My computer is Hijacked bad!

umshewa · February 21, 2012

OK, soooo my computer has a nasty virus. I have read past posts (http://forums.malwar...?showtopic=9573 and http://forums.malwar...howtopic=78625. So I have done the things stated and now I'm posting my results. When I reboot my computer the program/virus System Check comes up too....HELP.

attach.txt

dds.txt

Maniac · February 22, 2012

Hello koontzman and :welcome: ! My name is Maniac and I will be glad to help you solve your malware problem.

Please note:

If you are a paying customer, you have the privilege to contact the help desk at support@malwarebytes.org or here (http://helpdesk.malwarebytes.org/home). If you choose this option to get help, please let me know.
I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
Make sure you read all of the instructions and fixes thoroughly before continuing with them.
Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.

Instructions here are not for you specifically.

http://forums.malwarebytes.org/index.php?showtopic=78625

Step 1

Please uninstall BitTorrent and take a look at our policy:

http://forums.malwarebytes.org/index.php?showtopic=97700

Step 2

Download the latest version of TDSSKiller from here and save it to your Desktop.

Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
Check the boxes beside Verify Driver Digital Signature and Detect TDLFS file system, then click OK.
Click the Start Scan button.
If a suspicious object is detected, the default action will be Skip, click on Continue.
If malicious objects are found, they will show in the Scan results and offer three (3) options.
Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.
Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.

A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste its contents on your next reply.

Step 3

You probably won't run Malwarebytes' Anti-Malware, so if you are experiencing this problem follow the instructions to run it:

http://forums.malwarebytes.org/index.php?showtopic=85715

Launch Malwarebytes' Anti-Malware
Go to Update" tab and select Check for Updates. If an update is found, it will download and install the latest version.
Go to Scanner tab and select Perform Quick Scan, then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.

Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer,please do so immediately.

In your next post, please include:

TDSSKiller log
Malwarebytes' Anti-Malware log
a new fresh DDS log file

umshewa · February 22, 2012

I have done everything requested. Here are the logs too. I will also show the attach.log file too... Thanks for the help!!

TDSSKiller.2.7.13.0_22.02.2012_11.59.04_log.txt

attach02222012.txt

dds02222012.txt

mbam-log-2012-02-22 (12-05-41).txt

umshewa · February 22, 2012

Forgot to also ask....what are you looking at and what can I look for in the future? Thanks

umshewa · February 22, 2012

Dang, also, The link about Firefox going to proxy is happening to me too. That is why I put it in my original post. I would also like to fix that once the main problem is fixed. Thanks!!

umshewa · February 22, 2012

ok...so I just re-read everything again and saw that you don't want things as attachments....soooo I will again cut and paste everything....Sorry.....

TDSSKiller log

11:59:04.0953 0480 TDSS rootkit removing tool 2.7.13.0 Feb 15 2012 19:33:14

11:59:05.0484 0480 ============================================================

11:59:05.0484 0480 Current date / time: 2012/02/22 11:59:05.0484

11:59:05.0484 0480 SystemInfo:

11:59:05.0484 0480

11:59:05.0484 0480 OS Version: 5.1.2600 ServicePack: 3.0

11:59:05.0484 0480 Product type: Workstation

11:59:05.0484 0480 ComputerName: OFC2

11:59:05.0484 0480 UserName: Mike's Music

11:59:05.0484 0480 Windows directory: C:\WINDOWS

11:59:05.0484 0480 System windows directory: C:\WINDOWS

11:59:05.0484 0480 Processor architecture: Intel x86

11:59:05.0484 0480 Number of processors: 1

11:59:05.0484 0480 Page size: 0x1000

11:59:05.0484 0480 Boot type: Safe boot with network

11:59:05.0484 0480 ============================================================

11:59:08.0109 0480 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

11:59:08.0109 0480 \Device\Harddisk0\DR0:

11:59:08.0109 0480 MBR used

11:59:08.0109 0480 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x950A5C1

11:59:08.0171 0480 Initialize success

11:59:08.0171 0480 ============================================================

11:59:47.0406 0788 ============================================================

11:59:47.0406 0788 Scan started

11:59:47.0406 0788 Mode: Manual; SigCheck; TDLFS;

11:59:47.0406 0788 ============================================================

11:59:48.0171 0788 aaivskn (e6d35f3aa51a65eb35c1f2340154a25e) C:\WINDOWS\system32\drivers\iplitdf.sys

11:59:48.0890 0788 aaivskn ( UnsignedFile.Multi.Generic ) - warning

11:59:48.0890 0788 aaivskn - detected UnsignedFile.Multi.Generic (1)

11:59:48.0953 0788 Abiosdsk - ok

11:59:48.0984 0788 abp480n5 - ok

11:59:49.0078 0788 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys

11:59:49.0812 0788 ACPI - ok

11:59:49.0890 0788 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys

11:59:50.0031 0788 ACPIEC - ok

11:59:50.0062 0788 adpu160m - ok

11:59:50.0109 0788 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys

11:59:50.0203 0788 aec - ok

11:59:50.0234 0788 AFD (322d0e36693d6e24a2398bee62a268cd) C:\WINDOWS\System32\drivers\afd.sys

11:59:50.0359 0788 AFD - ok

11:59:50.0375 0788 Aha154x - ok

11:59:50.0390 0788 aic78u2 - ok

11:59:50.0406 0788 aic78xx - ok

11:59:50.0437 0788 AliIde - ok

11:59:50.0453 0788 amsint - ok

11:59:50.0500 0788 AnyDVD (40c279a23bd43553bfba6e88a9b38ae2) C:\WINDOWS\system32\Drivers\AnyDVD.sys

11:59:50.0609 0788 AnyDVD - ok

11:59:50.0625 0788 asc - ok

11:59:50.0640 0788 asc3350p - ok

11:59:50.0656 0788 asc3550 - ok

11:59:50.0734 0788 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys

11:59:50.0828 0788 AsyncMac - ok

11:59:50.0843 0788 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys

11:59:50.0937 0788 atapi - ok

11:59:50.0953 0788 Atdisk - ok

11:59:51.0000 0788 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys

11:59:51.0125 0788 Atmarpc - ok

11:59:51.0171 0788 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys

11:59:51.0296 0788 audstub - ok

11:59:51.0359 0788 avgio (0b497c79824f8e1bf22fa6aacd3de3a0) C:\Program Files\Avira\AntiVir Desktop\avgio.sys

