BleepingComputer.com: Something's Infected My PC

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.
  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

Something's Infected My PC Stubborn cuss knows how to disable rkill

#1 User is offline   NottaTechie 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 06-December 11

Posted 06 December 2011 - 12:32 PM

hi, not sure if this is where to post this but something got on my computer yesterday and it's nasty. it knows how to disable rkills, even if i rename rkills, and won't let dds run. it keeps trying to make changes to the harddrive via synaptics pointing device ... what should i do now? i've attached the result i get when trying to run dds. Attached File  WontRun.jpg (51.96K)
Number of downloads: 8thank you!

ps: it also really hates on spybot, keeps trying to disable spybot and oh, it temporarily took down my firewall yesterday too. :huh:

one other thing - last night whenever i right-clicked on my main explorer menu folders, that action completely crashed out explorer. but it's ok if i left-click on the folder, opening it up in the main explorer window...

in case it matters at all, fwiw, it lets my browsers fire right up but gimp was slow as cold molasses to start and run. i finally got this image of it trying to use synaptics to get online ...

This post has been edited by NottaTechie: 06 December 2011 - 02:08 PM

#2 User is offline   NottaTechie 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 06-December 11

Posted 06 December 2011 - 12:35 PM

can't delete?

This post has been edited by NottaTechie: 06 December 2011 - 02:04 PM

#3 User is offline   NottaTechie 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 06-December 11

Posted 06 December 2011 - 12:37 PM

can't delete?

This post has been edited by NottaTechie: 06 December 2011 - 02:05 PM

#4 User is offline   NottaTechie 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 06-December 11

Posted 06 December 2011 - 01:23 PM

can't delete?

This post has been edited by NottaTechie: 06 December 2011 - 02:06 PM

#5 User is offline   NottaTechie 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 06-December 11

Posted 06 December 2011 - 06:55 PM

yay for wise friends suggesting safe mode! so i got the dds logs, mbam found nothing and spybot i'm not sure what it found... so lots of ppl are lending virtual encouragement in reading about my plight, would love some real replies, thanks!

This post has been edited by NottaTechie: 06 December 2011 - 06:56 PM

#6 User is offline   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,394
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 10 December 2011 - 01:13 PM

Please post your logs.

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#7 User is offline   NottaTechie 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 06-December 11

Posted 10 December 2011 - 09:25 PM

which scan logs? i apologize for being clueless but there are warnings everywhere to only run the specific scans we're asked to run or possibly hurt our computers. thank you.

This post has been edited by NottaTechie: 11 December 2011 - 12:22 AM

#8 User is offline   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,394
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 11 December 2011 - 06:08 AM

Malwarebytes Log. We will analyze that before asking you to post the DDS Logs.

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#9 User is offline   NottaTechie 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 06-December 11

Posted 11 December 2011 - 11:50 AM

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 8351

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

12/11/2011 9:37:18 AM
mbam-log-2011-12-11 (09-37-18).txt

Scan type: Full scan (C:\|)
Objects scanned: 403214
Time elapsed: 1 hour(s), 5 minute(s), 51 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#10 User is offline   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,394
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 11 December 2011 - 01:16 PM

SUPERAntiSpyware:

Quote

Please download and scan with SUPERAntiSpyware Free
  • Double-click SUPERAntiSypware.exe and use the default settings for installation.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If it will not start, go to Start > All Prgrams > SUPERAntiSpyware and click on Alternate Start.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)
  • In the Main Menu, click the Preferences... button.
  • Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.
  • Click the "Scanning Control" tab, and under Scanner Options, make sure the following are unchecked (leave all others checked):
    • Ignore files larger then 4mb
    • Ignore non-executable files


    Now Perform the scan with SUPERAntiSpyware as follows:
    • Launch the program and back on the main screen, under "Scan for Harmful Software" click Scan your computer.
    • On the left, make sure you check C:\Fixed Drive.
    • On the right, under "Complete Scan", choose Perform Complete Scan and click "Next".
    • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
    • Make sure everything has a checkmark next to it and click "Next".
    • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
    • If asked if you want to reboot, click "Yes" and reboot normally.
    • To retrieve the removal information after reboot, launch SUPERAntispyware again.[list]
    • Click Preferences, then click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    • Please copy and paste the Scan Log results in your next reply.
  • Click Close to exit the program.


SAS Portable
If you have a problem downloading, installing or getting SAS to run, try downloading and using the SUPERAntiSpyware Portable Scanner instead. Save the randomly named file (i.e. SAS_1710895.COM) to a usb drive or CD and transfer to the infected computer. Then double-click on it to launch and scan. The file is randomly named to help keep malware from blocking the scanner.


Now GMER

Quote

GMER does not work in 64bit Mode!!!!!!

Please download GMER from one of the following locations and save it to your desktop:
  • Main Mirror
    This version will download a randomly named file (Recommended)
  • Zipped Mirror
    This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.

  • Disconnect from the Internet and close all running programs.
  • Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.
  • Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.
  • Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.

    Posted Image

  • GMER will open to the Rootkit/Malware tab and perform an automatic Full Scan when first run. (do not use the computer while the scan is in progress)
  • If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.
  • Now click the Scan button. If you see a rootkit warning window, click OK.
  • When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.
  • Click the Copy button and paste the results into your next reply.
  • Exit GMER and be sure to re-enable your anti-virus, Firewall and any other security programs you had disabled.
-- If you encounter any problems, try running GMER in safe mode.
-- If GMER crashes or keeps resulting in a BSODs, uncheck Devices on the right side before scanning.


All scans above should be performed in regular boot mode, and if that is not possible then I will post instructions in a follow up reply on how to get into Safe Mode to perform the scans. Also all scans should be COMPLETE and not quick unless specifically instructed to do so.

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#11 User is offline   NottaTechie 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 06-December 11

Posted 11 December 2011 - 08:56 PM

SAS found stuff but i think most of the cookies were due to beef taco add-on so i deleted it and restarted firefox. did 2 more scans and they were both clean.

