Smitfraud-C.gp virus...please help!

Thanks for the clarification. I can only delete the files in the ESET results located in c:\programdata. When I try to delete the files in any of the shadowcopy folders I get a message that the disk is write protected or the media is write protected.

With respect to the blue screen it does contain some message, but it does not last long enough for me to be able to read any of it.

With respect to the winsrcmde box. It was happening before too. It seems to come up usually after running spybot and attempting to fix the problem.

I downloaded and ran tdss and attempted to reboot. Now it crashes and I get the blue screen about 20 seconds after the login page loads. It seems to have more writing than the previous blue screen, about 3/4 of a page, but again it does last long enough to catch more than a word or two. It can restart in safe mode.
 
Hi,

Please see if TDSSKiller log was created in c: root (name should be in UtilityName.Version_Date_Time_log.txt format).
 
Yes, the log was created. \Device\Harddisk0\DR0 - detected Rootkit.Boot.Pihar.a

It indicated it would be cured on reboot.

At the end of the scan I clicked cure and then reboot.
 
Hi,

Please run TDSSKiller in safe mode but this time make sure you select skip to any findings. Please post TDSSKiller log back here.
 
TDSS log second run:

16:22:39.0708 1992 TDSS rootkit removing tool 2.6.2.0 Sep 26 2011 18:56:43
16:22:39.0723 1992 ============================================================
16:22:39.0723 1992 Current date / time: 2011/10/03 16:22:39.0723
16:22:39.0723 1992 SystemInfo:
16:22:39.0723 1992
16:22:39.0723 1992 OS Version: 6.0.6002 ServicePack: 2.0
16:22:39.0723 1992 Product type: Workstation
16:22:39.0723 1992 ComputerName: DELLYBUG
16:22:39.0723 1992 UserName: elly
16:22:39.0723 1992 Windows directory: C:\Windows
16:22:39.0723 1992 System windows directory: C:\Windows
16:22:39.0723 1992 Running under WOW64
16:22:39.0723 1992 Processor architecture: Intel x64
16:22:39.0723 1992 Number of processors: 2
16:22:39.0723 1992 Page size: 0x1000
16:22:39.0723 1992 Boot type: Safe boot
16:22:39.0723 1992 ============================================================
16:22:40.0035 1992 Initialize success
16:23:03.0872 2032 ============================================================
16:23:03.0872 2032 Scan started
16:23:03.0872 2032 Mode: Manual;
16:23:03.0872 2032 ============================================================
16:23:04.0231 2032 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys
16:23:04.0231 2032 ACPI - ok
16:23:04.0309 2032 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys
16:23:04.0309 2032 adp94xx - ok
16:23:04.0340 2032 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys
16:23:04.0356 2032 adpahci - ok
16:23:04.0449 2032 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys
16:23:04.0449 2032 adpu160m - ok
16:23:04.0480 2032 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys
16:23:04.0480 2032 adpu320 - ok
16:23:04.0558 2032 AFD (0cc146c4addea45791b18b1e2659f4a9) C:\Windows\system32\drivers\afd.sys
16:23:04.0558 2032 AFD - ok
16:23:04.0621 2032 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys
16:23:04.0621 2032 agp440 - ok
16:23:04.0714 2032 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys
16:23:04.0714 2032 aic78xx - ok
16:23:04.0746 2032 aliide (9544c2c55541c0c6bfd7b489d0e7d430) C:\Windows\system32\drivers\aliide.sys
16:23:04.0746 2032 aliide - ok
16:23:04.0777 2032 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys
16:23:04.0777 2032 amdide - ok
16:23:04.0808 2032 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys
16:23:04.0808 2032 AmdK8 - ok
16:23:04.0855 2032 ApfiltrService (8c85c812569df851e7a2159147323dfa) C:\Windows\system32\DRIVERS\Apfiltr.sys
16:23:04.0855 2032 ApfiltrService - ok
16:23:04.0948 2032 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys
16:23:04.0948 2032 arc - ok
16:23:05.0026 2032 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys
16:23:05.0026 2032 arcsas - ok
16:23:05.0058 2032 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys
16:23:05.0058 2032 AsyncMac - ok
16:23:05.0104 2032 atapi (e68d9b3a3905619732f7fe039466a623) C:\Windows\system32\drivers\atapi.sys
16:23:05.0104 2032 atapi - ok
16:23:05.0167 2032 AvgLdx64 (276c5b14336452c8ce547ed5d00e0e62) C:\Windows\System32\Drivers\avgldx64.sys
16:23:05.0182 2032 AvgLdx64 - ok
16:23:05.0260 2032 AvgMfx64 (b9c21c3753dcbccac6b62e1a560eb6f7) C:\Windows\System32\Drivers\avgmfx64.sys
16:23:05.0260 2032 AvgMfx64 - ok
16:23:05.0276 2032 AvgTdiA (86d08cf28005f7f626a84d512f84d6c2) C:\Windows\System32\Drivers\avgtdia.sys
16:23:05.0292 2032 AvgTdiA - ok
16:23:05.0307 2032 Beep - ok
16:23:05.0370 2032 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys
16:23:05.0370 2032 blbdrive - ok
16:23:05.0416 2032 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys
16:23:05.0416 2032 bowser - ok
16:23:05.0448 2032 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys
16:23:05.0448 2032 BrFiltLo - ok
16:23:05.0479 2032 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys
16:23:05.0479 2032 BrFiltUp - ok
16:23:05.0572 2032 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys
16:23:05.0572 2032 Brserid - ok
16:23:05.0650 2032 BrSerIf (34f6c504b150f99dae69d7073d2a4df4) C:\Windows\system32\DRIVERS\BrSerIf.sys
16:23:05.0650 2032 BrSerIf - ok
16:23:05.0682 2032 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys
16:23:05.0697 2032 BrSerWdm - ok
16:23:05.0728 2032 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys
16:23:05.0728 2032 BrUsbMdm - ok
16:23:05.0760 2032 BrUsbSer (601cb966fffebc6806626dc8e7aa0ef2) C:\Windows\system32\DRIVERS\BrUsbSer.sys
16:23:05.0760 2032 BrUsbSer - ok
16:23:05.0791 2032 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys
16:23:05.0791 2032 BTHMODEM - ok
16:23:05.0806 2032 catchme - ok
16:23:05.0822 2032 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys
16:23:05.0822 2032 cdfs - ok
16:23:05.0869 2032 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys
16:23:05.0869 2032 cdrom - ok
16:23:05.0962 2032 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\DRIVERS\circlass.sys
16:23:05.0962 2032 circlass - ok
16:23:05.0994 2032 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys
16:23:06.0009 2032 CLFS - ok
16:23:06.0072 2032 CmBatt (b52d9a14ce4101577900a364ba86f3df) C:\Windows\system32\DRIVERS\CmBatt.sys
16:23:06.0072 2032 CmBatt - ok
16:23:06.0087 2032 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys
16:23:06.0103 2032 cmdide - ok
16:23:06.0118 2032 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\DRIVERS\compbatt.sys
16:23:06.0118 2032 Compbatt - ok
16:23:06.0134 2032 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys
16:23:06.0134 2032 crcdisk - ok
16:23:06.0243 2032 DfsC (8b722ba35205c71e7951cdc4cdbade19) C:\Windows\system32\Drivers\dfsc.sys
16:23:06.0243 2032 DfsC - ok
16:23:06.0306 2032 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys
16:23:06.0306 2032 disk - ok
16:23:06.0415 2032 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys
16:23:06.0415 2032 drmkaud - ok
16:23:06.0462 2032 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys
16:23:06.0477 2032 DXGKrnl - ok
16:23:06.0571 2032 e1express (17d40652ef3e55eeae187a89df40965a) C:\Windows\system32\DRIVERS\e1e6032e.sys
16:23:06.0571 2032 e1express - ok
16:23:06.0649 2032 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys
16:23:06.0664 2032 E1G60 - ok
16:23:06.0711 2032 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys
16:23:06.0711 2032 Ecache - ok
16:23:06.0758 2032 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys
16:23:06.0758 2032 elxstor - ok
16:23:06.0836 2032 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys
16:23:06.0852 2032 ErrDev - ok
16:23:06.0914 2032 ewusbnet (0b8880f8d9a781670557307e2bca6bd6) C:\Windows\system32\DRIVERS\ewusbnet.sys
