14:09:45.0031 3344 TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32 14:09:45.0203 3344 ============================================================ 14:09:45.0203 3344 Current date / time: 2012/08/11 14:09:45.0203 14:09:45.0203 3344 SystemInfo: 14:09:45.0203 3344 14:09:45.0203 3344 OS Version: 5.1.2600 ServicePack: 3.0 14:09:45.0203 3344 Product type: Workstation 14:09:45.0203 3344 ComputerName: HOME-2DECDD6967 14:09:45.0203 3344 UserName: HOME 14:09:45.0203 3344 Windows directory: C:\WINDOWS 14:09:45.0203 3344 System windows directory: C:\WINDOWS 14:09:45.0203 3344 Processor architecture: Intel x86 14:09:45.0203 3344 Number of processors: 2 14:09:45.0203 3344 Page size: 0x1000 14:09:45.0203 3344 Boot type: Normal boot 14:09:45.0203 3344 ============================================================ 14:09:46.0234 3344 Drive \Device\Harddisk0\DR0 - Size: 0x3A38A25E00 (232.88 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054 14:09:46.0234 3344 Drive \Device\Harddisk1\DR4 - Size: 0x3C1FFE00 (0.94 Gb), SectorSize: 0x200, Cylinders: 0x7A, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W' 14:09:46.0234 3344 ============================================================ 14:09:46.0234 3344 \Device\Harddisk0\DR0: 14:09:46.0234 3344 MBR partitions: 14:09:46.0234 3344 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A962B1 14:09:46.0250 3344 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3A9632F, BlocksNum 0xCD1578B 14:09:46.0265 3344 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x107ABAF9, BlocksNum 0xCA18A88 14:09:46.0265 3344 \Device\Harddisk1\DR4: 14:09:46.0265 3344 MBR partitions: 14:09:46.0265 3344 \Device\Harddisk1\DR4\Partition0: MBR, Type 0x6, StartLBA 0x8, BlocksNum 0x1E0FF7 14:09:46.0265 3344 ============================================================ 14:09:46.0296 3344 C: <-> \Device\Harddisk0\DR0\Partition0 14:09:46.0312 3344 D: <-> \Device\Harddisk0\DR0\Partition1 14:09:46.0343 3344 E: <-> \Device\Harddisk0\DR0\Partition2 14:09:46.0343 3344 ============================================================ 14:09:46.0343 3344 Initialize success 14:09:46.0343 3344 ============================================================ 14:09:50.0640 3404 ============================================================ 14:09:50.0640 3404 Scan started 14:09:50.0640 3404 Mode: Manual; 14:09:50.0640 3404 ============================================================ 14:09:51.0765 3404 3019 - ok 14:09:51.0843 3404 Aavmker4 (0b27ae82c113d3687024d18459440426) C:\WINDOWS\system32\drivers\Aavmker4.sys 14:09:51.0843 3404 Aavmker4 - ok 14:09:51.0843 3404 Abiosdsk - ok 14:09:51.0843 3404 abp480n5 - ok 14:09:51.0875 3404 ACPI (16fc8b60948b65d224ac3cb349837035) C:\WINDOWS\system32\DRIVERS\ACPI.sys 14:09:51.0875 3404 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\ACPI.sys. Real md5: 16fc8b60948b65d224ac3cb349837035, Fake md5: 05118282f5d039595a2b92b4a4afe197 14:09:51.0890 3404 ACPI ( Virus.Win32.Rloader.a ) - infected 14:09:51.0890 3404 ACPI - detected Virus.Win32.Rloader.a (0) 14:09:51.0906 3404 ACPIEC (66a42b7db194e24b973bbcce840a0f3f) C:\WINDOWS\system32\drivers\ACPIEC.sys 14:09:51.0906 3404 ACPIEC - ok 14:09:51.0906 3404 adpu160m - ok 14:09:51.0937 3404 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 14:09:51.0937 3404 aec - ok 14:09:51.0984 3404 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys 14:09:51.0984 3404 AFD - ok 14:09:51.0984 3404 Aha154x - ok 14:09:51.0984 3404 aic78u2 - ok 14:09:51.0984 3404 aic78xx - ok 14:09:52.0015 3404 alcan5wn (0940030d5a5869067ccc03e3b0b8dec7) C:\WINDOWS\system32\DRIVERS\alcan5wn.sys 14:09:52.0015 3404 alcan5wn - ok 14:09:52.0031 3404 alcaudsl (4c9577888c53243e2991456f510488a1) C:\WINDOWS\system32\DRIVERS\alcaudsl.sys 14:09:52.0031 3404 alcaudsl - ok 14:09:52.0046 3404 Alerter (27af056d8c42f0ab3cf1dfdcbbeb3243) C:\WINDOWS\system32\alrsvc.dll 14:09:52.0046 3404 Alerter - ok 14:09:52.0062 3404 ALG (d1738dddff196c5cee6d867c136af745) C:\WINDOWS\System32\alg.exe 14:09:52.0062 3404 ALG - ok 14:09:52.0062 3404 AliIde - ok 14:09:52.0062 3404 amsint - ok 14:09:52.0062 3404 AppMgmt - ok 14:09:52.0078 3404 asc - ok 14:09:52.0078 3404 asc3350p - ok 14:09:52.0078 3404 asc3550 - ok 14:09:52.0140 3404 aspnet_state (776acefa0ca9df0faa51a5fb2f435705) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe 14:09:52.0171 3404 aspnet_state - ok 14:09:52.0203 3404 asusgsb (d320732bcf5ff856120bd06855c66867) C:\WINDOWS\system32\drivers\asusgsb.sys 14:09:52.0203 3404 asusgsb - ok 14:09:52.0218 3404 aswFsBlk (1c1f3d6dddc046c920c493a779649f66) C:\WINDOWS\system32\drivers\aswFsBlk.sys 14:09:52.0218 3404 aswFsBlk - ok 14:09:52.0234 3404 aswMon2 (9e912fe7b41650701ef2b227aca440f3) C:\WINDOWS\system32\drivers\aswMon2.sys 14:09:52.0234 3404 aswMon2 - ok 14:09:52.0250 3404 aswRdr (982e275d1c5801042fe94209fb0160fb) C:\WINDOWS\system32\drivers\aswRdr.sys 14:09:52.0250 3404 aswRdr - ok 14:09:52.0312 3404 aswSnx (73dbcf808e00580f2a47f93dd9b03876) C:\WINDOWS\system32\drivers\aswSnx.sys 14:09:52.0328 3404 aswSnx - ok 14:09:52.0343 3404 aswSP (6cbd7d3a33f498d09c831cdd732da2e0) C:\WINDOWS\system32\drivers\aswSP.sys 14:09:52.0343 3404 aswSP - ok 14:09:52.0359 3404 aswTdi (7109a9aa551f37cd168c02368465957e) C:\WINDOWS\system32\drivers\aswTdi.sys 14:09:52.0359 3404 aswTdi - ok 14:09:52.0390 3404 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 14:09:52.0390 3404 AsyncMac - ok 14:09:52.0406 3404 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 14:09:52.0406 3404 atapi - ok 14:09:52.0406 3404 Atdisk - ok 14:09:52.0406 3404 ATKKeyboardService - ok 14:09:52.0437 3404 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 14:09:52.0437 3404 Atmarpc - ok 14:09:52.0437 3404 AudioSrv (3a28d3e7bad0eed3810cd918b2525b54) C:\WINDOWS\System32\audiosrv.dll 14:09:52.0437 3404 AudioSrv - ok 14:09:52.0468 3404 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 14:09:52.0468 3404 audstub - ok 14:09:52.0531 3404 avast! Antivirus (2f7c0f3e39c45e0127fb78b2f18a41f3) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe 14:09:52.0546 3404 avast! Antivirus - ok 14:09:52.0562 3404 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 14:09:52.0562 3404 Beep - ok 14:09:52.0593 3404 BITS (78200faa6fd9c69394134c238c87fb7f) C:\WINDOWS\system32\qmgr.dll 14:09:52.0640 3404 BITS - ok 14:09:52.0640 3404 Browser (b98ed6d85339a66a73f32fb569eb6c01) C:\WINDOWS\System32\browser.dll 14:09:52.0640 3404 Browser - ok 14:09:52.0656 3404 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 14:09:52.0656 3404 cbidf2k - ok 14:09:52.0671 3404 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys 14:09:52.0671 3404 CCDECODE - ok 14:09:52.0671 3404 cd20xrnt - ok 14:09:52.0671 3404 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 14:09:52.0671 3404 Cdaudio - ok 14:09:52.0687 3404 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 14:09:52.0687 3404 Cdfs - ok 14:09:52.0703 3404 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 14:09:52.0703 3404 Cdrom - ok 14:09:52.0703 3404 Changer - ok 14:09:52.0703 3404 CiSvc (45b63df2fb498d219fcbb4425cade676) C:\WINDOWS\system32\cisvc.exe 14:09:52.0703 3404 CiSvc - ok 14:09:52.0734 3404 ClipSrv (c94f1b6f61858d6389c0fa06954fb9c4) C:\WINDOWS\system32\clipsrv.exe 14:09:52.0734 3404 ClipSrv - ok 14:09:52.0796 3404 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 14:09:52.0859 3404 clr_optimization_v2.0.50727_32 - ok 14:09:52.0906 3404 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 14:09:53.0000 3404 clr_optimization_v4.0.30319_32 - ok 14:09:53.0015 3404 CmdIde - ok 14:09:53.0015 3404 COMSysApp - ok 14:09:53.0015 3404 Cpqarray - ok 14:09:53.0046 3404 CryptSvc (6b105fe95f2e9f0b6346044ba59d41c9) C:\WINDOWS\System32\cryptsvc.dll 14:09:53.0046 3404 CryptSvc - ok 14:09:53.0046 3404 dac2w2k - ok 14:09:53.0046 3404 dac960nt - ok 14:09:53.0093 3404 DcomLaunch (a37311d9d628c1042a2836731787f0f3) C:\WINDOWS\system32\rpcss.dll 14:09:53.0093 3404 DcomLaunch - ok 14:09:53.0140 3404 Dhcp (6b4afe7c676cff3eff2dc06a4ee945f7) C:\WINDOWS\System32\dhcpcsvc.dll 14:09:53.0140 3404 Dhcp - ok 14:09:53.0140 3404 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 14:09:53.0140 3404 Disk - ok 14:09:53.0140 3404 dmadmin - ok 14:09:53.0187 3404 dmboot (bc9219abc5696942e6f9ac8a9b28670f) C:\WINDOWS\system32\drivers\dmboot.sys 14:09:53.0203 3404 dmboot - ok 14:09:53.0218 3404 dmio (5fa232e3ba6e1346f9f5a7e519320cb0) C:\WINDOWS\system32\drivers\dmio.sys 14:09:53.0218 3404 dmio - ok 14:09:53.0250 3404 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 14:09:53.0250 3404 dmload - ok 14:09:53.0281 3404 dmserver (d858920a05076914d34b0388e8d96cc0) C:\WINDOWS\System32\dmserver.dll 14:09:53.0281 3404 dmserver - ok 14:09:53.0281 3404 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 14:09:53.0281 3404 DMusic - ok 14:09:53.0312 3404 Dnscache (082be13166a3354f25f78e0b2601012b) C:\WINDOWS\System32\dnsrslvr.dll 14:09:53.0312 3404 Dnscache - ok 14:09:53.0343 3404 Dot3svc (e0b7d66cf29d9adccf873c77821cd4ca) C:\WINDOWS\System32\dot3svc.dll 14:09:53.0343 3404 Dot3svc - ok 14:09:53.0343 3404 dpti2o - ok 14:09:53.0359 3404 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 14:09:53.0359 3404 drmkaud - ok 14:09:53.0375 3404 EapHost (5f256c1ad50fefdc442cd5aab58c7dd8) C:\WINDOWS\System32\eapsvc.dll 14:09:53.0375 3404 EapHost - ok 14:09:53.0390 3404 EIO (0daf3544804650526751c478aeccce63) C:\WINDOWS\system32\drivers\EIO.sys 14:09:53.0390 3404 EIO - ok 14:09:53.0421 3404 ERSvc (ed1b71382c31fd2cf3cdc4672efad6ea) C:\WINDOWS\System32\ersvc.dll 14:09:53.0421 3404 ERSvc - ok 14:09:53.0453 3404 Eventlog (02a467e27af55f7064c5b251e587315f) C:\WINDOWS\system32\services.exe 