Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

лепнал съм нещо [РЕШЕН]

DoMiNuS
в Премахване на зловреден софтуер

Featured Replies

здравейте, днес като пуснах скайп след определен престой започна сам да маркира абонати и да им изпраща съобщения, ето го и него: hahhah! :D aa ..... поне засега не съм забелязал да има някакви други странични проблеми с уин 7 стартер съм, който ми дойде с лаптопа и нямам дискове ето и логовете които искате - ако трябва допълнително инфо пишете :) и благодаря предварително . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 8.0.7601.17514 Run by Nikolay Kolev at 20:02:28 on 2011-12-25 Microsoft Windows 7 Starter 6.1.7601.1.1251.359.1033.18.1014.315 [GMT 2:00] . AV: Trend Micro Internet Security *Disabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902} SP: Trend Micro Internet Security *Disabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Trend Micro Personal Firewall *Disabled* {70A91CD9-303D-A217-A80E-6DEE136EDB2B} . ============== Running Processes =============== . C:\windows\system32\wininit.exe C:\windows\system32\lsm.exe C:\windows\system32\svchost.exe -k DcomLaunch C:\windows\system32\svchost.exe -k RPCSS C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\windows\system32\svchost.exe -k netsvcs C:\windows\system32\svchost.exe -k LocalService C:\windows\system32\svchost.exe -k NetworkService C:\windows\system32\WLANExt.exe C:\windows\system32\conhost.exe C:\windows\System32\spoolsv.exe C:\windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\System32\AsusService.exe C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\windows\system32\SearchIndexer.exe C:\windows\system32\wbem\wmiprvse.exe C:\windows\system32\taskhost.exe C:\windows\system32\Dwm.exe C:\Program Files\Oceanis\SystemSetting\WallPaperAgent.exe C:\windows\Explorer.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\Elantech\ETDCtrl.exe C:\Windows\AsScrPro.exe C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe C:\Program Files\EeePC\HotkeyService\HotkeyService.exe C:\Program Files\EeePC\SHE\SuperHybridEngine.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe C:\Program Files\ASUS\Eee Docking\Eee Docking.exe C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe C:\Program Files\EeePC\CapsHook\CapsHook.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\windows\system32\igfxsrvc.exe C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Program Files\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Users\Nikolay Kolev\AppData\Roaming\Hfygyn.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\Elantech\ETDCtrlHelper.exe C:\windows\system32\conhost.exe C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe C:\Users\NIKOLA~1\AppData\Local\Temp\x30811.exe C:\Users\Nikolay Kolev\AppData\Roaming\regsrv64.exe C:\Users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WINLOGO.exe C:\Users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WINLOGO.exe C:\windows\system32\conhost.exe C:\windows\system32\conhost.exe C:\Users\NIKOLA~1\AppData\Local\Temp\x30811.exe C:\Users\Nikolay Kolev\AppData\Roaming\1870.exe C:\Users\Nikolay Kolev\AppData\Roaming\DC05.exe C:\Users\Nikolay Kolev\AppData\Roaming\DC05.exe C:\windows\system32\conhost.exe C:\windows\system32\conhost.exe C:\Users\NIKOLA~1\AppData\Local\Temp\x30811.exe C:\Users\Nikolay Kolev\AppData\Roaming\5C66.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\windows\system32\SearchProtocolHost.exe C:\windows\system32\SearchFilterHost.exe C:\windows\system32\conhost.exe C:\windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://asus.msn.com uDefault_Page_URL = hxxp://asus.msn.com uWinlogon: Shell=c:\program files\oceanis\systemsetting\WallPaperAgent.exe BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SearchHelper.dll BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll BHO: Windows 7 Starter Helper: {d381ff29-7cfb-4d4e-b92a-c4eddc696614} - c:\program files\oceanis\systemsetting\StarterHelper.dll BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll uRun: [sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun uRun: [Hfygyn] c:\users\nikolay kolev\appdata\roaming\Hfygyn.exe uRun: [skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized uRun: [Windows Task Services] c:\users\nikolay kolev\appdata\roaming\DC05.exe uRun: [Qfygyw] c:\users\nikolay kolev\appdata\roaming\Qfygyw.exe uRun: [Microsoft DLL Registration] c:\users\nikolay kolev\appdata\roaming\regsrv64.exe uRunOnce: [Windows Task Services] c:\users\nikolay kolev\appdata\roaming\DC05.exe mRun: [iAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe mRun: [ETDWare] %ProgramFiles%\Elantech\ETDCtrl.exe mRun: [EeeSplendidAgent] c:\program files\asus\epc\eeesplendid\AsAgent.exe mRun: [ASUS Screen Saver Protector] c:\windows\AsScrPro.exe mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [HotkeyMon] AsusSender.exe c:\program files\eeepc\hotkeyservice\HotKeyMon.exe mRun: [HotkeyService] AsusSender.exe c:\program files\eeepc\hotkeyservice\HotkeyService.exe mRun: [superHybridEngine] AsusSender.exe c:\program files\eeepc\she\SuperHybridEngine.exe mRun: [LiveUpdate] AsusSender.exe c:\program files\asus\liveupdate\LiveUpdate.exe auto mRun: [CapsHook] AsusSender.exe c:\program files\eeepc\capshook\CapsHook.exe mRun: [Eee Docking] c:\program files\asus\eee docking\Eee Docking.exe autorun mRun: [ufSeAgnt.exe] "c:\program files\trend micro\internet security\UfSeAgnt.exe" mRun: [GraphicsSwitch] AsusSender.exe c:\program files\asus\graphicsswitch\GPUStatusMonitor.exe mRun: [igfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Persistence] c:\windows\system32\igfxpers.exe mRun: [RtHDVCpl] c:\program files\realtek\audio\hda\RtHDVCpl.exe -s mRun: [OOBESetup] c:\program files\asus\ooberegbackup\ooberegbackup.exe /restore -"c:\program files\asus\ooberegbackup\OOBEReg.ini" mRun: [boingo Wi-Fi] "c:\program files\boingo\boingo wi-fi\Boingo.lnk" mRun: [ASUSPRP] c:\program files\asus\aprp\APRP.EXE mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [ASUSWebStorage] c:\program files\asus\asus webstorage\3.0.108.222\AsusWSPanel.exe /S StartupFolder: c:\users\nikolay kolev\appdata\roaming\microsoft\windows\start menu\programs\startup\stepx2.exe StartupFolder: c:\users\nikolay kolev\appdata\roaming\microsoft\windows\start menu\programs\startup\taskmgrsx.exe StartupFolder: c:\users\nikolay kolev\appdata\roaming\microsoft\windows\start menu\programs\startup\WINLOGO.exe StartupFolder: c:\users\nikolay kolev\appdata\roaming\microsoft\windows\start menu\programs\startup\WINLOGONs.exe StartupFolder: c:\users\nikolay kolev\appdata\roaming\microsoft\windows\start menu\programs\startup\WINLOGOS.exe StartupFolder: c:\users\nikolay kolev\appdata\roaming\microsoft\windows\start menu\programs\startup\wuT2.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\asusvi~1.lnk - c:\program files\asus\asusvibe\AsusVibeLauncher.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\blueto~1.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: Send image to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie.htm IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll TCP: DhcpNameServer = 192.168.1.1 TCP: Interfaces\{3B8C6890-AA8C-4932-A67B-DE832605BBB0} : NameServer = 95.111.79.65,89.190.192.166 TCP: Interfaces\{A0F465AE-C29C-456A-84E6-48E907EA6A14} : DhcpNameServer = 192.168.1.1 TCP: Interfaces\{A0F465AE-C29C-456A-84E6-48E907EA6A14}\67563647F6273346E286F6473707F647 : DhcpNameServer = 87.118.172.1 Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll Notify: igfxcui - igfxdev.dll . ================= FIREFOX =================== . FF - ProfilePath - c:\users\nikolay kolev\appdata\roaming\mozilla\firefox\profiles\l7dxcsxs.default\ FF - plugin: c:\progra~1\micros~2\office14\NPSPWRAP.DLL FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll FF - plugin: c:\program files\microsoft silverlight\4.0.60531.0\npctrlui.dll FF - plugin: c:\program files\pando networks\media booster\npPandoWebPlugin.dll FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll . ============= SERVICES / DRIVERS =============== . R1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2010-9-25 11520] R3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\drivers\ETD.sys [2010-7-29 109960] R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\drivers\L1C62x86.sys [2010-7-29 68208] R3 Sftfs;Sftfs;c:\windows\system32\drivers\Sftfslh.sys [2010-4-24 550760] R3 Sftplay;Sftplay;c:\windows\system32\drivers\Sftplaylh.sys [2010-4-24 195944] R3 Sftredir;Sftredir;c:\windows\system32\drivers\Sftredirlh.sys [2010-4-24 21864] R3 Sftvol;Sftvol;c:\windows\system32\drivers\Sftvollh.sys [2010-4-24 19304] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888] S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-9-25 293928] S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\drivers\btwl2cap.sys [2010-9-25 33320] S3 fssfltr;fssfltr;c:\windows\system32\drivers\fssfltr.sys [2011-7-8 54632] . =============== Created Last 30 ================ . 2011-12-25 17:45:03 282624 ----a-w- c:\users\nikolay kolev\appdata\roaming\Qfygyw.exe 2011-12-25 16:31:04 65536 ----a-w- c:\users\nikolay kolev\appdata\roaming\5C66.exe 2011-12-25 16:27:41 398081 ----a-w- c:\users\nikolay kolev\appdata\roaming\4379.exe 2011-12-25 16:27:35 400896 ----a-w- c:\users\nikolay kolev\appdata\roaming\2B37.exe 2011-12-25 16:26:29 398081 ----a-w- c:\users\nikolay kolev\appdata\roaming\2905.exe 2011-12-25 16:26:25 176128 ----a-w- c:\users\nikolay kolev\appdata\roaming\1870.exe 2011-12-25 16:26:21 413696 ----a-w- c:\users\nikolay kolev\appdata\roaming\904.exe 2011-12-25 16:26:18 207360 ---ha-w- c:\users\nikolay kolev\appdata\roaming\Hfygyn.exe 2011-12-25 16:10:06 -------- d-----w- c:\programdata\ASUS WebStorage 2011-12-24 22:24:37 400896 ----a-w- c:\users\nikolay kolev\appdata\roaming\CCF9.exe 2011-12-24 20:34:32 65536 ----a-w- c:\users\nikolay kolev\appdata\roaming\regsrv64.exe 2011-12-24 20:34:02 65536 ----a-w- c:\users\nikolay kolev\appdata\roaming\9073.exe 2011-12-24 20:33:58 398081 ----a-w- c:\users\nikolay kolev\appdata\roaming\82BC.exe 2011-12-24 20:33:53 285696 ----a-w- c:\users\nikolay kolev\appdata\roaming\6C4F.exe 2011-12-24 20:33:46 282624 ----a-w- c:\users\nikolay kolev\appdata\roaming\55B2.tmp 2011-12-24 20:33:26 290816 ----a-w- c:\users\nikolay kolev\appdata\roaming\35D.exe 2011-12-24 20:33:20 35987 ----a-w- c:\users\nikolay kolev\appdata\roaming\ED4D.exe 2011-12-22 07:55:15 -------- d-----w- c:\users\nikolay kolev\appdata\local\PMB Files 2011-12-22 07:55:13 -------- d-----w- c:\programdata\PMB Files 2011-12-22 07:55:03 -------- d-----w- c:\program files\Pando Networks 2011-12-22 07:54:55 413696 ----a-w- c:\users\nikolay kolev\appdata\roaming\DC05.exe 2011-12-09 14:15:40 176128 ----a-w- c:\users\nikolay kolev\appdata\roaming\C44B.exe 2011-12-09 14:15:36 398081 ----a-w- c:\users\nikolay kolev\appdata\roaming\B720.exe 2011-12-09 14:15:29 379077 ----a-w- c:\users\nikolay kolev\appdata\roaming\9B25.exe 2011-12-08 12:15:07 176128 ----a-w- c:\users\nikolay kolev\appdata\roaming\93D5.exe 2011-12-08 12:15:06 360448 ----a-w- c:\users\nikolay kolev\appdata\roaming\microsoft\windows\start menu\programs\startup\taskmgrsx.exe 2011-12-08 12:15:04 379077 ----a-w- c:\users\nikolay kolev\appdata\roaming\86F9.exe 2011-12-08 09:08:24 398081 ----a-w- c:\users\nikolay kolev\appdata\roaming\BAC.exe . ==================== Find3M ==================== . 2011-12-25 16:14:57 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-11-22 13:10:09 344263 ----a-w- c:\users\nikolay kolev\appdata\roaming\DDD0.exe 2011-11-11 14:17:25 176128 ----a-w- c:\users\nikolay kolev\appdata\roaming\6243.exe 2011-11-11 14:17:17 367883 ----a-w- c:\users\nikolay kolev\appdata\roaming\431E.exe 2011-10-18 13:05:25 355889 ----a-w- c:\users\nikolay kolev\appdata\roaming\D976.exe 2011-10-12 10:16:11 355129 ----a-w- c:\users\nikolay kolev\appdata\roaming\BF86.exe 2011-10-10 13:19:27 398081 ----a-w- c:\users\nikolay kolev\appdata\roaming\D208.exe 2011-09-30 08:38:46 433623 ----a-w- c:\users\nikolay kolev\appdata\roaming\4125.exe 2011-09-29 15:12:52 420147 ----a-w- c:\users\nikolay kolev\appdata\roaming\B42D.exe 2011-09-29 15:04:56 95 ----a-w- c:\users\nikolay kolev\appdata\roaming\testxxx.bat 2011-09-28 13:23:21 406482 ----a-w- c:\users\nikolay kolev\appdata\roaming\1238.exe 2011-09-28 12:50:41 406482 ----a-w- c:\users\nikolay kolev\appdata\roaming\B7C4.exe 2011-09-27 15:00:26 292352 ----a-w- c:\users\nikolay kolev\appdata\roaming\taskmgrs.exe 2011-09-27 08:23:16 204800 ----a-w- c:\users\nikolay kolev\appdata\roaming\8753.exe . ============= FINISH: 20:06:42,55 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows 7 Starter Boot Device: \Device\HarddiskVolume1 Install Date: 8.7.2011 г. 18:08:14 System Uptime: 25.12.2011 г. 18:52:03 (2 hours ago) . Motherboard: ASUSTeK Computer INC. | | 1015PE Processor: Intel® Atom™ CPU N550 @ 1.50GHz | CPU 1 | 990/167mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 100 GiB total, 78,061 GiB free. D: is FIXED (NTFS) - 118 GiB total, 82,428 GiB free. E: is CDROM () . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP23: 28.7.2011 г. 20:20:59 - Language Pack Removal RP24: 28.7.2011 г. 20:21:05 - Scheduled Checkpoint RP25: 27.8.2011 г. 10:38:06 - Scheduled Checkpoint . ==== Installed Programs ====================== . µTorrent 32 Bit HP CIO Components Installer Acrobat.com Adobe AIR Adobe Flash Player 10 ActiveX Adobe Flash Player 11 Plugin Adobe Reader 9.4.6 MUI ASUS WebStorage ASUSUpdate for Eee PC AsusVibe2.0 Atheros Client Installation Program Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver Boingo Wi-Fi Broadcom Wireless Network Adapter CapsHook Chicken Invaders 2 E-Cam ebi.BookReader3J Eee Docking 3.8.1 EeeSplendid ETDWare PS/2-x86 7.0.5.11_WHQL FontResizer FreeCall Gaberoff Koral Free German Dictionary 1.0 Game Park Console Hotkey Service Intel® Graphics Media Accelerator Driver Intel® Matrix Storage Manager Junk Mail filter update LiveUpdate LocaleMe Microsoft Application Error Reporting Microsoft Choice Guard Microsoft Office 2010 Microsoft Office Click-to-Run 2010 Microsoft Office Starter 2010 - English Microsoft Search Enhancement Pack Microsoft Silverlight Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Sync Framework Runtime Native v1.0 (x86) Microsoft Sync Framework Services Native v1.0 (x86) Mozilla Firefox 6.0 (x86 bg) MSVCRT MSXML 4.0 SP2 (KB973688) MSXML 4.0 SP3 Parser (KB973685) Oceanis Change Background Windows 7 OOBERegBackup Pando Media Booster PrimoPDF -- brought to you by Nitro PDF Software Ralink RT2860 Wireless LAN Card Realtek High Definition Audio Driver ScreenSaverPatch Skype Click to Call Skype™ 5.5 Super Hybrid Engine syncables desktop SE The Fall Trilogy Chapter 1 - Separation 1.00 Times Reader Trend Micro Internet Security Uninstall KnightOnline Warcraft III Warcraft III: All Products WIDCOMM Bluetooth Software Windows Live Call Windows Live Communications Platform Windows Live Essentials Windows Live Family Safety Windows Live Mail Windows Live Messenger Windows Live Photo Gallery Windows Live Sign-in Assistant Windows Live Sync Windows Live Toolbar Windows Live Upload Tool Windows Live Writer WinRAR 4.01 (32-bit) . ==== Event Viewer Messages From Past Week ======== . 25.12.2011 г. 18:09:39, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service. 24.12.2011 г. 11:39:05, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service. . ==== End Of File ===========================

Редактирано от capnemo (преглед на промените)

Весела Коледа, :snowflake:

1. Изтеглете ComboFix от BleepingComputer

и го запазете (бутон Save -> Save as) ComboFix на вашия десктоп:

Публикувано изображение

След приключване на изтеглянето на ComboFix, иконката на програмата би трябвало да изглежда така:

Публикувано изображение

2. Затворете всички работещи приложения, отворени прозорци и програми работещи във фонов режим. Спрете временно защитата в реално време на антивирусната програма и на другите програми за сигурност, ако има такива.

