Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Laptop running slow - Windows explorer failing [Solved]

Started by FutureWoWplayer , Nov 07 2012 03:03 AM

Page 3 of 5
1
2
3
4
5

This topic is locked

#31
gringo_pr

Posted 16 November 2012 - 12:58 AM

Trusted Helper

Malware Removal
7,268 posts

did it help?

gringo

#32
FutureWoWplayer

Posted 16 November 2012 - 02:21 AM

Member

Topic Starter
Member
153 posts

No not really, sorry.

I still get the same message about the system restore.

I tried to load up the computer normally and windows explorer didn't fail, but the computer was very slow and unresponsive. I couldn't get on the net. I guess it's a step in the right direction because Windows Explorer didn't fail. But the computer is still unresponsive.

#33
gringo_pr

Posted 16 November 2012 - 01:00 PM

Trusted Helper

Malware Removal
7,268 posts

Hello

I would like you to download an updated version of combofix.

update combofix

Delete the version of combofix you have now on your desktop and download a new one from here

Link 1
Link 2
Link 3
**Note: It is important that it is saved directly to your desktop**

1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note:Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer
[/list]
"information and logs"

In your next post I need the following
Log from Combofix
let me know of any problems you may have had
How is the computer doing now?

Gringo

#34
FutureWoWplayer

Posted 16 November 2012 - 02:14 PM

Member

Topic Starter
Member
153 posts

Do you want me to do this from the flash drive? Because the affected computer in question can't access the net. It still unresponsive like it's missing something and today when I turned the computer on the mouse stopped working. I thought I had accidently turned off the mouse because there's a button above the pad to do that. But the mouse works when I go into the repair operations screen or safe mode. Which by the way safe mode doesn't really get me anywhere either. I can't access any programs and the computer takes forever to load.

#35
gringo_pr

Posted 16 November 2012 - 03:47 PM

Trusted Helper

Malware Removal
7,268 posts

yes that would be fine

gringo

#36
FutureWoWplayer

Posted 16 November 2012 - 07:25 PM

Member

Topic Starter
Member
153 posts

Running this combo-fix is going to be a problem. I cant get windows act right. I start up the computer now and all my icons on the desktop are gone. The mouse works, but then Windows Explorer fails so I can access anything on the computer again. When I switch to the task manager I go to the blue screen, click on the task manager button and then I get a black screen. I can move the mouse around on this black screen but that's about it.

#37
gringo_pr

Posted 16 November 2012 - 07:38 PM

Trusted Helper

Malware Removal
7,268 posts

Try this please. You will need a USB drive.

Download http://unetbootin.so...dows-latest.exe & http://noahdfear.net.../xpud-0.9.2.iso to the desktop of your clean computer

Insert your USB drive
Press Start > My Computer > right click your USB drive > choose Format > Quick format
Double click the unetbootin-xpud-windows-387.exe that you just downloaded
Press Run then OK
Select the DiskImage option then click the browse button located on the right side of the textbox field.
Browse to and select the xpud-0.9.2.iso file you downloaded
Verify the correct drive letter is selected for your USB device then click OK
It will install a little bootable OS on your USB device
Once the files have been written to the device you will be prompted to reboot ~ do not reboot and instead just Exit the UNetbootin interface
After it has completed do not choose to reboot the clean computer simply close the installer
Next download http://noahdfear.net...loads/driver.sh to your USB
Remove the USB and insert it in the sick computer
Boot the Sick computer
Press F12 and choose to boot from the USB
Follow the prompts
A Welcome to xPUD screen will appear
Press File
Expand mnt
sda1,2...usually corresponds to your HDD
sdb1 is likely your USB
Click on the folder that represents your USB drive (sdb1 ?)
Confirm that you see driver.sh that you downloaded there
Press Tool at the top
Choose Open Terminal
Type bash driver.sh
Press Enter
After it has finished a report will be located on your USB drive named report.txt
Remove the USB drive and insert back in your working computer and navigate to report.txt

Please note - all text entries are case sensitive

Copy and paste the report.txt for my review

#38
FutureWoWplayer

Posted 16 November 2012 - 09:41 PM

Member

Topic Starter
Member
153 posts

Here is the report you asked for:

Fri Nov 16 18:58:34 UTC 2012
Driver report for /mnt/sda2/Windows/System32/drivers
6295aa106c998dcb27e68da713fe9c53 fbd.sys has NO Company Name!

64edd3f59db321947969fdf1dd747323 1394bus.sys
Microsoft Corporation

1b00662092f9f9568b995902f0cc40d5 1394ohci.sys
Microsoft Corporation

63b05a0420ce4bf0e4af6dcc7cada254 acpipmi.sys
Microsoft Corporation

6f11e88748cdefd2f76aa215f97ddfe5 acpi.sys
Microsoft Corporation

2f6b34b83843f0c5118b63ac634f5bf4 adp94xx.sys
Adaptec

597f78224ee9224ea1a13d6350ced962 adpahci.sys
Adaptec

e109549c90f62fb570b9540c4b148e54 adpu320.sys
Adaptec

db9d6c6b2cd95a9ca414d045b627422e afd.sys
Microsoft Corporation

7ecff9b22276b73f43a99a15a6094e90 agilevpn.sys
Microsoft Corporation

608c14dba7299d8cb6ed035a68a15799 AGP440.sys
Microsoft Corporation

5812713a477a3ad7363c7438ca2ee038 aliide.sys
Acer Laboratories

1ff8b4431c353ce385c875f194924c0c amdide.sys
Microsoft Corporation

7024f087cff1833a806193ef9d22cda9 amdk8.sys
Microsoft Corporation

1e56388b3fe0d031c44144eb8c4d6217 amdppm.sys
Microsoft Corporation

ec7ebab00a4d8448bab68d1e49b4beb9 amdsata.sys
Advanced Micro Devices

f67f933e79241ed32ff46a4f29b5120b amdsbs.sys
AMD Technologies

db27766102c7bf7e95140a2aa81d042e amdxata.sys
Advanced Micro Devices

42fd751b27fa0e9c69bb39f39e409594 appid.sys
Microsoft Corporation

019af6924aefe7839f61c830227fe79c arcsas.sys
Adaptec

c484f8ceb1717c540242531db7845c4e arc.sys
Adaptec

769765ce2cc62867468cea93969b2242 asyncmac.sys
Microsoft Corporation

02062c0b390b7729edc9e69c680a6f3c atapi.sys
Microsoft Corporation

aa2186f7944104a16d6ed176ed462cec ataport.sys
Microsoft Corporation

aefaf27f1b7e52c705df4fb6c96732f6 atikmdag.sys
ATI Technologies

8149db73be27950ec72767a1193153a6 atikmpag.sys
Advanced Micro Devices

7c5d273e29dcc5505469b299c6f29163 AtiPcie.sys
Advanced Micro Devices

aefaf27f1b7e52c705df4fb6c96732f6 atipmdag.sys
ATI Technologies

b5ace6968304a3900eeb1ebfd9622df2 b57nd60a.sys
Broadcom Corporation

f4de2ae7a9e1badac70bc71ea2c17612 battc.sys
Microsoft Corporation

16a47ce2decc9b099349a5f840654746 beep.sys
Microsoft Corporation

61583ee3c3a17003c4acd0475646b4d3 blbdrive.sys
Microsoft Corporation

19d20159708e152267e53b66677a4995 bowser.sys
Microsoft Corporation

f09eee9edc320b5e1501f749fde686c8 BrFiltLo.sys
Brother Industries

b114d3098e9bdb8bea8b053685831be6 BrFiltUp.sys
Brother Industries

5c2f352a4e961d72518261257aae204b bridge.sys
Microsoft Corporation

43bea8d483bf1870f018e2d02e06a5bd BrSerId.sys
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries

a6eca2151b08a09caceca35c07f05b42 BrSerWdm.sys
Brother Industries

b79968002c277e869cf38bd22cd61524 BrUsbMdm.sys
Brother Industries

a87528880231c54e75ea7a44943b38bf BrUsbSer.sys
Brother Industries

9da669f11d1f894ab4eb69bf546a42e8 bthmodem.sys
Microsoft Corporation

3e5b191307609f7514148c6832bb0842 bxvbda.sys
Broadcom Corporation

b8bd2bb284668c84865658c77574381a cdfs.sys
Microsoft Corporation

83d2d75e1efb81b3450c18131443f7db cdrom.sys
Microsoft Corporation

25c58ee97be0416a373e3e4f855206b5 CHDRT64.sys
Conexant

d7cd5c4e1b71fa62050515314cfb52cf circlass.sys
Microsoft Corporation

62f1ed63f0cb0b5a2f65d15a6490c2fd Classpnp.sys
Microsoft Corporation

0840155d0bddf1190f84a663c284bd33 CmBatt.sys
Microsoft Corporation

e19d3f095812725d88f9001985b94edd cmdide.sys
CMD Technology

ca7720b73446fddec5c69519c1174c98 cng.sys
Microsoft Corporation

102de219c3f61415f964c88e9085ad14 compbatt.sys
Microsoft Corporation

f26b3a86f6fa87ca360b879581ab4123 CompositeBus.sys
Microsoft Corporation

3e588b60ec061686ba05d33574a344c6 crashdmp.sys
Microsoft Corporation

1c827878a998c18847245fe1f34ee597 crcdisk.sys
Microsoft Corporation

9c253ce7311ca60fc11c774692a13208 dfsc.sys
Microsoft Corporation

13096b05847ec78f0977f2c0f79e9ab3 discache.sys
Microsoft Corporation

20080512f61d3210e449a1256f66a7fd Diskdump.sys
Microsoft Corporation

9819eee8b5ea3784ec4af3b137a5244c disk.sys
Microsoft Corporation

9b19f34400d24df84c858a421c205754 drmkaud.sys
Microsoft Corporation

21d26064aedb4988f785bb4a3a2c051e drmk.sys
Microsoft Corporation

839b5fe3d48e9f35b22c21a3d5103f6c Dumpata.sys
Microsoft Corporation

814db88f2641691575a455cf25354098 dumpfve.sys
Microsoft Corporation

bf24d6f2ed97fe830bfd52b246f98e67 dxapi.sys
Microsoft Corporation

1633b9abf52784a1331476397a48cbef dxgkrnl.sys
Microsoft Corporation

3238b9078e0766ab5e62dc737a809adb dxgmms1.sys
Microsoft Corporation

fede0629ecb23650d48989517d4914da dxg.sys
Microsoft Corporation

0e5da5369a0fcaea12456dd852545184 elxstor.sys
Emulex

34a3c54752046e79a126e15c51db409b errdev.sys
Microsoft Corporation

dc5d737f51be844d8c82c695eb17372f evbda.sys
Broadcom Corporation

a510c654ec00c1e9bdd91eeb3a59823b exfat.sys
Microsoft Corporation

0adc83218b66a6db380c330836f3e36d fastfat.sys
Microsoft Corporation

6295aa106c998dcb27e68da713fe9c53 fbd.sys

d765d19cd8ef61f650c384f62fac00ab fdc.sys
Microsoft Corporation

655661be46b5f5f3fd454e2c3095b930 fileinfo.sys
Microsoft Corporation

5f671ab5bc87eea04ec38a6cd5962a47 filetrace.sys
Microsoft Corporation

c172a0f53008eaeb8ea33fe10e177af5 flpydisk.sys
Microsoft Corporation

f7866af72abbaf84b1fa5aa195378c59 fltMgr.sys
Microsoft Corporation

d43703496149971890703b4b1b723eac fsdepends.sys
Microsoft Corporation

d3e3f93d67821a2db2b3d9fac2dc2064 fs_rec.sys
Microsoft Corporation

ae87ba80d0ec3b57126ed2cdc15b24ed fvevol.sys
Microsoft Corporation

50555005e22a56aef10be607472d0bdc FWPKCLNT.SYS
Microsoft Corporation

8c778d335c9d272cfd3298ab02abe3b6 GAGP30KX.SYS
Microsoft Corporation

f2523ef6460fc42405b12248338ab2f0 hcw85cir.sys
Hauppauge Computer Works

0a49913402747a0b67de940fb42cbdbb hdaudbus.sys
Microsoft Corporation

6410f6f415b2a5a9037224c41da8bf12 HdAudio.sys
Microsoft Corporation

78e86380454a7b10a5eb255dc44a355f hidbatt.sys
Microsoft Corporation

7fd2a313f7afe5c4dab14798c48dd104 hidbth.sys
Microsoft Corporation

685fec2407fc121eb937cb658b3c0f35 hidclass.sys
Microsoft Corporation

0a77d29f311b88cfae3b13f9c1a73825 hidir.sys
Microsoft Corporation

49ee2e52e6cd03947dad72f65367be06 hidparse.sys
Microsoft Corporation

b3bf6b5b50006def50b66306d99fcf6f hidusb.sys
Microsoft Corporation

0886d440058f203eba0e1825e4355914 HpSAMD.sys
Hewlett-Packard

cee049cac4efa7f4e1e4ad014414a5d4 http.sys
Microsoft Corporation

f17766a19145f111856378df337a5d79 hwpolicy.sys
Microsoft Corporation

fa55c73d4affa7ee23ac4be53b4592d3 i8042prt.sys
Microsoft Corporation

b75e45c564e944a2657167d197ab29da iaStorV.sys
Intel Corporation

5c18831c61933628f5bb0ea2675b9d21 iirsp.sys
Intel Corp

f00f20e70c6ec3aa366910083a0518aa intelide.sys
Microsoft Corporation

ada036632c664caa754079041cf1f8c1 intelppm.sys
Microsoft Corporation

722dd294df62483cecaae6e094b4d695 ipfltdrv.sys
Microsoft Corporation

e2b4a4494db7cb9b89b55ca268c337c5 IPMIDrv.sys
Microsoft Corporation

af9b39a7e7b6caa203b3862582e9f2d0 ipnat.sys
Microsoft Corporation

05360b1ea5a2abf620d1d96ebd8bd8f1 irda.sys
Microsoft Corporation

3abf5e7213eb28966d55d58b515d5ce9 irenum.sys
Microsoft Corporation

2f7b28dc3e1183e5eb418df55c204f38 isapnp.sys
Microsoft Corporation

bc02336f1cba7dcc7d1213bb588a68a5 kbdclass.sys
Microsoft Corporation

6def98f8541e1b5dceb2c822a11f7323 kbdhid.sys
Microsoft Corporation

4f4b5fde429416877de7143044582eb5 ksecdd.sys
Microsoft Corporation

6f40465a44ecdc1731befafec5bdd03c ksecpkg.sys
Microsoft Corporation

5c7af4a20f5bf67042b2e613d123d111 ks.sys
Microsoft Corporation

6869281e78cb31a43e969f06b57347c4 ksthunk.sys
Microsoft Corporation

55480b9c63f3f91a8ebbadcbf28fe581 L1C62x64.sys
Atheros Communications

1538831cf8ad2979a04c423779465827 lltdio.sys
Microsoft Corporation

1a93e54eb0ece102495a51266dcdb6a6 lsi_fc.sys
LSI Corporation

30f5c0de1ee8b5bc9306c1f0e4a75f93 lsi_sas2.sys
LSI Corporation

1047184a9fdc8bdbff857175875ee810 lsi_sas.sys
LSI Corporation

0504eacaff0d3c8aed161c4b0d369d4a lsi_scsi.sys
LSI Corporation

43d0f98e1d56ccddb0d5254cff7b356e luafv.sys
Microsoft Corporation

3c9f072f9dca856b9fb7a20cbd4281ac mcd.sys
Microsoft Corporation

a55805f747c6edb6a9080d7c633bd0f4 megasas.sys
LSI Corporation

baf74ce0072480c3b6b7c13b2a94d6b3 MegaSR.sys
LSI Corporation

800ba92f7010378b09f9ed9270f07137 modem.sys
Microsoft Corporation

b03d591dc7da45ece20b3b467e6aadaa monitor.sys
Microsoft Corporation

7d27ea49f3c1f687d357e77a470aea99 mouclass.sys
Microsoft Corporation

d3bf052c40b0c4166d9fd86a4288c1e6 mouhid.sys
Microsoft Corporation

791af66c4d0e7c90a3646066386fb571 mountmgr.sys
Microsoft Corporation

609d1d87649ecc19796f4d76d4c15cea mpio.sys
Microsoft Corporation

6c38c9e45ae0ea2fa5e551f2ed5e978f mpsdrv.sys
Microsoft Corporation

30524261bb51d96d6fcbac20c810183c mrxdav.sys
Microsoft Corporation

f0067552f8f9b33d7c59403ab808a3cb mrxsmb10.sys
Microsoft Corporation

3c142d31de9f2f193218a53fe2632051 mrxsmb20.sys
Microsoft Corporation

040d62a9d8ad28922632137acdd984f2 mrxsmb.sys
Microsoft Corporation

5c37497276e3b3a5488b23a326a754b7 msahci.sys
Microsoft Corporation

8d27b597229aed79430fb9db3bcbfbd0 msdsm.sys
Microsoft Corporation

aa3fb40e17ce1388fa1bedab50ea8f96 msfs.sys
Microsoft Corporation

f9d215a46a8b9753f61767fa72a20326 mshidkmdf.sys
Microsoft Corporation

d916874bbd4f8b07bfb7fa9b3ccae29d msisadrv.sys
Microsoft Corporation

fa4d2557de56d45b0a346f93564be6e1 msiscsi.sys
Microsoft Corporation

49ccf2c4fea34ffad8b1b59d49439366 mskssrv.sys
Microsoft Corporation

bdd71ace35a232104ddd349ee70e1ab3 mspclock.sys
Microsoft Corporation

4ed981241db27c3383d72092b618a1d0 mspqm.sys
Microsoft Corporation

89cb141aa8616d8c6a4610fa26c60964 msrpc.sys
Microsoft Corporation

0eed230e37515a0eaee3c2e1bc97b288 mssmbios.sys
Microsoft Corporation

2e66f9ecb30b4221a318c92ac2250779 mstee.sys
Microsoft Corporation

7ea404308934e675bffde8edf0757bcd MTConfig.sys
Microsoft Corporation

f9a18612fd3526fe473c1bda678d61c8 mup.sys
Microsoft Corporation

9f9a1f53aad7da4d6fef5bb73ab811ac ndiscap.sys
Microsoft Corporation

cad515dbd07d082bb317d9928ce8962c ndis.sys
Microsoft Corporation

30639c932d9fef22b31268fe25a1b6e5 ndistapi.sys
Microsoft Corporation

f105ba1e22bf1f2ee8f005d4305e4bec ndisuio.sys
Microsoft Corporation

557dfab9ca1fcb036ac77564c010dad3 ndiswan.sys
Microsoft Corporation

659b74fb74b86228d6338d643cd3e3cf ndproxy.sys
Microsoft Corporation

86743d9f5d2b1048062b14b1d84501c4 netbios.sys
Microsoft Corporation

9162b273a44ab9dce5b44362731d062a netbt.sys
Microsoft Corporation

7b8403912673a87ea6622f5cb867a670 netio.sys
Microsoft Corporation

77889813be4d166cdab78ddba990da92 nfrd960.sys
IBM Corp

1e4c4ab5c9b8dd13179bbdc75a2a01f7 npfs.sys
Microsoft Corporation

e7f5ae18af4168178a642a9247c63001 nsiproxy.sys
Microsoft Corporation

184c189d4fc416978550fc599bb4edda ntfs.sys
Microsoft Corporation

9899284589f75fa8724ff3d16aed75c1 null.sys
Microsoft Corporation

270d7cd42d6e3979f6dd0146650f0e05 NV_AGP.SYS
Microsoft Corporation

a4d9c9a608a97f59307c2f2600edc6a4 nvraid.sys
NVIDIA Corporation

6c1d5f70e7a6a3fd1c90d840edc048b9 nvstor.sys
NVIDIA Corporation

1ea3749c4114db3e3161156ffffa6b33 nwifi.sys
Microsoft Corporation

3589478e4b22ce21b41fa1bfc0b8b8a0 ohci1394.sys
Microsoft Corporation

ee992183bd8eaefd9973f352e587a299 pacer.sys
Microsoft Corporation

0086431c29c35be1dbc43f52cc273887 parport.sys
Microsoft Corporation

90061b1acfe8ccaa5345750ffe08d8b8 partmgr.sys
Microsoft Corporation

b5b8b5ef2e5cb34df8dcf8831e3534fa pciide.sys
Microsoft Corporation

144497daa145ba0f7be896064146c058 pciidex.sys
Microsoft Corporation

5aab2b170536885de70a6cba8d7ce52b pci.sys
Microsoft Corporation

b2e81d4e87ce48589f98cb8c05b01f2f pcmcia.sys
Microsoft Corporation

d6b9c2e1a11a3a4b26a182ffef18f603 pcw.sys
Microsoft Corporation

68769c3356b3be5d1c732c97b9a80d6e PEAuth.sys
Microsoft Corporation

663962900e7fea522126ba287715bb4a PGEffect.sys
Toshiba Corporation

32e11315b5126921ffd9074840ef13d3 portcls.sys
Microsoft Corporation

0d922e23c041efb1c3fac2a6f943c9bf processr.sys
Microsoft Corporation

c8fcb4899f8b70cc34e0d9876a80963c QIOMem.sys
H`VS_VERSION_INFO?>StringFileInfobbCompanyNameTOSHIBA^FileDescriptionGenericIO&MemoryAccessvFileVersion,,,.aInternalNameQIOMemLegalCopyrightCopyright©-TOSHIBA.Allrightsreserved.>vOriginalFilenameQIOMem.sys:vProductVersion,,,DVarFileInfo$Translationt

