Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Lost Icons, please help


  • Please log in to reply
4 replies to this topic

#1 MaseWiN

MaseWiN

  • Members
  • 60 posts
  • OFFLINE
  •  
  • Local time:02:43 PM

Posted 04 November 2011 - 08:00 PM

Hello everyone,

I am really struggling with the damage this virus has caused. I normally am able to remove and fix all problems, just by reading the forums/google but I am really stumped and would greatly appreciate some help. I had the virus that says your hardrive/ram etc etc is damaged. I used malware bytes and it seems to have removed everything. I even ran rkill, when the notepad popped up there was one item. I used malwarebytes again and found nothing new. My entire desktop backround is black and all but 2 icons are missing. So far i've managed to bring back the desktop backround image but reselecting it from control panel. I ran unhide.exe and it did nothing. I found all of the desktop icons (or I think its all of them, I'm worried some could be missing and get deleted). I manually unhid as many files as I could find that the virus had hidden, including moving most of the files in the several different temporary folders the virus had moved them to. I do not know if I have missed any and I am worried I could lose some of my files. Also, my start menu was blank. I found some of the tabs and moved them back there. The shortcuts next to the start menu were missing too, but as with those I have found some of them and moved them back there. My other major concern is that, when opening the start menu, on the right the only items that are there are, search, recent items, and Computer. Control panel and the others are missing and I have no idea how to recover them. I am running Windows Vista.

Any help would be greatly appreciated,
Thank You,
Mase.

BC AdBot (Login to Remove)

 


#2 MaseWiN

MaseWiN
  • Topic Starter

  • Members
  • 60 posts
  • OFFLINE
  •  
  • Local time:02:43 PM

Posted 04 November 2011 - 08:24 PM

Sorry one thing I missed, now when I run malwarebytes full scan, at about the 1:30 mark, it skips from 3000 items scanned to abotu 42000. Any reason it's doing this?

#3 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,338 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:03:43 PM

Posted 04 November 2011 - 10:14 PM

Hello, DO NOT run a Temp file or Registry cleaner..

This infection family will also hide all the files on your computer from being seen. To make your files visible again, please download the following program to your desktop:

Unhide.exe

Once the program has been downloaded, double-click on the Unhide.exe icon on your desktop and allow the program to run. This program will remove the +H, or hidden, attribute from all the files on your hard drives. If there are any files that were purposely hidden by you, you will need to hide them again after this tool is run.



Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!
Be sure to download TDSSKiller.exe (2.6.11.0) from Kaspersky's website and not TDSSKiller.zip which appears to be an older version 2.3.2.2 of the tool.
  • Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
    Vista/Windows 7 users right-click and select Run As Administrator.
  • If TDSSKiller does not run, try renaming it.
  • To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.
  • Click the Start Scan button.
  • Do not use the computer during the scan
  • If the scan completes with nothing found, click Close to exit.
  • If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
  • Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
  • A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).
  • Copy and paste the contents of that file in your next reply.


If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to these[/color] instructions. In some cases it may be necessary to redownload TDSSKiller and randomly rename it before downloading and saving to the computer.

Rerun MBAM (MalwareBytes) like this:

Open MBAM in normal mode and click Update tab, select Check for Updates,when done
click Scanner tab,select Quick scan and scan (normal mode).
After scan click Remove Selected, [color="#8B0000"]Post new scan log
and Reboot into normal mode.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#4 MaseWiN

MaseWiN
  • Topic Starter

  • Members
  • 60 posts
  • OFFLINE
  •  
  • Local time:02:43 PM

Posted 05 November 2011 - 04:04 AM

Thank you for replying,

As I said above, I tried running unhide.exe and no success with it. I read through some other parts of this forum and discovered how to manually unhide most of the files. I restored my backround manually, and brought back the start menu icons back manually as well. This time when I used unhide, it worked. Although I did not notice anything different or new (it seems I had unhid all of the files) it did say it had completed.

At this point I ran rkill and it found nothing, this is the log.

