Code:
Alles auswählen Aufklappen ATTFilter
12:04:12.0468 3104 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
12:04:12.0937 3104 ============================================================
12:04:12.0937 3104 Current date / time: 2013/09/24 12:04:12.0937
12:04:12.0937 3104 SystemInfo:
12:04:12.0937 3104
12:04:12.0937 3104 OS Version: 5.1.2600 ServicePack: 3.0
12:04:12.0937 3104 Product type: Workstation
12:04:12.0937 3104 ComputerName: EHNERT-WF3HGVFE
12:04:12.0937 3104 UserName: Ehnert
12:04:12.0937 3104 Windows directory: C:\WINDOWS
12:04:12.0937 3104 System windows directory: C:\WINDOWS
12:04:12.0937 3104 Processor architecture: Intel x86
12:04:12.0937 3104 Number of processors: 1
12:04:12.0937 3104 Page size: 0x1000
12:04:12.0937 3104 Boot type: Normal boot
12:04:12.0937 3104 ============================================================
12:04:14.0500 3104 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
12:04:14.0531 3104 ============================================================
12:04:14.0531 3104 \Device\Harddisk0\DR0:
12:04:14.0531 3104 MBR partitions:
12:04:14.0531 3104 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x12A14BC1
12:04:14.0531 3104 ============================================================
12:04:14.0562 3104 C: <-> \Device\Harddisk0\DR0\Partition1
12:04:14.0562 3104 ============================================================
12:04:14.0562 3104 Initialize success
12:04:14.0562 3104 ============================================================
12:04:45.0984 3456 ============================================================
12:04:45.0984 3456 Scan started
12:04:45.0984 3456 Mode: Manual; SigCheck; TDLFS;
12:04:45.0984 3456 ============================================================
12:04:46.0828 3456 ================ Scan system memory ========================
12:04:46.0828 3456 System memory - ok
12:04:46.0828 3456 ================ Scan services =============================
12:04:46.0921 3456 Abiosdsk - ok
12:04:46.0937 3456 abp480n5 - ok
12:04:46.0984 3456 [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
12:04:52.0453 3456 ACPI - ok
12:04:52.0468 3456 [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
12:04:52.0734 3456 ACPIEC - ok
12:04:52.0734 3456 adpu160m - ok
12:04:52.0796 3456 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
12:04:53.0015 3456 aec - ok
12:04:53.0062 3456 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
12:04:53.0109 3456 AFD - ok
12:04:53.0125 3456 Aha154x - ok
12:04:53.0140 3456 aic78u2 - ok
12:04:53.0156 3456 aic78xx - ok
12:04:53.0203 3456 [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter C:\WINDOWS\system32\alrsvc.dll
12:04:53.0421 3456 Alerter - ok
12:04:53.0453 3456 [ 190CD73D4984F94D823F9444980513E5 ] ALG C:\WINDOWS\System32\alg.exe
12:04:53.0656 3456 ALG - ok
12:04:53.0671 3456 AliIde - ok
12:04:53.0718 3456 [ 3A0DAFAC778236559C14C7203FB550EB ] AmdK7 C:\WINDOWS\system32\DRIVERS\amdk7.sys
12:04:53.0937 3456 AmdK7 - ok
12:04:53.0937 3456 amsint - ok
12:04:53.0968 3456 AppMgmt - ok
12:04:53.0984 3456 asc - ok
12:04:54.0000 3456 asc3350p - ok
12:04:54.0015 3456 asc3550 - ok
12:04:54.0062 3456 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
12:04:54.0281 3456 AsyncMac - ok
12:04:54.0312 3456 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
12:04:54.0531 3456 atapi - ok
12:04:54.0531 3456 Atdisk - ok
12:04:54.0609 3456 [ 8948961A4BD498A29E5EEEFE548E380F ] ati2mtag C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
12:04:54.0843 3456 ati2mtag - ok
12:04:54.0953 3456 ATICDSDr - ok
12:04:55.0000 3456 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
12:04:55.0218 3456 Atmarpc - ok
12:04:55.0281 3456 [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
12:04:55.0468 3456 AudioSrv - ok
12:04:55.0500 3456 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
12:04:55.0718 3456 audstub - ok
12:04:55.0765 3456 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