3. Стартирайте с двоен клик Combofix.exe. Изберете YES, за да се съгласите с условията за използване на програмата. Важно: По време на работата на ComboFix не бива да се движи мишката и да се натискат клавиши от клавиатурата. Просто търпеливо оставете ComboFix да си свърши работата, без да използвате компютъра за други цели.

4. Ако получите предупреждение от UAC, съгласете се.

5 ComboFix ще спре временно Интернет връзката, но след като приключи работата на програмата тази връзка ще бъде възстановена автоматично. ComboFix ще сканира за проблеми и за заразени файлове, като това може да отнеме известно време. Моля да бъдете търпеливи. Ако има проблем с Интернет връзката след приключване на работата на Combofix, моля да прочетете това: Manually restoring the Internet connection section.

6 Когато работата на ComboFix приключи, ще се появи текстов документ (log) в Notepad:

Публикувано изображение

Копирайте с (Copy) и поставете с (Paste) съдържанието на лога в следващия си коментар.

Забележка: Ако се появи следното съобщение при отварянето на различни програми след завършване на сканирането с Combofix - "illegal operation on a registry key that has been marked for deletion." просто рестартирайте компютъра още веднъж и то ще изчезне.

По време на сканирането не използвайте компютъра си !

  • Автор

ComboFix 11-12-24.10 - Nikolay Kolev 12.2011 г. 21:55:54.1.4 - x86 Microsoft Windows 7 Starter 6.1.7601.1.1251.359.1033.18.1014.488 [GMT 2:00] Running from: c:\users\Nikolay Kolev\Desktop\ComboFix.exe AV: Trend Micro Internet Security *Disabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902} FW: Trend Micro Personal Firewall *Disabled* {70A91CD9-303D-A217-A80E-6DEE136EDB2B} SP: Trend Micro Internet Security *Disabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\FullRemove.exe c:\users\Nikolay Kolev\AppData\Roaming\1238.exe c:\users\Nikolay Kolev\AppData\Roaming\1870.exe c:\users\Nikolay Kolev\AppData\Roaming\2905.exe c:\users\Nikolay Kolev\AppData\Roaming\2B37.exe c:\users\Nikolay Kolev\AppData\Roaming\35D.exe c:\users\Nikolay Kolev\AppData\Roaming\4125.exe c:\users\Nikolay Kolev\AppData\Roaming\431E.exe c:\users\Nikolay Kolev\AppData\Roaming\4379.exe c:\users\Nikolay Kolev\AppData\Roaming\498B.exe c:\users\Nikolay Kolev\AppData\Roaming\55B2.tmp c:\users\Nikolay Kolev\AppData\Roaming\5C66.exe c:\users\Nikolay Kolev\AppData\Roaming\6243.exe c:\users\Nikolay Kolev\AppData\Roaming\6C4F.exe c:\users\Nikolay Kolev\AppData\Roaming\82BC.exe c:\users\Nikolay Kolev\AppData\Roaming\86F9.exe c:\users\Nikolay Kolev\AppData\Roaming\8753.exe c:\users\Nikolay Kolev\AppData\Roaming\904.exe c:\users\Nikolay Kolev\AppData\Roaming\9073.exe c:\users\Nikolay Kolev\AppData\Roaming\93D5.exe c:\users\Nikolay Kolev\AppData\Roaming\9A21.exe c:\users\Nikolay Kolev\AppData\Roaming\9B25.exe c:\users\Nikolay Kolev\AppData\Roaming\A83B.exe c:\users\Nikolay Kolev\AppData\Roaming\B221.exe c:\users\Nikolay Kolev\AppData\Roaming\B42D.exe c:\users\Nikolay Kolev\AppData\Roaming\B720.exe c:\users\Nikolay Kolev\AppData\Roaming\B7C4.exe c:\users\Nikolay Kolev\AppData\Roaming\BAC.exe c:\users\Nikolay Kolev\AppData\Roaming\BF86.exe c:\users\Nikolay Kolev\AppData\Roaming\C44B.exe c:\users\Nikolay Kolev\AppData\Roaming\CCF9.exe c:\users\Nikolay Kolev\AppData\Roaming\D208.exe c:\users\Nikolay Kolev\AppData\Roaming\D348.exe c:\users\Nikolay Kolev\AppData\Roaming\D976.exe c:\users\Nikolay Kolev\AppData\Roaming\DC05.exe c:\users\Nikolay Kolev\AppData\Roaming\DDD0.exe c:\users\Nikolay Kolev\AppData\Roaming\ED4D.exe c:\users\Nikolay Kolev\AppData\Roaming\FCA6.exe c:\users\Nikolay Kolev\AppData\Roaming\Hfygyn.exe c:\users\Nikolay Kolev\AppData\Roaming\libcurl-4.dll c:\users\Nikolay Kolev\AppData\Roaming\libpdcurses.dll c:\users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\stepx2.exe c:\users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\taskmgrsx.exe c:\users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WINLOGONs.exe c:\users\Nikolay Kolev\AppData\Roaming\Qfygyw.exe c:\users\Nikolay Kolev\AppData\Roaming\taskmgrs.exe . . ((((((((((((((((((((((((( Files Created from 2011-11-25 to 2011-12-25 ))))))))))))))))))))))))))))))) . . 2011-12-25 20:12 . 2011-12-25 20:12 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-12-25 16:10 . 2011-12-25 16:10 -------- d-----w- c:\programdata\ASUS WebStorage 2011-12-24 20:34 . 2011-12-24 20:34 65536 ----a-w- c:\users\Nikolay Kolev\AppData\Roaming\regsrv64.exe 2011-12-22 07:55 . 2011-12-23 12:10 -------- d-----w- c:\users\Nikolay Kolev\AppData\Local\PMB Files 2011-12-22 07:55 . 2011-12-22 07:56 -------- d-----w- c:\programdata\PMB Files 2011-12-22 07:55 . 2011-12-22 07:55 -------- d-----w- c:\program files\Pando Networks . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-12-25 16:14 . 2011-07-08 18:10 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-10-27 15:35 . 2011-11-11 14:17 327680 ----a-w- c:\users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WINLOGOS.exe 2011-10-10 19:52 . 2011-10-12 10:16 290304 ------w- c:\users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WINLOGO.exe 2011-09-29 15:04 . 2011-09-30 08:38 95 ----a-w- c:\users\Nikolay Kolev\AppData\Roaming\testxxx.bat 2011-08-27 07:39 . 2011-07-08 18:03 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B] @="{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}" [HKEY_CLASSES_ROOT\CLSID\{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O] @="{618A47A2-528B-4D9A-AFC8-97D3233511E2}" [HKEY_CLASSES_ROOT\CLSID\{618A47A2-528B-4D9A-AFC8-97D3233511E2}] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904] "ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2010-04-13 548744] "ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2010-09-25 3058304] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296] "HotkeyMon"="AsusSender.exe" [2010-05-24 35304] "HotkeyService"="AsusSender.exe" [2010-05-24 35304] "SuperHybridEngine"="AsusSender.exe" [2010-05-24 35304] "LiveUpdate"="AsusSender.exe" [2010-05-24 35304] "CapsHook"="AsusSender.exe" [2010-05-24 35304] "Eee Docking"="c:\program files\ASUS\Eee Docking\Eee Docking.exe" [2010-06-10 414384] "UfSeAgnt.exe"="c:\program files\Trend Micro\Internet Security\UfSeAgnt.exe" [2010-02-23 1024368] "GraphicsSwitch"="AsusSender.exe" [2010-05-24 35304] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-05-10 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-05-10 173592] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-05-10 150552] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-03-12 8546848] "OOBESetup"="c:\program files\asus\OOBERegBackup\OOBERegBackup.exe" [2009-12-11 334848] "Boingo Wi-Fi"="c:\program files\Boingo\Boingo Wi-Fi\Boingo.lnk" [2011-07-08 2429] "ASUSPRP"="c:\program files\ASUS\APRP\APRP.EXE" [2010-09-25 2018032] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920] "ASUSWebStorage"="c:\program files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe" [2011-07-29 737104] . c:\users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ WINLOGO.exe [2011-10-10 290304] WINLOGOS.exe [2011-10-27 327680] wuT2.exe [2011-9-25 362140] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ AsusVibeLauncher.lnk - c:\program files\ASUS\AsusVibe\AsusVibeLauncher.exe [2011-12-25 549040] Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-5-21 828704] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . R2 AsusService;Asus Launcher Service;c:\windows\System32\AsusService.exe [2009-08-19 219136] R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-05-21 293928] R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-05-21 33320] R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x] R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000] R3 tmevtmgr;tmevtmgr;c:\windows\system32\DRIVERS\tmevtmgr.sys [2010-07-19 51792] R3 tmlwf;Trend Micro NDIS 6.0 Filter Driver;c:\windows\system32\DRIVERS\tmlwf.sys [2010-02-23 146448] R3 TmPfw;Trend Micro Personal Firewall;c:\program files\Trend Micro\Internet Security\TmPfw.exe [2010-02-23 497008] R3 TmProxy;Trend Micro Proxy Service;c:\program files\Trend Micro\Internet Security\TmProxy.exe [2010-02-23 689416] R3 tmwfp;Trend Micro WFP Callout Driver;c:\windows\system32\DRIVERS\tmwfp.sys [2010-02-23 283152] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224] S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2011-07-10 691696] S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2010-03-31 11520] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128] S2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-27 821664] S2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2010-04-23 483688] S2 tmpreflt;tmpreflt;c:\windows\system32\DRIVERS\tmpreflt.sys [2010-07-30 36432] S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-04-13 109960] S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2010-05-10 68208] S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2010-04-23 550760] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2010-04-23 195944] S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2010-04-23 21864] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2010-04-23 19304] S3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2010-04-23 209768] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 . . ------- Supplementary Scan ------- . uStart Page = hxxp://asus.msn.com IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm TCP: DhcpNameServer = 192.168.1.1 TCP: Interfaces\{3B8C6890-AA8C-4932-A67B-DE832605BBB0}: NameServer = 95.111.79.65,89.190.192.166 FF - ProfilePath - c:\users\Nikolay Kolev\AppData\Roaming\Mozilla\Firefox\Profiles\l7dxcsxs.default\ . - - - - ORPHANS REMOVED - - - - . Toolbar-Locked - (no file) HKCU-Run-Hfygyn - c:\users\Nikolay Kolev\AppData\Roaming\Hfygyn.exe HKCU-Run-Windows Task Services - c:\users\Nikolay Kolev\AppData\Roaming\DC05.exe HKCU-Run-Qfygyw - c:\users\Nikolay Kolev\AppData\Roaming\Qfygyw.exe HKLM-Run-EeeSplendidAgent - c:\program files\ASUS\EPC\EeeSplendid\AsAgent.exe . . . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'Explorer.exe'(2928) c:\progra~1\ASUS\ASUSWE~1\30108~1.222\ASUSWS~1.DLL c:\program files\WIDCOMM\Bluetooth Software\btmmhook.dll . Completion time: 2011-12-25 22:18:15 ComboFix-quarantined-files.txt 2011-12-25 20:18 . Pre-Run: 84 292 501 504 bytes free Post-Run: 84 357 427 200 bytes free . - - End Of File - - 81FDEC251425B63E97DF9806279A6612

*. Отворете notepad.exe и с copy/paste въведете следната информация:

http://www.kaldata.com/forums/index.php?&showtopic=188520

Collect::
c:usersNikolay KolevAppDataRoamingregsrv64.exe
c:usersNikolay KolevAppDataRoamingMicrosoftWindowsStart MenuProgramsStartupWINLOGOS.exe
c:usersNikolay KolevAppDataRoamingMicrosoftWindowsStart MenuProgramsStartupWINLOGO.exe
c:usersNikolay KolevAppDataRoamingMicrosoftWindowsStart MenuProgramsStartupwuT2.exe
File::
c:usersNikolay KolevAppDataRoamingtestxxx.bat
RegLock::
[HKEY_LOCAL_MACHINESYSTEMControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}0000AllUserSettings]
[HKEY_LOCAL_MACHINESYSTEMControlSet001ControlPCWSecurity]

*.Запазете файла с име CFScript и го провлачете и пуснете в Combofix (както е показано на картинката отдолу).

Публикувано изображение

*. По време на сканиране от страна на ComboFix не стартирайте никакви други приложения, не натискайте клавиши от клавиатурата и не местете мишката !

*. По време на тази операция Combofix ще отвори диалогов прозорец. Със скрипта който изпълнихте той ще архивира и ще изпрати няколко файлове за анализ. Необходимо е да се свързан към Интеренет преди да натиснете OK. Ще се появи син прозорец чрез който вие можете да проследите цялата операция. Накарая ще получите съобщението "Upload was Successful".

*. Ако по някаква причина Combofix не успее да изпрати файловете (вижте снимката отдолу):

Публикувано изображение

тогава просто кликнете върху файла C:CF-Submit.htm и следвайте инструкциите за да го изпратите.

*. Когато Combofix приключи ще създаде лог файла. Моя, публикувайте този файл в следващия си пост.

