Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Rogue.FakeHDD


  • Please log in to reply
7 replies to this topic

#1 mountainbadger

mountainbadger

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Local time:10:45 PM

Posted 09 August 2012 - 04:32 PM

Hi, I'm struggling removing this virus. I've followed the guide here (http://www.bleepingcomputer.com/virus-removal/remove-system-check) and also the instructions in this thread (http://www.bleepingcomputer.com/forums/topic436954.html/page__p__2543571__hl__roguefakehdd__fromsearch__1#entry2543571) with the exception of running the TDSSKiller. Whenever I try to run this, it simply does not run.

I also noticed that after running RKill, while the Super Antispyware scan was running, the virus's notification flag appeared again in the notification area of the taskbar.

I'm running Windows 7 Pro 64-bit OS. Any assitance you can provide is greatly appreciated.

BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:10:45 PM

Posted 09 August 2012 - 04:35 PM

Download

FIXTDSS

Launch it ,It may ask for restart,reboot the PC

On reboot ,click on REPAIR

Download

TDSSkiller

Launch it.Click on change parameters-Select TDLFS file system

Click on "Scan".Please post the LOG report(log file should be in your C drive)

Do not change the default options on scan results

Download

aswMBR

Launch it, allow it to download latest Avast! virus definitions
Click the "Scan" button to start scan.After scan finishes,click on Save log

Post the log results here

Download

ESET online scanner

Install it

Click on START,it should download the virus definitions
When scan gets completed,click on LIST of found threats

Export the list to desktop,copy the contents of the text file in your reply

#3 mountainbadger

mountainbadger
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Local time:10:45 PM

Posted 09 August 2012 - 05:42 PM

I downloaded the FIXTDSS, but nothing happens when I launch it in either safe mode or normal mode. Tried to move onto the TDSSKiller, but that too fails to launch. Anything I can do to get these to launch?

#4 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:10:45 PM

Posted 09 August 2012 - 05:53 PM

See if this works

TDSS_killer

Edited by narenxp, 09 August 2012 - 05:53 PM.


#5 mountainbadger

mountainbadger
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Local time:10:45 PM

Posted 09 August 2012 - 06:56 PM

Ok, I was able to run that version of TDSSKiller. The report is below:

