Possibly infected?

xcloudx · June 1, 2011

Had my WoW account stolen last week, and malware bytes will not run. I've scanned with several scanners yet can not find anything.

I have posted the errors i was getting when trying to run malware bytes Here

Here is the DDS log:

.

DDS (Ver_11-05-19.01) - NTFSx86

Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_24

Run by Administrator at 15:44:56 on 2011-06-01

Microsoft Windows 7 Ultimate 6.1.7600.0.1252.44.1033.18.4087.2029 [GMT 1:00]

.

AV: Kaspersky Internet Security *Enabled/Updated* {56547CC9-C9B2-849D-8FEF-A496150D6A06}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: Kaspersky Internet Security *Enabled/Updated* {ED359D2D-EF88-8B13-B55F-9FE46E8A20BB}

FW: Kaspersky Internet Security *Enabled* {6E6FFDEC-83DD-85C5-A4B0-0DA3EBDE2D7D}

.

============== Running Processes ===============

.

C:\windows\system32\wininit.exe

C:\windows\system32\lsm.exe

C:\windows\system32\svchost.exe -k DcomLaunch

C:\windows\system32\nvvsvc.exe

C:\windows\system32\svchost.exe -k RPCSS

C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\windows\system32\svchost.exe -k netsvcs

C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

C:\windows\system32\svchost.exe -k LocalService

C:\windows\system32\svchost.exe -k NetworkService

C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

C:\windows\system32\nvvsvc.exe

C:\windows\System32\spoolsv.exe

C:\windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\windows\system32\taskhost.exe

C:\windows\system32\Dwm.exe

C:\windows\Explorer.EXE

C:\Program Files\TortoiseSVN\bin\TSVNCache.exe

C:\Program files (x86)\DisplayFusion\DisplayFusion.exe

C:\Program files (x86)\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Program files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe

E:\Program Files (x86)\Internet Download Manager\IDMan.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\program files (x86)\Launchy\Launchy.exe

C:\Users\Administrator\AppData\Local\Google\Update\1.3.21.57\GoogleCrashHandler.exe

C:\Program files (x86)\Razer\DeathAdder\razerhid.exe

E:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe

C:\Program files (x86)\Ask.com\Updater\Updater.exe

C:\Program files (x86)\Razer\DeathAdder\razerofa.exe

C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE

E:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe

C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcSrv.exe

C:\Program Files (x86)\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe

C:\Program Files (x86)\Common Files\Logishrd\LVMVFM\LVPrS64H.exe

C:\Program Files\Raxco\PerfectDisk\PDAgent.exe

C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

C:\windows\system32\svchost.exe -k imgsvc

C:\Program Files (x86)\Tunngle\TnglCtrl.exe

C:\Program files (x86)\DisplayFusion\DisplayFusionHookx86.exe

C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe

C:\windows\SysWOW64\vmnat.exe

C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe

C:\windows\SysWOW64\vmnetdhcp.exe

C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

C:\windows\system32\SearchIndexer.exe

C:\Program Files\Raxco\PerfectDisk\PDAgentS1.exe

E:\Program Files (x86)\Internet Download Manager\IEMonitor.exe

C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\windows\System32\svchost.exe -k LocalServicePeerNet

C:\windows\System32\svchost.exe -k secsvcs

C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

C:\Users\Administrator\AppData\Local\Google\Chrome\Application\chrome.exe

C:\windows\System32\svchost.exe -k swprv

C:\windows\SysWOW64\NOTEPAD.EXE

C:\windows\system32\SearchProtocolHost.exe

C:\windows\system32\SearchFilterHost.exe

C:\windows\system32\DllHost.exe

C:\users\Administrator\Downloads\dds.scr

C:\windows\SysWOW64\WSCRIPT.exe

C:\windows\system32\wbem\wmiprvse.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = about:blank

mURLSearchHooks: H - No File

BHO: IDM integration (IDMIEHlprObj Class): {0055c089-8582-441b-a0bf-17b458c2a3a8} - E:\Program Files (x86)\Internet Download Manager\IDMIECC.dll

BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - E:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll

BHO: RoboForm BHO: {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Foxit PDF Creator Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - E:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll

TB: &RoboForm: {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

TB: Foxit PDF Creator Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

uRun: [DisplayFusion] "C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe"

uRun: [msnmsgr] "C:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" /background

uRun: [RoboForm] "C:\program files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"

uRun: [iDMan] E:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot

uRun: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

uRun: [Google Update] "C:\Users\Administrator\AppData\Local\Google\Update\GoogleUpdate.exe" /c

mRun: [DeathAdder] C:\program files (x86)\Razer\DeathAdder\razerhid.exe

mRun: [AVP] "E:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe"

mRun: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start

mRun: [<NO NAME>]

mRun: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"

StartupFolder: C:\users\ADMINI~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Launchy.lnk - C:\program files (x86)\Launchy\Launchy.exe

mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableLUA = 0 (0x0)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

mPolicies-system: PromptOnSecureDesktop = 0 (0x0)

IE: Add to Anti-Banner - E:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm

IE: Add to Evernote 4.0 - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204

IE: Customize Menu - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html

IE: Download all links with IDM - E:\Program Files (x86)\Internet Download Manager\IEGetAll.htm

IE: Download with IDM - E:\Program Files (x86)\Internet Download Manager\IEExt.htm

IE: Fill Forms - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html

IE: RoboForm Toolbar - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

IE: Save Forms - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html

IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html

IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html

IE: {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - E:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll

IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - E:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll

LSP: C:\Program Files (x86)\VMware\VMware Workstation\vsocklib.dll

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

AppInit_DLLs: E:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll

BHO-X64: IDM integration (IDMIEHlprObj Class): {0055C089-8582-441B-A0BF-17B458C2A3A8} - E:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll

BHO-X64: IDM Helper - No File

BHO-X64: IEVkbdBHO Class: {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - E:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\ievkbd.dll

BHO-X64: IEVkbdBHO - No File

BHO-X64: FilterBHO Class: {E33CF602-D945-461A-83F0-819F76A199F8} - E:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\klwtbbho.dll

BHO-X64: link filter bho - No File

TB-X64: {724D43A0-0D85-11D4-9908-00400523E39A} - No File

AppInit_DLLs-X64: ,E:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll,E:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll

Hosts: 127.0.0.1 www.spywareinfo.com

.

================= FIREFOX ===================

.

FF - ProfilePath -

.

============= SERVICES / DRIVERS ===============

.

R1 kl2;kl2;C:\windows\system32\DRIVERS\kl2.sys --> C:\windows\system32\DRIVERS\kl2.sys [?]

R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;C:\windows\system32\DRIVERS\klim6.sys --> C:\windows\system32\DRIVERS\klim6.sys [?]

R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2011-5-4 128384]

R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2011/03/26 01:25:07];C:\Program files (x86)\CyberLink\PowerDVD10\NavFilter\000.fcl [2010-4-2 146928]

R2 AVP;Kaspersky Anti-Virus Service;E:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe [2010-11-2 365336]

R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;C:\Program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2011-5-25 2275720]

R2 IDMWFP;IDMWFP;C:\windows\system32\DRIVERS\idmwfp.sys --> C:\windows\system32\DRIVERS\idmwfp.sys [?]

R2 LVPrcS64;Process Monitor;C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcSrv.exe [2010-5-7 197976]

R2 mi-raysat_3dsmax2011_32;mental ray 3.8 Satellite for Autodesk 3ds Max 2011 32-bit 32-bit;C:\Program files (x86)\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe [2010-3-10 86016]

R2 SBSDWSCService;SBSD Security Center Service;C:\Program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2011-5-1 1153368]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-4-7 378472]

R2 TunngleService;TunngleService;C:\Program files (x86)\Tunngle\TnglCtrl.exe [2011-3-26 718072]

R2 VMUSBArbService;VMware USB Arbitration Service;C:\Program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [2009-10-22 563760]

R3 CT20XUT.SYS;CT20XUT.SYS;C:\windows\system32\drivers\CT20XUT.SYS --> C:\windows\system32\drivers\CT20XUT.SYS [?]

R3 CTEXFIFX.SYS;CTEXFIFX.SYS;C:\windows\system32\drivers\CTEXFIFX.SYS --> C:\windows\system32\drivers\CTEXFIFX.SYS [?]

R3 CTHWIUT.SYS;CTHWIUT.SYS;C:\windows\system32\drivers\CTHWIUT.SYS --> C:\windows\system32\drivers\CTHWIUT.SYS [?]

R3 DAdderFltr;DeathAdder Mouse;C:\windows\system32\drivers\dadder.sys --> C:\windows\system32\drivers\dadder.sys [?]

R3 klmouflt;Kaspersky Lab KLMOUFLT;C:\windows\system32\DRIVERS\klmouflt.sys --> C:\windows\system32\DRIVERS\klmouflt.sys [?]

R3 LVPr2M64;Logitech LVPr2M64 Driver;C:\windows\system32\DRIVERS\LVPr2M64.sys --> C:\windows\system32\DRIVERS\LVPr2M64.sys [?]

R3 LVRS64;Logitech RightSound Filter Driver;C:\windows\system32\DRIVERS\lvrs64.sys --> C:\windows\system32\DRIVERS\lvrs64.sys [?]

R3 LVUVC64;Logitech HD Webcam C310(UVC);C:\windows\system32\DRIVERS\lvuvc64.sys --> C:\windows\system32\DRIVERS\lvuvc64.sys [?]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\windows\system32\drivers\nvhda64v.sys --> C:\windows\system32\drivers\nvhda64v.sys [?]

R3 RTL8167;Realtek 8167 NT Driver;C:\windows\system32\DRIVERS\Rt64win7.sys --> C:\windows\system32\DRIVERS\Rt64win7.sys [?]

R3 ScreamBAudioSvc;ScreamBee Audio;C:\windows\system32\drivers\ScreamingBAudio64.sys --> C:\windows\system32\drivers\ScreamingBAudio64.sys [?]

R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);C:\windows\system32\DRIVERS\tap0901t.sys --> C:\windows\system32\DRIVERS\tap0901t.sys [?]

S1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2010-2-17 14920]

S1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2010-2-17 12360]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 nvUpdatusService;NVIDIA Update Service Daemon;C:\Program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-5-12 2218600]

S3 3d-io License Server v2.0;3d-io License Server v2.0;C:\Program files (x86)\3d-io plugins\licensing_v2\ActiveLockServerV2.exe [2010-11-22 34816]

S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;C:\Program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2011-3-25 79360]

S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;C:\Program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-3-25 79360]

S3 CT20XUT;CT20XUT;C:\windows\system32\drivers\CT20XUT.SYS --> C:\windows\system32\drivers\CT20XUT.SYS [?]

S3 CTEXFIFX;CTEXFIFX;C:\windows\system32\drivers\CTEXFIFX.SYS --> C:\windows\system32\drivers\CTEXFIFX.SYS [?]

S3 CTHWIUT;CTHWIUT;C:\windows\system32\drivers\CTHWIUT.SYS --> C:\windows\system32\drivers\CTHWIUT.SYS [?]

