Hi Gringo, thanks for your help. I did the following:
1. Ran Defogger and got the "Finished!" message. It did not ask me to reboot the machine.
2. Ran dds.scr and got the two text files which I will paste at the end of this post. I should mention that dds.scr took quite a bit longer than the three minutes that the command window suggested would be required; I would estimate 15-20 minutes were required.
3. Tried running RKUnHooker. The program did give me the parasite detected inside itself message. I clicked cancel. It responded "Program Integrity Damaged". I clicked OK. The program eventually loaded. I clicked on the report tab and chose "Scan". I unchecked all but "Drivers" and "Stealth Code". It ran for about a minute, then suddenly terminated with no message from Windows or the program itself. I tried closing down everything other than this Firefox Window and it still terminated about a minute in every time I ran it. I could see that it was working on the Stealth Code part of the scan when it terminated as it showed the Drivers tab briefly and then went to the Stealth Code tab, so I tried ticking just Drivers and was able to generate that part of the report and will put it at the end. I tried the same with just ticking Stealth Code, but every time the program terminated abruptly. It did seem to detect a lot of Stealth Code.
4. Here is dds.txt:
.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Run by Jordan Reccion at 2:22:12 on 2011-07-10
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1535.449 [GMT -7:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
FW: Norton Internet Worm Protection *Disabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\Program Files\Nero\Update\NASvc.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\Program Files\Ralink\Common\RaRegistry.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\System32\MsPMSPSv.exe
svchost.exe
C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\explorer.exe
C:\Program Files\DC++\DCPlusPlus.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Cake Poker 2.0\CakeNotifier.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.cox.net/
mSearch Page =
uWinlogon: Shell=explorer.exe,
uWindows: load=c:\docume~1\jordan~1\locals~1\temp\csrss.exe
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File
TB: {C4069E3A-68F1-403E-B40E-20066696354B} - No File
EB: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Advanced SystemCare 4] "c:\program files\iobit\advanced systemcare 4\ASCTray.exe"
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [{8FF0329C-25AF-1C29-F62A-82FF22E24F78}] "c:\documents and settings\jordan reccion\application data\qowuul\zyoza.exe"
uRun: [CPN Notifier] c:\program files\cake poker 2.0\PokerNotifier.exe
mRun: [PRONoMgr.exe] c:\program files\intel\ncs\proset\PRONoMgr.exe
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [Malwarebytes' Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
dRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
dRunOnce: [SetDefaultMidi] MIDIDEF.EXE
uPolicies-explorer: NoInstrumentation = 1 (0x1)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office11\EXCEL.EXE/3000
IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - c:\program files\pokerstars\PokerStarsUpdate.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC} - c:\program files\java\jre6\bin\jp2iexp.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://www.apple.com/qtactivex/qtplugin.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} - hxxp://h20364.www2.hp.com/CSMWeb/Customer/cabs/HPISDataManager.CAB
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1131815231375
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
TCP: DhcpNameServer = 192.168.0.10
TCP: Interfaces\{0DF70CB3-64AC-4E7B-B131-01752B7ACBE0} : DhcpNameServer = 192.168.0.10
TCP: Interfaces\{341C778A-3D5A-4004-893B-1F9F4736AC4B} : DhcpNameServer = 192.168.0.10
TCP: Interfaces\{EBED2247-4694-4EF3-909F-E289681849DA} : DhcpNameServer = 192.168.0.10
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\jordan reccion\application data\mozilla\firefox\profiles\wjvtt1x9.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?sourceid=navclient&hl=en&q=
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 51455
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\program files\canon\mycamera download plugin\NPCIG.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.21.57\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npwachk.dll
.
---- FIREFOX POLICIES ----
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
.
============= SERVICES / DRIVERS ===============
.
R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [2011-5-19 13496]
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2009-6-18 165264]
R1 MpKsl3fec89bc;MpKsl3fec89bc;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ee145a6c-227b-47ef-b8e9-ce9dc88f322e}\MpKsl3fec89bc.sys [2011-7-9 28752]
R2 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files\iobit\advanced systemcare 4\ASCService.exe [2011-4-29 353168]
R2 NAUpdate;@c:\program files\nero\update\nasvc.exe,-200;c:\program files\nero\update\NASvc.exe [2011-3-29 598312]
R2 RalinkRegistryWriter;Ralink Registry Writer;c:\program files\ralink\common\RaRegistry.exe [2010-12-30 185632]
R2 Scutum50;Scutum50 NDIS Protocol Driver;c:\windows\system32\drivers\Scutum50.sys [2010-12-30 19072]
S1 jjraxcyz;jjraxcyz;c:\windows\system32\drivers\jjraxcyz.sys [2011-7-5 41680]
S1 MpKsl060cb661;MpKsl060cb661;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bcc0f6d4-6038-46c2-9828-2692584ce64e}\mpksl060cb661.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bcc0f6d4-6038-46c2-9828-2692584ce64e}\MpKsl060cb661.sys [?]
S1 MpKsl6b8e90d4;MpKsl6b8e90d4;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{34b20b82-897d-42df-865d-4a244a15cca5}\mpksl6b8e90d4.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{34b20b82-897d-42df-865d-4a244a15cca5}\MpKsl6b8e90d4.sys [?]
S1 MpKsl968b9f36;MpKsl968b9f36;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{000fe377-1f3f-4a43-a7f5-3fff35e3da72}\mpksl968b9f36.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{000fe377-1f3f-4a43-a7f5-3fff35e3da72}\MpKsl968b9f36.sys [?]
S1 MpKsld783a656;MpKsld783a656;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cd575ea7-8178-4cda-b21b-f72c9df6254e}\mpksld783a656.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cd575ea7-8178-4cda-b21b-f72c9df6254e}\MpKsld783a656.sys [?]
S1 MpKslf3f2bdc8;MpKslf3f2bdc8;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ffd75320-f0be-473f-acc0-0a26d7dcdcc4}\mpkslf3f2bdc8.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ffd75320-f0be-473f-acc0-0a26d7dcdcc4}\MpKslf3f2bdc8.sys [?]
S1 MpKslfa2c2fd0;MpKslfa2c2fd0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{78f03a23-5d63-43ce-901b-d7d0d6a13df5}\mpkslfa2c2fd0.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{78f03a23-5d63-43ce-901b-d7d0d6a13df5}\MpKslfa2c2fd0.sys [?]
S1 muzjewcr;muzjewcr;c:\windows\system32\drivers\muzjewcr.sys [2011-7-5 41680]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-2-14 136176]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2011-2-14 136176]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2010-12-28 39984]
S3 MEMSWEEP2;MEMSWEEP2;\??\c:\windows\system32\sophosmemsweep.sys --> c:\windows\system32\SophosMEMSWEEP.SYS [?]