11:59:51.0359 0788 avgio - ok

11:59:51.0406 0788 avgntflt (1e4114685de1ffa9675e09c6a1fb3f4b) C:\WINDOWS\system32\DRIVERS\avgntflt.sys

11:59:51.0406 0788 avgntflt - ok

11:59:51.0453 0788 avipbb (0f78d3dae6dedd99ae54c9491c62adf2) C:\WINDOWS\system32\DRIVERS\avipbb.sys

11:59:51.0453 0788 avipbb - ok

11:59:51.0515 0788 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys

11:59:51.0625 0788 Beep - ok

11:59:51.0687 0788 BrPar (2fe6d5be0629f706197b30c0aa05de30) C:\WINDOWS\System32\drivers\BrPar.sys

11:59:51.0703 0788 BrPar ( UnsignedFile.Multi.Generic ) - warning

11:59:51.0703 0788 BrPar - detected UnsignedFile.Multi.Generic (1)

11:59:51.0734 0788 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys

11:59:51.0875 0788 cbidf2k - ok

11:59:51.0890 0788 cd20xrnt - ok

11:59:51.0953 0788 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys

11:59:52.0078 0788 Cdaudio - ok

11:59:52.0109 0788 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys

11:59:52.0203 0788 Cdfs - ok

11:59:52.0234 0788 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys

11:59:52.0343 0788 Cdrom - ok

11:59:52.0359 0788 Changer - ok

11:59:52.0390 0788 CmdIde - ok

11:59:52.0437 0788 Cpqarray - ok

11:59:52.0453 0788 dac2w2k - ok

11:59:52.0484 0788 dac960nt - ok

11:59:52.0500 0788 dfym - ok

11:59:52.0531 0788 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys

11:59:52.0625 0788 Disk - ok

11:59:52.0687 0788 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys

11:59:52.0828 0788 dmboot - ok

11:59:52.0875 0788 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys

11:59:52.0968 0788 dmio - ok

11:59:53.0015 0788 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys

11:59:53.0140 0788 dmload - ok

11:59:53.0171 0788 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys

11:59:53.0281 0788 DMusic - ok

11:59:53.0296 0788 dpti2o - ok

11:59:53.0343 0788 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys

11:59:53.0437 0788 drmkaud - ok

11:59:53.0484 0788 ElbyCDIO (d71233d7ccc2e64f8715a20428d5a33b) C:\WINDOWS\system32\Drivers\ElbyCDIO.sys

11:59:53.0484 0788 ElbyCDIO - ok

11:59:53.0531 0788 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys

11:59:53.0625 0788 Fastfat - ok

11:59:53.0671 0788 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys

11:59:53.0781 0788 Fdc - ok

11:59:53.0796 0788 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys

11:59:53.0890 0788 Fips - ok

11:59:53.0921 0788 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys

11:59:54.0015 0788 Flpydisk - ok

11:59:54.0062 0788 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys

11:59:54.0156 0788 FltMgr - ok

11:59:54.0203 0788 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys

11:59:54.0328 0788 Fs_Rec - ok

11:59:54.0359 0788 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys

11:59:54.0484 0788 Ftdisk - ok

11:59:54.0531 0788 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys

11:59:54.0531 0788 GEARAspiWDM - ok

11:59:54.0578 0788 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys

11:59:54.0671 0788 Gpc - ok

11:59:54.0718 0788 HDAudBus (3fcc124b6e08ee0e9351f717dd136939) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys

11:59:54.0734 0788 HDAudBus ( UnsignedFile.Multi.Generic ) - warning

11:59:54.0734 0788 HDAudBus - detected UnsignedFile.Multi.Generic (1)

11:59:54.0796 0788 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys

11:59:54.0890 0788 HidUsb - ok

11:59:54.0906 0788 hpn - ok

11:59:54.0953 0788 HTTP (f6aacf5bce2893e0c1754afeb672e5c9) C:\WINDOWS\system32\Drivers\HTTP.sys

11:59:55.0046 0788 HTTP - ok

11:59:55.0062 0788 i2omgmt - ok

11:59:55.0078 0788 i2omp - ok

11:59:55.0109 0788 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys

11:59:55.0203 0788 i8042prt - ok

11:59:55.0218 0788 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys

11:59:55.0312 0788 Imapi - ok

11:59:55.0328 0788 ini910u - ok

11:59:55.0468 0788 IntcAzAudAddService (1ebde650d97a8eccdc1cc4a0804647cd) C:\WINDOWS\system32\drivers\RtkHDAud.sys

11:59:55.0734 0788 IntcAzAudAddService - ok

11:59:55.0750 0788 IntelIde - ok

11:59:55.0812 0788 ip6fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys

11:59:55.0953 0788 ip6fw - ok

11:59:56.0000 0788 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

11:59:56.0140 0788 IpFilterDriver - ok

11:59:56.0187 0788 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys

11:59:56.0296 0788 IpInIp - ok

11:59:56.0328 0788 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys

11:59:56.0421 0788 IpNat - ok

11:59:56.0453 0788 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys

11:59:56.0562 0788 IPSec - ok

11:59:56.0609 0788 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys

11:59:56.0703 0788 IRENUM - ok

11:59:56.0734 0788 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys

11:59:56.0843 0788 isapnp - ok

11:59:56.0859 0788 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys

11:59:56.0953 0788 Kbdclass - ok

11:59:56.0984 0788 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys

11:59:57.0093 0788 kmixer - ok

11:59:57.0125 0788 KSecDD (1705745d900dabf2d89f90ebaddc7517) C:\WINDOWS\system32\drivers\KSecDD.sys

11:59:57.0218 0788 KSecDD - ok

11:59:57.0234 0788 lbrtfdc - ok

11:59:57.0343 0788 LMIInfo (4f69faaabb7db0d43e327c0b6aab40fc) C:\Program Files\LogMeIn\x86\RaInfo.sys

