Hello
I have run Combofix and TDSSKiller. After I ran TDSSKiller, it had a warning that unresolved threats were still present, so I ran it again with the same result.
The Log files are as follows:
Combofix.txt
ComboFix 12-04-10.02 - Jerri 04/10/2012 22:11:15.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1535.1140 [GMT -7:00]
Running from: c:\documents and settings\Jerri\Desktop\ComboFix.exe
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\3058gri7.exe
c:\documents and settings\All Users\Application Data\DirectCDUserNameE.txt
c:\documents and settings\All Users\Application Data\TEMP
c:\documents and settings\All Users\RealPlayer10-5GOLD_rs.exe
c:\documents and settings\Jerri\WINDOWS
c:\documents and settings\Ryan\WINDOWS
c:\documents and settings\User\WINDOWS
c:\windows\$NtUninstallKB56600$\144037261\@
c:\windows\$NtUninstallKB56600$\144037261\cfg.ini
c:\windows\$NtUninstallKB56600$\144037261\Desktop.ini
c:\windows\$NtUninstallKB56600$\144037261\L\bnvaknir
c:\windows\$NtUninstallKB56600$\144037261\oemid
c:\windows\$NtUninstallKB56600$\144037261\U\00000001.@
c:\windows\$NtUninstallKB56600$\144037261\U\00000002.@
c:\windows\$NtUninstallKB56600$\144037261\U\00000004.@
c:\windows\$NtUninstallKB56600$\144037261\U\80000000.@
c:\windows\$NtUninstallKB56600$\144037261\U\80000004.@
c:\windows\$NtUninstallKB56600$\144037261\U\80000032.@
c:\windows\$NtUninstallKB56600$\144037261\version
c:\windows\$NtUninstallKB56600$\338505485
c:\windows\system32\CddbCdda.dll
c:\windows\system32\dds_trash_log.cmd
c:\windows\system32\fsRamDsk.dll
c:\windows\system32\SET1F.tmp
c:\windows\system32\SET3C.tmp
c:\windows\system32\SET41.tmp
c:\windows\system32\SET44.tmp
c:\windows\$NtUninstallKB56600$ . . . . Failed to delete
.
c:\windows\system32\drivers\UdfReadr_xp.sys . . . is infected!! . . . Failed to find a valid replacement.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_MSDISK
-------\Legacy_MSWINDOWS
-------\Service_MSDisk
-------\Legacy_DCamUSBGrandTek
-------\Service_DCamUSBGrandTek
.
.
((((((((((((((((((((((((( Files Created from 2012-03-11 to 2012-04-11 )))))))))))))))))))))))))))))))
.
.
2012-04-11 05:09 . 2012-03-23 05:14 84992 ----a-w- c:\windows\system32\FXUxT232.com
2012-03-20 01:05 . 2012-03-20 01:05 592824 ----a-w- c:\program files\Mozilla Firefox\gkmedias.dll
2012-03-20 01:05 . 2012-03-20 01:05 44472 ----a-w- c:\program files\Mozilla Firefox\mozglue.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-05 05:33 . 2011-08-14 15:12 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-02-03 09:22 . 2002-08-29 12:00 1860096 ----a-w- c:\windows\system32\win32k.sys
2004-10-01 23:00 . 2006-01-04 02:58 40960 ----a-w- c:\program files\Uninstall_CDS.exe
2004-07-01 05:46 . 2004-07-01 05:45 150192 ----a-w- c:\program files\TweakUiPowertoySetup.exe
2003-01-26 06:52 . 2003-01-26 06:27 6431137 ----a-w- c:\program files\Eudora5.2.exe
2012-03-20 01:05 . 2011-05-08 04:50 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files\Steam\Steam.exe" [2011-08-02 1242448]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CARPService"="carpserv.exe" [2001-12-23 4608]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-05 8523776]
"nwiz"="nwiz.exe" [2007-12-05 1626112]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-12-05 81920]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2010-03-11 648536]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2009-07-08 236016]
"RemoteControl"="c:\program files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe" [2003-12-09 32768]
"EEventManager"="c:\program files\EPSON\Creativity Suite\Event Manager\EEventManager.exe" [2006-03-17 102400]
"AdaptecDirectCD"="c:\program files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" [2002-06-21 684032]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2011-07-06 421888]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-11-02 59240]
"iTunesHelper"="f:\itunes\iTunesHelper.exe" [2011-12-08 421736]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-04 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
"LogMeIn Hamachi Ui"="f:\gleep\minecraft\New Folder\hamachi-2-ui.exe" [2012-02-29 1987976]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"RunNarrator"="Narrator.exe" [2008-04-14 53760]
"FlashPlayerUpdate"="c:\windows\system32\Macromed\Flash\FlashUtil10n_ActiveX.exe" [2011-12-06 234656]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoThumbnailCache"= 1 (0x1)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{EDB0E980-90BD-11D4-8599-0008C7D3B6F8}"= "c:\progra~1\Qualcomm\Eudora\EuShlExt.dll" [2002-10-23 86016]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"f:\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
.
R2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [9/16/2008 1:03 PM 169312]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;f:\gleep\minecraft\New Folder\hamachi-2.exe [2/28/2012 6:38 PM 1373576]
R2 PCSUService;PC Speed Up Service;c:\program files\PC Speed Up\PCSUService.exe [12/5/2011 7:32 PM 233184]
R2 TabletServicePen;TabletServicePen;c:\windows\system32\Pen_Tablet.exe [2/15/2012 10:39 PM 4497704]
R2 TabletServiceWacom;TabletServiceWacom;c:\windows\system32\Wacom_Tablet.exe [12/26/2009 4:22 PM 2789672]
R2 WTouchService;WTouch Service;c:\program files\WTouch\WTouchService.exe [2/15/2012 10:39 PM 113448]
S2 gupdate1c9b7481c74f9ef;Google Update Service (gupdate1c9b7481c74f9ef);c:\program files\Google\Update\GoogleUpdate.exe [4/6/2009 11:14 PM 133104]
S3 CTUPnPSv;Creative Centrale Media Server;c:\program files\Creative\Creative Centrale\CTUPnPSv.exe [5/21/2008 4:42 AM 64000]
S3 dump_wmimmc;dump_wmimmc;\??\c:\windows\system32\drivers\dump_wmimmc.sys --> c:\windows\system32\drivers\dump_wmimmc.sys [?]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [4/6/2009 11:14 PM 133104]
S3 MEMSWEEP2;MEMSWEEP2;\??\c:\windows\system32\D.tmp --> c:\windows\system32\D.tmp [?]
S3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\drivers\wacmoumonitor.sys [12/26/2009 4:22 PM 15656]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
getPlusHelper REG_MULTI_SZ getPlusHelper
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
winpowermanager
incdsrv
cfosspeed
DCamUSBGrandTek
RimSerPort
tpsrv
mediamaxxlservice
pdiddcci
.
Contents of the 'Scheduled Tasks' folder
.
2012-04-02 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 00:57]
.
2012-04-03 c:\windows\Tasks\At1.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At10.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At11.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At12.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At13.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At14.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At15.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At16.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At17.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At18.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At19.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At2.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At20.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At21.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At22.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At23.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At24.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At25.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At26.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-02 c:\windows\Tasks\At27.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-02 c:\windows\Tasks\At28.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-08 c:\windows\Tasks\At29.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At3.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-08 c:\windows\Tasks\At30.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-09 c:\windows\Tasks\At31.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-09 c:\windows\Tasks\At32.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-08 c:\windows\Tasks\At33.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-08 c:\windows\Tasks\At34.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-09 c:\windows\Tasks\At35.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-09 c:\windows\Tasks\At36.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-04 c:\windows\Tasks\At37.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-04 c:\windows\Tasks\At38.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-10 c:\windows\Tasks\At39.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At4.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-10 c:\windows\Tasks\At40.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-10 c:\windows\Tasks\At41.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-10 c:\windows\Tasks\At42.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-11 c:\windows\Tasks\At43.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-11 c:\windows\Tasks\At44.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-11 c:\windows\Tasks\At45.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-11 c:\windows\Tasks\At46.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-10 c:\windows\Tasks\At47.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-10 c:\windows\Tasks\At48.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At49.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At5.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At50.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At51.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At52.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At53.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At54.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At55.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At56.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At57.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At58.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At59.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At6.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At60.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At61.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At62.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At63.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At64.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At65.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At66.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At67.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At68.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At69.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At7.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At70.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At71.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At72.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-03 c:\windows\Tasks\At73.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At74.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-02 c:\windows\Tasks\At75.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-02 c:\windows\Tasks\At76.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-08 c:\windows\Tasks\At77.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-08 c:\windows\Tasks\At78.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-09 c:\windows\Tasks\At79.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At8.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-09 c:\windows\Tasks\At80.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-08 c:\windows\Tasks\At81.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-08 c:\windows\Tasks\At82.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-09 c:\windows\Tasks\At83.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-09 c:\windows\Tasks\At84.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-04 c:\windows\Tasks\At85.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-04 c:\windows\Tasks\At86.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-10 c:\windows\Tasks\At87.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-10 c:\windows\Tasks\At88.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-10 c:\windows\Tasks\At89.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-03 c:\windows\Tasks\At9.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-10 c:\windows\Tasks\At90.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-11 c:\windows\Tasks\At91.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-11 c:\windows\Tasks\At92.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-11 c:\windows\Tasks\At93.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-11 c:\windows\Tasks\At94.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-10 c:\windows\Tasks\At95.job
- c:\windows\system32\FXUxT232.com [2012-04-11 05:14]
.
2012-04-10 c:\windows\Tasks\At96.job
- c:\windows\system32\FXUxT232.com_ [2012-04-10 05:14]
.
2012-04-11 c:\windows\Tasks\Check Updates for Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 19:20]
.
2012-04-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-07 06:14]
.
2012-04-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-07 06:14]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.ca/
uInternet Settings,ProxyOverride = *.local
IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
IE: Open in new background tab - c:\program files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/229?0fc636fde303460c936a4ccc29b35817
IE: Open in new foreground tab - c:\program files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/230?0fc636fde303460c936a4ccc29b35817
IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949}
TCP: DhcpNameServer = 192.168.1.1
Handler: ms-its50 - {F8606A00-F5CF-11D1-B6BB-0000F80149F6} - c:\program files\Common Files\Microsoft Shared\Information Retrieval\itss50.dll
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Jerri\Application Data\Mozilla\Firefox\Profiles\v50mc64d.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.ca/
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true
.
- - - - ORPHANS REMOVED - - - -
.
HKCU-Run-PowerBar - (no file)
SafeBoot-WudfPf
SafeBoot-WudfRd
AddRemove-HijackThis - c:\documents and settings\Paul\My Documents\Cache\Cache\HijackThis.exe
AddRemove-HOTLLAMA Media Player - Update - c:\docume~1\Brenna\MYDOCU~1\Videos\Player\UNWISE.EXE
AddRemove-Shockwave - c:\windows\system32\Macromed\SHOCKW~1\UNWISE.EXE
AddRemove-Sophos-AntiRootkit - d:\sophos anti-rootkit\helper.exe
AddRemove-Toyland - E:\setup.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2012-04-10 22:38
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
PowerBar = ?????????^?????????????????????????????????????????????????????????w???w????j??wNe?w?????????^????@????s???s??????@?????Y??s?U2?D??s????Hl?s????????????<'?s???s???s??????@?????Y??s$V2?D??s8?@??$@?8?@?8?@?????????0V2?PA2?{??s?A2??U2??A2?PA2?p??s?????????U2????
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\D.tmp"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(2412)
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Nokia\Nokia PC Suite 7\phonebrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_eng-us.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Lavasoft\Ad-Aware\aawservice.exe
c:\program files\WTouch\WTouchUser.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\System32\CTsvcCDA.EXE
c:\program files\Creative\Shared Files\CTDevSrv.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\nvsvc32.exe
c:\program files\Common Files\Protexis\License Service\PsiService_2.exe
c:\windows\system32\carpserv.exe
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\WTablet\Pen_TabletUser.exe
c:\windows\system32\WTablet\Wacom_TabletUser.exe
c:\windows\system32\wscntfy.exe
c:\program files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Completion time: 2012-04-10 22:45:11 - machine was rebooted
ComboFix-quarantined-files.txt 2012-04-11 05:44
.
Pre-Run: 6,074,261,504 bytes free
Post-Run: 9,353,400,320 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn
.
