TDSSKILLER wont open on windows vista [Solved]
Started by
rebekah_89
, Dec 29 2011 12:28 AM
-
This topic is locked
#31
Posted 03 January 2012 - 12:51 PM
Essexboy
-
- Retired Staff
-
- 69,964 posts
GeekU Moderator
#32
Posted 03 January 2012 - 02:00 PM
rebekah_89
- Topic Starter
-
- Member
-
- 19 posts
Member
okay it worked make the gparted disk on a different computer, so now i'm going to make the windows recovery disk on the different computer.
#33
Posted 03 January 2012 - 02:05 PM
Essexboy
-
- Retired Staff
-
- 69,964 posts
GeekU Moderator
Grand 
Do you want me to repost the instructions ?
Do you want me to repost the instructions ?
#34
Posted 03 January 2012 - 02:11 PM
rebekah_89
- Topic Starter
-
- Member
-
- 19 posts
Member
no it's okay I'll just go back to the page. 
#35
Posted 03 January 2012 - 03:54 PM
rebekah_89
- Topic Starter
-
- Member
-
- 19 posts
Member
I ran MBRCheck.exe here are my results. I tried running Combofix but I cannot turn off my AntiVirus and AntiSpyware applications no matter what i do. I was able to run TDSSKILLER and nothing was found. And I am able to use Google again! So Thank you very very much for all you help!! I appreciate all that you have done! 
MBRCheck, version 1.2.3
© 2010, AD
Command-line:
Windows Version: Windows Vista Home Premium Edition
Windows Information: Service Pack 1 (build 6001), 64-bit
Base Board Manufacturer: Dell Inc.
BIOS Manufacturer: Dell Inc.
System Manufacturer: Dell Inc.
System Product Name: Inspiron 518
Logical Drives Mask: 0x000001fc
Kernel Drivers (total 152):
0x02A0F000 \SystemRoot\system32\ntoskrnl.exe
0x02F27000 \SystemRoot\system32\hal.dll
0x00600000 \SystemRoot\system32\kdcom.dll
0x0060A000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
0x00637000 \SystemRoot\system32\PSHED.dll
0x0064B000 \SystemRoot\system32\CLFS.SYS
0x006A8000 \SystemRoot\system32\CI.dll
0x0080E000 \SystemRoot\system32\drivers\Wdf01000.sys
0x008E8000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x008F6000 \SystemRoot\system32\drivers\acpi.sys
0x0094C000 \SystemRoot\system32\drivers\WMILIB.SYS
0x00955000 \SystemRoot\system32\drivers\msisadrv.sys
0x0095F000 \SystemRoot\system32\drivers\pci.sys
0x0098F000 \SystemRoot\System32\drivers\partmgr.sys
0x009A4000 \SystemRoot\system32\drivers\volmgr.sys
0x0075A000 \SystemRoot\System32\drivers\volmgrx.sys
0x009B8000 \SystemRoot\system32\drivers\pciide.sys
0x009BF000 \SystemRoot\system32\drivers\PCIIDEX.SYS
0x009CF000 \SystemRoot\System32\drivers\mountmgr.sys
0x009E2000 \SystemRoot\system32\drivers\atapi.sys
0x007C0000 \SystemRoot\system32\drivers\ataport.SYS
0x00A0F000 \SystemRoot\system32\drivers\fltmgr.sys
0x00A55000 \SystemRoot\system32\drivers\fileinfo.sys
0x00A69000 \SystemRoot\system32\drivers\mfehidk.sys
0x00B05000 \SystemRoot\System32\Drivers\PxHlpa64.sys
0x00B11000 \SystemRoot\System32\Drivers\ksecdd.sys
0x00C0D000 \SystemRoot\system32\drivers\ndis.sys
0x00B98000 \SystemRoot\system32\drivers\msrpc.sys
0x00E0E000 \SystemRoot\system32\drivers\NETIO.SYS
0x00E66000 \SystemRoot\System32\Drivers\Ntfs.sys
0x0100D000 \SystemRoot\system32\drivers\volsnap.sys
0x01051000 \SystemRoot\System32\Drivers\Tpkd.sys
0x01074000 \SystemRoot\System32\Drivers\spldr.sys
0x0107C000 \SystemRoot\System32\Drivers\mup.sys
0x0108E000 \SystemRoot\System32\drivers\ecache.sys
0x010BA000 \SystemRoot\system32\drivers\disk.sys
0x010CE000 \SystemRoot\system32\drivers\CLASSPNP.SYS
0x010FA000 \SystemRoot\system32\drivers\crcdisk.sys
0x01126000 \SystemRoot\system32\DRIVERS\tunnel.sys
0x01133000 \SystemRoot\system32\DRIVERS\tunmp.sys
0x0113C000 \SystemRoot\system32\DRIVERS\intelppm.sys
0x02008000 \SystemRoot\system32\DRIVERS\igdkmd64.sys
0x02A0B000 \SystemRoot\System32\drivers\dxgkrnl.sys
0x02AEA000 \SystemRoot\System32\drivers\watchdog.sys
0x02AF9000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0x02B05000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0x02B4B000 \SystemRoot\system32\DRIVERS\usbehci.sys