16:23:06.0930 2032 ewusbnet - ok
16:23:06.0976 2032 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys
16:23:06.0992 2032 exfat - ok
16:23:07.0039 2032 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys
16:23:07.0039 2032 fastfat - ok
16:23:07.0070 2032 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys
16:23:07.0086 2032 fdc - ok
16:23:07.0117 2032 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys
16:23:07.0117 2032 FileInfo - ok
16:23:07.0164 2032 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys
16:23:07.0164 2032 Filetrace - ok
16:23:07.0210 2032 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
16:23:07.0210 2032 flpydisk - ok
16:23:07.0257 2032 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys
16:23:07.0257 2032 FltMgr - ok
16:23:07.0320 2032 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys
16:23:07.0320 2032 Fs_Rec - ok
16:23:07.0351 2032 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys
16:23:07.0351 2032 gagp30kx - ok
16:23:07.0398 2032 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
16:23:07.0398 2032 GEARAspiWDM - ok
16:23:07.0507 2032 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys
16:23:07.0522 2032 HDAudBus - ok
16:23:07.0585 2032 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys
16:23:07.0585 2032 HidBth - ok
16:23:07.0616 2032 HidIr (5f47839455d01ff6403b008d481a6f5b) C:\Windows\system32\DRIVERS\hidir.sys
16:23:07.0616 2032 HidIr - ok
16:23:07.0663 2032 HidUsb (128e2da8483fdd4dd0c7b3f9abd6f323) C:\Windows\system32\DRIVERS\hidusb.sys
16:23:07.0678 2032 HidUsb - ok
16:23:07.0772 2032 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys
16:23:07.0772 2032 HpCISSs - ok
16:23:07.0850 2032 HtcUsbMdmV64 (33aa4b9ad32a5be6285a471f8a767e5b) C:\Windows\system32\DRIVERS\HtcUsbMdmV64.sys
16:23:07.0850 2032 HtcUsbMdmV64 - ok
16:23:07.0912 2032 HtcVCom32 (be364aee7f85a36d536eba47a17536eb) C:\Windows\system32\DRIVERS\HtcVComV64.sys
16:23:07.0912 2032 HtcVCom32 - ok
16:23:07.0959 2032 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys
16:23:07.0975 2032 HTTP - ok
16:23:08.0037 2032 hwdatacard (3e31c1470aba81ba2dcb956f8504c037) C:\Windows\system32\DRIVERS\ewusbmdm.sys
16:23:08.0037 2032 hwdatacard - ok
16:23:08.0084 2032 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys
16:23:08.0100 2032 i2omp - ok
16:23:08.0131 2032 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys
16:23:08.0131 2032 i8042prt - ok
16:23:08.0193 2032 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys
16:23:08.0193 2032 iaStorV - ok
16:23:08.0474 2032 igfx (677aa5991026a65ada128c4b59cf2bad) C:\Windows\system32\DRIVERS\igdkmd64.sys
16:23:08.0677 2032 igfx - ok
16:23:08.0786 2032 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys
16:23:08.0786 2032 iirsp - ok
16:23:08.0833 2032 IntcHdmiAddService (dea2ab452b4fa773187369c4b6517320) C:\Windows\system32\drivers\IntcHdmi.sys
16:23:08.0833 2032 IntcHdmiAddService - ok
16:23:08.0880 2032 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\drivers\intelide.sys
16:23:08.0880 2032 intelide - ok
16:23:08.0926 2032 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys
16:23:08.0926 2032 intelppm - ok
16:23:08.0973 2032 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys
16:23:08.0973 2032 IpFilterDriver - ok
16:23:09.0004 2032 IpInIp - ok
16:23:09.0036 2032 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys
16:23:09.0036 2032 IPMIDRV - ok
16:23:09.0160 2032 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys
16:23:09.0160 2032 IPNAT - ok
16:23:09.0192 2032 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys
16:23:09.0192 2032 IRENUM - ok
16:23:09.0223 2032 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys
16:23:09.0223 2032 isapnp - ok
16:23:09.0270 2032 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys
16:23:09.0270 2032 iScsiPrt - ok
16:23:09.0285 2032 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys
16:23:09.0301 2032 iteatapi - ok
16:23:09.0332 2032 itecir (5fef11c18ec25cdcb27e6c8680690b69) C:\Windows\system32\DRIVERS\itecir.sys
16:23:09.0332 2032 itecir - ok
16:23:09.0348 2032 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys
16:23:09.0348 2032 iteraid - ok
16:23:09.0410 2032 k57nd60a (2798447996feb5a58b584c8443acad02) C:\Windows\system32\DRIVERS\k57nd60a.sys
16:23:09.0410 2032 k57nd60a - ok
16:23:09.0488 2032 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys
16:23:09.0488 2032 kbdclass - ok
16:23:09.0519 2032 kbdhid (dbdf75d51464fbc47d0104ec3d572c05) C:\Windows\system32\DRIVERS\kbdhid.sys
16:23:09.0519 2032 kbdhid - ok
16:23:09.0582 2032 KSecDD (476e2c1dcea45895994bef11c2a98715) C:\Windows\system32\Drivers\ksecdd.sys
16:23:09.0597 2032 KSecDD - ok
16:23:09.0597 2032 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys
16:23:09.0597 2032 ksthunk - ok
16:23:09.0628 2032 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys
16:23:09.0644 2032 lltdio - ok
16:23:09.0675 2032 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys
16:23:09.0675 2032 LSI_FC - ok
16:23:09.0784 2032 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys
16:23:09.0784 2032 LSI_SAS - ok
16:23:09.0831 2032 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys
16:23:09.0831 2032 LSI_SCSI - ok
16:23:09.0862 2032 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys
16:23:09.0862 2032 luafv - ok
16:23:09.0894 2032 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys
16:23:09.0909 2032 megasas - ok
16:23:09.0972 2032 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys
16:23:09.0972 2032 MegaSR - ok
16:23:10.0081 2032 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys
16:23:10.0081 2032 Modem - ok
16:23:10.0096 2032 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys
16:23:10.0096 2032 monitor - ok
16:23:10.0128 2032 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys
16:23:10.0128 2032 mouclass - ok
16:23:10.0143 2032 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys
16:23:10.0143 2032 mouhid - ok
16:23:10.0159 2032 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys
16:23:10.0159 2032 MountMgr - ok
16:23:10.0190 2032 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys
16:23:10.0190 2032 mpio - ok
16:23:10.0221 2032 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys
16:23:10.0221 2032 mpsdrv - ok
16:23:10.0252 2032 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys
16:23:10.0252 2032 Mraid35x - ok
16:23:10.0284 2032 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys
16:23:10.0284 2032 MRxDAV - ok
16:23:10.0315 2032 mrxsmb (1485811b320ff8c7edad1caebb1c6c2b) C:\Windows\system32\DRIVERS\mrxsmb.sys
16:23:10.0315 2032 mrxsmb - ok
16:23:10.0408 2032 mrxsmb10 (3b929a60c833fc615fd97fba82bc7632) C:\Windows\system32\DRIVERS\mrxsmb10.sys
16:23:10.0408 2032 mrxsmb10 - ok
16:23:10.0440 2032 mrxsmb20 (c64ab3e1f53b4f5b5bb6d796b2d7bec3) C:\Windows\system32\DRIVERS\mrxsmb20.sys
16:23:10.0440 2032 mrxsmb20 - ok
16:23:10.0471 2032 msahci (aa459f2ab3ab603c357ff117cae3d818) C:\Windows\system32\drivers\msahci.sys
16:23:10.0486 2032 msahci - ok
16:23:10.0518 2032 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys
16:23:10.0518 2032 msdsm - ok
16:23:10.0564 2032 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys
16:23:10.0564 2032 Msfs - ok
16:23:10.0596 2032 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys
16:23:10.0596 2032 msisadrv - ok
16:23:10.0674 2032 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys
16:23:10.0674 2032 MSKSSRV - ok
16:23:10.0705 2032 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys
16:23:10.0705 2032 MSPCLOCK - ok
16:23:10.0720 2032 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys
16:23:10.0720 2032 MSPQM - ok
16:23:10.0752 2032 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys
16:23:10.0767 2032 MsRPC - ok
16:23:10.0798 2032 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys
16:23:10.0798 2032 mssmbios - ok
16:23:10.0830 2032 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys
16:23:10.0830 2032 MSTEE - ok
16:23:10.0845 2032 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys
16:23:10.0845 2032 Mup - ok
16:23:10.0892 2032 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys
16:23:10.0908 2032 NativeWifiP - ok
16:23:11.0001 2032 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys
16:23:11.0001 2032 NDIS - ok
16:23:11.0048 2032 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys
16:23:11.0048 2032 NdisTapi - ok
16:23:11.0079 2032 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys
16:23:11.0079 2032 Ndisuio - ok
16:23:11.0110 2032 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys
16:23:11.0110 2032 NdisWan - ok
16:23:11.0126 2032 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys
16:23:11.0126 2032 NDProxy - ok
16:23:11.0142 2032 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys
16:23:11.0142 2032 NetBIOS - ok
16:23:11.0188 2032 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys
16:23:11.0188 2032 netbt - ok
16:23:11.0376 2032 NETw5v64 (6d27b976934afc67f09a9553c2ce1309) C:\Windows\system32\DRIVERS\NETw5v64.sys
16:23:11.0454 2032 NETw5v64 - ok
16:23:11.0532 2032 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys
16:23:11.0532 2032 nfrd960 - ok
16:23:11.0578 2032 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys
16:23:11.0578 2032 Npfs - ok
16:23:11.0578 2032 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys
16:23:11.0594 2032 nsiproxy - ok
16:23:11.0641 2032 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys
16:23:11.0672 2032 Ntfs - ok
16:23:11.0766 2032 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys
16:23:11.0766 2032 Null - ok
16:23:11.0797 2032 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys
16:23:11.0797 2032 nvraid - ok
16:23:11.0828 2032 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys
16:23:11.0828 2032 nvstor - ok
16:23:11.0844 2032 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys
16:23:11.0859 2032 nv_agp - ok
16:23:11.0859 2032 NwlnkFlt - ok
16:23:11.0875 2032 NwlnkFwd - ok
16:23:11.0922 2032 OA001Ufd (d09cc91e92fd1ff81af3a14be2cbb20d) C:\Windows\system32\DRIVERS\OA001Ufd.sys
16:23:11.0922 2032 OA001Ufd - ok
16:23:11.0953 2032 OA001Vid (a42cb6914ad67e1584e807ce53f1e62c) C:\Windows\system32\DRIVERS\OA001Vid.sys
16:23:11.0953 2032 OA001Vid - ok
16:23:12.0031 2032 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys
16:23:12.0031 2032 ohci1394 - ok
16:23:12.0109 2032 Packet (43e24699a18126f11e3d9bf6db85518b) C:\Windows\system32\DRIVERS\packet.sys
16:23:12.0109 2032 Packet - ok
16:23:12.0156 2032 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys
16:23:12.0156 2032 Parport - ok
16:23:12.0187 2032 partmgr (f9b5eda4c17a2be7663f064dbf0fe254) C:\Windows\system32\drivers\partmgr.sys
16:23:12.0187 2032 partmgr - ok
16:23:12.0202 2032 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys
16:23:12.0218 2032 pci - ok
16:23:12.0249 2032 pciide (8d618c829034479985a9ed56106cc732) C:\Windows\system32\drivers\pciide.sys
16:23:12.0249 2032 pciide - ok
16:23:12.0280 2032 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys
16:23:12.0280 2032 pcmcia - ok
16:23:12.0358 2032 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys
16:23:12.0374 2032 PEAUTH - ok
16:23:12.0436 2032 PGPdisk (085dc0f095f5b224f68394d04c64bc25) C:\Windows\system32\drivers\PGPdisk.sys
16:23:12.0452 2032 PGPdisk - ok
16:23:12.0483 2032 pgpfs (51d986814f8388bf0f99583fb73dcf3a) C:\Windows\system32\Drivers\PGPfsfd.sys
16:23:12.0483 2032 pgpfs - ok
16:23:12.0499 2032 PGPsdkDriver (bdd217ec73121e607db9200c428acd73) C:\Windows\system32\Drivers\PGPsdk.sys
16:23:12.0514 2032 PGPsdkDriver - ok
16:23:12.0577 2032 PGPwded (b7b006d7de8c566c77fac61c7939f70d) C:\Windows\system32\drivers\PGPwded.sys
16:23:12.0592 2032 PGPwded - ok
16:23:12.0639 2032 Pgpwdefs (9a4bdeafad488656922e06efd4364394) C:\Windows\system32\DRIVERS\Pgpwdefs.sys
16:23:12.0639 2032 Pgpwdefs - ok
16:23:12.0702 2032 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys
16:23:12.0702 2032 PptpMiniport - ok
16:23:12.0733 2032 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys
16:23:12.0733 2032 Processor - ok
16:23:12.0795 2032 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys
16:23:12.0795 2032 PSched - ok
16:23:12.0842 2032 PxHelp20 - ok
16:23:12.0873 2032 PxHlpa64 (46851bc18322da70f3f2299a1007c479) C:\Windows\system32\Drivers\PxHlpa64.sys
16:23:12.0873 2032 PxHlpa64 - ok
16:23:12.0967 2032 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys
16:23:12.0982 2032 ql2300 - ok
16:23:13.0045 2032 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys
16:23:13.0045 2032 ql40xx - ok
16:23:13.0107 2032 qrkis (e92ca234469cc386ad81b9db924fe9d4) C:\Windows\system32\DRIVERS\qrkis.sys
16:23:13.0123 2032 qrkis - ok
16:23:13.0154 2032 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys
16:23:13.0154 2032 QWAVEdrv - ok
16:23:13.0279 2032 R300 (2a09a6b271d1f50adf5e33b37d460de6) C:\Windows\system32\DRIVERS\atikmdag.sys
16:23:13.0310 2032 R300 - ok
16:23:13.0435 2032 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys
16:23:13.0435 2032 RasAcd - ok
16:23:13.0482 2032 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys
16:23:13.0482 2032 Rasl2tp - ok
16:23:13.0513 2032 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys
16:23:13.0513 2032 RasPppoe - ok
16:23:13.0544 2032 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys
16:23:13.0544 2032 RasSstp - ok
16:23:13.0575 2032 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys
16:23:13.0575 2032 rdbss - ok
16:23:13.0638 2032 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys
16:23:13.0638 2032 RDPCDD - ok
16:23:13.0669 2032 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys
16:23:13.0684 2032 rdpdr - ok
16:23:13.0731 2032 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys
16:23:13.0731 2032 RDPENCDD - ok
16:23:13.0778 2032 RDPWD (b1d741c87cea8d7282146366cc9c3f81) C:\Windows\system32\drivers\RDPWD.sys
16:23:13.0778 2032 RDPWD - ok
16:23:13.0825 2032 rimmptsk (d13d70fac45fc1df69f88559b1f72f0a) C:\Windows\system32\DRIVERS\rimmpx64.sys
16:23:13.0825 2032 rimmptsk - ok
16:23:13.0840 2032 rimsptsk (bb9edc55b0b8cb4fcd713428820e0776) C:\Windows\system32\DRIVERS\rimspx64.sys
16:23:13.0840 2032 rimsptsk - ok
16:23:13.0903 2032 RimUsb (5790bca445cc40df8b38c2c48608aac2) C:\Windows\system32\Drivers\RimUsb_AMD64.sys
16:23:13.0903 2032 RimUsb - ok
16:23:13.0981 2032 RimVSerPort (0de22421179d5a8440b68517ddf2b051) C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys
16:23:13.0981 2032 RimVSerPort - ok
16:23:14.0012 2032 rismxdp (481c3fdeacaae04b74c58288dbc91df9) C:\Windows\system32\DRIVERS\rixdpx64.sys
16:23:14.0028 2032 rismxdp - ok
16:23:14.0059 2032 ROOTMODEM (6a0cf73b019cbc9255e23c9192ec3702) C:\Windows\system32\Drivers\RootMdm.sys
16:23:14.0059 2032 ROOTMODEM - ok
16:23:14.0090 2032 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys
16:23:14.0090 2032 rspndr - ok
16:23:14.0121 2032 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys
16:23:14.0121 2032 sbp2port - ok
16:23:14.0168 2032 sdbus (be100bc2be2513314c717bb2c4cfff10) C:\Windows\system32\DRIVERS\sdbus.sys
16:23:14.0168 2032 sdbus - ok
16:23:14.0184 2032 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
16:23:14.0199 2032 secdrv - ok
16:23:14.0230 2032 Serenum (f71bfe7ac6c52273b7c82cbf1bb2a222) C:\Windows\system32\drivers\serenum.sys
16:23:14.0230 2032 Serenum - ok
16:23:14.0308 2032 Serial (e62fac91ee288db29a9696a9d279929c) C:\Windows\system32\drivers\serial.sys
16:23:14.0308 2032 Serial - ok
16:23:14.0340 2032 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys
16:23:14.0340 2032 sermouse - ok
16:23:14.0402 2032 sffdisk (3a19c899bcf0ea24cfec2038e6a489db) C:\Windows\system32\DRIVERS\sffdisk.sys