- - End Of File - - 5C442B890693FDEFDF33547EA0070742
TDSSKiller Log:
22:52:35.0328 3464 TDSS rootkit removing tool 2.7.28.0 Apr 10 2012 16:54:05
22:52:36.0015 3464 ============================================================
22:52:36.0015 3464 Current date / time: 2012/04/10 22:52:36.0015
22:52:36.0015 3464 SystemInfo:
22:52:36.0015 3464
22:52:36.0015 3464 OS Version: 5.1.2600 ServicePack: 3.0
22:52:36.0015 3464 Product type: Workstation
22:52:36.0015 3464 ComputerName: PAUL-QX8Y126H2L
22:52:36.0015 3464 UserName: Jerri
22:52:36.0015 3464 Windows directory: C:\WINDOWS
22:52:36.0015 3464 System windows directory: C:\WINDOWS
22:52:36.0015 3464 Processor architecture: Intel x86
22:52:36.0015 3464 Number of processors: 1
22:52:36.0015 3464 Page size: 0x1000
22:52:36.0015 3464 Boot type: Normal boot
22:52:36.0015 3464 ============================================================
22:52:38.0328 3464 Drive \Device\Harddisk3\DR3 - Size: 0x0 (0.00 Gb), SectorSize: 0x0, Cylinders: 0x0, SectorsPerTrack: 0x0, TracksPerCylinder: 0x0, Type 'K0', Flags 0x00000058
22:52:38.0343 3464 Drive \Device\Harddisk0\DR0 - Size: 0x1BF4290000 (111.82 Gb), SectorSize: 0x200, Cylinders: 0x3904, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000058
22:52:38.0343 3464 Drive \Device\Harddisk1\DR1 - Size: 0x1BF4290000 (111.82 Gb), SectorSize: 0x200, Cylinders: 0x3904, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000058
22:52:38.0359 3464 Drive \Device\Harddisk2\DR2 - Size: 0xE51424000 (57.27 Gb), SectorSize: 0x200, Cylinders: 0x1D34, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
22:52:38.0359 3464 \Device\Harddisk0\DR0:
22:52:38.0359 3464 MBR used
22:52:38.0359 3464 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xDF9F3C5
22:52:38.0359 3464 \Device\Harddisk1\DR1:
22:52:38.0359 3464 MBR used
22:52:38.0359 3464 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xDF9F3C5
22:52:38.0359 3464 \Device\Harddisk2\DR2:
22:52:38.0359 3464 MBR used
22:52:38.0359 3464 \Device\Harddisk2\DR2\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x7285D34
22:52:38.0468 3464 Initialize success
22:52:38.0468 3464 ============================================================
22:53:07.0968 2920 ============================================================
22:53:07.0968 2920 Scan started
22:53:07.0968 2920 Mode: Manual; SigCheck; TDLFS;
22:53:07.0968 2920 ============================================================
22:53:08.0250 2920 aawservice (17067069b9a7865028c1f2e6971d0ccc) C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
22:53:08.0437 2920 aawservice - ok
22:53:08.0531 2920 Abiosdsk - ok
22:53:08.0609 2920 abp480n5 - ok
22:53:08.0750 2920 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
22:53:09.0015 2920 ACPI - ok
22:53:09.0125 2920 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys
22:53:09.0406 2920 ACPIEC - ok
22:53:09.0531 2920 AdobeActiveFileMonitor7.0 (3fd8dc2c9735c2aa70155102cfb93eda) C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
22:53:09.0562 2920 AdobeActiveFileMonitor7.0 - ok
22:53:09.0640 2920 adpu160m - ok
22:53:09.0765 2920 aeaudio (11c04b17ed2abbb4833694bcd644ac90) C:\WINDOWS\system32\drivers\aeaudio.sys
22:53:09.0828 2920 aeaudio - ok
22:53:09.0953 2920 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
22:53:10.0203 2920 aec - ok
22:53:10.0359 2920 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
22:53:10.0421 2920 AFD - ok
22:53:10.0546 2920 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
22:53:10.0781 2920 agp440 - ok
22:53:10.0875 2920 Aha154x - ok
22:53:10.0968 2920 aic78u2 - ok
22:53:11.0046 2920 aic78xx - ok
22:53:11.0156 2920 Alerter (a9a3daa780ca6c9671a19d52456705b4) C:\WINDOWS\system32\alrsvc.dll
22:53:11.0390 2920 Alerter - ok
22:53:11.0484 2920 ALG (8c515081584a38aa007909cd02020b3d) C:\WINDOWS\System32\alg.exe
22:53:11.0718 2920 ALG - ok
22:53:11.0812 2920 AliIde - ok
22:53:11.0906 2920 amsint - ok
22:53:12.0046 2920 Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
22:53:12.0062 2920 Apple Mobile Device - ok
22:53:12.0171 2920 AppMgmt (d8849f77c0b66226335a59d26cb4edc6) C:\WINDOWS\System32\appmgmts.dll
22:53:12.0406 2920 AppMgmt - ok
22:53:12.0515 2920 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
22:53:12.0765 2920 Arp1394 - ok
22:53:12.0859 2920 asc - ok
22:53:12.0953 2920 asc3350p - ok
22:53:13.0031 2920 asc3550 - ok
22:53:13.0156 2920 aspnet_state (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
22:53:13.0187 2920 aspnet_state - ok
22:53:13.0328 2920 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
22:53:13.0562 2920 AsyncMac - ok
22:53:13.0687 2920 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
22:53:13.0921 2920 atapi - ok
22:53:14.0015 2920 Atdisk - ok
22:53:14.0140 2920 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
22:53:14.0375 2920 Atmarpc - ok
22:53:14.0484 2920 AudioSrv (def7a7882bec100fe0b2ce2549188f9d) C:\WINDOWS\System32\audiosrv.dll
22:53:14.0718 2920 AudioSrv - ok
22:53:15.0140 2920 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
22:53:15.0375 2920 audstub - ok
22:53:15.0500 2920 basic2 (1b9c81ab9a456eabd9f8335f04b5f495) C:\WINDOWS\system32\DRIVERS\HSF_BSC2.sys
22:53:15.0750 2920 basic2 - ok
22:53:15.0890 2920 bcm4sbxp (c0541cd42e39af45be203e677351f310) C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys
22:53:15.0937 2920 bcm4sbxp - ok
22:53:16.0046 2920 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
22:53:16.0296 2920 Beep - ok
22:53:16.0453 2920 BITS (574738f61fca2935f5265dc4e5691314) C:\WINDOWS\system32\qmgr.dll
22:53:16.0734 2920 BITS - ok
22:53:16.0859 2920 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe
22:53:16.0890 2920 Bonjour Service - ok
22:53:17.0015 2920 Browser (a06ce3399d16db864f55faeb1f1927a9) C:\WINDOWS\System32\browser.dll
22:53:17.0250 2920 Browser - ok
22:53:17.0265 2920 catchme - ok
22:53:17.0375 2920 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
22:53:17.0640 2920 cbidf2k - ok
22:53:17.0734 2920 cd20xrnt - ok
22:53:17.0828 2920 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
22:53:18.0093 2920 Cdaudio - ok
22:53:18.0218 2920 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
22:53:18.0437 2920 Cdfs - ok
22:53:18.0546 2920 Cdr4_xp (837eef65af62d4e8a37c41d3879f7274) C:\WINDOWS\system32\drivers\Cdr4_xp.sys
22:53:18.0609 2920 Cdr4_xp - ok
22:53:18.0734 2920 Cdralw2k (579da2f9f5401f55dae2cf8779d61dfc) C:\WINDOWS\system32\drivers\Cdralw2k.sys
22:53:18.0750 2920 Cdralw2k - ok
22:53:18.0843 2920 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
22:53:19.0078 2920 Cdrom - ok
22:53:19.0203 2920 cdudf_xp (5cc1f217fbd3e0f0ac7e4042aa242ee0) C:\WINDOWS\system32\drivers\cdudf_xp.sys
22:53:19.0234 2920 cdudf_xp ( UnsignedFile.Multi.Generic ) - warning
22:53:19.0234 2920 cdudf_xp - detected UnsignedFile.Multi.Generic (1)
22:53:19.0312 2920 cfosspeed - ok
22:53:19.0375 2920 Changer - ok
22:53:19.0484 2920 CiSvc (1cfe720eb8d93a7158a4ebc3ab178bde) C:\WINDOWS\system32\cisvc.exe
22:53:19.0687 2920 CiSvc - ok
22:53:19.0812 2920 ClipSrv (34cbe729f38138217f9c80212a2a0c82) C:\WINDOWS\system32\clipsrv.exe
22:53:20.0046 2920 ClipSrv - ok
22:53:20.0171 2920 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:53:20.0187 2920 clr_optimization_v2.0.50727_32 - ok
22:53:20.0296 2920 CmdIde - ok
22:53:20.0375 2920 COMSysApp - ok
22:53:20.0453 2920 Cpqarray - ok
22:53:20.0546 2920 Creative Service for CDROM Access (3c8b6609712f4ff78e521f6dcfc4032b) C:\WINDOWS\System32\CTsvcCDA.EXE
22:53:20.0562 2920 Creative Service for CDROM Access ( UnsignedFile.Multi.Generic ) - warning
22:53:20.0562 2920 Creative Service for CDROM Access - detected UnsignedFile.Multi.Generic (1)
22:53:20.0687 2920 CryptSvc (3d4e199942e29207970e04315d02ad3b) C:\WINDOWS\System32\cryptsvc.dll
22:53:20.0906 2920 CryptSvc - ok
22:53:21.0046 2920 CTDevice_Srv (a5bea0e5c297f5f3835638a87e512fba) C:\Program Files\Creative\Shared Files\CTDevSrv.exe
22:53:21.0062 2920 CTDevice_Srv ( UnsignedFile.Multi.Generic ) - warning
22:53:21.0062 2920 CTDevice_Srv - detected UnsignedFile.Multi.Generic (1)
22:53:21.0218 2920 CTUPnPSv (8e26d772f53b7883a651e0e4a9598f21) C:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe
22:53:21.0234 2920 CTUPnPSv ( UnsignedFile.Multi.Generic ) - warning
22:53:21.0234 2920 CTUPnPSv - detected UnsignedFile.Multi.Generic (1)
22:53:21.0343 2920 dac2w2k - ok
22:53:21.0421 2920 dac960nt - ok
22:53:21.0562 2920 DcomLaunch (6b27a5c03dfb94b4245739065431322c) C:\WINDOWS\system32\rpcss.dll
22:53:21.0671 2920 DcomLaunch - ok
22:53:21.0781 2920 Dhcp (5e38d7684a49cacfb752b046357e0589) C:\WINDOWS\System32\dhcpcsvc.dll
22:53:22.0031 2920 Dhcp - ok
22:53:22.0171 2920 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
22:53:22.0375 2920 Disk - ok
22:53:22.0453 2920 dmadmin - ok
22:53:22.0562 2920 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys
22:53:22.0843 2920 dmboot - ok
22:53:22.0968 2920 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys
22:53:23.0218 2920 dmio - ok
22:53:23.0328 2920 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
22:53:23.0546 2920 dmload - ok
22:53:23.0671 2920 dmserver (57edec2e5f59f0335e92f35184bc8631) C:\WINDOWS\System32\dmserver.dll
22:53:23.0875 2920 dmserver - ok
22:53:24.0015 2920 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
22:53:24.0250 2920 DMusic - ok
22:53:24.0375 2920 Dnscache (5f7e24fa9eab896051ffb87f840730d2) C:\WINDOWS\System32\dnsrslvr.dll
22:53:24.0406 2920 Dnscache - ok
22:53:24.0500 2920 Dot3svc (0f0f6e687e5e15579ef4da8dd6945814) C:\WINDOWS\System32\dot3svc.dll
22:53:24.0734 2920 Dot3svc - ok
22:53:24.0875 2920 dot4 (3e4b043f8bc6be1d4820cc6c9c500306) C:\WINDOWS\system32\DRIVERS\Dot4.sys
22:53:25.0109 2920 dot4 - ok
22:53:25.0234 2920 Dot4Print (77ce63a8a34ae23d9fe4c7896d1debe7) C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys
22:53:25.0453 2920 Dot4Print - ok
22:53:25.0578 2920 dot4usb (6ec3af6bb5b30e488a0c559921f012e1) C:\WINDOWS\system32\DRIVERS\dot4usb.sys
22:53:25.0828 2920 dot4usb - ok
22:53:25.0906 2920 dpti2o - ok
22:53:25.0968 2920 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
22:53:26.0171 2920 drmkaud - ok
22:53:26.0250 2920 dump_wmimmc - ok
22:53:26.0281 2920 dvd_2K - ok
22:53:26.0375 2920 EapHost (2187855a7703adef0cef9ee4285182cc) C:\WINDOWS\System32\eapsvc.dll
22:53:26.0593 2920 EapHost - ok
22:53:26.0703 2920 ERSvc (bc93b4a066477954555966d77fec9ecb) C:\WINDOWS\System32\ersvc.dll
22:53:26.0921 2920 ERSvc - ok
22:53:27.0046 2920 Eventlog (65df52f5b8b6e9bbd183505225c37315) C:\WINDOWS\system32\services.exe
22:53:27.0125 2920 Eventlog - ok
22:53:27.0250 2920 EventSystem (d4991d98f2db73c60d042f1aef79efae) C:\WINDOWS\System32\es.dll
22:53:27.0281 2920 EventSystem - ok
22:53:27.0421 2920 Fallback (c823debe2548656549f84a875d65237b) C:\WINDOWS\system32\DRIVERS\HSF_FALL.sys
22:53:27.0656 2920 Fallback - ok
22:53:27.0812 2920 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
22:53:28.0031 2920 Fastfat - ok
22:53:28.0140 2920 fasttx2k (82f8a9ed1525202f720b9bb012449225) C:\WINDOWS\system32\DRIVERS\fasttx2k.sys
22:53:28.0156 2920 fasttx2k ( UnsignedFile.Multi.Generic ) - warning
22:53:28.0156 2920 fasttx2k - detected UnsignedFile.Multi.Generic (1)
22:53:28.0296 2920 FastUserSwitchingCompatibility (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
22:53:28.0359 2920 FastUserSwitchingCompatibility - ok
22:53:28.0484 2920 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
22:53:28.0718 2920 Fdc - ok
22:53:28.0859 2920 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys
22:53:29.0078 2920 Fips - ok
22:53:29.0187 2920 FLEXnet Licensing Service (f76d04f7413b07daa029f6520b64b4e8) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
22:53:29.0250 2920 FLEXnet Licensing Service ( UnsignedFile.Multi.Generic ) - warning
22:53:29.0250 2920 FLEXnet Licensing Service - detected UnsignedFile.Multi.Generic (1)
22:53:29.0390 2920 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
22:53:29.0609 2920 Flpydisk - ok
22:53:29.0718 2920 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
22:53:29.0953 2920 FltMgr - ok
22:53:30.0140 2920 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
22:53:30.0156 2920 FontCache3.0.0.0 - ok
22:53:30.0296 2920 Fsks (6483414841d4cab6c3b4db2ac6edd70b) C:\WINDOWS\system32\DRIVERS\HSF_FSKS.sys
22:53:30.0546 2920 Fsks - ok
22:53:30.0671 2920 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
22:53:30.0906 2920 Fs_Rec - ok
22:53:31.0015 2920 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
22:53:31.0265 2920 Ftdisk - ok