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 12/08/2011 at 08:15 AM

Application Version : 5.0.1136

Core Rules Database Version : 8027
Trace Rules Database Version: 5839

Scan type : Complete Scan
Total Scan Time : 00:25:42

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned : 589
Memory threats detected : 0
Registry items scanned : 72073
Registry threats detected : 0
File items scanned : 40244
File threats detected : 87

Adware.Tracking Cookie
cdn.media.abcfamily.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\LLDDNKC3 ]
ia.media-imdb.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\LLDDNKC3 ]
objects.tremormedia.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\LLDDNKC3 ]
secure-us.imrworldwide.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\LLDDNKC3 ]
.edge.ru4.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.247realmedia.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.realmedia.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.adinterax.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
rotator.adjuggler.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.ad.us-ec.adtechus.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.adserverec.adtechus.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.adserverwc.adtechus.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.glb.adtechus.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.pro-market.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.adrevolver.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.bluestreak.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
www.burstnet.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.casalemedia.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.chitika.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.clicktale.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
data.coremetrics.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.adcentriconline.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.loadxl.exelator.biz [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.loadxl.exelator.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.loadxl.exelator.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.eyewonder.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.a1.interclick.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.nextag.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.precisionclick.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.kanoodle.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.questionmarket.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.adviva.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.specificmedia.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.tacoda.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
www.tattomedia.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.trafficmp.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.tribalfusion.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.adlegend.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.webtrendslive.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.weborama.fr [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.ad.yieldmanager.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.beencounter.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.hitbox.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.legolas-media.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.qnsr.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.saymedia.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.server.cpmstar.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.traveladvertising.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.valueclick.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
ads.bridgetrack.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
ads.pointroll.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
assets.invitemedia.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
bluestreak.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
doubleclick.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
interclick.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
lulu.ru4.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
nextag.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
tracking.intermundomedia.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
tracking.quisma.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
tracking.reedge.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
tribalfusion.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
vitamine.networldmedia.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.adform.net [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.bt.ilsemedia.nl [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.adtech.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.atwola.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]
.ru4.com [ C:\USERS\TOSHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZPI5ZE94.DEFAULT\COOKIES.SQLITE ]

#12 User is offline   NottaTechie 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 06-December 11

Posted 11 December 2011 - 08:58 PM

then i ran gmer but all gmer let me scan was services, registry and files, with the c: drive selected and ads below that box selected too. every other option was grayed out/inactive... does this mean gmer was not working because it ran as 64-bit? thank you.

GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2011-12-11 18:28:42
Windows 6.1.7601 Service Pack 1
Running: 61j9wb5d.exe


---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\002258e33c73
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\002258e33c73 (not active ControlSet)

---- Files - GMER 1.0.15 ----

File C:\Users\toshi\AppData\Local\Temp\Temporary Internet Files\Content.IE5\1FK7I5CM\integrity-local[2].txt 40 bytes

---- EOF - GMER 1.0.15 ----

#13 User is offline   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,394
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 12 December 2011 - 12:03 PM

Please download and run TDSS Killer, and if it asks you to fix anything DO NOT FIX anything. Post the resulting log.

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#14 User is offline   NottaTechie 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 06-December 11

Posted 12 December 2011 - 05:32 PM

here it is, thank you.