16:56:08.0943 1192 1.0.0.0 Nov 19 2011 15:54:30
16:56:08.0943 1192 Updater subsystem init failed!
16:56:08.0958 1192 ============================================================
16:56:08.0958 1192 Current date / time: 2012/08/09 16:56:08.0958
16:56:08.0958 1192 SystemInfo:
16:56:08.0958 1192
16:56:08.0958 1192 OS Version: 6.1.7601 ServicePack: 1.0
16:56:08.0958 1192 Product type: Workstation
16:56:08.0958 1192 ComputerName: GENERALMANAGER_
16:56:08.0958 1192 UserName: jwilson
16:56:08.0958 1192 Windows directory: C:\Windows
16:56:08.0958 1192 System windows directory: C:\Windows
16:56:08.0958 1192 Running under WOW64
16:56:08.0958 1192 Processor architecture: Intel x64
16:56:08.0958 1192 Number of processors: 4
16:56:08.0958 1192 Page size: 0x1000
16:56:08.0958 1192 Boot type: Safe boot with network
16:56:08.0958 1192 ============================================================
16:56:09.0442 1192 Initialize success
16:56:42.0342 0692 ============================================================
16:56:42.0342 0692 Scan started
16:56:42.0342 0692 Mode: Manual; TDLFS;
16:56:42.0342 0692 ============================================================
16:56:42.0670 0692 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
16:56:42.0686 0692 1394ohci - ok
16:56:42.0748 0692 5U877 (0fc813d822bfc06169ce4e0d00669021) C:\Windows\system32\DRIVERS\5U877.sys
16:56:42.0748 0692 5U877 - ok
16:56:42.0810 0692 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
16:56:42.0810 0692 ACPI - ok
16:56:42.0842 0692 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
16:56:42.0842 0692 AcpiPmi - ok
16:56:42.0998 0692 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\drivers\adp94xx.sys
16:56:42.0998 0692 adp94xx - ok
16:56:43.0060 0692 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\drivers\adpahci.sys
16:56:43.0060 0692 adpahci - ok
16:56:43.0185 0692 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\drivers\adpu320.sys
16:56:43.0185 0692 adpu320 - ok
16:56:43.0294 0692 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
16:56:43.0310 0692 AFD - ok
16:56:43.0434 0692 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
16:56:43.0434 0692 agp440 - ok
16:56:43.0497 0692 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
16:56:43.0497 0692 aliide - ok
16:56:43.0528 0692 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
16:56:43.0528 0692 amdide - ok
16:56:43.0575 0692 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\drivers\amdk8.sys
16:56:43.0575 0692 AmdK8 - ok
16:56:43.0606 0692 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\drivers\amdppm.sys
16:56:43.0606 0692 AmdPPM - ok
16:56:43.0653 0692 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
16:56:43.0668 0692 amdsata - ok
16:56:43.0700 0692 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\drivers\amdsbs.sys
16:56:43.0700 0692 amdsbs - ok
16:56:43.0731 0692 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
16:56:43.0731 0692 amdxata - ok
16:56:43.0778 0692 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
16:56:43.0778 0692 AppID - ok
16:56:43.0902 0692 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\drivers\arc.sys
16:56:43.0902 0692 arc - ok
16:56:43.0934 0692 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\drivers\arcsas.sys
16:56:43.0934 0692 arcsas - ok
16:56:43.0965 0692 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
16:56:43.0965 0692 AsyncMac - ok
16:56:43.0996 0692 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
16:56:44.0012 0692 atapi - ok
16:56:44.0136 0692 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\drivers\bxvbda.sys
16:56:44.0136 0692 b06bdrv - ok
16:56:44.0214 0692 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
16:56:44.0214 0692 b57nd60a - ok
16:56:44.0246 0692 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
16:56:44.0246 0692 Beep - ok
16:56:44.0355 0692 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
16:56:44.0355 0692 blbdrive - ok
16:56:44.0402 0692 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
16:56:44.0402 0692 bowser - ok
16:56:44.0448 0692 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\BrFiltLo.sys
16:56:44.0464 0692 BrFiltLo - ok
16:56:44.0495 0692 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\BrFiltUp.sys
16:56:44.0511 0692 BrFiltUp - ok
16:56:44.0542 0692 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
16:56:44.0542 0692 Brserid - ok
16:56:44.0573 0692 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
16:56:44.0573 0692 BrSerWdm - ok
16:56:44.0604 0692 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
16:56:44.0604 0692 BrUsbMdm - ok
16:56:44.0636 0692 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
16:56:44.0636 0692 BrUsbSer - ok
16:56:44.0667 0692 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\DRIVERS\BthEnum.sys