22:53:31.0453 2920 gameenum (065639773d8b03f33577f6cdaea21063) C:\WINDOWS\system32\DRIVERS\gameenum.sys
22:53:31.0656 2920 gameenum - ok
22:53:31.0765 2920 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
22:53:31.0781 2920 GEARAspiWDM - ok
22:53:31.0843 2920 getPlusHelper (fd7e9aba274df75e08320420b8e9a1d5) C:\Program Files\NOS\bin\getPlus_Helper.dll
22:53:31.0859 2920 getPlusHelper - ok
22:53:31.0984 2920 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
22:53:32.0203 2920 Gpc - ok
22:53:32.0328 2920 gupdate1c9b7481c74f9ef (626a24ed1228580b9518c01930936df9) C:\Program Files\Google\Update\GoogleUpdate.exe
22:53:32.0343 2920 gupdate1c9b7481c74f9ef - ok
22:53:32.0359 2920 gupdatem (626a24ed1228580b9518c01930936df9) C:\Program Files\Google\Update\GoogleUpdate.exe
22:53:32.0375 2920 gupdatem - ok
22:53:32.0500 2920 hamachi (833051c6c6c42117191935f734cfbd97) C:\WINDOWS\system32\DRIVERS\hamachi.sys
22:53:32.0515 2920 hamachi - ok
22:53:32.0796 2920 Hamachi2Svc (fa89c0429821c7c429eec7a0ce1c02d3) F:\Gleep\minecraft\New Folder\hamachi-2.exe
22:53:32.0968 2920 Hamachi2Svc - ok
22:53:33.0140 2920 helpsvc (4fcca060dfe0c51a09dd5c3843888bcd) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
22:53:33.0359 2920 helpsvc - ok
22:53:33.0468 2920 HidServ (deb04da35cc871b6d309b77e1443c796) C:\WINDOWS\System32\hidserv.dll
22:53:33.0671 2920 HidServ - ok
22:53:33.0812 2920 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
22:53:34.0015 2920 HidUsb - ok
22:53:34.0109 2920 hkmsvc (8878bd685e490239777bfe51320b88e9) C:\WINDOWS\System32\kmsvc.dll
22:53:34.0343 2920 hkmsvc - ok
22:53:34.0421 2920 hpn - ok
22:53:34.0546 2920 HSFHWBS2 (127f6638eb09050f5a490bbd6507b37a) C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys
22:53:34.0593 2920 HSFHWBS2 - ok
22:53:34.0750 2920 HSF_DP (0ade6a9622ff72599ef2980036112f17) C:\WINDOWS\system32\DRIVERS\HSF_DP.sys
22:53:34.0828 2920 HSF_DP - ok
22:53:34.0984 2920 hsf_msft (74e379857d4c0dfb56de2d19b8f4c434) C:\WINDOWS\system32\DRIVERS\HSF_MSFT.sys
22:53:35.0281 2920 hsf_msft - ok
22:53:35.0437 2920 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
22:53:35.0484 2920 HTTP - ok
22:53:35.0609 2920 HTTPFilter (6100a808600f44d999cebdef8841c7a3) C:\WINDOWS\System32\w3ssl.dll
22:53:35.0812 2920 HTTPFilter - ok
22:53:35.0906 2920 i2omgmt - ok
22:53:35.0984 2920 i2omp - ok
22:53:36.0109 2920 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
22:53:36.0328 2920 i8042prt - ok
22:53:36.0593 2920 IDriverT (6f95324909b502e2651442c1548ab12f) C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
22:53:36.0625 2920 IDriverT ( UnsignedFile.Multi.Generic ) - warning
22:53:36.0625 2920 IDriverT - detected UnsignedFile.Multi.Generic (1)
22:53:36.0796 2920 idsvc (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
22:53:36.0875 2920 idsvc - ok
22:53:37.0000 2920 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
22:53:37.0218 2920 Imapi - ok
22:53:37.0328 2920 ImapiService (30deaf54a9755bb8546168cfe8a6b5e1) C:\WINDOWS\system32\imapi.exe
22:53:37.0546 2920 ImapiService - ok
22:53:37.0656 2920 ini910u - ok
22:53:37.0781 2920 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys
22:53:37.0984 2920 IntelIde - ok
22:53:38.0125 2920 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys
22:53:38.0328 2920 intelppm - ok
22:53:38.0468 2920 ip6fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
22:53:38.0703 2920 ip6fw - ok
22:53:38.0828 2920 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
22:53:39.0078 2920 IpFilterDriver - ok
22:53:39.0218 2920 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
22:53:39.0437 2920 IpInIp - ok
22:53:39.0578 2920 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
22:53:39.0796 2920 IpNat - ok
22:53:39.0906 2920 iPod Service (178fe38b7740f598391eb2f51ae4ccac) C:\Program Files\iPod\bin\iPodService.exe
22:53:39.0984 2920 iPod Service - ok
22:53:40.0109 2920 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
22:53:40.0312 2920 IPSec - ok
22:53:40.0468 2920 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
22:53:40.0703 2920 IRENUM - ok
22:53:40.0828 2920 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
22:53:41.0046 2920 isapnp - ok
22:53:41.0218 2920 JavaQuickStarterService (e731921db2e17dcd3db472fad5549c57) C:\Program Files\Java\jre6\bin\jqs.exe
22:53:41.0234 2920 JavaQuickStarterService - ok
22:53:41.0421 2920 K56 (9c5e3fdbfcc30cf71a49ca178b9ad442) C:\WINDOWS\system32\DRIVERS\HSF_K56K.sys
22:53:41.0687 2920 K56 - ok
22:53:41.0828 2920 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
22:53:42.0046 2920 Kbdclass - ok
22:53:42.0187 2920 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
22:53:42.0406 2920 kbdhid - ok
22:53:42.0531 2920 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
22:53:42.0734 2920 kmixer - ok
22:53:42.0890 2920 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
22:53:42.0937 2920 KSecDD - ok
22:53:43.0046 2920 lanmanserver (3a7c3cbe5d96b8ae96ce81f0b22fb527) C:\WINDOWS\System32\srvsvc.dll
22:53:43.0140 2920 lanmanserver - ok
22:53:43.0250 2920 lanmanworkstation (a8888a5327621856c0cec4e385f69309) C:\WINDOWS\System32\wkssvc.dll
22:53:43.0281 2920 lanmanworkstation - ok
22:53:43.0375 2920 lbrtfdc - ok
22:53:43.0500 2920 LmHosts (a7db739ae99a796d91580147e919cc59) C:\WINDOWS\System32\lmhsvc.dll
22:53:43.0718 2920 LmHosts - ok
22:53:43.0828 2920 mdmxsdk (a1e9d936eac07ee9386e87bac1377fad) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
22:53:43.0859 2920 mdmxsdk - ok
22:53:43.0921 2920 MEMSWEEP2 - ok
22:53:44.0015 2920 Messenger (986b1ff5814366d71e0ac5755c88f2d3) C:\WINDOWS\System32\msgsvc.dll
22:53:44.0218 2920 Messenger - ok
22:53:44.0390 2920 mferkdk (41fe2f288e05a6c8ab85dd56770ffbad) C:\WINDOWS\system32\drivers\mferkdk.sys
22:53:44.0406 2920 mferkdk - ok
22:53:44.0515 2920 mfesmfk (096b52ea918aa909ba5903d79e129005) C:\WINDOWS\system32\drivers\mfesmfk.sys
22:53:44.0531 2920 mfesmfk - ok
22:53:44.0609 2920 mmc_2K - ok
22:53:44.0718 2920 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
22:53:44.0953 2920 mnmdd - ok
22:53:45.0062 2920 mnmsrvc (d18f1f0c101d06a1c1adf26eed16fcdd) C:\WINDOWS\System32\mnmsrvc.exe
22:53:45.0296 2920 mnmsrvc - ok
22:53:45.0500 2920 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys
22:53:45.0703 2920 Modem - ok
22:53:45.0828 2920 MODEMCSA (1992e0d143b09653ab0f9c5e04b0fd65) C:\WINDOWS\system32\drivers\MODEMCSA.sys
22:53:46.0078 2920 MODEMCSA - ok
22:53:46.0203 2920 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys
22:53:46.0421 2920 Mouclass - ok
22:53:46.0546 2920 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys
22:53:46.0781 2920 mouhid - ok
22:53:46.0921 2920 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
22:53:47.0125 2920 MountMgr - ok
22:53:47.0218 2920 mraid35x - ok
22:53:47.0328 2920 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
22:53:47.0562 2920 MRxDAV - ok
22:53:47.0703 2920 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
22:53:47.0781 2920 MRxSmb - ok
22:53:47.0890 2920 MSDTC (a137f1470499a205abbb9aafb3b6f2b1) C:\WINDOWS\System32\msdtc.exe
22:53:48.0093 2920 MSDTC - ok
22:53:48.0218 2920 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
22:53:48.0437 2920 Msfs - ok
22:53:48.0500 2920 MSIServer - ok
22:53:48.0593 2920 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
22:53:48.0812 2920 MSKSSRV - ok
22:53:48.0953 2920 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
22:53:49.0156 2920 MSPCLOCK - ok
22:53:49.0296 2920 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
22:53:49.0515 2920 MSPQM - ok
22:53:49.0640 2920 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
22:53:49.0843 2920 mssmbios - ok
22:53:49.0968 2920 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
22:53:50.0015 2920 Mup - ok
22:53:50.0140 2920 napagent (0102140028fad045756796e1c685d695) C:\WINDOWS\System32\qagentrt.dll
22:53:50.0359 2920 napagent - ok
22:53:50.0531 2920 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
22:53:50.0750 2920 NDIS - ok
22:53:50.0859 2920 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
22:53:50.0906 2920 NdisTapi - ok
22:53:51.0031 2920 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
22:53:51.0250 2920 Ndisuio - ok
22:53:51.0390 2920 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
22:53:51.0609 2920 NdisWan - ok
22:53:51.0750 2920 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
22:53:51.0781 2920 NDProxy - ok
22:53:51.0921 2920 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
22:53:52.0125 2920 NetBIOS - ok
22:53:52.0265 2920 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
22:53:52.0468 2920 NetBT - ok
22:53:52.0593 2920 NetDDE (b857ba82860d7ff85ae29b095645563b) C:\WINDOWS\system32\netdde.exe
22:53:52.0796 2920 NetDDE - ok
22:53:52.0812 2920 NetDDEdsdm (b857ba82860d7ff85ae29b095645563b) C:\WINDOWS\system32\netdde.exe
22:53:53.0015 2920 NetDDEdsdm - ok
22:53:53.0187 2920 Netlogon (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
22:53:53.0406 2920 Netlogon - ok
22:53:53.0515 2920 Netman (13e67b55b3abd7bf3fe7aae5a0f9a9de) C:\WINDOWS\System32\netman.dll
22:53:53.0734 2920 Netman - ok
22:53:53.0906 2920 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
22:53:53.0921 2920 NetTcpPortSharing - ok
22:53:54.0078 2920 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
22:53:54.0296 2920 NIC1394 - ok
22:53:54.0453 2920 Nla (943337d786a56729263071623bbb9de5) C:\WINDOWS\System32\mswsock.dll
22:53:54.0484 2920 Nla - ok
22:53:54.0625 2920 nmwcd (c3963d85b721a7f80d8a55f4e2867a3a) C:\WINDOWS\system32\drivers\ccdcmb.sys
22:53:54.0859 2920 nmwcd - ok
22:53:54.0984 2920 nmwcdc (3859c69a77793180548802dac9f34a38) C:\WINDOWS\system32\drivers\ccdcmbo.sys
22:53:55.0125 2920 nmwcdc - ok
22:53:55.0250 2920 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
22:53:55.0468 2920 Npfs - ok
22:53:55.0562 2920 npkcrypt (fd9666a8eb88e713c18e2e90f6e746d0) C:\Program Files\NEXON\MapleStory\npkcrypt.sys
22:53:55.0562 2920 npkcrypt ( UnsignedFile.Multi.Generic ) - warning
22:53:55.0562 2920 npkcrypt - detected UnsignedFile.Multi.Generic (1)
22:53:55.0671 2920 NPPTNT2 (9131fe60adfab595c8da53ad6a06aa31) C:\WINDOWS\system32\npptNT2.sys
22:53:55.0687 2920 NPPTNT2 ( UnsignedFile.Multi.Generic ) - warning
22:53:55.0687 2920 NPPTNT2 - detected UnsignedFile.Multi.Generic (1)
22:53:55.0812 2920 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
22:53:56.0046 2920 Ntfs - ok
22:53:56.0140 2920 NtLmSsp (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\System32\lsass.exe
22:53:56.0343 2920 NtLmSsp - ok
22:53:56.0531 2920 NtmsSvc (156f64a3345bd23c600655fb4d10bc08) C:\WINDOWS\system32\ntmssvc.dll
22:53:56.0750 2920 NtmsSvc - ok
22:53:56.0859 2920 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
22:53:57.0109 2920 Null - ok
22:53:57.0515 2920 nv (8c0456001b6900114bbb1c548bd8aaf5) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
22:53:58.0031 2920 nv - ok
22:53:58.0140 2920 NVSvc (472a00d2183c9e5edb3e076272741812) C:\WINDOWS\system32\nvsvc32.exe
22:53:58.0187 2920 NVSvc - ok
22:53:58.0296 2920 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
22:53:58.0546 2920 NwlnkFlt - ok
22:53:58.0656 2920 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
22:53:58.0906 2920 NwlnkFwd - ok
22:53:59.0031 2920 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
22:53:59.0234 2920 ohci1394 - ok
22:53:59.0406 2920 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys
22:53:59.0609 2920 Parport - ok
22:53:59.0734 2920 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
22:53:59.0937 2920 PartMgr - ok
22:54:00.0046 2920 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
22:54:00.0265 2920 ParVdm - ok
22:54:00.0421 2920 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
22:54:00.0468 2920 pccsmcfd - ok
22:54:00.0593 2920 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys
22:54:00.0812 2920 PCI - ok
22:54:00.0906 2920 PCIDump - ok
22:54:01.0015 2920 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys
22:54:01.0250 2920 PCIIde - ok
22:54:01.0437 2920 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys
22:54:01.0640 2920 Pcmcia - ok
22:54:01.0750 2920 PCSUService (56e916d31fbc2d811d69c25e230f8f7e) C:\Program Files\PC Speed Up\PCSUService.exe
22:54:01.0765 2920 PCSUService - ok
22:54:01.0875 2920 PDCOMP - ok
22:54:01.0953 2920 PDFRAME - ok
22:54:02.0015 2920 pdiddcci - ok
22:54:02.0078 2920 PDRELI - ok
22:54:02.0156 2920 PDRFRAME - ok
22:54:02.0250 2920 perc2 - ok
22:54:02.0328 2920 perc2hib - ok
22:54:02.0437 2920 PfModNT - ok
