Log z TDSS w załączniku. Coś tam znalazł. Java zaktualizowana wczoraj tylko pewnie nie zrobiłem reboota i pokazywało starszą wersję. Logi z OTL jeszcze zrobić ?
21:33:21.0968 0176 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
21:33:22.0156 0176 ============================================================
21:33:22.0156 0176 Current date / time: 2013/01/15 21:33:22.0156
21:33:22.0156 0176 SystemInfo:
21:33:22.0156 0176
21:33:22.0156 0176 OS Version: 5.1.2600 ServicePack: 3.0
21:33:22.0156 0176 Product type: Workstation
21:33:22.0156 0176 ComputerName: ZAKON-05F43C88D
21:33:22.0156 0176 UserName: Viris
21:33:22.0156 0176 Windows directory: C:\WINDOWS
21:33:22.0156 0176 System windows directory: C:\WINDOWS
21:33:22.0156 0176 Processor architecture: Intel x86
21:33:22.0156 0176 Number of processors: 2
21:33:22.0156 0176 Page size: 0x1000
21:33:22.0156 0176 Boot type: Normal boot
21:33:22.0156 0176 ============================================================
21:33:23.0453 0176 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
21:33:23.0453 0176 ============================================================
21:33:23.0453 0176 \Device\Harddisk0\DR0:
21:33:23.0453 0176 MBR partitions:
21:33:23.0453 0176 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1388AFC
21:33:23.0453 0176 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1388B3B, BlocksNum 0x1116E0F7
21:33:23.0453 0176 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x124F6C32, BlocksNum 0x12D0D3CE
21:33:23.0453 0176 ============================================================
21:33:23.0468 0176 C: & lt; - & gt; \Device\Harddisk0\DR0\Partition1
21:33:23.0500 0176 D: & lt; - & gt; \Device\Harddisk0\DR0\Partition2
21:33:23.0531 0176 E: & lt; - & gt; \Device\Harddisk0\DR0\Partition3
21:33:23.0531 0176 ============================================================
21:33:23.0531 0176 Initialize success
21:33:23.0531 0176 ============================================================
21:33:36.0015 4028 ============================================================
21:33:36.0015 4028 Scan started
21:33:36.0015 4028 Mode: Manual;
21:33:36.0015 4028 ============================================================
21:33:37.0156 4028 ================ Scan system memory ========================
21:33:37.0156 4028 System memory - ok
21:33:37.0156 4028 ================ Scan services =============================
21:33:37.0250 4028 [ B36C2D3A46078F4A278386F5C974564D ] Aavmker4 C:\WINDOWS\system32\drivers\Aavmker4.sys
21:33:37.0265 4028 Aavmker4 - ok
21:33:37.0265 4028 Abiosdsk - ok
21:33:37.0265 4028 abp480n5 - ok
21:33:37.0312 4028 [ 05118282F5D039595A2B92B4A4AFE197 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
21:33:37.0312 4028 ACPI - ok
21:33:37.0343 4028 [ 66A42B7DB194E24B973BBCCE840A0F3F ] ACPIEC C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
21:33:37.0359 4028 ACPIEC - ok
21:33:37.0390 4028 [ 5508E9F55799C6551D54DFBC4A068B68 ] ACPIVPC C:\WINDOWS\system32\DRIVERS\AcpiVpc.sys
21:33:37.0390 4028 ACPIVPC - ok
21:33:37.0437 4028 [ 424877CB9D5517F980FF7BACA2EB379D ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
21:33:37.0437 4028 AdobeFlashPlayerUpdateSvc - ok
21:33:37.0453 4028 adpu160m - ok
21:33:37.0468 4028 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
21:33:37.0468 4028 aec - ok
21:33:37.0500 4028 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
21:33:37.0500 4028 AFD - ok
21:33:37.0515 4028 Aha154x - ok
21:33:37.0515 4028 aic78u2 - ok
21:33:37.0515 4028 aic78xx - ok
21:33:37.0546 4028 [ 27AF056D8C42F0AB3CF1DFDCBBEB3243 ] Alerter C:\WINDOWS\system32\alrsvc.dll
21:33:37.0562 4028 Alerter - ok
21:33:37.0562 4028 [ D1738DDDFF196C5CEE6D867C136AF745 ] ALG C:\WINDOWS\System32\alg.exe
21:33:37.0578 4028 ALG - ok
21:33:37.0578 4028 AliIde - ok
21:33:37.0578 4028 amsint - ok
21:33:37.0625 4028 [ 0F83CB9BCB247869BCAD28026B8F134B ] ApfiltrService C:\WINDOWS\system32\DRIVERS\Apfiltr.sys
21:33:37.0625 4028 ApfiltrService - ok
21:33:37.0656 4028 [ 1561430DA2F2AB81CC0CE71AF95A778D ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
21:33:37.0656 4028 AppMgmt - ok
21:33:37.0671 4028 asc - ok
21:33:37.0671 4028 asc3350p - ok
21:33:37.0671 4028 asc3550 - ok
21:33:37.0765 4028 [ D33C507942299753868204CC7642FA27 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
21:33:37.0765 4028 aspnet_state - ok
21:33:37.0828 4028 [ 976E2AD5A62044629C2DE2CA8563722A ] aswFsBlk C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys
21:33:37.0828 4028 aswFsBlk - ok
21:33:37.0843 4028 [ C298F660FD9A91B0FB24C0AA26AE09AC ] aswMon2 C:\WINDOWS\system32\drivers\aswMon2.sys
21:33:37.0843 4028 aswMon2 - ok
