Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

Mediashifting.com + Rootkit ZeroAccess [РЕШЕН]

Papadopoulos
в Премахване на зловреден софтуер

Featured Replies

Изтеглете SystemLook и запазете програмата на десктопа.

  • Кликнете два пъти върху SystemLook.exe, за да стартирате програмата.
  • Копирайте съдържанието от цитата по-долу в текстовото поле на програмата:
:filefind
balancerfc.exe
serial.sy*
:folderfind 
$NtUninstallKB12524$
  • Кликнете на бутона Look, за да започне сканирането.
  • Когато сканирането завърши ще се отвори Notepad с резултата от сканирането. После публикувайте лог файла в следващия си коментар.
  • Отговори 75
  • Прегледи 7,5k
  • Създадено
  • Последен отговор
  • Автор

SystemLook 30.07.11 by jpshortstuff Log created at 13:26 on 11/01/2012 by Shushi Administrator - Elevation successful ========== filefind ========== Searching for "balancerfc.exe" No files found. Searching for "serial.sy*" C:\cmdcons\SERIAL.SY_ --a---- 30067 bytes [07:15 04/08/2004] [07:15 04/08/2004] 56A1F7591D17ECD1C5F60DABD2FA6B61 C:\WINDOWS\system32\drivers\serial.sys --a---- 64512 bytes [00:45 14/04/2008] [22:20 27/12/2011] CCA207A8896D4C6A0C9CE29A4AE411A7 ========== folderfind ========== Searching for "$NtUninstallKB12524$" C:\Qoobox\Quarantine\C\WINDOWS\$NtUninstallKB12524$ d------ [13:23 11/01/2012] C:\WINDOWS\$NtUninstallKB12524$ d--hsc- [06:44 01/12/2009] -= EOF =-

Моля пратете следния файл за анализ на VirusTotal

C:\WINDOWS\system32\drivers\serial.sys

(ако файла е вече анализиран, натиснете бутона Reanalyze)

Публикувайте линка към резултатите.

Разбира се, че рууткита не е шега работа...Бтв аз нямам нужда от линк с описание на значението на думата рууткит.

Преди да действаме да направим един бекъп на регистрите.

Изтеглете и стартирайте Erunt като не пипате настройките.

След това:

*. Отворете notepad и с copy/paste въведете следната информация:

Folder::
c:\windows\$NtUninstallKB12524$\1670538081
Registry::
[HKEY_LOCAL_MACHINE\System\currentcontrolset\Services\Serial]
"ImagePath"=-
"ImagePath"=hex(2):73,79,73,74,65,6D,33,32,5C,64,72,69,76,65,\72,73,5C,73,65,72,69,61,6C,2E,73,79,73,00

*.Запазете файла с име CFScript и го провлачете и пуснете в Combofix (както е показано на картинката отдолу).

Публикувано изображение

*. По време на сканиране от страна на ComboFix не стартирайте никакви други приложения, не натискайте клавиши от клавиатурата и не местете мишката !

*. Копирайте съдържанието на лог файла в следващия си пост.

  • Автор

Да не би да съм объркала линка? :doh: Направих първото,предполагам,че за второто ще трябват около 20 минути. Пускам скрипта.

Не, не линка към вирустотал е точен. Просто ми се стори, че сте публикували линк към Wikipedia с информация за значението на думата рууткит. Преди скрипта се надявам, че изпълнихте бекъпа на регистрите (много е важно!)!

  • Автор

Ето ме и мен отново. Да,изпълнявам всичко,което е написано. Ето от КомбоФикс-а: ComboFix 12-01-10.02 - Shushi 01.2012 г. 14:26:25.6.2 - x86 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.1022.739 [GMT -8:00] Running from: c:\documents and settings\Shushi\Desktop\ComboFix.exe Command switches used :: c:\documents and settings\Shushi\Desktop\CFScript.txt . . ((((((((((((((((((((((((( Files Created from 2011-12-11 to 2012-01-11 ))))))))))))))))))))))))))))))) . . 2012-01-11 22:11 . 2012-01-11 22:11 -------- d-----w- c:\program files\ERUNT 2012-01-11 00:49 . 2012-01-11 19:44 -------- d-----w- c:\program files\sms 2012-01-10 14:35 . 2012-01-10 14:40 111872 ----a-w- c:\windows\system32\drivers\TrueSight.sys 2012-01-10 12:45 . 2012-01-10 12:45 -------- d-----w- c:\program files\CCleaner 2011-12-27 22:45 . 2012-01-10 19:31 -------- d-----w- C:\TDSSKiller_Quarantine . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-12-27 22:20 . 2008-04-14 00:45 64512 ----a-w- c:\windows\system32\drivers\serial.sys 2011-11-23 13:25 . 2008-04-14 01:00 1859584 ----a-w- c:\windows\system32\win32k.sys 2011-11-01 16:07 . 2008-04-14 05:42 1288704 ----a-w- c:\windows\system32\ole32.dll 2011-10-31 23:43 . 2008-04-23 11:39 832512 ----a-w- c:\windows\system32\wininet.dll 2011-10-31 23:43 . 2008-04-23 11:39 1830912 ----a-w- c:\windows\system32\inetcpl.cpl 2011-10-31 23:43 . 2008-04-23 11:38 78336 ----a-w- c:\windows\system32\ieencode.dll 2011-10-31 23:43 . 2008-04-23 11:38 17408 ----a-w- c:\windows\system32\corpol.dll 2011-10-28 05:31 . 2008-04-14 05:41 33280 ----a-w- c:\windows\system32\csrsrv.dll 2011-10-25 13:37 . 2008-04-14 00:54 2148864 ----a-w- c:\windows\system32\ntoskrnl.exe 2011-10-25 12:52 . 2008-04-13 21:01 2027008 ----a-w- c:\windows\system32\ntkrnlpa.exe 2011-10-18 11:13 . 2008-04-14 05:41 186880 ----a-w- c:\windows\system32\encdec.dll 2011-08-12 06:09 . 2011-08-18 12:33 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ------- Sigcheck ------- Note: Unsigned files aren't necessarily malware. . [-] 2008-04-23 . 362BC5AF8EAF712832C58CC13AE05750 . 1614848 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll . ((((((((((((((((((((((((((((( SnapShot@2012-01-11_16.59.35 ))))))))))))))))))))))))))))))))))))))))) . + 2012-01-11 22:12 . 2012-01-11 22:12 327680 c:\windows\ERDNT\11.1.2012 г\Users\00000002\UsrClass.dat + 2012-01-11 22:12 . 2005-10-20 20:02 163328 c:\windows\ERDNT\11.1.2012 г\ERDNT.EXE + 2012-01-11 22:12 . 2012-01-11 22:12 12611584 c:\windows\ERDNT\11.1.2012 г\Users\00000001\NTUSER.DAT . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-04-19 484904] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-05-04 149040] "DAEMON Tools Lite"="d:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-08-18 39408] "SMS by Jeko Ianev"="c:\program files\sms\sms.exe" [2011-12-19 13506048] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-01-19 7401472] "nwiz"="nwiz.exe" [2006-01-19 1519616] "NVHotkey"="nvHotkey.dll" [2006-01-19 73728] "Apoint"="c:\program files\Apoint\Apoint.exe" [2005-10-07 176128] "SigmatelSysTrayApp"="stsystra.exe" [2005-11-16 397312] "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-05-04 161328] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-12-22 149280] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-11-11 417792] "LWS"="c:\program files\Logitech\LWS\Webcam Software\LWS.exe" [2010-05-08 165208] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nltide_2"="shell32" [X] . c:\documents and settings\Shushi\Start Menu\Programs\Startup\ ERUNT AutoBackup.lnk - c:\program files\ERUNT\AUTOBACK.EXE [2005-10-20 38912] . c:\documents and settings\All Users\Start Menu\Programs\Startup\ STK02H 2.3 PNP Monitor.lnk - c:\windows\STK02H\STK02HM.exe [2010-5-30 163840] STK02N 2.4 PNP Monitor.lnk - c:\windows\STK02N\STK02NM.exe [2010-5-30 163840] . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "d:\\Program Files\\WinHTTrack\\WinHTTrack.exe"= "c:\\Documents and Settings\\Shushi\\temp\\TeamViewer\\Version5\\TeamViewer.exe"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "7001:TCP"= 7001:TCP:BitComet 7001 TCP "7001:UDP"= 7001:UDP:BitComet 7001 UDP . R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [07.11.2010 г. 11:00 691696] S0 Si3124;Si3124; [x] S0 Si3531;Si3531; [x] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 г. 12:16 130384] S3 camvid20;Philips ToUcam Camera; Video;c:\windows\system32\drivers\camdrv21.sys [03.5.2010 г. 19:46 223232] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 г. 12:16 753504] . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2007-04-19 21:23 452136 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe . . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.bg/ uInternet Settings,ProxyOverride = *.local uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 IE: Sothink SWF Catcher - c:\program files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm TCP: DhcpNameServer = 84.54.128.6 192.168.4.1 DPF: {CAFECAFE-0013-0001-0028-ABCDEFABCDEF} FF - ProfilePath - c:\documents and settings\Shushi\Application Data\Mozilla\Firefox\Profiles\j1ok8789.default\ FF - prefs.js: browser.startup.homepage - google.bg FF - prefs.js: keyword.URL - hxxp://www.google.com/search?sourceid=navclient&hl=bg&q= . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2012-01-11 14:36 Windows 5.1.2600 Service Pack 3 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell\B20@O=5 *=0 *C*C*l*e*a*n*e*r*& \command] @="c:\\Program Files\\CCleaner\\ccleaner.exe" . Completion time: 2012-01-11 14:39:40 ComboFix-quarantined-files.txt 2012-01-11 22:39 ComboFix2.txt 2012-01-11 21:09 ComboFix3.txt 2012-01-11 20:21 ComboFix4.txt 2012-01-11 17:08 . Pre-Run: 5 438 902 272 bytes free Post-Run: 5 428 518 912 bytes free . - - End Of File - - 01A63E10D1E8AE8A91ECC6138E563F0E

Най-после някакъв напредък.

Но имаме още работа. Добре се справяте с инструкциите ! :yanim:

  • Моля изтеглете Junction.zip и го запазете на вашия десктоп.
  • Разархивирайте архива и копирайте файла junction.exe в C:Windows.
  • Отворете notepad и въведете следния код:

    @ECHO OFF
junction -s c: > log.txt
start log.txt
del %0
  • Запазете файла с иметo - Check.bat и го стартирайте.
  • Изчакайте проверката да завърши и да се появи лог файла.
  • Копирайте съдържанието му в следващия си пост.
  • Автор

Супер е, че има напредък! :) Ето лог-а: Junction v1.06 - Windows junction creator and reparse point viewer Copyright © 2000-2010 Mark Russinovich Sysinternals - www.sysinternals.com ... ... ... ..No reparse points found.

Интересно...

  • Изтеглете OTL.exe и го запазете на десктопа.
  • Стартирайте файла Публикувано изображение с двукратен клик на мишката.
  • Сложете отметка пред Scan All Users Публикувано изображение
  • Под менюто File Age => изберете 90 days
  • Под менюто Standard Registry => променете на ALL
  • Сложете отметки пред LOP и Purity Check
  • Под Публикувано изображение с Copy/Paste въведете следната текстова информация:

    netsvcs
msconfig
safebootminimal
safebootnetwork
%SYSTEMDRIVE%*.*
%USERPROFILE%*.*
%USERPROFILE%Application Data*.*
%USERPROFILE%Local SettingsApplication Data*.*
%AllUsersProfile%*.*
%AllUsersProfile%Application Data*.*
%USERPROFILE%My Documents*.*
%CommonProgramFiles%*.*
%PROGRAMFILES%*.*
%systemroot%system32configsystemprofile*.*
%windir%temp*.*
%systemroot%assemblytmp*.* /S /MD5
%systemroot%assemblyGAC_32*.* /S /MD5
%systemroot%assemblyGAC_MSIL*.* /S /MD5
%systemroot%system32*.dll /lockedfiles
%systemroot%Tasks*.job /lockedfiles
%systemroot%system32drivers*.sys /90
%systemroot%system32drivers*.sys /lockedfiles
%systemroot%system32Spoolprtprocsw32x86*.dll
%systemroot%*. /mp /s
/md5start
explorer.exe
lsass.exe
svchost.exe
wininit.exe
winlogon.exe
userinit.exe
atapi.sys
iaStor.sys
volsnap.sys
redbook.sys
i8042prt.sys
serial.sys
afd.sys
netbt.sys
tcpip.sys
ipsec.sys
/md5stop

  • Натиснете маркираният в синьо бутон: Публикувано изображение
  • Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt.
  • Публикувайте съдържанието на лог файловете в следващия си коментар.
  • Автор

Хм, пробвах няколко пъти, но без успех :((( Коментарът ви е прекалено дълъг. Моля върнете се и го съкратете.

