svchost.exe Trojan.Agent

Nighttwish · October 17, 2011

Hi,

I have noticed that my computer's memory has been running at near 100% capacity all the time, regardless of what programs are on. I recently did a complete system restore to address the problem but it did not change. Malwarebytes scan reveals trojan.agent svchost.exe. After I quarantine and remove, it says successful and prompts reboot. However svchost.exe returns. Now Malwarebytes will popup saying it has blocked access to svchost.exe every once and a while. Your help will be much appreciated.

DDS.txt

Attach.txt

ComboFix.txt

MGlogs.zip

mbam-log-2011-10-16 (21-33-14).txt

Elise · October 17, 2011

Hello and :welcome:

First lets do an additional rootkit scan.

Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!

Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.
If TDSSKiller does not run, try renaming it.
To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.
Click the Start Scan button.
Do not use the computer during the scan
If the scan completes with nothing found, click Close to exit.
If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).
Copy and paste the contents of that file in your next reply.

Nighttwish · October 17, 2011

Hi Elise,

Thanks for taking the time to help me. I have been out all day and won't be able to get back to the affected computer until 5 PM tonight. I will run the procedures ASAP. Thanks again.

Dan

Nighttwish · October 18, 2011

17:27:27.0740 4232 TDSS rootkit removing tool 2.6.10.0 Oct 17 2011 15:43:23

17:27:27.0755 4232 ============================================================

17:27:27.0755 4232 Current date / time: 2011/10/17 17:27:27.0755

17:27:27.0755 4232 SystemInfo:

17:27:27.0755 4232

17:27:27.0755 4232 OS Version: 6.1.7600 ServicePack: 0.0

17:27:27.0755 4232 Product type: Workstation

17:27:27.0755 4232 ComputerName: NIGHTWISH

17:27:27.0755 4232 UserName: DanielSon

17:27:27.0755 4232 Windows directory: C:\Windows

17:27:27.0755 4232 System windows directory: C:\Windows

17:27:27.0755 4232 Running under WOW64

17:27:27.0755 4232 Processor architecture: Intel x64

17:27:27.0755 4232 Number of processors: 2

17:27:27.0755 4232 Page size: 0x1000

17:27:27.0755 4232 Boot type: Normal boot

17:27:27.0755 4232 ============================================================

17:27:28.0114 4232 Initialize success

17:27:35.0415 5092 ============================================================

17:27:35.0415 5092 Scan started

17:27:35.0415 5092 Mode: Manual;

17:27:35.0415 5092 ============================================================

17:27:36.0132 5092 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys

17:27:36.0132 5092 1394ohci - ok

17:27:36.0554 5092 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys

17:27:36.0554 5092 ACPI - ok

17:27:36.0897 5092 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys

17:27:36.0897 5092 AcpiPmi - ok

17:27:37.0318 5092 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys

17:27:37.0349 5092 adp94xx - ok

17:27:37.0739 5092 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys

17:27:37.0755 5092 adpahci - ok

17:27:38.0114 5092 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys

17:27:38.0129 5092 adpu320 - ok

17:27:38.0519 5092 AFD (b9384e03479d2506bc924c16a3db87bc) C:\Windows\system32\drivers\afd.sys

17:27:38.0535 5092 AFD - ok

17:27:38.0894 5092 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys

17:27:38.0894 5092 agp440 - ok

17:27:39.0268 5092 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys

17:27:39.0268 5092 aliide - ok

17:27:39.0627 5092 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys

17:27:39.0642 5092 amdide - ok

17:27:40.0032 5092 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys

17:27:40.0032 5092 AmdK8 - ok

17:27:40.0376 5092 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys

17:27:40.0376 5092 AmdPPM - ok

17:27:40.0750 5092 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys

17:27:40.0750 5092 amdsata - ok

17:27:41.0124 5092 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys

17:27:41.0124 5092 amdsbs - ok

17:27:41.0499 5092 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys

17:27:41.0499 5092 amdxata - ok

17:27:41.0904 5092 ApfiltrService (56bd886820c4aedf493cfcdf1ccfb004) C:\Windows\system32\DRIVERS\Apfiltr.sys

17:27:41.0904 5092 ApfiltrService - ok

17:27:42.0294 5092 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys

17:27:42.0294 5092 AppID - ok

17:27:42.0684 5092 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys

17:27:42.0700 5092 arc - ok

17:27:43.0043 5092 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys

17:27:43.0059 5092 arcsas - ok

17:27:43.0449 5092 ArcSoftKsUFilter (c130bc4a51b1382b2be8e44579ec4c0a) C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys

17:27:43.0449 5092 ArcSoftKsUFilter - ok

17:27:43.0808 5092 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys

17:27:43.0808 5092 AsyncMac - ok

17:27:44.0166 5092 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys

17:27:44.0166 5092 atapi - ok

17:27:44.0681 5092 athr (5d4529ac4156e16bedb01441ae0cf984) C:\Windows\system32\DRIVERS\athrx.sys

17:27:44.0744 5092 athr - ok

17:27:45.0383 5092 atikmdag (de0ede41bc530f1759c6fffcb8c7a0cf) C:\Windows\system32\DRIVERS\atikmdag.sys

17:27:45.0555 5092 atikmdag - ok

17:27:46.0038 5092 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys

17:27:46.0070 5092 b06bdrv - ok

17:27:46.0460 5092 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys

17:27:46.0460 5092 b57nd60a - ok

17:27:46.0865 5092 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys

17:27:46.0865 5092 Beep - ok

17:27:47.0271 5092 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys

17:27:47.0271 5092 blbdrive - ok

17:27:47.0645 5092 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys

17:27:47.0645 5092 bowser - ok

17:27:48.0051 5092 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys

17:27:48.0051 5092 BrFiltLo - ok

17:27:48.0441 5092 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys

17:27:48.0441 5092 BrFiltUp - ok

17:27:48.0878 5092 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys

17:27:48.0878 5092 Brserid - ok

17:27:49.0252 5092 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys

17:27:49.0252 5092 BrSerWdm - ok

17:27:49.0611 5092 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys

17:27:49.0611 5092 BrUsbMdm - ok

17:27:49.0985 5092 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys

17:27:49.0985 5092 BrUsbSer - ok

17:27:50.0360 5092 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\DRIVERS\BthEnum.sys

17:27:50.0360 5092 BthEnum - ok

17:27:50.0765 5092 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys

17:27:50.0765 5092 BTHMODEM - ok

17:27:51.0171 5092 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys

17:27:51.0171 5092 BthPan - ok

17:27:51.0592 5092 BTHPORT (a51fa9d0e85d5adabef72e67f386309c) C:\Windows\system32\Drivers\BTHport.sys

17:27:51.0608 5092 BTHPORT - ok

17:27:52.0029 5092 BTHUSB (f740b9a16b2c06700f2130e19986bf3b) C:\Windows\system32\Drivers\BTHUSB.sys

17:27:52.0029 5092 BTHUSB - ok

17:27:52.0060 5092 catchme - ok

17:27:52.0434 5092 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys

17:27:52.0450 5092 cdfs - ok

17:27:52.0824 5092 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys

17:27:52.0824 5092 cdrom - ok

17:27:53.0214 5092 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys

17:27:53.0214 5092 circlass - ok

17:27:53.0495 5092 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys

17:27:53.0495 5092 CLFS - ok

17:27:53.0901 5092 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys

17:27:53.0901 5092 CmBatt - ok

17:27:54.0275 5092 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys

17:27:54.0275 5092 cmdide - ok

17:27:54.0634 5092 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys

17:27:54.0650 5092 CNG - ok

17:27:55.0055 5092 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys

17:27:55.0055 5092 Compbatt - ok

17:27:55.0430 5092 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys

17:27:55.0430 5092 CompositeBus - ok

17:27:55.0788 5092 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys

17:27:55.0788 5092 crcdisk - ok

17:27:56.0225 5092 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys

17:27:56.0225 5092 DfsC - ok

17:27:56.0584 5092 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys

17:27:56.0584 5092 discache - ok

17:27:56.0990 5092 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys

17:27:56.0990 5092 Disk - ok

17:27:57.0426 5092 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys

17:27:57.0426 5092 drmkaud - ok

17:27:57.0894 5092 DXGKrnl (7cb7d2b73813ce05c7bc0f5f95d27cec) C:\Windows\System32\drivers\dxgkrnl.sys

17:27:57.0957 5092 DXGKrnl - ok

17:27:58.0550 5092 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys

17:27:58.0643 5092 ebdrv - ok

17:27:59.0049 5092 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys

17:27:59.0080 5092 elxstor - ok

17:27:59.0486 5092 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys

17:27:59.0486 5092 ErrDev - ok

17:27:59.0876 5092 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys

17:27:59.0891 5092 exfat - ok

17:28:00.0281 5092 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys

17:28:00.0297 5092 fastfat - ok

17:28:00.0671 5092 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys

17:28:00.0671 5092 fdc - ok

17:28:01.0061 5092 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys

17:28:01.0061 5092 FileInfo - ok

17:28:01.0436 5092 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys

17:28:01.0436 5092 Filetrace - ok

17:28:01.0794 5092 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys

17:28:01.0794 5092 flpydisk - ok

17:28:02.0231 5092 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys

17:28:02.0247 5092 FltMgr - ok

17:28:02.0637 5092 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys

17:28:02.0637 5092 FsDepends - ok

17:28:02.0980 5092 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys

17:28:02.0980 5092 Fs_Rec - ok

17:28:03.0370 5092 fvevol (b8b2a6e1558f8f5de5ce431c5b2c7b09) C:\Windows\system32\DRIVERS\fvevol.sys

17:28:03.0370 5092 fvevol - ok

17:28:03.0744 5092 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys

17:28:03.0760 5092 gagp30kx - ok

17:28:04.0166 5092 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys

17:28:04.0166 5092 hcw85cir - ok

17:28:04.0556 5092 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys

17:28:04.0571 5092 HdAudAddService - ok

17:28:04.0946 5092 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys

17:28:04.0946 5092 HDAudBus - ok

17:28:05.0336 5092 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys

17:28:05.0336 5092 HidBatt - ok

17:28:05.0726 5092 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys

17:28:05.0726 5092 HidBth - ok

17:28:06.0100 5092 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys

17:28:06.0100 5092 HidIr - ok

17:28:06.0537 5092 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys

17:28:06.0552 5092 HidUsb - ok

17:28:06.0942 5092 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys

17:28:06.0942 5092 HpSAMD - ok

17:28:07.0395 5092 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys

17:28:07.0426 5092 HTTP - ok

17:28:07.0816 5092 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys

17:28:07.0816 5092 hwpolicy - ok

17:28:08.0206 5092 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys

17:28:08.0222 5092 i8042prt - ok

17:28:08.0658 5092 iaStor (1d004cb1da6323b1f55caef7f94b61d9) C:\Windows\system32\DRIVERS\iaStor.sys

17:28:08.0658 5092 iaStor - ok

17:28:09.0080 5092 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys

17:28:09.0111 5092 iaStorV - ok

17:28:09.0735 5092 igfx (dfeaf0a1d98d397035012c8e28d1520f) C:\Windows\system32\DRIVERS\igdkmd64.sys

17:28:09.0953 5092 igfx - ok

17:28:10.0312 5092 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys

17:28:10.0312 5092 iirsp - ok

17:28:10.0889 5092 IntcAzAudAddService (b16fc828ce7a76a8f1ce682e6ead2627) C:\Windows\system32\drivers\RTKVHD64.sys

17:28:10.0905 5092 IntcAzAudAddService - ok

17:28:11.0279 5092 IntcHdmiAddService (88a20fa54c73ded4e8dac764e9130ae9) C:\Windows\system32\drivers\IntcHdmi.sys

17:28:11.0279 5092 IntcHdmiAddService - ok

17:28:11.0669 5092 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys

17:28:11.0669 5092 intelide - ok

17:28:12.0044 5092 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys

17:28:12.0044 5092 intelppm - ok

17:28:12.0449 5092 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys

17:28:12.0449 5092 IpFilterDriver - ok

17:28:12.0839 5092 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys

17:28:12.0839 5092 IPMIDRV - ok

17:28:13.0214 5092 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys

17:28:13.0214 5092 IPNAT - ok

17:28:13.0619 5092 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys

17:28:13.0619 5092 IRENUM - ok

17:28:13.0994 5092 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys

17:28:13.0994 5092 isapnp - ok

17:28:14.0384 5092 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys

17:28:14.0384 5092 iScsiPrt - ok

17:28:14.0774 5092 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys

17:28:14.0774 5092 kbdclass - ok

17:28:15.0148 5092 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys

17:28:15.0148 5092 kbdhid - ok

17:28:15.0507 5092 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys

17:28:15.0522 5092 KSecDD - ok

17:28:15.0912 5092 KSecPkg (bbe1bf6d9b661c354d4857d5fadb943b) C:\Windows\system32\Drivers\ksecpkg.sys

17:28:15.0912 5092 KSecPkg - ok

17:28:16.0287 5092 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys

17:28:16.0287 5092 ksthunk - ok

17:28:16.0739 5092 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys

17:28:16.0739 5092 lltdio - ok

17:28:17.0176 5092 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys

17:28:17.0176 5092 LSI_FC - ok

17:28:17.0550 5092 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys

17:28:17.0550 5092 LSI_SAS - ok

17:28:17.0956 5092 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys

17:28:17.0956 5092 LSI_SAS2 - ok

17:28:18.0362 5092 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys

17:28:18.0362 5092 LSI_SCSI - ok

17:28:18.0752 5092 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys

17:28:18.0752 5092 luafv - ok

17:28:19.0126 5092 MBAMProtector (23a854450dab5c9b7a42ab9be6f2e4bd) C:\Windows\system32\drivers\mbam.sys

17:28:19.0126 5092 MBAMProtector - ok

17:28:19.0500 5092 mdmxsdk (e4f44ec214b3e381e1fc844a02926666) C:\Windows\system32\DRIVERS\mdmxsdk.sys

17:28:19.0500 5092 mdmxsdk - ok

17:28:19.0937 5092 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys

17:28:19.0937 5092 megasas - ok

17:28:20.0312 5092 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys

17:28:20.0327 5092 MegaSR - ok

17:28:20.0733 5092 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys

17:28:20.0733 5092 Modem - ok

17:28:21.0123 5092 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys

17:28:21.0123 5092 monitor - ok

17:28:21.0513 5092 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys

17:28:21.0513 5092 mouclass - ok

17:28:21.0965 5092 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys

17:28:21.0965 5092 mouhid - ok

17:28:22.0340 5092 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys

17:28:22.0355 5092 mountmgr - ok

17:28:22.0761 5092 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys

17:28:22.0776 5092 mpio - ok

17:28:23.0166 5092 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys

17:28:23.0166 5092 mpsdrv - ok

17:28:23.0556 5092 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys

17:28:23.0556 5092 MRxDAV - ok

17:28:23.0993 5092 mrxsmb (cfdcd8ca87c2a657debc150ac35b5e08) C:\Windows\system32\DRIVERS\mrxsmb.sys

17:28:23.0993 5092 mrxsmb - ok

17:28:24.0368 5092 mrxsmb10 (1bee517b220b7f024f411aec1571dd5a) C:\Windows\system32\DRIVERS\mrxsmb10.sys

17:28:24.0383 5092 mrxsmb10 - ok

17:28:24.0773 5092 mrxsmb20 (6b2d5fef385828b6e485c1c90afb8195) C:\Windows\system32\DRIVERS\mrxsmb20.sys

17:28:24.0773 5092 mrxsmb20 - ok

17:28:25.0163 5092 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys

17:28:25.0179 5092 msahci - ok

17:28:25.0553 5092 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys

17:28:25.0553 5092 msdsm - ok

17:28:25.0959 5092 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys

17:28:25.0974 5092 Msfs - ok

17:28:26.0349 5092 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys

17:28:26.0349 5092 mshidkmdf - ok

17:28:26.0739 5092 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys

17:28:26.0739 5092 msisadrv - ok

17:28:27.0176 5092 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys

17:28:27.0176 5092 MSKSSRV - ok

17:28:27.0550 5092 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys

17:28:27.0550 5092 MSPCLOCK - ok

17:28:27.0956 5092 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys

17:28:27.0956 5092 MSPQM - ok

17:28:28.0361 5092 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys

17:28:28.0361 5092 MsRPC - ok

17:28:28.0751 5092 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys

17:28:28.0751 5092 mssmbios - ok

17:28:29.0141 5092 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys

17:28:29.0141 5092 MSTEE - ok

17:28:29.0485 5092 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys

17:28:29.0485 5092 MTConfig - ok

17:28:29.0859 5092 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys

17:28:29.0859 5092 Mup - ok

17:28:30.0311 5092 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys

17:28:30.0311 5092 NativeWifiP - ok

17:28:30.0701 5092 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys

17:28:30.0733 5092 NDIS - ok

17:28:31.0169 5092 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys

17:28:31.0169 5092 NdisCap - ok

17:28:31.0559 5092 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys

17:28:31.0559 5092 NdisTapi - ok

17:28:31.0996 5092 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys

17:28:31.0996 5092 Ndisuio - ok

17:28:32.0371 5092 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys

17:28:32.0371 5092 NdisWan - ok

17:28:32.0729 5092 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys

17:28:32.0729 5092 NDProxy - ok

17:28:33.0119 5092 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys

17:28:33.0119 5092 NetBIOS - ok

17:28:33.0509 5092 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys

17:28:33.0525 5092 NetBT - ok

17:28:34.0055 5092 netw5v64 (64428dfdaf6e88366cb51f45a79c5f69) C:\Windows\system32\DRIVERS\netw5v64.sys

17:28:34.0196 5092 netw5v64 - ok

17:28:34.0570 5092 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys

17:28:34.0570 5092 nfrd960 - ok

17:28:34.0929 5092 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys

17:28:34.0945 5092 Npfs - ok

17:28:35.0350 5092 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys

17:28:35.0350 5092 nsiproxy - ok

17:28:35.0881 5092 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys

17:28:35.0943 5092 Ntfs - ok

17:28:36.0317 5092 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys

17:28:36.0317 5092 Null - ok

17:28:36.0676 5092 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys

17:28:36.0692 5092 nvraid - ok

17:28:37.0082 5092 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys

17:28:37.0097 5092 nvstor - ok

17:28:37.0503 5092 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys

17:28:37.0503 5092 nv_agp - ok

17:28:37.0846 5092 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys

17:28:37.0862 5092 ohci1394 - ok

17:28:38.0236 5092 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys

17:28:38.0236 5092 Parport - ok

17:28:38.0611 5092 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys

17:28:38.0611 5092 partmgr - ok

17:28:39.0001 5092 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys

17:28:39.0016 5092 pci - ok

17:28:39.0375 5092 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys

17:28:39.0391 5092 pciide - ok

17:28:39.0781 5092 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys

17:28:39.0796 5092 pcmcia - ok

17:28:40.0155 5092 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys

17:28:40.0155 5092 pcw - ok

17:28:40.0545 5092 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys

17:28:40.0561 5092 PEAUTH - ok

17:28:40.0982 5092 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys

17:28:40.0982 5092 PptpMiniport - ok

17:28:41.0387 5092 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys

17:28:41.0387 5092 Processor - ok

17:28:41.0793 5092 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys

17:28:41.0793 5092 Psched - ok

17:28:42.0152 5092 PxHlpa64 (aed797cca02783296c68aa10d0cff8a9) C:\Windows\system32\Drivers\PxHlpa64.sys

17:28:42.0152 5092 PxHlpa64 - ok

17:28:42.0620 5092 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys

17:28:42.0698 5092 ql2300 - ok

17:28:43.0041 5092 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys

17:28:43.0041 5092 ql40xx - ok

17:28:43.0415 5092 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys

17:28:43.0415 5092 QWAVEdrv - ok

17:28:43.0805 5092 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys

17:28:43.0805 5092 RasAcd - ok

17:28:44.0180 5092 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys

17:28:44.0180 5092 RasAgileVpn - ok

17:28:44.0585 5092 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys

17:28:44.0585 5092 Rasl2tp - ok

17:28:44.0960 5092 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys

17:28:44.0960 5092 RasPppoe - ok

17:28:45.0334 5092 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys

17:28:45.0334 5092 RasSstp - ok

17:28:45.0740 5092 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys

17:28:45.0755 5092 rdbss - ok

17:28:46.0145 5092 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys

17:28:46.0145 5092 rdpbus - ok

17:28:46.0520 5092 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys

17:28:46.0520 5092 RDPCDD - ok

17:28:46.0894 5092 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys

17:28:46.0894 5092 RDPENCDD - ok

17:28:47.0284 5092 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys

17:28:47.0284 5092 RDPREFMP - ok

17:28:47.0690 5092 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys

17:28:47.0690 5092 RDPWD - ok

17:28:48.0127 5092 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys

17:28:48.0127 5092 rdyboost - ok

17:28:48.0485 5092 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys

17:28:48.0501 5092 RFCOMM - ok

17:28:48.0891 5092 rimsptsk (258aadb43e3f3468b5cf8cb0f84872c2) C:\Windows\system32\DRIVERS\rimssn64.sys