04:44:17.0432 4836 TDSS rootkit removing tool 2.6.15.0 Nov 3 2011 17:15:49
04:44:17.0760 4836 ============================================================
04:44:17.0760 4836 Current date / time: 2011/11/03 04:44:17.0760
04:44:17.0760 4836 SystemInfo:
04:44:17.0760 4836
04:44:17.0760 4836 OS Version: 6.0.6000 ServicePack: 0.0
04:44:17.0760 4836 Product type: Workstation
04:44:17.0760 4836 ComputerName: MASE-PC
04:44:17.0760 4836 UserName: Mase
04:44:17.0760 4836 Windows directory: C:\Windows
04:44:17.0760 4836 System windows directory: C:\Windows
04:44:17.0760 4836 Processor architecture: Intel x86
04:44:17.0760 4836 Number of processors: 2
04:44:17.0760 4836 Page size: 0x1000
04:44:17.0760 4836 Boot type: Normal boot
04:44:17.0760 4836 ============================================================
04:44:19.0024 4836 Initialize success
04:44:22.0612 3448 ============================================================
04:44:22.0612 3448 Scan started
04:44:22.0612 3448 Mode: Manual;
04:44:22.0612 3448 ============================================================
04:44:23.0423 3448 ACPI (192bdbd1540645c4a2aa69f24cce197f) C:\Windows\system32\drivers\acpi.sys
04:44:23.0423 3448 ACPI - ok
04:44:23.0485 3448 adp94xx (2edc5bbac6c651ece337bde8ed97c9fb) C:\Windows\system32\drivers\adp94xx.sys
04:44:23.0485 3448 adp94xx - ok
04:44:23.0532 3448 adpahci (b84088ca3cdca97da44a984c6ce1ccad) C:\Windows\system32\drivers\adpahci.sys
04:44:23.0532 3448 adpahci - ok
04:44:23.0563 3448 adpu160m (7880c67bccc27c86fd05aa2afb5ea469) C:\Windows\system32\drivers\adpu160m.sys
04:44:23.0579 3448 adpu160m - ok
04:44:23.0610 3448 adpu320 (9ae713f8e30efc2abccd84904333df4d) C:\Windows\system32\drivers\adpu320.sys
04:44:23.0610 3448 adpu320 - ok
04:44:23.0688 3448 AFD (5d24caf8efd924a875698ff28384db8b) C:\Windows\system32\drivers\afd.sys
04:44:23.0688 3448 AFD - ok
04:44:23.0828 3448 AgereSoftModem (ce91b158fa490cf4c4d487a4130f4660) C:\Windows\system32\DRIVERS\AGRSM.sys
04:44:23.0828 3448 AgereSoftModem - ok
04:44:23.0891 3448 agp440 (ef23439cdd587f64c2c1b8825cead7d8) C:\Windows\system32\drivers\agp440.sys
04:44:23.0891 3448 agp440 - ok
04:44:23.0922 3448 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
04:44:23.0922 3448 aic78xx - ok
04:44:23.0953 3448 aliide (90395b64600ebb4552e26e178c94b2e4) C:\Windows\system32\drivers\aliide.sys
04:44:23.0953 3448 aliide - ok
04:44:24.0000 3448 amdagp (2b13e304c9dfdfa5eb582f6a149fa2c7) C:\Windows\system32\drivers\amdagp.sys
04:44:24.0000 3448 amdagp - ok
04:44:24.0047 3448 amdide (0577df1d323fe75a739c787893d300ea) C:\Windows\system32\drivers\amdide.sys
04:44:24.0047 3448 amdide - ok
04:44:24.0094 3448 AmdK7 (dc487885bcef9f28eece6fac0e5ddfc5) C:\Windows\system32\drivers\amdk7.sys
04:44:24.0094 3448 AmdK7 - ok
04:44:24.0156 3448 AmdK8 (0ca0071da4315b00fc1328ca86b425da) C:\Windows\system32\drivers\amdk8.sys
04:44:24.0156 3448 AmdK8 - ok
04:44:24.0281 3448 arc (5f673180268bb1fdb69c99b6619fe379) C:\Windows\system32\drivers\arc.sys
04:44:24.0281 3448 arc - ok
04:44:24.0328 3448 arcsas (957f7540b5e7f602e44648c7de5a1c05) C:\Windows\system32\drivers\arcsas.sys
04:44:24.0328 3448 arcsas - ok
04:44:24.0374 3448 AsyncMac (e86cf7ce67d5de898f27ef884dc357d8) C:\Windows\system32\DRIVERS\asyncmac.sys
04:44:24.0374 3448 AsyncMac - ok
04:44:24.0406 3448 atapi (4f4fcb8b6ea06784fb6d475b7ec7300f) C:\Windows\system32\drivers\atapi.sys
04:44:24.0406 3448 atapi - ok
04:44:24.0484 3448 Beep (ac3dd1708b22761ebd7cbe14dcc3b5d7) C:\Windows\system32\drivers\Beep.sys
04:44:24.0484 3448 Beep - ok
04:44:24.0515 3448 blbdrive - ok
04:44:24.0562 3448 bowser (913cd06fbe9105ce6077e90fd4418561) C:\Windows\system32\DRIVERS\bowser.sys
04:44:24.0562 3448 bowser - ok
04:44:24.0608 3448 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
04:44:24.0608 3448 BrFiltLo - ok
04:44:24.0640 3448 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
04:44:24.0640 3448 BrFiltUp - ok
04:44:24.0686 3448 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
04:44:24.0686 3448 Brserid - ok
04:44:24.0718 3448 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
04:44:24.0718 3448 BrSerWdm - ok
04:44:24.0733 3448 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
04:44:24.0749 3448 BrUsbMdm - ok
04:44:24.0780 3448 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
04:44:24.0780 3448 BrUsbSer - ok
04:44:24.0827 3448 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
04:44:24.0842 3448 BTHMODEM - ok
04:44:24.0874 3448 cdfs (6c3a437fc873c6f6a4fc620b6888cb86) C:\Windows\system32\DRIVERS\cdfs.sys
04:44:24.0874 3448 cdfs - ok
04:44:24.0905 3448 cdrom (8d1866e61af096ae8b582454f5e4d303) C:\Windows\system32\DRIVERS\cdrom.sys
04:44:24.0905 3448 cdrom - ok
04:44:24.0983 3448 circlass (da8e0afc7baa226c538ef53ac2f90897) C:\Windows\system32\drivers\circlass.sys
04:44:24.0983 3448 circlass - ok
04:44:25.0014 3448 CLFS (1b84fd0937d3b99af9ba38ddff3daf54) C:\Windows\system32\CLFS.sys
04:44:25.0030 3448 CLFS - ok
04:44:25.0123 3448 CmBatt (0fed59edb4a83ff17f1778827b88ab1a) C:\Windows\system32\DRIVERS\CmBatt.sys
04:44:25.0123 3448 CmBatt - ok
04:44:25.0170 3448 cmdide (45201046c776ffdaf3fc8a0029c581c8) C:\Windows\system32\drivers\cmdide.sys
04:44:25.0170 3448 cmdide - ok
04:44:25.0201 3448 Compbatt (82b8c91d327cfecf76cb58716f7d4997) C:\Windows\system32\DRIVERS\compbatt.sys
04:44:25.0201 3448 Compbatt - ok
04:44:25.0342 3448 crcdisk (2a213ae086bbec5e937553c7d9a2b22c) C:\Windows\system32\drivers\crcdisk.sys
04:44:25.0342 3448 crcdisk - ok
04:44:25.0482 3448 Crusoe (22a7f883508176489f559ee745b5bf5d) C:\Windows\system32\drivers\crusoe.sys
04:44:25.0482 3448 Crusoe - ok