Докато чакате искам да публикувате всички логове от TDSSKiller за да ги разгледам. [2012.01.10 11:31:35 | 000,056,438 | ---- | M] () -- C:TDSSKiller.2.6.25.0_10.01.2012_11.30.52_log.txt [2011.12.26 15:36:49 | 000,057,626 | ---- | M] () -- C:TDSSKiller.2.6.25.0_26.12.2011_15.35.54_log.txt [2012.01.11 12:27:18 | 000,056,428 | ---- | M] () -- C:TDSSKiller.2.6.25.0_27.12.2011_14.44.43_log.txt Бтв, бихте ли качили отново и Extras.Txt , защото срока за download в file.bg е изтекъл. Мерси !

  • Автор

TDSSKiller.2.6.25.0_10.01.2012_11.30.52_log.txt

11:30:52.0093 0460 TDSS rootkit removing tool 2.6.25.0 Dec 23 2011 14:51:16

11:30:52.0156 0460 ============================================================

11:30:52.0156 0460 Current date / time: 2012/01/10 11:30:52.0156

11:30:52.0156 0460 SystemInfo:

11:30:52.0156 0460

11:30:52.0156 0460 OS Version: 5.1.2600 ServicePack: 3.0

11:30:52.0156 0460 Product type: Workstation

11:30:52.0156 0460 ComputerName: Shushi

11:30:52.0156 0460 UserName: Shushi

11:30:52.0156 0460 Windows directory: C:\WINDOWS

11:30:52.0156 0460 System windows directory: C:\WINDOWS

11:30:52.0156 0460 Processor architecture: Intel x86

11:30:52.0156 0460 Number of processors: 2

11:30:52.0156 0460 Page size: 0x1000

11:30:52.0156 0460 Boot type: Safe boot with network

11:30:52.0156 0460 ============================================================

11:30:54.0203 0460 Initialize success

11:30:57.0218 0476 ============================================================

11:30:57.0234 0476 Scan started

11:30:57.0234 0476 Mode: Manual;

11:30:57.0234 0476 ============================================================

11:30:58.0437 0476 14209318 - ok

11:30:58.0500 0476 66825487 - ok

11:30:58.0671 0476 Aavmker4 (83631291adf2887cffc786d034d3fa15) C:\WINDOWS\system32\drivers\Aavmker4.sys

11:30:58.0671 0476 Aavmker4 - ok

11:30:58.0703 0476 Abiosdsk - ok

11:30:58.0765 0476 abp480n5 - ok

11:30:58.0843 0476 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys

11:30:58.0859 0476 ACPI - ok

11:30:58.0906 0476 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys

11:30:58.0906 0476 ACPIEC - ok

11:30:58.0984 0476 adpu160m - ok

11:30:59.0062 0476 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys

11:30:59.0062 0476 aec - ok

11:30:59.0218 0476 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys

11:30:59.0218 0476 AFD - ok

11:30:59.0250 0476 Aha154x - ok

11:30:59.0312 0476 aic78u2 - ok

11:30:59.0375 0476 aic78xx - ok

11:30:59.0484 0476 AliIde - ok

11:30:59.0546 0476 amsint - ok

11:30:59.0625 0476 ApfiltrService (090880e9bf20f928bc341f96d27c019e) C:\WINDOWS\system32\DRIVERS\Apfiltr.sys

11:30:59.0625 0476 ApfiltrService - ok

11:30:59.0671 0476 Appdrv - ok

11:30:59.0765 0476 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys

11:30:59.0781 0476 Arp1394 - ok

11:30:59.0812 0476 asc - ok

11:30:59.0875 0476 asc3350p - ok

11:30:59.0937 0476 asc3550 - ok

11:31:00.0171 0476 aswFsBlk (1c2e6bb4fe8621b1b863855b02bc33eb) C:\WINDOWS\system32\drivers\aswFsBlk.sys

11:31:00.0187 0476 aswFsBlk - ok

11:31:00.0250 0476 aswMon2 (452d0ecd14fa02f9b061f42c8a30dd49) C:\WINDOWS\system32\drivers\aswMon2.sys

11:31:00.0250 0476 aswMon2 - ok

11:31:00.0312 0476 aswRdr (b6a9373619d851be80fb5f1b5eed0d4e) C:\WINDOWS\system32\drivers\aswRdr.sys

11:31:00.0312 0476 aswRdr - ok

11:31:00.0390 0476 aswSnx (9be41c1ae8bc481eb662d85c98d979c2) C:\WINDOWS\system32\drivers\aswSnx.sys

11:31:00.0390 0476 aswSnx - ok

11:31:00.0453 0476 aswSP (4b1a54ba2bc5873a774df6b70ab8b0b3) C:\WINDOWS\system32\drivers\aswSP.sys

11:31:00.0468 0476 aswSP - ok

11:31:00.0546 0476 aswTdi (c7f1cea32766184911293f4e1ee653f5) C:\WINDOWS\system32\drivers\aswTdi.sys

11:31:00.0546 0476 aswTdi - ok

11:31:00.0625 0476 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys

11:31:00.0625 0476 AsyncMac - ok

11:31:00.0671 0476 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys

11:31:00.0671 0476 atapi - ok

11:31:00.0734 0476 Atdisk - ok

11:31:00.0812 0476 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys

11:31:00.0812 0476 Atmarpc - ok

11:31:00.0890 0476 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys

11:31:00.0890 0476 audstub - ok

11:31:00.0984 0476 b57w2k (c0acd392ece55784884cc208aafa06ce) C:\WINDOWS\system32\DRIVERS\b57xp32.sys

11:31:00.0984 0476 b57w2k - ok

11:31:01.0078 0476 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys

11:31:01.0078 0476 Beep - ok

11:31:01.0281 0476 BthEnum (b279426e3c0c344893ed78a613a73bde) C:\WINDOWS\system32\DRIVERS\BthEnum.sys

11:31:01.0281 0476 BthEnum - ok

11:31:01.0359 0476 BTHMODEM (fca6f069597b62d42495191ace3fc6c1) C:\WINDOWS\system32\DRIVERS\bthmodem.sys

11:31:01.0359 0476 BTHMODEM - ok

11:31:01.0437 0476 BthPan (80602b8746d3738f5886ce3d67ef06b6) C:\WINDOWS\system32\DRIVERS\bthpan.sys

11:31:01.0437 0476 BthPan - ok

11:31:01.0500 0476 BTHPORT (662bfd909447dd9cc15b1a1c366583b4) C:\WINDOWS\system32\Drivers\BTHport.sys

11:31:01.0515 0476 BTHPORT - ok

11:31:01.0578 0476 BTHUSB (61364cd71ef63b0f038b7e9df00f1efa) C:\WINDOWS\system32\Drivers\BTHUSB.sys

11:31:01.0578 0476 BTHUSB - ok

11:31:01.0734 0476 camvid20 (5f68a3ab60262e3bf5b5c6c926e53525) C:\WINDOWS\system32\DRIVERS\camdrv21.sys

11:31:01.0734 0476 camvid20 - ok

11:31:01.0796 0476 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys

11:31:01.0812 0476 cbidf2k - ok

11:31:01.0859 0476 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys

11:31:01.0875 0476 CCDECODE - ok

11:31:01.0921 0476 cd20xrnt - ok

11:31:01.0984 0476 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys

11:31:01.0984 0476 Cdaudio - ok

11:31:02.0046 0476 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys

11:31:02.0046 0476 Cdfs - ok

11:31:02.0218 0476 cdrbsdrv (351735695e9ead93de6af85d8beb1ca8) C:\WINDOWS\system32\drivers\cdrbsdrv.sys

11:31:02.0218 0476 cdrbsdrv - ok

11:31:02.0281 0476 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys

11:31:02.0281 0476 Cdrom - ok

11:31:02.0328 0476 Changer - ok

11:31:02.0515 0476 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys

11:31:02.0515 0476 CmBatt - ok

11:31:02.0562 0476 CmdIde - ok

11:31:02.0609 0476 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys

11:31:02.0625 0476 Compbatt - ok

11:31:02.0765 0476 Cpqarray - ok

11:31:02.0843 0476 dac2w2k - ok

11:31:02.0906 0476 dac960nt - ok

11:31:03.0031 0476 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys

11:31:03.0031 0476 Disk - ok

11:31:03.0171 0476 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys

11:31:03.0203 0476 dmboot - ok

11:31:03.0250 0476 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys

11:31:03.0265 0476 dmio - ok

11:31:03.0343 0476 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys

11:31:03.0343 0476 dmload - ok

11:31:03.0453 0476 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys

11:31:03.0453 0476 DMusic - ok

11:31:03.0546 0476 dpti2o - ok

11:31:03.0625 0476 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys

11:31:03.0625 0476 drmkaud - ok

11:31:03.0796 0476 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys

11:31:03.0812 0476 Fastfat - ok

11:31:03.0890 0476 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys

11:31:03.0890 0476 Fdc - ok

11:31:03.0953 0476 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys

11:31:03.0953 0476 Fips - ok

11:31:04.0125 0476 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys

11:31:04.0125 0476 Flpydisk - ok

11:31:04.0171 0476 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys

11:31:04.0171 0476 FltMgr - ok

11:31:04.0265 0476 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys

11:31:04.0265 0476 Fs_Rec - ok

11:31:04.0328 0476 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys

11:31:04.0328 0476 Ftdisk - ok

11:31:04.0375 0476 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys

11:31:04.0390 0476 Gpc - ok

11:31:04.0453 0476 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys

11:31:04.0453 0476 HDAudBus - ok

11:31:04.0531 0476 HidBth (7bd2de4c85eb4241eed57672b16a7d8d) C:\WINDOWS\system32\DRIVERS\hidbth.sys

11:31:04.0531 0476 HidBth - ok

11:31:04.0671 0476 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys

11:31:04.0671 0476 hidusb - ok

11:31:04.0734 0476 hpn - ok

11:31:04.0859 0476 HSF_DPV (e8ec1767ea315a39a0dd8989952ca0e9) C:\WINDOWS\system32\DRIVERS\HSX_DPV.sys

11:31:04.0890 0476 HSF_DPV - ok

11:31:04.0937 0476 HSXHWAZL (61478fa42ee04562e7f11f4dca87e9c8) C:\WINDOWS\system32\DRIVERS\HSXHWAZL.sys

11:31:04.0937 0476 HSXHWAZL - ok

11:31:05.0015 0476 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys

11:31:05.0015 0476 HTTP - ok

11:31:05.0140 0476 i2omgmt - ok

11:31:05.0187 0476 i2omp - ok

11:31:05.0265 0476 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys

11:31:05.0265 0476 i8042prt - ok

11:31:05.0375 0476 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys

11:31:05.0375 0476 Imapi - ok

11:31:05.0484 0476 ini910u - ok

11:31:05.0656 0476 IntelIde - ok

11:31:05.0734 0476 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys

11:31:05.0734 0476 intelppm - ok

11:31:05.0796 0476 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys

11:31:05.0796 0476 Ip6Fw - ok

11:31:05.0859 0476 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

11:31:05.0859 0476 IpFilterDriver - ok

11:31:05.0906 0476 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys

11:31:05.0906 0476 IpInIp - ok

11:31:05.0984 0476 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys

11:31:05.0984 0476 IpNat - ok

11:31:06.0046 0476 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys

11:31:06.0046 0476 IPSec - ok

11:31:06.0109 0476 irda (aca5e7b54409f9cb5eed97ed0c81120e) C:\WINDOWS\system32\DRIVERS\irda.sys

