Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Outgoing Connections to IP 178.238.36.17


  • Please log in to reply
No replies to this topic

#1 czarbj

czarbj

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:01:58 PM

Posted 03 April 2012 - 07:03 PM

Malwarebytes is detecting and blocking a multitude of outgoing connections to IP 178.238.36.17

<snip from log>
IP-BLOCK 178.238.36.17 (Type: outgoing)
</snip>

I have both Malwarebytes and PCTools Spyware Doctor with AntiVirus

I have just run TDSSKiller and found:

09:50:33.0937 6528 TDSS rootkit removing tool 2.7.25.0 Apr 3 2012 13:42:32
09:50:35.0203 6528 ============================================================
09:50:35.0203 6528 Current date / time: 2012/04/04 09:50:35.0203
09:50:35.0203 6528 SystemInfo:
09:50:35.0203 6528
09:50:35.0203 6528 OS Version: 5.1.2600 ServicePack: 3.0
09:50:35.0203 6528 Product type: Workstation
09:50:35.0203 6528 ComputerName: RINIT
09:50:35.0203 6528 UserName: Ben
09:50:35.0203 6528 Windows directory: C:\WINDOWS
09:50:35.0203 6528 System windows directory: C:\WINDOWS
09:50:35.0203 6528 Processor architecture: Intel x86
09:50:35.0203 6528 Number of processors: 2
09:50:35.0203 6528 Page size: 0x1000
09:50:35.0203 6528 Boot type: Normal boot
09:50:35.0203 6528 ============================================================
09:50:35.0781 6528 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
09:50:35.0781 6528 \Device\Harddisk0\DR0:
09:50:35.0781 6528 MBR used
09:50:35.0781 6528 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x2B24B, BlocksNum 0x129ED876
09:50:35.0812 6528 Initialize success
09:50:35.0812 6528 ============================================================
09:50:58.0578 7360 ============================================================
09:50:58.0578 7360 Scan started
09:50:58.0578 7360 Mode: Manual; TDLFS;
09:50:58.0578 7360 ============================================================
09:50:59.0015 7360 Abiosdsk - ok
09:50:59.0062 7360 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
09:50:59.0062 7360 abp480n5 - ok
09:50:59.0078 7360 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
09:50:59.0093 7360 ACPI - ok
09:50:59.0093 7360 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
09:50:59.0093 7360 ACPIEC - ok
09:50:59.0140 7360 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
09:50:59.0140 7360 adpu160m - ok
09:50:59.0187 7360 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
09:50:59.0187 7360 aec - ok
09:50:59.0203 7360 AESTAud (f21d5e93a94514be9f5b6ebf74a696b2) C:\WINDOWS\system32\drivers\AESTAud.sys
09:50:59.0203 7360 AESTAud - ok
09:50:59.0234 7360 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
09:50:59.0234 7360 AFD - ok
09:50:59.0265 7360 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
09:50:59.0265 7360 agp440 - ok
09:50:59.0281 7360 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
09:50:59.0281 7360 agpCPQ - ok
09:50:59.0296 7360 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
09:50:59.0296 7360 Aha154x - ok
09:50:59.0312 7360 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
09:50:59.0312 7360 aic78u2 - ok
09:50:59.0328 7360 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
09:50:59.0328 7360 aic78xx - ok
09:50:59.0359 7360 Alerter (a9a3daa780ca6c9671a19d52456705b4) C:\WINDOWS\system32\alrsvc.dll
09:50:59.0359 7360 Alerter - ok
09:50:59.0390 7360 ALG (8c515081584a38aa007909cd02020b3d) C:\WINDOWS\System32\alg.exe
09:50:59.0390 7360 ALG - ok
09:50:59.0406 7360 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
09:50:59.0406 7360 AliIde - ok
09:50:59.0421 7360 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys
09:50:59.0421 7360 alim1541 - ok
09:50:59.0437 7360 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys
09:50:59.0437 7360 amdagp - ok
09:50:59.0453 7360 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys
09:50:59.0453 7360 amsint - ok
09:50:59.0484 7360 ApfiltrService (b83f9da84f7079451c1c6a4a2f140920) C:\WINDOWS\system32\DRIVERS\Apfiltr.sys
09:50:59.0484 7360 ApfiltrService - ok
09:50:59.0562 7360 Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
09:50:59.0562 7360 Apple Mobile Device - ok
09:50:59.0609 7360 AppMgmt (d8849f77c0b66226335a59d26cb4edc6) C:\WINDOWS\System32\appmgmts.dll
09:50:59.0609 7360 AppMgmt - ok
09:50:59.0640 7360 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
09:50:59.0640 7360 Arp1394 - ok
09:50:59.0656 7360 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys
09:50:59.0656 7360 asc - ok
09:50:59.0671 7360 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys
09:50:59.0671 7360 asc3350p - ok
09:50:59.0703 7360 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys
09:50:59.0703 7360 asc3550 - ok
09:50:59.0796 7360 aspnet_state (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
09:50:59.0796 7360 aspnet_state - ok
09:50:59.0859 7360 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
09:50:59.0859 7360 AsyncMac - ok
09:50:59.0906 7360 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
09:50:59.0906 7360 atapi - ok
09:50:59.0921 7360 Atdisk - ok
09:50:59.0937 7360 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
09:50:59.0953 7360 Atmarpc - ok
09:51:00.0015 7360 ATService (d3fcb01559309c8611e1e1f955e896c9) C:\Program Files\Fingerprint Sensor\AtService.exe
09:51:00.0046 7360 ATService - ok
09:51:00.0109 7360 AudioSrv (def7a7882bec100fe0b2ce2549188f9d) C:\WINDOWS\System32\audiosrv.dll
09:51:00.0109 7360 AudioSrv - ok
09:51:00.0125 7360 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
09:51:00.0125 7360 audstub - ok
09:51:00.0171 7360 awecho (c7dfd42d1906bb6f3ab7368a638c706a) C:\WINDOWS\system32\drivers\awechomd.sys
09:51:00.0171 7360 awecho - ok
09:51:00.0312 7360 awhost32 (6118ce3aea5db6c34872b934002e1ab6) C:\Program Files\Symantec\pcAnywhere\awhost32.exe
09:51:00.0312 7360 awhost32 - ok
09:51:00.0375 7360 awlegacy (fcd631b75d01fecb673d52bfe87774ac) C:\WINDOWS\System32\Drivers\awlegacy.sys
09:51:00.0375 7360 awlegacy - ok
09:51:00.0406 7360 AW_HOST (be23b51d1af7ab948f883f864454393d) C:\WINDOWS\system32\drivers\aw_host5.sys
09:51:00.0406 7360 AW_HOST - ok
09:51:00.0453 7360 b57w2k (ea377a8e8e1000877210259750cbbf5f) C:\WINDOWS\system32\DRIVERS\b57xp32.sys
09:51:00.0453 7360 b57w2k - ok
09:51:00.0531 7360 BCM43XX (c88cbe911febef6b96cf3033a4b74a78) C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