16:56:44.0667 0692 BthEnum - ok
16:56:44.0714 0692 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\drivers\bthmodem.sys
16:56:44.0714 0692 BTHMODEM - ok
16:56:44.0807 0692 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
16:56:44.0807 0692 BthPan - ok
16:56:44.0854 0692 BTHPORT (64c198198501f7560ee41d8d1efa7952) C:\Windows\system32\Drivers\BTHport.sys
16:56:44.0870 0692 BTHPORT - ok
16:56:44.0916 0692 BTHUSB (f188b7394d81010767b6df3178519a37) C:\Windows\system32\Drivers\BTHUSB.sys
16:56:44.0932 0692 BTHUSB - ok
16:56:45.0026 0692 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
16:56:45.0026 0692 cdfs - ok
16:56:45.0072 0692 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
16:56:45.0072 0692 cdrom - ok
16:56:45.0166 0692 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\drivers\circlass.sys
16:56:45.0166 0692 circlass - ok
16:56:45.0213 0692 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
16:56:45.0213 0692 CLFS - ok
16:56:45.0291 0692 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
16:56:45.0306 0692 CmBatt - ok
16:56:45.0322 0692 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
16:56:45.0322 0692 cmdide - ok
16:56:45.0384 0692 CNG (9ac4f97c2d3e93367e2148ea940cd2cd) C:\Windows\system32\Drivers\cng.sys
16:56:45.0384 0692 CNG - ok
16:56:45.0447 0692 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\drivers\compbatt.sys
16:56:45.0447 0692 Compbatt - ok
16:56:45.0509 0692 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\DRIVERS\CompositeBus.sys
16:56:45.0509 0692 CompositeBus - ok
16:56:45.0572 0692 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\drivers\crcdisk.sys
16:56:45.0572 0692 crcdisk - ok
16:56:45.0634 0692 CSC (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys
16:56:45.0634 0692 CSC - ok
16:56:45.0759 0692 dc3d (7af9dac504fbd047cbc3e64ae52c92bf) C:\Windows\system32\DRIVERS\dc3d.sys
16:56:45.0759 0692 dc3d - ok
16:56:45.0806 0692 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
16:56:45.0821 0692 DfsC - ok
16:56:45.0837 0692 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
16:56:45.0837 0692 discache - ok
16:56:45.0884 0692 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\drivers\disk.sys
16:56:45.0884 0692 Disk - ok
16:56:45.0899 0692 dmvsc (5db085a8a6600be6401f2b24eecb5415) C:\Windows\system32\drivers\dmvsc.sys
16:56:45.0915 0692 dmvsc - ok
16:56:45.0977 0692 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
16:56:45.0977 0692 drmkaud - ok
16:56:46.0024 0692 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
16:56:46.0040 0692 DXGKrnl - ok
16:56:46.0133 0692 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\drivers\evbda.sys
16:56:46.0211 0692 ebdrv - ok
16:56:46.0336 0692 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\drivers\elxstor.sys
16:56:46.0352 0692 elxstor - ok
16:56:46.0367 0692 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
16:56:46.0367 0692 ErrDev - ok
16:56:46.0430 0692 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
16:56:46.0430 0692 exfat - ok
16:56:46.0445 0692 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
16:56:46.0461 0692 fastfat - ok
16:56:46.0492 0692 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\drivers\fdc.sys
16:56:46.0492 0692 fdc - ok
16:56:46.0508 0692 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
16:56:46.0523 0692 FileInfo - ok
16:56:46.0539 0692 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
16:56:46.0539 0692 Filetrace - ok
16:56:46.0554 0692 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\drivers\flpydisk.sys
16:56:46.0570 0692 flpydisk - ok
16:56:46.0601 0692 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
16:56:46.0617 0692 FltMgr - ok
16:56:46.0632 0692 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
16:56:46.0632 0692 FsDepends - ok
16:56:46.0664 0692 Fs_Rec (6bd9295cc032dd3077c671fccf579a7b) C:\Windows\system32\drivers\Fs_Rec.sys
16:56:46.0664 0692 Fs_Rec - ok
16:56:46.0742 0692 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
16:56:46.0742 0692 fvevol - ok
16:56:46.0804 0692 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\drivers\gagp30kx.sys
16:56:46.0804 0692 gagp30kx - ok
16:56:46.0882 0692 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
16:56:46.0882 0692 hcw85cir - ok
16:56:46.0944 0692 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
16:56:46.0944 0692 HdAudAddService - ok
16:56:46.0976 0692 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\DRIVERS\HDAudBus.sys
16:56:46.0976 0692 HDAudBus - ok
16:56:47.0038 0692 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys
16:56:47.0054 0692 HECIx64 - ok
16:56:47.0069 0692 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\drivers\HidBatt.sys
16:56:47.0069 0692 HidBatt - ok