04:44:25.0560 3448 CSC (398f8c5e8de793f01139b1fe5746aad1) C:\Windows\system32\drivers\csc.sys
04:44:25.0560 3448 CSC - ok
04:44:25.0685 3448 DfsC (a7179de59ae269ab70345527894ccd7c) C:\Windows\system32\Drivers\dfsc.sys
04:44:25.0700 3448 DfsC - ok
04:44:25.0841 3448 disk (841af4c4d41d3e3b2f244e976b0f7963) C:\Windows\system32\drivers\disk.sys
04:44:25.0841 3448 disk - ok
04:44:25.0934 3448 drmkaud (ee472cd2c01f6f8e8aa1fa06ffef61b6) C:\Windows\system32\drivers\drmkaud.sys
04:44:25.0934 3448 drmkaud - ok
04:44:25.0997 3448 DXGKrnl (f032a2f91287a0b800891c7bef9ca7a8) C:\Windows\System32\drivers\dxgkrnl.sys
04:44:25.0997 3448 DXGKrnl - ok
04:44:26.0044 3448 E1G60 (f88fb26547fd2ce6d0a5af2985892c48) C:\Windows\system32\DRIVERS\E1G60I32.sys
04:44:26.0044 3448 E1G60 - ok
04:44:26.0106 3448 Ecache (0efc7531b936ee57fdb4e837664c509f) C:\Windows\system32\drivers\ecache.sys
04:44:26.0106 3448 Ecache - ok
04:44:26.0168 3448 elxstor (e8f3f21a71720c84bcf423b80028359f) C:\Windows\system32\drivers\elxstor.sys
04:44:26.0168 3448 elxstor - ok
04:44:26.0246 3448 fastfat (84a317cb0b3954d3768cdcd018dbf670) C:\Windows\system32\drivers\fastfat.sys
04:44:26.0246 3448 fastfat - ok
04:44:26.0293 3448 fdc (63bdada84951b9c03e641800e176898a) C:\Windows\system32\DRIVERS\fdc.sys
04:44:26.0309 3448 fdc - ok
04:44:26.0340 3448 FileInfo (65773d6115c037ffd7ef8280ae85eb9d) C:\Windows\system32\drivers\fileinfo.sys
04:44:26.0340 3448 FileInfo - ok
04:44:26.0387 3448 Filetrace (c226dd0de060745f3e042f58dcf78402) C:\Windows\system32\drivers\filetrace.sys
04:44:26.0387 3448 Filetrace - ok
04:44:26.0434 3448 flpydisk (6603957eff5ec62d25075ea8ac27de68) C:\Windows\system32\DRIVERS\flpydisk.sys
04:44:26.0434 3448 flpydisk - ok
04:44:26.0465 3448 FltMgr (a6a8da7ae4d53394ab22ac3ab6d3f5d3) C:\Windows\system32\drivers\fltmgr.sys
04:44:26.0480 3448 FltMgr - ok
04:44:26.0543 3448 Fs_Rec (66a078591208baa210c7634b11eb392c) C:\Windows\system32\drivers\Fs_Rec.sys
04:44:26.0543 3448 Fs_Rec - ok
04:44:26.0590 3448 fvevol (06a1cf72fbe3b50035fbff428c8d84b4) C:\Windows\system32\DRIVERS\fvevol.sys
04:44:26.0590 3448 fvevol - ok
04:44:26.0636 3448 gagp30kx (4e1cd0a45c50a8882616cae5bf82f3c5) C:\Windows\system32\drivers\gagp30kx.sys
04:44:26.0636 3448 gagp30kx - ok
04:44:26.0668 3448 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
04:44:26.0683 3448 GEARAspiWDM - ok
04:44:26.0746 3448 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
04:44:26.0746 3448 HdAudAddService - ok
04:44:26.0777 3448 HDAudBus (0db613a7e427b5663563677796fd5258) C:\Windows\system32\DRIVERS\HDAudBus.sys
04:44:26.0777 3448 HDAudBus - ok
04:44:26.0870 3448 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
04:44:26.0870 3448 HidBth - ok
04:44:26.0886 3448 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
04:44:26.0902 3448 HidIr - ok
04:44:26.0933 3448 HidUsb (3c64042b95e583b366ba4e5d2450235e) C:\Windows\system32\DRIVERS\hidusb.sys
04:44:26.0933 3448 HidUsb - ok
04:44:26.0980 3448 HpCISSs (df353b401001246853763c4b7aaa6f50) C:\Windows\system32\drivers\hpcisss.sys
04:44:26.0980 3448 HpCISSs - ok
04:44:27.0058 3448 HTTP (ea24fe637d974a8a31bc650f478e3533) C:\Windows\system32\drivers\HTTP.sys
04:44:27.0058 3448 HTTP - ok
04:44:27.0089 3448 i2omp (324c2152ff2c61abae92d09f3cca4d63) C:\Windows\system32\drivers\i2omp.sys
04:44:27.0089 3448 i2omp - ok
04:44:27.0167 3448 i8042prt (1c9ee072baa3abb460b91d7ee9152660) C:\Windows\system32\DRIVERS\i8042prt.sys
04:44:27.0167 3448 i8042prt - ok
04:44:27.0198 3448 iaNvStor (a24e4563c2c5f3b21189a1fdcdb16b06) C:\Windows\system32\DRIVERS\iaNvStor.sys
04:44:27.0198 3448 iaNvStor - ok
04:44:27.0229 3448 iaStor (fd7f9d74c2b35dbda400804a3f5ed5d8) C:\Windows\system32\DRIVERS\iaStor.sys
04:44:27.0229 3448 iaStor - ok
04:44:27.0307 3448 iaStorV (c957bf4b5d80b46c5017bf0101e6c906) C:\Windows\system32\drivers\iastorv.sys
04:44:27.0307 3448 iaStorV - ok
04:44:27.0385 3448 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
04:44:27.0385 3448 iirsp - ok
04:44:27.0557 3448 IntcAzAudAddService (9438fe15da89c6aace8a79db2c6f60c1) C:\Windows\system32\drivers\RTKVHDA.sys
04:44:27.0572 3448 IntcAzAudAddService - ok
04:44:27.0619 3448 intelide (97469037714070e45194ed318d636401) C:\Windows\system32\drivers\intelide.sys
04:44:27.0619 3448 intelide - ok
04:44:27.0650 3448 intelppm (ce44cc04262f28216dd4341e9e36a16f) C:\Windows\system32\DRIVERS\intelppm.sys
04:44:27.0650 3448 intelppm - ok
04:44:27.0682 3448 IpFilterDriver (880c6f86cc3f551b8fea2c11141268c0) C:\Windows\system32\DRIVERS\ipfltdrv.sys
04:44:27.0682 3448 IpFilterDriver - ok
04:44:27.0713 3448 IpInIp - ok
04:44:27.0760 3448 IPMIDRV (40f34f8aba2a015d780e4b09138b6c17) C:\Windows\system32\drivers\ipmidrv.sys
04:44:27.0760 3448 IPMIDRV - ok
04:44:27.0791 3448 IPNAT (10077c35845101548037df04fd1a420b) C:\Windows\system32\DRIVERS\ipnat.sys
04:44:27.0791 3448 IPNAT - ok
04:44:27.0838 3448 IRENUM (a82f328f4792304184642d6d397bb1e3) C:\Windows\system32\drivers\irenum.sys
04:44:27.0838 3448 IRENUM - ok
04:44:27.0884 3448 isapnp (350fca7e73cf65bcef43fae1e4e91293) C:\Windows\system32\drivers\isapnp.sys
04:44:27.0884 3448 isapnp - ok
04:44:27.0916 3448 iScsiPrt (4dca456d4d5723f8fa9c6760d240b0df) C:\Windows\system32\DRIVERS\msiscsi.sys
04:44:27.0931 3448 iScsiPrt - ok
04:44:27.0978 3448 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
04:44:27.0978 3448 iteatapi - ok
04:44:28.0025 3448 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
04:44:28.0025 3448 iteraid - ok
04:44:28.0056 3448 kbdclass (b076b2ab806b3f696dab21375389101c) C:\Windows\system32\DRIVERS\kbdclass.sys
04:44:28.0072 3448 kbdclass - ok
04:44:28.0103 3448 kbdhid (ed61dbc6603f612b7338283edbacbc4b) C:\Windows\system32\DRIVERS\kbdhid.sys
