[Resolved] Start up windows explorer error

Hey guys… I have a start up error that has been going on for the past couple of days. Everytime the computer boots up it starts up and brings up that Windows explorer has encountered a problem and needs to close. We are sorry for the inconvenience. All I have to do is start tsk manager and start explorer.exe once it crashes. then I am fine. It is very annoying though so it would be nice to fix it. The data report says. AppName: explorer.exe AppVer: 6.0.2900.5512 ModName: ws2_32.dll ModVer: 5.1.2600.5512 Offset: 00006a55 One more thing… Once I click don't send on the report the screen goes away and in the upper left hand corner this little box comes up and says " Setting up personal settings for C:\Sud\SSOW\sep.exe" Then explorer will reappear and everything will be back to normal. I don't know if that has any significance. I almost wonder if this is a Virus duplicating itself in the background causing this error Thanks I have also been getting this error.. AppName: explorer.exe AppVer: 6.0.2900.5512 ModName: unknown ModVer: 0.0.0.0 Offset: 71ab6a55 Another thing that this has been causing is my wireless dropping out. About once every hour I will have to repair my wireless adapter because the internet just bogs down. It will say its connected, but nothing will happen. I am assumming this is all related to the first thing. DDS (Ver_09-06-26.01) - NTFSx86 Run by [removed] at 1:30:50.67 on Tue 12/08/2009 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1120 [GMT -6:00] AV: Webroot Spy Sweeper *On-access scanning disabled* (Updated) {77E10C7F-2CCA-4187-9394-BDBC267AD597} AV: ESET Smart Security 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} AV: Symantec Endpoint Protection *On-access scanning disabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C} FW: ESET Personal firewall *disabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0} ============== Running Processes =============== C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe svchost.exe svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe C:\WINDOWS\system32\spoolsv.exe svchost.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe svchost.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Cisco\Cisco NAC Agent\NACAgent.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe C:\Program Files\Cisco\Cisco NAC Agent\NACAgentUI.exe C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe C:\Program Files\Webroot\Washer\WasherSvc.exe C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe C:\WINDOWS\stsystra.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Canon\MyPrinter\BJMyPrt.exe C:\Program Files\ESET\ESET Smart Security\egui.exe C:\Program Files\Webroot\Washer\wwDisp.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\explorer.exe C:\Program Files\ESET\ESET Smart Security\ekrn.exe C:\Program Files\Mozilla Firefox 3.6 Beta 4\firefox.exe C:\Program Files\iPod\bin\iPodService.exe C:\Documents and Settings\Seth\My Documents\Downloads\dds.scr ============== Pseudo HJT Report =============== uSearch Bar = hxxp://www.gateway.com/g/sidepanel.html?Ch=Consumer&Br=GTW&Loc=ENG_US&Sys=PTB&M=NX860XL uStart Page = about:blank uInternet Connection Wizard,ShellNext = hxxp://www.gateway.com/g/startpage.html?Ch=Consumer&Br=GTW&Loc=ENG_US&Sys=PTB&M=NX860XL uInternet Settings,ProxyOverride = *.local mSearchAssistant = hxxp://www.gateway.com/g/sidepanel.html?Ch=Consumer&Br=GTW&Loc=ENG_US&Sys=PTB&M=NX860XL BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\windows\system32\BAE.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll uRun: [Window Washer] "c:\program files\webroot\washer\wwDisp.exe" uRun: [ctfmon.exe] "c:\windows\system32\ctfmon.exe" mRun: [Gateway Extended Warranty] "c:\program files\gateway\gwcares\GWCares.exe" mRun: [Recguard] "%WINDIR%\SMINST\RECGUARD.EXE" mRun: [NvCplDaemon] "RUNDLL32.EXE" c:\windows\system32\NvCpl.dll,NvStartup mRun: [nwiz] "nwiz.exe" /installquiet /nodetect mRun: [SigmatelSysTrayApp] "stsystra.exe" mRun: [NACAgentUI] "c:\program files\cisco\cisco nac agent\NACAgentUI.exe" mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe" mRun: [BluetoothAuthenticationAgent] "rundll32.exe" bthprops.cpl,,BluetoothAuthenticationAgent mRun: [CanonSolutionMenu] "c:\program files\canon\solutionmenu\CNSLMAIN.exe" /logon mRun: [CanonMyPrinter] "c:\program files\canon\myprinter\BJMyPrt.exe" /logon mRun: [egui] "c:\program files\eset\eset smart security\egui.exe" /hide /waitservice mRun: [SpySweeper] "c:\program files\webroot\webrootsecurity\SpySweeperUI.exe" /startintray IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: Send to &Bluetooth Device… - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL DPF: {4D2D3A17-9B46-483C-A5F4-1DC471080009} - hxxps://usd-cas.usd.edu/auth/taweb.cab DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1258447573468 DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1258447621718 DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab DPF: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll ================= FIREFOX =================== FF - ProfilePath - c:\docume~1\seth\applic~1\mozilla\firefox\profiles\hlxmcwd5.default\ FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\ —- FIREFOX POLICIES —- c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("ui.use_native_colors", true); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("ui.use_native_popup_windows", false); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("browser.enable_click_image_resizing", true); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("media.enforce_same_site_origin", false); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("media.cache_size", 51200); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("media.ogg.enabled", true); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("media.wave.enabled", true); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("media.autoplay.enabled", true); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess"); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("dom.storage.default_quota", 5120); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("network.http.prompt-temp-redirect", true); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("network.auth.force-generic-ntlm", false); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("layout.css.dpi", -1); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("layout.css.devPixelsPerPx", "-1"); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("gestures.enable_single_finger_input", true); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("svg.smil.enabled", false); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("browser.formfill.debug", false); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("browser.formfill.agedWeight", 2); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("browser.formfill.bucketSize", 1); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("browser.formfill.prefixWeight", 5); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("network.tcp.sendbuffer", 131072); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("geo.enabled", true); c:\program files\mozilla firefox 3.6 beta 4\greprefs\all.js - pref("html5.enable", false); c:\program files\mozilla firefox 3.6 beta 4\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true); c:\program files\mozilla firefox 3.6 beta 4\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com"); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35"); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35"); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties"); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties"); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org"); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com"); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("browser.urlbar.delay", 50); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~"); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("browser.allTabs.previews", false); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.cpd.history", true); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.cpd.cache", true); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror"); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json"); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20); c:\program files\mozilla firefox 3.6 beta 4\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20); ============= SERVICES / DRIVERS =============== R0 ssfs0bbc;ssfs0bbc;c:\windows\system32\drivers\ssfs0bbc.sys [2009-11-6 29808] R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2009-11-16 108792] R2 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\ccSvcHst.exe [2009-11-2 108392] R2 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\ccSvcHst.exe [2009-11-2 108392] R2 ekrn;ESET Service;c:\program files\eset\eset smart security\ekrn.exe [2009-11-16 735960] R2 NACAgent;Cisco NAC Agent;c:\program files\cisco\cisco nac agent\NACAgent.exe [2009-6-22 715400] R2 Symantec AntiVirus;Symantec Endpoint Protection;c:\program files\symantec\symantec endpoint protection\Rtvscan.exe [2009-11-2 2477304] R2 WebrootSpySweeperService;Webroot Spy Sweeper Engine;c:\program files\webroot\webrootsecurity\SpySweeper.exe [2009-11-6 4048240] R2 WRConsumerService;Webroot Client Service;c:\program files\webroot\webrootsecurity\WRConsumerService.exe [2009-12-6 1201640] R2 wwEngineSvc;Window Washer Engine;c:\program files\webroot\washer\WasherSvc.exe [2009-11-17 598856] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2009-11-30 102448] R3 NAVENG;NAVENG;c:\progra~1\common~1\symant~1\virusd~1\20091206.022\NAVENG.SYS [2009-12-6 84912] R3 NAVEX15;NAVEX15;c:\progra~1\common~1\symant~1\virusd~1\20091206.022\NAVEX15.SYS [2009-12-6 1323568] S2 .1258448845SsTR;1258448845SsTR;c:\documents and settings\all users\application data\webroot\ 2951321.exe [2009-6-1 343435] =============== Created Last 30 ================ 2009-12-07 17:41 –d-h— c:\docume~1\alluse~1\applic~1\ActiveSMART 2009-12-07 02:02 –d—– c:\program files\Mozilla Firefox 3.6 Beta 4 2009-12-07 00:53 34,890 ac—— c:\windows\system32\dllcache\wlandrv2.sys 2009-12-07 00:52 604,253 ac—— c:\windows\system32\dllcache\vmodem.sys 2009-12-07 00:51 28,160 ac—— c:\windows\system32\dllcache\umaxu40.dll 2009-12-07 00:50 42,496 ac—— c:\windows\system32\dllcache\tp4res.dll 2009-12-07 00:49 103,936 ac—— c:\windows\system32\dllcache\sx.sys 2009-12-07 00:48 114,688 ac—— c:\windows\system32\dllcache\sonypi.dll 2009-12-07 00:47 94,698 ac—— c:\windows\system32\dllcache\sk98xwin.sys 2009-12-07 00:46 11,520 ac—— c:\windows\system32\dllcache\scsiscan.sys 2009-12-07 00:45 65,664 ac—— c:\windows\system32\dllcache\s3legacy.sys 2009-12-07 00:44 130,942 ac—— c:\windows\system32\dllcache\ptserlv.sys 2009-12-07 00:43 35,328 ac—— c:\windows\system32\dllcache\pcntpci5.sys 