21:11:02.0906 4012  TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
21:11:03.0625 4012  ============================================================
21:11:03.0625 4012  Current date / time: 2012/10/01 21:11:03.0625
21:11:03.0625 4012  SystemInfo:
21:11:03.0625 4012  
21:11:03.0625 4012  OS Version: 5.1.2600 ServicePack: 3.0
21:11:03.0625 4012  Product type: Workstation
21:11:03.0625 4012  ComputerName: DB0SCE82
21:11:03.0687 4012  UserName: st
21:11:03.0687 4012  Windows directory: C:\WINDOWS
21:11:03.0687 4012  System windows directory: C:\WINDOWS
21:11:03.0687 4012  Processor architecture: Intel x86
21:11:03.0687 4012  Number of processors: 1
21:11:03.0687 4012  Page size: 0x1000
21:11:03.0687 4012  Boot type: Normal boot
21:11:03.0687 4012  ============================================================
21:11:09.0265 4012  Drive \Device\Harddisk0\DR0 - Size: 0x950A60000 (37.26 Gb), SectorSize: 0x200, Cylinders: 0x1300, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
21:11:09.0343 4012  ============================================================
21:11:09.0343 4012  \Device\Harddisk0\DR0:
21:11:09.0343 4012  MBR partitions:
21:11:09.0343 4012  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x139C5, BlocksNum 0x446C2F2
21:11:09.0343 4012  ============================================================
21:11:09.0781 4012  C: <-> \Device\Harddisk0\DR0\Partition1
21:11:09.0781 4012  ============================================================
21:11:09.0796 4012  Initialize success
21:11:09.0796 4012  ============================================================
21:11:28.0000 2364  ============================================================
21:11:28.0000 2364  Scan started
21:11:28.0000 2364  Mode: Manual; 
21:11:28.0000 2364  ============================================================
21:11:30.0921 2364  ================ Scan system memory ========================
21:11:30.0921 2364  System memory - ok
21:11:30.0921 2364  ================ Scan services =============================
21:11:31.0625 2364  [ 473F97EDC5A5312F3665AB2921196C0C ] Aavmker4        C:\WINDOWS\system32\drivers\Aavmker4.sys
21:11:31.0656 2364  Aavmker4 - ok
21:11:31.0656 2364  Abiosdsk - ok
21:11:31.0781 2364  [ 6ABB91494FE6C59089B9336452AB2EA3 ] abp480n5        C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
21:11:31.0796 2364  abp480n5 - ok
21:11:31.0968 2364  [ 8FD99680A539792A30E97944FDAECF17 ] ACPI            C:\WINDOWS\system32\DRIVERS\ACPI.sys
21:11:32.0078 2364  ACPI - ok
21:11:32.0125 2364  [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC          C:\WINDOWS\system32\drivers\ACPIEC.sys
21:11:32.0125 2364  ACPIEC - ok
21:11:32.0250 2364  [ B944AD9F92D31285DBA3D190DEB43883 ] adiusbaw        C:\WINDOWS\system32\DRIVERS\adiusbaw.sys
21:11:32.0328 2364  adiusbaw - ok
21:11:32.0562 2364  [ E12CFCF1DDBFC50948A75E6E38793225 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
21:11:32.0718 2364  AdobeFlashPlayerUpdateSvc - ok
21:11:32.0796 2364  [ 9A11864873DA202C996558B2106B0BBC ] adpu160m        C:\WINDOWS\system32\DRIVERS\adpu160m.sys
21:11:32.0875 2364  adpu160m - ok
21:11:32.0984 2364  [ 8BED39E3C35D6A489438B8141717A557 ] aec             C:\WINDOWS\system32\drivers\aec.sys
21:11:33.0093 2364  aec - ok
21:11:33.0187 2364  [ 2C5C22990156A1063E19AD162191DC1D ] AegisP          C:\WINDOWS\system32\DRIVERS\AegisP.sys
21:11:33.0203 2364  AegisP - ok
21:11:33.0328 2364  [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD             C:\WINDOWS\System32\drivers\afd.sys
21:11:33.0421 2364  AFD - ok
21:11:33.0500 2364  [ 08FD04AA961BDC77FB983F328334E3D7 ] agp440          C:\WINDOWS\system32\DRIVERS\agp440.sys
21:11:33.0531 2364  agp440 - ok
21:11:33.0578 2364  [ 03A7E0922ACFE1B07D5DB2EEB0773063 ] agpCPQ          C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
21:11:33.0609 2364  agpCPQ - ok
21:11:33.0703 2364  [ C23EA9B5F46C7F7910DB3EAB648FF013 ] Aha154x         C:\WINDOWS\system32\DRIVERS\aha154x.sys
21:11:33.0718 2364  Aha154x - ok
21:11:33.0781 2364  [ 19DD0FB48B0C18892F70E2E7D61A1529 ] aic78u2         C:\WINDOWS\system32\DRIVERS\aic78u2.sys
21:11:33.0812 2364  aic78u2 - ok
21:11:33.0875 2364  [ B7FE594A7468AA0132DEB03FB8E34326 ] aic78xx         C:\WINDOWS\system32\DRIVERS\aic78xx.sys
21:11:33.0921 2364  aic78xx - ok
21:11:33.0968 2364  [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter         C:\WINDOWS\system32\alrsvc.dll
21:11:34.0000 2364  Alerter - ok
21:11:34.0062 2364  [ 8C515081584A38AA007909CD02020B3D ] ALG             C:\WINDOWS\System32\alg.exe
21:11:34.0140 2364  ALG - ok
21:11:34.0187 2364  [ 1140AB9938809700B46BB88E46D72A96 ] AliIde          C:\WINDOWS\system32\DRIVERS\aliide.sys
21:11:34.0187 2364  AliIde - ok
21:11:34.0265 2364  [ CB08AED0DE2DD889A8A820CD8082D83C ] alim1541        C:\WINDOWS\system32\DRIVERS\alim1541.sys
21:11:34.0296 2364  alim1541 - ok
21:11:34.0343 2364  [ 95B4FB835E28AA1336CEEB07FD5B9398 ] amdagp          C:\WINDOWS\system32\DRIVERS\amdagp.sys
21:11:34.0375 2364  amdagp - ok
21:11:34.0406 2364  [ 79F5ADD8D24BD6893F2903A3E2F3FAD6 ] amsint          C:\WINDOWS\system32\DRIVERS\amsint.sys
21:11:34.0421 2364  amsint - ok
21:11:34.0453 2364  [ EC94E05B76D033B74394E7B2175103CF ] APPDRV          C:\WINDOWS\SYSTEM32\DRIVERS\APPDRV.SYS
21:11:34.0484 2364  APPDRV - ok
21:11:34.0500 2364  AppMgmt - ok
21:11:34.0531 2364  [ 62D318E9A0C8FC9B780008E724283707 ] asc             C:\WINDOWS\system32\DRIVERS\asc.sys
21:11:34.0546 2364  asc - ok
21:11:34.0593 2364  [ 69EB0CC7714B32896CCBFD5EDCBEA447 ] asc3350p        C:\WINDOWS\system32\DRIVERS\asc3350p.sys
21:11:34.0609 2364  asc3350p - ok
21:11:34.0625 2364  [ 5D8DE112AA0254B907861E9E9C31D597 ] asc3550         C:\WINDOWS\system32\DRIVERS\asc3550.sys
21:11:34.0640 2364  asc3550 - ok
21:11:34.0703 2364  [ D880831279ED91F9A4190A2DB9539EA9 ] ASCTRM          C:\WINDOWS\system32\drivers\ASCTRM.sys
21:11:34.0703 2364  ASCTRM - ok
21:11:34.0890 2364  [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
21:11:35.0046 2364  aspnet_state - ok
