49fd2622ec4b}\mpksla1335bc1.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ac31e344-97ec-42f7-b6d0-49fd2622ec4b}\MpKsla1335bc1.sys [?]S1 MpKsla9238964;MpKsla9238964;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ac31e344-97ec-42f7-b6d0-49fd2622ec4b}\mpksla9238964.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ac31e344-97ec-42f7-b6d0-49fd2622ec4b}\MpKsla9238964.sys [?]S1 MpKslad7d60bc;MpKslad7d60bc;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{31c1aac8-5c49-4f4f-b300-6b39ec6a0f2c}\mpkslad7d60bc.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{31c1aac8-5c49-4f4f-b300-6b39ec6a0f2c}\MpKslad7d60bc.sys [?]S1 MpKslb1b803d0;MpKslb1b803d0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e68d0f31-693b-4144-9a7b-acb98ca3f918}\mpkslb1b803d0.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e68d0f31-693b-4144-9a7b-acb98ca3f918}\MpKslb1b803d0.sys [?]S1 MpKslb320f895;MpKslb320f895;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a8ddc5b0-264e-435a-99a8-e636c5cfca56}\mpkslb320f895.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a8ddc5b0-264e-435a-99a8-e636c5cfca56}\MpKslb320f895.sys [?]S1 MpKslb907d62f;MpKslb907d62f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8e72f0f0-95fb-4019-a556-5bbabebcc588}\mpkslb907d62f.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8e72f0f0-95fb-4019-a556-5bbabebcc588}\MpKslb907d62f.sys [?]S1 MpKslbc933e7f;MpKslbc933e7f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0e9c6b73-42ec-4632-8379-a677dd4b5e9f}\mpkslbc933e7f.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0e9c6b73-42ec-4632-8379-a677dd4b5e9f}\MpKslbc933e7f.sys [?]S1 MpKslbe40c4b0;MpKslbe40c4b0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{516507bb-90e7-41c2-9c14-25f14430b4b4}\mpkslbe40c4b0.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{516507bb-90e7-41c2-9c14-25f14430b4b4}\MpKslbe40c4b0.sys [?]S1 MpKslcb5a29e0;MpKslcb5a29e0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d024a632-4faa-4163-a8d0-363781ae9318}\mpkslcb5a29e0.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d024a632-4faa-4163-a8d0-363781ae9318}\MpKslcb5a29e0.sys [?]S1 MpKsld616c37b;MpKsld616c37b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c305c6a8-6d21-4f87-bb9d-78ed305c7bce}\mpksld616c37b.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c305c6a8-6d21-4f87-bb9d-78ed305c7bce}\MpKsld616c37b.sys [?]S1 MpKsld7ca0242;MpKsld7ca0242;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2fa158b6-7ce3-4949-833c-ca9d0cd2d5e6}\mpksld7ca0242.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2fa158b6-7ce3-4949-833c-ca9d0cd2d5e6}\MpKsld7ca0242.sys [?]S1 MpKsld99e6c53;MpKsld99e6c53;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{1d4a3193-3910-43db-b8b8-8887f5b1bcb4}\mpksld99e6c53.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{1d4a3193-3910-43db-b8b8-8887f5b1bcb4}\MpKsld99e6c53.sys [?]S1 MpKsle3de4626;MpKsle3de4626;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a957e7a0-b016-46c1-b5b7-d8bb862659fe}\mpksle3de4626.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a957e7a0-b016-46c1-b5b7-d8bb862659fe}\MpKsle3de4626.sys [?]S1 MpKslf22068e3;MpKslf22068e3;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{dd5e06d5-d9fd-490a-b155-ec8fc55190d9}\mpkslf22068e3.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{dd5e06d5-d9fd-490a-b155-ec8fc55190d9}\MpKslf22068e3.sys [?]S1 MpKslf8f79d2e;MpKslf8f79d2e;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{db3fef7b-c81e-428a-b7af-d3ebed105f57}\mpkslf8f79d2e.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{db3fef7b-c81e-428a-b7af-d3ebed105f57}\MpKslf8f79d2e.sys [?]S1 MpKslfbe4fd56;MpKslfbe4fd56;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ac31e344-97ec-42f7-b6d0-49fd2622ec4b}\mpkslfbe4fd56.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ac31e344-97ec-42f7-b6d0-49fd2622ec4b}\MpKslfbe4fd56.sys [?]S1 pifcwnbm;pifcwnbm;\??\c:\windows\system32\drivers\pifcwnbm.sys --> c:\windows\system32\drivers\pifcwnbm.sys [?]S1 zabslmsf;zabslmsf;\??\c:\windows\system32\drivers\zabslmsf.sys --> c:\windows\system32\drivers\zabslmsf.sys [?]S1 zvuueeds;zvuueeds;\??\c:\windows\system32\drivers\zvuueeds.sys --> c:\windows\system32\drivers\zvuueeds.sys [?]S3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\drivers\btnetBus.sys [2009-6-17 29192]S3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\drivers\IvtBtBus.sys [2009-6-17 25480]S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]S3 NPF;WinPcap Packet Driver (NPF);c:\windows\system32\drivers\npf.sys [2010-10-10 50704].=============== Created Last 30 ================.2011-11-27 07:46:19 28752 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8be61cd4-9022-4c23-b143-ca4b1a92242b}\MpKsld1bff95c.sys2011-11-27 07:45:56 56200 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8be61cd4-9022-4c23-b143-ca4b1a92242b}\offreg.dll2011-11-27 07:45:48 6668624 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8be61cd4-9022-4c23-b143-ca4b1a92242b}\mpengine.dll2011-11-11 01:46:01 575520 ----a-w- c:\windows\system32\PerfStringBackup.TMP2011-11-10 06:18:29 -------- d-----w- c:\windows\system32\drivers\nss\0306000.01F2011-11-10 06:18:29 -------- d-----w- c:\windows\system32\drivers\NSS2011-11-10 06:18:29 -------- d-----w- c:\program files\Norton Security Scan2011-11-10 06:18:29 -------- d-----w- c:\documents and settings\all users\application data\Norton2011-11-10 06:18:25 -------- d-----w- c:\program files\NortonInstaller2011-11-10 06:18:25 -------- d-----w- c:\documents and settings\all users\application data\NortonInstaller2011-11-10 04:17:51 -------- d-----w- c:\windows\system32\Adobe2011-11-07 22:03:27 -------- d-----w- c:\documents and settings\owner\local settings\application data\Yahoo!2011-11-05 22:39:03 -------- d-----w- c:\documents and settings\owner\application data\Malwarebytes2011-11-05 21:34:20 -------- d-----w- c:\documents and settings\all users\application data\Malwarebytes2011-11-05 21:34:17 22216 ----a-w- c:\windows\system32\drivers\mbam.sys2011-11-05 21:34:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware.==================== Find3M ====================.2011-10-15 02:38:39 499712 ---ha-w- c:\windows\system32\msvcp71.dll2011-09-26 16:41:20 611328 ---ha-w- c:\windows\system32\uiautomationcore.dll2011-09-26 16:41:20 220160 ---ha-w- c:\windows\system32\oleacc.dll2011-09-26 16:41:14 20480 ---ha-w- c:\windows\system32\oleaccrc.dll2011-09-17 22:09:59 404640 ---ha-w- c:\windows\system32\FlashPlayerCPLApp.cpl2011-09-09 09:12:13 599040 ---ha-w- c:\windows\system32\crypt32.dll2011-09-06 13:20:51 1858944 ---ha-w- c:\windows\system32\win32k.sys2008-05-26 02:27:53 262144 ----a-w- c:\program files\Uninstall Ask Toolbar.dll.=================== ROOTKIT ====================.Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.netWindows 5.1.2600 .CreateFile("\\.\PHYSICALDRIVE0"): The maximum number of secrets that may be stored in a single system has been exceeded.device: opened successfullyuser: error reading MBR .Disk trace:called modules: ntkrnlpa.exe >>UNKNOWN [0x856EA8E3]<< >>UNKNOWN [0xF551C466]<< _asm { JMP 0x6fe31b83; }1 ntkrnlpa!IofCallDriver[0x804EE130] -> \Device\Harddisk0\DR0[0x8573AAB8]kernel: MBR read successfully_asm { XOR DI, DI; MOV SI, 0x200; MOV SS, DI; MOV SP, 0x7a00; MOV BX, 0x7a0; MOV CX, SI; MOV DS, BX; MOV ES, BX; REP MOVSB ; JMP FAR 0x7a0:0x5f; }user != kernel MBR !!! .============= FINISH: 14:14:43.04 ===============Attach.txt.UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.IF REQUESTED, ZIP IT UP & ATTACH IT.DDS (Ver_2011-08-26.01).Microsoft Windows XP ProfessionalBoot Device: \Device\HarddiskVolume1Install Date: 12/3/2005 5:29:29 PMSystem Uptime: 11/17/2011 7:53:52 PM (235 hours ago).Motherboard: MICRO-STAR | | MS-7145Processor: AMD Athlon 64 Processor 3400+ | Socket 754 | 2393/199mhz.==== Disk Partitions =========================.C: is FIXED (NTFS) - 182 GiB total, 122.722 GiB free.D: is RemovableE: is CDROM ()F: is CDROM ()G: is RemovableH: is RemovableI: is RemovableJ: is Removable.==== Disabled Device Manager Items =============.Class GUID: {4D36E968-E325-11CE-BFC1-08002BE10318}Description: ATI RADEON Xpress 200 SeriesDevice ID: PCI\VEN_1002&DEV_5954&SUBSYS_71411462&REV_00\4&D623FAE&0&2808Manufacturer: ATI Technologies Inc.Name: ATI RADEON Xpress 200 SeriesPNP Device ID: PCI\VEN_1002&DEV_5954&SUBSYS_71411462&REV_00\4&D623FAE&0&2808Service: ati2mtag.==== System Restore Points ===================.No restore point in system..==== Installed Programs ======================.AAdvantage eShoppingSM ToolbarAdobe AIRAdobe Flash Player 10 PluginAdobe Flash Player 11 ActiveXAdobe Reader 7.0.9Adobe Shockwave Player 11.6Apple Application SupportApple Mobile Device SupportApple Software UpdateArcSoft Software SuiteAsk ToolbarATI - Software Uninstall UtilityATI Display DriverBonjourCCScoreCharting Companion for Family Tree MakerCompatibility Pack for the 2007 Office systemDigital Media ReaderDirectX Media Runtime 5.1ESSBrwrESSCDBKESScoreESSguiESSiniESSPCDESSPDockESSTOOLSessvatgteVoice Player 1.0Family Tree Maker 2006fflinkGamesBar 2.0.1.67GdiplusUpgradeGoogle Toolbar for Internet ExplorerHotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)Hotfix for Windows Internet Explorer 7 (KB947864)Hotfix for Windows XP (KB2158563)Hotfix for Windows XP (KB2443685)Hotfix for Windows XP (KB2570791)Hotfix for Windows XP (KB932716-v2)Hotfix for Windows XP (KB945060-v3)Hotfix for Windows XP (KB952287)Hotfix for Windows XP (KB954550-v5)Hotfix for Windows XP (KB961118)Hotfix for Windows XP (KB970653-v3)Hotfix for Windows XP (KB976098-v2)Hotfix for Windows XP (KB979306)Hotfix for Windows XP (KB981793)HP UpdateiTunesJ2SE Runtime Environment 5.0 Update 10J2SE Runtime Environment 5.0 Update 9Java 6 Update 2Java SE Runtime Environment 6 Update 1kgcbabykgchdaykgchlwnkgcinvtkgckidskgcmovekgcvdayKodak EasyShare softwareMacromedia Extension ManagerMacromedia Flash 8Macromedia Flash 8 Video EncoderMalwarebytes' Anti-Malware version 1.51.2.1300Microsoft .NET Framework 1.0 Hotfix (KB2572066)Microsoft .NET Framework 1.0 Hotfix (KB953295)Microsoft .NET Framework 1.0 Hotfix (KB979904)Microsoft .NET Framework 1.1Microsoft .NET Framework 1.1 Security Update (KB2572067)Microsoft .NET Framework 1.1 Security Update (KB979906)Microsoft .NET Framework 2.0 Service Pack 2Microsoft .NET Framework 3.0 Service Pack 2Microsoft .NET Framework 3.5 SP1Microsoft AntimalwareMicrosoft Application Error ReportingMicrosoft Digital Image Library 9 - BlockerMicrosoft Digital Image Standard 2006Microsoft Digital Image Standard 2006 EditorMicrosoft Digital Image Standard 2006 LibraryMicrosoft Internationalized Domain Names Mitigation APIsMicrosoft Kernel-Mode Driver Framework Feature Pack 1.5Microsoft MSDN 2005 Express Edition - ENUMicrosoft National Language Support Downlevel APIsMicrosoft Office Standard Edition 2003Microsoft Picture It! Premium 10Microsoft Security ClientMicrosoft Security EssentialsMicrosoft SilverlightMicrosoft SQL Server Compact 3.5 Design Tools ENUMicrosoft SQL Server Compact 3.5 ENUMicrosoft Visual Basic 2008 Express Edition - ENUMicrosoft Visual C++ 2005 Redistributable - KB2467175Microsoft Visual Web Developer 2005 Express Edition - ENUMicrosoft Visual Web Developer 2005 Express Edition - ENU Service Pack 1 (KB926751)Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET FrameworkMicrosoft Windows SDK for Visual Studio 2008 Express Tools for Win32Microsoft WorksMicrosoft Works Suite 2006 Setup LauncherMicrosoft Works Suite Add-in for Microsoft WordMove Media PlayerMSDN Library for Microsoft Visual Studio 2008 Express EditionsMSXML 4.0 SP2 (KB925672)MSXML 4.0 SP2 (KB927978)MSXML 4.0 SP2 (KB936181)MSXML 4.0 SP2 (KB954430)MSXML 4.0 SP2 (KB973688)MSXML 6.0 Parser (KB933579)Multimedia Keyboard DriverNapster Burn EngineNero BurnRightsNero OEMnetbrdgNokia Connectivity Cable DriverNorton Security ScanOfotoXMIPC Connectivity SolutionPhotosmart 140,240,7200,7600,7700,7900 SeriesPS7200PSShortcutsPPSUsageQFolderQuickTimeRealNetworks - Microsoft Visual C++ 2008 RuntimeRealPlayerRealtek AC'97 AudioRealUpgrade 1.1Recovery Software Suite eMachinesReporting Add-In for Microsoft Visual Web Developer 2005 ExpressRuneScape Launcher 1.0.4Savings Bond WizardSecure Game PlayerSecurity Update for CAPICOM (KB931906)Security Update for Microsoft .NET Framework 2.0 (KB928365)Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)Security Update for Microsoft Windows (KB2564958)Security Update for Windows Internet Explorer 7 (KB928090)Security Update for Windows Internet Explorer 7 (KB929969)Security Update for Windows Internet Explorer 7 (KB931768)Security Update for Windows Internet Explorer 7 (KB933566)Security Update for Windows Internet Explorer 7 (KB937143)Security Update for Windows Internet Explorer 7 (KB938127)Security Update for Windows Internet Explorer 7 (KB939653)Security Update for Windows Internet Explorer 7 (KB942615)Security Update for Windows Internet Explorer 7 (KB944533)Security Update for Windows Internet Explorer 7 (KB950759)Security Update for Windows Internet Explorer 7 (KB953838)Security Update for Windows Internet Explorer 7 (KB956390)Security Update for Windows Internet Explorer 7 (KB958215)Security Update for Windows Internet Explorer 7 (KB960714)Security Update for Windows Internet Explorer 7 (KB961260)Security Update for Windows Internet Explorer 7 (KB963027)Security Update for Windows Internet Explorer 7 (KB969897)Security Update for Windows Internet Explorer 8 (KB2183461)Security Update for Windows Internet Explorer 8 (KB2360131)Security Update for Windows Internet Explorer 8 (KB2416400)Security Update for Windows Internet Explorer 8 (KB2482017)Security Update for Windows Internet Explorer 8 (KB2497640)Security Update for Windows Internet Explorer 8 (KB2510531)Security Update for Windows Internet Explorer 8 (KB2530548)Security Update for Windows Internet Explorer 8 (KB2544521)Security Update for Windows Internet Explorer 8 (KB2559049)Security Update for Windows Internet Explorer 8 (KB2586448)Security Update for Windows Internet Explorer 8 (KB969897)Security Update for Windows Internet Explorer 8 (KB971961)Security Update for Windows Internet Explorer 8 (KB972260)Security Update for Windows Internet Explorer 8 (KB974455)Security Update for Windows Internet Explorer 8 (KB976325)Security Update for Windows Internet Explorer 8 (KB978207)Security Update for Windows Internet Explorer 8 (KB981332)Security Update for Windows Internet Explorer 8 (KB982381)Security Update for Windows Media Player (KB2378111)Security Update for Windows Media Player (KB952069)Security Update for Windows Media Player (KB954155)Security Update for Windows Media Player (KB968816)Security Update for Windows Media Player (KB973540)Security Update for Windows Media Player (KB975558)Security Update for Windows Media Player (KB978695)Security Update for Windows Media Player 10 (KB911565)Security Update for Windows Media Player 10 (KB917734)Security Update for Windows Media Player 10 (KB936782)Security Update for Windows Media Player 6.4 (KB925398)Security Update for Windows XP (KB2079403)Security Update for Windows XP (KB2115168)Security Update for Windows XP (KB2121546)Security Update for Windows XP (KB2160329)Security Update for Windows XP (KB2229593)Security Update for Windows XP (KB2259922)Security Update for Windows XP (KB2279986)Security Update for Windows XP (KB2286198)Security Update for Windows XP (KB2296011)Security Update for Windows XP (KB2296199)Security Update for Windows XP (KB2347290)Security Update for Windows XP (KB2360937)Security Update for Windows XP (KB2387149)Security Update for Windows XP (KB2393802)Security Update for Windows XP (KB2412687)Security Update for Windows XP (KB2419632)Security Update for Windows XP (KB2423089)Security Update for Windows XP (KB2436673)Security Update for Windows XP (KB2440591)Security Update for Windows XP (KB2443105)Security Update for Windows XP (KB2476490)Security Update for Windows XP (KB2476687)Security Update for Windows XP (KB2478960)Security Update for Windows XP (KB2478971)Security Update for Windows XP (KB2479628)Security Update for Windows XP (KB2481109)Security Update for Windows XP (KB2483185)Security Update for Windows XP (KB2485376)Security Update for Windows XP (KB2485663)Security Update for Windows XP (KB2491683)Security Update for Windows XP (KB2503658)Security Update for Windows XP (KB2503665)Security Update for Windows XP (KB2506212)Security Update for Windows XP (KB2506223)Security Update for Windows XP (KB2507618)Security Update for Windows XP (KB2507938)Security Update for Windows XP (KB2508272)Security Update for Windows XP (KB2508429)Security Update for Windows XP (KB2509553)Security Update for Windows XP (KB2511455)Security Update for Windows XP (KB2524375)Security Update for Windows XP (KB2535512)Security Update for Windows XP (KB2536276-v2)Security Update for Windows XP (KB2536276)Security Update for Windows XP (KB2544893)Security Update for Windows XP (KB2555917)Security Update for Windows XP (KB2562937)Security Update for Windows XP (KB2566454)Security Update for Windows XP (KB2567053)Security Update for Windows XP (KB2567680)Security Update for Windows XP (KB2570222)Security Update for Windows XP (KB2570947)Security Update for Windows XP (KB2592799)Security Update for Windows XP (KB923561)Security Update for Windows XP (KB923689)Security Update for Windows XP (KB938464-v2)Security Update for Windows XP (KB938464)Security Update for Windows XP (KB941569)Security Update for Windows XP (KB946648)Security Update for Windows XP (KB950760)Security Update for Windows XP (KB950762)Security Update for Windows XP (KB950974)Security Update for Windows XP (KB951066)Security Update for Windows XP (KB951376-v2)Security Update for Windows XP (KB951376)Security Update for Windows XP (KB951698)Security Update for Windows XP (KB951748)Security Update for Windows XP (KB952004)Security Update for Windows XP (KB952954)Security Update for Windows XP (KB953839)Security Update for Windows XP (KB954211)Security Update for Windows XP (KB954459)Security Update for Windows XP (KB954600)Security Update for Windows XP (KB955069)Security Update for Windows XP (KB956391)Security Update for Windows XP (KB956572)Security Update for Windows XP (KB956744)Security Update for Windows XP (KB956802)Security Update for Windows XP (KB956803)Security Update for Windows XP (KB956841)Security Update for Windows XP (KB956844)Security Update for Windows XP (KB957095)Security Update for Windows XP (KB957097)Security Update for Windows XP (KB958644)Security Update for Windows XP (KB958687)Security Update for Windows XP (KB958690)Security Update for Windows XP (KB958869)Security Update for Windows XP (KB959426)Security Update for Windows XP (KB960225)Security Update for Windows XP (KB960715)Security Update for Windows XP (KB960803)Security Update for Windows XP (KB960859)Security Update for Windows XP (KB961371)Security Update for Windows XP (KB961373)Security Update for Windows XP (KB961501)Security Update for Windows XP (KB968537)Security Update for Windows XP (KB969059)Security Update for Windows XP (KB969898)Security Update for Windows XP (KB969947)Security Update for Windows XP (KB970238)Security Update for Windows XP (KB970430)Security Update for Windows XP (KB971468)Security Update for Windows XP (KB971486)Security Update for Windows XP (KB971557)Security Update for Windows XP (KB971633)Security Update for Windows XP (KB971657)Security Update for Windows XP (KB972270)Security Update for Windows XP (KB973346)Security Update for Windows XP (KB973354)Security Update for Windows XP (KB973507)Security Update for Windows XP (KB973525)Security Update for Windows XP (KB973869)Security Update for Windows XP (KB973904)Security Update for Windows XP (KB974112)Security Update for Windows XP (KB974318)Security Update for Windows XP (KB974392)Security Update for Windows XP (KB974571)Security Update for Windows XP (KB975025)Security Update for Windows XP (KB975467)Security Update for Windows XP (KB975560)Security Update for Windows XP (KB975561)Security Update for Windows XP (KB975562)Security Update for Windows XP (KB975713)Security Update for Windows XP (KB977165)Security Update for Windows XP (KB977816)Security Update for Windows XP (KB977914)Security Update for