09:51:00.0609 7360 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\bcmwl5.sys. Real md5: c88cbe911febef6b96cf3033a4b74a78, Fake md5: 5d4893633b7161fa25500eb7aeabec94
09:51:00.0625 7360 BCM43XX ( ForgedFile.Multi.Generic ) - warning
09:51:00.0625 7360 BCM43XX - detected ForgedFile.Multi.Generic (1)
09:51:00.0656 7360 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
09:51:00.0656 7360 Beep - ok
09:51:00.0687 7360 BITS (574738f61fca2935f5265dc4e5691314) C:\WINDOWS\system32\qmgr.dll
09:51:00.0703 7360 BITS - ok
09:51:00.0750 7360 Blfp (a341cdb0beb6880f11678944f292dd16) C:\WINDOWS\system32\DRIVERS\baspxp32.sys
09:51:00.0750 7360 Blfp - ok
09:51:00.0812 7360 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe
09:51:00.0828 7360 Bonjour Service - ok
09:51:00.0843 7360 Bridge (f934d1b230f84e1d19dd00ac5a7a83ed) C:\WINDOWS\system32\DRIVERS\bridge.sys
09:51:00.0843 7360 Bridge - ok
09:51:00.0843 7360 BridgeMP (f934d1b230f84e1d19dd00ac5a7a83ed) C:\WINDOWS\system32\DRIVERS\bridge.sys
09:51:00.0859 7360 BridgeMP - ok
09:51:00.0890 7360 Browser (a06ce3399d16db864f55faeb1f1927a9) C:\WINDOWS\System32\browser.dll
09:51:00.0890 7360 Browser - ok
09:51:01.0000 7360 Browser Defender Update Service (624fd301a77022f995742840e2a3f736) C:\Program Files\PC Tools Security\BDT\BDTUpdateService.exe
09:51:01.0015 7360 Browser Defender Update Service - ok
09:51:01.0062 7360 btaudio (f688bbbe8e3e7e03e35caabd66616ddb) C:\WINDOWS\system32\drivers\btaudio.sys
09:51:01.0078 7360 btaudio - ok
09:51:01.0140 7360 BTDriver (2f9f111d31aa3fbbe5781d829a4524e6) C:\WINDOWS\system32\DRIVERS\btport.sys
09:51:01.0140 7360 BTDriver - ok
09:51:01.0203 7360 BTKRNL (38a3331e2f690d4cdc9de0604b9416e5) C:\WINDOWS\system32\DRIVERS\btkrnl.sys
09:51:01.0218 7360 BTKRNL - ok
09:51:01.0296 7360 btwdins (d48148110ae078cb7221d0fcf20adfec) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
09:51:01.0312 7360 btwdins - ok
09:51:01.0328 7360 BTWDNDIS (80f61de965c116051614ac2f04222ff7) C:\WINDOWS\system32\DRIVERS\btwdndis.sys
09:51:01.0328 7360 BTWDNDIS - ok
09:51:01.0359 7360 btwmodem (5922bae0cd84924b9cd7e6bb515ee070) C:\WINDOWS\system32\DRIVERS\btwmodem.sys
09:51:01.0359 7360 btwmodem - ok
09:51:01.0375 7360 BTWUSB (d5af663711660d32ec230c6aaf7b6b83) C:\WINDOWS\system32\Drivers\btwusb.sys
09:51:01.0375 7360 BTWUSB - ok
09:51:01.0437 7360 buttonsvc32 (81a395aab3c606d5f1667cc5fc02b3d2) C:\Program Files\Dell\Dell ControlPoint\DCPButtonSvc.exe
09:51:01.0437 7360 buttonsvc32 - ok
09:51:01.0468 7360 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
09:51:01.0468 7360 cbidf - ok
09:51:01.0484 7360 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
09:51:01.0484 7360 cbidf2k - ok
09:51:01.0546 7360 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
09:51:01.0546 7360 CCDECODE - ok
09:51:01.0562 7360 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
09:51:01.0562 7360 cd20xrnt - ok
09:51:01.0609 7360 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
09:51:01.0609 7360 Cdaudio - ok
09:51:01.0640 7360 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
09:51:01.0640 7360 Cdfs - ok
09:51:01.0656 7360 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
09:51:01.0656 7360 Cdrom - ok
09:51:01.0671 7360 Changer - ok
09:51:01.0718 7360 CiSvc (1cfe720eb8d93a7158a4ebc3ab178bde) C:\WINDOWS\system32\cisvc.exe
09:51:01.0718 7360 CiSvc - ok
09:51:01.0765 7360 ClipSrv (34cbe729f38138217f9c80212a2a0c82) C:\WINDOWS\system32\clipsrv.exe
09:51:01.0765 7360 ClipSrv - ok
09:51:01.0828 7360 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
09:51:01.0828 7360 clr_optimization_v2.0.50727_32 - ok
09:51:01.0875 7360 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
09:51:01.0875 7360 CmBatt - ok
09:51:01.0890 7360 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys
09:51:01.0890 7360 CmdIde - ok
09:51:01.0937 7360 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
09:51:01.0937 7360 Compbatt - ok
09:51:01.0937 7360 COMSysApp - ok
09:51:01.0953 7360 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys
09:51:01.0968 7360 Cpqarray - ok
09:51:02.0000 7360 CryptSvc (3d4e199942e29207970e04315d02ad3b) C:\WINDOWS\System32\cryptsvc.dll
09:51:02.0015 7360 CryptSvc - ok
09:51:02.0046 7360 CVirtA (b5ecadf7708960f1818c7fa015f4c239) C:\WINDOWS\system32\DRIVERS\CVirtA.sys
09:51:02.0062 7360 CVirtA - ok
09:51:02.0140 7360 CVPND (dad192d12dd0b4c92f6843203852829f) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
09:51:02.0187 7360 CVPND - ok
09:51:02.0250 7360 CVPNDRVA (26deef07394624247d1f549bd94f0b15) C:\WINDOWS\system32\Drivers\CVPNDRVA.sys
09:51:02.0250 7360 CVPNDRVA - ok
09:51:02.0281 7360 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
09:51:02.0281 7360 dac2w2k - ok
09:51:02.0296 7360 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys
09:51:02.0312 7360 dac960nt - ok
09:51:02.0343 7360 DcomLaunch (6b27a5c03dfb94b4245739065431322c) C:\WINDOWS\system32\rpcss.dll
09:51:02.0359 7360 DcomLaunch - ok
09:51:02.0406 7360 Dhcp (5e38d7684a49cacfb752b046357e0589) C:\WINDOWS\System32\dhcpcsvc.dll
09:51:02.0421 7360 Dhcp - ok
09:51:02.0468 7360 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
09:51:02.0468 7360 Disk - ok
09:51:02.0500 7360 DLABMFSM (a0500678a33802d8954153839301d539) C:\WINDOWS\system32\Drivers\DLABMFSM.SYS
09:51:02.0500 7360 DLABMFSM - ok
09:51:02.0515 7360 DLABOIOM (b8d2f68cac54d46281399f9092644794) C:\WINDOWS\system32\Drivers\DLABOIOM.SYS
09:51:02.0515 7360 DLABOIOM - ok
09:51:02.0531 7360 DLACDBHM (0ee93ab799d1cb4ec90b36f3612fe907) C:\WINDOWS\system32\Drivers\DLACDBHM.SYS
09:51:02.0546 7360 DLACDBHM - ok
09:51:02.0562 7360 DLADResM (87413b94ae1fabc117c4e8ae6725134e) C:\WINDOWS\system32\Drivers\DLADResM.SYS
09:51:02.0562 7360 DLADResM - ok
09:51:02.0578 7360 DLAIFS_M (766a148235be1c0039c974446e4c0edc) C:\WINDOWS\system32\Drivers\DLAIFS_M.SYS
09:51:02.0578 7360 DLAIFS_M - ok
09:51:02.0593 7360 DLAOPIOM (38267cca177354f1c64450a43a4f7627) C:\WINDOWS\system32\Drivers\DLAOPIOM.SYS
09:51:02.0609 7360 DLAOPIOM - ok
09:51:02.0640 7360 DLAPoolM (fd363369fd313b46b5aeab1a688b52e9) C:\WINDOWS\system32\Drivers\DLAPoolM.SYS
09:51:02.0640 7360 DLAPoolM - ok
09:51:02.0671 7360 DLARTL_M (336ae18f0912ef4fbe5518849e004d74) C:\WINDOWS\system32\Drivers\DLARTL_M.SYS
09:51:02.0671 7360 DLARTL_M - ok