04:44:28.0103 3448 kbdhid - ok
04:44:28.0150 3448 KSecDD (0a829977b078dea11641fc2af87ceade) C:\Windows\system32\Drivers\ksecdd.sys
04:44:28.0150 3448 KSecDD - ok
04:44:28.0212 3448 lltdio (fd015b4f95daa2b712f0e372a116fbad) C:\Windows\system32\DRIVERS\lltdio.sys
04:44:28.0212 3448 lltdio - ok
04:44:28.0243 3448 LPCFilter (515fc18cabee0158a324b08b1c2667cf) C:\Windows\system32\DRIVERS\LPCFilter.sys
04:44:28.0243 3448 LPCFilter - ok
04:44:28.0306 3448 LSI_FC (a2262fb9f28935e862b4db46438c80d2) C:\Windows\system32\drivers\lsi_fc.sys
04:44:28.0306 3448 LSI_FC - ok
04:44:28.0352 3448 LSI_SAS (30d73327d390f72a62f32c103daf1d6d) C:\Windows\system32\drivers\lsi_sas.sys
04:44:28.0352 3448 LSI_SAS - ok
04:44:28.0399 3448 LSI_SCSI (e1e36fefd45849a95f1ab81de0159fe3) C:\Windows\system32\drivers\lsi_scsi.sys
04:44:28.0399 3448 LSI_SCSI - ok
04:44:28.0446 3448 luafv (42885bb44b6e065b8575a8dd6c430c52) C:\Windows\system32\drivers\luafv.sys
04:44:28.0462 3448 luafv - ok
04:44:28.0493 3448 megasas (d153b14fc6598eae8422a2037553adce) C:\Windows\system32\drivers\megasas.sys
04:44:28.0508 3448 megasas - ok
04:44:28.0555 3448 Modem (21755967298a46fb6adfec9db6012211) C:\Windows\system32\drivers\modem.sys
04:44:28.0555 3448 Modem - ok
04:44:28.0649 3448 monitor (ec839ba91e45cce6eadafc418fff8206) C:\Windows\system32\DRIVERS\monitor.sys
04:44:28.0649 3448 monitor - ok
04:44:28.0664 3448 mouclass (5fba13c1a1841b0885d316ed3589489d) C:\Windows\system32\DRIVERS\mouclass.sys
04:44:28.0680 3448 mouclass - ok
04:44:28.0742 3448 mouhid (b569b5c5d3bde545df3a6af512cccdba) C:\Windows\system32\DRIVERS\mouhid.sys
04:44:28.0742 3448 mouhid - ok
04:44:28.0774 3448 MountMgr (01f1e5a3e4877c931cbb31613fec16a6) C:\Windows\system32\drivers\mountmgr.sys
04:44:28.0774 3448 MountMgr - ok
04:44:28.0805 3448 mpio (583a41f26278d9e0ea548163d6139397) C:\Windows\system32\drivers\mpio.sys
04:44:28.0820 3448 mpio - ok
04:44:28.0852 3448 mpsdrv (6e7a7f0c1193ee5648443fe2d4b789ec) C:\Windows\system32\drivers\mpsdrv.sys
04:44:28.0852 3448 mpsdrv - ok
04:44:28.0898 3448 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
04:44:28.0898 3448 Mraid35x - ok
04:44:28.0961 3448 MRxDAV (1d8828b98ee309d65e006f0829e280e5) C:\Windows\system32\drivers\mrxdav.sys
04:44:28.0961 3448 MRxDAV - ok
04:44:29.0023 3448 mrxsmb (8af705ce1bb907932157fab821170f27) C:\Windows\system32\DRIVERS\mrxsmb.sys
04:44:29.0023 3448 mrxsmb - ok
04:44:29.0101 3448 mrxsmb10 (47e13ab23371be3279eef22bbfa2c1be) C:\Windows\system32\DRIVERS\mrxsmb10.sys
04:44:29.0101 3448 mrxsmb10 - ok
04:44:29.0132 3448 mrxsmb20 (90b3fc7bd6b3d7ee7635debba2187f66) C:\Windows\system32\DRIVERS\mrxsmb20.sys
04:44:29.0148 3448 mrxsmb20 - ok
04:44:29.0195 3448 msahci (742aed7939e734c36b7e8d6228ce26b7) C:\Windows\system32\drivers\msahci.sys
04:44:29.0195 3448 msahci - ok
04:44:29.0226 3448 msdsm (3fc82a2ae4cc149165a94699183d3028) C:\Windows\system32\drivers\msdsm.sys
04:44:29.0226 3448 msdsm - ok
04:44:29.0288 3448 Msfs (729eafefd4e7417165f353a18dbe947d) C:\Windows\system32\drivers\Msfs.sys
04:44:29.0288 3448 Msfs - ok
04:44:29.0320 3448 msisadrv (5f454a16a5146cd91a176d70f0cfa3ec) C:\Windows\system32\drivers\msisadrv.sys
04:44:29.0320 3448 msisadrv - ok
04:44:29.0382 3448 MSKSSRV (892cedefa7e0ffe7be8da651b651d047) C:\Windows\system32\drivers\MSKSSRV.sys
04:44:29.0382 3448 MSKSSRV - ok
04:44:29.0413 3448 MSPCLOCK (ae2cb1da69b2676b4cee2a501af5871c) C:\Windows\system32\drivers\MSPCLOCK.sys
04:44:29.0413 3448 MSPCLOCK - ok
04:44:29.0444 3448 MSPQM (f910da84fa90c44a3addb7cd874463fd) C:\Windows\system32\drivers\MSPQM.sys
04:44:29.0444 3448 MSPQM - ok
04:44:29.0491 3448 MsRPC (84571c0ae07647ba38d493f5f0015df7) C:\Windows\system32\drivers\MsRPC.sys
04:44:29.0491 3448 MsRPC - ok
04:44:29.0538 3448 mssmbios (4385c80ede885e25492d408cad91bd6f) C:\Windows\system32\DRIVERS\mssmbios.sys
04:44:29.0554 3448 mssmbios - ok
04:44:29.0600 3448 MSTEE (c826dd1373f38afd9ca46ec3c436a14e) C:\Windows\system32\drivers\MSTEE.sys
04:44:29.0600 3448 MSTEE - ok
04:44:29.0616 3448 Mup (fa7aa70050cf5e2d15de00941e5665e5) C:\Windows\system32\Drivers\mup.sys
04:44:29.0632 3448 Mup - ok
04:44:29.0694 3448 NativeWifiP (497de786240303ee67ab01f5690c24c2) C:\Windows\system32\DRIVERS\nwifi.sys
04:44:29.0694 3448 NativeWifiP - ok
04:44:29.0756 3448 NDIS (fffe00134c554e113ee186eeddb0ff30) C:\Windows\system32\drivers\ndis.sys
04:44:29.0756 3448 NDIS - ok
04:44:29.0819 3448 NdisTapi (7584f1794b23b83d63cc124a8c56d103) C:\Windows\system32\DRIVERS\ndistapi.sys
04:44:29.0819 3448 NdisTapi - ok
04:44:29.0866 3448 Ndisuio (5de5ee546bf40838ebe0e01cb629df64) C:\Windows\system32\DRIVERS\ndisuio.sys
04:44:29.0866 3448 Ndisuio - ok
04:44:29.0912 3448 NdisWan (397402adcbb8946223a1950101f6cd94) C:\Windows\system32\DRIVERS\ndiswan.sys
04:44:29.0912 3448 NdisWan - ok
04:44:29.0959 3448 NDProxy (874c12e3ad1431cabc854697d302c563) C:\Windows\system32\drivers\NDProxy.sys
04:44:29.0959 3448 NDProxy - ok
04:44:30.0022 3448 NetBIOS (356dbb9f98e8dc1028dd3092fceeb877) C:\Windows\system32\DRIVERS\netbios.sys
04:44:30.0037 3448 NetBIOS - ok
04:44:30.0068 3448 netbt (e3a168912e7eefc3bd3b814720d68b41) C:\Windows\system32\DRIVERS\netbt.sys
04:44:30.0068 3448 netbt - ok
04:44:30.0224 3448 NETw4v32 (c4f27ba95327b6441ca44ddcfb47562a) C:\Windows\system32\DRIVERS\NETw4v32.sys
04:44:30.0240 3448 NETw4v32 - ok
04:44:30.0287 3448 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
04:44:30.0287 3448 nfrd960 - ok
04:44:30.0318 3448 Npfs (4f9832beb9fafd8ceb0e541f1323b26e) C:\Windows\system32\drivers\Npfs.sys
04:44:30.0318 3448 Npfs - ok
04:44:30.0349 3448 nsiproxy (b488dfec274de1fc9d653870ef2587be) C:\Windows\system32\drivers\nsiproxy.sys