15:30:41.0628 3020 TDSS rootkit removing tool 2.6.22.0 Dec 7 2011 13:21:06
15:30:41.0644 3020 ============================================================
15:30:41.0644 3020 Current date / time: 2011/12/12 15:30:41.0644
15:30:41.0644 3020 SystemInfo:
15:30:41.0644 3020
15:30:41.0644 3020 OS Version: 6.1.7601 ServicePack: 1.0
15:30:41.0644 3020 Product type: Workstation
15:30:41.0644 3020 ComputerName: TOSHI-PC
15:30:41.0644 3020 UserName: toshi
15:30:41.0644 3020 Windows directory: C:\windows
15:30:41.0644 3020 System windows directory: C:\windows
15:30:41.0644 3020 Running under WOW64
15:30:41.0644 3020 Processor architecture: Intel x64
15:30:41.0644 3020 Number of processors: 2
15:30:41.0644 3020 Page size: 0x1000
15:30:41.0644 3020 Boot type: Normal boot
15:30:41.0644 3020 ============================================================
15:30:42.0065 3020 Initialize success
15:30:45.0138 3188 ============================================================
15:30:45.0138 3188 Scan started
15:30:45.0138 3188 Mode: Manual;
15:30:45.0138 3188 ============================================================
15:30:46.0262 3188 1394ohci (a87d604aea360176311474c87a63bb88) C:\windows\system32\drivers\1394ohci.sys
15:30:46.0277 3188 1394ohci - ok
15:30:46.0496 3188 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\windows\system32\drivers\ACPI.sys
15:30:46.0496 3188 ACPI - ok
15:30:46.0698 3188 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\windows\system32\drivers\acpipmi.sys
15:30:46.0714 3188 AcpiPmi - ok
15:30:46.0917 3188 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\windows\system32\DRIVERS\adp94xx.sys
15:30:46.0948 3188 adp94xx - ok
15:30:47.0104 3188 adpahci (597f78224ee9224ea1a13d6350ced962) C:\windows\system32\DRIVERS\adpahci.sys
15:30:47.0120 3188 adpahci - ok
15:30:47.0307 3188 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\windows\system32\DRIVERS\adpu320.sys
15:30:47.0322 3188 adpu320 - ok
15:30:47.0478 3188 AFD (d5b031c308a409a0a576bff4cf083d30) C:\windows\system32\drivers\afd.sys
15:30:47.0525 3188 AFD - ok
15:30:47.0744 3188 AgereSoftModem (c98356d813b581e9c425b42a5d146ce0) C:\windows\system32\DRIVERS\agrsm64.sys
15:30:47.0759 3188 AgereSoftModem - ok
15:30:47.0915 3188 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\windows\system32\drivers\agp440.sys
15:30:47.0946 3188 agp440 - ok
15:30:48.0087 3188 aliide (5812713a477a3ad7363c7438ca2ee038) C:\windows\system32\drivers\aliide.sys
15:30:48.0102 3188 aliide - ok
15:30:48.0290 3188 amdide (1ff8b4431c353ce385c875f194924c0c) C:\windows\system32\drivers\amdide.sys
15:30:48.0305 3188 amdide - ok
15:30:48.0414 3188 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\windows\system32\DRIVERS\amdk8.sys
15:30:48.0430 3188 AmdK8 - ok
15:30:48.0461 3188 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\windows\system32\DRIVERS\amdppm.sys
15:30:48.0461 3188 AmdPPM - ok
15:30:48.0617 3188 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\windows\system32\drivers\amdsata.sys
15:30:48.0633 3188 amdsata - ok
15:30:48.0820 3188 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\windows\system32\DRIVERS\amdsbs.sys
15:30:48.0836 3188 amdsbs - ok
15:30:49.0038 3188 amdxata (540daf1cea6094886d72126fd7c33048) C:\windows\system32\drivers\amdxata.sys
15:30:49.0054 3188 amdxata - ok
15:30:49.0194 3188 AppID (89a69c3f2f319b43379399547526d952) C:\windows\system32\drivers\appid.sys
15:30:49.0226 3188 AppID - ok
15:30:49.0397 3188 arc (c484f8ceb1717c540242531db7845c4e) C:\windows\system32\DRIVERS\arc.sys
15:30:49.0397 3188 arc - ok
15:30:49.0553 3188 arcsas (019af6924aefe7839f61c830227fe79c) C:\windows\system32\DRIVERS\arcsas.sys
15:30:49.0569 3188 arcsas - ok
15:30:49.0678 3188 AsyncMac (769765ce2cc62867468cea93969b2242) C:\windows\system32\DRIVERS\asyncmac.sys
15:30:49.0678 3188 AsyncMac - ok
15:30:49.0865 3188 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\windows\system32\drivers\atapi.sys
15:30:49.0881 3188 atapi - ok
15:30:50.0130 3188 athr (e857eee6b92aaa473ebb3465add8f7e7) C:\windows\system32\DRIVERS\athrx.sys
15:30:50.0162 3188 athr - ok
15:30:50.0333 3188 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\windows\system32\DRIVERS\bxvbda.sys
15:30:50.0349 3188 b06bdrv - ok
15:30:50.0489 3188 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\windows\system32\DRIVERS\b57nd60a.sys
15:30:50.0505 3188 b57nd60a - ok
15:30:50.0645 3188 Beep (16a47ce2decc9b099349a5f840654746) C:\windows\system32\drivers\Beep.sys
15:30:50.0645 3188 Beep - ok
15:30:50.0848 3188 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\windows\system32\DRIVERS\blbdrive.sys
15:30:50.0864 3188 blbdrive - ok
15:30:50.0988 3188 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\windows\system32\DRIVERS\bowser.sys
15:30:51.0004 3188 bowser - ok
15:30:51.0129 3188 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\windows\system32\DRIVERS\BrFiltLo.sys
15:30:51.0144 3188 BrFiltLo - ok
15:30:51.0238 3188 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\windows\system32\DRIVERS\BrFiltUp.sys
15:30:51.0254 3188 BrFiltUp - ok
15:30:51.0378 3188 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\windows\System32\Drivers\Brserid.sys
15:30:51.0394 3188 Brserid - ok
15:30:51.0534 3188 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\windows\System32\Drivers\BrSerWdm.sys
15:30:51.0550 3188 BrSerWdm - ok
15:30:51.0659 3188 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\windows\System32\Drivers\BrUsbMdm.sys
15:30:51.0659 3188 BrUsbMdm - ok
15:30:51.0768 3188 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\windows\System32\Drivers\BrUsbSer.sys
15:30:51.0784 3188 BrUsbSer - ok
15:30:51.0909 3188 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\windows\system32\drivers\BthEnum.sys
15:30:51.0909 3188 BthEnum - ok
15:30:52.0158 3188 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\windows\system32\DRIVERS\bthmodem.sys
15:30:52.0174 3188 BTHMODEM - ok
15:30:52.0314 3188 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\windows\system32\DRIVERS\bthpan.sys
15:30:52.0330 3188 BthPan - ok
15:30:52.0502 3188 BTHPORT (64c198198501f7560ee41d8d1efa7952) C:\windows\System32\Drivers\BTHport.sys
15:30:52.0517 3188 BTHPORT - ok
15:30:52.0658 3188 BTHUSB (f188b7394d81010767b6df3178519a37) C:\windows\System32\Drivers\BTHUSB.sys
15:30:52.0658 3188 BTHUSB - ok
15:30:52.0798 3188 cdfs (b8bd2bb284668c84865658c77574381a) C:\windows\system32\DRIVERS\cdfs.sys
15:30:52.0798 3188 cdfs - ok