09:51:02.0703 7360 DLAUDFAM (fd85f682c1cc2a7ca878c7a448e6d87e) C:\WINDOWS\system32\Drivers\DLAUDFAM.SYS
09:51:02.0718 7360 DLAUDFAM - ok
09:51:02.0750 7360 DLAUDF_M (af389ce587b6bf5bbdcd6f6abe5eabc0) C:\WINDOWS\system32\Drivers\DLAUDF_M.SYS
09:51:02.0765 7360 DLAUDF_M - ok
09:51:02.0765 7360 dmadmin - ok
09:51:02.0796 7360 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys
09:51:02.0812 7360 dmboot - ok
09:51:02.0828 7360 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys
09:51:02.0828 7360 dmio - ok
09:51:02.0843 7360 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
09:51:02.0843 7360 dmload - ok
09:51:02.0859 7360 dmserver (57edec2e5f59f0335e92f35184bc8631) C:\WINDOWS\System32\dmserver.dll
09:51:02.0859 7360 dmserver - ok
09:51:02.0890 7360 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
09:51:02.0906 7360 DMusic - ok
09:51:02.0937 7360 DNE (7b4fdfbe97c047175e613aa96f3de987) C:\WINDOWS\system32\DRIVERS\dne2000.sys
09:51:02.0937 7360 DNE - ok
09:51:02.0984 7360 Dnscache (5f7e24fa9eab896051ffb87f840730d2) C:\WINDOWS\System32\dnsrslvr.dll
09:51:02.0984 7360 Dnscache - ok
09:51:03.0015 7360 Dot3svc (0f0f6e687e5e15579ef4da8dd6945814) C:\WINDOWS\System32\dot3svc.dll
09:51:03.0015 7360 Dot3svc - ok
09:51:03.0046 7360 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys
09:51:03.0046 7360 dpti2o - ok
09:51:03.0078 7360 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
09:51:03.0078 7360 drmkaud - ok
09:51:03.0125 7360 DRVMCDB (5d3b71bb2bb0009d65d290e2ef374bd3) C:\WINDOWS\system32\Drivers\DRVMCDB.SYS
09:51:03.0125 7360 DRVMCDB - ok
09:51:03.0140 7360 DRVNDDM (c591ba9f96f40a1fd6494dafdcd17185) C:\WINDOWS\system32\Drivers\DRVNDDM.SYS
09:51:03.0140 7360 DRVNDDM - ok
09:51:03.0171 7360 EapHost (2187855a7703adef0cef9ee4285182cc) C:\WINDOWS\System32\eapsvc.dll
09:51:03.0171 7360 EapHost - ok
09:51:03.0187 7360 ERSvc (bc93b4a066477954555966d77fec9ecb) C:\WINDOWS\System32\ersvc.dll
09:51:03.0187 7360 ERSvc - ok
09:51:03.0250 7360 Eventlog (65df52f5b8b6e9bbd183505225c37315) C:\WINDOWS\system32\services.exe
09:51:03.0250 7360 Eventlog - ok
09:51:03.0296 7360 EventSystem (d4991d98f2db73c60d042f1aef79efae) C:\WINDOWS\system32\es.dll
09:51:03.0296 7360 EventSystem - ok
09:51:03.0343 7360 ewusbnet (9032405f762f1afa92dfef99cb078306) C:\WINDOWS\system32\DRIVERS\ewusbnet.sys
09:51:03.0343 7360 ewusbnet - ok
09:51:03.0406 7360 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
09:51:03.0406 7360 Fastfat - ok
09:51:03.0468 7360 FastUserSwitchingCompatibility (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
09:51:03.0468 7360 FastUserSwitchingCompatibility - ok
09:51:03.0500 7360 Fax (e97d6a8684466df94ff3bc24fb787a07) C:\WINDOWS\system32\fxssvc.exe
09:51:03.0500 7360 Fax - ok
09:51:03.0515 7360 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
09:51:03.0515 7360 Fdc - ok
09:51:03.0546 7360 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys
09:51:03.0546 7360 Fips - ok
09:51:03.0562 7360 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
09:51:03.0562 7360 Flpydisk - ok
09:51:03.0593 7360 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
09:51:03.0609 7360 FltMgr - ok
09:51:03.0656 7360 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
09:51:03.0656 7360 FontCache3.0.0.0 - ok
09:51:03.0671 7360 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
09:51:03.0671 7360 Fs_Rec - ok
09:51:03.0718 7360 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
09:51:03.0718 7360 Ftdisk - ok
09:51:03.0765 7360 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
09:51:03.0765 7360 GEARAspiWDM - ok
09:51:03.0812 7360 Gernuwa (b390bc5aa09f333c5d95be651c073564) C:\WINDOWS\system32\drivers\Gernuwa.sys
09:51:03.0812 7360 Gernuwa - ok
09:51:03.0828 7360 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
09:51:03.0828 7360 Gpc - ok
09:51:03.0843 7360 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
09:51:03.0859 7360 HDAudBus - ok
09:51:03.0890 7360 helpsvc (4fcca060dfe0c51a09dd5c3843888bcd) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
09:51:03.0890 7360 helpsvc - ok
09:51:03.0937 7360 HidServ (deb04da35cc871b6d309b77e1443c796) C:\WINDOWS\System32\hidserv.dll
09:51:03.0937 7360 HidServ - ok
09:51:03.0984 7360 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
09:51:03.0984 7360 hidusb - ok
09:51:04.0031 7360 hkmsvc (8878bd685e490239777bfe51320b88e9) C:\WINDOWS\System32\kmsvc.dll
09:51:04.0031 7360 hkmsvc - ok
09:51:04.0062 7360 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys
09:51:04.0062 7360 hpn - ok
09:51:04.0109 7360 HSFHWAZL (f25bb78b0063a8e8fceff33493c305e0) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
09:51:04.0109 7360 HSFHWAZL - ok
09:51:04.0140 7360 HSF_DPV (04d872629e0afcb07ba9088eaa308c11) C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
09:51:04.0171 7360 HSF_DPV - ok
09:51:04.0218 7360 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
09:51:04.0218 7360 HTTP - ok
09:51:04.0265 7360 HTTPFilter (6100a808600f44d999cebdef8841c7a3) C:\WINDOWS\System32\w3ssl.dll
09:51:04.0265 7360 HTTPFilter - ok
09:51:04.0328 7360 hwdatacard (60aec3f4ec355d9f46d545a0fa08ce87) C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys
09:51:04.0328 7360 hwdatacard - ok
09:51:04.0390 7360 hwusbdev (b93d3c81ef1d372dc5bd5e6275362e1a) C:\WINDOWS\system32\DRIVERS\ewusbdev.sys
09:51:04.0406 7360 hwusbdev - ok
09:51:04.0453 7360 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys
09:51:04.0453 7360 i2omgmt - ok
09:51:04.0484 7360 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys
09:51:04.0484 7360 i2omp - ok
09:51:04.0500 7360 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
09:51:04.0515 7360 i8042prt - ok
09:51:04.0578 7360 IAANTMON (52e8a3cc8269adb27d25182284c5e650) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
09:51:04.0593 7360 IAANTMON - ok
09:51:04.0718 7360 ialm (95eda8b88ade63fc2a896f8f214094e6) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
09:51:04.0843 7360 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\igxpmp32.sys. Real md5: 95eda8b88ade63fc2a896f8f214094e6, Fake md5: 3b743262b6456167888d15f1121b3bf7
09:51:04.0875 7360 ialm ( ForgedFile.Multi.Generic ) - warning
09:51:04.0875 7360 ialm - detected ForgedFile.Multi.Generic (1)
09:51:04.0921 7360 iaStor (71ecc07bc7c5e24c3dd01d8a29a24054) C:\WINDOWS\system32\drivers\iaStor.sys
09:51:04.0921 7360 iaStor - ok