2009-12-07 00:42 198,144 ac—— c:\windows\system32\dllcache\nv3.sys 2009-12-07 00:41 59,104 ac—— c:\windows\system32\dllcache\n9i128v2.dll 2009-12-07 00:40 51,200 ac—— c:\windows\system32\dllcache\msdv.sys 2009-12-07 00:39 727,786 ac—— c:\windows\system32\dllcache\ltck000c.sys 2009-12-07 00:38 16,384 ac—— c:\windows\system32\dllcache\ipsink.ax 2009-12-07 00:37 28,700 ac—— c:\windows\system32\dllcache\ibmexmp.sys 2009-12-07 00:36 31,232 ac—— c:\windows\system32\dllcache\hpgt42tk.dll 2009-12-07 00:35 444,416 ac—— c:\windows\system32\dllcache\fpcibase.sys 2009-12-07 00:34 144,896 ac—— c:\windows\system32\dllcache\epcfw2k.sys 2009-12-07 00:33 41,046 ac—— c:\windows\system32\dllcache\digiisdn.dll 2009-12-07 00:32 45,696 ac—— c:\windows\system32\dllcache\cirrus.sys 2009-12-07 00:31 38,912 ac—— c:\windows\system32\dllcache\avc.sys 2009-12-07 00:30 19,968 ac—— c:\windows\system32\dllcache\inetsloc.dll 2009-12-07 00:30 7,680 ac—— c:\windows\system32\dllcache\inetmgr.exe 2009-12-07 00:30 169,984 ac—— c:\windows\system32\dllcache\iisui.dll 2009-12-07 00:30 14,336 ac—— c:\windows\system32\dllcache\iisreset.exe 2009-12-07 00:30 6,144 ac—— c:\windows\system32\dllcache\ftpsapi2.dll 2009-12-07 00:30 5,632 ac—— c:\windows\system32\dllcache\iisrstap.dll 2009-12-07 00:30 94,720 ac—— c:\windows\system32\dllcache\certmap.ocx 2009-12-06 21:53 –d—– c:\program files\MSSOAP 2009-12-06 21:53 1,563,008 a——- c:\windows\WRSetup.dll 2009-12-01 16:46 56 a—h— c:\windows\system32\ezsidmv.dat 2009-12-01 16:26 –d—– c:\documents and settings\seth\Tracing 2009-12-01 16:15 –d—– c:\program files\common files\Windows Live 2009-12-01 16:10 –d—– c:\program files\UlisesSoft 2009-12-01 16:04 –d—– c:\docume~1\seth\applic~1\ESET 2009-12-01 16:03 –d—– c:\program files\ESET 2009-12-01 15:52 –dshr– C:\SUD 2009-11-24 15:08 –dsh— C:\Diskeeper 2009-11-23 18:37 –d—– c:\program files\uTorrent 2009-11-23 18:36 –d—– c:\docume~1\seth\applic~1\uTorrent 2009-11-23 17:32 –d—– c:\program files\common files\Macrovision Shared 2009-11-20 00:36 –d—– c:\docume~1\seth\applic~1\Garritan 2009-11-20 00:36 –d—– c:\program files\Plogue 2009-11-20 00:36 –d—– c:\program files\Garritan 2009-11-20 00:27 –d—– C:\PSFONTS 2009-11-20 00:27 –d—– c:\program files\Finale 2009 2009-11-20 00:16 691,696 a——- c:\windows\system32\drivers\sptd.sys 2009-11-20 00:16 –d—– c:\docume~1\seth\applic~1\DAEMON Tools Lite 2009-11-20 00:16 –d—– c:\docume~1\alluse~1\applic~1\DAEMON Tools Lite 2009-11-19 03:37 –d—– c:\docume~1\alluse~1\applic~1\CanonIJ 2009-11-19 03:35 –d-h— c:\docume~1\alluse~1\applic~1\CanonIJScan 2009-11-18 23:11 –d—– c:\docume~1\seth\applic~1\LimeWire 2009-11-18 23:09 73,728 a——- c:\windows\system32\javacpl.cpl 2009-11-18 23:09 411,368 a——- c:\windows\system32\deploytk.dll 2009-11-18 23:05 –d—– c:\program files\LimeWire 2009-11-18 02:15 107,368 a——- c:\windows\system32\GEARAspi.dll 2009-11-18 02:15 26,600 a——- c:\windows\system32\drivers\GEARAspiWDM.sys 2009-11-18 02:15 –d—– c:\program files\iPod 2009-11-18 02:15 –d—– c:\program files\iTunes 2009-11-18 02:15 –d—– c:\docume~1\alluse~1\applic~1\{755AC846-7372-4AC8-8550-C52491DAA8BD} 2009-11-18 02:14 –d—– c:\program files\Bonjour 2009-11-17 23:30 –d—– c:\program files\common files\ODBC 2009-11-17 23:27 –d—– c:\windows\SHELLNEW 2009-11-17 23:20 54,156 a—h— c:\windows\QTFont.qfn 2009-11-17 23:20 1,409 a——- c:\windows\QTFont.for 2009-11-17 23:18 –d—– c:\windows\system32\appmgmt 2009-11-17 17:24 –d-h— c:\docume~1\alluse~1\applic~1\CanonIJSolutionMenu 2009-11-17 17:24 –d-h— c:\docume~1\alluse~1\applic~1\CanonIJMyPrinter 2009-11-17 17:24 –d—– c:\docume~1\alluse~1\applic~1\CanonIJPLM 2009-11-17 17:01 15,104 ac—— c:\windows\system32\dllcache\usbscan.sys 2009-11-17 17:01 15,104 a——- c:\windows\system32\drivers\usbscan.sys 2009-11-17 16:57 –d—– c:\program files\common files\CANON 2009-11-17 16:54 230,912 a——- c:\windows\system32\CNMLM9H.DLL 2009-11-17 16:54 270,336 a——- c:\windows\system32\CNC240L.DLL 2009-11-17 16:54 188,416 a——- c:\windows\system32\CNC240O.DLL 2009-11-17 16:54 1,339,392 a——- c:\windows\system32\CNC240C.DLL 2009-11-17 16:54 98,304 a——- c:\windows\system32\CNC240I.DLL 2009-11-17 16:53 –d—– c:\program files\Canon 2009-11-17 16:02 12 a——- c:\windows\bthservsdp.dat 2009-11-17 16:01 –d—– c:\program files\MacGAMUT 6 2009-11-17 15:42 –d—– c:\program files\Windows Media Connect 2 2009-11-17 15:41 –d—– c:\windows\system32\LogFiles 2009-11-17 15:40 376,832 a——- c:\windows\system32\AegisI5Installer.exe 2009-11-17 15:40 21,361 a——- c:\windows\system32\drivers\AegisP.sys 2009-11-17 15:40 21,361 a——- c:\windows\AegisP.sys 2009-11-17 15:40 13,984 a——- c:\windows\AegisP.inf 2009-11-17 15:40 10,640 a——- c:\windows\AegisP.cat 2009-11-17 15:39 2,777,088 a——- c:\windows\system32\NETw4r32.dll 2009-11-17 15:39 2,236,544 a——- c:\windows\system32\drivers\NETw4x32.sys 2009-11-17 15:39 745,472 a——- c:\windows\system32\NETw4c32.dll 2009-11-17 15:38 –d—– c:\docume~1\seth\applic~1\Intel 2009-11-17 15:37 151,552 ac—— c:\windows\system32\dllcache\irftp.exe 2009-11-17 15:37 28,160 ac—— c:\windows\system32\dllcache\irmon.dll 2009-11-17 15:37 8,192 ac—— c:\windows\system32\dllcache\wshirda.dll 2009-11-17 15:37 151,552 a——- c:\windows\system32\irftp.exe 2009-11-17 15:37 28,160 a——- c:\windows\system32\irmon.dll 2009-11-17 15:37 8,192 a——- c:\windows\system32\wshirda.dll 2009-11-17 15:20 124,976 a——- c:\windows\system32\drivers\SYMEVENT.SYS 2009-11-17 15:20 60,808 