  • Автор

не можах да разбера какво стана - направих файла качих го към програмата и тръгна проверката - вече към края изписа че логът е направен и къде може да бъде намерен и че след няколко минути ще приключи проверката само че този прозорец остана някъде към половин час и накрая рестартирах компютъра ето лога който се създаде, въпреки че ми изглежда като вчерашния :Д въпреки това днес като пуснах скайп и вече може би над половин час не е правил никакви проблеми и като че ли се изчисти компа :) искам само да попитам да ми препоръчате някоя антивирусна - аз досега все касперски ползвам но тя ще е тежка за лаптопа та затова нещо по-леко но също така ефикасно :) ComboFix 11-12-24.10 - Nikolay Kolev 12.2011 г. 12:25:13.2.4 - x86 Microsoft Windows 7 Starter 6.1.7601.1.1251.359.1033.18.1014.531 [GMT 2:00] Running from: c:\users\Nikolay Kolev\Desktop\ComboFix.exe Command switches used :: c:\users\Nikolay Kolev\Desktop\CFScript.txt AV: Trend Micro Internet Security *Disabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902} FW: Trend Micro Personal Firewall *Disabled* {70A91CD9-303D-A217-A80E-6DEE136EDB2B} SP: Trend Micro Internet Security *Disabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . FILE :: "c:\users\Nikolay Kolev\AppData\Roaming\testxxx.bat" . file zipped: c:\users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WINLOGO.exe file zipped: c:\users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WINLOGOS.exe file zipped: c:\users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wuT2.exe file zipped: c:\users\Nikolay Kolev\AppData\Roaming\regsrv64.exe . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Nikolay Kolev\AppData\Roaming\regsrv64.exe . . ((((((((((((((((((((((((( Files Created from 2011-11-26 to 2011-12-26 ))))))))))))))))))))))))))))))) . . 2011-12-25 16:10 . 2011-12-25 16:10 -------- d-----w- c:\programdata\ASUS WebStorage 2011-12-22 07:55 . 2011-12-23 12:10 -------- d-----w- c:\users\Nikolay Kolev\AppData\Local\PMB Files 2011-12-22 07:55 . 2011-12-22 07:56 -------- d-----w- c:\programdata\PMB Files 2011-12-22 07:55 . 2011-12-22 07:55 -------- d-----w- c:\program files\Pando Networks . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-12-25 16:14 . 2011-07-08 18:10 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-09-29 15:04 . 2011-09-30 08:38 95 ----a-w- c:\users\Nikolay Kolev\AppData\Roaming\testxxx.bat 2011-08-27 07:39 . 2011-07-08 18:03 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B] @="{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}" [HKEY_CLASSES_ROOT\CLSID\{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O] @="{618A47A2-528B-4D9A-AFC8-97D3233511E2}" [HKEY_CLASSES_ROOT\CLSID\{618A47A2-528B-4D9A-AFC8-97D3233511E2}] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904] "ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2010-04-13 548744] "ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2010-09-25 3058304] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296] "HotkeyMon"="AsusSender.exe" [2010-05-24 35304] "HotkeyService"="AsusSender.exe" [2010-05-24 35304] "SuperHybridEngine"="AsusSender.exe" [2010-05-24 35304] "LiveUpdate"="AsusSender.exe" [2010-05-24 35304] "CapsHook"="AsusSender.exe" [2010-05-24 35304] "Eee Docking"="c:\program files\ASUS\Eee Docking\Eee Docking.exe" [2010-06-10 414384] "UfSeAgnt.exe"="c:\program files\Trend Micro\Internet Security\UfSeAgnt.exe" [2010-02-23 1024368] "GraphicsSwitch"="AsusSender.exe" [2010-05-24 35304] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-05-10 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-05-10 173592] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-05-10 150552] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-03-12 8546848] "OOBESetup"="c:\program files\asus\OOBERegBackup\OOBERegBackup.exe" [2009-12-11 334848] "Boingo Wi-Fi"="c:\program files\Boingo\Boingo Wi-Fi\Boingo.lnk" [2011-07-08 2429] "ASUSPRP"="c:\program files\ASUS\APRP\APRP.EXE" [2010-09-25 2018032] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920] "ASUSWebStorage"="c:\program files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe" [2011-07-29 737104] . c:\users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ WINLOGO.exe [2011-12-26 290304] WINLOGOS.exe [2011-12-26 327680] wuT2.exe [2011-12-26 362140] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ AsusVibeLauncher.lnk - c:\program files\ASUS\AsusVibe\AsusVibeLauncher.exe [2011-12-25 549040] Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-5-21 828704] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-05-21 293928] R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-05-21 33320] R3 CFcatchme;CFcatchme;c:\users\NIKOLA~1\AppData\Local\Temp\CFcatchme.sys [x] R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x] R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000] R3 tmevtmgr;tmevtmgr;c:\windows\system32\DRIVERS\tmevtmgr.sys [2010-07-19 51792] R3 tmlwf;Trend Micro NDIS 6.0 Filter Driver;c:\windows\system32\DRIVERS\tmlwf.sys [2010-02-23 146448] R3 TmPfw;Trend Micro Personal Firewall;c:\program files\Trend Micro\Internet Security\TmPfw.exe [2010-02-23 497008] R3 TmProxy;Trend Micro Proxy Service;c:\program files\Trend Micro\Internet Security\TmProxy.exe [2010-02-23 689416] R3 tmwfp;Trend Micro WFP Callout Driver;c:\windows\system32\DRIVERS\tmwfp.sys [2010-02-23 283152] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224] S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2011-07-10 691696] S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2010-03-31 11520] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128] S2 AsusService;Asus Launcher Service;c:\windows\System32\AsusService.exe [2009-08-19 219136] S2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-27 821664] S2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2010-04-23 483688] S2 tmpreflt;tmpreflt;c:\windows\system32\DRIVERS\tmpreflt.sys [2010-07-30 36432] S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-04-13 109960] S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2010-05-10 68208] S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2010-04-23 550760] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2010-04-23 195944] S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2010-04-23 21864] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2010-04-23 19304] S3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2010-04-23 209768] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 . . ------- Supplementary Scan ------- . uStart Page = hxxp://asus.msn.com IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm TCP: DhcpNameServer = 192.168.1.1 TCP: Interfaces\{3B8C6890-AA8C-4932-A67B-DE832605BBB0}: NameServer = 95.111.79.65,89.190.192.166 FF - ProfilePath - c:\users\Nikolay Kolev\AppData\Roaming\Mozilla\Firefox\Profiles\l7dxcsxs.default\ . . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'Explorer.exe'(2456) c:\progra~1\ASUS\ASUSWE~1\30108~1.222\ASUSWS~1.DLL c:\program files\WIDCOMM\Bluetooth Software\btncopy.dll . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\WLANExt.exe c:\windows\system32\conhost.exe c:\program files\WIDCOMM\Bluetooth Software\btwdins.exe c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe c:\program files\Trend Micro\Internet Security\SfCtlCom.exe c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe c:\windows\system32\taskhost.exe c:\windows\system32\conhost.exe c:\windows\system32\sppsvc.exe c:\\?\c:\windows\system32\wbem\WMIADAP.EXE . ************************************************************************** . Completion time: 2011-12-26 12:47:53 - machine was rebooted ComboFix-quarantined-files.txt 2011-12-26 10:47 ComboFix2.txt 2011-12-25 20:18 . Pre-Run: 84 276 453 376 bytes free Post-Run: 84 217 450 496 bytes free . - - End Of File - - 3AABB5F12908BADF776E5F87ECCC7A61

Лог файла не е вчерашния, но имаме още работа.

Моля, архивирайте папката C:\Qoobox\Quarantine => и я качете на този адрес => http://file.bg/

Копирайте линка за download в следващия си пост за да я изтеглим.

Следните файлове останаха неизтрити:

c:\users\Nikolay Kolev\AppData\Roaming\testxxx.bat
c:\users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WINLOGO.exe
c:\users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WINLOGOS.exe
c:\users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wuT2.exe

Доколкото имам информация, MBAM може да се справи с тях, затова не е нужно да повтаряме скрипта:

Следват последните няколко задължителни проверки:

  • Изтеглете Malwarebytes' Anti-Malware оттук и я инсталирайте.
  • Стартирайте Malwarebytes' Anti-Malware и отидете на UPDATE и натиснете Check for updates.
  • След това се върнете на Scanner изберете Perform QUICK Scan, след това кликнете на Scan.
  • Сканирането ще отнеме малко време, затова моля бъдете търпеливи.
  • Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.
  • Уверете се, че на всички редове има отметки, и кликнете Remove Selected.
  • Когато всичко бъде премахнато, логът ще бъде отворен в Notepad. Копирайте лога и го публикувайте в следващия си коментар в темата.
Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

1) Изтеглете: ESET Online Scanner

2) Стартирайте esetsmartinstaller_enu.exe

3) Сложете отметка на YES, I accept the Terms of Use и изберете Start

4) Скенерът ще започне да изтегля компонентите, които са му необходими.

5) Уверете се, че има отметки на следните редове, включително и тези от менюто Advanced Settings:

  • Scan archives
  • Scan for potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth technology
И накрая изберете Start

Не слагайте отметка пред Remove found threats

6) Скенерът ще започне да изтегля последните дефиниции.

7) След, като сканирането завърши изберете Finish.

8) Отидете в:

C:\Program Files\ESET\ESET Online Scanner

Отворете файла log.txt , копирайте съдържанието му и го поставете в следващия си пост.

  • Автор

http://file.bg/c139048jZSef

това е папката, заедно с двата лога от програмите

Malwarebytes' Anti-Malware 1.51.2.1300

www.malwarebytes.org

Database version: 911122602

Windows 6.1.7601 Service Pack 1

Internet Explorer 8.0.7601.17514

26.12.2011 г. 16:53:13

mbam-log-2011-12-26 (16-53-13).txt

Scan type: Quick scan

Objects scanned: 162657

Time elapsed: 7 minute(s), 30 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 2

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\Users\nikolay kolev\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\WINLOGO.exe (VirTool.CeeInject) -> Quarantined and deleted successfully.

c:\Users\nikolay kolev\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\WINLOGOS.exe (Trojan.Agent) -> Quarantined and deleted successfully.

ESETSmartInstaller@High as downloader log:

all ok

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=ce340a20187c92428419a674fca538ad

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2011-12-26 05:39:47

# local_time=2011-12-26 07:39:47 (+0200, FLE Standard Time)

# country="Bulgaria"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=513 16777085 100 100 4080 57993998 0 0

# compatibility_mode=5893 16776574 66 85 13037752 76543173 0 0

# compatibility_mode=8192 67108863 100 0 3865 3865 0 0

# scanned=86563

# found=48

# cleaned=0

# scan_time=9205

C:\Program Files\mIRC\mirc.7.1x-patch.exe a variant of Win32/HackTool.Patcher.T application (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\[4]-Submit_2011-12-26_12.24.53.zip multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\1238.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\1870.exe.vir Win32/Slenfbot.AJ worm (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\2905.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\2B37.exe.vir Win32/CoinMiner.I trojan (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\35D.exe.vir a variant of Win32/AutoRun.Injector.AQ worm (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\4125.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\431E.exe.vir Win32/AutoRun.Injector.AM worm (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\4379.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\498B.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\55B2.tmp.vir a variant of Win32/AutoRun.Injector.AQ worm (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\5C66.exe.vir a variant of Win32/Injector.LUI trojan (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\6243.exe.vir Win32/Slenfbot.AJ worm (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\6C4F.exe.vir a variant of Win32/Injector.KZH trojan (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\82BC.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\86F9.exe.vir a variant of Win32/AutoRun.Injector.AQ worm (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\8753.exe.vir a variant of Win32/Injector.JLM trojan (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\904.exe.vir a variant of Win32/Injector.LRB trojan (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\9073.exe.vir a variant of Win32/Injector.LUI trojan (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\93D5.exe.vir Win32/Slenfbot.AJ worm (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\9A21.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\9B25.exe.vir a variant of Win32/AutoRun.Injector.AQ worm (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\A83B.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\B42D.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\B720.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\B7C4.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\BAC.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\BF86.exe.vir Win32/CoinMiner.H trojan (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\C44B.exe.vir Win32/Slenfbot.AJ worm (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\CCF9.exe.vir Win32/CoinMiner.I trojan (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\D208.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\D348.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\D976.exe.vir Win32/CoinMiner.H trojan (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\DC05.exe.vir a variant of Win32/Injector.LRB trojan (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\DDD0.exe.vir a variant of Win32/Injector.KSW trojan (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\FCA6.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\Hfygyn.exe.vir a variant of Win32/Injector.IDQ trojan (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\Qfygyw.exe.vir a variant of Win32/AutoRun.Injector.AQ worm (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\taskmgrs.exe.vir a variant of Win32/BitCoinMiner.B application (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\stepx2.exe.vir multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\taskmgrsx.exe.vir a variant of Win32/AutoRun.Injector.AQ worm (unable to clean) 00000000000000000000000000000000 I

C:\Qoobox\Quarantine\C\Users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WINLOGONs.exe.vir a variant of Win32/Injector.KSW trojan (unable to clean) 00000000000000000000000000000000 I

C:\Users\Nikolay Kolev\AppData\Roaming\htc.exe a variant of Win32/HiddenStart.A application (unable to clean) 00000000000000000000000000000000 I

C:\Users\Nikolay Kolev\Desktop\Quarantine.rar multiple threats (unable to clean) 00000000000000000000000000000000 I

D:\Downloads\InternationalPrimoPDF.exe Win32/OpenCandy application (unable to clean) 00000000000000000000000000000000 I

D:\Downloads\SoftonicDownloader_for_freecall.exe a variant of Win32/SoftonicDownloader.A application (unable to clean) 00000000000000000000000000000000 I

D:\Downloads\SoftonicDownloader_for_kmplayer.exe a variant of Win32/SoftonicDownloader.A application (unable to clean) 00000000000000000000000000000000 I

Редактирано от DoMiNuS (преглед на промените)

Здравейте,

Добра работа...вече сме на финалната права.

Да пуснем един последен скрипт...

*. Отворете notepad.exe и с copy/paste въведете следната информация:

KILLALL::
File::
c:usersNikolay KolevAppDataRoamingtestxxx.bat
c:Usersnikolay kolevAppDataRoamingmicrosoftWindowsstart menuProgramsStartupwuT2.exe
C:UsersNikolay KolevAppDataRoaminghtc.exe
C:UsersNikolay KolevDesktopQuarantine.rar

*.Запазете файла с име CFScript и го провлачете и пуснете в Combofix (както е показано на картинката отдолу).

Публикувано изображение

*. По време на сканиране от страна на ComboFix не стартирайте никакви други приложения, не натискайте клавиши от клавиатурата и не местете мишката !

*. Когато Combofix приключи ще създаде лог файла. Моя, публикувайте този файл в следващия си пост.