16:23:14.0402 2032 sffdisk - ok
16:23:14.0480 2032 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys
16:23:14.0480 2032 sffp_mmc - ok
16:23:14.0511 2032 sffp_sd (fdca63a2eee528585eb66ceac183ec22) C:\Windows\system32\DRIVERS\sffp_sd.sys
16:23:14.0511 2032 sffp_sd - ok
16:23:14.0542 2032 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys
16:23:14.0558 2032 sfloppy - ok
16:23:14.0589 2032 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys
16:23:14.0589 2032 SiSRaid2 - ok
16:23:14.0605 2032 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys
16:23:14.0620 2032 SiSRaid4 - ok
16:23:14.0652 2032 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys
16:23:14.0652 2032 Smb - ok
16:23:14.0714 2032 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys
16:23:14.0730 2032 spldr - ok
16:23:14.0761 2032 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys
16:23:14.0776 2032 srv - ok
16:23:14.0823 2032 srv2 (a1ad14a6d7a37891fffeca35ebbb0730) C:\Windows\system32\DRIVERS\srv2.sys
16:23:14.0823 2032 srv2 - ok
16:23:14.0854 2032 srvnet (4bed62f4fa4d8300973f1151f4c4d8a7) C:\Windows\system32\DRIVERS\srvnet.sys
16:23:14.0854 2032 srvnet - ok
16:23:14.0917 2032 STHDA (3281204b2e6049100d0ff04270c2aea5) C:\Windows\system32\DRIVERS\stwrt64.sys
16:23:14.0932 2032 STHDA - ok
16:23:14.0995 2032 StillCam (14b4db4381e4a55f570d8bb699b791d6) C:\Windows\system32\DRIVERS\serscan.sys
16:23:14.0995 2032 StillCam - ok
16:23:15.0073 2032 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys
16:23:15.0073 2032 swenum - ok
16:23:15.0088 2032 swivsp (deed5e8a6ed680b8824de0e349f511ed) C:\Windows\system32\DRIVERS\swivspnt.sys
16:23:15.0088 2032 swivsp - ok
16:23:15.0088 2032 SWUMX20 - ok
16:23:15.0120 2032 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys
16:23:15.0120 2032 Symc8xx - ok
16:23:15.0151 2032 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys
16:23:15.0151 2032 Sym_hi - ok
16:23:15.0166 2032 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys
16:23:15.0166 2032 Sym_u3 - ok
16:23:15.0229 2032 Tcpip (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\drivers\tcpip.sys
16:23:15.0260 2032 Tcpip - ok
16:23:15.0354 2032 Tcpip6 (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\DRIVERS\tcpip.sys
16:23:15.0354 2032 Tcpip6 - ok
16:23:15.0385 2032 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys
16:23:15.0385 2032 tcpipreg - ok
16:23:15.0432 2032 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys
16:23:15.0447 2032 TDPIPE - ok
16:23:15.0478 2032 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys
16:23:15.0478 2032 TDTCP - ok
16:23:15.0510 2032 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys
16:23:15.0510 2032 tdx - ok
16:23:15.0541 2032 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys
16:23:15.0541 2032 TermDD - ok
16:23:15.0588 2032 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys
16:23:15.0588 2032 tssecsrv - ok
16:23:15.0697 2032 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys
16:23:15.0697 2032 tunmp - ok
16:23:15.0728 2032 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys
16:23:15.0728 2032 tunnel - ok
16:23:15.0759 2032 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys
16:23:15.0759 2032 uagp35 - ok
16:23:15.0806 2032 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys
16:23:15.0806 2032 udfs - ok
16:23:15.0837 2032 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys
16:23:15.0853 2032 uliagpkx - ok
16:23:15.0868 2032 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys
16:23:15.0884 2032 uliahci - ok
16:23:15.0962 2032 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys
16:23:15.0962 2032 UlSata - ok
16:23:16.0040 2032 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys
16:23:16.0040 2032 ulsata2 - ok
16:23:16.0071 2032 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys
16:23:16.0071 2032 umbus - ok
16:23:16.0118 2032 USBAAPL64 (afbf3de5b9e662cd7124740f7199f2aa) C:\Windows\system32\Drivers\usbaapl64.sys
16:23:16.0118 2032 USBAAPL64 - ok
16:23:16.0165 2032 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys
16:23:16.0165 2032 usbccgp - ok
16:23:16.0196 2032 usbcir (9247f7e0b65852c1f6631480984d6ed2) C:\Windows\system32\drivers\usbcir.sys
16:23:16.0196 2032 usbcir - ok
16:23:16.0243 2032 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys
16:23:16.0243 2032 usbehci - ok
16:23:16.0290 2032 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys
16:23:16.0290 2032 usbhub - ok
16:23:16.0352 2032 usbohci (eba14ef0c07cec233f1529c698d0d154) C:\Windows\system32\drivers\usbohci.sys
16:23:16.0352 2032 usbohci - ok
16:23:16.0399 2032 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys
16:23:16.0399 2032 usbprint - ok
16:23:16.0430 2032 usbscan (ea0bf666868964fbe8cb10e50c97b9f1) C:\Windows\system32\DRIVERS\usbscan.sys
16:23:16.0430 2032 usbscan - ok
16:23:16.0461 2032 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS
16:23:16.0477 2032 USBSTOR - ok
16:23:16.0492 2032 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys
16:23:16.0492 2032 usbuhci - ok
16:23:16.0524 2032 usb_rndisx (1e36bb1a3c5aaf2aa9fa9a126df8c16c) C:\Windows\system32\DRIVERS\usb8023x.sys
16:23:16.0524 2032 usb_rndisx - ok
16:23:16.0617 2032 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys
16:23:16.0617 2032 vga - ok
16:23:16.0633 2032 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys
16:23:16.0633 2032 VgaSave - ok
16:23:16.0695 2032 viaide (8294b6c3fdb6c33f24e150de647ecdaa) C:\Windows\system32\drivers\viaide.sys
16:23:16.0711 2032 viaide - ok
16:23:16.0742 2032 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys
16:23:16.0742 2032 volmgr - ok
16:23:16.0773 2032 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys
16:23:16.0789 2032 volmgrx - ok
16:23:16.0820 2032 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys
16:23:16.0836 2032 volsnap - ok
16:23:16.0882 2032 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys
16:23:16.0882 2032 vsmraid - ok
16:23:16.0929 2032 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys
16:23:16.0929 2032 WacomPen - ok
16:23:16.0976 2032 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
16:23:16.0976 2032 Wanarp - ok
16:23:16.0992 2032 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
16:23:16.0992 2032 Wanarpv6 - ok
16:23:17.0054 2032 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys
16:23:17.0054 2032 Wd - ok
16:23:17.0116 2032 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
16:23:17.0163 2032 Wdf01000 - ok
16:23:17.0288 2032 winusb (7f2f9e48566b2087f2aaad258cb2a8d4) C:\Windows\system32\DRIVERS\winusb.sys
16:23:17.0288 2032 winusb - ok
16:23:17.0319 2032 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\DRIVERS\wmiacpi.sys
16:23:17.0319 2032 WmiAcpi - ok
16:23:17.0382 2032 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys
16:23:17.0382 2032 ws2ifsl - ok
16:23:17.0460 2032 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
16:23:17.0460 2032 WudfPf - ok
16:23:17.0522 2032 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
16:23:17.0522 2032 WUDFRd - ok
16:23:17.0584 2032 MBR (0x1B8) (cdb4de4bbd714f152979da2dcbef57eb) \Device\Harddisk0\DR0
16:23:17.0600 2032 \Device\Harddisk0\DR0 - ok
16:23:17.0616 2032 Boot (0x1200) (3022ed99800e16314a31f9c9f6d898e6) \Device\Harddisk0\DR0\Partition0
16:23:17.0616 2032 \Device\Harddisk0\DR0\Partition0 - ok
16:23:17.0616 2032 Boot (0x1200) (f880b7fde141c38fdf3d76d02dbe7b9a) \Device\Harddisk0\DR0\Partition1
16:23:17.0616 2032 \Device\Harddisk0\DR0\Partition1 - ok
16:23:17.0616 2032 ============================================================
16:23:17.0616 2032 Scan finished
16:23:17.0616 2032 ============================================================
16:23:17.0631 0944 Detected object count: 0
16:23:17.0631 0944 Actual detected object count: 0
16:27:23.0940 2020 Deinitialize success
 