a——- c:\windows\system32\S32EVNT1.DLL 2009-11-17 15:20 7,456 a——- c:\windows\system32\drivers\SYMEVENT.CAT 2009-11-17 15:20 806 a——- c:\windows\system32\drivers\SYMEVENT.INF 2009-11-17 15:19 1,060,864 a——- c:\windows\system32\MFC71.DLL 2009-11-17 15:19 –d—– c:\program files\Symantec 2009-11-17 15:19 –d—– c:\program files\common files\Symantec Shared 2009-11-17 15:19 –d—– c:\docume~1\alluse~1\applic~1\Symantec 2009-11-17 14:54 –dsh— c:\documents and settings\seth\IECompatCache 2009-11-17 14:54 –dsh— c:\documents and settings\seth\PrivacIE 2009-11-17 14:53 –dsh— c:\documents and settings\seth\IETldCache 2009-11-17 14:46 –d—– c:\program files\MSXML 4.0 2009-11-17 14:41 -cd-h— c:\windows\ie8 2009-11-17 10:58 2,189,184 ac—— c:\windows\system32\dllcache\ntoskrnl.exe 2009-11-17 10:58 2,560 ——– c:\windows\system32\xpsp4res.dll 2009-11-17 10:58 1,089,593 -c—— c:\windows\system32\dllcache\ntprint.cat 2009-11-17 10:41 –d—– c:\windows\system32\XPSViewer 2009-11-17 10:40 597,504 -c—— c:\windows\system32\dllcache\printfilterpipelinesvc.exe 2009-11-17 10:40 575,488 -c—— c:\windows\system32\dllcache\xpsshhdr.dll 2009-11-17 10:40 89,088 -c—— c:\windows\system32\dllcache\filterpipelineprintproc.dll 2009-11-17 10:40 575,488 ——– c:\windows\system32\xpsshhdr.dll 2009-11-17 10:40 117,760 ——– c:\windows\system32\prntvpt.dll 2009-11-17 10:40 1,676,288 -c—— c:\windows\system32\dllcache\xpssvcs.dll 2009-11-17 10:40 –d—– C:\da953dfc99a2512367f903 2009-11-17 10:40 1,676,288 ——– c:\windows\system32\xpssvcs.dll 2009-11-17 08:50 –d—– c:\windows\system32\scripting 2009-11-17 08:50 –d—– c:\windows\system32\en 2009-11-17 08:50 –d—– c:\windows\system32\bits 2009-11-17 08:50 –d—– c:\windows\l2schemas 2009-11-17 08:49 –d—– c:\windows\ServicePackFiles 2009-11-17 08:47 –d—– c:\windows\network diagnostic 2009-11-17 03:41 –d—– c:\docume~1\seth\applic~1\Webroot 2009-11-17 03:41 –d—– c:\program files\Webroot 2009-11-17 03:41 –d—– c:\program files\common files\Webroot Shared 2009-11-17 03:41 –d—– c:\docume~1\alluse~1\applic~1\Webroot 2009-11-17 03:41 194,888 a——- c:\windows\Unwash6.exe 2009-11-17 03:37 –d—– c:\documents and settings\seth\WINDOWS 2009-11-17 03:37 –d—– c:\documents and settings\seth\Bluetooth Software 2009-11-17 03:37 –d—– c:\documents and settings\Seth 2009-11-17 03:37 –d—– c:\docume~1\seth\applic~1\You've Got Pictures Screensaver 2009-11-17 03:18 –d—– c:\program files\common files\Diskeeper Corporation 2009-11-17 03:18 –d—– c:\program files\Diskeeper Corporation 2009-11-17 03:18 –d—– c:\docume~1\alluse~1\applic~1\Diskeeper Corporation 2009-11-17 03:16 –d—– c:\windows\pss 2009-11-17 03:10 2 a——- c:\windows\msoffice.ini 2009-11-17 03:02 8,192 a——- c:\windows\REGLOCS.OLD 2009-11-17 03:01 0 a——- c:\windows\system32\Gateway_NX860XL_Rev.1_0037308033.MRK 2009-11-17 03:00 333 a——- c:\windows\system32\$ncsp$.inf 2009-11-17 02:59 221,184 a——- c:\windows\system32\wmpns.dll 2009-11-17 02:59 2,752 a——- c:\windows\system32\Status.MPF 2009-11-17 02:57 –d—– c:\program files\Phoenix Technologies Ltd 2009-11-17 02:56 376 a——- c:\windows\ODBC.INI 2009-11-17 02:56 397,312 a——- c:\windows\system32\MSRDO20.DLL 2009-11-17 02:56 225,280 a——- c:\windows\system32\VSFLEX3.OCX 2009-11-17 02:56 151,552 a——- c:\windows\system32\RDOCURS.DLL 2009-11-17 02:56 94,208 a——- c:\windows\system32\MSSTKPRP.DLL 2009-11-17 02:56 37,376 a——- c:\windows\system32\VEN2232.OLB 2009-11-17 02:56 24,848 a——- c:\windows\system32\VBAEND32.OLB 2009-11-17 02:56 24,848 a——- c:\windows\system32\VBAEN32.OLB 2009-11-17 02:56 53,248 a——- c:\windows\system32\MFC42ENU.DLL 2009-11-17 02:56 28,040 a——- c:\windows\system32\mdimon.dll 2009-11-17 02:54 –d—– c:\docume~1\alluse~1\applic~1\McAfee.com 2009-11-17 02:54 –d—– c:\program files\McAfee.com 2009-11-17 02:53 1,709,696 a——- c:\windows\system32\drivers\NETw3x32.sys 2009-11-17 02:53 –d—– c:\docume~1\alluse~1\applic~1\McAfee.com Personal Firewall 2009-11-17 02:53 743,936 a——- c:\windows\system32\GTW1.exe 2009-11-17 02:52 1,239,209 a——- c:\windows\system32\gtw_logo.scr 2009-11-17 02:52 51,656 a——- c:\windows\system32\OEMLOGO.bmp 2009-11-17 02:52 23,552 a——- c:\windows\system32\jesterss.dll 2009-11-17 02:52 1,150 a——- c:\windows\system32\gtw.ico 2009-11-17 02:52 –d—– c:\program files\gtw_logo 2009-11-17 02:50 –d—– c:\windows\system32\PreInstall 2009-11-17 02:50 14,592 ac—— c:\windows\system32\dllcache\kbdhid.sys 2009-11-17 02:50 14,592 a——- c:\windows\system32\drivers\kbdhid.sys 2009-11-17 02:48 –d—– c:\program files\WIDCOMM 2009-11-17 02:47 –d—– c:\program files\Motorola 2009-11-17 02:47 6,272 ac—— c:\windows\system32\dllcache\splitter.sys 2009-11-17 02:47 6,272 a——- c:\windows\system32\drivers\splitter.sys 2009-11-17 02:47 83,072 ac—— c:\windows\system32\dllcache\wdmaud.sys 2009-11-17 02:47 83,072 a——- c:\windows\system32\drivers\wdmaud.sys 2009-11-17 02:47 52,864 ac—— c:\windows\system32\dllcache\dmusic.sys 2009-11-17 02:47 52,864 a——- c:\windows\system32\drivers\dmusic.sys 2009-11-17 02:46 –d—– c:\program files\SigmaTel 2009-11-17 02:46 –d—– c:\docume~1\alluse~1\applic~1\Pure Networks 2009-11-17 02:46 –d—– c:\program files\Pure Networks 2009-11-17 02:46 –d—– c:\program files\Learn2.com 2009-11-17 02:46 –d—– c:\program files\Viewpoint 2009-11-17 02:46 –d—– c:\docume~1\alluse~1\applic~1\Viewpoint 2009-11-17 02:46 –d—– c:\program files\common files\Nullsoft 2009-11-17 02:45 –d—– C:\My Music 2009-11-17 02:45 –dsh— c:\documents and settings\seth\UserData 2009-11-17 02:45 –d—– c:\program files\common