S3 RapDrv;RapDrv;c:\windows\system32\drivers\RapDrv.sys [2004-8-30 98144]
S3 RapFile;RapFile;c:\windows\system32\drivers\RapFile.sys [2004-8-30 37436]
S3 RapNet;RapNet;c:\windows\system32\drivers\RapNet.sys [2004-8-30 25284]
S4 BlackICE;BlackICE;c:\program files\network ice\blackice\blackd.exe [2004-8-30 737280]
.
=============== Created Last 30 ================
.
2011-07-09 21:58:56 28752 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ee145a6c-227b-47ef-b8e9-ce9dc88f322e}\MpKsl3fec89bc.sys
2011-07-09 21:58:25 7074640 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ee145a6c-227b-47ef-b8e9-ce9dc88f322e}\mpengine.dll
2011-07-09 16:26:11 -------- d-----w- c:\documents and settings\jordan reccion\local settings\application data\DOSBox
2011-07-09 08:47:44 -------- d-----w- c:\program files\DOSBox-0.74
2011-07-09 01:38:12 -------- d-----w- C:\dagger
2011-07-06 03:05:16 41680 ----a-w- c:\windows\system32\drivers\jjraxcyz.sys
2011-07-06 02:46:05 41680 ----a-w- c:\windows\system32\drivers\muzjewcr.sys
2011-07-05 23:17:03 1409 ----a-w- c:\windows\QTFont.for
2011-07-05 06:05:30 54016 ----a-w- c:\windows\system32\drivers\eueoqjwa.sys
2011-07-03 20:48:59 -------- d--h--w- c:\documents and settings\jordan reccion\application data\Qowuul
2011-07-03 20:48:59 -------- d--h--w- c:\documents and settings\jordan reccion\application data\Avroyx
2011-07-03 09:45:08 -------- d-----w- c:\program files\ClubWPT
2011-07-01 19:51:46 -------- d-----w- c:\program files\Infogrames Interactive
2011-06-30 22:44:14 -------- d--h--w- c:\documents and settings\jordan reccion\local settings\application data\CPN
2011-06-30 22:43:55 -------- d-----w- c:\program files\Cake Poker 2.0
2011-06-22 09:37:40 2106216 ----a-w- c:\program files\mozilla firefox\D3DCompiler_43.dll
2011-06-22 09:37:40 1998168 ----a-w- c:\program files\mozilla firefox\d3dx9_43.dll
2011-06-17 23:40:07 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2011-06-17 23:40:07 -------- d-----w- c:\program files\OpenAL
2011-06-17 23:25:41 -------- d-----w- c:\program files\The Adventure Company
2011-06-15 23:15:17 -------- d-----w- c:\windows\SxsCaPendDel
2011-06-15 22:57:38 105472 -c----w- c:\windows\system32\dllcache\mup.sys
2011-06-13 20:32:19 -------- d-----w- C:\Life32
2011-06-13 20:20:13 -------- d--h--w- c:\documents and settings\jordan reccion\application data\GetRightToGo
2011-06-11 19:19:22 -------- d--h--w- c:\documents and settings\jordan reccion\application data\RIFT
2011-06-11 19:19:10 -------- d-----w- c:\program files\RIFT Game
.
==================== Find3M ====================
.
2011-07-02 02:51:02 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-17 23:40:07 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2011-06-09 07:13:22 0 ----a-w- c:\windows\Ykaqanuperamiy.bin
2011-05-29 16:11:30 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-05-29 16:11:20 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-05-03 17:54:33 86528 ----a-w- c:\windows\bnetunin.exe
2011-05-03 17:54:33 61440 ----a-w- c:\windows\diabunin.exe
2011-05-02 15:31:52 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-29 17:25:27 151552 ----a-w- c:\windows\system32\schannel.dll
2011-04-29 16:19:43 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-25 16:11:12 916480 ----a-w- c:\windows\system32\wininet.dll
2011-04-25 16:11:11 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-04-25 16:11:11 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2011-04-25 12:01:22 385024 ----a-w- c:\windows\system32\html.iec
2011-04-21 13:37:43 105472 ----a-w- c:\windows\system32\drivers\mup.sys
2003-03-31 12:00:00 94784 --sh--w- c:\windows\twain.dll
2008-04-14 00:12:07 50688 --sh--w- c:\windows\twain_32.dll
2008-04-14 00:12:01 57344 --sha-w- c:\windows\system32\msvcirt.dll
2008-04-14 00:12:01 413696 --sha-w- c:\windows\system32\msvcp60.dll
2010-12-20 17:32:15 551936 --sh--w- c:\windows\system32\oleaut32.dll
2008-04-14 00:12:02 84992 --sha-w- c:\windows\system32\olepro32.dll
2008-04-14 00:12:32 11776 --sh--w- c:\windows\system32\regsvr32.exe
.
============= FINISH: 2:30:42.12 ===============
5. Here is attach.txt from dds.scr:
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-06-23.01)
.
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 6/17/2004 7:30:37 PM
System Uptime: 7/4/2011 2:50:36 PM (132 hours ago)
.
Motherboard: Intel Corporation | | D875PBZ
Processor: Intel® Pentium® 4 CPU 3.00GHz | J2E1 | 2992/200mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 153 GiB total, 29.137 GiB free.
D: is CDROM (CDFS)
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable
J: is Removable
K: is FIXED (NTFS) - 1397 GiB total, 1085.05 GiB free.