12:04:56.0031 3456 Beep - ok
12:04:56.0078 3456 [ D6F603772A789BB3228F310D650B8BD1 ] BITS C:\WINDOWS\system32\qmgr.dll
12:04:56.0343 3456 BITS - ok
12:04:56.0390 3456 [ B71549F23736ADF83A571061C47777FD ] Browser C:\WINDOWS\System32\browser.dll
12:04:56.0484 3456 Browser - ok
12:04:56.0531 3456 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
12:04:56.0765 3456 cbidf2k - ok
12:04:56.0781 3456 cd20xrnt - ok
12:04:56.0828 3456 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
12:04:57.0093 3456 Cdaudio - ok
12:04:57.0125 3456 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
12:04:57.0343 3456 Cdfs - ok
12:04:57.0375 3456 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
12:04:57.0578 3456 Cdrom - ok
12:04:57.0593 3456 Changer - ok
12:04:57.0640 3456 [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] CiSvc C:\WINDOWS\system32\cisvc.exe
12:04:57.0843 3456 CiSvc - ok
12:04:57.0843 3456 [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
12:04:58.0062 3456 ClipSrv - ok
12:04:58.0078 3456 CmdIde - ok
12:04:58.0109 3456 COMSysApp - ok
12:04:58.0140 3456 Cpqarray - ok
12:04:58.0187 3456 [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
12:04:58.0390 3456 CryptSvc - ok
12:04:58.0390 3456 dac2w2k - ok
12:04:58.0406 3456 dac960nt - ok
12:04:58.0484 3456 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
12:04:58.0703 3456 DcomLaunch - ok
12:04:58.0750 3456 [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
12:04:58.0968 3456 Dhcp - ok
12:04:59.0015 3456 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
12:04:59.0218 3456 Disk - ok
12:04:59.0234 3456 dmadmin - ok
12:04:59.0312 3456 [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
12:04:59.0640 3456 dmboot - ok
12:04:59.0703 3456 [ 53720AB12B48719D00E327DA470A619A ] dmio C:\WINDOWS\system32\drivers\dmio.sys
12:04:59.0937 3456 dmio - ok
12:04:59.0984 3456 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
12:05:00.0234 3456 dmload - ok
12:05:00.0281 3456 [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver C:\WINDOWS\System32\dmserver.dll
12:05:00.0484 3456 dmserver - ok
12:05:00.0515 3456 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
12:05:00.0718 3456 DMusic - ok
12:05:00.0750 3456 [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
12:05:00.0859 3456 Dnscache - ok
12:05:00.0906 3456 [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
12:05:01.0140 3456 Dot3svc - ok
12:05:01.0156 3456 dpti2o - ok
12:05:01.0203 3456 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
12:05:01.0406 3456 drmkaud - ok
12:05:01.0453 3456 [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost C:\WINDOWS\System32\eapsvc.dll
12:05:01.0687 3456 EapHost - ok
12:05:01.0734 3456 [ 877C18558D70587AA7823A1A308AC96B ] ERSvc C:\WINDOWS\System32\ersvc.dll
12:05:01.0953 3456 ERSvc - ok
12:05:02.0000 3456 [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog C:\WINDOWS\system32\services.exe
12:05:02.0093 3456 Eventlog - ok
12:05:02.0156 3456 [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem C:\WINDOWS\System32\es.dll
12:05:02.0234 3456 EventSystem - ok
12:05:02.0281 3456 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
12:05:02.0515 3456 Fastfat - ok
12:05:02.0562 3456 [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
12:05:02.0625 3456 FastUserSwitchingCompatibility - ok
12:05:02.0640 3456 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys
12:05:02.0859 3456 Fdc - ok
12:05:02.0906 3456 [ E9648254056BCE81A85380C0C3647DC4 ] FETNDIS C:\WINDOWS\system32\DRIVERS\fetnd5.sys
12:05:03.0156 3456 FETNDIS - ok
12:05:03.0203 3456 [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
12:05:03.0390 3456 Fips - ok
12:05:03.0437 3456 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys
12:05:03.0671 3456 Flpydisk - ok
12:05:03.0718 3456 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
12:05:03.0890 3456 FltMgr - ok
12:05:03.0906 3456 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