22:54:02.0546 2920 PlugPlay (65df52f5b8b6e9bbd183505225c37315) C:\WINDOWS\system32\services.exe
22:54:02.0625 2920 PlugPlay - ok
22:54:02.0718 2920 Pml Driver HPZ12 (3cecda26586ca4db9be51241a6db7c3c) C:\WINDOWS\System32\HPZipm12.dll
22:54:02.0843 2920 Pml Driver HPZ12 - ok
22:54:02.0968 2920 Pnp680r (a1d7a9214b71ebbb6f31cb84aac15525) C:\WINDOWS\system32\DRIVERS\pnp680r.sys
22:54:03.0000 2920 Pnp680r - ok
22:54:03.0140 2920 PolicyAgent (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
22:54:03.0343 2920 PolicyAgent - ok
22:54:03.0500 2920 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
22:54:03.0703 2920 PptpMiniport - ok
22:54:03.0812 2920 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys
22:54:04.0031 2920 Processor - ok
22:54:04.0109 2920 ProtectedStorage (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
22:54:04.0312 2920 ProtectedStorage - ok
22:54:04.0437 2920 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
22:54:04.0656 2920 PSched - ok
22:54:04.0734 2920 PSI_SVC_2 (a6a7ad767bf5141665f5c675f671b3e1) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
22:54:04.0750 2920 PSI_SVC_2 - ok
22:54:04.0875 2920 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
22:54:05.0109 2920 Ptilink - ok
22:54:05.0203 2920 pwd_2k - ok
22:54:05.0343 2920 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\WINDOWS\system32\Drivers\PxHelp20.sys
22:54:05.0343 2920 PxHelp20 - ok
22:54:05.0453 2920 ql1080 - ok
22:54:05.0531 2920 Ql10wnt - ok
22:54:05.0609 2920 ql12160 - ok
22:54:05.0703 2920 ql1240 - ok
22:54:05.0781 2920 ql1280 - ok
22:54:05.0890 2920 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
22:54:06.0125 2920 RasAcd - ok
22:54:06.0234 2920 RasAuto (ad188be7bdf94e8df4ca0a55c00a5073) C:\WINDOWS\System32\rasauto.dll
22:54:06.0453 2920 RasAuto - ok
22:54:06.0562 2920 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
22:54:06.0781 2920 Rasl2tp - ok
22:54:06.0890 2920 RasMan (76a9a3cbeadd68cc57cda5e1d7448235) C:\WINDOWS\System32\rasmans.dll
22:54:07.0093 2920 RasMan - ok
22:54:07.0218 2920 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
22:54:07.0421 2920 RasPppoe - ok
22:54:07.0531 2920 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
22:54:07.0765 2920 Raspti - ok
22:54:07.0921 2920 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
22:54:08.0125 2920 Rdbss - ok
22:54:08.0234 2920 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
22:54:08.0468 2920 RDPCDD - ok
22:54:08.0593 2920 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
22:54:08.0812 2920 rdpdr - ok
22:54:08.0968 2920 RDPWD (5b3055daa788bd688594d2f5981f2a83) C:\WINDOWS\system32\drivers\RDPWD.sys
22:54:09.0015 2920 RDPWD - ok
22:54:09.0140 2920 RDSessMgr (3c37bf86641bda977c3bf8a840f3b7fa) C:\WINDOWS\system32\sessmgr.exe
22:54:09.0343 2920 RDSessMgr - ok
22:54:09.0515 2920 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys
22:54:09.0718 2920 redbook - ok
22:54:09.0859 2920 RemoteAccess (7e699ff5f59b5d9de5390e3c34c67cf5) C:\WINDOWS\System32\mprdim.dll
22:54:10.0078 2920 RemoteAccess - ok
22:54:10.0203 2920 RemoteRegistry (5b19b557b0c188210a56a6b699d90b8f) C:\WINDOWS\system32\regsvc.dll
22:54:10.0421 2920 RemoteRegistry - ok
22:54:10.0500 2920 RimSerPort - ok
22:54:10.0609 2920 RimUsb (f17713d108aca124a139fde877eef68a) C:\WINDOWS\system32\Drivers\RimUsb.sys
22:54:10.0656 2920 RimUsb - ok
22:54:10.0781 2920 RimVSerPort (2c4fb2e9f039287767c384e46ee91030) C:\WINDOWS\system32\DRIVERS\RimSerial.sys
22:54:10.0812 2920 RimVSerPort - ok
22:54:10.0968 2920 Rksample (bb7549bd94d1aac3599c7606c50c48a0) C:\WINDOWS\system32\DRIVERS\HSF_SAMP.sys
22:54:11.0203 2920 Rksample - ok
22:54:11.0328 2920 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys
22:54:11.0578 2920 ROOTMODEM - ok
22:54:11.0718 2920 Roxio UPnP Renderer 9 (afd61a7c48a3e15c86a6fadf0b69a2e4) C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
22:54:11.0734 2920 Roxio UPnP Renderer 9 - ok
22:54:11.0890 2920 Roxio Upnp Server 9 (efbb36e2bb02169d26e9980778fc20d3) C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
22:54:11.0906 2920 Roxio Upnp Server 9 - ok
22:54:12.0078 2920 RoxLiveShare9 (78e680a105f47b6aa0003bd23ed9fa51) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
22:54:12.0093 2920 RoxLiveShare9 - ok
22:54:12.0296 2920 RoxMediaDB9 (9d5c024170c376d7cc66ed853fda9068) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
22:54:12.0390 2920 RoxMediaDB9 - ok
22:54:12.0578 2920 RoxWatch9 (87f175539dbba297018aa7fcdd563ff7) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
22:54:12.0593 2920 RoxWatch9 - ok
22:54:12.0718 2920 RpcLocator (aaed593f84afa419bbae8572af87cf6a) C:\WINDOWS\System32\locator.exe
22:54:12.0906 2920 RpcLocator - ok
22:54:13.0046 2920 RpcSs (6b27a5c03dfb94b4245739065431322c) C:\WINDOWS\System32\rpcss.dll
22:54:13.0125 2920 RpcSs - ok
22:54:13.0218 2920 RSVP (471b3f9741d762abe75e9deea4787e47) C:\WINDOWS\System32\rsvp.exe
22:54:13.0468 2920 RSVP - ok
22:54:13.0578 2920 SamSs (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
22:54:13.0781 2920 SamSs - ok
22:54:13.0890 2920 SCardSvr (86d007e7a654b9a71d1d7d856b104353) C:\WINDOWS\System32\SCardSvr.exe
22:54:14.0109 2920 SCardSvr - ok
22:54:14.0234 2920 Schedule (0a9a7365a1ca4319aa7c1d6cd8e4eafa) C:\WINDOWS\system32\schedsvc.dll
22:54:14.0437 2920 Schedule - ok
22:54:14.0562 2920 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
22:54:14.0781 2920 Secdrv - ok
22:54:14.0890 2920 seclogon (cbe612e2bb6a10e3563336191eda1250) C:\WINDOWS\System32\seclogon.dll
22:54:15.0109 2920 seclogon - ok
22:54:15.0218 2920 SENS (7fdd5d0684eca8c1f68b4d99d124dcd0) C:\WINDOWS\system32\sens.dll
22:54:15.0421 2920 SENS - ok
22:54:15.0562 2920 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
22:54:15.0781 2920 serenum - ok
22:54:15.0906 2920 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys
22:54:16.0109 2920 Serial - ok
22:54:16.0234 2920 ServiceLayer (d0d2ff6132db177a5192891a8cc9578c) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
22:54:16.0312 2920 ServiceLayer ( UnsignedFile.Multi.Generic ) - warning
22:54:16.0312 2920 ServiceLayer - detected UnsignedFile.Multi.Generic (1)
22:54:16.0468 2920 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
22:54:16.0671 2920 Sfloppy - ok
22:54:16.0796 2920 SharedAccess (83f41d0d89645d7235c051ab1d9523ac) C:\WINDOWS\System32\ipnathlp.dll
22:54:17.0031 2920 SharedAccess - ok
22:54:17.0156 2920 ShellHWDetection (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
22:54:17.0187 2920 ShellHWDetection - ok
22:54:17.0265 2920 Simbad - ok
22:54:17.0406 2920 smwdm (564f8e5b3c0860bd18be78cabcfd5cca) C:\WINDOWS\system32\drivers\smwdm.sys
22:54:17.0484 2920 smwdm - ok
22:54:17.0609 2920 SoftFax (d9e8e0ce154a2f6430d9efabdf730867) C:\WINDOWS\system32\DRIVERS\HSF_FAXX.sys
22:54:17.0859 2920 SoftFax - ok
22:54:17.0953 2920 Sparrow - ok
22:54:18.0125 2920 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
22:54:18.0343 2920 splitter - ok
22:54:18.0468 2920 Spooler (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
22:54:18.0515 2920 Spooler - ok
22:54:18.0656 2920 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys
22:54:18.0859 2920 sr - ok
22:54:18.0968 2920 srservice (3805df0ac4296a34ba4bf93b346cc378) C:\WINDOWS\system32\srsvc.dll
22:54:19.0203 2920 srservice - ok
22:54:19.0328 2920 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
22:54:19.0421 2920 Srv - ok
22:54:19.0546 2920 SSDPSRV (0a5679b3714edab99e357057ee88fca6) C:\WINDOWS\System32\ssdpsrv.dll
22:54:19.0765 2920 SSDPSRV - ok
22:54:19.0890 2920 SSKBFD (8564bc9598be1705477b7fa61d657c2b) C:\WINDOWS\system32\Drivers\sskbfd.sys
22:54:19.0906 2920 SSKBFD - ok
22:54:20.0031 2920 stisvc (8bad69cbac032d4bbacfce0306174c30) C:\WINDOWS\system32\wiaservc.dll
22:54:20.0281 2920 stisvc - ok
22:54:20.0437 2920 StreamDispatcher (0aaf9a073b37eda0f479a6aae76b0fbf) C:\WINDOWS\system32\DRIVERS\strmdisp.sys
22:54:20.0453 2920 StreamDispatcher - ok
22:54:20.0640 2920 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
22:54:20.0843 2920 swenum - ok
22:54:20.0968 2920 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
22:54:21.0171 2920 swmidi - ok
22:54:21.0234 2920 SwPrv - ok
22:54:21.0312 2920 symc810 - ok
22:54:21.0390 2920 symc8xx - ok
22:54:21.0484 2920 sym_hi - ok
22:54:21.0578 2920 sym_u3 - ok
22:54:21.0718 2920 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
22:54:21.0921 2920 sysaudio - ok
22:54:22.0031 2920 SysmonLog (c7abbc59b43274b1109df6b24d617051) C:\WINDOWS\system32\smlogsvc.exe
22:54:22.0250 2920 SysmonLog - ok
22:54:22.0546 2920 TabletServicePen (099aee120cac4a43ce307a828998392f) C:\WINDOWS\system32\Pen_Tablet.exe
22:54:22.0843 2920 TabletServicePen - ok
22:54:23.0078 2920 TabletServiceWacom (7d81434924c4947dc29c00848e2a0029) C:\WINDOWS\system32\Wacom_Tablet.exe
22:54:23.0296 2920 TabletServiceWacom - ok
22:54:23.0437 2920 TapiSrv (3cb78c17bb664637787c9a1c98f79c38) C:\WINDOWS\System32\tapisrv.dll
22:54:23.0671 2920 TapiSrv - ok
22:54:23.0812 2920 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
22:54:23.0843 2920 Tcpip - ok
22:54:23.0968 2920 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
22:54:24.0187 2920 TDPIPE - ok
22:54:24.0312 2920 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
22:54:24.0515 2920 TDTCP - ok
22:54:24.0656 2920 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
22:54:24.0875 2920 TermDD - ok
22:54:25.0000 2920 TermService (ff3477c03be7201c294c35f684b3479f) C:\WINDOWS\System32\termsrv.dll
22:54:25.0234 2920 TermService - ok
22:54:25.0343 2920 Themes (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
22:54:25.0359 2920 Themes - ok
22:54:25.0468 2920 TlntSvr (db7205804759ff62c34e3efd8a4cc76a) C:\WINDOWS\System32\tlntsvr.exe
22:54:25.0703 2920 TlntSvr - ok
22:54:25.0812 2920 Tones (8021a499db46b2961c285168671cb9af) C:\WINDOWS\system32\DRIVERS\HSF_TONE.sys
22:54:26.0062 2920 Tones - ok
22:54:26.0156 2920 TosIde - ok
22:54:26.0265 2920 TrkWks (55bca12f7f523d35ca3cb833c725f54e) C:\WINDOWS\system32\trkwks.dll
22:54:26.0468 2920 TrkWks - ok
22:54:26.0593 2920 UdfReadr_xp (3a28afb82559b2cb4d6bf51e6ccd6678) C:\WINDOWS\system32\drivers\UdfReadr_xp.sys
22:54:26.0609 2920 UdfReadr_xp ( Virus.Win32.ZAccess.k ) - infected
22:54:26.0609 2920 UdfReadr_xp - detected Virus.Win32.ZAccess.k (0)
22:54:26.0734 2920 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
22:54:26.0953 2920 Udfs - ok
22:54:27.0046 2920 ultra - ok
22:54:27.0187 2920 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
22:54:27.0453 2920 Update - ok
22:54:27.0562 2920 upnphost (1ebafeb9a3fbdc41b8d9c7f0f687ad91) C:\WINDOWS\System32\upnphost.dll
22:54:27.0765 2920 upnphost - ok
22:54:27.0890 2920 upperdev (0ccadc7391021376edbb8aa649d04e68) C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
22:54:28.0000 2920 upperdev - ok
22:54:28.0109 2920 UPS (05365fb38fca1e98f7a566aaaf5d1815) C:\WINDOWS\System32\ups.exe
22:54:28.0312 2920 UPS - ok
22:54:28.0453 2920 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys
22:54:28.0484 2920 USBAAPL - ok
22:54:28.0625 2920 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
22:54:28.0843 2920 usbccgp - ok
22:54:28.0968 2920 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
22:54:29.0171 2920 usbehci - ok
22:54:29.0296 2920 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
22:54:29.0500 2920 usbhub - ok
22:54:29.0625 2920 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
22:54:29.0843 2920 usbprint - ok
22:54:29.0984 2920 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
22:54:30.0187 2920 usbscan - ok
22:54:30.0312 2920 usbser (1c888b000c2f9492f4b15b5b6b84873e) C:\WINDOWS\system32\drivers\usbser.sys
22:54:30.0531 2920 usbser - ok
22:54:30.0640 2920 UsbserFilt (68b4f83cccf70a2ff32ee142c234332a) C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
22:54:30.0765 2920 UsbserFilt - ok
22:54:30.0875 2920 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
22:54:31.0093 2920 USBSTOR - ok
22:54:31.0218 2920 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
22:54:31.0421 2920 usbuhci - ok
22:54:31.0593 2920 V124 (269c0ade94b90029b12497747be408cb) C:\WINDOWS\system32\DRIVERS\HSF_V124.sys
22:54:31.0875 2920 V124 - ok
22:54:32.0015 2920 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
22:54:32.0234 2920 VgaSave - ok
22:54:32.0312 2920 ViaIde - ok
22:54:32.0453 2920 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys
22:54:32.0687 2920 VolSnap - ok
22:54:32.0796 2920 VSS (7a9db3a67c333bf0bd42e42b8596854b) C:\WINDOWS\System32\vssvc.exe
