Both logs as requested and two questions:
Q) After the aswMBR scan had completed, one of the options is "FIX MBR" do I have to click that or not? So far I have just clicked "Save log". Can you le me know either way so I can shut down the aswMBR window, thanks.
Q) Is it ok to reboot the computer and also plug my external drive back in yet? Not sure when I can/am meant to do that, thanks.
Here are the logs:
----BEGIN TDSSKILLER LOG---
03:25:51.0593 0192 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
03:25:51.0953 0192 ============================================================
03:25:51.0953 0192 Current date / time: 2012/11/14 03:25:51.0953
03:25:51.0953 0192 SystemInfo:
03:25:51.0953 0192
03:25:51.0953 0192 OS Version: 5.1.2600 ServicePack: 2.0
03:25:51.0953 0192 Product type: Workstation
03:25:51.0953 0192 ComputerName: YOUR-JIKOHAXMOT
03:25:51.0953 0192 UserName: greg
03:25:51.0953 0192 Windows directory: C:\WINDOWS
03:25:51.0953 0192 System windows directory: C:\WINDOWS
03:25:51.0953 0192 Processor architecture: Intel x86
03:25:51.0953 0192 Number of processors: 1
03:25:51.0953 0192 Page size: 0x1000
03:25:51.0953 0192 Boot type: Normal boot
03:25:51.0953 0192 ============================================================
03:25:53.0390 0192 Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3901, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
03:25:53.0406 0192 ============================================================
03:25:53.0406 0192 \Device\Harddisk0\DR0:
03:25:53.0437 0192 MBR partitions:
03:25:53.0437 0192 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x37E3E01
03:25:53.0453 0192 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x37E3E7F, BlocksNum 0xA7AF942
03:25:53.0453 0192 ============================================================
03:25:53.0484 0192 C: <-> \Device\Harddisk0\DR0\Partition1
03:25:54.0140 0192 D: <-> \Device\Harddisk0\DR0\Partition2
03:25:54.0140 0192 ============================================================
03:25:54.0140 0192 Initialize success
03:25:54.0140 0192 ============================================================
03:26:03.0062 1756 ============================================================
03:26:03.0062 1756 Scan started
03:26:03.0062 1756 Mode: Manual;
03:26:03.0062 1756 ============================================================
03:26:04.0218 1756 ================ Scan system memory ========================
03:26:05.0328 1756 System memory - ok
03:26:05.0328 1756 ================ Scan services =============================
03:26:05.0468 1756 Abiosdsk - ok
03:26:05.0484 1756 abp480n5 - ok
03:26:05.0531 1756 [ A10C7534F7223F4A73A948967D00E69B ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
03:26:05.0531 1756 ACPI - ok
03:26:05.0578 1756 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
03:26:05.0609 1756 ACPIEC - ok
03:26:05.0625 1756 adpu160m - ok
03:26:05.0656 1756 [ 1EE7B434BA961EF845DE136224C30FEC ] aec C:\WINDOWS\system32\drivers\aec.sys
03:26:05.0687 1756 aec - ok
03:26:05.0718 1756 [ 55E6E1C51B6D30E54335750955453702 ] AFD C:\WINDOWS\System32\drivers\afd.sys
03:26:05.0734 1756 AFD - ok
03:26:05.0812 1756 [ 58041495E6D3650C02B1AEC525D24089 ] AgereSoftModem C:\WINDOWS\system32\DRIVERS\AGRSM.sys
03:26:05.0890 1756 AgereSoftModem - ok
03:26:05.0906 1756 Aha154x - ok
03:26:05.0921 1756 aic78u2 - ok
03:26:05.0937 1756 aic78xx - ok
03:26:05.0984 1756 [ C7AE0FD3867DB0D42B03B73C18F3D671 ] Alerter C:\WINDOWS\system32\alrsvc.dll
03:26:05.0984 1756 Alerter - ok
03:26:06.0015 1756 [ F1958FBF86D5C004CF19A5951A9514B7 ] ALG C:\WINDOWS\System32\alg.exe
03:26:06.0031 1756 ALG - ok
03:26:06.0046 1756 AliIde - ok
03:26:06.0078 1756 [ 680AD1C1BB16239E28D8F33A54A7A3C7 ] AmdK7 C:\WINDOWS\system32\DRIVERS\amdk7.sys
03:26:06.0125 1756 AmdK7 - ok
03:26:06.0140 1756 amsint - ok
03:26:06.0156 1756 AppMgmt - ok
03:26:06.0203 1756 [ F0D692B0BFFB46E30EB3CEA168BBC49F ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
03:26:06.0250 1756 Arp1394 - ok
03:26:06.0265 1756 asc - ok
03:26:06.0281 1756 asc3350p - ok
03:26:06.0296 1756 asc3550 - ok
03:26:06.0390 1756 [ D33C507942299753868204CC7642FA27 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
03:26:06.0406 1756 aspnet_state - ok
03:26:06.0421 1756 [ 02000ABF34AF4C218C35D257024807D6 ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
03:26:06.0453 1756 AsyncMac - ok
03:26:06.0484 1756 [ CDFE4411A69C224BD1D11B2DA92DAC51 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
03:26:06.0484 1756 atapi - ok
03:26:06.0500 1756 Atdisk - ok
03:26:06.0546 1756 [ EC88DA854AB7D7752EC8BE11A741BB7F ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
03:26:06.0578 1756 Atmarpc - ok