11:59:57.0390 0788 LMIInfo - ok

11:59:57.0437 0788 lmimirr (4477689e2d8ae6b78ba34c9af4cc1ed1) C:\WINDOWS\system32\DRIVERS\lmimirr.sys

11:59:57.0437 0788 lmimirr - ok

11:59:57.0453 0788 LMIRfsClientNP - ok

11:59:57.0484 0788 LMIRfsDriver (3faa563ddf853320f90259d455a01d79) C:\WINDOWS\system32\drivers\LMIRfsDriver.sys

11:59:57.0484 0788 LMIRfsDriver - ok

11:59:57.0546 0788 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys

11:59:57.0671 0788 mnmdd - ok

11:59:57.0718 0788 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys

11:59:57.0812 0788 Modem - ok

11:59:57.0843 0788 motmodem (fe80c18ba448ddd76b7bead9eb203d37) C:\WINDOWS\system32\DRIVERS\motmodem.sys

11:59:57.0890 0788 motmodem - ok

11:59:57.0921 0788 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys

11:59:58.0015 0788 Mouclass - ok

11:59:58.0031 0788 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys

11:59:58.0125 0788 MountMgr - ok

11:59:58.0140 0788 mraid35x - ok

11:59:58.0171 0788 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys

11:59:58.0250 0788 MRxDAV - ok

11:59:58.0265 0788 MRxSmb (68755f0ff16070178b54674fe5b847b0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

11:59:58.0406 0788 MRxSmb - ok

11:59:58.0437 0788 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys

11:59:58.0531 0788 Msfs - ok

11:59:58.0578 0788 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys

11:59:58.0687 0788 MSKSSRV - ok

11:59:58.0718 0788 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys

11:59:58.0828 0788 MSPCLOCK - ok

11:59:58.0859 0788 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys

11:59:58.0953 0788 MSPQM - ok

11:59:58.0984 0788 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys

11:59:59.0078 0788 mssmbios - ok

11:59:59.0093 0788 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys

11:59:59.0171 0788 Mup - ok

11:59:59.0187 0788 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys

11:59:59.0296 0788 NDIS - ok

11:59:59.0328 0788 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys

11:59:59.0421 0788 NdisTapi - ok

11:59:59.0437 0788 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys

11:59:59.0531 0788 Ndisuio - ok

11:59:59.0546 0788 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys

11:59:59.0640 0788 NdisWan - ok

11:59:59.0656 0788 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys

11:59:59.0750 0788 NDProxy - ok

11:59:59.0781 0788 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys

11:59:59.0875 0788 NetBIOS - ok

11:59:59.0890 0788 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys

11:59:59.0984 0788 NetBT - ok

12:00:00.0015 0788 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys

12:00:00.0109 0788 Npfs - ok

12:00:00.0140 0788 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys

12:00:00.0296 0788 Ntfs - ok

12:00:00.0343 0788 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys

12:00:00.0468 0788 Null - ok

12:00:00.0593 0788 nv (eb2858f920b8135b807b5ccaa3ed73dc) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys

12:00:00.0828 0788 nv - ok

12:00:00.0875 0788 nvata (9eccd189a9554c30a0d18a429778c7ba) C:\WINDOWS\system32\DRIVERS\nvata.sys

12:00:00.0906 0788 nvata - ok

12:00:00.0937 0788 NVENETFD (4d6f0d3fb17c1ba64942f415c73adcdb) C:\WINDOWS\system32\DRIVERS\NVENETFD.sys

12:00:00.0984 0788 NVENETFD - ok

12:00:01.0015 0788 nvnetbus (921e63aa1e1a20302223d016acafb52b) C:\WINDOWS\system32\DRIVERS\nvnetbus.sys

12:00:01.0062 0788 nvnetbus - ok

12:00:01.0078 0788 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys

12:00:01.0203 0788 NwlnkFlt - ok

12:00:01.0234 0788 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys

12:00:01.0359 0788 NwlnkFwd - ok

12:00:01.0390 0788 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys

12:00:01.0500 0788 Parport - ok

12:00:01.0515 0788 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys

12:00:01.0625 0788 PartMgr - ok

12:00:01.0671 0788 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys

12:00:01.0781 0788 ParVdm - ok

12:00:01.0796 0788 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys

12:00:01.0875 0788 PCI - ok

12:00:01.0953 0788 PCIDump - ok

12:00:02.0000 0788 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys

12:00:02.0125 0788 PCIIde - ok

12:00:02.0171 0788 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys

12:00:02.0359 0788 Pcmcia - ok

12:00:02.0406 0788 PDCOMP - ok

12:00:02.0421 0788 PDFRAME - ok

12:00:02.0453 0788 PDRELI - ok

12:00:02.0484 0788 PDRFRAME - ok

12:00:02.0546 0788 perc2 - ok

12:00:02.0562 0788 perc2hib - ok

12:00:02.0703 0788 PGPmemlock (a549dc21b37f1eece4e89acc993aaabb) C:\WINDOWS\system32\drivers\PGPmemlock.sys

12:00:02.0859 0788 PGPmemlock ( UnsignedFile.Multi.Generic ) - warning

12:00:02.0859 0788 PGPmemlock - detected UnsignedFile.Multi.Generic (1)

12:00:02.0921 0788 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys

12:00:03.0140 0788 PptpMiniport - ok

12:00:03.0156 0788 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys

12:00:03.0468 0788 Processor - ok

12:00:03.0515 0788 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys

12:00:03.0796 0788 PSched - ok

12:00:03.0875 0788 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys

12:00:04.0000 0788 Ptilink - ok

12:00:04.0015 0788 ql1080 - ok

12:00:04.0031 0788 Ql10wnt - ok

12:00:04.0046 0788 ql12160 - ok

12:00:04.0078 0788 ql1240 - ok

12:00:04.0093 0788 ql1280 - ok

12:00:04.0109 0788 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys

12:00:04.0218 0788 RasAcd - ok

12:00:04.0250 0788 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys

12:00:04.0343 0788 Rasl2tp - ok

12:00:04.0375 0788 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys

12:00:04.0468 0788 RasPppoe - ok

12:00:04.0484 0788 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys

12:00:04.0578 0788 Raspti - ok

12:00:04.0609 0788 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys

12:00:04.0703 0788 Rdbss - ok

12:00:04.0718 0788 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

12:00:04.0828 0788 RDPCDD - ok

12:00:04.0875 0788 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys

12:00:04.0968 0788 rdpdr - ok

12:00:05.0015 0788 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys

12:00:05.0109 0788 RDPWD - ok

12:00:05.0140 0788 redbook (cce6de646a2a9691cad011937cb59f70) C:\WINDOWS\system32\DRIVERS\redbook.sys