22:54:33.0015 2920 VSS - ok
22:54:33.0171 2920 W32Time (54af4b1d5459500ef0937f6d33b1914f) C:\WINDOWS\system32\w32time.dll
22:54:33.0421 2920 W32Time - ok
22:54:33.0546 2920 wacmoumonitor (9a03558c37e919b9d6a50864aea0a168) C:\WINDOWS\system32\DRIVERS\wacmoumonitor.sys
22:54:33.0562 2920 wacmoumonitor - ok
22:54:33.0671 2920 wacommousefilter (427a8bc96f16c40df81c2d2f4edd32dd) C:\WINDOWS\system32\DRIVERS\wacommousefilter.sys
22:54:33.0687 2920 wacommousefilter - ok
22:54:33.0812 2920 wacomvhid (51d580f30d1a1f2ea4965af6abc2bcb2) C:\WINDOWS\system32\DRIVERS\wacomvhid.sys
22:54:33.0828 2920 wacomvhid - ok
22:54:33.0906 2920 WacomVKHid - ok
22:54:34.0031 2920 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
22:54:34.0234 2920 Wanarp - ok
22:54:34.0375 2920 Wdf01000 (d918617b46457b9ac28027722e30f647) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
22:54:34.0453 2920 Wdf01000 - ok
22:54:34.0546 2920 WDICA - ok
22:54:34.0671 2920 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
22:54:34.0890 2920 wdmaud - ok
22:54:35.0000 2920 WebClient (77a354e28153ad2d5e120a5a8687bc06) C:\WINDOWS\System32\webclnt.dll
22:54:35.0218 2920 WebClient - ok
22:54:35.0281 2920 WebrootSpySweeperService - ok
22:54:35.0421 2920 winachsf (533adeb3b84c2e24d9a85d55f3d69955) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
22:54:35.0484 2920 winachsf - ok
22:54:35.0625 2920 winmgmt (2d0e4ed081963804ccc196a0929275b5) C:\WINDOWS\system32\wbem\WMIsvc.dll
22:54:35.0828 2920 winmgmt - ok
22:54:35.0890 2920 winpowermanager - ok
22:54:36.0031 2920 WLSetupSvc (94a85e956a065e23e0010a6a7826243b) C:\Program Files\Windows Live\installer\WLSetupSvc.exe
22:54:36.0109 2920 WLSetupSvc - ok
22:54:36.0234 2920 WmBEnum (bc3ecbcb40147bdae3ad2fd0b4b346d8) C:\WINDOWS\system32\drivers\WmBEnum.sys
22:54:36.0281 2920 WmBEnum - ok
22:54:36.0375 2920 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
22:54:36.0437 2920 WmdmPmSN - ok
22:54:36.0562 2920 WmFilter (19f9881d8b3484fedb605d0216876898) C:\WINDOWS\system32\drivers\WmFilter.sys
22:54:36.0609 2920 WmFilter - ok
22:54:36.0734 2920 Wmi (e76f8807070ed04e7408a86d6d3a6137) C:\WINDOWS\System32\advapi32.dll
22:54:36.0843 2920 Wmi - ok
22:54:36.0968 2920 WmiApSrv (e0673f1106e62a68d2257e376079f821) C:\WINDOWS\System32\wbem\wmiapsrv.exe
22:54:37.0187 2920 WmiApSrv - ok
22:54:37.0312 2920 WMPNetworkSvc (f74e3d9a7fa9556c3bbb14d4e5e63d3b) C:\Program Files\Windows Media Player\WMPNetwk.exe
22:54:37.0390 2920 WMPNetworkSvc - ok
22:54:37.0562 2920 WmVirHid (7a51545a6409a25eedbdbd97d019e8cc) C:\WINDOWS\system32\drivers\WmVirHid.sys
22:54:37.0609 2920 WmVirHid - ok
22:54:37.0750 2920 WmXlCore (1f083b3bc73017e60c3ca85cf4a70753) C:\WINDOWS\system32\drivers\WmXlCore.sys
22:54:37.0781 2920 WmXlCore - ok
22:54:37.0921 2920 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
22:54:37.0953 2920 WpdUsb - ok
22:54:38.0078 2920 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
22:54:38.0312 2920 WS2IFSL - ok
22:54:38.0453 2920 wscsvc (7c278e6408d1dce642230c0585a854d5) C:\WINDOWS\system32\wscsvc.dll
22:54:38.0687 2920 wscsvc - ok
22:54:38.0765 2920 WTouchService (77a3988cf9b5848bcbc9fb6a79508a56) C:\Program Files\WTouch\WTouchService.exe
22:54:38.0781 2920 WTouchService - ok
22:54:38.0890 2920 wuauserv (35321fb577cdc98ce3eb3a3eb9e4610a) C:\WINDOWS\system32\wuauserv.dll
22:54:39.0093 2920 wuauserv - ok
22:54:39.0218 2920 WudfPf (eaa6324f51214d2f6718977ec9ce0def) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
22:54:39.0265 2920 WudfPf - ok
22:54:39.0390 2920 WudfRd (f91ff1e51fca30b3c3981db7d5924252) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
22:54:39.0437 2920 WudfRd - ok
22:54:39.0546 2920 WudfSvc (ddee3682fe97037c45f4d7ab467cb8b6) C:\WINDOWS\System32\WUDFSvc.dll
22:54:39.0578 2920 WudfSvc - ok
22:54:39.0718 2920 WZCSVC (81dc3f549f44b1c1fff022dec9ecf30b) C:\WINDOWS\System32\wzcsvc.dll
22:54:39.0984 2920 WZCSVC - ok
22:54:40.0109 2920 xmlprov (295d21f14c335b53cb8154e5b1f892b9) C:\WINDOWS\System32\xmlprov.dll
22:54:40.0328 2920 xmlprov - ok
22:54:40.0375 2920 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
22:54:40.0453 2920 \Device\Harddisk0\DR0 - ok
22:54:40.0468 2920 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1
22:54:40.0531 2920 \Device\Harddisk1\DR1 - ok
22:54:40.0562 2920 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk2\DR2
22:54:40.0750 2920 \Device\Harddisk2\DR2 - ok
22:54:40.0765 2920 Boot (0x1200) (51e486b4bbd2b54718d1b283864656a9) \Device\Harddisk0\DR0\Partition0
22:54:40.0765 2920 \Device\Harddisk0\DR0\Partition0 - ok
22:54:40.0781 2920 Boot (0x1200) (0009e0c38338d497567a9e05094214e9) \Device\Harddisk1\DR1\Partition0
22:54:40.0781 2920 \Device\Harddisk1\DR1\Partition0 - ok
22:54:40.0796 2920 Boot (0x1200) (4af7f27a91d209f3c5b055b7915d12f7) \Device\Harddisk2\DR2\Partition0
22:54:40.0796 2920 \Device\Harddisk2\DR2\Partition0 - ok
22:54:40.0812 2920 ============================================================
22:54:40.0812 2920 Scan finished
22:54:40.0812 2920 ============================================================
22:54:40.0953 0732 Detected object count: 11
22:54:40.0953 0732 Actual detected object count: 11
22:55:56.0125 0732 cdudf_xp ( UnsignedFile.Multi.Generic ) - skipped by user
22:55:56.0125 0732 cdudf_xp ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:55:56.0125 0732 Creative Service for CDROM Access ( UnsignedFile.Multi.Generic ) - skipped by user
22:55:56.0125 0732 Creative Service for CDROM Access ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:55:56.0125 0732 CTDevice_Srv ( UnsignedFile.Multi.Generic ) - skipped by user
22:55:56.0125 0732 CTDevice_Srv ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:55:56.0140 0732 CTUPnPSv ( UnsignedFile.Multi.Generic ) - skipped by user
22:55:56.0140 0732 CTUPnPSv ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:55:56.0156 0732 fasttx2k ( UnsignedFile.Multi.Generic ) - skipped by user
22:55:56.0156 0732 fasttx2k ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:55:56.0156 0732 FLEXnet Licensing Service ( UnsignedFile.Multi.Generic ) - skipped by user
22:55:56.0156 0732 FLEXnet Licensing Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:55:56.0171 0732 IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
22:55:56.0171 0732 IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:55:56.0187 0732 npkcrypt ( UnsignedFile.Multi.Generic ) - skipped by user
22:55:56.0187 0732 npkcrypt ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:55:56.0187 0732 NPPTNT2 ( UnsignedFile.Multi.Generic ) - skipped by user
22:55:56.0187 0732 NPPTNT2 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:55:56.0203 0732 ServiceLayer ( UnsignedFile.Multi.Generic ) - skipped by user
22:55:56.0203 0732 ServiceLayer ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:55:56.0343 0732 C:\WINDOWS\system32\drivers\UdfReadr_xp.sys - copied to quarantine
22:55:56.0359 0732 VerifyFileNameVersionInfo: GetFileVersionInfoSizeW(C:\WINDOWS\system32\drivers\udfreadr_xp.sys) error 1813
22:55:56.0531 0732 Backup copy not found, trying to cure infected file..
22:55:56.0531 0732 C:\WINDOWS\system32\drivers\UdfReadr_xp.sys - Cure failed (FFFFFFFF)
22:55:56.0531 0732 C:\WINDOWS\system32\drivers\UdfReadr_xp.sys - processing error
22:56:01.0656 0732 UdfReadr_xp ( Virus.Win32.ZAccess.k ) - User select action: Cure
22:56:25.0718 3784 ============================================================
22:56:25.0718 3784 Scan started
22:56:25.0718 3784 Mode: Manual; SigCheck; TDLFS;
22:56:25.0718 3784 ============================================================
22:56:26.0046 3784 aawservice (17067069b9a7865028c1f2e6971d0ccc) C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
22:56:26.0109 3784 aawservice - ok
22:56:26.0187 3784 Abiosdsk - ok
22:56:26.0281 3784 abp480n5 - ok
22:56:26.0406 3784 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
22:56:26.0625 3784 ACPI - ok
22:56:26.0734 3784 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys
22:56:26.0968 3784 ACPIEC - ok
22:56:27.0109 3784 AdobeActiveFileMonitor7.0 (3fd8dc2c9735c2aa70155102cfb93eda) C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
22:56:27.0125 3784 AdobeActiveFileMonitor7.0 - ok
22:56:27.0218 3784 adpu160m - ok
22:56:27.0328 3784 aeaudio (11c04b17ed2abbb4833694bcd644ac90) C:\WINDOWS\system32\drivers\aeaudio.sys
22:56:27.0359 3784 aeaudio - ok
22:56:27.0500 3784 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
22:56:27.0703 3784 aec - ok
22:56:27.0859 3784 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
22:56:27.0890 3784 AFD - ok
22:56:28.0031 3784 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
22:56:28.0250 3784 agp440 - ok
22:56:28.0343 3784 Aha154x - ok
22:56:28.0421 3784 aic78u2 - ok
22:56:28.0515 3784 aic78xx - ok
22:56:28.0625 3784 Alerter (a9a3daa780ca6c9671a19d52456705b4) C:\WINDOWS\system32\alrsvc.dll
22:56:28.0828 3784 Alerter - ok
22:56:28.0921 3784 ALG (8c515081584a38aa007909cd02020b3d) C:\WINDOWS\System32\alg.exe
22:56:29.0125 3784 ALG - ok
22:56:29.0203 3784 AliIde - ok
22:56:29.0281 3784 amsint - ok
22:56:29.0421 3784 Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
22:56:29.0437 3784 Apple Mobile Device - ok
22:56:29.0578 3784 AppMgmt (d8849f77c0b66226335a59d26cb4edc6) C:\WINDOWS\System32\appmgmts.dll
22:56:29.0812 3784 AppMgmt - ok
22:56:29.0937 3784 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
22:56:30.0156 3784 Arp1394 - ok
22:56:30.0265 3784 asc - ok
22:56:30.0343 3784 asc3350p - ok
22:56:30.0421 3784 asc3550 - ok
22:56:30.0562 3784 aspnet_state (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
22:56:30.0578 3784 aspnet_state - ok
22:56:30.0703 3784 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
22:56:30.0906 3784 AsyncMac - ok
22:56:31.0031 3784 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
22:56:31.0234 3784 atapi - ok
22:56:31.0296 3784 Atdisk - ok
22:56:31.0421 3784 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
22:56:31.0687 3784 Atmarpc - ok
22:56:31.0796 3784 AudioSrv (def7a7882bec100fe0b2ce2549188f9d) C:\WINDOWS\System32\audiosrv.dll
22:56:32.0000 3784 AudioSrv - ok
22:56:32.0093 3784 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
22:56:32.0328 3784 audstub - ok
22:56:32.0453 3784 basic2 (1b9c81ab9a456eabd9f8335f04b5f495) C:\WINDOWS\system32\DRIVERS\HSF_BSC2.sys
22:56:32.0718 3784 basic2 - ok
22:56:32.0859 3784 bcm4sbxp (c0541cd42e39af45be203e677351f310) C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys
22:56:32.0875 3784 bcm4sbxp - ok
22:56:32.0984 3784 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
22:56:33.0218 3784 Beep - ok
22:56:33.0328 3784 BITS (574738f61fca2935f5265dc4e5691314) C:\WINDOWS\system32\qmgr.dll
22:56:33.0562 3784 BITS - ok
22:56:33.0687 3784 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe
22:56:33.0703 3784 Bonjour Service - ok
22:56:33.0812 3784 Browser (a06ce3399d16db864f55faeb1f1927a9) C:\WINDOWS\System32\browser.dll
22:56:34.0031 3784 Browser - ok
22:56:34.0046 3784 catchme - ok
22:56:34.0171 3784 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
22:56:34.0406 3784 cbidf2k - ok
22:56:34.0500 3784 cd20xrnt - ok
22:56:34.0609 3784 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
22:56:34.0843 3784 Cdaudio - ok
22:56:34.0968 3784 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
22:56:35.0171 3784 Cdfs - ok
22:56:35.0296 3784 Cdr4_xp (837eef65af62d4e8a37c41d3879f7274) C:\WINDOWS\system32\drivers\Cdr4_xp.sys
22:56:35.0312 3784 Cdr4_xp - ok
22:56:35.0406 3784 Cdralw2k (579da2f9f5401f55dae2cf8779d61dfc) C:\WINDOWS\system32\drivers\Cdralw2k.sys
22:56:35.0421 3784 Cdralw2k - ok
22:56:35.0531 3784 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
22:56:35.0750 3784 Cdrom - ok
22:56:35.0875 3784 cdudf_xp (5cc1f217fbd3e0f0ac7e4042aa242ee0) C:\WINDOWS\system32\drivers\cdudf_xp.sys
22:56:35.0906 3784 cdudf_xp ( UnsignedFile.Multi.Generic ) - warning
22:56:35.0906 3784 cdudf_xp - detected UnsignedFile.Multi.Generic (1)
22:56:35.0984 3784 cfosspeed - ok
22:56:36.0062 3784 Changer - ok
22:56:36.0156 3784 CiSvc (1cfe720eb8d93a7158a4ebc3ab178bde) C:\WINDOWS\system32\cisvc.exe
22:56:36.0359 3784 CiSvc - ok
22:56:36.0484 3784 ClipSrv (34cbe729f38138217f9c80212a2a0c82) C:\WINDOWS\system32\clipsrv.exe
22:56:36.0671 3784 ClipSrv - ok
22:56:36.0781 3784 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:56:36.0796 3784 clr_optimization_v2.0.50727_32 - ok
22:56:36.0890 3784 CmdIde - ok
22:56:36.0953 3784 COMSysApp - ok
22:56:37.0046 3784 Cpqarray - ok