  • Автор

ComboFix 11-12-24.10 - Nikolay Kolev 12.2011 г. 23:55:20.3.4 - x86 Microsoft Windows 7 Starter 6.1.7601.1.1251.359.1033.18.1014.392 [GMT 2:00] Running from: c:\users\Nikolay Kolev\Desktop\ComboFix.exe Command switches used :: c:\users\Nikolay Kolev\Desktop\CFScript.txt AV: Trend Micro Internet Security *Disabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902} FW: Trend Micro Personal Firewall *Disabled* {70A91CD9-303D-A217-A80E-6DEE136EDB2B} SP: Trend Micro Internet Security *Disabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . FILE :: "c:\users\Nikolay Kolev\AppData\Roaming\htc.exe" "c:\users\Nikolay kolev\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\wuT2.exe" "c:\users\Nikolay Kolev\AppData\Roaming\testxxx.bat" "c:\users\Nikolay Kolev\Desktop\Quarantine.rar" . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . ---- Previous Run ------- . c:\users\Nikolay Kolev\AppData\Roaming\regsrv64.exe . . ((((((((((((((((((((((((( Files Created from 2011-11-26 to 2011-12-26 ))))))))))))))))))))))))))))))) . . 2011-12-26 22:10 . 2011-12-26 22:10 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-12-26 15:01 . 2011-12-26 15:01 -------- d-----w- c:\program files\ESET 2011-12-26 14:41 . 2011-12-26 14:41 -------- d-----w- c:\users\Nikolay Kolev\AppData\Roaming\Malwarebytes 2011-12-26 14:40 . 2011-12-26 14:40 -------- d-----w- c:\programdata\Malwarebytes 2011-12-26 14:40 . 2011-12-26 14:41 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-12-26 14:40 . 2011-08-31 15:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-12-26 10:41 . 2011-12-26 22:12 -------- d-----w- c:\users\Nikolay Kolev\AppData\Local\temp 2011-12-25 16:10 . 2011-12-25 16:10 -------- d-----w- c:\programdata\ASUS WebStorage 2011-12-22 07:55 . 2011-12-23 12:10 -------- d-----w- c:\users\Nikolay Kolev\AppData\Local\PMB Files 2011-12-22 07:55 . 2011-12-22 07:56 -------- d-----w- c:\programdata\PMB Files 2011-12-22 07:55 . 2011-12-22 07:55 -------- d-----w- c:\program files\Pando Networks . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-12-25 16:14 . 2011-07-08 18:10 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-09-29 15:04 . 2011-09-30 08:38 95 ----a-w- c:\users\Nikolay Kolev\AppData\Roaming\testxxx.bat 2011-08-27 07:39 . 2011-07-08 18:03 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B] @="{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}" [HKEY_CLASSES_ROOT\CLSID\{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O] @="{618A47A2-528B-4D9A-AFC8-97D3233511E2}" [HKEY_CLASSES_ROOT\CLSID\{618A47A2-528B-4D9A-AFC8-97D3233511E2}] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904] "ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2010-04-13 548744] "ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2010-09-25 3058304] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296] "HotkeyMon"="AsusSender.exe" [2010-05-24 35304] "HotkeyService"="AsusSender.exe" [2010-05-24 35304] "SuperHybridEngine"="AsusSender.exe" [2010-05-24 35304] "LiveUpdate"="AsusSender.exe" [2010-05-24 35304] "CapsHook"="AsusSender.exe" [2010-05-24 35304] "Eee Docking"="c:\program files\ASUS\Eee Docking\Eee Docking.exe" [2010-06-10 414384] "UfSeAgnt.exe"="c:\program files\Trend Micro\Internet Security\UfSeAgnt.exe" [2010-02-23 1024368] "GraphicsSwitch"="AsusSender.exe" [2010-05-24 35304] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-05-10 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-05-10 173592] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-05-10 150552] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-03-12 8546848] "OOBESetup"="c:\program files\asus\OOBERegBackup\OOBERegBackup.exe" [2009-12-11 334848] "Boingo Wi-Fi"="c:\program files\Boingo\Boingo Wi-Fi\Boingo.lnk" [2011-07-08 2429] "ASUSPRP"="c:\program files\ASUS\APRP\APRP.EXE" [2010-09-25 2018032] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920] "ASUSWebStorage"="c:\program files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe" [2011-07-29 737104] "Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2011-08-31 1047208] . c:\users\Nikolay Kolev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ wuT2.exe [2011-12-26 362140] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ AsusVibeLauncher.lnk - c:\program files\ASUS\AsusVibe\AsusVibeLauncher.exe [2011-12-25 549040] Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-5-21 828704] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-05-21 293928] R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-05-21 33320] R3 CFcatchme;CFcatchme;c:\users\NIKOLA~1\AppData\Local\Temp\CFcatchme.sys [x] R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x] R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000] R3 tmevtmgr;tmevtmgr;c:\windows\system32\DRIVERS\tmevtmgr.sys [2010-07-19 51792] R3 tmlwf;Trend Micro NDIS 6.0 Filter Driver;c:\windows\system32\DRIVERS\tmlwf.sys [2010-02-23 146448] R3 TmPfw;Trend Micro Personal Firewall;c:\program files\Trend Micro\Internet Security\TmPfw.exe [2010-02-23 497008] R3 TmProxy;Trend Micro Proxy Service;c:\program files\Trend Micro\Internet Security\TmProxy.exe [2010-02-23 689416] R3 tmwfp;Trend Micro WFP Callout Driver;c:\windows\system32\DRIVERS\tmwfp.sys [2010-02-23 283152] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224] S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2011-07-10 691696] S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2010-03-31 11520] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128] S2 AsusService;Asus Launcher Service;c:\windows\System32\AsusService.exe [2009-08-19 219136] S2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-27 821664] S2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2010-04-23 483688] S2 tmpreflt;tmpreflt;c:\windows\system32\DRIVERS\tmpreflt.sys [2010-07-30 36432] S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-04-13 109960] S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2010-05-10 68208] S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2010-04-23 550760] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2010-04-23 195944] S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2010-04-23 21864] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2010-04-23 19304] S3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2010-04-23 209768] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 . . ------- Supplementary Scan ------- . uStart Page = hxxp://asus.msn.com IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm TCP: DhcpNameServer = 192.168.1.1 TCP: Interfaces\{3B8C6890-AA8C-4932-A67B-DE832605BBB0}: NameServer = 95.111.79.65,89.190.192.166 FF - ProfilePath - c:\users\Nikolay Kolev\AppData\Roaming\Mozilla\Firefox\Profiles\l7dxcsxs.default\ . . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'Explorer.exe'(3776) c:\progra~1\ASUS\ASUSWE~1\30108~1.222\ASUSWS~1.DLL c:\program files\WIDCOMM\Bluetooth Software\btncopy.dll . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\WLANExt.exe c:\windows\system32\conhost.exe c:\program files\WIDCOMM\Bluetooth Software\btwdins.exe c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe c:\program files\Trend Micro\Internet Security\SfCtlCom.exe c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe c:\windows\system32\taskhost.exe c:\windows\system32\conhost.exe c:\windows\system32\sppsvc.exe c:\\?\c:\windows\system32\wbem\WMIADAP.EXE . ************************************************************************** . Completion time: 2011-12-27 00:17:32 - machine was rebooted ComboFix-quarantined-files.txt 2011-12-26 22:17 ComboFix2.txt 2011-12-26 10:47 ComboFix3.txt 2011-12-25 20:18 . Pre-Run: 83 020 529 664 bytes free Post-Run: 82 957 733 888 bytes free . - - End Of File - - FB12B47B2C4F9CE0BE875D4E7A070C89

Брей че упорити файлове...

Изтеглете OTM.exe и го запазете на десктопа.

Стартирайте файла Публикувано изображение с двукратен клик на мишката и с copy/paste под колонката "Paste Instructions for Items to be Moved" въведете това:

:files
C:\users\Nikolay Kolev\AppData\Roaming\testxxx.bat
C:\Users\nikolay kolev\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\wuT2.exe
C:\Users\Nikolay Kolev\AppData\Roaming\htc.exe
C:\Users\Nikolay Kolev\Desktop\Quarantine.rar
:Commands
[Reboot]

Натиснете бутона Публикувано изображение

Ще се създаде лог файл след рестарта на машината.

Публикувайте го в следващия си пост.

  • Автор

всичко хубаво ама не се появи лог файл след рестарта :?

  • Автор

========== FILES ========== C:\users\Nikolay Kolev\AppData\Roaming\testxxx.bat moved successfully. C:\Users\Nikolay kolev\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\wuT2.exe moved successfully. C:\Users\Nikolay Kolev\AppData\Roaming\htc.exe moved successfully. File/Folder C:\Users\Nikolay Kolev\Desktop\Quarantine.rar not found. ========== COMMANDS ========== OTM by OldTimer - Version 3.1.19.0 log created on 12272011_010502

Разгеле...най-накрая се изтриха. :)

Може ли да архивирате и папката C:\_OTM\MovedFiles (както направихте с предишната папка) ?

Поставете линк в следващия си пост за да я изтеглим.

След това да направим една финална проверка за рууткити:

Моля изтеглете последната версия на TDSSKiller оттук и я запазете на вашия декстоп.

  • Стартирайте TDSSKiller.exe за да стартирате приложението. След това кликнете върху бутона Change parameters.

    Публикувано изображение

  • Сложете отметки пред Verify Driver Digital Signature и Detect TDLFS file system и натиснете ОК.

    Публикувано изображение

  • Натиснете бутона Start Scan.

    Публикувано изображение

  • Ако подозрителен обект бъде засечен, действието по подразбиране ще бъде Skip, кликнете върху Continue.

    Публикувано изображение

  • Ако зловредни обекти бъдат намерени, тогава от падащото меню ще имате три възможности.

    Бъдете сигурни, че избраното действие е Cure и натиснете върху Continue > Рестартирайте за да бъде завършена поправката.

    Публикувано изображение

    Забележка: Ако Cure бутона не е наличен от възможностите, тогава моля изберете Skip бутона, не избирайте Delete освен ако не сте инструктирани затова.