21:11:35.0109 2364  [ 0AE43C6C411254049279C2EE55630F95 ] aswFsBlk        C:\WINDOWS\system32\drivers\aswFsBlk.sys
21:11:35.0125 2364  aswFsBlk - ok
21:11:35.0218 2364  [ 8C30B7DDD2F1D8D138EBE40345AF2B11 ] aswMon2         C:\WINDOWS\system32\drivers\aswMon2.sys
21:11:35.0296 2364  aswMon2 - ok
21:11:35.0343 2364  [ DA12626FD9A67F4E917E2F2FBE1E1764 ] AswRdr          C:\WINDOWS\system32\drivers\AswRdr.sys
21:11:35.0375 2364  AswRdr - ok
21:11:35.0781 2364  [ DCB199B967375753B5019EC15F008F53 ] aswSnx          C:\WINDOWS\system32\drivers\aswSnx.sys
21:11:36.0171 2364  aswSnx - ok
21:11:36.0421 2364  [ B32873E5A1443C0A1E322266E203BF10 ] aswSP           C:\WINDOWS\system32\drivers\aswSP.sys
21:11:36.0640 2364  aswSP - ok
21:11:36.0703 2364  [ 6FF544175A9180C5D88534D3D9C9A9F7 ] aswTdi          C:\WINDOWS\system32\drivers\aswTdi.sys
21:11:36.0734 2364  aswTdi - ok
21:11:36.0796 2364  [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
21:11:36.0796 2364  AsyncMac - ok
21:11:36.0875 2364  [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi           C:\WINDOWS\system32\DRIVERS\atapi.sys
21:11:36.0890 2364  atapi - ok
21:11:36.0906 2364  Atdisk - ok
21:11:36.0953 2364  [ 9916C1225104BA14794209CFA8012159 ] Atmarpc         C:\WINDOWS\system32\DRIVERS\atmarpc.sys
21:11:37.0000 2364  Atmarpc - ok
21:11:37.0046 2364  [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv        C:\WINDOWS\System32\audiosrv.dll
21:11:37.0078 2364  AudioSrv - ok
21:11:37.0125 2364  [ D9F724AA26C010A217C97606B160ED68 ] audstub         C:\WINDOWS\system32\DRIVERS\audstub.sys
21:11:37.0140 2364  audstub - ok
21:11:37.0312 2364  [ 4041D31508A2A084DFB42C595854090F ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
21:11:37.0343 2364  avast! Antivirus - ok
21:11:37.0609 2364  [ C3AB2D6954C7B5103770832A3A6A591B ] BCM43XX         C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
21:11:37.0859 2364  BCM43XX - ok
21:11:37.0953 2364  [ C768C8A463D32C219CE291645A0621A4 ] bcm4sbxp        C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys
21:11:37.0984 2364  bcm4sbxp - ok
21:11:38.0031 2364  [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
21:11:38.0046 2364  Beep - ok
21:11:38.0390 2364  [ 574738F61FCA2935F5265DC4E5691314 ] BITS            C:\WINDOWS\system32\qmgr.dll
21:11:38.0703 2364  BITS - ok
21:11:38.0796 2364  [ CFD4E51402DA9838B5A04AE680AF54A0 ] Browser         C:\WINDOWS\System32\browser.dll
21:11:38.0843 2364  Browser - ok
21:11:38.0906 2364  [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf           C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
21:11:38.0921 2364  cbidf - ok
21:11:38.0937 2364  [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k         C:\WINDOWS\system32\drivers\cbidf2k.sys
21:11:38.0937 2364  cbidf2k - ok
21:11:39.0000 2364  [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE        C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
21:11:39.0015 2364  CCDECODE - ok
21:11:39.0078 2364  [ F3EC03299634490E97BBCE94CD2954C7 ] cd20xrnt        C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
21:11:39.0093 2364  cd20xrnt - ok
21:11:39.0125 2364  [ C1B486A7658353D33A10CC15211A873B ] Cdaudio         C:\WINDOWS\system32\drivers\Cdaudio.sys
21:11:39.0140 2364  Cdaudio - ok
21:11:39.0265 2364  [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs            C:\WINDOWS\system32\drivers\Cdfs.sys
21:11:39.0296 2364  Cdfs - ok
21:11:39.0375 2364  [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom           C:\WINDOWS\system32\DRIVERS\cdrom.sys
21:11:39.0406 2364  Cdrom - ok
21:11:39.0421 2364  Changer - ok
21:11:39.0484 2364  [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc           C:\WINDOWS\system32\cisvc.exe
21:11:39.0484 2364  CiSvc - ok
21:11:39.0531 2364  [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv         C:\WINDOWS\system32\clipsrv.exe
21:11:39.0562 2364  ClipSrv - ok
21:11:39.0640 2364  [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:11:39.0953 2364  clr_optimization_v2.0.50727_32 - ok
21:11:40.0000 2364  [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt          C:\WINDOWS\system32\DRIVERS\CmBatt.sys
21:11:40.0015 2364  CmBatt - ok
21:11:40.0046 2364  [ E5DCB56C533014ECBC556A8357C929D5 ] CmdIde          C:\WINDOWS\system32\DRIVERS\cmdide.sys
21:11:40.0062 2364  CmdIde - ok
21:11:40.0078 2364  [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt        C:\WINDOWS\system32\DRIVERS\compbatt.sys
21:11:40.0093 2364  Compbatt - ok
21:11:40.0109 2364  COMSysApp - ok
21:11:40.0187 2364  [ 3EE529119EED34CD212A215E8C40D4B6 ] Cpqarray        C:\WINDOWS\system32\DRIVERS\cpqarray.sys
21:11:40.0203 2364  Cpqarray - ok
21:11:40.0265 2364  [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc        C:\WINDOWS\System32\cryptsvc.dll
21:11:40.0312 2364  CryptSvc - ok
21:11:40.0390 2364  [ F054744F67576A01139885173392502B ] CrystalSysInfo  C:\Program Files\MediaCoder\SysInfo.sys
21:11:40.0406 2364  CrystalSysInfo - ok
21:11:40.0546 2364  [ E550E7418984B65A78299D248F0A7F36 ] dac2w2k         C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
21:11:40.0671 2364  dac2w2k - ok
21:11:40.0687 2364  [ 683789CAA3864EB46125AE86FF677D34 ] dac960nt        C:\WINDOWS\system32\DRIVERS\dac960nt.sys
21:11:40.0703 2364  dac960nt - ok
21:11:40.0984 2364  [ 6B27A5C03DFB94B4245739065431322C ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
21:11:41.0250 2364  DcomLaunch - ok
21:11:41.0375 2364  [ 5E38D7684A49CACFB752B046357E0589 ] Dhcp            C:\WINDOWS\System32\dhcpcsvc.dll
21:11:41.0468 2364  Dhcp - ok
21:11:41.0531 2364  [ 044452051F3E02E7963599FC8F4F3E25 ] Disk            C:\WINDOWS\system32\DRIVERS\disk.sys
21:11:41.0562 2364  Disk - ok
21:11:41.0578 2364  dmadmin - ok
21:11:42.0093 2364  [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot          C:\WINDOWS\system32\drivers\dmboot.sys
21:11:42.0609 2364  dmboot - ok
21:11:42.0734 2364  [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio            C:\WINDOWS\system32\drivers\dmio.sys
21:11:42.0843 2364  dmio - ok