12:00:05.0156 0788 redbook ( UnsignedFile.Multi.Generic ) - warning

12:00:05.0156 0788 redbook - detected UnsignedFile.Multi.Generic (1)

12:00:05.0250 0788 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys

12:00:05.0359 0788 Secdrv - ok

12:00:05.0406 0788 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys

12:00:05.0484 0788 serenum - ok

12:00:05.0531 0788 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys

12:00:05.0625 0788 Serial - ok

12:00:05.0687 0788 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys

12:00:05.0765 0788 Sfloppy - ok

12:00:05.0796 0788 Simbad - ok

12:00:05.0828 0788 Sparrow - ok

12:00:05.0843 0788 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys

12:00:05.0937 0788 splitter - ok

12:00:05.0984 0788 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys

12:00:06.0078 0788 sr - ok

12:00:06.0093 0788 Srv (5252605079810904e31c332e241cd59b) C:\WINDOWS\system32\DRIVERS\srv.sys

12:00:06.0218 0788 Srv - ok

12:00:06.0265 0788 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys

12:00:06.0265 0788 ssmdrv - ok

12:00:06.0328 0788 StillCam (a9573045baa16eab9b1085205b82f1ed) C:\WINDOWS\system32\DRIVERS\serscan.sys

12:00:06.0437 0788 StillCam - ok

12:00:06.0468 0788 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys

12:00:06.0562 0788 swenum - ok

12:00:06.0593 0788 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys

12:00:06.0703 0788 swmidi - ok

12:00:06.0718 0788 symc810 - ok

12:00:06.0734 0788 symc8xx - ok

12:00:06.0750 0788 sym_hi - ok

12:00:06.0781 0788 sym_u3 - ok

12:00:06.0796 0788 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys

12:00:06.0890 0788 sysaudio - ok

12:00:06.0937 0788 Tcpip (93ea8d04ec73a85db02eb8805988f733) C:\WINDOWS\system32\DRIVERS\tcpip.sys

12:00:07.0031 0788 Tcpip - ok

12:00:07.0078 0788 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys

12:00:07.0156 0788 TDPIPE - ok

12:00:07.0187 0788 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys

12:00:07.0296 0788 TDTCP - ok

12:00:07.0343 0788 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys

12:00:07.0453 0788 TermDD - ok

12:00:07.0484 0788 TosIde - ok

12:00:07.0546 0788 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys

12:00:07.0625 0788 Udfs - ok

12:00:07.0640 0788 ultra - ok

12:00:07.0718 0788 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys

12:00:07.0812 0788 Update - ok

12:00:07.0875 0788 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys

12:00:07.0906 0788 USBAAPL - ok

12:00:07.0953 0788 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys

12:00:08.0031 0788 usbccgp - ok

12:00:08.0078 0788 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys

12:00:08.0171 0788 usbehci - ok

12:00:08.0187 0788 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys

12:00:08.0296 0788 usbhub - ok

12:00:08.0343 0788 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys

12:00:08.0437 0788 usbohci - ok

12:00:08.0484 0788 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys

12:00:08.0562 0788 usbscan - ok

12:00:08.0593 0788 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

12:00:08.0687 0788 USBSTOR - ok

12:00:08.0718 0788 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys

12:00:08.0812 0788 VgaSave - ok

12:00:08.0828 0788 ViaIde - ok

12:00:08.0859 0788 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys

12:00:08.0937 0788 VolSnap - ok

12:00:08.0968 0788 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys

12:00:09.0062 0788 Wanarp - ok

12:00:09.0109 0788 Wdf01000 (fd47474bd21794508af449d9d91af6e6) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys

12:00:09.0125 0788 Wdf01000 - ok

12:00:09.0140 0788 WDICA - ok

12:00:09.0203 0788 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys

12:00:09.0281 0788 wdmaud - ok

12:00:09.0390 0788 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys

12:00:09.0531 0788 WS2IFSL - ok

12:00:09.0593 0788 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0

12:00:09.0750 0788 \Device\Harddisk0\DR0 - ok

12:00:09.0765 0788 Boot (0x1200) (4443162ff56254fd0dad60b375312fcc) \Device\Harddisk0\DR0\Partition0

12:00:09.0765 0788 \Device\Harddisk0\DR0\Partition0 - ok

12:00:09.0765 0788 ============================================================

12:00:09.0765 0788 Scan finished

12:00:09.0765 0788 ============================================================

12:00:09.0890 1832 Detected object count: 5

12:00:09.0890 1832 Actual detected object count: 5

12:00:29.0828 1832 aaivskn ( UnsignedFile.Multi.Generic ) - skipped by user

12:00:29.0828 1832 aaivskn ( UnsignedFile.Multi.Generic ) - User select action: Skip

12:00:29.0828 1832 BrPar ( UnsignedFile.Multi.Generic ) - skipped by user

12:00:29.0828 1832 BrPar ( UnsignedFile.Multi.Generic ) - User select action: Skip

12:00:29.0828 1832 HDAudBus ( UnsignedFile.Multi.Generic ) - skipped by user

12:00:29.0828 1832 HDAudBus ( UnsignedFile.Multi.Generic ) - User select action: Skip

12:00:29.0843 1832 PGPmemlock ( UnsignedFile.Multi.Generic ) - skipped by user

12:00:29.0843 1832 PGPmemlock ( UnsignedFile.Multi.Generic ) - User select action: Skip