03:26:06.0609 1756 [ DB66DB626E4882EBEF55F136F12C1829 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
03:26:06.0640 1756 AudioSrv - ok
03:26:06.0671 1756 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
03:26:06.0703 1756 audstub - ok
03:26:06.0734 1756 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
03:26:06.0781 1756 Beep - ok
03:26:06.0828 1756 [ 2C69EC7E5A311334D10DD95F338FCCEA ] BITS C:\WINDOWS\system32\qmgr.dll
03:26:06.0875 1756 BITS - ok
03:26:06.0906 1756 [ E3CFCCDDA4EDD1D0DC9168B2E18F27B8 ] Browser C:\WINDOWS\System32\browser.dll
03:26:06.0921 1756 Browser - ok
03:26:07.0015 1756 catchme - ok
03:26:07.0046 1756 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
03:26:07.0078 1756 cbidf2k - ok
03:26:07.0109 1756 [ 6163ED60B684BAB19D3352AB22FC48B2 ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
03:26:07.0156 1756 CCDECODE - ok
03:26:07.0171 1756 cd20xrnt - ok
03:26:07.0203 1756 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
03:26:07.0234 1756 Cdaudio - ok
03:26:07.0265 1756 [ CD7D5152DF32B47F4E36F710B35AAE02 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
03:26:07.0296 1756 Cdfs - ok
03:26:07.0328 1756 [ AF9C19B3100FE010496B1A27181FBF72 ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
03:26:07.0375 1756 Cdrom - ok
03:26:07.0390 1756 Changer - ok
03:26:07.0437 1756 [ 3192BD04D032A9C4A85A3278C268A13A ] CiSvc C:\WINDOWS\system32\cisvc.exe
03:26:07.0437 1756 CiSvc - ok
03:26:07.0468 1756 [ C8DEC22C4137D7A90F8BDF41CA4B82AE ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
03:26:07.0468 1756 ClipSrv - ok
03:26:07.0500 1756 [ 3C4D595E7F9B747325AEF28B4ADCAAE5 ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
03:26:07.0593 1756 clr_optimization_v2.0.50727_32 - ok
03:26:07.0609 1756 CmdIde - ok
03:26:07.0625 1756 COMSysApp - ok
03:26:07.0656 1756 Cpqarray - ok
03:26:07.0671 1756 CronService - ok
03:26:07.0703 1756 [ 10654F9DDCEA9C46CFB77554231BE73B ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
03:26:07.0718 1756 CryptSvc - ok
03:26:07.0734 1756 dac2w2k - ok
03:26:07.0750 1756 dac960nt - ok
03:26:07.0796 1756 [ 01095FEBF33BEEA00C2A0730B9B3EC28 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
03:26:07.0828 1756 DcomLaunch - ok
03:26:07.0859 1756 [ EF545E1A4B043DA4C84E230DD471C55F ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
03:26:07.0890 1756 Dhcp - ok
03:26:07.0937 1756 [ 00CA44E4534865F8A3B64F7C0984BFF0 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
03:26:07.0953 1756 Disk - ok
03:26:07.0968 1756 dmadmin - ok
03:26:08.0015 1756 [ C0FBB516E06E243F0CF31F597E7EBF7D ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
03:26:08.0078 1756 dmboot - ok
03:26:08.0125 1756 [ 526192BF7696F72E29777BF4A180513A ] DMICall C:\WINDOWS\system32\DRIVERS\DMICall.sys
03:26:08.0156 1756 DMICall - ok
03:26:08.0203 1756 [ F5E7B358A732D09F4BCF2824B88B9E28 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
03:26:08.0234 1756 dmio - ok
03:26:08.0265 1756 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
03:26:08.0296 1756 dmload - ok
03:26:08.0328 1756 [ 1639D9964C9E1B2ECCA95C8217D3E70D ] dmserver C:\WINDOWS\System32\dmserver.dll
03:26:08.0375 1756 dmserver - ok
03:26:08.0406 1756 [ A6F881284AC1150E37D9AE47FF601267 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
03:26:08.0406 1756 DMusic - ok
03:26:08.0453 1756 [ AAC8FFBFD61E784FA3BAC851D4A0BD5F ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
03:26:08.0453 1756 Dnscache - ok
03:26:08.0468 1756 dpti2o - ok
03:26:08.0500 1756 [ 1ED4DBBAE9F5D558DBBA4CC450E3EB2E ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
03:26:08.0546 1756 drmkaud - ok
03:26:08.0593 1756 [ 1CEB779239965000B8F6ADEE17D4515B ] eamon C:\WINDOWS\system32\DRIVERS\eamon.sys
03:26:08.0625 1756 eamon - ok
03:26:08.0671 1756 [ 7D300A43A7BD8769E0F901BF9E1AE367 ] ehdrv C:\WINDOWS\system32\DRIVERS\ehdrv.sys
03:26:08.0718 1756 ehdrv - ok
03:26:08.0781 1756 [ 1CD97C1DE1EA4C185D2B3FAC1F8513ED ] EhttpSrv C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
03:26:08.0781 1756 EhttpSrv - ok
03:26:08.0828 1756 [ E6A6E6D58A8DCB64A0FFBC43863D0A80 ] ekrn C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
03:26:08.0859 1756 ekrn - ok
03:26:08.0890 1756 [ ECD5F68E32FF5C6A728EB03DC892AE7F ] epfwtdir C:\WINDOWS\system32\DRIVERS\epfwtdir.sys
03:26:08.0953 1756 epfwtdir - ok
03:26:08.0984 1756 [ 67DFF7BBBD0E80AAB7B3CF061448DB8A ] ERSvc C:\WINDOWS\System32\ersvc.dll
03:26:08.0984 1756 ERSvc - ok
03:26:09.0031 1756 [ 37561F8D4160D62DA86D24AE41FAE8DE ] Eventlog C:\WINDOWS\system32\services.exe
03:26:09.0031 1756 Eventlog - ok
03:26:09.0078 1756 [ 60D1A6342238378BFB7545C81EE3606C ] EventSystem C:\WINDOWS\System32\es.dll