12:05:04.0171 3456 Fs_Rec - ok
12:05:04.0187 3456 [ 8F1955CE42E1484714B542F341647778 ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
12:05:04.0468 3456 Ftdisk - ok
12:05:04.0515 3456 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
12:05:04.0671 3456 Gpc - ok
12:05:04.0718 3456 [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
12:05:04.0921 3456 helpsvc - ok
12:05:04.0937 3456 HidServ - ok
12:05:04.0984 3456 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
12:05:05.0156 3456 HidUsb - ok
12:05:05.0218 3456 [ ED29F14101523A6E0E808107405D452C ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
12:05:05.0453 3456 hkmsvc - ok
12:05:05.0453 3456 hpn - ok
12:05:05.0515 3456 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
12:05:05.0562 3456 HTTP - ok
12:05:05.0609 3456 [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
12:05:05.0812 3456 HTTPFilter - ok
12:05:05.0828 3456 i2omgmt - ok
12:05:05.0843 3456 i2omp - ok
12:05:05.0875 3456 [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
12:05:06.0093 3456 i8042prt - ok
12:05:06.0125 3456 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
12:05:06.0328 3456 Imapi - ok
12:05:06.0375 3456 [ D4B413AA210C21E46AEDD2BA5B68D38E ] ImapiService C:\WINDOWS\system32\imapi.exe
12:05:06.0578 3456 ImapiService - ok
12:05:06.0593 3456 ini910u - ok
12:05:06.0625 3456 IntelIde - ok
12:05:06.0671 3456 [ 3BB22519A194418D5FEC05D800A19AD0 ] ip6fw C:\WINDOWS\system32\drivers\ip6fw.sys
12:05:06.0859 3456 ip6fw - ok
12:05:06.0906 3456 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
12:05:07.0187 3456 IpFilterDriver - ok
12:05:07.0218 3456 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
12:05:07.0390 3456 IpInIp - ok
12:05:07.0437 3456 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
12:05:07.0625 3456 IpNat - ok
12:05:07.0656 3456 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
12:05:07.0859 3456 IPSec - ok
12:05:07.0890 3456 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
12:05:08.0171 3456 IRENUM - ok
12:05:08.0218 3456 [ 6DFB88F64135C525433E87648BDA30DE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
12:05:08.0500 3456 isapnp - ok
12:05:08.0578 3456 [ 74E30A41CDCF331C74BC4D97BE40CC5B ] JavaQuickStarterService C:\Programme\Java\jre6\bin\jqs.exe
12:05:08.0593 3456 JavaQuickStarterService - ok
12:05:08.0625 3456 [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
12:05:08.0812 3456 Kbdclass - ok
12:05:08.0843 3456 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
12:05:09.0046 3456 kmixer - ok
12:05:09.0109 3456 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
12:05:09.0234 3456 KSecDD - ok
12:05:09.0265 3456 [ 2BBDCB79900990F0716DFCB714E72DE7 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
12:05:09.0359 3456 lanmanserver - ok
12:05:09.0406 3456 [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
12:05:09.0484 3456 lanmanworkstation - ok
12:05:09.0484 3456 lbrtfdc - ok
12:05:09.0546 3456 [ 027D03D9D8AB95194A115A999E960AC0 ] LexBceS C:\WINDOWS\system32\LEXBCES.EXE
12:05:09.0656 3456 LexBceS - ok
12:05:09.0703 3456 [ 636714B7D43C8D0C80449123FD266920 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
12:05:09.0906 3456 LmHosts - ok
12:05:09.0937 3456 [ 4470E3C1E0C3378E4CAB137893C12C3A ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
12:05:10.0109 3456 MBAMProtector - ok
12:05:10.0187 3456 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
12:05:10.0234 3456 MBAMScheduler - ok
12:05:10.0296 3456 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
12:05:10.0359 3456 MBAMService - ok
12:05:10.0406 3456 [ B7550A7107281D170CE85524B1488C98 ] Messenger C:\WINDOWS\System32\msgsvc.dll
12:05:10.0640 3456 Messenger - ok
12:05:10.0687 3456 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
12:05:10.0937 3456 mnmdd - ok
12:05:10.0984 3456 [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc C:\WINDOWS\System32\mnmsrvc.exe
12:05:11.0203 3456 mnmsrvc - ok