14:09:53.0468 3404 Eventlog - ok 14:09:53.0500 3404 EventSystem (6aff804839c85859e0247164fbe5f5bb) C:\WINDOWS\system32\es.dll 14:09:53.0500 3404 EventSystem - ok 14:09:53.0515 3404 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 14:09:53.0515 3404 Fastfat - ok 14:09:53.0546 3404 FastUserSwitchingCompatibility (55aae86c7c2cadf6972acd1d76c24a98) C:\WINDOWS\System32\shsvcs.dll 14:09:53.0562 3404 FastUserSwitchingCompatibility - ok 14:09:53.0578 3404 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 14:09:53.0578 3404 Fdc - ok 14:09:53.0578 3404 Fips (09e2a4d33f81a06a8aab2ba0a0b5d235) C:\WINDOWS\system32\drivers\Fips.sys 14:09:53.0578 3404 Fips - ok 14:09:53.0593 3404 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys 14:09:53.0593 3404 Flpydisk - ok 14:09:53.0625 3404 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 14:09:53.0625 3404 FltMgr - ok 14:09:53.0687 3404 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe 14:09:53.0687 3404 FontCache3.0.0.0 - ok 14:09:53.0687 3404 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 14:09:53.0687 3404 Fs_Rec - ok 14:09:53.0703 3404 Ftdisk (ed6d921d8ab423138fb35beee6d6a6cb) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 14:09:53.0703 3404 Ftdisk - ok 14:09:53.0734 3404 gdrv (b6bfec7542730e9a376bf2408423d493) C:\WINDOWS\gdrv.sys 14:09:55.0000 3404 gdrv - ok 14:09:55.0015 3404 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 14:09:55.0015 3404 Gpc - ok 14:09:55.0062 3404 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe 14:09:55.0078 3404 gupdate - ok 14:09:55.0078 3404 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe 14:09:55.0078 3404 gupdatem - ok 14:09:55.0109 3404 gusvc (408ddd80eede47175f6844817b90213e) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe 14:09:55.0125 3404 gusvc - ok 14:09:55.0140 3404 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 14:09:55.0140 3404 HDAudBus - ok 14:09:55.0187 3404 helpsvc (af752014f7eb61542e3f35b9374d7e76) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll 14:09:55.0187 3404 helpsvc - ok 14:09:55.0187 3404 HidServ - ok 14:09:55.0203 3404 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 14:09:55.0203 3404 HidUsb - ok 14:09:55.0218 3404 hkmsvc (f0273916da6fb64cc88e0bd77619554f) C:\WINDOWS\System32\kmsvc.dll 14:09:55.0234 3404 hkmsvc - ok 14:09:55.0234 3404 hpn - ok 14:09:55.0265 3404 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 14:09:55.0265 3404 HTTP - ok 14:09:55.0296 3404 HTTPFilter (aa268079ac119f3a596e5e27aee4bd17) C:\WINDOWS\System32\w3ssl.dll 14:09:55.0296 3404 HTTPFilter - ok 14:09:55.0296 3404 i2omgmt - ok 14:09:55.0312 3404 i2omp - ok 14:09:55.0312 3404 i8042prt (177b372af55c4460d0968b5f1d02aa1c) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 14:09:55.0328 3404 i8042prt - ok 14:09:55.0375 3404 IDriverT (1cf03c69b49acb70c722df92755c0c8c) C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe 14:09:55.0375 3404 IDriverT - ok 14:09:55.0484 3404 idsvc (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 14:09:55.0484 3404 idsvc - ok 14:09:55.0531 3404 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 14:09:55.0531 3404 Imapi - ok 14:09:55.0562 3404 ImapiService (9125af650608a921f98a789e5c5ba864) C:\WINDOWS\system32\imapi.exe 14:09:55.0578 3404 ImapiService - ok 14:09:55.0578 3404 InCDfs (7bfc3eda22190c0fe8c2ca19e5379da5) C:\WINDOWS\system32\drivers\InCDFs.sys 14:09:55.0593 3404 InCDfs - ok 14:09:55.0593 3404 InCDPass (fc4dbf18a4eb0d2fe3171471a3d0f9a8) C:\WINDOWS\system32\drivers\InCDPass.sys 14:09:55.0593 3404 InCDPass - ok 14:09:55.0609 3404 InCDrec (f8e7c551def07fdc12ca5cc7ae5d975b) C:\WINDOWS\system32\drivers\InCDrec.sys 14:09:55.0609 3404 InCDrec - ok 14:09:55.0609 3404 incdrm (31a5a3809249a326eb0ef58d563a9654) C:\WINDOWS\system32\drivers\InCDRm.sys 14:09:55.0609 3404 incdrm - ok 14:09:55.0734 3404 InCDsrv (c773d093d5c18765e71c7992aee051a2) C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe 14:09:55.0750 3404 InCDsrv - ok 14:09:55.0796 3404 ini910u - ok 14:09:56.0015 3404 IntcAzAudAddService (c282875880df189c64c465fc54a0150a) C:\WINDOWS\system32\drivers\RtkHDAud.sys 14:09:56.0031 3404 IntcAzAudAddService - ok 14:09:56.0078 3404 IntelIde - ok 14:09:56.0109 3404 intelppm (da153edc09de8c4f846c085caa39d1cc) C:\WINDOWS\system32\DRIVERS\intelppm.sys 14:09:56.0109 3404 intelppm - ok 14:09:56.0125 3404 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 14:09:56.0125 3404 Ip6Fw - ok 14:09:56.0140 3404 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 14:09:56.0140 3404 IpFilterDriver - ok 14:09:56.0171 3404 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 14:09:56.0171 3404 IpInIp - ok 14:09:56.0203 3404 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 14:09:56.0203 3404 IpNat - ok 14:09:56.0218 3404 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 