21:33:37.0875 4028 [ D78653E357BFADB9A432AA1F66D50269 ] aswRdr C:\WINDOWS\system32\drivers\aswRdr.sys
21:33:37.0875 4028 aswRdr - ok
21:33:37.0875 4028 [ 17C4F06944B90944291CF7FB18D630C2 ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
21:33:37.0890 4028 aswSP - ok
21:33:37.0890 4028 [ C33510A1866806FD9C17F5D36B4DB6A6 ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys
21:33:37.0890 4028 aswTdi - ok
21:33:37.0953 4028 [ E2323AD197689D607EBC52137B4DFB2E ] aswUpdSv C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
21:33:37.0953 4028 aswUpdSv - ok
21:33:37.0984 4028 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
21:33:37.0984 4028 AsyncMac - ok
21:33:38.0000 4028 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
21:33:38.0000 4028 atapi - ok
21:33:38.0015 4028 Atdisk - ok
21:33:38.0031 4028 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
21:33:38.0031 4028 Atmarpc - ok
21:33:38.0062 4028 [ 3A28D3E7BAD0EED3810CD918B2525B54 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
21:33:38.0062 4028 AudioSrv - ok
21:33:38.0078 4028 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
21:33:38.0078 4028 audstub - ok
21:33:38.0109 4028 [ 58E57D723BD437049F74408016E1735D ] avast! Antivirus C:\Program Files\Alwil Software\Avast4\ashServ.exe
21:33:38.0109 4028 avast! Antivirus - ok
21:33:38.0140 4028 [ BCEA9A5EEF52351E1632DD417D3E7308 ] avast! Mail Scanner C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
21:33:38.0156 4028 avast! Mail Scanner - ok
21:33:38.0187 4028 [ B2203D1A09CAC8232780BFCF01A9B853 ] avast! Web Scanner C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
21:33:38.0187 4028 avast! Web Scanner - ok
21:33:38.0218 4028 [ 104860207AC574DEE432F28C1FBB878A ] b57w2k C:\WINDOWS\system32\DRIVERS\b57xp32.sys
21:33:38.0218 4028 b57w2k - ok
21:33:38.0296 4028 [ CC03987EE5D0F956706B40D2F91F9E4F ] BCM43XX C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
21:33:38.0312 4028 BCM43XX - ok
21:33:38.0343 4028 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
21:33:38.0343 4028 Beep - ok
21:33:38.0375 4028 [ 78200FAA6FD9C69394134C238C87FB7F ] BITS C:\WINDOWS\system32\qmgr.dll
21:33:38.0468 4028 BITS - ok
21:33:38.0484 4028 [ 9D6788EFFB9972C28C38D9C5E67249D5 ] Browser C:\WINDOWS\System32\browser.dll
21:33:38.0484 4028 Browser - ok
21:33:38.0531 4028 [ B6E16DA77EAFE84A8C5BC44784FEEAEA ] btaudio C:\WINDOWS\system32\drivers\btaudio.sys
21:33:38.0531 4028 btaudio - ok
21:33:38.0546 4028 [ 58A49BD10E08D3D4333A60DEDCB1CED8 ] BTDriver C:\WINDOWS\system32\DRIVERS\btport.sys
21:33:38.0562 4028 BTDriver - ok
21:33:38.0593 4028 [ EF5E0DE0A7CA2977A9255F36F4D915AB ] BTKRNL C:\WINDOWS\system32\DRIVERS\btkrnl.sys
21:33:38.0625 4028 BTKRNL - ok
21:33:38.0703 4028 [ 68CB792CA9AA6EC7A6C0C6DB655BFE8B ] btwdins C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
21:33:38.0703 4028 btwdins - ok
21:33:38.0734 4028 [ 80F61DE965C116051614AC2F04222FF7 ] BTWDNDIS C:\WINDOWS\system32\DRIVERS\btwdndis.sys
21:33:38.0734 4028 BTWDNDIS - ok
21:33:38.0765 4028 [ E48668B4A6A5CF68B33AECAD18EE8E1E ] btwhid C:\WINDOWS\system32\DRIVERS\btwhid.sys
21:33:38.0781 4028 btwhid - ok
21:33:38.0781 4028 [ 053DC5BE74621B63BB48C2B86BAFC7B0 ] BTWUSB C:\WINDOWS\system32\Drivers\btwusb.sys
21:33:38.0796 4028 BTWUSB - ok
21:33:38.0859 4028 [ 58DB523A2A714E57AD715BFDE8A22A5A ] Cam5607 C:\WINDOWS\system32\Drivers\BisonC07.sys
21:33:38.0890 4028 Cam5607 - ok
21:33:38.0937 4028 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
21:33:38.0937 4028 cbidf2k - ok
21:33:38.0953 4028 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
21:33:38.0953 4028 CCDECODE - ok
21:33:38.0968 4028 cd20xrnt - ok
21:33:39.0000 4028 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
21:33:39.0015 4028 Cdaudio - ok
21:33:39.0031 4028 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
21:33:39.0031 4028 Cdfs - ok
21:33:39.0062 4028 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
21:33:39.0062 4028 Cdrom - ok
21:33:39.0078 4028 [ 45B63DF2FB498D219FCBB4425CADE676 ] CiSvc C:\WINDOWS\system32\cisvc.exe
21:33:39.0078 4028 CiSvc - ok
21:33:39.0093 4028 [ C94F1B6F61858D6389C0FA06954FB9C4 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
21:33:39.0093 4028 ClipSrv - ok
21:33:39.0125 4028 [ 3C4D595E7F9B747325AEF28B4ADCAAE5 ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:33:39.0203 4028 clr_optimization_v2.0.50727_32 - ok
21:33:39.0234 4028 [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt C:\WINDOWS\system32\DRIVERS\CmBatt.sys
21:33:39.0234 4028 CmBatt - ok
21:33:39.0234 4028 CmdIde - ok
21:33:39.0281 4028 [ 6D3C92D01DE6E835E20D92A8366BCF26 ] CnxtHdAudService C:\WINDOWS\system32\drivers\CHDAU32.sys
