Google Redirect and Ping.exe

itsewestman · December 1, 2011

Good Day All,

I'm experiencing a redirect when searching on Google and ping.exe running consuming all memory. I can stop it via task manager but it always restarts. I have been having the redirect problem for a while but the ping.exe problem has surfaced just recently. I have run the tandem of Malwarebytes and Super Anti Spyware which has helped me in the past but is not solving this issue. I have done this one more time and ran DDS. Below are the results. Any help is greatly appreciated as this is a work computer and need it performing optimally.

Thanks and Regards.

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_24

Run by Jason Snow at 10:17:08 on 2011-12-01

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3054.1994 [GMT -6:00]

.

AV: Kaspersky Internet Security *Disabled/Outdated* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

FW: Kaspersky Internet Security *Disabled*

.

============== Running Processes ===============

.

C:\WINDOWS\system32\ibmpmsvc.exe

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe

C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

svchost.exe

C:\WINDOWS\system32\spoolsv.exe

svchost.exe

C:\WINDOWS\system32\IPSSVC.EXE

C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe

C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

C:\WINDOWS\System32\svchost.exe -k HTTPFilter

C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Kodak\AiO\Center\ekdiscovery.exe

C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Novatel Wireless\Novacore\Server\NvtlSrvr.exe

C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe

C:\WINDOWS\System32\TPHDEXLG.exe

C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe

C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe

c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe

C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe

c:\program files\lenovo\system update\suservice.exe

C:\Program Files\Common Files\Lenovo\Logger\logmon.exe

C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe

C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Analog Devices\Core\smax4pnp.exe

C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe

C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe

C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe

C:\Program Files\Migo Software\Digital File Shredder Pro\BrowserWatchControl.exe

C:\Program Files\Sprint\Sprint SmartView\RDVCHG.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Microsoft ActiveSync\wcescomm.exe

C:\Program Files\Windows Media Player\WMPNSCFG.exe

C:\PROGRA~1\MI3AA1~1\rapimgr.exe

C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe

C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE

C:\WINDOWS\system32\taskmgr.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtblfs.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\WINDOWS\System32\ping.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

.

============== Pseudo HJT Report ===============

.

uSearch Bar = hxxp://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60341

uStart Page = hxxp://www.google.com/

uInternet Connection Wizard,ShellNext = iexplore

BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File

BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll

BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - c:\program files\divx\divx plus web player\ie\divxhtml5\DivXHTML5.dll

BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky internet security 2010\ievkbd.dll

BHO: Windows Live Toolbar Helper: {bdbd1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program files\windows live toolbar\msntb.dll

BHO: 1 (0x1) - No File

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky internet security 2010\klwtbbho.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

TB: Windows Live Toolbar: {bdad1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program files\windows live toolbar\msntb.dll

TB: {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File

TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

TB: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [Google Update] "c:\documents and settings\jason snow\local settings\application data\google\update\GoogleUpdate.exe" /c

uRun: [H/PC Connection Agent] "c:\program files\microsoft activesync\wcescomm.exe"

uRun: [Pando Media Booster] c:\program files\pando networks\media booster\PMB.exe

uRun: [AdobeBridge]

uRun: [sUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe

uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe

uRun: [HLBackupScheduler] c:\program files\verizon v cast media manager\V CAST Backup Scheduler.exe

mRun: [synTPLpr] "c:\program files\synaptics\syntp\SynTPLpr.exe"

mRun: [synTPEnh] "c:\program files\synaptics\syntp\SynTPEnh.exe"

mRun: [soundMAXPnP] "c:\program files\analog devices\core\smax4pnp.exe"

mRun: [setDefPrt] "c:\program files\brother\brmfl06b\BrStDvPt.exe"

mRun: [TVT Scheduler Proxy] "c:\program files\common files\lenovo\scheduler\scheduler_proxy.exe"

mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"

mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

mRun: [AVP] "c:\program files\kaspersky lab\kaspersky internet security 2010\avp.exe"

mRun: [EKIJ5000StatusMonitor] c:\windows\system32\spool\drivers\w32x86\3\EKIJ5000MUI.exe

mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup

mRun: [Conime] %windir%\system32\conime.exe

mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"

mRun: [AgentMonitor] c:\program files\vtech\downloadmanager\system\AgentMonitor.exe

mRun: [browserWatch] c:\program files\migo software\digital file shredder pro\BrowserWatchControl.exe

mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW

mRun: [sprint SmartView] "c:\program files\sprint\sprint smartview\SprintSV.exe" -a

mRun: [RDVCHG] "c:\program files\sprint\sprint smartview\RDVCHG.exe"

mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime

dRun: [Picasa Media Detector] c:\program files\picasa2\PicasaMediaDetector.exe

dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t

StartupFolder: c:\docume~1\jasons~1\startm~1\programs\startup\vzacce~1.lnk - c:\program files\verizon wireless\vzaccess manager\VZAccess Manager.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\blueto~1.lnk - c:\program files\thinkpad\bluetooth software\BTTray.exe

mPolicies-system: EnableLUA = 0 (0x0)

IE: Add to Anti-Banner - c:\program files\kaspersky lab\kaspersky internet security 2010\ie_banner_deny.htm

IE: {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - c:\program files\partygaming\partypoker\RunApp.exe

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\mi3aa1~1\INetRepl.dll

IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\mi3aa1~1\INetRepl.dll

IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\kaspersky lab\kaspersky internet security 2010\klwtbbho.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL

IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky internet security 2010\klwtbbho.dll

LSP: mswsock.dll

DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/e/4/9/e494c802-dd90-4c6b-a074-469358f075a6/OGAControl.cab

DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} - hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab

DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - hxxp://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.7.109.cab

DPF: {41861299-EAB2-4DCC-986C-802AE12AC499} - hxxps://www.nvmc.uscg.gov/ReportServer/Reserved.ReportViewerWebControl.axd?ExecutionID=bfdjnh45lpr5ijuqxiwoww55&ControlID=87ac71429b0e476d8b43bc369884053e&Culture=127&UICulture=9&ReportStack=1&OpType=PrintCab

DPF: {48DD0448-9209-4F81-9F6D-D83562940134} - hxxp://lads.myspace.com/upload/MySpaceUploader1006.cab

DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab

DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} - hxxp://download-games.pogo.com/online2/pogo/luxor_amun_rising/mjolauncher.cab

DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} - hxxp://lads.myspace.com/upload/MySpaceUploader2.cab

DPF: {BAC761D3-DFFD-4DB4-A01D-173346E090A7} - hxxp://clubgames.pogo.com/online2/pogo/zenerchi/ZenerchiWeb.1.0.0.10.cab

DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} - hxxp://office.microsoft.com/officeupdate/content/opuc4.cab

DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

TCP: DhcpNameServer = 209.18.47.61 209.18.47.62

TCP: Interfaces\{76F525B5-6055-41BE-A0E2-9395EA814629} : DhcpNameServer = 209.18.47.61 209.18.47.62

Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL

Notify: ACNotify - ACNotify.dll

Notify: klogon - c:\windows\system32\klogon.dll

Notify: sqlesw32 - sqlesw32.dll

Notify: Sqlseses - sqlesw32.dll

Notify: tpfnf2 - c:\program files\lenovo\hotkey\notifyf2.dll

Notify: tphotkey - c:\program files\lenovo\hotkey\tphklock.dll

AppInit_DLLs: c:\progra~1\kasper~1\kasper~1\mzvkbd3.dll, c:\progra~1\kasper~1\kasper~1\kloehk.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll

SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL

LSA: Notification Packages = ACGina scecli

Hosts: 217.23.4.166 www.google-analytics.com.

Hosts: 217.23.4.166 ad-emea.doubleclick.net.

Hosts: 217.23.4.166 www.statcounter.com.

Hosts: 69.72.252.254 www.google-analytics.com.

Hosts: 69.72.252.254 ad-emea.doubleclick.net.

.

Note: multiple HOSTS entries found. Please refer to Attach.txt

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\documents and settings\jason snow\application data\mozilla\firefox\profiles\jlcm37nz.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.com

FF - component: c:\program files\mozilla firefox\extensions\linkfilter@kaspersky.ru\components\KavLinkFilter.dll

FF - plugin: c:\documents and settings\all users\application data\nexonus\ngm\npNxGameUS.dll

FF - plugin: c:\documents and settings\jason snow\local settings\application data\google\update\1.3.21.79\npGoogleUpdate3.dll

FF - plugin: c:\program files\divx\divx ovs helper\npovshelper.dll

FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll

FF - plugin: c:\program files\google\update\1.3.21.57\npGoogleUpdate3.dll

FF - plugin: c:\program files\google\update\1.3.21.65\npGoogleUpdate3.dll

FF - plugin: c:\program files\google\update\1.3.21.69\npGoogleUpdate3.dll

FF - plugin: c:\program files\google\update\1.3.21.79\npGoogleUpdate3.dll

FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: c:\program files\picasa2\npPicasa2.dll

FF - plugin: c:\program files\worldwinner.com, inc\worldwinner games\npwwload.dll

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Kaspersky URL Advisor: linkfilter@kaspersky.ru - c:\program files\mozilla firefox\extensions\linkfilter@kaspersky.ru

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension

FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\java\jre6\lib\deploy\jqs\ff

FF - Ext: DivX Plus Web Player HTML5 <video>: {23fcfd51-4958-4f00-80a3-ae97e717ed8b} - c:\program files\divx\divx plus web player\firefox\DivXHTML5

FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}

.

============= SERVICES / DRIVERS ===============

.

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2009-10-14 36880]

R0 TPDIGIMN;TPDIGIMN;c:\windows\system32\drivers\ApsHM86.sys [2007-10-16 19504]

R1 kl1;Kl1;c:\windows\system32\drivers\kl1.sys [2009-9-1 128016]

R1 KLIF;Kaspersky Lab Driver;c:\windows\system32\drivers\klif.sys [2010-4-25 315408]

R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872]

R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67656]

R2 AVP;Kaspersky Internet Security;c:\program files\kaspersky lab\kaspersky internet security 2010\avp.exe [2009-10-20 340456]

R2 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;c:\program files\kodak\aio\center\ekdiscovery.exe [2010-2-11 300400]

R2 MotoHelper;MotoHelper Service;c:\program files\motorola\motohelper\MotoHelperService.exe [2011-8-10 227184]

R2 NvtlService;NovaCore SDK Service;c:\program files\novatel wireless\novacore\server\NvtlSrvr.exe [2010-1-11 82944]

R2 TVT Backup Protection Service;TVT Backup Protection Service;c:\program files\lenovo\rescue and recovery\rrpservice.exe [2007-2-8 569344]

R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [2009-9-14 32272]

R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-10-2 19472]

R3 LenovoRd;LenovoRd;c:\windows\system32\drivers\LenovoRd.sys [2008-4-19 81280]

R3 SMSIVZAM5;SMSIVZAM5 NDIS Protocol Driver;c:\progra~1\verizo~1\vzacce~1\SMSIVZAM5.SYS [2009-3-20 32408]

R3 TVTI2C;Lenovo SM bus driver;c:\windows\system32\drivers\tvti2c.sys [2007-5-22 30336]

S0 cbgkxj;cbgkxj;c:\windows\system32\drivers\hboik.sys --> c:\windows\system32\drivers\hboik.sys [?]

S0 hvlms;hvlms;c:\windows\system32\drivers\atpfca.sys --> c:\windows\system32\drivers\atpfca.sys [?]