12:05:11.0234 3456 [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
12:05:11.0437 3456 Modem - ok
12:05:11.0468 3456 [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
12:05:11.0656 3456 Mouclass - ok
12:05:11.0703 3456 [ 66A6F73C74E1791464160A7065CE711A ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
12:05:11.0953 3456 mouhid - ok
12:05:11.0984 3456 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
12:05:12.0171 3456 MountMgr - ok
12:05:12.0187 3456 mraid35x - ok
12:05:12.0234 3456 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
12:05:12.0406 3456 MRxDAV - ok
12:05:12.0468 3456 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
12:05:12.0593 3456 MRxSmb - ok
12:05:12.0640 3456 [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC C:\WINDOWS\System32\msdtc.exe
12:05:12.0812 3456 MSDTC - ok
12:05:12.0843 3456 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
12:05:13.0078 3456 Msfs - ok
12:05:13.0078 3456 MSIServer - ok
12:05:13.0125 3456 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
12:05:13.0312 3456 MSKSSRV - ok
12:05:13.0328 3456 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
12:05:13.0515 3456 MSPCLOCK - ok
12:05:13.0531 3456 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
12:05:13.0718 3456 MSPQM - ok
12:05:13.0750 3456 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
12:05:13.0921 3456 mssmbios - ok
12:05:13.0968 3456 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
12:05:14.0046 3456 Mup - ok
12:05:14.0125 3456 [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent C:\WINDOWS\System32\qagentrt.dll
12:05:14.0328 3456 napagent - ok
12:05:14.0359 3456 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
12:05:14.0593 3456 NDIS - ok
12:05:14.0656 3456 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
12:05:14.0703 3456 NdisTapi - ok
12:05:14.0765 3456 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
12:05:14.0968 3456 Ndisuio - ok
12:05:14.0984 3456 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
12:05:15.0171 3456 NdisWan - ok
12:05:15.0218 3456 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
12:05:15.0296 3456 NDProxy - ok
12:05:15.0312 3456 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
12:05:15.0500 3456 NetBIOS - ok
12:05:15.0546 3456 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
12:05:15.0734 3456 NetBT - ok
12:05:15.0781 3456 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE C:\WINDOWS\system32\netdde.exe
12:05:15.0984 3456 NetDDE - ok
12:05:16.0015 3456 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
12:05:16.0203 3456 NetDDEdsdm - ok
12:05:16.0250 3456 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon C:\WINDOWS\System32\lsass.exe
12:05:16.0437 3456 Netlogon - ok
12:05:16.0484 3456 [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman C:\WINDOWS\System32\netman.dll
12:05:16.0671 3456 Netman - ok
12:05:16.0718 3456 [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla C:\WINDOWS\System32\mswsock.dll
12:05:16.0812 3456 Nla - ok
12:05:16.0843 3456 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
12:05:17.0015 3456 Npfs - ok
12:05:17.0078 3456 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
12:05:17.0312 3456 Ntfs - ok
12:05:17.0343 3456 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp C:\WINDOWS\System32\lsass.exe
12:05:17.0515 3456 NtLmSsp - ok
12:05:17.0593 3456 [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
12:05:17.0890 3456 NtmsSvc - ok
12:05:17.0921 3456 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
12:05:18.0187 3456 Null - ok
12:05:18.0218 3456 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
12:05:18.0500 3456 NwlnkFlt - ok
12:05:18.0515 3456 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
12:05:18.0812 3456 NwlnkFwd - ok
12:05:18.0843 3456 [ F84785660305B9B903FB3BCA8BA29837 ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
12:05:19.0015 3456 Parport - ok
12:05:19.0046 3456 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