S3 D2GS;Diablo II Close Game Server;E:\Program Files (x86)\Diablo II\D2GSSVC.exe [2011-5-16 14848]

S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;E:\Program Files (x86)\Dragon Age\bin_ship\daupdatersvc.service.exe [2011-3-27 25832]

S3 GDPkIcpt;GDPkIcpt;\??\C:\windows\system32\drivers\PktIcpt.sys --> C:\windows\system32\drivers\PktIcpt.sys [?]

S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);C:\windows\system32\DRIVERS\ss_bbus.sys --> C:\windows\system32\DRIVERS\ss_bbus.sys [?]

S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);C:\windows\system32\DRIVERS\ss_bmdfl.sys --> C:\windows\system32\DRIVERS\ss_bmdfl.sys [?]

S3 ss_bmdm;SAMSUNG USB Mobile Modem;C:\windows\system32\DRIVERS\ss_bmdm.sys --> C:\windows\system32\DRIVERS\ss_bmdm.sys [?]

S3 ss_bserd;SAMSUNG USB Mobile Logging Driver;C:\windows\system32\DRIVERS\ss_bserd.sys --> C:\windows\system32\DRIVERS\ss_bserd.sys [?]

S3 SwitchBoard;SwitchBoard;C:\Program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]

.

=============== Created Last 30 ================

.

2011-05-31 16:17:09 -------- d-----w- C:\Program Files (x86)\Ask.com

2011-05-31 15:08:53 -------- d-----w- C:\Program Files (x86)\Paradox Interactive

2011-05-31 11:05:22 -------- d-----w- C:\Program Files (x86)\LogMeIn Hamachi

2011-05-30 17:44:20 153248 ----a-w- C:\windows\System32\drivers\idmwfp.sys

2011-05-30 16:33:16 -------- d-----w- C:\Program Files (x86)\Common Files\Plasmoo

2011-05-30 16:33:14 -------- d-----w- C:\Users\Administrator\AppData\Roaming\DVDVideoSoft

2011-05-30 16:33:14 -------- d-----w- C:\Program Files (x86)\DVDVideoSoft

2011-05-30 16:33:14 -------- d-----w- C:\Program Files (x86)\Common Files\DVDVideoSoft

2011-05-30 16:29:50 -------- d-----w- C:\Users\Administrator\AppData\Roaming\ASkySoft

2011-05-30 16:29:46 -------- d-----w- C:\Program Files (x86)\AVI to SWF Flash Converter

2011-05-29 16:40:59 -------- d-----w- C:\Users\Administrator\AppData\Roaming\Malwarebytes

2011-05-29 16:40:55 39984 ----a-w- C:\windows\SysWow64\drivers\mbamswissarmy.sys

2011-05-29 16:40:55 -------- d-----w- C:\ProgramData\Malwarebytes

2011-05-29 16:40:51 25912 ----a-w- C:\windows\System32\drivers\mbam.sys

2011-05-29 16:40:51 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

2011-05-29 16:31:03 -------- d-----w- C:\Program Files (x86)\Windows Live SkyDrive

2011-05-29 13:39:23 14744 ----a-w- C:\Users\Administrator\AppData\Roaming\Microsoft\IdentityCRL\production\ppcrlconfig.dll

2011-05-29 13:37:17 -------- d-sh--w- C:\ProgramData\SecuROM

2011-05-29 13:36:23 -------- d-----w- C:\Users\Administrator\AppData\Local\Rockstar Games

2011-05-29 13:36:12 178800 ----a-w- C:\windows\SysWow64\CmdLineExt_x64.dll

2011-05-29 11:37:43 -------- d-----w- C:\Users\Administrator\AppData\Local\{EB02F4E3-9983-4189-8218-C20FAE441B57}

2011-05-28 23:36:57 -------- d-----w- C:\Users\Administrator\AppData\Local\{E7D261DE-CF5B-42A8-9BC6-D8886850FA9F}

2011-05-28 11:30:12 -------- d-----w- C:\Users\Administrator\AppData\Local\{ED45D5B7-5592-4258-A5BB-80634ECBE059}

2011-05-27 22:25:21 -------- d-----w- C:\Users\Administrator\AppData\Local\{8785D9B9-C1BB-406A-95FA-8D28A48330C3}

2011-05-27 10:24:47 -------- d-----w- C:\Users\Administrator\AppData\Local\{A71D1F46-453C-4A10-AD73-C5DF5B1BB9A8}

2011-05-26 22:23:31 -------- d-----w- C:\Users\Administrator\AppData\Local\{B66FBDD7-E806-4127-9C8D-6E1363F8AEED}

2011-05-26 10:22:57 -------- d-----w- C:\Users\Administrator\AppData\Local\{60DFB6FE-41F5-4E27-9B6A-2C69F94C7FC7}

2011-05-25 22:22:17 -------- d-----w- C:\Users\Administrator\AppData\Local\{EDFD4ED1-0EE3-40DE-BF19-7D3263E06E2B}

2011-05-25 20:42:08 38224 ----a-w- C:\windows\System32\mbamswissarmy.sys

2011-05-25 20:02:59 -------- d-----w- C:\Program Files (x86)\Glary Utilities

2011-05-25 19:38:45 -------- d-s---w- C:\hurrrhurrr

2011-05-25 18:35:34 -------- d-----w- C:\ProgramData\Kaspersky Lab

2011-05-25 18:35:34 -------- d-----w- C:\Program Files (x86)\Kaspersky Lab

2011-05-25 18:34:28 -------- d-----w- C:\ProgramData\Kaspersky Lab Setup Files

2011-05-25 17:45:15 12872 ----a-w- C:\windows\System32\bootdelete.exe

2011-05-25 17:40:45 20040 ----a-w- C:\windows\System32\drivers\hitmanpro35.sys

2011-05-25 17:40:45 -------- d-----w- C:\Program Files\Hitman Pro 3.5

2011-05-25 17:40:39 -------- d-----w- C:\ProgramData\Hitman Pro

2011-05-25 15:24:28 -------- d-----w- C:\Program Files (x86)\nLite

2011-05-25 12:42:48 -------- d-----we C:\Program files (x86)

2011-05-25 10:35:45 720896 ----a-w- C:\windows\iun6002.exe

2011-05-25 10:35:38 -------- d-----w- C:\Program Files (x86)\Look@LAN

2011-05-25 10:17:21 -------- d-----w- C:\Users\Administrator\AppData\Local\{ED02B5B2-0461-4F2C-B984-09A5C1486FC2}

2011-05-24 21:50:53 -------- d-----w- C:\Program Files (x86)\Microsoft SQL Server

2011-05-24 21:50:41 -------- d-----w- C:\Program Files\Microsoft Synchronization Services

2011-05-24 21:50:41 -------- d-----w- C:\Program Files\Microsoft SQL Server Compact Edition

2011-05-24 21:50:33 -------- d-----w- C:\Program Files (x86)\Microsoft Synchronization Services

2011-05-24 21:50:33 -------- d-----w- C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2011-05-24 21:49:18 188128 ----a-w- C:\ProgramData\Microsoft\VCSExpress\10.0\1033\ResourceCache.dll

2011-05-24 21:47:30 -------- d-----w- C:\Program Files (x86)\Microsoft Visual Studio 10.0

2011-05-24 21:46:56 -------- d-----w- C:\Program Files\Microsoft Visual Studio 10.0

2011-05-24 21:46:55 -------- d-----w- C:\Program Files\Microsoft Help Viewer

2011-05-24 18:25:25 -------- d-----w- C:\Users\Administrator\AppData\Roaming\LolClient

2011-05-24 11:55:46 -------- d-----w- C:\Program Files (x86)\Lame For Audacity

2011-05-24 11:28:05 -------- d-----w- C:\Program Files (x86)\Audacity 1.3 Beta (Unicode)

2011-05-24 08:28:45 -------- d-----w- C:\Users\Administrator\AppData\Local\{16AF7263-3FA6-4592-826C-7F262678F054}

2011-05-23 21:29:55 311808 ----a-w- C:\windows\System32\msv1_0.dll

2011-05-23 21:29:55 257024 ----a-w- C:\windows\SysWow64\msv1_0.dll

2011-05-23 21:29:49 -------- d-----we C:\Riot Games

2011-05-23 21:28:34 -------- d-----w- C:\Program Files (x86)\MSXML 4.0

2011-05-23 21:25:55 -------- d-----w- C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2

2011-05-23 21:25:33 294912 ----a-w- C:\windows\System32\browserchoice.exe

2011-05-23 21:25:26 8424784 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll

2011-05-23 21:25:24 8718160 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3DAD7568-AE82-4442-A5DB-B13268C61E83}\mpengine.dll

2011-05-23 21:00:24 -------- d-----w- C:\Program Files (x86)\Siber Systems

2011-05-23 20:55:32 -------- d-----w- C:\Users\Administrator\AppData\Roaming\Softland

2011-05-23 20:55:16 24912 ----a-w- C:\windows\System32\dopdfmn7.dll

2011-05-23 20:55:16 21328 ----a-w- C:\windows\System32\dopdfmi7.dll

2011-05-23 20:55:15 1700352 ----a-w- C:\windows\System32\GdiPlus.dll

2011-05-23 20:55:14 -------- d-----w- C:\Program Files\Softland

2011-05-23 20:51:15 -------- d-----w- C:\Program Files\Synergy

2011-05-23 20:42:52 -------- d-----w- C:\Program Files (x86)\Steinberg

2011-05-23 15:23:27 -------- d-----w- C:\Program Files (x86)\Pando Networks

2011-05-23 12:56:32 40960 ----a-w- C:\windows\SysWow64\psfind.dll

2011-05-23 11:32:26 -------- d-----w- C:\Users\Administrator\AppData\Local\{DC5E4190-A18F-44B6-BEEC-486F208F68F9}

2011-05-22 19:29:10 -------- d-----w- C:\Temp

2011-05-22 19:28:19 -------- d-----w- C:\Users\Administrator\AppData\Local\Samsung

2011-05-22 19:27:12 161280 ----a-w- C:\windows\System32\drivers\ss_bmdm.sys

2011-05-22 19:27:12 15872 ----a-w- C:\windows\System32\drivers\ss_bwhnt.sys

2011-05-22 19:27:12 15872 ----a-w- C:\windows\System32\drivers\ss_bwh.sys

2011-05-22 19:27:12 128000 ----a-w- C:\windows\System32\drivers\ss_bserd.sys

2011-05-22 19:27:11 18944 ----a-w- C:\windows\System32\drivers\ss_bmdfl.sys

2011-05-22 19:27:11 15360 ----a-w- C:\windows\System32\drivers\ss_bcmnt.sys

2011-05-22 19:27:11 15360 ----a-w- C:\windows\System32\drivers\ss_bcm.sys

2011-05-22 19:27:11 127488 ----a-w- C:\windows\System32\drivers\ss_bbus.sys

2011-05-22 19:26:36 4659712 ----a-w- C:\windows\SysWow64\Redemption.dll

2011-05-22 19:26:12 821824 ----a-w- C:\windows\SysWow64\dgderapi.dll

2011-05-22 19:26:12 -------- d-----w- C:\Program Files (x86)\MarkAny

2011-05-22 19:24:58 -------- d-----w- C:\Users\Administrator\AppData\Roaming\Samsung