a53a15a11ebfd21077463ee2c7afeef0 ql2300.sys
QLogic Corporation

4f6d12b51de1aaeff7dc58c4d75423c8 ql40xx.sys
QLogic Corporation

76707bb36430888d9ce9d705398adb6c qwavedrv.sys
Microsoft Corporation

5a0da8ad5762fa2d91678a8a01311704 rasacd.sys
Microsoft Corporation

87a6e852a22991580d6d39adc4790463 rasl2tp.sys
Microsoft Corporation

855c9b1cd4756c5e9a2aa58a15f58c25 raspppoe.sys
Microsoft Corporation

27cc19e81ba5e3403c48302127bda717 raspptp.sys
Microsoft Corporation

e8b1e447b008d07ff47d016c2b0eeecb rassstp.sys
Microsoft Corporation

3bac8142102c15d59a87757c1d41dce5 rdbss.sys
Microsoft Corporation

302da2a0539f2cf54d7c6cc30c1f2d8d rdpbus.sys
Microsoft Corporation

cea6cc257fc9b7715f1c2b4849286d24 RDPCDD.sys
Microsoft Corporation

bb5971a4f00659529a5c44831af22365 RDPENCDD.sys
Microsoft Corporation

216f3fa57533d98e1f74ded70113177a RDPREFMP.sys
Microsoft Corporation

447de7e3dea39d422c1504f245b668b1 rdpwd.sys
Microsoft Corporation

e5dc9ba9e439d6dbdd79f8caacb5bf01 rdyboost.sys
Microsoft Corporation

77b3b747eb2413072b8e4306018d0c9b rmcast.sys
Microsoft Corporation

fc6d5c50d846b795335deb3fce8b33f3 RNDISMP.sys
Microsoft Corporation

388d3dd1a6457280f3badba9f3acd6b1 rootmdm.sys
Microsoft Corporation

ddc86e4f8e7456261e637e3552e804ff rspndr.sys
Microsoft Corporation

b89c0601a05e1140ac96fa965d94c340 rtl8192Ce.sys
Realtek Semiconductor

3ceee53bbf8ba284ff44585cec0162fe RtsUStor.sys
Realtek Semiconductor

e3bbb89983daf5622c1d50cf49f28227 sbp2port.sys
Microsoft Corporation

c94da20c7e3ba1dca269bc8460d98387 scfilter.sys
Microsoft Corporation

ad3a6838a059d65fb55d2f61cf0a6c1f scsiport.sys
Microsoft Corporation

3ea8a16169c26afbeb544e0e48421186 secdrv.sys
Macrovision Corporation

cb624c0035412af0debec78c41f5ca1b serenum.sys
Microsoft Corporation

c1d8e28b2c2adfaec4ba89e9fda69bd6 serial.sys
Microsoft Corporation

1c545a7d0691cc4a027396535691c3e3 sermouse.sys
Microsoft Corporation

a554811bcd09279536440c964ae35bbf sffdisk.sys
Microsoft Corporation

ff414f0baefeba59bc6c04b3db0b87bf sffp_mmc.sys
Microsoft Corporation

178298f767fe638c9fedcbdef58bb5e4 sffp_sd.sys
Microsoft Corporation

a9d601643a1647211a1ee2ec4e433ff4 sfloppy.sys
Microsoft Corporation

c6cc9297bd53e5229653303e556aa539 Sftfslh.sys
Microsoft Corporation

390aa7bc52cee43f6790cdea1e776703 Sftplaylh.sys
Microsoft Corporation

617e29a0b0a2807466560d4c4e338d3e Sftredirlh.sys
Microsoft Corporation

8f571f016fa1976f445147e9e6c8ae9b Sftvollh.sys
Microsoft Corporation

843caf1e5fde1ffd5ff768f23a51e2e1 sisraid2.sys
Silicon Integrated Systems

6a6c106d42e9ffff8b9fcb4f754f6da4 sisraid4.sys
Silicon Integrated Systems

548260a7b8654e024dc30bf8a7c5baa4 smb.sys
Microsoft Corporation

a80348ba03e96c70852959655ca3e084 smclib.sys
Microsoft Corporation

b9e31e5cacdfe584f34f730a677803f9 spldr.sys
Microsoft Corporation

fff95479c7ab1550f0750a5d01744211 spsys.sys
Microsoft Corporation

76548f7b818881b47d8d1ae1be9c11f8 srv2.sys
Microsoft Corporation

0af6e19d39c70844c5caa8fb0183c36e srvnet.sys
Microsoft Corporation

2408c0366d96bcdf63e8f1c78e4a29c5 srv.sys
Microsoft Corporation

f3817967ed533d08327dc73bc4d5542a stexstor.sys
Promise Technology

cfd8802cac57d3afe0c687786e9e55f8 storport.sys
Microsoft Corporation

001cc10fa5e71ae1119115e126c8750d stream.sys
Microsoft Corporation

d01ec09b6711a5f8e7e6564a4d0fbc90 swenum.sys
Microsoft Corporation

470c47daba9ca3966f0ab3f835d7d135 SynTP.sys
Synaptics

6e316c01cba8b785fe495f5cc4f48c6f tape.sys
Microsoft Corporation

76d078af6f587b162d50210f761eb9ed tcpipreg.sys
Microsoft Corporation

624c5b3aa4c99b3184bb922d9ece3ff0 tcpip.sys
Microsoft Corporation

fd542b661bd22fa69ca789ad0ac58c29 tdcmdpst.sys
Toshiba Corporation

0ca6fe26acc7ffee1bd0463f40835f32 tdi.sys
Microsoft Corporation

3371d21011695b16333a3934340c4e7c tdpipe.sys
Microsoft Corporation

7518f7bcfd4b308abc9192bacaf6c970 tdtcp.sys
Microsoft Corporation

079125c4b17b01fcaeebce0bcb290c0f tdx.sys
Microsoft Corporation

c448651339196c0e869a355171875522 termdd.sys
Microsoft Corporation

61b96c26131e37b24e93327a0bd1fb95 tssecsrv.sys
Microsoft Corporation

3836171a2cdf3af8ef10856db9835a70 tunnel.sys
Microsoft Corporation

9c7191f4b2e49bff47a6c1144b5923fa TVALZFL.sys
Toshiba Corporation

550b567f9364d8f7684c3fb3ea665a72 TVALZ_O.SYS
Toshiba Corporation

b4dd609bd7e282bfc683cec7eaaaad67 UAGP35.SYS
Microsoft Corporation

d47baead86c65d4f4069d7ce0a4edceb udfs.sys
Microsoft Corporation

4bfe1bc28391222894cbf1e7d0e42320 ULIAGPKX.SYS
Microsoft Corporation

eab6c35e62b1b0db0d1b48b671d3a117 umbus.sys
Microsoft Corporation

b2e8e8cb557b156da5493bbddcc1474d umpass.sys
Microsoft Corporation

d0fe8cb5f84303e73ff0754437fad3d1 usb8023.sys
Microsoft Corporation

faec06c1d24e2770ecc4f7c37659824d USBCAMD2.sys
Microsoft Corporation

537a4e03d7103c12d42dfd8ffdb5bdc9 usbccgp.sys
Microsoft Corporation

af0892a803fdda7492f595368e3b68e7 usbcir.sys
Microsoft Corporation

f96f7835c8818895c47f6213e3a01f5d usbd.sys
Microsoft Corporation

fbb21ebe49f6d560db37ac25fbc68e66 usbehci.sys
Microsoft Corporation

6b7a8a99c4a459e73c286a6763ea24cc usbhub.sys
Microsoft Corporation

8c88aa7617b4cbc2e4bed61d26b33a27 usbohci.sys
Microsoft Corporation

b37c3bf3ffc97177b1a9c016b7c8cdd6 usbport.sys
Microsoft Corporation

73188f58fb384e75c4063d29413cee3d usbprint.sys
Microsoft Corporation

8f0d9d2ea6cfed2730b5bafb9b5b11c2 usbrpm.sys
Microsoft Corporation

f39983647bc1f3e6100778ddfe9dce29 USBSTOR.SYS
Microsoft Corporation

0b5b3b2df3fd1709618acfa50b8392b0 usbuhci.sys
Microsoft Corporation

7cb8c573c6e4a2714402cc0a36eab4fe usbvideo.sys
Microsoft Corporation

c5c876ccfc083ff3b128f933823e87bd vdrvroot.sys
Microsoft Corporation

da4da3f5e02943c2dc8c6ed875de68dd vgapnp.sys
Microsoft Corporation

53e92a310193cb3c03bea963de7d9cfc vga.sys
Microsoft Corporation

c82e748660f62a242b2dfac1442f22a4 vhdmp.sys
Microsoft Corporation

e5689d93ffe4e5d66c0178761240dd54 viaide.sys
VIA Technologies

e7353d59c9842bc7299faeb7e7e09340 videoprt.sys
Microsoft Corporation

2b1a3dae2b4e70dbba822b7a03fbd4a3 volmgr.sys
Microsoft Corporation

99b0cbb569ca79acaed8c91461d765fb volmgrx.sys
Microsoft Corporation

58f82eed8ca24b461441f9c3e4f0bf5c volsnap.sys
Microsoft Corporation

5e2016ea6ebaca03c04feac5f330d997 vsmraid.sys
VIA Technologies

0c4540311e11664b245a263e1154cef8 VSTAZL6.SYS
Conexant

18e40c245dbfaf36fd0134a7ef2df396 VSTCNXT6.SYS
Conexant

02071d207a9858fbe3a48cbfd59c4a04 VSTDPV6.SYS
Conexant

36d4720b72b5c5d9cb2b9c29e9df67a1 vwifibus.sys
Microsoft Corporation

6a3d66263414ff0d6fa754c646612f3f vwififlt.sys
Microsoft Corporation

6a638fc4bfddc4d9b186c28c91bd1a01 vwifimp.sys
Microsoft Corporation

4e9440f4f152a7b944cb1663d3935a3e wacompen.sys
Microsoft Corporation

47ca49400643effd3f1c9a27e1d69324 wanarp.sys
Microsoft Corporation

fc438d1430b28618e2d0c7c332a710ad watchdog.sys
Microsoft Corporation

441bd2d7b4f98134c3a4f9fa570fd250 Wdf01000.sys
Microsoft Corporation

1b409454d7a00110fdb06f7e0f155a88 WdfLdr.sys
Microsoft Corporation

72889e16ff12ba0f235467d6091b17dc wd.sys
Microsoft Corporation

611b23304bf067451a9fdee01fbdd725 wfplwf.sys
Microsoft Corporation

05ecaec3e4529a7153b3136ceb49f0ec wimmount.sys
Microsoft Corporation

817eaff5d38674edd7713b9dfb8e9791 winusb.sys
Microsoft Corporation

f6ff8944478594d0e414d3f048f0d778 wmiacpi.sys
Microsoft Corporation

fc146f46872d4c5b529b89a5131fd1e6 wmilib.sys
Microsoft Corporation

6bcc1d7d2fd2453957c5479a32364e52 ws2ifsl.sys
Microsoft Corporation

7cadc74271dd6461c452c271b30bd378 WUDFPf.sys
Microsoft Corporation

3b197af0fff08aa66b6b2241ca538d64 WUDFRd.sys
Microsoft Corporation

#39
gringo_pr

Posted 16 November 2012 - 10:16 PM

Trusted Helper

Malware Removal
7,268 posts

Boot the computer with the USB drive again.
Click on File
Expand mnt
Expand your USB (sdb1)
Confirm that you see driver.sh.
Press Tool at the top
Choose Open Terminal
Type bash driver.sh -af
Press Enter
You will be prompted to input a filename.
Type the following:

explorer.exe
Press Enter
If successful, the script will search for this file.
After it has completed the search enter the next file to be searched
Type the following:

svchost.exe
Press Enter
After the search is completed type Exit
After it has finished a report will be located in the USB drive as filefind.txt
Please post it for my review

#40
FutureWoWplayer

Posted 17 November 2012 - 02:47 AM

Member

Topic Starter
Member
153 posts

Well I expected this report to be longer, but this is what the filefind.txt file had in it:

Search results for explorer.exe

Do I do something wrong?

#41
gringo_pr

Posted 17 November 2012 - 06:15 AM

Trusted Helper

Malware Removal
7,268 posts

it looks like you did - can you please try again

#42
FutureWoWplayer

Posted 18 November 2012 - 11:40 AM

Member

Topic Starter
Member
153 posts

Okay, so here's where we are at. I apologize for the lateness in my response, been a crazy work week. I went back to the top of this page and started the steps over again which required me to format my usb drive and add the boot thing. I went through the steps again to get the report.txt - after I typed in bash driver.sh the command window scanned and when it was finished there was a message at the top of the command window that said:

6295aa106c998dcb27e68da713fe9c53 fbd.sys has NO Company Name!

Done
sh-4.0#

I don't know if that means anything, but I wanted to include it.