21:11:42.0859 2364  [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload          C:\WINDOWS\system32\drivers\dmload.sys
21:11:42.0875 2364  dmload - ok
21:11:42.0921 2364  [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver        C:\WINDOWS\System32\dmserver.dll
21:11:42.0953 2364  dmserver - ok
21:11:43.0015 2364  [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic          C:\WINDOWS\system32\drivers\DMusic.sys
21:11:43.0046 2364  DMusic - ok
21:11:43.0125 2364  [ 5F7E24FA9EAB896051FFB87F840730D2 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
21:11:43.0156 2364  Dnscache - ok
21:11:43.0546 2364  [ 0F0F6E687E5E15579EF4DA8DD6945814 ] Dot3svc         C:\WINDOWS\System32\dot3svc.dll
21:11:43.0640 2364  Dot3svc - ok
21:11:43.0671 2364  [ 40F3B93B4E5B0126F2F5C0A7A5E22660 ] dpti2o          C:\WINDOWS\system32\DRIVERS\dpti2o.sys
21:11:43.0687 2364  dpti2o - ok
21:11:43.0734 2364  [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
21:11:43.0734 2364  drmkaud - ok
21:11:43.0828 2364  [ E814854E6B246CCF498874839AB64D77 ] drvmcdb         C:\WINDOWS\system32\drivers\drvmcdb.sys
21:11:43.0890 2364  drvmcdb - ok
21:11:43.0937 2364  [ EE83A4EBAE70BC93CF14879D062F548B ] drvnddm         C:\WINDOWS\system32\drivers\drvnddm.sys
21:11:43.0968 2364  drvnddm - ok
21:11:44.0078 2364  [ 3FCA03CBCA11269F973B70FA483C88EF ] E100B           C:\WINDOWS\system32\DRIVERS\e100b325.sys
21:11:44.0156 2364  E100B - ok
21:11:44.0203 2364  [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost         C:\WINDOWS\System32\eapsvc.dll
21:11:44.0234 2364  EapHost - ok
21:11:44.0328 2364  [ 9A3A8614859FB77767B63A82A017CCC6 ] ELOADER         C:\WINDOWS\system32\Drivers\adildr.sys
21:11:44.0359 2364  ELOADER - ok
21:11:44.0421 2364  [ BC93B4A066477954555966D77FEC9ECB ] ERSvc           C:\WINDOWS\System32\ersvc.dll
21:11:44.0437 2364  ERSvc - ok
21:11:44.0531 2364  [ 65DF52F5B8B6E9BBD183505225C37315 ] Eventlog        C:\WINDOWS\system32\services.exe
21:11:44.0625 2364  Eventlog - ok
21:11:44.0828 2364  [ D4991D98F2DB73C60D042F1AEF79EFAE ] EventSystem     C:\WINDOWS\system32\es.dll
21:11:45.0000 2364  EventSystem - ok
21:11:45.0140 2364  [ 38D332A6D56AF32635675F132548343E ] Fastfat         C:\WINDOWS\system32\drivers\Fastfat.sys
21:11:45.0218 2364  Fastfat - ok
21:11:45.0359 2364  [ 99BC0B50F511924348BE19C7C7313BBF ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
21:11:45.0468 2364  FastUserSwitchingCompatibility - ok
21:11:45.0656 2364  [ E97D6A8684466DF94FF3BC24FB787A07 ] Fax             C:\WINDOWS\system32\fxssvc.exe
21:11:45.0828 2364  Fax - ok
21:11:45.0875 2364  [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc             C:\WINDOWS\system32\DRIVERS\fdc.sys
21:11:45.0906 2364  Fdc - ok
21:11:45.0953 2364  [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips            C:\WINDOWS\system32\drivers\Fips.sys
21:11:45.0984 2364  Fips - ok
21:11:46.0031 2364  [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk        C:\WINDOWS\system32\DRIVERS\flpydisk.sys
21:11:46.0046 2364  Flpydisk - ok
21:11:46.0156 2364  [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
21:11:46.0250 2364  FltMgr - ok
21:11:46.0437 2364  [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
21:11:46.0484 2364  FontCache3.0.0.0 - ok
21:11:46.0671 2364  [ 7F20ECCB2A92B4124B87E42D81EA8335 ] FreeAgentGoNext Service C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
21:11:46.0781 2364  FreeAgentGoNext Service - ok
21:11:46.0812 2364  [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
21:11:46.0828 2364  Fs_Rec - ok
21:11:46.0937 2364  [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk          C:\WINDOWS\system32\DRIVERS\ftdisk.sys
21:11:47.0015 2364  Ftdisk - ok
21:11:47.0078 2364  [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc             C:\WINDOWS\system32\DRIVERS\msgpc.sys
21:11:47.0109 2364  Gpc - ok
21:11:47.0265 2364  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate         C:\Program Files\Google\Update\GoogleUpdate.exe
21:11:47.0343 2364  gupdate - ok
21:11:47.0437 2364  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
21:11:47.0453 2364  gupdatem - ok
21:11:47.0625 2364  [ CC839E8D766CC31A7710C9F38CF3E375 ] gusvc           C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
21:11:47.0750 2364  gusvc - ok
21:11:47.0875 2364  [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus        C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
21:11:47.0968 2364  HDAudBus - ok
21:11:48.0046 2364  [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc         C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
21:11:48.0078 2364  helpsvc - ok
21:11:48.0140 2364  [ DEB04DA35CC871B6D309B77E1443C796 ] HidServ         C:\WINDOWS\System32\hidserv.dll
21:11:48.0156 2364  HidServ - ok
21:11:48.0187 2364  [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb          C:\WINDOWS\system32\DRIVERS\hidusb.sys
21:11:48.0203 2364  HidUsb - ok
21:11:48.0359 2364  [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc          C:\WINDOWS\System32\kmsvc.dll
21:11:48.0406 2364  hkmsvc - ok
21:11:48.0500 2364  [ B028377DEA0546A5FCFBA928A8AEFAE0 ] hpn             C:\WINDOWS\system32\DRIVERS\hpn.sys
21:11:48.0515 2364  hpn - ok
21:11:48.0687 2364  [ 1C8CAA80E91FB71864E9426F9EED048D ] HSFHWAZL        C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
21:11:48.0812 2364  HSFHWAZL - ok
21:11:49.0484 2364  [ 698204D9C2832E53633E53A30A53FC3D ] HSF_DPV         C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
21:11:50.0125 2364  HSF_DPV - ok
21:11:50.0390 2364  [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP            C:\WINDOWS\system32\Drivers\HTTP.sys
21:11:50.0562 2364  HTTP - ok
21:11:50.0609 2364  [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter      C:\WINDOWS\System32\w3ssl.dll
21:11:50.0640 2364  HTTPFilter - ok
21:11:50.0687 2364  [ 9368670BD426EBEA5E8B18A62416EC28 ] i2omgmt         C:\WINDOWS\system32\drivers\i2omgmt.sys
21:11:50.0687 2364  i2omgmt - ok