21:33:39.0296 4028 CnxtHdAudService - ok
21:33:39.0312 4028 [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt C:\WINDOWS\system32\DRIVERS\compbatt.sys
21:33:39.0312 4028 Compbatt - ok
21:33:39.0328 4028 COMSysApp - ok
21:33:39.0343 4028 Cpqarray - ok
21:33:39.0375 4028 [ 6B105FE95F2E9F0B6346044BA59D41C9 ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
21:33:39.0390 4028 CryptSvc - ok
21:33:39.0390 4028 dac2w2k - ok
21:33:39.0390 4028 dac960nt - ok
21:33:39.0453 4028 [ 02396DAB9DD407B06539981F477F3FEC ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
21:33:39.0453 4028 DcomLaunch - ok
21:33:39.0484 4028 [ 6B4AFE7C676CFF3EFF2DC06A4EE945F7 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
21:33:39.0484 4028 Dhcp - ok
21:33:39.0500 4028 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
21:33:39.0500 4028 Disk - ok
21:33:39.0500 4028 dmadmin - ok
21:33:39.0562 4028 [ BC9219ABC5696942E6F9AC8A9B28670F ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
21:33:39.0578 4028 dmboot - ok
21:33:39.0593 4028 [ 5FA232E3BA6E1346F9F5A7E519320CB0 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
21:33:39.0593 4028 dmio - ok
21:33:39.0625 4028 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
21:33:39.0625 4028 dmload - ok
21:33:39.0656 4028 [ D858920A05076914D34B0388E8D96CC0 ] dmserver C:\WINDOWS\System32\dmserver.dll
21:33:39.0656 4028 dmserver - ok
21:33:39.0671 4028 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
21:33:39.0671 4028 DMusic - ok
21:33:39.0703 4028 [ 4F7E82841ED3CF026BD8D5CE7C7379DB ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
21:33:39.0703 4028 Dnscache - ok
21:33:39.0734 4028 [ E0B7D66CF29D9ADCCF873C77821CD4CA ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
21:33:39.0734 4028 Dot3svc - ok
21:33:39.0734 4028 dpti2o - ok
21:33:39.0765 4028 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
21:33:39.0765 4028 drmkaud - ok
21:33:39.0781 4028 [ 5F256C1AD50FEFDC442CD5AAB58C7DD8 ] EapHost C:\WINDOWS\System32\eapsvc.dll
21:33:39.0781 4028 EapHost - ok
21:33:39.0812 4028 [ ED1B71382C31FD2CF3CDC4672EFAD6EA ] ERSvc C:\WINDOWS\System32\ersvc.dll
21:33:39.0812 4028 ERSvc - ok
21:33:39.0828 4028 [ 3E3AE424E27C4CEFE4CAB368C7B570EA ] Eventlog C:\WINDOWS\system32\services.exe
21:33:39.0828 4028 Eventlog - ok
21:33:39.0843 4028 [ BE1B1412A3D488C50B8F67F792196108 ] EventSystem C:\WINDOWS\system32\es.dll
21:33:39.0843 4028 EventSystem - ok
21:33:39.0875 4028 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
21:33:39.0875 4028 Fastfat - ok
21:33:39.0906 4028 [ 8AD90ED829B8404D962545ED3EFB1129 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
21:33:39.0906 4028 FastUserSwitchingCompatibility - ok
21:33:39.0921 4028 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys
21:33:39.0921 4028 Fdc - ok
21:33:39.0937 4028 [ 09E2A4D33F81A06A8AAB2BA0A0B5D235 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
21:33:39.0953 4028 Fips - ok
21:33:39.0968 4028 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys
21:33:39.0968 4028 Flpydisk - ok
21:33:40.0015 4028 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
21:33:40.0015 4028 FltMgr - ok
21:33:40.0031 4028 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
21:33:40.0031 4028 Fs_Rec - ok
21:33:40.0046 4028 [ ED6D921D8AB423138FB35BEEE6D6A6CB ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
21:33:40.0062 4028 Ftdisk - ok
21:33:40.0093 4028 [ 1DD4BB8F2110A8AEB1466A2805AE57BB ] getPlusHelper C:\Program Files\NOS\bin\getPlus_Helper.dll
21:33:40.0093 4028 getPlusHelper - ok
21:33:40.0109 4028 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
21:33:40.0125 4028 Gpc - ok
21:33:40.0125 4028 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
21:33:40.0140 4028 HDAudBus - ok
21:33:40.0187 4028 [ AF752014F7EB61542E3F35B9374D7E76 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
21:33:40.0187 4028 helpsvc - ok
21:33:40.0218 4028 [ 1776C3B6069EEECC8042535296C1866A ] HidServ C:\WINDOWS\System32\hidserv.dll
21:33:40.0218 4028 HidServ - ok
21:33:40.0250 4028 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
21:33:40.0250 4028 HidUsb - ok
21:33:40.0281 4028 [ F0273916DA6FB64CC88E0BD77619554F ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
21:33:40.0281 4028 hkmsvc - ok
21:33:40.0296 4028 hpn - ok
21:33:40.0312 4028 [ F6AACF5BCE2893E0C1754AFEB672E5C9 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
21:33:40.0312 4028 HTTP - ok
21:33:40.0343 4028 [ AA268079AC119F3A596E5E27AEE4BD17 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
21:33:40.0343 4028 HTTPFilter - ok