0x02B5C000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x02B6F000 \SystemRoot\system32\DRIVERS\Rtlh64.sys
0x0278C000 \SystemRoot\system32\DRIVERS\CAXHWBS2.sys
0x02B9C000 \SystemRoot\system32\DRIVERS\ks.sys
0x0280B000 \SystemRoot\system32\DRIVERS\CAX_DPV.sys
0x02E0F000 \SystemRoot\system32\DRIVERS\CAX_CNXT.sys
0x02EDA000 \SystemRoot\system32\drivers\modem.sys
0x02EE9000 \SystemRoot\system32\DRIVERS\ohci1394.sys
0x02EFB000 \SystemRoot\system32\DRIVERS\1394BUS.SYS
0x02F0B000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x02F27000 \SystemRoot\system32\hal.dll
0x02F34000 \SystemRoot\system32\DRIVERS\msiscsi.sys
0x02F6C000 \SystemRoot\system32\DRIVERS\storport.sys
0x02FC9000 \SystemRoot\system32\DRIVERS\TDI.SYS
0x02FD6000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x02E00000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x0297F000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x029B0000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x029C0000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x029DE000 \SystemRoot\system32\DRIVERS\rassstp.sys
0x02BD0000 \SystemRoot\system32\DRIVERS\termdd.sys
0x02BE2000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x02BF0000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x02E0C000 \SystemRoot\system32\DRIVERS\swenum.sys
0x02800000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x0114F000 \SystemRoot\system32\DRIVERS\umbus.sys
0x0115F000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x011A6000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x04202000 \SystemRoot\system32\drivers\RTKVHD64.sys
0x0436A000 \SystemRoot\system32\drivers\portcls.sys
0x043A5000 \SystemRoot\system32\drivers\drmk.sys
0x043C8000 \SystemRoot\system32\drivers\ksthunk.sys
0x043CE000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0x043D8000 \SystemRoot\System32\Drivers\Null.SYS
0x043EB000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0x011BA000 \SystemRoot\System32\drivers\vga.sys
0x011C8000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x043F3000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0x043E1000 \SystemRoot\system32\drivers\rdpencdd.sys
0x02A00000 \SystemRoot\System32\Drivers\Msfs.SYS
0x011ED000 \SystemRoot\System32\Drivers\Npfs.SYS
0x029F6000 \SystemRoot\System32\DRIVERS\rasacd.sys
0x04409000 \SystemRoot\System32\drivers\tcpip.sys
0x0457D000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x045A9000 \SystemRoot\system32\drivers\mfewfpk.sys
0x00DD0000 \SystemRoot\system32\DRIVERS\tdx.sys
0x007E4000 \SystemRoot\system32\DRIVERS\smb.sys
0x04603000 \SystemRoot\System32\DRIVERS\netbt.sys
0x04647000 \SystemRoot\system32\drivers\afd.sys
0x046B3000 \SystemRoot\system32\DRIVERS\pacer.sys
0x046D1000 \SystemRoot\system32\DRIVERS\mfenlfk.sys
0x046E2000 \SystemRoot\system32\DRIVERS\netbios.sys
0x046F1000 \SystemRoot\system32\DRIVERS\wanarp.sys
0x0470C000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x0475A000 \SystemRoot\system32\drivers\nsiproxy.sys
0x04766000 \SystemRoot\System32\Drivers\dfsc.sys
0x04783000 \SystemRoot\system32\drivers\mfeavfk.sys
0x04801000 \SystemRoot\system32\drivers\mfefirek.sys
0x04875000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0x0488A000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x0488C000 \SystemRoot\System32\Drivers\crashdmp.sys
0x0489A000 \SystemRoot\System32\Drivers\dump_dumpata.sys
0x048A6000 \SystemRoot\System32\Drivers\dump_atapi.sys
0x048AE000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0x048CA000 \SystemRoot\system32\drivers\LVUSBS64.sys
0x048D5000 \SystemRoot\system32\DRIVERS\usbscan.sys
0x048E5000 \SystemRoot\system32\DRIVERS\usbprint.sys
0x048F0000 \SystemRoot\system32\DRIVERS\dot4usb.sys
0x04900000 \SystemRoot\system32\DRIVERS\Dot4.sys
0x04928000 \SystemRoot\system32\DRIVERS\Dot4Prt.sys