17:28:48.0891 5092 rimsptsk - ok

17:28:49.0265 5092 risdptsk (71e182a0de1cecb3f912960716345405) C:\Windows\system32\DRIVERS\risdsn64.sys

17:28:49.0265 5092 risdptsk - ok

17:28:49.0718 5092 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys

17:28:49.0718 5092 rspndr - ok

17:28:50.0108 5092 RTHDMIAzAudService (34f05c417f038ffa3bef69b798d7d7dd) C:\Windows\system32\drivers\RtHDMIVX.sys

17:28:50.0123 5092 RTHDMIAzAudService - ok

17:28:50.0217 5092 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS

17:28:50.0217 5092 SASDIFSV - ok

17:28:50.0264 5092 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS

17:28:50.0264 5092 SASKUTIL - ok

17:28:50.0654 5092 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys

17:28:50.0654 5092 sbp2port - ok

17:28:50.0997 5092 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys

17:28:50.0997 5092 scfilter - ok

17:28:51.0387 5092 sdbus (54e47ad086782d3ae9417c155cdceb9b) C:\Windows\system32\DRIVERS\sdbus.sys

17:28:51.0387 5092 sdbus - ok

17:28:51.0793 5092 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys

17:28:51.0793 5092 secdrv - ok

17:28:52.0167 5092 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys

17:28:52.0167 5092 Serenum - ok

17:28:52.0541 5092 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys

17:28:52.0541 5092 Serial - ok

17:28:52.0931 5092 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys

17:28:52.0931 5092 sermouse - ok

17:28:53.0337 5092 SFEP (70f9c476b62de4f2823e918a6c181ade) C:\Windows\system32\DRIVERS\SFEP.sys

17:28:53.0337 5092 SFEP - ok

17:28:53.0727 5092 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys

17:28:53.0727 5092 sffdisk - ok

17:28:54.0086 5092 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys

17:28:54.0086 5092 sffp_mmc - ok

17:28:54.0460 5092 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys

17:28:54.0460 5092 sffp_sd - ok

17:28:54.0835 5092 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys

17:28:54.0835 5092 sfloppy - ok

17:28:55.0225 5092 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys

17:28:55.0225 5092 SiSRaid2 - ok

17:28:55.0599 5092 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys

17:28:55.0599 5092 SiSRaid4 - ok

17:28:56.0020 5092 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys

17:28:56.0020 5092 Smb - ok

17:28:56.0410 5092 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys

17:28:56.0410 5092 spldr - ok

17:28:56.0847 5092 srv (ec8f67289105bf270498095f14963464) C:\Windows\system32\DRIVERS\srv.sys

17:28:56.0847 5092 srv - ok

17:28:57.0206 5092 srv2 (f773d2ed090b7baa1c1a034f3ca476c8) C:\Windows\system32\DRIVERS\srv2.sys

17:28:57.0221 5092 srv2 - ok

17:28:57.0580 5092 SrvHsfHDA (0c4540311e11664b245a263e1154cef8) C:\Windows\system32\DRIVERS\VSTAZL6.SYS

17:28:57.0596 5092 SrvHsfHDA - ok

17:28:58.0033 5092 SrvHsfV92 (02071d207a9858fbe3a48cbfd59c4a04) C:\Windows\system32\DRIVERS\VSTDPV6.SYS

17:28:58.0079 5092 SrvHsfV92 - ok

17:28:58.0469 5092 SrvHsfWinac (18e40c245dbfaf36fd0134a7ef2df396) C:\Windows\system32\DRIVERS\VSTCNXT6.SYS

17:28:58.0485 5092 SrvHsfWinac - ok

17:28:58.0875 5092 srvnet (26e84d3649019c3244622e654dfcd75b) C:\Windows\system32\DRIVERS\srvnet.sys

17:28:58.0891 5092 srvnet - ok

17:28:59.0249 5092 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys

17:28:59.0249 5092 stexstor - ok

17:28:59.0593 5092 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys

17:28:59.0593 5092 swenum - ok

17:29:00.0154 5092 Tcpip (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\drivers\tcpip.sys

17:29:00.0217 5092 Tcpip - ok

17:29:00.0638 5092 TCPIP6 (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\DRIVERS\tcpip.sys

17:29:00.0653 5092 TCPIP6 - ok

17:29:01.0012 5092 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys

17:29:01.0012 5092 tcpipreg - ok

17:29:01.0371 5092 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys

17:29:01.0371 5092 TDPIPE - ok

17:29:01.0745 5092 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys

17:29:01.0761 5092 TDTCP - ok

17:29:02.0151 5092 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys

17:29:02.0167 5092 tdx - ok

17:29:02.0510 5092 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys

17:29:02.0510 5092 TermDD - ok

17:29:02.0947 5092 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys

17:29:02.0947 5092 tssecsrv - ok

17:29:03.0337 5092 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys

17:29:03.0337 5092 tunnel - ok

17:29:03.0727 5092 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys

17:29:03.0727 5092 uagp35 - ok

17:29:04.0163 5092 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys

17:29:04.0179 5092 udfs - ok

17:29:04.0553 5092 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys

17:29:04.0553 5092 uliagpkx - ok

17:29:04.0928 5092 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys

17:29:04.0928 5092 umbus - ok

17:29:05.0302 5092 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys

17:29:05.0302 5092 UmPass - ok

17:29:05.0677 5092 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys

17:29:05.0677 5092 usbccgp - ok

17:29:06.0082 5092 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys

17:29:06.0082 5092 usbcir - ok

17:29:06.0472 5092 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys

17:29:06.0472 5092 usbehci - ok

17:29:06.0878 5092 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys

17:29:06.0878 5092 usbhub - ok

17:29:07.0252 5092 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys

17:29:07.0268 5092 usbohci - ok

17:29:07.0611 5092 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys

17:29:07.0611 5092 usbprint - ok

17:29:07.0954 5092 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS

17:29:07.0954 5092 USBSTOR - ok

17:29:08.0344 5092 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys

17:29:08.0344 5092 usbuhci - ok

17:29:08.0734 5092 usbvideo (d501e12614b00a3252073101d6a1a74b) C:\Windows\system32\Drivers\usbvideo.sys

17:29:08.0750 5092 usbvideo - ok

17:29:09.0187 5092 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys

17:29:09.0202 5092 vdrvroot - ok

17:29:09.0561 5092 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys

17:29:09.0561 5092 vga - ok

17:29:09.0904 5092 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys

17:29:09.0904 5092 VgaSave - ok

17:29:10.0310 5092 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys

17:29:10.0325 5092 vhdmp - ok

17:29:10.0715 5092 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys

17:29:10.0715 5092 viaide - ok

17:29:11.0090 5092 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys

17:29:11.0090 5092 volmgr - ok

17:29:11.0495 5092 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys

17:29:11.0511 5092 volmgrx - ok

17:29:11.0885 5092 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys

17:29:11.0885 5092 volsnap - ok

17:29:12.0307 5092 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys

17:29:12.0322 5092 vsmraid - ok

17:29:12.0697 5092 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys

17:29:12.0697 5092 vwifibus - ok

17:29:13.0071 5092 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys

17:29:13.0071 5092 vwififlt - ok

17:29:13.0461 5092 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys

17:29:13.0461 5092 WacomPen - ok

17:29:13.0851 5092 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys

17:29:13.0851 5092 WANARP - ok

17:29:13.0867 5092 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys

17:29:13.0882 5092 Wanarpv6 - ok

17:29:14.0272 5092 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys

17:29:14.0272 5092 Wd - ok

17:29:14.0709 5092 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys

17:29:14.0725 5092 Wdf01000 - ok

17:29:15.0115 5092 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys

17:29:15.0115 5092 WfpLwf - ok

17:29:15.0489 5092 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys

17:29:15.0489 5092 WIMMount - ok

17:29:15.0895 5092 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys

17:29:15.0895 5092 WmiAcpi - ok

17:29:16.0253 5092 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys

17:29:16.0253 5092 ws2ifsl - ok

17:29:16.0643 5092 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys

17:29:16.0643 5092 WudfPf - ok

17:29:17.0033 5092 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys

17:29:17.0049 5092 WUDFRd - ok

17:29:17.0439 5092 XAudio (e8f3fa126a06f8e7088f63757112a186) C:\Windows\system32\DRIVERS\XAudio64.sys

17:29:17.0439 5092 XAudio - ok

17:29:17.0829 5092 yukonw7 (6affd75c6807b3dd3ab018e27b88ef95) C:\Windows\system32\DRIVERS\yk62x64.sys

17:29:17.0829 5092 yukonw7 - ok

17:29:17.0860 5092 MBR (0x1B8) (950dcd2e3db597e6b62b2b7124557fec) \Device\Harddisk0\DR0

17:29:17.0860 5092 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - infected

17:29:17.0876 5092 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Pihar.b (0)

17:29:17.0876 5092 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk3\DR4

17:29:17.0891 5092 \Device\Harddisk3\DR4 - ok

17:29:17.0907 5092 Boot (0x1200) (ee4b1421d69eac219b4fb1afe5a4ec25) \Device\Harddisk0\DR0\Partition0

17:29:17.0907 5092 \Device\Harddisk0\DR0\Partition0 - ok

17:29:17.0923 5092 Boot (0x1200) (0d2422a91ad7766ca9f020ab359d191a) \Device\Harddisk0\DR0\Partition1

17:29:17.0923 5092 \Device\Harddisk0\DR0\Partition1 - ok

17:29:17.0923 5092 Boot (0x1200) (0dd72456564b5264d3f5b00ea92e7b48) \Device\Harddisk3\DR4\Partition0

17:29:17.0923 5092 \Device\Harddisk3\DR4\Partition0 - ok

17:29:17.0923 5092 ============================================================

17:29:17.0923 5092 Scan finished

17:29:17.0923 5092 ============================================================

17:29:17.0938 4132 Detected object count: 1

17:29:17.0938 4132 Actual detected object count: 1

17:30:11.0041 4132 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - will be cured on reboot

17:30:11.0041 4132 \Device\Harddisk0\DR0 - ok

17:30:11.0041 4132 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - User select action: Cure

17:30:17.0187 1408 Deinitialize success

Elise · October 18, 2011

Unfortunately you had a nasty rootkit on your computer. It should be gone now, but before continuing, read the following information.

BACKDOOR WARNING

------------------------------

One or more of the identified infections is known to use a backdoor.

This allows hackers to remotely control your computer, steal critical system information and download and execute files.

If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Though the infection has been identified and cleaned, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:

How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

When Should I Format, How Should I Reinstall

We can still clean this machine but I can't guarantee that it will be 100% secure afterwards. Let me know what you decide to do. If you decide to go through with the cleanup, please proceed with the following steps.

Please delete any old copy of combofix you might still have and download a new one.

COMBOFIX

---------------

Please download ComboFix from one of these locations:

Bleepingcomputer
ForoSpyware

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. (Click on this link to see a list of programs that should be disabled. The list is not all inclusive.)
Double click on Combofix.exe and follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, or if you are running Vista, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\Combofix.txt in your next reply.

Nighttwish · October 18, 2011

Ideally I would want to reformat, but I can't seem to do it properly. I pressed F10 on reboot and followed instructions for Complete System Restore (while disconnected from the internet). The problem was still there after reformatting.

ComboFix 11-10-18.02 - DanielSon 10/18/2011 8:39.1.2 - x64

Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.4063.2926 [GMT -7:00]

Running from: c:\users\DanielSon\Desktop\ComboFix.exe

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

((((((((((((((((((((((((( Files Created from 2011-09-18 to 2011-10-18 )))))))))))))))))))))))))))))))

.

2011-10-18 15:42 . 2011-10-18 15:42 -------- d-----w- c:\users\Default\AppData\Local\temp

2011-10-17 07:00 . 2011-10-17 07:00 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware

2011-10-17 06:20 . 2011-10-17 06:20 -------- d-----w- c:\program files\SUPERAntiSpyware

2011-10-17 06:20 . 2011-10-17 06:20 -------- d-----w- c:\programdata\SUPERAntiSpyware.com

2011-10-17 04:11 . 2011-10-17 04:11 -------- d-----w- c:\programdata\Malwarebytes

2011-10-17 04:11 . 2011-09-01 00:00 25416 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-10-17 04:06 . 2011-10-17 04:08 -------- d-----w- c:\users\DanielSon

2011-10-17 03:56 . 2011-10-17 06:00 -------- d-----w- c:\programdata\Norton

2011-10-17 03:54 . 2011-10-17 04:02 -------- d-----w- c:\program files\Sony

2011-10-17 03:52 . 2011-10-17 03:52 3584 ----a-w- c:\windows\system32\Spool\prtprocs\x64\en-US\LXKPTPRC.DLL.mui

2011-10-17 03:52 . 2011-10-17 03:52 -------- d-----w- c:\program files (x86)\Microsoft

2011-10-17 03:52 . 2011-10-17 03:52 -------- d-----w- c:\program files (x86)\Windows Live SkyDrive

2011-10-17 03:52 . 2011-10-17 03:53 -------- d-----w- c:\program files (x86)\Windows Live

2011-10-17 03:51 . 2011-10-17 03:51 -------- d-----w- c:\program files (x86)\Common Files\Windows Live

2011-10-17 03:45 . 2007-07-20 01:14 3727720 ----a-w- c:\windows\SysWow64\d3dx9_35.dll

2011-10-17 03:44 . 2009-07-01 18:49 98304 ----a-w- c:\windows\SysWow64\VESWinlogon.dll

2011-10-17 03:39 . 2011-10-17 03:39 -------- d-----w- c:\program files\Roxio

2011-10-17 03:39 . 2011-10-17 03:39 -------- d-----w- c:\programdata\Uninstall

2011-10-17 03:39 . 2011-10-17 03:39 -------- d-----w- c:\programdata\Sonic

2011-10-17 03:38 . 2011-10-17 03:39 -------- d-----w- c:\program files (x86)\Roxio

2011-10-17 03:38 . 2011-10-17 03:39 -------- d-----w- c:\program files (x86)\Common Files\Roxio Shared

2011-10-17 03:38 . 2009-05-15 10:00 10224 ------w- c:\windows\system32\drivers\cdralw2k.sys

2011-10-17 03:38 . 2009-05-15 10:00 10224 ------w- c:\windows\system32\drivers\cdr4_xp.sys

2011-10-17 03:38 . 2009-05-11 18:42 133616 ------w- c:\windows\SysWow64\pxafs.dll

2011-10-17 03:36 . 2005-04-27 23:36 245408 ----a-w- c:\windows\SysWow64\unicows.dll

2011-10-17 03:36 . 1995-07-31 20:44 212480 ----a-w- c:\windows\SysWow64\PCDLIB32.DLL

2011-10-17 03:36 . 2009-05-26 21:32 19968 ----a-w- c:\windows\system32\drivers\ArcSoftKsUFilter.sys

2011-10-17 03:36 . 2008-09-05 00:06 55808 ----a-w- c:\windows\system\ArcSoftKsUFilter.dll

2011-10-17 03:36 . 2011-10-17 03:50 -------- d-----w- c:\program files (x86)\ArcSoft

2011-10-17 03:36 . 2011-10-17 03:36 -------- d-----w- c:\program files (x86)\Common Files\ArcSoft

2011-10-17 03:36 . 2009-07-31 05:54 614532 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe

2011-10-17 03:36 . 2001-09-05 11:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll

2011-10-17 03:36 . 2001-09-05 11:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll

2011-10-17 03:36 . 2001-09-05 11:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll

2011-10-17 03:36 . 2001-09-05 11:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll

2011-10-17 03:35 . 2011-10-17 03:35 -------- d-----w- C:\SPLASH.000

2011-10-17 03:35 . 2011-10-17 03:35 -------- d-----w- C:\SPLASH.SYS

2011-10-17 03:35 . 2011-10-17 03:35 -------- d-----w- c:\program files (x86)\Downloaded Installations

2011-10-17 03:31 . 2011-10-17 03:39 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine

2011-10-17 03:31 . 2011-10-17 03:38 -------- d-----w- c:\program files (x86)\Common Files\Sonic Shared

2011-10-17 03:31 . 2009-05-20 10:00 55280 ------w- c:\windows\system32\drivers\PxHlpa64.sys

2011-10-17 03:27 . 2011-10-17 03:27 -------- d-----w- c:\programdata\ATI

2011-10-17 03:27 . 2011-10-17 03:27 -------- d-----w- c:\program files (x86)\ATI Technologies

2011-10-17 03:26 . 2008-09-25 01:17 114688 ----a-w- c:\program files (x86)\Windows Sidebar\Gadgets\eBayGadget.Gadget\Bin\eBayGadget.dll

2011-10-17 03:26 . 2008-09-25 01:17 114688 ----a-w- c:\program files\Windows Sidebar\Gadgets\eBayGadget.Gadget\Bin\eBayGadget.dll

2011-10-17 03:23 . 2011-10-17 03:23 -------- d-----w- c:\program files (x86)\Seagate

2011-10-17 03:18 . 2011-10-17 03:18 -------- d-----w- c:\program files (x86)\Intuit

2011-10-17 03:16 . 2011-10-17 03:16 -------- d-----w- c:\program files\PlayReady

2011-10-17 03:15 . 2011-10-17 03:15 -------- d---a-w- C:\Nobu_Icon

2011-10-17 03:13 . 2011-10-17 03:13 -------- d-----w- c:\program files (x86)\Microsoft Office Suite Activation Assistant

2011-10-17 03:12 . 2011-10-17 03:12 -------- d-----w- c:\windows\PCHEALTH

2011-10-17 03:11 . 2011-10-17 03:13 -------- d-----w- c:\programdata\Microsoft Help

2011-10-17 03:11 . 2011-10-17 07:56 -------- d-----r- C:\MSOCache

2011-10-17 03:08 . 2011-10-17 03:10 -------- d-----w- c:\program files (x86)\Microsoft Works

2011-10-17 03:07 . 2011-10-17 03:07 411368 ----a-w- c:\windows\SysWow64\deploytk.dll

2011-10-17 03:06 . 2011-10-17 03:06 455680 ----a-w- c:\windows\system32\deploytk.dll

2011-10-17 03:03 . 2011-10-17 03:03 -------- d-----w- c:\programdata\Partner

2011-10-17 03:03 . 2011-10-17 03:03 -------- d-----w- c:\program files\Google

2011-10-17 03:03 . 2011-10-17 03:03 -------- d-----w- c:\program files (x86)\Google

2011-10-17 03:02 . 2011-10-17 03:55 -------- d-----w- c:\program files (x86)\Sony

2011-10-17 03:02 . 2011-10-17 03:55 -------- d-----w- c:\windows\Sonysys

2011-10-17 03:01 . 2011-10-17 03:01 -------- d-----w- c:\program files (x86)\Common Files\Adobe

2011-10-17 03:01 . 2011-10-17 03:01 -------- d-----w- c:\windows\SysWow64\Macromed

2011-10-17 03:01 . 2011-10-17 06:05 -------- d-sh--w- c:\windows\Installer

2011-10-17 03:00 . 2011-10-17 03:00 192644 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iGdi.dll

2011-10-17 03:00 . 2004-10-22 09:18 749568 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iKernel.dll

2011-10-17 03:00 . 2004-10-22 09:17 69715 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\ctor.dll

2011-10-17 03:00 . 2004-10-22 09:17 274432 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iscript.dll

2011-10-17 03:00 . 2004-10-22 09:16 180224 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iuser.dll

2011-10-17 03:00 . 2004-10-22 09:16 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe

2011-10-17 03:00 . 2011-10-17 03:00 323716 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\setup.dll

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-10-17 07:24 . 2011-10-17 07:19 155502 ----a-w- C:\MGlogs.zip

2011-10-17 03:52 . 2011-10-17 03:52 2560 ----a-w- c:\windows\SysWow64\drivers\en-US\qwavedrv.sys.mui

2011-10-17 03:52 . 2011-10-17 03:52 25600 ----a-w- c:\windows\SysWow64\drivers\en-US\bfe.dll.mui

2011-10-17 03:52 . 2011-10-17 03:52 15360 ----a-w- c:\windows\SysWow64\drivers\en-US\pacer.sys.mui

2011-10-17 03:52 . 2011-10-17 03:52 2560 ----a-w- c:\windows\SysWow64\drivers\en-US\scfilter.sys.mui

2011-10-17 03:52 . 2011-10-17 03:52 5632 ----a-w- c:\windows\SysWow64\drivers\en-US\ndiscap.sys.mui

2011-10-17 03:52 . 2011-10-17 03:52 44032 ----a-w- c:\windows\SysWow64\drivers\en-US\tcpip.sys.mui

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

.