16:56:47.0132 0692 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
16:56:47.0132 0692 HidBth - ok
16:56:47.0147 0692 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\drivers\hidir.sys
16:56:47.0147 0692 HidIr - ok
16:56:47.0194 0692 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
16:56:47.0194 0692 HidUsb - ok
16:56:47.0288 0692 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
16:56:47.0288 0692 HpSAMD - ok
16:56:47.0381 0692 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
16:56:47.0397 0692 HTTP - ok
16:56:47.0412 0692 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
16:56:47.0412 0692 hwpolicy - ok
16:56:47.0459 0692 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
16:56:47.0459 0692 i8042prt - ok
16:56:47.0522 0692 iaStor (85977cd13fc16069ce0af7943a811775) C:\Windows\system32\DRIVERS\iaStor.sys
16:56:47.0522 0692 iaStor - ok
16:56:47.0615 0692 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
16:56:47.0615 0692 iaStorV - ok
16:56:47.0662 0692 IBMPMDRV (3761fab385f1c2f51b2fad48cfabbe9d) C:\Windows\system32\DRIVERS\ibmpmdrv.sys
16:56:47.0662 0692 IBMPMDRV - ok
16:56:47.0927 0692 igfx (0ac9e321d604be48a0d72b69ba484bdc) C:\Windows\system32\DRIVERS\igdkmd64.sys
16:56:48.0161 0692 igfx - ok
16:56:48.0224 0692 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\drivers\iirsp.sys
16:56:48.0239 0692 iirsp - ok
16:56:48.0286 0692 Impcd (dd587a55390ed2295bce6d36ad567da9) C:\Windows\system32\DRIVERS\Impcd.sys
16:56:48.0286 0692 Impcd - ok
16:56:48.0411 0692 IntcAzAudAddService (1c11e5d258bc374e7fbd598d75e49b75) C:\Windows\system32\drivers\RTKVHD64.sys
16:56:48.0489 0692 IntcAzAudAddService - ok
16:56:48.0551 0692 IntcDAud (fc727061c0f47c8059e88e05d5c8e381) C:\Windows\system32\DRIVERS\IntcDAud.sys
16:56:48.0551 0692 IntcDAud - ok
16:56:48.0582 0692 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
16:56:48.0582 0692 intelide - ok
16:56:48.0629 0692 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
16:56:48.0629 0692 intelppm - ok
16:56:48.0645 0692 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
16:56:48.0645 0692 IpFilterDriver - ok
16:56:48.0676 0692 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
16:56:48.0676 0692 IPMIDRV - ok
16:56:48.0707 0692 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
16:56:48.0707 0692 IPNAT - ok
16:56:48.0738 0692 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
16:56:48.0754 0692 IRENUM - ok
16:56:48.0770 0692 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
16:56:48.0770 0692 isapnp - ok
16:56:48.0816 0692 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
16:56:48.0816 0692 iScsiPrt - ok
16:56:48.0926 0692 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
16:56:48.0926 0692 kbdclass - ok
16:56:48.0957 0692 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys
16:56:48.0957 0692 kbdhid - ok
16:56:49.0004 0692 KSecDD (97a7070aea4c058b6418519e869a63b4) C:\Windows\system32\Drivers\ksecdd.sys
16:56:49.0004 0692 KSecDD - ok
16:56:49.0035 0692 KSecPkg (26c43a7c2862447ec59deda188d1da07) C:\Windows\system32\Drivers\ksecpkg.sys
16:56:49.0035 0692 KSecPkg - ok
16:56:49.0082 0692 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
16:56:49.0097 0692 ksthunk - ok
16:56:49.0206 0692 lenovo.smi (5acff5823634bc2c4ebf559c3b33e18e) C:\Windows\system32\DRIVERS\smiifx64.sys
16:56:49.0206 0692 lenovo.smi - ok
16:56:49.0284 0692 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
16:56:49.0284 0692 lltdio - ok
16:56:49.0362 0692 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\drivers\lsi_fc.sys
16:56:49.0362 0692 LSI_FC - ok
16:56:49.0378 0692 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\drivers\lsi_sas.sys
16:56:49.0378 0692 LSI_SAS - ok
16:56:49.0425 0692 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\drivers\lsi_sas2.sys
16:56:49.0425 0692 LSI_SAS2 - ok
16:56:49.0440 0692 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\drivers\lsi_scsi.sys
16:56:49.0440 0692 LSI_SCSI - ok
16:56:49.0472 0692 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
16:56:49.0472 0692 luafv - ok
16:56:49.0503 0692 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\drivers\megasas.sys
16:56:49.0503 0692 megasas - ok
16:56:49.0534 0692 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\drivers\MegaSR.sys
16:56:49.0534 0692 MegaSR - ok
16:56:49.0581 0692 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
16:56:49.0581 0692 Modem - ok
16:56:49.0612 0692 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
16:56:49.0612 0692 monitor - ok
16:56:49.0659 0692 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
16:56:49.0659 0692 mouclass - ok
16:56:49.0721 0692 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
16:56:49.0721 0692 mouhid - ok
16:56:49.0737 0692 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