21:33:40.0375 4028 [ 07853191B1BDEE5B39BE4CFCFE3B9AD4 ] hwdatacard C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys
21:33:40.0375 4028 hwdatacard - ok
21:33:40.0390 4028 i2omp - ok
21:33:40.0406 4028 [ 177B372AF55C4460D0968B5F1D02AA1C ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
21:33:40.0406 4028 i8042prt - ok
21:33:40.0578 4028 [ 1312E0141A7BD409AFADD52FA565927E ] ialm C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
21:33:40.0718 4028 ialm - ok
21:33:40.0750 4028 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
21:33:40.0750 4028 Imapi - ok
21:33:40.0781 4028 [ 9125AF650608A921F98A789E5C5BA864 ] ImapiService C:\WINDOWS\system32\imapi.exe
21:33:40.0781 4028 ImapiService - ok
21:33:40.0796 4028 ini910u - ok
21:33:40.0796 4028 IntelIde - ok
21:33:40.0812 4028 [ DA153EDC09DE8C4F846C085CAA39D1CC ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
21:33:40.0812 4028 intelppm - ok
21:33:40.0843 4028 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
21:33:40.0843 4028 Ip6Fw - ok
21:33:40.0875 4028 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
21:33:40.0875 4028 IpFilterDriver - ok
21:33:40.0890 4028 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
21:33:40.0890 4028 IpInIp - ok
21:33:40.0921 4028 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
21:33:40.0921 4028 IpNat - ok
21:33:40.0953 4028 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
21:33:40.0968 4028 IPSec - ok
21:33:40.0968 4028 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
21:33:40.0984 4028 IRENUM - ok
21:33:41.0000 4028 [ C8EEF2E93835B81BD335DE2123121283 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
21:33:41.0000 4028 isapnp - ok
21:33:41.0062 4028 [ 7FBFEEE245821925129C9F86470BF33C ] JavaQuickStarterService C:\Program Files\Java\jre7\bin\jqs.exe
21:33:41.0062 4028 JavaQuickStarterService - ok
21:33:41.0093 4028 [ 2AECA45D4AEAACBDCB77AD11184E4601 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
21:33:41.0093 4028 Kbdclass - ok
21:33:41.0109 4028 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
21:33:41.0109 4028 kmixer - ok
21:33:41.0125 4028 [ 1705745D900DABF2D89F90EBADDC7517 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
21:33:41.0125 4028 KSecDD - ok
21:33:41.0156 4028 [ 427F50A24AA35597A9A5E8FBF029590F ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
21:33:41.0156 4028 lanmanserver - ok
21:33:41.0171 4028 [ 92C7C0C7F4248F1B9F6872BAB9053523 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
21:33:41.0203 4028 lanmanworkstation - ok
21:33:41.0218 4028 [ 437AA83D68F9FAC234CA68DBD40DB705 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
21:33:41.0218 4028 LmHosts - ok
21:33:41.0250 4028 [ 36F3AB18B1BE303DA51DE90A67DE3942 ] Messenger C:\WINDOWS\System32\msgsvc.dll
21:33:41.0250 4028 Messenger - ok
21:33:41.0281 4028 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
21:33:41.0281 4028 mnmdd - ok
21:33:41.0296 4028 [ 845814A8CB9D704D030F076E1BCE83F3 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
21:33:41.0312 4028 mnmsrvc - ok
21:33:41.0343 4028 [ 4A068DB7DC37D5AFEDB6512D2931D7B3 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
21:33:41.0343 4028 Modem - ok
21:33:41.0359 4028 [ FBED3DF6B884F8CF00447B73507F2C48 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
21:33:41.0359 4028 Mouclass - ok
21:33:41.0390 4028 [ ECEC1E6CD558AB80F944F31326E9D3B5 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
21:33:41.0390 4028 mouhid - ok
21:33:41.0406 4028 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
21:33:41.0406 4028 MountMgr - ok
21:33:41.0421 4028 mraid35x - ok
21:33:41.0453 4028 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
21:33:41.0453 4028 MRxDAV - ok
21:33:41.0484 4028 [ F3AEFB11ABC521122B67095044169E98 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
21:33:41.0500 4028 MRxSmb - ok
21:33:41.0515 4028 [ A54C5EECC7D3424824410BAE0AA6C371 ] MSDTC C:\WINDOWS\system32\msdtc.exe
21:33:41.0515 4028 MSDTC - ok
21:33:41.0546 4028 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
21:33:41.0546 4028 Msfs - ok
21:33:41.0546 4028 MSIServer - ok
21:33:41.0578 4028 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
21:33:41.0578 4028 MSKSSRV - ok
21:33:41.0578 4028 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
21:33:41.0593 4028 MSPCLOCK - ok
21:33:41.0609 4028 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
21:33:41.0609 4028 MSPQM - ok
21:33:41.0625 4028 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
21:33:41.0625 4028 mssmbios - ok
21:33:41.0640 4028 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
21:33:41.0640 4028 MSTEE - ok