21:11:50.0734 2364  [ F10863BF1CCC290BABD1A09188AE49E0 ] i2omp           C:\WINDOWS\system32\DRIVERS\i2omp.sys
21:11:50.0765 2364  i2omp - ok
21:11:50.0812 2364  [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt        C:\WINDOWS\system32\DRIVERS\i8042prt.sys
21:11:50.0859 2364  i8042prt - ok
21:11:51.0703 2364  [ 5A8E05F1D5C36ABD58CFFA111EB325EA ] ialm            C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
21:11:52.0546 2364  ialm - ok
21:11:52.0718 2364  [ DAF66902F08796F9C694901660E5A64A ] IDriverT        C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
21:11:52.0781 2364  IDriverT - ok
21:11:53.0421 2364  [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc           c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
21:11:54.0000 2364  idsvc - ok
21:11:54.0078 2364  [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi           C:\WINDOWS\system32\DRIVERS\imapi.sys
21:11:54.0109 2364  Imapi - ok
21:11:54.0234 2364  [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService    C:\WINDOWS\system32\imapi.exe
21:11:54.0359 2364  ImapiService - ok
21:11:54.0515 2364  [ 4A40E045FAEE58631FD8D91AFC620719 ] ini910u         C:\WINDOWS\system32\DRIVERS\ini910u.sys
21:11:54.0531 2364  ini910u - ok
21:11:54.0562 2364  [ B5466A9250342A7AA0CD1FBA13420678 ] IntelIde        C:\WINDOWS\system32\DRIVERS\intelide.sys
21:11:54.0578 2364  IntelIde - ok
21:11:54.0640 2364  [ 8C953733D8F36EB2133F5BB58808B66B ] intelppm        C:\WINDOWS\system32\DRIVERS\intelppm.sys
21:11:54.0687 2364  intelppm - ok
21:11:54.0781 2364  [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw           C:\WINDOWS\system32\drivers\ip6fw.sys
21:11:54.0875 2364  Ip6Fw - ok
21:11:54.0937 2364  [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
21:11:54.0953 2364  IpFilterDriver - ok
21:11:54.0984 2364  [ B87AB476DCF76E72010632B5550955F5 ] IpInIp          C:\WINDOWS\system32\DRIVERS\ipinip.sys
21:11:55.0015 2364  IpInIp - ok
21:11:55.0203 2364  [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat           C:\WINDOWS\system32\DRIVERS\ipnat.sys
21:11:55.0296 2364  IpNat - ok
21:11:55.0375 2364  [ 23C74D75E36E7158768DD63D92789A91 ] IPSec           C:\WINDOWS\system32\DRIVERS\ipsec.sys
21:11:55.0421 2364  IPSec - ok
21:11:55.0468 2364  [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM          C:\WINDOWS\system32\DRIVERS\irenum.sys
21:11:55.0484 2364  IRENUM - ok
21:11:55.0531 2364  [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp          C:\WINDOWS\system32\DRIVERS\isapnp.sys
21:11:55.0562 2364  isapnp - ok
21:11:55.0750 2364  [ 1834C96FB1F9280BCF6DDFA6DE8338BF ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
21:11:55.0843 2364  JavaQuickStarterService - ok
21:11:55.0890 2364  [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass        C:\WINDOWS\system32\DRIVERS\kbdclass.sys
21:11:55.0921 2364  Kbdclass - ok
21:11:56.0062 2364  [ 692BCF44383D056AED41B045A323D378 ] kmixer          C:\WINDOWS\system32\drivers\kmixer.sys
21:11:56.0171 2364  kmixer - ok
21:11:56.0265 2364  [ B467646C54CC746128904E1654C750C1 ] KSecDD          C:\WINDOWS\system32\drivers\KSecDD.sys
21:11:56.0328 2364  KSecDD - ok
21:11:56.0453 2364  [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] lanmanserver    C:\WINDOWS\System32\srvsvc.dll
21:11:56.0625 2364  lanmanserver - ok
21:11:57.0015 2364  [ A8888A5327621856C0CEC4E385F69309 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
21:11:57.0187 2364  lanmanworkstation - ok
21:11:57.0187 2364  lbrtfdc - ok
21:11:57.0234 2364  [ A7DB739AE99A796D91580147E919CC59 ] LmHosts         C:\WINDOWS\System32\lmhsvc.dll
21:11:57.0328 2364  LmHosts - ok
21:11:57.0406 2364  [ 3C318B9CD391371BED62126581EE9961 ] mdmxsdk         C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
21:11:57.0453 2364  mdmxsdk - ok
21:11:57.0515 2364  [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger       C:\WINDOWS\System32\msgsvc.dll
21:11:57.0578 2364  Messenger - ok
21:11:57.0625 2364  [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd           C:\WINDOWS\system32\drivers\mnmdd.sys
21:11:57.0640 2364  mnmdd - ok
21:11:57.0703 2364  [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc         C:\WINDOWS\system32\mnmsrvc.exe
21:11:57.0734 2364  mnmsrvc - ok
21:11:57.0796 2364  [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem           C:\WINDOWS\system32\drivers\Modem.sys
21:11:57.0890 2364  Modem - ok
21:11:57.0921 2364  [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass        C:\WINDOWS\system32\DRIVERS\mouclass.sys
21:11:57.0937 2364  Mouclass - ok
21:11:57.0984 2364  [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid          C:\WINDOWS\system32\DRIVERS\mouhid.sys
21:11:58.0000 2364  mouhid - ok
21:11:58.0109 2364  [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr        C:\WINDOWS\system32\drivers\MountMgr.sys
21:11:58.0140 2364  MountMgr - ok
21:11:58.0171 2364  [ 3F4BB95E5A44F3BE34824E8E7CAF0737 ] mraid35x        C:\WINDOWS\system32\DRIVERS\mraid35x.sys
21:11:58.0187 2364  mraid35x - ok
21:11:58.0312 2364  [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV          C:\WINDOWS\system32\DRIVERS\mrxdav.sys
21:11:58.0484 2364  MRxDAV - ok
21:11:58.0843 2364  [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
21:11:59.0125 2364  MRxSmb - ok
21:11:59.0156 2364  [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC           C:\WINDOWS\system32\msdtc.exe
21:11:59.0187 2364  MSDTC - ok
21:11:59.0218 2364  [ C941EA2454BA8350021D774DAF0F1027 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
21:11:59.0234 2364  Msfs - ok
21:11:59.0234 2364  MSIServer - ok
21:11:59.0265 2364  [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
21:11:59.0281 2364  MSKSSRV - ok
21:11:59.0312 2364  [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
21:11:59.0312 2364  MSPCLOCK - ok
21:11:59.0343 2364  [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
21:11:59.0343 2364  MSPQM - ok
21:11:59.0390 2364  [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios        C:\WINDOWS\system32\DRIVERS\mssmbios.sys