files\Real 2009-11-17 02:45 1,044,480 a——- c:\windows\system32\roboex32.dll 2009-11-17 02:45 54,784 a——- c:\windows\system32\Inetwh32.dll 2009-11-17 02:45 29,184 a——- c:\windows\system32\popup.ocx 2009-11-17 02:45 896 a—h— C:\IPH.PH 2009-11-17 02:45 –d—– c:\program files\common files\AOL 2009-11-17 02:45 168,448 a——- c:\windows\system32\drivers\tifm21.sys 2009-11-17 02:45 –d—– c:\docume~1\alluse~1\applic~1\Cisco 2009-11-17 02:45 –d—– c:\program files\common files\Cisco 2009-11-17 02:45 –d—– c:\program files\Cisco 2009-11-17 02:44 –d—– c:\program files\Texas Instruments Inc 2009-11-17 02:44 51,048 a——- c:\windows\system32\nvapps.xml 2009-11-17 02:44 16,960 a——- c:\windows\system32\nvdisp.nvu 2009-11-17 02:44 –d—– c:\windows\nview 2009-11-17 02:44 208,896 a——- c:\windows\system32\nvudisp.exe 2009-11-17 02:44 208,896 a——- c:\windows\system32\NVUNINST.EXE 2009-11-17 02:44 –d—– c:\docume~1\alluse~1\applic~1\Napster 2009-11-17 02:42 –d—– c:\program files\Synaptics 2009-11-17 02:41 518,520 a——- c:\windows\vidres.exe 2009-11-17 02:37 –d—– c:\windows\Downloaded Installations 2009-11-17 02:37 –d—– c:\program files\Gateway 2009-11-17 02:32 0 a——- C:\REQUEST_OEMRESET_ENDUSER 2009-11-17 02:32 2 —shr– C:\USER 2009-11-17 02:32 25,856 ac—— c:\windows\system32\dllcache\usbprint.sys 2009-11-17 02:32 25,856 a——- c:\windows\system32\drivers\usbprint.sys 2009-11-17 02:32 21,504 ac—— c:\windows\system32\dllcache\hidserv.dll 2009-11-17 02:32 21,504 a——- c:\windows\system32\hidserv.dll 2009-11-17 02:32 12,160 ac—— c:\windows\system32\dllcache\mouhid.sys 2009-11-17 02:32 12,160 a——- c:\windows\system32\drivers\mouhid.sys 2009-11-17 02:31 10,368 ac—— c:\windows\system32\dllcache\hidusb.sys 2009-11-17 02:31 10,368 a——- c:\windows\system32\drivers\hidusb.sys 2009-11-17 02:31 32,128 ac—— c:\windows\system32\dllcache\usbccgp.sys 2009-11-17 02:31 32,128 a——- c:\windows\system32\drivers\usbccgp.sys 2009-11-17 02:29 60 a——- c:\windows\system32\SYSDRV.DAT 2009-11-17 02:29 –d—– c:\windows\creator 2009-11-17 02:29 874,240 a——- c:\windows\system32\drivers\iaStor.sys 2009-11-17 02:29 179,200 a——- c:\windows\system32\drivers\e1e5132.sys 2009-11-17 02:29 163,840 a——- c:\windows\system32\e1000msg.dll 2009-11-17 02:29 126,976 a——- c:\windows\system32\Prounstl.exe 2009-11-17 02:29 21,504 a——- c:\windows\system32\NicIn32.dll 2009-11-17 02:29 20,480 a——- c:\windows\system32\NicCo32.dll 2009-11-17 02:29 17,408 a——- c:\windows\system32\EtCo32.dll 2009-11-17 02:29 2,790 a——- c:\windows\system32\e1e5132.din 2009-11-17 02:29 –d—– c:\windows\SMINST 2009-11-17 02:29 –d–r– C:\Program Files 2009-11-17 02:28 –d–r– c:\documents and settings\all users\Documents 2009-11-17 02:28 –d–r– c:\windows\Offline Web Pages 2009-11-17 02:26 -cdshr– c:\windows\system32\dllcache 2009-11-16 09:06 55,768 a——- c:\windows\system32\drivers\epfwtdi.sys 2009-11-16 09:06 135,048 a——- c:\windows\system32\drivers\epfw.sys 2009-11-16 09:03 108,792 a——- c:\windows\system32\drivers\ehdrv.sys 2009-11-16 08:56 116,520 a——- c:\windows\system32\drivers\eamon.sys ==================== Find3M ==================== 2009-11-17 08:52 86,327 a——- c:\windows\pchealth\helpctr\offlinecache\index.dat 2009-11-06 12:00 176,752 a——- c:\windows\system32\drivers\ssidrv.sys 2009-11-06 12:00 23,152 a——- c:\windows\system32\drivers\sshrmd.sys 2009-11-06 12:00 29,808 a——- c:\windows\system32\drivers\ssfs0bbc.sys 2009-11-02 16:44 107,848 a——- c:\windows\system32\SymVPN.dll 2009-11-02 16:44 89,600 a——- c:\windows\system32\atl71.dll 2009-11-02 16:44 87,368 a——- c:\windows\system32\FwsVpn.dll 2009-11-02 16:44 320,560 a——- c:\windows\system32\drivers\srtspl.sys 2009-11-02 16:44 281,648 a——- c:\windows\system32\drivers\srtsp.sys 2009-11-02 16:44 43,696 a——- c:\windows\system32\drivers\srtspx.sys 2009-11-02 16:44 7,442 a——- c:\windows\system32\drivers\srtspx.cat 2009-11-02 16:44 7,442 a——- c:\windows\system32\drivers\srtspl.cat 2009-11-02 16:44 7,425 a——- c:\windows\system32\drivers\srtsp.cat 2009-11-02 16:44 1,431 a——- c:\windows\system32\drivers\srtspl.inf 2009-11-02 16:44 1,422 a——- c:\windows\system32\drivers\srtspx.inf 2009-11-02 16:44 1,416 a——- c:\windows\system32\drivers\srtsp.inf 2009-09-24 23:37 81,920 ——– c:\windows\system32\ieencode.dll 2009-09-11 08:18 136,192 a——- c:\windows\system32\msv1_0.dll ============= FINISH: 1:31:06.00 =============== ROOTREPEAL © AD, 2007-2009 ================================================== Scan Start Time: 2009/12/08 01:36 Program Version: Version 1.3.5.0 Windows Version: Windows XP SP3 ================================================== Drivers ——————- Name: 1394BUS.SYS Image Path: C:\WINDOWS\system32\DRIVERS\1394BUS.SYS Address: 0xF7607000 Size: 57344 File Visible: - Signed: - Status: - Name: ABP480N5.SYS Image Path: ABP480N5.SYS Address: 0xF7757000 Size: 23552 File Visible: - Signed: - Status: - Name: ACPI.sys Image Path: ACPI.sys Address: 0xF749D000 Size: 187776 File Visible: - Signed: - Status: - Name: ACPI_HAL Image Path: \Driver\ACPI_HAL Address: 0x804D7000 Size: 2260992 File Visible: - Signed: - Status: - Name: ACPIEC.sys Image Path: ACPIEC.sys Address: 0xF78A3000 Size: 11648 File Visible: - Signed: - Status: - Name: adpu160m.sys Image Path: adpu160m.sys Address: 0xBAF47000 Size: 101888 File Visible: - Signed: - Status: - Name: AegisP.sys Image Path: C:\WINDOWS\system32\DRIVERS\AegisP.sys Address: 0xF7787000 Size: 19296 File Visible: - Signed: - Status: - Name: afd.sys Image Path: C:\WINDOWS\System32\drivers\afd.sys