Windows XP (KB978037)Security Update for Windows XP (KB978251)Security Update for Windows XP (KB978262)Security Update for Windows XP (KB978338)Security Update for Windows XP (KB978542)Security Update for Windows XP (KB978601)Security Update for Windows XP (KB978706)Security Update for Windows XP (KB979309)Security Update for Windows XP (KB979482)Security Update for Windows XP (KB979559)Security Update for Windows XP (KB979683)Security Update for Windows XP (KB979687)Security Update for Windows XP (KB980195)Security Update for Windows XP (KB980218)Security Update for Windows XP (KB980232)Security Update for Windows XP (KB980436)Security Update for Windows XP (KB981322)Security Update for Windows XP (KB981852)Security Update for Windows XP (KB981957)Security Update for Windows XP (KB981997)Security Update for Windows XP (KB982132)Security Update for Windows XP (KB982214)Security Update for Windows XP (KB982665)Security Update for Windows XP (KB982802)SFRSHASTAskin0001SKINXSDKSoftV92 Data Fax Modem with SmartCPSonic EncodersstaticcrswMSMThe Poppit! ShowUpdate for Microsoft .NET Framework 3.5 SP1 (KB963707)Update for Windows Internet Explorer 8 (KB971930)Update for Windows Internet Explorer 8 (KB976662)Update for Windows Internet Explorer 8 (KB976749)Update for Windows Internet Explorer 8 (KB980182)Update for Windows XP (KB2141007)Update for Windows XP (KB2345886)Update for Windows XP (KB2467659)Update for Windows XP (KB2541763)Update for Windows XP (KB2607712)Update for Windows XP (KB2616676)Update for Windows XP (KB951072-v2)Update for Windows XP (KB951978)Update for Windows XP (KB953356)Update for Windows XP (KB955759)Update for Windows XP (KB955839)Update for Windows XP (KB967715)Update for Windows XP (KB968389)Update for Windows XP (KB971029)Update for Windows XP (KB971737)Update for Windows XP (KB973687)Update for Windows XP (KB973815)Update Rollup 1 for Windows XP Media Center Edition 2005 with HDTV Support (KB873369)Viewpoint Media PlayerVPRINTOLWebFldrs XPWindows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0)Windows Genuine Advantage Notifications (KB905474)Windows Genuine Advantage Validation Tool (KB892130)Windows Internet Explorer 7Windows Internet Explorer 8Windows XP Media Center Edition 2005 KB890629Windows XP Media Center Edition 2005 KB890760Windows XP Media Center Edition 2005 KB895198Windows XP Media Center Edition 2005 KB895678Windows XP Media Center Edition 2005 KB973768Windows XP Service Pack 3WIRELESSWorks UpgradeWorld of WarcraftYahoo! Browser ServicesYahoo! BrowserPlus 2.9.8Yahoo! Internet MailYahoo! MessengerYahoo! Software UpdateYahoo! Toolbar.==== End Of File ===========================TDSSKiller14:18:05.0217 6040 TDSS rootkit removing tool 2.6.21.0 Nov 24 2011 12:32:4414:18:05.0498 6040 ============================================================14:18:05.0498 6040 Current date / time: 2011/11/27 14:18:05.049814:18:05.0498 6040 SystemInfo:14:18:05.0498 6040 14:18:05.0498 6040 OS Version: 5.1.2600 ServicePack: 3.014:18:05.0498 6040 Product type: Workstation14:18:05.0498 6040 ComputerName: EMACHINE14:18:05.0498 6040 UserName: Owner14:18:05.0498 6040 Windows directory: C:\WINDOWS14:18:05.0498 6040 System windows directory: C:\WINDOWS14:18:05.0498 6040 Processor architecture: Intel x8614:18:05.0498 6040 Number of processors: 114:18:05.0498 6040 Page size: 0x100014:18:05.0498 6040 Boot type: Normal boot14:18:05.0498 6040 ============================================================14:18:06.0842 6040 Initialize success14:18:11.0998 9036 ============================================================14:18:11.0998 9036 Scan started14:18:11.0998 9036 Mode: Manual; 14:18:11.0998 9036 ============================================================14:18:13.0108 9036 Abiosdsk - ok14:18:13.0436 9036 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS14:18:13.0436 9036 abp480n5 - ok14:18:13.0795 9036 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys14:18:13.0811 9036 ACPI - ok14:18:14.0139 9036 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys14:18:14.0139 9036 ACPIEC - ok14:18:14.0436 9036 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys14:18:14.0436 9036 adpu160m - ok14:18:14.0795 9036 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys14:18:14.0795 9036 aec - ok14:18:15.0139 9036 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys14:18:15.0139 9036 AFD - ok14:18:15.0483 9036 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys14:18:15.0483 9036 agp440 - ok14:18:15.0827 9036 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys14:18:15.0827 9036 agpCPQ - ok14:18:16.0139 9036 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys14:18:16.0139 9036 Aha154x - ok14:18:16.0452 9036 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys14:18:16.0452 9036 aic78u2 - ok14:18:16.0811 9036 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys14:18:16.0811 9036 aic78xx - ok14:18:17.0280 9036 ALCXWDM (95aa37bec6c72c277c2caeaee736dd2d) C:\WINDOWS\system32\drivers\ALCXWDM.SYS14:18:17.0389 9036 ALCXWDM - ok14:18:17.0733 9036 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys14:18:17.0733 9036 AliIde - ok14:18:18.0077 9036 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys14:18:18.0077 9036 alim1541 - ok14:18:18.0420 9036 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys14:18:18.0420 9036 amdagp - ok14:18:18.0780 9036 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys14:18:18.0780 9036 amsint - ok14:18:19.0155 9036 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys14:18:19.0155 9036 Arp1394 - ok14:18:19.0452 9036 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys14:18:19.0452 9036 asc - ok14:18:19.0795 9036 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys14:18:19.0795 9036 asc3350p - ok14:18:20.0092 9036 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys14:18:20.0108 9036 asc3550 - ok14:18:20.0483 9036 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys14:18:20.0483 9036 AsyncMac - ok14:18:20.0842 9036 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys14:18:20.0842 9036 atapi - ok14:18:21.0155 9036 Atdisk - ok14:18:21.0545 9036 ati2mtag (8759322ffc1a50569c1e5528ee8026b7) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys14:18:21.0561 9036 ati2mtag - ok14:18:21.0920 9036 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys14:18:21.0920 9036 Atmarpc - ok14:18:22.0264 9036 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys14:18:22.0264 9036 audstub - ok14:18:22.0686 9036 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys14:18:22.0686 9036 Beep - ok14:18:22.0998 9036 BT - ok14:18:23.0311 9036 Btcsrusb - ok14:18:23.0655 9036 BtHidBus (ac2e61482a57ea50730f8c2679f37040) C:\WINDOWS\system32\Drivers\BtHidBus.sys14:18:23.0655 9036 BtHidBus - ok14:18:23.0983 9036 btnetBUs (6783c5c81bfb640469468a80dfa1ccb3) C:\WINDOWS\system32\Drivers\btnetBus.sys14:18:23.0983 9036 btnetBUs - ok14:18:24.0327 9036 BVRPMPR5 (248dfa5762dde38dfddbbd44149e9d7a) C:\WINDOWS\system32\drivers\BVRPMPR5.SYS14:18:24.0327 9036 BVRPMPR5 - ok14:18:24.0623 9036 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys14:18:24.0623 9036 cbidf - ok14:18:24.0936 9036 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys14:18:24.0936 9036 cbidf2k - ok14:18:25.0248 9036 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys14:18:25.0248 9036 cd20xrnt - ok14:18:25.0592 9036 CdaD10BA (841cefab8228ee691705d059e7f21c47) C:\WINDOWS\system32\drivers\CdaD10BA.SYS14:18:25.0608 9036 CdaD10BA - ok14:18:25.0920 9036 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys14:18:25.0920 9036 Cdaudio - ok14:18:26.0264 9036 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys14:18:26.0264 9036 Cdfs - ok14:18:26.0592 9036 Cdr4_xp (837eef65af62d4e8a37c41d3879f7274) C:\WINDOWS\system32\drivers\Cdr4_xp.sys14:18:26.0592 9036 Cdr4_xp - ok14:18:26.0936 9036 Cdralw2k (579da2f9f5401f55dae2cf8779d61dfc) C:\WINDOWS\system32\drivers\Cdralw2k.sys14:18:26.0936 9036 Cdralw2k - ok14:18:27.0233 9036 Cdrom (4b0a100eaf5c49ef3cca8c641431eacc) C:\WINDOWS\system32\DRIVERS\cdrom.sys14:18:27.0233 9036 Cdrom - ok14:18:27.0561 9036 Changer - ok14:18:27.0920 9036 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys14:18:27.0920 9036 CmdIde - ok14:18:28.0295 9036 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys14:18:28.0295 9036 Cpqarray - ok14:18:28.0655 9036 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys14:18:28.0670 9036 dac2w2k - ok14:18:29.0030 9036 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys14:18:29.0030 9036 dac960nt - ok14:18:29.0405 9036 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys14:18:29.0405 9036 Disk - ok14:18:29.0780 9036 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys14:18:29.0795 9036 dmboot - ok14:18:30.0155 9036 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys14:18:30.0170 9036 dmio - ok14:18:30.0514 9036 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys14:18:30.0514 9036 dmload - ok14:18:30.0873 9036 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys14:18:30.0873 9036 DMusic - ok14:18:31.0248 9036 dot4 (3e4b043f8bc6be1d4820cc6c9c500306) C:\WINDOWS\system32\DRIVERS\Dot4.sys14:18:31.0248 9036 dot4 - ok14:18:31.0608 9036 Dot4Print (77ce63a8a34ae23d9fe4c7896d1debe7) C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys14:18:31.0608 9036 Dot4Print - ok14:18:31.0936 9036 Dot4Scan (bd05306428da63369692477ddc0f6f5f) C:\WINDOWS\system32\DRIVERS\Dot4Scan.sys14:18:31.0936 9036 Dot4Scan - ok14:18:32.0358 9036 dot4usb (6ec3af6bb5b30e488a0c559921f012e1) C:\WINDOWS\system32\DRIVERS\dot4usb.sys14:18:32.0420 9036 dot4usb - ok14:18:33.0170 9036 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys14:18:33.0170 9036 dpti2o - ok14:18:33.0514 9036 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys14:18:33.0514 9036 drmkaud - ok14:18:33.0920 9036 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys14:18:33.0936 9036 Fastfat - ok14:18:34.0280 9036 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys14:18:34.0280 9036 Fdc - ok14:18:34.0623 9036 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys14:18:34.0623 9036 Fips - ok14:18:34.0983 9036 