09:51:05.0000 7360 idsvc (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
09:51:05.0015 7360 idsvc - ok
09:51:05.0046 7360 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
09:51:05.0062 7360 Imapi - ok
09:51:05.0093 7360 ImapiService (30deaf54a9755bb8546168cfe8a6b5e1) C:\WINDOWS\system32\imapi.exe
09:51:05.0093 7360 ImapiService - ok
09:51:05.0140 7360 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys
09:51:05.0140 7360 ini910u - ok
09:51:05.0156 7360 IntcHdmiAddService (f32a62c765885bd8e4352a1565f702a6) C:\WINDOWS\system32\drivers\IntcHdmi.sys
09:51:05.0156 7360 IntcHdmiAddService - ok
09:51:05.0187 7360 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys
09:51:05.0187 7360 IntelIde - ok
09:51:05.0218 7360 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys
09:51:05.0218 7360 intelppm - ok
09:51:05.0250 7360 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
09:51:05.0265 7360 Ip6Fw - ok
09:51:05.0281 7360 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
09:51:05.0281 7360 IpFilterDriver - ok
09:51:05.0296 7360 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
09:51:05.0312 7360 IpInIp - ok
09:51:05.0328 7360 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
09:51:05.0328 7360 IpNat - ok
09:51:05.0390 7360 iPod Service (49918803b661367023bf325cf602afdc) C:\Program Files\iPod\bin\iPodService.exe
09:51:05.0406 7360 iPod Service - ok
09:51:05.0437 7360 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
09:51:05.0437 7360 IPSec - ok
09:51:05.0468 7360 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
09:51:05.0468 7360 IRENUM - ok
09:51:05.0500 7360 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
09:51:05.0515 7360 isapnp - ok
09:51:05.0656 7360 JavaQuickStarterService (381b25dc8e958d905b33130d500bbf29) C:\Program Files\Java\jre6\bin\jqs.exe
09:51:05.0656 7360 JavaQuickStarterService - ok
09:51:05.0703 7360 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
09:51:05.0703 7360 Kbdclass - ok
09:51:05.0718 7360 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
09:51:05.0718 7360 kbdhid - ok
09:51:05.0765 7360 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
09:51:05.0765 7360 kmixer - ok
09:51:05.0796 7360 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
09:51:05.0812 7360 KSecDD - ok
09:51:05.0890 7360 LanmanServer (3a7c3cbe5d96b8ae96ce81f0b22fb527) C:\WINDOWS\System32\srvsvc.dll
09:51:05.0890 7360 LanmanServer - ok
09:51:05.0937 7360 lanmanworkstation (a8888a5327621856c0cec4e385f69309) C:\WINDOWS\System32\wkssvc.dll
09:51:05.0937 7360 lanmanworkstation - ok
09:51:05.0953 7360 lbrtfdc - ok
09:51:06.0109 7360 LiveUpdate (41e1523122384decaf9a2c210db0310f) C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
09:51:06.0203 7360 Suspicious file (Forged): C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE. Real md5: 41e1523122384decaf9a2c210db0310f, Fake md5: f3cb12a5791761ebca4c7ba5fc89f5c2
09:51:06.0218 7360 LiveUpdate ( ForgedFile.Multi.Generic ) - warning
09:51:06.0218 7360 LiveUpdate - detected ForgedFile.Multi.Generic (1)
09:51:06.0296 7360 LmHosts (a7db739ae99a796d91580147e919cc59) C:\WINDOWS\System32\lmhsvc.dll
09:51:06.0296 7360 LmHosts - ok
09:51:06.0359 7360 LMIGuardianSvc (2375e7e01635fbccde2f796a9e078e07) C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
09:51:06.0359 7360 LMIGuardianSvc - ok
09:51:06.0375 7360 LMIInfo (4f69faaabb7db0d43e327c0b6aab40fc) C:\Program Files\LogMeIn\x86\RaInfo.sys
09:51:06.0375 7360 LMIInfo - ok
09:51:06.0390 7360 LMIMaint (b9c127273eaba403311854a8dcb6d0aa) C:\Program Files\LogMeIn\x86\RaMaint.exe
09:51:06.0390 7360 LMIMaint - ok
09:51:06.0421 7360 lmimirr (4477689e2d8ae6b78ba34c9af4cc1ed1) C:\WINDOWS\system32\DRIVERS\lmimirr.sys
09:51:06.0421 7360 lmimirr - ok
09:51:06.0437 7360 LMIRfsClientNP - ok
09:51:06.0468 7360 LMIRfsDriver (3faa563ddf853320f90259d455a01d79) C:\WINDOWS\system32\drivers\LMIRfsDriver.sys
09:51:06.0468 7360 LMIRfsDriver - ok
09:51:06.0500 7360 LogMeIn (432618fa75b61059d2c57d6a7e55147a) C:\Program Files\LogMeIn\x86\LogMeIn.exe
09:51:06.0500 7360 LogMeIn - ok
09:51:06.0546 7360 MBAMProtector (b7ca8cc3f978201856b6ab82f40953c3) C:\WINDOWS\system32\drivers\mbam.sys
09:51:06.0546 7360 MBAMProtector - ok
09:51:06.0640 7360 MBAMService (056b19651bd7b7ce5f89a3ac46dbdc08) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
09:51:06.0640 7360 MBAMService - ok
09:51:06.0703 7360 MDM (11f714f85530a2bd134074dc30e99fca) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
09:51:06.0703 7360 MDM - ok
09:51:06.0750 7360 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
09:51:06.0750 7360 mdmxsdk - ok
09:51:06.0781 7360 Messenger (986b1ff5814366d71e0ac5755c88f2d3) C:\WINDOWS\System32\msgsvc.dll
09:51:06.0781 7360 Messenger - ok
09:51:06.0812 7360 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
09:51:06.0812 7360 mnmdd - ok
09:51:06.0843 7360 mnmsrvc (d18f1f0c101d06a1c1adf26eed16fcdd) C:\WINDOWS\system32\mnmsrvc.exe
09:51:06.0843 7360 mnmsrvc - ok
09:51:06.0875 7360 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys
09:51:06.0875 7360 Modem - ok
09:51:06.0921 7360 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys
09:51:06.0921 7360 Mouclass - ok
09:51:06.0953 7360 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys
09:51:06.0953 7360 mouhid - ok
09:51:06.0968 7360 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
09:51:06.0984 7360 MountMgr - ok
09:51:07.0031 7360 MPE (c0f8e0c2c3c0437cf37c6781896dc3ec) C:\WINDOWS\system32\DRIVERS\MPE.sys
09:51:07.0031 7360 MPE - ok
09:51:07.0093 7360 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys
09:51:07.0093 7360 mraid35x - ok
09:51:07.0125 7360 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
09:51:07.0125 7360 MRxDAV - ok
09:51:07.0171 7360 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
09:51:07.0171 7360 MRxSmb - ok
09:51:07.0265 7360 MSDTC (a137f1470499a205abbb9aafb3b6f2b1) C:\WINDOWS\system32\msdtc.exe
09:51:07.0265 7360 MSDTC - ok
09:51:07.0296 7360 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
09:51:07.0296 7360 Msfs - ok
09:51:07.0312 7360 MSIServer - ok
09:51:07.0375 7360 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
09:51:07.0375 7360 MSKSSRV - ok
09:51:07.0406 7360 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
09:51:07.0406 7360 MSPCLOCK - ok
09:51:07.0421 7360 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