S2 gupdate1c992cee8cf6416;Google Update Service (gupdate1c992cee8cf6416);c:\program files\google\update\GoogleUpdate.exe [2009-2-19 133104]

S2 SqlCSS;SQL Server EXPRESS;c:\windows\system32\svchost.exe -k Sqlses [2008-6-25 14336]

S3 bcm;WiMAX Network Adapter;c:\windows\system32\drivers\drxvi314.sys [2010-3-26 319488]

S3 bcmbusctr;WiMAX Bus Driver;c:\windows\system32\drivers\BcmBusCtr.sys [2010-3-26 51456]

S3 CleanService;CleanService;c:\progra~1\migoso~1\digita~1\CleanService.exe [2011-7-13 58984]

S3 DIFMBUS;Franklin EVDO USB Modem Composite Device Driver;c:\windows\system32\drivers\DIFMBUS.sys [2010-4-28 56392]

S3 DIFMCVsp;Franklin EVDO USB Modem CM Port;c:\windows\system32\drivers\DIFMCVsp.sys [2010-4-28 164552]

S3 DIFMMdm;Franklin EVDO USB Modem;c:\windows\system32\drivers\DIFMMdm.sys [2010-4-28 164552]

S3 DIFMNET;Franklin EVDO USB Modem Network Adapter;c:\windows\system32\drivers\DIFMNET.sys [2010-5-4 105544]

S3 DIFMNVsp;Franklin EVDO USB Modem NMEA Port Serial Port;c:\windows\system32\drivers\DIFMNVsp.sys [2010-4-28 164552]

S3 DIFMVsp;Franklin EVDO USB Modem Diagnostics Port;c:\windows\system32\drivers\DIFMVsp.sys [2010-4-28 164552]

S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2009-2-19 133104]

S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]

S3 NPF;WinPcap Packet Driver (NPF);c:\windows\system32\drivers\npf.sys [2011-11-30 50704]

S3 NWUSBCDFIL;Novatel Wireless Installation CD;c:\windows\system32\drivers\NwUsbCdFil.sys [2008-7-7 20480]

S3 NWUSBPort2;Novatel Wireless USB Status2 Port Driver;c:\windows\system32\drivers\nwusbser2.sys [2008-5-9 174336]

S3 SWNC8U56;Sierra Wireless MUX NDIS Driver (UMTS56);c:\windows\system32\drivers\swnc8u56.sys [2008-9-24 101248]

S3 SWUMX56;Sierra Wireless USB MUX Driver (UMTS56);c:\windows\system32\drivers\swumx56.sys [2008-9-24 73856]

.

=============== Created Last 30 ================

.

2011-11-30 18:11:28 50704 ----a-w- c:\windows\system32\drivers\npf.sys

2011-11-30 18:11:28 281104 ----a-w- c:\windows\system32\wpcap.dll

2011-11-30 18:11:28 100880 ----a-w- c:\windows\system32\Packet.dll

2011-11-29 17:56:28 37888 ----a-w- c:\windows\system32\sqlesw32.dll

2011-11-29 16:50:56 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-11-17 16:27:32 -------- d-----w- c:\documents and settings\all users\application data\Verizon

2011-11-17 16:27:27 -------- d-----w- c:\documents and settings\jason snow\local settings\application data\V CAST Media Manager

2011-11-17 16:26:58 60273 ----a-w- c:\windows\system32\pthreadGC2.dll

2011-11-17 16:26:58 57344 ----a-w- c:\windows\system32\ff_vfw.dll

2011-11-17 16:26:57 -------- d-----w- c:\program files\ffdshow

2011-11-17 16:26:10 -------- d-----w- c:\program files\Verizon V CAST Media Manager

2011-11-17 16:21:17 -------- d-----w- c:\program files\Motorola

.

==================== Find3M ====================

.

2011-10-24 15:16:42 602112 ----a-w- c:\windows\system32\xvid.dll

2011-10-10 14:22:41 692736 ------w- c:\windows\system32\inetcomm.dll

2011-09-28 07:06:50 599040 ----a-w- c:\windows\system32\crypt32.dll

2011-09-26 16:41:20 611328 ------w- c:\windows\system32\uiautomationcore.dll

2011-09-26 16:41:20 220160 ------w- c:\windows\system32\oleacc.dll

2011-09-26 16:41:14 20480 ------w- c:\windows\system32\oleaccrc.dll

2011-09-06 13:20:51 1858944 ------w- c:\windows\system32\win32k.sys

2010-04-23 23:56:20 203776 --sh--w- c:\windows\system32\unrar.exe

.

============= FINISH: 10:18:21.85 ===============

dds.txt

D-FRED-BROWN · December 3, 2011

Hello itsewestman and welcome to Malwarebytes! :welcome:

I apologize for the delay.

I am D-FRED-BROWN and I will be helping you.

Please print or save this topic: it will make it easier for you to follow the instructions and complete all of the necessary steps.

-------------

Please download to your Desktop:

TDSSKiller.zip from here and extract it (right click on it => "Extract here").

>>> TDSSKiller: Double-click on TDSSKiller.exe to run the application.

Click on the Start Scan button and wait for the scan and disinfection process to be over.
If an infected file is detected, the default action will be Cure, click on Continue
If a suspicious file is detected, the default action will be Skip, click on Continue
If you are asked to reboot the computer to complete the process, click on the Reboot Now button. A report will be automatically saved at the root of the System drive ((usually C:\) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt" (for example, C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt). Please copy and paste the contents of that file here.
If no reboot is required, click on Report. A log file will appear. Please copy and paste the contents of that file in your next reply.

In your next reply, please include the following (you may need to use two posts to get it all in):

TDSSKiller_log.txt

how the PC is running now?
-------------
Please download ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
***IMPORTANT: save ComboFix to your Desktop***
* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Please go here to see a list of programs that should be disabled.
**Note: Do not mouseclick ComboFix's window while it's running. That may cause it to stall**
Please include the C:\ComboFix.txt in your next reply for further review.
Also, please let me know if any problems still remain.
-------------
Please download Security Check by screen317 from here or here.

Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

-------------

In your next reply, please include:

TDSSKiller report
C:\ComboFix.txt
checkup.txt

How is your computer running now?

itsewestman · December 3, 2011

D-Fred, I took it upon myself to run Combofix this morning. It found rootkit.zeroaccess. It seems to have worked as all is well now. I ran mbam and sus as a follow up. No more redirects and no more ping.exe using up all cpu. Please see attached combofix log as ran before mbam and sus. Please advise.

Thanks for the help.

ComboFix.txt

D-FRED-BROWN · December 3, 2011

Thanks for the help.

No problem

ComboFix cleaned up much of the infection, but there's still some stuff that needs taking care of:

Please go to http://www.virustotal.com/ , click on Browse, and upload the following file/s for analysis: You will only be able to have one file scanned at a time.

c:\windows\system32\sqlesw32.dll

Then click Submit. Allow the file to be scanned, and then please copy/paste the results here for me to see.

If Jotti is busy, please go to http://virusscan.jotti.org.

-----

Next, please go ahead and run the TDSSKiller and Security Check programs in my original post- they'll provide us with the remaining information needed .

itsewestman · December 3, 2011

Thanks,

Yours noted, I have a few pressing issues to attend to with work/family. I will put my computer on standby and resume the scans this evening.

Will advise.

D-FRED-BROWN · December 3, 2011

Yours noted, I have a few pressing issues to attend to with work/family. I will put my computer on standby and resume the scans this evening.

I understand, take all the time you need

itsewestman · December 4, 2011

From Virustotal

Antivirus Version Last Update Result

AhnLab-V3 2011.12.03.00 2011.12.03 Trojan/Win32.Sasfis

AntiVir 7.11.18.204 2011.12.02 TR/Sasfis.2.80

Antiy-AVL 2.0.3.7 2011.12.04 Trojan/Win32.Sasfis

Avast 6.0.1289.0 2011.12.03 Win32:Malware-gen

AVG 10.0.0.1190 2011.12.03 Generic26.IJC

BitDefender 7.2 2011.12.04 Gen:Variant.Sasfis.2

ByteHero 1.0.0.1 2011.11.29 -

CAT-QuickHeal 12.00 2011.12.03 -

ClamAV 0.97.3.0 2011.12.04 -

Commtouch 5.3.2.6 2011.12.03 -

Comodo 10831 2011.12.04 TrojWare.Win32.TrojanDownloader.Murlo.~JH2

DrWeb 5.0.2.03300 2011.12.04 Trojan.Siggen3.28020

Emsisoft 5.1.0.11 2011.12.04 Trojan.Win32.Sasfis!IK

eSafe 7.0.17.0 2011.12.01 -

eTrust-Vet 37.0.9600 2011.12.02 -

F-Prot 4.6.5.141 2011.11.29 -

F-Secure 9.0.16440.0 2011.12.04 Gen:Variant.Sasfis.2

Fortinet 4.3.388.0 2011.12.04 -

GData 22 2011.12.04 Gen:Variant.Sasfis.2

Ikarus T3.1.1.109.0 2011.12.03 Trojan.Win32.Sasfis

Jiangmin 13.0.900 2011.12.03 -

K7AntiVirus 9.119.5589 2011.12.03 Trojan

Kaspersky 9.0.0.837 2011.12.04 Trojan.Win32.Sasfis.cqbu

McAfee 5.400.0.1158 2011.12.04 Generic.dx!bbwq

McAfee-GW-Edition2010.1D 2011.12.03 Generic.dx!bbwq

Microsoft 1.7903 2011.12.03 -

NOD32 6681 2011.12.04 -

Norman 6.07.13 2011.12.03 W32/Suspicious_Gen2.TNVDZ

nProtect 2011-12-03.01 2011.12.03 Gen:Variant.Sasfis.2

Panda 10.0.3.5 2011.12.03 Generic Trojan

PCTools 8.0.0.5 2011.12.04 -

Prevx 3.0 2011.12.04 Medium Risk Malware

Rising 23.86.04.02 2011.12.02 -

Sophos 4.71.0 2011.12.04 Mal/Agent-AFE

SUPERAntiSpyware4.40.0.1006 2011.12.03 -

Symantec 20111.2.0.82 2011.12.04 -

TheHacker 6.7.0.1.352 2011.12.01 -

TrendMicro 9.500.0.1008 2011.12.04 -

TrendMicro-HouseCall 9.500.0.1008 2011.12.04 -

VBA32 3.12.16.4 2011.12.03 -

VIPRE 11198 2011.12.03 Trojan.Win32.Generic!BT

ViRobot 2011.12.3.4807 2011.12.03 -

VirusBuster 14.1.98.0 2011.12.03 -

Additional information

Show all

MD5 : 1a6c9676be60fce0d199c114895df03e

SHA1 : 74aff77b01547c0350a99166f760f53e20e2f71a

SHA256: 395ff56acfe621d214b25f2b5af9adc9e7f4de8851ada57726ffb98184681b00

Reverting with TDSSKiller shortly.

itsewestman · December 4, 2011

TDSSKiller Report, Nothing found

22:17:25.0562 1632 TDSS rootkit removing tool 2.6.21.0 Nov 24 2011 12:32:44

22:17:25.0796 1632 ============================================================

22:17:25.0796 1632 Current date / time: 2011/12/03 22:17:25.0796

22:17:25.0796 1632 SystemInfo:

22:17:25.0796 1632

22:17:25.0796 1632 OS Version: 5.1.2600 ServicePack: 3.0

22:17:25.0796 1632 Product type: Workstation

22:17:25.0796 1632 ComputerName: MATT

22:17:25.0796 1632 UserName: Jason Snow

22:17:25.0796 1632 Windows directory: C:\WINDOWS

22:17:25.0796 1632 System windows directory: C:\WINDOWS

22:17:25.0796 1632 Processor architecture: Intel x86

22:17:25.0796 1632 Number of processors: 2

22:17:25.0796 1632 Page size: 0x1000

22:17:25.0796 1632 Boot type: Normal boot

22:17:25.0796 1632 ============================================================

22:17:27.0984 1632 Initialize success

22:17:31.0734 4748 ============================================================

22:17:31.0734 4748 Scan started

22:17:31.0734 4748 Mode: Manual;

22:17:31.0734 4748 ============================================================

22:17:33.0171 4748 Abiosdsk - ok

22:17:33.0390 4748 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS

22:17:33.0421 4748 abp480n5 - ok

22:17:33.0578 4748 ac97intc (0f2d66d5f08ebe2f77bb904288dcf6f0) C:\WINDOWS\system32\drivers\ac97intc.sys

22:17:33.0625 4748 ac97intc - ok

22:17:33.0671 4748 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys

22:17:33.0687 4748 ACPI - ok

22:17:33.0703 4748 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys

22:17:33.0703 4748 ACPIEC - ok

22:17:33.0765 4748 ADIHdAudAddService (d537f3d03c6301fefa21f3eee8cc82d8) C:\WINDOWS\system32\drivers\ADIHdAud.sys

22:17:33.0765 4748 ADIHdAudAddService - ok

22:17:33.0796 4748 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys

22:17:33.0796 4748 adpu160m - ok

22:17:33.0828 4748 AEAudio (860df7676869cd8690cb2b23ab6de66a) C:\WINDOWS\system32\drivers\AEAudio.sys

22:17:33.0828 4748 AEAudio - ok

22:17:33.0890 4748 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys

22:17:33.0906 4748 aec - ok

22:17:33.0921 4748 AegisP (a1ad1a4a9f18d900ca9c93fa3efdcb56) C:\WINDOWS\system32\DRIVERS\AegisP.sys

22:17:33.0937 4748 AegisP - ok

22:17:34.0093 4748 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys

22:17:34.0093 4748 AFD - ok

22:17:34.0140 4748 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys

22:17:34.0140 4748 agp440 - ok

22:17:34.0171 4748 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys

22:17:34.0171 4748 agpCPQ - ok

22:17:34.0187 4748 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys

22:17:34.0203 4748 Aha154x - ok

22:17:34.0218 4748 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys

22:17:34.0234 4748 aic78u2 - ok

22:17:34.0250 4748 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys

22:17:34.0250 4748 aic78xx - ok

22:17:34.0296 4748 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys

22:17:34.0296 4748 AliIde - ok

22:17:34.0328 4748 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys

22:17:34.0328 4748 alim1541 - ok

22:17:34.0359 4748 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys

22:17:34.0359 4748 amdagp - ok

22:17:34.0390 4748 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys

22:17:34.0390 4748 amsint - ok

22:17:34.0531 4748 ANC (11ab185a7af224800bbfb5b836974a17) C:\WINDOWS\system32\drivers\ANC.SYS

22:17:34.0546 4748 ANC - ok

22:17:34.0578 4748 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys

22:17:34.0578 4748 Arp1394 - ok

22:17:34.0609 4748 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys

22:17:34.0609 4748 asc - ok

22:17:34.0640 4748 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys

22:17:34.0640 4748 asc3350p - ok

22:17:34.0656 4748 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys

22:17:34.0671 4748 asc3550 - ok

22:17:34.0703 4748 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys

22:17:34.0718 4748 AsyncMac - ok

22:17:34.0750 4748 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys

22:17:34.0750 4748 atapi - ok

22:17:34.0765 4748 Atdisk - ok

22:17:34.0812 4748 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys

22:17:34.0812 4748 Atmarpc - ok

22:17:34.0890 4748 atmeltpm (dbf0d7e2df33b469eb55406fea759350) C:\WINDOWS\system32\DRIVERS\atmeltpm.sys

22:17:34.0890 4748 atmeltpm - ok

22:17:34.0906 4748 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys

22:17:34.0921 4748 audstub - ok

22:17:35.0078 4748 bcm (54c533ae49cdf9c4630e80379a1090fe) C:\WINDOWS\system32\DRIVERS\drxvi314.sys

22:17:35.0093 4748 bcm - ok

22:17:35.0125 4748 bcmbusctr (44a70e32615770a4ec60e0267c0c8408) C:\WINDOWS\system32\DRIVERS\BcmBusCtr.sys

22:17:35.0140 4748 bcmbusctr - ok

22:17:35.0156 4748 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys

22:17:35.0171 4748 Beep - ok

22:17:35.0218 4748 BrScnUsb (92a964547b96d697e5e9ed43b4297f5a) C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys

22:17:35.0234 4748 BrScnUsb - ok

22:17:35.0250 4748 BrSerIf (d48c13f4a409aee8dafaddac81e34557) C:\WINDOWS\system32\Drivers\BrSerIf.sys

22:17:35.0250 4748 BrSerIf - ok

22:17:35.0281 4748 BrUsbSer (8fa0ac830a8312912a3aa0c0431cba0d) C:\WINDOWS\system32\Drivers\BrUsbSer.sys

22:17:35.0281 4748 BrUsbSer - ok

22:17:35.0343 4748 btaudio (3aa4bf555c00c5b87fd48dd7bdbd4e97) C:\WINDOWS\system32\drivers\btaudio.sys

22:17:35.0359 4748 btaudio - ok

22:17:35.0500 4748 BTDriver (07f0a66cfa550b13ad0674ae09e3cba0) C:\WINDOWS\system32\DRIVERS\btport.sys

22:17:35.0515 4748 BTDriver - ok

22:17:35.0562 4748 BTKRNL (9da09b5800b9de8336948664e3b9cc94) C:\WINDOWS\system32\DRIVERS\btkrnl.sys

22:17:35.0578 4748 BTKRNL - ok

22:17:35.0625 4748 BTWUSB (57e91e9925976bbc98984eebaaf1d84c) C:\WINDOWS\system32\Drivers\btwusb.sys

22:17:35.0625 4748 BTWUSB - ok

22:17:35.0625 4748 catchme - ok

22:17:35.0656 4748 cbgkxj - ok

22:17:35.0687 4748 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys

22:17:35.0687 4748 cbidf - ok

22:17:35.0703 4748 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys

22:17:35.0703 4748 cbidf2k - ok

22:17:35.0718 4748 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys

22:17:35.0734 4748 cd20xrnt - ok

22:17:35.0781 4748 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys

22:17:35.0781 4748 Cdaudio - ok

22:17:35.0906 4748 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys

22:17:35.0921 4748 Cdfs - ok

22:17:35.0953 4748 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys

22:17:35.0953 4748 Cdrom - ok

22:17:35.0968 4748 Changer - ok

22:17:36.0031 4748 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys

22:17:36.0031 4748 CmBatt - ok

22:17:36.0062 4748 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys

22:17:36.0062 4748 CmdIde - ok

22:17:36.0078 4748 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys

22:17:36.0078 4748 Compbatt - ok

22:17:36.0125 4748 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys

22:17:36.0125 4748 Cpqarray - ok

22:17:36.0156 4748 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys

22:17:36.0171 4748 dac2w2k - ok

22:17:36.0187 4748 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys

22:17:36.0203 4748 dac960nt - ok

22:17:36.0250 4748 DIFMBUS (3a3b89d0b10a24cc031f98d2afdca5ce) C:\WINDOWS\system32\DRIVERS\DIFMBUS.sys

22:17:36.0250 4748 DIFMBUS - ok

22:17:36.0281 4748 DIFMCVsp (2ac5571844e89e2acfee99a79eb7dab9) C:\WINDOWS\system32\DRIVERS\DIFMCVsp.sys

22:17:36.0296 4748 DIFMCVsp - ok

22:17:36.0359 4748 DIFMMdm (daa170e853a84d01516a75de8b96ac9a) C:\WINDOWS\system32\DRIVERS\DIFMMdm.sys

22:17:36.0359 4748 DIFMMdm - ok

22:17:36.0484 4748 DIFMNET (d1563cf53d3347a40d548f2b7c209d9f) C:\WINDOWS\system32\DRIVERS\DIFMNET.sys

22:17:36.0484 4748 DIFMNET - ok

22:17:36.0515 4748 DIFMNVsp (6f847c47daf9ab1cc06e85778877ff0c) C:\WINDOWS\system32\DRIVERS\DIFMNVsp.sys

22:17:36.0515 4748 DIFMNVsp - ok

22:17:36.0562 4748 DIFMVsp (d1a8366667c084c23673707d7af0dc3d) C:\WINDOWS\system32\DRIVERS\DIFMVsp.sys

22:17:36.0562 4748 DIFMVsp - ok

22:17:36.0609 4748 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys

22:17:36.0609 4748 Disk - ok

22:17:36.0671 4748 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys

22:17:36.0687 4748 dmboot - ok

22:17:36.0718 4748 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys

22:17:36.0734 4748 dmio - ok

22:17:36.0750 4748 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys

22:17:36.0750 4748 dmload - ok

22:17:36.0765 4748 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys

22:17:36.0765 4748 DMusic - ok

22:17:36.0890 4748 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys

22:17:36.0890 4748 dpti2o - ok

22:17:36.0906 4748 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys

22:17:36.0906 4748 drmkaud - ok

22:17:36.0937 4748 E100B (3fca03cbca11269f973b70fa483c88ef) C:\WINDOWS\system32\DRIVERS\e100b325.sys

22:17:36.0937 4748 E100B - ok

22:17:36.0984 4748 e1express (e1e31cb759ced9bae730b86171b9c9fd) C:\WINDOWS\system32\DRIVERS\e1e5132.sys

22:17:36.0984 4748 e1express - ok

22:17:37.0000 4748 EagleNT - ok

22:17:37.0078 4748 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys

22:17:37.0078 4748 Fastfat - ok

22:17:37.0109 4748 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys

22:17:37.0109 4748 Fdc - ok

22:17:37.0140 4748 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys

22:17:37.0140 4748 Fips - ok

22:17:37.0171 4748 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys

22:17:37.0171 4748 Flpydisk - ok

22:17:37.0234 4748 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys

22:17:37.0250 4748 FltMgr - ok

22:17:37.0390 4748 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys

22:17:37.0390 4748 Fs_Rec - ok

22:17:37.0406 4748 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys

22:17:37.0421 4748 Ftdisk - ok

22:17:37.0453 4748 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys

22:17:37.0453 4748 GEARAspiWDM - ok

22:17:37.0500 4748 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys

22:17:37.0500 4748 Gpc - ok

22:17:37.0546 4748 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys

22:17:37.0546 4748 HDAudBus - ok

22:17:37.0578 4748 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys

22:17:37.0593 4748 HidUsb - ok

22:17:37.0609 4748 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys

22:17:37.0609 4748 hpn - ok

22:17:37.0656 4748 HSFHWAZL (6a5c4732d6803f84e2987edd8e4359ce) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys

22:17:37.0656 4748 HSFHWAZL - ok

22:17:37.0718 4748 HSF_DPV (21c31273c6cc4826e74be8ae3b09d4a8) C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys

22:17:37.0750 4748 HSF_DPV - ok

22:17:37.0906 4748 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys

22:17:37.0921 4748 HTTP - ok

22:17:37.0937 4748 hvlms - ok

22:17:37.0984 4748 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys

22:17:38.0000 4748 i2omgmt - ok

22:17:38.0015 4748 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys

22:17:38.0031 4748 i2omp - ok

22:17:38.0046 4748 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys

22:17:38.0046 4748 i8042prt - ok

22:17:38.0109 4748 iaStor (fd7f9d74c2b35dbda400804a3f5ed5d8) C:\WINDOWS\system32\DRIVERS\iaStor.sys

22:17:38.0109 4748 iaStor - ok

22:17:38.0156 4748 IBMPMDRV (bf648877413f6160e480814a24942b65) C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys

22:17:38.0156 4748 IBMPMDRV - ok

22:17:38.0203 4748 IBMTPCHK (083d095fed4b01fff9d501b98d50db68) C:\WINDOWS\system32\Drivers\IBMBLDID.sys

22:17:38.0203 4748 IBMTPCHK - ok

22:17:38.0234 4748 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys

22:17:38.0250 4748 Imapi - ok

22:17:38.0406 4748 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys

22:17:38.0406 4748 ini910u - ok

22:17:38.0437 4748 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys

22:17:38.0437 4748 IntelIde - ok

22:17:38.0484 4748 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys

22:17:38.0484 4748 intelppm - ok

22:17:38.0531 4748 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys

22:17:38.0531 4748 Ip6Fw - ok

22:17:38.0562 4748 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

22:17:38.0578 4748 IpFilterDriver - ok

22:17:38.0609 4748 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys

22:17:38.0609 4748 IpInIp - ok

22:17:38.0640 4748 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys

22:17:38.0656 4748 IpNat - ok

22:17:38.0671 4748 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys

22:17:38.0687 4748 IPSec - ok

22:17:38.0703 4748 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys

22:17:38.0703 4748 IRENUM - ok

22:17:38.0750 4748 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys

22:17:38.0750 4748 isapnp - ok

22:17:38.0812 4748 Iviaspi (f59c3569a2f2c464bb78cb1bdcdca55e) C:\WINDOWS\system32\drivers\iviaspi.sys

22:17:38.0812 4748 Iviaspi - ok

22:17:38.0968 4748 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys

22:17:38.0968 4748 Kbdclass - ok

22:17:38.0984 4748 kl1 - ok

22:17:39.0015 4748 klbg (53eedab3f0511321ac3ae8bc968b158c) C:\WINDOWS\system32\drivers\klbg.sys

22:17:39.0031 4748 klbg - ok

22:17:39.0046 4748 KLIF (439c778700fce23f2852535d6fa5996d) C:\WINDOWS\system32\DRIVERS\klif.sys

22:17:39.0062 4748 KLIF - ok

22:17:39.0078 4748 klim5 (fbdc2034b58d2135d25fe99eb8b747c3) C:\WINDOWS\system32\DRIVERS\klim5.sys

22:17:39.0078 4748 klim5 - ok

22:17:39.0125 4748 klmouflt (1f351c4ba53bfe58a1ca5fcdd11e1f81) C:\WINDOWS\system32\DRIVERS\klmouflt.sys

22:17:39.0125 4748 klmouflt - ok

22:17:39.0171 4748 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys

22:17:39.0171 4748 kmixer - ok

22:17:39.0203 4748 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys

22:17:39.0203 4748 KSecDD - ok

22:17:39.0234 4748 lbrtfdc - ok

22:17:39.0265 4748 LenovoRd (007c3a7e6a864ab2b8c52df717a7254c) C:\WINDOWS\system32\Drivers\LenovoRd.sys

22:17:39.0265 4748 LenovoRd - ok

22:17:39.0312 4748 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys

22:17:39.0328 4748 mdmxsdk - ok

22:17:39.0484 4748 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys

22:17:39.0484 4748 mnmdd - ok

22:17:39.0531 4748 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys

22:17:39.0531 4748 Modem - ok

22:17:39.0578 4748 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys

22:17:39.0578 4748 Mouclass - ok

22:17:39.0671 4748 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys

22:17:39.0671 4748 mouhid - ok

22:17:39.0812 4748 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys

22:17:39.0812 4748 MountMgr - ok

22:17:39.0875 4748 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys

22:17:39.0890 4748 mraid35x - ok

22:17:39.0937 4748 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys

22:17:39.0953 4748 MRxDAV - ok

22:17:40.0125 4748 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

22:17:40.0312 4748 MRxSmb - ok

22:17:40.0484 4748 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys

22:17:40.0500 4748 Msfs - ok

22:17:40.0531 4748 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys

22:17:40.0531 4748 MSKSSRV - ok

22:17:40.0562 4748 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys

22:17:40.0562 4748 MSPCLOCK - ok

22:17:40.0578 4748 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys

22:17:40.0593 4748 MSPQM - ok

22:17:40.0640 4748 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys

22:17:40.0640 4748 mssmbios - ok

22:17:40.0671 4748 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys

22:17:40.0671 4748 Mup - ok

22:17:40.0718 4748 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys

22:17:40.0734 4748 NDIS - ok

22:17:40.0781 4748 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys

22:17:40.0781 4748 NdisTapi - ok

22:17:40.0812 4748 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys

22:17:40.0812 4748 Ndisuio - ok

22:17:40.0828 4748 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys

22:17:40.0843 4748 NdisWan - ok

22:17:40.0875 4748 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys

22:17:40.0875 4748 NDProxy - ok

22:17:41.0046 4748 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys

22:17:41.0046 4748 NetBIOS - ok

22:17:41.0093 4748 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys

22:17:41.0093 4748 NetBT - ok

22:17:41.0234 4748 NETw4x32 (18b2d3e11ed7a3c898ade6a6692b6929) C:\WINDOWS\system32\DRIVERS\NETw4x32.sys

22:17:41.0296 4748 NETw4x32 - ok

22:17:41.0437 4748 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys

22:17:41.0453 4748 NIC1394 - ok

22:17:41.0500 4748 Nmea (b0d5188e282dc4edae7020f333427bc8) C:\WINDOWS\system32\DRIVERS\pctnullport.sys

22:17:41.0500 4748 Nmea - ok

22:17:41.0546 4748 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys

22:17:41.0546 4748 Npfs - ok

22:17:41.0609 4748 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys

22:17:41.0625 4748 Ntfs - ok

22:17:41.0671 4748 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys

22:17:41.0687 4748 Null - ok

22:17:41.0921 4748 nv (8f91d713ebb1682f36dd93525861149f) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys

22:17:42.0093 4748 nv - ok

22:17:42.0265 4748 NWADI (93213c7ec08e01e37a935bf144e75df6) C:\WINDOWS\system32\DRIVERS\NWADIenum.sys

22:17:42.0265 4748 NWADI - ok

22:17:42.0312 4748 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys

22:17:42.0312 4748 NwlnkFlt - ok

22:17:42.0343 4748 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys

22:17:42.0343 4748 NwlnkFwd - ok

22:17:42.0375 4748 NWUSBCDFIL (1fde5b2d61d97d803594df4b3bc28c4b) C:\WINDOWS\system32\DRIVERS\NwUsbCdFil.sys

22:17:42.0375 4748 NWUSBCDFIL - ok

22:17:42.0406 4748 NWUSBModem (65b471bb7e57c416a1e685ec07d4abfa) C:\WINDOWS\system32\DRIVERS\nwusbmdm.sys

22:17:42.0421 4748 NWUSBModem - ok

22:17:42.0453 4748 NWUSBPort (65b471bb7e57c416a1e685ec07d4abfa) C:\WINDOWS\system32\DRIVERS\nwusbser.sys

22:17:42.0453 4748 NWUSBPort - ok

22:17:42.0500 4748 NWUSBPort2 (65b471bb7e57c416a1e685ec07d4abfa) C:\WINDOWS\system32\DRIVERS\nwusbser2.sys

22:17:42.0500 4748 NWUSBPort2 - ok

22:17:42.0562 4748 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys

22:17:42.0562 4748 ohci1394 - ok

22:17:42.0718 4748 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys

22:17:42.0718 4748 Parport - ok

22:17:42.0734 4748 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys

22:17:42.0750 4748 PartMgr - ok

22:17:42.0765 4748 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys

22:17:42.0765 4748 ParVdm - ok

22:17:42.0812 4748 PCASp50 (1961590aa191b6b7dcf18a6a693af7b8) C:\WINDOWS\system32\Drivers\PCASp50.sys

22:17:42.0828 4748 PCASp50 - ok

22:17:42.0843 4748 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys

22:17:42.0843 4748 PCI - ok

22:17:42.0859 4748 PCIDump - ok

22:17:42.0890 4748 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys

22:17:42.0890 4748 PCIIde - ok

22:17:42.0906 4748 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\DRIVERS\pcmcia.sys

22:17:42.0921 4748 Pcmcia - ok

22:17:42.0953 4748 PCTINDIS5 (1e715247efffdda938c085913045d599) C:\WINDOWS\system32\PCTINDIS5.SYS

22:17:42.0968 4748 PCTINDIS5 - ok

22:17:43.0046 4748 PDCOMP - ok

22:17:43.0140 4748 PDFRAME - ok

22:17:43.0265 4748 PDRELI - ok

22:17:43.0375 4748 PDRFRAME - ok

22:17:43.0406 4748 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys

22:17:43.0421 4748 perc2 - ok

22:17:43.0453 4748 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys

22:17:43.0468 4748 perc2hib - ok

22:17:43.0531 4748 pmem (dedef40e1d05842639491365cb2c069e) C:\WINDOWS\System32\drivers\pmemnt.sys

22:17:43.0531 4748 pmem - ok

22:17:43.0546 4748 PNDIS5 - ok

22:17:43.0562 4748 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys

22:17:43.0578 4748 PptpMiniport - ok

22:17:43.0609 4748 PROCDD (1d80309fed4babf8ea9e7b84a394348b) C:\WINDOWS\system32\DRIVERS\PROCDD.SYS

22:17:43.0609 4748 PROCDD - ok

22:17:43.0781 4748 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys

22:17:43.0781 4748 Processor - ok

22:17:43.0828 4748 psadd (f8a25f1dd8b2c332cbc663e3579566e7) C:\WINDOWS\system32\DRIVERS\psadd.sys