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP1480: 4/10/2011 7:09:01 PM - Software Distribution Service 3.0
RP1481: 4/11/2011 7:08:17 PM - Software Distribution Service 3.0
RP1482: 4/12/2011 7:09:31 PM - Software Distribution Service 3.0
RP1483: 4/13/2011 10:37:07 PM - Software Distribution Service 3.0
RP1484: 4/14/2011 2:32:40 PM - Software Distribution Service 3.0
RP1485: 4/14/2011 10:36:50 PM - Software Distribution Service 3.0
RP1486: 4/15/2011 10:35:55 PM - Software Distribution Service 3.0
RP1487: 4/15/2011 11:06:02 PM - Software Distribution Service 3.0
RP1488: 4/16/2011 11:32:22 PM - System Checkpoint
RP1489: 4/17/2011 1:42:21 AM - Software Distribution Service 3.0
RP1490: 4/18/2011 6:26:49 AM - System Checkpoint
RP1491: 4/18/2011 6:35:54 AM - Software Distribution Service 3.0
RP1492: 4/19/2011 6:35:28 AM - Software Distribution Service 3.0
RP1493: 4/20/2011 7:46:51 AM - System Checkpoint
RP1494: 4/20/2011 9:56:59 AM - Software Distribution Service 3.0
RP1495: 4/21/2011 9:56:59 AM - Software Distribution Service 3.0
RP1496: 4/22/2011 9:55:24 AM - Software Distribution Service 3.0
RP1497: 4/23/2011 9:57:23 AM - Software Distribution Service 3.0
RP1498: 4/24/2011 2:14:32 AM - Software Distribution Service 3.0
RP1499: 4/24/2011 9:56:58 AM - Software Distribution Service 3.0
RP1500: 4/25/2011 9:56:56 AM - Software Distribution Service 3.0
RP1501: 4/26/2011 9:56:40 AM - Software Distribution Service 3.0
RP1502: 4/27/2011 9:43:49 AM - Software Distribution Service 3.0
RP1503: 4/27/2011 9:56:07 AM - Software Distribution Service 3.0
RP1504: 4/28/2011 9:56:48 AM - Software Distribution Service 3.0
RP1505: 4/29/2011 10:27:41 AM - Software Distribution Service 3.0
RP1506: 4/30/2011 10:21:54 AM - Software Distribution Service 3.0
RP1507: 5/1/2011 10:21:55 AM - Software Distribution Service 3.0
RP1508: 5/2/2011 10:36:31 AM - Software Distribution Service 3.0
RP1509: 5/3/2011 10:36:11 AM - Software Distribution Service 3.0
RP1510: 5/4/2011 10:36:01 AM - Software Distribution Service 3.0
RP1511: 5/4/2011 10:40:48 AM - Installed The Great Escape
RP1512: 5/5/2011 2:16:24 PM - System Checkpoint
RP1513: 5/6/2011 8:49:31 AM - Software Distribution Service 3.0
RP1514: 5/7/2011 8:49:08 AM - Software Distribution Service 3.0
RP1515: 5/8/2011 2:37:02 AM - Software Distribution Service 3.0
RP1516: 5/8/2011 5:22:31 PM - Software Distribution Service 3.0
RP1517: 5/9/2011 5:21:27 PM - Software Distribution Service 3.0
RP1518: 5/10/2011 5:22:16 PM - Software Distribution Service 3.0
RP1519: 5/10/2011 9:16:29 PM - Software Distribution Service 3.0
RP1520: 5/11/2011 5:22:27 PM - Software Distribution Service 3.0
RP1521: 5/12/2011 5:22:18 PM - Software Distribution Service 3.0
RP1522: 5/13/2011 5:26:06 PM - Software Distribution Service 3.0
RP1523: 5/14/2011 5:22:25 PM - Software Distribution Service 3.0
RP1524: 5/15/2011 2:22:25 AM - Software Distribution Service 3.0
RP1525: 5/15/2011 5:21:06 PM - Software Distribution Service 3.0
RP1526: 5/16/2011 5:22:29 PM - Software Distribution Service 3.0
RP1527: 5/17/2011 5:22:42 PM - Software Distribution Service 3.0
RP1528: 5/18/2011 5:22:29 PM - Software Distribution Service 3.0
RP1529: 5/19/2011 6:59:11 PM - System Checkpoint
RP1530: 5/20/2011 12:34:20 PM - Software Distribution Service 3.0
RP1531: 5/21/2011 12:29:42 PM - Software Distribution Service 3.0
RP1532: 5/22/2011 1:58:01 AM - Software Distribution Service 3.0
RP1533: 5/22/2011 12:31:01 PM - Software Distribution Service 3.0
RP1534: 5/23/2011 12:30:58 PM - Software Distribution Service 3.0
RP1535: 5/24/2011 12:31:15 PM - Software Distribution Service 3.0
RP1536: 5/25/2011 12:30:06 PM - Software Distribution Service 3.0
RP1537: 5/26/2011 1:14:03 PM - System Checkpoint
RP1538: 5/27/2011 1:29:41 AM - Software Distribution Service 3.0
RP1539: 5/28/2011 1:29:55 AM - Software Distribution Service 3.0
RP1540: 5/29/2011 1:30:10 AM - Software Distribution Service 3.0
RP1541: 5/30/2011 1:29:48 AM - Software Distribution Service 3.0
RP1542: 5/31/2011 1:29:55 AM - Software Distribution Service 3.0
RP1543: 6/1/2011 1:31:53 AM - Software Distribution Service 3.0
RP1544: 6/2/2011 3:18:08 AM - System Checkpoint
RP1545: 6/2/2011 8:47:29 AM - Software Distribution Service 3.0
RP1546: 6/3/2011 8:42:05 AM - Software Distribution Service 3.0
RP1547: 6/4/2011 8:41:30 AM - Software Distribution Service 3.0
RP1548: 6/5/2011 2:04:19 AM - Software Distribution Service 3.0
RP1549: 6/6/2011 8:41:35 AM - Software Distribution Service 3.0
RP1550: 6/7/2011 8:42:01 AM - Software Distribution Service 3.0
RP1551: 6/8/2011 8:41:19 AM - Software Distribution Service 3.0
RP1552: 6/9/2011 8:42:54 AM - Software Distribution Service 3.0
RP1553: 6/10/2011 8:59:23 AM - Software Distribution Service 3.0
RP1554: 6/11/2011 12:19:03 PM - Installed RIFT
RP1555: 6/12/2011 2:06:41 AM - Software Distribution Service 3.0
RP1556: 6/12/2011 6:39:01 PM - Software Distribution Service 3.0
RP1557: 6/13/2011 6:39:16 PM - Software Distribution Service 3.0
RP1558: 6/14/2011 6:39:51 PM - Software Distribution Service 3.0
RP1559: 6/15/2011 4:10:19 PM - Software Distribution Service 3.0
RP1560: 6/16/2011 5:46:33 PM - Software Distribution Service 3.0
RP1561: 6/17/2011 5:46:22 PM - Software Distribution Service 3.0
RP1562: 6/18/2011 5:42:04 PM - Software Distribution Service 3.0
RP1563: 6/19/2011 1:41:02 AM - Software Distribution Service 3.0
RP1564: 6/19/2011 5:42:56 PM - Software Distribution Service 3.0
RP1565: 6/20/2011 5:47:28 PM - Software Distribution Service 3.0
RP1566: 6/21/2011 5:45:08 PM - Software Distribution Service 3.0
RP1567: 6/22/2011 7:03:00 PM - System Checkpoint
RP1568: 6/23/2011 9:55:07 AM - Software Distribution Service 3.0
RP1569: 6/24/2011 9:55:09 AM - Software Distribution Service 3.0
RP1570: 6/25/2011 9:54:19 AM - Software Distribution Service 3.0
RP1571: 6/26/2011 1:47:24 AM - Software Distribution Service 3.0
RP1572: 6/26/2011 9:54:23 AM - Software Distribution Service 3.0
RP1573: 6/27/2011 9:54:36 AM - Software Distribution Service 3.0
RP1574: 6/28/2011 10:17:04 AM - System Checkpoint
RP1575: 6/28/2011 12:13:58 PM - Software Distribution Service 3.0
RP1576: 6/29/2011 12:14:14 PM - Software Distribution Service 3.0
RP1577: 6/30/2011 12:12:51 PM - Software Distribution Service 3.0
RP1578: 7/1/2011 12:14:51 PM - Software Distribution Service 3.0
RP1579: 7/1/2011 7:51:53 PM - Software Distribution Service 3.0
RP1580: 7/2/2011 8:01:59 PM - Software Distribution Service 3.0
RP1581: 7/3/2011 8:30:35 PM - System Checkpoint
RP1582: 7/4/2011 8:55:04 PM - System Checkpoint
RP1583: 7/5/2011 12:25:11 AM - Software Distribution Service 3.0
RP1584: 7/5/2011 2:57:57 PM - Software Distribution Service 3.0
RP1585: 7/6/2011 2:58:15 PM - Software Distribution Service 3.0
RP1586: 7/7/2011 2:58:14 PM - Software Distribution Service 3.0
RP1587: 7/8/2011 2:58:22 PM - Software Distribution Service 3.0
RP1588: 7/9/2011 2:58:20 PM - Software Distribution Service 3.0
.