04:44:30.0349 3448 nsiproxy - ok
04:44:30.0427 3448 Ntfs (3f379380a4a2637f559444e338cf1b51) C:\Windows\system32\drivers\Ntfs.sys
04:44:30.0443 3448 Ntfs - ok
04:44:30.0490 3448 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
04:44:30.0490 3448 ntrigdigi - ok
04:44:30.0521 3448 Null (ec5efb3c60f1b624648344a328bce596) C:\Windows\system32\drivers\Null.sys
04:44:30.0521 3448 Null - ok
04:44:31.0129 3448 nvlddmkm (bd409de5681c74c1de51d72427dc202d) C:\Windows\system32\DRIVERS\nvlddmkm.sys
04:44:31.0207 3448 nvlddmkm - ok
04:44:31.0238 3448 nvraid (e69e946f80c1c31c53003bfbf50cbb7c) C:\Windows\system32\drivers\nvraid.sys
04:44:31.0238 3448 nvraid - ok
04:44:31.0270 3448 nvstor (9e0ba19a28c498a6d323d065db76dffc) C:\Windows\system32\drivers\nvstor.sys
04:44:31.0285 3448 nvstor - ok
04:44:31.0348 3448 nv_agp (07c186427eb8fcc3d8d7927187f260f7) C:\Windows\system32\drivers\nv_agp.sys
04:44:31.0348 3448 nv_agp - ok
04:44:31.0379 3448 NwlnkFlt - ok
04:44:31.0410 3448 NwlnkFwd - ok
04:44:31.0457 3448 ohci1394 (be32da025a0be1878f0ee8d6d9386cd5) C:\Windows\system32\DRIVERS\ohci1394.sys
04:44:31.0457 3448 ohci1394 - ok
04:44:31.0504 3448 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
04:44:31.0504 3448 Parport - ok
04:44:31.0550 3448 partmgr (555a5b2c8022983bc7467bc925b222ee) C:\Windows\system32\drivers\partmgr.sys
04:44:31.0550 3448 partmgr - ok
04:44:31.0613 3448 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
04:44:31.0613 3448 Parvdm - ok
04:44:31.0644 3448 pci (1085d75657807e0e8b32f9e19a1647c3) C:\Windows\system32\drivers\pci.sys
04:44:31.0644 3448 pci - ok
04:44:31.0691 3448 pciide (3b1901e401473e03eb8c874271e50c26) C:\Windows\system32\drivers\pciide.sys
04:44:31.0691 3448 pciide - ok
04:44:31.0753 3448 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\DRIVERS\pcmcia.sys
04:44:31.0753 3448 pcmcia - ok
04:44:31.0847 3448 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
04:44:31.0847 3448 PEAUTH - ok
04:44:31.0940 3448 PptpMiniport (6c359ac71d7b550a0d41f9db4563ce05) C:\Windows\system32\DRIVERS\raspptp.sys
04:44:31.0940 3448 PptpMiniport - ok
04:44:32.0003 3448 Processor (0e3cef5d28b40cf273281d620c50700a) C:\Windows\system32\drivers\processr.sys
04:44:32.0003 3448 Processor - ok
04:44:32.0081 3448 PSched (b74edf14453c9987e99e66535047ebee) C:\Windows\system32\DRIVERS\pacer.sys
04:44:32.0081 3448 PSched - ok
04:44:32.0159 3448 ql2300 (ccdac889326317792480c0a67156a1ec) C:\Windows\system32\drivers\ql2300.sys
04:44:32.0159 3448 ql2300 - ok
04:44:32.0206 3448 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
04:44:32.0206 3448 ql40xx - ok
04:44:32.0252 3448 QWAVEdrv (d2b3e2b7426dc23e185fbc73c8936c12) C:\Windows\system32\drivers\qwavedrv.sys
04:44:32.0252 3448 QWAVEdrv - ok
04:44:32.0299 3448 RasAcd (bd7b30f55b3649506dd8b3d38f571d2a) C:\Windows\system32\DRIVERS\rasacd.sys
04:44:32.0299 3448 RasAcd - ok
04:44:32.0346 3448 Rasl2tp (88587dd843e2059848995b407b67f6cf) C:\Windows\system32\DRIVERS\rasl2tp.sys
04:44:32.0346 3448 Rasl2tp - ok
04:44:32.0393 3448 RasPppoe (ccf4e9c6cbbac81437f88cb2ae0b6c96) C:\Windows\system32\DRIVERS\raspppoe.sys
04:44:32.0393 3448 RasPppoe - ok
04:44:32.0440 3448 rdbss (54129c5d9581bbec8bd1ebd3ba813f47) C:\Windows\system32\DRIVERS\rdbss.sys
04:44:32.0440 3448 rdbss - ok
04:44:32.0486 3448 RDPCDD (794585276b5d7fca9f3fc15543f9f0b9) C:\Windows\system32\DRIVERS\RDPCDD.sys
04:44:32.0486 3448 RDPCDD - ok
04:44:32.0533 3448 rdpdr (e8bd98d46f2ed77132ba927fccb47d8b) C:\Windows\system32\DRIVERS\rdpdr.sys
04:44:32.0533 3448 rdpdr - ok
04:44:32.0549 3448 RDPENCDD (980b56e2e273e19d3a9d72d5c420f008) C:\Windows\system32\drivers\rdpencdd.sys
04:44:32.0564 3448 RDPENCDD - ok
04:44:32.0627 3448 RDPWD (8830e790a74a96605faba74f9665bb3c) C:\Windows\system32\drivers\RDPWD.sys
04:44:32.0642 3448 RDPWD - ok
04:44:32.0705 3448 RimUsb (f17713d108aca124a139fde877eef68a) C:\Windows\system32\Drivers\RimUsb.sys
04:44:32.0705 3448 RimUsb - ok
04:44:32.0752 3448 RimVSerPort (2c4fb2e9f039287767c384e46ee91030) C:\Windows\system32\DRIVERS\RimSerial.sys
04:44:32.0752 3448 RimVSerPort - ok
04:44:32.0783 3448 ROOTMODEM (d49d61312b273de069584d48c81c8b1d) C:\Windows\system32\Drivers\RootMdm.sys
04:44:32.0798 3448 ROOTMODEM - ok
04:44:32.0830 3448 rspndr (97e939d2128fec5d5a3e6e79b290a2f4) C:\Windows\system32\DRIVERS\rspndr.sys
04:44:32.0830 3448 rspndr - ok
04:44:32.0892 3448 RTL8169 (b8b159fa669c6386a458fcd468ebb1e6) C:\Windows\system32\DRIVERS\Rtlh86.sys
04:44:32.0892 3448 RTL8169 - ok
04:44:32.0954 3448 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
04:44:32.0954 3448 sbp2port - ok
04:44:33.0001 3448 sdbus (5bafd52831ea802f8d3940f5c92fdeec) C:\Windows\system32\DRIVERS\sdbus.sys
04:44:33.0017 3448 sdbus - ok
04:44:33.0064 3448 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
04:44:33.0064 3448 secdrv - ok
04:44:33.0110 3448 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
04:44:33.0110 3448 Serenum - ok
04:44:33.0157 3448 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
04:44:33.0157 3448 Serial - ok
04:44:33.0204 3448 sermouse (450accd77ec5cea720c1cdb9e26b953b) C:\Windows\system32\drivers\sermouse.sys
04:44:33.0204 3448 sermouse - ok
04:44:33.0266 3448 sffdisk (3566d3809b940662bb64cb888d168ba8) C:\Windows\system32\DRIVERS\sffdisk.sys
04:44:33.0266 3448 sffdisk - ok
04:44:33.0313 3448 sffp_mmc (8fd08a310645fe872eeec6e08c6bf3ee) C:\Windows\system32\drivers\sffp_mmc.sys
04:44:33.0313 3448 sffp_mmc - ok
04:44:33.0360 3448 sffp_sd (363ccb23b8638ea046b3de0d223543b6) C:\Windows\system32\DRIVERS\sffp_sd.sys
04:44:33.0376 3448 sffp_sd - ok
04:44:33.0391 3448 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