11:31:06.0109 0476 irda - ok

11:31:06.0171 0476 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys

11:31:06.0171 0476 IRENUM - ok

11:31:06.0296 0476 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys

11:31:06.0296 0476 isapnp - ok

11:31:06.0375 0476 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys

11:31:06.0375 0476 Kbdclass - ok

11:31:06.0437 0476 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys

11:31:06.0437 0476 kbdhid - ok

11:31:06.0546 0476 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys

11:31:06.0546 0476 kmixer - ok

11:31:06.0578 0476 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys

11:31:06.0593 0476 KSecDD - ok

11:31:06.0703 0476 lbrtfdc - ok

11:31:06.0875 0476 LVPr2Mon (8be71d7edb8c7494913722059f760dd0) C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys

11:31:06.0890 0476 LVPr2Mon - ok

11:31:07.0000 0476 LVRS (a1857fbb9b4930eeb2fd92386c45c529) C:\WINDOWS\system32\DRIVERS\lvrs.sys

11:31:07.0015 0476 LVRS - ok

11:31:07.0265 0476 LVUVC (3703406af0726badd24c5e552493e5b1) C:\WINDOWS\system32\DRIVERS\lvuvc.sys

11:31:07.0484 0476 LVUVC - ok

11:31:07.0625 0476 mdmxsdk (e246a32c445056996074a397da56e815) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys

11:31:07.0625 0476 mdmxsdk - ok

11:31:07.0718 0476 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys

11:31:07.0718 0476 mnmdd - ok

11:31:07.0812 0476 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys

11:31:07.0812 0476 Modem - ok

11:31:07.0859 0476 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys

11:31:07.0859 0476 Mouclass - ok

11:31:07.0921 0476 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys

11:31:07.0921 0476 mouhid - ok

11:31:07.0984 0476 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys

11:31:07.0984 0476 MountMgr - ok

11:31:08.0046 0476 mraid35x - ok

11:31:08.0140 0476 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys

11:31:08.0140 0476 MRxDAV - ok

11:31:08.0218 0476 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

11:31:08.0234 0476 MRxSmb - ok

11:31:08.0343 0476 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys

11:31:08.0359 0476 Msfs - ok

11:31:08.0453 0476 MSIRCOMM (95c6432151ccff8617352f8e616a1aa4) C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys

11:31:08.0453 0476 MSIRCOMM - ok

11:31:08.0609 0476 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys

11:31:08.0609 0476 MSKSSRV - ok

11:31:08.0656 0476 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys

11:31:08.0656 0476 MSPCLOCK - ok

11:31:08.0718 0476 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys

11:31:08.0718 0476 MSPQM - ok

11:31:08.0781 0476 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys

11:31:08.0781 0476 mssmbios - ok

11:31:08.0875 0476 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys

11:31:08.0875 0476 MSTEE - ok

11:31:08.0953 0476 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys

11:31:08.0953 0476 Mup - ok

11:31:09.0015 0476 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys

11:31:09.0015 0476 NABTSFEC - ok

11:31:09.0171 0476 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys

11:31:09.0171 0476 NDIS - ok

11:31:09.0218 0476 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys

11:31:09.0218 0476 NdisIP - ok

11:31:09.0281 0476 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys

11:31:09.0281 0476 NdisTapi - ok

11:31:09.0328 0476 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys

11:31:09.0328 0476 Ndisuio - ok

11:31:09.0390 0476 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys

11:31:09.0406 0476 NdisWan - ok

11:31:09.0453 0476 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys

11:31:09.0453 0476 NDProxy - ok

11:31:09.0515 0476 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys

11:31:09.0515 0476 NetBIOS - ok

11:31:09.0609 0476 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys

11:31:09.0609 0476 NetBT - ok

11:31:09.0828 0476 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys

11:31:09.0828 0476 NIC1394 - ok

11:31:09.0953 0476 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys

11:31:09.0953 0476 Npfs - ok

11:31:10.0046 0476 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys

11:31:10.0078 0476 Ntfs - ok

11:31:10.0171 0476 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys

11:31:10.0171 0476 Null - ok

11:31:10.0406 0476 nv (5796a04ccc99542fdfb43f2accd803df) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys

11:31:10.0515 0476 nv - ok

11:31:10.0671 0476 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys

11:31:10.0671 0476 NwlnkFlt - ok

11:31:10.0734 0476 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys

11:31:10.0734 0476 NwlnkFwd - ok

11:31:10.0796 0476 NwlnkIpx (8b8b1be2dba4025da6786c645f77f123) C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys

11:31:10.0796 0476 NwlnkIpx - ok

11:31:10.0859 0476 NwlnkNb (56d34a67c05e94e16377c60609741ff8) C:\WINDOWS\system32\DRIVERS\nwlnknb.sys

11:31:10.0859 0476 NwlnkNb - ok

11:31:10.0906 0476 NwlnkSpx (c0bb7d1615e1acbdc99757f6ceaf8cf0) C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys

11:31:10.0906 0476 NwlnkSpx - ok

11:31:11.0000 0476 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys

11:31:11.0000 0476 ohci1394 - ok

11:31:11.0171 0476 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\drivers\Parport.sys

11:31:11.0171 0476 Parport - ok

11:31:11.0218 0476 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys

11:31:11.0218 0476 PartMgr - ok

11:31:11.0281 0476 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys

11:31:11.0281 0476 ParVdm - ok

11:31:11.0343 0476 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys

11:31:11.0359 0476 PCI - ok

11:31:11.0390 0476 PCIDump - ok

11:31:11.0468 0476 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys

11:31:11.0468 0476 PCIIde - ok

11:31:11.0515 0476 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\DRIVERS\pcmcia.sys

11:31:11.0515 0476 Pcmcia - ok

11:31:11.0578 0476 PDCOMP - ok

11:31:11.0640 0476 PDFRAME - ok

11:31:11.0687 0476 PDRELI - ok

11:31:11.0750 0476 PDRFRAME - ok

11:31:11.0812 0476 perc2 - ok

11:31:11.0875 0476 perc2hib - ok

11:31:12.0140 0476 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys

11:31:12.0140 0476 PptpMiniport - ok

11:31:12.0234 0476 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys

11:31:12.0234 0476 PSched - ok

11:31:12.0312 0476 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys

11:31:12.0312 0476 Ptilink - ok

11:31:12.0390 0476 PxHelp20 (153d02480a0a2f45785522e814c634b6) C:\WINDOWS\system32\Drivers\PxHelp20.sys

11:31:12.0390 0476 PxHelp20 - ok

11:31:12.0437 0476 ql1080 - ok

11:31:12.0500 0476 Ql10wnt - ok

11:31:12.0562 0476 ql12160 - ok

11:31:12.0625 0476 ql1240 - ok

11:31:12.0671 0476 ql1280 - ok

11:31:12.0750 0476 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys

11:31:12.0750 0476 RasAcd - ok

11:31:12.0828 0476 Rasirda (0207d26ddf796a193ccd9f83047bb5fc) C:\WINDOWS\system32\DRIVERS\rasirda.sys

11:31:12.0843 0476 Rasirda - ok

11:31:12.0906 0476 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys

11:31:12.0906 0476 Rasl2tp - ok

11:31:12.0984 0476 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys

11:31:12.0984 0476 RasPppoe - ok

11:31:13.0046 0476 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys

11:31:13.0046 0476 Raspti - ok

11:31:13.0125 0476 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys

11:31:13.0140 0476 Rdbss - ok

11:31:13.0187 0476 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

11:31:13.0187 0476 RDPCDD - ok

11:31:13.0296 0476 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys

11:31:13.0296 0476 rdpdr - ok

11:31:13.0375 0476 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys

11:31:13.0390 0476 RDPWD - ok

11:31:13.0468 0476 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys

11:31:13.0468 0476 redbook - ok

11:31:13.0578 0476 RFCOMM (851c30df2807fcfa21e4c681a7d6440e) C:\WINDOWS\system32\DRIVERS\rfcomm.sys

11:31:13.0578 0476 RFCOMM - ok

11:31:13.0812 0476 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys

11:31:13.0812 0476 Secdrv - ok

11:31:13.0968 0476 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys

11:31:13.0968 0476 serenum - ok

11:31:14.0031 0476 Serial - ok

11:31:14.0265 0476 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys

11:31:14.0265 0476 Sfloppy - ok

11:31:14.0375 0476 Si3112 - ok

11:31:14.0468 0476 Si3124 - ok

11:31:14.0546 0476 Si3132 - ok

11:31:14.0609 0476 Si3132r5 - ok

11:31:14.0671 0476 Si3531 - ok

11:31:14.0734 0476 Simbad - ok

11:31:14.0796 0476 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys

11:31:14.0812 0476 SLIP - ok

11:31:14.0875 0476 SMCIRDA (707647a1aa0edb6cbef61b0c75c28ed3) C:\WINDOWS\system32\DRIVERS\smcirda.sys

11:31:14.0875 0476 SMCIRDA - ok

11:31:14.0984 0476 sonypvs1 (dfadfc2c86662f40759bf02add27d569) C:\WINDOWS\system32\DRIVERS\sonypvs1.sys

11:31:15.0000 0476 sonypvs1 - ok

11:31:15.0031 0476 Sparrow - ok

11:31:15.0109 0476 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys

11:31:15.0109 0476 splitter - ok

11:31:15.0296 0476 sptd (cdddec541bc3c96f91ecb48759673505) C:\WINDOWS\system32\Drivers\sptd.sys

11:31:15.0296 0476 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505

11:31:15.0312 0476 sptd ( LockedFile.Multi.Generic ) - warning

11:31:15.0312 0476 sptd - detected LockedFile.Multi.Generic (1)

11:31:15.0421 0476 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys

11:31:15.0421 0476 sr - ok

11:31:15.0515 0476 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys

11:31:15.0531 0476 Srv - ok

11:31:15.0718 0476 STHDA (2a2dc39623adef8ab3703ab9fac4b440) C:\WINDOWS\system32\drivers\sthda.sys

11:31:15.0750 0476 STHDA - ok

11:31:15.0828 0476 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys

11:31:15.0828 0476 streamip - ok

11:31:15.0875 0476 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys

11:31:15.0875 0476 swenum - ok

11:31:15.0953 0476 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys

11:31:15.0953 0476 swmidi - ok

11:31:16.0031 0476 symc810 - ok

11:31:16.0078 0476 symc8xx - ok

11:31:16.0140 0476 sym_hi - ok

11:31:16.0203 0476 sym_u3 - ok

11:31:16.0296 0476 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys

11:31:16.0296 0476 sysaudio - ok

11:31:16.0484 0476 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys

11:31:16.0500 0476 Tcpip - ok

11:31:16.0562 0476 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys

11:31:16.0562 0476 TDPIPE - ok

11:31:16.0625 0476 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys

11:31:16.0625 0476 TDTCP - ok

11:31:16.0687 0476 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys

11:31:16.0687 0476 TermDD - ok

11:31:16.0812 0476 TosIde - ok

11:31:16.0953 0476 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys

11:31:16.0953 0476 Udfs - ok

11:31:17.0062 0476 UIUSys - ok

11:31:17.0109 0476 ultra - ok

11:31:17.0281 0476 UnlockerDriver5 - ok

11:31:17.0390 0476 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys

11:31:17.0390 0476 Update - ok

11:31:17.0562 0476 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys

11:31:17.0562 0476 usbaudio - ok

11:31:17.0671 0476 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys

11:31:17.0671 0476 usbccgp - ok

11:31:17.0718 0476 USBCCID (6b5e4d5e6e5ecd6acd14aed59768ce5c) C:\WINDOWS\system32\DRIVERS\usbccid.sys