==== Installed Programs ======================
.
µTorrent
32 Bit HP CIO Components Installer
AcademicOnline Interactive Mathematics
ACDSee 4.0.2 PowerPack Suite
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 8.3.0
Adobe® Photoshop® Album Starter Edition 3.2
Advanced SystemCare 4
Alarm Clock v1.0
ATI Control Panel
ATI Display Driver
Battle.net
Bonjour
Business Contact Manager for Outlook 2003
Cake Poker 2.0
Calling all Titans! (remove only)
Canon Camera WIA Driver
CANON iMAGE GATEWAY MyCamera Download Plugin
CANON iMAGE GATEWAY Task for ZoomBrowser EX
Canon Internet Library for ZoomBrowser EX
Canon IXY 200a, PowerShot S200, IXUS v2 WIA Driver
Canon MOV Decoder
Canon MOV Encoder
Canon MovieEdit Task for ZoomBrowser EX
Canon Utilities ZoomBrowser EX
Canon ZoomBrowser EX Memory Card Utility
CCleaner (remove only)
Civilization III
ClubWPT
Coby Media Manager
Compatibility Pack for the 2007 Office system
Creative Driver
Creative MediaSource
Critical Update for Windows Media Player 11 (KB959772)
CSI-Hard Evidence
D-Link AirPlus
DC++ 0.782
Diablo
DiMAGE Viewer
DivX Web Player
DocProc
Doyles Room
DVD
DVD Shrink 3.2
Fallout
Game Booster
Gateway Drivers and Applications Recovery
Gateway IE Customizations
Gateway Ink Monitor
Gateway Rhapsody
Gateway User's Guide
Google Earth
Google Update Helper
Hallmark Card Studio 2 Standard
Hallmark Card Studio 2003
Hallmark Card Studio 2004 Deluxe
Hallmark Card Studio 2005 Deluxe
Hallmark Card Studio 2006
Hero X
Heroes of Might and Magic V
HighMAT Extension to Microsoft Windows XP CD Writing Wizard
HijackThis 1.99.1
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Format SDK (KB902344)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB942288-v3)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
InCD
Intel® PRO Network Adapters and Drivers
Intel® PROSet
IsoBuster 1.8
Java 2 Runtime Environment, SE v1.4.2
Java Auto Updater
Java™ 6 Update 23
King's Bounty. The Legend (Remove Only)
Macromedia Shockwave Player
Mahjong Towers Eternity (remove only)
Majesty
Malwarebytes' Anti-Malware version 1.51.0.1200
Mavis Beacon Teaches Typing 8.0.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Antimalware
Microsoft Application Error Reporting
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Data Access Components KB870669
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office File Validation Add-In
Microsoft Office Live Meeting 2005
Microsoft Office Professional Edition 2003
Microsoft Office Small Business Edition 2003
Microsoft Security Client
Microsoft Security Essentials
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Minigolf Carnival
mIRC
Mozilla Firefox 5.0 (x86 en-US)
MSXML 4.0 SP2 (KB925672)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6.0 Parser (KB933579)
msxml4SP2
Nero 10 Movie ThemePack Basic
Nero BurnRights 10
Nero BurnRights 10 Help (CHM)
Nero Control Center 10
Nero ControlCenter 10 Help (CHM)
Nero Core Components 10
Nero CoverDesigner 10
Nero CoverDesigner 10 Help (CHM)
Nero DiscSpeed 10
Nero DiscSpeed 10 Help (CHM)
Nero Express 10
Nero Express 10 Help (CHM)
Nero InfoTool 10
Nero InfoTool 10 Help (CHM)
Nero Kwik Media
Nero MediaHub 10 Help (CHM)
Nero Multimedia Suite 10 Essentials
Nero StartSmart 10
Nero StartSmart 10 Help (CHM)
Nero Suite
Nero Update
Next Life US 1.2.16
OCR Software by I.R.I.S. 12.0
Office 2003 Setup Files
OpenAL
Personal License Update Wizard for Windows Media Player
PhotoParade Player
PokerStars
PokerStove version 1.23
QuickPar 0.9
QuickSFV (Remove only)
QuickTime
Ralink RT7x Wireless LAN Card
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB2482017)
Security Update for Windows Internet Explorer 8 (KB2497640)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2530548)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB969897)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2503658)
Security Update for Windows XP (KB2503665)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2506223)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2511455)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276)
Security Update for Windows XP (KB2544893)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953155)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Sid Meier's Pirates!
Skype Toolbars
Skype™ 5.1
Smart Defrag 2
Smart Link 56K Modem
Sound Blaster Audigy 2
Spybot - Search & Destroy
Tales of Monkey Island
The Great Escape
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB971180)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB2541763)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
WebFldrs XP
Winamp
Winamp Detector Plug-in
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage v1.3.0254.0
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
WinRAR archiver
WinZip 11.1
Wireless-G PCI Adapter
.
==== Event Viewer Messages From Past Week ========
.