2011-05-22 19:24:47 -------- d-----w- C:\ProgramData\Samsung

2011-05-22 19:24:47 -------- d-----w- C:\Program Files (x86)\Samsung

2011-05-22 15:08:46 -------- d-----w- C:\Users\Administrator\AppData\Local\{281439ED-0E98-4925-A8EC-1B76470FE1CB}

2011-05-22 11:37:27 -------- d-----w- C:\ProgramData\id Software

2011-05-22 10:58:27 -------- d-----w- C:\Users\Administrator\AppData\Local\{646A43B5-2ADA-4D43-8521-1715CB7ABF84}

2011-05-21 10:05:53 -------- d-----w- C:\Users\Administrator\AppData\Local\{6A9E69B9-B1B3-42F4-8EAD-72E60F6E7FEC}

2011-05-20 22:04:45 -------- d-----w- C:\Users\Administrator\AppData\Local\{C8A6BF88-8839-4491-A0DE-29A54E6EB824}

2011-05-20 21:14:17 -------- d-----w- C:\Users\Administrator\AppData\Roaming\TortoiseSVN

2011-05-20 18:31:57 295970 ----a-w- C:\windows\SysWow64\sig.bin

2011-05-20 16:08:23 -------- d-----w- C:\Program Files\XnView

2011-05-20 16:08:22 -------- d-----w- C:\Program Files\SageThumbs

2011-05-20 15:31:09 -------- d-----w- C:\Users\Administrator\AppData\Local\Nem's Tools

2011-05-20 12:37:36 106488 ----a-w- C:\windows\System32\drivers\GRD.sys

2011-05-20 12:21:57 -------- d-----w- C:\ProgramData\ZA_PreservedFiles

2011-05-20 11:53:15 -------- d-----w- C:\Users\Administrator\AppData\Local\Conduit

2011-05-20 11:52:01 458840 ----a-w- C:\windows\System32\drivers\~GLH0024.TMP

2011-05-20 11:45:18 58584 ----a-w- C:\windows\System32\drivers\PktIcpt.sys

2011-05-20 11:43:58 46296 ----a-w- C:\windows\System32\drivers\GDBehave.sys

2011-05-20 11:43:58 102616 ----a-w- C:\windows\System32\drivers\MiniIcpt.sys

2011-05-20 11:43:40 63704 ----a-w- C:\windows\System32\drivers\gdwfpcd64.sys

2011-05-20 11:43:17 -------- d-----w- C:\ProgramData\G DATA

2011-05-20 11:43:17 -------- d-----w- C:\Program Files (x86)\G Data

2011-05-20 11:43:17 -------- d-----w- C:\Program Files (x86)\Common Files\G Data

2011-05-20 11:41:00 -------- d-----w- C:\Users\Administrator\AppData\Local\Downloaded Installations

2011-05-20 11:12:00 -------- d-----w- C:\ProgramData\AVAST Software

2011-05-20 11:12:00 -------- d-----w- C:\Program Files\AVAST Software

2011-05-20 10:26:22 -------- d-----w- C:\Program Files\Perfect Uninstaller

2011-05-20 10:03:50 -------- d-----w- C:\Users\Administrator\AppData\Local\{401D3170-DA25-4E59-A34F-3663146AEC12}

2011-05-20 09:32:08 -------- d-----w- C:\Users\Administrator\AppData\Roaming\SUPERAntiSpyware.com

2011-05-20 09:32:08 -------- d-----w- C:\ProgramData\SUPERAntiSpyware.com

2011-05-20 09:32:04 -------- d-----w- C:\ProgramData\!SASCORE

2011-05-20 09:32:03 -------- d-----w- C:\Program Files\SUPERAntiSpyware

2011-05-19 11:55:35 -------- d-----w- C:\Program Files\Microsoft Xbox 360 Accessories

2011-05-19 10:02:03 -------- d-----w- C:\Users\Administrator\AppData\Local\{C2370B12-F93A-4315-AF64-6B202261CF87}

2011-05-18 21:06:32 -------- d-----w- C:\Users\Administrator\AppData\Local\{68ECF6F9-2D71-4B7E-A790-41E926001707}

2011-05-18 16:18:49 -------- d-----w- C:\Users\Administrator\AppData\Local\4A Games

2011-05-18 12:12:57 -------- d-----w- C:\Users\Administrator\AppData\Roaming\IObit

2011-05-18 12:08:15 -------- d-----w- C:\Program Files (x86)\Universal Extractor

2011-05-18 11:59:54 -------- d-----w- C:\Program Files (x86)\Uninstall Tool

2011-05-18 11:58:46 3584 ----a-r- C:\Users\Administrator\AppData\Roaming\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe

2011-05-18 11:58:46 -------- d-----w- C:\Program Files (x86)\Windows Installer Clean Up

2011-05-18 11:58:36 -------- d-----w- C:\Program Files (x86)\MSECACHE

2011-05-18 11:52:11 -------- d-----w- C:\Users\Administrator\AppData\Roaming\XRayUnwrap

2011-05-18 11:50:57 -------- d-----w- C:\Program Files (x86)\Common Files\ChaosGroup

2011-05-18 11:50:55 -------- d-----w- C:\Program Files (x86)\Chaos Group

2011-05-18 11:30:06 -------- d-sh--w- C:\$$PendingFiles

2011-05-18 11:26:51 243712 ----a-w- C:\windows\System32\drivers\ks.sys

2011-05-18 11:26:51 184832 ----a-w- C:\windows\System32\drivers\usbvideo.sys

2011-05-18 11:26:04 612352 ----a-w- C:\windows\System32\vbscript.dll

2011-05-18 11:26:04 428032 ----a-w- C:\windows\SysWow64\vbscript.dll

2011-05-18 11:26:02 1896832 ----a-w- C:\windows\System32\drivers\tcpip.sys

2011-05-18 11:24:59 2048 ----a-w- C:\windows\SysWow64\tzres.dll

2011-05-18 11:23:52 714752 ----a-w- C:\windows\System32\kerberos.dll

2011-05-18 11:23:52 541184 ----a-w- C:\windows\SysWow64\kerberos.dll

2011-05-18 11:23:51 1877504 ----a-w- C:\windows\System32\msxml3.dll

2011-05-18 11:23:51 1233920 ----a-w- C:\windows\SysWow64\msxml3.dll

2011-05-18 11:23:50 340992 ----a-w- C:\windows\System32\schannel.dll

2011-05-18 11:23:50 224256 ----a-w- C:\windows\SysWow64\schannel.dll

2011-05-18 11:23:47 558592 ----a-w- C:\windows\System32\spoolsv.exe

2011-05-18 11:23:47 483840 ----a-w- C:\windows\System32\StructuredQuery.dll

2011-05-18 11:23:47 363520 ----a-w- C:\windows\SysWow64\StructuredQuery.dll

2011-05-18 11:23:47 139264 ----a-w- C:\windows\System32\cabview.dll

2011-05-18 11:23:47 132608 ----a-w- C:\windows\SysWow64\cabview.dll

2011-05-18 11:23:46 84992 ----a-w- C:\windows\System32\asycfilt.dll

2011-05-18 11:23:46 67584 ----a-w- C:\windows\SysWow64\asycfilt.dll

2011-05-18 11:21:34 82944 ----a-w- C:\windows\SysWow64\iccvid.dll

2011-05-18 11:20:11 27008 ----a-w- C:\windows\System32\drivers\Diskdump.sys

2011-05-18 11:20:10 9728 ----a-w- C:\windows\SysWow64\sscore.dll

2011-05-18 11:20:10 236032 ----a-w- C:\windows\System32\srvsvc.dll

2011-05-18 09:05:56 -------- d-----w- C:\Users\Administrator\AppData\Local\{11FE799D-218E-41D8-BC2F-DAC319E90891}

2011-05-17 20:44:41 -------- d-----w- C:\Users\Administrator\AppData\Local\{444993C7-3150-4CE5-93F9-EA5F8D7B9815}

2011-05-17 20:03:17 -------- d-----w- C:\Program Files (x86)\VUGames

2011-05-17 19:55:03 -------- d-----w- C:\Program Files (x86)\Sierra

2011-05-17 19:40:42 -------- d-----w- C:\Program Files (x86)\Microsoft Games

2011-05-17 19:33:58 -------- d-----w- C:\Program Files (x86)\METRO 2033

2011-05-17 19:33:08 -------- d-----w- C:\Users\Administrator\AppData\Roaming\.minecraft

2011-05-17 19:31:20 -------- d-----w- C:\Program Files (x86)\Mount&Blade Warband

2011-05-17 19:28:12 -------- d-----w- C:\Program Files (x86)\Oni

2011-05-17 19:28:05 306688 ----a-w- C:\windows\IsUninst.exe

2011-05-17 19:25:33 -------- d-----w- C:\Program Files (x86)\DreamCatcher

2011-05-17 19:23:08 -------- d-----w- C:\Program Files (x86)\Serious Sam 2

2011-05-17 19:20:22 -------- d-----w- C:\Program Files (x86)\Super Meat Boy

2011-05-17 19:12:49 -------- d-----w- C:\Program Files (x86)\Lighthouse Interactive

2011-05-17 18:46:28 -------- d-----w- C:\Program Files (x86)\Sierra Entertainment

2011-05-17 18:39:38 -------- d-----w- C:\windows\45235788142C44BE8A4DDDE9A84492E5.TMP

2011-05-17 18:39:34 -------- d-----w- C:\Program Files (x86)\Unreal Tournament 3

2011-05-17 18:34:58 -------- d-----w- C:\Program Files (x86)\THQ

2011-05-17 18:28:17 -------- d-----w- C:\Program Files (x86)\Codemasters

2011-05-17 18:23:38 -------- d-----w- C:\Program Files (x86)\NFS Shift

2011-05-17 08:44:19 -------- d-----w- C:\Users\Administrator\AppData\Local\{ABAA0830-1385-4038-A076-7619F29FC645}

2011-05-16 22:30:50 -------- d-----w- C:\Users\Administrator\AppData\Local\{780B3750-0B08-41BD-86C5-60CACCDE5A8B}

2011-05-16 20:34:36 -------- d-----w- C:\Program Files (x86)\SquareEnix

2011-05-16 10:30:16 -------- d-----w- C:\Users\Administrator\AppData\Local\{A6EDE182-058A-4E8C-887E-DA0115656D12}

2011-05-15 22:57:19 48522 ----a-w- C:\windows\SysWow64\nglide_uninst.exe

2011-05-15 22:08:11 -------- d-----w- C:\Users\Administrator\AppData\Local\{F66B4BB8-59EB-443F-97A0-060515F1DEFC}

2011-05-15 18:31:20 -------- d-----w- C:\Users\Administrator\AppData\Roaming\Registry Mechanic