[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]

2011-10-17 03:03 433648 ----a-w- c:\programdata\Partner\Partner.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2011-10-12 5500800]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]

"SmartWiHelper"="c:\program files (x86)\Sony\SmartWi Connection Utility\SmartWiHelper.exe" [2009-08-27 79872]

"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2009-05-26 317288]

"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-09-01 449608]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]

2009-07-01 18:49 98304 ----a-w- c:\windows\System32\VESWinlogon.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux2"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

@=""

.

R2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe [2009-07-14 27136]

R2 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-06-26 362992]

R3 IntcHdmiAddService;Intel® High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [x]

R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]

R3 Partner Service;Partner Service;c:\programdata\Partner\Partner.exe [2011-10-17 332272]

R3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-06-26 313840]

R3 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2009-07-27 120104]

R3 SOHDBSvr;VAIO Media plus Database Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2009-07-27 70952]

R3 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2009-07-27 427304]

R3 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2009-07-27 75048]

R3 SOHPlMgr;VAIO Media plus Playlist Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2009-07-27 91432]

R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]

R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]

R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]

R3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2009-06-26 468264]

R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2009-06-26 357672]

R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2009-06-18 110888]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]

S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]

S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]

S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-11 140672]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-09-01 366152]

S2 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe [2009-07-24 189984]

S2 SampleCollector;Intel® Sample Collector;c:\program files\Sony\VAIO Care\collsvc.exe [2008-09-29 167424]

S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]

S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe [2009-08-22 411496]

S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-07-22 642920]

S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [x]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]

S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [x]

S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]

.

--------- x86-64 -----------

.

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]

2011-10-17 03:03 750064 ----a-w- c:\programdata\Partner\Partner64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-24 7938080]

"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-07-24 1833504]

"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]

.

------- Supplementary Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=SNNT&bmod=SNNT

mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=SNNT&bmod=SNNT

mLocal Page = c:\windows\SysWOW64\blank.htm

TCP: DhcpNameServer = 192.168.1.1

.

- - - - ORPHANS REMOVED - - - -

.

HKLM-Run-Apoint - c:\program files (x86)\Apoint\Apoint.exe

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SampleCollector]

"ImagePath"="\"c:\program files\Sony\VAIO Care\collsvc.exe\" \"/service\" \"/counter=\Processor(_Total)\% Processor Time:5\" \"/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:5\" \"/counter=\Network Interface(*)\Bytes Total/sec:5\" \"/directory=inteldata\""

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]

@Denied: (A 2) (Everyone)

@="IFlashBroker3"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Completion time: 2011-10-18 08:44:02

ComboFix-quarantined-files.txt 2011-10-18 15:44

ComboFix2.txt 2011-10-17 07:14

.

Pre-Run: 289,209,286,656 bytes free

Post-Run: 289,170,620,416 bytes free

.

- - End Of File - - 0D9A198A629BCE836438DB1A3E24F593

ComboFix.txt

Elise · October 18, 2011

Can you please rerun TDSSkiller and post me the new log?

Nighttwish · October 18, 2011

09:55:50.0134 3436 TDSS rootkit removing tool 2.6.10.0 Oct 17 2011 15:43:23

09:55:50.0196 3436 ============================================================

09:55:50.0196 3436 Current date / time: 2011/10/18 09:55:50.0196

09:55:50.0196 3436 SystemInfo:

09:55:50.0196 3436

09:55:50.0196 3436 OS Version: 6.1.7600 ServicePack: 0.0

09:55:50.0196 3436 Product type: Workstation

09:55:50.0196 3436 ComputerName: NIGHTWISH

09:55:50.0196 3436 UserName: DanielSon

09:55:50.0196 3436 Windows directory: C:\Windows

09:55:50.0196 3436 System windows directory: C:\Windows

09:55:50.0196 3436 Running under WOW64

09:55:50.0196 3436 Processor architecture: Intel x64

09:55:50.0196 3436 Number of processors: 2

09:55:50.0196 3436 Page size: 0x1000

09:55:50.0196 3436 Boot type: Normal boot

09:55:50.0196 3436 ============================================================

09:55:50.0524 3436 Initialize success

09:55:56.0046 3516 ============================================================

09:55:56.0046 3516 Scan started

09:55:56.0046 3516 Mode: Manual;

09:55:56.0046 3516 ============================================================

09:55:56.0842 3516 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys

09:55:56.0842 3516 1394ohci - ok

09:55:57.0216 3516 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys

09:55:57.0232 3516 ACPI - ok

09:55:57.0590 3516 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys

09:55:57.0590 3516 AcpiPmi - ok

09:55:58.0043 3516 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys

09:55:58.0043 3516 adp94xx - ok

09:55:58.0433 3516 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys

09:55:58.0433 3516 adpahci - ok

09:55:58.0823 3516 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys

09:55:58.0838 3516 adpu320 - ok

09:55:59.0228 3516 AFD (b9384e03479d2506bc924c16a3db87bc) C:\Windows\system32\drivers\afd.sys

09:55:59.0228 3516 AFD - ok

09:55:59.0603 3516 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys

09:55:59.0603 3516 agp440 - ok

09:56:00.0024 3516 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys

09:56:00.0024 3516 aliide - ok

09:56:00.0430 3516 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys

09:56:00.0430 3516 amdide - ok

09:56:00.0804 3516 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys

09:56:00.0820 3516 AmdK8 - ok

09:56:01.0194 3516 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys

09:56:01.0194 3516 AmdPPM - ok

09:56:01.0568 3516 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys

09:56:01.0568 3516 amdsata - ok

09:56:01.0974 3516 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys

09:56:01.0990 3516 amdsbs - ok

09:56:02.0380 3516 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys

09:56:02.0770 3516 amdxata - ok

09:56:03.0160 3516 ApfiltrService (56bd886820c4aedf493cfcdf1ccfb004) C:\Windows\system32\DRIVERS\Apfiltr.sys

09:56:03.0160 3516 ApfiltrService - ok

09:56:03.0518 3516 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys

09:56:03.0534 3516 AppID - ok

09:56:04.0049 3516 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys

09:56:04.0049 3516 arc - ok

09:56:04.0610 3516 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys

09:56:04.0610 3516 arcsas - ok

09:56:04.0954 3516 ArcSoftKsUFilter (c130bc4a51b1382b2be8e44579ec4c0a) C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys

09:56:04.0969 3516 ArcSoftKsUFilter - ok

09:56:05.0344 3516 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys

09:56:05.0344 3516 AsyncMac - ok

09:56:05.0734 3516 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys

09:56:05.0734 3516 atapi - ok

09:56:06.0202 3516 athr (5d4529ac4156e16bedb01441ae0cf984) C:\Windows\system32\DRIVERS\athrx.sys

09:56:06.0248 3516 athr - ok

09:56:06.0748 3516 atikmdag (de0ede41bc530f1759c6fffcb8c7a0cf) C:\Windows\system32\DRIVERS\atikmdag.sys

09:56:06.0904 3516 atikmdag - ok

09:56:07.0340 3516 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys

09:56:07.0356 3516 b06bdrv - ok

09:56:07.0715 3516 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys

09:56:07.0715 3516 b57nd60a - ok

09:56:08.0089 3516 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys

09:56:08.0089 3516 Beep - ok

09:56:08.0495 3516 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys

09:56:08.0495 3516 blbdrive - ok

09:56:08.0869 3516 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys

09:56:08.0869 3516 bowser - ok

09:56:09.0244 3516 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys

09:56:09.0244 3516 BrFiltLo - ok

09:56:09.0602 3516 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys

09:56:09.0602 3516 BrFiltUp - ok

09:56:09.0992 3516 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys

09:56:10.0008 3516 Brserid - ok

09:56:10.0382 3516 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys

09:56:10.0382 3516 BrSerWdm - ok

09:56:10.0741 3516 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys

09:56:10.0741 3516 BrUsbMdm - ok

09:56:11.0147 3516 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys

09:56:11.0147 3516 BrUsbSer - ok

09:56:11.0521 3516 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\DRIVERS\BthEnum.sys

09:56:11.0521 3516 BthEnum - ok

09:56:11.0896 3516 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys

09:56:11.0896 3516 BTHMODEM - ok

09:56:12.0270 3516 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys

09:56:12.0286 3516 BthPan - ok

09:56:12.0722 3516 BTHPORT (a51fa9d0e85d5adabef72e67f386309c) C:\Windows\system32\Drivers\BTHport.sys

09:56:12.0738 3516 BTHPORT - ok

09:56:13.0112 3516 BTHUSB (f740b9a16b2c06700f2130e19986bf3b) C:\Windows\system32\Drivers\BTHUSB.sys

09:56:13.0112 3516 BTHUSB - ok

09:56:13.0159 3516 catchme - ok

09:56:13.0518 3516 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys

09:56:13.0534 3516 cdfs - ok

09:56:13.0924 3516 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys

09:56:13.0924 3516 cdrom - ok

09:56:14.0485 3516 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys

09:56:14.0485 3516 circlass - ok

09:56:14.0969 3516 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys

09:56:14.0984 3516 CLFS - ok

09:56:15.0530 3516 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys

09:56:15.0530 3516 CmBatt - ok

09:56:16.0295 3516 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys

09:56:16.0295 3516 cmdide - ok

09:56:16.0841 3516 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys

09:56:16.0856 3516 CNG - ok

09:56:17.0387 3516 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys

09:56:17.0387 3516 Compbatt - ok

09:56:17.0870 3516 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys

09:56:17.0870 3516 CompositeBus - ok

09:56:18.0338 3516 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys

09:56:18.0338 3516 crcdisk - ok

09:56:18.0884 3516 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys

09:56:18.0884 3516 DfsC - ok

09:56:19.0462 3516 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys

09:56:19.0462 3516 discache - ok

09:56:20.0226 3516 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys

09:56:20.0226 3516 Disk - ok

09:56:20.0850 3516 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys

09:56:20.0850 3516 drmkaud - ok

09:56:21.0521 3516 DXGKrnl (7cb7d2b73813ce05c7bc0f5f95d27cec) C:\Windows\System32\drivers\dxgkrnl.sys

09:56:21.0552 3516 DXGKrnl - ok

09:56:22.0114 3516 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys

09:56:22.0192 3516 ebdrv - ok

09:56:22.0847 3516 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys

09:56:22.0862 3516 elxstor - ok

09:56:23.0783 3516 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys

09:56:23.0783 3516 ErrDev - ok

09:56:24.0890 3516 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys

09:56:24.0890 3516 exfat - ok

09:56:25.0639 3516 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys

09:56:25.0639 3516 fastfat - ok

09:56:26.0388 3516 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys

09:56:26.0404 3516 fdc - ok

09:56:27.0059 3516 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys

09:56:27.0059 3516 FileInfo - ok

09:56:28.0806 3516 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys

09:56:28.0806 3516 Filetrace - ok

09:56:29.0726 3516 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys

09:56:29.0726 3516 flpydisk - ok

09:56:31.0427 3516 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys

09:56:31.0427 3516 FltMgr - ok

09:56:32.0207 3516 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys

09:56:32.0207 3516 FsDepends - ok

09:56:33.0143 3516 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys

09:56:33.0143 3516 Fs_Rec - ok

09:56:33.0970 3516 fvevol (b8b2a6e1558f8f5de5ce431c5b2c7b09) C:\Windows\system32\DRIVERS\fvevol.sys

09:56:33.0985 3516 fvevol - ok

09:56:34.0874 3516 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys

09:56:34.0874 3516 gagp30kx - ok

09:56:35.0717 3516 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys

09:56:35.0717 3516 hcw85cir - ok

09:56:36.0403 3516 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys

09:56:36.0450 3516 HdAudAddService - ok

09:56:38.0041 3516 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys

09:56:38.0041 3516 HDAudBus - ok

09:56:39.0040 3516 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys

09:56:39.0040 3516 HidBatt - ok

09:56:40.0272 3516 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys

09:56:40.0303 3516 HidBth - ok

09:56:41.0567 3516 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys

09:56:41.0567 3516 HidIr - ok

09:56:43.0720 3516 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys

09:56:43.0767 3516 HidUsb - ok

09:56:44.0687 3516 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys

09:56:44.0687 3516 HpSAMD - ok

09:56:45.0997 3516 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys

09:56:46.0029 3516 HTTP - ok

09:56:47.0105 3516 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys

09:56:47.0105 3516 hwpolicy - ok

09:56:47.0901 3516 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys

09:56:47.0901 3516 i8042prt - ok

09:56:49.0164 3516 iaStor (1d004cb1da6323b1f55caef7f94b61d9) C:\Windows\system32\DRIVERS\iaStor.sys

09:56:49.0164 3516 iaStor - ok

09:56:49.0851 3516 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys

09:56:49.0851 3516 iaStorV - ok

09:56:50.0896 3516 igfx (dfeaf0a1d98d397035012c8e28d1520f) C:\Windows\system32\DRIVERS\igdkmd64.sys

09:56:51.0145 3516 igfx - ok

09:56:51.0847 3516 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys

09:56:51.0847 3516 iirsp - ok

09:56:52.0643 3516 IntcAzAudAddService (b16fc828ce7a76a8f1ce682e6ead2627) C:\Windows\system32\drivers\RTKVHD64.sys

09:56:52.0659 3516 IntcAzAudAddService - ok

09:56:53.0251 3516 IntcHdmiAddService (88a20fa54c73ded4e8dac764e9130ae9) C:\Windows\system32\drivers\IntcHdmi.sys

09:56:53.0267 3516 IntcHdmiAddService - ok

09:56:54.0031 3516 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys

09:56:54.0031 3516 intelide - ok

09:56:54.0874 3516 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys

09:56:54.0874 3516 intelppm - ok

09:56:55.0794 3516 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys

09:56:55.0810 3516 IpFilterDriver - ok

09:56:56.0527 3516 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys

09:56:56.0527 3516 IPMIDRV - ok

09:56:57.0058 3516 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys

09:56:57.0058 3516 IPNAT - ok

09:56:57.0635 3516 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys

09:56:57.0651 3516 IRENUM - ok

09:56:58.0119 3516 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys

09:56:58.0119 3516 isapnp - ok

09:56:58.0633 3516 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys

09:56:58.0633 3516 iScsiPrt - ok

09:56:59.0211 3516 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys

09:56:59.0211 3516 kbdclass - ok

09:56:59.0772 3516 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys

09:56:59.0772 3516 kbdhid - ok

09:57:00.0521 3516 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys

09:57:00.0521 3516 KSecDD - ok

09:57:01.0098 3516 KSecPkg (bbe1bf6d9b661c354d4857d5fadb943b) C:\Windows\system32\Drivers\ksecpkg.sys

09:57:01.0098 3516 KSecPkg - ok

09:57:01.0660 3516 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys

09:57:01.0660 3516 ksthunk - ok

09:57:02.0596 3516 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys

09:57:02.0596 3516 lltdio - ok

09:57:03.0859 3516 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys

09:57:03.0859 3516 LSI_FC - ok

09:57:05.0061 3516 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys

09:57:05.0170 3516 LSI_SAS - ok

09:57:05.0794 3516 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys

09:57:05.0794 3516 LSI_SAS2 - ok

09:57:06.0511 3516 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys

09:57:06.0511 3516 LSI_SCSI - ok

09:57:06.0979 3516 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys

09:57:06.0995 3516 luafv - ok

09:57:07.0479 3516 MBAMProtector (23a854450dab5c9b7a42ab9be6f2e4bd) C:\Windows\system32\drivers\mbam.sys

09:57:07.0479 3516 MBAMProtector - ok

09:57:08.0009 3516 mdmxsdk (e4f44ec214b3e381e1fc844a02926666) C:\Windows\system32\DRIVERS\mdmxsdk.sys

09:57:08.0009 3516 mdmxsdk - ok

09:57:08.0508 3516 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys

09:57:08.0508 3516 megasas - ok

09:57:09.0039 3516 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys

09:57:09.0039 3516 MegaSR - ok

09:57:09.0600 3516 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys

09:57:09.0600 3516 Modem - ok

09:57:10.0053 3516 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys

09:57:10.0053 3516 monitor - ok

09:57:10.0599 3516 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys

09:57:10.0599 3516 mouclass - ok

09:57:11.0285 3516 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys

09:57:11.0285 3516 mouhid - ok

09:57:11.0753 3516 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys

09:57:11.0753 3516 mountmgr - ok

09:57:12.0237 3516 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys

09:57:12.0237 3516 mpio - ok

09:57:12.0673 3516 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys

09:57:12.0673 3516 mpsdrv - ok

09:57:13.0173 3516 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys

09:57:13.0173 3516 MRxDAV - ok

09:57:13.0703 3516 mrxsmb (cfdcd8ca87c2a657debc150ac35b5e08) C:\Windows\system32\DRIVERS\mrxsmb.sys

09:57:13.0703 3516 mrxsmb - ok

09:57:14.0327 3516 mrxsmb10 (1bee517b220b7f024f411aec1571dd5a) C:\Windows\system32\DRIVERS\mrxsmb10.sys

09:57:14.0327 3516 mrxsmb10 - ok

09:57:14.0842 3516 mrxsmb20 (6b2d5fef385828b6e485c1c90afb8195) C:\Windows\system32\DRIVERS\mrxsmb20.sys

09:57:14.0842 3516 mrxsmb20 - ok

09:57:15.0481 3516 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys

09:57:15.0481 3516 msahci - ok

09:57:16.0246 3516 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys

09:57:16.0246 3516 msdsm - ok

09:57:17.0135 3516 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys

09:57:17.0135 3516 Msfs - ok

09:57:17.0790 3516 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys

09:57:17.0790 3516 mshidkmdf - ok

09:57:18.0367 3516 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys

09:57:18.0367 3516 msisadrv - ok

09:57:19.0007 3516 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys

09:57:19.0007 3516 MSKSSRV - ok

09:57:19.0584 3516 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys

09:57:19.0584 3516 MSPCLOCK - ok

09:57:20.0130 3516 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys

09:57:20.0130 3516 MSPQM - ok

09:57:20.0505 3516 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys

09:57:20.0520 3516 MsRPC - ok

09:57:21.0129 3516 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys

09:57:21.0129 3516 mssmbios - ok

09:57:21.0768 3516 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys

09:57:21.0768 3516 MSTEE - ok

09:57:22.0111 3516 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys

09:57:22.0127 3516 MTConfig - ok

09:57:22.0470 3516 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys

09:57:22.0470 3516 Mup - ok

09:57:22.0923 3516 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys

09:57:22.0938 3516 NativeWifiP - ok

09:57:23.0344 3516 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys

09:57:23.0375 3516 NDIS - ok

09:57:23.0749 3516 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys

09:57:23.0749 3516 NdisCap - ok

09:57:24.0139 3516 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys

09:57:24.0139 3516 NdisTapi - ok

09:57:24.0529 3516 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys

09:57:24.0529 3516 Ndisuio - ok

09:57:24.0904 3516 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys

09:57:24.0919 3516 NdisWan - ok

09:57:25.0309 3516 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys

09:57:25.0309 3516 NDProxy - ok

09:57:26.0199 3516 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys

09:57:26.0199 3516 NetBIOS - ok

09:57:26.0776 3516 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys

09:57:26.0807 3516 NetBT - ok

09:57:27.0603 3516 netw5v64 (64428dfdaf6e88366cb51f45a79c5f69) C:\Windows\system32\DRIVERS\netw5v64.sys

09:57:27.0743 3516 netw5v64 - ok

09:57:28.0164 3516 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys

09:57:28.0164 3516 nfrd960 - ok

09:57:28.0523 3516 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys

09:57:28.0539 3516 Npfs - ok

09:57:28.0913 3516 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys

09:57:28.0929 3516 nsiproxy - ok

09:57:29.0459 3516 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys

09:57:29.0521 3516 Ntfs - ok

09:57:29.0911 3516 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys

09:57:29.0911 3516 Null - ok

09:57:30.0270 3516 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys

09:57:30.0286 3516 nvraid - ok

09:57:30.0691 3516 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys

09:57:30.0691 3516 nvstor - ok

09:57:31.0081 3516 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys

09:57:31.0097 3516 nv_agp - ok

09:57:31.0487 3516 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys

09:57:31.0487 3516 ohci1394 - ok

09:57:31.0861 3516 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys

09:57:31.0877 3516 Parport - ok

09:57:32.0267 3516 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys

09:57:32.0267 3516 partmgr - ok

09:57:34.0357 3516 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys

09:57:34.0357 3516 pci - ok

09:57:35.0262 3516 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys

09:57:35.0262 3516 pciide - ok

09:57:37.0134 3516 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys

09:57:37.0181 3516 pcmcia - ok

09:57:38.0601 3516 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys

09:57:38.0601 3516 pcw - ok

09:57:39.0708 3516 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys

09:57:39.0724 3516 PEAUTH - ok

09:57:40.0426 3516 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys

09:57:40.0426 3516 PptpMiniport - ok

09:57:42.0157 3516 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys

09:57:42.0157 3516 Processor - ok

09:57:44.0529 3516 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys

09:57:44.0529 3516 Psched - ok

09:57:46.0089 3516 PxHlpa64 (aed797cca02783296c68aa10d0cff8a9) C:\Windows\system32\Drivers\PxHlpa64.sys