14:09:56.0218 3404 IPSec - ok 14:09:56.0250 3404 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 14:09:56.0250 3404 IRENUM - ok 14:09:56.0265 3404 isapnp (c8eef2e93835b81bd335de2123121283) C:\WINDOWS\system32\DRIVERS\isapnp.sys 14:09:56.0265 3404 isapnp - ok 14:09:56.0375 3404 JavaQuickStarterService (0a5709543986843d37a92290b7838340) E:\blabla\java nowa\bin\jqs.exe 14:09:56.0375 3404 JavaQuickStarterService - ok 14:09:56.0375 3404 Kbdclass (2aeca45d4aeaacbdcb77ad11184e4601) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 14:09:56.0375 3404 Kbdclass - ok 14:09:56.0406 3404 kbdhid (f718dcddac2544bc693f22977d06f78b) C:\WINDOWS\system32\DRIVERS\kbdhid.sys 14:09:56.0406 3404 kbdhid - ok 14:09:56.0437 3404 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 14:09:56.0453 3404 kmixer - ok 14:09:56.0484 3404 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 14:09:56.0484 3404 KSecDD - ok 14:09:56.0500 3404 lanmanserver (061a4bb67c324ac8c176e0d77923b212) C:\WINDOWS\System32\srvsvc.dll 14:09:56.0500 3404 lanmanserver - ok 14:09:56.0531 3404 lanmanworkstation (fa17019da45c5d6464776a639a5a9abb) C:\WINDOWS\System32\wkssvc.dll 14:09:56.0531 3404 lanmanworkstation - ok 14:09:56.0531 3404 lbrtfdc - ok 14:09:56.0593 3404 LightScribeService (31d8b705dcd5f2366186e731f87c7a71) C:\Program Files\Common Files\LightScribe\LSSrvc.exe 14:09:56.0593 3404 LightScribeService - ok 14:09:56.0625 3404 LmHosts (437aa83d68f9fac234ca68dbd40db705) C:\WINDOWS\System32\lmhsvc.dll 14:09:56.0625 3404 LmHosts - ok 14:09:56.0656 3404 Messenger (36f3ab18b1be303da51de90a67de3942) C:\WINDOWS\System32\msgsvc.dll 14:09:56.0656 3404 Messenger - ok 14:09:56.0671 3404 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 14:09:56.0671 3404 mnmdd - ok 14:09:56.0703 3404 mnmsrvc (845814a8cb9d704d030f076e1bce83f3) C:\WINDOWS\system32\mnmsrvc.exe 14:09:56.0703 3404 mnmsrvc - ok 14:09:56.0734 3404 Modem (4a068db7dc37d5afedb6512d2931d7b3) C:\WINDOWS\system32\drivers\Modem.sys 14:09:56.0734 3404 Modem - ok 14:09:56.0750 3404 Mouclass (fbed3df6b884f8cf00447b73507f2c48) C:\WINDOWS\system32\DRIVERS\mouclass.sys 14:09:56.0750 3404 Mouclass - ok 14:09:56.0781 3404 mouhid (ecec1e6cd558ab80f944f31326e9d3b5) C:\WINDOWS\system32\DRIVERS\mouhid.sys 14:09:56.0781 3404 mouhid - ok 14:09:56.0796 3404 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 14:09:56.0796 3404 MountMgr - ok 14:09:56.0843 3404 MozillaMaintenance (46297fa8e30a6007f14118fc2b942fbc) C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe 14:09:56.0843 3404 MozillaMaintenance - ok 14:09:56.0843 3404 mraid35x - ok 14:09:56.0859 3404 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 14:09:56.0859 3404 MRxDAV - ok 14:09:56.0890 3404 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 14:09:56.0890 3404 MRxSmb - ok 14:09:56.0906 3404 MSCSPTISRV (7419d631c390c558a5a87484567babd5) C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe 14:09:56.0906 3404 MSCSPTISRV - ok 14:09:56.0937 3404 MSDTC (a54c5eecc7d3424824410bae0aa6c371) C:\WINDOWS\system32\msdtc.exe 14:09:56.0937 3404 MSDTC - ok 14:09:56.0968 3404 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 14:09:56.0968 3404 Msfs - ok 14:09:56.0968 3404 MSIServer - ok 14:09:57.0000 3404 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 14:09:57.0000 3404 MSKSSRV - ok 14:09:57.0015 3404 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 14:09:57.0015 3404 MSPCLOCK - ok 14:09:57.0031 3404 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 14:09:57.0046 3404 MSPQM - ok 14:09:57.0062 3404 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 14:09:57.0062 3404 mssmbios - ok 14:09:57.0078 3404 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys 14:09:57.0078 3404 MSTEE - ok 14:09:57.0109 3404 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys 14:09:57.0109 3404 Mup - ok 14:09:57.0140 3404 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys 14:09:57.0140 3404 NABTSFEC - ok 14:09:57.0171 3404 napagent (14cb8528e17d1221c50fc8ca88b1795f) C:\WINDOWS\System32\qagentrt.dll 14:09:57.0171 3404 napagent - ok 14:09:57.0234 3404 NBService (6d8fcdd5bb3b676ef58fa234073492c6) C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe 14:09:57.0250 3404 NBService - ok 14:09:57.0250 3404 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 14:09:57.0250 3404 NDIS - ok 14:09:57.0265 3404 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys 14:09:57.0265 3404 NdisIP - ok 14:09:57.0296 3404 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 14:09:57.0296 3404 NdisTapi - ok 14:09:57.0328 3404 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 14:09:57.0328 3404 Ndisuio - ok 14:09:57.0343 3404 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 14:09:57.0343 3404 NdisWan - ok 14:09:57.0359 3404 