11:31:17.0718 0476 USBCCID - ok

11:31:17.0781 0476 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys

11:31:17.0796 0476 usbehci - ok

11:31:17.0843 0476 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys

11:31:17.0843 0476 usbhub - ok

11:31:17.0906 0476 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys

11:31:17.0906 0476 usbprint - ok

11:31:17.0968 0476 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys

11:31:17.0968 0476 usbscan - ok

11:31:18.0078 0476 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

11:31:18.0078 0476 USBSTOR - ok

11:31:18.0125 0476 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys

11:31:18.0140 0476 usbuhci - ok

11:31:18.0203 0476 usbvideo (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys

11:31:18.0218 0476 usbvideo - ok

11:31:18.0265 0476 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys

11:31:18.0281 0476 VgaSave - ok

11:31:18.0328 0476 ViaIde - ok

11:31:18.0390 0476 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys

11:31:18.0390 0476 VolSnap - ok

11:31:18.0578 0476 w39n51 (b1f126e7e28877106d60e6ff3998d033) C:\WINDOWS\system32\DRIVERS\w39n51.sys

11:31:18.0625 0476 w39n51 - ok

11:31:18.0750 0476 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys

11:31:18.0750 0476 Wanarp - ok

11:31:18.0796 0476 WDICA - ok

11:31:18.0859 0476 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys

11:31:18.0875 0476 wdmaud - ok

11:31:18.0984 0476 winachsf (ba6b6fb242a6ba4068c8b763063beb63) C:\WINDOWS\system32\DRIVERS\HSX_CNXT.sys

11:31:19.0015 0476 winachsf - ok

11:31:19.0406 0476 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS

11:31:19.0406 0476 WSTCODEC - ok

11:31:19.0687 0476 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0

11:31:19.0890 0476 \Device\Harddisk0\DR0 - ok

11:31:19.0921 0476 Boot (0x1200) (bffbfd22aaa839410bef7cc150e93d86) \Device\Harddisk0\DR0\Partition0

11:31:19.0921 0476 \Device\Harddisk0\DR0\Partition0 - ok

11:31:20.0000 0476 Boot (0x1200) (f99feb293cd6f6c940478ac36b9bd1c3) \Device\Harddisk0\DR0\Partition1

11:31:20.0000 0476 \Device\Harddisk0\DR0\Partition1 - ok

11:31:20.0062 0476 Boot (0x1200) (de02260f4d0d537d7442de3951bf893e) \Device\Harddisk0\DR0\Partition2

11:31:20.0062 0476 \Device\Harddisk0\DR0\Partition2 - ok

11:31:20.0109 0476 Boot (0x1200) (e916dea42a87e8122faba89596bb7713) \Device\Harddisk0\DR0\Partition3

11:31:20.0109 0476 \Device\Harddisk0\DR0\Partition3 - ok

11:31:20.0125 0476 ============================================================

11:31:20.0125 0476 Scan finished

11:31:20.0125 0476 ============================================================

11:31:20.0218 0464 Detected object count: 1

11:31:20.0218 0464 Actual detected object count: 1

11:31:31.0656 0464 C:\WINDOWS\system32\Drivers\sptd.sys - copied to quarantine

11:31:31.0656 0464 sptd ( LockedFile.Multi.Generic ) - User select action: Quarantine

11:31:35.0625 0456 Deinitialize success

TDSSKiller.2.6.25.0_26.12.2011_15.35.54_log.txt

15:35:54.0234 2580 TDSS rootkit removing tool 2.6.25.0 Dec 23 2011 14:51:16

15:35:54.0671 2580 ============================================================

15:35:54.0671 2580 Current date / time: 2011/12/26 15:35:54.0671

15:35:54.0671 2580 SystemInfo:

15:35:54.0671 2580

15:35:54.0671 2580 OS Version: 5.1.2600 ServicePack: 3.0

15:35:54.0671 2580 Product type: Workstation

15:35:54.0687 2580 ComputerName: Shushi

15:35:54.0687 2580 UserName: Shushi

15:35:54.0687 2580 Windows directory: C:\WINDOWS

15:35:54.0687 2580 System windows directory: C:\WINDOWS

15:35:54.0687 2580 Processor architecture: Intel x86

15:35:54.0687 2580 Number of processors: 2

15:35:54.0687 2580 Page size: 0x1000

15:35:54.0687 2580 Boot type: Normal boot

15:35:54.0687 2580 ============================================================

15:35:59.0109 2580 Initialize success

15:36:03.0078 2676 ============================================================

15:36:03.0078 2676 Scan started

15:36:03.0078 2676 Mode: Manual;

15:36:03.0078 2676 ============================================================

15:36:04.0203 2676 Aavmker4 (83631291adf2887cffc786d034d3fa15) C:\WINDOWS\system32\drivers\Aavmker4.sys

15:36:04.0203 2676 Aavmker4 - ok

15:36:04.0218 2676 Abiosdsk - ok

15:36:04.0234 2676 abp480n5 - ok

15:36:04.0281 2676 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys

15:36:04.0281 2676 ACPI - ok

15:36:04.0375 2676 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys

15:36:04.0375 2676 ACPIEC - ok

15:36:04.0390 2676 adpu160m - ok

15:36:04.0437 2676 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys

15:36:04.0437 2676 aec - ok

15:36:04.0578 2676 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys

15:36:04.0593 2676 AFD - ok

15:36:04.0593 2676 Aha154x - ok

15:36:04.0625 2676 aic78u2 - ok

15:36:04.0640 2676 aic78xx - ok

15:36:04.0656 2676 AliIde - ok

15:36:04.0671 2676 amsint - ok

15:36:04.0718 2676 ApfiltrService (090880e9bf20f928bc341f96d27c019e) C:\WINDOWS\system32\DRIVERS\Apfiltr.sys

15:36:04.0734 2676 ApfiltrService - ok

15:36:04.0750 2676 Appdrv - ok

15:36:04.0796 2676 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys

15:36:04.0812 2676 Arp1394 - ok

15:36:04.0812 2676 asc - ok

15:36:04.0843 2676 asc3350p - ok

15:36:04.0859 2676 asc3550 - ok

15:36:04.0906 2676 aswFsBlk (1c2e6bb4fe8621b1b863855b02bc33eb) C:\WINDOWS\system32\drivers\aswFsBlk.sys

15:36:04.0906 2676 aswFsBlk - ok

15:36:05.0015 2676 aswMon2 (452d0ecd14fa02f9b061f42c8a30dd49) C:\WINDOWS\system32\drivers\aswMon2.sys

15:36:05.0015 2676 aswMon2 - ok

15:36:05.0046 2676 aswRdr (b6a9373619d851be80fb5f1b5eed0d4e) C:\WINDOWS\system32\drivers\aswRdr.sys

15:36:05.0046 2676 aswRdr - ok

15:36:05.0109 2676 aswSnx (9be41c1ae8bc481eb662d85c98d979c2) C:\WINDOWS\system32\drivers\aswSnx.sys

15:36:05.0109 2676 aswSnx - ok

15:36:05.0156 2676 aswSP (4b1a54ba2bc5873a774df6b70ab8b0b3) C:\WINDOWS\system32\drivers\aswSP.sys

15:36:05.0156 2676 aswSP - ok

15:36:05.0187 2676 aswTdi (c7f1cea32766184911293f4e1ee653f5) C:\WINDOWS\system32\drivers\aswTdi.sys

15:36:05.0187 2676 aswTdi - ok

15:36:05.0234 2676 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys

15:36:05.0234 2676 AsyncMac - ok

15:36:05.0343 2676 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys

15:36:05.0359 2676 atapi - ok

15:36:05.0375 2676 Atdisk - ok

15:36:05.0421 2676 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys

15:36:05.0421 2676 Atmarpc - ok

15:36:05.0468 2676 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys

15:36:05.0468 2676 audstub - ok

15:36:05.0531 2676 b57w2k (c0acd392ece55784884cc208aafa06ce) C:\WINDOWS\system32\DRIVERS\b57xp32.sys

15:36:05.0531 2676 b57w2k - ok

15:36:05.0578 2676 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys

15:36:05.0578 2676 Beep - ok

15:36:05.0609 2676 BthEnum (b279426e3c0c344893ed78a613a73bde) C:\WINDOWS\system32\DRIVERS\BthEnum.sys

15:36:05.0625 2676 BthEnum - ok

15:36:05.0656 2676 BTHMODEM (fca6f069597b62d42495191ace3fc6c1) C:\WINDOWS\system32\DRIVERS\bthmodem.sys

15:36:05.0656 2676 BTHMODEM - ok

15:36:05.0765 2676 BthPan (80602b8746d3738f5886ce3d67ef06b6) C:\WINDOWS\system32\DRIVERS\bthpan.sys

15:36:05.0765 2676 BthPan - ok

15:36:05.0828 2676 BTHPORT (662bfd909447dd9cc15b1a1c366583b4) C:\WINDOWS\system32\Drivers\BTHport.sys

15:36:05.0843 2676 BTHPORT - ok

15:36:05.0875 2676 BTHUSB (61364cd71ef63b0f038b7e9df00f1efa) C:\WINDOWS\system32\Drivers\BTHUSB.sys

15:36:05.0875 2676 BTHUSB - ok

15:36:05.0921 2676 camvid20 (5f68a3ab60262e3bf5b5c6c926e53525) C:\WINDOWS\system32\DRIVERS\camdrv21.sys

15:36:05.0937 2676 camvid20 - ok

15:36:05.0984 2676 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys

15:36:05.0984 2676 cbidf2k - ok

15:36:06.0093 2676 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys

15:36:06.0093 2676 CCDECODE - ok

15:36:06.0109 2676 cd20xrnt - ok

15:36:06.0140 2676 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys

15:36:06.0140 2676 Cdaudio - ok

15:36:06.0187 2676 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys

15:36:06.0187 2676 Cdfs - ok

15:36:06.0234 2676 cdrbsdrv (351735695e9ead93de6af85d8beb1ca8) C:\WINDOWS\system32\drivers\cdrbsdrv.sys

15:36:06.0234 2676 cdrbsdrv - ok

15:36:06.0265 2676 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys

15:36:06.0265 2676 Cdrom - ok

15:36:06.0281 2676 Changer - ok

15:36:06.0328 2676 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys

15:36:06.0328 2676 CmBatt - ok

15:36:06.0421 2676 CmdIde - ok

15:36:06.0437 2676 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys

15:36:06.0437 2676 Compbatt - ok

15:36:06.0468 2676 Cpqarray - ok

15:36:06.0484 2676 dac2w2k - ok

15:36:06.0500 2676 dac960nt - ok

15:36:06.0531 2676 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys

15:36:06.0531 2676 Disk - ok

15:36:06.0609 2676 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys

15:36:06.0640 2676 dmboot - ok

15:36:06.0671 2676 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys

15:36:06.0671 2676 dmio - ok

15:36:06.0718 2676 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys

15:36:06.0718 2676 dmload - ok

15:36:06.0750 2676 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys

15:36:06.0750 2676 DMusic - ok

15:36:06.0781 2676 dpti2o - ok

15:36:06.0812 2676 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys

15:36:06.0812 2676 drmkaud - ok

15:36:06.0937 2676 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys

15:36:06.0953 2676 Fastfat - ok

15:36:06.0968 2676 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys

15:36:06.0984 2676 Fdc - ok

15:36:07.0000 2676 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys

15:36:07.0000 2676 Fips - ok

15:36:07.0031 2676 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys

15:36:07.0031 2676 Flpydisk - ok

15:36:07.0062 2676 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys

15:36:07.0078 2676 FltMgr - ok

15:36:07.0109 2676 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys

15:36:07.0125 2676 Fs_Rec - ok

15:36:07.0140 2676 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys

15:36:07.0156 2676 Ftdisk - ok

15:36:07.0281 2676 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys

15:36:07.0281 2676 Gpc - ok

15:36:07.0328 2676 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys

15:36:07.0343 2676 HDAudBus - ok

15:36:07.0375 2676 HidBth (7bd2de4c85eb4241eed57672b16a7d8d) C:\WINDOWS\system32\DRIVERS\hidbth.sys