09:57:46.0089 3516 PxHlpa64 - ok

09:57:46.0884 3516 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys

09:57:46.0931 3516 ql2300 - ok

09:57:47.0508 3516 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys

09:57:47.0508 3516 ql40xx - ok

09:57:48.0600 3516 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys

09:57:48.0600 3516 QWAVEdrv - ok

09:57:49.0739 3516 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys

09:57:49.0755 3516 RasAcd - ok

09:57:50.0472 3516 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys

09:57:50.0472 3516 RasAgileVpn - ok

09:57:50.0956 3516 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys

09:57:50.0956 3516 Rasl2tp - ok

09:57:51.0564 3516 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys

09:57:51.0564 3516 RasPppoe - ok

09:57:52.0173 3516 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys

09:57:52.0173 3516 RasSstp - ok

09:57:52.0656 3516 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys

09:57:52.0656 3516 rdbss - ok

09:57:53.0031 3516 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys

09:57:53.0046 3516 rdpbus - ok

09:57:53.0421 3516 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys

09:57:53.0421 3516 RDPCDD - ok

09:57:53.0811 3516 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys

09:57:53.0811 3516 RDPENCDD - ok

09:57:54.0201 3516 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys

09:57:54.0201 3516 RDPREFMP - ok

09:57:54.0591 3516 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys

09:57:54.0606 3516 RDPWD - ok

09:57:55.0012 3516 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys

09:57:55.0027 3516 rdyboost - ok

09:57:55.0433 3516 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys

09:57:55.0449 3516 RFCOMM - ok

09:57:55.0839 3516 rimsptsk (258aadb43e3f3468b5cf8cb0f84872c2) C:\Windows\system32\DRIVERS\rimssn64.sys

09:57:55.0839 3516 rimsptsk - ok

09:57:56.0197 3516 risdptsk (71e182a0de1cecb3f912960716345405) C:\Windows\system32\DRIVERS\risdsn64.sys

09:57:56.0197 3516 risdptsk - ok

09:57:56.0587 3516 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys

09:57:56.0587 3516 rspndr - ok

09:57:56.0977 3516 RTHDMIAzAudService (34f05c417f038ffa3bef69b798d7d7dd) C:\Windows\system32\drivers\RtHDMIVX.sys

09:57:56.0993 3516 RTHDMIAzAudService - ok

09:57:57.0087 3516 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS

09:57:57.0087 3516 SASDIFSV - ok

09:57:57.0118 3516 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS

09:57:57.0118 3516 SASKUTIL - ok

09:57:57.0492 3516 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys

09:57:57.0492 3516 sbp2port - ok

09:57:57.0851 3516 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys

09:57:57.0851 3516 scfilter - ok

09:57:58.0272 3516 sdbus (54e47ad086782d3ae9417c155cdceb9b) C:\Windows\system32\DRIVERS\sdbus.sys

09:57:58.0272 3516 sdbus - ok

09:57:58.0678 3516 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys

09:57:58.0678 3516 secdrv - ok

09:57:59.0068 3516 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys

09:57:59.0068 3516 Serenum - ok

09:57:59.0442 3516 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys

09:57:59.0442 3516 Serial - ok

09:57:59.0832 3516 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys

09:57:59.0832 3516 sermouse - ok

09:58:00.0253 3516 SFEP (70f9c476b62de4f2823e918a6c181ade) C:\Windows\system32\DRIVERS\SFEP.sys

09:58:00.0253 3516 SFEP - ok

09:58:00.0628 3516 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys

09:58:00.0628 3516 sffdisk - ok

09:58:01.0002 3516 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys

09:58:01.0002 3516 sffp_mmc - ok

09:58:01.0377 3516 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys

09:58:01.0377 3516 sffp_sd - ok

09:58:01.0767 3516 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys

09:58:01.0767 3516 sfloppy - ok

09:58:02.0172 3516 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys

09:58:02.0172 3516 SiSRaid2 - ok

09:58:02.0547 3516 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys

09:58:02.0562 3516 SiSRaid4 - ok

09:58:02.0983 3516 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys

09:58:02.0999 3516 Smb - ok

09:58:03.0451 3516 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys

09:58:03.0451 3516 spldr - ok

09:58:03.0873 3516 srv (ec8f67289105bf270498095f14963464) C:\Windows\system32\DRIVERS\srv.sys

09:58:03.0904 3516 srv - ok

09:58:04.0309 3516 srv2 (f773d2ed090b7baa1c1a034f3ca476c8) C:\Windows\system32\DRIVERS\srv2.sys

09:58:04.0325 3516 srv2 - ok

09:58:04.0715 3516 SrvHsfHDA (0c4540311e11664b245a263e1154cef8) C:\Windows\system32\DRIVERS\VSTAZL6.SYS

09:58:04.0715 3516 SrvHsfHDA - ok

09:58:05.0214 3516 SrvHsfV92 (02071d207a9858fbe3a48cbfd59c4a04) C:\Windows\system32\DRIVERS\VSTDPV6.SYS

09:58:05.0292 3516 SrvHsfV92 - ok

09:58:05.0682 3516 SrvHsfWinac (18e40c245dbfaf36fd0134a7ef2df396) C:\Windows\system32\DRIVERS\VSTCNXT6.SYS

09:58:05.0698 3516 SrvHsfWinac - ok

09:58:06.0088 3516 srvnet (26e84d3649019c3244622e654dfcd75b) C:\Windows\system32\DRIVERS\srvnet.sys

09:58:06.0103 3516 srvnet - ok

09:58:06.0462 3516 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys

09:58:06.0462 3516 stexstor - ok

09:58:06.0821 3516 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys

09:58:06.0837 3516 swenum - ok

09:58:07.0289 3516 Tcpip (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\drivers\tcpip.sys

09:58:07.0351 3516 Tcpip - ok

09:58:07.0788 3516 TCPIP6 (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\DRIVERS\tcpip.sys

09:58:07.0804 3516 TCPIP6 - ok

09:58:08.0178 3516 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys

09:58:08.0178 3516 tcpipreg - ok

09:58:08.0553 3516 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys

09:58:08.0553 3516 TDPIPE - ok

09:58:08.0943 3516 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys

09:58:08.0943 3516 TDTCP - ok

09:58:09.0333 3516 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys

09:58:09.0333 3516 tdx - ok

09:58:09.0707 3516 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys

09:58:09.0707 3516 TermDD - ok

09:58:10.0128 3516 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys

09:58:10.0128 3516 tssecsrv - ok

09:58:10.0518 3516 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys

09:58:10.0518 3516 tunnel - ok

09:58:10.0893 3516 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys

09:58:10.0893 3516 uagp35 - ok

09:58:11.0298 3516 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys

09:58:11.0314 3516 udfs - ok

09:58:11.0704 3516 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys

09:58:11.0704 3516 uliagpkx - ok

09:58:12.0078 3516 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys

09:58:12.0078 3516 umbus - ok

09:58:12.0437 3516 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys

09:58:12.0437 3516 UmPass - ok

09:58:12.0827 3516 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys

09:58:12.0827 3516 usbccgp - ok

09:58:13.0201 3516 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys

09:58:13.0201 3516 usbcir - ok

09:58:13.0576 3516 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys

09:58:13.0576 3516 usbehci - ok

09:58:13.0981 3516 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys

09:58:13.0981 3516 usbhub - ok

09:58:14.0356 3516 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys

09:58:14.0371 3516 usbohci - ok

09:58:14.0715 3516 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys

09:58:14.0715 3516 usbprint - ok

09:58:15.0073 3516 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS

09:58:15.0073 3516 USBSTOR - ok

09:58:15.0463 3516 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys

09:58:15.0463 3516 usbuhci - ok

09:58:15.0853 3516 usbvideo (d501e12614b00a3252073101d6a1a74b) C:\Windows\system32\Drivers\usbvideo.sys

09:58:15.0869 3516 usbvideo - ok

09:58:16.0337 3516 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys

09:58:16.0337 3516 vdrvroot - ok

09:58:16.0680 3516 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys

09:58:16.0696 3516 vga - ok

09:58:17.0039 3516 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys

09:58:17.0039 3516 VgaSave - ok

09:58:17.0413 3516 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys

09:58:17.0429 3516 vhdmp - ok

09:58:17.0835 3516 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys

09:58:17.0835 3516 viaide - ok

09:58:18.0240 3516 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys

09:58:18.0240 3516 volmgr - ok

09:58:18.0646 3516 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys

09:58:18.0646 3516 volmgrx - ok

09:58:19.0036 3516 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys

09:58:19.0036 3516 volsnap - ok

09:58:19.0410 3516 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys

09:58:19.0410 3516 vsmraid - ok

09:58:19.0785 3516 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys

09:58:19.0785 3516 vwifibus - ok

09:58:20.0159 3516 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys

09:58:20.0159 3516 vwififlt - ok

09:58:20.0549 3516 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys

09:58:20.0549 3516 WacomPen - ok

09:58:20.0923 3516 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys

09:58:20.0923 3516 WANARP - ok

09:58:20.0939 3516 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys

09:58:20.0939 3516 Wanarpv6 - ok

09:58:21.0345 3516 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys

09:58:21.0345 3516 Wd - ok

09:58:21.0766 3516 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys

09:58:21.0813 3516 Wdf01000 - ok

09:58:22.0203 3516 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys

09:58:22.0203 3516 WfpLwf - ok

09:58:22.0577 3516 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys

09:58:22.0577 3516 WIMMount - ok

09:58:22.0998 3516 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys

09:58:22.0998 3516 WmiAcpi - ok

09:58:23.0404 3516 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys

09:58:23.0404 3516 ws2ifsl - ok

09:58:23.0809 3516 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys

09:58:23.0809 3516 WudfPf - ok

09:58:24.0184 3516 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys

09:58:24.0199 3516 WUDFRd - ok

09:58:24.0558 3516 XAudio (e8f3fa126a06f8e7088f63757112a186) C:\Windows\system32\DRIVERS\XAudio64.sys

09:58:24.0558 3516 XAudio - ok

09:58:24.0995 3516 yukonw7 (6affd75c6807b3dd3ab018e27b88ef95) C:\Windows\system32\DRIVERS\yk62x64.sys

09:58:25.0026 3516 yukonw7 - ok

09:58:25.0073 3516 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0

09:58:25.0135 3516 \Device\Harddisk0\DR0 - ok

09:58:25.0135 3516 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk3\DR3

09:58:25.0151 3516 \Device\Harddisk3\DR3 - ok

09:58:25.0151 3516 Boot (0x1200) (ee4b1421d69eac219b4fb1afe5a4ec25) \Device\Harddisk0\DR0\Partition0

09:58:25.0151 3516 \Device\Harddisk0\DR0\Partition0 - ok

09:58:25.0182 3516 Boot (0x1200) (0d2422a91ad7766ca9f020ab359d191a) \Device\Harddisk0\DR0\Partition1

09:58:25.0182 3516 \Device\Harddisk0\DR0\Partition1 - ok

09:58:25.0182 3516 Boot (0x1200) (e02346bf408dec250209b3a8817fcdb9) \Device\Harddisk3\DR3\Partition0

09:58:25.0182 3516 \Device\Harddisk3\DR3\Partition0 - ok

09:58:25.0182 3516 ============================================================

09:58:25.0182 3516 Scan finished

09:58:25.0182 3516 ============================================================

09:58:25.0198 3508 Detected object count: 0

09:58:25.0198 3508 Actual detected object count: 0

09:59:02.0872 3428 Deinitialize success

Elise · October 18, 2011

What problems are you still having at this point?

Nighttwish · October 19, 2011

At this point, all the scans come back clean. CPU usage still seems to be erratic. It's not constantly running at 90-100% but still jumping between 5-70% every second.

Nighttwish · October 19, 2011

Will I be safe if I try to reformat again?

Elise · October 19, 2011

Can you see in TaskManager which process is spiking now? I would not reformat before determining what is causing the spikes (after all, it can also be a hardware related problem).

Besides this, any other problem left?

Nighttwish · October 19, 2011

When I sort the list by CPU usage, the top program changes between iexplore.exe, dwm.exe, wuauclt.exe, and taskmgr.exe. The second highest bounces between iexplore.exe, taskmgr.exe, taskhost.exe, dwm.exe, ccc.exe,and csrss.exe. The third highest bounces between iexplore.exe, MOM.exe, ccc.exe, csrss.exe and dwm.exe. The spikes now bounce around 50-60%. Other than the spikes, I have not noticed anything else.

Elise · October 19, 2011

It looks like you have two harddisks. Is one of them external? If so, can you disconnect it and see if that makes a difference?

Nighttwish · October 19, 2011

I did not have any externals connected.

Nighttwish · October 20, 2011

I ran another tdss scan and it came back with threats. The system seems clean until I switch back on the internet.

18:16:19.0474 4732 TDSS rootkit removing tool 2.6.10.0 Oct 17 2011 15:43:23

18:16:19.0926 4732 ============================================================

18:16:19.0926 4732 Current date / time: 2011/10/19 18:16:19.0926

18:16:19.0926 4732 SystemInfo:

18:16:19.0926 4732

18:16:19.0926 4732 OS Version: 6.1.7600 ServicePack: 0.0

18:16:19.0926 4732 Product type: Workstation

18:16:19.0926 4732 ComputerName: NIGHTWISH

18:16:19.0926 4732 UserName: DanielSon

18:16:19.0926 4732 Windows directory: C:\Windows

18:16:19.0926 4732 System windows directory: C:\Windows

18:16:19.0926 4732 Running under WOW64

18:16:19.0926 4732 Processor architecture: Intel x64

18:16:19.0926 4732 Number of processors: 2

18:16:19.0926 4732 Page size: 0x1000

18:16:19.0926 4732 Boot type: Normal boot

18:16:19.0926 4732 ============================================================

18:16:20.0441 4732 Initialize success

18:16:32.0172 2008 ============================================================

18:16:32.0172 2008 Scan started

18:16:32.0172 2008 Mode: Manual; SigCheck; TDLFS;

18:16:32.0172 2008 ============================================================

18:16:33.0982 2008 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys

18:16:34.0887 2008 1394ohci - ok

18:16:35.0308 2008 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys

18:16:35.0324 2008 ACPI - ok

18:16:35.0682 2008 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys

18:16:36.0166 2008 AcpiPmi - ok

18:16:36.0587 2008 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys

18:16:36.0603 2008 adp94xx - ok

18:16:37.0024 2008 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys

18:16:37.0055 2008 adpahci - ok

18:16:37.0430 2008 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys

18:16:37.0445 2008 adpu320 - ok

18:16:37.0882 2008 AFD (6ef20ddf3172e97d69f596fb90602f29) C:\Windows\system32\drivers\afd.sys

18:16:38.0178 2008 AFD - ok

18:16:38.0631 2008 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys

18:16:38.0646 2008 agp440 - ok

18:16:39.0239 2008 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys

18:16:39.0255 2008 aliide - ok

18:16:39.0660 2008 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys

18:16:39.0676 2008 amdide - ok

18:16:40.0113 2008 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys

18:16:40.0222 2008 AmdK8 - ok

18:16:40.0581 2008 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys

18:16:40.0815 2008 AmdPPM - ok

18:16:41.0205 2008 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys

18:16:41.0220 2008 amdsata - ok

18:16:41.0782 2008 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys

18:16:41.0798 2008 amdsbs - ok

18:16:42.0437 2008 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys

18:16:42.0437 2008 amdxata - ok

18:16:42.0936 2008 ApfiltrService (56bd886820c4aedf493cfcdf1ccfb004) C:\Windows\system32\DRIVERS\Apfiltr.sys

18:16:42.0968 2008 ApfiltrService - ok

18:16:43.0514 2008 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys

18:16:43.0638 2008 AppID - ok

18:16:44.0247 2008 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys

18:16:44.0262 2008 arc - ok

18:16:44.0824 2008 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys

18:16:44.0840 2008 arcsas - ok

18:16:45.0339 2008 ArcSoftKsUFilter (c130bc4a51b1382b2be8e44579ec4c0a) C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys

18:16:45.0354 2008 ArcSoftKsUFilter - ok

18:16:45.0900 2008 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys

18:16:46.0025 2008 AsyncMac - ok

18:16:46.0602 2008 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys

18:16:46.0618 2008 atapi - ok

18:16:47.0242 2008 athr (5d4529ac4156e16bedb01441ae0cf984) C:\Windows\system32\DRIVERS\athrx.sys

18:16:47.0351 2008 athr - ok

18:16:47.0991 2008 atikmdag (de0ede41bc530f1759c6fffcb8c7a0cf) C:\Windows\system32\DRIVERS\atikmdag.sys

18:16:48.0256 2008 atikmdag - ok

18:16:48.0911 2008 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys

18:16:48.0974 2008 b06bdrv - ok

18:16:49.0598 2008 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys

18:16:49.0676 2008 b57nd60a - ok

18:16:50.0066 2008 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys

18:16:50.0175 2008 Beep - ok

18:16:50.0658 2008 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys

18:16:50.0705 2008 blbdrive - ok

18:16:51.0080 2008 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys

18:16:51.0189 2008 bowser - ok

18:16:51.0563 2008 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys

18:16:51.0641 2008 BrFiltLo - ok

18:16:52.0047 2008 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys

18:16:52.0109 2008 BrFiltUp - ok

18:16:52.0718 2008 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys

18:16:52.0796 2008 Brserid - ok

18:16:53.0264 2008 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys

18:16:53.0326 2008 BrSerWdm - ok

18:16:53.0903 2008 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys

18:16:53.0966 2008 BrUsbMdm - ok

18:16:54.0543 2008 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys

18:16:54.0558 2008 BrUsbSer - ok

18:16:55.0307 2008 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\DRIVERS\BthEnum.sys

18:16:55.0323 2008 BthEnum - ok

18:16:55.0822 2008 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys

18:16:55.0884 2008 BTHMODEM - ok

18:16:56.0836 2008 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys

18:16:56.0867 2008 BthPan - ok

18:16:57.0413 2008 BTHPORT (a51fa9d0e85d5adabef72e67f386309c) C:\Windows\system32\Drivers\BTHport.sys

18:16:57.0476 2008 BTHPORT - ok

18:16:59.0067 2008 BTHUSB (f740b9a16b2c06700f2130e19986bf3b) C:\Windows\system32\Drivers\BTHUSB.sys

18:16:59.0098 2008 BTHUSB - ok

18:16:59.0129 2008 catchme - ok

18:16:59.0691 2008 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys

18:16:59.0738 2008 cdfs - ok

18:17:00.0206 2008 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys

18:17:00.0221 2008 cdrom - ok

18:17:00.0830 2008 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys

18:17:00.0861 2008 circlass - ok

18:17:01.0376 2008 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys

18:17:01.0391 2008 CLFS - ok

18:17:01.0968 2008 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys

18:17:02.0000 2008 CmBatt - ok

18:17:02.0904 2008 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys

18:17:02.0920 2008 cmdide - ok

18:17:03.0560 2008 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys

18:17:03.0716 2008 CNG - ok

18:17:04.0308 2008 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys

18:17:04.0324 2008 Compbatt - ok

18:17:04.0964 2008 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys

18:17:04.0995 2008 CompositeBus - ok

18:17:05.0650 2008 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys

18:17:05.0666 2008 crcdisk - ok

18:17:06.0368 2008 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys

18:17:06.0446 2008 DfsC - ok

18:17:07.0101 2008 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys

18:17:07.0148 2008 discache - ok

18:17:07.0662 2008 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys

18:17:07.0662 2008 Disk - ok

18:17:08.0224 2008 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys

18:17:08.0240 2008 drmkaud - ok

18:17:08.0786 2008 DXGKrnl (ebce0b0924835f635f620d19f0529dce) C:\Windows\System32\drivers\dxgkrnl.sys

18:17:08.0895 2008 DXGKrnl - ok

18:17:09.0503 2008 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys

18:17:09.0628 2008 ebdrv - ok

18:17:10.0236 2008 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys

18:17:10.0252 2008 elxstor - ok

18:17:10.0970 2008 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys

18:17:10.0985 2008 ErrDev - ok

18:17:11.0562 2008 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys

18:17:11.0656 2008 exfat - ok

18:17:12.0077 2008 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys

18:17:12.0155 2008 fastfat - ok

18:17:12.0592 2008 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys

18:17:12.0639 2008 fdc - ok

18:17:13.0263 2008 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys

18:17:13.0278 2008 FileInfo - ok

18:17:13.0793 2008 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys

18:17:13.0871 2008 Filetrace - ok

18:17:14.0511 2008 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys

18:17:14.0542 2008 flpydisk - ok

18:17:15.0088 2008 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys

18:17:15.0104 2008 FltMgr - ok

18:17:15.0572 2008 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys

18:17:15.0587 2008 FsDepends - ok

18:17:16.0086 2008 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys

18:17:16.0086 2008 Fs_Rec - ok

18:17:16.0726 2008 fvevol (b8b2a6e1558f8f5de5ce431c5b2c7b09) C:\Windows\system32\DRIVERS\fvevol.sys