7/5/2011 8:59:37 PM, error: Service Control Manager [7034] - The DNS Client service terminated unexpectedly. It has done this 1 time(s).
7/4/2011 9:59:36 AM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.929.0 Update Source: Microsoft Update Server Update Stage: Search Source Path:
http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
7/4/2011 9:58:57 AM, error: Service Control Manager [7034] - The Print Spooler service terminated unexpectedly. It has done this 3 time(s).
7/4/2011 9:55:48 AM, error: Service Control Manager [7031] - The Print Spooler service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
7/4/2011 9:52:39 AM, error: Service Control Manager [7031] - The Print Spooler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
7/4/2011 2:41:02 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD Fips intelppm IPSec MpFilter MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip
7/4/2011 2:41:02 PM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
7/4/2011 2:41:02 PM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
7/4/2011 2:41:02 PM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBT service which failed to start because of the following error: A device attached to the system is not functioning.
7/4/2011 2:41:02 PM, error: Service Control Manager [7001] - The Bonjour Service service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
7/4/2011 2:40:58 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
7/4/2011 2:40:49 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
7/3/2011 6:22:24 PM, error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/WinTools&threatid=2147603732 Name: Trojan:Win32/WinTools ID: 2147603732 Severity: Severe Category: Trojan Path: containerfile:_C:\Documents and Settings\gary recchion\Application Data\Business Logic\UWC\Backup\J38222.9434984375.WCU;file:_C:\Documents and Settings\gary recchion\Application Data\Business Logic\UWC\Backup\J38222.9434984375.WCU->C:/Documents and Settings/gary recchion/Local Settings/Temp/~240422.tmp;file:_C:\Documents and Settings\gary recchion\Application Data\Business Logic\UWC\Backup\J38222.9434984375.WCU->C:/Documents and Settings/gary recchion/Local Settings/Temp/~289685.tmp;file:_C:\Documents and Settings\gary recchion\Application Data\Business Logic\UWC\Backup\J38222.9434984375.WCU->C:/Documents and Settings/gary recchion/Local Settings/Temp/~313790.tmp;file:_C:\Documents and Settings\gary recchion\Application Data\Business Logic\UWC\Backup\J38222.9434984375.WCU->C:/Documents and Settings/gary recchion/Local Settings/Temp/~508277.tmp;file:_C:\Documents and Settings\gary recchion\Application Data\Business Logic\UWC\Backup\J38222.9434984375.WCU->C:/Documents and Settings/gary recchion/Local Settings/ Detection Origin: Local machine Detection Type: Concrete Detection Source: User User: NT AUTHORITY\SYSTEM Process Name: Unknown Action: Remove Action Status: No additional actions required Error Code: 0x8007065e Error description: Data of this type is not supported. Signature Version: AV: 1.107.929.0, AS: 1.107.929.0, NIS: 0.0.0.0 Engine Version: AM: 1.1.7000.0, NIS: 0.0.0.0
7/3/2011 6:22:24 PM, error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/IBISToolbar&threatid=6754 Name: Adware:Win32/IBISToolbar ID: 6754 Severity: High Category: Adware Path: containerfile:_C:\Documents and Settings\gary recchion\Application Data\Business Logic\UWC\Backup\J38222.9434984375.WCU;file:_C:\Documents and Settings\gary recchion\Application Data\Business Logic\UWC\Backup\J38222.9434984375.WCU->C:/Documents and Settings/gary recchion/Local Settings/Temp/IExploreSkins.exe;file:_C:\Documents and Settings\gary recchion\Application Data\Business Logic\UWC\Backup\J38222.9434984375.WCU->C:/Documents and Settings/gary recchion/Local Settings/Temp/temp.cab->IExploreSkins.exe;file:_C:\Documents and Settings\gary recchion\Application Data\Business Logic\UWC\Backup\J38222.9434984375.WCU->C:/Documents and Settings/gary recchion/Local Settings/Temp/temp.cab->toolbar.dll;file:_C:\Documents and Settings\gary recchion\Application Data\Business Logic\UWC\Backup\J38222.9434984375.WCU->C:/Documents and Settings/gary recchion/Local Settings/Temp/toolbar.dll Detection Origin: Local machine Detection Type: Concrete Detection Source: User User: NT AUTHORITY\SYSTEM Process Name: Unknown Action: Remove Action Status: No additional actions required Error Code: 0x8007065e Error description: Data of this type is not supported. Signature Version: AV: 1.107.929.0, AS: 1.107.929.0, NIS: 0.0.0.0 Engine Version: AM: 1.1.7000.0, NIS: 0.0.0.0
7/3/2011 2:13:18 PM, error: Dhcp [1002] - The IP address lease 192.168.0.2 for the Network Card with network address 000D888867E0 has been denied by the DHCP server 192.168.0.10 (The DHCP Server sent a DHCPNACK message).
7/3/2011 1:59:04 AM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.929.0 Update Source: Microsoft Update Server Update Stage: Search Source Path:
http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
.