  • Лог файл ще бъде създаден в свободната директория на дял C:\ . Потърсете за лог с името "TDSSKiller.[Version]_[Date]_[Time]_log.txt" и копирайте съдържанието му в следващия си пост.
  • Автор
http://file.bg/c139117dnYXq 10:58:25.0059 1348 TDSS rootkit removing tool 2.6.25.0 Dec 23 2011 14:51:16 10:58:25.0301 1348 ============================================================ 10:58:25.0301 1348 Current date / time: 2011/12/27 10:58:25.0301 10:58:25.0301 1348 SystemInfo: 10:58:25.0301 1348 10:58:25.0302 1348 OS Version: 6.1.7601 ServicePack: 1.0 10:58:25.0302 1348 Product type: Workstation 10:58:25.0302 1348 ComputerName: DOMINUS 10:58:25.0303 1348 UserName: Nikolay Kolev 10:58:25.0303 1348 Windows directory: C:\windows 10:58:25.0303 1348 System windows directory: C:\windows 10:58:25.0303 1348 Processor architecture: Intel x86 10:58:25.0303 1348 Number of processors: 4 10:58:25.0303 1348 Page size: 0x1000 10:58:25.0303 1348 Boot type: Normal boot 10:58:25.0303 1348 ============================================================ 10:58:26.0204 1348 Initialize success 10:58:50.0351 1104 ============================================================ 10:58:50.0351 1104 Scan started 10:58:50.0351 1104 Mode: Manual; SigCheck; TDLFS; 10:58:50.0351 1104 ============================================================ 10:58:51.0921 1104 1394ohci (d01e0b1cef9ee82100c2bb07294880ef) C:\windows\system32\drivers\1394ohci.sys 10:58:52.0213 1104 1394ohci - ok 10:58:52.0365 1104 ACPI (cea80c80bed809aa0da6febc04733349) C:\windows\system32\drivers\ACPI.sys 10:58:52.0426 1104 ACPI - ok 10:58:52.0496 1104 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\windows\system32\drivers\acpipmi.sys 10:58:52.0628 1104 AcpiPmi - ok 10:58:52.0777 1104 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys 10:58:52.0848 1104 adp94xx - ok 10:58:53.0022 1104 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys 10:58:53.0080 1104 adpahci - ok 10:58:53.0126 1104 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys 10:58:53.0180 1104 adpu320 - ok 10:58:53.0330 1104 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\windows\system32\drivers\afd.sys 10:58:53.0440 1104 AFD - ok 10:58:53.0556 1104 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\drivers\agp440.sys 10:58:53.0598 1104 agp440 - ok 10:58:53.0716 1104 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys 10:58:53.0760 1104 aic78xx - ok 10:58:53.0943 1104 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\drivers\aliide.sys 10:58:53.0983 1104 aliide - ok 10:58:54.0053 1104 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\drivers\amdagp.sys 10:58:54.0097 1104 amdagp - ok 10:58:54.0144 1104 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\drivers\amdide.sys 10:58:54.0189 1104 amdide - ok 10:58:54.0273 1104 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys 10:58:54.0375 1104 AmdK8 - ok 10:58:54.0496 1104 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys 10:58:54.0596 1104 AmdPPM - ok 10:58:54.0812 1104 amdsata (d320bf87125326f996d4904fe24300fc) C:\windows\system32\drivers\amdsata.sys 10:58:54.0856 1104 amdsata - ok 10:58:54.0982 1104 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys 10:58:55.0030 1104 amdsbs - ok 10:58:55.0071 1104 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\windows\system32\drivers\amdxata.sys 10:58:55.0110 1104 amdxata - ok 10:58:55.0182 1104 AppID (aea177f783e20150ace5383ee368da19) C:\windows\system32\drivers\appid.sys 10:58:55.0481 1104 AppID - ok 10:58:55.0648 1104 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys 10:58:55.0691 1104 arc - ok 10:58:55.0720 1104 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys 10:58:55.0765 1104 arcsas - ok 10:58:55.0924 1104 AsUpIO (561d6b76c045311691b870f6b3f19eab) C:\windows\system32\drivers\AsUpIO.sys 10:58:56.0011 1104 AsUpIO - ok 10:58:56.0069 1104 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys 10:58:56.0343 1104 AsyncMac - ok 10:58:56.0481 1104 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\drivers\atapi.sys 10:58:56.0522 1104 atapi - ok 10:58:56.0615 1104 athr (76bab0c824e2d05b940c4dd40a9b08bf) C:\windows\system32\DRIVERS\athr.sys 10:58:56.0783 1104 athr - ok 10:58:56.0974 1104 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys 10:58:57.0079 1104 b06bdrv - ok 10:58:57.0208 1104 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys 10:58:57.0294 1104 b57nd60x - ok 10:58:57.0613 1104 BCM43XX (2be0f23d494c301641c42ead2fdcd4f2) C:\windows\system32\DRIVERS\bcmwl6.sys 10:58:57.0850 1104 BCM43XX - ok 10:58:57.0988 1104 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys 10:58:58.0130 1104 Beep - ok 10:58:58.0283 1104 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys 10:58:58.0346 1104 blbdrive - ok 10:58:58.0479 1104 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\windows\system32\DRIVERS\bowser.sys 10:58:58.0560 1104 bowser - ok 10:58:58.0667 1104 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys 10:58:58.0751 1104 BrFiltLo - ok 10:58:58.0779 1104 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys 10:58:58.0859 1104 BrFiltUp - ok 10:58:58.0987 1104 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys 10:58:59.0110 1104 Brserid - ok 10:58:59.0220 1104 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys 10:58:59.0330 1104 BrSerWdm - ok 10:58:59.0375 1104 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys 10:58:59.0492 1104 BrUsbMdm - ok 10:58:59.0597 1104 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys 10:58:59.0666 1104 BrUsbSer - ok 10:58:59.0796 1104 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\windows\system32\drivers\BthEnum.sys 10:58:59.0902 1104 BthEnum - ok 10:59:00.0028 1104 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys 10:59:00.0094 1104 BTHMODEM - ok 10:59:00.0219 1104 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\windows\system32\DRIVERS\bthpan.sys 10:59:00.0299 1104 BthPan - ok 10:59:00.0468 1104 BTHPORT (c2fbf6d271d9a94d839c416bf186ead9) C:\windows\System32\Drivers\BTHport.sys 10:59:00.0584 1104 BTHPORT - ok 10:59:00.0731 1104 BTHUSB (c81e9413a25a439f436b1d4b6a0cf9e9) C:\windows\System32\Drivers\BTHUSB.sys 10:59:00.0795 1104 BTHUSB - ok 10:59:00.0953 1104 btwampfl (d57641bf7e6af5c996eab931afadc271) C:\windows\system32\drivers\btwampfl.sys 10:59:01.0002 1104 btwampfl - ok 10:59:01.0051 1104 btwaudio (81471a7d64d1fc014d47a4cf33cd701e) C:\windows\system32\drivers\btwaudio.sys 10:59:01.0086 1104 btwaudio - ok 10:59:01.0264 1104 btwavdt (098af3559710fcec05b7aa5159f435f9) C:\windows\system32\DRIVERS\btwavdt.sys 10:59:01.0302 1104 btwavdt - ok 10:59:01.0474 1104 btwl2cap (de53089f0678cb5f0afeb867acb0fb05) C:\windows\system32\DRIVERS\btwl2cap.sys 10:59:01.0503 1104 btwl2cap - ok 10:59:01.0537 1104 btwrchid (e28ef3c4ef1849b876f850015066380b) C:\windows\system32\DRIVERS\btwrchid.sys 10:59:01.0567 1104 btwrchid - ok 10:59:01.0663 1104 catchme - ok 10:59:01.0770 1104 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys 10:59:01.0898 1104 cdfs - ok 10:59:02.0038 1104 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\windows\system32\drivers\cdrom.sys 10:59:02.0148 1104 cdrom - ok 10:59:02.0331 1104 CFcatchme - ok 10:59:02.0418 1104 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys 10:59:02.0507 1104 circlass - ok 10:59:02.0646 1104 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys 10:59:02.0701 1104 CLFS - ok 10:59:02.0832 1104 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys 10:59:02.0910 1104 CmBatt - ok 10:59:03.0042 1104 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\drivers\cmdide.sys 10:59:03.0087 1104 cmdide - ok 10:59:03.0152 1104 CNG (1b675691ed940766149c93e8f4488d68) C:\windows\system32\Drivers\cng.sys 10:59:03.0251 1104 CNG - ok 10:59:03.0278 1104 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys 10:59:03.0321 1104 Compbatt - ok 10:59:03.0419 1104 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\windows\system32\drivers\CompositeBus.sys 10:59:03.0494 1104 CompositeBus - ok 10:59:03.0623 1104 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys 10:59:03.0664 1104 crcdisk - ok 10:59:03.0847 1104 DfsC (f024449c97ec1e464aaffda18593db88) C:\windows\system32\Drivers\dfsc.sys 10:59:03.0964 1104 DfsC - ok 10:59:04.0026 1104 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys 10:59:04.0186 1104 discache - ok 10:59:04.0327 1104 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys 10:59:04.0370 1104 Disk - ok 10:59:04.0474 1104 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys 10:59:04.0529 1104 drmkaud - ok 10:59:04.0626 1104 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\windows\System32\drivers\dxgkrnl.sys 10:59:04.0726 1104 DXGKrnl - ok 10:59:04.0879 1104 EagleXNt - ok 10:59:05.0080 1104 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys 10:59:05.0355 1104 ebdrv - ok 10:59:05.0551 1104 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys 10:59:05.0619 1104 elxstor - ok 10:59:05.0677 1104 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\drivers\errdev.sys 10:59:05.0740 1104 ErrDev - ok 10:59:05.0915 1104 ETD (7c87df14552a5e0270dbd906baff85fb) C:\windows\system32\DRIVERS\ETD.sys 10:59:05.0966 1104 ETD - ok 10:59:06.0139 1104 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys 10:59:06.0260 1104 exfat - ok 10:59:06.0407 1104 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys 10:59:06.0553 1104 fastfat - ok 10:59:06.0719 1104 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys 10:59:06.0784 1104 fdc - ok 10:59:06.0950 1104 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys 10:59:06.0993 1104 FileInfo - ok 10:59:07.0034 1104 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys 10:59:07.0166 1104 Filetrace - ok 10:59:07.0310 1104 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys 10:59:07.0469 1104 flpydisk - ok 10:59:07.0654 1104 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys 10:59:07.0707 1104 FltMgr - ok 10:59:07.0768 1104 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys 10:59:07.0812 1104 FsDepends - ok 10:59:07.0979 1104 fssfltr (b74b0578fd1d3f897e95f2a2b69ea051) C:\windows\system32\DRIVERS\fssfltr.sys 10:59:08.0017 1104 fssfltr - ok 10:59:08.0075 1104 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\windows\system32\drivers\Fs_Rec.sys 10:59:08.0117 1104 Fs_Rec - ok 10:59:08.0201 1104 fvevol (8a73e79089b282100b9393b644cb853b) C:\windows\system32\DRIVERS\fvevol.sys 10:59:08.0268 1104 fvevol - ok 10:59:08.0336 1104 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys 10:59:08.0378 1104 gagp30kx - ok 10:59:08.0424 1104 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys 10:59:08.0501 1104 hcw85cir - ok 10:59:08.0685 1104 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\windows\system32\drivers\HdAudio.sys 10:59:08.0774 1104 HdAudAddService - ok 10:59:08.0925 1104 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\windows\system32\drivers\HDAudBus.sys 10:59:09.0000 1104 HDAudBus - ok 10:59:09.0080 1104 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys 10:59:09.0138 1104 HidBatt - ok 10:59:09.0294 1104 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys 10:59:09.0370 1104 HidBth - ok 10:59:09.0484 1104 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys 10:59:09.0564 1104 HidIr - ok 10:59:09.0732 1104 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\windows\system32\drivers\hidusb.sys 10:59:09.0798 1104 HidUsb - ok 10:59:09.0990 1104 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\drivers\HpSAMD.sys 10:59:10.0034 1104 HpSAMD - ok 10:59:10.0269 1104 HTTP (871917b07a141bff43d76d8844d48106) C:\windows\system32\drivers\HTTP.sys 10:59:10.0425 1104 HTTP - ok 10:59:10.0614 1104 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\windows\system32\drivers\hwpolicy.sys 10:59:10.0653 1104 hwpolicy - ok 10:59:10.0835 1104 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\drivers\i8042prt.sys 10:59:10.0901 1104 i8042prt - ok 10:59:11.0124 1104 iaStor (d483687eace0c065ee772481a96e05f5) C:\windows\system32\DRIVERS\iaStor.sys 10:59:11.0178 1104 iaStor - ok 10:59:11.0358 1104 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\windows\system32\drivers\iaStorV.sys 10:59:11.0436 1104 iaStorV - ok 10:59:11.0826 1104 igfx (d0074897c6bc132f3980ea4654bf7fb9) C:\windows\system32\DRIVERS\igdkmd32.sys 10:59:12.0211 1104 igfx - ok 10:59:12.0338 1104 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys 10:59:12.0379 1104 iirsp - ok 10:59:12.0649 1104 IntcAzAudAddService (947318c01c648a054a05dbd1c7f73e3b) C:\windows\system32\drivers\RTKVHDA.sys 10:59:12.0917 1104 IntcAzAudAddService - ok 10:59:13.0123 1104 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\drivers\intelide.sys 10:59:13.0164 1104 intelide - ok 10:59:13.0338 1104 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys 10:59:13.0406 1104 intelppm - ok 10:59:13.0527 1104 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys 10:59:13.0675 1104 IpFilterDriver - ok 10:59:13.0814 1104 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\windows\system32\drivers\IPMIDrv.sys 10:59:13.0904 1104 IPMIDRV - ok 10:59:14.0042 1104 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys 10:59:14.0169 1104 IPNAT - ok 10:59:14.0293 1104 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys 10:59:14.0483 1104 IRENUM - ok 10:59:14.0601 1104 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\drivers\isapnp.sys 10:59:14.0642 1104 isapnp - ok 10:59:14.0693 1104 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\windows\system32\drivers\msiscsi.sys 10:59:14.0752 1104 iScsiPrt - ok 10:59:14.0817 1104 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\drivers\kbdclass.sys 10:59:14.0860 1104 kbdclass - ok 10:59:14.0945 1104 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\windows\system32\drivers\kbdhid.sys 10:59:15.0017 1104 kbdhid - ok 10:59:15.0104 1104 kbfiltr (3eb803312987ff44265c87cb960df6ab) C:\windows\system32\DRIVERS\kbfiltr.sys 10:59:15.0134 1104 kbfiltr - ok 10:59:15.0194 1104 KSecDD (412cea1aa78cc02a447f5c9e62b32ff1) C:\windows\system32\Drivers\ksecdd.sys 10:59:15.0244 1104 KSecDD - ok 10:59:15.0294 1104 KSecPkg (26c046977e85b95036453d7b88ba1820) C:\windows\system32\Drivers\ksecpkg.sys 10:59:15.0343 1104 KSecPkg - ok 10:59:15.0472 1104 L1C (d1f734d9a7aaf078d88ceb51900699a7) C:\windows\system32\DRIVERS\L1C62x86.sys 10:59:15.0510 1104 L1C - ok 10:59:15.0673 1104 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys 10:59:15.0832 1104 lltdio - ok 10:59:15.0985 1104 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys 10:59:16.0030 1104 LSI_FC - ok 10:59:16.0061 1104 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys 10:59:16.0108 1104 LSI_SAS - ok 10:59:16.0140 1104 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys 10:59:16.0182 1104 LSI_SAS2 - ok 10:59:16.0213 1104 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys 10:59:16.0258 1104 LSI_SCSI - ok 10:59:16.0302 1104 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys 10:59:16.0429 1104 luafv - ok 10:59:16.0546 1104 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys 10:59:16.0586 1104 megasas - ok 10:59:16.0633 1104 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys 10:59:16.0686 1104 MegaSR - ok 10:59:16.0728 1104 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys 10:59:16.0878 1104 Modem - ok 10:59:17.0016 1104 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys 10:59:17.0087 1104 monitor - ok 10:59:17.0224 1104 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\drivers\mouclass.sys 10:59:17.0264 1104 mouclass - ok 10:59:17.0383 1104 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys 10:59:17.0442 1104 mouhid - ok 10:59:17.0556 1104 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\windows\system32\drivers\mountmgr.sys 10:59:17.0599 1104 mountmgr - ok 10:59:17.0679 1104 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\windows\system32\drivers\mpio.sys 10:59:17.0726 1104 mpio - ok 10:59:17.0784 1104 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys 10:59:17.0919 1104 mpsdrv - ok 10:59:18.0054 1104 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\windows\system32\drivers\mrxdav.sys 10:59:18.0173 1104 MRxDAV - ok 10:59:18.0254 1104 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\windows\system32\DRIVERS\mrxsmb.sys 10:59:18.0347 1104 mrxsmb - ok 10:59:18.0491 1104 mrxsmb10 (a70c828a93cce4c11617f6249f4d87fc) C:\windows\system32\DRIVERS\mrxsmb10.sys 10:59:18.0564 1104 mrxsmb10 - ok 10:59:18.0665 1104 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\windows\system32\DRIVERS\mrxsmb20.sys 10:59:18.0757 1104 mrxsmb20 - ok 10:59:18.0906 1104 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\windows\system32\drivers\msahci.sys 10:59:18.0948 1104 msahci - ok 10:59:19.0018 1104 msdsm (55055f8ad8be27a64c831322a780a228) C:\windows\system32\drivers\msdsm.sys 10:59:19.0069 1104 msdsm - ok 10:59:19.0151 1104 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys 10:59:19.0270 1104 Msfs - ok 10:59:19.0310 1104 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys 10:59:19.0443 1104 mshidkmdf - ok 10:59:19.0587 1104 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\drivers\msisadrv.sys 10:59:19.0627 1104 msisadrv - ok 10:59:19.0748 1104 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys 10:59:19.0897 1104 MSKSSRV - ok 10:59:20.0045 1104 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys 10:59:20.0177 1104 MSPCLOCK - ok 10:59:20.0307 1104 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys 10:59:20.0435 1104 MSPQM - ok 10:59:20.0477 1104 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys 10:59:20.0528 1104 MsRPC - ok 10:59:20.0594 1104 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\drivers\mssmbios.sys 10:59:20.0635 1104 mssmbios - ok 10:59:20.0697 1104 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys 10:59:20.0815 1104 MSTEE - ok 10:59:20.0953 1104 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys 10:59:21.0002 1104 MTConfig - ok 10:59:21.0064 1104 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys 10:59:21.0111 1104 Mup - ok 10:59:21.0319 1104 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys 10:59:21.0427 1104 NativeWifiP - ok 10:59:21.0603 1104 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\windows\system32\drivers\ndis.sys 10:59:21.0701 1104 NDIS - ok 10:59:21.0840 1104 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys 10:59:21.0970 1104 NdisCap - ok 10:59:22.0109 1104 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys 10:59:22.0227 1104 NdisTapi - ok 10:59:22.0383 1104 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\windows\system32\DRIVERS\ndisuio.sys 10:59:22.0495 1104 Ndisuio - ok 10:59:22.0577 1104 NdisWan (38fbe267e7e6983311179230facb1017) C:\windows\system32\DRIVERS\ndiswan.sys 10:59:22.0701 1104 NdisWan - ok 10:59:22.0777 1104 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\windows\system32\drivers\NDProxy.sys 10:59:22.0906 1104 NDProxy - ok 10:59:23.0076 1104 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys 10:59:23.0208 1104 NetBIOS - ok 10:59:23.0268 1104 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\windows\system32\DRIVERS\netbt.sys 10:59:23.0402 1104 NetBT - ok 10:59:23.0576 1104 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys 10:59:23.0617 1104 nfrd960 - ok 10:59:23.0673 1104 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys 10:59:23.0801 1104 Npfs - ok 10:59:23.0845 1104 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys 10:59:23.0980 1104 nsiproxy - ok 10:59:24.0079 1104 Ntfs (81189c3d7763838e55c397759d49007a) C:\windows\system32\drivers\Ntfs.sys 10:59:24.0217 1104 Ntfs - ok 10:59:24.0271 1104 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys 10:59:24.0393 1104 Null - ok 10:59:24.0574 1104 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\windows\system32\drivers\nvraid.sys 10:59:24.0620 1104 nvraid - ok 10:59:24.0675 1104 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\windows\system32\drivers\nvstor.sys 10:59:24.0722 1104 nvstor - ok 10:59:24.0799 1104 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\drivers\nv_agp.sys 10:59:24.0846 1104 nv_agp - ok 10:59:24.0892 1104 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\drivers\ohci1394.sys 10:59:24.0993 1104 ohci1394 - ok 10:59:25.0240 1104 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys 10:59:25.0310 1104 Parport - ok 10:59:25.0456 1104 partmgr (bf8f6af06da75b336f07e23aef97d93b) C:\windows\system32\drivers\partmgr.sys 10:59:25.0500 1104 partmgr - ok 10:59:25.0575 1104 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys 10:59:25.0634 1104 Parvdm - ok 10:59:25.0844 1104 pci (673e55c3498eb970088e812ea820aa8f) C:\windows\system32\drivers\pci.sys 10:59:25.0893 1104 pci - ok 10:59:25.0979 1104 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\drivers\pciide.sys 10:59:26.0019 1104 pciide - ok 10:59:26.0101 1104 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys 10:59:26.0152 1104 pcmcia - ok 10:59:26.0195 1104 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys 10:59:26.0237 1104 pcw - ok 10:59:26.0281 1104 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys 10:59:26.0434 1104 PEAUTH - ok 10:59:26.0735 1104 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys 10:59:26.0869 1104 PptpMiniport - ok 10:59:27.0022 1104 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys 10:59:27.0095 1104 Processor - ok 10:59:27.0328 1104 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys 10:59:27.0461 1104 Psched - ok 10:59:27.0662 1104 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys 10:59:27.0838 1104 ql2300 - ok 10:59:27.0988 1104 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys 10:59:28.0034 1104 ql40xx - ok 10:59:28.0079 1104 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys 10:59:28.0157 1104 QWAVEdrv - ok 10:59:28.0281 1104 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys 10:59:28.0404 1104 RasAcd - ok 10:59:28.0578 1104 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys 10:59:28.0696 1104 RasAgileVpn - ok 10:59:28.0845 1104 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys 10:59:28.0974 1104 Rasl2tp - ok 10:59:29.0134 1104 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys 10:59:29.0269 1104 RasPppoe - ok 10:59:29.0458 1104 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys 10:59:29.0588 1104 RasSstp - ok 10:59:29.0740 1104 rdbss (d528bc58a489409ba40334ebf96a311b) C:\windows\system32\DRIVERS\rdbss.sys 10:59:29.0873 1104 rdbss - ok 10:59:30.0017 1104 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys 10:59:30.0091 1104 rdpbus - ok 10:59:30.0208 1104 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\windows\system32\DRIVERS\RDPCDD.sys 10:59:30.0323 1104 RDPCDD - ok 10:59:30.0472 1104 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys 10:59:30.0597 1104 