21:33:41.0671 4028 [ 2F625D11385B1A94360BFC70AAEFDEE1 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
21:33:41.0687 4028 Mup - ok
21:33:41.0718 4028 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
21:33:41.0718 4028 NABTSFEC - ok
21:33:41.0765 4028 [ 14CB8528E17D1221C50FC8CA88B1795F ] napagent C:\WINDOWS\System32\qagentrt.dll
21:33:41.0781 4028 napagent - ok
21:33:41.0890 4028 [ B498A14133BD09AD0817590ACE4470AD ] NBService C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
21:33:41.0921 4028 NBService - ok
21:33:41.0937 4028 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
21:33:41.0953 4028 NDIS - ok
21:33:41.0984 4028 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
21:33:41.0984 4028 NdisIP - ok
21:33:42.0015 4028 [ 1AB3D00C991AB086E69DB84B6C0ED78F ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
21:33:42.0015 4028 NdisTapi - ok
21:33:42.0031 4028 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
21:33:42.0031 4028 Ndisuio - ok
21:33:42.0046 4028 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
21:33:42.0046 4028 NdisWan - ok
21:33:42.0062 4028 [ 6215023940CFD3702B46ABC304E1D45A ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
21:33:42.0062 4028 NDProxy - ok
21:33:42.0078 4028 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
21:33:42.0078 4028 NetBIOS - ok
21:33:42.0109 4028 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
21:33:42.0109 4028 NetBT - ok
21:33:42.0140 4028 [ CBB409B314309FCFFCE5E682E91338C6 ] NetDDE C:\WINDOWS\system32\netdde.exe
21:33:42.0140 4028 NetDDE - ok
21:33:42.0140 4028 [ CBB409B314309FCFFCE5E682E91338C6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
21:33:42.0156 4028 NetDDEdsdm - ok
21:33:42.0187 4028 [ 88296F7943F30A1EE3AF735440B92268 ] Netlogon C:\WINDOWS\system32\lsass.exe
21:33:42.0203 4028 Netlogon - ok
21:33:42.0218 4028 [ 4FE97D0B1B182DF2A9BDD4C02155EF5E ] Netman C:\WINDOWS\System32\netman.dll
21:33:42.0218 4028 Netman - ok
21:33:42.0265 4028 [ 612E31FCAC1040EDD78ECAC81C9F859F ] Nla C:\WINDOWS\System32\mswsock.dll
21:33:42.0265 4028 Nla - ok
21:33:42.0359 4028 [ A328A46D87BB92CE4D8A4528E9D84787 ] NMIndexingService C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
21:33:42.0375 4028 NMIndexingService - ok
21:33:42.0421 4028 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
21:33:42.0421 4028 Npfs - ok
21:33:42.0453 4028 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
21:33:42.0484 4028 Ntfs - ok
21:33:42.0500 4028 [ 88296F7943F30A1EE3AF735440B92268 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
21:33:42.0500 4028 NtLmSsp - ok
21:33:42.0531 4028 [ 3FB5399DBB7001A80D58EDAD64C98225 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
21:33:42.0546 4028 NtmsSvc - ok
21:33:42.0593 4028 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
21:33:42.0593 4028 Null - ok
21:33:42.0609 4028 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
21:33:42.0625 4028 NwlnkFlt - ok
21:33:42.0625 4028 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
21:33:42.0640 4028 NwlnkFwd - ok
21:33:42.0687 4028 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
21:33:42.0687 4028 ose - ok
21:33:42.0718 4028 [ 2D4CDAEBCED17743AA9E25D3016DC229 ] Parport C:\WINDOWS\system32\drivers\Parport.sys
21:33:42.0718 4028 Parport - ok
21:33:42.0734 4028 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
21:33:42.0734 4028 PartMgr - ok
21:33:42.0750 4028 [ 453EC2C2A20A1382F564541918520EEB ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
21:33:42.0750 4028 ParVdm - ok
21:33:42.0765 4028 [ 6862C69168D787B85A7D95CCD33C694E ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
21:33:42.0781 4028 PCI - ok
21:33:42.0812 4028 [ 548CF2D6369EAE441A4C6BAA75BC4F0A ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
21:33:42.0812 4028 PCIIde - ok
21:33:42.0828 4028 [ 8DB27F1AE9593C94095485305A583862 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
21:33:42.0828 4028 Pcmcia - ok
21:33:42.0828 4028 perc2 - ok
21:33:42.0843 4028 perc2hib - ok
21:33:42.0859 4028 [ 3E3AE424E27C4CEFE4CAB368C7B570EA ] PlugPlay C:\WINDOWS\system32\services.exe
21:33:42.0859 4028 PlugPlay - ok
21:33:42.0875 4028 [ 831883B107684301F48ACE752C963984 ] PnkBstrA C:\WINDOWS\system32\PnkBstrA.exe
21:33:42.0890 4028 PnkBstrA - ok
21:33:42.0890 4028 [ 88296F7943F30A1EE3AF735440B92268 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
21:33:42.0890 4028 PolicyAgent - ok
21:33:42.0906 4028 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
21:33:42.0921 4028 PptpMiniport - ok
21:33:42.0921 4028 [ 88296F7943F30A1EE3AF735440B92268 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
21:33:42.0921 4028 ProtectedStorage - ok