15:30:52.0970 3188 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\windows\system32\drivers\cdrom.sys
15:30:52.0970 3188 cdrom - ok
15:30:53.0110 3188 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\windows\system32\DRIVERS\circlass.sys
15:30:53.0126 3188 circlass - ok
15:30:53.0266 3188 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\windows\system32\CLFS.sys
15:30:53.0282 3188 CLFS - ok
15:30:53.0422 3188 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\windows\system32\DRIVERS\CmBatt.sys
15:30:53.0422 3188 CmBatt - ok
15:30:53.0484 3188 cmdide (e19d3f095812725d88f9001985b94edd) C:\windows\system32\drivers\cmdide.sys
15:30:53.0500 3188 cmdide - ok
15:30:53.0687 3188 CNG (d5fea92400f12412b3922087c09da6a5) C:\windows\system32\Drivers\cng.sys
15:30:53.0703 3188 CNG - ok
15:30:53.0828 3188 Compbatt (102de219c3f61415f964c88e9085ad14) C:\windows\system32\DRIVERS\compbatt.sys
15:30:53.0843 3188 Compbatt - ok
15:30:53.0984 3188 CompositeBus (03edb043586cceba243d689bdda370a8) C:\windows\system32\drivers\CompositeBus.sys
15:30:53.0999 3188 CompositeBus - ok
15:30:54.0140 3188 crcdisk (1c827878a998c18847245fe1f34ee597) C:\windows\system32\DRIVERS\crcdisk.sys
15:30:54.0155 3188 crcdisk - ok
15:30:54.0358 3188 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\windows\system32\Drivers\dfsc.sys
15:30:54.0374 3188 DfsC - ok
15:30:54.0514 3188 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\windows\system32\drivers\discache.sys
15:30:54.0514 3188 discache - ok
15:30:54.0639 3188 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\windows\system32\DRIVERS\disk.sys
15:30:54.0639 3188 Disk - ok
15:30:54.0779 3188 drmkaud (9b19f34400d24df84c858a421c205754) C:\windows\system32\drivers\drmkaud.sys
15:30:54.0795 3188 drmkaud - ok
15:30:55.0029 3188 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\windows\System32\drivers\dxgkrnl.sys
15:30:55.0060 3188 DXGKrnl - ok
15:30:55.0341 3188 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\windows\system32\DRIVERS\evbda.sys
15:30:55.0466 3188 ebdrv - ok
15:30:55.0684 3188 elxstor (0e5da5369a0fcaea12456dd852545184) C:\windows\system32\DRIVERS\elxstor.sys
15:30:55.0700 3188 elxstor - ok
15:30:55.0934 3188 ErrDev (34a3c54752046e79a126e15c51db409b) C:\windows\system32\drivers\errdev.sys
15:30:55.0949 3188 ErrDev - ok
15:30:56.0152 3188 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\windows\system32\drivers\exfat.sys
15:30:56.0183 3188 exfat - ok
15:30:56.0402 3188 fastfat (0adc83218b66a6db380c330836f3e36d) C:\windows\system32\drivers\fastfat.sys
15:30:56.0417 3188 fastfat - ok
15:30:56.0558 3188 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\windows\system32\DRIVERS\fdc.sys
15:30:56.0573 3188 fdc - ok
15:30:56.0714 3188 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\windows\system32\drivers\fileinfo.sys
15:30:56.0714 3188 FileInfo - ok
15:30:56.0870 3188 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\windows\system32\drivers\filetrace.sys
15:30:56.0885 3188 Filetrace - ok
15:30:56.0994 3188 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\windows\system32\DRIVERS\flpydisk.sys
15:30:56.0994 3188 flpydisk - ok
15:30:57.0197 3188 FltMgr (da6b67270fd9db3697b20fce94950741) C:\windows\system32\drivers\fltmgr.sys
15:30:57.0213 3188 FltMgr - ok
15:30:57.0353 3188 FsDepends (d43703496149971890703b4b1b723eac) C:\windows\system32\drivers\FsDepends.sys
15:30:57.0369 3188 FsDepends - ok
15:30:57.0494 3188 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\windows\system32\drivers\Fs_Rec.sys
15:30:57.0494 3188 Fs_Rec - ok
15:30:57.0681 3188 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\windows\system32\DRIVERS\fvevol.sys
15:30:57.0696 3188 fvevol - ok
15:30:57.0806 3188 FwLnk (60acb128e64c35c2b4e4aab1b0a5c293) C:\windows\system32\DRIVERS\FwLnk.sys
15:30:57.0806 3188 FwLnk - ok
15:30:58.0071 3188 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\windows\system32\DRIVERS\gagp30kx.sys
15:30:58.0071 3188 gagp30kx - ok
15:30:58.0320 3188 GEARAspiWDM - ok
15:30:58.0539 3188 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\windows\system32\drivers\hcw85cir.sys
15:30:58.0554 3188 hcw85cir - ok
15:30:58.0757 3188 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\windows\system32\drivers\HdAudio.sys
15:30:58.0788 3188 HdAudAddService - ok
15:30:58.0991 3188 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\windows\system32\drivers\HDAudBus.sys
15:30:59.0007 3188 HDAudBus - ok
15:30:59.0100 3188 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\windows\system32\DRIVERS\HidBatt.sys
15:30:59.0116 3188 HidBatt - ok
15:30:59.0272 3188 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\windows\system32\DRIVERS\hidbth.sys
15:30:59.0288 3188 HidBth - ok
15:30:59.0490 3188 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\windows\system32\DRIVERS\hidir.sys
15:30:59.0506 3188 HidIr - ok
15:30:59.0662 3188 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\windows\system32\drivers\hidusb.sys
15:30:59.0678 3188 HidUsb - ok
15:30:59.0834 3188 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\windows\system32\drivers\HpSAMD.sys
15:30:59.0834 3188 HpSAMD - ok
15:31:00.0021 3188 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\windows\system32\drivers\HTTP.sys
15:31:00.0036 3188 HTTP - ok
15:31:00.0239 3188 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\windows\system32\drivers\hwpolicy.sys
15:31:00.0255 3188 hwpolicy - ok
15:31:00.0395 3188 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\windows\system32\drivers\i8042prt.sys
15:31:00.0411 3188 i8042prt - ok
15:31:00.0520 3188 iaStor (bbb3b6df1abb0fe35802ede85cc1c011) C:\windows\system32\DRIVERS\iaStor.sys
15:31:00.0536 3188 iaStor - ok
15:31:00.0707 3188 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\windows\system32\drivers\iaStorV.sys
15:31:00.0723 3188 iaStorV - ok
15:31:01.0316 3188 igfx (a87261ef1546325b559374f5689cf5bc) C:\windows\system32\DRIVERS\igdkmd64.sys
15:31:01.0581 3188 igfx - ok
15:31:01.0706 3188 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\windows\system32\DRIVERS\iirsp.sys
15:31:01.0721 3188 iirsp - ok
15:31:02.0049 3188 IntcAzAudAddService (0c3cf4b3bae28e121a1689e3538f8712) C:\windows\system32\drivers\RTKVHD64.sys
15:31:02.0111 3188 IntcAzAudAddService - ok
15:31:02.0283 3188 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\windows\system32\drivers\intelide.sys
15:31:02.0283 3188 intelide - ok
15:31:02.0392 3188 intelppm (ada036632c664caa754079041cf1f8c1) C:\windows\system32\DRIVERS\intelppm.sys