0x04932000 \SystemRoot\system32\DRIVERS\hidusb.sys
0x0493B000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0x0494D000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0x04957000 \SystemRoot\system32\DRIVERS\mouhid.sys
0x00040000 \SystemRoot\System32\win32k.sys
0x04962000 \SystemRoot\System32\drivers\Dxapi.sys
0x0496E000 \SystemRoot\system32\DRIVERS\monitor.sys
0x004A0000 \SystemRoot\System32\TSDDD.dll
0x006A0000 \SystemRoot\System32\cdd.dll
0x008C0000 \SystemRoot\System32\ATMFD.DLL
0x04981000 \SystemRoot\system32\drivers\luafv.sys
0x15C0F000 \SystemRoot\system32\drivers\spsys.sys
0x15CA9000 \SystemRoot\system32\DRIVERS\lltdio.sys
0x15CBD000 \SystemRoot\system32\DRIVERS\rspndr.sys
0x15CD5000 \SystemRoot\system32\drivers\HTTP.sys
0x15D74000 \SystemRoot\System32\DRIVERS\srvnet.sys
0x15D9D000 \SystemRoot\system32\DRIVERS\bowser.sys
0x15DBB000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0x049A3000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0x047B9000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0x1600F000 \SystemRoot\System32\DRIVERS\srv2.sys
0x16041000 \SystemRoot\System32\DRIVERS\srv.sys
0x160D8000 \SystemRoot\system32\DRIVERS\mdmxsdk.sys
0x160DD000 \SystemRoot\system32\drivers\peauth.sys
0x16193000 \SystemRoot\System32\Drivers\secdrv.SYS
0x1619E000 \SystemRoot\System32\drivers\tcpipreg.sys
0x161AD000 \SystemRoot\system32\DRIVERS\xaudio64.sys
0x161B5000 \SystemRoot\system32\DRIVERS\WUDFRd.sys
0x161D5000 \SystemRoot\system32\DRIVERS\WUDFPf.sys
0x16E03000 \SystemRoot\System32\Drivers\fastfat.SYS
0x16E38000 \SystemRoot\system32\drivers\mfeapfk.sys
0x16E5E000 \SystemRoot\system32\drivers\cfwids.sys
0x16E6D000 \SystemRoot\system32\DRIVERS\LVPr2M64.sys
0x16E77000 \SystemRoot\system32\DRIVERS\cdfs.sys
0x77C20000 \Windows\System32\ntdll.dll
Processes (total 90):
0 System Idle Process
4 System
572 C:\Windows\System32\smss.exe
648 csrss.exe
692 C:\Windows\System32\wininit.exe
704 csrss.exe
752 C:\Windows\System32\winlogon.exe
776 C:\Windows\System32\services.exe
792 C:\Windows\System32\lsass.exe
800 C:\Windows\System32\lsm.exe
952 C:\Windows\System32\svchost.exe
992 C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
332 C:\Windows\System32\svchost.exe
460 C:\Windows\System32\svchost.exe
620 C:\Windows\System32\svchost.exe
656 C:\Windows\System32\svchost.exe
1064 C:\Windows\System32\audiodg.exe
1088 C:\Windows\System32\svchost.exe
1112 C:\Windows\System32\SLsvc.exe
1160 C:\Windows\System32\svchost.exe
1260 C:\Program Files\Dell\DellDock\DockLogin.exe
1340 C:\Windows\System32\svchost.exe
1524 C:\Windows\System32\spoolsv.exe
1552 C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
1732 C:\Windows\System32\dwm.exe
1740 C:\Windows\System32\taskeng.exe
1792 C:\Windows\explorer.exe
1856 C:\Windows\System32\taskeng.exe
1144 C:\Windows\System32\igfxtray.exe
1444 C:\Windows\System32\hkcmd.exe
1304 C:\Windows\System32\igfxpers.exe
1224 igfxsrvc.exe
2088 C:\Program Files (x86)\Digital Line Detect\DLG.exe
2096 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
2108 C:\Program Files (x86)\Kodak\Kodak EasyShare software\bin\EasyShare.exe
2128 C:\Program Files (x86)\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
2148 C:\Program Files\Dell\DellDock\DellDock.exe
2164 C:\Program Files (x86)\Dell\MediaDirect\PCMService.exe
2172 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
2188 C:\Program Files (x86)\Google\Quick Search Box\GoogleQuickSearchBox.exe
2204 C:\Program Files (x86)\HTC\HTC Sync\Application Launcher\Application Launcher.exe
2232 C:\Program Files (x86)\Verizon\VSP\VerizonServicepoint.exe
2268 C:\Program Files\McAfee.com\Agent\mcagent.exe
2276 C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
2332 C:\Program Files (x86)\iTunes\iTunesHelper.exe
2720 C:\Windows\System32\AERTSr64.exe
2752 C:\Windows\SysWOW64\svchost.exe