16:56:49.0737 0692 mountmgr - ok
16:56:49.0784 0692 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
16:56:49.0784 0692 mpio - ok
16:56:49.0799 0692 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
16:56:49.0815 0692 mpsdrv - ok
16:56:49.0830 0692 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
16:56:49.0830 0692 MRxDAV - ok
16:56:49.0877 0692 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
16:56:49.0877 0692 mrxsmb - ok
16:56:49.0908 0692 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
16:56:49.0924 0692 mrxsmb10 - ok
16:56:49.0940 0692 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
16:56:49.0940 0692 mrxsmb20 - ok
16:56:49.0971 0692 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
16:56:49.0971 0692 msahci - ok
16:56:50.0002 0692 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
16:56:50.0002 0692 msdsm - ok
16:56:50.0049 0692 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
16:56:50.0049 0692 Msfs - ok
16:56:50.0080 0692 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
16:56:50.0080 0692 mshidkmdf - ok
16:56:50.0096 0692 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
16:56:50.0096 0692 msisadrv - ok
16:56:50.0142 0692 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
16:56:50.0142 0692 MSKSSRV - ok
16:56:50.0174 0692 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
16:56:50.0174 0692 MSPCLOCK - ok
16:56:50.0189 0692 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
16:56:50.0189 0692 MSPQM - ok
16:56:50.0220 0692 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
16:56:50.0220 0692 MsRPC - ok
16:56:50.0252 0692 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
16:56:50.0252 0692 mssmbios - ok
16:56:50.0298 0692 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
16:56:50.0298 0692 MSTEE - ok
16:56:50.0330 0692 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\drivers\MTConfig.sys
16:56:50.0330 0692 MTConfig - ok
16:56:50.0361 0692 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
16:56:50.0361 0692 Mup - ok
16:56:50.0408 0692 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
16:56:50.0408 0692 NativeWifiP - ok
16:56:50.0454 0692 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
16:56:50.0486 0692 NDIS - ok
16:56:50.0564 0692 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
16:56:50.0564 0692 NdisCap - ok
16:56:50.0626 0692 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
16:56:50.0626 0692 NdisTapi - ok
16:56:50.0657 0692 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
16:56:50.0657 0692 Ndisuio - ok
16:56:50.0673 0692 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
16:56:50.0673 0692 NdisWan - ok
16:56:50.0704 0692 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
16:56:50.0704 0692 NDProxy - ok
16:56:50.0720 0692 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
16:56:50.0720 0692 NetBIOS - ok
16:56:50.0766 0692 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
16:56:50.0766 0692 NetBT - ok
16:56:50.0829 0692 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\drivers\nfrd960.sys
16:56:50.0844 0692 nfrd960 - ok
16:56:50.0860 0692 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
16:56:50.0860 0692 Npfs - ok
16:56:50.0876 0692 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
16:56:50.0876 0692 nsiproxy - ok
16:56:50.0938 0692 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
16:56:50.0969 0692 Ntfs - ok
16:56:51.0078 0692 NuidFltr (317020d31f1696334679b9d0416eb62e) C:\Windows\system32\DRIVERS\NuidFltr.sys
16:56:51.0078 0692 NuidFltr - ok
16:56:51.0110 0692 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
16:56:51.0110 0692 Null - ok
16:56:51.0156 0692 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
16:56:51.0156 0692 nvraid - ok
16:56:51.0203 0692 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
16:56:51.0203 0692 nvstor - ok
16:56:51.0234 0692 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
16:56:51.0250 0692 nv_agp - ok
16:56:51.0266 0692 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
16:56:51.0266 0692 ohci1394 - ok
16:56:51.0312 0692 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\drivers\parport.sys
16:56:51.0312 0692 Parport - ok
16:56:51.0375 0692 partmgr (e9766131eeade40a27dc27d2d68fba9c) C:\Windows\system32\drivers\partmgr.sys
16:56:51.0375 0692 partmgr - ok
16:56:51.0422 0692 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
16:56:51.0437 0692 pci - ok
16:56:51.0468 0692 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
16:56:51.0468 0692 pciide - ok
16:56:51.0484 0692 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\drivers\pcmcia.sys
16:56:51.0484 0692 pcmcia - ok
16:56:51.0515 0692 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
16:56:51.0515 0692 pcw - ok
16:56:51.0562 0692 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