21:33:42.0937 4028 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
21:33:42.0937 4028 PSched - ok
21:33:42.0953 4028 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
21:33:42.0953 4028 Ptilink - ok
21:33:42.0984 4028 [ D86B4A68565E444D76457F14172C875A ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
21:33:42.0984 4028 PxHelp20 - ok
21:33:43.0000 4028 ql1080 - ok
21:33:43.0000 4028 Ql10wnt - ok
21:33:43.0000 4028 ql12160 - ok
21:33:43.0015 4028 ql1240 - ok
21:33:43.0015 4028 ql1280 - ok
21:33:43.0062 4028 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
21:33:43.0062 4028 RasAcd - ok
21:33:43.0093 4028 [ BC22C5E1238D4D36D65679E249C483C3 ] RasAuto C:\WINDOWS\System32\rasauto.dll
21:33:43.0093 4028 RasAuto - ok
21:33:43.0109 4028 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
21:33:43.0109 4028 Rasl2tp - ok
21:33:43.0140 4028 [ 0C392E397B8D34AAAF19EC6119CBB788 ] RasMan C:\WINDOWS\System32\rasmans.dll
21:33:43.0140 4028 RasMan - ok
21:33:43.0156 4028 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
21:33:43.0156 4028 RasPppoe - ok
21:33:43.0171 4028 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
21:33:43.0187 4028 Raspti - ok
21:33:43.0187 4028 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
21:33:43.0203 4028 Rdbss - ok
21:33:43.0203 4028 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
21:33:43.0203 4028 RDPCDD - ok
21:33:43.0234 4028 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
21:33:43.0234 4028 rdpdr - ok
21:33:43.0281 4028 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
21:33:43.0281 4028 RDPWD - ok
21:33:43.0296 4028 [ F83907A9A038DB2E35329B039628D293 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
21:33:43.0296 4028 RDSessMgr - ok
21:33:43.0312 4028 [ E0C7BBD18040B58651BAC700C804861D ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
21:33:43.0328 4028 redbook - ok
21:33:43.0343 4028 [ B3F57E6115BCD4DBADE9874F300655E3 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
21:33:43.0359 4028 RemoteAccess - ok
21:33:43.0390 4028 [ B472B59EF98469C91651B751D3442CB8 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
21:33:43.0390 4028 RemoteRegistry - ok
21:33:43.0421 4028 [ 6BC4D5A70F46EA27DDC14E5414C862A5 ] RpcLocator C:\WINDOWS\system32\locator.exe
21:33:43.0421 4028 RpcLocator - ok
21:33:43.0453 4028 [ 02396DAB9DD407B06539981F477F3FEC ] RpcSs C:\WINDOWS\system32\rpcss.dll
21:33:43.0453 4028 RpcSs - ok
21:33:43.0484 4028 [ 9ACEE3313020A01235336C2A483AFD1A ] RSVP C:\WINDOWS\system32\rsvp.exe
21:33:43.0484 4028 RSVP - ok
21:33:43.0500 4028 [ 88296F7943F30A1EE3AF735440B92268 ] SamSs C:\WINDOWS\system32\lsass.exe
21:33:43.0500 4028 SamSs - ok
21:33:43.0531 4028 [ C6F479218E94896738C06AF5BA6AB3D3 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
21:33:43.0531 4028 SCardSvr - ok
21:33:43.0578 4028 [ DD73C11A5C4D14945846384B90A61A4B ] Schedule C:\WINDOWS\system32\schedsvc.dll
21:33:43.0578 4028 Schedule - ok
21:33:43.0593 4028 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
21:33:43.0609 4028 Secdrv - ok
21:33:43.0609 4028 [ 2AAD9026648120FFFE2A8D871BB2BBC7 ] seclogon C:\WINDOWS\System32\seclogon.dll
21:33:43.0609 4028 seclogon - ok
21:33:43.0640 4028 [ 9D01E29D59723EB73B72107B208DAFE6 ] SENS C:\WINDOWS\system32\sens.dll
21:33:43.0640 4028 SENS - ok
21:33:43.0671 4028 [ D07B02F88165E69B9F17162CF592C8A6 ] Serial C:\WINDOWS\system32\drivers\Serial.sys
21:33:43.0671 4028 Serial - ok
21:33:43.0687 4028 [ 4C0D673281178CB496011A2E28571FC8 ] sfdrv01 C:\WINDOWS\system32\drivers\sfdrv01.sys
21:33:43.0687 4028 sfdrv01 - ok
21:33:43.0703 4028 [ 15BE2B5E4DC5B8623CF167720682ABC9 ] sfhlp02 C:\WINDOWS\system32\drivers\sfhlp02.sys
21:33:43.0703 4028 sfhlp02 - ok
21:33:43.0703 4028 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
21:33:43.0703 4028 Sfloppy - ok
21:33:43.0718 4028 [ 21A4C510AB071A10BCB638FE4254D101 ] sfsync04 C:\WINDOWS\system32\drivers\sfsync04.sys
21:33:43.0718 4028 sfsync04 - ok
21:33:43.0750 4028 [ DA5C015911F68F22ED821E9EE49AB233 ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
21:33:43.0750 4028 SharedAccess - ok
21:33:43.0765 4028 [ 8AD90ED829B8404D962545ED3EFB1129 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
21:33:43.0781 4028 ShellHWDetection - ok
21:33:43.0781 4028 Simbad - ok
21:33:43.0796 4028 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
21:33:43.0796 4028 SLIP - ok
21:33:43.0796 4028 Sparrow - ok
21:33:43.0828 4028 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
21:33:43.0828 4028 splitter - ok
21:33:43.0843 4028 [ DD69EC597AB942C39B950D9C3CE1375D ] Spooler C:\WINDOWS\system32\spoolsv.exe
21:33:43.0843 4028 Spooler - ok