Address: 0xA6385000 Size: 138496 File Visible: - Signed: - Status: - Name: agp440.sys Image Path: agp440.sys Address: 0xF743C000 Size: 42368 File Visible: - Signed: - Status: - Name: agpCPQ.sys Image Path: agpCPQ.sys Address: 0xF742C000 Size: 44928 File Visible: - Signed: - Status: - Name: aha154x.sys Image Path: aha154x.sys Address: 0xF78AB000 Size: 12800 File Visible: - Signed: - Status: - Name: aic78u2.sys Image Path: aic78u2.sys Address: 0xF7697000 Size: 55168 File Visible: - Signed: - Status: - Name: aic78xx.sys Image Path: aic78xx.sys Address: 0xF7667000 Size: 56960 File Visible: - Signed: - Status: - Name: aliide.sys Image Path: aliide.sys Address: 0xF798B000 Size: 5248 File Visible: - Signed: - Status: - Name: alim1541.sys Image Path: alim1541.sys Address: 0xF745C000 Size: 42752 File Visible: - Signed: - Status: - Name: amdagp.sys Image Path: amdagp.sys Address: 0xF744C000 Size: 43008 File Visible: - Signed: - Status: - Name: amsint.sys Image Path: amsint.sys Address: 0xF78B7000 Size: 12032 File Visible: - Signed: - Status: - Name: asc.sys Image Path: asc.sys Address: 0xF7727000 Size: 26496 File Visible: - Signed: - Status: - Name: asc3350p.sys Image Path: asc3350p.sys Address: 0xF775F000 Size: 22400 File Visible: - Signed: - Status: - Name: asc3550.sys Image Path: asc3550.sys Address: 0xF78BB000 Size: 14848 File Visible: - Signed: - Status: - Name: atapi.sys Image Path: atapi.sys Address: 0xF7A18000 Size: 98304 File Visible: - Signed: - Status: - Name: atapi.sys Image Path: atapi.sys Address: 0x00000000 Size: 0 File Visible: - Signed: - Status: - Name: ATMFD.DLL Image Path: C:\WINDOWS\System32\ATMFD.DLL Address: 0xBFFA0000 Size: 286720 File Visible: - Signed: - Status: - Name: audstub.sys Image Path: C:\WINDOWS\system32\DRIVERS\audstub.sys Address: 0xF7A8F000 Size: 3072 File Visible: - Signed: - Status: - Name: BATTC.SYS Image Path: C:\WINDOWS\system32\DRIVERS\BATTC.SYS Address: 0xF789F000 Size: 16384 File Visible: - Signed: - Status: - Name: Beep.SYS Image Path: C:\WINDOWS\System32\Drivers\Beep.SYS Address: 0xF79A1000 Size: 4224 File Visible: - Signed: - Status: - Name: BOOTVID.dll Image Path: C:\WINDOWS\system32\BOOTVID.dll Address: 0xF7897000 Size: 12288 File Visible: - Signed: - Status: - Name: btaudio.sys Image Path: C:\WINDOWS\system32\drivers\btaudio.sys Address: 0xB542C000 Size: 318784 File Visible: - Signed: - Status: - Name: BthEnum.sys Image Path: C:\WINDOWS\system32\DRIVERS\BthEnum.sys Address: 0xB96A9000 Size: 17024 File Visible: - Signed: - Status: - Name: bthport.sys Image Path: C:\WINDOWS\System32\Drivers\bthport.sys Address: 0xAA6E4000 Size: 274432 File Visible: - Signed: - Status: - Name: BTHUSB.sys Image Path: C:\WINDOWS\System32\Drivers\BTHUSB.sys Address: 0xAD221000 Size: 18944 File Visible: - Signed: - Status: - Name: btkrnl.sys Image Path: C:\WINDOWS\system32\DRIVERS\btkrnl.sys Address: 0xB6129000 Size: 834432 File Visible: - Signed: - Status: - Name: btserial.sys Image Path: C:\WINDOWS\system32\drivers\btserial.sys Address: 0xB07C5000 Size: 22432 File Visible: - Signed: - Status: - Name: cbidf2k.sys Image Path: cbidf2k.sys Address: 0xF78C3000 Size: 13952 File Visible: - Signed: - Status: - Name: cd20xrnt.sys Image Path: cd20xrnt.sys Address: 0xF7997000 Size: 7680 File Visible: - Signed: - Status: - Name: Cdfs.SYS Image Path: C:\WINDOWS\System32\Drivers\Cdfs.SYS Address: 0xB9711000 Size: 63744 File Visible: - Signed: - Status: - Name: cdrom.sys Image Path: C:\WINDOWS\system32\DRIVERS\cdrom.sys Address: 0xB96E1000 Size: 62976 File Visible: - Signed: - Status: - Name: CLASSPNP.SYS Image Path: C:\WINDOWS\system32\DRIVERS\CLASSPNP.SYS Address: 0xF76F7000 Size: 53248 File Visible: - Signed: - Status: - Name: CmBatt.sys Image Path: C:\WINDOWS\system32\DRIVERS\CmBatt.sys Address: 0xBAC34000 Size: 13952 File Visible: - Signed: - Status: - Name: cmdide.sys Image Path: cmdide.sys Address: 0xF7993000 Size: 6656 File Visible: - Signed: - Status: - Name: compbatt.sys Image Path: compbatt.sys Address: 0xF789B000 Size: 10240 File Visible: - Signed: - Status: - Name: cpqarray.sys Image Path: cpqarray.sys Address: 0xF78A7000 Size: 14976 File Visible: - Signed: - Status: - Name: dac2w2k.sys Image Path: dac2w2k.sys Address: 0xBAF1B000 Size: 179584 File Visible: - Signed: - Status: - Name: dac960nt.sys Image Path: dac960nt.sys Address: 0xF78B3000 Size: 14720 File Visible: - Signed: - Status: - Name: disk.sys Image Path: disk.sys Address: 0xF76E7000 Size: 36352 File Visible: - Signed: - Status: - Name: dmio.sys Image Path: dmio.sys Address: 0xF7BB9000 Size: 153344 File Visible: - Signed: - Status: - Name: dmload.sys Image Path: dmload.sys Address: 0xF7995000 Size: 5888 File Visible: - Signed: - Status: - Name: dpti2o.sys Image Path: dpti2o.sys Address: 0xF7767000 Size: 20192 File Visible: - Signed: - Status: - Name: drmk.sys Image Path: C:\WINDOWS\system32\drivers\drmk.sys Address: 0xF7887000 Size: 61440 File Visible: - Signed: - Status: - Name: dump_iaStor.sys Image Path: C:\WINDOWS\System32\Drivers\dump_iaStor.sys Address: 0xA610B000 Size: 876544 File Visible: No Signed: - Status: - Name: Dxapi.sys Image Path: C:\WINDOWS\System32\drivers\Dxapi.sys Address: 0xAE8D3000 Size: 12288 File Visible: - Signed: - Status: - Name: dxg.sys Image Path: C:\WINDOWS\System32\drivers\dxg.sys Address: 0xBF9C4000 Size: 73728 File Visible: - Signed: - Status: - Name: dxgthk.sys Image Path: C:\WINDOWS\System32\drivers\dxgthk.sys