*Note* Whenever I boot to the USB - I go through the steps, find the mnt folder which expands to show the sda1, sda2.... but sdb1 is never there right away. I have to pull the usb drive out of the sick computer and plug it back in. Then sdb1 shows up with the driver.sh file. I don't know if that makes a difference but I want to make sure I am documenting all the thing I am doing/seeing.

Next I am re-posting the new report.txt file I got. I don't know if anything has changed, but your eyes and brain can probably decipher it better than I can so here is the report.txt file:

Sun Nov 18 08:56:04 UTC 2012
Driver report for /mnt/sda2/Windows/System32/drivers
6295aa106c998dcb27e68da713fe9c53 fbd.sys has NO Company Name!

64edd3f59db321947969fdf1dd747323 1394bus.sys
Microsoft Corporation

1b00662092f9f9568b995902f0cc40d5 1394ohci.sys
Microsoft Corporation

63b05a0420ce4bf0e4af6dcc7cada254 acpipmi.sys
Microsoft Corporation

6f11e88748cdefd2f76aa215f97ddfe5 acpi.sys
Microsoft Corporation

2f6b34b83843f0c5118b63ac634f5bf4 adp94xx.sys
Adaptec

597f78224ee9224ea1a13d6350ced962 adpahci.sys
Adaptec

e109549c90f62fb570b9540c4b148e54 adpu320.sys
Adaptec

db9d6c6b2cd95a9ca414d045b627422e afd.sys
Microsoft Corporation

7ecff9b22276b73f43a99a15a6094e90 agilevpn.sys
Microsoft Corporation

608c14dba7299d8cb6ed035a68a15799 AGP440.sys
Microsoft Corporation

5812713a477a3ad7363c7438ca2ee038 aliide.sys
Acer Laboratories

1ff8b4431c353ce385c875f194924c0c amdide.sys
Microsoft Corporation

7024f087cff1833a806193ef9d22cda9 amdk8.sys
Microsoft Corporation

1e56388b3fe0d031c44144eb8c4d6217 amdppm.sys
Microsoft Corporation

ec7ebab00a4d8448bab68d1e49b4beb9 amdsata.sys
Advanced Micro Devices

f67f933e79241ed32ff46a4f29b5120b amdsbs.sys
AMD Technologies

db27766102c7bf7e95140a2aa81d042e amdxata.sys
Advanced Micro Devices

42fd751b27fa0e9c69bb39f39e409594 appid.sys
Microsoft Corporation

019af6924aefe7839f61c830227fe79c arcsas.sys
Adaptec

c484f8ceb1717c540242531db7845c4e arc.sys
Adaptec

769765ce2cc62867468cea93969b2242 asyncmac.sys
Microsoft Corporation

02062c0b390b7729edc9e69c680a6f3c atapi.sys
Microsoft Corporation

aa2186f7944104a16d6ed176ed462cec ataport.sys
Microsoft Corporation

aefaf27f1b7e52c705df4fb6c96732f6 atikmdag.sys
ATI Technologies

8149db73be27950ec72767a1193153a6 atikmpag.sys
Advanced Micro Devices

7c5d273e29dcc5505469b299c6f29163 AtiPcie.sys
Advanced Micro Devices

aefaf27f1b7e52c705df4fb6c96732f6 atipmdag.sys
ATI Technologies

b5ace6968304a3900eeb1ebfd9622df2 b57nd60a.sys
Broadcom Corporation

f4de2ae7a9e1badac70bc71ea2c17612 battc.sys
Microsoft Corporation

16a47ce2decc9b099349a5f840654746 beep.sys
Microsoft Corporation

61583ee3c3a17003c4acd0475646b4d3 blbdrive.sys
Microsoft Corporation

19d20159708e152267e53b66677a4995 bowser.sys
Microsoft Corporation

f09eee9edc320b5e1501f749fde686c8 BrFiltLo.sys
Brother Industries

b114d3098e9bdb8bea8b053685831be6 BrFiltUp.sys
Brother Industries

5c2f352a4e961d72518261257aae204b bridge.sys
Microsoft Corporation

43bea8d483bf1870f018e2d02e06a5bd BrSerId.sys
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries

a6eca2151b08a09caceca35c07f05b42 BrSerWdm.sys
Brother Industries

b79968002c277e869cf38bd22cd61524 BrUsbMdm.sys
Brother Industries

a87528880231c54e75ea7a44943b38bf BrUsbSer.sys
Brother Industries

9da669f11d1f894ab4eb69bf546a42e8 bthmodem.sys
Microsoft Corporation

3e5b191307609f7514148c6832bb0842 bxvbda.sys
Broadcom Corporation

b8bd2bb284668c84865658c77574381a cdfs.sys
Microsoft Corporation

83d2d75e1efb81b3450c18131443f7db cdrom.sys
Microsoft Corporation

25c58ee97be0416a373e3e4f855206b5 CHDRT64.sys
Conexant

d7cd5c4e1b71fa62050515314cfb52cf circlass.sys
Microsoft Corporation

62f1ed63f0cb0b5a2f65d15a6490c2fd Classpnp.sys
Microsoft Corporation

0840155d0bddf1190f84a663c284bd33 CmBatt.sys
Microsoft Corporation

e19d3f095812725d88f9001985b94edd cmdide.sys
CMD Technology

ca7720b73446fddec5c69519c1174c98 cng.sys
Microsoft Corporation

102de219c3f61415f964c88e9085ad14 compbatt.sys
Microsoft Corporation

f26b3a86f6fa87ca360b879581ab4123 CompositeBus.sys
Microsoft Corporation

3e588b60ec061686ba05d33574a344c6 crashdmp.sys
Microsoft Corporation

1c827878a998c18847245fe1f34ee597 crcdisk.sys
Microsoft Corporation

9c253ce7311ca60fc11c774692a13208 dfsc.sys
Microsoft Corporation

13096b05847ec78f0977f2c0f79e9ab3 discache.sys
Microsoft Corporation

20080512f61d3210e449a1256f66a7fd Diskdump.sys
Microsoft Corporation

9819eee8b5ea3784ec4af3b137a5244c disk.sys
Microsoft Corporation

9b19f34400d24df84c858a421c205754 drmkaud.sys
Microsoft Corporation

21d26064aedb4988f785bb4a3a2c051e drmk.sys
Microsoft Corporation

839b5fe3d48e9f35b22c21a3d5103f6c Dumpata.sys
Microsoft Corporation

814db88f2641691575a455cf25354098 dumpfve.sys
Microsoft Corporation

bf24d6f2ed97fe830bfd52b246f98e67 dxapi.sys
Microsoft Corporation

1633b9abf52784a1331476397a48cbef dxgkrnl.sys
Microsoft Corporation

3238b9078e0766ab5e62dc737a809adb dxgmms1.sys
Microsoft Corporation

fede0629ecb23650d48989517d4914da dxg.sys
Microsoft Corporation

0e5da5369a0fcaea12456dd852545184 elxstor.sys
Emulex

34a3c54752046e79a126e15c51db409b errdev.sys
Microsoft Corporation

dc5d737f51be844d8c82c695eb17372f evbda.sys
Broadcom Corporation

a510c654ec00c1e9bdd91eeb3a59823b exfat.sys
Microsoft Corporation

0adc83218b66a6db380c330836f3e36d fastfat.sys
Microsoft Corporation

6295aa106c998dcb27e68da713fe9c53 fbd.sys

d765d19cd8ef61f650c384f62fac00ab fdc.sys
Microsoft Corporation

655661be46b5f5f3fd454e2c3095b930 fileinfo.sys
Microsoft Corporation

5f671ab5bc87eea04ec38a6cd5962a47 filetrace.sys
Microsoft Corporation

c172a0f53008eaeb8ea33fe10e177af5 flpydisk.sys
Microsoft Corporation

f7866af72abbaf84b1fa5aa195378c59 fltMgr.sys
Microsoft Corporation

d43703496149971890703b4b1b723eac fsdepends.sys
Microsoft Corporation

d3e3f93d67821a2db2b3d9fac2dc2064 fs_rec.sys
Microsoft Corporation

ae87ba80d0ec3b57126ed2cdc15b24ed fvevol.sys
Microsoft Corporation

50555005e22a56aef10be607472d0bdc FWPKCLNT.SYS
Microsoft Corporation

8c778d335c9d272cfd3298ab02abe3b6 GAGP30KX.SYS
Microsoft Corporation

f2523ef6460fc42405b12248338ab2f0 hcw85cir.sys
Hauppauge Computer Works

0a49913402747a0b67de940fb42cbdbb hdaudbus.sys
Microsoft Corporation

6410f6f415b2a5a9037224c41da8bf12 HdAudio.sys
Microsoft Corporation

78e86380454a7b10a5eb255dc44a355f hidbatt.sys
Microsoft Corporation

7fd2a313f7afe5c4dab14798c48dd104 hidbth.sys
Microsoft Corporation

685fec2407fc121eb937cb658b3c0f35 hidclass.sys
Microsoft Corporation

0a77d29f311b88cfae3b13f9c1a73825 hidir.sys
Microsoft Corporation

49ee2e52e6cd03947dad72f65367be06 hidparse.sys
Microsoft Corporation

b3bf6b5b50006def50b66306d99fcf6f hidusb.sys
Microsoft Corporation

0886d440058f203eba0e1825e4355914 HpSAMD.sys
Hewlett-Packard

cee049cac4efa7f4e1e4ad014414a5d4 http.sys
Microsoft Corporation

f17766a19145f111856378df337a5d79 hwpolicy.sys
Microsoft Corporation

fa55c73d4affa7ee23ac4be53b4592d3 i8042prt.sys
Microsoft Corporation

b75e45c564e944a2657167d197ab29da iaStorV.sys
Intel Corporation

5c18831c61933628f5bb0ea2675b9d21 iirsp.sys
Intel Corp

f00f20e70c6ec3aa366910083a0518aa intelide.sys
Microsoft Corporation

ada036632c664caa754079041cf1f8c1 intelppm.sys
Microsoft Corporation

722dd294df62483cecaae6e094b4d695 ipfltdrv.sys
Microsoft Corporation

e2b4a4494db7cb9b89b55ca268c337c5 IPMIDrv.sys
Microsoft Corporation

af9b39a7e7b6caa203b3862582e9f2d0 ipnat.sys
Microsoft Corporation

05360b1ea5a2abf620d1d96ebd8bd8f1 irda.sys
Microsoft Corporation

3abf5e7213eb28966d55d58b515d5ce9 irenum.sys
Microsoft Corporation

2f7b28dc3e1183e5eb418df55c204f38 isapnp.sys
Microsoft Corporation

bc02336f1cba7dcc7d1213bb588a68a5 kbdclass.sys
Microsoft Corporation

6def98f8541e1b5dceb2c822a11f7323 kbdhid.sys
Microsoft Corporation

4f4b5fde429416877de7143044582eb5 ksecdd.sys
Microsoft Corporation

6f40465a44ecdc1731befafec5bdd03c ksecpkg.sys
Microsoft Corporation