15:36:07.0390 2676 HidBth - ok

15:36:07.0437 2676 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys

15:36:07.0437 2676 hidusb - ok

15:36:07.0453 2676 hpn - ok

15:36:07.0531 2676 HSF_DPV (e8ec1767ea315a39a0dd8989952ca0e9) C:\WINDOWS\system32\DRIVERS\HSX_DPV.sys

15:36:07.0562 2676 HSF_DPV - ok

15:36:07.0671 2676 HSXHWAZL (61478fa42ee04562e7f11f4dca87e9c8) C:\WINDOWS\system32\DRIVERS\HSXHWAZL.sys

15:36:07.0687 2676 HSXHWAZL - ok

15:36:07.0734 2676 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys

15:36:07.0750 2676 HTTP - ok

15:36:07.0765 2676 i2omgmt - ok

15:36:07.0781 2676 i2omp - ok

15:36:07.0812 2676 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys

15:36:07.0828 2676 i8042prt - ok

15:36:07.0859 2676 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys

15:36:07.0875 2676 Imapi - ok

15:36:07.0890 2676 ini910u - ok

15:36:07.0921 2676 IntelIde - ok

15:36:07.0953 2676 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys

15:36:07.0953 2676 intelppm - ok

15:36:07.0968 2676 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys

15:36:07.0984 2676 Ip6Fw - ok

15:36:08.0109 2676 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

15:36:08.0109 2676 IpFilterDriver - ok

15:36:08.0125 2676 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys

15:36:08.0125 2676 IpInIp - ok

15:36:08.0156 2676 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys

15:36:08.0171 2676 IpNat - ok

15:36:08.0203 2676 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys

15:36:08.0203 2676 IPSec - ok

15:36:08.0234 2676 irda (aca5e7b54409f9cb5eed97ed0c81120e) C:\WINDOWS\system32\DRIVERS\irda.sys

15:36:08.0250 2676 irda - ok

15:36:08.0296 2676 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys

15:36:08.0296 2676 IRENUM - ok

15:36:08.0359 2676 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys

15:36:08.0359 2676 isapnp - ok

15:36:08.0468 2676 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys

15:36:08.0468 2676 Kbdclass - ok

15:36:08.0500 2676 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys

15:36:08.0515 2676 kbdhid - ok

15:36:08.0562 2676 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys

15:36:08.0562 2676 kmixer - ok

15:36:08.0593 2676 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys

15:36:08.0609 2676 KSecDD - ok

15:36:08.0625 2676 lbrtfdc - ok

15:36:08.0671 2676 LVPr2Mon (8be71d7edb8c7494913722059f760dd0) C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys

15:36:08.0687 2676 LVPr2Mon - ok

15:36:08.0750 2676 LVRS (a1857fbb9b4930eeb2fd92386c45c529) C:\WINDOWS\system32\DRIVERS\lvrs.sys

15:36:08.0750 2676 LVRS - ok

15:36:09.0078 2676 LVUVC (3703406af0726badd24c5e552493e5b1) C:\WINDOWS\system32\DRIVERS\lvuvc.sys

15:36:09.0281 2676 LVUVC - ok

15:36:09.0406 2676 mdmxsdk (e246a32c445056996074a397da56e815) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys

15:36:09.0406 2676 mdmxsdk - ok

15:36:09.0453 2676 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys

15:36:09.0453 2676 mnmdd - ok

15:36:09.0500 2676 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys

15:36:09.0515 2676 Modem - ok

15:36:09.0546 2676 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys

15:36:09.0546 2676 Mouclass - ok

15:36:09.0593 2676 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys

15:36:09.0593 2676 mouhid - ok

15:36:09.0640 2676 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys

15:36:09.0656 2676 MountMgr - ok

15:36:09.0734 2676 mraid35x - ok

15:36:09.0765 2676 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys

15:36:09.0781 2676 MRxDAV - ok

15:36:09.0843 2676 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

15:36:09.0859 2676 MRxSmb - ok

15:36:09.0890 2676 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys

15:36:09.0890 2676 Msfs - ok

15:36:09.0937 2676 MSIRCOMM (95c6432151ccff8617352f8e616a1aa4) C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys

15:36:09.0937 2676 MSIRCOMM - ok

15:36:09.0984 2676 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys

15:36:09.0984 2676 MSKSSRV - ok

15:36:10.0046 2676 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys

15:36:10.0062 2676 MSPCLOCK - ok

15:36:10.0093 2676 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys

15:36:10.0093 2676 MSPQM - ok

15:36:10.0109 2676 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys

15:36:10.0109 2676 mssmbios - ok

15:36:10.0140 2676 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys

15:36:10.0156 2676 MSTEE - ok

15:36:10.0187 2676 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys

15:36:10.0203 2676 Mup - ok

15:36:10.0234 2676 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys

15:36:10.0250 2676 NABTSFEC - ok

15:36:10.0312 2676 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys

15:36:10.0312 2676 NDIS - ok

15:36:10.0406 2676 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys

15:36:10.0421 2676 NdisIP - ok

15:36:10.0453 2676 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys

15:36:10.0453 2676 NdisTapi - ok

15:36:10.0484 2676 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys

15:36:10.0484 2676 Ndisuio - ok

15:36:10.0515 2676 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys

15:36:10.0515 2676 NdisWan - ok

15:36:10.0546 2676 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys

15:36:10.0562 2676 NDProxy - ok

15:36:10.0609 2676 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys

15:36:10.0609 2676 NetBIOS - ok

15:36:10.0640 2676 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys

15:36:10.0640 2676 NetBT - ok

15:36:10.0750 2676 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys

15:36:10.0750 2676 NIC1394 - ok

15:36:10.0781 2676 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys

15:36:10.0796 2676 Npfs - ok

15:36:10.0843 2676 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys

15:36:10.0859 2676 Ntfs - ok

15:36:10.0906 2676 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys

15:36:10.0921 2676 Null - ok

15:36:11.0140 2676 nv (5796a04ccc99542fdfb43f2accd803df) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys

15:36:11.0250 2676 nv - ok

15:36:11.0375 2676 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys

15:36:11.0390 2676 NwlnkFlt - ok

15:36:11.0406 2676 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys

15:36:11.0406 2676 NwlnkFwd - ok

15:36:11.0468 2676 NwlnkIpx (8b8b1be2dba4025da6786c645f77f123) C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys

15:36:11.0468 2676 NwlnkIpx - ok

15:36:11.0500 2676 NwlnkNb (56d34a67c05e94e16377c60609741ff8) C:\WINDOWS\system32\DRIVERS\nwlnknb.sys

15:36:11.0500 2676 NwlnkNb - ok

15:36:11.0531 2676 NwlnkSpx (c0bb7d1615e1acbdc99757f6ceaf8cf0) C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys

15:36:11.0531 2676 NwlnkSpx - ok

15:36:11.0578 2676 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys

15:36:11.0578 2676 ohci1394 - ok

15:36:11.0625 2676 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\drivers\Parport.sys

15:36:11.0640 2676 Parport - ok

15:36:11.0703 2676 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys

15:36:11.0718 2676 PartMgr - ok

15:36:11.0765 2676 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys

15:36:11.0765 2676 ParVdm - ok

15:36:11.0796 2676 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys

15:36:11.0796 2676 PCI - ok

15:36:11.0812 2676 PCIDump - ok

15:36:11.0843 2676 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys

15:36:11.0843 2676 PCIIde - ok

15:36:11.0859 2676 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\DRIVERS\pcmcia.sys

15:36:11.0859 2676 Pcmcia - ok

15:36:11.0875 2676 PDCOMP - ok

15:36:11.0890 2676 PDFRAME - ok

15:36:11.0921 2676 PDRELI - ok

15:36:11.0937 2676 PDRFRAME - ok

15:36:11.0953 2676 perc2 - ok

15:36:11.0968 2676 perc2hib - ok

15:36:12.0031 2676 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys

15:36:12.0046 2676 PptpMiniport - ok

15:36:12.0078 2676 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys

15:36:12.0078 2676 PSched - ok

15:36:12.0109 2676 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys

15:36:12.0109 2676 Ptilink - ok

15:36:12.0140 2676 PxHelp20 (153d02480a0a2f45785522e814c634b6) C:\WINDOWS\system32\Drivers\PxHelp20.sys

15:36:12.0140 2676 PxHelp20 - ok

15:36:12.0218 2676 ql1080 - ok

15:36:12.0234 2676 Ql10wnt - ok

15:36:12.0250 2676 ql12160 - ok

15:36:12.0265 2676 ql1240 - ok

15:36:12.0296 2676 ql1280 - ok

15:36:12.0328 2676 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys

15:36:12.0343 2676 RasAcd - ok

15:36:12.0375 2676 Rasirda (0207d26ddf796a193ccd9f83047bb5fc) C:\WINDOWS\system32\DRIVERS\rasirda.sys

15:36:12.0375 2676 Rasirda - ok

15:36:12.0406 2676 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys

15:36:12.0406 2676 Rasl2tp - ok

15:36:12.0453 2676 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys

15:36:12.0468 2676 RasPppoe - ok

15:36:12.0484 2676 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys

15:36:12.0484 2676 Raspti - ok

15:36:12.0546 2676 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys

15:36:12.0546 2676 Rdbss - ok

15:36:12.0562 2676 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

15:36:12.0578 2676 RDPCDD - ok

15:36:12.0671 2676 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys

15:36:12.0687 2676 rdpdr - ok

15:36:12.0734 2676 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys

15:36:12.0734 2676 RDPWD - ok

15:36:12.0796 2676 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys

15:36:12.0796 2676 redbook - ok

15:36:12.0843 2676 RFCOMM (851c30df2807fcfa21e4c681a7d6440e) C:\WINDOWS\system32\DRIVERS\rfcomm.sys

15:36:12.0843 2676 RFCOMM - ok

15:36:12.0921 2676 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys

15:36:12.0921 2676 Secdrv - ok

15:36:12.0953 2676 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys

15:36:12.0953 2676 serenum - ok

15:36:12.0984 2676 Serial (1e2066b82b4a705db783409a27caa1ec) C:\WINDOWS\system32\DRIVERS\serial.sys

15:36:12.0984 2676 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\serial.sys. Real md5: 1e2066b82b4a705db783409a27caa1ec, Fake md5: cca207a8896d4c6a0c9ce29a4ae411a7

15:36:12.0984 2676 Serial ( Rootkit.Win32.ZAccess.aml ) - infected

15:36:12.0984 2676 Serial - detected Rootkit.Win32.ZAccess.aml (0)

15:36:13.0093 2676 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys

15:36:13.0093 2676 Sfloppy - ok

15:36:13.0125 2676 Si3112 - ok

15:36:13.0140 2676 Si3124 - ok

15:36:13.0171 2676 Si3132 - ok

15:36:13.0187 2676 Si3132r5 - ok

15:36:13.0203 2676 Si3531 - ok

15:36:13.0218 2676 Simbad - ok

15:36:13.0265 2676 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys

15:36:13.0265 2676 SLIP - ok

15:36:13.0296 2676 SMCIRDA (707647a1aa0edb6cbef61b0c75c28ed3) C:\WINDOWS\system32\DRIVERS\smcirda.sys

15:36:13.0296 2676 SMCIRDA - ok

15:36:13.0359 2676 sonypvs1 (dfadfc2c86662f40759bf02add27d569) C:\WINDOWS\system32\DRIVERS\sonypvs1.sys

15:36:13.0359 2676 sonypvs1 - ok

15:36:13.0390 2676 Sparrow - ok

15:36:13.0421 2676 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys

15:36:13.0421 2676 splitter - ok

15:36:13.0531 2676 sptd (cdddec541bc3c96f91ecb48759673505) C:\WINDOWS\system32\Drivers\sptd.sys

15:36:13.0531 2676 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505

15:36:13.0546 2676 sptd ( LockedFile.Multi.Generic ) - warning

15:36:13.0546 2676 sptd - detected LockedFile.Multi.Generic (1)