22:56:37.0156 3784 Creative Service for CDROM Access (3c8b6609712f4ff78e521f6dcfc4032b) C:\WINDOWS\System32\CTsvcCDA.EXE
22:56:37.0156 3784 Creative Service for CDROM Access ( UnsignedFile.Multi.Generic ) - warning
22:56:37.0156 3784 Creative Service for CDROM Access - detected UnsignedFile.Multi.Generic (1)
22:56:37.0265 3784 CryptSvc (3d4e199942e29207970e04315d02ad3b) C:\WINDOWS\System32\cryptsvc.dll
22:56:37.0484 3784 CryptSvc - ok
22:56:37.0609 3784 CTDevice_Srv (a5bea0e5c297f5f3835638a87e512fba) C:\Program Files\Creative\Shared Files\CTDevSrv.exe
22:56:37.0625 3784 CTDevice_Srv ( UnsignedFile.Multi.Generic ) - warning
22:56:37.0625 3784 CTDevice_Srv - detected UnsignedFile.Multi.Generic (1)
22:56:37.0781 3784 CTUPnPSv (8e26d772f53b7883a651e0e4a9598f21) C:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe
22:56:37.0812 3784 CTUPnPSv ( UnsignedFile.Multi.Generic ) - warning
22:56:37.0812 3784 CTUPnPSv - detected UnsignedFile.Multi.Generic (1)
22:56:37.0906 3784 dac2w2k - ok
22:56:37.0984 3784 dac960nt - ok
22:56:38.0109 3784 DcomLaunch (6b27a5c03dfb94b4245739065431322c) C:\WINDOWS\system32\rpcss.dll
22:56:38.0187 3784 DcomLaunch - ok
22:56:38.0296 3784 Dhcp (5e38d7684a49cacfb752b046357e0589) C:\WINDOWS\System32\dhcpcsvc.dll
22:56:38.0500 3784 Dhcp - ok
22:56:38.0625 3784 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
22:56:38.0828 3784 Disk - ok
22:56:38.0890 3784 dmadmin - ok
22:56:39.0015 3784 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys
22:56:39.0250 3784 dmboot - ok
22:56:39.0390 3784 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys
22:56:39.0593 3784 dmio - ok
22:56:39.0703 3784 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
22:56:39.0968 3784 dmload - ok
22:56:40.0062 3784 dmserver (57edec2e5f59f0335e92f35184bc8631) C:\WINDOWS\System32\dmserver.dll
22:56:40.0265 3784 dmserver - ok
22:56:40.0406 3784 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
22:56:40.0609 3784 DMusic - ok
22:56:40.0718 3784 Dnscache (5f7e24fa9eab896051ffb87f840730d2) C:\WINDOWS\System32\dnsrslvr.dll
22:56:40.0734 3784 Dnscache - ok
22:56:40.0890 3784 Dot3svc (0f0f6e687e5e15579ef4da8dd6945814) C:\WINDOWS\System32\dot3svc.dll
22:56:41.0109 3784 Dot3svc - ok
22:56:41.0234 3784 dot4 (3e4b043f8bc6be1d4820cc6c9c500306) C:\WINDOWS\system32\DRIVERS\Dot4.sys
22:56:41.0453 3784 dot4 - ok
22:56:41.0609 3784 Dot4Print (77ce63a8a34ae23d9fe4c7896d1debe7) C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys
22:56:41.0859 3784 Dot4Print - ok
22:56:41.0968 3784 dot4usb (6ec3af6bb5b30e488a0c559921f012e1) C:\WINDOWS\system32\DRIVERS\dot4usb.sys
22:56:42.0203 3784 dot4usb - ok
22:56:42.0281 3784 dpti2o - ok
22:56:42.0406 3784 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
22:56:42.0609 3784 drmkaud - ok
22:56:42.0703 3784 dump_wmimmc - ok
22:56:42.0796 3784 dvd_2K - ok
22:56:42.0890 3784 EapHost (2187855a7703adef0cef9ee4285182cc) C:\WINDOWS\System32\eapsvc.dll
22:56:43.0093 3784 EapHost - ok
22:56:43.0203 3784 ERSvc (bc93b4a066477954555966d77fec9ecb) C:\WINDOWS\System32\ersvc.dll
22:56:43.0421 3784 ERSvc - ok
22:56:43.0578 3784 Eventlog (65df52f5b8b6e9bbd183505225c37315) C:\WINDOWS\system32\services.exe
22:56:43.0640 3784 Eventlog - ok
22:56:43.0750 3784 EventSystem (d4991d98f2db73c60d042f1aef79efae) C:\WINDOWS\System32\es.dll
22:56:43.0781 3784 EventSystem - ok
22:56:43.0921 3784 Fallback (c823debe2548656549f84a875d65237b) C:\WINDOWS\system32\DRIVERS\HSF_FALL.sys
22:56:44.0125 3784 Fallback - ok
22:56:44.0250 3784 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
22:56:44.0468 3784 Fastfat - ok
22:56:44.0578 3784 fasttx2k (82f8a9ed1525202f720b9bb012449225) C:\WINDOWS\system32\DRIVERS\fasttx2k.sys
22:56:44.0609 3784 fasttx2k ( UnsignedFile.Multi.Generic ) - warning
22:56:44.0609 3784 fasttx2k - detected UnsignedFile.Multi.Generic (1)
22:56:44.0734 3784 FastUserSwitchingCompatibility (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
22:56:44.0750 3784 FastUserSwitchingCompatibility - ok
22:56:44.0875 3784 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
22:56:45.0078 3784 Fdc - ok
22:56:45.0203 3784 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys
22:56:45.0406 3784 Fips - ok
22:56:45.0500 3784 FLEXnet Licensing Service (f76d04f7413b07daa029f6520b64b4e8) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
22:56:45.0562 3784 FLEXnet Licensing Service ( UnsignedFile.Multi.Generic ) - warning
22:56:45.0562 3784 FLEXnet Licensing Service - detected UnsignedFile.Multi.Generic (1)
22:56:45.0687 3784 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
22:56:45.0906 3784 Flpydisk - ok
22:56:46.0031 3784 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
22:56:46.0234 3784 FltMgr - ok
22:56:46.0406 3784 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
22:56:46.0421 3784 FontCache3.0.0.0 - ok
22:56:46.0531 3784 Fsks (6483414841d4cab6c3b4db2ac6edd70b) C:\WINDOWS\system32\DRIVERS\HSF_FSKS.sys
22:56:46.0796 3784 Fsks - ok
22:56:46.0937 3784 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
22:56:47.0171 3784 Fs_Rec - ok
22:56:47.0296 3784 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
22:56:47.0531 3784 Ftdisk - ok
22:56:47.0656 3784 gameenum (065639773d8b03f33577f6cdaea21063) C:\WINDOWS\system32\DRIVERS\gameenum.sys
22:56:47.0859 3784 gameenum - ok
22:56:47.0984 3784 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
22:56:48.0000 3784 GEARAspiWDM - ok
22:56:48.0078 3784 getPlusHelper (fd7e9aba274df75e08320420b8e9a1d5) C:\Program Files\NOS\bin\getPlus_Helper.dll
22:56:48.0093 3784 getPlusHelper - ok
22:56:48.0218 3784 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
22:56:48.0421 3784 Gpc - ok
22:56:48.0531 3784 gupdate1c9b7481c74f9ef (626a24ed1228580b9518c01930936df9) C:\Program Files\Google\Update\GoogleUpdate.exe
22:56:48.0546 3784 gupdate1c9b7481c74f9ef - ok
22:56:48.0578 3784 gupdatem (626a24ed1228580b9518c01930936df9) C:\Program Files\Google\Update\GoogleUpdate.exe
22:56:48.0593 3784 gupdatem - ok
22:56:48.0718 3784 hamachi (833051c6c6c42117191935f734cfbd97) C:\WINDOWS\system32\DRIVERS\hamachi.sys
22:56:48.0734 3784 hamachi - ok
22:56:48.0812 3784 Hamachi2Svc (fa89c0429821c7c429eec7a0ce1c02d3) F:\Gleep\minecraft\New Folder\hamachi-2.exe
22:56:48.0890 3784 Hamachi2Svc - ok
22:56:49.0015 3784 helpsvc (4fcca060dfe0c51a09dd5c3843888bcd) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
22:56:49.0218 3784 helpsvc - ok
22:56:49.0328 3784 HidServ (deb04da35cc871b6d309b77e1443c796) C:\WINDOWS\System32\hidserv.dll
22:56:49.0515 3784 HidServ - ok
22:56:49.0640 3784 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
22:56:49.0843 3784 HidUsb - ok
22:56:49.0937 3784 hkmsvc (8878bd685e490239777bfe51320b88e9) C:\WINDOWS\System32\kmsvc.dll
22:56:50.0140 3784 hkmsvc - ok
22:56:50.0218 3784 hpn - ok
22:56:50.0328 3784 HSFHWBS2 (127f6638eb09050f5a490bbd6507b37a) C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys
22:56:50.0359 3784 HSFHWBS2 - ok
22:56:50.0515 3784 HSF_DP (0ade6a9622ff72599ef2980036112f17) C:\WINDOWS\system32\DRIVERS\HSF_DP.sys
22:56:50.0578 3784 HSF_DP - ok
22:56:50.0796 3784 hsf_msft (74e379857d4c0dfb56de2d19b8f4c434) C:\WINDOWS\system32\DRIVERS\HSF_MSFT.sys
22:56:51.0031 3784 hsf_msft - ok
22:56:51.0156 3784 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
22:56:51.0187 3784 HTTP - ok
22:56:51.0281 3784 HTTPFilter (6100a808600f44d999cebdef8841c7a3) C:\WINDOWS\System32\w3ssl.dll
22:56:51.0500 3784 HTTPFilter - ok
22:56:51.0593 3784 i2omgmt - ok
22:56:51.0687 3784 i2omp - ok
22:56:51.0812 3784 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
22:56:52.0046 3784 i8042prt - ok
22:56:52.0218 3784 IDriverT (6f95324909b502e2651442c1548ab12f) C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
22:56:52.0234 3784 IDriverT ( UnsignedFile.Multi.Generic ) - warning
22:56:52.0234 3784 IDriverT - detected UnsignedFile.Multi.Generic (1)
22:56:52.0437 3784 idsvc (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
22:56:52.0484 3784 idsvc - ok
22:56:52.0687 3784 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
22:56:52.0890 3784 Imapi - ok
22:56:53.0000 3784 ImapiService (30deaf54a9755bb8546168cfe8a6b5e1) C:\WINDOWS\system32\imapi.exe
22:56:53.0203 3784 ImapiService - ok
22:56:53.0312 3784 ini910u - ok
22:56:53.0437 3784 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys
22:56:53.0656 3784 IntelIde - ok
22:56:53.0765 3784 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys
22:56:53.0968 3784 intelppm - ok
22:56:54.0093 3784 ip6fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
22:56:54.0312 3784 ip6fw - ok
22:56:54.0421 3784 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
22:56:54.0656 3784 IpFilterDriver - ok
22:56:54.0796 3784 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
22:56:55.0000 3784 IpInIp - ok
22:56:55.0140 3784 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
22:56:55.0359 3784 IpNat - ok
22:56:55.0453 3784 iPod Service (178fe38b7740f598391eb2f51ae4ccac) C:\Program Files\iPod\bin\iPodService.exe
22:56:55.0500 3784 iPod Service - ok
22:56:55.0625 3784 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
22:56:55.0828 3784 IPSec - ok
22:56:55.0953 3784 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
22:56:56.0156 3784 IRENUM - ok
22:56:56.0296 3784 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
22:56:56.0500 3784 isapnp - ok
22:56:56.0640 3784 JavaQuickStarterService (e731921db2e17dcd3db472fad5549c57) C:\Program Files\Java\jre6\bin\jqs.exe
22:56:56.0671 3784 JavaQuickStarterService - ok
22:56:56.0812 3784 K56 (9c5e3fdbfcc30cf71a49ca178b9ad442) C:\WINDOWS\system32\DRIVERS\HSF_K56K.sys
22:56:57.0078 3784 K56 - ok
22:56:57.0234 3784 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
22:56:57.0421 3784 Kbdclass - ok
22:56:57.0578 3784 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
22:56:57.0781 3784 kbdhid - ok
22:56:57.0890 3784 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
22:56:58.0109 3784 kmixer - ok
22:56:58.0265 3784 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
22:56:58.0281 3784 KSecDD - ok
22:56:58.0390 3784 lanmanserver (3a7c3cbe5d96b8ae96ce81f0b22fb527) C:\WINDOWS\System32\srvsvc.dll
22:56:58.0421 3784 lanmanserver - ok
22:56:58.0578 3784 lanmanworkstation (a8888a5327621856c0cec4e385f69309) C:\WINDOWS\System32\wkssvc.dll
22:56:58.0609 3784 lanmanworkstation - ok
22:56:58.0703 3784 lbrtfdc - ok
22:56:58.0812 3784 LmHosts (a7db739ae99a796d91580147e919cc59) C:\WINDOWS\System32\lmhsvc.dll
22:56:59.0015 3784 LmHosts - ok
22:56:59.0140 3784 mdmxsdk (a1e9d936eac07ee9386e87bac1377fad) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
22:56:59.0156 3784 mdmxsdk - ok
22:56:59.0250 3784 MEMSWEEP2 - ok
22:56:59.0343 3784 Messenger (986b1ff5814366d71e0ac5755c88f2d3) C:\WINDOWS\System32\msgsvc.dll
22:56:59.0546 3784 Messenger - ok
22:56:59.0656 3784 mferkdk (41fe2f288e05a6c8ab85dd56770ffbad) C:\WINDOWS\system32\drivers\mferkdk.sys
22:56:59.0671 3784 mferkdk - ok
22:56:59.0796 3784 mfesmfk (096b52ea918aa909ba5903d79e129005) C:\WINDOWS\system32\drivers\mfesmfk.sys
22:56:59.0812 3784 mfesmfk - ok
22:56:59.0906 3784 mmc_2K - ok
22:57:00.0015 3784 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
22:57:00.0234 3784 mnmdd - ok
22:57:00.0343 3784 mnmsrvc (d18f1f0c101d06a1c1adf26eed16fcdd) C:\WINDOWS\System32\mnmsrvc.exe
22:57:00.0531 3784 mnmsrvc - ok
22:57:00.0656 3784 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys
22:57:00.0859 3784 Modem - ok
22:57:00.0968 3784 MODEMCSA (1992e0d143b09653ab0f9c5e04b0fd65) C:\WINDOWS\system32\drivers\MODEMCSA.sys
22:57:01.0187 3784 MODEMCSA - ok
22:57:01.0328 3784 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys
22:57:01.0546 3784 Mouclass - ok
22:57:01.0671 3784 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys
22:57:01.0890 3784 mouhid - ok
22:57:02.0000 3784 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
22:57:02.0218 3784 MountMgr - ok
22:57:02.0328 3784 mraid35x - ok
22:57:02.0453 3784 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
22:57:02.0687 3784 MRxDAV - ok
22:57:02.0828 3784 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
22:57:02.0875 3784 MRxSmb - ok
22:57:03.0000 3784 MSDTC (a137f1470499a205abbb9aafb3b6f2b1) C:\WINDOWS\System32\msdtc.exe
22:57:03.0218 3784 MSDTC - ok
22:57:03.0375 3784 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
22:57:03.0578 3784 Msfs - ok
22:57:03.0640 3784 MSIServer - ok
22:57:03.0734 3784 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
22:57:03.0953 3784 MSKSSRV - ok