09:51:07.0421 7360 MSPQM - ok
09:51:07.0468 7360 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
09:51:07.0468 7360 mssmbios - ok
09:51:07.0515 7360 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
09:51:07.0515 7360 MSTEE - ok
09:51:07.0562 7360 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
09:51:07.0562 7360 Mup - ok
09:51:07.0593 7360 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
09:51:07.0593 7360 NABTSFEC - ok
09:51:07.0640 7360 napagent (0102140028fad045756796e1c685d695) C:\WINDOWS\System32\qagentrt.dll
09:51:07.0656 7360 napagent - ok
09:51:07.0687 7360 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
09:51:07.0687 7360 NDIS - ok
09:51:07.0734 7360 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
09:51:07.0750 7360 NdisIP - ok
09:51:07.0796 7360 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
09:51:07.0796 7360 NdisTapi - ok
09:51:07.0843 7360 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
09:51:07.0843 7360 Ndisuio - ok
09:51:07.0859 7360 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
09:51:07.0859 7360 NdisWan - ok
09:51:07.0906 7360 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
09:51:07.0906 7360 NDProxy - ok
09:51:07.0968 7360 Netaapl (1352e1648213551923a0a822e441553c) C:\WINDOWS\system32\DRIVERS\netaapl.sys
09:51:07.0968 7360 Netaapl - ok
09:51:07.0984 7360 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
09:51:07.0984 7360 NetBIOS - ok
09:51:08.0015 7360 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
09:51:08.0015 7360 NetBT - ok
09:51:08.0078 7360 NetDDE (b857ba82860d7ff85ae29b095645563b) C:\WINDOWS\system32\netdde.exe
09:51:08.0078 7360 NetDDE - ok
09:51:08.0093 7360 NetDDEdsdm (b857ba82860d7ff85ae29b095645563b) C:\WINDOWS\system32\netdde.exe
09:51:08.0093 7360 NetDDEdsdm - ok
09:51:08.0156 7360 Netlogon (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
09:51:08.0156 7360 Netlogon - ok
09:51:08.0203 7360 Netman (13e67b55b3abd7bf3fe7aae5a0f9a9de) C:\WINDOWS\System32\netman.dll
09:51:08.0203 7360 Netman - ok
09:51:08.0296 7360 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
09:51:08.0296 7360 NetTcpPortSharing - ok
09:51:08.0390 7360 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
09:51:08.0390 7360 NIC1394 - ok
09:51:08.0437 7360 Nla (943337d786a56729263071623bbb9de5) C:\WINDOWS\System32\mswsock.dll
09:51:08.0453 7360 Nla - ok
09:51:08.0515 7360 NPF (b9730495e0cf674680121e34bd95a73b) C:\WINDOWS\system32\drivers\NPF.sys
09:51:08.0531 7360 NPF - ok
09:51:08.0578 7360 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
09:51:08.0578 7360 Npfs - ok
09:51:08.0640 7360 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
09:51:08.0656 7360 Ntfs - ok
09:51:08.0734 7360 NtLmSsp (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
09:51:08.0734 7360 NtLmSsp - ok
09:51:08.0859 7360 NtmsSvc (156f64a3345bd23c600655fb4d10bc08) C:\WINDOWS\system32\ntmssvc.dll
09:51:08.0890 7360 NtmsSvc - ok
09:51:08.0953 7360 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
09:51:08.0953 7360 Null - ok
09:51:08.0968 7360 NvtSp50 - ok
09:51:09.0015 7360 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
09:51:09.0015 7360 NwlnkFlt - ok
09:51:09.0031 7360 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
09:51:09.0031 7360 NwlnkFwd - ok
09:51:09.0062 7360 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
09:51:09.0062 7360 ohci1394 - ok
09:51:09.0140 7360 ose (7a56cf3e3f12e8af599963b16f50fb6a) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
09:51:09.0140 7360 ose - ok
09:51:09.0156 7360 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\drivers\Parport.sys
09:51:09.0156 7360 Parport - ok
09:51:09.0187 7360 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
09:51:09.0187 7360 PartMgr - ok
09:51:09.0203 7360 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
09:51:09.0218 7360 ParVdm - ok
09:51:09.0234 7360 PBADRV (4088c1ecd1f54281a92fa663b0fdc36f) C:\WINDOWS\system32\DRIVERS\PBADRV.sys
09:51:09.0234 7360 PBADRV - ok
09:51:09.0250 7360 PCASp50 - ok
09:51:09.0281 7360 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys
09:51:09.0281 7360 PCI - ok
09:51:09.0296 7360 PCIDump - ok
09:51:09.0328 7360 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys
09:51:09.0328 7360 PCIIde - ok
09:51:09.0343 7360 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\DRIVERS\pcmcia.sys
09:51:09.0343 7360 Pcmcia - ok
09:51:09.0390 7360 PCTBD (3a0262b85b5bb4d4cfc096ea00ed610b) C:\WINDOWS\system32\Drivers\PCTBD.sys
09:51:09.0390 7360 PCTBD - ok
09:51:09.0437 7360 PCTCore (0edb74bd0d52d6d94cf862322e48b94e) C:\WINDOWS\system32\drivers\PCTCore.sys
09:51:09.0453 7360 PCTCore - ok
09:51:09.0468 7360 pctDS (8734f7346b39a710491e0ddb136da2a3) C:\WINDOWS\system32\drivers\pctDS.sys
09:51:09.0468 7360 pctDS - ok
09:51:09.0515 7360 pctEFA (653d8079cc000ec454789740a07b84a8) C:\WINDOWS\system32\drivers\pctEFA.sys
09:51:09.0515 7360 pctEFA - ok
09:51:09.0546 7360 pctgntdi (00bfb1452ed8bb69fd135eb6a682303e) C:\WINDOWS\system32\drivers\pctgntdi.sys
09:51:09.0562 7360 pctgntdi - ok
09:51:09.0609 7360 pctplsg (9e68be6aadbc3d688bac161f28af0ce0) C:\WINDOWS\system32\drivers\pctplsg.sys
09:51:09.0609 7360 pctplsg - ok
09:51:09.0640 7360 PCTSD (ec49993baa9a86adf1cb6fa1cd895882) C:\WINDOWS\system32\Drivers\PCTSD.sys
09:51:09.0640 7360 PCTSD - ok
09:51:09.0656 7360 PDCOMP - ok
09:51:09.0671 7360 PDFRAME - ok
09:51:09.0687 7360 PDRELI - ok
09:51:09.0703 7360 PDRFRAME - ok
09:51:09.0734 7360 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys
09:51:09.0750 7360 perc2 - ok
09:51:09.0750 7360 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys
09:51:09.0750 7360 perc2hib - ok
09:51:09.0796 7360 Pfc (444f122e68db44c0589227781f3c8b3f) C:\WINDOWS\system32\drivers\pfc.sys
09:51:09.0796 7360 Pfc - ok
09:51:09.0843 7360 PlugPlay (65df52f5b8b6e9bbd183505225c37315) C:\WINDOWS\system32\services.exe
09:51:09.0843 7360 PlugPlay - ok
09:51:09.0890 7360 PolicyAgent (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
09:51:09.0890 7360 PolicyAgent - ok
09:51:09.0921 7360 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
09:51:09.0921 7360 PptpMiniport - ok
09:51:09.0937 7360 ProtectedStorage (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
09:51:09.0937 7360 ProtectedStorage - ok
09:51:09.0953 7360 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