21:33:43.0875 4028 [ 8EA0FD60A5B047E0C734D51AACE531C9 ] sptd C:\WINDOWS\System32\Drivers\sptd.sys
21:33:43.0875 4028 Suspicious file (NoAccess): C:\WINDOWS\System32\Drivers\sptd.sys. md5: 8EA0FD60A5B047E0C734D51AACE531C9
21:33:43.0890 4028 sptd ( LockedFile.Multi.Generic ) - warning
21:33:43.0890 4028 sptd - detected LockedFile.Multi.Generic (1)
21:33:43.0890 4028 [ EB032822BE406EF220D546DDFFCF0002 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
21:33:43.0890 4028 sr - ok
21:33:43.0906 4028 [ 316D0E66074AE4CDE641C50D3A1C5148 ] srservice C:\WINDOWS\system32\srsvc.dll
21:33:43.0921 4028 srservice - ok
21:33:43.0953 4028 [ 5252605079810904E31C332E241CD59B ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
21:33:43.0953 4028 Srv - ok
21:33:43.0984 4028 [ 2C0B1224AA36B4CA1753302BAA855882 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
21:33:43.0984 4028 SSDPSRV - ok
21:33:44.0015 4028 [ 41508EA375C97DC2B56E5F1AFC067187 ] stisvc C:\WINDOWS\system32\wiaservc.dll
21:33:44.0031 4028 stisvc - ok
21:33:44.0062 4028 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
21:33:44.0062 4028 streamip - ok
21:33:44.0078 4028 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
21:33:44.0078 4028 swenum - ok
21:33:44.0109 4028 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
21:33:44.0171 4028 swmidi - ok
21:33:44.0187 4028 SwPrv - ok
21:33:44.0187 4028 symc810 - ok
21:33:44.0187 4028 symc8xx - ok
21:33:44.0203 4028 sym_hi - ok
21:33:44.0203 4028 sym_u3 - ok
21:33:44.0234 4028 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
21:33:44.0265 4028 sysaudio - ok
21:33:44.0312 4028 [ E42048198518F9162027A9984CBB7B5C ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
21:33:44.0328 4028 SysmonLog - ok
21:33:44.0359 4028 [ 2340E6977548038C88E39A9ECBB3FADC ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
21:33:44.0359 4028 TapiSrv - ok
21:33:44.0390 4028 [ 93EA8D04EC73A85DB02EB8805988F733 ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
21:33:44.0406 4028 Tcpip - ok
21:33:44.0421 4028 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
21:33:44.0421 4028 TDPIPE - ok
21:33:44.0437 4028 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
21:33:44.0437 4028 TDTCP - ok
21:33:44.0453 4028 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
21:33:44.0468 4028 TermDD - ok
21:33:44.0500 4028 [ 52E0505408EDD4AB5CCC7F83B67B4299 ] TermService C:\WINDOWS\System32\termsrv.dll
21:33:44.0515 4028 TermService - ok
21:33:44.0546 4028 [ 8AD90ED829B8404D962545ED3EFB1129 ] Themes C:\WINDOWS\System32\shsvcs.dll
21:33:44.0546 4028 Themes - ok
21:33:44.0578 4028 [ B17551AB6EAA71DCA530632C15FA3D9A ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
21:33:44.0578 4028 TlntSvr - ok
21:33:44.0593 4028 TosIde - ok
21:33:44.0625 4028 [ 9E70EB419D7785C286DC458A019BAB9B ] TrkWks C:\WINDOWS\system32\trkwks.dll
21:33:44.0625 4028 TrkWks - ok
21:33:44.0671 4028 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
21:33:44.0671 4028 Udfs - ok
21:33:44.0687 4028 ultra - ok
21:33:44.0718 4028 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
21:33:44.0734 4028 Update - ok
21:33:44.0765 4028 [ E96A6BAEE0B2A14A38B45830D6E30697 ] upnphost C:\WINDOWS\System32\upnphost.dll
21:33:44.0765 4028 upnphost - ok
21:33:44.0781 4028 [ EB90E28B28541EC845E5345609355CA7 ] UPS C:\WINDOWS\System32\ups.exe
21:33:44.0781 4028 UPS - ok
21:33:44.0796 4028 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
21:33:44.0796 4028 usbccgp - ok
21:33:44.0812 4028 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
21:33:44.0812 4028 usbehci - ok
21:33:44.0828 4028 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
21:33:44.0828 4028 usbhub - ok
21:33:44.0843 4028 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
21:33:44.0859 4028 usbprint - ok
21:33:44.0859 4028 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
21:33:44.0859 4028 usbscan - ok
21:33:44.0875 4028 [ 1C888B000C2F9492F4B15B5B6B84873E ] usbser C:\WINDOWS\system32\drivers\usbser.sys
21:33:44.0875 4028 usbser - ok
21:33:44.0890 4028 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
21:33:44.0890 4028 USBSTOR - ok
21:33:44.0906 4028 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
21:33:44.0906 4028 usbuhci - ok
21:33:44.0921 4028 [ 63BBFCA7F390F4C49ED4B96BFB1633E0 ] usbvideo C:\WINDOWS\system32\Drivers\usbvideo.sys
21:33:44.0937 4028 usbvideo - ok
21:33:44.0953 4028 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
21:33:44.0953 4028 VgaSave - ok
21:33:44.0953 4028 ViaIde - ok
21:33:44.0968 4028 [ 56B191AC5FC0DF219949C95A6C87AFE7 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
21:33:44.0968 4028 VolSnap - ok