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys 14:09:57.0359 3404 NDProxy - ok 14:09:57.0375 3404 Nero BackItUp Scheduler 4.0 - ok 14:09:57.0406 3404 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 14:09:57.0406 3404 NetBIOS - ok 14:09:57.0421 3404 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 14:09:57.0421 3404 NetBT - ok 14:09:57.0437 3404 NetDDE (cbb409b314309fcffce5e682e91338c6) C:\WINDOWS\system32\netdde.exe 14:09:57.0453 3404 NetDDE - ok 14:09:57.0453 3404 NetDDEdsdm (cbb409b314309fcffce5e682e91338c6) C:\WINDOWS\system32\netdde.exe 14:09:57.0468 3404 NetDDEdsdm - ok 14:09:57.0484 3404 Netlogon (88296f7943f30a1ee3af735440b92268) C:\WINDOWS\system32\lsass.exe 14:09:57.0484 3404 Netlogon - ok 14:09:57.0531 3404 Netman (4fe97d0b1b182df2a9bdd4c02155ef5e) C:\WINDOWS\System32\netman.dll 14:09:57.0546 3404 Netman - ok 14:09:57.0609 3404 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe 14:09:57.0609 3404 NetTcpPortSharing - ok 14:09:57.0640 3404 Nla (9d1f13706fb5f02d0e8795fb2d03971d) C:\WINDOWS\System32\mswsock.dll 14:09:57.0640 3404 Nla - ok 14:09:57.0671 3404 NMIndexingService (e584d6668e6a3923ff32e026a5ed2a03) C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe 14:09:57.0671 3404 NMIndexingService - ok 14:09:57.0703 3404 nmwcd (696b37ea78f9d9767a2f18ba0304a51a) C:\WINDOWS\system32\drivers\nmwcd.sys 14:09:57.0703 3404 nmwcd - ok 14:09:57.0734 3404 nmwcdc (bbb6010fc01d9239d88fcdf133e03ff0) C:\WINDOWS\system32\drivers\nmwcdc.sys 14:09:57.0734 3404 nmwcdc - ok 14:09:57.0750 3404 nmwcdcj (4c3726467d67483f054c88f058e9c153) C:\WINDOWS\system32\drivers\nmwcdcj.sys 14:09:57.0750 3404 nmwcdcj - ok 14:09:57.0750 3404 nmwcdcm (4c3726467d67483f054c88f058e9c153) C:\WINDOWS\system32\drivers\nmwcdcm.sys 14:09:57.0750 3404 nmwcdcm - ok 14:09:57.0765 3404 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 14:09:57.0765 3404 Npfs - ok 14:09:57.0796 3404 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 14:09:57.0812 3404 Ntfs - ok 14:09:57.0812 3404 NtLmSsp (88296f7943f30a1ee3af735440b92268) C:\WINDOWS\system32\lsass.exe 14:09:57.0812 3404 NtLmSsp - ok 14:09:57.0859 3404 NtmsSvc (3fb5399dbb7001a80d58edad64c98225) C:\WINDOWS\system32\ntmssvc.dll 14:09:57.0859 3404 NtmsSvc - ok 14:09:57.0875 3404 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 14:09:57.0875 3404 Null - ok 14:09:58.0171 3404 nv (9f4384aa43548ddd438f7b7825d11699) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 14:09:58.0250 3404 nv - ok 14:09:58.0328 3404 NVSvc (0c41c4acfe00d826db479c40c1d9edc8) C:\WINDOWS\system32\nvsvc32.exe 14:09:58.0328 3404 NVSvc - ok 14:09:58.0359 3404 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 14:09:58.0359 3404 NwlnkFlt - ok 14:09:58.0359 3404 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 14:09:58.0359 3404 NwlnkFwd - ok 14:09:58.0421 3404 ose (7a56cf3e3f12e8af599963b16f50fb6a) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 14:09:58.0421 3404 ose - ok 14:09:58.0468 3404 PACSPTISVR (778c309121067d83b8a48cdb658b4c17) C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe 14:09:58.0468 3404 PACSPTISVR - ok 14:09:58.0484 3404 Parport (2d4cdaebced17743aa9e25d3016dc229) C:\WINDOWS\system32\DRIVERS\parport.sys 14:09:58.0484 3404 Parport - ok 14:09:58.0500 3404 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 14:09:58.0500 3404 PartMgr - ok 14:09:58.0531 3404 ParVdm (453ec2c2a20a1382f564541918520eeb) C:\WINDOWS\system32\drivers\ParVdm.sys 14:09:58.0531 3404 ParVdm - ok 14:09:58.0562 3404 PCI (6862c69168d787b85a7d95ccd33c694e) C:\WINDOWS\system32\DRIVERS\pci.sys 14:09:58.0562 3404 PCI - ok 14:09:58.0562 3404 PCIDump - ok 14:09:58.0562 3404 PCIIde (548cf2d6369eae441a4c6baa75bc4f0a) C:\WINDOWS\system32\DRIVERS\pciide.sys 14:09:58.0562 3404 PCIIde - ok 14:09:58.0593 3404 Pcmcia (8db27f1ae9593c94095485305a583862) C:\WINDOWS\system32\drivers\Pcmcia.sys 14:09:58.0593 3404 Pcmcia - ok 14:09:58.0593 3404 PDCOMP - ok 14:09:58.0593 3404 PDFRAME - ok 14:09:58.0609 3404 PDRELI - ok 14:09:58.0609 3404 PDRFRAME - ok 14:09:58.0609 3404 perc2 - ok 14:09:58.0609 3404 perc2hib - ok 14:09:58.0640 3404 PlugPlay (02a467e27af55f7064c5b251e587315f) C:\WINDOWS\system32\services.exe 14:09:58.0640 3404 PlugPlay - ok 14:09:58.0671 3404 PolicyAgent (88296f7943f30a1ee3af735440b92268) C:\WINDOWS\system32\lsass.exe 14:09:58.0671 3404 PolicyAgent - ok 14:09:58.0703 3404 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 14:09:58.0703 3404 PptpMiniport - ok 14:09:58.0734 3404 prodrv06 (18d9789a4664bf417eea944d2776091a) C:\WINDOWS\System32\drivers\prodrv06.sys 14:09:58.0734 3404 prodrv06 - ok 14:09:58.0750 3404 prohlp02 (8cc9671a7ed2902e747ee0892e1c8575) C:\WINDOWS\system32\drivers\prohlp02.sys 14:09:58.0765 3404 prohlp02 - ok 14:09:58.0765 3404 prosync1 (960bce3ed38761b446aabac06c76badf) C:\WINDOWS\system32\drivers\prosync1.sys 