09:51:09.0968 7360 PSched - ok
09:51:09.0984 7360 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
09:51:09.0984 7360 Ptilink - ok
09:51:10.0031 7360 PxHelp20 (153d02480a0a2f45785522e814c634b6) C:\WINDOWS\system32\Drivers\PxHelp20.sys
09:51:10.0031 7360 PxHelp20 - ok
09:51:10.0046 7360 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys
09:51:10.0046 7360 ql1080 - ok
09:51:10.0062 7360 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
09:51:10.0078 7360 Ql10wnt - ok
09:51:10.0093 7360 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys
09:51:10.0093 7360 ql12160 - ok
09:51:10.0109 7360 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys
09:51:10.0125 7360 ql1240 - ok
09:51:10.0140 7360 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys
09:51:10.0140 7360 ql1280 - ok
09:51:10.0171 7360 RampartSvc (e80485d820845d373cb003f7500e4d29) C:\Program Files\SonicWALL\SonicWALL Global VPN Client\RampartSvc.exe
09:51:10.0187 7360 RampartSvc - ok
09:51:10.0203 7360 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
09:51:10.0218 7360 RasAcd - ok
09:51:10.0250 7360 RasAuto (ad188be7bdf94e8df4ca0a55c00a5073) C:\WINDOWS\System32\rasauto.dll
09:51:10.0250 7360 RasAuto - ok
09:51:10.0281 7360 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
09:51:10.0281 7360 Rasl2tp - ok
09:51:10.0312 7360 RasMan (76a9a3cbeadd68cc57cda5e1d7448235) C:\WINDOWS\System32\rasmans.dll
09:51:10.0312 7360 RasMan - ok
09:51:10.0343 7360 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
09:51:10.0343 7360 RasPppoe - ok
09:51:10.0375 7360 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
09:51:10.0375 7360 Raspti - ok
09:51:10.0390 7360 RCFOX (5c72bbc9ca332847e0913168d917d2ee) C:\WINDOWS\system32\Drivers\RCFOX.sys
09:51:10.0406 7360 RCFOX - ok
09:51:10.0437 7360 rcvpn (808b237c0b31327be1dbd72f14787f7e) C:\WINDOWS\system32\DRIVERS\rcvpn.sys
09:51:10.0437 7360 rcvpn - ok
09:51:10.0468 7360 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
09:51:10.0468 7360 Rdbss - ok
09:51:10.0484 7360 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
09:51:10.0500 7360 RDPCDD - ok
09:51:10.0546 7360 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
09:51:10.0546 7360 rdpdr - ok
09:51:10.0593 7360 RDPWD (5b3055daa788bd688594d2f5981f2a83) C:\WINDOWS\system32\drivers\RDPWD.sys
09:51:10.0593 7360 RDPWD - ok
09:51:10.0640 7360 RDSessMgr (3c37bf86641bda977c3bf8a840f3b7fa) C:\WINDOWS\system32\sessmgr.exe
09:51:10.0656 7360 RDSessMgr - ok
09:51:10.0671 7360 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys
09:51:10.0687 7360 redbook - ok
09:51:10.0750 7360 RemoteAccess (7e699ff5f59b5d9de5390e3c34c67cf5) C:\WINDOWS\System32\mprdim.dll
09:51:10.0765 7360 RemoteAccess - ok
09:51:10.0812 7360 RemoteRegistry (5b19b557b0c188210a56a6b699d90b8f) C:\WINDOWS\system32\regsvc.dll
09:51:10.0812 7360 RemoteRegistry - ok
09:51:10.0875 7360 rimmptsk (ea885e7a56f1be1f14c372337c42fe48) C:\WINDOWS\system32\DRIVERS\rimmptsk.sys
09:51:10.0890 7360 rimmptsk - ok
09:51:10.0906 7360 RpcLocator (aaed593f84afa419bbae8572af87cf6a) C:\WINDOWS\system32\locator.exe
09:51:10.0921 7360 RpcLocator - ok
09:51:10.0968 7360 RpcSs (6b27a5c03dfb94b4245739065431322c) C:\WINDOWS\system32\rpcss.dll
09:51:10.0968 7360 RpcSs - ok
09:51:11.0031 7360 RSVP (471b3f9741d762abe75e9deea4787e47) C:\WINDOWS\system32\rsvp.exe
09:51:11.0031 7360 RSVP - ok
09:51:11.0046 7360 SamSs (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
09:51:11.0046 7360 SamSs - ok
09:51:11.0093 7360 SCardSvr (86d007e7a654b9a71d1d7d856b104353) C:\WINDOWS\System32\SCardSvr.exe
09:51:11.0093 7360 SCardSvr - ok
09:51:11.0125 7360 Schedule (0a9a7365a1ca4319aa7c1d6cd8e4eafa) C:\WINDOWS\system32\schedsvc.dll
09:51:11.0125 7360 Schedule - ok
09:51:11.0203 7360 sdAuxService (17d6a03103586d7954ba74c2219ce1bb) C:\Program Files\PC Tools Security\pctsAuxs.exe
09:51:11.0218 7360 sdAuxService - ok
09:51:11.0265 7360 sdbus (8d04819a3ce51b9eb47e5689b44d43c4) C:\WINDOWS\system32\DRIVERS\sdbus.sys
09:51:11.0281 7360 sdbus - ok
09:51:11.0328 7360 sdCoreService (32828691ef6e3e1cd0c32fbe8617763e) C:\Program Files\PC Tools Security\pctsSvc.exe
09:51:11.0359 7360 sdCoreService - ok
09:51:11.0421 7360 SeaPort (58dc20eb15f071804c56fccc796417a2) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
09:51:11.0421 7360 SeaPort - ok
09:51:11.0453 7360 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
09:51:11.0453 7360 Secdrv - ok
09:51:11.0500 7360 seclogon (cbe612e2bb6a10e3563336191eda1250) C:\WINDOWS\System32\seclogon.dll
09:51:11.0500 7360 seclogon - ok
09:51:11.0609 7360 SecureStorageService (27d53cd650cc77123faf2f07023dabc7) C:\Program Files\Wave Systems Corp\Secure Storage Manager\SecureStorageService.exe
09:51:11.0625 7360 SecureStorageService - ok
09:51:11.0656 7360 SENS (7fdd5d0684eca8c1f68b4d99d124dcd0) C:\WINDOWS\system32\sens.dll
09:51:11.0656 7360 SENS - ok
09:51:11.0718 7360 Serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
09:51:11.0718 7360 Serenum - ok
09:51:11.0750 7360 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys
09:51:11.0765 7360 Serial - ok
09:51:11.0812 7360 sffdisk (0fa803c64df0914b41f807ea276bf2a6) C:\WINDOWS\system32\DRIVERS\sffdisk.sys
09:51:11.0812 7360 sffdisk - ok
09:51:11.0859 7360 sffp_sd (c17c331e435ed8737525c86a7557b3ac) C:\WINDOWS\system32\DRIVERS\sffp_sd.sys
09:51:11.0859 7360 sffp_sd - ok
09:51:11.0906 7360 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
09:51:11.0921 7360 Sfloppy - ok
09:51:11.0968 7360 SharedAccess (83f41d0d89645d7235c051ab1d9523ac) C:\WINDOWS\System32\ipnathlp.dll
09:51:11.0984 7360 SharedAccess - ok
09:51:12.0031 7360 ShellHWDetection (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
09:51:12.0046 7360 ShellHWDetection - ok
09:51:12.0046 7360 Simbad - ok
09:51:12.0078 7360 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys
09:51:12.0093 7360 sisagp - ok
09:51:12.0171 7360 SkypeUpdate (6128e98eaaed364ed1a32708d2fd22cb) C:\Program Files\Skype\Updater\Updater.exe
09:51:12.0171 7360 SkypeUpdate - ok
09:51:12.0218 7360 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
09:51:12.0218 7360 SLIP - ok
09:51:12.0265 7360 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys
09:51:12.0281 7360 Sparrow - ok
09:51:12.0328 7360 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
09:51:12.0328 7360 splitter - ok