15:31:02.0392 3188 intelppm - ok
15:31:02.0517 3188 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\windows\system32\DRIVERS\ipfltdrv.sys
15:31:02.0517 3188 IpFilterDriver - ok
15:31:02.0564 3188 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\windows\system32\drivers\IPMIDrv.sys
15:31:02.0579 3188 IPMIDRV - ok
15:31:02.0704 3188 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\windows\system32\drivers\ipnat.sys
15:31:02.0704 3188 IPNAT - ok
15:31:02.0813 3188 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\windows\system32\drivers\irenum.sys
15:31:02.0829 3188 IRENUM - ok
15:31:02.0969 3188 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\windows\system32\drivers\isapnp.sys
15:31:02.0969 3188 isapnp - ok
15:31:03.0094 3188 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\windows\system32\drivers\msiscsi.sys
15:31:03.0094 3188 iScsiPrt - ok
15:31:03.0234 3188 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\windows\system32\drivers\kbdclass.sys
15:31:03.0250 3188 kbdclass - ok
15:31:03.0390 3188 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\windows\system32\drivers\kbdhid.sys
15:31:03.0390 3188 kbdhid - ok
15:31:03.0515 3188 KSecDD (ccd53b5bd33ce0c889e830d839c8b66e) C:\windows\system32\Drivers\ksecdd.sys
15:31:03.0515 3188 KSecDD - ok
15:31:03.0656 3188 KSecPkg (9ff918a261752c12639e8ad4208d2c2f) C:\windows\system32\Drivers\ksecpkg.sys
15:31:03.0656 3188 KSecPkg - ok
15:31:03.0780 3188 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\windows\system32\drivers\ksthunk.sys
15:31:03.0780 3188 ksthunk - ok
15:31:03.0921 3188 lltdio (1538831cf8ad2979a04c423779465827) C:\windows\system32\DRIVERS\lltdio.sys
15:31:03.0921 3188 lltdio - ok
15:31:04.0046 3188 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\windows\system32\DRIVERS\lsi_fc.sys
15:31:04.0046 3188 LSI_FC - ok
15:31:04.0170 3188 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\windows\system32\DRIVERS\lsi_sas.sys
15:31:04.0170 3188 LSI_SAS - ok
15:31:04.0280 3188 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\windows\system32\DRIVERS\lsi_sas2.sys
15:31:04.0295 3188 LSI_SAS2 - ok
15:31:04.0404 3188 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\windows\system32\DRIVERS\lsi_scsi.sys
15:31:04.0404 3188 LSI_SCSI - ok
15:31:04.0514 3188 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\windows\system32\drivers\luafv.sys
15:31:04.0514 3188 luafv - ok
15:31:04.0623 3188 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\windows\system32\DRIVERS\megasas.sys
15:31:04.0638 3188 megasas - ok
15:31:04.0748 3188 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\windows\system32\DRIVERS\MegaSR.sys
15:31:04.0748 3188 MegaSR - ok
15:31:04.0872 3188 Modem (800ba92f7010378b09f9ed9270f07137) C:\windows\system32\drivers\modem.sys
15:31:04.0872 3188 Modem - ok
15:31:04.0982 3188 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\windows\system32\DRIVERS\monitor.sys
15:31:04.0997 3188 monitor - ok
15:31:05.0122 3188 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\windows\system32\drivers\mouclass.sys
15:31:05.0122 3188 mouclass - ok
15:31:05.0216 3188 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\windows\system32\DRIVERS\mouhid.sys
15:31:05.0216 3188 mouhid - ok
15:31:05.0356 3188 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\windows\system32\drivers\mountmgr.sys
15:31:05.0356 3188 mountmgr - ok
15:31:05.0465 3188 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\windows\system32\drivers\mpio.sys
15:31:05.0465 3188 mpio - ok
15:31:05.0574 3188 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\windows\system32\drivers\mpsdrv.sys
15:31:05.0574 3188 mpsdrv - ok
15:31:05.0684 3188 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\windows\system32\drivers\mrxdav.sys
15:31:05.0699 3188 MRxDAV - ok
15:31:05.0824 3188 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\windows\system32\DRIVERS\mrxsmb.sys
15:31:05.0824 3188 mrxsmb - ok
15:31:05.0949 3188 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\windows\system32\DRIVERS\mrxsmb10.sys
15:31:05.0949 3188 mrxsmb10 - ok
15:31:06.0089 3188 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\windows\system32\DRIVERS\mrxsmb20.sys
15:31:06.0089 3188 mrxsmb20 - ok
15:31:06.0198 3188 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\windows\system32\drivers\msahci.sys
15:31:06.0198 3188 msahci - ok
15:31:06.0276 3188 msdsm (db801a638d011b9633829eb6f663c900) C:\windows\system32\drivers\msdsm.sys
15:31:06.0276 3188 msdsm - ok
15:31:06.0386 3188 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\windows\system32\drivers\Msfs.sys
15:31:06.0386 3188 Msfs - ok
15:31:06.0464 3188 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\windows\System32\drivers\mshidkmdf.sys
15:31:06.0479 3188 mshidkmdf - ok
15:31:06.0526 3188 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\windows\system32\drivers\msisadrv.sys
15:31:06.0526 3188 msisadrv - ok
15:31:06.0651 3188 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\windows\system32\drivers\MSKSSRV.sys
15:31:06.0651 3188 MSKSSRV - ok
15:31:06.0760 3188 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\windows\system32\drivers\MSPCLOCK.sys
15:31:06.0760 3188 MSPCLOCK - ok
15:31:06.0854 3188 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\windows\system32\drivers\MSPQM.sys
15:31:06.0854 3188 MSPQM - ok
15:31:06.0994 3188 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\windows\system32\drivers\MsRPC.sys
15:31:06.0994 3188 MsRPC - ok
15:31:07.0119 3188 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\windows\system32\drivers\mssmbios.sys
15:31:07.0119 3188 mssmbios - ok
15:31:07.0244 3188 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\windows\system32\drivers\MSTEE.sys
15:31:07.0244 3188 MSTEE - ok
15:31:07.0322 3188 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\windows\system32\DRIVERS\MTConfig.sys
15:31:07.0322 3188 MTConfig - ok
15:31:07.0384 3188 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\windows\system32\Drivers\mup.sys
15:31:07.0384 3188 Mup - ok
15:31:07.0478 3188 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\windows\system32\DRIVERS\nwifi.sys
15:31:07.0478 3188 NativeWifiP - ok
15:31:07.0618 3188 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\windows\system32\drivers\ndis.sys
15:31:07.0634 3188 NDIS - ok
15:31:07.0727 3188 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\windows\system32\DRIVERS\ndiscap.sys