04:44:33.0391 3448 sfloppy - ok
04:44:33.0438 3448 sisagp (d2a595d6eebeeaf4334f8e50efbc9931) C:\Windows\system32\drivers\sisagp.sys
04:44:33.0438 3448 sisagp - ok
04:44:33.0469 3448 SiSRaid2 (cedd6f4e7d84e9f98b34b3fe988373aa) C:\Windows\system32\drivers\sisraid2.sys
04:44:33.0469 3448 SiSRaid2 - ok
04:44:33.0516 3448 SiSRaid4 (df843c528c4f69d12ce41ce462e973a7) C:\Windows\system32\drivers\sisraid4.sys
04:44:33.0516 3448 SiSRaid4 - ok
04:44:33.0563 3448 Smb (ac0d90738adb51a6fd12ff00874a2162) C:\Windows\system32\DRIVERS\smb.sys
04:44:33.0563 3448 Smb - ok
04:44:33.0594 3448 spldr (426f9b029aa9162ceccf65369457d046) C:\Windows\system32\drivers\spldr.sys
04:44:33.0610 3448 spldr - ok
04:44:33.0688 3448 srv (038579c35f7cad4a4bbf735dbf83277d) C:\Windows\system32\DRIVERS\srv.sys
04:44:33.0688 3448 srv - ok
04:44:33.0734 3448 srv2 (6971a757af8cb5e2cbcbb76cc530db6c) C:\Windows\system32\DRIVERS\srv2.sys
04:44:33.0734 3448 srv2 - ok
04:44:33.0781 3448 srvnet (9e1a4603b874eebce0298113951abefb) C:\Windows\system32\DRIVERS\srvnet.sys
04:44:33.0781 3448 srvnet - ok
04:44:33.0812 3448 swenum (1379bdb336f8158c176a465e30759f57) C:\Windows\system32\DRIVERS\swenum.sys
04:44:33.0812 3448 swenum - ok
04:44:33.0859 3448 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
04:44:33.0859 3448 Symc8xx - ok
04:44:33.0906 3448 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
04:44:33.0906 3448 Sym_hi - ok
04:44:33.0937 3448 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
04:44:33.0937 3448 Sym_u3 - ok
04:44:34.0015 3448 SynTP (7aa65f5fa480e3778f0052a1fe04c98f) C:\Windows\system32\DRIVERS\SynTP.sys
04:44:34.0015 3448 SynTP - ok
04:44:34.0124 3448 Tcpip (4a82fa8f0df67aa354580c3faaf8bde3) C:\Windows\system32\drivers\tcpip.sys
04:44:34.0140 3448 Tcpip - ok
04:44:34.0202 3448 Tcpip6 (4a82fa8f0df67aa354580c3faaf8bde3) C:\Windows\system32\DRIVERS\tcpip.sys
04:44:34.0202 3448 Tcpip6 - ok
04:44:34.0374 3448 tcpipreg (5ce0c4a7b12d0067dad527d72b68c726) C:\Windows\system32\drivers\tcpipreg.sys
04:44:34.0374 3448 tcpipreg - ok
04:44:34.0468 3448 TcUsb (009aede9fe870c247014450dc1e01d5d) C:\Windows\system32\Drivers\tcusb.sys
04:44:34.0468 3448 TcUsb - ok
04:44:34.0592 3448 tdcmdpst (1825bceb47bf41c5a9f0e44de82fc27a) C:\Windows\system32\DRIVERS\tdcmdpst.sys
04:44:34.0592 3448 tdcmdpst - ok
04:44:34.0670 3448 TDPIPE (964248aef49c31fa6a93201a73ffaf50) C:\Windows\system32\drivers\tdpipe.sys
04:44:34.0670 3448 TDPIPE - ok
04:44:34.0702 3448 TDTCP (7d2c1ae1648a60fce4aa0f7982e419d3) C:\Windows\system32\drivers\tdtcp.sys
04:44:34.0702 3448 TDTCP - ok
04:44:34.0764 3448 tdx (ab4fde8af4a0270a46a001c08cbce1c2) C:\Windows\system32\DRIVERS\tdx.sys
04:44:34.0764 3448 tdx - ok
04:44:34.0811 3448 TermDD (2c549bd9dd091fbfaa0a2a48e82ec2fb) C:\Windows\system32\DRIVERS\termdd.sys
04:44:34.0811 3448 TermDD - ok
04:44:34.0873 3448 tifm21 (e4c85c291ddb3dc5e4a2f227ca465ba6) C:\Windows\system32\drivers\tifm21.sys
04:44:34.0873 3448 tifm21 - ok
04:44:34.0967 3448 tmactmon (0f5a6a8af2d1788f3fdf3c352eb3641f) C:\Windows\system32\DRIVERS\tmactmon.sys
04:44:34.0967 3448 tmactmon - ok
04:44:35.0076 3448 tmcomm (08bac71557df8a9b1381c8c165f64520) C:\Windows\system32\DRIVERS\tmcomm.sys
04:44:35.0076 3448 tmcomm - ok
04:44:35.0123 3448 tmevtmgr (830dd50c083cfaf60e6e5f95ca109d0f) C:\Windows\system32\DRIVERS\tmevtmgr.sys
04:44:35.0123 3448 tmevtmgr - ok
04:44:35.0170 3448 tmlwf (1a28423418e3c5f66c1e4bdd071a154e) C:\Windows\system32\DRIVERS\tmlwf.sys
04:44:35.0170 3448 tmlwf - ok
04:44:35.0263 3448 tmpreflt (d6ea2d42e3cfa6d8178aae5b2627548b) C:\Windows\system32\DRIVERS\tmpreflt.sys
04:44:35.0263 3448 tmpreflt - ok
04:44:35.0326 3448 tmtdi (6c9f58dd778b05df58839f1376bf4687) C:\Windows\system32\DRIVERS\tmtdi.sys
04:44:35.0341 3448 tmtdi - ok
04:44:35.0404 3448 tmwfp (616da082e416967c38551f6d651f9468) C:\Windows\system32\DRIVERS\tmwfp.sys
04:44:35.0404 3448 tmwfp - ok
04:44:35.0450 3448 tmxpflt (d41bd6e34e8d68f77082ef1e6729e283) C:\Windows\system32\DRIVERS\tmxpflt.sys
04:44:35.0450 3448 tmxpflt - ok
04:44:35.0528 3448 tosporte (8d624d3bd1f2d78bd1c01a2d4e954b4e) C:\Windows\system32\DRIVERS\tosporte.sys
04:44:35.0528 3448 tosporte - ok
04:44:35.0575 3448 tosrfbd (266df087a8c24da34ff40cf3df86ccfb) C:\Windows\system32\DRIVERS\tosrfbd.sys
04:44:35.0591 3448 tosrfbd - ok
04:44:35.0622 3448 tosrfbnp (90c8525bc578aaffe87c2d0ed4379e9e) C:\Windows\system32\Drivers\tosrfbnp.sys
04:44:35.0622 3448 tosrfbnp - ok
04:44:35.0669 3448 Tosrfcom (5ba1ca3b3cddb1ddc67df473f05d1ec2) C:\Windows\system32\Drivers\tosrfcom.sys
04:44:35.0669 3448 Tosrfcom - ok
04:44:35.0700 3448 tosrfec (5c4103544612e5011ef46301b93d1aa6) C:\Windows\system32\DRIVERS\tosrfec.sys
04:44:35.0700 3448 tosrfec - ok
04:44:35.0731 3448 Tosrfhid (7c807ba9660e2995cc0217a14a24094c) C:\Windows\system32\DRIVERS\Tosrfhid.sys
04:44:35.0747 3448 Tosrfhid - ok
04:44:35.0794 3448 tosrfnds (c52fd27b9adf3a1f22cb90e6bcf9b0cb) C:\Windows\system32\DRIVERS\tosrfnds.sys
04:44:35.0794 3448 tosrfnds - ok
04:44:35.0840 3448 TosRfSnd (a4ce9572bc4ac8d329455059b43c5bea) C:\Windows\system32\drivers\tosrfsnd.sys
04:44:35.0840 3448 TosRfSnd - ok
04:44:35.0887 3448 Tosrfusb (cdda265c7617a2745b48e0de572012a6) C:\Windows\system32\DRIVERS\tosrfusb.sys
04:44:35.0887 3448 Tosrfusb - ok
04:44:35.0934 3448 tos_sps32 (1ea5f27c29405bf49799feca77186da9) C:\Windows\system32\DRIVERS\tos_sps32.sys
04:44:35.0934 3448 tos_sps32 - ok
04:44:35.0965 3448 TpChoice - ok
04:44:36.0028 3448 tssecsrv (29f0eca726f0d51f7e048bdb0b372f29) C:\Windows\system32\DRIVERS\tssecsrv.sys
04:44:36.0043 3448 tssecsrv - ok
04:44:36.0090 3448 tunmp (65e953bc0084d44498b51f59784d2a82) C:\Windows\system32\DRIVERS\tunmp.sys