15:36:13.0656 2676 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys

15:36:13.0656 2676 sr - ok

15:36:13.0718 2676 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys

15:36:13.0734 2676 Srv - ok

15:36:13.0828 2676 STHDA (2a2dc39623adef8ab3703ab9fac4b440) C:\WINDOWS\system32\drivers\sthda.sys

15:36:13.0859 2676 STHDA - ok

15:36:13.0968 2676 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys

15:36:13.0968 2676 streamip - ok

15:36:14.0000 2676 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys

15:36:14.0000 2676 swenum - ok

15:36:14.0046 2676 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys

15:36:14.0046 2676 swmidi - ok

15:36:14.0078 2676 symc810 - ok

15:36:14.0093 2676 symc8xx - ok

15:36:14.0109 2676 sym_hi - ok

15:36:14.0125 2676 sym_u3 - ok

15:36:14.0171 2676 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys

15:36:14.0171 2676 sysaudio - ok

15:36:14.0250 2676 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys

15:36:14.0265 2676 Tcpip - ok

15:36:14.0375 2676 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys

15:36:14.0375 2676 TDPIPE - ok

15:36:14.0406 2676 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys

15:36:14.0406 2676 TDTCP - ok

15:36:14.0468 2676 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys

15:36:14.0468 2676 TermDD - ok

15:36:14.0515 2676 TosIde - ok

15:36:14.0562 2676 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys

15:36:14.0562 2676 Udfs - ok

15:36:14.0578 2676 UIUSys - ok

15:36:14.0593 2676 ultra - ok

15:36:14.0703 2676 UnlockerDriver5 - ok

15:36:14.0828 2676 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys

15:36:14.0843 2676 Update - ok

15:36:14.0921 2676 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys

15:36:14.0921 2676 usbaudio - ok

15:36:14.0968 2676 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys

15:36:14.0968 2676 usbccgp - ok

15:36:15.0015 2676 USBCCID (6b5e4d5e6e5ecd6acd14aed59768ce5c) C:\WINDOWS\system32\DRIVERS\usbccid.sys

15:36:15.0015 2676 USBCCID - ok

15:36:15.0046 2676 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys

15:36:15.0046 2676 usbehci - ok

15:36:15.0140 2676 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys

15:36:15.0156 2676 usbhub - ok

15:36:15.0203 2676 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys

15:36:15.0203 2676 usbprint - ok

15:36:15.0250 2676 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys

15:36:15.0250 2676 usbscan - ok

15:36:15.0281 2676 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

15:36:15.0296 2676 USBSTOR - ok

15:36:15.0312 2676 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys

15:36:15.0312 2676 usbuhci - ok

15:36:15.0359 2676 usbvideo (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys

15:36:15.0375 2676 usbvideo - ok

15:36:15.0406 2676 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys

15:36:15.0406 2676 VgaSave - ok

15:36:15.0484 2676 ViaIde - ok

15:36:15.0531 2676 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys

15:36:15.0531 2676 VolSnap - ok

15:36:15.0640 2676 w39n51 (b1f126e7e28877106d60e6ff3998d033) C:\WINDOWS\system32\DRIVERS\w39n51.sys

15:36:15.0687 2676 w39n51 - ok

15:36:15.0750 2676 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys

15:36:15.0750 2676 Wanarp - ok

15:36:15.0828 2676 WDICA - ok

15:36:15.0890 2676 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys

15:36:15.0890 2676 wdmaud - ok

15:36:15.0968 2676 winachsf (ba6b6fb242a6ba4068c8b763063beb63) C:\WINDOWS\system32\DRIVERS\HSX_CNXT.sys

15:36:15.0984 2676 winachsf - ok

15:36:16.0078 2676 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS

15:36:16.0078 2676 WSTCODEC - ok

15:36:16.0140 2676 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0

15:36:16.0375 2676 \Device\Harddisk0\DR0 - ok

15:36:16.0375 2676 Boot (0x1200) (bffbfd22aaa839410bef7cc150e93d86) \Device\Harddisk0\DR0\Partition0

15:36:16.0375 2676 \Device\Harddisk0\DR0\Partition0 - ok

15:36:16.0390 2676 Boot (0x1200) (f99feb293cd6f6c940478ac36b9bd1c3) \Device\Harddisk0\DR0\Partition1

15:36:16.0406 2676 \Device\Harddisk0\DR0\Partition1 - ok

15:36:16.0421 2676 Boot (0x1200) (de02260f4d0d537d7442de3951bf893e) \Device\Harddisk0\DR0\Partition2

15:36:16.0421 2676 \Device\Harddisk0\DR0\Partition2 - ok

15:36:16.0453 2676 Boot (0x1200) (e916dea42a87e8122faba89596bb7713) \Device\Harddisk0\DR0\Partition3

15:36:16.0453 2676 \Device\Harddisk0\DR0\Partition3 - ok

15:36:16.0453 2676 ============================================================

15:36:16.0453 2676 Scan finished

15:36:16.0453 2676 ============================================================

15:36:16.0468 2668 Detected object count: 2

15:36:16.0468 2668 Actual detected object count: 2

15:36:40.0609 2668 Backup copy found, using it..

15:36:40.0625 2668 C:\WINDOWS\system32\DRIVERS\serial.sys - will be cured on reboot

15:36:41.0953 2668 C:\WINDOWS\system32\c_54622.nls - will be deleted on reboot

15:36:43.0125 2668 Serial ( Rootkit.Win32.ZAccess.aml ) - User select action: Cure

15:36:43.0125 2668 sptd ( LockedFile.Multi.Generic ) - skipped by user

15:36:43.0125 2668 sptd ( LockedFile.Multi.Generic ) - User select action: Skip

15:36:49.0093 2576 Deinitialize success

Бтв, бихте ли качили отново и Extras.Txt , защото срока за download в file.bg е изтекъл.

Мерси !

Ето го:ххххххххххххххххххххххххххххх

TDSSKiller.2.6.25.0_27.12.2011_14.44.43_log.txt

14:44:43.0250 1580 TDSS rootkit removing tool 2.6.25.0 Dec 23 2011 14:51:16

14:44:43.0296 1580 ============================================================

14:44:43.0296 1580 Current date / time: 2011/12/27 14:44:43.0296

14:44:43.0296 1580 SystemInfo:

14:44:43.0296 1580

14:44:43.0296 1580 OS Version: 5.1.2600 ServicePack: 3.0

14:44:43.0296 1580 Product type: Workstation

14:44:43.0296 1580 ComputerName: Shushi

14:44:43.0296 1580 UserName: Shushi

14:44:43.0296 1580 Windows directory: C:\WINDOWS

14:44:43.0296 1580 System windows directory: C:\WINDOWS

14:44:43.0296 1580 Processor architecture: Intel x86

14:44:43.0296 1580 Number of processors: 2

14:44:43.0296 1580 Page size: 0x1000

14:44:43.0296 1580 Boot type: Safe boot with network

14:44:43.0296 1580 ============================================================

14:44:45.0828 1580 Initialize success

14:44:47.0734 1584 ============================================================

14:44:47.0734 1584 Scan started

14:44:47.0734 1584 Mode: Manual;

14:44:47.0734 1584 ============================================================

14:44:49.0765 1584 14209318 - ok

14:44:49.0843 1584 66825487 - ok

14:44:50.0000 1584 Aavmker4 (83631291adf2887cffc786d034d3fa15) C:\WINDOWS\system32\drivers\Aavmker4.sys

14:44:50.0000 1584 Aavmker4 - ok

14:44:50.0046 1584 Abiosdsk - ok

14:44:50.0109 1584 abp480n5 - ok

14:44:50.0187 1584 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys

14:44:50.0187 1584 ACPI - ok

14:44:50.0250 1584 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys

14:44:50.0250 1584 ACPIEC - ok

14:44:50.0343 1584 adpu160m - ok

14:44:50.0421 1584 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys

14:44:50.0437 1584 aec - ok

14:44:50.0515 1584 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys

14:44:50.0515 1584 AFD - ok

14:44:50.0546 1584 Aha154x - ok

14:44:50.0609 1584 aic78u2 - ok

14:44:50.0671 1584 aic78xx - ok

14:44:50.0796 1584 AliIde - ok

14:44:50.0843 1584 amsint - ok

14:44:50.0921 1584 ApfiltrService (090880e9bf20f928bc341f96d27c019e) C:\WINDOWS\system32\DRIVERS\Apfiltr.sys

14:44:50.0921 1584 ApfiltrService - ok

14:44:50.0968 1584 Appdrv - ok

14:44:51.0078 1584 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys

14:44:51.0078 1584 Arp1394 - ok

14:44:51.0140 1584 asc - ok

14:44:51.0203 1584 asc3350p - ok

14:44:51.0265 1584 asc3550 - ok

14:44:51.0453 1584 aswFsBlk (1c2e6bb4fe8621b1b863855b02bc33eb) C:\WINDOWS\system32\drivers\aswFsBlk.sys

14:44:51.0453 1584 aswFsBlk - ok

14:44:51.0515 1584 aswMon2 (452d0ecd14fa02f9b061f42c8a30dd49) C:\WINDOWS\system32\drivers\aswMon2.sys

14:44:51.0515 1584 aswMon2 - ok

14:44:51.0578 1584 aswRdr (b6a9373619d851be80fb5f1b5eed0d4e) C:\WINDOWS\system32\drivers\aswRdr.sys

14:44:51.0578 1584 aswRdr - ok

14:44:51.0671 1584 aswSnx (9be41c1ae8bc481eb662d85c98d979c2) C:\WINDOWS\system32\drivers\aswSnx.sys

14:44:51.0687 1584 aswSnx - ok

14:44:51.0765 1584 aswSP (4b1a54ba2bc5873a774df6b70ab8b0b3) C:\WINDOWS\system32\drivers\aswSP.sys

14:44:51.0765 1584 aswSP - ok

14:44:51.0828 1584 aswTdi (c7f1cea32766184911293f4e1ee653f5) C:\WINDOWS\system32\drivers\aswTdi.sys

14:44:51.0828 1584 aswTdi - ok

14:44:51.0890 1584 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys

14:44:51.0921 1584 AsyncMac - ok

14:44:52.0046 1584 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys

14:44:52.0046 1584 atapi - ok

14:44:52.0218 1584 Atdisk - ok

14:44:52.0328 1584 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys

14:44:52.0343 1584 Atmarpc - ok

14:44:52.0421 1584 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys

14:44:52.0421 1584 audstub - ok

14:44:52.0546 1584 b57w2k (c0acd392ece55784884cc208aafa06ce) C:\WINDOWS\system32\DRIVERS\b57xp32.sys

14:44:52.0546 1584 b57w2k - ok

14:44:52.0640 1584 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys

14:44:52.0640 1584 Beep - ok

14:44:52.0781 1584 BthEnum (b279426e3c0c344893ed78a613a73bde) C:\WINDOWS\system32\DRIVERS\BthEnum.sys

14:44:52.0781 1584 BthEnum - ok

14:44:52.0875 1584 BTHMODEM (fca6f069597b62d42495191ace3fc6c1) C:\WINDOWS\system32\DRIVERS\bthmodem.sys

14:44:52.0875 1584 BTHMODEM - ok

14:44:52.0953 1584 BthPan (80602b8746d3738f5886ce3d67ef06b6) C:\WINDOWS\system32\DRIVERS\bthpan.sys

14:44:52.0968 1584 BthPan - ok

14:44:53.0062 1584 BTHPORT (662bfd909447dd9cc15b1a1c366583b4) C:\WINDOWS\system32\Drivers\BTHport.sys

14:44:53.0062 1584 BTHPORT - ok

14:44:53.0140 1584 BTHUSB (61364cd71ef63b0f038b7e9df00f1efa) C:\WINDOWS\system32\Drivers\BTHUSB.sys

14:44:53.0140 1584 BTHUSB - ok

14:44:53.0234 1584 camvid20 (5f68a3ab60262e3bf5b5c6c926e53525) C:\WINDOWS\system32\DRIVERS\camdrv21.sys