2011-05-15 18:16:34 -------- d-----we C:\Program Files

2011-05-15 18:15:41 404640 ----a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl

2011-05-15 18:10:55 33856 ---ha-w- C:\windows\System32\hamachi.sys

2011-05-15 14:52:19 -------- d-----w- C:\Users\Administrator\AppData\Local\LogMeIn Hamachi

2011-05-15 14:17:00 94208 ----a-w- C:\windows\DIIUnin.exe

2011-05-15 14:17:00 2829 ----a-w- C:\windows\DIIUnin.pif

2011-05-15 14:03:33 -------- d-----w- C:\Program Files (x86)\Diablo II

2011-05-15 12:24:07 -------- d-----w- C:\Program Files (x86)\Hero Editor

2011-05-15 12:24:04 249856 ----a-w- C:\windows\Setup1.exe

2011-05-15 12:24:03 73216 ----a-w- C:\windows\ST6UNST.EXE

2011-05-15 10:07:36 -------- d-----w- C:\Users\Administrator\AppData\Local\{0A7518E1-9407-4002-941A-BE9F1D9BD380}

2011-05-14 22:06:59 -------- d-----w- C:\Users\Administrator\AppData\Local\{3C29E458-D0BB-4ABD-94B9-E6FA9B65988B}

2011-05-14 18:52:26 -------- d-----w- C:\Program Files (x86)\dumps

2011-05-14 16:59:54 -------- d-----w- C:\Program Files\Diablo II

2011-05-14 16:44:49 21840 ----a-w- C:\windows\SysWow64\SIntfNT.dll

2011-05-14 16:44:49 17212 ----a-w- C:\windows\SysWow64\SIntf32.dll

2011-05-14 16:44:49 12067 ----a-w- C:\windows\SysWow64\SIntf16.dll

2011-05-14 14:42:11 -------- d-----w- C:\ProgramData\WeGame

2011-05-14 14:41:44 488800 ----a-w- C:\windows\SysWow64\Ltkrn15u.dll

2011-05-14 14:41:44 185688 ----a-w- C:\windows\SysWow64\Ltfil15u.dll

2011-05-14 14:41:43 390496 ----a-w- C:\windows\SysWow64\Lfcmp15u.dll

2011-05-14 14:41:43 -------- d-----w- C:\Users\Administrator\AppData\Local\WeGame

2011-05-14 14:41:43 -------- d-----w- C:\Program Files (x86)\WeGame

2011-05-14 10:06:04 -------- d-----w- C:\Users\Administrator\AppData\Local\{AAC037FE-CE2B-4A26-AADD-1821A0EA1899}

2011-05-14 08:37:45 344064 ----a-w- C:\windows\System32\CNMXLMA4.DLL

2011-05-14 08:35:05 -------- d-----w- C:\Program Files\Canon

2011-05-14 08:34:52 84480 ----a-w- C:\windows\System32\Spool\prtprocs\x64\CNMPPA4.DLL

2011-05-14 08:34:52 28672 ----a-w- C:\windows\System32\Spool\prtprocs\x64\CNMPDA4.DLL

2011-05-14 08:34:07 344064 ----a-w- C:\windows\System32\CNMLMA4.DLL

2011-05-14 08:33:58 245760 ----a-w- C:\windows\System32\CNMIUA4.DLL

2011-05-13 11:53:17 -------- d-----w- C:\Users\Administrator\AppData\Local\TechSmith

2011-05-13 10:04:10 -------- d-----w- C:\Users\Administrator\AppData\Local\{05603E51-BC87-4B50-B6DE-209BB89373F3}

2011-05-12 18:34:23 -------- d-----w- C:\Users\Administrator\AppData\Roaming\GetRightToGo

2011-05-12 17:37:54 -------- d-----w- C:\Program Files (x86)\EVGA Precision

2011-05-12 16:10:38 -------- d-----w- C:\Program Files (x86)\Softimage 2011

2011-05-12 10:15:05 -------- d-----w- C:\Users\Administrator\AppData\Local\{FA64630A-8225-45E5-94FB-42B042C9C938}

2011-05-11 22:14:18 -------- d-----w- C:\Users\Administrator\AppData\Local\{17DEE154-D70C-49BF-B722-1A4190BBF3A5}

2011-05-11 10:13:02 -------- d-----w- C:\Users\Administrator\AppData\Local\{6E8514B4-3B6C-4AAB-8C7C-C405B6482C89}

2011-05-10 22:12:55 -------- d-----w- C:\Users\Administrator\AppData\Local\{2A101D59-E36D-443D-AD59-50B24BA223C0}

2011-05-10 22:12:10 105800 ----a-w- C:\windows\System32\UDBDef.exe

2011-05-10 18:26:42 -------- d-----w- C:\Program Files (x86)\Common Files\EZB Systems

2011-05-10 18:23:02 -------- d-----w- C:\Program Files (x86)\UltraISO

2011-05-10 10:12:19 -------- d-----w- C:\Users\Administrator\AppData\Local\{5339C974-FC3A-48A1-A95F-D4042A771C55}

2011-05-09 21:26:18 -------- d-----w- C:\Users\Administrator\AppData\Local\{199EBF42-A8C6-47C3-A958-F174739DE659}

2011-05-09 18:09:54 -------- d-sh--w- C:\$RECYCLE.BIN

2011-05-09 16:05:21 98816 ----a-w- C:\windows\sed.exe

2011-05-09 16:05:21 89088 ----a-w- C:\windows\MBR.exe

2011-05-09 16:05:21 256512 ----a-w- C:\windows\PEV.exe

2011-05-09 16:05:21 161792 ----a-w- C:\windows\SWREG.exe

2011-05-09 14:39:25 485376 ----a-w- C:\windows\System32\MyDefragScreenSaver_v4.3.1.scr

2011-05-09 14:39:25 1147392 ----a-w- C:\windows\System32\MyDefragScreenSaver_v4.3.1.exe

2011-05-09 14:39:25 -------- d-----w- C:\Program Files\MyDefrag v4.3.1

2011-05-09 14:37:34 -------- d-----w- C:\Users\Administrator\AppData\Roaming\GlarySoft

2011-05-09 09:25:53 -------- d-----w- C:\Users\Administrator\AppData\Local\{8B4DD6DD-C15F-4728-9CC8-459910996FDB}

2011-05-08 21:15:19 -------- d-----w- C:\Users\Administrator\AppData\Local\{FDE5D4D8-3D4B-420A-AF21-3DE1CCEB902E}

2011-05-08 09:14:51 -------- d-----w- C:\Users\Administrator\AppData\Local\{4A7F0ACC-51B5-416F-B352-B8DA6EE10DDD}

2011-05-07 09:14:09 -------- d-----w- C:\Users\Administrator\AppData\Local\{B34281E8-713E-4F92-89F5-24F8889950F5}

2011-05-06 09:13:23 -------- d-----w- C:\Users\Administrator\AppData\Local\{EF88D455-CBAA-4EC0-8847-4DD60B7D8522}

2011-05-05 19:40:40 -------- d-----w- C:\Users\Administrator\AppData\Local\SKIDROW

2011-05-05 07:41:17 -------- d-----w- C:\Users\Administrator\AppData\Local\{9340C9FD-AE30-4E32-8D0B-C31D5B5283AD}

2011-05-04 19:40:48 -------- d-----w- C:\Users\Administrator\AppData\Local\{37F53B9E-28EF-4940-BD0F-2549B9042CD1}

2011-05-04 07:40:20 -------- d-----w- C:\Users\Administrator\AppData\Local\{CF6097C4-7EFA-439E-A578-5EEDA1008857}

2011-05-03 18:57:33 -------- d-----w- C:\Users\Administrator\AppData\Local\{05F8F339-9DD3-447D-9976-FA7C6C3481E5}

2011-05-03 06:36:47 -------- d-----w- C:\Users\Administrator\AppData\Local\{A7C8141A-BCA5-4E97-8C5F-6E8900FBDF93}

.

==================== Find3M ====================

.