==== End Of File ===========================
6. RKUnHookerLE Report on Drivers only:
RkU Version: 3.8.389.593, Type LE (SR2)
==============================================
OS Name: Windows XP
Version 5.1.2600 (Service Pack 3)
Number of processors #2
==============================================
>Drivers
==============================================
0x804D7000 C:\WINDOWS\system32\ntoskrnl.exe 2265088 bytes (Microsoft Corporation, NT Kernel & System)
0x804D7000 PnpManager 2265088 bytes
0x804D7000 RAW 2265088 bytes
0x804D7000 WMIxWDM 2265088 bytes
0xBF800000 Win32k 1859584 bytes
0xBF800000 C:\WINDOWS\System32\win32k.sys 1859584 bytes (Microsoft Corporation, Multi-User Win32 Driver)
0xBF075000 C:\WINDOWS\System32\ati3duag.dll 1183744 bytes (ATI Technologies Inc. , ati3duag.dll)
0xB98EE000 C:\WINDOWS\System32\DRIVERS\ati2mtag.sys 778240 bytes (ATI Technologies Inc., ATI Radeon Miniport Driver)
0xA7ED5000 C:\WINDOWS\system32\drivers\ha10kx2k.sys 770048 bytes (Creative Technology Ltd, Creative EMU10KX HAL (WDM))
0xBF196000 C:\WINDOWS\System32\ativvaxx.dll 593920 bytes (ATI Technologies Inc. , Radeon Video Acceleration Universal Driver)
0xF7B52000 Ntfs.sys 577536 bytes (Microsoft Corporation, NT File System Driver)
0xA6782000 C:\WINDOWS\System32\DRIVERS\mrxsmb.sys 458752 bytes (Microsoft Corporation, Windows NT SMB Minirdr)
0xB9829000 C:\WINDOWS\system32\drivers\ctaud2k.sys 454656 bytes (Creative Technology Ltd, Creative WDM Audio Device Driver)
0xBF012000 C:\WINDOWS\System32\ati2dvag.dll 405504 bytes (ATI Technologies Inc., ATI Radeon WindowsNT Display Driver)
0xB4B12000 C:\WINDOWS\System32\DRIVERS\update.sys 385024 bytes (Microsoft Corporation, Update Driver)
0xA6867000 C:\WINDOWS\System32\DRIVERS\tcpip.sys 364544 bytes (Microsoft Corporation, TCP/IP Protocol Driver)
0xA3D62000 C:\WINDOWS\System32\DRIVERS\srv.sys 360448 bytes (Microsoft Corporation, Server driver)
0xBF227000 C:\WINDOWS\System32\ATMFD.DLL 290816 bytes (Adobe Systems Incorporated, Windows NT OpenType/Type 1 Font Driver)
0xA377A000 C:\WINDOWS\System32\Drivers\HTTP.sys 266240 bytes (Microsoft Corporation, HTTP Protocol Stack)
0xA2DC3000 C:\WINDOWS\system32\DRIVERS\airplus.sys 258048 bytes (D-Link, D-Link AirPlus Wireless Network Adapter Driver)
0xF75A8000 ACPI.sys 188416 bytes (Microsoft Corporation, ACPI Driver for NT)
0xF7833000 NDIS.sys 184320 bytes (Microsoft Corporation, NDIS 5.1 wrapper driver)
0xB97B7000 C:\WINDOWS\system32\drivers\ctoss2k.sys 176128 bytes (Creative Technology Ltd., Creative OS Services Driver (WDM))
0xA2AC6000 C:\WINDOWS\system32\drivers\kmixer.sys 176128 bytes (Microsoft Corporation, Kernel Mode Audio Mixer)
0xA67F2000 C:\WINDOWS\System32\DRIVERS\rdbss.sys 176128 bytes (Microsoft Corporation, Redirected Drive Buffering SubSystem Driver)
0xA683F000 C:\WINDOWS\System32\DRIVERS\netbt.sys 163840 bytes (Microsoft Corporation, MBT Transport driver)
0xA6908000 C:\WINDOWS\system32\DRIVERS\MpFilter.sys 159744 bytes (Microsoft Corporation, Microsoft antimalware file system filter driver)
0xA675C000 C:\WINDOWS\System32\DRIVERS\ipnat.sys 155648 bytes (Microsoft Corporation, IP Network Address Translator)
0xA37BB000 C:\WINDOWS\System32\Drivers\Fastfat.SYS 147456 bytes (Microsoft Corporation, Fast FAT File System Driver)
0xB9805000 C:\WINDOWS\system32\drivers\portcls.sys 147456 bytes (Microsoft Corporation, Port Class (Class Driver for Port/Miniport Devices))
0xB9898000 C:\WINDOWS\System32\DRIVERS\USBPORT.SYS 147456 bytes (Microsoft Corporation, USB 1.1 & 2.0 Port Driver)
0xB97E2000 C:\WINDOWS\system32\drivers\ks.sys 143360 bytes (Microsoft Corporation, Kernel CSA Library)
0xA681D000 C:\WINDOWS\System32\drivers\afd.sys 139264 bytes (Microsoft Corporation, Ancillary Function Driver for WinSock)
0x80700000 ACPI_HAL 134400 bytes
0x80700000 C:\WINDOWS\system32\hal.dll 134400 bytes (Microsoft Corporation, Hardware Abstraction Layer DLL)
0xA7EB5000 C:\WINDOWS\system32\drivers\ctac32k.sys 131072 bytes (Creative Technology Ltd, Creative AC3 SW Decoder Device Driver (WDM))
0xF74A0000 fltmgr.sys 131072 bytes (Microsoft Corporation, Microsoft Filesystem Filter Manager)
0xA7E3B000 C:\WINDOWS\system32\drivers\hap16v2k.sys 131072 bytes (Creative Technology Ltd, Creative EMU10KX-P16v HAL (WDM))
0xA7E5B000 C:\WINDOWS\system32\drivers\ctsfm2k.sys 126976 bytes (Creative Technology Ltd, SoundFont® Manager (WDM))
0xF74D8000 ftdisk.sys 126976 bytes (Microsoft Corporation, FT Disk Driver)
0xB98BC000 C:\WINDOWS\System32\DRIVERS\e1000325.sys 122880 bytes (Intel Corporation, Intel® PRO/1000 Adapter NDIS 5.1 deserialized driver)
0xA7E9A000 C:\WINDOWS\system32\drivers\emupia2k.sys 110592 bytes (Creative Technology Ltd, E-mu Plug-in Architecture Driver (WDM))
0xF796D000 Mup.sys 106496 bytes (Microsoft Corporation, Multiple UNC Provider driver)
0xA314C000 C:\DOCUME~1\JORDAN~1\LOCALS~1\Temp\kwldqpow.sys 102400 bytes
0xF74C0000 atapi.sys 98304 bytes (Microsoft Corporation, IDE/ATAPI Port Driver)
0xF7860000 KSecDD.sys 94208 bytes (Microsoft Corporation, Kernel Security Support Provider Interface)