18:17:16.0757 2008 fvevol - ok

18:17:17.0303 2008 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys

18:17:17.0303 2008 gagp30kx - ok

18:17:17.0818 2008 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys

18:17:17.0865 2008 hcw85cir - ok

18:17:18.0738 2008 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys

18:17:18.0832 2008 HdAudAddService - ok

18:17:19.0503 2008 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys

18:17:19.0550 2008 HDAudBus - ok

18:17:20.0033 2008 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys

18:17:20.0064 2008 HidBatt - ok

18:17:20.0673 2008 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys

18:17:20.0735 2008 HidBth - ok

18:17:21.0234 2008 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys

18:17:21.0266 2008 HidIr - ok

18:17:21.0671 2008 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys

18:17:21.0687 2008 HidUsb - ok

18:17:22.0155 2008 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys

18:17:22.0170 2008 HpSAMD - ok

18:17:22.0576 2008 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys

18:17:22.0638 2008 HTTP - ok

18:17:23.0028 2008 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys

18:17:23.0028 2008 hwpolicy - ok

18:17:23.0418 2008 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys

18:17:23.0434 2008 i8042prt - ok

18:17:23.0886 2008 iaStor (1d004cb1da6323b1f55caef7f94b61d9) C:\Windows\system32\DRIVERS\iaStor.sys

18:17:23.0902 2008 iaStor - ok

18:17:24.0323 2008 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys

18:17:24.0339 2008 iaStorV - ok

18:17:25.0228 2008 igfx (dfeaf0a1d98d397035012c8e28d1520f) C:\Windows\system32\DRIVERS\igdkmd64.sys

18:17:25.0493 2008 igfx ( UnsignedFile.Multi.Generic ) - warning

18:17:25.0493 2008 igfx - detected UnsignedFile.Multi.Generic (1)

18:17:26.0632 2008 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys

18:17:26.0648 2008 iirsp - ok

18:17:27.0708 2008 IntcAzAudAddService (b16fc828ce7a76a8f1ce682e6ead2627) C:\Windows\system32\drivers\RTKVHD64.sys

18:17:27.0818 2008 IntcAzAudAddService - ok

18:17:28.0660 2008 IntcHdmiAddService (88a20fa54c73ded4e8dac764e9130ae9) C:\Windows\system32\drivers\IntcHdmi.sys

18:17:28.0660 2008 IntcHdmiAddService ( UnsignedFile.Multi.Generic ) - warning

18:17:28.0660 2008 IntcHdmiAddService - detected UnsignedFile.Multi.Generic (1)

18:17:29.0612 2008 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys

18:17:29.0627 2008 intelide - ok

18:17:30.0376 2008 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys

18:17:30.0407 2008 intelppm - ok

18:17:31.0281 2008 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys

18:17:31.0328 2008 IpFilterDriver - ok

18:17:32.0061 2008 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys

18:17:32.0076 2008 IPMIDRV - ok

18:17:33.0075 2008 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys

18:17:33.0137 2008 IPNAT - ok

18:17:33.0902 2008 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys

18:17:34.0011 2008 IRENUM - ok

18:17:34.0884 2008 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys

18:17:34.0900 2008 isapnp - ok

18:17:36.0008 2008 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys

18:17:36.0023 2008 iScsiPrt - ok

18:17:36.0959 2008 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys

18:17:36.0975 2008 kbdclass - ok

18:17:37.0755 2008 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys

18:17:37.0786 2008 kbdhid - ok

18:17:38.0738 2008 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys

18:17:38.0769 2008 KSecDD - ok

18:17:39.0518 2008 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys

18:17:39.0533 2008 KSecPkg - ok

18:17:40.0438 2008 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys

18:17:40.0500 2008 ksthunk - ok

18:17:41.0577 2008 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys

18:17:41.0639 2008 lltdio - ok

18:17:42.0497 2008 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys

18:17:42.0528 2008 LSI_FC - ok

18:17:43.0277 2008 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys

18:17:43.0293 2008 LSI_SAS - ok

18:17:44.0369 2008 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys

18:17:44.0369 2008 LSI_SAS2 - ok

18:17:45.0180 2008 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys

18:17:45.0212 2008 LSI_SCSI - ok

18:17:46.0444 2008 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys

18:17:46.0538 2008 luafv - ok

18:17:47.0333 2008 MBAMProtector (23a854450dab5c9b7a42ab9be6f2e4bd) C:\Windows\system32\drivers\mbam.sys

18:17:47.0349 2008 MBAMProtector - ok

18:17:48.0144 2008 mdmxsdk (e4f44ec214b3e381e1fc844a02926666) C:\Windows\system32\DRIVERS\mdmxsdk.sys

18:17:48.0207 2008 mdmxsdk - ok

18:17:49.0080 2008 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys

18:17:49.0096 2008 megasas - ok

18:17:49.0798 2008 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys

18:17:49.0829 2008 MegaSR - ok

18:17:50.0609 2008 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys

18:17:50.0672 2008 Modem - ok

18:17:51.0639 2008 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys

18:17:51.0670 2008 monitor - ok

18:17:52.0590 2008 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys

18:17:52.0606 2008 mouclass - ok

18:17:53.0480 2008 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys

18:17:53.0495 2008 mouhid - ok

18:17:54.0369 2008 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys

18:17:54.0384 2008 mountmgr - ok

18:17:54.0946 2008 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys

18:17:54.0962 2008 mpio - ok

18:17:55.0742 2008 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys

18:17:55.0804 2008 mpsdrv - ok

18:17:56.0834 2008 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys

18:17:56.0880 2008 MRxDAV - ok

18:17:57.0489 2008 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys

18:17:57.0536 2008 mrxsmb - ok

18:17:58.0160 2008 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys

18:17:58.0191 2008 mrxsmb10 - ok

18:17:59.0049 2008 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys

18:17:59.0080 2008 mrxsmb20 - ok

18:18:00.0203 2008 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys

18:18:00.0219 2008 msahci - ok

18:18:00.0905 2008 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys

18:18:00.0921 2008 msdsm - ok

18:18:01.0716 2008 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys

18:18:01.0779 2008 Msfs - ok

18:18:02.0668 2008 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys

18:18:02.0715 2008 mshidkmdf - ok

18:18:03.0588 2008 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys

18:18:03.0604 2008 msisadrv - ok

18:18:04.0587 2008 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys

18:18:04.0727 2008 MSKSSRV - ok

18:18:05.0648 2008 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys

18:18:05.0694 2008 MSPCLOCK - ok

18:18:06.0443 2008 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys

18:18:06.0552 2008 MSPQM - ok

18:18:07.0348 2008 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys

18:18:07.0379 2008 MsRPC - ok

18:18:08.0393 2008 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys

18:18:08.0409 2008 mssmbios - ok

18:18:09.0594 2008 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys

18:18:09.0641 2008 MSTEE - ok

18:18:10.0437 2008 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys

18:18:10.0484 2008 MTConfig - ok

18:18:11.0217 2008 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys

18:18:11.0232 2008 Mup - ok

18:18:12.0153 2008 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys

18:18:12.0200 2008 NativeWifiP - ok

18:18:13.0635 2008 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys

18:18:13.0744 2008 NDIS - ok

18:18:14.0508 2008 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys

18:18:14.0555 2008 NdisCap - ok

18:18:15.0413 2008 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys

18:18:15.0476 2008 NdisTapi - ok

18:18:16.0131 2008 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys

18:18:16.0193 2008 Ndisuio - ok

18:18:16.0880 2008 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys

18:18:17.0004 2008 NdisWan - ok

18:18:17.0691 2008 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys

18:18:17.0753 2008 NDProxy - ok

18:18:18.0393 2008 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys

18:18:18.0424 2008 NetBIOS - ok

18:18:19.0282 2008 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys

18:18:19.0329 2008 NetBT - ok

18:18:20.0452 2008 netw5v64 (64428dfdaf6e88366cb51f45a79c5f69) C:\Windows\system32\DRIVERS\netw5v64.sys

18:18:20.0764 2008 netw5v64 - ok

18:18:21.0388 2008 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys

18:18:21.0404 2008 nfrd960 - ok

18:18:22.0215 2008 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys

18:18:22.0418 2008 Npfs - ok

18:18:23.0026 2008 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys

18:18:23.0073 2008 nsiproxy - ok

18:18:23.0853 2008 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys

18:18:23.0946 2008 Ntfs - ok

18:18:24.0820 2008 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys

18:18:24.0882 2008 Null - ok

18:18:25.0787 2008 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys

18:18:25.0803 2008 nvraid - ok

18:18:26.0505 2008 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys

18:18:26.0520 2008 nvstor - ok

18:18:27.0222 2008 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys

18:18:27.0222 2008 nv_agp - ok

18:18:28.0003 2008 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys

18:18:28.0018 2008 ohci1394 - ok

18:18:29.0032 2008 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys

18:18:29.0063 2008 Parport - ok

18:18:29.0781 2008 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys

18:18:29.0797 2008 partmgr - ok

18:18:30.0545 2008 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys

18:18:30.0561 2008 pci - ok

18:18:31.0294 2008 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys

18:18:31.0294 2008 pciide - ok

18:18:32.0199 2008 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys

18:18:32.0215 2008 pcmcia - ok

18:18:32.0979 2008 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys

18:18:32.0995 2008 pcw - ok

18:18:33.0681 2008 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys

18:18:33.0775 2008 PEAUTH - ok

18:18:34.0789 2008 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys

18:18:34.0851 2008 PptpMiniport - ok

18:18:35.0662 2008 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys

18:18:35.0693 2008 Processor - ok

18:18:36.0614 2008 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys

18:18:36.0676 2008 Psched - ok

18:18:37.0394 2008 PxHlpa64 (aed797cca02783296c68aa10d0cff8a9) C:\Windows\system32\Drivers\PxHlpa64.sys

18:18:37.0425 2008 PxHlpa64 - ok

18:18:38.0252 2008 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys

18:18:38.0345 2008 ql2300 - ok

18:18:39.0422 2008 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys

18:18:39.0437 2008 ql40xx - ok

18:18:39.0999 2008 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys

18:18:40.0046 2008 QWAVEdrv - ok

18:18:40.0857 2008 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys

18:18:40.0888 2008 RasAcd - ok

18:18:41.0824 2008 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys

18:18:41.0871 2008 RasAgileVpn - ok

18:18:42.0620 2008 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys

18:18:42.0682 2008 Rasl2tp - ok

18:18:43.0369 2008 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys

18:18:43.0415 2008 RasPppoe - ok

18:18:44.0039 2008 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys

18:18:44.0086 2008 RasSstp - ok

18:18:44.0929 2008 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys

18:18:45.0038 2008 rdbss - ok

18:18:45.0833 2008 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys

18:18:45.0865 2008 rdpbus - ok

18:18:46.0535 2008 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys

18:18:46.0598 2008 RDPCDD - ok

18:18:47.0269 2008 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys

18:18:47.0315 2008 RDPENCDD - ok

18:18:47.0908 2008 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys

18:18:47.0939 2008 RDPREFMP - ok

18:18:48.0782 2008 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys

18:18:48.0860 2008 RDPWD - ok

18:18:50.0014 2008 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys

18:18:50.0030 2008 rdyboost - ok

18:18:50.0747 2008 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys

18:18:50.0841 2008 RFCOMM - ok

18:18:51.0621 2008 rimsptsk (258aadb43e3f3468b5cf8cb0f84872c2) C:\Windows\system32\DRIVERS\rimssn64.sys

18:18:51.0683 2008 rimsptsk - ok

18:18:52.0401 2008 risdptsk (71e182a0de1cecb3f912960716345405) C:\Windows\system32\DRIVERS\risdsn64.sys

18:18:52.0432 2008 risdptsk - ok

18:18:53.0337 2008 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys

18:18:53.0399 2008 rspndr - ok

18:18:53.0992 2008 RTHDMIAzAudService (34f05c417f038ffa3bef69b798d7d7dd) C:\Windows\system32\drivers\RtHDMIVX.sys

18:18:54.0055 2008 RTHDMIAzAudService - ok

18:18:54.0195 2008 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS

18:18:54.0211 2008 SASDIFSV - ok

18:18:54.0398 2008 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS

18:18:54.0413 2008 SASKUTIL - ok

18:18:55.0505 2008 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys

18:18:55.0521 2008 sbp2port - ok

18:18:56.0457 2008 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys

18:18:56.0551 2008 scfilter - ok

18:18:57.0268 2008 sdbus (54e47ad086782d3ae9417c155cdceb9b) C:\Windows\system32\DRIVERS\sdbus.sys

18:18:57.0299 2008 sdbus - ok

18:18:57.0939 2008 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys

18:18:58.0001 2008 secdrv - ok

18:18:58.0625 2008 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys

18:18:58.0657 2008 Serenum - ok

18:18:59.0343 2008 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys

18:18:59.0421 2008 Serial - ok

18:19:00.0419 2008 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys

18:19:00.0435 2008 sermouse - ok

18:19:01.0153 2008 SFEP (70f9c476b62de4f2823e918a6c181ade) C:\Windows\system32\DRIVERS\SFEP.sys

18:19:01.0168 2008 SFEP - ok

18:19:02.0011 2008 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys

18:19:02.0042 2008 sffdisk - ok

18:19:03.0009 2008 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys

18:19:03.0025 2008 sffp_mmc - ok

18:19:03.0898 2008 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys

18:19:03.0929 2008 sffp_sd - ok

18:19:04.0507 2008 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys

18:19:04.0522 2008 sfloppy - ok

18:19:05.0099 2008 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys

18:19:05.0099 2008 SiSRaid2 - ok

18:19:05.0739 2008 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys

18:19:05.0755 2008 SiSRaid4 - ok

18:19:06.0363 2008 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys

18:19:06.0441 2008 Smb - ok

18:19:07.0190 2008 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys

18:19:07.0205 2008 spldr - ok

18:19:08.0017 2008 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys

18:19:08.0110 2008 srv - ok

18:19:08.0843 2008 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys

18:19:08.0906 2008 srv2 - ok

18:19:09.0499 2008 SrvHsfHDA (0c4540311e11664b245a263e1154cef8) C:\Windows\system32\DRIVERS\VSTAZL6.SYS

18:19:09.0530 2008 SrvHsfHDA - ok

18:19:10.0201 2008 SrvHsfV92 (02071d207a9858fbe3a48cbfd59c4a04) C:\Windows\system32\DRIVERS\VSTDPV6.SYS

18:19:10.0357 2008 SrvHsfV92 - ok

18:19:11.0183 2008 SrvHsfWinac (18e40c245dbfaf36fd0134a7ef2df396) C:\Windows\system32\DRIVERS\VSTCNXT6.SYS

18:19:11.0261 2008 SrvHsfWinac - ok

18:19:11.0963 2008 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys

18:19:11.0995 2008 srvnet - ok

18:19:12.0665 2008 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys

18:19:12.0681 2008 stexstor - ok

18:19:13.0477 2008 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys

18:19:13.0492 2008 swenum - ok

18:19:14.0381 2008 Tcpip (b9d87c7707f058ac652a398cd28de14b) C:\Windows\system32\drivers\tcpip.sys

18:19:14.0553 2008 Tcpip - ok

18:19:15.0536 2008 TCPIP6 (b9d87c7707f058ac652a398cd28de14b) C:\Windows\system32\DRIVERS\tcpip.sys

18:19:15.0583 2008 TCPIP6 - ok

18:19:16.0721 2008 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys

18:19:16.0768 2008 tcpipreg - ok

18:19:17.0501 2008 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys

18:19:17.0564 2008 TDPIPE - ok

18:19:18.0344 2008 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys

18:19:18.0375 2008 TDTCP - ok

18:19:18.0874 2008 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys

18:19:18.0905 2008 tdx - ok

18:19:19.0389 2008 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys

18:19:19.0389 2008 TermDD - ok

18:19:19.0888 2008 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys

18:19:19.0951 2008 tssecsrv - ok

18:19:20.0512 2008 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys

18:19:20.0575 2008 tunnel - ok

18:19:20.0980 2008 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys

18:19:20.0996 2008 uagp35 - ok

18:19:21.0979 2008 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys

18:19:22.0041 2008 udfs - ok

18:19:22.0587 2008 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys

18:19:22.0603 2008 uliagpkx - ok

18:19:23.0086 2008 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys

18:19:23.0086 2008 umbus - ok

18:19:23.0585 2008 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys

18:19:23.0632 2008 UmPass - ok

18:19:24.0116 2008 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys

18:19:24.0147 2008 usbccgp - ok

18:19:24.0599 2008 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys

18:19:24.0631 2008 usbcir - ok

18:19:25.0099 2008 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys

18:19:25.0099 2008 usbehci - ok

18:19:25.0535 2008 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys

18:19:25.0551 2008 usbhub - ok

18:19:26.0097 2008 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys

18:19:26.0097 2008 usbohci - ok

18:19:26.0518 2008 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys

18:19:26.0534 2008 usbprint - ok

18:19:26.0939 2008 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS

18:19:26.0971 2008 USBSTOR - ok

18:19:27.0423 2008 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys

18:19:27.0439 2008 usbuhci - ok

18:19:27.0907 2008 usbvideo (d501e12614b00a3252073101d6a1a74b) C:\Windows\system32\Drivers\usbvideo.sys

18:19:27.0938 2008 usbvideo - ok

18:19:28.0484 2008 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys

18:19:28.0499 2008 vdrvroot - ok

18:19:28.0967 2008 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys

18:19:28.0983 2008 vga - ok

18:19:29.0420 2008 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys

18:19:29.0482 2008 VgaSave - ok

18:19:29.0888 2008 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys

18:19:29.0903 2008 vhdmp - ok

18:19:30.0309 2008 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys

18:19:30.0309 2008 viaide - ok

18:19:30.0777 2008 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys

18:19:30.0793 2008 volmgr - ok

18:19:31.0261 2008 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys

18:19:31.0292 2008 volmgrx - ok

18:19:31.0729 2008 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys

18:19:31.0744 2008 volsnap - ok

18:19:33.0101 2008 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys

18:19:33.0101 2008 vsmraid - ok

18:19:33.0601 2008 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys

18:19:33.0616 2008 vwifibus - ok

18:19:34.0022 2008 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys

18:19:34.0037 2008 vwififlt - ok

18:19:34.0459 2008 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys

18:19:34.0474 2008 WacomPen - ok

18:19:35.0005 2008 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys

18:19:35.0051 2008 WANARP - ok

18:19:35.0129 2008 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys

18:19:35.0192 2008 Wanarpv6 - ok

18:19:35.0785 2008 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys

18:19:35.0800 2008 Wd - ok

18:19:36.0409 2008 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys

18:19:36.0440 2008 Wdf01000 - ok

18:19:37.0017 2008 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys

18:19:37.0064 2008 WfpLwf - ok

18:19:37.0579 2008 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys

18:19:37.0594 2008 WIMMount - ok

18:19:38.0062 2008 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys

18:19:38.0093 2008 WmiAcpi - ok

18:19:38.0499 2008 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys

18:19:38.0561 2008 ws2ifsl - ok

18:19:39.0045 2008 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys

18:19:39.0092 2008 WudfPf - ok

18:19:39.0513 2008 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys

18:19:39.0560 2008 WUDFRd - ok

18:19:40.0028 2008 XAudio (e8f3fa126a06f8e7088f63757112a186) C:\Windows\system32\DRIVERS\XAudio64.sys

18:19:40.0168 2008 XAudio - ok

18:19:40.0901 2008 yukonw7 (6affd75c6807b3dd3ab018e27b88ef95) C:\Windows\system32\DRIVERS\yk62x64.sys

18:19:40.0979 2008 yukonw7 - ok

18:19:41.0089 2008 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0

18:19:41.0213 2008 \Device\Harddisk0\DR0 ( TDSS File System ) - warning

18:19:41.0213 2008 \Device\Harddisk0\DR0 - detected TDSS File System (1)

18:19:41.0213 2008 Boot (0x1200) (ee4b1421d69eac219b4fb1afe5a4ec25) \Device\Harddisk0\DR0\Partition0

18:19:41.0213 2008 \Device\Harddisk0\DR0\Partition0 - ok

18:19:41.0229 2008 Boot (0x1200) (0d2422a91ad7766ca9f020ab359d191a) \Device\Harddisk0\DR0\Partition1

18:19:41.0229 2008 \Device\Harddisk0\DR0\Partition1 - ok

18:19:41.0229 2008 ============================================================

18:19:41.0229 2008 Scan finished

18:19:41.0229 2008 ============================================================

18:19:41.0245 4316 Detected object count: 3

18:19:41.0245 4316 Actual detected object count: 3

18:20:37.0764 4316 C:\Windows\system32\DRIVERS\igdkmd64.sys - copied to quarantine

18:20:37.0764 4316 igfx ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

18:20:38.0575 4316 C:\Windows\system32\drivers\IntcHdmi.sys - copied to quarantine

18:20:38.0575 4316 IntcHdmiAddService ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

18:20:38.0637 4316 \Device\Harddisk0\DR0\TDLFS\phdata - copied to quarantine

18:20:38.0637 4316 \Device\Harddisk0\DR0\TDLFS\phm - copied to quarantine

18:20:38.0637 4316 \Device\Harddisk0\DR0\TDLFS\phld - copied to quarantine

18:20:38.0637 4316 \Device\Harddisk0\DR0\TDLFS\phln - copied to quarantine

18:20:38.0653 4316 \Device\Harddisk0\DR0\TDLFS\phlx - copied to quarantine

18:20:38.0731 4316 \Device\Harddisk0\DR0\TDLFS\phd - copied to quarantine

18:20:38.0746 4316 \Device\Harddisk0\DR0\TDLFS\phdx - copied to quarantine

18:20:38.0762 4316 \Device\Harddisk0\DR0\TDLFS\ph.dll - copied to quarantine

18:20:38.0762 4316 \Device\Harddisk0\DR0\TDLFS\phx.dll - copied to quarantine

18:20:38.0762 4316 \Device\Harddisk0\DR0\TDLFS\phs - copied to quarantine

18:20:38.0762 4316 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Quarantine

Elise · October 20, 2011

Nothing of that was active. Can you restart your computer in Safe Mode with Networking and see if the same happens there?