Hi,

May I see TDSSKiller log from the first run too, please?
 
17:49:58.0478 1912 TDSS rootkit removing tool 2.6.2.0 Sep 26 2011 18:56:43
17:50:00.0480 1912 ============================================================
17:50:00.0480 1912 Current date / time: 2011/10/02 17:50:00.0480
17:50:00.0480 1912 SystemInfo:
17:50:00.0480 1912
17:50:00.0480 1912 OS Version: 6.0.6002 ServicePack: 2.0
17:50:00.0480 1912 Product type: Workstation
17:50:00.0480 1912 ComputerName: DELLYBUG
17:50:00.0480 1912 UserName: elly
17:50:00.0480 1912 Windows directory: C:\Windows
17:50:00.0480 1912 System windows directory: C:\Windows
17:50:00.0480 1912 Running under WOW64
17:50:00.0480 1912 Processor architecture: Intel x64
17:50:00.0480 1912 Number of processors: 2
17:50:00.0480 1912 Page size: 0x1000
17:50:00.0480 1912 Boot type: Normal boot
17:50:00.0480 1912 ============================================================
17:50:01.0347 1912 Initialize success
17:50:08.0034 5288 ============================================================
17:50:08.0034 5288 Scan started
17:50:08.0034 5288 Mode: Manual;
17:50:08.0034 5288 ============================================================
17:50:09.0895 5288 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys
17:50:09.0901 5288 ACPI - ok
17:50:09.0969 5288 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys
17:50:09.0979 5288 adp94xx - ok
17:50:10.0010 5288 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys
17:50:10.0017 5288 adpahci - ok
17:50:10.0105 5288 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys
17:50:10.0108 5288 adpu160m - ok
17:50:10.0183 5288 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys
17:50:10.0187 5288 adpu320 - ok
17:50:10.0260 5288 AFD (0cc146c4addea45791b18b1e2659f4a9) C:\Windows\system32\drivers\afd.sys
17:50:10.0270 5288 AFD - ok
17:50:10.0351 5288 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys
17:50:10.0353 5288 agp440 - ok
17:50:10.0419 5288 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys
17:50:10.0422 5288 aic78xx - ok
17:50:10.0464 5288 aliide (9544c2c55541c0c6bfd7b489d0e7d430) C:\Windows\system32\drivers\aliide.sys
17:50:10.0465 5288 aliide - ok
17:50:10.0500 5288 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys
17:50:10.0502 5288 amdide - ok
17:50:10.0578 5288 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys
17:50:10.0580 5288 AmdK8 - ok
17:50:10.0640 5288 ApfiltrService (8c85c812569df851e7a2159147323dfa) C:\Windows\system32\DRIVERS\Apfiltr.sys
17:50:10.0642 5288 ApfiltrService - ok
17:50:10.0792 5288 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys
17:50:10.0795 5288 arc - ok
17:50:10.0845 5288 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys
17:50:10.0848 5288 arcsas - ok
17:50:10.0885 5288 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys
17:50:10.0886 5288 AsyncMac - ok
17:50:10.0922 5288 atapi (e68d9b3a3905619732f7fe039466a623) C:\Windows\system32\drivers\atapi.sys
17:50:10.0923 5288 atapi - ok
17:50:11.0066 5288 AvgLdx64 (276c5b14336452c8ce547ed5d00e0e62) C:\Windows\System32\Drivers\avgldx64.sys
17:50:11.0070 5288 AvgLdx64 - ok
17:50:11.0094 5288 AvgMfx64 (b9c21c3753dcbccac6b62e1a560eb6f7) C:\Windows\System32\Drivers\avgmfx64.sys
17:50:11.0095 5288 AvgMfx64 - ok
17:50:11.0128 5288 AvgTdiA (86d08cf28005f7f626a84d512f84d6c2) C:\Windows\System32\Drivers\avgtdia.sys
17:50:11.0130 5288 AvgTdiA - ok
17:50:11.0180 5288 Beep - ok
17:50:11.0268 5288 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys
17:50:11.0270 5288 blbdrive - ok
17:50:11.0316 5288 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys
17:50:11.0317 5288 bowser - ok
17:50:11.0418 5288 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys
17:50:11.0420 5288 BrFiltLo - ok
17:50:11.0464 5288 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys
17:50:11.0465 5288 BrFiltUp - ok
17:50:11.0520 5288 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys
17:50:11.0523 5288 Brserid - ok
17:50:11.0591 5288 BrSerIf (34f6c504b150f99dae69d7073d2a4df4) C:\Windows\system32\DRIVERS\BrSerIf.sys
17:50:11.0593 5288 BrSerIf - ok
17:50:11.0638 5288 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys
17:50:11.0640 5288 BrSerWdm - ok
17:50:11.0680 5288 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys
17:50:11.0681 5288 BrUsbMdm - ok
17:50:11.0720 5288 BrUsbSer (601cb966fffebc6806626dc8e7aa0ef2) C:\Windows\system32\DRIVERS\BrUsbSer.sys
17:50:11.0721 5288 BrUsbSer - ok
17:50:11.0754 5288 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys
17:50:11.0756 5288 BTHMODEM - ok
17:50:11.0775 5288 catchme - ok
17:50:11.0848 5288 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys
17:50:11.0850 5288 cdfs - ok
17:50:11.0886 5288 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys
17:50:11.0887 5288 cdrom - ok
17:50:11.0923 5288 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\DRIVERS\circlass.sys
17:50:11.0924 5288 circlass - ok
17:50:11.0967 5288 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys
17:50:11.0974 5288 CLFS - ok
17:50:12.0036 5288 CmBatt (b52d9a14ce4101577900a364ba86f3df) C:\Windows\system32\DRIVERS\CmBatt.sys
17:50:12.0037 5288 CmBatt - ok
17:50:12.0105 5288 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys
17:50:12.0117 5288 cmdide - ok
17:50:12.0145 5288 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\DRIVERS\compbatt.sys
17:50:12.0145 5288 Compbatt - ok
17:50:12.0161 5288 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys
17:50:12.0161 5288 crcdisk - ok
17:50:12.0239 5288 DfsC (8b722ba35205c71e7951cdc4cdbade19) C:\Windows\system32\Drivers\dfsc.sys
17:50:12.0240 5288 DfsC - ok
17:50:12.0309 5288 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys
17:50:12.0310 5288 disk - ok
17:50:12.0444 5288 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys
17:50:12.0445 5288 drmkaud - ok
17:50:12.0510 5288 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys
17:50:12.0519 5288 DXGKrnl - ok
17:50:12.0582 5288 e1express (17d40652ef3e55eeae187a89df40965a) C:\Windows\system32\DRIVERS\e1e6032e.sys
17:50:12.0588 5288 e1express - ok
17:50:12.0682 5288 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys
17:50:12.0686 5288 E1G60 - ok
17:50:12.0740 5288 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys
17:50:12.0743 5288 Ecache - ok
17:50:12.0800 5288 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys
17:50:12.0808 5288 elxstor - ok
17:50:12.0880 5288 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys
17:50:12.0909 5288 ErrDev - ok
17:50:13.0055 5288 ewusbnet (0b8880f8d9a781670557307e2bca6bd6) C:\Windows\system32\DRIVERS\ewusbnet.sys
17:50:13.0058 5288 ewusbnet - ok
17:50:13.0278 5288 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys
17:50:13.0282 5288 exfat - ok
17:50:13.0337 5288 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys
17:50:13.0341 5288 fastfat - ok
17:50:13.0380 5288 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys
17:50:13.0381 5288 fdc - ok
17:50:13.0414 5288 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys
17:50:13.0415 5288 FileInfo - ok
17:50:13.0440 5288 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys
17:50:13.0442 5288 Filetrace - ok
17:50:13.0495 5288 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
17:50:13.0496 5288 flpydisk - ok
17:50:13.0573 5288 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys
17:50:13.0604 5288 FltMgr - ok
17:50:13.0678 5288 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys
17:50:13.0680 5288 Fs_Rec - ok
17:50:13.0733 5288 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys
17:50:13.0735 5288 gagp30kx - ok
17:50:13.0787 5288 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
17:50:13.0787 5288 GEARAspiWDM - ok
17:50:13.0902 5288 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys
17:50:13.0920 5288 HDAudBus - ok
17:50:13.0976 5288 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys
17:50:13.0993 5288 HidBth - ok
17:50:14.0024 5288 HidIr (5f47839455d01ff6403b008d481a6f5b) C:\Windows\system32\DRIVERS\hidir.sys
17:50:14.0025 5288 HidIr - ok
17:50:14.0072 5288 HidUsb (128e2da8483fdd4dd0c7b3f9abd6f323) C:\Windows\system32\DRIVERS\hidusb.sys
17:50:14.0073 5288 HidUsb - ok
17:50:14.0227 5288 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys
17:50:14.0229 5288 HpCISSs - ok
17:50:14.0312 5288 HtcUsbMdmV64 (33aa4b9ad32a5be6285a471f8a767e5b) C:\Windows\system32\DRIVERS\HtcUsbMdmV64.sys
17:50:14.0327 5288 HtcUsbMdmV64 - ok
17:50:14.0410 5288 HtcVCom32 (be364aee7f85a36d536eba47a17536eb) C:\Windows\system32\DRIVERS\HtcVComV64.sys
17:50:14.0433 5288 HtcVCom32 - ok
17:50:14.0548 5288 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys
17:50:14.0580 5288 HTTP - ok
17:50:14.0824 5288 hwdatacard (3e31c1470aba81ba2dcb956f8504c037) C:\Windows\system32\DRIVERS\ewusbmdm.sys
17:50:14.0852 5288 hwdatacard - ok
17:50:14.0968 5288 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys
17:50:14.0970 5288 i2omp - ok
17:50:15.0026 5288 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys
17:50:15.0027 5288 i8042prt - ok
17:50:15.0083 5288 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys
17:50:15.0090 5288 iaStorV - ok
17:50:15.0429 5288 igfx (677aa5991026a65ada128c4b59cf2bad) C:\Windows\system32\DRIVERS\igdkmd64.sys
17:50:15.0650 5288 igfx - ok
17:50:15.0740 5288 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys
17:50:15.0742 5288 iirsp - ok
17:50:15.0793 5288 IntcHdmiAddService (dea2ab452b4fa773187369c4b6517320) C:\Windows\system32\drivers\IntcHdmi.sys
17:50:15.0796 5288 IntcHdmiAddService - ok
17:50:15.0849 5288 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\drivers\intelide.sys
17:50:15.0850 5288 intelide - ok
17:50:15.0889 5288 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys
17:50:15.0890 5288 intelppm - ok
17:50:15.0954 5288 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys
17:50:15.0957 5288 IpFilterDriver - ok
17:50:15.0974 5288 IpInIp - ok
17:50:16.0017 5288 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys
17:50:16.0020 5288 IPMIDRV - ok
17:50:16.0138 5288 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys
17:50:16.0142 5288 IPNAT - ok
17:50:16.0193 5288 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys
17:50:16.0195 5288 IRENUM - ok
17:50:16.0277 5288 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys
17:50:16.0278 5288 isapnp - ok
17:50:16.0343 5288 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys
17:50:16.0344 5288 iScsiPrt - ok
17:50:16.0367 5288 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys
17:50:16.0369 5288 iteatapi - ok
17:50:16.0400 5288 itecir (5fef11c18ec25cdcb27e6c8680690b69) C:\Windows\system32\DRIVERS\itecir.sys
17:50:16.0402 5288 itecir - ok
17:50:16.0444 5288 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys
17:50:16.0446 5288 iteraid - ok
17:50:16.0545 5288 k57nd60a (2798447996feb5a58b584c8443acad02) C:\Windows\system32\DRIVERS\k57nd60a.sys
17:50:16.0549 5288 k57nd60a - ok
17:50:16.0578 5288 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys
17:50:16.0578 5288 kbdclass - ok
17:50:16.0600 5288 kbdhid (dbdf75d51464fbc47d0104ec3d572c05) C:\Windows\system32\DRIVERS\kbdhid.sys
17:50:16.0601 5288 kbdhid - ok
17:50:16.0682 5288 KSecDD (476e2c1dcea45895994bef11c2a98715) C:\Windows\system32\Drivers\ksecdd.sys
17:50:16.0691 5288 KSecDD - ok
17:50:16.0761 5288 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys
17:50:16.0762 5288 ksthunk - ok
17:50:16.0793 5288 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys
17:50:16.0795 5288 lltdio - ok
17:50:16.0838 5288 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys
17:50:16.0841 5288 LSI_FC - ok
17:50:16.0877 5288 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys
17:50:16.0880 5288 LSI_SAS - ok
17:50:16.0932 5288 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys
17:50:16.0935 5288 LSI_SCSI - ok
17:50:16.0963 5288 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys
17:50:16.0964 5288 luafv - ok
17:50:17.0000 5288 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys
17:50:17.0002 5288 megasas - ok
17:50:17.0043 5288 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys
17:50:17.0051 5288 MegaSR - ok
17:50:17.0145 5288 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys
17:50:17.0146 5288 Modem - ok
17:50:17.0184 5288 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys
17:50:17.0185 5288 monitor - ok
17:50:17.0229 5288 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys
17:50:17.0230 5288 mouclass - ok
17:50:17.0270 5288 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys
17:50:17.0271 5288 mouhid - ok
17:50:17.0294 5288 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys
17:50:17.0296 5288 MountMgr - ok
17:50:17.0324 5288 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys
17:50:17.0327 5288 mpio - ok
17:50:17.0350 5288 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys
17:50:17.0352 5288 mpsdrv - ok
17:50:17.0378 5288 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys
17:50:17.0380 5288 Mraid35x - ok
17:50:17.0417 5288 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys
17:50:17.0419 5288 MRxDAV - ok
17:50:17.0451 5288 mrxsmb (1485811b320ff8c7edad1caebb1c6c2b) C:\Windows\system32\DRIVERS\mrxsmb.sys
17:50:17.0453 5288 mrxsmb - ok
17:50:17.0541 5288 mrxsmb10 (3b929a60c833fc615fd97fba82bc7632) C:\Windows\system32\DRIVERS\mrxsmb10.sys
17:50:17.0546 5288 mrxsmb10 - ok
17:50:17.0570 5288 mrxsmb20 (c64ab3e1f53b4f5b5bb6d796b2d7bec3) C:\Windows\system32\DRIVERS\mrxsmb20.sys
17:50:17.0572 5288 mrxsmb20 - ok
17:50:17.0611 5288 msahci (aa459f2ab3ab603c357ff117cae3d818) C:\Windows\system32\drivers\msahci.sys
17:50:17.0612 5288 msahci - ok
17:50:17.0654 5288 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys
17:50:17.0657 5288 msdsm - ok
17:50:17.0692 5288 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys
17:50:17.0692 5288 Msfs - ok
17:50:17.0707 5288 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys
17:50:17.0708 5288 msisadrv - ok
17:50:17.0741 5288 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys
17:50:17.0743 5288 MSKSSRV - ok
17:50:17.0838 5288 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys
17:50:17.0839 5288 MSPCLOCK - ok
17:50:17.0859 5288 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys
17:50:17.0860 5288 MSPQM - ok
17:50:17.0906 5288 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys
17:50:17.0911 5288 MsRPC - ok
17:50:17.0937 5288 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys
17:50:17.0938 5288 mssmbios - ok
17:50:17.0963 5288 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys
17:50:17.0964 5288 MSTEE - ok
17:50:17.0999 5288 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys
17:50:17.0999 5288 Mup - ok
17:50:18.0048 5288 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys
17:50:18.0052 5288 NativeWifiP - ok
17:50:18.0144 5288 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys
17:50:18.0159 5288 NDIS - ok
17:50:18.0199 5288 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys
17:50:18.0200 5288 NdisTapi - ok
17:50:18.0317 5288 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys
17:50:18.0320 5288 Ndisuio - ok
17:50:18.0395 5288 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys
17:50:18.0399 5288 NdisWan - ok
17:50:18.0448 5288 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys
17:50:18.0451 5288 NDProxy - ok
17:50:18.0788 5288 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys
17:50:18.0789 5288 NetBIOS - ok
17:50:18.0830 5288 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys
17:50:18.0836 5288 netbt - ok
17:50:18.0989 5288 NETw5v64 (6d27b976934afc67f09a9553c2ce1309) C:\Windows\system32\DRIVERS\NETw5v64.sys
17:50:19.0065 5288 NETw5v64 - ok
17:50:19.0140 5288 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys
17:50:19.0141 5288 nfrd960 - ok
17:50:19.0220 5288 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys
17:50:19.0221 5288 Npfs - ok
17:50:19.0237 5288 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys
17:50:19.0238 5288 nsiproxy - ok
17:50:19.0302 5288 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys
17:50:19.0347 5288 Ntfs - ok
17:50:19.0428 5288 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys
17:50:19.0429 5288 Null - ok
17:50:19.0471 5288 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys
17:50:19.0475 5288 nvraid - ok
17:50:19.0509 5288 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys
17:50:19.0511 5288 nvstor - ok
17:50:19.0533 5288 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys
17:50:19.0536 5288 nv_agp - ok
17:50:19.0547 5288 NwlnkFlt - ok
17:50:19.0561 5288 NwlnkFwd - ok
17:50:19.0614 5288 OA001Ufd (d09cc91e92fd1ff81af3a14be2cbb20d) C:\Windows\system32\DRIVERS\OA001Ufd.sys
17:50:19.0618 5288 OA001Ufd - ok
17:50:19.0646 5288 OA001Vid (a42cb6914ad67e1584e807ce53f1e62c) C:\Windows\system32\DRIVERS\OA001Vid.sys
17:50:19.0652 5288 OA001Vid - ok
17:50:19.0751 5288 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys
17:50:19.0752 5288 ohci1394 - ok
17:50:19.0827 5288 Packet (43e24699a18126f11e3d9bf6db85518b) C:\Windows\system32\DRIVERS\packet.sys
17:50:19.0828 5288 Packet - ok
17:50:19.0873 5288 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys
17:50:19.0876 5288 Parport - ok
17:50:19.0909 5288 partmgr (f9b5eda4c17a2be7663f064dbf0fe254) C:\Windows\system32\drivers\partmgr.sys
17:50:19.0911 5288 partmgr - ok
17:50:19.0938 5288 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys
17:50:19.0941 5288 pci - ok
17:50:19.0974 5288 pciide (8d618c829034479985a9ed56106cc732) C:\Windows\system32\drivers\pciide.sys
17:50:19.0976 5288 pciide - ok
17:50:20.0018 5288 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys
17:50:20.0022 5288 pcmcia - ok
17:50:20.0337 5288 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys
17:50:20.0449 5288 PEAUTH - ok
17:50:20.0555 5288 PGPdisk (085dc0f095f5b224f68394d04c64bc25) C:\Windows\system32\drivers\PGPdisk.sys
17:50:20.0558 5288 PGPdisk - ok
17:50:20.0624 5288 pgpfs (51d986814f8388bf0f99583fb73dcf3a) C:\Windows\system32\Drivers\PGPfsfd.sys
17:50:20.0627 5288 pgpfs - ok
17:50:20.0651 5288 PGPsdkDriver (bdd217ec73121e607db9200c428acd73) C:\Windows\system32\Drivers\PGPsdk.sys
17:50:20.0653 5288 PGPsdkDriver - ok
17:50:20.0703 5288 PGPwded (b7b006d7de8c566c77fac61c7939f70d) C:\Windows\system32\drivers\PGPwded.sys
17:50:20.0710 5288 PGPwded - ok
17:50:20.0742 5288 Pgpwdefs (9a4bdeafad488656922e06efd4364394) C:\Windows\system32\DRIVERS\Pgpwdefs.sys
17:50:20.0743 5288 Pgpwdefs - ok
17:50:20.0802 5288 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys
17:50:20.0803 5288 PptpMiniport - ok
17:50:20.0840 5288 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys
17:50:20.0842 5288 Processor - ok
17:50:20.0946 5288 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys
17:50:20.0948 5288 PSched - ok
17:50:20.0970 5288 PxHelp20 - ok
17:50:21.0006 5288 PxHlpa64 (46851bc18322da70f3f2299a1007c479) C:\Windows\system32\Drivers\PxHlpa64.sys
17:50:21.0007 5288 PxHlpa64 - ok
17:50:21.0078 5288 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys
17:50:21.0104 5288 ql2300 - ok
17:50:21.0234 5288 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys
17:50:21.0237 5288 ql40xx - ok
17:50:21.0324 5288 qrkis (e92ca234469cc386ad81b9db924fe9d4) C:\Windows\system32\DRIVERS\qrkis.sys
17:50:21.0344 5288 qrkis - ok
17:50:21.0459 5288 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys
17:50:21.0461 5288 QWAVEdrv - ok
17:50:21.0607 5288 R300 (2a09a6b271d1f50adf5e33b37d460de6) C:\Windows\system32\DRIVERS\atikmdag.sys
17:50:21.0657 5288 R300 - ok
17:50:21.0774 5288 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys
17:50:21.0775 5288 RasAcd - ok
17:50:21.0841 5288 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys
17:50:21.0843 5288 Rasl2tp - ok
17:50:21.0886 5288 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys
17:50:21.0888 5288 RasPppoe - ok
17:50:21.0916 5288 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys
17:50:21.0918 5288 RasSstp - ok
17:50:21.0955 5288 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys
17:50:21.0961 5288 rdbss - ok
17:50:21.0984 5288 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys
17:50:21.0985 5288 RDPCDD - ok
17:50:22.0101 5288 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys
17:50:22.0108 5288 rdpdr - ok
17:50:22.0125 5288 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys
17:50:22.0126 5288 RDPENCDD - ok
17:50:22.0159 5288 RDPWD (b1d741c87cea8d7282146366cc9c3f81) C:\Windows\system32\drivers\RDPWD.sys
17:50:22.0164 5288 RDPWD - ok
17:50:22.0284 5288 rimmptsk (d13d70fac45fc1df69f88559b1f72f0a) C:\Windows\system32\DRIVERS\rimmpx64.sys
17:50:22.0285 5288 rimmptsk - ok
17:50:22.0306 5288 rimsptsk (bb9edc55b0b8cb4fcd713428820e0776) C:\Windows\system32\DRIVERS\rimspx64.sys
17:50:22.0307 5288 rimsptsk - ok
17:50:22.0428 5288 RimUsb (5790bca445cc40df8b38c2c48608aac2) C:\Windows\system32\Drivers\RimUsb_AMD64.sys
17:50:22.0429 5288 RimUsb - ok
17:50:22.0481 5288 RimVSerPort (0de22421179d5a8440b68517ddf2b051) C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys
17:50:22.0482 5288 RimVSerPort - ok
17:50:22.0506 5288 rismxdp (481c3fdeacaae04b74c58288dbc91df9) C:\Windows\system32\DRIVERS\rixdpx64.sys
17:50:22.0507 5288 rismxdp - ok
17:50:22.0534 5288 ROOTMODEM (6a0cf73b019cbc9255e23c9192ec3702) C:\Windows\system32\Drivers\RootMdm.sys
17:50:22.0535 5288 ROOTMODEM - ok
17:50:22.0565 5288 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys
17:50:22.0567 5288 rspndr - ok
17:50:22.0609 5288 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys
17:50:22.0612 5288 sbp2port - ok
17:50:22.0663 5288 sdbus (be100bc2be2513314c717bb2c4cfff10) C:\Windows\system32\DRIVERS\sdbus.sys
17:50:22.0665 5288 sdbus - ok
17:50:22.0695 5288 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
17:50:22.0696 5288 secdrv - ok
17:50:22.0887 5288 Serenum (f71bfe7ac6c52273b7c82cbf1bb2a222) C:\Windows\system32\drivers\serenum.sys
17:50:22.0889 5288 Serenum - ok
17:50:22.0929 5288 Serial (e62fac91ee288db29a9696a9d279929c) C:\Windows\system32\drivers\serial.sys
17:50:22.0931 5288 Serial - ok
17:50:22.0974 5288 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys
17:50:22.0975 5288 sermouse - ok
17:50:23.0043 5288 sffdisk (3a19c899bcf0ea24cfec2038e6a489db) C:\Windows\system32\DRIVERS\sffdisk.sys
17:50:23.0044 5288 sffdisk - ok
17:50:23.0083 5288 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys
17:50:23.0085 5288 sffp_mmc - ok
17:50:23.0186 5288 sffp_sd (fdca63a2eee528585eb66ceac183ec22) C:\Windows\system32\DRIVERS\sffp_sd.sys
17:50:23.0188 5288 sffp_sd - ok
17:50:23.0228 5288 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys
17:50:23.0230 5288 sfloppy - ok
17:50:23.0272 5288 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys
17:50:23.0274 5288 SiSRaid2 - ok
17:50:23.0317 5288 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys
17:50:23.0319 5288 SiSRaid4 - ok
17:50:23.0363 5288 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys
17:50:23.0365 5288 Smb - ok
17:50:23.0418 5288 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys
17:50:23.0418 5288 spldr - ok
17:50:23.0470 5288 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys
17:50:23.0478 5288 srv - ok
17:50:23.0572 5288 srv2 (a1ad14a6d7a37891fffeca35ebbb0730) C:\Windows\system32\DRIVERS\srv2.sys
17:50:23.0575 5288 srv2 - ok
17:50:23.0602 5288 srvnet (4bed62f4fa4d8300973f1151f4c4d8a7) C:\Windows\system32\DRIVERS\srvnet.sys
17:50:23.0604 5288 srvnet - ok
17:50:23.0672 5288 STHDA (3281204b2e6049100d0ff04270c2aea5) C:\Windows\system32\DRIVERS\stwrt64.sys
17:50:23.0681 5288 STHDA - ok
17:50:23.0725 5288 StillCam (14b4db4381e4a55f570d8bb699b791d6) C:\Windows\system32\DRIVERS\serscan.sys
17:50:23.0726 5288 StillCam - ok
17:50:23.0857 5288 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys
17:50:23.0857 5288 swenum - ok
17:50:23.0925 5288 swivsp (deed5e8a6ed680b8824de0e349f511ed) C:\Windows\system32\DRIVERS\swivspnt.sys
17:50:23.0926 5288 swivsp - ok
17:50:23.0942 5288 SWUMX20 - ok
17:50:23.0975 5288 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys
17:50:23.0976 5288 Symc8xx - ok
17:50:23.0995 5288 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys
17:50:23.0997 5288 Sym_hi - ok
17:50:24.0020 5288 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys
17:50:24.0021 5288 Sym_u3 - ok
17:50:24.0103 5288 Tcpip (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\drivers\tcpip.sys
17:50:24.0116 5288 Tcpip - ok
17:50:24.0209 5288 Tcpip6 (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\DRIVERS\tcpip.sys
17:50:24.0220 5288 Tcpip6 - ok
17:50:24.0255 5288 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys
17:50:24.0257 5288 tcpipreg - ok
17:50:24.0306 5288 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys
17:50:24.0308 5288 TDPIPE - ok
17:50:24.0347 5288 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys
17:50:24.0349 5288 TDTCP - ok
17:50:24.0383 5288 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys
17:50:24.0399 5288 tdx - ok
17:50:24.0437 5288 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys
17:50:24.0438 5288 TermDD - ok
17:50:24.0558 5288 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys
17:50:24.0560 5288 tssecsrv - ok
17:50:24.0601 5288 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys
17:50:24.0602 5288 tunmp - ok
17:50:24.0632 5288 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys
17:50:24.0633 5288 tunnel - ok
17:50:24.0661 5288 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys
17:50:24.0664 5288 uagp35 - ok
17:50:24.0709 5288 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys
17:50:24.0716 5288 udfs - ok
17:50:24.0837 5288 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys
17:50:24.0839 5288 uliagpkx - ok
17:50:24.0876 5288 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys
17:50:24.0882 5288 uliahci - ok
17:50:24.0919 5288 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys
17:50:24.0923 5288 UlSata - ok
17:50:24.0953 5288 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys
17:50:24.0958 5288 ulsata2 - ok
17:50:24.0985 5288 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys
17:50:24.0986 5288 umbus - ok
17:50:25.0031 5288 USBAAPL64 (afbf3de5b9e662cd7124740f7199f2aa) C:\Windows\system32\Drivers\usbaapl64.sys
17:50:25.0033 5288 USBAAPL64 - ok
17:50:25.0069 5288 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys
17:50:25.0070 5288 usbccgp - ok
17:50:25.0174 5288 usbcir (9247f7e0b65852c1f6631480984d6ed2) C:\Windows\system32\drivers\usbcir.sys
17:50:25.0177 5288 usbcir - ok
17:50:25.0242 5288 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys
17:50:25.0243 5288 usbehci - ok
17:50:25.0287 5288 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys
17:50:25.0292 5288 usbhub - ok
17:50:25.0331 5288 usbohci (eba14ef0c07cec233f1529c698d0d154) C:\Windows\system32\drivers\usbohci.sys
17:50:25.0333 5288 usbohci - ok
17:50:25.0382 5288 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys
17:50:25.0383 5288 usbprint - ok
17:50:25.0448 5288 usbscan (ea0bf666868964fbe8cb10e50c97b9f1) C:\Windows\system32\DRIVERS\usbscan.sys
17:50:25.0450 5288 usbscan - ok
17:50:25.0535 5288 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS
17:50:25.0536 5288 USBSTOR - ok
17:50:25.0557 5288 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys
17:50:25.0558 5288 usbuhci - ok
17:50:25.0612 5288 usb_rndisx (1e36bb1a3c5aaf2aa9fa9a126df8c16c) C:\Windows\system32\DRIVERS\usb8023x.sys
17:50:25.0613 5288 usb_rndisx - ok
17:50:25.0667 5288 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys
17:50:25.0669 5288 vga - ok
17:50:25.0697 5288 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys
17:50:25.0699 5288 VgaSave - ok
17:50:25.0737 5288 viaide (8294b6c3fdb6c33f24e150de647ecdaa) C:\Windows\system32\drivers\viaide.sys
17:50:25.0738 5288 viaide - ok
17:50:25.0780 5288 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys
17:50:25.0782 5288 volmgr - ok
17:50:25.0828 5288 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys
17:50:25.0836 5288 volmgrx - ok
17:50:25.0961 5288 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys
17:50:25.0967 5288 volsnap - ok
17:50:26.0009 5288 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys
17:50:26.0012 5288 vsmraid - ok
17:50:26.0060 5288 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys
17:50:26.0061 5288 WacomPen - ok
17:50:26.0121 5288 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
17:50:26.0124 5288 Wanarp - ok
17:50:26.0130 5288 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
17:50:26.0131 5288 Wanarpv6 - ok
17:50:26.0204 5288 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys
17:50:26.0205 5288 Wd - ok
17:50:26.0265 5288 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
17:50:26.0279 5288 Wdf01000 - ok
17:50:26.0400 5288 winusb (7f2f9e48566b2087f2aaad258cb2a8d4) C:\Windows\system32\DRIVERS\winusb.sys
17:50:26.0401 5288 winusb - ok
17:50:26.0450 5288 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\DRIVERS\wmiacpi.sys
17:50:26.0451 5288 WmiAcpi - ok
17:50:26.0526 5288 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys
17:50:26.0528 5288 ws2ifsl - ok
17:50:26.0601 5288 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
17:50:26.0604 5288 WudfPf - ok
17:50:26.0675 5288 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
17:50:26.0677 5288 WUDFRd - ok
17:50:26.0748 5288 MBR (0x1B8) (5e5d7299afde9ba878d3064c910c4f76) \Device\Harddisk0\DR0
17:50:26.0749 5288 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.a ) - infected
17:50:26.0749 5288 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Pihar.a (0)
17:50:26.0764 5288 Boot (0x1200) (3022ed99800e16314a31f9c9f6d898e6) \Device\Harddisk0\DR0\Partition0
17:50:26.0765 5288 \Device\Harddisk0\DR0\Partition0 - ok
17:50:26.0784 5288 Boot (0x1200) (f880b7fde141c38fdf3d76d02dbe7b9a) \Device\Harddisk0\DR0\Partition1
17:50:26.0785 5288 \Device\Harddisk0\DR0\Partition1 - ok
17:50:26.0786 5288 ============================================================
17:50:26.0786 5288 Scan finished
17:50:26.0786 5288 ============================================================
17:50:26.0802 0952 Detected object count: 1
17:50:26.0802 0952 Actual detected object count: 1
17:51:24.0964 0952 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.a ) - will be cured on reboot
17:51:24.0965 0952 \Device\Harddisk0\DR0 - ok
17:51:24.0965 0952 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.a ) - User select action: Cure
17:51:48.0587 5708 Deinitialize success
 