03:26:09.0093 1756 EventSystem - ok
03:26:09.0109 1756 [ 3117F595E9615E04F05A54FC15A03B20 ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
03:26:09.0140 1756 Fastfat - ok
03:26:09.0187 1756 [ 6815DEF9B810AEFAC107EEAF72DA6F82 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
03:26:09.0203 1756 FastUserSwitchingCompatibility - ok
03:26:09.0234 1756 [ CED2E8396A8838E59D8FD529C680E02C ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
03:26:09.0265 1756 Fdc - ok
03:26:09.0296 1756 [ E153AB8A11DE5452BCF5AC7652DBF3ED ] Fips C:\WINDOWS\system32\drivers\Fips.sys
03:26:09.0296 1756 Fips - ok
03:26:09.0328 1756 [ 0DD1DE43115B93F4D85E889D7A86F548 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
03:26:09.0359 1756 Flpydisk - ok
03:26:09.0390 1756 [ 3D234FB6D6EE875EB009864A299BEA29 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
03:26:09.0437 1756 FltMgr - ok
03:26:09.0468 1756 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
03:26:09.0500 1756 Fs_Rec - ok
03:26:09.0531 1756 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
03:26:09.0593 1756 Ftdisk - ok
03:26:09.0625 1756 [ 77EBF3E9386DAA51551AF429052D88D0 ] giveio C:\WINDOWS\system32\giveio.sys
03:26:09.0640 1756 giveio - ok
03:26:09.0671 1756 [ C0F1D4A21DE5A415DF8170616703DEBF ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
03:26:09.0703 1756 Gpc - ok
03:26:09.0750 1756 [ 8827911A8C37E40C027CBFC88E69D967 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
03:26:09.0765 1756 helpsvc - ok
03:26:09.0796 1756 [ 9376E6893E52B368ABC6255BF54F0B28 ] HidServ C:\WINDOWS\System32\hidserv.dll
03:26:09.0812 1756 HidServ - ok
03:26:09.0843 1756 [ 1DE6783B918F540149AA69943BDFEBA8 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
03:26:09.0875 1756 HidUsb - ok
03:26:09.0875 1756 hpn - ok
03:26:09.0921 1756 [ 9F8B0F4276F618964FD118BE4289B7CD ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
03:26:09.0937 1756 HTTP - ok
03:26:09.0968 1756 [ 064D8581ADF77C25133E7D751D917D83 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
03:26:09.0984 1756 HTTPFilter - ok
03:26:10.0000 1756 i2omgmt - ok
03:26:10.0015 1756 i2omp - ok
03:26:10.0031 1756 [ 5502B58EEF7486EE6F93F3F164DCB808 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
03:26:10.0062 1756 i8042prt - ok
03:26:10.0109 1756 [ AC691CF57CA00169D59F86661EDE60CC ] IDMTDI C:\WINDOWS\system32\DRIVERS\idmtdi.sys
03:26:10.0156 1756 IDMTDI - ok
03:26:10.0187 1756 [ F8AA320C6A0409C0380E5D8A99D76EC6 ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
03:26:10.0234 1756 Imapi - ok
03:26:10.0281 1756 [ FA788520BCAC0F5D9D5CDE5615C0D931 ] ImapiService C:\WINDOWS\system32\imapi.exe
03:26:10.0296 1756 ImapiService - ok
03:26:10.0312 1756 ini910u - ok
03:26:10.0328 1756 IntelIde - ok
03:26:10.0375 1756 [ 4448006B6BC60E6C027932CFC38D6855 ] ip6fw C:\WINDOWS\system32\drivers\ip6fw.sys
03:26:10.0406 1756 ip6fw - ok
03:26:10.0453 1756 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
03:26:10.0500 1756 IpFilterDriver - ok
03:26:10.0531 1756 [ E1EC7F5DA720B640CD8FB8424F1B14BB ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
03:26:10.0562 1756 IpInIp - ok
03:26:10.0609 1756 [ E2168CBC7098FFE963C6F23F472A3593 ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
03:26:10.0625 1756 IpNat - ok
03:26:10.0640 1756 [ 64537AA5C003A6AFEEE1DF819062D0D1 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
03:26:10.0687 1756 IPSec - ok
03:26:10.0718 1756 [ 50708DAA1B1CBB7D6AC1CF8F56A24410 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
03:26:10.0750 1756 IRENUM - ok
03:26:10.0796 1756 [ E504F706CCB699C2596E9A3DA1596E87 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
03:26:10.0828 1756 isapnp - ok
03:26:10.0890 1756 [ 691B9B7C0CC1653732717D292D6B305D ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
03:26:10.0890 1756 JavaQuickStarterService - ok
03:26:10.0906 1756 [ EBDEE8A2EE5393890A1ACEE971C4C246 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
03:26:10.0953 1756 Kbdclass - ok
03:26:10.0984 1756 [ E182FA8E49E8EE41B4ADC53093F3C7E6 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
03:26:11.0015 1756 kbdhid - ok
03:26:11.0046 1756 [ BA5DEDA4D934E6288C2F66CAF58D2562 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
03:26:11.0093 1756 kmixer - ok
03:26:11.0140 1756 [ 674D3E5A593475915DC6643317192403 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
03:26:11.0156 1756 KSecDD - ok
03:26:11.0203 1756 [ 0CB3AF149A0BAC0836022CA307C7A0F8 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
03:26:11.0203 1756 lanmanserver - ok
03:26:11.0250 1756 [ E1F27CFCD114EC9F1E1F44674B2FF9F0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