09:51:12.0390 7360 Spooler (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
09:51:12.0406 7360 Spooler - ok
09:51:12.0484 7360 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys
09:51:12.0484 7360 sr - ok
09:51:12.0531 7360 srservice (3805df0ac4296a34ba4bf93b346cc378) C:\WINDOWS\system32\srsvc.dll
09:51:12.0531 7360 srservice - ok
09:51:12.0578 7360 SRS_PremiumSound_Service (584477fdfa731af4635f5875c6b52531) C:\WINDOWS\system32\drivers\srs_PremiumSound_i386.sys
09:51:12.0593 7360 SRS_PremiumSound_Service - ok
09:51:12.0625 7360 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
09:51:12.0640 7360 Srv - ok
09:51:12.0671 7360 SSDPSRV (0a5679b3714edab99e357057ee88fca6) C:\WINDOWS\System32\ssdpsrv.dll
09:51:12.0671 7360 SSDPSRV - ok
09:51:12.0734 7360 STacSV (3603f3db9fba2a8fa91829681ba25afa) c:\drivers\audio\r213367\stacsv.exe
09:51:12.0734 7360 STacSV - ok
09:51:12.0812 7360 STHDA (1b76479b80ff0f6e245ba590a64102be) C:\WINDOWS\system32\drivers\sthda.sys
09:51:12.0843 7360 STHDA - ok
09:51:12.0890 7360 stisvc (8bad69cbac032d4bbacfce0306174c30) C:\WINDOWS\system32\wiaservc.dll
09:51:12.0890 7360 stisvc - ok
09:51:13.0000 7360 StkAMini (69a926dbca12046633e3d6e6d46e7087) C:\WINDOWS\system32\Drivers\StkAMini.sys
09:51:13.0015 7360 StkAMini - ok
09:51:13.0062 7360 StkASSrv (5ccfe3b03f97005d221ba897c9a20b38) C:\WINDOWS\System32\StkASv2K.exe
09:51:13.0062 7360 StkASSrv - ok
09:51:13.0093 7360 StkScan (83406fb18cb0abfec501add986d63572) C:\WINDOWS\system32\Drivers\StkScan.sys
09:51:13.0109 7360 StkScan - ok
09:51:13.0171 7360 stllssvr (de3e7a2345ebaa3ce8e6957dfb55fb15) C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
09:51:13.0187 7360 stllssvr - ok
09:51:13.0234 7360 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
09:51:13.0250 7360 streamip - ok
09:51:13.0281 7360 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
09:51:13.0281 7360 swenum - ok
09:51:13.0343 7360 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
09:51:13.0343 7360 swmidi - ok
09:51:13.0359 7360 SwPrv - ok
09:51:13.0390 7360 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys
09:51:13.0406 7360 symc810 - ok
09:51:13.0437 7360 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys
09:51:13.0437 7360 symc8xx - ok
09:51:13.0453 7360 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys
09:51:13.0453 7360 sym_hi - ok
09:51:13.0468 7360 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys
09:51:13.0468 7360 sym_u3 - ok
09:51:13.0500 7360 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
09:51:13.0500 7360 sysaudio - ok
09:51:13.0578 7360 SysmonLog (c7abbc59b43274b1109df6b24d617051) C:\WINDOWS\system32\smlogsvc.exe
09:51:13.0578 7360 SysmonLog - ok
09:51:13.0609 7360 TapiSrv (3cb78c17bb664637787c9a1c98f79c38) C:\WINDOWS\System32\tapisrv.dll
09:51:13.0625 7360 TapiSrv - ok
09:51:13.0671 7360 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
09:51:13.0687 7360 Tcpip - ok
09:51:13.0765 7360 tcsd_win32.exe (69f1a38a6dbfe682491cb61a596662e3) C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe
09:51:13.0828 7360 tcsd_win32.exe - ok
09:51:13.0921 7360 TdmService (d228907c9623888bbcfd94617385e3c4) C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
09:51:13.0984 7360 TdmService - ok
09:51:14.0078 7360 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
09:51:14.0078 7360 TDPIPE - ok
09:51:14.0093 7360 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
09:51:14.0093 7360 TDTCP - ok
09:51:14.0187 7360 TeamViewer6 (5a289da7875dcf17d4e41a949ae0116f) C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
09:51:14.0250 7360 Suspicious file (Forged): C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe. Real md5: 5a289da7875dcf17d4e41a949ae0116f, Fake md5: efd6843c137991cd253ca959e300e886
09:51:14.0265 7360 TeamViewer6 ( ForgedFile.Multi.Generic ) - warning
09:51:14.0265 7360 TeamViewer6 - detected ForgedFile.Multi.Generic (1)
09:51:14.0343 7360 TeamViewer7 (9a3fdd887be86823c96e8e70c7860a84) C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
09:51:14.0437 7360 Suspicious file (Forged): C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe. Real md5: 9a3fdd887be86823c96e8e70c7860a84, Fake md5: 74fc70ae64a7b7dabec9697ce0a1f4fa
09:51:14.0453 7360 TeamViewer7 ( ForgedFile.Multi.Generic ) - warning
09:51:14.0453 7360 TeamViewer7 - detected ForgedFile.Multi.Generic (1)
09:51:14.0500 7360 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
09:51:14.0500 7360 TermDD - ok
09:51:14.0578 7360 TermService (ff3477c03be7201c294c35f684b3479f) C:\WINDOWS\System32\termsrv.dll
09:51:14.0578 7360 TermService - ok
09:51:14.0609 7360 TfFsMon - ok
09:51:14.0640 7360 TfNetMon - ok
09:51:14.0656 7360 TfSysMon - ok
09:51:14.0703 7360 Themes (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
09:51:14.0703 7360 Themes - ok
09:51:14.0750 7360 TlntSvr (db7205804759ff62c34e3efd8a4cc76a) C:\WINDOWS\system32\tlntsvr.exe
09:51:14.0750 7360 TlntSvr - ok
09:51:14.0781 7360 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\system32\DRIVERS\toside.sys
09:51:14.0796 7360 TosIde - ok
09:51:14.0828 7360 TrkWks (55bca12f7f523d35ca3cb833c725f54e) C:\WINDOWS\system32\trkwks.dll
09:51:14.0828 7360 TrkWks - ok
09:51:14.0859 7360 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
09:51:14.0859 7360 Udfs - ok
09:51:14.0937 7360 UleadBurningHelper (f13da74969897359a88f2a739f54a250) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
09:51:14.0953 7360 UleadBurningHelper - ok
09:51:15.0000 7360 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys
09:51:15.0000 7360 ultra - ok
09:51:15.0031 7360 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
09:51:15.0046 7360 Update - ok
09:51:15.0093 7360 upnphost (1ebafeb9a3fbdc41b8d9c7f0f687ad91) C:\WINDOWS\System32\upnphost.dll
09:51:15.0093 7360 upnphost - ok
09:51:15.0125 7360 UPS (05365fb38fca1e98f7a566aaaf5d1815) C:\WINDOWS\System32\ups.exe
09:51:15.0125 7360 UPS - ok
09:51:15.0203 7360 USB28xxBGA (bfdf410cffa4f60bd26bfa81ded5b6f5) C:\WINDOWS\system32\DRIVERS\emBDA.sys
09:51:15.0218 7360 USB28xxBGA - ok
09:51:15.0250 7360 USB28xxOEM (bf06b978dd4c4c0f860d71a8de402dc0) C:\WINDOWS\system32\DRIVERS\emOEM.sys
09:51:15.0250 7360 USB28xxOEM - ok
09:51:15.0312 7360 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys
09:51:15.0328 7360 USBAAPL - ok
09:51:15.0359 7360 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys
09:51:15.0359 7360 usbaudio - ok
09:51:15.0406 7360 usbccgp (c18d6c74953621346df6b0a11f80c1cc) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
09:51:15.0421 7360 usbccgp - ok
09:51:15.0453 7360 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
09:51:15.0468 7360 usbehci - ok
09:51:15.0515 7360 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
09:51:15.0515 7360 usbhub - ok
09:51:15.0593 7360 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
09:51:15.0593 7360 usbprint - ok
09:51:15.0671 7360 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
09:51:15.0671 7360 usbscan - ok
09:51:15.0703 7360 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
09:51:15.0703 7360 USBSTOR - ok
09:51:15.0750 7360 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
09:51:15.0750 7360 usbuhci - ok
09:51:15.0765 7360 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
09:51:15.0781 7360 VgaSave - ok
09:51:15.0812 7360 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys
09:51:15.0812 7360 viaagp - ok
09:51:15.0828 7360 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys
09:51:15.0828 7360 ViaIde - ok
09:51:15.0890 7360 VoiceGuide IVR (5378311e90cc2f1c598b7ffd2be8302c) C:\Program Files\VoiceGuide\vgIvrService.exe
09:51:15.0890 7360 VoiceGuide IVR - ok
09:51:15.0906 7360 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys
09:51:15.0906 7360 VolSnap - ok
09:51:15.0953 7360 vsdatant (27b3dd12a19eec50220df15b64913dda) C:\WINDOWS\system32\vsdatant.sys
09:51:15.0953 7360 vsdatant - ok
09:51:16.0046 7360 VSS (7a9db3a67c333bf0bd42e42b8596854b) C:\WINDOWS\System32\vssvc.exe
09:51:16.0062 7360 VSS - ok
09:51:16.0109 7360 w32time (54af4b1d5459500ef0937f6d33b1914f) C:\WINDOWS\system32\w32time.dll
09:51:16.0109 7360 w32time - ok
09:51:16.0140 7360 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
09:51:16.0140 7360 Wanarp - ok
09:51:16.0171 7360 WavxDMgr (f9cea286b0f8311be823d071eabdf6e0) C:\WINDOWS\system32\DRIVERS\WavxDMgr.sys
09:51:16.0171 7360 WavxDMgr - ok
09:51:16.0250 7360 Wdf01000 (d918617b46457b9ac28027722e30f647) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
09:51:16.0265 7360 Wdf01000 - ok
09:51:16.0281 7360 WDICA - ok
09:51:16.0328 7360 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
09:51:16.0328 7360 wdmaud - ok
09:51:16.0375 7360 WebClient (77a354e28153ad2d5e120a5a8687bc06) C:\WINDOWS\System32\webclnt.dll
09:51:16.0375 7360 WebClient - ok
09:51:16.0421 7360 winachsf (2760c329ac300ed64c3dba8cda599cda) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
09:51:16.0437 7360 winachsf - ok
09:51:16.0500 7360 winmgmt (2d0e4ed081963804ccc196a0929275b5) C:\WINDOWS\system32\wbem\WMIsvc.dll
09:51:16.0500 7360 winmgmt - ok
09:51:16.0578 7360 WinRM (18f347402da544a780949b8fdf83351b) C:\WINDOWS\system32\WsmSvc.dll
09:51:16.0609 7360 WinRM - ok
09:51:16.0796 7360 wltrysvc - ok
09:51:16.0843 7360 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
09:51:16.0843 7360 WmdmPmSN - ok
09:51:16.0906 7360 Wmi (e76f8807070ed04e7408a86d6d3a6137) C:\WINDOWS\System32\advapi32.dll
09:51:16.0921 7360 Wmi - ok
09:51:16.0968 7360 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
09:51:16.0968 7360 WmiAcpi - ok
09:51:17.0000 7360 WmiApSrv (e0673f1106e62a68d2257e376079f821) C:\WINDOWS\system32\wbem\wmiapsrv.exe
09:51:17.0015 7360 WmiApSrv - ok
09:51:17.0078 7360 WMPNetworkSvc (f74e3d9a7fa9556c3bbb14d4e5e63d3b) C:\Program Files\Windows Media Player\WMPNetwk.exe
09:51:17.0093 7360 WMPNetworkSvc - ok
09:51:17.0171 7360 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
09:51:17.0171 7360 WS2IFSL - ok
09:51:17.0218 7360 wscsvc (7c278e6408d1dce642230c0585a854d5) C:\WINDOWS\system32\wscsvc.dll
09:51:17.0218 7360 wscsvc - ok
09:51:17.0234 7360 WSearch - ok
09:51:17.0312 7360 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
09:51:17.0312 7360 WSTCODEC - ok
09:51:17.0328 7360 wuauserv (35321fb577cdc98ce3eb3a3eb9e4610a) C:\WINDOWS\system32\wuauserv.dll
09:51:17.0343 7360 wuauserv - ok
09:51:17.0375 7360 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
09:51:17.0390 7360 WudfPf - ok
09:51:17.0421 7360 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
09:51:17.0421 7360 WudfRd - ok
09:51:17.0453 7360 WudfSvc (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll
09:51:17.0453 7360 WudfSvc - ok
09:51:17.0500 7360 WZCSVC (81dc3f549f44b1c1fff022dec9ecf30b) C:\WINDOWS\System32\wzcsvc.dll
09:51:17.0531 7360 WZCSVC - ok
09:51:17.0578 7360 xmlprov (295d21f14c335b53cb8154e5b1f892b9) C:\WINDOWS\System32\xmlprov.dll
09:51:17.0593 7360 xmlprov - ok
09:51:17.0625 7360 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
09:51:17.0750 7360 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
09:51:17.0750 7360 \Device\Harddisk0\DR0 - detected TDSS File System (1)
09:51:17.0750 7360 Boot (0x1200) (ceb4445981101a08bccb18b5f9de9077) \Device\Harddisk0\DR0\Partition0
09:51:17.0765 7360 \Device\Harddisk0\DR0\Partition0 - ok
09:51:17.0765 7360 ============================================================
09:51:17.0765 7360 Scan finished
09:51:17.0765 7360 ============================================================
09:51:17.0765 1520 Detected object count: 6
09:51:17.0765 1520 Actual detected object count: 6
09:52:10.0437 1520 BCM43XX ( ForgedFile.Multi.Generic ) - skipped by user
09:52:10.0437 1520 BCM43XX ( ForgedFile.Multi.Generic ) - User select action: Skip
09:52:10.0437 1520 ialm ( ForgedFile.Multi.Generic ) - skipped by user
09:52:10.0437 1520 ialm ( ForgedFile.Multi.Generic ) - User select action: Skip
09:52:10.0453 1520 LiveUpdate ( ForgedFile.Multi.Generic ) - skipped by user
09:52:10.0453 1520 LiveUpdate ( ForgedFile.Multi.Generic ) - User select action: Skip
09:52:10.0453 1520 TeamViewer6 ( ForgedFile.Multi.Generic ) - skipped by user
09:52:10.0453 1520 TeamViewer6 ( ForgedFile.Multi.Generic ) - User select action: Skip
09:52:10.0453 1520 TeamViewer7 ( ForgedFile.Multi.Generic ) - skipped by user
09:52:10.0453 1520 TeamViewer7 ( ForgedFile.Multi.Generic ) - User select action: Skip
09:52:10.0453 1520 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
09:52:10.0453 1520 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip

Any help to remove it would be greatly appreciated! :)

Edited by czarbj, 03 April 2012 - 07:30 PM.


BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users