Nighttwish · October 20, 2011

No spikes in Safemode with networking.

08:47:05.0738 0528 TDSS rootkit removing tool 2.6.11.0 Oct 19 2011 13:50:27

08:47:06.0238 0528 ============================================================

08:47:06.0238 0528 Current date / time: 2011/10/20 08:47:06.0238

08:47:06.0238 0528 SystemInfo:

08:47:06.0238 0528

08:47:06.0238 0528 OS Version: 6.1.7600 ServicePack: 0.0

08:47:06.0238 0528 Product type: Workstation

08:47:06.0238 0528 ComputerName: NIGHTWISH

08:47:06.0238 0528 UserName: DanielSon

08:47:06.0238 0528 Windows directory: C:\Windows

08:47:06.0238 0528 System windows directory: C:\Windows

08:47:06.0238 0528 Running under WOW64

08:47:06.0238 0528 Processor architecture: Intel x64

08:47:06.0238 0528 Number of processors: 2

08:47:06.0238 0528 Page size: 0x1000

08:47:06.0238 0528 Boot type: Safe boot with network

08:47:06.0238 0528 ============================================================

08:47:06.0830 0528 Initialize success

08:47:21.0338 1956 ============================================================

08:47:21.0338 1956 Scan started

08:47:21.0338 1956 Mode: Manual; SigCheck; TDLFS;

08:47:21.0338 1956 ============================================================

08:47:21.0962 1956 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys

08:47:22.0040 1956 1394ohci - ok

08:47:22.0430 1956 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys

08:47:22.0446 1956 ACPI - ok

08:47:22.0805 1956 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys

08:47:22.0883 1956 AcpiPmi - ok

08:47:23.0273 1956 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys

08:47:23.0304 1956 adp94xx - ok

08:47:23.0694 1956 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys

08:47:23.0710 1956 adpahci - ok

08:47:24.0068 1956 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys

08:47:24.0084 1956 adpu320 - ok

08:47:24.0474 1956 AFD (6ef20ddf3172e97d69f596fb90602f29) C:\Windows\system32\drivers\afd.sys

08:47:24.0521 1956 AFD - ok

08:47:24.0848 1956 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys

08:47:24.0864 1956 agp440 - ok

08:47:25.0223 1956 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys

08:47:25.0238 1956 aliide - ok

08:47:25.0722 1956 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys

08:47:25.0738 1956 amdide - ok

08:47:26.0096 1956 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys

08:47:26.0143 1956 AmdK8 - ok

08:47:26.0486 1956 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys

08:47:26.0518 1956 AmdPPM - ok

08:47:26.0861 1956 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys

08:47:26.0876 1956 amdsata - ok

08:47:27.0235 1956 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys

08:47:27.0251 1956 amdsbs - ok

08:47:27.0610 1956 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys

08:47:27.0610 1956 amdxata - ok

08:47:27.0984 1956 ApfiltrService (56bd886820c4aedf493cfcdf1ccfb004) C:\Windows\system32\DRIVERS\Apfiltr.sys

08:47:28.0109 1956 ApfiltrService - ok

08:47:28.0436 1956 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys

08:47:28.0530 1956 AppID - ok

08:47:28.0904 1956 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys

08:47:28.0904 1956 arc - ok

08:47:29.0263 1956 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys

08:47:29.0263 1956 arcsas - ok

08:47:29.0622 1956 ArcSoftKsUFilter (c130bc4a51b1382b2be8e44579ec4c0a) C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys

08:47:29.0622 1956 ArcSoftKsUFilter - ok

08:47:29.0996 1956 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys

08:47:30.0121 1956 AsyncMac - ok

08:47:30.0480 1956 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys

08:47:30.0496 1956 atapi - ok

08:47:30.0886 1956 athr (5d4529ac4156e16bedb01441ae0cf984) C:\Windows\system32\DRIVERS\athrx.sys

08:47:31.0010 1956 athr - ok

08:47:31.0619 1956 atikmdag (de0ede41bc530f1759c6fffcb8c7a0cf) C:\Windows\system32\DRIVERS\atikmdag.sys

08:47:31.0884 1956 atikmdag - ok

08:47:32.0274 1956 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys

08:47:32.0352 1956 b06bdrv - ok

08:47:32.0711 1956 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys

08:47:32.0773 1956 b57nd60a - ok

08:47:33.0179 1956 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys

08:47:33.0226 1956 Beep - ok

08:47:33.0647 1956 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys

08:47:33.0678 1956 blbdrive - ok

08:47:34.0084 1956 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys

08:47:34.0115 1956 bowser - ok

08:47:34.0536 1956 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys

08:47:34.0567 1956 BrFiltLo - ok

08:47:34.0957 1956 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys

08:47:34.0973 1956 BrFiltUp - ok

08:47:35.0347 1956 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys

08:47:35.0425 1956 Brserid - ok

08:47:35.0784 1956 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys

08:47:35.0815 1956 BrSerWdm - ok

08:47:36.0174 1956 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys

08:47:36.0221 1956 BrUsbMdm - ok

08:47:36.0626 1956 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys

08:47:36.0642 1956 BrUsbSer - ok

08:47:37.0048 1956 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys

08:47:37.0094 1956 BthEnum - ok

08:47:37.0469 1956 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys

08:47:37.0500 1956 BTHMODEM - ok

08:47:37.0890 1956 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys

08:47:37.0921 1956 BthPan - ok

08:47:38.0342 1956 BTHPORT (21084ceb85280468c9aca3c805c0f8cf) C:\Windows\System32\Drivers\BTHport.sys

08:47:38.0389 1956 BTHPORT - ok

08:47:38.0795 1956 BTHUSB (8504842634dd144c075b6b0c982ccec4) C:\Windows\System32\Drivers\BTHUSB.sys

08:47:38.0826 1956 BTHUSB - ok

08:47:38.0857 1956 catchme - ok

08:47:39.0232 1956 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys

08:47:39.0278 1956 cdfs - ok

08:47:39.0653 1956 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys

08:47:39.0668 1956 cdrom - ok

08:47:40.0074 1956 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys

08:47:40.0090 1956 circlass - ok

08:47:40.0370 1956 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys

08:47:40.0386 1956 CLFS - ok

08:47:40.0776 1956 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys

08:47:40.0807 1956 CmBatt - ok

08:47:41.0182 1956 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys

08:47:41.0197 1956 cmdide - ok

08:47:41.0587 1956 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys

08:47:41.0650 1956 CNG - ok

08:47:42.0024 1956 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys

08:47:42.0024 1956 Compbatt - ok

08:47:42.0398 1956 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys

08:47:42.0414 1956 CompositeBus - ok

08:47:42.0820 1956 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys

08:47:42.0820 1956 crcdisk - ok

08:47:43.0241 1956 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys

08:47:43.0272 1956 DfsC - ok

08:47:43.0615 1956 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys

08:47:43.0678 1956 discache - ok

08:47:44.0036 1956 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys

08:47:44.0052 1956 Disk - ok

08:47:44.0442 1956 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys

08:47:44.0473 1956 drmkaud - ok

08:47:44.0879 1956 DXGKrnl (ebce0b0924835f635f620d19f0529dce) C:\Windows\System32\drivers\dxgkrnl.sys

08:47:44.0910 1956 DXGKrnl - ok

08:47:45.0362 1956 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys

08:47:45.0472 1956 ebdrv - ok

08:47:45.0846 1956 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys

08:47:45.0877 1956 elxstor - ok

08:47:46.0236 1956 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys

08:47:46.0252 1956 ErrDev - ok

08:47:46.0673 1956 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys

08:47:46.0720 1956 exfat - ok

08:47:47.0078 1956 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys

08:47:47.0125 1956 fastfat - ok

08:47:47.0500 1956 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys

08:47:47.0531 1956 fdc - ok

08:47:47.0905 1956 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys

08:47:47.0905 1956 FileInfo - ok

08:47:48.0280 1956 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys

08:47:48.0342 1956 Filetrace - ok

08:47:48.0701 1956 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys

08:47:48.0716 1956 flpydisk - ok

08:47:49.0122 1956 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys

08:47:49.0138 1956 FltMgr - ok

08:47:49.0512 1956 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys

08:47:49.0528 1956 FsDepends - ok

08:47:49.0871 1956 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys

08:47:49.0871 1956 Fs_Rec - ok

08:47:50.0230 1956 fvevol (b8b2a6e1558f8f5de5ce431c5b2c7b09) C:\Windows\system32\DRIVERS\fvevol.sys

08:47:50.0245 1956 fvevol - ok

08:47:50.0604 1956 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys

08:47:50.0620 1956 gagp30kx - ok

08:47:51.0072 1956 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys

08:47:51.0103 1956 hcw85cir - ok

08:47:51.0509 1956 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys

08:47:51.0540 1956 HdAudAddService - ok

08:47:51.0899 1956 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys

08:47:51.0930 1956 HDAudBus - ok

08:47:52.0320 1956 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys

08:47:52.0336 1956 HidBatt - ok

08:47:52.0694 1956 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys

08:47:52.0726 1956 HidBth - ok

08:47:53.0100 1956 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys

08:47:53.0131 1956 HidIr - ok

08:47:53.0521 1956 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys

08:47:53.0537 1956 HidUsb - ok

08:47:53.0911 1956 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys

08:47:53.0927 1956 HpSAMD - ok

08:47:54.0317 1956 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys

08:47:54.0379 1956 HTTP - ok

08:47:54.0754 1956 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys

08:47:54.0769 1956 hwpolicy - ok

08:47:55.0128 1956 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys

08:47:55.0144 1956 i8042prt - ok

08:47:55.0518 1956 iaStor (1d004cb1da6323b1f55caef7f94b61d9) C:\Windows\system32\DRIVERS\iaStor.sys

08:47:55.0534 1956 iaStor - ok

08:47:55.0908 1956 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys

08:47:55.0924 1956 iaStorV - ok

08:47:56.0454 1956 igfx (dfeaf0a1d98d397035012c8e28d1520f) C:\Windows\system32\DRIVERS\igdkmd64.sys

08:47:56.0704 1956 igfx ( UnsignedFile.Multi.Generic ) - warning

08:47:56.0704 1956 igfx - detected UnsignedFile.Multi.Generic (1)

08:47:57.0047 1956 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys

08:47:57.0062 1956 iirsp - ok

08:47:57.0499 1956 IntcAzAudAddService (b16fc828ce7a76a8f1ce682e6ead2627) C:\Windows\system32\drivers\RTKVHD64.sys

08:47:57.0577 1956 IntcAzAudAddService - ok

08:47:57.0936 1956 IntcHdmiAddService (88a20fa54c73ded4e8dac764e9130ae9) C:\Windows\system32\drivers\IntcHdmi.sys

08:47:57.0967 1956 IntcHdmiAddService ( UnsignedFile.Multi.Generic ) - warning

08:47:57.0967 1956 IntcHdmiAddService - detected UnsignedFile.Multi.Generic (1)

08:47:58.0310 1956 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys

08:47:58.0310 1956 intelide - ok

08:47:58.0685 1956 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys

08:47:58.0700 1956 intelppm - ok

08:47:59.0090 1956 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys

08:47:59.0153 1956 IpFilterDriver - ok

08:47:59.0527 1956 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys

08:47:59.0574 1956 IPMIDRV - ok

08:47:59.0933 1956 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys

08:47:59.0995 1956 IPNAT - ok

08:48:00.0370 1956 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys

08:48:00.0385 1956 IRENUM - ok

08:48:00.0760 1956 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys

08:48:00.0760 1956 isapnp - ok

08:48:01.0165 1956 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys

08:48:01.0181 1956 iScsiPrt - ok

08:48:01.0571 1956 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys

08:48:01.0586 1956 kbdclass - ok

08:48:01.0992 1956 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys

08:48:02.0008 1956 kbdhid - ok

08:48:02.0398 1956 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys

08:48:02.0398 1956 KSecDD - ok

08:48:02.0756 1956 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys

08:48:02.0788 1956 KSecPkg - ok

08:48:03.0178 1956 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys

08:48:03.0224 1956 ksthunk - ok

08:48:03.0646 1956 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys

08:48:03.0692 1956 lltdio - ok

08:48:04.0082 1956 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys

08:48:04.0098 1956 LSI_FC - ok

08:48:04.0488 1956 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys

08:48:04.0488 1956 LSI_SAS - ok

08:48:04.0878 1956 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys

08:48:04.0878 1956 LSI_SAS2 - ok

08:48:05.0284 1956 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys

08:48:05.0299 1956 LSI_SCSI - ok

08:48:05.0674 1956 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys

08:48:05.0705 1956 luafv - ok

08:48:06.0095 1956 MBAMProtector (23a854450dab5c9b7a42ab9be6f2e4bd) C:\Windows\system32\drivers\mbam.sys

08:48:06.0110 1956 MBAMProtector - ok

08:48:06.0500 1956 mdmxsdk (e4f44ec214b3e381e1fc844a02926666) C:\Windows\system32\DRIVERS\mdmxsdk.sys

08:48:06.0532 1956 mdmxsdk - ok

08:48:06.0906 1956 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys

08:48:06.0922 1956 megasas - ok

08:48:07.0312 1956 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys

08:48:07.0343 1956 MegaSR - ok

08:48:07.0717 1956 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys

08:48:07.0748 1956 Modem - ok

08:48:08.0123 1956 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys

08:48:08.0138 1956 monitor - ok

08:48:08.0497 1956 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys

08:48:08.0513 1956 mouclass - ok

08:48:08.0872 1956 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys

08:48:08.0903 1956 mouhid - ok

08:48:09.0262 1956 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys

08:48:09.0262 1956 mountmgr - ok

08:48:09.0652 1956 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys

08:48:09.0667 1956 mpio - ok

08:48:10.0042 1956 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys

08:48:10.0088 1956 mpsdrv - ok

08:48:10.0463 1956 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys

08:48:10.0494 1956 MRxDAV - ok

08:48:10.0868 1956 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys

08:48:10.0915 1956 mrxsmb - ok

08:48:11.0290 1956 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys

08:48:11.0321 1956 mrxsmb10 - ok

08:48:11.0664 1956 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys

08:48:11.0695 1956 mrxsmb20 - ok

08:48:12.0054 1956 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys

08:48:12.0070 1956 msahci - ok

08:48:12.0460 1956 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys

08:48:12.0475 1956 msdsm - ok

08:48:12.0850 1956 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys

08:48:12.0881 1956 Msfs - ok

08:48:13.0271 1956 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys

08:48:13.0318 1956 mshidkmdf - ok

08:48:13.0692 1956 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys

08:48:13.0692 1956 msisadrv - ok

08:48:14.0082 1956 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys

08:48:14.0129 1956 MSKSSRV - ok

08:48:14.0503 1956 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys

08:48:14.0550 1956 MSPCLOCK - ok

08:48:14.0924 1956 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys

08:48:14.0971 1956 MSPQM - ok

08:48:15.0361 1956 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys

08:48:15.0392 1956 MsRPC - ok

08:48:15.0767 1956 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys

08:48:15.0782 1956 mssmbios - ok

08:48:16.0126 1956 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys

08:48:16.0172 1956 MSTEE - ok

08:48:16.0516 1956 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys

08:48:16.0531 1956 MTConfig - ok

08:48:16.0906 1956 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys

08:48:16.0921 1956 Mup - ok

08:48:17.0327 1956 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys

08:48:17.0358 1956 NativeWifiP - ok

08:48:17.0748 1956 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys

08:48:17.0779 1956 NDIS - ok

08:48:18.0138 1956 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys

08:48:18.0185 1956 NdisCap - ok

08:48:18.0575 1956 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys

08:48:18.0622 1956 NdisTapi - ok

08:48:18.0996 1956 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys

08:48:19.0027 1956 Ndisuio - ok

08:48:19.0402 1956 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys

08:48:19.0448 1956 NdisWan - ok

08:48:19.0823 1956 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys

08:48:19.0870 1956 NDProxy - ok

08:48:20.0228 1956 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys

08:48:20.0275 1956 NetBIOS - ok

08:48:20.0634 1956 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys

08:48:20.0696 1956 NetBT - ok

08:48:21.0196 1956 netw5v64 (64428dfdaf6e88366cb51f45a79c5f69) C:\Windows\system32\DRIVERS\netw5v64.sys

08:48:21.0352 1956 netw5v64 - ok

08:48:21.0726 1956 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys

08:48:21.0726 1956 nfrd960 - ok

08:48:22.0085 1956 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys

08:48:22.0116 1956 Npfs - ok

08:48:22.0506 1956 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys

08:48:22.0553 1956 nsiproxy - ok

08:48:22.0990 1956 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys

08:48:23.0068 1956 Ntfs - ok

08:48:23.0426 1956 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys

08:48:23.0473 1956 Null - ok

08:48:23.0832 1956 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys

08:48:23.0863 1956 nvraid - ok

08:48:24.0238 1956 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys

08:48:24.0253 1956 nvstor - ok

08:48:24.0643 1956 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys

08:48:24.0643 1956 nv_agp - ok

08:48:25.0018 1956 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys

08:48:25.0033 1956 ohci1394 - ok

08:48:25.0408 1956 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys

08:48:25.0423 1956 Parport - ok

08:48:25.0782 1956 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys

08:48:25.0798 1956 partmgr - ok

08:48:26.0188 1956 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys

08:48:26.0203 1956 pci - ok

08:48:26.0562 1956 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys

08:48:26.0562 1956 pciide - ok

08:48:26.0952 1956 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys

08:48:26.0968 1956 pcmcia - ok

08:48:27.0342 1956 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys

08:48:27.0342 1956 pcw - ok

08:48:27.0732 1956 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys

08:48:27.0810 1956 PEAUTH - ok

08:48:28.0200 1956 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys

08:48:28.0247 1956 PptpMiniport - ok

08:48:28.0606 1956 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys

08:48:28.0637 1956 Processor - ok

08:48:29.0027 1956 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys

08:48:29.0074 1956 Psched - ok

08:48:29.0417 1956 PxHlpa64 (aed797cca02783296c68aa10d0cff8a9) C:\Windows\system32\Drivers\PxHlpa64.sys

08:48:29.0417 1956 PxHlpa64 - ok

08:48:29.0869 1956 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys

08:48:29.0932 1956 ql2300 - ok

08:48:30.0275 1956 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys

08:48:30.0290 1956 ql40xx - ok

08:48:30.0634 1956 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys

08:48:30.0649 1956 QWAVEdrv - ok

08:48:30.0992 1956 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys

08:48:31.0039 1956 RasAcd - ok

08:48:31.0414 1956 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys

08:48:31.0460 1956 RasAgileVpn - ok

08:48:31.0835 1956 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys

08:48:31.0866 1956 Rasl2tp - ok

08:48:32.0256 1956 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys

08:48:32.0303 1956 RasPppoe - ok

08:48:32.0677 1956 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys

08:48:32.0724 1956 RasSstp - ok

08:48:33.0098 1956 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys

08:48:33.0161 1956 rdbss - ok

08:48:33.0520 1956 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys

08:48:33.0551 1956 rdpbus - ok

08:48:33.0894 1956 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys

08:48:33.0925 1956 RDPCDD - ok

08:48:34.0268 1956 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys

08:48:34.0315 1956 RDPENCDD - ok

08:48:34.0674 1956 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys

08:48:34.0705 1956 RDPREFMP - ok

08:48:35.0095 1956 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys

08:48:35.0158 1956 RDPWD - ok

08:48:35.0532 1956 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys

08:48:35.0548 1956 rdyboost - ok

08:48:35.0891 1956 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys

08:48:35.0922 1956 RFCOMM - ok

08:48:36.0265 1956 rimsptsk (258aadb43e3f3468b5cf8cb0f84872c2) C:\Windows\system32\DRIVERS\rimssn64.sys