22:17:43.0828 4748 psadd - ok

22:17:43.0859 4748 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys

22:17:43.0859 4748 PSched - ok

22:17:43.0890 4748 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys

22:17:43.0890 4748 Ptilink - ok

22:17:43.0937 4748 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys

22:17:43.0937 4748 PxHelp20 - ok

22:17:43.0968 4748 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys

22:17:43.0984 4748 ql1080 - ok

22:17:44.0000 4748 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys

22:17:44.0015 4748 Ql10wnt - ok

22:17:44.0031 4748 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys

22:17:44.0046 4748 ql12160 - ok

22:17:44.0062 4748 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys

22:17:44.0062 4748 ql1240 - ok

22:17:44.0093 4748 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys

22:17:44.0093 4748 ql1280 - ok

22:17:44.0234 4748 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys

22:17:44.0234 4748 RasAcd - ok

22:17:44.0281 4748 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys

22:17:44.0281 4748 Rasl2tp - ok

22:17:44.0312 4748 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys

22:17:44.0328 4748 RasPppoe - ok

22:17:44.0359 4748 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys

22:17:44.0375 4748 Raspti - ok

22:17:44.0406 4748 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys

22:17:44.0421 4748 Rdbss - ok

22:17:44.0453 4748 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

22:17:44.0453 4748 RDPCDD - ok

22:17:44.0500 4748 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys

22:17:44.0515 4748 rdpdr - ok

22:17:44.0546 4748 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys

22:17:44.0562 4748 RDPWD - ok

22:17:44.0593 4748 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys

22:17:44.0593 4748 redbook - ok

22:17:44.0750 4748 RimUsb - ok

22:17:44.0781 4748 RimVSerPort (d9b34325ee5df78b8f28a3de9f577c7d) C:\WINDOWS\system32\DRIVERS\RimSerial.sys

22:17:44.0781 4748 RimVSerPort - ok

22:17:44.0812 4748 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys

22:17:44.0812 4748 ROOTMODEM - ok

22:17:44.0890 4748 s24trans (2220783b32a9f91df87f3e8315f091e7) C:\WINDOWS\system32\DRIVERS\s24trans.sys

22:17:44.0890 4748 s24trans - ok

22:17:44.0953 4748 SASDIFSV (a3281aec37e0720a2bc28034c2df2a56) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS

22:17:44.0953 4748 SASDIFSV - ok

22:17:44.0984 4748 SASKUTIL (61db0d0756a99506207fd724e3692b25) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS

22:17:44.0984 4748 SASKUTIL - ok

22:17:45.0031 4748 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys

22:17:45.0046 4748 Secdrv - ok

22:17:45.0078 4748 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys

22:17:45.0093 4748 serenum - ok

22:17:45.0234 4748 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys

22:17:45.0234 4748 Serial - ok

22:17:45.0281 4748 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\DRIVERS\sfloppy.sys

22:17:45.0281 4748 Sfloppy - ok

22:17:45.0343 4748 Shockprf (a3aee791db8c73882f4503bfaacd8c9e) C:\WINDOWS\system32\DRIVERS\Apsx86.sys

22:17:45.0343 4748 Shockprf - ok

22:17:45.0359 4748 Simbad - ok

22:17:45.0390 4748 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys

22:17:45.0406 4748 sisagp - ok

22:17:45.0437 4748 SMNDIS5 - ok

22:17:45.0484 4748 SMSIVZAM5 (1e715247efffdda938c085913045d599) C:\PROGRA~1\VERIZO~1\VZACCE~1\SMSIVZAM5.SYS

22:17:45.0484 4748 SMSIVZAM5 - ok

22:17:45.0531 4748 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys

22:17:45.0531 4748 Sparrow - ok

22:17:45.0578 4748 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys

22:17:45.0578 4748 splitter - ok

22:17:45.0718 4748 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys

22:17:45.0718 4748 sr - ok

22:17:45.0765 4748 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys

22:17:45.0781 4748 Srv - ok

22:17:45.0828 4748 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys

22:17:45.0828 4748 swenum - ok

22:17:45.0859 4748 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys

22:17:45.0859 4748 swmidi - ok

22:17:45.0890 4748 swmsflt (3d4776ab6520240ae06d277ac45bf836) C:\WINDOWS\system32\DRIVERS\swmsflt.sys

22:17:45.0906 4748 swmsflt - ok

22:17:45.0937 4748 SWMX00 (af88ae62b84d016eb5bdc12ddf1005a3) C:\WINDOWS\system32\DRIVERS\swmx00.sys

22:17:45.0953 4748 SWMX00 - ok

22:17:45.0984 4748 SWNC5E00 (24bce62e4da07c6488e3a7ff37a6b6ae) C:\WINDOWS\system32\DRIVERS\SWNC5E00.sys

22:17:46.0000 4748 SWNC5E00 - ok

22:17:46.0031 4748 SWNC8U56 (2f6f8b7f821c994de3d1caf399bf9cd3) C:\WINDOWS\system32\DRIVERS\swnc8u56.sys

22:17:46.0046 4748 SWNC8U56 - ok

22:17:46.0078 4748 SWUMX56 (903a5e596a3910cebfa33f3bd7d9c174) C:\WINDOWS\system32\DRIVERS\swumx56.sys

22:17:46.0093 4748 SWUMX56 - ok

22:17:46.0125 4748 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys

22:17:46.0140 4748 symc810 - ok

22:17:46.0281 4748 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys

22:17:46.0281 4748 symc8xx - ok

22:17:46.0312 4748 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys

22:17:46.0312 4748 sym_hi - ok

22:17:46.0343 4748 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys

22:17:46.0343 4748 sym_u3 - ok

22:17:46.0390 4748 SynTP (b248b5fe80b285b91cb1e6f85b0ae1d7) C:\WINDOWS\system32\DRIVERS\SynTP.sys

22:17:46.0406 4748 SynTP - ok

22:17:46.0437 4748 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys

22:17:46.0437 4748 sysaudio - ok

22:17:46.0500 4748 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys

22:17:46.0500 4748 Tcpip - ok

22:17:46.0562 4748 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys

22:17:46.0562 4748 TDPIPE - ok

22:17:46.0593 4748 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys

22:17:46.0593 4748 TDTCP - ok

22:17:46.0687 4748 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys

22:17:46.0687 4748 TermDD - ok

22:17:46.0750 4748 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\system32\DRIVERS\toside.sys

22:17:46.0750 4748 TosIde - ok

22:17:46.0812 4748 TPDIGIMN (639ba7b37f25054cf5e82604e736d250) C:\WINDOWS\system32\DRIVERS\ApsHM86.sys

22:17:46.0812 4748 TPDIGIMN - ok

22:17:46.0890 4748 TPHKDRV (542770c8925e13b29b1ba63f05898058) C:\WINDOWS\system32\DRIVERS\TPHKDRV.sys

22:17:46.0890 4748 TPHKDRV - ok

22:17:47.0031 4748 TPPWRIF (44672de6cea9569c21c4b7a8d2560750) C:\WINDOWS\system32\drivers\Tppwrif.sys

22:17:47.0031 4748 TPPWRIF - ok

22:17:47.0078 4748 TSMAPIP (f2aba3066d7921d7fcdbd66dea88be11) C:\WINDOWS\system32\drivers\TSMAPIP.SYS

22:17:47.0078 4748 TSMAPIP - ok

22:17:47.0140 4748 tvtfilter (49258a02a1e8d304ed88b0f1c56b1738) C:\WINDOWS\system32\DRIVERS\tvtfilter.sys

22:17:47.0140 4748 tvtfilter - ok

22:17:47.0187 4748 TVTI2C (8ab24d4b7da715c2c80455137910e792) C:\WINDOWS\system32\DRIVERS\Tvti2c.sys

22:17:47.0187 4748 TVTI2C - ok

22:17:47.0203 4748 TVTPktFilter - ok

22:17:47.0250 4748 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys

22:17:47.0250 4748 Udfs - ok

22:17:47.0265 4748 UIUSys - ok

22:17:47.0296 4748 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys

22:17:47.0296 4748 ultra - ok

22:17:47.0343 4748 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys

22:17:47.0359 4748 Update - ok

22:17:47.0531 4748 USBAAPL (e8c1b9ebac65288e1b51e8a987d98af6) C:\WINDOWS\system32\Drivers\usbaapl.sys

22:17:47.0531 4748 USBAAPL - ok

22:17:47.0578 4748 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys

22:17:47.0593 4748 usbccgp - ok

22:17:47.0640 4748 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys

22:17:47.0640 4748 usbehci - ok

22:17:47.0687 4748 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys

22:17:47.0703 4748 usbhub - ok

22:17:47.0750 4748 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys

22:17:47.0750 4748 usbohci - ok

22:17:47.0781 4748 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys

22:17:47.0781 4748 usbprint - ok

22:17:47.0812 4748 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys

22:17:47.0812 4748 usbscan - ok

22:17:47.0859 4748 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

22:17:47.0875 4748 USBSTOR - ok

22:17:48.0031 4748 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys

22:17:48.0046 4748 usbuhci - ok

22:17:48.0062 4748 usb_rndisx (b6cc50279d6cd28e090a5d33244adc9a) C:\WINDOWS\system32\DRIVERS\usb8023x.sys

22:17:48.0078 4748 usb_rndisx - ok

22:17:48.0093 4748 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys

22:17:48.0109 4748 VgaSave - ok

22:17:48.0125 4748 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys

22:17:48.0140 4748 viaagp - ok

22:17:48.0156 4748 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys

22:17:48.0171 4748 ViaIde - ok

22:17:48.0203 4748 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys

22:17:48.0203 4748 VolSnap - ok

22:17:48.0265 4748 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys

22:17:48.0265 4748 Wanarp - ok

22:17:48.0312 4748 wceusbsh (46a247f6617526afe38b6f12f5512120) C:\WINDOWS\system32\DRIVERS\wceusbsh.sys

22:17:48.0312 4748 wceusbsh - ok

22:17:48.0328 4748 WDICA - ok

22:17:48.0375 4748 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys

22:17:48.0375 4748 wdmaud - ok

22:17:48.0453 4748 winachsf (307d248f97835b6879bdd361086924fe) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys

22:17:48.0484 4748 winachsf - ok

22:17:48.0687 4748 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys

22:17:48.0703 4748 WmiAcpi - ok

22:17:48.0750 4748 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys

22:17:48.0750 4748 WS2IFSL - ok

22:17:48.0812 4748 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys

22:17:48.0828 4748 WudfPf - ok

22:17:48.0921 4748 MBR (0x1B8) (727e1a0f13b33d1de28b7cf4a82de100) \Device\Harddisk0\DR0

22:17:48.0937 4748 \Device\Harddisk0\DR0 - ok

22:17:48.0953 4748 Boot (0x1200) (f1c12c32ac5081553bacf2678b2ef614) \Device\Harddisk0\DR0\Partition0

22:17:48.0953 4748 \Device\Harddisk0\DR0\Partition0 - ok

22:17:48.0953 4748 ============================================================

22:17:48.0953 4748 Scan finished

22:17:48.0953 4748 ============================================================

22:17:48.0968 4388 Detected object count: 0

22:17:48.0968 4388 Actual detected object count: 0

22:18:00.0781 4948 ============================================================

22:18:00.0781 4948 Scan started

22:18:00.0781 4948 Mode: Manual;

22:18:00.0781 4948 ============================================================

22:18:01.0578 4948 Abiosdsk - ok

22:18:01.0593 4948 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS

22:18:01.0593 4948 abp480n5 - ok

22:18:01.0625 4948 ac97intc (0f2d66d5f08ebe2f77bb904288dcf6f0) C:\WINDOWS\system32\drivers\ac97intc.sys

22:18:01.0625 4948 ac97intc - ok

22:18:01.0671 4948 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys

22:18:01.0671 4948 ACPI - ok

22:18:01.0687 4948 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys

22:18:01.0687 4948 ACPIEC - ok

22:18:01.0734 4948 ADIHdAudAddService (d537f3d03c6301fefa21f3eee8cc82d8) C:\WINDOWS\system32\drivers\ADIHdAud.sys