12:05:19.0250 3456 PartMgr - ok
12:05:19.0296 3456 [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
12:05:19.0562 3456 ParVdm - ok
12:05:19.0578 3456 [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
12:05:19.0750 3456 PCI - ok
12:05:19.0781 3456 PCIDump - ok
12:05:19.0812 3456 PCIIde - ok
12:05:19.0859 3456 [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
12:05:20.0046 3456 Pcmcia - ok
12:05:20.0062 3456 PDCOMP - ok
12:05:20.0078 3456 PDFRAME - ok
12:05:20.0093 3456 PDRELI - ok
12:05:20.0109 3456 PDRFRAME - ok
12:05:20.0125 3456 perc2 - ok
12:05:20.0140 3456 perc2hib - ok
12:05:20.0203 3456 [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay C:\WINDOWS\system32\services.exe
12:05:20.0296 3456 PlugPlay - ok
12:05:20.0312 3456 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
12:05:20.0484 3456 PolicyAgent - ok
12:05:20.0531 3456 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
12:05:20.0718 3456 PptpMiniport - ok
12:05:20.0765 3456 [ 2CB55427C58679F49AD600FCCBA76360 ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys
12:05:20.0953 3456 Processor - ok
12:05:20.0984 3456 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
12:05:21.0140 3456 ProtectedStorage - ok
12:05:21.0156 3456 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
12:05:21.0343 3456 PSched - ok
12:05:21.0390 3456 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
12:05:21.0640 3456 Ptilink - ok
12:05:21.0656 3456 ql1080 - ok
12:05:21.0671 3456 Ql10wnt - ok
12:05:21.0687 3456 ql12160 - ok
12:05:21.0703 3456 ql1240 - ok
12:05:21.0734 3456 ql1280 - ok
12:05:21.0765 3456 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
12:05:22.0031 3456 RasAcd - ok
12:05:22.0125 3456 [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto C:\WINDOWS\System32\rasauto.dll
12:05:22.0328 3456 RasAuto - ok
12:05:22.0343 3456 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
12:05:22.0546 3456 Rasl2tp - ok
12:05:22.0625 3456 [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan C:\WINDOWS\System32\rasmans.dll
12:05:22.0812 3456 RasMan - ok
12:05:22.0843 3456 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
12:05:23.0046 3456 RasPppoe - ok
12:05:23.0062 3456 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
12:05:23.0328 3456 Raspti - ok
12:05:23.0390 3456 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
12:05:23.0578 3456 Rdbss - ok
12:05:23.0609 3456 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
12:05:23.0890 3456 RDPCDD - ok
12:05:23.0984 3456 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
12:05:24.0078 3456 RDPWD - ok
12:05:24.0156 3456 [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
12:05:24.0390 3456 RDSessMgr - ok
12:05:24.0453 3456 [ ED761D453856F795A7FE056E42C36365 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
12:05:24.0640 3456 redbook - ok
12:05:24.0718 3456 [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator C:\WINDOWS\System32\locator.exe
12:05:24.0921 3456 RpcLocator - ok
12:05:25.0062 3456 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs C:\WINDOWS\system32\rpcss.dll
12:05:25.0203 3456 RpcSs - ok
12:05:25.0265 3456 [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP C:\WINDOWS\System32\rsvp.exe
12:05:25.0562 3456 RSVP - ok
12:05:25.0593 3456 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs C:\WINDOWS\system32\lsass.exe
12:05:25.0750 3456 SamSs - ok
12:05:25.0812 3456 [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
12:05:26.0031 3456 SCardSvr - ok
12:05:26.0125 3456 [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule C:\WINDOWS\system32\schedsvc.dll
12:05:26.0375 3456 Schedule - ok
12:05:26.0421 3456 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
12:05:26.0625 3456 Secdrv - ok
12:05:26.0687 3456 [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon C:\WINDOWS\System32\seclogon.dll
12:05:26.0890 3456 seclogon - ok