08:48:36.0312 1956 rimsptsk - ok

08:48:36.0686 1956 risdptsk (71e182a0de1cecb3f912960716345405) C:\Windows\system32\DRIVERS\risdsn64.sys

08:48:36.0718 1956 risdptsk - ok

08:48:37.0139 1956 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys

08:48:37.0201 1956 rspndr - ok

08:48:37.0576 1956 RTHDMIAzAudService (34f05c417f038ffa3bef69b798d7d7dd) C:\Windows\system32\drivers\RtHDMIVX.sys

08:48:37.0607 1956 RTHDMIAzAudService - ok

08:48:37.0716 1956 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS

08:48:37.0732 1956 SASDIFSV - ok

08:48:37.0747 1956 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS

08:48:37.0747 1956 SASKUTIL - ok

08:48:38.0122 1956 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys

08:48:38.0122 1956 sbp2port - ok

08:48:38.0480 1956 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys

08:48:38.0512 1956 scfilter - ok

08:48:38.0917 1956 sdbus (54e47ad086782d3ae9417c155cdceb9b) C:\Windows\system32\DRIVERS\sdbus.sys

08:48:38.0948 1956 sdbus - ok

08:48:39.0307 1956 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys

08:48:39.0338 1956 secdrv - ok

08:48:39.0713 1956 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys

08:48:39.0744 1956 Serenum - ok

08:48:40.0103 1956 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys

08:48:40.0118 1956 Serial - ok

08:48:40.0493 1956 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys

08:48:40.0508 1956 sermouse - ok

08:48:40.0898 1956 SFEP (70f9c476b62de4f2823e918a6c181ade) C:\Windows\system32\DRIVERS\SFEP.sys

08:48:40.0945 1956 SFEP - ok

08:48:41.0304 1956 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys

08:48:41.0335 1956 sffdisk - ok

08:48:41.0694 1956 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys

08:48:41.0710 1956 sffp_mmc - ok

08:48:42.0068 1956 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys

08:48:42.0084 1956 sffp_sd - ok

08:48:42.0458 1956 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys

08:48:42.0490 1956 sfloppy - ok

08:48:42.0864 1956 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys

08:48:42.0880 1956 SiSRaid2 - ok

08:48:43.0254 1956 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys

08:48:43.0254 1956 SiSRaid4 - ok

08:48:43.0660 1956 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys

08:48:43.0722 1956 Smb - ok

08:48:44.0128 1956 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys

08:48:44.0143 1956 spldr - ok

08:48:44.0518 1956 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys

08:48:44.0564 1956 srv - ok

08:48:44.0939 1956 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys

08:48:44.0970 1956 srv2 - ok

08:48:45.0329 1956 SrvHsfHDA (0c4540311e11664b245a263e1154cef8) C:\Windows\system32\DRIVERS\VSTAZL6.SYS

08:48:45.0344 1956 SrvHsfHDA - ok

08:48:45.0750 1956 SrvHsfV92 (02071d207a9858fbe3a48cbfd59c4a04) C:\Windows\system32\DRIVERS\VSTDPV6.SYS

08:48:45.0828 1956 SrvHsfV92 - ok

08:48:46.0203 1956 SrvHsfWinac (18e40c245dbfaf36fd0134a7ef2df396) C:\Windows\system32\DRIVERS\VSTCNXT6.SYS

08:48:46.0234 1956 SrvHsfWinac - ok

08:48:46.0593 1956 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys

08:48:46.0639 1956 srvnet - ok

08:48:47.0014 1956 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys

08:48:47.0029 1956 stexstor - ok

08:48:47.0373 1956 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys

08:48:47.0373 1956 swenum - ok

08:48:47.0856 1956 Tcpip (b9d87c7707f058ac652a398cd28de14b) C:\Windows\system32\drivers\tcpip.sys

08:48:47.0934 1956 Tcpip - ok

08:48:48.0324 1956 TCPIP6 (b9d87c7707f058ac652a398cd28de14b) C:\Windows\system32\DRIVERS\tcpip.sys

08:48:48.0371 1956 TCPIP6 - ok

08:48:48.0714 1956 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys

08:48:48.0745 1956 tcpipreg - ok

08:48:49.0104 1956 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys

08:48:49.0151 1956 TDPIPE - ok

08:48:49.0479 1956 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys

08:48:49.0541 1956 TDTCP - ok

08:48:49.0900 1956 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys

08:48:49.0947 1956 tdx - ok

08:48:50.0321 1956 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys

08:48:50.0321 1956 TermDD - ok

08:48:50.0727 1956 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys

08:48:50.0773 1956 tssecsrv - ok

08:48:51.0148 1956 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys

08:48:51.0195 1956 tunnel - ok

08:48:51.0569 1956 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys

08:48:51.0585 1956 uagp35 - ok

08:48:51.0959 1956 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys

08:48:52.0021 1956 udfs - ok

08:48:52.0427 1956 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys

08:48:52.0443 1956 uliagpkx - ok

08:48:52.0817 1956 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys

08:48:52.0833 1956 umbus - ok

08:48:53.0176 1956 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys

08:48:53.0207 1956 UmPass - ok

08:48:53.0581 1956 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys

08:48:53.0597 1956 usbccgp - ok

08:48:53.0971 1956 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys

08:48:54.0003 1956 usbcir - ok

08:48:54.0361 1956 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys

08:48:54.0377 1956 usbehci - ok

08:48:54.0767 1956 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys

08:48:54.0814 1956 usbhub - ok

08:48:55.0173 1956 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys

08:48:55.0188 1956 usbohci - ok

08:48:55.0531 1956 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys

08:48:55.0563 1956 usbprint - ok

08:48:55.0921 1956 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS

08:48:55.0937 1956 USBSTOR - ok

08:48:56.0311 1956 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys

08:48:56.0327 1956 usbuhci - ok

08:48:56.0717 1956 usbvideo (d501e12614b00a3252073101d6a1a74b) C:\Windows\system32\Drivers\usbvideo.sys

08:48:56.0733 1956 usbvideo - ok

08:48:57.0154 1956 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys

08:48:57.0154 1956 vdrvroot - ok

08:48:57.0513 1956 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys

08:48:57.0528 1956 vga - ok

08:48:57.0871 1956 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys

08:48:57.0918 1956 VgaSave - ok

08:48:58.0308 1956 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys

08:48:58.0324 1956 vhdmp - ok

08:48:58.0698 1956 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys

08:48:58.0698 1956 viaide - ok

08:48:59.0073 1956 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys

08:48:59.0073 1956 volmgr - ok

08:48:59.0478 1956 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys

08:48:59.0494 1956 volmgrx - ok

08:48:59.0868 1956 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys

08:48:59.0884 1956 volsnap - ok

08:49:00.0243 1956 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys

08:49:00.0243 1956 vsmraid - ok

08:49:00.0601 1956 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys

08:49:00.0617 1956 vwifibus - ok

08:49:00.0976 1956 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys

08:49:00.0991 1956 vwififlt - ok

08:49:01.0366 1956 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys

08:49:01.0381 1956 WacomPen - ok

08:49:01.0771 1956 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys

08:49:01.0818 1956 WANARP - ok

08:49:01.0834 1956 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys

08:49:01.0865 1956 Wanarpv6 - ok

08:49:02.0239 1956 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys

08:49:02.0255 1956 Wd - ok

08:49:02.0692 1956 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys

08:49:02.0723 1956 Wdf01000 - ok

08:49:03.0082 1956 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys

08:49:03.0129 1956 WfpLwf - ok

08:49:03.0472 1956 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys

08:49:03.0472 1956 WIMMount - ok

08:49:03.0877 1956 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys

08:49:03.0893 1956 WmiAcpi - ok

08:49:04.0283 1956 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys

08:49:04.0330 1956 ws2ifsl - ok

08:49:04.0704 1956 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys

08:49:04.0751 1956 WudfPf - ok

08:49:05.0141 1956 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys

08:49:05.0203 1956 WUDFRd - ok

08:49:05.0578 1956 XAudio (e8f3fa126a06f8e7088f63757112a186) C:\Windows\system32\DRIVERS\XAudio64.sys

08:49:05.0593 1956 XAudio - ok

08:49:05.0999 1956 yukonw7 (6affd75c6807b3dd3ab018e27b88ef95) C:\Windows\system32\DRIVERS\yk62x64.sys

08:49:06.0046 1956 yukonw7 - ok

08:49:06.0077 1956 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0

08:49:06.0155 1956 \Device\Harddisk0\DR0 ( TDSS File System ) - warning

08:49:06.0155 1956 \Device\Harddisk0\DR0 - detected TDSS File System (1)

08:49:06.0155 1956 Boot (0x1200) (ee4b1421d69eac219b4fb1afe5a4ec25) \Device\Harddisk0\DR0\Partition0

08:49:06.0155 1956 \Device\Harddisk0\DR0\Partition0 - ok

08:49:06.0186 1956 Boot (0x1200) (0d2422a91ad7766ca9f020ab359d191a) \Device\Harddisk0\DR0\Partition1

08:49:06.0186 1956 \Device\Harddisk0\DR0\Partition1 - ok

08:49:06.0186 1956 ============================================================

08:49:06.0186 1956 Scan finished

08:49:06.0186 1956 ============================================================

08:49:06.0202 1528 Detected object count: 3

08:49:06.0202 1528 Actual detected object count: 3

08:49:53.0563 1528 C:\Windows\system32\DRIVERS\igdkmd64.sys - copied to quarantine

08:49:53.0563 1528 igfx ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

08:49:53.0938 1528 C:\Windows\system32\drivers\IntcHdmi.sys - copied to quarantine

08:49:53.0938 1528 IntcHdmiAddService ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

08:49:53.0969 1528 \Device\Harddisk0\DR0\TDLFS\phdata - copied to quarantine

08:49:53.0969 1528 \Device\Harddisk0\DR0\TDLFS\phm - copied to quarantine

08:49:53.0969 1528 \Device\Harddisk0\DR0\TDLFS\phld - copied to quarantine

08:49:53.0985 1528 \Device\Harddisk0\DR0\TDLFS\phln - copied to quarantine

08:49:53.0985 1528 \Device\Harddisk0\DR0\TDLFS\phlx - copied to quarantine

08:49:53.0985 1528 \Device\Harddisk0\DR0\TDLFS\phd - copied to quarantine

08:49:54.0000 1528 \Device\Harddisk0\DR0\TDLFS\phdx - copied to quarantine

08:49:54.0016 1528 \Device\Harddisk0\DR0\TDLFS\ph.dll - copied to quarantine

08:49:54.0016 1528 \Device\Harddisk0\DR0\TDLFS\phx.dll - copied to quarantine

08:49:54.0016 1528 \Device\Harddisk0\DR0\TDLFS\phs - copied to quarantine

08:49:54.0016 1528 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Quarantine

08:50:02.0487 1212 ============================================================

08:50:02.0487 1212 Scan started

08:50:02.0487 1212 Mode: Manual;

08:50:02.0487 1212 ============================================================

08:50:03.0048 1212 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys

08:50:03.0048 1212 1394ohci - ok

08:50:03.0438 1212 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys

08:50:03.0438 1212 ACPI - ok

08:50:03.0813 1212 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys

08:50:03.0813 1212 AcpiPmi - ok

08:50:04.0218 1212 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys

08:50:04.0234 1212 adp94xx - ok

08:50:04.0608 1212 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys

08:50:04.0608 1212 adpahci - ok

08:50:04.0998 1212 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys

08:50:04.0998 1212 adpu320 - ok

08:50:05.0404 1212 AFD (6ef20ddf3172e97d69f596fb90602f29) C:\Windows\system32\drivers\afd.sys

08:50:05.0404 1212 AFD - ok

08:50:05.0794 1212 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys

08:50:05.0794 1212 agp440 - ok

08:50:06.0184 1212 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys

08:50:06.0184 1212 aliide - ok

08:50:06.0574 1212 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys

08:50:06.0574 1212 amdide - ok

08:50:06.0948 1212 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys

08:50:06.0948 1212 AmdK8 - ok

08:50:07.0338 1212 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys

08:50:07.0338 1212 AmdPPM - ok

08:50:07.0728 1212 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys

08:50:07.0728 1212 amdsata - ok

08:50:08.0118 1212 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys

08:50:08.0118 1212 amdsbs - ok

08:50:08.0493 1212 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys

08:50:08.0493 1212 amdxata - ok

08:50:08.0883 1212 ApfiltrService (56bd886820c4aedf493cfcdf1ccfb004) C:\Windows\system32\DRIVERS\Apfiltr.sys

08:50:08.0883 1212 ApfiltrService - ok

08:50:09.0257 1212 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys

08:50:09.0257 1212 AppID - ok

08:50:09.0647 1212 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys

08:50:09.0647 1212 arc - ok

08:50:10.0021 1212 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys

08:50:10.0037 1212 arcsas - ok

08:50:10.0411 1212 ArcSoftKsUFilter (c130bc4a51b1382b2be8e44579ec4c0a) C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys

08:50:10.0411 1212 ArcSoftKsUFilter - ok

08:50:10.0786 1212 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys

08:50:10.0786 1212 AsyncMac - ok

08:50:11.0160 1212 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys

08:50:11.0160 1212 atapi - ok

08:50:11.0597 1212 athr (5d4529ac4156e16bedb01441ae0cf984) C:\Windows\system32\DRIVERS\athrx.sys

08:50:11.0597 1212 athr - ok

08:50:12.0190 1212 atikmdag (de0ede41bc530f1759c6fffcb8c7a0cf) C:\Windows\system32\DRIVERS\atikmdag.sys

08:50:12.0221 1212 atikmdag - ok

08:50:12.0611 1212 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys

08:50:12.0611 1212 b06bdrv - ok

08:50:13.0017 1212 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys

08:50:13.0017 1212 b57nd60a - ok

08:50:13.0407 1212 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys

08:50:13.0407 1212 Beep - ok

08:50:13.0828 1212 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys

08:50:13.0828 1212 blbdrive - ok

08:50:14.0218 1212 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys

08:50:14.0218 1212 bowser - ok

08:50:14.0608 1212 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys

08:50:14.0608 1212 BrFiltLo - ok

08:50:14.0982 1212 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys

08:50:14.0982 1212 BrFiltUp - ok

08:50:15.0388 1212 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys

08:50:15.0388 1212 Brserid - ok

08:50:15.0762 1212 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys

08:50:15.0762 1212 BrSerWdm - ok

08:50:16.0137 1212 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys

08:50:16.0137 1212 BrUsbMdm - ok

08:50:16.0511 1212 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys

08:50:16.0511 1212 BrUsbSer - ok

08:50:16.0901 1212 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys

08:50:16.0901 1212 BthEnum - ok

08:50:17.0291 1212 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys

08:50:17.0291 1212 BTHMODEM - ok

08:50:17.0665 1212 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys

08:50:17.0665 1212 BthPan - ok

08:50:18.0102 1212 BTHPORT (21084ceb85280468c9aca3c805c0f8cf) C:\Windows\System32\Drivers\BTHport.sys

08:50:18.0118 1212 BTHPORT - ok

08:50:18.0492 1212 BTHUSB (8504842634dd144c075b6b0c982ccec4) C:\Windows\System32\Drivers\BTHUSB.sys

08:50:18.0492 1212 BTHUSB - ok

08:50:18.0492 1212 catchme - ok

08:50:18.0913 1212 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys

08:50:18.0913 1212 cdfs - ok

08:50:19.0288 1212 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys

08:50:19.0288 1212 cdrom - ok

08:50:19.0678 1212 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys

08:50:19.0678 1212 circlass - ok

08:50:19.0990 1212 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys

08:50:19.0990 1212 CLFS - ok

08:50:20.0333 1212 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys

08:50:20.0349 1212 CmBatt - ok

08:50:20.0723 1212 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys

08:50:20.0723 1212 cmdide - ok

08:50:21.0129 1212 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys

08:50:21.0129 1212 CNG - ok

08:50:21.0519 1212 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys

08:50:21.0519 1212 Compbatt - ok

08:50:21.0909 1212 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys

08:50:21.0909 1212 CompositeBus - ok

08:50:22.0299 1212 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys

08:50:22.0299 1212 crcdisk - ok

08:50:22.0720 1212 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys

08:50:22.0720 1212 DfsC - ok

08:50:23.0125 1212 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys

08:50:23.0125 1212 discache - ok

08:50:23.0500 1212 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys

08:50:23.0500 1212 Disk - ok

08:50:23.0905 1212 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys

08:50:23.0905 1212 drmkaud - ok

08:50:24.0311 1212 DXGKrnl (ebce0b0924835f635f620d19f0529dce) C:\Windows\System32\drivers\dxgkrnl.sys

08:50:24.0327 1212 DXGKrnl - ok

08:50:24.0810 1212 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys

08:50:24.0826 1212 ebdrv - ok

08:50:25.0200 1212 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys

08:50:25.0200 1212 elxstor - ok

08:50:25.0559 1212 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys

08:50:25.0559 1212 ErrDev - ok

08:50:25.0980 1212 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys

08:50:25.0980 1212 exfat - ok

08:50:26.0401 1212 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys

08:50:26.0401 1212 fastfat - ok

08:50:26.0760 1212 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys

08:50:26.0760 1212 fdc - ok

08:50:27.0119 1212 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys

08:50:27.0119 1212 FileInfo - ok

08:50:27.0493 1212 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys

08:50:27.0493 1212 Filetrace - ok

08:50:27.0868 1212 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys

08:50:27.0868 1212 flpydisk - ok

08:50:28.0258 1212 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys

08:50:28.0258 1212 FltMgr - ok

08:50:28.0648 1212 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys

08:50:28.0648 1212 FsDepends - ok

08:50:29.0022 1212 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys

08:50:29.0022 1212 Fs_Rec - ok

08:50:29.0381 1212 fvevol (b8b2a6e1558f8f5de5ce431c5b2c7b09) C:\Windows\system32\DRIVERS\fvevol.sys

08:50:29.0381 1212 fvevol - ok

08:50:29.0724 1212 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys

08:50:29.0724 1212 gagp30kx - ok

08:50:30.0145 1212 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys

08:50:30.0145 1212 hcw85cir - ok

08:50:30.0567 1212 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys

08:50:30.0567 1212 HdAudAddService - ok

08:50:30.0941 1212 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys

08:50:30.0941 1212 HDAudBus - ok

08:50:31.0315 1212 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys

08:50:31.0315 1212 HidBatt - ok

08:50:31.0705 1212 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys

08:50:31.0705 1212 HidBth - ok

08:50:32.0080 1212 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys

08:50:32.0080 1212 HidIr - ok

08:50:32.0485 1212 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys

08:50:32.0485 1212 HidUsb - ok

08:50:32.0875 1212 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys

08:50:32.0875 1212 HpSAMD - ok

08:50:33.0297 1212 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys

08:50:33.0312 1212 HTTP - ok

08:50:33.0671 1212 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys

08:50:33.0671 1212 hwpolicy - ok

08:50:34.0030 1212 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys

08:50:34.0045 1212 i8042prt - ok

08:50:34.0451 1212 iaStor (1d004cb1da6323b1f55caef7f94b61d9) C:\Windows\system32\DRIVERS\iaStor.sys

08:50:34.0451 1212 iaStor - ok

08:50:34.0857 1212 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys

08:50:34.0857 1212 iaStorV - ok

08:50:35.0496 1212 igfx (dfeaf0a1d98d397035012c8e28d1520f) C:\Windows\system32\DRIVERS\igdkmd64.sys

08:50:35.0543 1212 igfx - ok

08:50:35.0902 1212 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys

08:50:35.0902 1212 iirsp - ok

08:50:36.0307 1212 IntcAzAudAddService (b16fc828ce7a76a8f1ce682e6ead2627) C:\Windows\system32\drivers\RTKVHD64.sys

08:50:36.0323 1212 IntcAzAudAddService - ok

08:50:36.0666 1212 IntcHdmiAddService (88a20fa54c73ded4e8dac764e9130ae9) C:\Windows\system32\drivers\IntcHdmi.sys