22:57:04.0093 3784 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
22:57:04.0296 3784 MSPCLOCK - ok
22:57:04.0421 3784 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
22:57:04.0640 3784 MSPQM - ok
22:57:04.0781 3784 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
22:57:04.0984 3784 mssmbios - ok
22:57:05.0109 3784 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
22:57:05.0125 3784 Mup - ok
22:57:05.0218 3784 napagent (0102140028fad045756796e1c685d695) C:\WINDOWS\System32\qagentrt.dll
22:57:05.0437 3784 napagent - ok
22:57:05.0609 3784 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
22:57:05.0828 3784 NDIS - ok
22:57:05.0953 3784 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
22:57:05.0984 3784 NdisTapi - ok
22:57:06.0109 3784 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
22:57:06.0312 3784 Ndisuio - ok
22:57:06.0437 3784 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
22:57:06.0640 3784 NdisWan - ok
22:57:06.0781 3784 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
22:57:06.0812 3784 NDProxy - ok
22:57:06.0937 3784 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
22:57:07.0140 3784 NetBIOS - ok
22:57:07.0250 3784 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
22:57:07.0468 3784 NetBT - ok
22:57:07.0609 3784 NetDDE (b857ba82860d7ff85ae29b095645563b) C:\WINDOWS\system32\netdde.exe
22:57:07.0812 3784 NetDDE - ok
22:57:07.0828 3784 NetDDEdsdm (b857ba82860d7ff85ae29b095645563b) C:\WINDOWS\system32\netdde.exe
22:57:08.0031 3784 NetDDEdsdm - ok
22:57:08.0125 3784 Netlogon (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
22:57:08.0328 3784 Netlogon - ok
22:57:08.0421 3784 Netman (13e67b55b3abd7bf3fe7aae5a0f9a9de) C:\WINDOWS\System32\netman.dll
22:57:08.0656 3784 Netman - ok
22:57:08.0812 3784 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
22:57:08.0828 3784 NetTcpPortSharing - ok
22:57:08.0953 3784 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
22:57:09.0156 3784 NIC1394 - ok
22:57:09.0265 3784 Nla (943337d786a56729263071623bbb9de5) C:\WINDOWS\System32\mswsock.dll
22:57:09.0312 3784 Nla - ok
22:57:09.0437 3784 nmwcd (c3963d85b721a7f80d8a55f4e2867a3a) C:\WINDOWS\system32\drivers\ccdcmb.sys
22:57:09.0546 3784 nmwcd - ok
22:57:09.0671 3784 nmwcdc (3859c69a77793180548802dac9f34a38) C:\WINDOWS\system32\drivers\ccdcmbo.sys
22:57:09.0796 3784 nmwcdc - ok
22:57:09.0937 3784 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
22:57:10.0140 3784 Npfs - ok
22:57:10.0203 3784 npkcrypt (fd9666a8eb88e713c18e2e90f6e746d0) C:\Program Files\NEXON\MapleStory\npkcrypt.sys
22:57:10.0218 3784 npkcrypt ( UnsignedFile.Multi.Generic ) - warning
22:57:10.0218 3784 npkcrypt - detected UnsignedFile.Multi.Generic (1)
22:57:10.0328 3784 NPPTNT2 (9131fe60adfab595c8da53ad6a06aa31) C:\WINDOWS\system32\npptNT2.sys
22:57:10.0343 3784 NPPTNT2 ( UnsignedFile.Multi.Generic ) - warning
22:57:10.0343 3784 NPPTNT2 - detected UnsignedFile.Multi.Generic (1)
22:57:10.0468 3784 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
22:57:10.0718 3784 Ntfs - ok
22:57:10.0875 3784 NtLmSsp (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\System32\lsass.exe
22:57:11.0078 3784 NtLmSsp - ok
22:57:11.0203 3784 NtmsSvc (156f64a3345bd23c600655fb4d10bc08) C:\WINDOWS\system32\ntmssvc.dll
22:57:11.0421 3784 NtmsSvc - ok
22:57:11.0531 3784 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
22:57:11.0796 3784 Null - ok
22:57:12.0203 3784 nv (8c0456001b6900114bbb1c548bd8aaf5) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
22:57:12.0578 3784 nv - ok
22:57:12.0703 3784 NVSvc (472a00d2183c9e5edb3e076272741812) C:\WINDOWS\system32\nvsvc32.exe
22:57:12.0734 3784 NVSvc - ok
22:57:12.0843 3784 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
22:57:13.0093 3784 NwlnkFlt - ok
22:57:13.0187 3784 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
22:57:13.0406 3784 NwlnkFwd - ok
22:57:13.0593 3784 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
22:57:13.0796 3784 ohci1394 - ok
22:57:13.0921 3784 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys
22:57:14.0125 3784 Parport - ok
22:57:14.0250 3784 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
22:57:14.0453 3784 PartMgr - ok
22:57:14.0593 3784 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
22:57:14.0828 3784 ParVdm - ok
22:57:14.0937 3784 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
22:57:14.0968 3784 pccsmcfd - ok
22:57:15.0093 3784 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys
22:57:15.0312 3784 PCI - ok
22:57:15.0406 3784 PCIDump - ok
22:57:15.0515 3784 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys
22:57:15.0734 3784 PCIIde - ok
22:57:15.0875 3784 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys
22:57:16.0125 3784 Pcmcia - ok
22:57:16.0250 3784 PCSUService (56e916d31fbc2d811d69c25e230f8f7e) C:\Program Files\PC Speed Up\PCSUService.exe
22:57:16.0265 3784 PCSUService - ok
22:57:16.0359 3784 PDCOMP - ok
22:57:16.0437 3784 PDFRAME - ok
22:57:16.0515 3784 pdiddcci - ok
22:57:16.0578 3784 PDRELI - ok
22:57:16.0656 3784 PDRFRAME - ok
22:57:16.0750 3784 perc2 - ok
22:57:16.0828 3784 perc2hib - ok
22:57:16.0937 3784 PfModNT - ok
22:57:17.0046 3784 PlugPlay (65df52f5b8b6e9bbd183505225c37315) C:\WINDOWS\system32\services.exe
22:57:17.0109 3784 PlugPlay - ok
22:57:17.0218 3784 Pml Driver HPZ12 (3cecda26586ca4db9be51241a6db7c3c) C:\WINDOWS\System32\HPZipm12.dll
22:57:17.0312 3784 Pml Driver HPZ12 - ok
22:57:17.0437 3784 Pnp680r (a1d7a9214b71ebbb6f31cb84aac15525) C:\WINDOWS\system32\DRIVERS\pnp680r.sys
22:57:17.0468 3784 Pnp680r - ok
22:57:17.0609 3784 PolicyAgent (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
22:57:17.0812 3784 PolicyAgent - ok
22:57:17.0937 3784 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
22:57:18.0140 3784 PptpMiniport - ok
22:57:18.0250 3784 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys
22:57:18.0468 3784 Processor - ok
22:57:18.0609 3784 ProtectedStorage (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
22:57:18.0812 3784 ProtectedStorage - ok
22:57:18.0937 3784 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
22:57:19.0156 3784 PSched - ok
22:57:19.0250 3784 PSI_SVC_2 (a6a7ad767bf5141665f5c675f671b3e1) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
22:57:19.0265 3784 PSI_SVC_2 - ok
22:57:19.0375 3784 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
22:57:19.0609 3784 Ptilink - ok
22:57:19.0687 3784 pwd_2k - ok
22:57:19.0796 3784 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\WINDOWS\system32\Drivers\PxHelp20.sys
22:57:19.0812 3784 PxHelp20 - ok
22:57:19.0906 3784 ql1080 - ok
22:57:20.0000 3784 Ql10wnt - ok
22:57:20.0078 3784 ql12160 - ok
22:57:20.0156 3784 ql1240 - ok
22:57:20.0250 3784 ql1280 - ok
22:57:20.0343 3784 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
22:57:20.0562 3784 RasAcd - ok
22:57:20.0687 3784 RasAuto (ad188be7bdf94e8df4ca0a55c00a5073) C:\WINDOWS\System32\rasauto.dll
22:57:20.0906 3784 RasAuto - ok
22:57:21.0031 3784 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
22:57:21.0234 3784 Rasl2tp - ok
22:57:21.0343 3784 RasMan (76a9a3cbeadd68cc57cda5e1d7448235) C:\WINDOWS\System32\rasmans.dll
22:57:21.0546 3784 RasMan - ok
22:57:21.0656 3784 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
22:57:21.0875 3784 RasPppoe - ok
22:57:22.0000 3784 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
22:57:22.0218 3784 Raspti - ok
22:57:22.0375 3784 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
22:57:22.0562 3784 Rdbss - ok
22:57:22.0671 3784 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
22:57:22.0890 3784 RDPCDD - ok
22:57:23.0046 3784 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
22:57:23.0265 3784 rdpdr - ok
22:57:23.0406 3784 RDPWD (5b3055daa788bd688594d2f5981f2a83) C:\WINDOWS\system32\drivers\RDPWD.sys
22:57:23.0453 3784 RDPWD - ok
22:57:23.0562 3784 RDSessMgr (3c37bf86641bda977c3bf8a840f3b7fa) C:\WINDOWS\system32\sessmgr.exe
22:57:23.0765 3784 RDSessMgr - ok
22:57:23.0890 3784 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys
22:57:24.0093 3784 redbook - ok
22:57:24.0203 3784 RemoteAccess (7e699ff5f59b5d9de5390e3c34c67cf5) C:\WINDOWS\System32\mprdim.dll
22:57:24.0421 3784 RemoteAccess - ok
22:57:24.0546 3784 RemoteRegistry (5b19b557b0c188210a56a6b699d90b8f) C:\WINDOWS\system32\regsvc.dll
22:57:24.0765 3784 RemoteRegistry - ok
22:57:24.0843 3784 RimSerPort - ok
22:57:24.0921 3784 RimUsb (f17713d108aca124a139fde877eef68a) C:\WINDOWS\system32\Drivers\RimUsb.sys
22:57:24.0953 3784 RimUsb - ok
22:57:25.0078 3784 RimVSerPort (2c4fb2e9f039287767c384e46ee91030) C:\WINDOWS\system32\DRIVERS\RimSerial.sys
22:57:25.0093 3784 RimVSerPort - ok
22:57:25.0234 3784 Rksample (bb7549bd94d1aac3599c7606c50c48a0) C:\WINDOWS\system32\DRIVERS\HSF_SAMP.sys
22:57:25.0484 3784 Rksample - ok
22:57:25.0625 3784 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys
22:57:25.0843 3784 ROOTMODEM - ok
22:57:25.0984 3784 Roxio UPnP Renderer 9 (afd61a7c48a3e15c86a6fadf0b69a2e4) C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
22:57:26.0000 3784 Roxio UPnP Renderer 9 - ok
22:57:26.0140 3784 Roxio Upnp Server 9 (efbb36e2bb02169d26e9980778fc20d3) C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
22:57:26.0171 3784 Roxio Upnp Server 9 - ok
22:57:26.0328 3784 RoxLiveShare9 (78e680a105f47b6aa0003bd23ed9fa51) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
22:57:26.0359 3784 RoxLiveShare9 - ok
22:57:26.0578 3784 RoxMediaDB9 (9d5c024170c376d7cc66ed853fda9068) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
22:57:26.0640 3784 RoxMediaDB9 - ok
22:57:26.0796 3784 RoxWatch9 (87f175539dbba297018aa7fcdd563ff7) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
22:57:26.0812 3784 RoxWatch9 - ok
22:57:26.0937 3784 RpcLocator (aaed593f84afa419bbae8572af87cf6a) C:\WINDOWS\System32\locator.exe
22:57:27.0125 3784 RpcLocator - ok
22:57:27.0265 3784 RpcSs (6b27a5c03dfb94b4245739065431322c) C:\WINDOWS\System32\rpcss.dll
22:57:27.0343 3784 RpcSs - ok
22:57:27.0437 3784 RSVP (471b3f9741d762abe75e9deea4787e47) C:\WINDOWS\System32\rsvp.exe
22:57:27.0625 3784 RSVP - ok
22:57:27.0718 3784 SamSs (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
22:57:27.0921 3784 SamSs - ok
22:57:28.0031 3784 SCardSvr (86d007e7a654b9a71d1d7d856b104353) C:\WINDOWS\System32\SCardSvr.exe
22:57:28.0250 3784 SCardSvr - ok
22:57:28.0359 3784 Schedule (0a9a7365a1ca4319aa7c1d6cd8e4eafa) C:\WINDOWS\system32\schedsvc.dll
22:57:28.0578 3784 Schedule - ok
22:57:28.0703 3784 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
22:57:28.0921 3784 Secdrv - ok
22:57:29.0031 3784 seclogon (cbe612e2bb6a10e3563336191eda1250) C:\WINDOWS\System32\seclogon.dll
22:57:29.0250 3784 seclogon - ok
22:57:29.0343 3784 SENS (7fdd5d0684eca8c1f68b4d99d124dcd0) C:\WINDOWS\system32\sens.dll
22:57:29.0546 3784 SENS - ok
22:57:29.0671 3784 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
22:57:29.0890 3784 serenum - ok
22:57:30.0000 3784 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys
22:57:30.0203 3784 Serial - ok
22:57:30.0312 3784 ServiceLayer (d0d2ff6132db177a5192891a8cc9578c) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
22:57:30.0375 3784 ServiceLayer ( UnsignedFile.Multi.Generic ) - warning
22:57:30.0375 3784 ServiceLayer - detected UnsignedFile.Multi.Generic (1)
22:57:30.0531 3784 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
22:57:30.0734 3784 Sfloppy - ok
22:57:30.0843 3784 SharedAccess (83f41d0d89645d7235c051ab1d9523ac) C:\WINDOWS\System32\ipnathlp.dll
22:57:31.0093 3784 SharedAccess - ok
22:57:31.0203 3784 ShellHWDetection (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
22:57:31.0218 3784 ShellHWDetection - ok
22:57:31.0296 3784 Simbad - ok
22:57:31.0437 3784 smwdm (564f8e5b3c0860bd18be78cabcfd5cca) C:\WINDOWS\system32\drivers\smwdm.sys
22:57:31.0484 3784 smwdm - ok
22:57:31.0625 3784 SoftFax (d9e8e0ce154a2f6430d9efabdf730867) C:\WINDOWS\system32\DRIVERS\HSF_FAXX.sys
22:57:31.0890 3784 SoftFax - ok
22:57:31.0984 3784 Sparrow - ok
22:57:32.0093 3784 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
22:57:32.0312 3784 splitter - ok
22:57:32.0406 3784 Spooler (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
22:57:32.0437 3784 Spooler - ok
22:57:32.0593 3784 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys
22:57:32.0812 3784 sr - ok
22:57:32.0937 3784 srservice (3805df0ac4296a34ba4bf93b346cc378) C:\WINDOWS\system32\srsvc.dll
22:57:33.0140 3784 srservice - ok
22:57:33.0265 3784 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