16:56:51.0562 0692 PEAUTH - ok
16:56:51.0687 0692 Point64 (4f0878fd62d5f7444c5f1c4c66d9d293) C:\Windows\system32\DRIVERS\point64.sys
16:56:51.0687 0692 Point64 - ok
16:56:51.0749 0692 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
16:56:51.0749 0692 PptpMiniport - ok
16:56:51.0780 0692 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\drivers\processr.sys
16:56:51.0780 0692 Processor - ok
16:56:51.0858 0692 psadd (b8035af9cc0ccba9a09ac0a0d9801797) C:\Windows\system32\DRIVERS\psadd.sys
16:56:51.0858 0692 psadd - ok
16:56:51.0936 0692 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
16:56:51.0936 0692 Psched - ok
16:56:51.0983 0692 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\drivers\ql2300.sys
16:56:52.0014 0692 ql2300 - ok
16:56:52.0046 0692 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\drivers\ql40xx.sys
16:56:52.0046 0692 ql40xx - ok
16:56:52.0077 0692 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
16:56:52.0077 0692 QWAVEdrv - ok
16:56:52.0108 0692 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
16:56:52.0108 0692 RasAcd - ok
16:56:52.0139 0692 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
16:56:52.0139 0692 RasAgileVpn - ok
16:56:52.0186 0692 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
16:56:52.0186 0692 Rasl2tp - ok
16:56:52.0233 0692 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
16:56:52.0248 0692 RasPppoe - ok
16:56:52.0280 0692 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
16:56:52.0295 0692 RasSstp - ok
16:56:52.0311 0692 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
16:56:52.0326 0692 rdbss - ok
16:56:52.0342 0692 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
16:56:52.0342 0692 rdpbus - ok
16:56:52.0373 0692 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
16:56:52.0373 0692 RDPCDD - ok
16:56:52.0404 0692 RDPDR (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys
16:56:52.0404 0692 RDPDR - ok
16:56:52.0436 0692 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
16:56:52.0451 0692 RDPENCDD - ok
16:56:52.0467 0692 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
16:56:52.0467 0692 RDPREFMP - ok
16:56:52.0514 0692 RDPWD (e61608aa35e98999af9aaeeea6114b0a) C:\Windows\system32\drivers\RDPWD.sys
16:56:52.0514 0692 RDPWD - ok
16:56:52.0576 0692 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
16:56:52.0576 0692 rdyboost - ok
16:56:52.0623 0692 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
16:56:52.0638 0692 RFCOMM - ok
16:56:52.0701 0692 RimUsb (7b04c9843921ab1f695fb395422c5360) C:\Windows\system32\Drivers\RimUsb_AMD64.sys
16:56:52.0701 0692 RimUsb - ok
16:56:52.0794 0692 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
16:56:52.0794 0692 rspndr - ok
16:56:52.0857 0692 RSUSBSTOR (3ceee53bbf8ba284ff44585cec0162fe) C:\Windows\system32\Drivers\RtsUStor.sys
16:56:52.0857 0692 RSUSBSTOR - ok
16:56:52.0935 0692 RTL8167 (5b04929ef24f87e239b880faae410e3a) C:\Windows\system32\DRIVERS\Rt64win7.sys
16:56:52.0935 0692 RTL8167 - ok
16:56:52.0997 0692 RTL8192Ce (7c44c9a974de5508910bfde4abc2e16c) C:\Windows\system32\DRIVERS\rtl8192Ce.sys
16:56:53.0013 0692 RTL8192Ce - ok
16:56:53.0044 0692 s3cap (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys
16:56:53.0044 0692 s3cap - ok
16:56:53.0138 0692 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
16:56:53.0138 0692 SASDIFSV - ok
16:56:53.0169 0692 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
16:56:53.0169 0692 SASKUTIL - ok
16:56:53.0262 0692 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
16:56:53.0262 0692 sbp2port - ok
16:56:53.0294 0692 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
16:56:53.0294 0692 scfilter - ok
16:56:53.0340 0692 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
16:56:53.0340 0692 secdrv - ok
16:56:53.0387 0692 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\drivers\serenum.sys
16:56:53.0387 0692 Serenum - ok
16:56:53.0403 0692 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\drivers\serial.sys
16:56:53.0403 0692 Serial - ok
16:56:53.0434 0692 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\drivers\sermouse.sys
16:56:53.0434 0692 sermouse - ok
16:56:53.0481 0692 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
16:56:53.0496 0692 sffdisk - ok
16:56:53.0496 0692 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
16:56:53.0512 0692 sffp_mmc - ok
16:56:53.0543 0692 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
16:56:53.0543 0692 sffp_sd - ok
16:56:53.0574 0692 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\drivers\sfloppy.sys
16:56:53.0574 0692 sfloppy - ok
16:56:53.0621 0692 Shockprf (380b52126e62c6c2d3c8ba805aadfdc7) C:\Windows\system32\DRIVERS\Apsx64.sys
16:56:53.0621 0692 Shockprf - ok