14:09:58.0765 3404 prosync1 - ok 14:09:58.0765 3404 ProtectedStorage (88296f7943f30a1ee3af735440b92268) C:\WINDOWS\system32\lsass.exe 14:09:58.0765 3404 ProtectedStorage - ok 14:09:58.0765 3404 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 14:09:58.0765 3404 PSched - ok 14:09:58.0781 3404 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 14:09:58.0796 3404 Ptilink - ok 14:09:58.0796 3404 PxHelp20 (49452bfcec22f36a7a9b9c2181bc3042) C:\WINDOWS\system32\Drivers\PxHelp20.sys 14:09:58.0796 3404 PxHelp20 - ok 14:09:58.0812 3404 ql1080 - ok 14:09:58.0812 3404 Ql10wnt - ok 14:09:58.0812 3404 ql12160 - ok 14:09:58.0812 3404 ql1240 - ok 14:09:58.0812 3404 ql1280 - ok 14:09:58.0828 3404 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 14:09:58.0828 3404 RasAcd - ok 14:09:58.0859 3404 RasAuto (bc22c5e1238d4d36d65679e249c483c3) C:\WINDOWS\System32\rasauto.dll 14:09:58.0859 3404 RasAuto - ok 14:09:58.0875 3404 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 14:09:58.0875 3404 Rasl2tp - ok 14:09:58.0906 3404 RasMan (0c392e397b8d34aaaf19ec6119cbb788) C:\WINDOWS\System32\rasmans.dll 14:09:58.0921 3404 RasMan - ok 14:09:58.0921 3404 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 14:09:58.0921 3404 RasPppoe - ok 14:09:58.0921 3404 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 14:09:58.0921 3404 Raspti - ok 14:09:58.0937 3404 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 14:09:58.0937 3404 Rdbss - ok 14:09:58.0953 3404 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 14:09:58.0953 3404 RDPCDD - ok 14:09:58.0984 3404 RDPWD (6589db6e5969f8eee594cf71171c5028) C:\WINDOWS\system32\drivers\RDPWD.sys 14:09:58.0984 3404 RDPWD - ok 14:09:59.0015 3404 RDSessMgr (f83907a9a038db2e35329b039628d293) C:\WINDOWS\system32\sessmgr.exe 14:09:59.0015 3404 RDSessMgr - ok 14:09:59.0031 3404 redbook (e0c7bbd18040b58651bac700c804861d) C:\WINDOWS\system32\DRIVERS\redbook.sys 14:09:59.0031 3404 redbook - ok 14:09:59.0062 3404 RemoteAccess (b3f57e6115bcd4dbade9874f300655e3) C:\WINDOWS\System32\mprdim.dll 14:09:59.0062 3404 RemoteAccess - ok 14:09:59.0125 3404 RichVideo (bd517c7fb119997effbe39d5e4b37b05) C:\Program Files\CyberLink\Shared Files\RichVideo.exe 14:09:59.0140 3404 RichVideo - ok 14:09:59.0156 3404 RpcLocator (6bc4d5a70f46ea27ddc14e5414c862a5) C:\WINDOWS\system32\locator.exe 14:09:59.0156 3404 RpcLocator - ok 14:09:59.0187 3404 RpcSs (a37311d9d628c1042a2836731787f0f3) C:\WINDOWS\system32\rpcss.dll 14:09:59.0187 3404 RpcSs - ok 14:09:59.0218 3404 RSVP (9acee3313020a01235336c2a483afd1a) C:\WINDOWS\system32\rsvp.exe 14:09:59.0234 3404 RSVP - ok 14:09:59.0265 3404 RTLE8023xp (36ada62330c31ad314e4a26b815fc485) C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys 14:09:59.0265 3404 RTLE8023xp - ok 14:09:59.0281 3404 SamSs (88296f7943f30a1ee3af735440b92268) C:\WINDOWS\system32\lsass.exe 14:09:59.0281 3404 SamSs - ok 14:09:59.0296 3404 SCardSvr (c6f479218e94896738c06af5ba6ab3d3) C:\WINDOWS\System32\SCardSvr.exe 14:09:59.0296 3404 SCardSvr - ok 14:09:59.0328 3404 Schedule (dd73c11a5c4d14945846384b90a61a4b) C:\WINDOWS\system32\schedsvc.dll 14:09:59.0343 3404 Schedule - ok 14:09:59.0375 3404 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 14:09:59.0375 3404 Secdrv - ok 14:09:59.0390 3404 seclogon (2aad9026648120fffe2a8d871bb2bbc7) C:\WINDOWS\System32\seclogon.dll 14:09:59.0390 3404 seclogon - ok 14:09:59.0421 3404 SENS (9d01e29d59723eb73b72107b208dafe6) C:\WINDOWS\system32\sens.dll 14:09:59.0421 3404 SENS - ok 14:09:59.0453 3404 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 14:09:59.0453 3404 serenum - ok 14:09:59.0453 3404 Serial (d07b02f88165e69b9f17162cf592c8a6) C:\WINDOWS\system32\DRIVERS\serial.sys 14:09:59.0468 3404 Serial - ok 14:09:59.0531 3404 ServiceLayer (78546cd2eca6dd6bdcd4b13048621f88) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe 14:09:59.0531 3404 ServiceLayer - ok 14:09:59.0562 3404 sfdrv01 (4c0d673281178cb496011a2e28571fc8) C:\WINDOWS\system32\drivers\sfdrv01.sys 14:09:59.0562 3404 sfdrv01 - ok 14:09:59.0578 3404 sfhlp01 (462aee0ea0481ea8bd45cac876a4ccc4) C:\WINDOWS\system32\drivers\sfhlp01.sys 14:09:59.0578 3404 sfhlp01 - ok 14:09:59.0593 3404 sfhlp02 (15be2b5e4dc5b8623cf167720682abc9) C:\WINDOWS\system32\drivers\sfhlp02.sys 14:09:59.0593 3404 sfhlp02 - ok 14:09:59.0625 3404 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 14:09:59.0625 3404 Sfloppy - ok 14:09:59.0640 3404 sfsync03 (344b5af83cca5377752b8855d4324e69) C:\WINDOWS\system32\drivers\sfsync03.sys 14:09:59.0640 3404 sfsync03 - ok 14:09:59.0656 3404 sfvfs02 (9ef50060cc7e6953bab83f2a42ccc421) C:\WINDOWS\system32\drivers\sfvfs02.sys 14:09:59.0656 3404 sfvfs02 - ok 14:09:59.0687 3404 SharedAccess (da5c015911f68f22ed821e9ee49ab233) C:\WINDOWS\System32\ipnathlp.dll 14:09:59.0687 3404 SharedAccess - ok 14:09:59.0734 