14:44:53.0234 1584 camvid20 - ok

14:44:53.0312 1584 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys

14:44:53.0312 1584 cbidf2k - ok

14:44:53.0375 1584 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys

14:44:53.0375 1584 CCDECODE - ok

14:44:53.0421 1584 cd20xrnt - ok

14:44:53.0500 1584 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys

14:44:53.0500 1584 Cdaudio - ok

14:44:53.0562 1584 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys

14:44:53.0562 1584 Cdfs - ok

14:44:53.0656 1584 cdrbsdrv (351735695e9ead93de6af85d8beb1ca8) C:\WINDOWS\system32\drivers\cdrbsdrv.sys

14:44:53.0656 1584 cdrbsdrv - ok

14:44:53.0718 1584 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys

14:44:53.0718 1584 Cdrom - ok

14:44:53.0781 1584 Changer - ok

14:44:53.0968 1584 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys

14:44:53.0968 1584 CmBatt - ok

14:44:54.0031 1584 CmdIde - ok

14:44:54.0093 1584 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys

14:44:54.0093 1584 Compbatt - ok

14:44:54.0234 1584 Cpqarray - ok

14:44:54.0390 1584 dac2w2k - ok

14:44:54.0468 1584 dac960nt - ok

14:44:54.0687 1584 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys

14:44:54.0687 1584 Disk - ok

14:44:54.0812 1584 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys

14:44:54.0843 1584 dmboot - ok

14:44:54.0875 1584 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys

14:44:54.0890 1584 dmio - ok

14:44:54.0953 1584 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys

14:44:54.0953 1584 dmload - ok

14:44:55.0031 1584 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys

14:44:55.0046 1584 DMusic - ok

14:44:55.0140 1584 dpti2o - ok

14:44:55.0218 1584 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys

14:44:55.0218 1584 drmkaud - ok

14:44:55.0437 1584 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys

14:44:55.0453 1584 Fastfat - ok

14:44:55.0531 1584 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys

14:44:55.0531 1584 Fdc - ok

14:44:55.0578 1584 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys

14:44:55.0593 1584 Fips - ok

14:44:55.0671 1584 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys

14:44:55.0671 1584 Flpydisk - ok

14:44:55.0750 1584 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys

14:44:55.0765 1584 FltMgr - ok

14:44:55.0828 1584 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys

14:44:55.0843 1584 Fs_Rec - ok

14:44:55.0906 1584 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys

14:44:55.0906 1584 Ftdisk - ok

14:44:56.0000 1584 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys

14:44:56.0015 1584 Gpc - ok

14:44:56.0093 1584 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys

14:44:56.0093 1584 HDAudBus - ok

14:44:56.0171 1584 HidBth (7bd2de4c85eb4241eed57672b16a7d8d) C:\WINDOWS\system32\DRIVERS\hidbth.sys

14:44:56.0187 1584 HidBth - ok

14:44:56.0265 1584 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys

14:44:56.0281 1584 hidusb - ok

14:44:56.0343 1584 hpn - ok

14:44:56.0500 1584 HSF_DPV (e8ec1767ea315a39a0dd8989952ca0e9) C:\WINDOWS\system32\DRIVERS\HSX_DPV.sys

14:44:56.0531 1584 HSF_DPV - ok

14:44:56.0609 1584 HSXHWAZL (61478fa42ee04562e7f11f4dca87e9c8) C:\WINDOWS\system32\DRIVERS\HSXHWAZL.sys

14:44:56.0609 1584 HSXHWAZL - ok

14:44:56.0734 1584 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys

14:44:56.0781 1584 HTTP - ok

14:44:56.0921 1584 i2omgmt - ok

14:44:56.0984 1584 i2omp - ok

14:44:57.0062 1584 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys

14:44:57.0062 1584 i8042prt - ok

14:44:57.0171 1584 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys

14:44:57.0171 1584 Imapi - ok

14:44:57.0281 1584 ini910u - ok

14:44:57.0468 1584 IntelIde - ok

14:44:57.0531 1584 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys

14:44:57.0546 1584 intelppm - ok

14:44:57.0593 1584 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys

14:44:57.0593 1584 Ip6Fw - ok

14:44:57.0656 1584 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

14:44:57.0656 1584 IpFilterDriver - ok

14:44:57.0750 1584 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys

14:44:57.0750 1584 IpInIp - ok

14:44:57.0812 1584 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys

14:44:57.0812 1584 IpNat - ok

14:44:57.0875 1584 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys

14:44:57.0875 1584 IPSec - ok

14:44:57.0937 1584 irda (aca5e7b54409f9cb5eed97ed0c81120e) C:\WINDOWS\system32\DRIVERS\irda.sys

14:44:57.0937 1584 irda - ok

14:44:58.0000 1584 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys

14:44:58.0000 1584 IRENUM - ok

14:44:58.0125 1584 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys

14:44:58.0125 1584 isapnp - ok

14:44:58.0203 1584 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys

14:44:58.0203 1584 Kbdclass - ok

14:44:58.0265 1584 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys

14:44:58.0265 1584 kbdhid - ok

14:44:58.0328 1584 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys

14:44:58.0343 1584 kmixer - ok

14:44:58.0406 1584 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys

14:44:58.0406 1584 KSecDD - ok

14:44:58.0515 1584 lbrtfdc - ok

14:44:58.0718 1584 LVPr2Mon (8be71d7edb8c7494913722059f760dd0) C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys

14:44:58.0718 1584 LVPr2Mon - ok

14:44:58.0843 1584 LVRS (a1857fbb9b4930eeb2fd92386c45c529) C:\WINDOWS\system32\DRIVERS\lvrs.sys

14:44:58.0843 1584 LVRS - ok

14:44:59.0390 1584 LVUVC (3703406af0726badd24c5e552493e5b1) C:\WINDOWS\system32\DRIVERS\lvuvc.sys

14:44:59.0609 1584 LVUVC - ok

14:44:59.0781 1584 mdmxsdk (e246a32c445056996074a397da56e815) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys

14:44:59.0781 1584 mdmxsdk - ok

14:44:59.0859 1584 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys

14:44:59.0859 1584 mnmdd - ok

14:44:59.0953 1584 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys

14:44:59.0953 1584 Modem - ok

14:45:00.0015 1584 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys

14:45:00.0015 1584 Mouclass - ok

14:45:00.0078 1584 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys

14:45:00.0078 1584 mouhid - ok

14:45:00.0125 1584 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys

14:45:00.0125 1584 MountMgr - ok

14:45:00.0234 1584 mraid35x - ok

14:45:00.0312 1584 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys

14:45:00.0312 1584 MRxDAV - ok

14:45:00.0375 1584 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

14:45:00.0390 1584 MRxSmb - ok

14:45:00.0515 1584 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys

14:45:00.0515 1584 Msfs - ok

14:45:00.0609 1584 MSIRCOMM (95c6432151ccff8617352f8e616a1aa4) C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys

14:45:00.0609 1584 MSIRCOMM - ok

14:45:00.0750 1584 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys

14:45:00.0750 1584 MSKSSRV - ok

14:45:00.0812 1584 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys

14:45:00.0812 1584 MSPCLOCK - ok

14:45:00.0875 1584 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys

14:45:00.0875 1584 MSPQM - ok

14:45:00.0937 1584 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys

14:45:00.0937 1584 mssmbios - ok

14:45:01.0078 1584 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys

14:45:01.0078 1584 MSTEE - ok

14:45:01.0140 1584 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys

14:45:01.0156 1584 Mup - ok

14:45:01.0218 1584 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys

14:45:01.0218 1584 NABTSFEC - ok

14:45:01.0468 1584 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys

14:45:01.0484 1584 NDIS - ok

14:45:01.0515 1584 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys

14:45:01.0531 1584 NdisIP - ok

14:45:01.0687 1584 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys

14:45:01.0687 1584 NdisTapi - ok

14:45:01.0750 1584 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys

14:45:01.0750 1584 Ndisuio - ok

14:45:01.0812 1584 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys

14:45:01.0812 1584 NdisWan - ok

14:45:01.0875 1584 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys

14:45:01.0875 1584 NDProxy - ok

14:45:01.0921 1584 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys

14:45:01.0921 1584 NetBIOS - ok

14:45:02.0000 1584 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys

14:45:02.0000 1584 NetBT - ok

14:45:02.0234 1584 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys

14:45:02.0234 1584 NIC1394 - ok

14:45:02.0359 1584 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys

14:45:02.0359 1584 Npfs - ok

14:45:02.0453 1584 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys

14:45:02.0484 1584 Ntfs - ok

14:45:02.0609 1584 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys

14:45:02.0609 1584 Null - ok

14:45:02.0843 1584 nv (5796a04ccc99542fdfb43f2accd803df) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys

14:45:02.0953 1584 nv - ok

14:45:03.0109 1584 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys

14:45:03.0109 1584 NwlnkFlt - ok

14:45:03.0171 1584 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys

14:45:03.0171 1584 NwlnkFwd - ok

14:45:03.0234 1584 NwlnkIpx (8b8b1be2dba4025da6786c645f77f123) C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys

14:45:03.0234 1584 NwlnkIpx - ok

14:45:03.0296 1584 NwlnkNb (56d34a67c05e94e16377c60609741ff8) C:\WINDOWS\system32\DRIVERS\nwlnknb.sys

14:45:03.0296 1584 NwlnkNb - ok

14:45:03.0359 1584 NwlnkSpx (c0bb7d1615e1acbdc99757f6ceaf8cf0) C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys

14:45:03.0359 1584 NwlnkSpx - ok

14:45:03.0453 1584 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys

14:45:03.0468 1584 ohci1394 - ok

14:45:03.0625 1584 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\drivers\Parport.sys

14:45:03.0640 1584 Parport - ok

14:45:03.0703 1584 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys

14:45:03.0703 1584 PartMgr - ok

14:45:03.0765 1584 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys

14:45:03.0781 1584 ParVdm - ok

14:45:03.0875 1584 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys

14:45:03.0890 1584 PCI - ok

14:45:03.0968 1584 PCIDump - ok

14:45:04.0046 1584 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys

14:45:04.0046 1584 PCIIde - ok

14:45:04.0109 1584 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\DRIVERS\pcmcia.sys

14:45:04.0109 1584 Pcmcia - ok

14:45:04.0156 1584 PDCOMP - ok

14:45:04.0218 1584 PDFRAME - ok

14:45:04.0265 1584 PDRELI - ok

14:45:04.0328 1584 PDRFRAME - ok

14:45:04.0390 1584 perc2 - ok

14:45:04.0453 1584 perc2hib - ok

14:45:04.0796 1584 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys

14:45:04.0796 1584 PptpMiniport - ok

14:45:04.0906 1584 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys

14:45:04.0906 1584 PSched - ok

14:45:05.0000 1584 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys

14:45:05.0000 1584 Ptilink - ok

14:45:05.0078 1584 PxHelp20 (153d02480a0a2f45785522e814c634b6) C:\WINDOWS\system32\Drivers\PxHelp20.sys

14:45:05.0078 1584 PxHelp20 - ok

14:45:05.0109 1584 ql1080 - ok

14:45:05.0171 1584 Ql10wnt - ok

14:45:05.0234 1584 ql12160 - ok

14:45:05.0296 1584 ql1240 - ok

14:45:05.0359 1584 ql1280 - ok

14:45:05.0421 1584 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys

14:45:05.0421 1584 RasAcd - ok

14:45:05.0515 1584 Rasirda (0207d26ddf796a193ccd9f83047bb5fc) C:\WINDOWS\system32\DRIVERS\rasirda.sys