12:05:26.0921 3456 [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS C:\WINDOWS\system32\sens.dll
12:05:27.0109 3456 SENS - ok
12:05:27.0140 3456 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
12:05:27.0328 3456 serenum - ok
12:05:27.0375 3456 [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
12:05:27.0546 3456 Serial - ok
12:05:27.0578 3456 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
12:05:27.0750 3456 Sfloppy - ok
12:05:27.0781 3456 [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
12:05:27.0812 3456 ShellHWDetection - ok
12:05:27.0828 3456 Simbad - ok
12:05:27.0843 3456 Sparrow - ok
12:05:27.0906 3456 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
12:05:28.0093 3456 splitter - ok
12:05:28.0140 3456 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
12:05:28.0203 3456 Spooler - ok
12:05:28.0250 3456 [ 50FA898F8C032796D3B1B9951BB5A90F ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
12:05:28.0437 3456 sr - ok
12:05:28.0484 3456 [ FE77A85495065F3AD59C5C65B6C54182 ] srservice C:\WINDOWS\system32\srsvc.dll
12:05:28.0671 3456 srservice - ok
12:05:28.0734 3456 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
12:05:28.0796 3456 Srv - ok
12:05:28.0843 3456 [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
12:05:29.0015 3456 SSDPSRV - ok
12:05:29.0078 3456 [ BC2C5985611C5356B24AEB370953DED9 ] stisvc C:\WINDOWS\system32\wiaservc.dll
12:05:29.0296 3456 stisvc - ok
12:05:29.0343 3456 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
12:05:29.0515 3456 swenum - ok
12:05:29.0546 3456 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
12:05:29.0734 3456 swmidi - ok
12:05:29.0750 3456 SwPrv - ok
12:05:29.0781 3456 symc810 - ok
12:05:29.0796 3456 symc8xx - ok
12:05:29.0828 3456 sym_hi - ok
12:05:29.0843 3456 sym_u3 - ok
12:05:29.0890 3456 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
12:05:30.0046 3456 sysaudio - ok
12:05:30.0093 3456 [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
12:05:30.0281 3456 SysmonLog - ok
12:05:30.0343 3456 [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
12:05:30.0546 3456 TapiSrv - ok
12:05:30.0593 3456 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
12:05:30.0718 3456 Tcpip - ok
12:05:30.0765 3456 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
12:05:30.0953 3456 TDPIPE - ok
12:05:31.0000 3456 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
12:05:31.0203 3456 TDTCP - ok
12:05:31.0234 3456 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
12:05:31.0406 3456 TermDD - ok
12:05:31.0468 3456 [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService C:\WINDOWS\System32\termsrv.dll
12:05:31.0671 3456 TermService - ok
12:05:31.0703 3456 [ 2DB7D303C36DDD055215052F118E8E75 ] Themes C:\WINDOWS\System32\shsvcs.dll
12:05:31.0734 3456 Themes - ok
12:05:31.0750 3456 TosIde - ok
12:05:31.0781 3456 [ 626504572B175867F30F3215C04B3E2F ] TrkWks C:\WINDOWS\system32\trkwks.dll
12:05:31.0953 3456 TrkWks - ok
12:05:32.0000 3456 [ D85938F272D1BCF3DB3A31FC0A048928 ] uagp35 C:\WINDOWS\system32\DRIVERS\uagp35.sys
12:05:32.0187 3456 uagp35 - ok
12:05:32.0218 3456 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
12:05:32.0421 3456 Udfs - ok
12:05:32.0437 3456 ultra - ok
12:05:32.0500 3456 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
12:05:32.0718 3456 Update - ok
12:05:32.0765 3456 [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost C:\WINDOWS\System32\upnphost.dll
12:05:32.0953 3456 upnphost - ok
12:05:32.0984 3456 [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS C:\WINDOWS\System32\ups.exe
12:05:33.0187 3456 UPS - ok
12:05:33.0218 3456 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
12:05:33.0406 3456 usbehci - ok
12:05:33.0453 3456 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
12:05:33.0640 3456 usbhub - ok
12:05:33.0687 3456 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
12:05:33.0859 3456 usbprint - ok
12:05:33.0921 3456 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