03:26:11.0250 1756 lanmanworkstation - ok
03:26:11.0265 1756 Lavasoft Kernexplorer - ok
03:26:11.0281 1756 lbrtfdc - ok
03:26:11.0328 1756 [ B3EFF6D938C572E90A07B3D87A3C7657 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
03:26:11.0328 1756 LmHosts - ok
03:26:11.0359 1756 [ 95FD808E4AC22ABA025A7B3EAC0375D2 ] Messenger C:\WINDOWS\System32\msgsvc.dll
03:26:11.0375 1756 Messenger - ok
03:26:11.0406 1756 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
03:26:11.0437 1756 mnmdd - ok
03:26:11.0484 1756 [ F6415361201915B9FE3896B0E4E724FF ] mnmsrvc C:\WINDOWS\System32\mnmsrvc.exe
03:26:11.0484 1756 mnmsrvc - ok
03:26:11.0531 1756 [ 6FC6F9D7ACC36DCA9B914565A3AEDA05 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
03:26:11.0531 1756 Modem - ok
03:26:11.0546 1756 [ 34E1F0031153E491910E12551400192C ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
03:26:11.0578 1756 Mouclass - ok
03:26:11.0609 1756 [ 65653F3B4477F3C63E68A9659F85EE2E ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
03:26:11.0640 1756 MountMgr - ok
03:26:11.0703 1756 [ 8BE15F71DE6FF33FC56DCDE7B2B9EFE8 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
03:26:11.0703 1756 MozillaMaintenance - ok
03:26:11.0718 1756 mraid35x - ok
03:26:11.0765 1756 [ 29414447EB5BDE2F8397DC965DBB3156 ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
03:26:11.0812 1756 MRxDAV - ok
03:26:11.0859 1756 [ FB6C89BB3CE282B08BDB1E3C179E1C39 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
03:26:11.0921 1756 MRxSmb - ok
03:26:11.0968 1756 [ C7C3D89EB0A6F3DBA622EA737FA335B1 ] MSDTC C:\WINDOWS\System32\msdtc.exe
03:26:11.0984 1756 MSDTC - ok
03:26:12.0015 1756 [ 561B3A4333CA2DBDBA28B5B956822519 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
03:26:12.0046 1756 Msfs - ok
03:26:12.0062 1756 MSIServer - ok
03:26:12.0093 1756 [ AE431A8DD3C1D0D0610CDBAC16057AD0 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
03:26:12.0125 1756 MSKSSRV - ok
03:26:12.0140 1756 [ 13E75FEF9DFEB08EEDED9D0246E1F448 ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
03:26:12.0171 1756 MSPCLOCK - ok
03:26:12.0187 1756 [ 1988A33FF19242576C3D0EF9CE785DA7 ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
03:26:12.0218 1756 MSPQM - ok
03:26:12.0281 1756 [ 469541F8BFD2B32659D5D463A6714BCE ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
03:26:12.0296 1756 mssmbios - ok
03:26:12.0328 1756 [ BF13612142995096AB084F2DB7F40F77 ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
03:26:12.0359 1756 MSTEE - ok
03:26:12.0406 1756 [ 82035E0F41C2DD05AE41D27FE6CF7DE1 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
03:26:12.0421 1756 Mup - ok
03:26:12.0453 1756 [ 5C8DC6429C43DC6177C1FA5B76290D1A ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
03:26:12.0484 1756 NABTSFEC - ok
03:26:12.0515 1756 [ 558635D3AF1C7546D26067D5D9B6959E ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
03:26:12.0531 1756 NDIS - ok
03:26:12.0562 1756 [ 520CE427A8B298F54112857BCF6BDE15 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
03:26:12.0593 1756 NdisIP - ok
03:26:12.0625 1756 [ 08D43BBDACDF23F34D79E44ED35C1B4C ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
03:26:12.0625 1756 NdisTapi - ok
03:26:12.0656 1756 [ 34D6CD56409DA9A7ED573E1C90A308BF ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
03:26:12.0656 1756 Ndisuio - ok
03:26:12.0687 1756 [ 0B90E255A9490166AB368CD55A529893 ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
03:26:12.0718 1756 NdisWan - ok
03:26:12.0765 1756 [ 59FC3FB44D2669BC144FD87826BB571F ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
03:26:12.0781 1756 NDProxy - ok
03:26:12.0812 1756 [ 3A2ACA8FC1D7786902CA434998D7CEB4 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
03:26:12.0843 1756 NetBIOS - ok
03:26:12.0875 1756 [ 0C80E410CD2F47134407EE7DD19CC86B ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
03:26:12.0937 1756 NetBT - ok
03:26:12.0984 1756 [ 05AFB5AD06462257BEA7495283C86D50 ] NetDDE C:\WINDOWS\system32\netdde.exe
03:26:13.0000 1756 NetDDE - ok
03:26:13.0015 1756 [ 05AFB5AD06462257BEA7495283C86D50 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
03:26:13.0015 1756 NetDDEdsdm - ok
03:26:13.0046 1756 [ 84885F9B82F4D55C6146EBF6065D75D2 ] Netlogon C:\WINDOWS\system32\lsass.exe
03:26:13.0062 1756 Netlogon - ok
03:26:13.0093 1756 [ 36739B39267914BA69AD0610A0299732 ] Netman C:\WINDOWS\System32\netman.dll
03:26:13.0109 1756 Netman - ok
03:26:13.0140 1756 [ 5C5C53DB4FEF16CF87B9911C7E8C6FBC ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
03:26:13.0140 1756 NIC1394 - ok
03:26:13.0187 1756 [ 097722F235A1FB698BF9234E01B52637 ] Nla C:\WINDOWS\System32\mswsock.dll