Address: 0xF7AB9000 Size: 4096 File Visible: - Signed: - Status: - Name: eamon.sys Image Path: C:\WINDOWS\system32\DRIVERS\eamon.sys Address: 0xA515E000 Size: 835584 File Visible: - Signed: - Status: - Name: eeCtrl.sys Image Path: C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys Address: 0xA6222000 Size: 385024 File Visible: - Signed: - Status: - Name: ehdrv.sys Image Path: C:\WINDOWS\system32\DRIVERS\ehdrv.sys Address: 0xA6494000 Size: 118784 File Visible: - Signed: - Status: - Name: epfw.sys Image Path: C:\WINDOWS\system32\DRIVERS\epfw.sys Address: 0xA513B000 Size: 143360 File Visible: - Signed: - Status: - Name: Epfwndis.sys Image Path: C:\WINDOWS\system32\DRIVERS\Epfwndis.sys Address: 0xF7877000 Size: 45056 File Visible: - Signed: - Status: - Name: epfwtdi.sys Image Path: C:\WINDOWS\system32\DRIVERS\epfwtdi.sys Address: 0xA63F5000 Size: 77824 File Visible: - Signed: - Status: - Name: EraserUtilRebootDrv.sys Image Path: C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys Address: 0xA6205000 Size: 118784 File Visible: - Signed: - Status: - Name: Fastfat.SYS Image Path: C:\WINDOWS\System32\Drivers\Fastfat.SYS Address: 0xA61E1000 Size: 143744 File Visible: - Signed: - Status: - Name: Fips.SYS Image Path: C:\WINDOWS\System32\Drivers\Fips.SYS Address: 0xB9741000 Size: 44544 File Visible: - Signed: - Status: - Name: fltmgr.sys Image Path: fltmgr.sys Address: 0xBAEFB000 Size: 129792 File Visible: - Signed: - Status: - Name: Fs_Rec.SYS Image Path: C:\WINDOWS\System32\Drivers\Fs_Rec.SYS Address: 0xF799D000 Size: 7936 File Visible: - Signed: - Status: - Name: ftdisk.sys Image Path: ftdisk.sys Address: 0xF7A30000 Size: 125056 File Visible: - Signed: - Status: - Name: GEARAspiWDM.sys Image Path: C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys Address: 0xB96C1000 Size: 21120 File Visible: - Signed: - Status: - Name: hal.dll Image Path: C:\WINDOWS\system32\hal.dll Address: 0x806FF000 Size: 134400 File Visible: - Signed: - Status: - Name: HDAudBus.sys Image Path: C:\WINDOWS\system32\DRIVERS\HDAudBus.sys Address: 0xB64BB000 Size: 163840 File Visible: - Signed: - Status: - Name: HIDCLASS.SYS Image Path: C:\WINDOWS\system32\DRIVERS\HIDCLASS.SYS Address: 0xBAFA0000 Size: 36864 File Visible: - Signed: - Status: - Name: HIDPARSE.SYS Image Path: C:\WINDOWS\system32\DRIVERS\HIDPARSE.SYS Address: 0xB07B5000 Size: 28672 File Visible: - Signed: - Status: - Name: hidusb.sys Image Path: C:\WINDOWS\system32\DRIVERS\hidusb.sys Address: 0xB0B31000 Size: 10368 File Visible: - Signed: - Status: - Name: hpn.sys Image Path: hpn.sys Address: 0xF7777000 Size: 25952 File Visible: - Signed: - Status: - Name: HTTP.sys Image Path: C:\WINDOWS\System32\Drivers\HTTP.sys Address: 0xA4458000 Size: 264832 File Visible: - Signed: - Status: - Name: i2omgmt.SYS Image Path: C:\WINDOWS\System32\Drivers\i2omgmt.SYS Address: 0xB0015000 Size: 8576 File Visible: - Signed: - Status: - Name: i2omp.sys Image Path: i2omp.sys Address: 0xF7737000 Size: 18560 File Visible: - Signed: - Status: - Name: i8042prt.sys Image Path: C:\WINDOWS\system32\DRIVERS\i8042prt.sys Address: 0xB9701000 Size: 52480 File Visible: - Signed: - Status: - Name: IASTOR.SYS Image Path: IASTOR.SYS Address: 0xF7AE3000 Size: 876544 File Visible: - Signed: - Status: - Name: IASTOR.SYS Image Path: IASTOR.SYS Address: 0x00000000 Size: 0 File Visible: - Signed: - Status: - Name: imapi.sys Image Path: C:\WINDOWS\system32\DRIVERS\imapi.sys Address: 0xB96F1000 Size: 42112 File Visible: - Signed: - Status: - Name: ini910u.sys Image Path: ini910u.sys Address: 0xF78BF000 Size: 16000 File Visible: - Signed: - Status: - Name: intelide.sys Image Path: intelide.sys Address: 0xF798D000 Size: 5504 File Visible: - Signed: - Status: - Name: intelppm.sys Image Path: C:\WINDOWS\system32\DRIVERS\intelppm.sys Address: 0xBADE5000 Size: 36352 File Visible: - Signed: - Status: - Name: ipnat.sys Image Path: C:\WINDOWS\system32\DRIVERS\ipnat.sys Address: 0xA63CF000 Size: 152832 File Visible: - Signed: - Status: - Name: ipsec.sys Image Path: C:\WINDOWS\system32\DRIVERS\ipsec.sys Address: 0xA6461000 Size: 75264 File Visible: - Signed: - Status: - Name: isapnp.sys Image Path: isapnp.sys Address: 0xF7617000 Size: 37248 File Visible: - Signed: - Status: - Name: kbdclass.sys Image Path: C:\WINDOWS\system32\DRIVERS\kbdclass.sys Address: 0xF77DF000 Size: 24576 File Visible: - Signed: - Status: - Name: KDCOM.DLL Image Path: C:\WINDOWS\system32\KDCOM.DLL Address: 0xF7987000 Size: 8192 File Visible: - Signed: - Status: - Name: kmixer.sys Image Path: C:\WINDOWS\system32\drivers\kmixer.sys Address: 0x91E2D000 Size: 172416 File Visible: - Signed: - Status: - Name: ks.sys Image Path: C:\WINDOWS\system32\DRIVERS\ks.sys Address: 0xB61F5000 Size: 143360 File Visible: - Signed: - Status: - Name: KSecDD.sys Image Path: KSecDD.sys Address: 0xBAED2000 Size: 92928 File Visible: - Signed: - Status: - Name: mnmdd.SYS Image Path: C:\WINDOWS\System32\Drivers\mnmdd.SYS Address: 0xA795B000 Size: 4224 File Visible: - Signed: - Status: - Name: Modem.SYS Image Path: C:\WINDOWS\System32\Drivers\Modem.SYS Address: 0xBAD13000 Size: 30080 File Visible: - Signed: - Status: - Name: mouclass.sys Image Path: C:\WINDOWS\system32\DRIVERS\mouclass.sys Address: 0xB96C9000 Size: 23040 File Visible: - Signed: - Status: - Name: mouhid.sys Image Path: C:\WINDOWS\system32\DRIVERS\mouhid.sys Address: 0xB0930000 Size: 12160 File Visible: - Signed: - Status: - Name: MountMgr.sys Image