12:00:29.0843 1832 redbook ( UnsignedFile.Multi.Generic ) - skipped by user

12:00:29.0843 1832 redbook ( UnsignedFile.Multi.Generic ) - User select action: Skip

12:00:48.0140 0180 ============================================================

12:00:48.0140 0180 Scan started

12:00:48.0140 0180 Mode: Manual; SigCheck; TDLFS;

12:00:48.0140 0180 ============================================================

12:00:48.0781 0180 aaivskn (e6d35f3aa51a65eb35c1f2340154a25e) C:\WINDOWS\system32\drivers\iplitdf.sys

12:00:48.0812 0180 aaivskn ( UnsignedFile.Multi.Generic ) - warning

12:00:48.0812 0180 aaivskn - detected UnsignedFile.Multi.Generic (1)

12:00:48.0828 0180 Abiosdsk - ok

12:00:48.0843 0180 abp480n5 - ok

12:00:48.0890 0180 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys

12:00:48.0984 0180 ACPI - ok

12:00:49.0031 0180 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys

12:00:49.0125 0180 ACPIEC - ok

12:00:49.0125 0180 adpu160m - ok

12:00:49.0187 0180 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys

12:00:49.0281 0180 aec - ok

12:00:49.0312 0180 AFD (322d0e36693d6e24a2398bee62a268cd) C:\WINDOWS\System32\drivers\afd.sys

12:00:49.0406 0180 AFD - ok

12:00:49.0406 0180 Aha154x - ok

12:00:49.0421 0180 aic78u2 - ok

12:00:49.0453 0180 aic78xx - ok

12:00:49.0484 0180 AliIde - ok

12:00:49.0500 0180 amsint - ok

12:00:49.0562 0180 AnyDVD (40c279a23bd43553bfba6e88a9b38ae2) C:\WINDOWS\system32\Drivers\AnyDVD.sys

12:00:49.0562 0180 AnyDVD - ok

12:00:49.0593 0180 asc - ok

12:00:49.0609 0180 asc3350p - ok

12:00:49.0625 0180 asc3550 - ok

12:00:49.0687 0180 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys

12:00:49.0781 0180 AsyncMac - ok

12:00:49.0812 0180 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys

12:00:49.0906 0180 atapi - ok

12:00:49.0921 0180 Atdisk - ok

12:00:49.0968 0180 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys

12:00:50.0078 0180 Atmarpc - ok

12:00:50.0125 0180 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys

12:00:50.0250 0180 audstub - ok

12:00:50.0328 0180 avgio (0b497c79824f8e1bf22fa6aacd3de3a0) C:\Program Files\Avira\AntiVir Desktop\avgio.sys

12:00:50.0328 0180 avgio - ok

12:00:50.0375 0180 avgntflt (1e4114685de1ffa9675e09c6a1fb3f4b) C:\WINDOWS\system32\DRIVERS\avgntflt.sys

12:00:50.0375 0180 avgntflt - ok

12:00:50.0468 0180 avipbb (0f78d3dae6dedd99ae54c9491c62adf2) C:\WINDOWS\system32\DRIVERS\avipbb.sys

12:00:50.0468 0180 avipbb - ok

12:00:50.0531 0180 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys

12:00:50.0625 0180 Beep - ok

12:00:50.0687 0180 BrPar (2fe6d5be0629f706197b30c0aa05de30) C:\WINDOWS\System32\drivers\BrPar.sys

12:00:50.0703 0180 BrPar ( UnsignedFile.Multi.Generic ) - warning

12:00:50.0703 0180 BrPar - detected UnsignedFile.Multi.Generic (1)

12:00:50.0750 0180 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys

12:00:50.0859 0180 cbidf2k - ok

12:00:50.0875 0180 cd20xrnt - ok

12:00:50.0921 0180 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys

12:00:51.0031 0180 Cdaudio - ok

12:00:51.0062 0180 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys

12:00:51.0156 0180 Cdfs - ok

12:00:51.0187 0180 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys

12:00:51.0281 0180 Cdrom - ok

12:00:51.0296 0180 Changer - ok

12:00:51.0328 0180 CmdIde - ok

12:00:51.0375 0180 Cpqarray - ok

12:00:51.0390 0180 dac2w2k - ok

12:00:51.0406 0180 dac960nt - ok

12:00:51.0437 0180 dfym - ok

12:00:51.0468 0180 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys

12:00:51.0562 0180 Disk - ok

12:00:51.0609 0180 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys

12:00:51.0750 0180 dmboot - ok

12:00:51.0765 0180 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys

12:00:51.0843 0180 dmio - ok

12:00:51.0890 0180 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys

12:00:52.0015 0180 dmload - ok

12:00:52.0046 0180 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys

12:00:52.0125 0180 DMusic - ok

12:00:52.0156 0180 dpti2o - ok

12:00:52.0203 0180 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys

12:00:52.0281 0180 drmkaud - ok

12:00:52.0328 0180 ElbyCDIO (d71233d7ccc2e64f8715a20428d5a33b) C:\WINDOWS\system32\Drivers\ElbyCDIO.sys

12:00:52.0343 0180 ElbyCDIO - ok

12:00:52.0375 0180 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys

12:00:52.0468 0180 Fastfat - ok

12:00:52.0515 0180 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys

12:00:52.0593 0180 Fdc - ok

12:00:52.0625 0180 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys

12:00:52.0718 0180 Fips - ok

12:00:52.0734 0180 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys

12:00:52.0812 0180 Flpydisk - ok

12:00:52.0859 0180 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys

12:00:52.0953 0180 FltMgr - ok

12:00:53.0015 0180 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys

12:00:53.0125 0180 Fs_Rec - ok

12:00:53.0171 0180 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys

12:00:53.0281 0180 Ftdisk - ok

12:00:53.0328 0180 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys

12:00:53.0343 0180 GEARAspiWDM - ok

12:00:53.0375 0180 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys

12:00:53.0484 0180 Gpc - ok

12:00:53.0531 0180 HDAudBus (3fcc124b6e08ee0e9351f717dd136939) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys

12:00:53.0546 0180 HDAudBus ( UnsignedFile.Multi.Generic ) - warning

12:00:53.0546 0180 HDAudBus - detected UnsignedFile.Multi.Generic (1)