22:18:01.0734 4948 ADIHdAudAddService - ok

22:18:01.0765 4948 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys

22:18:01.0765 4948 adpu160m - ok

22:18:01.0812 4948 AEAudio (860df7676869cd8690cb2b23ab6de66a) C:\WINDOWS\system32\drivers\AEAudio.sys

22:18:01.0812 4948 AEAudio - ok

22:18:01.0828 4948 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys

22:18:01.0843 4948 aec - ok

22:18:01.0859 4948 AegisP (a1ad1a4a9f18d900ca9c93fa3efdcb56) C:\WINDOWS\system32\DRIVERS\AegisP.sys

22:18:01.0859 4948 AegisP - ok

22:18:01.0890 4948 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys

22:18:01.0890 4948 AFD - ok

22:18:02.0046 4948 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys

22:18:02.0046 4948 agp440 - ok

22:18:02.0062 4948 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys

22:18:02.0078 4948 agpCPQ - ok

22:18:02.0093 4948 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys

22:18:02.0093 4948 Aha154x - ok

22:18:02.0125 4948 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys

22:18:02.0125 4948 aic78u2 - ok

22:18:02.0140 4948 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys

22:18:02.0140 4948 aic78xx - ok

22:18:02.0171 4948 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys

22:18:02.0171 4948 AliIde - ok

22:18:02.0203 4948 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys

22:18:02.0203 4948 alim1541 - ok

22:18:02.0218 4948 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys

22:18:02.0234 4948 amdagp - ok

22:18:02.0250 4948 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys

22:18:02.0250 4948 amsint - ok

22:18:02.0296 4948 ANC (11ab185a7af224800bbfb5b836974a17) C:\WINDOWS\system32\drivers\ANC.SYS

22:18:02.0296 4948 ANC - ok

22:18:02.0437 4948 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys

22:18:02.0437 4948 Arp1394 - ok

22:18:02.0468 4948 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys

22:18:02.0468 4948 asc - ok

22:18:02.0500 4948 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys

22:18:02.0500 4948 asc3350p - ok

22:18:02.0515 4948 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys

22:18:02.0531 4948 asc3550 - ok

22:18:02.0562 4948 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys

22:18:02.0578 4948 AsyncMac - ok

22:18:02.0609 4948 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys

22:18:02.0609 4948 atapi - ok

22:18:02.0625 4948 Atdisk - ok

22:18:02.0671 4948 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys

22:18:02.0671 4948 Atmarpc - ok

22:18:02.0703 4948 atmeltpm (dbf0d7e2df33b469eb55406fea759350) C:\WINDOWS\system32\DRIVERS\atmeltpm.sys

22:18:02.0703 4948 atmeltpm - ok

22:18:02.0734 4948 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys

22:18:02.0734 4948 audstub - ok

22:18:02.0781 4948 bcm (54c533ae49cdf9c4630e80379a1090fe) C:\WINDOWS\system32\DRIVERS\drxvi314.sys

22:18:02.0796 4948 bcm - ok

22:18:02.0953 4948 bcmbusctr (44a70e32615770a4ec60e0267c0c8408) C:\WINDOWS\system32\DRIVERS\BcmBusCtr.sys

22:18:02.0953 4948 bcmbusctr - ok

22:18:02.0968 4948 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys

22:18:02.0968 4948 Beep - ok

22:18:03.0031 4948 BrScnUsb (92a964547b96d697e5e9ed43b4297f5a) C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys

22:18:03.0031 4948 BrScnUsb - ok

22:18:03.0062 4948 BrSerIf (d48c13f4a409aee8dafaddac81e34557) C:\WINDOWS\system32\Drivers\BrSerIf.sys

22:18:03.0062 4948 BrSerIf - ok

22:18:03.0078 4948 BrUsbSer (8fa0ac830a8312912a3aa0c0431cba0d) C:\WINDOWS\system32\Drivers\BrUsbSer.sys

22:18:03.0093 4948 BrUsbSer - ok

22:18:03.0140 4948 btaudio (3aa4bf555c00c5b87fd48dd7bdbd4e97) C:\WINDOWS\system32\drivers\btaudio.sys

22:18:03.0140 4948 btaudio - ok

22:18:03.0187 4948 BTDriver (07f0a66cfa550b13ad0674ae09e3cba0) C:\WINDOWS\system32\DRIVERS\btport.sys

22:18:03.0187 4948 BTDriver - ok

22:18:03.0250 4948 BTKRNL (9da09b5800b9de8336948664e3b9cc94) C:\WINDOWS\system32\DRIVERS\btkrnl.sys

22:18:03.0265 4948 BTKRNL - ok

22:18:03.0609 4948 BTWUSB (57e91e9925976bbc98984eebaaf1d84c) C:\WINDOWS\system32\Drivers\btwusb.sys

22:18:03.0625 4948 BTWUSB - ok

22:18:03.0625 4948 catchme - ok

22:18:03.0687 4948 cbgkxj - ok

22:18:03.0718 4948 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys

22:18:03.0718 4948 cbidf - ok

22:18:03.0734 4948 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys

22:18:03.0734 4948 cbidf2k - ok

22:18:03.0765 4948 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys

22:18:03.0765 4948 cd20xrnt - ok

22:18:03.0796 4948 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys

22:18:03.0796 4948 Cdaudio - ok

22:18:03.0843 4948 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys

22:18:03.0843 4948 Cdfs - ok

22:18:03.0875 4948 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys

22:18:03.0875 4948 Cdrom - ok

22:18:03.0906 4948 Changer - ok

22:18:03.0953 4948 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys

22:18:03.0953 4948 CmBatt - ok

22:18:03.0984 4948 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys

22:18:03.0984 4948 CmdIde - ok

22:18:04.0000 4948 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys

22:18:04.0000 4948 Compbatt - ok

22:18:04.0031 4948 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys

22:18:04.0046 4948 Cpqarray - ok

22:18:04.0187 4948 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys

22:18:04.0187 4948 dac2w2k - ok

22:18:04.0234 4948 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys

22:18:04.0234 4948 dac960nt - ok

22:18:04.0281 4948 DIFMBUS (3a3b89d0b10a24cc031f98d2afdca5ce) C:\WINDOWS\system32\DRIVERS\DIFMBUS.sys

22:18:04.0281 4948 DIFMBUS - ok

22:18:04.0312 4948 DIFMCVsp (2ac5571844e89e2acfee99a79eb7dab9) C:\WINDOWS\system32\DRIVERS\DIFMCVsp.sys

22:18:04.0328 4948 DIFMCVsp - ok

22:18:04.0343 4948 DIFMMdm (daa170e853a84d01516a75de8b96ac9a) C:\WINDOWS\system32\DRIVERS\DIFMMdm.sys

22:18:04.0343 4948 DIFMMdm - ok

22:18:04.0375 4948 DIFMNET (d1563cf53d3347a40d548f2b7c209d9f) C:\WINDOWS\system32\DRIVERS\DIFMNET.sys

22:18:04.0390 4948 DIFMNET - ok

22:18:04.0421 4948 DIFMNVsp (6f847c47daf9ab1cc06e85778877ff0c) C:\WINDOWS\system32\DRIVERS\DIFMNVsp.sys

22:18:04.0437 4948 DIFMNVsp - ok

22:18:04.0468 4948 DIFMVsp (d1a8366667c084c23673707d7af0dc3d) C:\WINDOWS\system32\DRIVERS\DIFMVsp.sys

22:18:04.0484 4948 DIFMVsp - ok

22:18:04.0515 4948 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys

22:18:04.0531 4948 Disk - ok

22:18:04.0718 4948 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys

22:18:04.0734 4948 dmboot - ok

22:18:04.0750 4948 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys

22:18:04.0750 4948 dmio - ok

22:18:04.0765 4948 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys

22:18:04.0765 4948 dmload - ok

22:18:04.0812 4948 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys

22:18:04.0812 4948 DMusic - ok

22:18:04.0843 4948 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys

22:18:04.0843 4948 dpti2o - ok

22:18:04.0875 4948 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys

22:18:04.0875 4948 drmkaud - ok

22:18:04.0890 4948 E100B (3fca03cbca11269f973b70fa483c88ef) C:\WINDOWS\system32\DRIVERS\e100b325.sys

22:18:04.0906 4948 E100B - ok

22:18:04.0937 4948 e1express (e1e31cb759ced9bae730b86171b9c9fd) C:\WINDOWS\system32\DRIVERS\e1e5132.sys

22:18:04.0953 4948 e1express - ok

22:18:05.0093 4948 EagleNT - ok

22:18:05.0171 4948 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys

22:18:05.0171 4948 Fastfat - ok

22:18:05.0218 4948 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys

22:18:05.0234 4948 Fdc - ok

22:18:05.0250 4948 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys

22:18:05.0250 4948 Fips - ok

22:18:05.0281 4948 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys

22:18:05.0281 4948 Flpydisk - ok

22:18:05.0343 4948 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys

22:18:05.0359 4948 FltMgr - ok

22:18:05.0390 4948 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys

22:18:05.0390 4948 Fs_Rec - ok

22:18:05.0406 4948 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys

22:18:05.0421 4948 Ftdisk - ok

22:18:05.0453 4948 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys

22:18:05.0468 4948 GEARAspiWDM - ok

22:18:05.0484 4948 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys

22:18:05.0484 4948 Gpc - ok

22:18:05.0531 4948 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys

22:18:05.0531 4948 HDAudBus - ok

22:18:05.0687 4948 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys

22:18:05.0703 4948 HidUsb - ok

22:18:05.0734 4948 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys

22:18:05.0734 4948 hpn - ok

22:18:05.0765 4948 HSFHWAZL (6a5c4732d6803f84e2987edd8e4359ce) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys

22:18:05.0781 4948 HSFHWAZL - ok

22:18:05.0828 4948 HSF_DPV (21c31273c6cc4826e74be8ae3b09d4a8) C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys

22:18:05.0843 4948 HSF_DPV - ok

22:18:05.0906 4948 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys

22:18:05.0906 4948 HTTP - ok

22:18:06.0046 4948 hvlms - ok

22:18:06.0078 4948 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys

22:18:06.0093 4948 i2omgmt - ok

22:18:06.0109 4948 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys

22:18:06.0109 4948 i2omp - ok

22:18:06.0140 4948 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys

22:18:06.0140 4948 i8042prt - ok

22:18:06.0187 4948 iaStor (fd7f9d74c2b35dbda400804a3f5ed5d8) C:\WINDOWS\system32\DRIVERS\iaStor.sys

22:18:06.0187 4948 iaStor - ok

22:18:06.0250 4948 IBMPMDRV (bf648877413f6160e480814a24942b65) C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys

22:18:06.0250 4948 IBMPMDRV - ok

22:18:06.0281 4948 IBMTPCHK (083d095fed4b01fff9d501b98d50db68) C:\WINDOWS\system32\Drivers\IBMBLDID.sys