RDPENCDD - ok 10:59:30.0750 1104 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys 10:59:30.0867 1104 RDPREFMP - ok 10:59:31.0012 1104 RDPWD (288b06960d78428ff89e811632684e20) C:\windows\system32\drivers\RDPWD.sys 10:59:31.0139 1104 RDPWD - ok 10:59:31.0303 1104 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\windows\system32\drivers\rdyboost.sys 10:59:31.0355 1104 rdyboost - ok 10:59:31.0518 1104 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\windows\system32\DRIVERS\rfcomm.sys 10:59:31.0597 1104 RFCOMM - ok 10:59:31.0830 1104 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys 10:59:31.0963 1104 rspndr - ok 10:59:32.0150 1104 sbp2port (05d860da1040f111503ac416ccef2bca) C:\windows\system32\drivers\sbp2port.sys 10:59:32.0196 1104 sbp2port - ok 10:59:32.0284 1104 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\windows\system32\DRIVERS\scfilter.sys 10:59:32.0398 1104 scfilter - ok 10:59:32.0518 1104 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys 10:59:32.0652 1104 secdrv - ok 10:59:32.0838 1104 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys 10:59:32.0908 1104 Serenum - ok 10:59:33.0063 1104 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys 10:59:33.0149 1104 Serial - ok 10:59:33.0295 1104 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys 10:59:33.0362 1104 sermouse - ok 10:59:33.0618 1104 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\drivers\sffdisk.sys 10:59:33.0704 1104 sffdisk - ok 10:59:33.0874 1104 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\drivers\sffp_mmc.sys 10:59:33.0931 1104 sffp_mmc - ok 10:59:34.0063 1104 sffp_sd (a0708bbd07d245c06ff9de549ca47185) C:\windows\system32\drivers\sffp_sd.sys 10:59:34.0146 1104 sffp_sd - ok 10:59:34.0286 1104 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys 10:59:34.0345 1104 sfloppy - ok 10:59:34.0528 1104 Sftfs (cc895997c0995a07b6b2779a3b21918b) C:\windows\system32\DRIVERS\Sftfslh.sys 10:59:34.0614 1104 Sftfs - ok 10:59:34.0784 1104 Sftplay (cf5e9798637795db59697f5e40fca993) C:\windows\system32\DRIVERS\Sftplaylh.sys 10:59:34.0826 1104 Sftplay - ok 10:59:34.0895 1104 Sftredir (4c8076ff8938b365eeec9123969e0350) C:\windows\system32\DRIVERS\Sftredirlh.sys 10:59:34.0926 1104 Sftredir - ok 10:59:34.0995 1104 Sftvol (6095a5f221eca9dada2c9ee80ec0d92d) C:\windows\system32\DRIVERS\Sftvollh.sys 10:59:35.0026 1104 Sftvol - ok 10:59:35.0200 1104 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\drivers\sisagp.sys 10:59:35.0244 1104 sisagp - ok 10:59:35.0319 1104 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys 10:59:35.0362 1104 SiSRaid2 - ok 10:59:35.0509 1104 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys 10:59:35.0553 1104 SiSRaid4 - ok 10:59:35.0680 1104 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys 10:59:35.0806 1104 Smb - ok 10:59:35.0953 1104 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys 10:59:35.0995 1104 spldr - ok 10:59:36.0232 1104 sptd (cdddec541bc3c96f91ecb48759673505) C:\windows\system32\Drivers\sptd.sys 10:59:36.0233 1104 Suspicious file (NoAccess): C:\windows\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505 10:59:36.0240 1104 sptd ( LockedFile.Multi.Generic ) - warning 10:59:36.0241 1104 sptd - detected LockedFile.Multi.Generic (1) 10:59:36.0371 1104 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\windows\system32\DRIVERS\srv.sys 10:59:36.0461 1104 srv - ok 10:59:36.0601 1104 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\windows\system32\DRIVERS\srv2.sys 10:59:36.0707 1104 srv2 - ok 10:59:36.0832 1104 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\windows\system32\DRIVERS\srvnet.sys 10:59:36.0898 1104 srvnet - ok 10:59:37.0047 1104 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys 10:59:37.0091 1104 stexstor - ok 10:59:37.0282 1104 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\drivers\swenum.sys 10:59:37.0323 1104 swenum - ok 10:59:37.0539 1104 Tcpip (24326784df8f3d5f5bbb9f878ce33c14) C:\windows\system32\drivers\tcpip.sys 10:59:37.0711 1104 Tcpip - ok 10:59:37.0917 1104 TCPIP6 (24326784df8f3d5f5bbb9f878ce33c14) C:\windows\system32\DRIVERS\tcpip.sys 10:59:38.0045 1104 TCPIP6 - ok 10:59:38.0257 1104 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\windows\system32\drivers\tcpipreg.sys 10:59:38.0394 1104 tcpipreg - ok 10:59:38.0577 1104 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\windows\system32\drivers\tdpipe.sys 10:59:38.0714 1104 TDPIPE - ok 10:59:38.0832 1104 TDTCP (2c10395baa4847f83042813c515cc289) C:\windows\system32\drivers\tdtcp.sys 10:59:38.0951 1104 TDTCP - ok 10:59:39.0020 1104 tdx (b459575348c20e8121d6039da063c704) C:\windows\system32\DRIVERS\tdx.sys 10:59:39.0137 1104 tdx - ok 10:59:39.0192 1104 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\windows\system32\drivers\termdd.sys 10:59:39.0238 1104 TermDD - ok 10:59:39.0445 1104 tmactmon (ca9e9c2c04a198ed345c1752222a5f3e) C:\windows\system32\DRIVERS\tmactmon.sys 10:59:39.0481 1104 tmactmon - ok 10:59:39.0671 1104 tmcomm (a3d20789b3ff0576a29462bef25bcfcc) C:\windows\system32\DRIVERS\tmcomm.sys 10:59:39.0711 1104 tmcomm - ok 10:59:39.0880 1104 tmevtmgr (21f215e54770c4bf93efaf63f58fe57e) C:\windows\system32\DRIVERS\tmevtmgr.sys 10:59:39.0913 1104 tmevtmgr - ok 10:59:40.0102 1104 tmlwf (ac88b1e97a3eade322eda84e69967341) C:\windows\system32\DRIVERS\tmlwf.sys 10:59:40.0144 1104 tmlwf - ok 10:59:40.0336 1104 tmpreflt (9cbbe54780770fdb7aaa73be530e4d80) C:\windows\system32\DRIVERS\tmpreflt.sys 10:59:40.0370 1104 tmpreflt - ok 10:59:40.0588 1104 tmtdi (44c262c1b2412ded35078b6166d2acc2) C:\windows\system32\DRIVERS\tmtdi.sys 10:59:40.0626 1104 tmtdi - ok 10:59:40.0789 1104 tmwfp (95dc30a928f5fcee5d30a191bf058146) C:\windows\system32\DRIVERS\tmwfp.sys 10:59:40.0838 1104 tmwfp - ok 10:59:41.0001 1104 tmxpflt (6cc393305bd60056ca09a4c8032a169a) C:\windows\system32\DRIVERS\tmxpflt.sys 10:59:41.0048 1104 tmxpflt - ok 10:59:41.0241 1104 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\windows\system32\DRIVERS\tssecsrv.sys 10:59:41.0370 1104 tssecsrv - ok 10:59:41.0557 1104 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\windows\system32\drivers\tsusbflt.sys 10:59:41.0663 1104 TsUsbFlt - ok 10:59:41.0867 1104 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\windows\system32\DRIVERS\tunnel.sys 10:59:41.0993 1104 tunnel - ok 10:59:42.0157 1104 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys 10:59:42.0204 1104 uagp35 - ok 10:59:42.0438 1104 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\windows\system32\DRIVERS\udfs.sys 10:59:42.0569 1104 udfs - ok 10:59:42.0825 1104 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\drivers\uliagpkx.sys 10:59:42.0872 1104 uliagpkx - ok 10:59:43.0061 1104 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\windows\system32\drivers\umbus.sys 10:59:43.0123 1104 umbus - ok 10:59:43.0276 1104 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys 10:59:43.0335 1104 UmPass - ok 10:59:43.0512 1104 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\windows\system32\DRIVERS\usbccgp.sys 10:59:43.0582 1104 usbccgp - ok 10:59:43.0756 1104 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\drivers\usbcir.sys 10:59:43.0832 1104 usbcir - ok 10:59:44.0037 1104 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\windows\system32\drivers\usbehci.sys 10:59:44.0108 1104 usbehci - ok 10:59:44.0312 1104 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\windows\system32\DRIVERS\usbhub.sys 10:59:44.0390 1104 usbhub - ok 10:59:44.0637 1104 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\windows\system32\drivers\usbohci.sys 10:59:44.0715 1104 usbohci - ok 10:59:44.0878 1104 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys 10:59:44.0948 1104 usbprint - ok 10:59:45.0082 1104 USBSTOR (f991ab9cc6b908db552166768176896a) C:\windows\system32\DRIVERS\USBSTOR.SYS 10:59:45.0166 1104 USBSTOR - ok 10:59:45.0325 1104 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\windows\system32\drivers\usbuhci.sys 10:59:45.0389 1104 usbuhci - ok 10:59:45.0562 1104 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\windows\System32\Drivers\usbvideo.sys 10:59:45.0626 1104 usbvideo - ok 10:59:45.0824 1104 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\drivers\vdrvroot.sys 10:59:45.0872 1104 vdrvroot - ok 10:59:46.0076 1104 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys 10:59:46.0150 1104 vga - ok 10:59:46.0335 1104 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys 10:59:46.0446 1104 VgaSave - ok 10:59:46.0618 1104 vhdmp (5461686cca2fda57b024547733ab42e3) C:\windows\system32\drivers\vhdmp.sys 10:59:46.0668 1104 vhdmp - ok 10:59:46.0870 1104 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\drivers\viaagp.sys 10:59:46.0916 1104 viaagp - ok 10:59:47.0073 1104 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys 10:59:47.0139 1104 ViaC7 - ok 10:59:47.0341 1104 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\drivers\viaide.sys 10:59:47.0382 1104 viaide - ok 10:59:47.0561 1104 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\windows\system32\drivers\volmgr.sys 10:59:47.0604 1104 volmgr - ok 10:59:47.0795 1104 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys 10:59:47.0862 1104 volmgrx - ok 10:59:48.0049 1104 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\windows\system32\drivers\volsnap.sys 10:59:48.0105 1104 volsnap - ok 10:59:48.0460 1104 vsapint (bbdd84ca629c1f7c8172b4405867f196) C:\windows\system32\DRIVERS\vsapint.sys 10:59:48.0620 1104 vsapint - ok 10:59:48.0806 1104 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys 10:59:48.0857 1104 vsmraid - ok 10:59:49.0037 1104 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys 10:59:49.0106 1104 vwifibus - ok 10:59:49.0293 1104 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys 10:59:49.0379 1104 vwififlt - ok 10:59:49.0552 1104 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys 10:59:49.0638 1104 WacomPen - ok 10:59:49.0811 1104 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys 10:59:49.0963 1104 WANARP - ok 10:59:49.0981 1104 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys 10:59:50.0089 1104 Wanarpv6 - ok 10:59:50.0282 1104 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys 10:59:50.0325 1104 Wd - ok 10:59:50.0483 1104 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys 10:59:50.0559 1104 Wdf01000 - ok 10:59:50.0809 1104 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys 10:59:50.0937 1104 WfpLwf - ok 10:59:51.0127 1104 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys 10:59:51.0168 1104 WIMMount - ok 10:59:51.0457 1104 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\drivers\wmiacpi.sys 10:59:51.0523 1104 WmiAcpi - ok 10:59:51.0767 1104 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys 10:59:51.0912 1104 ws2ifsl - ok 10:59:52.0174 1104 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\windows\system32\drivers\WudfPf.sys 10:59:52.0306 1104 WudfPf - ok 10:59:52.0482 1104 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\windows\system32\DRIVERS\WUDFRd.sys 10:59:52.0608 1104 WUDFRd - ok 10:59:52.0716 1104 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0 10:59:52.0994 1104 \Device\Harddisk0\DR0 - ok 10:59:53.0010 1104 Boot (0x1200) (38a1c35c9a7b7945e0124c987f031ca2) \Device\Harddisk0\DR0\Partition0 10:59:53.0014 1104 \Device\Harddisk0\DR0\Partition0 - ok 10:59:53.0046 1104 Boot (0x1200) (c0cb741593a9adf1afe3b1244b8efd3b) \Device\Harddisk0\DR0\Partition1 10:59:53.0050 1104 \Device\Harddisk0\DR0\Partition1 - ok 10:59:53.0052 1104 ============================================================ 10:59:53.0052 1104 Scan finished 10:59:53.0052 1104 ============================================================ 10:59:53.0098 2592 Detected object count: 1 10:59:53.0098 2592 Actual detected object count: 1 11:01:04.0161 2592 sptd ( LockedFile.Multi.Generic ) - skipped by user 11:01:04.0161 2592 sptd ( LockedFile.Multi.Generic ) - User select action: Skip 11:01:39.0352 4944 ============================================================ 11:01:39.0352 4944 Scan started 11:01:39.0352 4944 Mode: Manual; SigCheck; TDLFS; 11:01:39.0352 4944 ============================================================ 11:01:39.0680 4944 1394ohci (d01e0b1cef9ee82100c2bb07294880ef) C:\windows\system32\drivers\1394ohci.sys 11:01:39.0768 4944 1394ohci - ok 11:01:39.0825 4944 ACPI (cea80c80bed809aa0da6febc04733349) C:\windows\system32\drivers\ACPI.sys 11:01:39.0888 4944 ACPI - ok 11:01:39.0944 4944 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\windows\system32\drivers\acpipmi.sys 11:01:39.0999 4944 AcpiPmi - ok 11:01:40.0058 4944 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys 11:01:40.0130 4944 adp94xx - ok 11:01:40.0169 4944 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys 11:01:40.0231 4944 adpahci - ok 11:01:40.0261 4944 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys 11:01:40.0308 4944 adpu320 - ok 11:01:40.0412 4944 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\windows\system32\drivers\afd.sys 11:01:40.0473 4944 AFD - ok 11:01:40.0526 4944 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\drivers\agp440.sys 11:01:40.0569 4944 agp440 - ok 11:01:40.0631 4944 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys 11:01:40.0671 4944 aic78xx - ok 11:01:40.0735 4944 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\drivers\aliide.sys 11:01:40.0774 4944 aliide - ok 11:01:40.0845 4944 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\drivers\amdagp.sys 11:01:40.0889 4944 amdagp - ok 11:01:40.0925 4944 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\drivers\amdide.sys 11:01:40.0965 4944 amdide - ok 11:01:41.0021 4944 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys 11:01:41.0074 4944 AmdK8 - ok 11:01:41.0102 4944 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys 11:01:41.0159 4944 AmdPPM - ok 11:01:41.0216 4944 amdsata (d320bf87125326f996d4904fe24300fc) C:\windows\system32\drivers\amdsata.sys 11:01:41.0259 4944 amdsata - ok 11:01:41.0307 4944 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys 11:01:41.0355 4944 amdsbs - ok 11:01:41.0417 4944 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\windows\system32\drivers\amdxata.sys 11:01:41.0454 4944 amdxata - ok 11:01:41.0517 4944 AppID (aea177f783e20150ace5383ee368da19) C:\windows\system32\drivers\appid.sys 11:01:41.0618 4944 AppID - ok 11:01:41.0728 4944 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys 11:01:41.0770 4944 arc - ok 11:01:41.0796 4944 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys 11:01:41.0845 4944 arcsas - ok 11:01:41.0882 4944 AsUpIO (561d6b76c045311691b870f6b3f19eab) C:\windows\system32\drivers\AsUpIO.sys 11:01:41.0921 4944 AsUpIO - ok 11:01:41.0971 4944 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys 11:01:42.0081 4944 AsyncMac - ok 11:01:42.0128 4944 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\drivers\atapi.sys 11:01:42.0169 4944 atapi - ok 11:01:42.0252 4944 athr (76bab0c824e2d05b940c4dd40a9b08bf) C:\windows\system32\DRIVERS\athr.sys 11:01:42.0353 4944 athr - ok 11:01:42.0432 4944 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys 11:01:42.0505 4944 b06bdrv - ok 11:01:42.0656 4944 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys 11:01:42.0710 4944 b57nd60x - ok 11:01:42.0872 4944 BCM43XX (2be0f23d494c301641c42ead2fdcd4f2) C:\windows\system32\DRIVERS\bcmwl6.sys 11:01:43.0071 4944 BCM43XX - ok 11:01:43.0158 4944 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys 11:01:43.0270 4944 Beep - ok 11:01:43.0330 4944 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys 11:01:43.0380 4944 blbdrive - ok 11:01:43.0437 4944 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\windows\system32\DRIVERS\bowser.sys 11:01:43.0483 4944 bowser - ok 11:01:43.0522 4944 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys 11:01:43.0579 4944 BrFiltLo - ok 11:01:43.0603 4944 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys 11:01:43.0662 4944 BrFiltUp - ok 11:01:43.0714 4944 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys 11:01:43.0777 4944 Brserid - ok 11:01:43.0806 4944 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys 11:01:43.0870 4944 BrSerWdm - ok 11:01:43.0895 4944 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys 11:01:43.0957 4944 BrUsbMdm - ok 11:01:43.0982 4944 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys 11:01:44.0033 4944 BrUsbSer - ok 11:01:44.0088 4944 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\windows\system32\drivers\BthEnum.sys 11:01:44.0142 4944 BthEnum - ok 11:01:44.0175 4944 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys 11:01:44.0236 4944 BTHMODEM - ok 11:01:44.0267 4944 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\windows\system32\DRIVERS\bthpan.sys 11:01:44.0327 4944 BthPan - ok 11:01:44.0382 4944 BTHPORT (c2fbf6d271d9a94d839c416bf186ead9) C:\windows\System32\Drivers\BTHport.sys 11:01:44.0442 4944 BTHPORT - ok 11:01:44.0500 4944 BTHUSB (c81e9413a25a439f436b1d4b6a0cf9e9) C:\windows\System32\Drivers\BTHUSB.sys 11:01:44.0548 4944 BTHUSB - ok 11:01:44.0612 4944 btwampfl (d57641bf7e6af5c996eab931afadc271) C:\windows\system32\drivers\btwampfl.sys 11:01:44.0659 4944 btwampfl - ok 11:01:44.0696 4944 btwaudio (81471a7d64d1fc014d47a4cf33cd701e) C:\windows\system32\drivers\btwaudio.sys 11:01:44.0731 4944 btwaudio - ok 11:01:44.0760 4944 btwavdt (098af3559710fcec05b7aa5159f435f9) C:\windows\system32\DRIVERS\btwavdt.sys 11:01:44.0796 4944 btwavdt - ok 11:01:44.0841 4944 btwl2cap (de53089f0678cb5f0afeb867acb0fb05) C:\windows\system32\DRIVERS\btwl2cap.sys 11:01:44.0871 4944 btwl2cap - ok 11:01:44.0896 4944 btwrchid (e28ef3c4ef1849b876f850015066380b) C:\windows\system32\DRIVERS\btwrchid.sys 11:01:44.0925 4944 btwrchid - ok 11:01:44.0999 4944 catchme - ok 11:01:45.0083 4944 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys 11:01:45.0195 4944 cdfs - ok 11:01:45.0252 4944 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\windows\system32\drivers\cdrom.sys 11:01:45.0304 4944 cdrom - ok 11:01:45.0366 4944 CFcatchme - ok 11:01:45.0442 4944 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys 11:01:45.0505 4944 circlass - ok 11:01:45.0571 4944 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys 11:01:45.0625 4944 CLFS - ok 11:01:45.0689 4944 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys 11:01:45.0742 4944 CmBatt - ok 11:01:45.0789 4944 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\drivers\cmdide.sys 11:01:45.0830 4944 cmdide - ok 11:01:45.0868 4944 CNG (1b675691ed940766149c93e8f4488d68) C:\windows\system32\Drivers\cng.sys 11:01:45.0950 4944 CNG - ok 11:01:45.0990 4944 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys 11:01:46.0030 4944 Compbatt - ok 11:01:46.0089 4944 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\windows\system32\drivers\CompositeBus.sys 11:01:46.0146 4944 CompositeBus - ok 11:01:46.0201 4944 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys 11:01:46.0240 4944 crcdisk - ok 11:01:46.0361 4944 DfsC (f024449c97ec1e464aaffda18593db88) C:\windows\system32\Drivers\dfsc.sys 11:01:46.0469 4944 DfsC - ok 11:01:46.0551 4944 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys 11:01:46.0666 4944 discache - ok 11:01:46.0695 4944 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys 11:01:46.0748 4944 Disk - ok 11:01:46.0821 4944 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys 11:01:46.0885 4944 drmkaud - ok 11:01:46.0962 4944 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\windows\System32\drivers\dxgkrnl.sys 11:01:47.0047 4944 DXGKrnl - ok 11:01:47.0071 4944 EagleXNt - ok 11:01:47.0273 4944 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys 11:01:47.0449 4944 ebdrv - ok 11:01:47.0565 4944 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys 11:01:47.0632 4944 elxstor - ok 11:01:47.0679 4944 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\drivers\errdev.sys 11:01:47.0731 4944 ErrDev - ok 11:01:47.0779 4944 ETD (7c87df14552a5e0270dbd906baff85fb) C:\windows\system32\DRIVERS\ETD.sys 11:01:47.0813 4944 ETD - ok 11:01:47.0911 4944 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys 11:01:48.0037 4944 exfat - ok 11:01:48.0087 4944 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys 11:01:48.0204 4944 fastfat - ok 11:01:48.0266 4944 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys 11:01:48.0315 4944 fdc - ok 11:01:48.0370 4944 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys 11:01:48.0413 4944 FileInfo - ok 11:01:48.0441 4944 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys 11:01:48.0558 4944 Filetrace - ok 11:01:48.0585 4944 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys 11:01:48.0639 4944 flpydisk - ok 11:01:48.0671 4944 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys 11:01:48.0724 4944 FltMgr - ok 11:01:48.0778 4944 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys 11:01:48.0819 4944 FsDepends - ok 11:01:48.0881 4944 fssfltr (b74b0578fd1d3f897e95f2a2b69ea051) C:\windows\system32\DRIVERS\fssfltr.sys 11:01:48.0918 4944 fssfltr - ok 11:01:48.0971 4944 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\windows\system32\drivers\Fs_Rec.sys 11:01:49.0016 4944 Fs_Rec - ok 11:01:49.0082 4944 fvevol (8a73e79089b282100b9393b644cb853b) C:\windows\system32\DRIVERS\fvevol.sys 11:01:49.0146 4944 fvevol - ok 11:01:49.0195 4944 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys 11:01:49.0238 4944 gagp30kx - ok 11:01:49.0282 4944 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys 11:01:49.0331 4944 hcw85cir - ok 11:01:49.0398 4944 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\windows\system32\drivers\HdAudio.sys 11:01:49.0463 4944 HdAudAddService - ok 11:01:49.0516 4944 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\windows\system32\drivers\HDAudBus.sys 11:01:49.0578 4944 HDAudBus - ok 11:01:49.0627 4944 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys 11:01:49.0676 4944 HidBatt - ok 11:01:49.0706 4944 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys 11:01:49.0767 4944 HidBth - ok 11:01:49.0795 4944 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys 11:01:49.0860 4944 HidIr - ok 11:01:49.0913 4944 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\windows\system32\drivers\hidusb.sys 11:01:49.0962 4944 HidUsb - ok 11:01:50.0049 4944 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\drivers\HpSAMD.sys 11:01:50.0090 4944 HpSAMD - ok 11:01:50.0161 4944 HTTP (871917b07a141bff43d76d8844d48106) C:\windows\system32\drivers\HTTP.sys 11:01:50.0284 4944 HTTP - ok 11:01:50.0328 4944 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\windows\system32\drivers\hwpolicy.sys 11:01:50.0368 4944 hwpolicy - ok 11:01:50.0416 4944 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\drivers\i8042prt.sys 11:01:50.0466 4944 i8042prt - ok 11:01:50.0539 4944 iaStor (d483687eace0c065ee772481a96e05f5) C:\windows\system32\DRIVERS\iaStor.sys 11:01:50.0587 4944 iaStor - ok 11:01:50.0651 4944 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\windows\system32\drivers\iaStorV.sys 11:01:50.0707 4944 iaStorV - ok 11:01:51.0054 4944 igfx (d0074897c6bc132f3980ea4654bf7fb9) C:\windows\system32\DRIVERS\igdkmd32.sys 11:01:51.0293 4944 igfx - ok 11:01:51.0440 4944 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys 11:01:51.0479 4944 iirsp - ok 11:01:51.0687 4944 IntcAzAudAddService (947318c01c648a054a05dbd1c7f73e3b) C:\windows\system32\drivers\RTKVHDA.sys 11:01:51.0914 4944 IntcAzAudAddService - ok 11:01:52.0082 4944 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\drivers\intelide.sys 11:01:52.0121 4944 intelide - ok 11:01:52.0196 4944 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys 11:01:52.0245 4944 intelppm - ok 11:01:52.0333 4944 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys 11:01:52.0442 4944 IpFilterDriver - ok 11:01:52.0572 4944 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\windows\system32\drivers\IPMIDrv.sys 11:01:52.0622 4944 IPMIDRV - ok 11:01:52.0756 4944 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys 11:01:52.0872 4944 IPNAT - ok 11:01:52.0929 4944 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys 11:01:52.0990 4944 IRENUM - ok 11:01:53.0082 4944 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\drivers\isapnp.sys 11:01:53.0124 4944 isapnp - ok 11:01:53.0185 4944 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\windows\system32\drivers\msiscsi.sys 11:01:53.0237 4944 iScsiPrt - ok 11:01:53.0287 4944 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\drivers\kbdclass.sys 11:01:53.0331 4944 kbdclass - ok 11:01:53.0381 4944 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\windows\system32\drivers\kbdhid.sys 11:01:53.0436 4944 kbdhid - ok 11:01:53.0496 4944 kbfiltr (3eb803312987ff44265c87cb960df6ab) C:\windows\system32\DRIVERS\kbfiltr.sys 11:01:53.0526 4944 kbfiltr - ok 11:01:53.0597 4944 KSecDD (412cea1aa78cc02a447f5c9e62b32ff1) C:\windows\system32\Drivers\ksecdd.sys 11:01:53.0642 4944 KSecDD - ok 11:01:53.0774 4944 KSecPkg (26c046977e85b95036453d7b88ba1820) C:\windows\system32\Drivers\ksecpkg.sys 11:01:53.0820 4944 KSecPkg - ok 11:01:53.0886 4944 L1C (d1f734d9a7aaf078d88ceb51900699a7) C:\windows\system32\DRIVERS\L1C62x86.sys 11:01:53.0921 4944 L1C - ok 11:01:53.0983 4944 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys 11:01:54.0103 4944 lltdio - ok 11:01:54.0174 4944 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys 11:01:54.0226 4944 LSI_FC - ok 11:01:54.0254 4944 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys 11:01:54.0301 4944 LSI_SAS - ok 11:01:54.0331 4944 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys 11:01:54.0380 4944 LSI_SAS2 - ok 11:01:54.0410 4944 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys 11:01:54.0453 4944 LSI_SCSI - ok 11:01:54.0482 4944 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys 11:01:54.0599 4944 luafv - ok 11:01:54.0639 4944 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys 11:01:54.0682 4944 megasas - ok 11:01:54.0716 4944 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys 11:01:54.0768 4944 MegaSR - ok 11:01:54.0811 4944 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys 11:01:54.0931 4944 Modem - ok 11:01:54.0965 4944 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys 11:01:55.0027 4944 monitor - ok 11:01:55.0082 4944 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\drivers\mouclass.sys 11:01:55.0127 4944 mouclass - ok 11:01:55.0157 4944 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys 11:01:55.0210 4944 mouhid - ok 11:01:55.0270 4944 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\windows\system32\drivers\mountmgr.sys 11:01:55.0313 4944 mountmgr - ok 11:01:55.0371 4944 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\windows\system32\drivers\mpio.sys 11:01:55.0418 4944 mpio - ok 11:01:55.0476 4944 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys 11:01:55.0583 4944 mpsdrv - ok 11:01:55.0669 4944 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\windows\system32\drivers\mrxdav.sys 11:01:55.0737 4944 MRxDAV - ok 11:01:55.0802 4944 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\windows\system32\DRIVERS\mrxsmb.sys 11:01:55.0872 4944 mrxsmb - ok 11:01:55.0927 4944 mrxsmb10 (a70c828a93cce4c11617f6249f4d87fc) C:\windows\system32\DRIVERS\mrxsmb10.sys 11:01:55.0984 4944 mrxsmb10 - ok 11:01:56.0023 4944 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\windows\system32\DRIVERS\mrxsmb20.sys 11:01:56.0072 4944 mrxsmb20 - ok 11:01:56.0131 4944 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\windows\system32\drivers\msahci.sys 11:01:56.0176 4944 msahci - ok 11:01:56.0232 4944 msdsm (55055f8ad8be27a64c831322a780a228) C:\windows\system32\drivers\msdsm.sys 11:01:56.0277 4944 msdsm - ok 11:01:56.0353 4944 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys 11:01:56.0464 4944 Msfs - ok 11:01:56.0513 4944 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys 11:01:56.0626 4944 mshidkmdf - ok 11:01:56.0679 4944 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\drivers\msisadrv.sys 11:01:56.0719 4944 msisadrv - ok 11:01:56.0806 4944 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys 11:01:56.0941 4944 MSKSSRV - ok 11:01:56.0982 4944 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys 11:01:57.0092 4944 MSPCLOCK - ok 11:01:57.0119 4944 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys 11:01:57.0237 4944 MSPQM - ok 11:01:57.0291 4944 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys 11:01:57.0343 4944 MsRPC - ok 11:01:57.0420 4944 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\drivers\mssmbios.sys 11:01:57.0461 4944 mssmbios - ok 11:01:57.0511 4944 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys 11:01:57.0617 4944 MSTEE - ok 11:01:57.0646 4944 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys 11:01:57.0697 4944 MTConfig - ok 11:01:57.0745 4944 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys 11:01:57.0790 4944 Mup - ok 11:01:57.0840 4944 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys 11:01:57.0915 4944 NativeWifiP - ok 11:01:57.0993 4944 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\windows\system32\drivers\ndis.sys 11:01:58.0074 4944 NDIS - ok 11:01:58.0132 4944 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys 11:01:58.0248 4944 NdisCap - ok 11:01:58.0289 4944 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys 11:01:58.0401 4944 NdisTapi - ok 11:01:58.0464 4944 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\windows\system32\DRIVERS\ndisuio.sys 11:01:58.0569 4944 Ndisuio - ok 11:01:58.0624 4944 NdisWan (38fbe267e7e6983311179230facb1017) C:\windows\system32\DRIVERS\ndiswan.sys 11:01:58.0738 4944 NdisWan - ok 11:01:58.0791 4944 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\windows\system32\drivers\NDProxy.sys 11:01:58.0896 4944 NDProxy - ok 11:01:58.0968 4944 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys 11:01:59.0076 4944 NetBIOS - ok 11:01:59.0138 4944 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\windows\system32\DRIVERS\netbt.sys 11:01:59.0245 4944 NetBT - ok 11:01:59.0346 4944 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys 11:01:59.0386 4944 nfrd960 - ok 11:01:59.0425 4944 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys 11:01:59.0541 4944 Npfs - ok 11:01:59.0579 4944 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys 11:01:59.0685 4944 nsiproxy - ok 11:01:59.0793 4944 Ntfs (81189c3d7763838e55c397759d49007a) C:\windows\system32\drivers\Ntfs.sys 11:01:59.0928 4944 Ntfs - ok 11:02:00.0063 4944 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys 11:02:00.0174 4944 Null - ok 11:02:00.0254 4944 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\windows\system32\drivers\nvraid.sys 11:02:00.0299 4944 nvraid - ok 11:02:00.0366 4944 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\windows\system32\drivers\nvstor.sys 11:02:00.0413 4944 nvstor - ok 11:02:00.0480 4944 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\drivers\nv_agp.sys 11:02:00.0524 4944 nv_agp - ok 11:02:00.0573 4944 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\drivers\ohci1394.sys 11:02:00.0630 4944 ohci1394 - ok 11:02:00.0820 4944 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys 11:02:00.0875 4944 Parport - ok 11:02:01.0037 4944 partmgr (bf8f6af06da75b336f07e23aef97d93b) C:\windows\system32\drivers\partmgr.sys 11:02:01.0077 4944 partmgr - ok 11:02:01.0200 4944 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys 11:02:01.0250 4944 Parvdm - ok 11:02:01.0424 4944 pci (673e55c3498eb970088e812ea820aa8f) C:\windows\system32\drivers\pci.sys 11:02:01.0471 4944 pci - ok 11:02:01.0626 4944 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\drivers\pciide.sys 11:02:01.0664 4944 pciide - ok 11:02:01.0813 4944 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys 11:02:01.0868 4944 pcmcia - ok 11:02:02.0054 4944 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys 11:02:02.0095 4944 pcw - ok 11:02:02.0269 4944 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys 11:02:02.0399 4944 PEAUTH - ok 11:02:02.0716 4944 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys 11:02:02.0825 4944 PptpMiniport - ok 11:02:02.0992 4944 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys 11:02:03.0044 4944 Processor - ok 11:02:03.0242 4944 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys 11:02:03.0352 4944 Psched - ok 11:02:03.0564 4944 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys 11:02:03.0683 4944 ql2300 - ok 11:02:03.0869 4944 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys 11:02:03.0912 4944 ql40xx - ok 11:02:04.0102 4944 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys 11:02:04.0159 4944 QWAVEdrv - ok 11:02:04.0340 4944 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys 11:02:04.0444 4944 RasAcd - ok 11:02:04.0625 4944 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys 11:02:04.0724 4944 RasAgileVpn - ok 11:02:04.0914 4944 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys 11:02:05.0022 4944 Rasl2tp - ok 11:02:05.0193 4944 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys 11:02:05.0303 4944 RasPppoe - ok 11:02:05.0473 4944 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys 11:02:05.0577 4944 RasSstp - ok 11:02:05.0752 4944 rdbss (d528bc58a489409ba40334ebf96a311b) C:\windows\system32\DRIVERS\rdbss.sys 11:02:05.0866 4944 rdbss - ok 11:02:06.0042 4944 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys 11:02:06.0108 4944 rdpbus - ok 11:02:06.0266 4944 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\windows\system32\DRIVERS\RDPCDD.sys 11:02:06.0368 4944 RDPCDD - ok 11:02:06.0530 4944 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys 11:02:06.0634 4944 RDPENCDD - ok 11:02:06.0818 4944 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys 11:02:06.0959 4944 RDPREFMP - ok 11:02:07.0135 4944 RDPWD (288b06960d78428ff89e811632684e20) C:\windows\system32\drivers\RDPWD.sys 11:02:07.0246 4944 RDPWD - ok 11:02:07.0428 4944 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\windows\system32\drivers\rdyboost.sys 11:02:07.0482 4944 rdyboost - ok 11:02:07.0666 4944 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\windows\system32\DRIVERS\rfcomm.sys 11:02:07.0729 4944 RFCOMM - ok 11:02:07.0954 4944 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys 11:02:08.0062 4944 rspndr - ok 11:02:08.0253 4944 sbp2port (05d860da1040f111503ac416ccef2bca) C:\windows\system32\drivers\sbp2port.sys 11:02:08.0295 4944 sbp2port - ok 11:02:08.0475 4944 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\windows\system32\DRIVERS\scfilter.sys 11:02:08.0577 4944 scfilter - ok 11:02:08.0788 4944 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys 11:02:08.0910 4944 secdrv - ok 11:02:09.0163 4944 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys 11:02:09.0211 4944 Serenum - ok 11:02:09.0388 4944 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys 11:02:09.0438 4944 Serial - ok 11:02:09.0621 4944 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys 11:02:09.0669 4944 sermouse - ok 11:02:09.0899 4944 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\drivers\sffdisk.sys 11:02:09.0966 4944 sffdisk - ok 11:02:10.0144 4944 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\drivers\sffp_mmc.sys 11:02:10.0198 4944 sffp_mmc - ok 11:02:10.0377 4944 sffp_sd (a0708bbd07d245c06ff9de549ca47185) C:\windows\system32\drivers\sffp_sd.sys 11:02:10.0427 4944 sffp_sd - ok 11:02:10.0600 4944 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys 11:02:10.0652 4944 sfloppy - ok 11:02:10.0872 4944 Sftfs (cc895997c0995a07b6b2779a3b21918b) C:\windows\system32\DRIVERS\Sftfslh.sys 11:02:10.0942 4944 Sftfs - ok 11:02:11.0142 4944 Sftplay (cf5e9798637795db59697f5e40fca993) C:\windows\system32\DRIVERS\Sftplaylh.sys 11:02:11.0186 4944 Sftplay - ok 11:02:11.0343 4944 Sftredir (4c8076ff8938b365eeec9123969e0350) C:\windows\system32\DRIVERS\Sftredirlh.sys 11:02:11.0372 4944 Sftredir - ok 11:02:11.0521 4944 Sftvol (6095a5f221eca9dada2c9ee80ec0d92d) C:\windows\system32\DRIVERS\Sftvollh.sys 11:02:11.0550 4944 Sftvol - ok 11:02:11.0737 4944 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\drivers\sisagp.sys 11:02:11.0779 4944 sisagp - ok 11:02:11.0988 4944 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys 11:02:12.0028 4944 SiSRaid2 - ok 11:02:12.0190 4944 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys 11:02:12.0232 4944 SiSRaid4 - ok 11:02:12.0383 4944 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys 11:02:12.0496 4944 Smb - ok 11:02:12.0689 4944 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys 11:02:12.0732 4944 spldr - ok 11:02:12.0935 4944 sptd (cdddec541bc3c96f91ecb48759673505) C:\windows\system32\Drivers\sptd.sys 11:02:12.0935 4944 Suspicious file (NoAccess): C:\windows\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505 11:02:12.0941 4944 sptd ( LockedFile.Multi.Generic ) - warning 11:02:12.0942 4944 sptd - detected LockedFile.Multi.Generic (1) 11:02:13.0118 4944 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\windows\system32\DRIVERS\srv.sys 11:02:13.0188 4944 srv - ok 11:02:13.0370 4944 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\windows\system32\DRIVERS\srv2.sys 11:02:13.0427 4944 srv2 - ok 11:02:13.0624 4944 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\windows\system32\DRIVERS\srvnet.sys 11:02:13.0672 4944 srvnet - ok 11:02:13.0861 4944 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys 11:02:13.0903 4944 stexstor - ok 11:02:14.0074 4944 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\drivers\swenum.sys 11:02:14.0112 4944 swenum - ok 11:02:14.0365 4944 Tcpip (24326784df8f3d5f5bbb9f878ce33c14) C:\windows\system32\drivers\tcpip.sys 11:02:14.0486 4944 Tcpip - ok 11:02:14.0677 4944 TCPIP6 (24326784df8f3d5f5bbb9f878ce33c14) C:\windows\system32\DRIVERS\tcpip.sys 11:02:14.0807 4944 TCPIP6 - ok 11:02:15.0026 4944 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\windows\system32\drivers\tcpipreg.sys 11:02:15.0130 4944 tcpipreg - ok 11:02:15.0324 4944 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\windows\system32\drivers\tdpipe.sys 11:02:15.0435 4944 TDPIPE - ok 11:02:15.0602 4944 TDTCP (2c10395baa4847f83042813c515cc289) C:\windows\system32\drivers\tdtcp.sys 11:02:15.0704 4944 TDTCP - ok 11:02:15.0867 4944 tdx (b459575348c20e8121d6039da063c704) C:\windows\system32\DRIVERS\tdx.sys 11:02:15.0969 4944 tdx - ok 11:02:16.0129 4944 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\windows\system32\drivers\termdd.sys 11:02:16.0170 4944 TermDD - ok 11:02:16.0359 4944 tmactmon (ca9e9c2c04a198ed345c1752222a5f3e) C:\windows\system32\DRIVERS\tmactmon.sys 11:02:16.0399 4944 tmactmon - ok 11:02:16.0563 4944 tmcomm (a3d20789b3ff0576a29462bef25bcfcc) C:\windows\system32\DRIVERS\tmcomm.sys 11:02:16.0599 4944 tmcomm - ok 11:02:16.0760 4944 tmevtmgr (21f215e54770c4bf93efaf63f58fe57e) C:\windows\system32\DRIVERS\tmevtmgr.sys 11:02:16.0789 4944 tmevtmgr - ok 11:02:16.0960 4944 tmlwf (ac88b1e97a3eade322eda84e69967341) C:\windows\system32\DRIVERS\tmlwf.sys 11:02:16.0998 4944 tmlwf - ok 11:02:17.0173 4944 tmpreflt (9cbbe54780770fdb7aaa73be530e4d80) C:\windows\system32\DRIVERS\tmpreflt.sys 11:02:17.0202 4944 tmpreflt - ok 11:02:17.0368 4944 tmtdi (44c262c1b2412ded35078b6166d2acc2) C:\windows\system32\DRIVERS\tmtdi.sys 11:02:17.0401 4944 tmtdi - ok 11:02:17.0569 4944 tmwfp (95dc30a928f5fcee5d30a191bf058146) C:\windows\system32\DRIVERS\tmwfp.sys 11:02:17.0614 4944 tmwfp - ok 11:02:17.0781 4944 tmxpflt (6cc393305bd60056ca09a4c8032a169a) C:\windows\system32\DRIVERS\tmxpflt.sys 11:02:17.0824 4944 tmxpflt - ok 11:02:18.0011 4944 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\windows\system32\DRIVERS\tssecsrv.sys 11:02:18.0114 4944 tssecsrv - ok 11:02:18.0271 4944 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\windows\system32\drivers\tsusbflt.sys 11:02:18.0331 4944 TsUsbFlt - ok 11:02:18.0492 4944 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\windows\system32\DRIVERS\tunnel.sys 11:02:18.0597 4944 tunnel - ok 11:02:18.0794 4944 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys 11:02:18.0835 4944 uagp35 - ok 11:02:19.0030 4944 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\windows\system32\DRIVERS\udfs.sys 11:02:19.0140 4944 udfs - ok 11:02:19.0328 4944 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\drivers\uliagpkx.sys 11:02:19.0371 4944 uliagpkx - ok 11:02:19.0530 4944 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\windows\system32\drivers\umbus.sys 11:02:19.0582 4944 umbus - ok 11:02:19.0734 4944 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys 11:02:19.0796 4944 UmPass - ok 11:02:19.0982 4944 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\windows\system32\DRIVERS\usbccgp.sys 11:02:20.0041 4944 usbccgp - ok 11:02:20.0204 4944 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\drivers\usbcir.sys 11:02:20.0267 4944 usbcir - ok 11:02:20.0473 4944 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\windows\system32\drivers\usbehci.sys 11:02:20.0524 4944 usbehci - ok 11:02:20.0693 4944 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\windows\system32\DRIVERS\usbhub.sys 11:02:20.0748 4944 usbhub - ok 11:02:20.0929 4944 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\windows\system32\drivers\usbohci.sys 11:02:20.0993 4944 usbohci - ok 11:02:21.0147 4944 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys 11:02:21.0202 4944 usbprint - ok 11:02:21.0362 4944 USBSTOR (f991ab9cc6b908db552166768176896a) C:\windows\system32\DRIVERS\USBSTOR.SYS 11:02:21.0413 4944 USBSTOR - ok 11:02:21.0595 4944 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\windows\system32\drivers\usbuhci.sys 11:02:21.0643 4944 usbuhci - ok 11:02:21.0799 4944 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\windows\System32\Drivers\usbvideo.sys 11:02:21.0863 4944 usbvideo - ok 11:02:22.0050 4944 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\drivers\vdrvroot.sys 11:02:22.0092 4944 vdrvroot - ok 11:02:22.0268 4944 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys 11:02:22.0335 4944 vga - ok 11:02:22.0527 4944 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys 11:02:22.0645 4944 VgaSave - ok 11:02:22.0832 4944 vhdmp (5461686cca2fda57b024547733ab42e3) C:\windows\system32\drivers\vhdmp.sys 11:02:22.0884 4944 vhdmp - ok 11:02:23.0073 4944 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\drivers\viaagp.sys 11:02:23.0120 4944 viaagp - ok 11:02:23.0342 4944 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys 11:02:23.0393 4944 ViaC7 - ok 11:02:23.0577 4944 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\drivers\viaide.sys 11:02:23.0618 4944 viaide - ok 11:02:23.0796 4944 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\windows\system32\drivers\volmgr.sys 11:02:23.0842 4944 volmgr - ok 11:02:24.0097 4944 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys 11:02:24.0158 4944 volmgrx - ok 11:02:24.0329 4944 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\windows\system32\drivers\volsnap.sys 11:02:24.0387 4944 volsnap - ok 11:02:24.0596 4944 vsapint (bbdd84ca629c1f7c8172b4405867f196) C:\windows\system32\DRIVERS\vsapint.sys 11:02:24.0731 4944 vsapint - ok 11:02:24.0953 4944 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys 11:02:25.0003 4944 vsmraid - ok 11:02:25.0173 4944 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys 11:02:25.0232 4944 vwifibus - ok 11:02:25.0441 4944 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys 11:02:25.0502 4944 vwififlt - ok 11:02:25.0699 4944 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys 11:02:25.0749 4944 WacomPen - ok 11:02:25.0936 4944 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys 11:02:26.0040 4944 WANARP - ok 11:02:26.0057 4944 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys 11:02:26.0166 4944 Wanarpv6 - ok 11:02:26.0352 4944 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys 11:02:26.0403 4944 Wd - ok 11:02:26.0608 4944 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys 11:02:26.0690 4944 Wdf01000 - ok 11:02:26.0956 4944 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys 11:02:27.0066 4944 WfpLwf - ok 11:02:27.0256 4944 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys 11:02:27.0297 4944 WIMMount - ok 11:02:27.0571 4944 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\drivers\wmiacpi.sys 11:02:27.0620 4944 WmiAcpi - ok 11:02:27.0837 4944 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys 11:02:27.0963 4944 ws2ifsl - ok 11:02:28.0165 4944 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\windows\system32\drivers\WudfPf.sys 11:02:28.0270 4944 WudfPf - ok 11:02:28.0440 4944 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\windows\system32\DRIVERS\WUDFRd.sys 11:02:28.0548 4944 WUDFRd - ok 11:02:28.0664 4944 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0 11:02:28.0942 4944 \Device\Harddisk0\DR0 - ok 11:02:28.0955 4944 Boot (0x1200) (38a1c35c9a7b7945e0124c987f031ca2) \Device\Harddisk0\DR0\Partition0 11:02:28.0958 4944 \Device\Harddisk0\DR0\Partition0 - ok 11:02:28.0993 4944 Boot (0x1200) (c0cb741593a9adf1afe3b1244b8efd3b) \Device\Harddisk0\DR0\Partition1 11:02:28.0997 4944 \Device\Harddisk0\DR0\Partition1 - ok 11:02:28.0999 4944 ============================================================ 11:02:28.0999 4944 Scan finished 11:02:28.0999 4944 ============================================================ 11:02:29.0038 3020 Detected object count: 1 11:02:29.0039 3020 Actual detected object count: 1 11:02:49.0539 3020 sptd ( LockedFile.Multi.Generic ) - skipped by user 11:02:49.0539 3020 sptd ( LockedFile.Multi.Generic ) - User select action: Skip 11:02:53.0398 5048 Deinitialize success