14:45:05.0515 1584 Rasirda - ok

14:45:05.0593 1584 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys

14:45:05.0593 1584 Rasl2tp - ok

14:45:05.0671 1584 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys

14:45:05.0671 1584 RasPppoe - ok

14:45:05.0765 1584 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys

14:45:05.0781 1584 Raspti - ok

14:45:05.0843 1584 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys

14:45:05.0843 1584 Rdbss - ok

14:45:05.0890 1584 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

14:45:05.0890 1584 RDPCDD - ok

14:45:06.0031 1584 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys

14:45:06.0046 1584 rdpdr - ok

14:45:06.0281 1584 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys

14:45:06.0281 1584 RDPWD - ok

14:45:06.0390 1584 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys

14:45:06.0390 1584 redbook - ok

14:45:06.0531 1584 RFCOMM (851c30df2807fcfa21e4c681a7d6440e) C:\WINDOWS\system32\DRIVERS\rfcomm.sys

14:45:06.0531 1584 RFCOMM - ok

14:45:06.0781 1584 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys

14:45:06.0781 1584 Secdrv - ok

14:45:06.0890 1584 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys

14:45:06.0890 1584 serenum - ok

14:45:06.0953 1584 Serial - ok

14:45:07.0187 1584 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys

14:45:07.0203 1584 Sfloppy - ok

14:45:07.0296 1584 Si3112 - ok

14:45:07.0390 1584 Si3124 - ok

14:45:07.0468 1584 Si3132 - ok

14:45:07.0531 1584 Si3132r5 - ok

14:45:07.0593 1584 Si3531 - ok

14:45:07.0656 1584 Simbad - ok

14:45:07.0750 1584 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys

14:45:07.0750 1584 SLIP - ok

14:45:07.0812 1584 SMCIRDA (707647a1aa0edb6cbef61b0c75c28ed3) C:\WINDOWS\system32\DRIVERS\smcirda.sys

14:45:07.0812 1584 SMCIRDA - ok

14:45:07.0968 1584 sonypvs1 (dfadfc2c86662f40759bf02add27d569) C:\WINDOWS\system32\DRIVERS\sonypvs1.sys

14:45:07.0968 1584 sonypvs1 - ok

14:45:08.0015 1584 Sparrow - ok

14:45:08.0078 1584 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys

14:45:08.0093 1584 splitter - ok

14:45:08.0218 1584 sptd (cdddec541bc3c96f91ecb48759673505) C:\WINDOWS\system32\Drivers\sptd.sys

14:45:08.0218 1584 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505

14:45:08.0234 1584 sptd ( LockedFile.Multi.Generic ) - warning

14:45:08.0234 1584 sptd - detected LockedFile.Multi.Generic (1)

14:45:08.0359 1584 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys

14:45:08.0375 1584 sr - ok

14:45:08.0546 1584 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys

14:45:08.0609 1584 Srv - ok

14:45:08.0953 1584 STHDA (2a2dc39623adef8ab3703ab9fac4b440) C:\WINDOWS\system32\drivers\sthda.sys

14:45:08.0984 1584 STHDA - ok

14:45:09.0140 1584 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys

14:45:09.0140 1584 streamip - ok

14:45:09.0187 1584 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys

14:45:09.0187 1584 swenum - ok

14:45:09.0265 1584 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys

14:45:09.0281 1584 swmidi - ok

14:45:09.0343 1584 symc810 - ok

14:45:09.0406 1584 symc8xx - ok

14:45:09.0468 1584 sym_hi - ok

14:45:09.0515 1584 sym_u3 - ok

14:45:09.0609 1584 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys

14:45:09.0609 1584 sysaudio - ok

14:45:09.0734 1584 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys

14:45:09.0734 1584 Tcpip - ok

14:45:09.0875 1584 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys

14:45:09.0875 1584 TDPIPE - ok

14:45:09.0937 1584 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys

14:45:09.0953 1584 TDTCP - ok

14:45:10.0000 1584 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys

14:45:10.0000 1584 TermDD - ok

14:45:10.0140 1584 TosIde - ok

14:45:10.0265 1584 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys

14:45:10.0265 1584 Udfs - ok

14:45:10.0312 1584 UIUSys - ok

14:45:10.0375 1584 ultra - ok

14:45:10.0531 1584 UnlockerDriver5 - ok

14:45:10.0703 1584 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys

14:45:10.0718 1584 Update - ok

14:45:10.0843 1584 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys

14:45:10.0859 1584 usbaudio - ok

14:45:10.0921 1584 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys

14:45:10.0921 1584 usbccgp - ok

14:45:11.0000 1584 USBCCID (6b5e4d5e6e5ecd6acd14aed59768ce5c) C:\WINDOWS\system32\DRIVERS\usbccid.sys

14:45:11.0000 1584 USBCCID - ok

14:45:11.0203 1584 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys

14:45:11.0218 1584 usbehci - ok

14:45:11.0265 1584 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys

14:45:11.0281 1584 usbhub - ok

14:45:11.0328 1584 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys

14:45:11.0328 1584 usbprint - ok

14:45:11.0390 1584 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys

14:45:11.0390 1584 usbscan - ok

14:45:11.0468 1584 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

14:45:11.0484 1584 USBSTOR - ok

14:45:11.0531 1584 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys

14:45:11.0531 1584 usbuhci - ok

14:45:11.0625 1584 usbvideo (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys

14:45:11.0625 1584 usbvideo - ok

14:45:11.0687 1584 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys

14:45:11.0687 1584 VgaSave - ok

14:45:11.0734 1584 ViaIde - ok

14:45:11.0796 1584 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys

14:45:11.0796 1584 VolSnap - ok

14:45:11.0984 1584 w39n51 (b1f126e7e28877106d60e6ff3998d033) C:\WINDOWS\system32\DRIVERS\w39n51.sys

14:45:12.0031 1584 w39n51 - ok

14:45:12.0156 1584 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys

14:45:12.0156 1584 Wanarp - ok

14:45:12.0203 1584 WDICA - ok

14:45:12.0265 1584 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys

14:45:12.0281 1584 wdmaud - ok

14:45:12.0406 1584 winachsf (ba6b6fb242a6ba4068c8b763063beb63) C:\WINDOWS\system32\DRIVERS\HSX_CNXT.sys

14:45:12.0421 1584 winachsf - ok

14:45:12.0812 1584 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS

14:45:12.0828 1584 WSTCODEC - ok

14:45:13.0109 1584 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0

14:45:13.0468 1584 \Device\Harddisk0\DR0 - ok

14:45:13.0515 1584 Boot (0x1200) (bffbfd22aaa839410bef7cc150e93d86) \Device\Harddisk0\DR0\Partition0

14:45:13.0515 1584 \Device\Harddisk0\DR0\Partition0 - ok

14:45:13.0578 1584 Boot (0x1200) (f99feb293cd6f6c940478ac36b9bd1c3) \Device\Harddisk0\DR0\Partition1

14:45:13.0593 1584 \Device\Harddisk0\DR0\Partition1 - ok

14:45:13.0640 1584 Boot (0x1200) (de02260f4d0d537d7442de3951bf893e) \Device\Harddisk0\DR0\Partition2

14:45:13.0640 1584 \Device\Harddisk0\DR0\Partition2 - ok

14:45:13.0703 1584 Boot (0x1200) (e916dea42a87e8122faba89596bb7713) \Device\Harddisk0\DR0\Partition3

14:45:13.0703 1584 \Device\Harddisk0\DR0\Partition3 - ok

14:45:13.0718 1584 ============================================================

14:45:13.0718 1584 Scan finished

14:45:13.0718 1584 ============================================================

14:45:13.0812 1616 Detected object count: 1

14:45:13.0812 1616 Actual detected object count: 1

14:45:29.0750 1616 C:\WINDOWS\system32\Drivers\sptd.sys - copied to quarantine

14:45:29.0750 1616 sptd ( LockedFile.Multi.Generic ) - User select action: Quarantine

14:45:34.0140 1332 Deinitialize success

Редактирано от Papadopoulos (преглед на промените)

  • Стартирайте файла Публикувано изображение
  • Под Публикувано изображение с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):
:OTL
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:Program FilesAVAST SoftwareAvastaswWebRepIE.dll File not found
O3 - HKLM..Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:Program FilesAVAST SoftwareAvastaswWebRepIE.dll File not found
:files
c:windows$NtUninstallKB12524$
ipconfig /flushdns /c
:commands
[reboot]
След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix

Windows ще се рестартира и ще се създаде лог файл - OTL fix log. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.

  • Автор

Ето го:

========== OTL ==========

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}\ deleted successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}\ not found.

========== FILES ==========

c:\windows\$NtUninstallKB12524$\3575650867\U folder moved successfully.

c:\windows\$NtUninstallKB12524$\3575650867\L folder moved successfully.

c:\windows\$NtUninstallKB12524$\3575650867 folder moved successfully.

Folder move failed. c:\windows\$NtUninstallKB12524$ scheduled to be moved on reboot.

< ipconfig /flushdns /c >

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

C:\Documents and Settings\Shushi\Desktop\cmd.bat deleted successfully.

C:\Documents and Settings\Shushi\Desktop\cmd.txt deleted successfully.

========== COMMANDS ==========

OTL by OldTimer - Version 3.2.31.0 log created on 01112012_155830

Files\Folders moved on Reboot...

Folder move failed. c:\windows\$NtUninstallKB12524$ scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Хм, само че се казва 01112012_155830 ... направих,както беше написано

Брей че упорита папка...

Изтеглете GrantPerms.zip и го разархивирайте в папка по избор. Стартирайте GrantPerms.exe и въведете следната информация:

c:windows$NtUninstallKB12524$

Натиснете Unlock и след това List Permissions. Публикувайте лог файла в следващия си пост.

  • Стартирайте файла Публикувано изображение
  • Под Публикувано изображение с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):
:files
c:windows$NtUninstallKB12524$
:commands
[reboot]
След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix

Windows ще се рестартира и ще се създаде лог файл - OTL fix log. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.

  • Автор

GrantPerms by Farbar Ran by Shushi (administrator) at 2012-01-11 16:10:39 =============================================== \\?\c:\windows\$NtUninstallKB12524$ Owner: BUILTIN\Administrators DACL(NP)(AI): BUILTIN\Administrators FULL ALLOW (CI)(OI) NT AUTHORITY\SYSTEM FULL ALLOW (CI)(OI) BUILTIN\Users READ/EXECUTE ALLOW (CI)(OI) BUILTIN\Users READ/EXECUTE ALLOW (I) BUILTIN\Users READ/EXECUTE ALLOW (CI)(OI)(IO)(I) BUILTIN\Power Users change ALLOW (I) BUILTIN\Power Users change ALLOW (CI)(OI)(IO)(I) BUILTIN\Administrators FULL ALLOW (I) BUILTIN\Administrators FULL ALLOW (CI)(OI)(IO)(I) NT AUTHORITY\SYSTEM FULL ALLOW (I) NT AUTHORITY\SYSTEM FULL ALLOW (CI)(OI)(IO)(I) CREATOR OWNER FULL ALLOW (CI)(OI)(IO)(I) Много странно... рестартира се, но няма лог файл, както имаше миналите пъти. Къде може да съм сгрешила? :(

  • Автор

Ето от последната дата: ========== FILES ========== c:\windows\$NtUninstallKB12524$ folder moved successfully. ========== COMMANDS ========== OTL by OldTimer - Version 3.2.31.0 log created on 01112012_161137

Разгеле...

Публикувано изображение Изтеглете Gmer

  • Временно спрете Интернета си,всички работещи програми,както и антивирусната си програма.
  • Стартирате програмата.
  • След завършването на автоматичната проверка,махнете отметките от следните позиции:

    - IAT/EAT

    - Show all

    - махнете отметките от всички локални дискове. Маркирайте само системния дял (обикновенно това е C:\ )

    Публикувано изображение

  • Натиснете бутона Scan
  • Изчакайте програмата да завърши сканирането,след което натиснете бутона Save и запишете (save as) резултатите на десктопа с име Gmer.log.
  • Включете Интернета си и прикачете Gmer.log в следващия си коментар.

    Забележка:

  • Не предприемайте никакви действия върху редовете маркирани с "<--- ROOТKIT" ,защото това може да доведе до проблеми с Windows.

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.