2764 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
2784 C:\Program Files\Bonjour\mDNSResponder.exe
2800 C:\Windows\System32\svchost.exe
2844 C:\Windows\SysWOW64\svchost.exe
2876 C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
2904 C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
2984 LVPrS64H.exe
2996 C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
3024 C:\Windows\System32\svchost.exe
944 C:\Windows\System32\svchost.exe
796 C:\Program Files (x86)\RosettaStoneLtdServices\RosettaStoneDaemon.exe
2084 C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
1332 C:\Program Files (x86)\Verizon\VSP\ServicepointService.exe
2796 C:\Windows\System32\svchost.exe
3056 C:\Windows\System32\svchost.exe
3036 C:\Windows\System32\SearchIndexer.exe
3148 WUDFHost.exe
3160 C:\Windows\System32\drivers\XAudio64.exe
3192 C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
3216 C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
3808 C:\Windows\System32\rundll32.exe
3900 Generic.exe
3940 CapabilityManager.exe
1156 epmworker.exe
3980 C:\Program Files (x86)\HTC\HTC Sync\Mobile Phone Monitor\dbgout.exe
1232 C:\Windows\SysWOW64\rundll32.exe
3004 C:\Windows\splwow64.exe
4124 C:\Program Files (x86)\Mozilla Firefox\firefox.exe
4208 <unknown>
4404 C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
1988 C:\Program Files\iPod\bin\iPodService.exe
4048 C:\Program Files\Windows Media Player\wmpnscfg.exe
2356 C:\Program Files (x86)\IObit\Advanced SystemCare 5\DelayLoad.exe
1980 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
1440 hpqbam08.exe
3296 hpqgpc01.exe
1220 WmiPrvSE.exe
5652 C:\Windows\System32\wbem\WMIADAP.exe
5676 WmiPrvSE.exe
5352 <unknown>
5956 C:\Windows\servicing\TrustedInstaller.exe
5960 C:\Users\rebekah.Sanchez-PC\Downloads\MBRCheck(1).exe
6008 C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000003`ac000000 (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x00000000`02800000 (NTFS)
PhysicalDrive0 Model Number: WDCWD6400AAKS-75A7B2, Rev: 01.03B01
Size Device Name MBR Status
--------------------------------------------
596 GB \\.\PhysicalDrive0 Windows 2008 MBR code detected
SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979
Done!
MBRCheck, version 1.2.3
© 2010, AD
Command-line:
Windows Version: Windows Vista Home Premium Edition
Windows Information: Service Pack 1 (build 6001), 64-bit
Base Board Manufacturer: Dell Inc.
BIOS Manufacturer: Dell Inc.
System Manufacturer: Dell Inc.
System Product Name: Inspiron 518
Logical Drives Mask: 0x000001fc
Kernel Drivers (total 152):
0x02A0F000 \SystemRoot\system32\ntoskrnl.exe
0x02F27000 \SystemRoot\system32\hal.dll
0x00600000 \SystemRoot\system32\kdcom.dll
0x0060A000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
0x00637000 \SystemRoot\system32\PSHED.dll
0x0064B000 \SystemRoot\system32\CLFS.SYS
0x006A8000 \SystemRoot\system32\CI.dll
0x0080E000 \SystemRoot\system32\drivers\Wdf01000.sys
0x008E8000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x008F6000 \SystemRoot\system32\drivers\acpi.sys
0x0094C000 \SystemRoot\system32\drivers\WMILIB.SYS
0x00955000 \SystemRoot\system32\drivers\msisadrv.sys
0x0095F000 \SystemRoot\system32\drivers\pci.sys
0x0098F000 \SystemRoot\System32\drivers\partmgr.sys
0x009A4000 \SystemRoot\system32\drivers\volmgr.sys
0x0075A000 \SystemRoot\System32\drivers\volmgrx.sys
0x009B8000 \SystemRoot\system32\drivers\pciide.sys
0x009BF000 \SystemRoot\system32\drivers\PCIIDEX.SYS
0x009CF000 \SystemRoot\System32\drivers\mountmgr.sys
0x009E2000 \SystemRoot\system32\drivers\atapi.sys
0x007C0000 \SystemRoot\system32\drivers\ataport.SYS
0x00A0F000 \SystemRoot\system32\drivers\fltmgr.sys
0x00A55000 \SystemRoot\system32\drivers\fileinfo.sys
0x00A69000 \SystemRoot\system32\drivers\mfehidk.sys
0x00B05000 \SystemRoot\System32\Drivers\PxHlpa64.sys
0x00B11000 \SystemRoot\System32\Drivers\ksecdd.sys
0x00C0D000 \SystemRoot\system32\drivers\ndis.sys