15:31:07.0727 3188 NdisCap - ok
15:31:07.0821 3188 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\windows\system32\DRIVERS\ndistapi.sys
15:31:07.0821 3188 NdisTapi - ok
15:31:07.0961 3188 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\windows\system32\DRIVERS\ndisuio.sys
15:31:07.0961 3188 Ndisuio - ok
15:31:08.0102 3188 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\windows\system32\DRIVERS\ndiswan.sys
15:31:08.0102 3188 NdisWan - ok
15:31:08.0211 3188 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\windows\system32\drivers\NDProxy.sys
15:31:08.0211 3188 NDProxy - ok
15:31:08.0304 3188 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\windows\system32\DRIVERS\netbios.sys
15:31:08.0304 3188 NetBIOS - ok
15:31:08.0445 3188 NetBT (09594d1089c523423b32a4229263f068) C:\windows\system32\DRIVERS\netbt.sys
15:31:08.0445 3188 NetBT - ok
15:31:08.0570 3188 nfrd960 (77889813be4d166cdab78ddba990da92) C:\windows\system32\DRIVERS\nfrd960.sys
15:31:08.0570 3188 nfrd960 - ok
15:31:08.0694 3188 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\windows\system32\drivers\Npfs.sys
15:31:08.0694 3188 Npfs - ok
15:31:08.0788 3188 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\windows\system32\drivers\nsiproxy.sys
15:31:08.0835 3188 nsiproxy - ok
15:31:09.0287 3188 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\windows\system32\drivers\Ntfs.sys
15:31:09.0396 3188 Ntfs - ok
15:31:09.0506 3188 Null (9899284589f75fa8724ff3d16aed75c1) C:\windows\system32\drivers\Null.sys
15:31:09.0521 3188 Null - ok
15:31:09.0646 3188 NVHDA (ad37248bd442d41c9a896e53eb8a85ee) C:\windows\system32\drivers\nvhda64v.sys
15:31:09.0677 3188 NVHDA - ok
15:31:10.0582 3188 nvlddmkm (7a0fa5fe8b2904cdf3e375f45c23a858) C:\windows\system32\DRIVERS\nvlddmkm.sys
15:31:10.0863 3188 nvlddmkm - ok
15:31:11.0081 3188 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\windows\system32\drivers\nvraid.sys
15:31:11.0159 3188 nvraid - ok
15:31:11.0331 3188 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\windows\system32\drivers\nvstor.sys
15:31:11.0362 3188 nvstor - ok
15:31:11.0549 3188 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\windows\system32\drivers\nv_agp.sys
15:31:11.0565 3188 nv_agp - ok
15:31:11.0814 3188 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\windows\system32\drivers\ohci1394.sys
15:31:11.0830 3188 ohci1394 - ok
15:31:11.0955 3188 Parport (0086431c29c35be1dbc43f52cc273887) C:\windows\system32\DRIVERS\parport.sys
15:31:11.0955 3188 Parport - ok
15:31:12.0111 3188 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\windows\system32\drivers\partmgr.sys
15:31:12.0126 3188 partmgr - ok
15:31:12.0298 3188 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\windows\system32\drivers\pci.sys
15:31:12.0314 3188 pci - ok
15:31:12.0454 3188 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\windows\system32\drivers\pciide.sys
15:31:12.0454 3188 pciide - ok
15:31:12.0579 3188 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\windows\system32\DRIVERS\pcmcia.sys
15:31:12.0579 3188 pcmcia - ok
15:31:12.0813 3188 PCTFW-PacketFilter (725c8d3e1c7be65c0918a9ebb0249081) C:\windows\system32\drivers\pctNdis-PacketFilter64.sys
15:31:12.0813 3188 PCTFW-PacketFilter - ok
15:31:12.0969 3188 pctgntdi (cdf6bb7848ffd3c5c41860138ed7ce0f) C:\windows\system32\drivers\pctgntdi64.sys
15:31:12.0969 3188 pctgntdi - ok
15:31:13.0125 3188 pctNDIS (8bc4989fc22515fc95e85f51294c4740) C:\windows\system32\DRIVERS\pctNdis64.sys
15:31:13.0125 3188 pctNDIS - ok
15:31:13.0265 3188 pctplfw (1b71bb46bd125144147727eb78e353fb) C:\Windows\System32\drivers\pctplfw64.sys
15:31:13.0265 3188 pctplfw - ok
15:31:13.0359 3188 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\windows\system32\drivers\pcw.sys
15:31:13.0359 3188 pcw - ok
15:31:13.0468 3188 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\windows\system32\drivers\peauth.sys
15:31:13.0468 3188 PEAUTH - ok
15:31:13.0608 3188 PGEffect (663962900e7fea522126ba287715bb4a) C:\windows\system32\DRIVERS\pgeffect.sys
15:31:13.0608 3188 PGEffect - ok
15:31:13.0796 3188 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\windows\system32\DRIVERS\raspptp.sys
15:31:13.0796 3188 PptpMiniport - ok
15:31:13.0889 3188 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\windows\system32\DRIVERS\processr.sys
15:31:13.0889 3188 Processor - ok
15:31:13.0967 3188 Psched (0557cf5a2556bd58e26384169d72438d) C:\windows\system32\DRIVERS\pacer.sys
15:31:13.0983 3188 Psched - ok
15:31:14.0123 3188 PSI (fb46e9a827a8799ebd7bfa9128c91f37) C:\windows\system32\DRIVERS\psi_mf.sys
15:31:14.0123 3188 PSI - ok
15:31:14.0248 3188 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\windows\system32\DRIVERS\ql2300.sys
15:31:14.0279 3188 ql2300 - ok
15:31:14.0373 3188 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\windows\system32\DRIVERS\ql40xx.sys
15:31:14.0388 3188 ql40xx - ok
15:31:14.0482 3188 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\windows\system32\drivers\qwavedrv.sys
15:31:14.0482 3188 QWAVEdrv - ok
15:31:14.0576 3188 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\windows\system32\DRIVERS\rasacd.sys
15:31:14.0576 3188 RasAcd - ok
15:31:14.0685 3188 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\windows\system32\DRIVERS\AgileVpn.sys
15:31:14.0685 3188 RasAgileVpn - ok
15:31:14.0919 3188 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\windows\system32\DRIVERS\rasl2tp.sys
15:31:14.0950 3188 Rasl2tp - ok
15:31:15.0075 3188 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\windows\system32\DRIVERS\raspppoe.sys
15:31:15.0090 3188 RasPppoe - ok
15:31:15.0184 3188 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\windows\system32\DRIVERS\rassstp.sys
15:31:15.0200 3188 RasSstp - ok
15:31:15.0418 3188 rdbss (77f665941019a1594d887a74f301fa2f) C:\windows\system32\DRIVERS\rdbss.sys
15:31:15.0496 3188 rdbss - ok
15:31:15.0621 3188 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\windows\system32\DRIVERS\rdpbus.sys
15:31:15.0636 3188 rdpbus - ok
15:31:15.0792 3188 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\windows\system32\DRIVERS\RDPCDD.sys
15:31:15.0808 3188 RDPCDD - ok
15:31:15.0964 3188 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\windows\system32\drivers\rdpencdd.sys
15:31:15.0980 3188 RDPENCDD - ok
15:31:16.0089 3188 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\windows\system32\drivers\rdprefmp.sys
15:31:16.0104 3188 RDPREFMP - ok