5c7af4a20f5bf67042b2e613d123d111 ks.sys
Microsoft Corporation

6869281e78cb31a43e969f06b57347c4 ksthunk.sys
Microsoft Corporation

55480b9c63f3f91a8ebbadcbf28fe581 L1C62x64.sys
Atheros Communications

1538831cf8ad2979a04c423779465827 lltdio.sys
Microsoft Corporation

1a93e54eb0ece102495a51266dcdb6a6 lsi_fc.sys
LSI Corporation

30f5c0de1ee8b5bc9306c1f0e4a75f93 lsi_sas2.sys
LSI Corporation

1047184a9fdc8bdbff857175875ee810 lsi_sas.sys
LSI Corporation

0504eacaff0d3c8aed161c4b0d369d4a lsi_scsi.sys
LSI Corporation

43d0f98e1d56ccddb0d5254cff7b356e luafv.sys
Microsoft Corporation

3c9f072f9dca856b9fb7a20cbd4281ac mcd.sys
Microsoft Corporation

a55805f747c6edb6a9080d7c633bd0f4 megasas.sys
LSI Corporation

baf74ce0072480c3b6b7c13b2a94d6b3 MegaSR.sys
LSI Corporation

800ba92f7010378b09f9ed9270f07137 modem.sys
Microsoft Corporation

b03d591dc7da45ece20b3b467e6aadaa monitor.sys
Microsoft Corporation

7d27ea49f3c1f687d357e77a470aea99 mouclass.sys
Microsoft Corporation

d3bf052c40b0c4166d9fd86a4288c1e6 mouhid.sys
Microsoft Corporation

791af66c4d0e7c90a3646066386fb571 mountmgr.sys
Microsoft Corporation

609d1d87649ecc19796f4d76d4c15cea mpio.sys
Microsoft Corporation

6c38c9e45ae0ea2fa5e551f2ed5e978f mpsdrv.sys
Microsoft Corporation

30524261bb51d96d6fcbac20c810183c mrxdav.sys
Microsoft Corporation

f0067552f8f9b33d7c59403ab808a3cb mrxsmb10.sys
Microsoft Corporation

3c142d31de9f2f193218a53fe2632051 mrxsmb20.sys
Microsoft Corporation

040d62a9d8ad28922632137acdd984f2 mrxsmb.sys
Microsoft Corporation

5c37497276e3b3a5488b23a326a754b7 msahci.sys
Microsoft Corporation

8d27b597229aed79430fb9db3bcbfbd0 msdsm.sys
Microsoft Corporation

aa3fb40e17ce1388fa1bedab50ea8f96 msfs.sys
Microsoft Corporation

f9d215a46a8b9753f61767fa72a20326 mshidkmdf.sys
Microsoft Corporation

d916874bbd4f8b07bfb7fa9b3ccae29d msisadrv.sys
Microsoft Corporation

fa4d2557de56d45b0a346f93564be6e1 msiscsi.sys
Microsoft Corporation

49ccf2c4fea34ffad8b1b59d49439366 mskssrv.sys
Microsoft Corporation

bdd71ace35a232104ddd349ee70e1ab3 mspclock.sys
Microsoft Corporation

4ed981241db27c3383d72092b618a1d0 mspqm.sys
Microsoft Corporation

89cb141aa8616d8c6a4610fa26c60964 msrpc.sys
Microsoft Corporation

0eed230e37515a0eaee3c2e1bc97b288 mssmbios.sys
Microsoft Corporation

2e66f9ecb30b4221a318c92ac2250779 mstee.sys
Microsoft Corporation

7ea404308934e675bffde8edf0757bcd MTConfig.sys
Microsoft Corporation

f9a18612fd3526fe473c1bda678d61c8 mup.sys
Microsoft Corporation

9f9a1f53aad7da4d6fef5bb73ab811ac ndiscap.sys
Microsoft Corporation

cad515dbd07d082bb317d9928ce8962c ndis.sys
Microsoft Corporation

30639c932d9fef22b31268fe25a1b6e5 ndistapi.sys
Microsoft Corporation

f105ba1e22bf1f2ee8f005d4305e4bec ndisuio.sys
Microsoft Corporation

557dfab9ca1fcb036ac77564c010dad3 ndiswan.sys
Microsoft Corporation

659b74fb74b86228d6338d643cd3e3cf ndproxy.sys
Microsoft Corporation

86743d9f5d2b1048062b14b1d84501c4 netbios.sys
Microsoft Corporation

9162b273a44ab9dce5b44362731d062a netbt.sys
Microsoft Corporation

7b8403912673a87ea6622f5cb867a670 netio.sys
Microsoft Corporation

77889813be4d166cdab78ddba990da92 nfrd960.sys
IBM Corp

1e4c4ab5c9b8dd13179bbdc75a2a01f7 npfs.sys
Microsoft Corporation

e7f5ae18af4168178a642a9247c63001 nsiproxy.sys
Microsoft Corporation

184c189d4fc416978550fc599bb4edda ntfs.sys
Microsoft Corporation

9899284589f75fa8724ff3d16aed75c1 null.sys
Microsoft Corporation

270d7cd42d6e3979f6dd0146650f0e05 NV_AGP.SYS
Microsoft Corporation

a4d9c9a608a97f59307c2f2600edc6a4 nvraid.sys
NVIDIA Corporation

6c1d5f70e7a6a3fd1c90d840edc048b9 nvstor.sys
NVIDIA Corporation

1ea3749c4114db3e3161156ffffa6b33 nwifi.sys
Microsoft Corporation

3589478e4b22ce21b41fa1bfc0b8b8a0 ohci1394.sys
Microsoft Corporation

ee992183bd8eaefd9973f352e587a299 pacer.sys
Microsoft Corporation

0086431c29c35be1dbc43f52cc273887 parport.sys
Microsoft Corporation

90061b1acfe8ccaa5345750ffe08d8b8 partmgr.sys
Microsoft Corporation

b5b8b5ef2e5cb34df8dcf8831e3534fa pciide.sys
Microsoft Corporation

144497daa145ba0f7be896064146c058 pciidex.sys
Microsoft Corporation

5aab2b170536885de70a6cba8d7ce52b pci.sys
Microsoft Corporation

b2e81d4e87ce48589f98cb8c05b01f2f pcmcia.sys
Microsoft Corporation

d6b9c2e1a11a3a4b26a182ffef18f603 pcw.sys
Microsoft Corporation

68769c3356b3be5d1c732c97b9a80d6e PEAuth.sys
Microsoft Corporation

663962900e7fea522126ba287715bb4a PGEffect.sys
Toshiba Corporation

32e11315b5126921ffd9074840ef13d3 portcls.sys
Microsoft Corporation

0d922e23c041efb1c3fac2a6f943c9bf processr.sys
Microsoft Corporation

c8fcb4899f8b70cc34e0d9876a80963c QIOMem.sys
H`VS_VERSION_INFO?>StringFileInfobbCompanyNameTOSHIBA^FileDescriptionGenericIO&MemoryAccessvFileVersion,,,.aInternalNameQIOMemLegalCopyrightCopyright©-TOSHIBA.Allrightsreserved.>vOriginalFilenameQIOMem.sys:vProductVersion,,,DVarFileInfo$Translationt