08:50:36.0666 1212 IntcHdmiAddService - ok

08:50:37.0009 1212 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys

08:50:37.0009 1212 intelide - ok

08:50:37.0384 1212 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys

08:50:37.0384 1212 intelppm - ok

08:50:37.0774 1212 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys

08:50:37.0789 1212 IpFilterDriver - ok

08:50:38.0179 1212 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys

08:50:38.0179 1212 IPMIDRV - ok

08:50:38.0569 1212 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys

08:50:38.0569 1212 IPNAT - ok

08:50:38.0959 1212 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys

08:50:38.0959 1212 IRENUM - ok

08:50:39.0334 1212 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys

08:50:39.0334 1212 isapnp - ok

08:50:39.0739 1212 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys

08:50:39.0739 1212 iScsiPrt - ok

08:50:40.0098 1212 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys

08:50:40.0098 1212 kbdclass - ok

08:50:40.0488 1212 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys

08:50:40.0488 1212 kbdhid - ok

08:50:40.0863 1212 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys

08:50:40.0878 1212 KSecDD - ok

08:50:41.0237 1212 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys

08:50:41.0237 1212 KSecPkg - ok

08:50:41.0627 1212 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys

08:50:41.0627 1212 ksthunk - ok

08:50:42.0033 1212 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys

08:50:42.0033 1212 lltdio - ok

08:50:42.0438 1212 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys

08:50:42.0438 1212 LSI_FC - ok

08:50:42.0813 1212 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys

08:50:42.0813 1212 LSI_SAS - ok

08:50:43.0203 1212 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys

08:50:43.0203 1212 LSI_SAS2 - ok

08:50:43.0624 1212 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys

08:50:43.0624 1212 LSI_SCSI - ok

08:50:43.0998 1212 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys

08:50:44.0014 1212 luafv - ok

08:50:44.0388 1212 MBAMProtector (23a854450dab5c9b7a42ab9be6f2e4bd) C:\Windows\system32\drivers\mbam.sys

08:50:44.0388 1212 MBAMProtector - ok

08:50:44.0794 1212 mdmxsdk (e4f44ec214b3e381e1fc844a02926666) C:\Windows\system32\DRIVERS\mdmxsdk.sys

08:50:44.0794 1212 mdmxsdk - ok

08:50:45.0168 1212 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys

08:50:45.0168 1212 megasas - ok

08:50:45.0590 1212 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys

08:50:45.0605 1212 MegaSR - ok

08:50:45.0980 1212 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys

08:50:45.0980 1212 Modem - ok

08:50:46.0370 1212 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys

08:50:46.0370 1212 monitor - ok

08:50:46.0744 1212 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys

08:50:46.0744 1212 mouclass - ok

08:50:47.0134 1212 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys

08:50:47.0134 1212 mouhid - ok

08:50:47.0524 1212 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys

08:50:47.0524 1212 mountmgr - ok

08:50:47.0914 1212 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys

08:50:47.0914 1212 mpio - ok

08:50:48.0288 1212 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys

08:50:48.0288 1212 mpsdrv - ok

08:50:48.0710 1212 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys

08:50:48.0710 1212 MRxDAV - ok

08:50:49.0100 1212 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys

08:50:49.0100 1212 mrxsmb - ok

08:50:49.0490 1212 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys

08:50:49.0490 1212 mrxsmb10 - ok

08:50:49.0880 1212 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys

08:50:49.0880 1212 mrxsmb20 - ok

08:50:50.0238 1212 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys

08:50:50.0238 1212 msahci - ok

08:50:50.0582 1212 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys

08:50:50.0582 1212 msdsm - ok

08:50:50.0972 1212 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys

08:50:50.0972 1212 Msfs - ok

08:50:51.0362 1212 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys

08:50:51.0362 1212 mshidkmdf - ok

08:50:51.0752 1212 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys

08:50:51.0752 1212 msisadrv - ok

08:50:52.0157 1212 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys

08:50:52.0157 1212 MSKSSRV - ok

08:50:52.0547 1212 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys

08:50:52.0547 1212 MSPCLOCK - ok

08:50:52.0922 1212 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys

08:50:52.0922 1212 MSPQM - ok

08:50:53.0327 1212 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys

08:50:53.0327 1212 MsRPC - ok

08:50:53.0702 1212 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys

08:50:53.0702 1212 mssmbios - ok

08:50:54.0092 1212 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys

08:50:54.0092 1212 MSTEE - ok

08:50:54.0466 1212 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys

08:50:54.0466 1212 MTConfig - ok

08:50:54.0856 1212 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys

08:50:54.0856 1212 Mup - ok

08:50:55.0262 1212 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys

08:50:55.0262 1212 NativeWifiP - ok

08:50:55.0730 1212 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys

08:50:55.0730 1212 NDIS - ok

08:50:56.0120 1212 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys

08:50:56.0120 1212 NdisCap - ok

08:50:56.0463 1212 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys

08:50:56.0463 1212 NdisTapi - ok

08:50:56.0806 1212 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys

08:50:56.0806 1212 Ndisuio - ok

08:50:57.0196 1212 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys

08:50:57.0196 1212 NdisWan - ok

08:50:57.0555 1212 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys

08:50:57.0555 1212 NDProxy - ok

08:50:57.0929 1212 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys

08:50:57.0929 1212 NetBIOS - ok

08:50:58.0304 1212 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys

08:50:58.0319 1212 NetBT - ok

08:50:58.0850 1212 netw5v64 (64428dfdaf6e88366cb51f45a79c5f69) C:\Windows\system32\DRIVERS\netw5v64.sys

08:50:58.0881 1212 netw5v64 - ok

08:50:59.0240 1212 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys

08:50:59.0240 1212 nfrd960 - ok

08:50:59.0614 1212 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys

08:50:59.0614 1212 Npfs - ok

08:51:00.0004 1212 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys

08:51:00.0004 1212 nsiproxy - ok

08:51:00.0456 1212 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys

08:51:00.0456 1212 Ntfs - ok

08:51:00.0831 1212 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys

08:51:00.0831 1212 Null - ok

08:51:01.0221 1212 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys

08:51:01.0221 1212 nvraid - ok

08:51:01.0595 1212 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys

08:51:01.0595 1212 nvstor - ok

08:51:01.0954 1212 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys

08:51:01.0954 1212 nv_agp - ok

08:51:02.0360 1212 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys

08:51:02.0360 1212 ohci1394 - ok

08:51:02.0734 1212 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys

08:51:02.0734 1212 Parport - ok

08:51:03.0124 1212 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys

08:51:03.0124 1212 partmgr - ok

08:51:03.0498 1212 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys

08:51:03.0514 1212 pci - ok

08:51:03.0857 1212 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys

08:51:03.0857 1212 pciide - ok

08:51:04.0247 1212 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys

08:51:04.0247 1212 pcmcia - ok

08:51:04.0622 1212 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys

08:51:04.0622 1212 pcw - ok

08:51:05.0027 1212 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys

08:51:05.0027 1212 PEAUTH - ok

08:51:05.0402 1212 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys

08:51:05.0417 1212 PptpMiniport - ok

08:51:05.0760 1212 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys

08:51:05.0760 1212 Processor - ok

08:51:06.0166 1212 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys

08:51:06.0166 1212 Psched - ok

08:51:06.0540 1212 PxHlpa64 (aed797cca02783296c68aa10d0cff8a9) C:\Windows\system32\Drivers\PxHlpa64.sys

08:51:06.0540 1212 PxHlpa64 - ok

08:51:06.0993 1212 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys

08:51:06.0993 1212 ql2300 - ok

08:51:07.0336 1212 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys

08:51:07.0352 1212 ql40xx - ok

08:51:07.0726 1212 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys

08:51:07.0726 1212 QWAVEdrv - ok

08:51:08.0116 1212 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys

08:51:08.0116 1212 RasAcd - ok

08:51:08.0490 1212 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys

08:51:08.0490 1212 RasAgileVpn - ok

08:51:08.0880 1212 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys

08:51:08.0880 1212 Rasl2tp - ok

08:51:09.0270 1212 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys

08:51:09.0270 1212 RasPppoe - ok

08:51:09.0629 1212 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys

08:51:09.0629 1212 RasSstp - ok

08:51:10.0019 1212 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys

08:51:10.0019 1212 rdbss - ok

08:51:10.0362 1212 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys

08:51:10.0362 1212 rdpbus - ok

08:51:10.0706 1212 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys

08:51:10.0706 1212 RDPCDD - ok

08:51:11.0096 1212 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys

08:51:11.0096 1212 RDPENCDD - ok

08:51:11.0470 1212 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys

08:51:11.0470 1212 RDPREFMP - ok

08:51:11.0860 1212 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys

08:51:11.0860 1212 RDPWD - ok

08:51:12.0250 1212 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys

08:51:12.0250 1212 rdyboost - ok

08:51:12.0640 1212 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys

08:51:12.0640 1212 RFCOMM - ok

08:51:13.0014 1212 rimsptsk (258aadb43e3f3468b5cf8cb0f84872c2) C:\Windows\system32\DRIVERS\rimssn64.sys

08:51:13.0014 1212 rimsptsk - ok

08:51:13.0404 1212 risdptsk (71e182a0de1cecb3f912960716345405) C:\Windows\system32\DRIVERS\risdsn64.sys

08:51:13.0404 1212 risdptsk - ok

08:51:13.0810 1212 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys

08:51:13.0810 1212 rspndr - ok

08:51:14.0200 1212 RTHDMIAzAudService (34f05c417f038ffa3bef69b798d7d7dd) C:\Windows\system32\drivers\RtHDMIVX.sys

08:51:14.0200 1212 RTHDMIAzAudService - ok

08:51:14.0309 1212 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS

08:51:14.0309 1212 SASDIFSV - ok

08:51:14.0325 1212 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS

08:51:14.0325 1212 SASKUTIL - ok

08:51:14.0684 1212 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys

08:51:14.0684 1212 sbp2port - ok

08:51:15.0027 1212 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys

08:51:15.0027 1212 scfilter - ok

08:51:15.0417 1212 sdbus (54e47ad086782d3ae9417c155cdceb9b) C:\Windows\system32\DRIVERS\sdbus.sys

08:51:15.0417 1212 sdbus - ok

08:51:15.0807 1212 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys

08:51:15.0807 1212 secdrv - ok

08:51:16.0181 1212 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys

08:51:16.0181 1212 Serenum - ok

08:51:16.0540 1212 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys

08:51:16.0540 1212 Serial - ok

08:51:16.0914 1212 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys

08:51:16.0914 1212 sermouse - ok

08:51:17.0320 1212 SFEP (70f9c476b62de4f2823e918a6c181ade) C:\Windows\system32\DRIVERS\SFEP.sys

08:51:17.0320 1212 SFEP - ok

08:51:17.0694 1212 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys

08:51:17.0694 1212 sffdisk - ok

08:51:18.0084 1212 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys

08:51:18.0084 1212 sffp_mmc - ok

08:51:18.0459 1212 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys

08:51:18.0459 1212 sffp_sd - ok

08:51:18.0833 1212 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys

08:51:18.0833 1212 sfloppy - ok

08:51:19.0239 1212 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys

08:51:19.0239 1212 SiSRaid2 - ok

08:51:19.0613 1212 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys

08:51:19.0613 1212 SiSRaid4 - ok

08:51:19.0988 1212 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys

08:51:19.0988 1212 Smb - ok

08:51:20.0393 1212 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys

08:51:20.0393 1212 spldr - ok

08:51:20.0814 1212 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys

08:51:20.0814 1212 srv - ok

08:51:21.0204 1212 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys

08:51:21.0220 1212 srv2 - ok

08:51:21.0610 1212 SrvHsfHDA (0c4540311e11664b245a263e1154cef8) C:\Windows\system32\DRIVERS\VSTAZL6.SYS

08:51:21.0610 1212 SrvHsfHDA - ok

08:51:22.0047 1212 SrvHsfV92 (02071d207a9858fbe3a48cbfd59c4a04) C:\Windows\system32\DRIVERS\VSTDPV6.SYS

08:51:22.0047 1212 SrvHsfV92 - ok

08:51:22.0452 1212 SrvHsfWinac (18e40c245dbfaf36fd0134a7ef2df396) C:\Windows\system32\DRIVERS\VSTCNXT6.SYS

08:51:22.0452 1212 SrvHsfWinac - ok

08:51:22.0827 1212 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys

08:51:22.0827 1212 srvnet - ok

08:51:23.0201 1212 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys

08:51:23.0201 1212 stexstor - ok

08:51:23.0529 1212 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys

08:51:23.0544 1212 swenum - ok

08:51:23.0981 1212 Tcpip (b9d87c7707f058ac652a398cd28de14b) C:\Windows\system32\drivers\tcpip.sys

08:51:23.0997 1212 Tcpip - ok

08:51:24.0402 1212 TCPIP6 (b9d87c7707f058ac652a398cd28de14b) C:\Windows\system32\DRIVERS\tcpip.sys

08:51:24.0418 1212 TCPIP6 - ok

08:51:24.0777 1212 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys

08:51:24.0777 1212 tcpipreg - ok

08:51:25.0151 1212 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys

08:51:25.0151 1212 TDPIPE - ok

08:51:25.0526 1212 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys

08:51:25.0526 1212 TDTCP - ok

08:51:25.0916 1212 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys

08:51:25.0931 1212 tdx - ok

08:51:26.0306 1212 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys

08:51:26.0306 1212 TermDD - ok

08:51:26.0696 1212 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys

08:51:26.0696 1212 tssecsrv - ok

08:51:27.0070 1212 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys

08:51:27.0070 1212 tunnel - ok

08:51:27.0444 1212 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys

08:51:27.0444 1212 uagp35 - ok

08:51:27.0850 1212 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys

08:51:27.0866 1212 udfs - ok

08:51:28.0240 1212 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys

08:51:28.0240 1212 uliagpkx - ok

08:51:28.0614 1212 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys

08:51:28.0614 1212 umbus - ok

08:51:28.0989 1212 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys

08:51:28.0989 1212 UmPass - ok

08:51:29.0379 1212 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys

08:51:29.0379 1212 usbccgp - ok

08:51:29.0753 1212 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys

08:51:29.0753 1212 usbcir - ok

08:51:30.0143 1212 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys

08:51:30.0143 1212 usbehci - ok

08:51:30.0549 1212 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys

08:51:30.0549 1212 usbhub - ok

08:51:30.0939 1212 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys

08:51:30.0939 1212 usbohci - ok

08:51:31.0313 1212 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys

08:51:31.0313 1212 usbprint - ok

08:51:31.0703 1212 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS

08:51:31.0703 1212 USBSTOR - ok

08:51:32.0109 1212 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys

08:51:32.0109 1212 usbuhci - ok

08:51:32.0499 1212 usbvideo (d501e12614b00a3252073101d6a1a74b) C:\Windows\system32\Drivers\usbvideo.sys

08:51:32.0499 1212 usbvideo - ok

08:51:32.0920 1212 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys

08:51:32.0920 1212 vdrvroot - ok

08:51:33.0294 1212 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys

08:51:33.0294 1212 vga - ok

08:51:33.0669 1212 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys

08:51:33.0669 1212 VgaSave - ok

08:51:34.0074 1212 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys

08:51:34.0074 1212 vhdmp - ok

08:51:34.0464 1212 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys

08:51:34.0464 1212 viaide - ok

08:51:34.0839 1212 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys

08:51:34.0839 1212 volmgr - ok

08:51:35.0244 1212 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys

08:51:35.0244 1212 volmgrx - ok

08:51:35.0650 1212 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys

08:51:35.0650 1212 volsnap - ok

08:51:36.0056 1212 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys

08:51:36.0056 1212 vsmraid - ok

08:51:36.0430 1212 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys

08:51:36.0430 1212 vwifibus - ok

08:51:36.0804 1212 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys

08:51:36.0804 1212 vwififlt - ok

08:51:37.0179 1212 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys

08:51:37.0179 1212 WacomPen - ok

08:51:37.0522 1212 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys

08:51:37.0522 1212 WANARP - ok

08:51:37.0522 1212 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys

08:51:37.0522 1212 Wanarpv6 - ok

08:51:37.0928 1212 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys

08:51:37.0928 1212 Wd - ok

08:51:38.0349 1212 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys

08:51:38.0364 1212 Wdf01000 - ok

08:51:38.0739 1212 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys

08:51:38.0739 1212 WfpLwf - ok

08:51:39.0129 1212 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys

08:51:39.0129 1212 WIMMount - ok

08:51:39.0519 1212 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys

08:51:39.0519 1212 WmiAcpi - ok

08:51:39.0924 1212 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys

08:51:39.0924 1212 ws2ifsl - ok

08:51:40.0330 1212 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys

08:51:40.0330 1212 WudfPf - ok

08:51:40.0720 1212 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys

08:51:40.0720 1212 WUDFRd - ok

08:51:41.0094 1212 XAudio (e8f3fa126a06f8e7088f63757112a186) C:\Windows\system32\DRIVERS\XAudio64.sys

08:51:41.0094 1212 XAudio - ok

08:51:41.0500 1212 yukonw7 (6affd75c6807b3dd3ab018e27b88ef95) C:\Windows\system32\DRIVERS\yk62x64.sys

08:51:41.0500 1212 yukonw7 - ok

08:51:41.0531 1212 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0

08:51:41.0547 1212 \Device\Harddisk0\DR0 - ok

08:51:41.0547 1212 Boot (0x1200) (ee4b1421d69eac219b4fb1afe5a4ec25) \Device\Harddisk0\DR0\Partition0

08:51:41.0547 1212 \Device\Harddisk0\DR0\Partition0 - ok

08:51:41.0578 1212 Boot (0x1200) (0d2422a91ad7766ca9f020ab359d191a) \Device\Harddisk0\DR0\Partition1

08:51:41.0578 1212 \Device\Harddisk0\DR0\Partition1 - ok

08:51:41.0578 1212 ============================================================

08:51:41.0578 1212 Scan finished

08:51:41.0578 1212 ============================================================

08:51:41.0578 1552 Detected object count: 0

08:51:41.0578 1552 Actual detected object count: 0

08:52:34.0712 1536 Deinitialize success

Elise · October 20, 2011

In that case, try to do a clean boot, and enable disabled items one at a time to see if you can pinpoint what program causes the spikes.

Nighttwish · October 20, 2011

I am now lost. The spikes are relatively low, but do jump around in the teens-twenties every second. Is that normal? Also, I am seeing a searchprotocolhost.exe for the first time. It comes and goes but does not seem to occupy too much of the CPU. Everything might be normal but I may just be paranoid.

Elise · October 21, 2011

That process is indeed legit. Did the clean boot reveal anything?

Nighttwish · October 21, 2011

It did not.

Elise · October 21, 2011

Click Start > Programs > Accessories, right click Command Prompt and select Run as Administrator.

Type chkdsk /r and press enter. When asked to schedule the disk check for next reboot, confirm (Y).

Restart your computer and let the disk check run unhindered. When done, let me know if you notice any change.

Nighttwish · October 21, 2011

Everything looks great.

Elise · October 22, 2011

Glad to hear that!

Your version of Adobe Reader is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system. Please follow these steps to remove older version Adobe components and update:

Download the latest version of Adobe Reader Version X. and save it to your desktop.
Uncheck the "Free McAfee Security plan Plus" option or any other Toolbar you are offered
Click the download button at the bottom.
If you use Internet Explorer and do not wish to install the ActiveX element, simply click on the click here to download link on the next page.
Remove all older version of Adobe Reader: Go to Add/remove and uninstall all versions of Adobe Reader, Acrobat Reader and Adobe Acrobat.
If you are unsure of how to use Add or Remove Programs, the please see this tutorial:How To Remove An Installed Program From Your Computer
Then from your desktop double-click on Adobe Reader to install the newest version.
If using Windows Vista and the installer refuses to launch due to insufficient user permissions, then Run As Administrator.
When the "Adobe Setup - Welcome" window opens, click the Install > button.
If offered to install a Toolbar, just uncheck the box before continuing unless you want it.

Your Adobe Reader is now up to date!

ESET ONLINE SCANNER

----------------------------

I'd like us to scan your machine with ESET OnlineScan

Hold down Control and click on this link to open ESET OnlineScan in a new window.
Click the button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
2. Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
3. Double click on the
  icon on your desktop.
4. Check "YES, I accept the Terms of Use."
5. Click the Start button.
6. Accept any security warnings from your browser.
7. Under scan settings, check "Scan Archives" and "Remove found threats"
8. Click Advanced settings and select the following:
  - Scan potentially unwanted applications
  - Scan for potentially unsafe applications
  - Enable Anti-Stealth technology

[*]ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.

[*]When the scan completes, click List Threats

[*]Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.

[*]Click the Back button.

[*]Click the Finish button.

svchost.exe Trojan.Agent

Recommended Posts

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Recently Browsing 0 members

Important Information