03:26:13.0187 1756 Nla - ok
03:26:13.0218 1756 [ 4F601BCB8F64EA3AC0994F98FED03F8E ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
03:26:13.0234 1756 Npfs - ok
03:26:13.0296 1756 [ 19A811EF5F1ED5C926A028CE107FF1AF ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
03:26:13.0375 1756 Ntfs - ok
03:26:13.0390 1756 [ 84885F9B82F4D55C6146EBF6065D75D2 ] NtLmSsp C:\WINDOWS\System32\lsass.exe
03:26:13.0390 1756 NtLmSsp - ok
03:26:13.0437 1756 [ B62F29C00AC55A761B2E45877D85EA0F ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
03:26:13.0500 1756 NtmsSvc - ok
03:26:13.0546 1756 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
03:26:13.0562 1756 Null - ok
03:26:13.0640 1756 [ 586B3DDB22E468071B63D3A44A6D7CFD ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
03:26:13.0703 1756 nv - ok
03:26:13.0750 1756 [ 163CD7728440A1901E72E7207FA5877A ] nvax C:\WINDOWS\system32\drivers\nvax.sys
03:26:13.0765 1756 nvax - ok
03:26:13.0796 1756 [ F573F587ABED7C750B66AB96143CA1E9 ] nvnforce C:\WINDOWS\system32\drivers\nvapu.sys
03:26:13.0812 1756 nvnforce - ok
03:26:13.0828 1756 [ 4B17A1424F4BAB51681552307F20A2A1 ] NVSvc C:\WINDOWS\System32\nvsvc32.exe
03:26:13.0859 1756 NVSvc - ok
03:26:13.0890 1756 [ FD4339EF4D3C34B2D016077A38618D42 ] nv_agp C:\WINDOWS\system32\DRIVERS\nv_agp.sys
03:26:13.0921 1756 nv_agp - ok
03:26:13.0953 1756 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
03:26:13.0968 1756 NwlnkFlt - ok
03:26:14.0000 1756 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
03:26:14.0015 1756 NwlnkFwd - ok
03:26:14.0062 1756 [ 0951DB8E5823EA366B0E408D71E1BA2A ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
03:26:14.0062 1756 ohci1394 - ok
03:26:14.0078 1756 [ 29744EB4CE659DFE3B4122DEB45BC478 ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
03:26:14.0140 1756 Parport - ok
03:26:14.0171 1756 [ 3334430C29DC338092F79C38EF7B4CD0 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
03:26:14.0187 1756 PartMgr - ok
03:26:14.0250 1756 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
03:26:14.0265 1756 ParVdm - ok
03:26:14.0296 1756 [ 8086D9979234B603AD5BC2F5D890B234 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
03:26:14.0328 1756 PCI - ok
03:26:14.0343 1756 PCIDump - ok
03:26:14.0359 1756 [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
03:26:14.0406 1756 PCIIde - ok
03:26:14.0437 1756 [ 82A087207DECEC8456FBE8537947D579 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
03:26:14.0468 1756 Pcmcia - ok
03:26:14.0468 1756 PDCOMP - ok
03:26:14.0484 1756 PDFRAME - ok
03:26:14.0500 1756 PDRELI - ok
03:26:14.0515 1756 PDRFRAME - ok
03:26:14.0531 1756 perc2 - ok
03:26:14.0546 1756 perc2hib - ok
03:26:14.0609 1756 [ 37561F8D4160D62DA86D24AE41FAE8DE ] PlugPlay C:\WINDOWS\system32\services.exe
03:26:14.0609 1756 PlugPlay - ok
03:26:14.0640 1756 [ 84885F9B82F4D55C6146EBF6065D75D2 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
03:26:14.0640 1756 PolicyAgent - ok
03:26:14.0671 1756 [ 1C5CC65AAC0783C344F16353E60B72AC ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
03:26:14.0703 1756 PptpMiniport - ok
03:26:14.0718 1756 [ 0D97D88720A4087EC93AF7DBB303B30A ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys
03:26:14.0750 1756 Processor - ok
03:26:14.0765 1756 [ 84885F9B82F4D55C6146EBF6065D75D2 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
03:26:14.0765 1756 ProtectedStorage - ok
03:26:14.0812 1756 [ 48671F327553DCF1D27F6197F622A668 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
03:26:14.0859 1756 PSched - ok
03:26:14.0906 1756 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
03:26:14.0921 1756 Ptilink - ok
03:26:14.0968 1756 [ 153D02480A0A2F45785522E814C634B6 ] PxHelp20 C:\WINDOWS\system32\DRIVERS\PxHelp20.sys
03:26:15.0000 1756 PxHelp20 - ok
03:26:15.0031 1756 ql1080 - ok
03:26:15.0046 1756 Ql10wnt - ok
03:26:15.0062 1756 ql12160 - ok
03:26:15.0078 1756 ql1240 - ok
03:26:15.0093 1756 ql1280 - ok
03:26:15.0140 1756 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
03:26:15.0156 1756 RasAcd - ok
03:26:15.0203 1756 [ 44DB7A9BDD2FB58747D123FBF1D35ADB ] RasAuto C:\WINDOWS\System32\rasauto.dll
03:26:15.0203 1756 RasAuto - ok
03:26:15.0234 1756 [ 98FAEB4A4DCF812BA1C6FCA4AA3E115C ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
03:26:15.0265 1756 Rasl2tp - ok
03:26:15.0296 1756 [ 49B5EED5FB89D39456A2F616CCD8BA5D ] RasMan C:\WINDOWS\System32\rasmans.dll
03:26:15.0312 1756 RasMan - ok
03:26:15.0328 1756 [ 7306EEED8895454CBED4669BE9F79FAA ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
03:26:15.0343 1756 RasPppoe - ok
03:26:15.0375 1756 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
03:26:15.0406 1756 Raspti - ok