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys14:18:34.0983 9036 Flpydisk - ok14:18:35.0342 9036 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys14:18:35.0342 9036 FltMgr - ok14:18:35.0686 9036 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys14:18:35.0686 9036 Fs_Rec - ok14:18:36.0045 9036 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys14:18:36.0045 9036 Ftdisk - ok14:18:36.0405 9036 gdiw2k - ok14:18:36.0795 9036 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys14:18:36.0795 9036 GEARAspiWDM - ok14:18:37.0139 9036 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys14:18:37.0139 9036 Gpc - ok14:18:37.0483 9036 hoiqslbv - ok14:18:37.0889 9036 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys14:18:37.0889 9036 hpn - ok14:18:38.0248 9036 HPZid412 (5faba4775d4c61e55ec669d643ffc71f) C:\WINDOWS\system32\DRIVERS\HPZid412.sys14:18:38.0264 9036 HPZid412 - ok14:18:38.0608 9036 HPZipr12 (a3c43980ee1f1beac778b44ea65dbdd4) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys14:18:38.0608 9036 HPZipr12 - ok14:18:38.0967 9036 HPZius12 (2906949bd4e206f2bb0dd1896ce9f66f) C:\WINDOWS\system32\DRIVERS\HPZius12.sys14:18:38.0967 9036 HPZius12 - ok14:18:39.0327 9036 HSFHWBS2 (33dfc0afa95f9a2c753ff2adb7d4a21f) C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys14:18:39.0327 9036 HSFHWBS2 - ok14:18:39.0717 9036 HSF_DP (b2dfc168d6f7512faea085253c5a37ad) C:\WINDOWS\system32\DRIVERS\HSF_DP.sys14:18:39.0748 9036 HSF_DP - ok14:18:40.0092 9036 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys14:18:40.0108 9036 HTTP - ok14:18:40.0436 9036 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys14:18:40.0436 9036 i2omgmt - ok14:18:40.0795 9036 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys14:18:40.0795 9036 i2omp - ok14:18:41.0155 9036 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys14:18:41.0155 9036 i8042prt - ok14:18:41.0530 9036 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys14:18:41.0530 9036 Imapi - ok14:18:41.0920 9036 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys14:18:41.0920 9036 ini910u - ok14:18:42.0280 9036 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys14:18:42.0280 9036 IntelIde - ok14:18:42.0655 9036 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys14:18:42.0655 9036 Ip6Fw - ok14:18:43.0014 9036 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys14:18:43.0014 9036 IpFilterDriver - ok14:18:43.0358 9036 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys14:18:43.0358 9036 IpInIp - ok14:18:43.0717 9036 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys14:18:43.0717 9036 IpNat - ok14:18:44.0077 9036 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys14:18:44.0077 9036 IPSec - ok14:18:44.0420 9036 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys14:18:44.0420 9036 IRENUM - ok14:18:44.0795 9036 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys14:18:44.0795 9036 isapnp - ok14:18:45.0139 9036 IvtBtBUs (01cbb39001afda1152f3fce15ab646ea) C:\WINDOWS\system32\Drivers\IvtBtBus.sys14:18:45.0139 9036 IvtBtBUs - ok14:18:45.0467 9036 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys14:18:45.0483 9036 Kbdclass - ok14:18:45.0842 9036 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys14:18:45.0842 9036 kmixer - ok14:18:46.0186 9036 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys14:18:46.0186 9036 KSecDD - ok14:18:46.0483 9036 lbrtfdc - ok14:18:46.0842 9036 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\WINDOWS\system32\drivers\mbam.sys14:18:46.0842 9036 MBAMProtector - ok14:18:47.0139 9036 MBAMSwissArmy - ok14:18:47.0498 9036 mdmxsdk (195741aee20369980796b557358cd774) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys14:18:47.0498 9036 mdmxsdk - ok14:18:47.0889 9036 MHNDRV (7f2f1d2815a6449d346fcccbc569fbd6) C:\WINDOWS\system32\DRIVERS\mhndrv.sys14:18:47.0889 9036 MHNDRV - ok14:18:48.0233 9036 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys14:18:48.0248 9036 mnmdd - ok14:18:48.0608 9036 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys14:18:48.0608 9036 Modem - ok14:18:48.0967 9036 motmodem (fe80c18ba448ddd76b7bead9eb203d37) C:\WINDOWS\system32\DRIVERS\motmodem.sys14:18:48.0967 9036 motmodem - ok14:18:49.0295 9036 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys14:18:49.0295 9036 Mouclass - ok14:18:49.0655 9036 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys14:18:49.0655 9036 MountMgr - ok14:18:49.0998 9036 MpFilter (fee0baded54222e9f1dae9541212aab1) C:\WINDOWS\system32\DRIVERS\MpFilter.sys14:18:50.0014 9036 MpFilter - ok14:18:50.0139 9036 MpKsl1053e1c2 - ok14:18:50.0155 9036 MpKsl128603ce - ok14:18:50.0170 9036 MpKsl18edb515 - ok14:18:50.0186 9036 MpKsl193d2b14 - ok14:18:50.0202 9036 MpKsl1ba45776 - ok14:18:50.0217 9036 MpKsl1c44341c - ok14:18:50.0233 9036 MpKsl1e518544 - ok14:18:50.0248 9036 MpKsl225d22a0 - ok14:18:50.0264 9036 MpKsl26734daa - ok14:18:50.0280 9036 MpKsl27dfd542 - ok14:18:50.0295 9036 MpKsl2aa06fd3 - ok14:18:50.0311 9036 MpKsl395783ad - ok14:18:50.0327 9036 MpKsl461ab117 - ok14:18:50.0358 9036 MpKsl4d39c53c - ok14:18:50.0373 9036 MpKsl568fd414 - ok14:18:50.0389 9036 MpKsl68117935 - ok14:18:50.0405 9036 MpKsl6dc75969 - ok14:18:50.0420 9036 MpKsl8804e3c8 - ok14:18:50.0436 9036 MpKsl8e5aeb5b - ok14:18:50.0452 9036 MpKsl91b90cc1 - ok14:18:50.0467 9036 MpKsl9c78c2b4 - ok14:18:50.0483 9036 MpKsl9d14898e - ok14:18:50.0498 9036 MpKsl9d44a0f9 - ok14:18:50.0514 9036 MpKsla1335bc1 - ok14:18:50.0530 9036 MpKsla9238964 - ok14:18:50.0545 9036 MpKslabd28ac4 - ok14:18:50.0561 9036 MpKslad7d60bc - ok14:18:50.0577 9036 MpKslb1b803d0 - ok14:18:50.0592 9036 MpKslb320f895 - ok14:18:50.0608 9036 MpKslb907d62f - ok14:18:50.0639 9036 MpKslbc933e7f - ok14:18:50.0639 9036 MpKslbe40c4b0 - ok14:18:50.0670 9036 MpKslcb5a29e0 - ok14:18:50.0717 9036 MpKsld1bff95c (5f53edfead46fa7adb78eee9ecce8fdf) c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{8BE61CD4-9022-4C23-B143-CA4B1A92242B}\MpKsld1bff95c.sys14:18:50.0717 9036 MpKsld1bff95c - ok14:18:50.0733 9036 MpKsld616c37b - ok14:18:50.0748 9036 MpKsld7ca0242 - ok14:18:50.0748 9036 MpKsld99e6c53 - ok14:18:50.0764 9036 MpKsle3de4626 - ok14:18:50.0795 9036 MpKslf22068e3 - ok14:18:50.0811 9036 MpKslf8f79d2e - ok14:18:50.0827 9036 MpKslfbe4fd56 - ok14:18:51.0170 9036 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys14:18:51.0170 9036 mraid35x - ok14:18:51.0514 9036 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys14:18:51.0530 9036 MRxDAV - ok14:18:51.0889 9036 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys14:18:51.0905 9036 MRxSmb - ok14:18:52.0264 9036 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys14:18:52.0264 9036 Msfs - ok14:18:52.0639 9036 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys14:18:52.0639 9036 MSKSSRV - ok14:18:52.0983 9036 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys14:18:52.0983 9036 MSPCLOCK - ok14:18:53.0327 9036 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys14:18:53.0342 9036 MSPQM - ok14:18:53.0702 9036 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys14:18:53.0702 9036 mssmbios - ok14:18:54.0061 9036 MSW_USB (b648018aabe80d62a099e105f4164596) C:\WINDOWS\system32\DRIVERS\MN510-51.sys14:18:54.0092 9036 MSW_USB - ok14:18:54.0420 9036 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys14:18:54.0436 9036 Mup - ok14:18:54.0764 9036 mxnic (e1cdf20697d992cf83ff86dd04df1285) C:\WINDOWS\system32\DRIVERS\mxnic.sys14:18:54.0764 9036 mxnic - ok14:18:55.0155 9036 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys14:18:55.0170 9036 NDIS - ok14:18:55.0498 9036 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys14:18:55.0498 9036 NdisTapi - ok14:18:55.0842 9036 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys14:18:55.0842 9036 Ndisuio - ok14:18:56.0186 9036 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys14:18:56.0202 9036 NdisWan - ok14:18:56.0545 9036 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys14:18:56.0545 9036 NDProxy - ok14:18:56.0905 9036 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys14:18:56.0905 9036 NetBIOS - ok14:18:57.0248 9036 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys14:18:57.0248 9036 NetBT - ok14:18:57.0686 9036 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys14:18:57.0686 9036 NIC1394 - ok14:18:58.0030 9036 nm (1e421a6bcf2203cc61b821ada9de878b) C:\WINDOWS\system32\DRIVERS\NMnt.sys14:18:58.0030 9036 nm - ok14:18:58.0358 9036 NPF (b9730495e0cf674680121e34bd95a73b) C:\WINDOWS\system32\drivers\NPF.sys14:18:58.0373 9036 NPF - ok14:18:58.0702 9036 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys14:18:58.0702 9036 Npfs - ok14:18:59.0077 9036 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys14:18:59.0108 9036 Ntfs - ok14:18:59.0467 9036 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys14:18:59.0467 9036 Null - ok14:18:59.0873 9036 nv (2b298519edbfcf451d43e0f1e8f1006d) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys14:18:59.0967 9036 nv - ok14:19:00.0295 9036 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys14:19:00.0295 9036 NwlnkFlt - ok14:19:00.0639 9036 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys14:19:00.0639 9036 NwlnkFwd - ok14:19:00.0983 9036 NwlnkIpx (8b8b1be2dba4025da6786c645f77f123) C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys14:19:00.0983 9036 NwlnkIpx - ok14:19:01.0327 9036 NwlnkNb (56d34a67c05e94e16377c60609741ff8) C:\WINDOWS\system32\DRIVERS\nwlnknb.sys14:19:01.0327 9036 NwlnkNb - ok14:19:01.0670 9036 NwlnkSpx (c0bb7d1615e1acbdc99757f6ceaf8cf0) C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys14:19:01.0670 9036 NwlnkSpx - ok14:19:02.0030 9036 NWRDR (36b9b950e3d2e100970a48d8bad86740) C:\WINDOWS\system32\DRIVERS\nwrdr.sys14:19:02.0030 9036 NWRDR - ok14:19:02.0405 9036 odysseyIM3 (dd03bdd1459d1966ee640f63221c175a) C:\WINDOWS\system32\DRIVERS\odysseyIM3.sys14:19:02.0405 9036 odysseyIM3 - ok14:19:02.0780 9036 ohci1394 (8b61e22e07eeb703e2168fbfe1073545) C:\WINDOWS\system32\DRIVERS\ohci1394.sys14:19:02.0780 9036 ohci1394 - ok14:19:03.0123 9036 P3 (c90018bafdc7098619a4a95b046b30f3) C:\WINDOWS\system32\DRIVERS\p3.sys14:19:03.0139 9036 P3 - ok14:19:03.0483 9036 