16:56:53.0652 0692 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\drivers\SiSRaid2.sys
16:56:53.0652 0692 SiSRaid2 - ok
16:56:53.0699 0692 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\drivers\sisraid4.sys
16:56:53.0699 0692 SiSRaid4 - ok
16:56:53.0730 0692 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
16:56:53.0730 0692 Smb - ok
16:56:53.0793 0692 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
16:56:53.0793 0692 spldr - ok
16:56:53.0840 0692 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
16:56:53.0840 0692 srv - ok
16:56:53.0855 0692 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
16:56:53.0871 0692 srv2 - ok
16:56:53.0902 0692 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
16:56:53.0918 0692 srvnet - ok
16:56:53.0964 0692 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\drivers\stexstor.sys
16:56:53.0964 0692 stexstor - ok
16:56:54.0011 0692 storflt (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys
16:56:54.0011 0692 storflt - ok
16:56:54.0058 0692 storvsc (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys
16:56:54.0058 0692 storvsc - ok
16:56:54.0074 0692 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
16:56:54.0074 0692 swenum - ok
16:56:54.0152 0692 SynTP (06d602a637e171e151853f1d8ecd34f1) C:\Windows\system32\DRIVERS\SynTP.sys
16:56:54.0152 0692 SynTP - ok
16:56:54.0323 0692 Tcpip (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\drivers\tcpip.sys
16:56:54.0386 0692 Tcpip - ok
16:56:54.0464 0692 TCPIP6 (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\DRIVERS\tcpip.sys
16:56:54.0464 0692 TCPIP6 - ok
16:56:54.0510 0692 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
16:56:54.0510 0692 tcpipreg - ok
16:56:54.0542 0692 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
16:56:54.0542 0692 TDPIPE - ok
16:56:54.0588 0692 TDTCP (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
16:56:54.0588 0692 TDTCP - ok
16:56:54.0635 0692 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
16:56:54.0635 0692 tdx - ok
16:56:54.0651 0692 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\DRIVERS\termdd.sys
16:56:54.0651 0692 TermDD - ok
16:56:54.0713 0692 tmactmon (ba4030f56aacecd0e6d413565b4aed75) C:\Windows\system32\DRIVERS\tmactmon.sys
16:56:54.0713 0692 tmactmon - ok
16:56:54.0729 0692 tmcomm (ed866799ca62626341632da9edecfd04) C:\Windows\system32\DRIVERS\tmcomm.sys
16:56:54.0744 0692 tmcomm - ok
16:56:54.0776 0692 tmevtmgr (84fb4b5c8dcd78163c440431fef3e096) C:\Windows\system32\DRIVERS\tmevtmgr.sys
16:56:54.0776 0692 tmevtmgr - ok
16:56:54.0838 0692 tmtdi (77b9bebb0769f45ef770297196ef3506) C:\Windows\system32\DRIVERS\tmtdi.sys
16:56:54.0838 0692 tmtdi - ok
16:56:54.0916 0692 TPDIGIMN (5523c729f1ed31b63c88490af3d220fa) C:\Windows\system32\DRIVERS\ApsHM64.sys
16:56:54.0916 0692 TPDIGIMN - ok
16:56:54.0978 0692 TPM (dbcc20c02e8a3e43b03c304a4e40a84f) C:\Windows\system32\drivers\tpm.sys
16:56:54.0978 0692 TPM - ok
16:56:55.0025 0692 TPPWRIF (2c067e01d6bbccc88b233b868e210907) C:\Windows\system32\drivers\Tppwr64v.sys
16:56:55.0025 0692 TPPWRIF - ok
16:56:55.0072 0692 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
16:56:55.0072 0692 tssecsrv - ok
16:56:55.0103 0692 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
16:56:55.0119 0692 TsUsbFlt - ok
16:56:55.0134 0692 TsUsbGD (9cc2ccae8a84820eaecb886d477cbcb8) C:\Windows\system32\drivers\TsUsbGD.sys
16:56:55.0134 0692 TsUsbGD - ok
16:56:55.0181 0692 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
16:56:55.0197 0692 tunnel - ok
16:56:55.0212 0692 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\drivers\uagp35.sys
16:56:55.0212 0692 uagp35 - ok
16:56:55.0259 0692 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
16:56:55.0259 0692 udfs - ok
16:56:55.0322 0692 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
16:56:55.0322 0692 uliagpkx - ok
16:56:55.0353 0692 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\DRIVERS\umbus.sys
16:56:55.0353 0692 umbus - ok
16:56:55.0400 0692 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\drivers\umpass.sys
16:56:55.0400 0692 UmPass - ok
16:56:55.0431 0692 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
16:56:55.0431 0692 usbccgp - ok
16:56:55.0478 0692 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
16:56:55.0478 0692 usbcir - ok
16:56:55.0509 0692 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
16:56:55.0509 0692 usbehci - ok
16:56:55.0556 0692 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
16:56:55.0556 0692 usbhub - ok
16:56:55.0587 0692 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
16:56:55.0587 0692 usbohci - ok
16:56:55.0618 0692 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\drivers\usbprint.sys
16:56:55.0618 0692 usbprint - ok
16:56:55.0649 0692 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