22:57:33.0343 3784 Srv - ok
22:57:33.0453 3784 SSDPSRV (0a5679b3714edab99e357057ee88fca6) C:\WINDOWS\System32\ssdpsrv.dll
22:57:33.0671 3784 SSDPSRV - ok
22:57:33.0765 3784 SSKBFD (8564bc9598be1705477b7fa61d657c2b) C:\WINDOWS\system32\Drivers\sskbfd.sys
22:57:33.0781 3784 SSKBFD - ok
22:57:33.0906 3784 stisvc (8bad69cbac032d4bbacfce0306174c30) C:\WINDOWS\system32\wiaservc.dll
22:57:34.0140 3784 stisvc - ok
22:57:34.0265 3784 StreamDispatcher (0aaf9a073b37eda0f479a6aae76b0fbf) C:\WINDOWS\system32\DRIVERS\strmdisp.sys
22:57:34.0281 3784 StreamDispatcher - ok
22:57:34.0421 3784 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
22:57:34.0609 3784 swenum - ok
22:57:34.0734 3784 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
22:57:34.0953 3784 swmidi - ok
22:57:35.0031 3784 SwPrv - ok
22:57:35.0093 3784 symc810 - ok
22:57:35.0171 3784 symc8xx - ok
22:57:35.0265 3784 sym_hi - ok
22:57:35.0359 3784 sym_u3 - ok
22:57:35.0484 3784 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
22:57:35.0687 3784 sysaudio - ok
22:57:35.0796 3784 SysmonLog (c7abbc59b43274b1109df6b24d617051) C:\WINDOWS\system32\smlogsvc.exe
22:57:36.0046 3784 SysmonLog - ok
22:57:36.0375 3784 TabletServicePen (099aee120cac4a43ce307a828998392f) C:\WINDOWS\system32\Pen_Tablet.exe
22:57:36.0593 3784 TabletServicePen - ok
22:57:36.0812 3784 TabletServiceWacom (7d81434924c4947dc29c00848e2a0029) C:\WINDOWS\system32\Wacom_Tablet.exe
22:57:36.0968 3784 TabletServiceWacom - ok
22:57:37.0093 3784 TapiSrv (3cb78c17bb664637787c9a1c98f79c38) C:\WINDOWS\System32\tapisrv.dll
22:57:37.0312 3784 TapiSrv - ok
22:57:37.0453 3784 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
22:57:37.0484 3784 Tcpip - ok
22:57:37.0640 3784 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
22:57:37.0859 3784 TDPIPE - ok
22:57:38.0000 3784 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
22:57:38.0203 3784 TDTCP - ok
22:57:38.0328 3784 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
22:57:38.0531 3784 TermDD - ok
22:57:38.0671 3784 TermService (ff3477c03be7201c294c35f684b3479f) C:\WINDOWS\System32\termsrv.dll
22:57:38.0890 3784 TermService - ok
22:57:39.0015 3784 Themes (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
22:57:39.0031 3784 Themes - ok
22:57:39.0140 3784 TlntSvr (db7205804759ff62c34e3efd8a4cc76a) C:\WINDOWS\System32\tlntsvr.exe
22:57:39.0359 3784 TlntSvr - ok
22:57:39.0500 3784 Tones (8021a499db46b2961c285168671cb9af) C:\WINDOWS\system32\DRIVERS\HSF_TONE.sys
22:57:39.0734 3784 Tones - ok
22:57:39.0828 3784 TosIde - ok
22:57:39.0921 3784 TrkWks (55bca12f7f523d35ca3cb833c725f54e) C:\WINDOWS\system32\trkwks.dll
22:57:40.0140 3784 TrkWks - ok
22:57:40.0281 3784 UdfReadr_xp (3a28afb82559b2cb4d6bf51e6ccd6678) C:\WINDOWS\system32\drivers\UdfReadr_xp.sys
22:57:40.0281 3784 UdfReadr_xp ( Virus.Win32.ZAccess.k ) - infected
22:57:40.0281 3784 UdfReadr_xp - detected Virus.Win32.ZAccess.k (0)
22:57:40.0421 3784 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
22:57:40.0625 3784 Udfs - ok
22:57:40.0718 3784 ultra - ok
22:57:40.0843 3784 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
22:57:41.0078 3784 Update - ok
22:57:41.0187 3784 upnphost (1ebafeb9a3fbdc41b8d9c7f0f687ad91) C:\WINDOWS\System32\upnphost.dll
22:57:41.0406 3784 upnphost - ok
22:57:41.0546 3784 upperdev (0ccadc7391021376edbb8aa649d04e68) C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
22:57:41.0656 3784 upperdev - ok
22:57:41.0765 3784 UPS (05365fb38fca1e98f7a566aaaf5d1815) C:\WINDOWS\System32\ups.exe
22:57:41.0968 3784 UPS - ok
22:57:42.0109 3784 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys
22:57:42.0140 3784 USBAAPL - ok
22:57:42.0250 3784 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
22:57:42.0468 3784 usbccgp - ok
22:57:42.0609 3784 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
22:57:42.0828 3784 usbehci - ok
22:57:42.0968 3784 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
22:57:43.0171 3784 usbhub - ok
22:57:43.0296 3784 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
22:57:43.0515 3784 usbprint - ok
22:57:43.0703 3784 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
22:57:43.0906 3784 usbscan - ok
22:57:44.0031 3784 usbser (1c888b000c2f9492f4b15b5b6b84873e) C:\WINDOWS\system32\drivers\usbser.sys
22:57:44.0234 3784 usbser - ok
22:57:44.0375 3784 UsbserFilt (68b4f83cccf70a2ff32ee142c234332a) C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
22:57:44.0500 3784 UsbserFilt - ok
22:57:44.0640 3784 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
22:57:44.0843 3784 USBSTOR - ok
22:57:44.0984 3784 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
22:57:45.0187 3784 usbuhci - ok
22:57:45.0328 3784 V124 (269c0ade94b90029b12497747be408cb) C:\WINDOWS\system32\DRIVERS\HSF_V124.sys
22:57:45.0562 3784 V124 - ok
22:57:45.0671 3784 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
22:57:45.0906 3784 VgaSave - ok
22:57:45.0984 3784 ViaIde - ok
22:57:46.0109 3784 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys
22:57:46.0312 3784 VolSnap - ok
22:57:46.0437 3784 VSS (7a9db3a67c333bf0bd42e42b8596854b) C:\WINDOWS\System32\vssvc.exe
22:57:46.0671 3784 VSS - ok
22:57:46.0796 3784 W32Time (54af4b1d5459500ef0937f6d33b1914f) C:\WINDOWS\system32\w32time.dll
22:57:47.0015 3784 W32Time - ok
22:57:47.0156 3784 wacmoumonitor (9a03558c37e919b9d6a50864aea0a168) C:\WINDOWS\system32\DRIVERS\wacmoumonitor.sys
22:57:47.0171 3784 wacmoumonitor - ok
22:57:47.0296 3784 wacommousefilter (427a8bc96f16c40df81c2d2f4edd32dd) C:\WINDOWS\system32\DRIVERS\wacommousefilter.sys
22:57:47.0312 3784 wacommousefilter - ok
22:57:47.0421 3784 wacomvhid (51d580f30d1a1f2ea4965af6abc2bcb2) C:\WINDOWS\system32\DRIVERS\wacomvhid.sys
22:57:47.0437 3784 wacomvhid - ok
22:57:47.0531 3784 WacomVKHid - ok
22:57:47.0671 3784 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
22:57:47.0921 3784 Wanarp - ok
22:57:48.0062 3784 Wdf01000 (d918617b46457b9ac28027722e30f647) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
22:57:48.0093 3784 Wdf01000 - ok
22:57:48.0171 3784 WDICA - ok
22:57:48.0312 3784 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
22:57:48.0515 3784 wdmaud - ok
22:57:48.0718 3784 WebClient (77a354e28153ad2d5e120a5a8687bc06) C:\WINDOWS\System32\webclnt.dll
22:57:48.0921 3784 WebClient - ok
22:57:48.0984 3784 WebrootSpySweeperService - ok
22:57:49.0125 3784 winachsf (533adeb3b84c2e24d9a85d55f3d69955) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
22:57:49.0187 3784 winachsf - ok
22:57:49.0312 3784 winmgmt (2d0e4ed081963804ccc196a0929275b5) C:\WINDOWS\system32\wbem\WMIsvc.dll
22:57:49.0515 3784 winmgmt - ok
22:57:49.0578 3784 winpowermanager - ok
22:57:49.0718 3784 WLSetupSvc (94a85e956a065e23e0010a6a7826243b) C:\Program Files\Windows Live\installer\WLSetupSvc.exe
22:57:49.0734 3784 WLSetupSvc - ok
22:57:49.0859 3784 WmBEnum (bc3ecbcb40147bdae3ad2fd0b4b346d8) C:\WINDOWS\system32\drivers\WmBEnum.sys
22:57:49.0875 3784 WmBEnum - ok
22:57:49.0984 3784 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
22:57:50.0000 3784 WmdmPmSN - ok
22:57:50.0125 3784 WmFilter (19f9881d8b3484fedb605d0216876898) C:\WINDOWS\system32\drivers\WmFilter.sys
22:57:50.0140 3784 WmFilter - ok
22:57:50.0265 3784 Wmi (e76f8807070ed04e7408a86d6d3a6137) C:\WINDOWS\System32\advapi32.dll
22:57:50.0359 3784 Wmi - ok
22:57:50.0484 3784 WmiApSrv (e0673f1106e62a68d2257e376079f821) C:\WINDOWS\System32\wbem\wmiapsrv.exe
22:57:50.0671 3784 WmiApSrv - ok
22:57:50.0796 3784 WMPNetworkSvc (f74e3d9a7fa9556c3bbb14d4e5e63d3b) C:\Program Files\Windows Media Player\WMPNetwk.exe
22:57:50.0843 3784 WMPNetworkSvc - ok
22:57:51.0000 3784 WmVirHid (7a51545a6409a25eedbdbd97d019e8cc) C:\WINDOWS\system32\drivers\WmVirHid.sys
22:57:51.0015 3784 WmVirHid - ok
22:57:51.0156 3784 WmXlCore (1f083b3bc73017e60c3ca85cf4a70753) C:\WINDOWS\system32\drivers\WmXlCore.sys
22:57:51.0171 3784 WmXlCore - ok
22:57:51.0296 3784 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
22:57:51.0312 3784 WpdUsb - ok
22:57:51.0421 3784 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
22:57:51.0625 3784 WS2IFSL - ok
22:57:51.0734 3784 wscsvc (7c278e6408d1dce642230c0585a854d5) C:\WINDOWS\system32\wscsvc.dll
22:57:51.0937 3784 wscsvc - ok
22:57:52.0000 3784 WTouchService (77a3988cf9b5848bcbc9fb6a79508a56) C:\Program Files\WTouch\WTouchService.exe
22:57:52.0015 3784 WTouchService - ok
22:57:52.0156 3784 wuauserv (35321fb577cdc98ce3eb3a3eb9e4610a) C:\WINDOWS\system32\wuauserv.dll
22:57:52.0343 3784 wuauserv - ok
22:57:52.0468 3784 WudfPf (eaa6324f51214d2f6718977ec9ce0def) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
22:57:52.0500 3784 WudfPf - ok
22:57:52.0656 3784 WudfRd (f91ff1e51fca30b3c3981db7d5924252) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
22:57:52.0671 3784 WudfRd - ok
22:57:52.0812 3784 WudfSvc (ddee3682fe97037c45f4d7ab467cb8b6) C:\WINDOWS\System32\WUDFSvc.dll
22:57:52.0828 3784 WudfSvc - ok
22:57:53.0000 3784 WZCSVC (81dc3f549f44b1c1fff022dec9ecf30b) C:\WINDOWS\System32\wzcsvc.dll
22:57:53.0218 3784 WZCSVC - ok
22:57:53.0312 3784 xmlprov (295d21f14c335b53cb8154e5b1f892b9) C:\WINDOWS\System32\xmlprov.dll
22:57:53.0515 3784 xmlprov - ok
22:57:53.0562 3784 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
22:57:53.0593 3784 \Device\Harddisk0\DR0 - ok
22:57:53.0609 3784 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1
22:57:53.0625 3784 \Device\Harddisk1\DR1 - ok
22:57:53.0656 3784 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk2\DR2
22:57:53.0890 3784 \Device\Harddisk2\DR2 - ok
22:57:53.0906 3784 Boot (0x1200) (51e486b4bbd2b54718d1b283864656a9) \Device\Harddisk0\DR0\Partition0
22:57:53.0906 3784 \Device\Harddisk0\DR0\Partition0 - ok
22:57:53.0921 3784 Boot (0x1200) (0009e0c38338d497567a9e05094214e9) \Device\Harddisk1\DR1\Partition0
22:57:53.0921 3784 \Device\Harddisk1\DR1\Partition0 - ok
22:57:53.0953 3784 Boot (0x1200) (4af7f27a91d209f3c5b055b7915d12f7) \Device\Harddisk2\DR2\Partition0
22:57:53.0953 3784 \Device\Harddisk2\DR2\Partition0 - ok
22:57:53.0953 3784 ============================================================
22:57:53.0953 3784 Scan finished
22:57:53.0953 3784 ============================================================
22:57:53.0984 3684 Detected object count: 11
22:57:53.0984 3684 Actual detected object count: 11
22:58:58.0281 3684 cdudf_xp ( UnsignedFile.Multi.Generic ) - skipped by user
22:58:58.0281 3684 cdudf_xp ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:58:58.0281 3684 Creative Service for CDROM Access ( UnsignedFile.Multi.Generic ) - skipped by user
22:58:58.0281 3684 Creative Service for CDROM Access ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:58:58.0281 3684 CTDevice_Srv ( UnsignedFile.Multi.Generic ) - skipped by user
22:58:58.0281 3684 CTDevice_Srv ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:58:58.0281 3684 CTUPnPSv ( UnsignedFile.Multi.Generic ) - skipped by user
22:58:58.0281 3684 CTUPnPSv ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:58:58.0296 3684 fasttx2k ( UnsignedFile.Multi.Generic ) - skipped by user
22:58:58.0296 3684 fasttx2k ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:58:58.0296 3684 FLEXnet Licensing Service ( UnsignedFile.Multi.Generic ) - skipped by user
22:58:58.0296 3684 FLEXnet Licensing Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:58:58.0312 3684 IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
22:58:58.0312 3684 IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:58:58.0328 3684 npkcrypt ( UnsignedFile.Multi.Generic ) - skipped by user
22:58:58.0328 3684 npkcrypt ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:58:58.0328 3684 NPPTNT2 ( UnsignedFile.Multi.Generic ) - skipped by user
22:58:58.0328 3684 NPPTNT2 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:58:58.0343 3684 ServiceLayer ( UnsignedFile.Multi.Generic ) - skipped by user
22:58:58.0343 3684 ServiceLayer ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:58:58.0468 3684 C:\WINDOWS\system32\drivers\UdfReadr_xp.sys - copied to quarantine
22:58:58.0484 3684 VerifyFileNameVersionInfo: GetFileVersionInfoSizeW(C:\WINDOWS\system32\drivers\udfreadr_xp.sys) error 1813
22:58:58.0562 3684 Backup copy not found, trying to cure infected file..
22:58:58.0562 3684 C:\WINDOWS\system32\drivers\UdfReadr_xp.sys - Cure failed (FFFFFFFF)
22:58:58.0562 3684 C:\WINDOWS\system32\drivers\UdfReadr_xp.sys - processing error
22:59:04.0031 3684 UdfReadr_xp ( Virus.Win32.ZAccess.k ) - User select action: Cure