15:31:16.0260 3188 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\windows\system32\drivers\RDPWD.sys
15:31:16.0276 3188 RDPWD - ok
15:31:16.0416 3188 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\windows\system32\drivers\rdyboost.sys
15:31:16.0432 3188 rdyboost - ok
15:31:16.0541 3188 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\windows\system32\DRIVERS\rfcomm.sys
15:31:16.0541 3188 RFCOMM - ok
15:31:16.0666 3188 rimspci (e20b1907fc72a3664ece21e3c20fc63d) C:\windows\system32\DRIVERS\rimspe64.sys
15:31:16.0666 3188 rimspci - ok
15:31:16.0791 3188 risdpcie (7dda2e5cf452dad24b1be704225c18ee) C:\windows\system32\DRIVERS\risdpe64.sys
15:31:16.0807 3188 risdpcie - ok
15:31:16.0978 3188 rixdpcie (6a1cd4674505e6791390a1ab71da1fbe) C:\windows\system32\DRIVERS\rixdpe64.sys
15:31:16.0994 3188 rixdpcie - ok
15:31:17.0119 3188 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\windows\system32\DRIVERS\rspndr.sys
15:31:17.0119 3188 rspndr - ok
15:31:17.0290 3188 RTL8167 (ee082e06a82ff630351d1e0ebbd3d8d0) C:\windows\system32\DRIVERS\Rt64win7.sys
15:31:17.0306 3188 RTL8167 - ok
15:31:17.0524 3188 rtl8192se (7475548b0ba58eba4d12414fc9e9dfe6) C:\windows\system32\DRIVERS\rtl8192se.sys
15:31:17.0540 3188 rtl8192se - ok
15:31:17.0665 3188 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
15:31:17.0680 3188 SASDIFSV - ok
15:31:17.0805 3188 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
15:31:17.0805 3188 SASKUTIL - ok
15:31:17.0945 3188 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\windows\system32\drivers\sbp2port.sys
15:31:17.0977 3188 sbp2port - ok
15:31:18.0148 3188 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\windows\system32\DRIVERS\scfilter.sys
15:31:18.0179 3188 scfilter - ok
15:31:18.0320 3188 sdbus (111e0ebc0ad79cb0fa014b907b231cf0) C:\windows\system32\drivers\sdbus.sys
15:31:18.0367 3188 sdbus - ok
15:31:18.0554 3188 SDHookDriver (16080b87c1992415be20a83fe8da1b14) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHookDrv64.sys
15:31:18.0569 3188 SDHookDriver - ok
15:31:18.0772 3188 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\windows\system32\drivers\secdrv.sys
15:31:18.0788 3188 secdrv - ok
15:31:18.0944 3188 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\windows\system32\DRIVERS\serenum.sys
15:31:18.0959 3188 Serenum - ok
15:31:19.0053 3188 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\windows\system32\DRIVERS\serial.sys
15:31:19.0053 3188 Serial - ok
15:31:19.0240 3188 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\windows\system32\DRIVERS\sermouse.sys
15:31:19.0271 3188 sermouse - ok
15:31:19.0568 3188 sffdisk (a554811bcd09279536440c964ae35bbf) C:\windows\system32\drivers\sffdisk.sys
15:31:19.0630 3188 sffdisk - ok
15:31:19.0771 3188 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\windows\system32\drivers\sffp_mmc.sys
15:31:19.0786 3188 sffp_mmc - ok
15:31:19.0958 3188 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\windows\system32\drivers\sffp_sd.sys
15:31:19.0973 3188 sffp_sd - ok
15:31:20.0067 3188 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\windows\system32\DRIVERS\sfloppy.sys
15:31:20.0067 3188 sfloppy - ok
15:31:20.0239 3188 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\windows\system32\DRIVERS\SiSRaid2.sys
15:31:20.0254 3188 SiSRaid2 - ok
15:31:20.0348 3188 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\windows\system32\DRIVERS\sisraid4.sys
15:31:20.0363 3188 SiSRaid4 - ok
15:31:20.0473 3188 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\windows\system32\DRIVERS\smb.sys
15:31:20.0488 3188 Smb - ok
15:31:20.0582 3188 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\windows\system32\drivers\spldr.sys
15:31:20.0582 3188 spldr - ok
15:31:20.0722 3188 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\windows\system32\DRIVERS\srv.sys
15:31:20.0738 3188 srv - ok
15:31:20.0878 3188 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\windows\system32\DRIVERS\srv2.sys
15:31:20.0894 3188 srv2 - ok
15:31:21.0050 3188 srvnet (27e461f0be5bff5fc737328f749538c3) C:\windows\system32\DRIVERS\srvnet.sys
15:31:21.0081 3188 srvnet - ok
15:31:21.0299 3188 StarOpen - ok
15:31:21.0471 3188 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\windows\system32\DRIVERS\stexstor.sys
15:31:21.0487 3188 stexstor - ok
15:31:21.0705 3188 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\windows\system32\drivers\swenum.sys
15:31:21.0721 3188 swenum - ok
15:31:21.0908 3188 SynTP (be7311da9d6833fa69ed04b744a1c8f8) C:\windows\system32\DRIVERS\SynTP.sys
15:31:21.0939 3188 SynTP - ok
15:31:22.0282 3188 Tcpip (fc62769e7bff2896035aeed399108162) C:\windows\system32\drivers\tcpip.sys
15:31:22.0345 3188 Tcpip - ok
15:31:22.0688 3188 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\windows\system32\DRIVERS\tcpip.sys
15:31:22.0703 3188 TCPIP6 - ok
15:31:22.0984 3188 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\windows\system32\drivers\tcpipreg.sys
15:31:23.0000 3188 tcpipreg - ok
15:31:23.0187 3188 tdcmdpst (fd542b661bd22fa69ca789ad0ac58c29) C:\windows\system32\DRIVERS\tdcmdpst.sys
15:31:23.0187 3188 tdcmdpst - ok
15:31:23.0374 3188 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\windows\system32\drivers\tdpipe.sys
15:31:23.0390 3188 TDPIPE - ok
15:31:23.0530 3188 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\windows\system32\drivers\tdtcp.sys
15:31:23.0546 3188 TDTCP - ok
15:31:23.0749 3188 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\windows\system32\DRIVERS\tdx.sys
15:31:23.0764 3188 tdx - ok
15:31:23.0920 3188 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\windows\system32\drivers\termdd.sys
15:31:23.0951 3188 TermDD - ok
15:31:24.0076 3188 Thpdrv (c013f6acaa9761f571bd28dada7c157d) C:\windows\system32\DRIVERS\thpdrv.sys
15:31:24.0092 3188 Thpdrv - ok
15:31:24.0217 3188 Thpevm (b4e609047434ed948af7bdef2fa66e38) C:\windows\system32\DRIVERS\Thpevm.SYS
15:31:24.0232 3188 Thpevm - ok
15:31:24.0544 3188 tos_sps64 (09ff7b0b1b5c3d225495cb6f5a9b39f8) C:\windows\system32\DRIVERS\tos_sps64.sys
15:31:24.0591 3188 tos_sps64 - ok
15:31:24.0825 3188 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\windows\system32\DRIVERS\tssecsrv.sys
15:31:24.0856 3188 tssecsrv - ok
15:31:25.0106 3188 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\windows\system32\drivers\tsusbflt.sys
15:31:25.0137 3188 TsUsbFlt - ok
15:31:25.0262 3188 tunnel (3566a8daafa27af944f5d705eaa64894) C:\windows\system32\DRIVERS\tunnel.sys
15:31:25.0277 3188 tunnel - ok