3404 ShellHWDetection (55aae86c7c2cadf6972acd1d76c24a98) C:\WINDOWS\System32\shsvcs.dll 14:09:59.0734 3404 ShellHWDetection - ok 14:09:59.0734 3404 Simbad - ok 14:09:59.0750 3404 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys 14:09:59.0750 3404 SLIP - ok 14:09:59.0796 3404 Sony Ericsson PCCompanion (1a623f2b69e1f182f995f963c55db935) C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe 14:09:59.0796 3404 Sony Ericsson PCCompanion - ok 14:09:59.0796 3404 Sparrow - ok 14:09:59.0812 3404 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 14:09:59.0812 3404 splitter - ok 14:09:59.0843 3404 Spooler (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe 14:09:59.0843 3404 Spooler - ok 14:09:59.0890 3404 SPTISRV (9cab0a38deebd30f3c8fe9d9826f43b1) C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe 14:09:59.0890 3404 SPTISRV - ok 14:09:59.0890 3404 sr (eb032822be406ef220d546ddffcf0002) C:\WINDOWS\system32\DRIVERS\sr.sys 14:09:59.0906 3404 sr - ok 14:09:59.0937 3404 srservice (316d0e66074ae4cde641c50d3a1c5148) C:\WINDOWS\system32\srsvc.dll 14:09:59.0937 3404 srservice - ok 14:09:59.0968 3404 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys 14:09:59.0984 3404 Srv - ok 14:10:00.0000 3404 SSDPSRV (2c0b1224aa36b4ca1753302baa855882) C:\WINDOWS\System32\ssdpsrv.dll 14:10:00.0000 3404 SSDPSRV - ok 14:10:00.0031 3404 SSScsiSV (45b83808bf5c9968c3259a48898c7dd5) C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe 14:10:00.0031 3404 SSScsiSV - ok 14:10:00.0078 3404 stisvc (41508ea375c97dc2b56e5f1afc067187) C:\WINDOWS\system32\wiaservc.dll 14:10:00.0093 3404 stisvc - ok 14:10:00.0093 3404 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys 14:10:00.0093 3404 streamip - ok 14:10:00.0125 3404 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 14:10:00.0125 3404 swenum - ok 14:10:00.0140 3404 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 14:10:00.0140 3404 swmidi - ok 14:10:00.0140 3404 SwPrv - ok 14:10:00.0140 3404 symc810 - ok 14:10:00.0156 3404 symc8xx - ok 14:10:00.0156 3404 sym_hi - ok 14:10:00.0156 3404 sym_u3 - ok 14:10:00.0156 3404 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 14:10:00.0171 3404 sysaudio - ok 14:10:00.0171 3404 SysmonLog (e42048198518f9162027a9984cbb7b5c) C:\WINDOWS\system32\smlogsvc.exe 14:10:00.0187 3404 SysmonLog - ok 14:10:00.0218 3404 TapiSrv (2340e6977548038c88e39a9ecbb3fadc) C:\WINDOWS\System32\tapisrv.dll 14:10:00.0218 3404 TapiSrv - ok 14:10:00.0265 3404 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys 14:10:00.0265 3404 Tcpip - ok 14:10:00.0281 3404 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 14:10:00.0281 3404 TDPIPE - ok 14:10:00.0296 3404 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 14:10:00.0296 3404 TDTCP - ok 14:10:00.0312 3404 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 14:10:00.0312 3404 TermDD - ok 14:10:00.0359 3404 TermService (52e0505408edd4ab5ccc7f83b67b4299) C:\WINDOWS\System32\termsrv.dll 14:10:00.0359 3404 TermService - ok 14:10:00.0390 3404 Themes (55aae86c7c2cadf6972acd1d76c24a98) C:\WINDOWS\System32\shsvcs.dll 14:10:00.0390 3404 Themes - ok 14:10:00.0390 3404 TosIde - ok 14:10:00.0406 3404 TrkWks (9e70eb419d7785c286dc458a019bab9b) C:\WINDOWS\system32\trkwks.dll 14:10:00.0406 3404 TrkWks - ok 14:10:00.0421 3404 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 14:10:00.0421 3404 Udfs - ok 14:10:00.0421 3404 ultra - ok 14:10:00.0453 3404 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 14:10:00.0453 3404 Update - ok 14:10:00.0484 3404 upnphost (e96a6baee0b2a14a38b45830d6e30697) C:\WINDOWS\System32\upnphost.dll 14:10:00.0500 3404 upnphost - ok 14:10:00.0515 3404 UPS (eb90e28b28541ec845e5345609355ca7) C:\WINDOWS\System32\ups.exe 14:10:00.0531 3404 UPS - ok 14:10:00.0562 3404 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 14:10:00.0562 3404 usbccgp - ok 14:10:00.0562 3404 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 14:10:00.0562 3404 usbehci - ok 14:10:00.0578 3404 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 14:10:00.0578 3404 usbhub - ok 14:10:00.0578 3404 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys 14:10:00.0578 3404 usbscan - ok 14:10:00.0578 3404 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 14:10:00.0578 3404 USBSTOR - ok 14:10:00.0593 3404 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 14:10:00.0593 3404 usbuhci - ok 14:10:00.0671 3404 usnjsvc (9d19b042a4fd5c02195071ea2fe0c821) C:\Program Files\Windows Live\Messenger\usnsvc.exe 14:10:00.0687 3404 usnjsvc - ok 14:10:00.0703 3404 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 14:10:00.0703 3404 VgaSave - ok 14:10:00.0703 3404 ViaIde - ok 14:10:00.0703 3404 Video3D - ok 14:10:00.0703 3404 VolSnap (56b191ac5fc0df219949c95a6c87afe7) C:\WINDOWS\system32\drivers\VolSnap.sys 14:10:00.0703 3404 