03:26:15.0437 1756 [ 03B965B1CA47F6EF60EB5E51CB50E0AF ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
03:26:15.0531 1756 Rdbss - ok
03:26:15.0562 1756 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
03:26:15.0593 1756 RDPCDD - ok
03:26:15.0640 1756 [ B54CD38A9EBFBF2B3561426E3FE26F62 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
03:26:15.0640 1756 RDPWD - ok
03:26:15.0687 1756 [ 729798E0933076B8FCFCD9934698F164 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
03:26:15.0718 1756 RDSessMgr - ok
03:26:15.0750 1756 [ B31B4588E4086D8D84ADBF9845C2402B ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
03:26:15.0781 1756 redbook - ok
03:26:15.0828 1756 [ 3046DB917E3CFA040632799DD9B14865 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
03:26:15.0828 1756 RemoteAccess - ok
03:26:15.0859 1756 [ 793F04A09B15E7C6C11DBDFFAF06C0AB ] RpcLocator C:\WINDOWS\System32\locator.exe
03:26:15.0859 1756 RpcLocator - ok
03:26:15.0906 1756 [ 01095FEBF33BEEA00C2A0730B9B3EC28 ] RpcSs C:\WINDOWS\System32\rpcss.dll
03:26:15.0906 1756 RpcSs - ok
03:26:15.0937 1756 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP C:\WINDOWS\System32\rsvp.exe
03:26:15.0953 1756 RSVP - ok
03:26:15.0984 1756 [ D0AC0B0355A3FFB85EB77B083CD0627C ] rtl8139 C:\WINDOWS\system32\DRIVERS\R8139n51.SYS
03:26:16.0015 1756 rtl8139 - ok
03:26:16.0031 1756 [ 84885F9B82F4D55C6146EBF6065D75D2 ] SamSs C:\WINDOWS\system32\lsass.exe
03:26:16.0031 1756 SamSs - ok
03:26:16.0078 1756 [ 25D8DE134DF108E3DBC8D7D23B1AA58E ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
03:26:16.0078 1756 SCardSvr - ok
03:26:16.0125 1756 [ 92360854316611F6CC471612213C3D92 ] Schedule C:\WINDOWS\system32\schedsvc.dll
03:26:16.0140 1756 Schedule - ok
03:26:16.0187 1756 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
03:26:16.0203 1756 Secdrv - ok
03:26:16.0234 1756 [ B1E0CE09895376871746F36DC5773B4F ] seclogon C:\WINDOWS\System32\seclogon.dll
03:26:16.0250 1756 seclogon - ok
03:26:16.0265 1756 [ DFD9870CF39C791D86C4C209DA9FA919 ] SENS C:\WINDOWS\system32\sens.dll
03:26:16.0281 1756 SENS - ok
03:26:16.0312 1756 [ CD9404D115A00D249F70A371B46D5A26 ] Serial C:\WINDOWS\system32\drivers\Serial.sys
03:26:16.0343 1756 Serial - ok
03:26:16.0390 1756 [ 0D13B6DF6E9E101013A7AFB0CE629FE0 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
03:26:16.0406 1756 Sfloppy - ok
03:26:16.0453 1756 [ 36CC8C01B5E50163037BEF56CB96DEFF ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
03:26:16.0468 1756 SharedAccess - ok
03:26:16.0484 1756 [ 6815DEF9B810AEFAC107EEAF72DA6F82 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
03:26:16.0484 1756 ShellHWDetection - ok
03:26:16.0500 1756 Simbad - ok
03:26:16.0531 1756 [ 5CAEED86821FA2C6139E32E9E05CCDC9 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
03:26:16.0546 1756 SLIP - ok
03:26:16.0687 1756 [ 8ECA9578BFC7DA42D6D24C862224C5DB ] SmcService C:\Program Files\Sygate\SPF\smc.exe
03:26:16.0750 1756 SmcService - ok
03:26:16.0765 1756 SNP2STD - ok
03:26:16.0781 1756 Sparrow - ok
03:26:16.0828 1756 [ 5D6401DB90EC81B71F8E2C5C8F0FEF23 ] speedfan C:\WINDOWS\system32\speedfan.sys
03:26:16.0875 1756 speedfan - ok
03:26:16.0890 1756 [ 0CE218578FFF5F4F7E4201539C45C78F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
03:26:16.0921 1756 splitter - ok
03:26:16.0953 1756 [ DA81EC57ACD4CDC3D4C51CF3D409AF9F ] Spooler C:\WINDOWS\system32\spoolsv.exe
03:26:16.0968 1756 Spooler - ok
03:26:16.0984 1756 [ E41B6D037D6CD08461470AF04500DC24 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
03:26:17.0015 1756 sr - ok
03:26:17.0046 1756 [ 92BDF74F12D6CBEC43C94D4B7F804838 ] srservice C:\WINDOWS\system32\srsvc.dll
03:26:17.0062 1756 srservice - ok
03:26:17.0109 1756 [ 7A4F147CC6B133F905F6E65E2F8669FB ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
03:26:17.0156 1756 Srv - ok
03:26:17.0187 1756 [ 4B8D61792F7175BED48859CC18CE4E38 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
03:26:17.0203 1756 SSDPSRV - ok
03:26:17.0250 1756 [ B6763F8534AC547CF1AF98AFDFF2EDC8 ] stisvc C:\WINDOWS\system32\wiaservc.dll
03:26:17.0312 1756 stisvc - ok
03:26:17.0343 1756 [ 284C57DF5DC7ABCA656BC2B96A667AFB ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
03:26:17.0375 1756 streamip - ok
03:26:17.0406 1756 [ 03C1BAE4766E2450219D20B993D6E046 ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
03:26:17.0437 1756 swenum - ok
03:26:17.0468 1756 [ 94ABC808FC4B6D7D2BBF42B85E25BB4D ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
03:26:17.0484 1756 swmidi - ok
03:26:17.0500 1756 SwPrv - ok
03:26:17.0515 1756 symc810 - ok
03:26:17.0531 1756 symc8xx - ok
03:26:17.0546 1756 sym_hi - ok
03:26:17.0562 1756 sym_u3 - ok