a53a15a11ebfd21077463ee2c7afeef0 ql2300.sys
QLogic Corporation

4f6d12b51de1aaeff7dc58c4d75423c8 ql40xx.sys
QLogic Corporation

76707bb36430888d9ce9d705398adb6c qwavedrv.sys
Microsoft Corporation

5a0da8ad5762fa2d91678a8a01311704 rasacd.sys
Microsoft Corporation

87a6e852a22991580d6d39adc4790463 rasl2tp.sys
Microsoft Corporation

855c9b1cd4756c5e9a2aa58a15f58c25 raspppoe.sys
Microsoft Corporation

27cc19e81ba5e3403c48302127bda717 raspptp.sys
Microsoft Corporation

e8b1e447b008d07ff47d016c2b0eeecb rassstp.sys
Microsoft Corporation

3bac8142102c15d59a87757c1d41dce5 rdbss.sys
Microsoft Corporation

302da2a0539f2cf54d7c6cc30c1f2d8d rdpbus.sys
Microsoft Corporation

cea6cc257fc9b7715f1c2b4849286d24 RDPCDD.sys
Microsoft Corporation

bb5971a4f00659529a5c44831af22365 RDPENCDD.sys
Microsoft Corporation

216f3fa57533d98e1f74ded70113177a RDPREFMP.sys
Microsoft Corporation

447de7e3dea39d422c1504f245b668b1 rdpwd.sys
Microsoft Corporation

e5dc9ba9e439d6dbdd79f8caacb5bf01 rdyboost.sys
Microsoft Corporation

77b3b747eb2413072b8e4306018d0c9b rmcast.sys
Microsoft Corporation

fc6d5c50d846b795335deb3fce8b33f3 RNDISMP.sys
Microsoft Corporation

388d3dd1a6457280f3badba9f3acd6b1 rootmdm.sys
Microsoft Corporation

ddc86e4f8e7456261e637e3552e804ff rspndr.sys
Microsoft Corporation

b89c0601a05e1140ac96fa965d94c340 rtl8192Ce.sys
Realtek Semiconductor

3ceee53bbf8ba284ff44585cec0162fe RtsUStor.sys
Realtek Semiconductor

e3bbb89983daf5622c1d50cf49f28227 sbp2port.sys
Microsoft Corporation

c94da20c7e3ba1dca269bc8460d98387 scfilter.sys
Microsoft Corporation

ad3a6838a059d65fb55d2f61cf0a6c1f scsiport.sys
Microsoft Corporation

3ea8a16169c26afbeb544e0e48421186 secdrv.sys
Macrovision Corporation

cb624c0035412af0debec78c41f5ca1b serenum.sys
Microsoft Corporation

c1d8e28b2c2adfaec4ba89e9fda69bd6 serial.sys
Microsoft Corporation

1c545a7d0691cc4a027396535691c3e3 sermouse.sys
Microsoft Corporation

a554811bcd09279536440c964ae35bbf sffdisk.sys
Microsoft Corporation

ff414f0baefeba59bc6c04b3db0b87bf sffp_mmc.sys
Microsoft Corporation

178298f767fe638c9fedcbdef58bb5e4 sffp_sd.sys
Microsoft Corporation

a9d601643a1647211a1ee2ec4e433ff4 sfloppy.sys
Microsoft Corporation

c6cc9297bd53e5229653303e556aa539 Sftfslh.sys
Microsoft Corporation

390aa7bc52cee43f6790cdea1e776703 Sftplaylh.sys
Microsoft Corporation

617e29a0b0a2807466560d4c4e338d3e Sftredirlh.sys
Microsoft Corporation

8f571f016fa1976f445147e9e6c8ae9b Sftvollh.sys
Microsoft Corporation

843caf1e5fde1ffd5ff768f23a51e2e1 sisraid2.sys
Silicon Integrated Systems

6a6c106d42e9ffff8b9fcb4f754f6da4 sisraid4.sys
Silicon Integrated Systems

548260a7b8654e024dc30bf8a7c5baa4 smb.sys
Microsoft Corporation

a80348ba03e96c70852959655ca3e084 smclib.sys
Microsoft Corporation

b9e31e5cacdfe584f34f730a677803f9 spldr.sys
Microsoft Corporation

fff95479c7ab1550f0750a5d01744211 spsys.sys
Microsoft Corporation

76548f7b818881b47d8d1ae1be9c11f8 srv2.sys
Microsoft Corporation

0af6e19d39c70844c5caa8fb0183c36e srvnet.sys
Microsoft Corporation

2408c0366d96bcdf63e8f1c78e4a29c5 srv.sys
Microsoft Corporation

f3817967ed533d08327dc73bc4d5542a stexstor.sys
Promise Technology

cfd8802cac57d3afe0c687786e9e55f8 storport.sys
Microsoft Corporation

001cc10fa5e71ae1119115e126c8750d stream.sys
Microsoft Corporation

d01ec09b6711a5f8e7e6564a4d0fbc90 swenum.sys
Microsoft Corporation

470c47daba9ca3966f0ab3f835d7d135 SynTP.sys
Synaptics

6e316c01cba8b785fe495f5cc4f48c6f tape.sys
Microsoft Corporation

76d078af6f587b162d50210f761eb9ed tcpipreg.sys
Microsoft Corporation

624c5b3aa4c99b3184bb922d9ece3ff0 tcpip.sys
Microsoft Corporation

fd542b661bd22fa69ca789ad0ac58c29 tdcmdpst.sys
Toshiba Corporation

0ca6fe26acc7ffee1bd0463f40835f32 tdi.sys
Microsoft Corporation

3371d21011695b16333a3934340c4e7c tdpipe.sys
Microsoft Corporation

7518f7bcfd4b308abc9192bacaf6c970 tdtcp.sys
Microsoft Corporation

079125c4b17b01fcaeebce0bcb290c0f tdx.sys
Microsoft Corporation

c448651339196c0e869a355171875522 termdd.sys
Microsoft Corporation

61b96c26131e37b24e93327a0bd1fb95 tssecsrv.sys
Microsoft Corporation

3836171a2cdf3af8ef10856db9835a70 tunnel.sys
Microsoft Corporation

9c7191f4b2e49bff47a6c1144b5923fa TVALZFL.sys
Toshiba Corporation

550b567f9364d8f7684c3fb3ea665a72 TVALZ_O.SYS
Toshiba Corporation

b4dd609bd7e282bfc683cec7eaaaad67 UAGP35.SYS
Microsoft Corporation

d47baead86c65d4f4069d7ce0a4edceb udfs.sys
Microsoft Corporation

4bfe1bc28391222894cbf1e7d0e42320 ULIAGPKX.SYS
Microsoft Corporation

eab6c35e62b1b0db0d1b48b671d3a117 umbus.sys
Microsoft Corporation

b2e8e8cb557b156da5493bbddcc1474d umpass.sys
Microsoft Corporation

d0fe8cb5f84303e73ff0754437fad3d1 usb8023.sys
Microsoft Corporation

faec06c1d24e2770ecc4f7c37659824d USBCAMD2.sys
Microsoft Corporation

537a4e03d7103c12d42dfd8ffdb5bdc9 usbccgp.sys
Microsoft Corporation

af0892a803fdda7492f595368e3b68e7 usbcir.sys
Microsoft Corporation

f96f7835c8818895c47f6213e3a01f5d usbd.sys
Microsoft Corporation

fbb21ebe49f6d560db37ac25fbc68e66 usbehci.sys
Microsoft Corporation

6b7a8a99c4a459e73c286a6763ea24cc usbhub.sys
Microsoft Corporation

8c88aa7617b4cbc2e4bed61d26b33a27 usbohci.sys
Microsoft Corporation

b37c3bf3ffc97177b1a9c016b7c8cdd6 usbport.sys
Microsoft Corporation

73188f58fb384e75c4063d29413cee3d usbprint.sys
Microsoft Corporation

8f0d9d2ea6cfed2730b5bafb9b5b11c2 usbrpm.sys
Microsoft Corporation

f39983647bc1f3e6100778ddfe9dce29 USBSTOR.SYS
Microsoft Corporation

0b5b3b2df3fd1709618acfa50b8392b0 usbuhci.sys
Microsoft Corporation

7cb8c573c6e4a2714402cc0a36eab4fe usbvideo.sys
Microsoft Corporation

c5c876ccfc083ff3b128f933823e87bd vdrvroot.sys
Microsoft Corporation

da4da3f5e02943c2dc8c6ed875de68dd vgapnp.sys
Microsoft Corporation

53e92a310193cb3c03bea963de7d9cfc vga.sys
Microsoft Corporation

c82e748660f62a242b2dfac1442f22a4 vhdmp.sys
Microsoft Corporation

e5689d93ffe4e5d66c0178761240dd54 viaide.sys
VIA Technologies

e7353d59c9842bc7299faeb7e7e09340 videoprt.sys
Microsoft Corporation

2b1a3dae2b4e70dbba822b7a03fbd4a3 volmgr.sys
Microsoft Corporation

99b0cbb569ca79acaed8c91461d765fb volmgrx.sys
Microsoft Corporation

58f82eed8ca24b461441f9c3e4f0bf5c volsnap.sys
Microsoft Corporation