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys14:19:03.0483 9036 Parport - ok14:19:03.0842 9036 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys14:19:03.0842 9036 PartMgr - ok14:19:04.0202 9036 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys14:19:04.0202 9036 ParVdm - ok14:19:04.0545 9036 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys14:19:04.0545 9036 pccsmcfd - ok14:19:04.0889 9036 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys14:19:04.0889 9036 PCI - ok14:19:05.0202 9036 PCIDump - ok14:19:05.0873 9036 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys14:19:05.0873 9036 PCIIde - ok14:19:06.0264 9036 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys14:19:06.0264 9036 Pcmcia - ok14:19:06.0639 9036 PDCOMP - ok14:19:06.0936 9036 PDFRAME - ok14:19:07.0280 9036 PDRELI - ok14:19:07.0639 9036 PDRFRAME - ok14:19:07.0983 9036 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys14:19:07.0983 9036 perc2 - ok14:19:08.0342 9036 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys14:19:08.0342 9036 perc2hib - ok14:19:08.0702 9036 pfc (6c1618a07b49e3873582b6449e744088) C:\WINDOWS\system32\drivers\pfc.sys14:19:08.0702 9036 pfc - ok14:19:08.0998 9036 pifcwnbm - ok14:19:09.0358 9036 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys14:19:09.0358 9036 PptpMiniport - ok14:19:09.0717 9036 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys14:19:09.0717 9036 Processor - ok14:19:10.0077 9036 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys14:19:10.0077 9036 PSched - ok14:19:10.0436 9036 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys14:19:10.0436 9036 Ptilink - ok14:19:10.0780 9036 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\WINDOWS\system32\Drivers\PxHelp20.sys14:19:10.0780 9036 PxHelp20 - ok14:19:11.0139 9036 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys14:19:11.0155 9036 ql1080 - ok14:19:11.0498 9036 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys14:19:11.0498 9036 Ql10wnt - ok14:19:11.0842 9036 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys14:19:11.0842 9036 ql12160 - ok14:19:12.0217 9036 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys14:19:12.0217 9036 ql1240 - ok14:19:12.0561 9036 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys14:19:12.0561 9036 ql1280 - ok14:19:12.0936 9036 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys14:19:12.0936 9036 RasAcd - ok14:19:13.0280 9036 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys14:19:13.0295 9036 Rasl2tp - ok14:19:13.0655 9036 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys14:19:13.0655 9036 RasPppoe - ok14:19:13.0998 9036 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys14:19:13.0998 9036 Raspti - ok14:19:14.0358 9036 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys14:19:14.0358 9036 Rdbss - ok14:19:14.0717 9036 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys14:19:14.0717 9036 RDPCDD - ok14:19:15.0092 9036 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys14:19:15.0092 9036 rdpdr - ok14:19:15.0420 9036 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys14:19:15.0436 9036 RDPWD - ok14:19:15.0780 9036 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys14:19:15.0780 9036 redbook - ok14:19:16.0123 9036 RimUsb (f17713d108aca124a139fde877eef68a) C:\WINDOWS\system32\Drivers\RimUsb.sys14:19:16.0123 9036 RimUsb - ok14:19:16.0452 9036 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys14:19:16.0452 9036 ROOTMODEM - ok14:19:16.0811 9036 RT73 (bf4709c002d632170dc15a282813d6b3) C:\WINDOWS\system32\DRIVERS\rt73.sys14:19:16.0811 9036 RT73 - ok14:19:17.0155 9036 RTL8023xp (e9877aa069dc11b03dbd1d33b8b2a3ca) C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys14:19:17.0155 9036 RTL8023xp - ok14:19:17.0530 9036 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys14:19:17.0530 9036 Secdrv - ok14:19:17.0936 9036 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\drivers\Serial.sys14:19:17.0936 9036 Serial - ok14:19:18.0342 9036 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys14:19:18.0342 9036 Sfloppy - ok14:19:18.0670 9036 Simbad - ok14:19:19.0030 9036 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys14:19:19.0030 9036 sisagp - ok14:19:19.0389 9036 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys14:19:19.0389 9036 Sparrow - ok14:19:19.0748 9036 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys14:19:19.0748 9036 splitter - ok14:19:20.0092 9036 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys14:19:20.0092 9036 sr - ok14:19:20.0467 9036 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys14:19:20.0483 9036 Srv - ok14:19:20.0827 9036 SunkFilt (86ca1a5c15a5a98d5533945fb1120b05) C:\WINDOWS\System32\Drivers\sunkfilt.sys14:19:20.0827 9036 SunkFilt - ok14:19:21.0202 9036 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys14:19:21.0202 9036 swenum - ok14:19:21.0561 9036 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys14:19:21.0561 9036 swmidi - ok14:19:21.0889 9036 SWMX00 - ok14:19:22.0202 9036 SWNC5E00 - ok14:19:22.0561 9036 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys14:19:22.0561 9036 symc810 - ok14:19:22.0920 9036 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys14:19:22.0920 9036 symc8xx - ok14:19:23.0264 9036 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys14:19:23.0264 9036 sym_hi - ok14:19:23.0623 9036 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys14:19:23.0623 9036 sym_u3 - ok14:19:23.0983 9036 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys14:19:23.0983 9036 sysaudio - ok14:19:24.0358 9036 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys14:19:24.0373 9036 Tcpip - ok14:19:24.0717 9036 Tcpip6 (4e53bbcc4be37d7a4bd6ef1098c89ff7) C:\WINDOWS\system32\DRIVERS\tcpip6.sys14:19:24.0717 9036 Tcpip6 - ok14:19:25.0061 9036 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys14:19:25.0061 9036 TDPIPE - ok14:19:25.0373 9036 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys14:19:25.0373 9036 TDTCP - ok14:19:25.0702 9036 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys14:19:25.0717 9036 TermDD - ok14:19:26.0061 9036 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\system32\DRIVERS\toside.sys14:19:26.0061 9036 TosIde - ok14:19:26.0436 9036 tunmp (8f861eda21c05857eb8197300a92501c) C:\WINDOWS\system32\DRIVERS\tunmp.sys14:19:26.0436 9036 tunmp - ok14:19:26.0452 9036 Suspicious service (Hidden): UACd.sys14:19:26.0764 9036 UACd.sys (ffd7cfafe1ffdc032087a7a6636b99a2) C:\WINDOWS\system32\drivers\UACyaacntahwdornkuhw.sys14:19:26.0764 9036 Suspicious file (NoAccess): C:\WINDOWS\system32\drivers\UACyaacntahwdornkuhw.sys. md5: ffd7cfafe1ffdc032087a7a6636b99a214:19:26.0780 9036 Suspicious file (Hidden): C:\WINDOWS\system32\drivers\UACyaacntahwdornkuhw.sys. md5: ffd7cfafe1ffdc032087a7a6636b99a214:19:26.0780 9036 UACd.sys ( Rootkit.Win32.TDSS.tdl2 ) - infected14:19:26.0780 9036 UACd.sys - detected Rootkit.Win32.TDSS.tdl2 (0)14:19:27.0092 9036 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys14:19:27.0108 9036 Udfs - ok14:19:27.0436 9036 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys14:19:27.0452 9036 ultra - ok14:19:27.0842 9036 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys14:19:27.0842 9036 Update - ok14:19:28.0217 9036 USBAAPL (4b8a9c16b6d9258ed99c512aecb8c555) C:\WINDOWS\system32\Drivers\usbaapl.sys14:19:28.0217 9036 USBAAPL - ok14:19:28.0561 9036 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys14:19:28.0561 9036 usbccgp - ok14:19:28.0920 9036 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys14:19:28.0920 9036 usbehci - ok14:19:29.0280 9036 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys14:19:29.0280 9036 usbhub - ok14:19:29.0623 9036 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys14:19:29.0623 9036 usbohci - ok14:19:29.0967 9036 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys14:19:29.0967 9036 usbprint - ok14:19:30.0311 9036 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys14:19:30.0311 9036 usbscan - ok14:19:30.0655 9036 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS14:19:30.0655 9036 USBSTOR - ok14:19:30.0967 9036 VComm - ok14:19:31.0280 9036 VcommMgr - ok14:19:31.0623 9036 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys14:19:31.0623 9036 VgaSave - ok14:19:32.0014 9036 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys14:19:32.0014 9036 viaagp - ok14:19:32.0639 9036 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys14:19:32.0639 9036 ViaIde - ok14:19:32.0983 9036 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys14:19:32.0998 9036 VolSnap - ok14:19:33.0358 9036 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys14:19:33.0358 9036 Wanarp - ok14:19:33.0670 9036 wanatw - ok14:19:34.0030 9036 Wdf01000 (fd47474bd21794508af449d9d91af6e6) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys14:19:34.0045 9036 Wdf01000 - ok14:19:34.0342 9036 WDICA - ok14:19:34.0702 9036 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys14:19:34.0702 9036 wdmaud - ok14:19:35.0077 9036 winachsf (2dc7c0b6175a0a8ed84a4f70199c93b5) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys14:19:35.0108 9036 winachsf - ok14:19:35.0530 9036 WpdUsb (d87ea9f191df6731818ffd93659badf4) C:\WINDOWS\system32\Drivers\wpdusb.sys14:19:35.0530 9036 WpdUsb - ok14:19:35.0858 9036 zabslmsf - ok14:19:36.0155 9036 zvuueeds - ok14:19:36.0248 9036 MBR (0x1B8) (b20939cd98b7710036274839082ae757) \Device\Harddisk0\DR014:19:36.0248 9036 \Device\Harddisk0\DR0 - ok14:19:36.0280 9036 Boot (0x1200) (4d98067400fe9c2200a8bda154034897) \Device\Harddisk0\DR0\Partition014:19:36.0280 9036 \Device\Harddisk0\DR0\Partition0 - ok14:19:36.0280 9036 ============================================================14:19:36.0280 9036 Scan finished14:19:36.0280 9036 ============================================================14:19:36.0311 8748 Detected object count: 114:19:36.0311 8748 Actual detected object count: 114:19:48.0592 8748 UACd.sys ( Rootkit.Win32.TDSS.tdl2 ) - skipped by user14:19:48.0592 8748 UACd.sys ( Rootkit.Win32.TDSS.tdl2 ) - User select action: Skip Link to post Share on other sites More sharing options...