03:26:17.0625 1756 [ 650AD082D46BAC0E64C9C0E0928492FD ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
03:26:17.0640 1756 sysaudio - ok
03:26:17.0687 1756 [ 8B54AA346D1B1B113FFAA75501B8B1B2 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
03:26:17.0687 1756 SysmonLog - ok
03:26:17.0734 1756 [ FB78839B36025AA286A51289ED28B73E ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
03:26:17.0750 1756 TapiSrv - ok
03:26:17.0781 1756 [ 2A5554FC5B1E04E131230E3CE035C3F9 ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
03:26:17.0828 1756 Tcpip - ok
03:26:17.0875 1756 [ 38D437CF2D98965F239B0ABCD66DCB0F ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
03:26:17.0890 1756 TDPIPE - ok
03:26:17.0921 1756 [ ED0580AF02502D00AD8C4C066B156BE9 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
03:26:17.0953 1756 TDTCP - ok
03:26:17.0984 1756 [ 99336D4DA97B4EEAAFAB46A4F8E512E6 ] Teefer C:\WINDOWS\system32\Drivers\Teefer.sys
03:26:18.0000 1756 Teefer - ok
03:26:18.0046 1756 [ A540A99C281D933F3D69D55E48727F47 ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
03:26:18.0062 1756 TermDD - ok
03:26:18.0125 1756 [ B60C877D16D9C880B952FDA04ADF16E6 ] TermService C:\WINDOWS\System32\termsrv.dll
03:26:18.0140 1756 TermService - ok
03:26:18.0171 1756 [ 6815DEF9B810AEFAC107EEAF72DA6F82 ] Themes C:\WINDOWS\System32\shsvcs.dll
03:26:18.0187 1756 Themes - ok
03:26:18.0203 1756 TosIde - ok
03:26:18.0234 1756 [ 6D9AC544B30F96C57F8206566C1FB6A1 ] TrkWks C:\WINDOWS\system32\trkwks.dll
03:26:18.0234 1756 TrkWks - ok
03:26:18.0281 1756 [ 2AA8F32C3DA1E7BC11669E3E72BFF1A5 ] TrueSight C:\WINDOWS\system32\drivers\TrueSight.sys
03:26:18.0281 1756 TrueSight - ok
03:26:18.0328 1756 [ 12F70256F140CD7D52C58C7048FDE657 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
03:26:18.0375 1756 Udfs - ok
03:26:18.0390 1756 ultra - ok
03:26:18.0437 1756 [ AFF2E5045961BBC0A602BB6F95EB1345 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
03:26:18.0453 1756 Update - ok
03:26:18.0500 1756 [ ACA5D98663D879C6BAAFCEA7E2F1B710 ] upnphost C:\WINDOWS\System32\upnphost.dll
03:26:18.0515 1756 upnphost - ok
03:26:18.0546 1756 [ 3F5DF65B0758675F95A2D43918A740A3 ] UPS C:\WINDOWS\System32\ups.exe
03:26:18.0562 1756 UPS - ok
03:26:18.0609 1756 [ BFFD9F120CC63BCBAA3D840F3EEF9F79 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
03:26:18.0640 1756 usbccgp - ok
03:26:18.0671 1756 [ 15E993BA2F6946B2BFBBFCD30398621E ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
03:26:18.0734 1756 usbehci - ok
03:26:18.0781 1756 [ C72F40947F92CEA56A8FB532EDF025F1 ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
03:26:18.0812 1756 usbhub - ok
03:26:18.0828 1756 [ BDFE799A8531BAD8A5A985821FE78760 ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys
03:26:18.0843 1756 usbohci - ok
03:26:18.0890 1756 [ A6BC71402F4F7DD5B77FD7F4A8DDBA85 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
03:26:18.0921 1756 usbscan - ok
03:26:18.0953 1756 [ 6CD7B22193718F1D17A47A1CD6D37E75 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
03:26:19.0015 1756 USBSTOR - ok
03:26:19.0046 1756 [ 8A60EDD72B4EA5AEA8202DAF0E427925 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
03:26:19.0078 1756 VgaSave - ok
03:26:19.0093 1756 ViaIde - ok
03:26:19.0125 1756 [ EE4660083DEBA849FF6C485D944B379B ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
03:26:19.0156 1756 VolSnap - ok
03:26:19.0171 1756 vsdatant - ok
03:26:19.0218 1756 [ 3EE00364AE0FD8D604F46CBAF512838A ] VSS C:\WINDOWS\System32\vssvc.exe
03:26:19.0250 1756 VSS - ok
03:26:19.0296 1756 [ 2B281958F5D0CF99ED626E3EF39D5C8D ] W32Time C:\WINDOWS\system32\w32time.dll
03:26:19.0296 1756 W32Time - ok
03:26:19.0343 1756 [ 984EF0B9788ABF89974CFED4BFBAACBC ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
03:26:19.0375 1756 Wanarp - ok
03:26:19.0390 1756 WDICA - ok
03:26:19.0421 1756 [ EFD235CA22B57C81118C1AEB4798F1C1 ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
03:26:19.0453 1756 wdmaud - ok
03:26:19.0484 1756 [ 265F534EF76832435AFBF771EC97176D ] WebClient C:\WINDOWS\System32\webclnt.dll
03:26:19.0500 1756 WebClient - ok
03:26:19.0531 1756 [ A67340B874DF9EAF5B226E5F3473B9DA ] wg3n C:\WINDOWS\SYSTEM32\Drivers\wg3n.sys
03:26:19.0546 1756 wg3n - ok
03:26:19.0593 1756 [ 851216E2816B7B7E74B5F7EF1D4ACFB7 ] wg4n C:\WINDOWS\SYSTEM32\Drivers\wg4n.sys
03:26:19.0609 1756 wg4n - ok
03:26:19.0625 1756 [ AEDD1FE0DF660411D15DA3C57CFC2402 ] wg5n C:\WINDOWS\SYSTEM32\Drivers\wg5n.sys
03:26:19.0656 1756 wg5n - ok
03:26:19.0687 1756 [ DD0D719A58DF79086462BD5FC972A908 ] wg6n C:\WINDOWS\SYSTEM32\Drivers\wg6n.sys
03:26:19.0703 1756 wg6n - ok
03:26:19.0765 1756 [ F399242A80C4066FD155EFA4CF96658E ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