5e2016ea6ebaca03c04feac5f330d997 vsmraid.sys
VIA Technologies

0c4540311e11664b245a263e1154cef8 VSTAZL6.SYS
Conexant

18e40c245dbfaf36fd0134a7ef2df396 VSTCNXT6.SYS
Conexant

02071d207a9858fbe3a48cbfd59c4a04 VSTDPV6.SYS
Conexant

36d4720b72b5c5d9cb2b9c29e9df67a1 vwifibus.sys
Microsoft Corporation

6a3d66263414ff0d6fa754c646612f3f vwififlt.sys
Microsoft Corporation

6a638fc4bfddc4d9b186c28c91bd1a01 vwifimp.sys
Microsoft Corporation

4e9440f4f152a7b944cb1663d3935a3e wacompen.sys
Microsoft Corporation

47ca49400643effd3f1c9a27e1d69324 wanarp.sys
Microsoft Corporation

fc438d1430b28618e2d0c7c332a710ad watchdog.sys
Microsoft Corporation

441bd2d7b4f98134c3a4f9fa570fd250 Wdf01000.sys
Microsoft Corporation

1b409454d7a00110fdb06f7e0f155a88 WdfLdr.sys
Microsoft Corporation

72889e16ff12ba0f235467d6091b17dc wd.sys
Microsoft Corporation

611b23304bf067451a9fdee01fbdd725 wfplwf.sys
Microsoft Corporation

05ecaec3e4529a7153b3136ceb49f0ec wimmount.sys
Microsoft Corporation

817eaff5d38674edd7713b9dfb8e9791 winusb.sys
Microsoft Corporation

f6ff8944478594d0e414d3f048f0d778 wmiacpi.sys
Microsoft Corporation

fc146f46872d4c5b529b89a5131fd1e6 wmilib.sys
Microsoft Corporation

6bcc1d7d2fd2453957c5479a32364e52 ws2ifsl.sys
Microsoft Corporation

7cadc74271dd6461c452c271b30bd378 WUDFPf.sys
Microsoft Corporation

3b197af0fff08aa66b6b2241ca538d64 WUDFRd.sys
Microsoft Corporation

And so the next report that I have is a better then the first filefind.txt I posted. Here is the report I think you were looking for. I hope this helps, and thank you for being so patient with me. The filefind.txt report:

Search results for explorer.exe

0862495e0c825893db75ef44faea8e93 /mnt/sda2/Windows/erdnt/cache86/explorer.exe
2.7M Feb 26 2011

0862495e0c825893db75ef44faea8e93 /mnt/sda2/Windows/explorer.exe
2.7M Feb 26 2011

2af58d15edc06ec6fdacce1f19482bbf /mnt/sda2/Windows/SysWOW64/explorer.exe
2.5M Feb 26 2011

c235a51cb740e45ffa0ebfb9bafcda64 /mnt/sda2/Windows/winsxs/amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566/explorer.exe
2.7M Jul 14 2009

f170b4a061c9e026437b193b4d571799 /mnt/sda2/Windows/winsxs/amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae/explorer.exe
2.7M Aug 3 2009

9aaaec8dac27aa17b053e6352ad233ae /mnt/sda2/Windows/winsxs/amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007/explorer.exe
2.7M Oct 31 2009

0862495e0c825893db75ef44faea8e93 /mnt/sda2/Windows/winsxs/amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25/explorer.exe
2.7M Feb 26 2011

700073016dac1c3d2e7e2ce4223334b6 /mnt/sda2/Windows/winsxs/amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c/explorer.exe
2.7M Aug 3 2009

b8ec4bd49ce8f6fc457721bfc210b67f /mnt/sda2/Windows/winsxs/amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7/explorer.exe
2.7M Oct 31 2009

e38899074d4951d31b4040e994dd7c8d /mnt/sda2/Windows/winsxs/amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9/explorer.exe
2.7M Feb 26 2011

332feab1435662fc6c672e25beb37be3 /mnt/sda2/Windows/winsxs/amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba/explorer.exe
2.7M Feb 25 2011

3b69712041f3d63605529bd66dc00c48 /mnt/sda2/Windows/winsxs/amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332/explorer.exe
2.7M Feb 26 2011

15bc38a7492befe831966adb477cf76f /mnt/sda2/Windows/winsxs/wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761/explorer.exe
2.5M Jul 14 2009

b95eeb0f4e5efbf1038a35b3351cf047 /mnt/sda2/Windows/winsxs/wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9/explorer.exe
2.5M Aug 3 2009

2af58d15edc06ec6fdacce1f19482bbf /mnt/sda2/Windows/winsxs/wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020/explorer.exe
2.5M Feb 26 2011

9ff6c4c91a3711c0a3b18f87b08b518d /mnt/sda2/Windows/winsxs/wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617/explorer.exe
2.5M Aug 3 2009

c76153c7eca00fa852bb0c193378f917 /mnt/sda2/Windows/winsxs/wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2/explorer.exe
2.5M Oct 31 2009

255cf508d7cfb10e0794d6ac93280bd8 /mnt/sda2/Windows/winsxs/wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4/explorer.exe
2.5M Feb 26 2011

8b88ebbb05a0e56b7dcc708498c02b3e /mnt/sda2/Windows/winsxs/wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5/explorer.exe
2.5M Feb 25 2011

0fb9c74046656d1579a64660ad67b746 /mnt/sda2/Windows/winsxs/wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d/explorer.exe
2.5M Feb 26 2011

2626fc9755be22f805d3cfa0ce3ee727 /mnt/sda2/Windows/winsxs/wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202/explorer.exe
2.5M Oct 31 2009

Search results for svchost.exe

c78655bc80301d76ed4fef1c1ea40a7d /mnt/sda2/Windows/erdnt/cache64/svchost.exe
26.5K Jul 14 2009

54a47f6b5e09a77e61649109c6a08866 /mnt/sda2/Windows/erdnt/cache86/svchost.exe
20.5K Jul 14 2009

c78655bc80301d76ed4fef1c1ea40a7d /mnt/sda2/Windows/System32/svchost.exe
26.5K Jul 14 2009

54a47f6b5e09a77e61649109c6a08866 /mnt/sda2/Windows/SysWOW64/svchost.exe
20.5K Jul 14 2009

c78655bc80301d76ed4fef1c1ea40a7d /mnt/sda2/Windows/winsxs/amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c/svchost.exe
26.5K Jul 14 2009

54a47f6b5e09a77e61649109c6a08866 /mnt/sda2/Windows/winsxs/x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356/svchost.exe
20.5K Jul 14 2009

Edited by FutureWoWplayer, 18 November 2012 - 11:41 AM.

#43
gringo_pr

Posted 18 November 2012 - 12:08 PM

Trusted Helper

Malware Removal
7,268 posts

Boot the computer with the USB drive again.
Click on File
Expand mnt
Expand your USB (sdb1)
Confirm that you see driver.sh.
Press Tool at the top
Choose Open Terminal
Type bash driver.sh -f
Press Enter
You will be prompted to input a filename.
Type the following:

fbd.sys
Press Enter
If succesful, the script will search this file.
After it has finished a report will be located in the USB drive as filefind.txt

Please note - all text entries are case sensitive

Copy and paste the filefind.txt for my review

#44
FutureWoWplayer

Posted 18 November 2012 - 12:46 PM

Member

Topic Starter
Member
153 posts

This is what the filefind.txt report had in it:

Search results for fbd.sys

6295aa106c998dcb27e68da713fe9c53 /mnt/sda2/Windows/System32/drivers/fbd.sys
13 Mar 19 2011