12:05:34.0093 3456 usbscan - ok
12:05:34.0125 3456 [ A32426D9B14A089EAA1D922E0C5801A9 ] usbstor C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
12:05:34.0312 3456 usbstor - ok
12:05:34.0343 3456 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
12:05:34.0531 3456 usbuhci - ok
12:05:34.0562 3456 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
12:05:34.0750 3456 VgaSave - ok
12:05:34.0796 3456 [ 46CDDC78B2391D3291322D86A861BEB9 ] viagfx C:\WINDOWS\system32\DRIVERS\vtmini.sys
12:05:34.0859 3456 viagfx - ok
12:05:34.0906 3456 [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
12:05:35.0078 3456 ViaIde - ok
12:05:35.0109 3456 [ ECBD827B7BA72FD13C036E83A736F134 ] VIAudio C:\WINDOWS\system32\drivers\vinyl97.sys
12:05:35.0156 3456 VIAudio ( UnsignedFile.Multi.Generic ) - warning
12:05:35.0156 3456 VIAudio - detected UnsignedFile.Multi.Generic (1)
12:05:35.0203 3456 [ A5A712F4E880874A477AF790B5186E1D ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
12:05:35.0375 3456 VolSnap - ok
12:05:35.0437 3456 [ 68F106273BE29E7B7EF8266977268E78 ] VSS C:\WINDOWS\System32\vssvc.exe
12:05:35.0625 3456 VSS - ok
12:05:35.0656 3456 [ 7B353059E665F8B7AD2BBEAEF597CF45 ] W32Time C:\WINDOWS\system32\w32time.dll
12:05:35.0843 3456 W32Time - ok
12:05:35.0890 3456 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
12:05:36.0062 3456 Wanarp - ok
12:05:36.0078 3456 WDICA - ok
12:05:36.0109 3456 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
12:05:36.0296 3456 wdmaud - ok
12:05:36.0343 3456 [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient C:\WINDOWS\System32\webclnt.dll
12:05:36.0515 3456 WebClient - ok
12:05:36.0593 3456 [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
12:05:36.0781 3456 winmgmt - ok
12:05:36.0875 3456 [ 6E18978B749F0696A774DE3F2CB142DD ] WmdmPmSN C:\WINDOWS\system32\mspmsnsv.dll
12:05:37.0031 3456 WmdmPmSN - ok
12:05:37.0078 3456 [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv C:\WINDOWS\System32\wbem\wmiapsrv.exe
12:05:37.0265 3456 WmiApSrv - ok
12:05:37.0312 3456 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
12:05:37.0593 3456 WS2IFSL - ok
12:05:37.0656 3456 [ 300B3E84FAF1A5C1F791C159BA28035D ] wscsvc C:\WINDOWS\system32\wscsvc.dll
12:05:37.0828 3456 wscsvc - ok
12:05:37.0859 3456 [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
12:05:38.0031 3456 wuauserv - ok
12:05:38.0109 3456 [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
12:05:38.0328 3456 WZCSVC - ok
12:05:38.0390 3456 [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
12:05:38.0578 3456 xmlprov - ok
12:05:38.0625 3456 *etadpug - ok
12:05:38.0625 3456 ================ Scan global ===============================
12:05:38.0656 3456 [ 2C60091CA5F67C3032EAB3B30390C27F ] C:\WINDOWS\system32\basesrv.dll
12:05:38.0703 3456 [ E62178BC21EAC63A3B9A2DBD46C1B505 ] C:\WINDOWS\system32\winsrv.dll
12:05:38.0750 3456 [ E62178BC21EAC63A3B9A2DBD46C1B505 ] C:\WINDOWS\system32\winsrv.dll
12:05:38.0781 3456 [ A3EDBE9053889FB24AB22492472B39DC ] C:\WINDOWS\system32\services.exe
12:05:38.0796 3456 [Global] - ok
12:05:38.0796 3456 ================ Scan MBR ==================================
12:05:38.0812 3456 [ 72B8CE41AF0DE751C946802B3ED844B4 ] \Device\Harddisk0\DR0
12:05:39.0046 3456 \Device\Harddisk0\DR0 - ok
12:05:39.0046 3456 ================ Scan VBR ==================================
12:05:39.0062 3456 [ 3C80A343C017FFA11FB7D6859846C232 ] \Device\Harddisk0\DR0\Partition1
12:05:39.0062 3456 \Device\Harddisk0\DR0\Partition1 - ok
12:05:39.0062 3456 ============================================================
12:05:39.0062 3456 Scan finished
12:05:39.0062 3456 ============================================================
12:05:39.0187 3440 Detected object count: 1
12:05:39.0187 3440 Actual detected object count: 1
12:06:04.0515 3440 VIAudio ( UnsignedFile.Multi.Generic ) - skipped by user
12:06:04.0515 3440 VIAudio ( UnsignedFile.Multi.Generic ) - User select action: Skip