03:26:19.0781 1756 winmgmt - ok
03:26:19.0843 1756 [ C086483E3DBA8C1C0A687EC8D5B3D4C1 ] WmdmPmSN C:\WINDOWS\System32\mspmsnsv.dll
03:26:19.0859 1756 WmdmPmSN - ok
03:26:19.0921 1756 [ BA8CECC3E813E1F7C441B20393D4F86C ] WmiApSrv C:\WINDOWS\System32\wbem\wmiapsrv.exe
03:26:19.0921 1756 WmiApSrv - ok
03:26:19.0953 1756 [ 93C145DCEB13156322423EFD62D4549A ] wpsdrvnt C:\WINDOWS\System32\drivers\wpsdrvnt.sys
03:26:19.0968 1756 wpsdrvnt - ok
03:26:20.0000 1756 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
03:26:20.0031 1756 WS2IFSL - ok
03:26:20.0078 1756 [ 4D59DAA66C60858CDF4F67A900F42D4A ] wscsvc C:\WINDOWS\system32\wscsvc.dll
03:26:20.0078 1756 wscsvc - ok
03:26:20.0125 1756 [ D5842484F05E12121C511AA93F6439EC ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
03:26:20.0156 1756 WSTCODEC - ok
03:26:20.0187 1756 [ 13D72740963CBA12D9FF76A7F218BCD8 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
03:26:20.0203 1756 wuauserv - ok
03:26:20.0250 1756 [ 5A91E6FEAB9F901302FA7FF768C0120F ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
03:26:20.0281 1756 WZCSVC - ok
03:26:20.0312 1756 [ EEF46DAB68229A14DA3D8E73C99E2959 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
03:26:20.0343 1756 xmlprov - ok
03:26:20.0375 1756 ================ Scan global ===============================
03:26:20.0406 1756 [ 00EF9C3AF83EDBAF18CA7A2837750117 ] C:\WINDOWS\system32\basesrv.dll
03:26:20.0437 1756 [ 3D21B3BE0C5768E76FD9780E9CF9E07C ] C:\WINDOWS\system32\winsrv.dll
03:26:20.0484 1756 [ 3D21B3BE0C5768E76FD9780E9CF9E07C ] C:\WINDOWS\system32\winsrv.dll
03:26:20.0500 1756 [ 37561F8D4160D62DA86D24AE41FAE8DE ] C:\WINDOWS\system32\services.exe
03:26:20.0515 1756 [Global] - ok
03:26:20.0515 1756 ================ Scan MBR ==================================
03:26:20.0531 1756 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0
03:26:20.0671 1756 \Device\Harddisk0\DR0 - ok
03:26:20.0687 1756 ================ Scan VBR ==================================
03:26:20.0687 1756 [ 9EB3C739A54869B610720E5C73FE08CD ] \Device\Harddisk0\DR0\Partition1
03:26:20.0687 1756 \Device\Harddisk0\DR0\Partition1 - ok
03:26:20.0718 1756 [ 279D44525F30C3018478A1C04BA05C76 ] \Device\Harddisk0\DR0\Partition2
03:26:20.0718 1756 \Device\Harddisk0\DR0\Partition2 - ok
03:26:20.0718 1756 ============================================================
03:26:20.0718 1756 Scan finished
03:26:20.0718 1756 ============================================================
03:26:20.0750 1416 Detected object count: 0
03:26:20.0750 1416 Actual detected object count: 0
03:28:51.0203 3356 Deinitialize success
----END TDSSKILLER LOG---
----BEGIN aswMBR LOG-------
aswMBR version 0.9.9.1707 Copyright© 2011 AVAST Software
Run date: 2012-11-14 03:28:55
-----------------------------
03:28:55.562 OS Version: Windows 5.1.2600 Service Pack 2
03:28:55.562 Number of processors: 1 586 0xA00
03:28:55.562 ComputerName: YOUR-JIKOHAXMOT UserName: greg
03:28:55.921 Initialize success
03:33:02.640 AVAST engine defs: 12111301
03:33:26.500 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
03:33:26.500 Disk 0 Vendor: ST3120022A 3.04 Size: 114473MB BusType: 3
03:33:26.515 Disk 0 MBR read successfully
03:33:26.515 Disk 0 MBR scan
03:33:26.578 Disk 0 Windows XP default MBR code
03:33:26.593 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 28615 MB offset 63
03:33:26.593 Disk 0 Partition - 00 0F Extended LBA 85855 MB offset 58605120
03:33:26.609 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 85855 MB offset 58605183
03:33:26.625 Disk 0 scanning sectors +234436545
03:33:26.687 Disk 0 scanning C:\WINDOWS\system32\drivers
03:33:49.187 Service scanning
03:34:07.671 Modules scanning
03:34:20.515 Disk 0 trace - called modules:
03:34:21.015 ntoskrnl.exe catchme.sys CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
03:34:21.015 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x82f50ab8]
03:34:21.015 3 CLASSPNP.SYS[f759005b] -> nt!IofCallDriver -> \Device\0000005d[0x82fe01f8]
03:34:21.015 5 ACPI.sys[f74e6620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x82fd44d0]
03:34:21.546 AVAST engine scan C:\WINDOWS
03:34:33.359 AVAST engine scan C:\WINDOWS\system32
03:38:09.171 AVAST engine scan C:\WINDOWS\system32\drivers
03:38:27.859 AVAST engine scan C:\Documents and Settings\greg
03:46:54.078 AVAST engine scan C:\Documents and Settings\All Users
03:47:13.953 Scan finished successfully
04:00:47.171 Disk 0 MBR has been saved successfully to "C:\MBR.dat"
04:00:47.265 The log file has been saved successfully to "C:\aswMBR.txt"
----END aswMBR LOG-------
Edited by MINT2012, 13 November 2012 - 10:04 PM.