16:56:55.0665 0692 USBSTOR - ok
16:56:55.0696 0692 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
16:56:55.0696 0692 usbuhci - ok
16:56:55.0743 0692 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\system32\Drivers\usbvideo.sys
16:56:55.0743 0692 usbvideo - ok
16:56:55.0790 0692 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
16:56:55.0790 0692 vdrvroot - ok
16:56:55.0836 0692 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
16:56:55.0836 0692 vga - ok
16:56:55.0868 0692 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
16:56:55.0868 0692 VgaSave - ok
16:56:55.0899 0692 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
16:56:55.0899 0692 vhdmp - ok
16:56:55.0946 0692 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
16:56:55.0946 0692 viaide - ok
16:56:55.0977 0692 vmbus (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys
16:56:55.0977 0692 vmbus - ok
16:56:56.0024 0692 VMBusHID (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys
16:56:56.0024 0692 VMBusHID - ok
16:56:56.0039 0692 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
16:56:56.0039 0692 volmgr - ok
16:56:56.0086 0692 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
16:56:56.0102 0692 volmgrx - ok
16:56:56.0117 0692 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
16:56:56.0117 0692 volsnap - ok
16:56:56.0164 0692 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\drivers\vsmraid.sys
16:56:56.0164 0692 vsmraid - ok
16:56:56.0195 0692 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
16:56:56.0195 0692 vwifibus - ok
16:56:56.0242 0692 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
16:56:56.0242 0692 vwififlt - ok
16:56:56.0273 0692 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
16:56:56.0273 0692 vwifimp - ok
16:56:56.0320 0692 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\drivers\wacompen.sys
16:56:56.0320 0692 WacomPen - ok
16:56:56.0382 0692 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
16:56:56.0382 0692 WANARP - ok
16:56:56.0398 0692 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
16:56:56.0398 0692 Wanarpv6 - ok
16:56:56.0523 0692 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\drivers\wd.sys
16:56:56.0523 0692 Wd - ok
16:56:56.0554 0692 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
16:56:56.0554 0692 Wdf01000 - ok
16:56:56.0648 0692 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
16:56:56.0648 0692 WfpLwf - ok
16:56:56.0679 0692 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
16:56:56.0679 0692 WIMMount - ok
16:56:56.0819 0692 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
16:56:56.0819 0692 WmiAcpi - ok
16:56:56.0882 0692 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
16:56:56.0882 0692 ws2ifsl - ok
16:56:56.0928 0692 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
16:56:56.0928 0692 WudfPf - ok
16:56:56.0975 0692 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
16:56:56.0975 0692 WUDFRd - ok
16:56:57.0038 0692 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
16:56:57.0147 0692 \Device\Harddisk0\DR0 - ok
16:56:57.0162 0692 Boot (0x1200) (f0f65f189eacb52b9b1729b748ff2551) \Device\Harddisk0\DR0\Partition0
16:56:57.0162 0692 \Device\Harddisk0\DR0\Partition0 - ok
16:56:57.0194 0692 Boot (0x1200) (d462982981a6dc98f89c58c87c8f23ec) \Device\Harddisk0\DR0\Partition1
16:56:57.0194 0692 \Device\Harddisk0\DR0\Partition1 - ok
16:56:57.0240 0692 Boot (0x1200) (fe2c567bce3df5dd2ad0e27ae2883495) \Device\Harddisk0\DR0\Partition2
16:56:57.0240 0692 \Device\Harddisk0\DR0\Partition2 - ok
16:56:57.0240 0692 ============================================================
16:56:57.0240 0692 Scan finished
16:56:57.0240 0692 ============================================================
16:56:57.0240 1196 Detected object count: 0
16:56:57.0240 1196 Actual detected object count: 0


I was unable to run aswMBR. It did the same thing as the FIXTDSS and the original TDSSkiller.

I was able to run ESET. It found nothing and did not provide me with a list.

#6 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:10:45 PM

Posted 09 August 2012 - 07:03 PM

We need to take a deeper look

Read the guide here on preparing logs

http://www.bleepingcomputer.com/forums/topic34773.html

and create a topic here

http://www.bleepingcomputer.com/forums/forum22.html

Good luck

Edited by narenxp, 09 August 2012 - 07:06 PM.


#7 mountainbadger

mountainbadger
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Local time:10:45 PM

Posted 10 August 2012 - 01:03 PM

Thanks for your help. I've created a new thread in the other forum.

#8 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:10:45 PM

Posted 10 August 2012 - 02:03 PM

You're welcome :)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users