2011-04-28 12:14:52 1298432 ----a-w- C:\windows\SysWow64\glide2x.dll

2011-04-28 12:14:34 1310720 ----a-w- C:\windows\SysWow64\glide3x.dll

2011-04-20 14:03:05 714526 ----a-w- C:\windows\unins000.exe

2011-04-19 14:32:22 53248 ----a-w- C:\windows\SysWow64\nglide_config.exe

2011-04-10 19:36:04 120320 ----a-w- C:\windows\SysWow64\lagarith.dll

2011-04-10 19:31:48 129024 ----a-w- C:\windows\System32\lagarith.dll

2011-04-09 17:55:44 15453336 ----a-w- C:\windows\SysWow64\xlive.dll

2011-04-09 17:55:42 13642904 ----a-w- C:\windows\SysWow64\xlivefnt.dll

2011-04-09 06:45:48 5509504 ----a-w- C:\windows\System32\ntoskrnl.exe

2011-04-09 06:13:06 3957632 ----a-w- C:\windows\SysWow64\ntkrnlpa.exe

2011-04-09 06:13:06 3901824 ----a-w- C:\windows\SysWow64\ntoskrnl.exe

2011-04-07 22:19:38 117864 ----a-w- C:\windows\System32\nvmctray.dll

2011-04-07 22:19:36 797288 ----a-w- C:\windows\System32\easyUpdatusAPIU64.dll

2011-04-07 22:19:36 1012328 ----a-w- C:\windows\System32\nvvsvc.exe

2011-04-07 22:19:26 6338152 ----a-w- C:\windows\System32\nvcpl.dll

2011-04-07 22:19:08 3041384 ----a-w- C:\windows\System32\nvsvc64.dll

2011-04-06 17:55:50 34064 ----a-w- C:\windows\SysWow64\lhacm.acm

2011-04-01 04:06:22 341856 ----a-w- C:\windows\System32\drivers\lvrs64.sys

2011-04-01 04:05:38 261728 ----a-w- C:\windows\System32\lvco13251014.dll

2011-04-01 03:56:20 39318 ----a-w- C:\windows\System32\Repository.reg

2011-03-26 11:44:01 468005 ----a-w- C:\ProgramData\bdinstall.bin

2011-03-26 01:23:18 505128 ----a-w- C:\windows\SysWow64\msvcp71.dll

2011-03-26 01:23:18 353576 ----a-w- C:\windows\SysWow64\msvcr71.dll

2011-03-26 01:23:18 29480 ----a-w- C:\windows\SysWow64\msxml3a.dll

2011-03-26 00:58:17 834544 ----a-w- C:\windows\System32\drivers\sptd.sys

2011-03-25 22:53:14 151552 ----a-w- C:\windows\SysWow64\nvRegDev.dll

2011-03-25 12:29:52 1002728 ----a-w- C:\windows\System32\WinUSBCoInstaller2.dll

2011-03-25 12:29:33 74752 ----a-w- C:\windows\System32\CLEyeDevices.dll

2011-03-25 12:17:09 466520 ----a-w- C:\windows\System32\wrap_oal.dll

2011-03-25 12:17:09 445016 ----a-w- C:\windows\SysWow64\wrap_oal.dll

2011-03-25 12:17:09 123480 ----a-w- C:\windows\System32\OpenAL32.dll

2011-03-25 12:17:09 109144 ----a-w- C:\windows\SysWow64\OpenAL32.dll

2011-03-15 14:18:28 265992 ----a-w- C:\windows\System32\PDBoot.exe

2011-03-11 06:19:26 1395712 ----a-w- C:\windows\System32\mfc42.dll

2011-03-11 06:19:26 1359872 ----a-w- C:\windows\System32\mfc42u.dll

2011-03-11 05:40:24 1164288 ----a-w- C:\windows\SysWow64\mfc42u.dll

2011-03-11 05:40:24 1137664 ----a-w- C:\windows\SysWow64\mfc42.dll

2011-03-08 06:14:30 976896 ----a-w- C:\windows\System32\inetcomm.dll

2011-03-08 05:38:13 740864 ----a-w- C:\windows\SysWow64\inetcomm.dll

2011-03-07 02:08:13 93552 ----a-w- C:\windows\SysWow64\ElbyCDIO.dll

2011-03-07 00:52:09 134512 ----a-w- C:\windows\SysWow64\ElbyVCD.dll

2011-03-03 15:59:24 29288 ----a-w- C:\windows\System32\nvhdap64.dll

2011-03-03 15:59:18 174184 ----a-w- C:\windows\System32\drivers\nvhda64v.sys

2011-03-03 15:59:17 1359976 ----a-w- C:\windows\System32\nvhdagenco642040.dll

2009-07-14 01:39:53 398848 --sha-w- C:\windows\System32\Program Files\Windows Mail\WinMail.exe

2009-11-04 09:14:08 1168216 --sha-r- C:\windows\System32\Program Files (x86)\Spybot - Search & Destroy\advcheck.dll

2009-01-26 14:31:16 2144088 --sha-r- C:\windows\System32\Program Files (x86)\Spybot - Search & Destroy\CAVQULVDFORR.scr

2009-03-05 15:07:20 2260480 --sha-r- C:\windows\System32\Program Files (x86)\Spybot - Search & Destroy\GKCQOLTGUONJIXGN.scr

2009-01-26 14:31:12 5365592 --sha-r- C:\windows\System32\Program Files (x86)\Spybot - Search & Destroy\HIYJULQLZNWOUI.scr

2009-01-26 14:31:08 1740632 --sha-r- C:\windows\System32\Program Files (x86)\Spybot - Search & Destroy\SDUpdate.exe

2009-01-26 14:31:12 5365592 --sha-r- C:\windows\System32\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe

2009-01-26 14:31:08 1740632 --sha-r- C:\windows\System32\Program Files (x86)\Spybot - Search & Destroy\SSRWMBGMXG.scr

2009-03-05 15:07:20 2260480 --sha-r- C:\windows\System32\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

2009-07-14 01:14:45 396800 --sha-w- C:\windows\System32\Program Files (x86)\Windows Mail\WinMail.exe

.

============= FINISH: 15:46:15.36 ===============

Attach and ark are attached.

Thanks a lot for the help

Attach.zip

LDTate · June 3, 2011

:welcome:

Logs will be closed if you haven't replied within 3 days

Please don't attach the scans / logs from these scans, use "copy/paste".

DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.

Doing so could make your pc inoperatible and could require a full reinstall of your OS, losing all your programs and data.

Vista and Windows 7 users:

1. These tools MUST be run from the executable. (.exe) every time you run them

2. With Admin Rights (Right click, choose "Run as Administrator")

Stay with this topic until I give you the all clean post.

You might want to print these instructions out.

Note: Close all browsers before running ATF Cleaner: IE, FireFox, etc.

Please download ATF Cleaner by Atribune.

Download - ATF Cleaner

xcloudx · June 4, 2011

Computer seems to be behaving normally at the moment. I just really wonder how on earth my account was taken as i've only ever logged into it with this machine, nor shared details.

2011/06/04 14:01:34.0184 4404 TDSS rootkit removing tool 2.5.3.0 May 25 2011 07:09:24

2011/06/04 14:01:34.0378 4404 ================================================================================

2011/06/04 14:01:34.0378 4404 SystemInfo:

2011/06/04 14:01:34.0378 4404

2011/06/04 14:01:34.0378 4404 OS Version: 6.1.7600 ServicePack: 0.0

2011/06/04 14:01:34.0378 4404 Product type: Workstation

2011/06/04 14:01:34.0379 4404 ComputerName: CLOUD-PC

2011/06/04 14:01:34.0379 4404 UserName: Administrator

2011/06/04 14:01:34.0379 4404 Windows directory: C:\windows

2011/06/04 14:01:34.0379 4404 System windows directory: C:\windows

2011/06/04 14:01:34.0379 4404 Running under WOW64

2011/06/04 14:01:34.0379 4404 Processor architecture: Intel x64

2011/06/04 14:01:34.0379 4404 Number of processors: 4

2011/06/04 14:01:34.0379 4404 Page size: 0x1000

2011/06/04 14:01:34.0379 4404 Boot type: Normal boot

2011/06/04 14:01:34.0379 4404 ================================================================================

2011/06/04 14:01:35.0290 4404 Initialize success

2011/06/04 14:01:37.0441 7144 ================================================================================

2011/06/04 14:01:37.0441 7144 Scan started

2011/06/04 14:01:37.0441 7144 Mode: Manual;

2011/06/04 14:01:37.0441 7144 ================================================================================

2011/06/04 14:01:39.0174 7144 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\windows\system32\DRIVERS\1394ohci.sys

2011/06/04 14:01:39.0198 7144 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\windows\system32\DRIVERS\ACPI.sys

2011/06/04 14:01:39.0208 7144 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\windows\system32\DRIVERS\acpipmi.sys

2011/06/04 14:01:39.0220 7144 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\windows\system32\DRIVERS\adp94xx.sys

2011/06/04 14:01:39.0234 7144 adpahci (597f78224ee9224ea1a13d6350ced962) C:\windows\system32\DRIVERS\adpahci.sys

2011/06/04 14:01:39.0257 7144 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\windows\system32\DRIVERS\adpu320.sys

2011/06/04 14:01:39.0293 7144 AFD (b9384e03479d2506bc924c16a3db87bc) C:\windows\system32\drivers\afd.sys

2011/06/04 14:01:39.0305 7144 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\windows\system32\DRIVERS\agp440.sys

2011/06/04 14:01:39.0318 7144 aliide (5812713a477a3ad7363c7438ca2ee038) C:\windows\system32\DRIVERS\aliide.sys

2011/06/04 14:01:39.0328 7144 amdide (1ff8b4431c353ce385c875f194924c0c) C:\windows\system32\DRIVERS\amdide.sys

2011/06/04 14:01:39.0339 7144 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\windows\system32\DRIVERS\amdk8.sys

2011/06/04 14:01:39.0349 7144 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\windows\system32\DRIVERS\amdppm.sys

2011/06/04 14:01:39.0359 7144 amdsata (7a4b413614c055935567cf88a9734d38) C:\windows\system32\DRIVERS\amdsata.sys

2011/06/04 14:01:39.0370 7144 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\windows\system32\DRIVERS\amdsbs.sys

2011/06/04 14:01:39.0380 7144 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\windows\system32\DRIVERS\amdxata.sys

2011/06/04 14:01:39.0409 7144 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\windows\system32\drivers\appid.sys

2011/06/04 14:01:39.0439 7144 arc (c484f8ceb1717c540242531db7845c4e) C:\windows\system32\DRIVERS\arc.sys

2011/06/04 14:01:39.0455 7144 arcsas (019af6924aefe7839f61c830227fe79c) C:\windows\system32\DRIVERS\arcsas.sys

2011/06/04 14:01:39.0483 7144 AsyncMac (769765ce2cc62867468cea93969b2242) C:\windows\system32\DRIVERS\asyncmac.sys

2011/06/04 14:01:39.0492 7144 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\windows\system32\DRIVERS\atapi.sys

2011/06/04 14:01:39.0519 7144 ATITool (a6fad7a5ada4675ba9c9feaf4e0542ba) C:\windows\system32\DRIVERS\ATITool64.sys

2011/06/04 14:01:39.0551 7144 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\windows\system32\DRIVERS\bxvbda.sys

2011/06/04 14:01:39.0564 7144 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\windows\system32\DRIVERS\b57nd60a.sys

2011/06/04 14:01:39.0588 7144 Beep (16a47ce2decc9b099349a5f840654746) C:\windows\system32\drivers\Beep.sys

2011/06/04 14:01:39.0608 7144 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\windows\system32\DRIVERS\blbdrive.sys

2011/06/04 14:01:39.0639 7144 bowser (19d20159708e152267e53b66677a4995) C:\windows\system32\DRIVERS\bowser.sys

2011/06/04 14:01:39.0660 7144 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\windows\system32\DRIVERS\BrFiltLo.sys

2011/06/04 14:01:39.0670 7144 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\windows\system32\DRIVERS\BrFiltUp.sys

2011/06/04 14:01:39.0684 7144 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\windows\System32\Drivers\Brserid.sys

2011/06/04 14:01:39.0695 7144 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\windows\System32\Drivers\BrSerWdm.sys

2011/06/04 14:01:39.0706 7144 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\windows\System32\Drivers\BrUsbMdm.sys

2011/06/04 14:01:39.0718 7144 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\windows\System32\Drivers\BrUsbSer.sys

2011/06/04 14:01:39.0728 7144 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\windows\system32\DRIVERS\bthmodem.sys

2011/06/04 14:01:39.0761 7144 cdfs (b8bd2bb284668c84865658c77574381a) C:\windows\system32\DRIVERS\cdfs.sys

2011/06/04 14:01:39.0779 7144 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\windows\system32\DRIVERS\cdrom.sys

2011/06/04 14:01:39.0804 7144 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\windows\system32\DRIVERS\circlass.sys

2011/06/04 14:01:39.0843 7144 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\windows\system32\CLFS.sys

2011/06/04 14:01:39.0881 7144 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\windows\system32\DRIVERS\CmBatt.sys

2011/06/04 14:01:39.0892 7144 cmdide (e19d3f095812725d88f9001985b94edd) C:\windows\system32\DRIVERS\cmdide.sys

2011/06/04 14:01:39.0905 7144 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\windows\system32\Drivers\cng.sys

2011/06/04 14:01:39.0916 7144 Compbatt (102de219c3f61415f964c88e9085ad14) C:\windows\system32\DRIVERS\compbatt.sys

2011/06/04 14:01:39.0937 7144 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\windows\system32\DRIVERS\CompositeBus.sys

2011/06/04 14:01:39.0979 7144 crcdisk (1c827878a998c18847245fe1f34ee597) C:\windows\system32\DRIVERS\crcdisk.sys

2011/06/04 14:01:40.0014 7144 CSC (4a6173c2279b498cd8f57cae504564cb) C:\windows\system32\drivers\csc.sys