04:44:36.0090 3448 tunmp - ok
04:44:36.0152 3448 tunnel (4a39bda5e0fd30bdf4884f9d33ae6105) C:\Windows\system32\DRIVERS\tunnel.sys
04:44:36.0152 3448 tunnel - ok
04:44:36.0184 3448 TVALZ (521c5f39829875adf5466dd94c6282c7) C:\Windows\system32\DRIVERS\TVALZ_O.SYS
04:44:36.0184 3448 TVALZ - ok
04:44:36.0230 3448 uagp35 (c3ade15414120033a36c0f293d4a4121) C:\Windows\system32\drivers\uagp35.sys
04:44:36.0230 3448 uagp35 - ok
04:44:36.0277 3448 udfs (6348da98707ceda8a0dfb05820e17732) C:\Windows\system32\DRIVERS\udfs.sys
04:44:36.0277 3448 udfs - ok
04:44:36.0324 3448 uliagpkx (75e6890ebfce0841d3291b02e7a8bdb0) C:\Windows\system32\drivers\uliagpkx.sys
04:44:36.0324 3448 uliagpkx - ok
04:44:36.0371 3448 uliahci (3cd4ea35a6221b85dcc25daa46313f8d) C:\Windows\system32\drivers\uliahci.sys
04:44:36.0371 3448 uliahci - ok
04:44:36.0418 3448 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
04:44:36.0418 3448 UlSata - ok
04:44:36.0464 3448 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
04:44:36.0464 3448 ulsata2 - ok
04:44:36.0496 3448 umbus (3fb78f1d1dd86d87bececd9dffa24dd9) C:\Windows\system32\DRIVERS\umbus.sys
04:44:36.0496 3448 umbus - ok
04:44:36.0574 3448 USBAAPL (4b8a9c16b6d9258ed99c512aecb8c555) C:\Windows\system32\Drivers\usbaapl.sys
04:44:36.0574 3448 USBAAPL - ok
04:44:36.0636 3448 usbccgp (0adb101083dfa5039b1e65fb36551ab1) C:\Windows\system32\DRIVERS\usbccgp.sys
04:44:36.0636 3448 usbccgp - ok
04:44:36.0683 3448 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
04:44:36.0683 3448 usbcir - ok
04:44:36.0714 3448 usbehci (0e3c51bafaa9e00a870ed20adfdc28e7) C:\Windows\system32\DRIVERS\usbehci.sys
04:44:36.0714 3448 usbehci - ok
04:44:36.0761 3448 usbhub (ec74d1322d1fbff709bdcbe20c703e1b) C:\Windows\system32\DRIVERS\usbhub.sys
04:44:36.0761 3448 usbhub - ok
04:44:36.0808 3448 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
04:44:36.0808 3448 usbohci - ok
04:44:36.0839 3448 usbprint (b51e52acf758be00ef3a58ea452fe360) C:\Windows\system32\DRIVERS\usbprint.sys
04:44:36.0839 3448 usbprint - ok
04:44:36.0870 3448 USBSTOR (fdbaabf07244c60b0f4e0a6e71a107c6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
04:44:36.0870 3448 USBSTOR - ok
04:44:36.0917 3448 usbuhci (c6b35b6c43751867d95752f1c5c8a3f2) C:\Windows\system32\DRIVERS\usbuhci.sys
04:44:36.0917 3448 usbuhci - ok
04:44:36.0979 3448 usbvideo (0a6b81f01bc86399482e27e6fda7b33b) C:\Windows\system32\Drivers\usbvideo.sys
04:44:36.0979 3448 usbvideo - ok
04:44:37.0010 3448 UVCFTR (3b929a72aaea96dc0150d3a6da268c89) C:\Windows\system32\Drivers\UVCFTR_S.SYS
04:44:37.0026 3448 UVCFTR - ok
04:44:37.0073 3448 vga (7d92be0028ecdedec74617009084b5ef) C:\Windows\system32\DRIVERS\vgapnp.sys
04:44:37.0073 3448 vga - ok
04:44:37.0120 3448 VgaSave (17a8f877314e4067f8c8172cc6d9101c) C:\Windows\System32\drivers\vga.sys
04:44:37.0120 3448 VgaSave - ok
04:44:37.0151 3448 viaagp (045d9961e591cf0674a920b6ba3ba5cb) C:\Windows\system32\drivers\viaagp.sys
04:44:37.0166 3448 viaagp - ok
04:44:37.0198 3448 ViaC7 (56a4de5f02f2e88182b0981119b4dd98) C:\Windows\system32\drivers\viac7.sys
04:44:37.0198 3448 ViaC7 - ok
04:44:37.0244 3448 viaide (fd2e3175fcada350c7ab4521dca187ec) C:\Windows\system32\drivers\viaide.sys
04:44:37.0244 3448 viaide - ok
04:44:37.0276 3448 volmgr (103e84c95832d0ed93507997cc7b54e8) C:\Windows\system32\drivers\volmgr.sys
04:44:37.0276 3448 volmgr - ok
04:44:37.0322 3448 volmgrx (294da8d3f965f6a8db934a83c7b461ff) C:\Windows\system32\drivers\volmgrx.sys
04:44:37.0322 3448 volmgrx - ok
04:44:37.0385 3448 volsnap (11ef6c1caef76b685233450a126125d6) C:\Windows\system32\drivers\volsnap.sys
04:44:37.0385 3448 volsnap - ok
04:44:37.0463 3448 vsapint (f3b62fc525b566ac60651c9196e53bae) C:\Windows\system32\DRIVERS\vsapint.sys
04:44:37.0478 3448 vsapint - ok
04:44:37.0510 3448 vsmraid (d984439746d42b30fc65a4c3546c6829) C:\Windows\system32\drivers\vsmraid.sys
04:44:37.0525 3448 vsmraid - ok
04:44:37.0556 3448 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
04:44:37.0572 3448 WacomPen - ok
04:44:37.0603 3448 Wanarp (6e1a5be9a0605f3d932ff35fba2b22b3) C:\Windows\system32\DRIVERS\wanarp.sys
04:44:37.0603 3448 Wanarp - ok
04:44:37.0619 3448 Wanarpv6 (6e1a5be9a0605f3d932ff35fba2b22b3) C:\Windows\system32\DRIVERS\wanarp.sys
04:44:37.0619 3448 Wanarpv6 - ok
04:44:37.0681 3448 Wd (afc5ad65b991c1e205cf25cfdbf7a6f4) C:\Windows\system32\drivers\wd.sys
04:44:37.0681 3448 Wd - ok
04:44:37.0728 3448 Wdf01000 (7b5f66e4a2219c7d9daf9e738480e534) C:\Windows\system32\drivers\Wdf01000.sys
04:44:37.0728 3448 Wdf01000 - ok
04:44:37.0837 3448 WmiAcpi (701a9f884a294327e9141d73746ee279) C:\Windows\system32\drivers\wmiacpi.sys
04:44:37.0837 3448 WmiAcpi - ok
04:44:37.0900 3448 WpdUsb (2d27171b16a577ef14c1273668753485) C:\Windows\system32\DRIVERS\wpdusb.sys
04:44:37.0915 3448 WpdUsb - ok
04:44:37.0946 3448 ws2ifsl (84620aecdcfd2a7a14e6263927d8c0ed) C:\Windows\system32\drivers\ws2ifsl.sys
04:44:37.0946 3448 ws2ifsl - ok
04:44:38.0009 3448 WUDFRd (a2aafcc8a204736296d937c7c545b53f) C:\Windows\system32\DRIVERS\WUDFRd.sys
04:44:38.0009 3448 WUDFRd - ok
04:44:38.0071 3448 MBR (0x1B8) (5b5e648d12fcadc244c1ec30318e1eb9) \Device\Harddisk0\DR0
04:44:38.0071 3448 \Device\Harddisk0\DR0 - ok
04:44:38.0087 3448 Boot (0x1200) (5e1f6dda6898c5ae850b818637ca2853) \Device\Harddisk0\DR0\Partition0
04:44:38.0087 3448 \Device\Harddisk0\DR0\Partition0 - ok
04:44:38.0087 3448 ============================================================
04:44:38.0087 3448 Scan finished
04:44:38.0087 3448 ============================================================
04:44:38.0102 5556 Detected object count: 0
04:44:38.0102 5556 Actual detected object count: 0