22:18:06.0296 4948 IBMTPCHK - ok

22:18:06.0328 4948 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys

22:18:06.0328 4948 Imapi - ok

22:18:06.0390 4948 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys

22:18:06.0406 4948 ini910u - ok

22:18:06.0578 4948 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys

22:18:06.0578 4948 IntelIde - ok

22:18:06.0625 4948 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys

22:18:06.0625 4948 intelppm - ok

22:18:06.0640 4948 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys

22:18:06.0640 4948 Ip6Fw - ok

22:18:06.0656 4948 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

22:18:06.0656 4948 IpFilterDriver - ok

22:18:06.0671 4948 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys

22:18:06.0687 4948 IpInIp - ok

22:18:06.0703 4948 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys

22:18:06.0703 4948 IpNat - ok

22:18:06.0734 4948 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys

22:18:06.0734 4948 IPSec - ok

22:18:06.0750 4948 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys

22:18:06.0750 4948 IRENUM - ok

22:18:06.0781 4948 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys

22:18:06.0781 4948 isapnp - ok

22:18:06.0828 4948 Iviaspi (f59c3569a2f2c464bb78cb1bdcdca55e) C:\WINDOWS\system32\drivers\iviaspi.sys

22:18:06.0828 4948 Iviaspi - ok

22:18:06.0859 4948 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys

22:18:06.0859 4948 Kbdclass - ok

22:18:06.0859 4948 kl1 - ok

22:18:06.0890 4948 klbg (53eedab3f0511321ac3ae8bc968b158c) C:\WINDOWS\system32\drivers\klbg.sys

22:18:06.0890 4948 klbg - ok

22:18:07.0015 4948 KLIF (439c778700fce23f2852535d6fa5996d) C:\WINDOWS\system32\DRIVERS\klif.sys

22:18:07.0031 4948 KLIF - ok

22:18:07.0062 4948 klim5 (fbdc2034b58d2135d25fe99eb8b747c3) C:\WINDOWS\system32\DRIVERS\klim5.sys

22:18:07.0062 4948 klim5 - ok

22:18:07.0093 4948 klmouflt (1f351c4ba53bfe58a1ca5fcdd11e1f81) C:\WINDOWS\system32\DRIVERS\klmouflt.sys

22:18:07.0093 4948 klmouflt - ok

22:18:07.0125 4948 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys

22:18:07.0140 4948 kmixer - ok

22:18:07.0156 4948 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys

22:18:07.0156 4948 KSecDD - ok

22:18:07.0187 4948 lbrtfdc - ok

22:18:07.0218 4948 LenovoRd (007c3a7e6a864ab2b8c52df717a7254c) C:\WINDOWS\system32\Drivers\LenovoRd.sys

22:18:07.0218 4948 LenovoRd - ok

22:18:07.0265 4948 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys

22:18:07.0265 4948 mdmxsdk - ok

22:18:07.0296 4948 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys

22:18:07.0296 4948 mnmdd - ok

22:18:07.0328 4948 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys

22:18:07.0328 4948 Modem - ok

22:18:07.0468 4948 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys

22:18:07.0468 4948 Mouclass - ok

22:18:07.0531 4948 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys

22:18:07.0531 4948 mouhid - ok

22:18:07.0578 4948 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys

22:18:07.0578 4948 MountMgr - ok

22:18:07.0609 4948 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys

22:18:07.0625 4948 mraid35x - ok

22:18:07.0640 4948 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys

22:18:07.0656 4948 MRxDAV - ok

22:18:07.0718 4948 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

22:18:07.0718 4948 MRxSmb - ok

22:18:07.0750 4948 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys

22:18:07.0750 4948 Msfs - ok

22:18:07.0796 4948 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys

22:18:07.0796 4948 MSKSSRV - ok

22:18:07.0828 4948 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys

22:18:07.0828 4948 MSPCLOCK - ok

22:18:07.0843 4948 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys

22:18:07.0859 4948 MSPQM - ok

22:18:07.0875 4948 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys

22:18:07.0890 4948 mssmbios - ok

22:18:08.0015 4948 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys

22:18:08.0031 4948 Mup - ok

22:18:08.0046 4948 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys

22:18:08.0062 4948 NDIS - ok

22:18:08.0093 4948 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys

22:18:08.0093 4948 NdisTapi - ok

22:18:08.0109 4948 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys

22:18:08.0125 4948 Ndisuio - ok

22:18:08.0140 4948 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys

22:18:08.0156 4948 NdisWan - ok

22:18:08.0187 4948 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys

22:18:08.0187 4948 NDProxy - ok

22:18:08.0218 4948 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys

22:18:08.0218 4948 NetBIOS - ok

22:18:08.0250 4948 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys

22:18:08.0250 4948 NetBT - ok

22:18:08.0375 4948 NETw4x32 (18b2d3e11ed7a3c898ade6a6692b6929) C:\WINDOWS\system32\DRIVERS\NETw4x32.sys

22:18:08.0421 4948 NETw4x32 - ok

22:18:08.0562 4948 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys

22:18:08.0578 4948 NIC1394 - ok

22:18:08.0625 4948 Nmea (b0d5188e282dc4edae7020f333427bc8) C:\WINDOWS\system32\DRIVERS\pctnullport.sys

22:18:08.0625 4948 Nmea - ok

22:18:08.0656 4948 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys

22:18:08.0656 4948 Npfs - ok

22:18:08.0687 4948 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys

22:18:08.0703 4948 Ntfs - ok

22:18:08.0765 4948 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys

22:18:08.0765 4948 Null - ok

22:18:09.0000 4948 nv (8f91d713ebb1682f36dd93525861149f) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys

22:18:09.0093 4948 nv - ok

22:18:09.0265 4948 NWADI (93213c7ec08e01e37a935bf144e75df6) C:\WINDOWS\system32\DRIVERS\NWADIenum.sys

22:18:09.0265 4948 NWADI - ok

22:18:09.0296 4948 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys

22:18:09.0312 4948 NwlnkFlt - ok

22:18:09.0328 4948 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys

22:18:09.0328 4948 NwlnkFwd - ok

22:18:09.0359 4948 NWUSBCDFIL (1fde5b2d61d97d803594df4b3bc28c4b) C:\WINDOWS\system32\DRIVERS\NwUsbCdFil.sys

22:18:09.0359 4948 NWUSBCDFIL - ok

22:18:09.0390 4948 NWUSBModem (65b471bb7e57c416a1e685ec07d4abfa) C:\WINDOWS\system32\DRIVERS\nwusbmdm.sys

22:18:09.0390 4948 NWUSBModem - ok

22:18:09.0437 4948 NWUSBPort (65b471bb7e57c416a1e685ec07d4abfa) C:\WINDOWS\system32\DRIVERS\nwusbser.sys

22:18:09.0437 4948 NWUSBPort - ok

22:18:09.0453 4948 NWUSBPort2 (65b471bb7e57c416a1e685ec07d4abfa) C:\WINDOWS\system32\DRIVERS\nwusbser2.sys

22:18:09.0453 4948 NWUSBPort2 - ok

22:18:09.0515 4948 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys

22:18:09.0515 4948 ohci1394 - ok

22:18:09.0671 4948 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys

22:18:09.0671 4948 Parport - ok

22:18:09.0687 4948 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys

22:18:09.0687 4948 PartMgr - ok

22:18:09.0703 4948 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys

22:18:09.0718 4948 ParVdm - ok

22:18:09.0750 4948 PCASp50 (1961590aa191b6b7dcf18a6a693af7b8) C:\WINDOWS\system32\Drivers\PCASp50.sys

22:18:09.0750 4948 PCASp50 - ok

22:18:09.0765 4948 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys

22:18:09.0765 4948 PCI - ok

22:18:09.0781 4948 PCIDump - ok

22:18:09.0812 4948 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys

22:18:09.0828 4948 PCIIde - ok

22:18:09.0828 4948 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\DRIVERS\pcmcia.sys

22:18:09.0843 4948 Pcmcia - ok

22:18:09.0875 4948 PCTINDIS5 (1e715247efffdda938c085913045d599) C:\WINDOWS\system32\PCTINDIS5.SYS

22:18:09.0890 4948 PCTINDIS5 - ok

22:18:09.0890 4948 PDCOMP - ok

22:18:09.0906 4948 PDFRAME - ok

22:18:09.0921 4948 PDRELI - ok

22:18:09.0937 4948 PDRFRAME - ok

22:18:09.0968 4948 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys

22:18:09.0968 4948 perc2 - ok

22:18:10.0000 4948 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys

22:18:10.0000 4948 perc2hib - ok

22:18:10.0062 4948 pmem (dedef40e1d05842639491365cb2c069e) C:\WINDOWS\System32\drivers\pmemnt.sys

22:18:10.0062 4948 pmem - ok

22:18:10.0062 4948 PNDIS5 - ok

22:18:10.0093 4948 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys

22:18:10.0093 4948 PptpMiniport - ok

22:18:10.0125 4948 PROCDD (1d80309fed4babf8ea9e7b84a394348b) C:\WINDOWS\system32\DRIVERS\PROCDD.SYS

22:18:10.0125 4948 PROCDD - ok

22:18:10.0156 4948 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys

22:18:10.0156 4948 Processor - ok

22:18:10.0312 4948 psadd (f8a25f1dd8b2c332cbc663e3579566e7) C:\WINDOWS\system32\DRIVERS\psadd.sys

22:18:10.0312 4948 psadd - ok

22:18:10.0343 4948 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys

22:18:10.0343 4948 PSched - ok

22:18:10.0375 4948 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys

22:18:10.0375 4948 Ptilink - ok

22:18:10.0421 4948 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys

22:18:10.0421 4948 PxHelp20 - ok

22:18:10.0453 4948 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys

22:18:10.0468 4948 ql1080 - ok

22:18:10.0500 4948 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys

22:18:10.0500 4948 Ql10wnt - ok

22:18:10.0531 4948 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys

22:18:10.0546 4948 ql12160 - ok

22:18:10.0562 4948 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys

22:18:10.0562 4948 ql1240 - ok

22:18:10.0578 4948 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys

22:18:10.0578 4948 ql1280 - ok

22:18:10.0609 4948 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys

22:18:10.0609 4948 RasAcd - ok

22:18:10.0750 4948 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys

22:18:10.0765 4948 Rasl2tp - ok

22:18:10.0781 4948 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys

22:18:10.0796 4948 RasPppoe - ok

22:18:10.0828 4948 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys

22:18:10.0828 4948 Raspti - ok

22:18:10.0875 4948 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys

22:18:10.0875 4948 Rdbss - ok

22:18:10.0921 4948 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

22:18:10.0921 4948 RDPCDD - ok

22:18:10.0953 4948 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys

22:18:10.0968 4948 rdpdr - ok

22:18:11.0000 4948 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys

22:18:11.0015 4948 RDPWD - ok

22:18:11.0046 4948 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys

22:18:11.0046 4948 redbook - ok

22:18:11.0078 4948 RimUsb - ok

22:18:11.0109 4948 RimVSerPort (d9b34325ee5df78b8f28a3de9f577c7d) C:\WINDOWS\system32\DRIVERS\RimSerial.sys

22:18:11.0125 4948 RimVSerPort - ok

22:18:11.0250 4948 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys

22:18:11.0265 4948 ROOTMODEM - ok

22:18:11.0312 4948 s24trans (2220783b32a9f91df87f3e8315f091e7) C:\WINDOWS\system32\DRIVERS\s24trans.sys