21:11:59.0406 2364  mssmbios - ok
21:11:59.0453 2364  [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE           C:\WINDOWS\system32\drivers\MSTEE.sys
21:11:59.0484 2364  MSTEE - ok
21:11:59.0562 2364  [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup             C:\WINDOWS\system32\drivers\Mup.sys
21:11:59.0656 2364  Mup - ok
21:11:59.0734 2364  [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC        C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
21:11:59.0781 2364  NABTSFEC - ok
21:12:00.0031 2364  [ 0102140028FAD045756796E1C685D695 ] napagent        C:\WINDOWS\System32\qagentrt.dll
21:12:00.0234 2364  napagent - ok
21:12:00.0406 2364  [ 1DF7F42665C94B825322FAE71721130D ] NDIS            C:\WINDOWS\system32\drivers\NDIS.sys
21:12:00.0562 2364  NDIS - ok
21:12:00.0609 2364  [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP          C:\WINDOWS\system32\DRIVERS\NdisIP.sys
21:12:00.0640 2364  NdisIP - ok
21:12:00.0671 2364  [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
21:12:00.0687 2364  NdisTapi - ok
21:12:00.0734 2364  [ F927A4434C5028758A842943EF1A3849 ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
21:12:00.0750 2364  Ndisuio - ok
21:12:00.0828 2364  [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
21:12:00.0906 2364  NdisWan - ok
21:12:00.0984 2364  [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
21:12:01.0031 2364  NDProxy - ok
21:12:01.0078 2364  [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
21:12:01.0109 2364  NetBIOS - ok
21:12:01.0250 2364  [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
21:12:01.0359 2364  NetBT - ok
21:12:01.0515 2364  [ B857BA82860D7FF85AE29B095645563B ] NetDDE          C:\WINDOWS\system32\netdde.exe
21:12:01.0687 2364  NetDDE - ok
21:12:01.0781 2364  [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm      C:\WINDOWS\system32\netdde.exe
21:12:01.0781 2364  NetDDEdsdm - ok
21:12:01.0828 2364  [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon        C:\WINDOWS\system32\lsass.exe
21:12:01.0843 2364  Netlogon - ok
21:12:02.0000 2364  [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman          C:\WINDOWS\System32\netman.dll
21:12:02.0156 2364  Netman - ok
21:12:02.0281 2364  [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
21:12:02.0390 2364  NetTcpPortSharing - ok
21:12:02.0703 2364  [ 23EEB337BF684589D261F2359E19C72C ] NICCONFIGSVC    C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
21:12:02.0937 2364  NICCONFIGSVC - ok
21:12:03.0125 2364  [ 943337D786A56729263071623BBB9DE5 ] Nla             C:\WINDOWS\System32\mswsock.dll
21:12:03.0265 2364  Nla - ok
21:12:03.0328 2364  [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
21:12:03.0343 2364  Npfs - ok
21:12:03.0828 2364  [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
21:12:04.0250 2364  Ntfs - ok
21:12:04.0281 2364  [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp         C:\WINDOWS\system32\lsass.exe
21:12:04.0281 2364  NtLmSsp - ok
21:12:04.0609 2364  [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc         C:\WINDOWS\system32\ntmssvc.dll
21:12:05.0015 2364  NtmsSvc - ok
21:12:05.0125 2364  [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null            C:\WINDOWS\system32\drivers\Null.sys
21:12:05.0125 2364  Null - ok
21:12:06.0687 2364  [ 2B298519EDBFCF451D43E0F1E8F1006D ] nv              C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
21:12:07.0953 2364  nv - ok
21:12:08.0000 2364  [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt        C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
21:12:08.0015 2364  NwlnkFlt - ok
21:12:08.0062 2364  [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd        C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
21:12:08.0078 2364  NwlnkFwd - ok
21:12:08.0156 2364  [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport         C:\WINDOWS\system32\DRIVERS\parport.sys
21:12:08.0218 2364  Parport - ok
21:12:08.0265 2364  [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr         C:\WINDOWS\system32\drivers\PartMgr.sys
21:12:08.0281 2364  PartMgr - ok
21:12:08.0296 2364  [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm          C:\WINDOWS\system32\drivers\ParVdm.sys
21:12:08.0312 2364  ParVdm - ok
21:12:08.0375 2364  [ A219903CCF74233761D92BEF471A07B1 ] PCI             C:\WINDOWS\system32\DRIVERS\pci.sys
21:12:08.0421 2364  PCI - ok
21:12:08.0437 2364  PCIDump - ok
21:12:08.0515 2364  [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde          C:\WINDOWS\system32\DRIVERS\pciide.sys
21:12:08.0593 2364  PCIIde - ok
21:12:08.0718 2364  [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia          C:\WINDOWS\system32\drivers\Pcmcia.sys
21:12:08.0812 2364  Pcmcia - ok
21:12:08.0812 2364  PDCOMP - ok
21:12:08.0828 2364  PDFRAME - ok
21:12:08.0843 2364  PDRELI - ok
21:12:08.0843 2364  PDRFRAME - ok
21:12:08.0890 2364  [ 6C14B9C19BA84F73D3A86DBA11133101 ] perc2           C:\WINDOWS\system32\DRIVERS\perc2.sys
21:12:08.0906 2364  perc2 - ok
21:12:08.0921 2364  [ F50F7C27F131AFE7BEBA13E14A3B9416 ] perc2hib        C:\WINDOWS\system32\DRIVERS\perc2hib.sys
21:12:08.0937 2364  perc2hib - ok
21:12:09.0031 2364  [ 65DF52F5B8B6E9BBD183505225C37315 ] PlugPlay        C:\WINDOWS\system32\services.exe
21:12:09.0046 2364  PlugPlay - ok
21:12:09.0078 2364  [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent     C:\WINDOWS\system32\lsass.exe
21:12:09.0093 2364  PolicyAgent - ok
21:12:09.0140 2364  [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
21:12:09.0187 2364  PptpMiniport - ok
21:12:09.0203 2364  [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
21:12:09.0218 2364  ProtectedStorage - ok
21:12:09.0281 2364  [ 09298EC810B07E5D582CB3A3F9255424 ] PSched          C:\WINDOWS\system32\DRIVERS\psched.sys
21:12:09.0328 2364  PSched - ok
21:12:09.0390 2364  [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink         C:\WINDOWS\system32\DRIVERS\ptilink.sys
21:12:09.0406 2364  Ptilink - ok