0xB4C62000 C:\WINDOWS\System32\DRIVERS\ndiswan.sys 94208 bytes (Microsoft Corporation, MS PPP Framing Driver (Strong Encryption))
0xA40D8000 C:\WINDOWS\System32\DRIVERS\nwlnkipx.sys 90112 bytes (Microsoft Corporation, NWLINK2 IPX Protocol Driver)
0xA68D3000 C:\WINDOWS\System32\Drivers\InCDfs.SYS 86016 bytes (Ahead Software, InCD File System Driver)
0xA3FC8000 C:\WINDOWS\system32\drivers\wdmaud.sys 86016 bytes (Microsoft Corporation, MMSYSTEM Wave/Midi API mapper)
0xB4E3A000 C:\WINDOWS\System32\DRIVERS\parport.sys 81920 bytes (Microsoft Corporation, Parallel Port Driver)
0xB98DA000 C:\WINDOWS\System32\DRIVERS\VIDEOPRT.SYS 81920 bytes (Microsoft Corporation, Video Port Driver)
0xA68C0000 C:\WINDOWS\System32\DRIVERS\ipsec.sys 77824 bytes (Microsoft Corporation, IPSec Driver)
0xBF000000 C:\WINDOWS\System32\drivers\dxg.sys 73728 bytes (Microsoft Corporation, DirectX Graphics Driver)
0xF748E000 sr.sys 73728 bytes (Microsoft Corporation, System Restore Filesystem Filter Driver)
0xF7597000 pci.sys 69632 bytes (Microsoft Corporation, NT Plug and Play PCI Enumerator)
0xB4C51000 C:\WINDOWS\System32\DRIVERS\psched.sys 69632 bytes (Microsoft Corporation, MS QoS Packet Scheduler)
0xB63FF000 C:\WINDOWS\System32\Drivers\Cdfs.SYS 65536 bytes (Microsoft Corporation, CD-ROM File System Driver)
0xF746E000 C:\WINDOWS\System32\DRIVERS\cdrom.sys 65536 bytes (Microsoft Corporation, SCSI CD-ROM Driver)
0xBA4A4000 C:\WINDOWS\System32\DRIVERS\nic1394.sys 65536 bytes (Microsoft Corporation, IEEE1394 Ndis Miniport and Call Manager)
0xB63EF000 C:\WINDOWS\System32\DRIVERS\nwlnknb.sys 65536 bytes (Microsoft Corporation, NWLINK2 IPX Netbios Protocol Driver)
0xF7607000 ohci1394.sys 65536 bytes (Microsoft Corporation, 1394 OpenHCI Port Driver)
0xF7527000 C:\WINDOWS\System32\DRIVERS\serial.sys 65536 bytes (Microsoft Corporation, Serial Device Driver)
0xB9A1C000 C:\WINDOWS\System32\DRIVERS\arp1394.sys 61440 bytes (Microsoft Corporation, IP/1394 Arp Client)
0xBA454000 C:\WINDOWS\system32\drivers\drmk.sys 61440 bytes (Microsoft Corporation, Microsoft Kernel DRM Descrambler Filter)
0xF7517000 C:\WINDOWS\System32\DRIVERS\redbook.sys 61440 bytes (Microsoft Corporation, Redbook Audio Filter Driver)
0xF76B7000 C:\WINDOWS\system32\drivers\sysaudio.sys 61440 bytes (Microsoft Corporation, System Audio WDM Filter)
0xB63CF000 C:\WINDOWS\System32\DRIVERS\usbhub.sys 61440 bytes (Microsoft Corporation, Default Hub Driver for USB)
0xF7617000 C:\WINDOWS\System32\DRIVERS\1394BUS.SYS 57344 bytes (Microsoft Corporation, 1394 Bus Device Driver)
0xA4241000 C:\WINDOWS\System32\DRIVERS\nwlnkspx.sys 57344 bytes (Microsoft Corporation, NWLINK2 SPX Protocol Driver)
0xF7657000 C:\WINDOWS\System32\DRIVERS\CLASSPNP.SYS 53248 bytes (Microsoft Corporation, SCSI Class System Dll)
0xF7547000 C:\WINDOWS\System32\DRIVERS\i8042prt.sys 53248 bytes (Microsoft Corporation, i8042 Port Driver)
0xF747E000 C:\WINDOWS\System32\DRIVERS\rasl2tp.sys 53248 bytes (Microsoft Corporation, RAS L2TP mini-port/call-manager driver)
0xF7637000 VolSnap.sys 53248 bytes (Microsoft Corporation, Volume Shadow Copy Driver)
0xF745E000 C:\WINDOWS\System32\DRIVERS\raspptp.sys 49152 bytes (Microsoft Corporation, Peer-to-Peer Tunneling Protocol)
0xF7677000 agp440.sys 45056 bytes (Microsoft Corporation, 440 NT AGP Filter)
0xB9A2C000 C:\WINDOWS\System32\Drivers\Fips.SYS 45056 bytes (Microsoft Corporation, FIPS Crypto Driver)
0xF74F7000 C:\WINDOWS\System32\DRIVERS\imapi.sys 45056 bytes (Microsoft Corporation, IMAPI Kernel Driver)
0xF7627000 MountMgr.sys 45056 bytes (Microsoft Corporation, Mount Manager)
0xF7507000 C:\WINDOWS\System32\DRIVERS\raspppoe.sys 45056 bytes (Microsoft Corporation, RAS PPPoE mini-port/call-manager driver)
0xF75F7000 isapnp.sys 40960 bytes (Microsoft Corporation, PNP ISA Bus Driver)
0xB63DF000 C:\WINDOWS\System32\Drivers\NDProxy.SYS 40960 bytes (Microsoft Corporation, NDIS Proxy)
0xF7667000 PxHelp20.sys 40960 bytes (Sonic Solutions, Px Engine Device Driver for Windows 2000/XP)
0xF743E000 C:\WINDOWS\System32\DRIVERS\termdd.sys 40960 bytes (Microsoft Corporation, Terminal Server Driver)
0xF76A7000 C:\WINDOWS\System32\Drivers\BlackBox.SYS 36864 bytes (RKU Driver)
0xF7647000 disk.sys 36864 bytes (Microsoft Corporation, PnP Disk Driver)
0xF741E000 C:\WINDOWS\System32\DRIVERS\intelppm.sys 36864 bytes (Microsoft Corporation, Processor Device Driver)
0xF744E000 C:\WINDOWS\System32\DRIVERS\msgpc.sys 36864 bytes (Microsoft Corporation, MS General Packet Classifier)
0xBA414000 C:\WINDOWS\System32\DRIVERS\netbios.sys 36864 bytes (Microsoft Corporation, NetBIOS interface driver)
0xF7577000 C:\WINDOWS\System32\DRIVERS\wanarp.sys 36864 bytes (Microsoft Corporation, MS Remote Access and Routing ARP Driver)
0xF77B7000 C:\WINDOWS\System32\Drivers\Npfs.SYS 32768 bytes (Microsoft Corporation, NPFS Driver)
0xF777F000 C:\WINDOWS\System32\DRIVERS\usbehci.sys 32768 bytes (Microsoft Corporation, EHCI eUSB Miniport Driver)
0xBA331000 C:\WINDOWS\System32\DRIVERS\fdc.sys 28672 bytes (Microsoft Corporation, Floppy Disk Controller Driver)