12:00:53.0593 0180 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys

12:00:53.0687 0180 HidUsb - ok

12:00:53.0687 0180 hpn - ok

12:00:53.0718 0180 HTTP (f6aacf5bce2893e0c1754afeb672e5c9) C:\WINDOWS\system32\Drivers\HTTP.sys

12:00:53.0828 0180 HTTP - ok

12:00:53.0843 0180 i2omgmt - ok

12:00:53.0859 0180 i2omp - ok

12:00:53.0890 0180 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys

12:00:53.0984 0180 i8042prt - ok

12:00:54.0000 0180 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys

12:00:54.0078 0180 Imapi - ok

12:00:54.0093 0180 ini910u - ok

12:00:54.0218 0180 IntcAzAudAddService (1ebde650d97a8eccdc1cc4a0804647cd) C:\WINDOWS\system32\drivers\RtkHDAud.sys

12:00:54.0390 0180 IntcAzAudAddService - ok

12:00:54.0406 0180 IntelIde - ok

12:00:54.0437 0180 ip6fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys

12:00:54.0546 0180 ip6fw - ok

12:00:54.0593 0180 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

12:00:54.0703 0180 IpFilterDriver - ok

12:00:54.0734 0180 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys

12:00:54.0843 0180 IpInIp - ok

12:00:54.0890 0180 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys

12:00:54.0968 0180 IpNat - ok

12:00:54.0984 0180 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys

12:00:55.0078 0180 IPSec - ok

12:00:55.0125 0180 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys

12:00:55.0218 0180 IRENUM - ok

12:00:55.0250 0180 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys

12:00:55.0359 0180 isapnp - ok

12:00:55.0390 0180 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys

12:00:55.0484 0180 Kbdclass - ok

12:00:55.0500 0180 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys

12:00:55.0609 0180 kmixer - ok

12:00:55.0640 0180 KSecDD (1705745d900dabf2d89f90ebaddc7517) C:\WINDOWS\system32\drivers\KSecDD.sys

12:00:55.0734 0180 KSecDD - ok

12:00:55.0765 0180 lbrtfdc - ok

12:00:55.0906 0180 LMIInfo (4f69faaabb7db0d43e327c0b6aab40fc) C:\Program Files\LogMeIn\x86\RaInfo.sys

12:00:55.0921 0180 LMIInfo - ok

12:00:55.0953 0180 lmimirr (4477689e2d8ae6b78ba34c9af4cc1ed1) C:\WINDOWS\system32\DRIVERS\lmimirr.sys

12:00:55.0968 0180 lmimirr - ok

12:00:55.0968 0180 LMIRfsClientNP - ok

12:00:55.0984 0180 LMIRfsDriver (3faa563ddf853320f90259d455a01d79) C:\WINDOWS\system32\drivers\LMIRfsDriver.sys

12:00:56.0000 0180 LMIRfsDriver - ok

12:00:56.0078 0180 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys

12:00:56.0187 0180 mnmdd - ok

12:00:56.0218 0180 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys

12:00:56.0312 0180 Modem - ok

12:00:56.0359 0180 motmodem (fe80c18ba448ddd76b7bead9eb203d37) C:\WINDOWS\system32\DRIVERS\motmodem.sys

12:00:56.0375 0180 motmodem - ok

12:00:56.0406 0180 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys

12:00:56.0484 0180 Mouclass - ok

12:00:56.0515 0180 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys

12:00:56.0609 0180 MountMgr - ok

12:00:56.0625 0180 mraid35x - ok

12:00:56.0671 0180 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys

12:00:56.0750 0180 MRxDAV - ok

12:00:56.0781 0180 MRxSmb (68755f0ff16070178b54674fe5b847b0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

12:00:56.0906 0180 MRxSmb - ok

12:00:56.0953 0180 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys

12:00:57.0046 0180 Msfs - ok

12:00:57.0093 0180 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys

12:00:57.0203 0180 MSKSSRV - ok

12:00:57.0250 0180 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys

12:00:57.0343 0180 MSPCLOCK - ok

12:00:57.0390 0180 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys

12:00:57.0468 0180 MSPQM - ok

12:00:57.0500 0180 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys

12:00:57.0578 0180 mssmbios - ok

12:00:57.0609 0180 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys

12:00:57.0687 0180 Mup - ok

12:00:57.0718 0180 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys

12:00:57.0812 0180 NDIS - ok

12:00:57.0859 0180 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys

12:00:57.0937 0180 NdisTapi - ok

12:00:57.0968 0180 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys

12:00:58.0062 0180 Ndisuio - ok

12:00:58.0078 0180 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys

12:00:58.0171 0180 NdisWan - ok

12:00:58.0187 0180 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys

12:00:58.0281 0180 NDProxy - ok

12:00:58.0343 0180 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys

12:00:58.0421 0180 NetBIOS - ok

12:00:58.0453 0180 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys

12:00:58.0546 0180 NetBT - ok

12:00:58.0609 0180 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys

12:00:58.0703 0180 Npfs - ok

12:00:58.0750 0180 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys

12:00:58.0843 0180 Ntfs - ok

12:00:58.0906 0180 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys

12:00:59.0015 0180 Null - ok

12:00:59.0140 0180 nv (eb2858f920b8135b807b5ccaa3ed73dc) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys

12:00:59.0250 0180 nv - ok

12:00:59.0296 0180 nvata (9eccd189a9554c30a0d18a429778c7ba) C:\WINDOWS\system32\DRIVERS\nvata.sys

12:00:59.0312 0180 nvata - ok

12:00:59.0359 0180 NVENETFD (4d6f0d3fb17c1ba64942f415c73adcdb) C:\WINDOWS\system32\DRIVERS\NVENETFD.sys

12:00:59.0375 0180 NVENETFD - ok

12:00:59.0421 0180 nvnetbus (921e63aa1e1a20302223d016acafb52b) C:\WINDOWS\system32\DRIVERS\nvnetbus.sys