21:12:09.0578 2364  [ 0D89C528B28323E79A7CD2F8DE4F5B8A ] PuranDefrag     C:\WINDOWS\system32\PuranDefragS.exe
21:12:09.0765 2364  PuranDefrag - ok
21:12:09.0828 2364  [ 49452BFCEC22F36A7A9B9C2181BC3042 ] PxHelp20        C:\WINDOWS\system32\Drivers\PxHelp20.sys
21:12:09.0875 2364  PxHelp20 - ok
21:12:09.0937 2364  [ 0A63FB54039EB5662433CABA3B26DBA7 ] ql1080          C:\WINDOWS\system32\DRIVERS\ql1080.sys
21:12:09.0968 2364  ql1080 - ok
21:12:10.0031 2364  [ 6503449E1D43A0FF0201AD5CB1B8C706 ] Ql10wnt         C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
21:12:10.0046 2364  Ql10wnt - ok
21:12:10.0125 2364  [ 156ED0EF20C15114CA097A34A30D8A01 ] ql12160         C:\WINDOWS\system32\DRIVERS\ql12160.sys
21:12:10.0156 2364  ql12160 - ok
21:12:10.0187 2364  [ 70F016BEBDE6D29E864C1230A07CC5E6 ] ql1240          C:\WINDOWS\system32\DRIVERS\ql1240.sys
21:12:10.0218 2364  ql1240 - ok
21:12:10.0250 2364  [ 907F0AEEA6BC451011611E732BD31FCF ] ql1280          C:\WINDOWS\system32\DRIVERS\ql1280.sys
21:12:10.0296 2364  ql1280 - ok
21:12:10.0328 2364  [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
21:12:10.0343 2364  RasAcd - ok
21:12:10.0421 2364  [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto         C:\WINDOWS\System32\rasauto.dll
21:12:10.0484 2364  RasAuto - ok
21:12:10.0531 2364  [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp         C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
21:12:10.0578 2364  Rasl2tp - ok
21:12:10.0765 2364  [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan          C:\WINDOWS\System32\rasmans.dll
21:12:10.0906 2364  RasMan - ok
21:12:10.0953 2364  [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
21:12:10.0984 2364  RasPppoe - ok
21:12:11.0015 2364  [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti          C:\WINDOWS\system32\DRIVERS\raspti.sys
21:12:11.0031 2364  Raspti - ok
21:12:11.0187 2364  [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
21:12:11.0296 2364  Rdbss - ok
21:12:11.0328 2364  [ 4912D5B403614CE99C28420F75353332 ] RDPCDD          C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
21:12:11.0343 2364  RDPCDD - ok
21:12:11.0484 2364  [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr           C:\WINDOWS\system32\DRIVERS\rdpdr.sys
21:12:11.0609 2364  rdpdr - ok
21:12:11.0765 2364  [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD           C:\WINDOWS\system32\drivers\RDPWD.sys
21:12:11.0875 2364  RDPWD - ok
21:12:11.0984 2364  [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr       C:\WINDOWS\system32\sessmgr.exe
21:12:12.0078 2364  RDSessMgr - ok
21:12:12.0140 2364  [ F828DD7E1419B6653894A8F97A0094C5 ] redbook         C:\WINDOWS\system32\DRIVERS\redbook.sys
21:12:12.0187 2364  redbook - ok
21:12:12.0250 2364  [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
21:12:12.0296 2364  RemoteAccess - ok
21:12:12.0375 2364  [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator      C:\WINDOWS\system32\locator.exe
21:12:12.0437 2364  RpcLocator - ok
21:12:12.0703 2364  [ 6B27A5C03DFB94B4245739065431322C ] RpcSs           C:\WINDOWS\System32\rpcss.dll
21:12:12.0718 2364  RpcSs - ok
21:12:12.0890 2364  [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP            C:\WINDOWS\system32\rsvp.exe
21:12:13.0000 2364  RSVP - ok
21:12:13.0031 2364  [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs           C:\WINDOWS\system32\lsass.exe
21:12:13.0031 2364  SamSs - ok
21:12:13.0125 2364  [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.exe
21:12:13.0187 2364  SCardSvr - ok
21:12:13.0343 2364  [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule        C:\WINDOWS\system32\schedsvc.dll
21:12:13.0468 2364  Schedule - ok
21:12:13.0546 2364  [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv          C:\WINDOWS\system32\DRIVERS\secdrv.sys
21:12:13.0562 2364  Secdrv - ok
21:12:13.0593 2364  [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon        C:\WINDOWS\System32\seclogon.dll
21:12:13.0625 2364  seclogon - ok
21:12:13.0671 2364  [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS            C:\WINDOWS\system32\sens.dll
21:12:13.0718 2364  SENS - ok
21:12:13.0843 2364  [ 2EC41A96D0DC98BD119BF325E0B9F392 ] Ser2pl          C:\WINDOWS\system32\DRIVERS\ser2pl.sys
21:12:13.0890 2364  Ser2pl - ok
21:12:13.0937 2364  [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum         C:\WINDOWS\system32\DRIVERS\serenum.sys
21:12:13.0953 2364  serenum - ok
21:12:14.0015 2364  [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial          C:\WINDOWS\system32\DRIVERS\serial.sys
21:12:14.0062 2364  Serial - ok
21:12:14.0093 2364  [ 1F16931C722C69E4A7866244796C66A0 ] sermouse        C:\WINDOWS\system32\DRIVERS\sermouse.sys
21:12:14.0125 2364  sermouse - ok
21:12:14.0156 2364  [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy         C:\WINDOWS\system32\DRIVERS\sfloppy.sys
21:12:14.0171 2364  Sfloppy - ok
21:12:14.0265 2364  [ 99BC0B50F511924348BE19C7C7313BBF ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
21:12:14.0281 2364  ShellHWDetection - ok
21:12:14.0281 2364  Simbad - ok
21:12:14.0390 2364  [ 6B33D0EBD30DB32E27D1D78FE946A754 ] sisagp          C:\WINDOWS\system32\DRIVERS\sisagp.sys
21:12:14.0421 2364  sisagp - ok
21:12:14.0562 2364  [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate     C:\Program Files\Skype\Updater\Updater.exe
21:12:14.0671 2364  SkypeUpdate - ok
21:12:14.0750 2364  [ 903B5B4CAA9A85B85BA57E411F7235FA ] SliceDisk5      C:\Program Files\A-FF Find and Mount\slicedisk.sys
21:12:14.0781 2364  SliceDisk5 - ok
21:12:14.0796 2364  [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP            C:\WINDOWS\system32\DRIVERS\SLIP.sys
21:12:14.0812 2364  SLIP - ok
21:12:14.0859 2364  [ A1ECEEAA5C5E74B2499EB51D38185B84 ] SONYPVU1        C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS
21:12:14.0859 2364  SONYPVU1 - ok
21:12:14.0921 2364  [ 83C0F71F86D3BDAF915685F3D568B20E ] Sparrow         C:\WINDOWS\system32\DRIVERS\sparrow.sys
21:12:14.0953 2364  Sparrow - ok