0xF77C7000 C:\WINDOWS\SYSTEM32\DRIVERS\GEARAspiWDM.sys 28672 bytes (GEAR Software Inc., CDRom Class Filter Driver)
0xBA321000 C:\WINDOWS\System32\DRIVERS\InCDPass.sys 28672 bytes (Ahead Software, Ahead RW Filter Driver)
0xB6397000 C:\DOCUME~1\JORDAN~1\LOCALS~1\Temp\mbr.sys 28672 bytes
0xBA329000 C:\WINDOWS\System32\Drivers\MxlW2k.SYS 28672 bytes (MusicMatch, Inc., MusicMatch Access Layer KMD)
0xF7707000 C:\WINDOWS\System32\DRIVERS\PCIIDEX.SYS 28672 bytes (Microsoft Corporation, PCI IDE Bus Driver Extension)
0xF77BF000 C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS 28672 bytes (Microsoft Corporation, USB Mass Storage Class Driver)
0xBA341000 C:\WINDOWS\System32\DRIVERS\kbdclass.sys 24576 bytes (Microsoft Corporation, Keyboard Class Driver)
0xBA339000 C:\WINDOWS\System32\DRIVERS\mouclass.sys 24576 bytes (Microsoft Corporation, Mouse Class Driver)
0xA695F000 C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{EE145A6C-227B-47EF-B8E9-CE9DC88F322E}\MpKsl3fec89bc.sys 24576 bytes (Microsoft Corporation, KSLDriver)
0xF7777000 C:\WINDOWS\System32\DRIVERS\usbuhci.sys 24576 bytes (Microsoft Corporation, UHCI USB Miniport Driver)
0xF77A7000 C:\WINDOWS\System32\drivers\vga.sys 24576 bytes (Microsoft Corporation, VGA/Super VGA Video Driver)
0xF7787000 C:\WINDOWS\System32\DRIVERS\flpydisk.sys 20480 bytes (Microsoft Corporation, Floppy Driver)
0xF77AF000 C:\WINDOWS\System32\Drivers\Msfs.SYS 20480 bytes (Microsoft Corporation, Mailslot driver)
0xF770F000 PartMgr.sys 20480 bytes (Microsoft Corporation, Partition Manager)
0xB9327000 C:\WINDOWS\System32\DRIVERS\ptilink.sys 20480 bytes (Parallel Technologies, Inc., Parallel Technologies DirectParallel IO Library)
0xB931F000 C:\WINDOWS\System32\DRIVERS\raspti.sys 20480 bytes (Microsoft Corporation, PTI DirectParallel® mini-port/call-manager driver)
0xF7757000 C:\WINDOWS\System32\Drivers\Scutum50.sys 20480 bytes (Printing Communications Assoc., Inc. (PCAUSA), PCAUSA NDIS 5.0 SPR Protocol Driver)
0xB932F000 C:\WINDOWS\System32\DRIVERS\TDI.SYS 20480 bytes (Microsoft Corporation, TDI Wrapper)
0xA692F000 C:\WINDOWS\System32\watchdog.sys 20480 bytes (Microsoft Corporation, Watchdog Driver)
0xA410E000 C:\WINDOWS\System32\DRIVERS\asyncmac.sys 16384 bytes (Microsoft Corporation, MS Remote Access serial network driver)
0xBA7B0000 C:\WINDOWS\System32\DRIVERS\mssmbios.sys 16384 bytes (Microsoft Corporation, System Management BIOS Driver)
0xBA7D8000 C:\WINDOWS\System32\DRIVERS\ndisuio.sys 16384 bytes (Microsoft Corporation, NDIS User mode I/O Driver)
0xA3CFA000 C:\WINDOWS\System32\PfModNT.sys 16384 bytes (Creative Technology Ltd., PCI/ISA Device Info. Service)
0xBA7C8000 C:\WINDOWS\System32\DRIVERS\serenum.sys 16384 bytes (Microsoft Corporation, Serial Port Enumerator)
0xF7897000 C:\WINDOWS\system32\BOOTVID.dll 12288 bytes (Microsoft Corporation, VGA Boot Driver)
0xA460F000 C:\WINDOWS\System32\drivers\Dxapi.sys 12288 bytes (Microsoft Corporation, DirectX API Driver)
0xBA7BC000 C:\WINDOWS\System32\DRIVERS\ndistapi.sys 12288 bytes (Microsoft Corporation, NDIS 3.0 connection wrapper driver)
0xA8470000 C:\WINDOWS\System32\DRIVERS\rasacd.sys 12288 bytes (Microsoft Corporation, RAS Automatic Connection Driver)
0xB4EAF000 C:\WINDOWS\System32\Drivers\Beep.SYS 8192 bytes (Microsoft Corporation, BEEP Driver)
0xF79CB000 C:\WINDOWS\system32\drivers\ctprxy2k.sys 8192 bytes (Creative Technology Ltd, Creative Proxy Device Driver (WDM))
0xB4EB1000 C:\WINDOWS\System32\Drivers\Fs_Rec.SYS 8192 bytes (Microsoft Corporation, File System Recognizer Driver)
0xAC9F8000 C:\WINDOWS\System32\Drivers\InCDrec.SYS 8192 bytes (Ahead Software AG, InCD File System Recognizer)
0xF7987000 C:\WINDOWS\system32\KDCOM.DLL 8192 bytes (Microsoft Corporation, Kernel Debugger HW Extension DLL)
0xB4EAD000 C:\WINDOWS\System32\Drivers\mnmdd.SYS 8192 bytes (Microsoft Corporation, Frame buffer simulator)
0xAC9F6000 C:\WINDOWS\System32\Drivers\ParVdm.SYS 8192 bytes (Microsoft Corporation, VDM Parallel Driver)
0xAC9FA000 C:\WINDOWS\System32\DRIVERS\RDPCDD.sys 8192 bytes (Microsoft Corporation, RDP Miniport)
0xF798B000 SmartDefragDriver.sys 8192 bytes
0xF79FB000 C:\WINDOWS\System32\DRIVERS\swenum.sys 8192 bytes (Microsoft Corporation, Plug and Play Software Device Enumerator)
0xF7999000 C:\WINDOWS\System32\DRIVERS\USBD.SYS 8192 bytes (Microsoft Corporation, Universal Serial Bus Driver)
0xF7989000 C:\WINDOWS\System32\DRIVERS\WMILIB.SYS 8192 bytes (Microsoft Corporation, WMILIB WMI support library Dll)
0xB793F000 C:\WINDOWS\System32\DRIVERS\audstub.sys 4096 bytes (Microsoft Corporation, AudStub Driver)
0xF7A8F000 C:\WINDOWS\System32\drivers\dxgthk.sys 4096 bytes (Microsoft Corporation, DirectX Graphics Driver Thunk)
0xB8DC9000 C:\WINDOWS\System32\Drivers\Null.SYS 4096 bytes (Microsoft Corporation, NULL Driver)
0xF7A4F000 pciide.sys 4096 bytes (Microsoft Corporation, Generic PCI IDE Bus Driver)
!!!!!!!!!!!Hidden driver: 0x8A50B280 00000285 0 bytes
Help
Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.
This topic is locked
ark.txt (129.82K)
Back to top