0x00B98000 \SystemRoot\system32\drivers\msrpc.sys
0x00E0E000 \SystemRoot\system32\drivers\NETIO.SYS
0x00E66000 \SystemRoot\System32\Drivers\Ntfs.sys
0x0100D000 \SystemRoot\system32\drivers\volsnap.sys
0x01051000 \SystemRoot\System32\Drivers\Tpkd.sys
0x01074000 \SystemRoot\System32\Drivers\spldr.sys
0x0107C000 \SystemRoot\System32\Drivers\mup.sys
0x0108E000 \SystemRoot\System32\drivers\ecache.sys
0x010BA000 \SystemRoot\system32\drivers\disk.sys
0x010CE000 \SystemRoot\system32\drivers\CLASSPNP.SYS
0x010FA000 \SystemRoot\system32\drivers\crcdisk.sys
0x01126000 \SystemRoot\system32\DRIVERS\tunnel.sys
0x01133000 \SystemRoot\system32\DRIVERS\tunmp.sys
0x0113C000 \SystemRoot\system32\DRIVERS\intelppm.sys
0x02008000 \SystemRoot\system32\DRIVERS\igdkmd64.sys
0x02A0B000 \SystemRoot\System32\drivers\dxgkrnl.sys
0x02AEA000 \SystemRoot\System32\drivers\watchdog.sys
0x02AF9000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0x02B05000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0x02B4B000 \SystemRoot\system32\DRIVERS\usbehci.sys
0x02B5C000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x02B6F000 \SystemRoot\system32\DRIVERS\Rtlh64.sys
0x0278C000 \SystemRoot\system32\DRIVERS\CAXHWBS2.sys
0x02B9C000 \SystemRoot\system32\DRIVERS\ks.sys
0x0280B000 \SystemRoot\system32\DRIVERS\CAX_DPV.sys
0x02E0F000 \SystemRoot\system32\DRIVERS\CAX_CNXT.sys
0x02EDA000 \SystemRoot\system32\drivers\modem.sys
0x02EE9000 \SystemRoot\system32\DRIVERS\ohci1394.sys
0x02EFB000 \SystemRoot\system32\DRIVERS\1394BUS.SYS
0x02F0B000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x02F27000 \SystemRoot\system32\hal.dll
0x02F34000 \SystemRoot\system32\DRIVERS\msiscsi.sys
0x02F6C000 \SystemRoot\system32\DRIVERS\storport.sys
0x02FC9000 \SystemRoot\system32\DRIVERS\TDI.SYS
0x02FD6000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x02E00000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x0297F000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x029B0000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x029C0000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x029DE000 \SystemRoot\system32\DRIVERS\rassstp.sys
0x02BD0000 \SystemRoot\system32\DRIVERS\termdd.sys
0x02BE2000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x02BF0000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x02E0C000 \SystemRoot\system32\DRIVERS\swenum.sys
0x02800000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x0114F000 \SystemRoot\system32\DRIVERS\umbus.sys
0x0115F000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x011A6000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x04202000 \SystemRoot\system32\drivers\RTKVHD64.sys
0x0436A000 \SystemRoot\system32\drivers\portcls.sys
0x043A5000 \SystemRoot\system32\drivers\drmk.sys
0x043C8000 \SystemRoot\system32\drivers\ksthunk.sys
0x043CE000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0x043D8000 \SystemRoot\System32\Drivers\Null.SYS
0x043EB000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0x011BA000 \SystemRoot\System32\drivers\vga.sys
0x011C8000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x043F3000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0x043E1000 \SystemRoot\system32\drivers\rdpencdd.sys
0x02A00000 \SystemRoot\System32\Drivers\Msfs.SYS
0x011ED000 \SystemRoot\System32\Drivers\Npfs.SYS
0x029F6000 \SystemRoot\System32\DRIVERS\rasacd.sys
0x04409000 \SystemRoot\System32\drivers\tcpip.sys
0x0457D000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x045A9000 \SystemRoot\system32\drivers\mfewfpk.sys
0x00DD0000 \SystemRoot\system32\DRIVERS\tdx.sys
0x007E4000 \SystemRoot\system32\DRIVERS\smb.sys
0x04603000 \SystemRoot\System32\DRIVERS\netbt.sys
0x04647000 \SystemRoot\system32\drivers\afd.sys
0x046B3000 \SystemRoot\system32\DRIVERS\pacer.sys
0x046D1000 \SystemRoot\system32\DRIVERS\mfenlfk.sys
0x046E2000 \SystemRoot\system32\DRIVERS\netbios.sys