21:12:14.0984 2364  [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter        C:\WINDOWS\system32\drivers\splitter.sys
21:12:14.0984 2364  splitter - ok
21:12:15.0062 2364  [ 60784F891563FB1B767F70117FC2428F ] Spooler         C:\WINDOWS\system32\spoolsv.exe
21:12:15.0109 2364  Spooler - ok
21:12:15.0187 2364  [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] sr              C:\WINDOWS\system32\DRIVERS\sr.sys
21:12:15.0250 2364  sr - ok
21:12:15.0390 2364  [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice       C:\WINDOWS\system32\srsvc.dll
21:12:15.0515 2364  srservice - ok
21:12:15.0796 2364  [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv             C:\WINDOWS\system32\DRIVERS\srv.sys
21:12:16.0031 2364  Srv - ok
21:12:16.0062 2364  [ D7968049BE0ADBB6A57CEE3960320911 ] sscdbhk5        C:\WINDOWS\system32\drivers\sscdbhk5.sys
21:12:16.0078 2364  sscdbhk5 - ok
21:12:16.0156 2364  [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
21:12:16.0203 2364  SSDPSRV - ok
21:12:16.0250 2364  [ C3FFD65ABFB6441E7606CF74F1155273 ] ssrtln          C:\WINDOWS\system32\drivers\ssrtln.sys
21:12:16.0265 2364  ssrtln - ok
21:12:17.0031 2364  [ 0467A93B1E7FDA167E01FDEC79783154 ] STHDA           C:\WINDOWS\system32\drivers\sthda.sys
21:12:17.0671 2364  STHDA - ok
21:12:17.0921 2364  [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc          C:\WINDOWS\system32\wiaservc.dll
21:12:18.0156 2364  stisvc - ok
21:12:18.0203 2364  [ 77813007BA6265C4B6098187E6ED79D2 ] streamip        C:\WINDOWS\system32\DRIVERS\StreamIP.sys
21:12:18.0218 2364  streamip - ok
21:12:18.0265 2364  [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum          C:\WINDOWS\system32\DRIVERS\swenum.sys
21:12:18.0281 2364  swenum - ok
21:12:18.0328 2364  [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi          C:\WINDOWS\system32\drivers\swmidi.sys
21:12:18.0375 2364  swmidi - ok
21:12:18.0375 2364  SwPrv - ok
21:12:18.0406 2364  [ 1FF3217614018630D0A6758630FC698C ] symc810         C:\WINDOWS\system32\DRIVERS\symc810.sys
21:12:18.0421 2364  symc810 - ok
21:12:18.0468 2364  [ 070E001D95CF725186EF8B20335F933C ] symc8xx         C:\WINDOWS\system32\DRIVERS\symc8xx.sys
21:12:18.0500 2364  symc8xx - ok
21:12:18.0562 2364  [ 80AC1C4ABBE2DF3B738BF15517A51F2C ] sym_hi          C:\WINDOWS\system32\DRIVERS\sym_hi.sys
21:12:18.0593 2364  sym_hi - ok
21:12:18.0625 2364  [ BF4FAB949A382A8E105F46EBB4937058 ] sym_u3          C:\WINDOWS\system32\DRIVERS\sym_u3.sys
21:12:18.0656 2364  sym_u3 - ok
21:12:18.0796 2364  [ 643B3E821A00B2B6A35CC099CB9653A1 ] SynTP           C:\WINDOWS\system32\DRIVERS\SynTP.sys
21:12:18.0953 2364  SynTP - ok
21:12:19.0015 2364  [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio        C:\WINDOWS\system32\drivers\sysaudio.sys
21:12:19.0062 2364  sysaudio - ok
21:12:19.0140 2364  [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog       C:\WINDOWS\system32\smlogsvc.exe
21:12:19.0218 2364  SysmonLog - ok
21:12:19.0390 2364  [ 3CB78C17BB664637787C9A1C98F79C38 ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
21:12:19.0562 2364  TapiSrv - ok
21:12:19.0843 2364  [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip           C:\WINDOWS\system32\DRIVERS\tcpip.sys
21:12:20.0078 2364  Tcpip - ok
21:12:20.0125 2364  [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE          C:\WINDOWS\system32\drivers\TDPIPE.sys
21:12:20.0125 2364  TDPIPE - ok
21:12:20.0171 2364  [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP           C:\WINDOWS\system32\drivers\TDTCP.sys
21:12:20.0187 2364  TDTCP - ok
21:12:20.0234 2364  [ 88155247177638048422893737429D9E ] TermDD          C:\WINDOWS\system32\DRIVERS\termdd.sys
21:12:20.0265 2364  TermDD - ok
21:12:20.0531 2364  [ FF3477C03BE7201C294C35F684B3479F ] TermService     C:\WINDOWS\System32\termsrv.dll
21:12:20.0718 2364  TermService - ok
21:12:20.0796 2364  [ 30698355067D07DA5F9EB81132C9FDD6 ] tfsnboio        C:\WINDOWS\system32\dla\tfsnboio.sys
21:12:20.0812 2364  tfsnboio - ok
21:12:20.0890 2364  [ FB9D825BB4A2ABDF24600F7505050E2B ] tfsncofs        C:\WINDOWS\system32\dla\tfsncofs.sys
21:12:20.0906 2364  tfsncofs - ok
21:12:20.0921 2364  [ CAFD8CCA11AA1E8B6D2EA1BA8F70EC33 ] tfsndrct        C:\WINDOWS\system32\dla\tfsndrct.sys
21:12:20.0937 2364  tfsndrct - ok
21:12:20.0984 2364  [ 8DB1E78FBF7C426D8EC3D8F1A33D6485 ] tfsndres        C:\WINDOWS\system32\dla\tfsndres.sys
21:12:20.0984 2364  tfsndres - ok
21:12:21.0062 2364  [ B92F67A71CC8176F331B8AA8D9F555AD ] tfsnifs         C:\WINDOWS\system32\dla\tfsnifs.sys
21:12:21.0125 2364  tfsnifs - ok
21:12:21.0156 2364  [ 85985FAA9A71E2358FCC2EDEFC2A3C5C ] tfsnopio        C:\WINDOWS\system32\dla\tfsnopio.sys
21:12:21.0171 2364  tfsnopio - ok
21:12:21.0187 2364  [ BBA22094F0F7C210567EFDAF11F64495 ] tfsnpool        C:\WINDOWS\system32\dla\tfsnpool.sys
21:12:21.0203 2364  tfsnpool - ok
21:12:21.0281 2364  [ 81340BEF80B9811E98CE64611E67E3FF ] tfsnudf         C:\WINDOWS\system32\dla\tfsnudf.sys
21:12:21.0343 2364  tfsnudf - ok
21:12:21.0437 2364  [ C035FD116224CCC8325F384776B6A8BB ] tfsnudfa        C:\WINDOWS\system32\dla\tfsnudfa.sys
21:12:21.0500 2364  tfsnudfa - ok
21:12:21.0609 2364  [ 99BC0B50F511924348BE19C7C7313BBF ] Themes          C:\WINDOWS\System32\shsvcs.dll
21:12:21.0625 2364  Themes - ok
21:12:21.0656 2364  [ F2790F6AF01321B172AA62F8E1E187D9 ] TosIde          C:\WINDOWS\system32\DRIVERS\toside.sys
21:12:21.0656 2364  TosIde - ok
21:12:21.0781 2364  [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks          C:\WINDOWS\system32\trkwks.dll
21:12:21.0937 2364  TrkWks - ok
21:12:22.0093 2364  [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs            C:\WINDOWS\system32\drivers\Udfs.sys
21:12:22.0203 2364  Udfs - ok
21:12:22.0234 2364  [ 1B698A51CD528D8DA4FFAED66DFC51B9 ] ultra           C:\WINDOWS\system32\DRIVERS\ultra.sys
21:12:22.0265 2364  ultra - ok
21:12:22.0625 2364  [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update          C:\WINDOWS\system32\DRIVERS\update.sys
21:12:22.0875 2364  Update - ok