12:00:59.0421 0180 nvnetbus - ok

12:00:59.0468 0180 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys

12:00:59.0578 0180 NwlnkFlt - ok

12:00:59.0593 0180 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys

12:00:59.0718 0180 NwlnkFwd - ok

12:00:59.0765 0180 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys

12:00:59.0859 0180 Parport - ok

12:00:59.0875 0180 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys

12:01:00.0015 0180 PartMgr - ok

12:01:00.0062 0180 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys

12:01:00.0156 0180 ParVdm - ok

12:01:00.0171 0180 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys

12:01:00.0265 0180 PCI - ok

12:01:00.0281 0180 PCIDump - ok

12:01:00.0328 0180 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys

12:01:00.0484 0180 PCIIde - ok

12:01:00.0531 0180 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys

12:01:00.0625 0180 Pcmcia - ok

12:01:00.0640 0180 PDCOMP - ok

12:01:00.0640 0180 PDFRAME - ok

12:01:00.0640 0180 PDRELI - ok

12:01:00.0656 0180 PDRFRAME - ok

12:01:00.0656 0180 perc2 - ok

12:01:00.0671 0180 perc2hib - ok

12:01:00.0703 0180 PGPmemlock (a549dc21b37f1eece4e89acc993aaabb) C:\WINDOWS\system32\drivers\PGPmemlock.sys

12:01:00.0718 0180 PGPmemlock ( UnsignedFile.Multi.Generic ) - warning

12:01:00.0718 0180 PGPmemlock - detected UnsignedFile.Multi.Generic (1)

12:01:00.0765 0180 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys

12:01:00.0843 0180 PptpMiniport - ok

12:01:00.0875 0180 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys

12:01:00.0953 0180 Processor - ok

12:01:00.0968 0180 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys

12:01:01.0062 0180 PSched - ok

12:01:01.0093 0180 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys

12:01:01.0203 0180 Ptilink - ok

12:01:01.0218 0180 ql1080 - ok

12:01:01.0218 0180 Ql10wnt - ok

12:01:01.0234 0180 ql12160 - ok

12:01:01.0234 0180 ql1240 - ok

12:01:01.0250 0180 ql1280 - ok

12:01:01.0250 0180 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys

12:01:01.0343 0180 RasAcd - ok

12:01:01.0375 0180 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys

12:01:01.0468 0180 Rasl2tp - ok

12:01:01.0484 0180 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys

12:01:01.0578 0180 RasPppoe - ok

12:01:01.0578 0180 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys

12:01:01.0687 0180 Raspti - ok

12:01:01.0703 0180 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys

12:01:01.0781 0180 Rdbss - ok

12:01:01.0796 0180 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

12:01:01.0890 0180 RDPCDD - ok

12:01:01.0937 0180 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys

12:01:02.0015 0180 rdpdr - ok

12:01:02.0062 0180 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys

12:01:02.0156 0180 RDPWD - ok

12:01:02.0187 0180 redbook (cce6de646a2a9691cad011937cb59f70) C:\WINDOWS\system32\DRIVERS\redbook.sys

12:01:02.0187 0180 redbook ( UnsignedFile.Multi.Generic ) - warning

12:01:02.0187 0180 redbook - detected UnsignedFile.Multi.Generic (1)

12:01:02.0250 0180 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys

12:01:02.0343 0180 Secdrv - ok

12:01:02.0390 0180 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys

12:01:02.0468 0180 serenum - ok

12:01:02.0500 0180 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys

12:01:02.0593 0180 Serial - ok

12:01:02.0625 0180 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys

12:01:02.0718 0180 Sfloppy - ok

12:01:02.0734 0180 Simbad - ok

12:01:02.0734 0180 Sparrow - ok

12:01:02.0750 0180 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys

12:01:02.0828 0180 splitter - ok

12:01:02.0875 0180 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys

12:01:02.0968 0180 sr - ok

12:01:02.0968 0180 Srv (5252605079810904e31c332e241cd59b) C:\WINDOWS\system32\DRIVERS\srv.sys

12:01:03.0062 0180 Srv - ok

12:01:03.0109 0180 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys

12:01:03.0109 0180 ssmdrv - ok

12:01:03.0156 0180 StillCam (a9573045baa16eab9b1085205b82f1ed) C:\WINDOWS\system32\DRIVERS\serscan.sys

12:01:03.0250 0180 StillCam - ok

12:01:03.0265 0180 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys

12:01:03.0390 0180 swenum - ok

12:01:03.0437 0180 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys

12:01:03.0546 0180 swmidi - ok

12:01:03.0546 0180 symc810 - ok

12:01:03.0562 0180 symc8xx - ok

12:01:03.0562 0180 sym_hi - ok

12:01:03.0578 0180 sym_u3 - ok

12:01:03.0593 0180 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys

12:01:03.0687 0180 sysaudio - ok

12:01:03.0718 0180 Tcpip (93ea8d04ec73a85db02eb8805988f733) C:\WINDOWS\system32\DRIVERS\tcpip.sys

12:01:03.0812 0180 Tcpip - ok

12:01:03.0843 0180 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys

12:01:03.0937 0180 TDPIPE - ok

12:01:03.0953 0180 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys

12:01:04.0046 0180 TDTCP - ok

12:01:04.0078 0180 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys

12:01:04.0171 0180 TermDD - ok

12:01:04.0187 0180 TosIde - ok

12:01:04.0218 0180 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys

12:01:04.0312 0180 Udfs - ok

12:01:04.0312 0180 ultra - ok

12:01:04.0359 0180 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys

12:01:04.0453 0180 Update - ok

12:01:04.0500 0180 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys

12:01:04.0515 0180 USBAAPL - ok

12:01:04.0546 0180 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys

12:01:04.0640 0180 usbccgp - ok

12:01:04.0656 0180 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys

12:01:04.0750 0180 usbehci - ok

12:01:04.0750 0180 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys

12:01:04.0843 0180 usbhub - ok

12:01:04.0890 0180 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys

12:01:04.0968 0180 usbohci - ok

12:01:05.0015 0180 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys

12:01:05.0093 0180 usbscan - ok

12:01:05.0109 0180 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

12:01:05.0203 0180 USBSTOR - ok

12:01:05.0234 0180 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys

12:01:05.0328 0180 VgaSave - ok

12:01:05.0343 0180 ViaIde - ok

12:01:05.0375 0180 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys

12:01:05.0453 0180 VolSnap - ok

12:01:05.0484 0180 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys

12:01:05.0578 0180 Wanarp - ok

12:01:05.0625 0180 Wdf01000 (fd47474bd21794508af449d9d91af6e6) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys

12:01:05.0640 0180 Wdf01000 - ok

12:01:05.0640 0180 WDICA - ok

12:01:05.0687 0180 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys

12:01:05.0781 0180 wdmaud - ok

12:01:05.0828 0180 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys

12:01:05.0921 0180 WS2IFSL - ok

12:01:05.0953 0180 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0

12:01:06.0125 0180 \Device\Harddisk0\DR0 - ok

12:01:06.0125 0180 Boot (0x1200) (4443162ff56254fd0dad60b375312fcc) \Device\Harddisk0\DR0\Partition0

12:01:06.0125 0180 \Device\Harddisk0\DR0\Partition0 - ok

12:01:06.0125 0180 ============================================================

12:01:06.0125 0180 Scan finished

12:01:06.0125 0180 ============================================================

12:01:06.0125 1056 Detected object count: 5

12:01:06.0125 1056 Actual detected object count: 5

12:01:38.0281 1056 aaivskn ( UnsignedFile.Multi.Generic ) - skipped by user

12:01:38.0281 1056 aaivskn ( UnsignedFile.Multi.Generic ) - User select action: Skip

12:01:38.0281 1056 BrPar ( UnsignedFile.Multi.Generic ) - skipped by user

12:01:38.0281 1056 BrPar ( UnsignedFile.Multi.Generic ) - User select action: Skip

12:01:38.0281 1056 HDAudBus ( UnsignedFile.Multi.Generic ) - skipped by user

12:01:38.0281 1056 HDAudBus ( UnsignedFile.Multi.Generic ) - User select action: Skip

12:01:38.0281 1056 PGPmemlock ( UnsignedFile.Multi.Generic ) - skipped by user

12:01:38.0281 1056 PGPmemlock ( UnsignedFile.Multi.Generic ) - User select action: Skip

12:01:38.0296 1056 redbook ( UnsignedFile.Multi.Generic ) - skipped by user

12:01:38.0296 1056 redbook ( UnsignedFile.Multi.Generic ) - User select action: Skip

12:02:50.0296 0424 Deinitialize success

Malwarebytes' Anti-Malware log

Malwarebytes Anti-Malware 1.60.1.1000

www.malwarebytes.org

Database version: v2012.02.22.05

Windows XP Service Pack 3 x86 NTFS (Safe Mode/Networking)

Internet Explorer 6.0.2900.5512

Mike's Music :: OFC2 [administrator]

2/22/2012 12:05:41 PM

mbam-log-2012-02-22 (12-05-41).txt

Scan type: Quick scan

Scan options disabled: P2P

Objects scanned: 419612

Time elapsed: 34 minute(s), 8 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|DvhhCCFbLujqW.exe (Rogue.FakeHDD) -> Data: C:\Documents and Settings\All Users.WINDOWS\Application Data\DvhhCCFbLujqW.exe -> Quarantined and deleted successfully.

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 93

C:\Documents and Settings\All Users.WINDOWS\Application Data\DvhhCCFbLujqW.exe (Rogue.FakeHDD) -> Quarantined and deleted successfully.

C:\Documents and Settings\Mike's Music\Application Data\C4B74\98474.exe (Trojan.Downloader.BH) -> Quarantined and deleted successfully.

C:\Documents and Settings\Mike's Music\Application Data\C4B74\A99BC.exe (Trojan.Downloader.BH) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\3combootp.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\A88xXBar.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\acprfmgrsvc.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\amdppm.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\amoagent.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\amon.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\bcm4sbxp.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\BCMModem.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\bdftdif.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\bthidenum.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\cdaudio.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\cebdaldr.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\cidaemon.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\CiscoVpnInstallService.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\cm102u32.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\cmdide.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\ctaud2k.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\dashsvc.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\db2das00.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\dktknsrv.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\DLH5X.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\DNE.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\Exportit.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\gv3.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\hdaudbus.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\houdinilicenseserver.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\hpqwmi.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\hwdatacard.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\ichaud.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\ihcservice.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\IPSECSHM.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\irenum.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\k750mdfl.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\KMW_SYS.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\KR3NPXP.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\lcs.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\LMS.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\lxbu_device.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\MA_CMIDI.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\MKEMUSB.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\mlkkbdntdriver.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\nalntservice.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\ndisip.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\NsTrcNT.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\omniserv.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\oracle%oracle_home_service%clientcache80.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\ossrv.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\pdlndint.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\pdlnsv25.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\protexislicensing.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\quickhealfirewall.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\RMSvc.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\rt2500.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\RTLE8023xp.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\SaiU040B.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\SECYPUSB.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\serial.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\sffp_sd.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\sfusvc.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\sigfilt.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\snac.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\snare.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\sonywbms.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\sqlagent$sony_mediamgr.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\SRS_SSCFilter.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\ssfs0509.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\TMHIDSRV.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\tpkd.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\transbaseservice.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\trioservice.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\tvtnetwk.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\update.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\uphclean.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\USBAAPL.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\USB_NDIS_51.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\USRpdA.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\UxTuneUp.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\vcommmgr.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\viamraid.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\viaudio.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\VMAUDIO.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\wdmaud.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\websensecamreportserver.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\websensecamserver.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\WmHidLo.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\z525bus.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\z800mdfl.dll (RootKit.0Access.H) -> Quarantined and deleted successfully.

C:\Documents and Settings\Mike's Music\Local Settings\Temp\~!#F.tmp (Trojan.Downloader.BH) -> Quarantined and deleted successfully.

C:\WINDOWS\Temp\hdgfsh.exe (Rogue.FakeHDD) -> Quarantined and deleted successfully.

C:\WINDOWS\Temp\ueabklu.exe (Rogue.FakeHDD) -> Quarantined and deleted successfully.

(end)

a new fresh DDS log file