0x046F1000 \SystemRoot\system32\DRIVERS\wanarp.sys
0x0470C000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x0475A000 \SystemRoot\system32\drivers\nsiproxy.sys
0x04766000 \SystemRoot\System32\Drivers\dfsc.sys
0x04783000 \SystemRoot\system32\drivers\mfeavfk.sys
0x04801000 \SystemRoot\system32\drivers\mfefirek.sys
0x04875000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0x0488A000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x0488C000 \SystemRoot\System32\Drivers\crashdmp.sys
0x0489A000 \SystemRoot\System32\Drivers\dump_dumpata.sys
0x048A6000 \SystemRoot\System32\Drivers\dump_atapi.sys
0x048AE000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0x048CA000 \SystemRoot\system32\drivers\LVUSBS64.sys
0x048D5000 \SystemRoot\system32\DRIVERS\usbscan.sys
0x048E5000 \SystemRoot\system32\DRIVERS\usbprint.sys
0x048F0000 \SystemRoot\system32\DRIVERS\dot4usb.sys
0x04900000 \SystemRoot\system32\DRIVERS\Dot4.sys
0x04928000 \SystemRoot\system32\DRIVERS\Dot4Prt.sys
0x04932000 \SystemRoot\system32\DRIVERS\hidusb.sys
0x0493B000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0x0494D000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0x04957000 \SystemRoot\system32\DRIVERS\mouhid.sys
0x00040000 \SystemRoot\System32\win32k.sys
0x04962000 \SystemRoot\System32\drivers\Dxapi.sys
0x0496E000 \SystemRoot\system32\DRIVERS\monitor.sys
0x004A0000 \SystemRoot\System32\TSDDD.dll
0x006A0000 \SystemRoot\System32\cdd.dll
0x008C0000 \SystemRoot\System32\ATMFD.DLL
0x04981000 \SystemRoot\system32\drivers\luafv.sys
0x15C0F000 \SystemRoot\system32\drivers\spsys.sys
0x15CA9000 \SystemRoot\system32\DRIVERS\lltdio.sys
0x15CBD000 \SystemRoot\system32\DRIVERS\rspndr.sys
0x15CD5000 \SystemRoot\system32\drivers\HTTP.sys
0x15D74000 \SystemRoot\System32\DRIVERS\srvnet.sys
0x15D9D000 \SystemRoot\system32\DRIVERS\bowser.sys
0x15DBB000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0x049A3000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0x047B9000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0x1600F000 \SystemRoot\System32\DRIVERS\srv2.sys
0x16041000 \SystemRoot\System32\DRIVERS\srv.sys
0x160D8000 \SystemRoot\system32\DRIVERS\mdmxsdk.sys
0x160DD000 \SystemRoot\system32\drivers\peauth.sys
0x16193000 \SystemRoot\System32\Drivers\secdrv.SYS
0x1619E000 \SystemRoot\System32\drivers\tcpipreg.sys
0x161AD000 \SystemRoot\system32\DRIVERS\xaudio64.sys
0x161B5000 \SystemRoot\system32\DRIVERS\WUDFRd.sys
0x161D5000 \SystemRoot\system32\DRIVERS\WUDFPf.sys
0x16E03000 \SystemRoot\System32\Drivers\fastfat.SYS
0x16E38000 \SystemRoot\system32\drivers\mfeapfk.sys
0x16E5E000 \SystemRoot\system32\drivers\cfwids.sys
0x16E6D000 \SystemRoot\system32\DRIVERS\LVPr2M64.sys
0x16E77000 \SystemRoot\system32\DRIVERS\cdfs.sys
0x77C20000 \Windows\System32\ntdll.dll
Processes (total 90):
0 System Idle Process
4 System
572 C:\Windows\System32\smss.exe
648 csrss.exe
692 C:\Windows\System32\wininit.exe
704 csrss.exe
752 C:\Windows\System32\winlogon.exe
776 C:\Windows\System32\services.exe
792 C:\Windows\System32\lsass.exe
800 C:\Windows\System32\lsm.exe
952 C:\Windows\System32\svchost.exe
992 C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
332 C:\Windows\System32\svchost.exe
460 C:\Windows\System32\svchost.exe
620 C:\Windows\System32\svchost.exe
656 C:\Windows\System32\svchost.exe
1064 C:\Windows\System32\audiodg.exe
1088 C:\Windows\System32\svchost.exe
1112 C:\Windows\System32\SLsvc.exe
1160 C:\Windows\System32\svchost.exe
1260 C:\Program Files\Dell\DellDock\DockLogin.exe
1340 C:\Windows\System32\svchost.exe
1524 C:\Windows\System32\spoolsv.exe
1552 C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
1732 C:\Windows\System32\dwm.exe
1740 C:\Windows\System32\taskeng.exe
1792 C:\Windows\explorer.exe
1856 C:\Windows\System32\taskeng.exe
1144 C:\Windows\System32\igfxtray.exe
1444 C:\Windows\System32\hkcmd.exe
1304 C:\Windows\System32\igfxpers.exe