15:31:25.0511 3188 TVALZ (550b567f9364d8f7684c3fb3ea665a72) C:\windows\system32\DRIVERS\TVALZ_O.SYS
15:31:25.0543 3188 TVALZ - ok
15:31:25.0652 3188 TVALZFL (9c7191f4b2e49bff47a6c1144b5923fa) C:\windows\system32\DRIVERS\TVALZFL.sys
15:31:25.0667 3188 TVALZFL - ok
15:31:25.0714 3188 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\windows\system32\DRIVERS\uagp35.sys
15:31:25.0714 3188 uagp35 - ok
15:31:25.0917 3188 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\windows\system32\DRIVERS\udfs.sys
15:31:25.0933 3188 udfs - ok
15:31:26.0167 3188 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\windows\system32\drivers\uliagpkx.sys
15:31:26.0198 3188 uliagpkx - ok
15:31:26.0323 3188 umbus (dc54a574663a895c8763af0fa1ff7561) C:\windows\system32\drivers\umbus.sys
15:31:26.0323 3188 umbus - ok
15:31:26.0416 3188 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\windows\system32\DRIVERS\umpass.sys
15:31:26.0432 3188 UmPass - ok
15:31:26.0619 3188 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\windows\system32\DRIVERS\usbccgp.sys
15:31:26.0619 3188 usbccgp - ok
15:31:26.0853 3188 usbcir (af0892a803fdda7492f595368e3b68e7) C:\windows\system32\drivers\usbcir.sys
15:31:26.0884 3188 usbcir - ok
15:31:26.0993 3188 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\windows\system32\DRIVERS\usbehci.sys
15:31:27.0009 3188 usbehci - ok
15:31:27.0196 3188 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\windows\system32\DRIVERS\usbhub.sys
15:31:27.0212 3188 usbhub - ok
15:31:27.0321 3188 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\windows\system32\DRIVERS\usbohci.sys
15:31:27.0337 3188 usbohci - ok
15:31:27.0446 3188 usbprint (73188f58fb384e75c4063d29413cee3d) C:\windows\system32\DRIVERS\usbprint.sys
15:31:27.0446 3188 usbprint - ok
15:31:27.0586 3188 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\windows\system32\DRIVERS\usbscan.sys
15:31:27.0602 3188 usbscan - ok
15:31:27.0758 3188 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\windows\system32\DRIVERS\USBSTOR.SYS
15:31:27.0773 3188 USBSTOR - ok
15:31:27.0898 3188 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\windows\system32\DRIVERS\usbuhci.sys
15:31:27.0914 3188 usbuhci - ok
15:31:28.0054 3188 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\windows\System32\Drivers\usbvideo.sys
15:31:28.0054 3188 usbvideo - ok
15:31:28.0195 3188 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\windows\system32\drivers\vdrvroot.sys
15:31:28.0210 3188 vdrvroot - ok
15:31:28.0366 3188 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\windows\system32\DRIVERS\vgapnp.sys
15:31:28.0382 3188 vga - ok
15:31:28.0460 3188 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\windows\System32\drivers\vga.sys
15:31:28.0475 3188 VgaSave - ok
15:31:28.0663 3188 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\windows\system32\drivers\vhdmp.sys
15:31:28.0663 3188 vhdmp - ok
15:31:28.0803 3188 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\windows\system32\drivers\viaide.sys
15:31:28.0834 3188 viaide - ok
15:31:29.0006 3188 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\windows\system32\drivers\volmgr.sys
15:31:29.0021 3188 volmgr - ok
15:31:29.0224 3188 volmgrx (a255814907c89be58b79ef2f189b843b) C:\windows\system32\drivers\volmgrx.sys
15:31:29.0240 3188 volmgrx - ok
15:31:29.0349 3188 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\windows\system32\drivers\volsnap.sys
15:31:29.0365 3188 volsnap - ok
15:31:29.0489 3188 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\windows\system32\DRIVERS\vsmraid.sys
15:31:29.0489 3188 vsmraid - ok
15:31:29.0521 3188 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\windows\system32\DRIVERS\vwifibus.sys
15:31:29.0521 3188 vwifibus - ok
15:31:29.0645 3188 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\windows\system32\DRIVERS\vwififlt.sys
15:31:29.0645 3188 vwififlt - ok
15:31:29.0801 3188 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\windows\system32\DRIVERS\wacompen.sys
15:31:29.0817 3188 WacomPen - ok
15:31:29.0957 3188 WANARP (356afd78a6ed4457169241ac3965230c) C:\windows\system32\DRIVERS\wanarp.sys
15:31:29.0973 3188 WANARP - ok
15:31:30.0004 3188 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\windows\system32\DRIVERS\wanarp.sys
15:31:30.0004 3188 Wanarpv6 - ok
15:31:30.0223 3188 Wd (72889e16ff12ba0f235467d6091b17dc) C:\windows\system32\DRIVERS\wd.sys
15:31:30.0238 3188 Wd - ok
15:31:30.0425 3188 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\windows\system32\drivers\Wdf01000.sys
15:31:30.0472 3188 Wdf01000 - ok
15:31:30.0644 3188 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\windows\system32\DRIVERS\wfplwf.sys
15:31:30.0675 3188 WfpLwf - ok
15:31:30.0862 3188 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\windows\system32\drivers\wimmount.sys
15:31:30.0878 3188 WIMMount - ok
15:31:31.0174 3188 WinUsb (fe88b288356e7b47b74b13372add906d) C:\windows\system32\DRIVERS\WinUsb.sys
15:31:31.0205 3188 WinUsb - ok
15:31:31.0393 3188 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\windows\system32\drivers\wmiacpi.sys
15:31:31.0408 3188 WmiAcpi - ok
15:31:31.0580 3188 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\windows\system32\drivers\ws2ifsl.sys
15:31:31.0595 3188 ws2ifsl - ok
15:31:31.0767 3188 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\windows\system32\drivers\WudfPf.sys
15:31:31.0783 3188 WudfPf - ok
15:31:31.0923 3188 WUDFRd (cf8d590be3373029d57af80914190682) C:\windows\system32\DRIVERS\WUDFRd.sys
15:31:31.0923 3188 WUDFRd - ok
15:31:32.0001 3188 MBR (0x1B8) (5b5e648d12fcadc244c1ec30318e1eb9) \Device\Harddisk0\DR0
15:31:32.0017 3188 \Device\Harddisk0\DR0 - ok
15:31:32.0032 3188 Boot (0x1200) (8344659a01d21225f2797d0731da4cb9) \Device\Harddisk0\DR0\Partition0
15:31:32.0032 3188 \Device\Harddisk0\DR0\Partition0 - ok
15:31:32.0032 3188 ============================================================
15:31:32.0032 3188 Scan finished
15:31:32.0032 3188 ============================================================
15:31:32.0063 1640 Detected object count: 0
15:31:32.0063 1640 Actual detected object count: 0

#15 User is offline   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,394
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 13 December 2011 - 09:31 PM

Everything checks out, what symptoms if any are you still experiencing?

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

Share this topic:


  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users