21:33:45.0015 4028 [ 7F2D7BFFC4554E1C742DD3629FD1FB1B ] VSS C:\WINDOWS\System32\vssvc.exe
21:33:45.0015 4028 VSS - ok
21:33:45.0046 4028 [ A672CA3981352F8E9C30FEA056E80A62 ] W32Time C:\WINDOWS\system32\w32time.dll
21:33:45.0062 4028 W32Time - ok
21:33:45.0078 4028 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
21:33:45.0078 4028 Wanarp - ok
21:33:45.0109 4028 [ D918617B46457B9AC28027722E30F647 ] Wdf01000 C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
21:33:45.0140 4028 Wdf01000 - ok
21:33:45.0171 4028 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
21:33:45.0171 4028 wdmaud - ok
21:33:45.0203 4028 [ 81FB88B975E25D76E00B69879D8A434C ] WebClient C:\WINDOWS\System32\webclnt.dll
21:33:45.0203 4028 WebClient - ok
21:33:45.0265 4028 [ 70C22297534A88B0AD0568900AB5A6D9 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
21:33:45.0281 4028 winmgmt - ok
21:33:45.0312 4028 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
21:33:45.0312 4028 WmdmPmSN - ok
21:33:45.0343 4028 [ 968C967F8A9B96E7D63FDD5664C896E7 ] Wmi C:\WINDOWS\System32\advapi32.dll
21:33:45.0375 4028 Wmi - ok
21:33:45.0406 4028 [ A2B12D80A1670511B047A7D8BB647598 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
21:33:45.0406 4028 WmiApSrv - ok
21:33:45.0484 4028 [ CDFA647AA82FDBA6C9C7A06155AFCB40 ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
21:33:45.0531 4028 WMPNetworkSvc - ok
21:33:45.0531 4028 [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys
21:33:45.0531 4028 WpdUsb - ok
21:33:45.0562 4028 WPFFontCache_v0400 - ok
21:33:45.0578 4028 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
21:33:45.0578 4028 WS2IFSL - ok
21:33:45.0609 4028 [ B6669F49D42E09BC0F9889FAA0F3336D ] wscsvc C:\WINDOWS\system32\wscsvc.dll
21:33:45.0609 4028 wscsvc - ok
21:33:45.0640 4028 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
21:33:45.0640 4028 WSTCODEC - ok
21:33:45.0656 4028 [ 04550D5EB7EE82C115DB547C01DF09FD ] wuauserv C:\WINDOWS\system32\wuauserv.dll
21:33:45.0671 4028 wuauserv - ok
21:33:45.0703 4028 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
21:33:45.0703 4028 WudfPf - ok
21:33:45.0718 4028 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
21:33:45.0718 4028 WudfRd - ok
21:33:45.0734 4028 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
21:33:45.0750 4028 WudfSvc - ok
21:33:45.0781 4028 [ C2842273AAA77AC031EDB87FA19A2147 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
21:33:45.0796 4028 WZCSVC - ok
21:33:45.0812 4028 [ 24ED6935771359A5AEF1FE8BF0C56F39 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
21:33:45.0875 4028 xmlprov - ok
21:33:45.0890 4028 ================ Scan global ===============================
21:33:45.0921 4028 [ 65C782F8CFC1BEBCC58E1532F44B6408 ] C:\WINDOWS\system32\basesrv.dll
21:33:45.0953 4028 [ 19FEEF6CEDD18ADE51092B947DBBCB02 ] C:\WINDOWS\system32\winsrv.dll
21:33:45.0968 4028 [ 19FEEF6CEDD18ADE51092B947DBBCB02 ] C:\WINDOWS\system32\winsrv.dll
21:33:46.0000 4028 [ 3E3AE424E27C4CEFE4CAB368C7B570EA ] C:\WINDOWS\system32\services.exe
21:33:46.0015 4028 [Global] - ok
21:33:46.0015 4028 ================ Scan MBR ==================================
21:33:46.0031 4028 [ 32052574BF9F325AE309ABC7BFD04460 ] \Device\Harddisk0\DR0
21:33:46.0218 4028 \Device\Harddisk0\DR0 - ok
21:33:46.0218 4028 ================ Scan VBR ==================================
21:33:46.0218 4028 [ 47A846F993DC39A1C0CBC3EDE2B16DF1 ] \Device\Harddisk0\DR0\Partition1
21:33:46.0234 4028 \Device\Harddisk0\DR0\Partition1 - ok
21:33:46.0234 4028 [ AA90CA45BB7747AE8A9B16E2B8D1DA46 ] \Device\Harddisk0\DR0\Partition2
21:33:46.0250 4028 \Device\Harddisk0\DR0\Partition2 - ok
21:33:46.0265 4028 [ 1C60D4342774235DF973A0D016D0803E ] \Device\Harddisk0\DR0\Partition3
21:33:46.0265 4028 \Device\Harddisk0\DR0\Partition3 - ok
21:33:46.0265 4028 ============================================================
21:33:46.0265 4028 Scan finished
21:33:46.0265 4028 ============================================================
21:33:46.0281 3100 Detected object count: 1
21:33:46.0281 3100 Actual detected object count: 1
21:34:02.0296 3100 C:\WINDOWS\System32\Drivers\sptd.sys - copied to quarantine
21:34:02.0296 3100 HKLM\SYSTEM\ControlSet001\services\sptd - will be deleted on reboot
21:34:02.0296 3100 HKLM\SYSTEM\ControlSet002\services\sptd - will be deleted on reboot
21:34:02.0296 3100 HKLM\SYSTEM\ControlSet003\services\sptd - will be deleted on reboot
21:34:02.0312 3100 C:\WINDOWS\System32\Drivers\sptd.sys - will be deleted on reboot
21:34:02.0312 3100 sptd ( LockedFile.Multi.Generic ) - User select action: Delete
21:34:11.0453 1124 Deinitialize success