1224 igfxsrvc.exe
2088 C:\Program Files (x86)\Digital Line Detect\DLG.exe
2096 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
2108 C:\Program Files (x86)\Kodak\Kodak EasyShare software\bin\EasyShare.exe
2128 C:\Program Files (x86)\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
2148 C:\Program Files\Dell\DellDock\DellDock.exe
2164 C:\Program Files (x86)\Dell\MediaDirect\PCMService.exe
2172 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
2188 C:\Program Files (x86)\Google\Quick Search Box\GoogleQuickSearchBox.exe
2204 C:\Program Files (x86)\HTC\HTC Sync\Application Launcher\Application Launcher.exe
2232 C:\Program Files (x86)\Verizon\VSP\VerizonServicepoint.exe
2268 C:\Program Files\McAfee.com\Agent\mcagent.exe
2276 C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
2332 C:\Program Files (x86)\iTunes\iTunesHelper.exe
2720 C:\Windows\System32\AERTSr64.exe
2752 C:\Windows\SysWOW64\svchost.exe
2764 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
2784 C:\Program Files\Bonjour\mDNSResponder.exe
2800 C:\Windows\System32\svchost.exe
2844 C:\Windows\SysWOW64\svchost.exe
2876 C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
2904 C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
2984 LVPrS64H.exe
2996 C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
3024 C:\Windows\System32\svchost.exe
944 C:\Windows\System32\svchost.exe
796 C:\Program Files (x86)\RosettaStoneLtdServices\RosettaStoneDaemon.exe
2084 C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
1332 C:\Program Files (x86)\Verizon\VSP\ServicepointService.exe
2796 C:\Windows\System32\svchost.exe
3056 C:\Windows\System32\svchost.exe
3036 C:\Windows\System32\SearchIndexer.exe
3148 WUDFHost.exe
3160 C:\Windows\System32\drivers\XAudio64.exe
3192 C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
3216 C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
3808 C:\Windows\System32\rundll32.exe
3900 Generic.exe
3940 CapabilityManager.exe
1156 epmworker.exe
3980 C:\Program Files (x86)\HTC\HTC Sync\Mobile Phone Monitor\dbgout.exe
1232 C:\Windows\SysWOW64\rundll32.exe
3004 C:\Windows\splwow64.exe
4124 C:\Program Files (x86)\Mozilla Firefox\firefox.exe
4208 <unknown>
4404 C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
1988 C:\Program Files\iPod\bin\iPodService.exe
4048 C:\Program Files\Windows Media Player\wmpnscfg.exe
2356 C:\Program Files (x86)\IObit\Advanced SystemCare 5\DelayLoad.exe
1980 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
1440 hpqbam08.exe
3296 hpqgpc01.exe
1220 WmiPrvSE.exe
5652 C:\Windows\System32\wbem\WMIADAP.exe
5676 WmiPrvSE.exe
5352 <unknown>
5956 C:\Windows\servicing\TrustedInstaller.exe
5960 C:\Users\rebekah.Sanchez-PC\Downloads\MBRCheck(1).exe
6008 C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000003`ac000000 (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x00000000`02800000 (NTFS)
PhysicalDrive0 Model Number: WDCWD6400AAKS-75A7B2, Rev: 01.03B01
Size Device Name MBR Status
--------------------------------------------
596 GB \\.\PhysicalDrive0 Windows 2008 MBR code detected
SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979
Done!
#36
Posted 03 January 2012 - 03:59 PM
Essexboy
-
- Retired Staff
-
- 69,964 posts
GeekU Moderator
I did nothing it was all you We will make a geek of you yet 
How is the computer behaving now ?
Please download Malwarebytes' Anti-Malware
Double Click mbam-setup.exe to install the application.
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.
We will make a geek of you yet How is the computer behaving now ?
Please download Malwarebytes' Anti-Malware
Double Click mbam-setup.exe to install the application.
- Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
- If an update is found, it will download and install the latest version.
- Once the program has loaded, select "Perform Quick Scan", then click Scan.