LDTate Posted November 27, 2011 ID:498722 Share Posted November 27, 2011 Run TDSSKiller and fix these14:19:48.0592 8748 UACd.sys ( Rootkit.Win32.TDSS.tdl2 ) - skipped by user14:19:48.0592 8748 UACd.sys ( Rootkit.Win32.TDSS.tdl2 ) - User select action: Skip Link to post Share on other sites More sharing options...
lisa58 Posted November 27, 2011 Author ID:498732 Share Posted November 27, 2011 Do you mean quarrantine or delete? Those are the only options besides skip. Link to post Share on other sites More sharing options...
LDTate Posted November 27, 2011 ID:498734 Share Posted November 27, 2011 quarrantine Link to post Share on other sites More sharing options...
lisa58 Posted November 27, 2011 Author ID:498744 Share Posted November 27, 2011 Here is the new report.15:06:06.0373 14060 TDSS rootkit removing tool 2.6.21.0 Nov 24 2011 12:32:4415:06:06.0702 14060 ============================================================15:06:06.0702 14060 Current date / time: 2011/11/27 15:06:06.070215:06:06.0702 14060 SystemInfo:15:06:06.0702 14060 15:06:06.0702 14060 OS Version: 5.1.2600 ServicePack: 3.015:06:06.0702 14060 Product type: Workstation15:06:06.0702 14060 ComputerName: EMACHINE15:06:06.0702 14060 UserName: Owner15:06:06.0702 14060 Windows directory: C:\WINDOWS15:06:06.0702 14060 System windows directory: C:\WINDOWS15:06:06.0702 14060 Processor architecture: Intel x8615:06:06.0702 14060 Number of processors: 115:06:06.0702 14060 Page size: 0x100015:06:06.0702 14060 Boot type: Normal boot15:06:06.0702 14060 ============================================================15:06:07.0858 14060 Initialize success15:06:09.0514 12952 ============================================================15:06:09.0514 12952 Scan started15:06:09.0514 12952 Mode: Manual; 15:06:09.0514 12952 ============================================================15:06:10.0670 12952 Abiosdsk - ok15:06:10.0983 12952 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS15:06:10.0983 12952 abp480n5 - ok15:06:11.0358 12952 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys15:06:11.0358 12952 ACPI - ok15:06:11.0686 12952 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys15:06:11.0686 12952 ACPIEC - ok15:06:11.0967 12952 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys15:06:11.0983 12952 adpu160m - ok15:06:12.0311 12952 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys15:06:12.0311 12952 aec - ok15:06:12.0655 12952 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys15:06:12.0655 12952 AFD - ok15:06:13.0327 12952 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys15:06:13.0327 12952 agp440 - ok15:06:13.0780 12952 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys15:06:13.0780 12952 agpCPQ - ok15:06:14.0092 12952 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys15:06:14.0092 12952 Aha154x - ok15:06:14.0405 12952 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys15:06:14.0405 12952 aic78u2 - ok15:06:14.0733 12952 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys15:06:14.0733 12952 aic78xx - ok15:06:15.0170 12952 ALCXWDM (95aa37bec6c72c277c2caeaee736dd2d) C:\WINDOWS\system32\drivers\ALCXWDM.SYS15:06:15.0186 12952 ALCXWDM - ok15:06:15.0514 12952 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys15:06:15.0514 12952 AliIde - ok15:06:15.0873 12952 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys15:06:15.0873 12952 alim1541 - ok15:06:16.0233 12952 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys15:06:16.0233 12952 amdagp - ok15:06:16.0545 12952 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys15:06:16.0545 12952 amsint - ok15:06:16.0967 12952 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys15:06:16.0967 12952 Arp1394 - ok15:06:17.0327 12952 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys15:06:17.0327 12952 asc - ok15:06:17.0623 12952 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys15:06:17.0623 12952 asc3350p - ok15:06:17.0936 12952 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys15:06:17.0936 12952 asc3550 - ok15:06:18.0295 12952 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys15:06:18.0295 12952 AsyncMac - ok15:06:18.0655 12952 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys15:06:18.0655 12952 atapi - ok15:06:18.0967 12952 Atdisk - ok15:06:19.0342 12952 ati2mtag (8759322ffc1a50569c1e5528ee8026b7) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys15:06:19.0342 12952 ati2mtag - ok15:06:19.0702 12952 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys15:06:19.0702 12952 Atmarpc - ok15:06:20.0014 12952 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys15:06:20.0014 12952 audstub - ok15:06:20.0327 12952 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys15:06:20.0327 12952 Beep - ok15:06:20.0655 12952 BT - ok15:06:20.0952 12952 Btcsrusb - ok15:06:21.0295 12952 BtHidBus (ac2e61482a57ea50730f8c2679f37040) C:\WINDOWS\system32\Drivers\BtHidBus.sys15:06:21.0295 12952 BtHidBus - ok15:06:21.0623 12952 btnetBUs (6783c5c81bfb640469468a80dfa1ccb3) C:\WINDOWS\system32\Drivers\btnetBus.sys15:06:21.0623 12952 btnetBUs - ok15:06:21.0967 12952 BVRPMPR5 (248dfa5762dde38dfddbbd44149e9d7a) C:\WINDOWS\system32\drivers\BVRPMPR5.SYS15:06:21.0967 12952 BVRPMPR5 - ok15:06:22.0280 12952 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys15:06:22.0280 12952 cbidf - ok15:06:22.0577 12952 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys15:06:22.0577 12952 cbidf2k - ok15:06:22.0889 12952 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys15:06:22.0889 12952 cd20xrnt - ok15:06:23.0233 12952 CdaD10BA (841cefab8228ee691705d059e7f21c47) C:\WINDOWS\system32\drivers\CdaD10BA.SYS15:06:23.0233 12952 CdaD10BA - ok15:06:23.0545 12952 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys15:06:23.0561 12952 Cdaudio - ok15:06:23.0905 12952 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys15:06:23.0905 12952 Cdfs - ok15:06:24.0233 12952 Cdr4_xp (837eef65af62d4e8a37c41d3879f7274) C:\WINDOWS\system32\drivers\Cdr4_xp.sys15:06:24.0233 12952 Cdr4_xp - ok15:06:24.0561 12952 Cdralw2k (579da2f9f5401f55dae2cf8779d61dfc) C:\WINDOWS\system32\drivers\Cdralw2k.sys15:06:24.0561 12952 Cdralw2k - ok15:06:24.0889 12952 Cdrom (4b0a100eaf5c49ef3cca8c641431eacc) C:\WINDOWS\system32\DRIVERS\cdrom.sys15:06:24.0889 12952 Cdrom - ok15:06:25.0233 12952 Changer - ok15:06:25.0561 12952 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys15:06:25.0561 12952 CmdIde - ok15:06:25.0936 12952 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys15:06:25.0936 12952 Cpqarray - ok15:06:26.0295 12952 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys15:06:26.0311 12952 dac2w2k - ok15:06:26.0655 12952 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys15:06:26.0655 12952 dac960nt - ok15:06:27.0030 12952 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys15:06:27.0030 12952 Disk - ok15:06:27.0420 12952 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys15:06:27.0420 12952 dmboot - ok15:06:27.0827 12952 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys15:06:27.0842 12952 dmio - ok15:06:28.0186 12952 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys15:06:28.0186 12952 dmload - ok15:06:28.0545 12952 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys15:06:28.0545 12952 DMusic - ok15:06:28.0920 12952 dot4 (3e4b043f8bc6be1d4820cc6c9c500306) C:\WINDOWS\system32\DRIVERS\Dot4.sys15:06:28.0920 12952 dot4 - ok15:06:29.0280 12952 Dot4Print (77ce63a8a34ae23d9fe4c7896d1debe7) C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys15:06:29.0280 12952 Dot4Print - ok15:06:29.0623 12952 Dot4Scan (bd05306428da63369692477ddc0f6f5f) C:\WINDOWS\system32\DRIVERS\Dot4Scan.sys15:06:29.0623 12952 Dot4Scan - ok15:06:29.0983 12952 dot4usb (6ec3af6bb5b30e488a0c559921f012e1) C:\WINDOWS\system32\DRIVERS\dot4usb.sys15:06:29.0983 12952 dot4usb - ok15:06:30.0342 12952 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys15:06:30.0342 12952 dpti2o - ok15:06:30.0686 12952 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys15:06:30.0686 12952 drmkaud - ok15:06:31.0045 12952 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys15:06:31.0045 12952 Fastfat - ok15:06:31.0420 12952 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys15:06:31.0420 12952 Fdc - ok15:06:31.0764 12952 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys15:06:31.0764 12952 Fips - ok15:06:32.0170 12952 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys15:06:32.0170 12952 Flpydisk - ok15:06:32.0639 12952 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys15:06:32.0655 12952 FltMgr - ok15:06:33.0061 12952 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys15:06:33.0061 12952 Fs_Rec - ok15:06:33.0420 12952 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys15:06:33.0420 12952 Ftdisk - ok15:06:33.0733 12952 gdiw2k - ok15:06:34.0108 12952 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys15:06:34.0108 12952 GEARAspiWDM - ok15:06:34.0452 12952 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys15:06:34.0452 12952 Gpc - ok15:06:34.0795 12952 hoiqslbv - ok15:06:35.0139 12952 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys15:06:35.0139 12952 hpn - ok15:06:35.0483 12952 HPZid412 (5faba4775d4c61e55ec669d643ffc71f) C:\WINDOWS\system32\DRIVERS\HPZid412.sys15:06:35.0483 12952 HPZid412 - ok15:06:35.0842 12952 HPZipr12 (a3c43980ee1f1beac778b44ea65dbdd4) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys15:06:35.0842 12952 HPZipr12 - ok15:06:36.0248 12952 HPZius12 (2906949bd4e206f2bb0dd1896ce9f66f) C:\WINDOWS\system32\DRIVERS\HPZius12.sys15:06:36.0248 12952 HPZius12 - ok15:06:36.0623 12952 HSFHWBS2 (33dfc0afa95f9a2c753ff2adb7d4a21f) C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys15:06:36.0623 12952 HSFHWBS2 - ok15:06:37.0030 12952 HSF_DP (b2dfc168d6f7512faea085253c5a37ad) C:\WINDOWS\system32\DRIVERS\HSF_DP.sys15:06:37.0045 12952 HSF_DP - ok15:06:37.0389 12952 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys15:06:37.0389 12952 HTTP - ok15:06:37.0733 12952 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys15:06:37.0733 12952 i2omgmt - ok15:06:38.0108 12952 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys15:06:38.0108 12952 i2omp - ok15:06:38.0467 12952 