Лог файла е чист.

Мисля че приключихме.

Стартирайте Windows бутона + R (за да стартирате RUN прозореца).

Въведете командата Combofix /Uninstall (има празно място между Combofix и /Uninstall).

Натиснете Enter => това ще деинсталира Combofix и ще изтрие всички файлове и папки асоциирани с инструмента.

Ще занули и старите System Restore точки.

Стартирайте и OTM.exe и натиснете бутона CleanUp!

Това ще почисти всички използвани от нас инструменти, лог файлове и папки и накрая ще се самоизтрие.

Изтрийте ръчно папките с архивите които ни пратихте.

За финал деинсталирайте ESET Onlinne Scanner от Control Panel-a => Uninstall a program.

После можете вече да включите защитата в реално време на наличната ви антивирусна програма.

Обновете и дефинициите и направете една проверка и с нея.

Ако няма повече въпроси, мисля да маркирам случая като решен.

Весело посрещане на Новата 2012-та Година ! :bighat::snowballfight::champagne1:

  • Автор

супер мерси много! само да попитам да ми препоръчате антивирусна програма? по принцип съм с касперски ми е малко тежка за лаптотпа затова бих искал нещо ако може също толкова ефективно но сравнително по леко :) и още нещо - дали бихте могли да проверите този архив? http://file.bg/c139131ajJCT понеже промените направени с нея бяха занулени в хода на чистенето и се чудех дали проблемът не е дошъл оттук :)

Ами от безплатните бих препоръчал avast! Free Antivirus 6.0.1367 Final, AVG Anti-Virus Free 2012 12.0 Build 1901a4695 x86 или Avira AntiVir Personal 12.0.0.885.

От платените следете промоциите в другия раздел за сигурност - наскоро имаше добра промоция за Norton 360.

Архива изгглежда чист. Стартирах го и не срещнах проблеми.

VirusTotal поврърждава това.

Поздрави и лек ден ! :)

  • Автор

благодаря много за адекватната помощ! весело посрещане на новата година и всичко най хубаво :) и дано не се засичаме повече в този раздел :Р

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.