2011/06/04 14:01:40.0051 7144 CT20XUT (229e3b8f266abdafd54e4a372b9d5ddc) C:\windows\system32\drivers\CT20XUT.SYS

2011/06/04 14:01:40.0062 7144 CT20XUT.SYS (229e3b8f266abdafd54e4a372b9d5ddc) C:\windows\System32\drivers\CT20XUT.SYS

2011/06/04 14:01:40.0100 7144 ctac32k (eb3843a91a10150c9e05607cbcb44090) C:\windows\system32\drivers\ctac32k.sys

2011/06/04 14:01:40.0125 7144 ctaud2k (bc06efb59a2316537765462dfe40f764) C:\windows\system32\drivers\ctaud2k.sys

2011/06/04 14:01:40.0256 7144 CTEXFIFX (63b2b6ce9d3ef182981fb64bd5433da4) C:\windows\system32\drivers\CTEXFIFX.SYS

2011/06/04 14:01:40.0338 7144 CTEXFIFX.SYS (63b2b6ce9d3ef182981fb64bd5433da4) C:\windows\System32\drivers\CTEXFIFX.SYS

2011/06/04 14:01:40.0351 7144 CTHWIUT (6d115cc80873b85fd80dda1c41f75a2c) C:\windows\system32\drivers\CTHWIUT.SYS

2011/06/04 14:01:40.0362 7144 CTHWIUT.SYS (6d115cc80873b85fd80dda1c41f75a2c) C:\windows\System32\drivers\CTHWIUT.SYS

2011/06/04 14:01:40.0372 7144 ctprxy2k (ebc9548ef5838cb5aa8f18b3ac28af12) C:\windows\system32\drivers\ctprxy2k.sys

2011/06/04 14:01:40.0384 7144 ctsfm2k (459bee1682121842285c162e2d98d81a) C:\windows\system32\drivers\ctsfm2k.sys

2011/06/04 14:01:40.0414 7144 DAdderFltr (fbcb29a76e8105d682b02c69ba9b5c22) C:\windows\system32\drivers\dadder.sys

2011/06/04 14:01:40.0448 7144 DefragFS (cec7f24e28b40829c0fd2d523e72b5d3) C:\windows\system32\drivers\DefragFS.sys

2011/06/04 14:01:40.0460 7144 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\windows\system32\Drivers\dfsc.sys

2011/06/04 14:01:40.0476 7144 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\windows\system32\drivers\discache.sys

2011/06/04 14:01:40.0495 7144 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\windows\system32\DRIVERS\disk.sys

2011/06/04 14:01:40.0522 7144 drmkaud (9b19f34400d24df84c858a421c205754) C:\windows\system32\drivers\drmkaud.sys

2011/06/04 14:01:40.0559 7144 DXGKrnl (ebce0b0924835f635f620d19f0529dce) C:\windows\System32\drivers\dxgkrnl.sys

2011/06/04 14:01:40.0616 7144 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\windows\system32\DRIVERS\evbda.sys

2011/06/04 14:01:40.0666 7144 ElbyCDIO (a05fc7eca0966ebb70e4d17b855a853b) C:\windows\system32\Drivers\ElbyCDIO.sys

2011/06/04 14:01:40.0680 7144 elxstor (0e5da5369a0fcaea12456dd852545184) C:\windows\system32\DRIVERS\elxstor.sys

2011/06/04 14:01:40.0723 7144 emupia (c26133b6165928fbd156c6fe570f9ed2) C:\windows\system32\drivers\emupia2k.sys

2011/06/04 14:01:40.0734 7144 ErrDev (34a3c54752046e79a126e15c51db409b) C:\windows\system32\DRIVERS\errdev.sys

2011/06/04 14:01:40.0755 7144 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\windows\system32\drivers\exfat.sys

2011/06/04 14:01:40.0780 7144 fastfat (0adc83218b66a6db380c330836f3e36d) C:\windows\system32\drivers\fastfat.sys

2011/06/04 14:01:40.0793 7144 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\windows\system32\DRIVERS\fdc.sys

2011/06/04 14:01:40.0810 7144 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\windows\system32\drivers\fileinfo.sys

2011/06/04 14:01:40.0837 7144 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\windows\system32\drivers\filetrace.sys

2011/06/04 14:01:40.0850 7144 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\windows\system32\DRIVERS\flpydisk.sys

2011/06/04 14:01:40.0862 7144 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\windows\system32\drivers\fltmgr.sys

2011/06/04 14:01:40.0886 7144 FsDepends (d43703496149971890703b4b1b723eac) C:\windows\system32\drivers\FsDepends.sys

2011/06/04 14:01:40.0897 7144 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\windows\system32\drivers\Fs_Rec.sys

2011/06/04 14:01:40.0921 7144 fvevol (b8b2a6e1558f8f5de5ce431c5b2c7b09) C:\windows\system32\DRIVERS\fvevol.sys

2011/06/04 14:01:40.0945 7144 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\windows\system32\DRIVERS\gagp30kx.sys

2011/06/04 14:01:40.0969 7144 GDPkIcpt (5e75c0d8710287102b30be5f0a12862a) C:\windows\system32\drivers\PktIcpt.sys

2011/06/04 14:01:41.0017 7144 ha20x2k (a3f010d5dbfb589a3b3288c05c2ea3f9) C:\windows\system32\drivers\ha20x2k.sys

2011/06/04 14:01:41.0050 7144 hamachi (1e6438d4ea6e1174a3b3b1edc4de660b) C:\windows\system32\DRIVERS\hamachi.sys

2011/06/04 14:01:41.0085 7144 Hardlock (091582da724f54830012e3faaf2f1d1a) C:\windows\system32\drivers\hardlock.sys

2011/06/04 14:01:41.0108 7144 hcmon (8cdad7b707ddd77d45588f74d59c9aff) C:\windows\system32\drivers\hcmon.sys

2011/06/04 14:01:41.0119 7144 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\windows\system32\drivers\hcw85cir.sys

2011/06/04 14:01:41.0132 7144 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\windows\system32\drivers\HdAudio.sys

2011/06/04 14:01:41.0144 7144 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\windows\system32\DRIVERS\HDAudBus.sys

2011/06/04 14:01:41.0155 7144 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\windows\system32\DRIVERS\HidBatt.sys

2011/06/04 14:01:41.0166 7144 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\windows\system32\DRIVERS\hidbth.sys

2011/06/04 14:01:41.0177 7144 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\windows\system32\DRIVERS\hidir.sys

2011/06/04 14:01:41.0191 7144 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\windows\system32\DRIVERS\hidusb.sys

2011/06/04 14:01:41.0213 7144 HpSAMD (0886d440058f203eba0e1825e4355914) C:\windows\system32\DRIVERS\HpSAMD.sys

2011/06/04 14:01:41.0241 7144 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\windows\system32\drivers\HTTP.sys

2011/06/04 14:01:41.0255 7144 hwpolicy (f17766a19145f111856378df337a5d79) C:\windows\system32\drivers\hwpolicy.sys

2011/06/04 14:01:41.0266 7144 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\windows\system32\DRIVERS\i8042prt.sys

2011/06/04 14:01:41.0295 7144 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\windows\system32\DRIVERS\iaStorV.sys

2011/06/04 14:01:41.0325 7144 IDMWFP (684c313fe40f4ae93310a44c9886e39a) C:\windows\system32\DRIVERS\idmwfp.sys

2011/06/04 14:01:41.0341 7144 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\windows\system32\DRIVERS\iirsp.sys

2011/06/04 14:01:41.0357 7144 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\windows\system32\DRIVERS\intelide.sys

2011/06/04 14:01:41.0379 7144 intelppm (ada036632c664caa754079041cf1f8c1) C:\windows\system32\DRIVERS\intelppm.sys

2011/06/04 14:01:41.0403 7144 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\windows\system32\DRIVERS\ipfltdrv.sys

2011/06/04 14:01:41.0416 7144 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\windows\system32\DRIVERS\IPMIDrv.sys

2011/06/04 14:01:41.0427 7144 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\windows\system32\drivers\ipnat.sys

2011/06/04 14:01:41.0453 7144 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\windows\system32\drivers\irenum.sys

2011/06/04 14:01:41.0463 7144 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\windows\system32\DRIVERS\isapnp.sys

2011/06/04 14:01:41.0495 7144 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\windows\system32\DRIVERS\msiscsi.sys

2011/06/04 14:01:41.0521 7144 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\windows\system32\DRIVERS\kbdclass.sys

2011/06/04 14:01:41.0543 7144 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\windows\system32\DRIVERS\kbdhid.sys

2011/06/04 14:01:41.0566 7144 KL1 (8d7120743a0973ceab548b475c9d4289) C:\windows\system32\DRIVERS\kl1.sys

2011/06/04 14:01:41.0586 7144 kl2 (cd146d8e525d6eebdcaf24120a8ab9ce) C:\windows\system32\DRIVERS\kl2.sys

2011/06/04 14:01:41.0611 7144 KLIF (c1786c2f8de0f62e076f7ef8dea4e87a) C:\windows\system32\DRIVERS\klif.sys

2011/06/04 14:01:41.0646 7144 KLIM6 (2a64b3a9eed93a2e96537b67c079fc96) C:\windows\system32\DRIVERS\klim6.sys

2011/06/04 14:01:41.0664 7144 klmouflt (9468d07e91ba136d82415f5dfc1fe168) C:\windows\system32\DRIVERS\klmouflt.sys

2011/06/04 14:01:41.0694 7144 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\windows\system32\Drivers\ksecdd.sys

2011/06/04 14:01:41.0720 7144 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\windows\system32\Drivers\ksecpkg.sys

2011/06/04 14:01:41.0731 7144 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\windows\system32\drivers\ksthunk.sys

2011/06/04 14:01:41.0818 7144 lltdio (1538831cf8ad2979a04c423779465827) C:\windows\system32\DRIVERS\lltdio.sys

2011/06/04 14:01:41.0837 7144 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\windows\system32\DRIVERS\lsi_fc.sys

2011/06/04 14:01:41.0849 7144 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\windows\system32\DRIVERS\lsi_sas.sys

2011/06/04 14:01:41.0860 7144 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\windows\system32\DRIVERS\lsi_sas2.sys

2011/06/04 14:01:41.0872 7144 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\windows\system32\DRIVERS\lsi_scsi.sys

2011/06/04 14:01:41.0884 7144 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\windows\system32\drivers\luafv.sys

2011/06/04 14:01:41.0916 7144 LVPr2M64 (b3944d06eb4b64d57bd7e5fe89415f58) C:\windows\system32\DRIVERS\LVPr2M64.sys

2011/06/04 14:01:41.0924 7144 LVPr2Mon (b3944d06eb4b64d57bd7e5fe89415f58) C:\windows\system32\DRIVERS\LVPr2M64.sys

2011/06/04 14:01:41.0964 7144 LVRS64 (ef586b959f747e74c76603ff16ae417b) C:\windows\system32\DRIVERS\lvrs64.sys