22:18:11.0328 4948 s24trans - ok

22:18:11.0406 4948 SASDIFSV (a3281aec37e0720a2bc28034c2df2a56) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS

22:18:11.0406 4948 SASDIFSV - ok

22:18:11.0421 4948 SASKUTIL (61db0d0756a99506207fd724e3692b25) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS

22:18:11.0421 4948 SASKUTIL - ok

22:18:11.0500 4948 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys

22:18:11.0500 4948 Secdrv - ok

22:18:11.0546 4948 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys

22:18:11.0546 4948 serenum - ok

22:18:11.0578 4948 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys

22:18:11.0578 4948 Serial - ok

22:18:11.0734 4948 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\DRIVERS\sfloppy.sys

22:18:11.0750 4948 Sfloppy - ok

22:18:11.0812 4948 Shockprf (a3aee791db8c73882f4503bfaacd8c9e) C:\WINDOWS\system32\DRIVERS\Apsx86.sys

22:18:11.0812 4948 Shockprf - ok

22:18:11.0828 4948 Simbad - ok

22:18:11.0859 4948 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys

22:18:11.0875 4948 sisagp - ok

22:18:11.0906 4948 SMNDIS5 - ok

22:18:11.0937 4948 SMSIVZAM5 (1e715247efffdda938c085913045d599) C:\PROGRA~1\VERIZO~1\VZACCE~1\SMSIVZAM5.SYS

22:18:11.0937 4948 SMSIVZAM5 - ok

22:18:11.0968 4948 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys

22:18:11.0968 4948 Sparrow - ok

22:18:12.0015 4948 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys

22:18:12.0015 4948 splitter - ok

22:18:12.0062 4948 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys

22:18:12.0062 4948 sr - ok

22:18:12.0109 4948 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys

22:18:12.0109 4948 Srv - ok

22:18:12.0156 4948 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys

22:18:12.0171 4948 swenum - ok

22:18:12.0312 4948 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys

22:18:12.0328 4948 swmidi - ok

22:18:12.0359 4948 swmsflt (3d4776ab6520240ae06d277ac45bf836) C:\WINDOWS\system32\DRIVERS\swmsflt.sys

22:18:12.0359 4948 swmsflt - ok

22:18:12.0390 4948 SWMX00 (af88ae62b84d016eb5bdc12ddf1005a3) C:\WINDOWS\system32\DRIVERS\swmx00.sys

22:18:12.0406 4948 SWMX00 - ok

22:18:12.0437 4948 SWNC5E00 (24bce62e4da07c6488e3a7ff37a6b6ae) C:\WINDOWS\system32\DRIVERS\SWNC5E00.sys

22:18:12.0453 4948 SWNC5E00 - ok

22:18:12.0500 4948 SWNC8U56 (2f6f8b7f821c994de3d1caf399bf9cd3) C:\WINDOWS\system32\DRIVERS\swnc8u56.sys

22:18:12.0500 4948 SWNC8U56 - ok

22:18:12.0531 4948 SWUMX56 (903a5e596a3910cebfa33f3bd7d9c174) C:\WINDOWS\system32\DRIVERS\swumx56.sys

22:18:12.0531 4948 SWUMX56 - ok

22:18:12.0578 4948 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys

22:18:12.0593 4948 symc810 - ok

22:18:12.0609 4948 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys

22:18:12.0609 4948 symc8xx - ok

22:18:12.0640 4948 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys

22:18:12.0640 4948 sym_hi - ok

22:18:12.0781 4948 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys

22:18:12.0781 4948 sym_u3 - ok

22:18:12.0828 4948 SynTP (b248b5fe80b285b91cb1e6f85b0ae1d7) C:\WINDOWS\system32\DRIVERS\SynTP.sys

22:18:12.0843 4948 SynTP - ok

22:18:12.0875 4948 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys

22:18:12.0875 4948 sysaudio - ok

22:18:12.0921 4948 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys

22:18:12.0937 4948 Tcpip - ok

22:18:12.0968 4948 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys

22:18:12.0968 4948 TDPIPE - ok

22:18:12.0984 4948 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys

22:18:13.0000 4948 TDTCP - ok

22:18:13.0015 4948 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys

22:18:13.0031 4948 TermDD - ok

22:18:13.0078 4948 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\system32\DRIVERS\toside.sys

22:18:13.0093 4948 TosIde - ok

22:18:13.0250 4948 TPDIGIMN (639ba7b37f25054cf5e82604e736d250) C:\WINDOWS\system32\DRIVERS\ApsHM86.sys

22:18:13.0265 4948 TPDIGIMN - ok

22:18:13.0312 4948 TPHKDRV (542770c8925e13b29b1ba63f05898058) C:\WINDOWS\system32\DRIVERS\TPHKDRV.sys

22:18:13.0328 4948 TPHKDRV - ok

22:18:13.0359 4948 TPPWRIF (44672de6cea9569c21c4b7a8d2560750) C:\WINDOWS\system32\drivers\Tppwrif.sys

22:18:13.0359 4948 TPPWRIF - ok

22:18:13.0531 4948 TSMAPIP (f2aba3066d7921d7fcdbd66dea88be11) C:\WINDOWS\system32\drivers\TSMAPIP.SYS

22:18:13.0546 4948 TSMAPIP - ok

22:18:13.0687 4948 tvtfilter (49258a02a1e8d304ed88b0f1c56b1738) C:\WINDOWS\system32\DRIVERS\tvtfilter.sys

22:18:13.0687 4948 tvtfilter - ok

22:18:13.0843 4948 TVTI2C (8ab24d4b7da715c2c80455137910e792) C:\WINDOWS\system32\DRIVERS\Tvti2c.sys

22:18:13.0843 4948 TVTI2C - ok

22:18:13.0859 4948 TVTPktFilter - ok

22:18:13.0906 4948 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys

22:18:13.0906 4948 Udfs - ok

22:18:14.0046 4948 UIUSys - ok

22:18:14.0093 4948 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys

22:18:14.0093 4948 ultra - ok

22:18:14.0140 4948 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys

22:18:14.0156 4948 Update - ok

22:18:14.0203 4948 USBAAPL (e8c1b9ebac65288e1b51e8a987d98af6) C:\WINDOWS\system32\Drivers\usbaapl.sys

22:18:14.0218 4948 USBAAPL - ok

22:18:14.0234 4948 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys

22:18:14.0234 4948 usbccgp - ok

22:18:14.0265 4948 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys

22:18:14.0265 4948 usbehci - ok

22:18:14.0296 4948 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys

22:18:14.0296 4948 usbhub - ok

22:18:14.0343 4948 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys

22:18:14.0343 4948 usbohci - ok

22:18:14.0375 4948 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys

22:18:14.0390 4948 usbprint - ok

22:18:14.0531 4948 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys

22:18:14.0531 4948 usbscan - ok

22:18:14.0593 4948 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

22:18:14.0593 4948 USBSTOR - ok

22:18:14.0625 4948 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys

22:18:14.0625 4948 usbuhci - ok

22:18:14.0656 4948 usb_rndisx (b6cc50279d6cd28e090a5d33244adc9a) C:\WINDOWS\system32\DRIVERS\usb8023x.sys

22:18:14.0671 4948 usb_rndisx - ok

22:18:14.0687 4948 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys

22:18:14.0703 4948 VgaSave - ok

22:18:14.0718 4948 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys

22:18:14.0734 4948 viaagp - ok

22:18:14.0750 4948 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys

22:18:14.0765 4948 ViaIde - ok

22:18:14.0796 4948 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys

22:18:14.0796 4948 VolSnap - ok

22:18:14.0875 4948 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys

22:18:14.0875 4948 Wanarp - ok

22:18:15.0031 4948 wceusbsh (46a247f6617526afe38b6f12f5512120) C:\WINDOWS\system32\DRIVERS\wceusbsh.sys

22:18:15.0031 4948 wceusbsh - ok

22:18:15.0046 4948 WDICA - ok

22:18:15.0078 4948 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys

22:18:15.0093 4948 wdmaud - ok

22:18:15.0156 4948 winachsf (307d248f97835b6879bdd361086924fe) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys

22:18:15.0171 4948 winachsf - ok

22:18:15.0234 4948 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys

22:18:15.0234 4948 WmiAcpi - ok

22:18:15.0296 4948 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys

22:18:15.0296 4948 WS2IFSL - ok

22:18:15.0484 4948 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys

22:18:15.0484 4948 WudfPf - ok

22:18:15.0578 4948 MBR (0x1B8) (727e1a0f13b33d1de28b7cf4a82de100) \Device\Harddisk0\DR0

22:18:15.0593 4948 \Device\Harddisk0\DR0 - ok

22:18:15.0609 4948 Boot (0x1200) (f1c12c32ac5081553bacf2678b2ef614) \Device\Harddisk0\DR0\Partition0

22:18:15.0609 4948 \Device\Harddisk0\DR0\Partition0 - ok

22:18:15.0609 4948 ============================================================

22:18:15.0609 4948 Scan finished

22:18:15.0609 4948 ============================================================

22:18:15.0625 5716 Detected object count: 0

22:18:15.0625 5716 Actual detected object count: 0

itsewestman · December 4, 2011

Security check

itsewestman · December 4, 2011

Security Check attached

checkup.txt

D-FRED-BROWN · December 4, 2011

We have some more to do.

First,

BackupYour Registry with ERUNT

Please go here, scroll down to ERUNT, and download.
For version with the Installer:
Use the setup program to install ERUNT on your computer
For the zipped version:
Unzip all the files into a folder of your choice.

Click Erunt.exe to backup your Registry to the folder of your choice.

Note: To restore your Registry, go to the folder and start ERDNT.exe

------

Please do the following:

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quotebox below into it:

KILLALL::
Driver::
cbgkxj
hvlms
hboik
atpfca
File::
c:\windows\system32\drivers\hboik.sys
c:\windows\system32\drivers\atpfca.sys
c:\windows\system32\sqlesw32.dll
Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Sqlseses]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sqlesw32]

Save this as CFScript.txt, in the same location as ComboFix.exe

Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt which I shall require in your next reply.

Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

Please include the newly-created C:\ComboFix.txt in your next reply, and let me know how things are running now

itsewestman · December 4, 2011

Seems like combfix isn't finishing, my computer restarts half way through the process.

itsewestman · December 4, 2011

Nevemind, preparing report now

itsewestman · December 4, 2011

Here it is.

log.txt

D-FRED-BROWN · December 4, 2011

Looking good. Let's run some online scans to see if there are any remaining traces left before we move on.

Please run a free online scan with the ESET Online Scanner

Note: You will need to use Internet Explorer for this scan.

Tick the box next to YES, I accept the Terms of Use.
Click Start
When asked, allow the ActiveX control to install
Click Start
Make sure that the options Remove found threats is Unchecked and the option Scan unwanted applications is checked
Click Scan
Wait for the scan to finish
Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
Copy and paste that log as a reply to this topic

--------

Please use the Internet Explorer and run a BitDefender Online scan from Here

Please check I agree with the Terms and Conditions and click Start Here
You will need to allow an Active X install for the scan to run.
Leave the scanning options at default and click Start Scan

Please post the results in your next reply.

screen317 · December 19, 2011

Are you still with us? This topic will be closed in a few days if we do not hear back from you.

screen317 · February 16, 2012

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Google Redirect and Ping.exe

Recommended Posts

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Recently Browsing 0 members

Important Information