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys15:06:38.0467 12952 i8042prt - ok15:06:38.0827 12952 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys15:06:38.0827 12952 Imapi - ok15:06:39.0186 12952 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys15:06:39.0186 12952 ini910u - ok15:06:39.0545 12952 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys15:06:39.0545 12952 IntelIde - ok15:06:39.0889 12952 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys15:06:39.0889 12952 Ip6Fw - ok15:06:40.0248 12952 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys15:06:40.0248 12952 IpFilterDriver - ok15:06:40.0608 12952 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys15:06:40.0608 12952 IpInIp - ok15:06:40.0967 12952 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys15:06:40.0967 12952 IpNat - ok15:06:41.0342 12952 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys15:06:41.0342 12952 IPSec - ok15:06:41.0702 12952 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys15:06:41.0702 12952 IRENUM - ok15:06:42.0061 12952 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys15:06:42.0061 12952 isapnp - ok15:06:42.0405 12952 IvtBtBUs (01cbb39001afda1152f3fce15ab646ea) C:\WINDOWS\system32\Drivers\IvtBtBus.sys15:06:42.0405 12952 IvtBtBUs - ok15:06:42.0748 12952 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys15:06:42.0748 12952 Kbdclass - ok15:06:43.0092 12952 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys15:06:43.0092 12952 kmixer - ok15:06:43.0436 12952 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys15:06:43.0436 12952 KSecDD - ok15:06:43.0733 12952 lbrtfdc - ok15:06:44.0092 12952 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\WINDOWS\system32\drivers\mbam.sys15:06:44.0092 12952 MBAMProtector - ok15:06:44.0389 12952 MBAMSwissArmy - ok15:06:44.0748 12952 mdmxsdk (195741aee20369980796b557358cd774) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys15:06:44.0748 12952 mdmxsdk - ok15:06:45.0092 12952 MHNDRV (7f2f1d2815a6449d346fcccbc569fbd6) C:\WINDOWS\system32\DRIVERS\mhndrv.sys15:06:45.0092 12952 MHNDRV - ok15:06:45.0467 12952 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys15:06:45.0467 12952 mnmdd - ok15:06:45.0827 12952 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys15:06:45.0827 12952 Modem - ok15:06:46.0170 12952 motmodem (fe80c18ba448ddd76b7bead9eb203d37) C:\WINDOWS\system32\DRIVERS\motmodem.sys15:06:46.0170 12952 motmodem - ok15:06:46.0498 12952 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys15:06:46.0498 12952 Mouclass - ok15:06:46.0842 12952 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys15:06:46.0842 12952 MountMgr - ok15:06:47.0295 12952 MpFilter (fee0baded54222e9f1dae9541212aab1) C:\WINDOWS\system32\DRIVERS\MpFilter.sys15:06:47.0295 12952 MpFilter - ok15:06:47.0420 12952 MpKsl1053e1c2 - ok15:06:47.0436 12952 MpKsl128603ce - ok15:06:47.0452 12952 MpKsl18edb515 - ok15:06:47.0467 12952 MpKsl193d2b14 - ok15:06:47.0483 12952 MpKsl1ba45776 - ok15:06:47.0498 12952 MpKsl1c44341c - ok15:06:47.0514 12952 MpKsl1e518544 - ok15:06:47.0530 12952 MpKsl225d22a0 - ok15:06:47.0545 12952 MpKsl26734daa - ok15:06:47.0561 12952 MpKsl27dfd542 - ok15:06:47.0577 12952 MpKsl2aa06fd3 - ok15:06:47.0592 12952 MpKsl395783ad - ok15:06:47.0608 12952 MpKsl461ab117 - ok15:06:47.0623 12952 MpKsl4d39c53c - ok15:06:47.0639 12952 MpKsl568fd414 - ok15:06:47.0655 12952 MpKsl68117935 - ok15:06:47.0670 12952 MpKsl6dc75969 - ok15:06:47.0686 12952 MpKsl8804e3c8 - ok15:06:47.0702 12952 MpKsl8e5aeb5b - ok15:06:47.0717 12952 MpKsl91b90cc1 - ok15:06:47.0733 12952 MpKsl9c78c2b4 - ok15:06:47.0748 12952 MpKsl9d14898e - ok15:06:47.0764 12952 MpKsl9d44a0f9 - ok15:06:47.0780 12952 MpKsla1335bc1 - ok15:06:47.0795 12952 MpKsla9238964 - ok15:06:47.0811 12952 MpKslabd28ac4 - ok15:06:47.0827 12952 MpKslad7d60bc - ok15:06:47.0842 12952 MpKslb1b803d0 - ok15:06:47.0858 12952 MpKslb320f895 - ok15:06:47.0873 12952 MpKslb907d62f - ok15:06:47.0889 12952 MpKslbc933e7f - ok15:06:47.0905 12952 MpKslbe40c4b0 - ok15:06:47.0920 12952 MpKslcb5a29e0 - ok15:06:47.0967 12952 MpKsld1bff95c (5f53edfead46fa7adb78eee9ecce8fdf) c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{8BE61CD4-9022-4C23-B143-CA4B1A92242B}\MpKsld1bff95c.sys15:06:47.0967 12952 MpKsld1bff95c - ok15:06:47.0983 12952 MpKsld616c37b - ok15:06:47.0998 12952 MpKsld7ca0242 - ok15:06:48.0014 12952 MpKsld99e6c53 - ok15:06:48.0030 12952 MpKsle3de4626 - ok15:06:48.0045 12952 MpKslf22068e3 - ok15:06:48.0061 12952 MpKslf8f79d2e - ok15:06:48.0077 12952 MpKslfbe4fd56 - ok15:06:48.0405 12952 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys15:06:48.0420 12952 mraid35x - ok15:06:48.0780 12952 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys15:06:48.0780 12952 MRxDAV - ok15:06:49.0139 12952 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys15:06:49.0139 12952 MRxSmb - ok15:06:49.0483 12952 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys15:06:49.0483 12952 Msfs - ok15:06:49.0858 12952 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys15:06:49.0858 12952 MSKSSRV - ok15:06:50.0233 12952 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys15:06:50.0233 12952 MSPCLOCK - ok15:06:50.0670 12952 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys15:06:50.0670 12952 MSPQM - ok15:06:51.0264 12952 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys15:06:51.0264 12952 mssmbios - ok15:06:51.0920 12952 MSW_USB (b648018aabe80d62a099e105f4164596) C:\WINDOWS\system32\DRIVERS\MN510-51.sys15:06:52.0077 12952 MSW_USB - ok15:06:52.0686 12952 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys15:06:52.0686 12952 Mup - ok15:06:53.0170 12952 mxnic (e1cdf20697d992cf83ff86dd04df1285) C:\WINDOWS\system32\DRIVERS\mxnic.sys15:06:53.0170 12952 mxnic - ok15:06:53.0717 12952 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys15:06:53.0717 12952 NDIS - ok15:06:54.0311 12952 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys15:06:54.0311 12952 NdisTapi - ok15:06:54.0655 12952 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys15:06:54.0655 12952 Ndisuio - ok15:06:55.0030 12952 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys15:06:55.0030 12952 NdisWan - ok15:06:55.0358 12952 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys15:06:55.0373 12952 NDProxy - ok15:06:55.0717 12952 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys15:06:55.0717 12952 NetBIOS - ok15:06:56.0061 12952 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys15:06:56.0061 12952 NetBT - ok15:06:56.0436 12952 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys15:06:56.0436 12952 NIC1394 - ok15:06:56.0889 12952 nm (1e421a6bcf2203cc61b821ada9de878b) C:\WINDOWS\system32\DRIVERS\NMnt.sys15:06:56.0889 12952 nm - ok15:06:57.0248 12952 NPF (b9730495e0cf674680121e34bd95a73b) C:\WINDOWS\system32\drivers\NPF.sys15:06:57.0248 12952 NPF - ok15:06:57.0592 12952 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys15:06:57.0592 12952 Npfs - ok15:06:57.0952 12952 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys15:06:57.0967 12952 Ntfs - ok15:06:58.0373 12952 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys15:06:58.0373 12952 Null - ok15:06:58.0764 12952 nv (2b298519edbfcf451d43e0f1e8f1006d) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys15:06:58.0780 12952 nv - ok15:06:59.0436 12952 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys15:06:59.0436 12952 NwlnkFlt - ok15:07:00.0202 12952 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys15:07:00.0202 12952 NwlnkFwd - ok15:07:00.0686 12952 NwlnkIpx (8b8b1be2dba4025da6786c645f77f123) C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys15:07:00.0686 12952 NwlnkIpx - ok15:07:01.0061 12952 NwlnkNb (56d34a67c05e94e16377c60609741ff8) C:\WINDOWS\system32\DRIVERS\nwlnknb.sys15:07:01.0061 12952 NwlnkNb - ok15:07:01.0420 12952 NwlnkSpx (c0bb7d1615e1acbdc99757f6ceaf8cf0) C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys15:07:01.0420 12952 NwlnkSpx - ok15:07:01.0764 12952 NWRDR (36b9b950e3d2e100970a48d8bad86740) C:\WINDOWS\system32\DRIVERS\nwrdr.sys15:07:01.0764 12952 NWRDR - ok15:07:02.0123 12952 odysseyIM3 (dd03bdd1459d1966ee640f63221c175a) C:\WINDOWS\system32\DRIVERS\odysseyIM3.sys15:07:02.0139 12952 odysseyIM3 - ok15:07:02.0483 12952 ohci1394 (8b61e22e07eeb703e2168fbfe1073545) C:\WINDOWS\system32\DRIVERS\ohci1394.sys15:07:02.0483 12952 ohci1394 - ok15:07:02.0842 12952 P3 (c90018bafdc7098619a4a95b046b30f3) C:\WINDOWS\system32\DRIVERS\p3.sys15:07:02.0842 12952 P3 - ok15:07:03.0186 12952 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys15:07:03.0186 12952 Parport - ok15:07:03.0530 12952 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys15:07:03.0530 12952 PartMgr - ok15:07:03.0873 12952 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys15:07:03.0873 12952 ParVdm - ok15:07:04.0217 12952 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys15:07:04.0217 12952 pccsmcfd - ok15:07:04.0561 12952 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys15:07:04.0561 12952 PCI - ok15:07:04.0873 12952 PCIDump - ok15:07:05.0233 12952 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys15:07:05.0233 12952 PCIIde - ok15:07:05.0577 12952 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys15:07:05.0577 12952 Pcmcia - ok15:07:05.0873 12952 PDCOMP - ok15:07:06.0186 12952 PDFRAME - ok15:07:06.0498 12952 PDRELI - ok15:07:06.0795 12952 PDRFRAME - ok15:07:07.0155 12952 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys15:07:07.0155 12952 perc2 - ok15:07:07.0514 12952 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys15:07:07.0514 12952 perc2hib - ok15:07:07.0889 12952 pfc (6c1618a07b49e3873582b6449e744088) C:\WINDOWS\system32\drivers\pfc.sys15:07:07.0889 12952 pfc - ok15:07:08.0202 12952 pifcwnbm - ok15:07:08.0592 12952 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys15:07:08.0592 12952 PptpMiniport - ok15:07:08.0952 12952 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys15:07:08.0952 12952 Processor - ok15:07:09.0358 12952 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys15:07:09.0358 12952 PSched - ok15:07:09.0717 12952 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys15:07:09.0717 12952 Ptilink - ok15:07:10.0061 12952 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\WINDOWS\system32\Drivers\PxHelp20.sys15:07:10.0077 12952 PxHelp20 - ok15:07:10.0405 12952 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys15:07:10.0405 12952 ql1080 - ok15:07:10.0764 12952 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys15:07:10.0764 12952 Ql10wnt - ok15:07:11.0123 12952 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys15:07:11.0123 12952 ql12160 - ok15:07:11.0467 12952 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys15:07:11.0467 12952 ql1240 - ok15:07:11.0827 12952 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys15:07:11.0827 12952 ql1280 - ok15:07:12.0186 12952 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys15:07:12.0186 12952 RasAcd - ok15:07:12.0530 12952 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys15:07:12.0530 12952 Rasl2tp - ok15:07:12.0905 12952 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys15:07:12.0905 12952 RasPppoe - ok15:07:13.0264 12952 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys15:07:13.0264 12952 Raspti - ok15:07:13.0655 12952 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys15:07:13.0655 12952 Rdbss - ok15:07:13.0998 12952 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys15:07:13.0998 12952 RDPCDD - ok15:07:14.0373 12952 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys15:07:14.0373 12952 rdpdr - ok15:07:14.0717 12952 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys15:07:14.0717 12952 RDPWD - ok15:07:15.0077 12952 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys15:07:15.0077 12952 redbook - ok15:07:15.0452 12952 RimUsb (f17713d108aca124a139fde877eef68a) C:\WINDOWS\system32\Drivers\RimUsb.sys15:07:15.0452 12952 RimUsb - ok15:07:15.0842 12952 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys15:07:15.0842 12952 ROOTMODEM - ok15:07:16.0186 12952 RT73 (bf4709c002d632170dc15a282813d6b3) C:\WINDOWS\system32\DRIVERS\rt73.sys15:07:16.0186 12952 RT73 - ok15:07:16.0514 12952 RTL8023xp (e9877aa069dc11b03dbd1d33b8b2a3ca) C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys15:07:16.0514 12952 RTL8023xp - ok15:07:16.0889 12952 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys15:07:16.0905 12952 Secdrv - ok15:07:17.0280 12952 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\drivers\Serial.sys15:07:17.0280 12952 Serial - ok15:07:17.0655 12952 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys15:07:17.0655 12952 Sfloppy - ok15:07:17.0967 12952 Simbad - ok15:07:18.0311 12952 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys15:07:18.0311 12952 sisagp - ok15:07:18.0670 12952 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys15:07:18.0670 12952 Sparrow - ok15:07:19.0014 12952 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys15:07:19.0030 12952 splitter - ok15:07:19.0373 12952 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys15:07:19.0373 12952 sr - ok15:07:19.0748 12952 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys15:07:19.0764 12952 Srv - ok15:07:20.0108 12952 SunkFilt (86ca1a5c15a5a98d5533945fb1120b05) C:\WINDOWS\System32\Drivers\sunkfilt.sys15:07:20.0108 12952 SunkFilt - ok15:07:20.0467 12952 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys15:07:20.0467 12952 swenum - ok15:07:20.0811 12952 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys15:07:20.0811 12952 swmidi - ok15:07:21.0123 12952 SWMX00 - ok15:07:21.0436 12952 SWNC5E00 - ok15:07:21.0811 12952 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys15:07:21.0811 12952 symc810 - ok15:07:22.0155 12952 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys15:07:22.0155 12952 symc8xx - ok15:07:22.0498 12952 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys15:07:22.0498 12952 sym_hi - ok15:07:22.0858 12952 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys15:07:22.0858 12952 sym_u3 - ok15:07:23.0233 12952 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys15:07:23.0233 12952 sysaudio - ok15:07:23.0639 12952 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys15:07:23.0639 12952 Tcpip - ok15:07:23.0998 12952 Tcpip6 (4e53bbcc4be37d7a4bd6ef1098c89ff7) C:\WINDOWS\system32\DRIVERS\tcpip6.sys15:07:23.0998 12952 Tcpip6 - ok15:07:24.0327 12952 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys15:07:24.0327 12952 TDPIPE - ok15:07:24.0670 12952 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys15:07:24.0670 12952 TDTCP - ok15:07:25.0030 12952 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys15:07:25.0030 12952 TermDD - ok15:07:25.0389 12952 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\system32\DRIVERS\toside.sys15:07:25.0389 12952 TosIde - ok15:07:25.0748 12952 tunmp (8f861eda21c05857eb8197300a92501c) C:\WINDOWS\system32\DRIVERS\tunmp.sys15:07:25.0748 12952 tunmp - ok15:07:25.0764 12952 Suspicious service (Hidden): UACd.sys15:07:26.0092 12952 UACd.sys (ffd7cfafe1ffdc032087a7a6636b99a2) C:\WINDOWS\system32\drivers\UACyaacntahwdornkuhw.sys15:07:26.0092 12952 Suspicious file (NoAccess): C:\WINDOWS\system32\drivers\UACyaacntahwdornkuhw.sys. md5: ffd7cfafe1ffdc032087a7a6636b99a215:07:26.0092 12952 Suspicious file (Hidden): C:\WINDOWS\system32\drivers\UACyaacntahwdornkuhw.sys. md5: ffd7cfafe1ffdc032087a7a6636b99a215:07:26.0092 12952 UACd.sys ( Rootkit.Win32.TDSS.tdl2 ) - infected15:07:26.0092 12952 UACd.sys - detected Rootkit.Win32.TDSS.tdl2 (0)15:07:26.0420 12952 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys15:07:26.0420 12952 Udfs - ok15:07:26.0733 12952 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys15:07:26.0733 12952 ultra - ok15:07:27.0108 12952 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys15:07:27.0108 12952 Update - ok15:07:27.0436 12952 USBAAPL (4b8a9c16b6d9258ed99c512aecb8c555) C:\WINDOWS\system32\Drivers\usbaapl.sys15:07:27.0452 12952 USBAAPL - ok15:07:27.0795 12952 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys15:07:27.0795 12952 usbccgp - ok15:07:28.0155 12952 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys15:07:28.0155 12952 usbehci - ok15:07:28.0530 12952 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys15:07:28.0530 12952 usbhub - ok15:07:28.0873 12952 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys15:07:28.0873 12952 usbohci - ok15:07:29.0217 12952 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys15:07:29.0217 12952 usbprint - ok15:07:29.0561 12952 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys15:07:29.0561 12952 usbscan - ok15:07:29.0967 12952 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS15:07:29.0967 12952 USBSTOR - ok15:07:30.0264 12952 VComm - ok15:07:30.0577 12952 VcommMgr - ok15:07:30.0920 12952 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys15:07:30.0920 12952 VgaSave - ok15:07:31.0280 12952 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys15:07:31.0280 12952 viaagp - ok15:07:31.0639 12952 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys15:07:31.0639 12952 ViaIde - ok15:07:31.0998 12952 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys15:07:31.0998 12952 VolSnap - ok15:07:32.0389 12952 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys15:07:32.0389 12952 Wanarp - ok15:07:32.0889 12952 wanatw - ok15:07:33.0233 12952 Wdf01000 (fd47474bd21794508af449d9d91af6e6) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys15:07:33.0233 12952 Wdf01000 - ok15:07:33.0530 12952 WDICA - ok15:07:33.0873 12952 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys15:07:33.0873 12952 wdmaud - ok15:07:34.0264 12952 winachsf (2dc7c0b6175a0a8ed84a4f70199c93b5) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys15:07:34.0264 12952 winachsf - ok15:07:34.0670 12952 WpdUsb (d87ea9f191df6731818ffd93659badf4) C:\WINDOWS\system32\Drivers\wpdusb.sys15:07:34.0670 12952 WpdUsb - ok15:07:35.0014 12952 zabslmsf - ok15:07:35.0311 12952 zvuueeds - ok15:07:35.0389 12952 MBR (0x1B8) (b20939cd98b7710036274839082ae757) \Device\Harddisk0\DR015:07:35.0405 12952 \Device\Harddisk0\DR0 - ok15:07:35.0420 12952 Boot (0x1200) (4d98067400fe9c2200a8bda154034897) \Device\Harddisk0\DR0\Partition015:07:35.0420 12952 \Device\Harddisk0\DR0\Partition0 - ok15:07:35.0420 12952 ============================================================15:07:35.0420 12952 Scan finished15:07:35.0420 12952 ============================================================15:07:35.0452 11244 Detected object count: 115:07:35.0452 11244 Actual detected object count: 115:07:46.0873 11244 C:\WINDOWS\system32\drivers\UACyaacntahwdornkuhw.sys - copied to quarantine15:07:46.0873 11244 C:\WINDOWS\system32\drivers\UACyaacntahwdornkuhw.sys - copied to quarantine15:07:47.0139 11244 C:\WINDOWS\system32\UACgplbdltxeakxqvnuk.dll - copied to quarantine15:07:47.0686 11244 C:\WINDOWS\system32\UACnpjvcuorcyqmihuhw.dat - copied to quarantine15:07:48.0467 11244 UACd.sys ( Rootkit.Win32.TDSS.tdl2 ) - User select action: Quarantine Link to post Share on other sites More sharing options...
LDTate Posted November 27, 2011 ID:498745 Share Posted November 27, 2011 Please run a new MBAM scan being sure to update before scanning.Post the scan resultsAlso please describe how your computer behaves at the moment. Link to post Share on other sites More sharing options...
lisa58 Posted November 27, 2011 Author ID:498754 Share Posted November 27, 2011 Malwarebytes' Anti-Malware 1.51.2.1300www.malwarebytes.orgDatabase version: 8253Windows 5.1.2600 Service Pack 3Internet Explorer 8.0.6001.1870211/27/2011 3:28:09 PMmbam-log-2011-11-27 (15-28-09).txtScan type: Quick scanObjects scanned: 213491Time elapsed: 13 minute(s), 19 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected)I still don't see all the programs when I click Start-Programs. No disk scan or defragment. Link to post Share on other sites More sharing options...
LDTate Posted November 27, 2011 ID:498759 Share Posted November 27, 2011 Download unhide.exe & save it to your windows folder: Right click on unhide.exe and select Run as administrator (In case you have Vista or Win7) RebootThis will unhide folders/files that were set to be hidden by the infection you had.Let me know if that solved your problem. Link to post Share on other sites More sharing options...
Recommended Posts