2011/06/04 14:01:42.0022 7144 LVUVC64 (a8d7c97016e6b76ef472a4c7ab357ee3) C:\windows\system32\DRIVERS\lvuvc64.sys

2011/06/04 14:01:42.0058 7144 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\windows\system32\DRIVERS\megasas.sys

2011/06/04 14:01:42.0071 7144 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\windows\system32\DRIVERS\MegaSR.sys

2011/06/04 14:01:42.0094 7144 Modem (800ba92f7010378b09f9ed9270f07137) C:\windows\system32\drivers\modem.sys

2011/06/04 14:01:42.0114 7144 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\windows\system32\DRIVERS\monitor.sys

2011/06/04 14:01:42.0124 7144 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\windows\system32\DRIVERS\mouclass.sys

2011/06/04 14:01:42.0148 7144 moufiltr (21b7acea1bb49c3371dd5427bf309d6a) C:\windows\system32\DRIVERS\moufiltr.sys

2011/06/04 14:01:42.0160 7144 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\windows\system32\DRIVERS\mouhid.sys

2011/06/04 14:01:42.0172 7144 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\windows\system32\drivers\mountmgr.sys

2011/06/04 14:01:42.0184 7144 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\windows\system32\DRIVERS\mpio.sys

2011/06/04 14:01:42.0206 7144 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\windows\system32\drivers\mpsdrv.sys

2011/06/04 14:01:42.0220 7144 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\windows\system32\drivers\mrxdav.sys

2011/06/04 14:01:42.0237 7144 mrxsmb (b7f3d2c40bdf8ffb73ebfb19c77734e2) C:\windows\system32\DRIVERS\mrxsmb.sys

2011/06/04 14:01:42.0272 7144 mrxsmb10 (86c6f88b5168ce21cf8d69d0b3ff5d19) C:\windows\system32\DRIVERS\mrxsmb10.sys

2011/06/04 14:01:42.0284 7144 mrxsmb20 (b081069251c8e9f42cb8769d07148f9c) C:\windows\system32\DRIVERS\mrxsmb20.sys

2011/06/04 14:01:42.0295 7144 msahci (5c37497276e3b3a5488b23a326a754b7) C:\windows\system32\DRIVERS\msahci.sys

2011/06/04 14:01:42.0306 7144 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\windows\system32\DRIVERS\msdsm.sys

2011/06/04 14:01:42.0326 7144 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\windows\system32\drivers\Msfs.sys

2011/06/04 14:01:42.0343 7144 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\windows\System32\drivers\mshidkmdf.sys

2011/06/04 14:01:42.0353 7144 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\windows\system32\DRIVERS\msisadrv.sys

2011/06/04 14:01:42.0382 7144 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\windows\system32\drivers\MSKSSRV.sys

2011/06/04 14:01:42.0398 7144 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\windows\system32\drivers\MSPCLOCK.sys

2011/06/04 14:01:42.0408 7144 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\windows\system32\drivers\MSPQM.sys

2011/06/04 14:01:42.0433 7144 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\windows\system32\drivers\MsRPC.sys

2011/06/04 14:01:42.0454 7144 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\windows\system32\DRIVERS\mssmbios.sys

2011/06/04 14:01:42.0464 7144 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\windows\system32\drivers\MSTEE.sys

2011/06/04 14:01:42.0488 7144 msvad_simple (73f5faa93ead080f70b3ef3eb31571c1) C:\windows\system32\solicall.sys

2011/06/04 14:01:42.0512 7144 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\windows\system32\DRIVERS\MTConfig.sys

2011/06/04 14:01:42.0523 7144 MTsensor (03b7145c889603537e9ffeabb1ad1089) C:\windows\system32\DRIVERS\ASACPI.sys

2011/06/04 14:01:42.0545 7144 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\windows\system32\Drivers\mup.sys

2011/06/04 14:01:42.0569 7144 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\windows\system32\DRIVERS\nwifi.sys

2011/06/04 14:01:42.0605 7144 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\windows\system32\drivers\ndis.sys

2011/06/04 14:01:42.0633 7144 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\windows\system32\DRIVERS\ndiscap.sys

2011/06/04 14:01:42.0644 7144 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\windows\system32\DRIVERS\ndistapi.sys

2011/06/04 14:01:42.0656 7144 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\windows\system32\DRIVERS\ndisuio.sys

2011/06/04 14:01:42.0668 7144 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\windows\system32\DRIVERS\ndiswan.sys

2011/06/04 14:01:42.0680 7144 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\windows\system32\drivers\NDProxy.sys

2011/06/04 14:01:42.0693 7144 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\windows\system32\DRIVERS\netbios.sys

2011/06/04 14:01:42.0739 7144 NetBT (9162b273a44ab9dce5b44362731d062a) C:\windows\system32\DRIVERS\netbt.sys

2011/06/04 14:01:42.0769 7144 nfrd960 (77889813be4d166cdab78ddba990da92) C:\windows\system32\DRIVERS\nfrd960.sys

2011/06/04 14:01:42.0783 7144 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\windows\system32\drivers\Npfs.sys

2011/06/04 14:01:42.0797 7144 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\windows\system32\drivers\nsiproxy.sys

2011/06/04 14:01:42.0839 7144 Ntfs (356698a13c4630d5b31c37378d469196) C:\windows\system32\drivers\Ntfs.sys

2011/06/04 14:01:42.0866 7144 Null (9899284589f75fa8724ff3d16aed75c1) C:\windows\system32\drivers\Null.sys

2011/06/04 14:01:42.0884 7144 NVHDA (f2662fdc20518ee8a8eed4f61ba42349) C:\windows\system32\drivers\nvhda64v.sys

2011/06/04 14:01:43.0190 7144 nvlddmkm (a963c2c276a97b088ded5d7a83be8052) C:\windows\system32\DRIVERS\nvlddmkm.sys

2011/06/04 14:01:43.0301 7144 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\windows\system32\DRIVERS\nvraid.sys

2011/06/04 14:01:43.0314 7144 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\windows\system32\DRIVERS\nvstor.sys

2011/06/04 14:01:43.0332 7144 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\windows\system32\DRIVERS\nv_agp.sys

2011/06/04 14:01:43.0344 7144 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\windows\system32\DRIVERS\ohci1394.sys

2011/06/04 14:01:43.0371 7144 ossrv (0e2de427ebe106e7e5b52869d5c99f68) C:\windows\system32\drivers\ctoss2k.sys

2011/06/04 14:01:43.0389 7144 Parport (0086431c29c35be1dbc43f52cc273887) C:\windows\system32\DRIVERS\parport.sys

2011/06/04 14:01:43.0401 7144 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\windows\system32\drivers\partmgr.sys

2011/06/04 14:01:43.0422 7144 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\windows\system32\DRIVERS\pci.sys

2011/06/04 14:01:43.0434 7144 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\windows\system32\DRIVERS\pciide.sys

2011/06/04 14:01:43.0447 7144 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\windows\system32\DRIVERS\pcmcia.sys

2011/06/04 14:01:43.0461 7144 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\windows\system32\drivers\pcw.sys

2011/06/04 14:01:43.0495 7144 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\windows\system32\drivers\peauth.sys

2011/06/04 14:01:43.0545 7144 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\windows\system32\DRIVERS\raspptp.sys

2011/06/04 14:01:43.0557 7144 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\windows\system32\DRIVERS\processr.sys

2011/06/04 14:01:43.0574 7144 Psched (ee992183bd8eaefd9973f352e587a299) C:\windows\system32\DRIVERS\pacer.sys

2011/06/04 14:01:43.0612 7144 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\windows\system32\DRIVERS\ql2300.sys

2011/06/04 14:01:43.0632 7144 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\windows\system32\DRIVERS\ql40xx.sys

2011/06/04 14:01:43.0655 7144 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\windows\system32\drivers\qwavedrv.sys

2011/06/04 14:01:43.0679 7144 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\windows\system32\DRIVERS\rasacd.sys

2011/06/04 14:01:43.0702 7144 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\windows\system32\DRIVERS\AgileVpn.sys

2011/06/04 14:01:43.0718 7144 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\windows\system32\DRIVERS\rasl2tp.sys

2011/06/04 14:01:43.0732 7144 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\windows\system32\DRIVERS\raspppoe.sys

2011/06/04 14:01:43.0750 7144 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\windows\system32\DRIVERS\rassstp.sys

2011/06/04 14:01:43.0774 7144 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\windows\system32\DRIVERS\rdbss.sys

2011/06/04 14:01:43.0786 7144 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\windows\system32\DRIVERS\rdpbus.sys

2011/06/04 14:01:43.0798 7144 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\windows\system32\DRIVERS\RDPCDD.sys

2011/06/04 14:01:43.0820 7144 RDPDR (9706b84dbabfc4b4ca46c5a82b14dfa3) C:\windows\system32\drivers\rdpdr.sys

2011/06/04 14:01:43.0832 7144 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\windows\system32\drivers\rdpencdd.sys

2011/06/04 14:01:43.0847 7144 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\windows\system32\drivers\rdprefmp.sys

2011/06/04 14:01:43.0859 7144 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\windows\system32\drivers\RDPWD.sys

2011/06/04 14:01:43.0872 7144 rdyboost (634b9a2181d98f15941236886164ec8b) C:\windows\system32\drivers\rdyboost.sys

2011/06/04 14:01:43.0947 7144 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\windows\system32\DRIVERS\rspndr.sys

2011/06/04 14:01:44.0000 7144 RTL8167 (baefee35d27a5440d35092ce10267bec) C:\windows\system32\DRIVERS\Rt64win7.sys

2011/06/04 14:01:44.0024 7144 s3cap (88af6e02ab19df7fd07ecdf9c91e9af6) C:\windows\system32\DRIVERS\vms3cap.sys

2011/06/04 14:01:44.0081 7144 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\windows\system32\DRIVERS\sbp2port.sys

2011/06/04 14:01:44.0106 7144 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\windows\system32\DRIVERS\scfilter.sys

2011/06/04 14:01:44.0127 7144 ScreamBAudioSvc (ef0c4a3bd1749684514ee871a355969e) C:\windows\system32\drivers\ScreamingBAudio64.sys

2011/06/04 14:01:44.0150 7144 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\windows\system32\drivers\secdrv.sys

2011/06/04 14:01:44.0170 7144 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\windows\system32\DRIVERS\serenum.sys

2011/06/04 14:01:44.0182 7144 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\windows\system32\DRIVERS\serial.sys

2011/06/04 14:01:44.0194 7144 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\windows\system32\DRIVERS\sermouse.sys

2011/06/04 14:01:44.0217 7144 sffdisk (a554811bcd09279536440c964ae35bbf) C:\windows\system32\DRIVERS\sffdisk.sys

2011/06/04 14:01:44.0229 7144 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\windows\system32\DRIVERS\sffp_mmc.sys

2011/06/04 14:01:44.0240 7144 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\windows\system32\DRIVERS\sffp_sd.sys

2011/06/04 14:01:44.0252 7144 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\windows\system32\DRIVERS\sfloppy.sys

2011/06/04 14:01:44.0279 7144 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\windows\system32\DRIVERS\SiSRaid2.sys