VolSnap - ok 14:10:00.0750 3404 VSS (7f2d7bffc4554e1c742dd3629fd1fb1b) C:\WINDOWS\System32\vssvc.exe 14:10:00.0750 3404 VSS - ok 14:10:00.0781 3404 W32Time (a672ca3981352f8e9c30fea056e80a62) C:\WINDOWS\system32\w32time.dll 14:10:00.0796 3404 W32Time - ok 14:10:00.0812 3404 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 14:10:00.0812 3404 Wanarp - ok 14:10:00.0812 3404 WDICA - ok 14:10:00.0812 3404 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 14:10:00.0828 3404 wdmaud - ok 14:10:00.0843 3404 WebClient (81fb88b975e25d76e00b69879d8a434c) C:\WINDOWS\System32\webclnt.dll 14:10:00.0859 3404 WebClient - ok 14:10:00.0906 3404 winmgmt (70c22297534a88b0ad0568900ab5a6d9) C:\WINDOWS\system32\wbem\WMIsvc.dll 14:10:00.0921 3404 winmgmt - ok 14:10:00.0968 3404 WLSetupSvc (94a85e956a065e23e0010a6a7826243b) C:\Program Files\Windows Live\installer\WLSetupSvc.exe 14:10:00.0968 3404 WLSetupSvc - ok 14:10:01.0000 3404 WmBEnum (c8caeaeac96f4ef64d05198fe22223d8) C:\WINDOWS\system32\drivers\WmBEnum.sys 14:10:01.0000 3404 WmBEnum - ok 14:10:01.0015 3404 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll 14:10:01.0031 3404 WmdmPmSN - ok 14:10:01.0031 3404 WmFilter (7355acb97101cfc6372e1d8da18d820c) C:\WINDOWS\system32\drivers\WmFilter.sys 14:10:01.0031 3404 WmFilter - ok 14:10:01.0046 3404 WmHidLo (131d0e6e7bf530e9d141644f7a708b53) C:\WINDOWS\system32\drivers\WmHidLo.sys 14:10:01.0046 3404 WmHidLo - ok 14:10:01.0093 3404 WmiApSrv (a2b12d80a1670511b047a7d8bb647598) C:\WINDOWS\system32\wbem\wmiapsrv.exe 14:10:01.0093 3404 WmiApSrv - ok 14:10:01.0109 3404 WmVirHid (3749038c3fab5e8dd83cafef958a98ce) C:\WINDOWS\system32\drivers\WmVirHid.sys 14:10:01.0109 3404 WmVirHid - ok 14:10:01.0125 3404 WmXlCore (23dda103381bcaac9cfb233f040428c7) C:\WINDOWS\system32\drivers\WmXlCore.sys 14:10:01.0125 3404 WmXlCore - ok 14:10:01.0140 3404 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\Drivers\wpdusb.sys 14:10:01.0140 3404 WpdUsb - ok 14:10:01.0234 3404 WPFFontCache_v0400 (dcf3e3edf5109ee8bc02fe6e1f045795) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe 14:10:01.0250 3404 WPFFontCache_v0400 - ok 14:10:01.0281 3404 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 14:10:01.0281 3404 WS2IFSL - ok 14:10:01.0312 3404 wscsvc (b6669f49d42e09bc0f9889faa0f3336d) C:\WINDOWS\system32\wscsvc.dll 14:10:01.0312 3404 wscsvc - ok 14:10:01.0343 3404 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS 14:10:01.0343 3404 WSTCODEC - ok 14:10:01.0375 3404 wuauserv (04550d5eb7ee82c115db547c01df09fd) C:\WINDOWS\system32\wuauserv.dll 14:10:01.0375 3404 wuauserv - ok 14:10:01.0390 3404 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 14:10:01.0390 3404 WudfPf - ok 14:10:01.0406 3404 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 14:10:01.0406 3404 WudfRd - ok 14:10:01.0406 3404 WudfSvc (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll 14:10:01.0421 3404 WudfSvc - ok 14:10:01.0468 3404 WZCSVC (c2842273aaa77ac031edb87fa19a2147) C:\WINDOWS\System32\wzcsvc.dll 14:10:01.0515 3404 WZCSVC - ok 14:10:01.0546 3404 xmlprov (24ed6935771359a5aef1fe8bf0c56f39) C:\WINDOWS\System32\xmlprov.dll 14:10:01.0546 3404 xmlprov - ok 14:10:01.0593 3404 ZSMC0305 (c53cb6b30e8d7fe6d950707508aacfb9) C:\WINDOWS\system32\Drivers\usbVM305.sys 14:10:01.0593 3404 ZSMC0305 - ok 14:10:01.0609 3404 MBR (0x1B8) (32052574bf9f325ae309abc7bfd04460) \Device\Harddisk0\DR0 14:10:01.0937 3404 \Device\Harddisk0\DR0 - ok 14:10:01.0937 3404 MBR (0x1B8) (99bf1ef585e2fe54d718ee5398a4f857) \Device\Harddisk1\DR4 14:10:04.0171 3404 \Device\Harddisk1\DR4 - ok 14:10:04.0171 3404 Boot (0x1200) (4ba145faf6f36a27f49fee928d2db911) \Device\Harddisk0\DR0\Partition0 14:10:04.0171 3404 \Device\Harddisk0\DR0\Partition0 - ok 14:10:04.0187 3404 Boot (0x1200) (065d4c0eceeb0937e65f47c7effeed3a) \Device\Harddisk0\DR0\Partition1 14:10:04.0187 3404 \Device\Harddisk0\DR0\Partition1 - ok 14:10:04.0203 3404 Boot (0x1200) (75b74f3af484afd83cb6608059a8994e) \Device\Harddisk0\DR0\Partition2 14:10:04.0203 3404 \Device\Harddisk0\DR0\Partition2 - ok 14:10:04.0203 3404 Boot (0x1200) (5bbab312e13153f62871da4f7d7cdd99) \Device\Harddisk1\DR4\Partition0 14:10:04.0203 3404 \Device\Harddisk1\DR4\Partition0 - ok 14:10:04.0203 3404 ============================================================ 14:10:04.0203 3404 Scan finished 14:10:04.0203 3404 ============================================================ 14:10:04.0218 3352 Detected object count: 1 14:10:04.0218 3352 Actual detected object count: 1 14:10:23.0015 3352 C:\WINDOWS\system32\DRIVERS\ACPI.sys - copied to quarantine 14:10:25.0781 3352 Backup copy found, using it.. 14:10:25.0796 3352 C:\WINDOWS\system32\DRIVERS\ACPI.sys - will be cured on reboot 14:10:25.0796 3352 ACPI ( Virus.Win32.Rloader.a ) - User select action: Cure 14:10:42.0468 3436 Deinitialize success