- The scan may take some time to finish, so please be patient.
- When the scan is complete, click OK, then Show Results to view the results.
- Make sure that everything is checked, and click Remove Selected.
- When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
- The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
- Copy&Paste the entire report in your next reply.
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.
#37
Posted 03 January 2012 - 04:29 PM
rebekah_89
- Topic Starter
-
- Member
-
- 19 posts
Member
Its running very smoothly. here are my Malwarebytes' Anti-Malware results
Malwarebytes Anti-Malware 1.60.0.1800
www.malwarebytes.org
Database version: v2012.01.03.04
Windows Vista Service Pack 1 x64 NTFS
Internet Explorer 8.0.6001.19088
rebekah :: SANCHEZ-PC [limited]
1/3/2012 2:24:18 PM
mbam-log-2012-01-03 (14-24-18).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 152892
Time elapsed: 4 minute(s), 54 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)
here are my Malwarebytes' Anti-Malware resultsMalwarebytes Anti-Malware 1.60.0.1800
www.malwarebytes.org
Database version: v2012.01.03.04
Windows Vista Service Pack 1 x64 NTFS
Internet Explorer 8.0.6001.19088
rebekah :: SANCHEZ-PC [limited]
1/3/2012 2:24:18 PM
mbam-log-2012-01-03 (14-24-18).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 152892
Time elapsed: 4 minute(s), 54 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)
#38
Posted 03 January 2012 - 04:37 PM
Essexboy
-
- Retired Staff
-
- 69,964 posts
GeekU Moderator
Subject to no further problems
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean
A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points, you can delete Gparted and the recovery ISO form the desktop :
Run OTL
Run OTL and hit the cleanup button. It will remove all the programmes we have used plus itself.
We will now confirm that your hidden files are set to that, as some of the tools I use will change that
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version of Java components and upgrade the application.
Upgrading Java:
SPRING CLEAN
To manually create a new Restore Point
Now we can purge the infected ones
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
Malwarebytes. Update and run weekly to keep your system clean
Download and install FileHippo update checker and run it monthly it will show you which programmes on your system need updating and give a download link
It is critical to have both a firewall and anti virus to protect your system and to keep them updated. To keep your operating system up to date visit
To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?
Keep safe
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean
A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points, you can delete Gparted and the recovery ISO form the desktop :
Run OTL
- Under the Custom Scans/Fixes box at the bottom, paste in the following
:Commands
[resethosts]
[emptytemp]
[Reboot]
- Then click the Run Fix button at the top
- Let the program run unhindered, reboot the PC when it is done
Run OTL and hit the cleanup button. It will remove all the programmes we have used plus itself.
We will now confirm that your hidden files are set to that, as some of the tools I use will change that
- Click Start.
- Open My Computer.
- Select the Tools menu and click Folder Options.
- Select the View Tab.
- Under the Hidden files and folders heading select Do not show hidden files and folders.
- Click Yes to confirm.
- Click OK.
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version of Java components and upgrade the application.
Upgrading Java:
- Go to this site and click Do I have Java
- It will check your current version and then offer to update to the latest version
SPRING CLEAN
To manually create a new Restore Point
- Go to Control Panel and select System
- Select System
- On the left select System Protection and accept the warning if you get one
- Select System Protection Tab
- Select Create at the bottom
- Type in a name i.e. Clean
- Select Create
Now we can purge the infected ones
- GoStart > All programs > Accessories > system tools
- Right click Disc cleanup and select run as administrator
- Select Your main drive and accept the warning if you get one
- For a few moments the system will make some calculations
- Select the More Options tab
- In the System Restore and Shadow Backups select Clean up
- Select Delete on the pop up
- Select OK
- Select Delete
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
Malwarebytes. Update and run weekly to keep your system clean
Download and install FileHippo update checker and run it monthly it will show you which programmes on your system need updating and give a download link
It is critical to have both a firewall and anti virus to protect your system and to keep them updated. To keep your operating system up to date visit
To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?
Keep safe
#39
Posted 03 January 2012 - 04:40 PM
rebekah_89
- Topic Starter
-
- Member
-
- 19 posts
Member
Again thank you very much for the help! And I will do all those things right away.
#40
Posted 03 January 2012 - 04:41 PM
Essexboy
-
- Retired Staff
-
- 69,964 posts
GeekU Moderator
It was my pleasure 
#41
Posted 05 January 2012 - 02:32 PM
Essexboy
-
- Retired Staff
-
- 69,964 posts
GeekU Moderator
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.
If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.
Everyone else please begin a New Topic.
If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.
Everyone else please begin a New Topic.
Similar Topics
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users
As Featured On:
Sign In
Create Account