21:12:23.0031 2364  [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost        C:\WINDOWS\System32\upnphost.dll
21:12:23.0171 2364  upnphost - ok
21:12:23.0203 2364  [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS             C:\WINDOWS\System32\ups.exe
21:12:23.0234 2364  UPS - ok
21:12:23.0281 2364  [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp         C:\WINDOWS\system32\DRIVERS\usbccgp.sys
21:12:23.0312 2364  usbccgp - ok
21:12:23.0359 2364  [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci         C:\WINDOWS\system32\DRIVERS\usbehci.sys
21:12:23.0375 2364  usbehci - ok
21:12:23.0437 2364  [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub          C:\WINDOWS\system32\DRIVERS\usbhub.sys
21:12:23.0484 2364  usbhub - ok
21:12:23.0546 2364  [ A717C8721046828520C9EDF31288FC00 ] usbprint        C:\WINDOWS\system32\DRIVERS\usbprint.sys
21:12:23.0578 2364  usbprint - ok
21:12:23.0609 2364  [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR         C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
21:12:23.0640 2364  USBSTOR - ok
21:12:23.0687 2364  [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci         C:\WINDOWS\system32\DRIVERS\usbuhci.sys
21:12:23.0703 2364  usbuhci - ok
21:12:23.0796 2364  [ 63BBFCA7F390F4C49ED4B96BFB1633E0 ] usbvideo        C:\WINDOWS\system32\Drivers\usbvideo.sys
21:12:23.0921 2364  usbvideo - ok
21:12:24.0015 2364  [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave         C:\WINDOWS\System32\drivers\vga.sys
21:12:24.0031 2364  VgaSave - ok
21:12:24.0093 2364  [ 754292CE5848B3738281B4F3607EAEF4 ] viaagp          C:\WINDOWS\system32\DRIVERS\viaagp.sys
21:12:24.0125 2364  viaagp - ok
21:12:24.0140 2364  [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde          C:\WINDOWS\system32\DRIVERS\viaide.sys
21:12:24.0156 2364  ViaIde - ok
21:12:24.0218 2364  [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap         C:\WINDOWS\system32\drivers\VolSnap.sys
21:12:24.0250 2364  VolSnap - ok
21:12:24.0468 2364  [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS             C:\WINDOWS\System32\vssvc.exe
21:12:24.0656 2364  VSS - ok
21:12:24.0718 2364  [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
21:12:24.0750 2364  Wanarp - ok
21:12:24.0750 2364  WDICA - ok
21:12:24.0828 2364  [ 6768ACF64B18196494413695F0C3A00F ] wdmaud          C:\WINDOWS\system32\drivers\wdmaud.sys
21:12:24.0906 2364  wdmaud - ok
21:12:25.0000 2364  [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient       C:\WINDOWS\System32\webclnt.dll
21:12:25.0046 2364  WebClient - ok
21:12:25.0718 2364  [ 74CF3F2E4E40C4A2E18D39D6300A5C24 ] winachsf        C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
21:12:26.0312 2364  winachsf - ok
21:12:26.0515 2364  [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
21:12:26.0656 2364  winmgmt - ok
21:12:26.0687 2364  wltrysvc - ok
21:12:26.0750 2364  [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN        C:\WINDOWS\system32\MsPMSNSv.dll
21:12:26.0781 2364  WmdmPmSN - ok
21:12:26.0890 2364  [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv        C:\WINDOWS\system32\wbem\wmiapsrv.exe
21:12:27.0000 2364  WmiApSrv - ok
21:12:27.0625 2364  [ F74E3D9A7FA9556C3BBB14D4E5E63D3B ] WMPNetworkSvc   C:\Program Files\Windows Media Player\WMPNetwk.exe
21:12:28.0218 2364  WMPNetworkSvc - ok
21:12:28.0281 2364  [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC        C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
21:12:28.0296 2364  WSTCODEC - ok
21:12:28.0343 2364  [ 35321FB577CDC98CE3EB3A3EB9E4610A ] wuauserv        C:\WINDOWS\system32\wuauserv.dll
21:12:28.0390 2364  wuauserv - ok
21:12:28.0468 2364  [ 729F76CD53AF1685CA4C4C058519C58C ] WudfPf          C:\WINDOWS\system32\DRIVERS\WudfPf.sys
21:12:28.0531 2364  WudfPf - ok
21:12:28.0625 2364  [ A2AAFCC8A204736296D937C7C545B53F ] WudfRd          C:\WINDOWS\system32\DRIVERS\wudfrd.sys
21:12:28.0703 2364  WudfRd - ok
21:12:28.0750 2364  [ DB5BF5AAB72B1B99B5331231D09EBB26 ] WudfSvc         C:\WINDOWS\System32\WUDFSvc.dll
21:12:28.0812 2364  WudfSvc - ok
21:12:29.0203 2364  [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] WZCSVC          C:\WINDOWS\System32\wzcsvc.dll
21:12:29.0640 2364  WZCSVC - ok
21:12:29.0750 2364  [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov         C:\WINDOWS\System32\xmlprov.dll
21:12:29.0859 2364  xmlprov - ok
21:12:29.0890 2364  ================ Scan global ===============================
21:12:30.0000 2364  [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
21:12:30.0265 2364  [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
21:12:30.0687 2364  [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
21:12:30.0843 2364  [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe
21:12:30.0875 2364  [Global] - ok
21:12:30.0875 2364  ================ Scan MBR ==================================
21:12:30.0921 2364  [ 91722E6BC3A2B40FF00222DCA4A3DB3E ] \Device\Harddisk0\DR0
21:12:30.0984 2364  \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) - infected
21:12:30.0984 2364  \Device\Harddisk0\DR0 - detected Rootkit.Boot.Sinowal.b (0)
21:12:30.0984 2364  ================ Scan VBR ==================================
21:12:31.0015 2364  [ F20C9F5873F84B43EA9B9C64ADBF644C ] \Device\Harddisk0\DR0\Partition1
21:12:31.0015 2364  \Device\Harddisk0\DR0\Partition1 - ok
21:12:31.0031 2364  ============================================================
21:12:31.0031 2364  Scan finished
21:12:31.0031 2364  ============================================================
21:12:31.0062 1636  Detected object count: 1
21:12:31.0062 1636  Actual detected object count: 1
21:12:46.0984 1636  \Device\Harddisk0\DR0\# - copied to quarantine
21:12:46.0984 1636  \Device\Harddisk0\DR0 - copied to quarantine
21:12:47.0062 1636  \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) - will be cured on reboot
21:12:47.0234 1636  \Device\Harddisk0\DR0 - ok
21:12:47.0250 1636  \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) - User select action: Cure 
21:13:07.0968 2760  Deinitialize success