Hi,

Does safe mode with networking work?

Please see if error message shows any .sys file mentioned when you start in normal mode.
 
The error message does not show any .sys file. It contains only the stop code and four additional numbers I posted and then a bunch of other generic language about the stop error screen.

I can start my computer in safe mode with networking, but I cannot access the internet even in that mode. In case it's relevant, we do not have internet in our house. I access tge internet through a mobile USB modem, like a thumb drive. I'm not sure if this is somehow interfering with my ability to access the internet or if it is something else.
 
Hi,

Do you have your Vista installation media available?
 
Hi,

Download Farbar Recovery Scan Tool and save it to a flash drive.

Plug the flashdrive into the infected PC.

Restart your computer and tap F8 to bring up the Advanced Menu, then click Repair your computer

Follow the prompt to enter keyboard input method, and then the prompt to enter a password. If the machine does not have a password, simply click Enter.

In the next menu, use the arrow keys on the keyboard to highlight Command Prompt and press Enter.

  • In the command window type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst64.exe and press Enter.
Note: Replace letter e with the drive letter of your flash drive.

  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Uncheck the Whitlelist boxes next to Registry, Services, Drivers, and known DLL's
  • Place a check next to List Drivers MD5
  • Press Scan button.
  • It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.
 
When I plug in the flashdrive and restart the computer, it does not give me a prompt to enter keyboard input method, nor does it give me a screen to enter a password. It gives me a bluish background with a little box in the middle that looks like a computer screen and says "other user" underneath. There's also a little box in the bottom lefthand corner that says ease of use if you hover over it. If you click on other user it prompts a username and password. My user name and password do not work. I get a message that says "the specified domain either does not exist or could not be contacted." There aren't any other users.

Thanks for you continued help!
 
Hi,

Were you able to access advanced boot menu by pressing F8 before Windows loading screen?
 
Yes, sorry I left out that part. I got the advanced boot menu, selected 'Repair your computer,' and then got the blue screen with the little computer icon that said 'other user.'
 
Hi,

Let's see if launching "repair your computer" functionality from Vista DVD works better. Insert DVD in and reboot. Press some key when you see a message "Press any key to boot from CD or DVD..". Select language, time & currency, keyboard and then use "repair your computer" option in the next screen.
 
Hi,
I tired that, but it doesn't give me a message that says message "Press any key to boot from CD or DVD..". Select language, time & currency, keyboard and then use "repair your computer" option in the next screen. It just starts up normally, gives me the BSoD, crashes, restarts asks me if I want to start in safe mode.

I can hear the cd drive turning, but nothing comes up asking if I want to boot from the CD.
 
Hi,

Ensure that cd/dvd drive is set as 1st in boot order in BIOS.
 
You must log in or register to reply here.
Back
Top