2011/06/04 14:01:44.0291 7144 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\windows\system32\DRIVERS\sisraid4.sys

2011/06/04 14:01:44.0323 7144 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\windows\system32\DRIVERS\smb.sys

2011/06/04 14:01:44.0351 7144 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\windows\system32\drivers\spldr.sys

2011/06/04 14:01:44.0400 7144 sptd (602884696850c86434530790b110e8eb) C:\windows\System32\Drivers\sptd.sys

2011/06/04 14:01:44.0432 7144 srv (148d50904d2a0df29a19778715eb35bb) C:\windows\system32\DRIVERS\srv.sys

2011/06/04 14:01:44.0460 7144 srv2 (ce2189fe31d36678ac9eb7ddee08ec96) C:\windows\system32\DRIVERS\srv2.sys

2011/06/04 14:01:44.0474 7144 srvnet (cb69edeb069a49577592835659cd0e46) C:\windows\system32\DRIVERS\srvnet.sys

2011/06/04 14:01:44.0503 7144 ss_bbus (ef806d212d34b0e173baeb3564d53e37) C:\windows\system32\DRIVERS\ss_bbus.sys

2011/06/04 14:01:44.0515 7144 ss_bmdfl (08b1b34abebeb6ac2dea06900c56411e) C:\windows\system32\DRIVERS\ss_bmdfl.sys

2011/06/04 14:01:44.0528 7144 ss_bmdm (71a9da6beaa4cb54dfb827fb78600a5d) C:\windows\system32\DRIVERS\ss_bmdm.sys

2011/06/04 14:01:44.0555 7144 ss_bserd (677cdc98f8363accaae783fde1599c2a) C:\windows\system32\DRIVERS\ss_bserd.sys

2011/06/04 14:01:44.0573 7144 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\windows\system32\DRIVERS\stexstor.sys

2011/06/04 14:01:44.0595 7144 storflt (ffd7a6f15b14234b5b0e5d49e7961895) C:\windows\system32\DRIVERS\vmstorfl.sys

2011/06/04 14:01:44.0607 7144 storvsc (8fccbefc5c440b3c23454656e551b09a) C:\windows\system32\DRIVERS\storvsc.sys

2011/06/04 14:01:44.0619 7144 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\windows\system32\DRIVERS\swenum.sys

2011/06/04 14:01:44.0645 7144 tap0901t (b08740047145b9bce15bf75ca0f9718a) C:\windows\system32\DRIVERS\tap0901t.sys

2011/06/04 14:01:44.0706 7144 Tcpip (90a2d722cf64d911879d6c4a4f802a4d) C:\windows\system32\drivers\tcpip.sys

2011/06/04 14:01:44.0741 7144 TCPIP6 (90a2d722cf64d911879d6c4a4f802a4d) C:\windows\system32\DRIVERS\tcpip.sys

2011/06/04 14:01:44.0760 7144 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\windows\system32\drivers\tcpipreg.sys

2011/06/04 14:01:44.0775 7144 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\windows\system32\drivers\tdpipe.sys

2011/06/04 14:01:44.0788 7144 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\windows\system32\drivers\tdtcp.sys

2011/06/04 14:01:44.0808 7144 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\windows\system32\DRIVERS\tdx.sys

2011/06/04 14:01:44.0822 7144 TermDD (c448651339196c0e869a355171875522) C:\windows\system32\DRIVERS\termdd.sys

2011/06/04 14:01:44.0867 7144 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\windows\system32\DRIVERS\tssecsrv.sys

2011/06/04 14:01:44.0887 7144 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\windows\system32\DRIVERS\tunnel.sys

2011/06/04 14:01:44.0902 7144 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\windows\system32\DRIVERS\uagp35.sys

2011/06/04 14:01:44.0933 7144 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\windows\system32\DRIVERS\udfs.sys

2011/06/04 14:01:44.0959 7144 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\windows\system32\DRIVERS\uliagpkx.sys

2011/06/04 14:01:44.0971 7144 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\windows\system32\DRIVERS\umbus.sys

2011/06/04 14:01:44.0983 7144 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\windows\system32\DRIVERS\umpass.sys

2011/06/04 14:01:45.0035 7144 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\windows\system32\drivers\usbaudio.sys

2011/06/04 14:01:45.0056 7144 usbccgp (b26afb54a534d634523c4fb66765b026) C:\windows\system32\DRIVERS\usbccgp.sys

2011/06/04 14:01:45.0070 7144 usbcir (af0892a803fdda7492f595368e3b68e7) C:\windows\system32\DRIVERS\usbcir.sys

2011/06/04 14:01:45.0087 7144 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\windows\system32\DRIVERS\usbehci.sys

2011/06/04 14:01:45.0109 7144 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\windows\system32\DRIVERS\usbhub.sys

2011/06/04 14:01:45.0122 7144 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\windows\system32\DRIVERS\usbohci.sys

2011/06/04 14:01:45.0137 7144 usbprint (73188f58fb384e75c4063d29413cee3d) C:\windows\system32\DRIVERS\usbprint.sys

2011/06/04 14:01:45.0157 7144 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\windows\system32\DRIVERS\usbscan.sys

2011/06/04 14:01:45.0181 7144 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\windows\system32\DRIVERS\USBSTOR.SYS

2011/06/04 14:01:45.0193 7144 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\windows\system32\DRIVERS\usbuhci.sys

2011/06/04 14:01:45.0222 7144 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\windows\System32\Drivers\usbvideo.sys

2011/06/04 14:01:45.0251 7144 VClone (fd911873c0bb6945fa38c16e9a2b58f9) C:\windows\system32\DRIVERS\VClone.sys

2011/06/04 14:01:45.0262 7144 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\windows\system32\DRIVERS\vdrvroot.sys

2011/06/04 14:01:45.0277 7144 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\windows\system32\DRIVERS\vgapnp.sys

2011/06/04 14:01:45.0292 7144 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\windows\System32\drivers\vga.sys

2011/06/04 14:01:45.0305 7144 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\windows\system32\DRIVERS\vhdmp.sys

2011/06/04 14:01:45.0335 7144 vhidmini (1161acff728d97f75d74d2f1465f8a46) C:\windows\system32\DRIVERS\vHidDev.sys

2011/06/04 14:01:45.0347 7144 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\windows\system32\DRIVERS\viaide.sys

2011/06/04 14:01:45.0363 7144 vmbus (1501699d7eda984abc4155a7da5738d1) C:\windows\system32\DRIVERS\vmbus.sys

2011/06/04 14:01:45.0376 7144 VMBusHID (ae10c35761889e65a6f7176937c5592c) C:\windows\system32\DRIVERS\VMBusHID.sys

2011/06/04 14:01:45.0431 7144 vmci (cdaa992c18f3f3612444c818a478cf57) C:\windows\system32\drivers\vmci.sys

2011/06/04 14:01:45.0448 7144 vmkbd (ea9c266cd4b4bb7c7d818c1c27461959) C:\windows\system32\drivers\VMkbd.sys

2011/06/04 14:01:45.0468 7144 VMnetAdapter (9d54f1339e78c95bf3d9939ebcb66378) C:\windows\system32\DRIVERS\vmnetadapter.sys

2011/06/04 14:01:45.0490 7144 VMnetBridge (fb54ef3aa613d2832fd3812e7cb2fc75) C:\windows\system32\DRIVERS\vmnetbridge.sys

2011/06/04 14:01:45.0505 7144 VMnetuserif (479948eb42e189c076b45ebaf2d12bbc) C:\windows\system32\drivers\vmnetuserif.sys

2011/06/04 14:01:45.0523 7144 vmusb (415b167695c4b5960a13098622ef3d80) C:\windows\system32\Drivers\vmusb.sys

2011/06/04 14:01:45.0548 7144 vmx86 (05645d6651ca7a02298aae475bbcad6e) C:\windows\system32\drivers\vmx86.sys

2011/06/04 14:01:45.0561 7144 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\windows\system32\DRIVERS\volmgr.sys

2011/06/04 14:01:45.0575 7144 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\windows\system32\drivers\volmgrx.sys

2011/06/04 14:01:45.0590 7144 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\windows\system32\DRIVERS\volsnap.sys

2011/06/04 14:01:45.0614 7144 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\windows\system32\DRIVERS\vsmraid.sys

2011/06/04 14:01:45.0646 7144 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\windows\System32\drivers\vwifibus.sys

2011/06/04 14:01:45.0664 7144 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\windows\system32\DRIVERS\wacompen.sys

2011/06/04 14:01:45.0683 7144 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\windows\system32\DRIVERS\wanarp.sys

2011/06/04 14:01:45.0693 7144 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\windows\system32\DRIVERS\wanarp.sys

2011/06/04 14:01:45.0716 7144 Wd (72889e16ff12ba0f235467d6091b17dc) C:\windows\system32\DRIVERS\wd.sys

2011/06/04 14:01:45.0738 7144 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\windows\system32\drivers\Wdf01000.sys

2011/06/04 14:01:45.0770 7144 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\windows\system32\DRIVERS\wfplwf.sys

2011/06/04 14:01:45.0797 7144 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\windows\system32\drivers\wimmount.sys

2011/06/04 14:01:45.0849 7144 WinUSB (817eaff5d38674edd7713b9dfb8e9791) C:\windows\system32\DRIVERS\WinUSB.sys

2011/06/04 14:01:45.0868 7144 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\windows\system32\DRIVERS\wmiacpi.sys

2011/06/04 14:01:45.0895 7144 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\windows\system32\drivers\ws2ifsl.sys

2011/06/04 14:01:45.0936 7144 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\windows\system32\drivers\WudfPf.sys

2011/06/04 14:01:46.0054 7144 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\windows\system32\DRIVERS\WUDFRd.sys

2011/06/04 14:01:46.0134 7144 xusb21 (2c6bc21b2d5b58d8b1d638c1704cb494) C:\windows\system32\DRIVERS\xusb21.sys

2011/06/04 14:01:46.0176 7144 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0

2011/06/04 14:01:46.0190 7144 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk1\DR1

2011/06/04 14:01:46.0195 7144 ================================================================================

2011/06/04 14:01:46.0195 7144 Scan finished

2011/06/04 14:01:46.0195 7144 ================================================================================

2011/06/04 14:01:46.0203 2112 Detected object count: 0

2011/06/04 14:01:46.0203 2112 Actual detected object count: 0

2011/06/04 14:02:24.0384 4800 Deinitialize success

LDTate · June 4, 2011

Did combofix find anything when you ran it?

LDTate · June 8, 2011

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Sign In

Possibly infected?

Recommended Posts

xcloudx

Link to post

Share on other sites

LDTate

Link to post

Share on other sites

xcloudx

Link to post

Share on other sites

LDTate

Link to post

Share on other sites

LDTate

Link to post

Share on other sites

Recently Browsing 0 members

Browse

Activity

Personal

Business

Business Modules

Partners

Learn

Start here

Type of malware/attacks

How does it get on my computer?

Scams and grifts

Support

Important Information