After I completed this I updated and ran mbam. One thing to note as I said before, it seems, whether it's a quick scan or a full scan at around the minute and 30 second mark, it seems the scan jumps from 4000 files scanned to 40000 thousand. It normally would talk 30 minutes for a quick scan and almost 2 hrs for a full scan. Now for some reason it only takes 7mins for a quick scan to work. This is the log from mbam.

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 8089

Windows 6.0.6000
Internet Explorer 8.0.6001.18904

11/3/2011 4:56:08 AM
mbam-log-2011-11-03 (04-56-08).txt

Scan type: Quick scan
Objects scanned: 169322
Time elapsed: 7 minute(s), 45 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)



I'm not sure if I've solved all the problems, but I am positive that mbam never completed these scans so quickly now. Thanks for the help,
-Mase

#5 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,338 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:03:43 PM

Posted 05 November 2011 - 09:01 PM

Hello,Mase,,, this is a Vista system correct? As it appears there are no Service packs installed.

1. Uninstall Malwarebytes' Anti-Malware using Add/Remove programs in the control panel.
2. Restart your computer (very important).
3. Download and run this utility. Mbam clean
4. It will ask to restart your computer (please allow it to).
5. After the computer restarts, install the latest version from here. http://www.malwarebytes.org/mbam-download.php
Note: You will need to reactivate the program using the license you were sent.
Note: If using Free version, ignore the part about putting in your license key and activating.
Launch the program and set the Protection and Registration.
Then go to the UPDATE tab if not done during installation and check for updates.
Restart the computer again and verify that MBAM is in the task tray and run a Quick Scan and post that log.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users