Path: MountMgr.sys Address: 0xF7647000 Size: 42368 File Visible: - Signed: - Status: - Name: mraid35x.sys Image Path: mraid35x.sys Address: 0xF772F000 Size: 17280 File Visible: - Signed: - Status: - Name: mrxdav.sys Image Path: C:\WINDOWS\system32\DRIVERS\mrxdav.sys Address: 0xA4EDE000 Size: 180608 File Visible: - Signed: - Status: - Name: mrxsmb.sys Image Path: C:\WINDOWS\system32\DRIVERS\mrxsmb.sys Address: 0xA6280000 Size: 455296 File Visible: - Signed: - Status: - Name: Msfs.SYS Image Path: C:\WINDOWS\System32\Drivers\Msfs.SYS Address: 0xAD1F9000 Size: 19072 File Visible: - Signed: - Status: - Name: msgpc.sys Image Path: C:\WINDOWS\system32\DRIVERS\msgpc.sys Address: 0xBAFD0000 Size: 35072 File Visible: - Signed: - Status: - Name: mssmbios.sys Image Path: C:\WINDOWS\system32\DRIVERS\mssmbios.sys Address: 0xB9665000 Size: 15488 File Visible: - Signed: - Status: - Name: Mup.sys Image Path: Mup.sys Address: 0xBAD8B000 Size: 105344 File Visible: - Signed: - Status: - Name: n558.sys Image Path: C:\WINDOWS\System32\Drivers\n558.sys Address: 0xAE8DB000 Size: 9600 File Visible: - Signed: - Status: - Name: NAVENG.SYS Image Path: C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20091206.022\NAVENG.SYS Address: 0xACF0E000 Size: 78208 File Visible: - Signed: - Status: - Name: NAVEX15.SYS Image Path: C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20091206.022\NAVEX15.SYS Address: 0xACF47000 Size: 1316864 File Visible: - Signed: - Status: - Name: NDIS.SYS Image Path: C:\WINDOWS\system32\DRIVERS\NDIS.SYS Address: 0xF795A000 Size: 182656 File Visible: - Signed: - Status: - Name: ndistapi.sys Image Path: C:\WINDOWS\system32\DRIVERS\ndistapi.sys Address: 0xBAC18000 Size: 10112 File Visible: - Signed: - Status: - Name: ndisuio.sys Image Path: C:\WINDOWS\system32\DRIVERS\ndisuio.sys Address: 0xB1D42000 Size: 14592 File Visible: - Signed: - Status: - Name: ndiswan.sys Image Path: C:\WINDOWS\system32\DRIVERS\ndiswan.sys Address: 0xB6112000 Size: 91520 File Visible: - Signed: - Status: - Name: NDProxy.SYS Image Path: C:\WINDOWS\System32\Drivers\NDProxy.SYS Address: 0xB9761000 Size: 40576 File Visible: - Signed: - Status: - Name: netbios.sys Image Path: C:\WINDOWS\system32\DRIVERS\netbios.sys Address: 0xACE23000 Size: 34688 File Visible: - Signed: - Status: - Name: netbt.sys Image Path: C:\WINDOWS\system32\DRIVERS\netbt.sys Address: 0xA63A7000 Size: 162816 File Visible: - Signed: - Status: - Name: NETw4x32.sys Image Path: C:\WINDOWS\system32\DRIVERS\NETw4x32.sys Address: 0x95B52000 Size: 2236544 File Visible: - Signed: - Status: - Name: Npfs.SYS Image Path: C:\WINDOWS\System32\Drivers\Npfs.SYS Address: 0xAD1F1000 Size: 30848 File Visible: - Signed: - Status: - Name: Ntfs.sys Image Path: Ntfs.sys Address: 0xBAE45000 Size: 574976 File Visible: - Signed: - Status: - Name: ntoskrnl.exe Image Path: C:\WINDOWS\system32\ntoskrnl.exe Address: 0x804D7000 Size: 2260992 File Visible: - Signed: - Status: - Name: Null.SYS Image Path: C:\WINDOWS\System32\Drivers\Null.SYS Address: 0xA7124000 Size: 2944 File Visible: - Signed: - Status: - Name: nv4_disp.dll Image Path: C:\WINDOWS\System32\nv4_disp.dll Address: 0xBF9D6000 Size: 3989504 File Visible: - Signed: - Status: - Name: nv4_mini.sys Image Path: C:\WINDOWS\system32\DRIVERS\nv4_mini.sys Address: 0xB64F7000 Size: 3685152 File Visible: - Signed: - Status: - Name: ohci1394.sys Image Path: ohci1394.sys Address: 0xF75F7000 Size: 61696 File Visible: - Signed: - Status: - Name: OPRGHDLR.SYS Image Path: C:\WINDOWS\system32\DRIVERS\OPRGHDLR.SYS Address: 0xF7A50000 Size: 4096 File Visible: - Signed: - Status: - Name: PartMgr.sys Image Path: PartMgr.sys Address: 0xF7717000 Size: 19712 File Visible: - Signed: - Status: - Name: pci.sys Image Path: pci.sys Address: 0xF748C000 Size: 68224 File Visible: - Signed: - Status: - Name: PCI_PNP3180 Image Path: \Driver\PCI_PNP3180 Address: 0x00000000 Size: 0 File Visible: No Signed: - Status: - Name: pciide.sys Image Path: pciide.sys Address: 0xF7A4F000 Size: 3328 File Visible: - Signed: - Status: - Name: PCIIDEX.SYS Image Path: C:\WINDOWS\system32\DRIVERS\PCIIDEX.SYS Address: 0xF770F000 Size: 28672 File Visible: - Signed: - Status: - Name: pcmcia.sys Image Path: pcmcia.sys Address: 0xF782B000 Size: 120192 File Visible: - Signed: - Status: - Name: perc2.sys Image Path: perc2.sys Address: 0xF776F000 Size: 27296 File Visible: - Signed: - Status: - Name: perc2hib.sys Image Path: perc2hib.sys Address: 0xF7999000 Size: 5504 File Visible: - Signed: - Status: - Name: PnpManager Image Path: \Driver\PnpManager Address: 0x804D7000 Size: 2260992 File Visible: - Signed: - Status: - Name: portcls.sys Image Path: C:\WINDOWS\system32\drivers\portcls.sys Address: 0xB5408000 Size: 147456 File Visible: - Signed: - Status: - Name: psched.sys Image Path: C:\WINDOWS\system32\DRIVERS\psched.sys Address: 0xB6101000 Size: 69120 File Visible: - Signed: - Status: - Name: ptilink.sys Image Path: C:\WINDOWS\system32\DRIVERS\ptilink.sys Address: 0xB96B9000 Size: 17792 File Visible: - Signed: - Status: - Name: ql1080.sys Image Path: ql1080.sys Address: 0xF76B7000 Size: 40320 File Visible: - Signed: - Status: - Name: ql10wnt.sys Image Path: ql10wnt.sys Address: 0xF7677000 Size: 33152 File Visible: - Signed: - Status: - Name: ql12160.sys Image Path: ql12160.sys Address: 0xF76D7000 Size: 45312 File Visible: - Signed: - Status: - Name: ql1240.sys Image Path: ql1240.sys Address: 0xF7687000 Size: 40448 File Visible: - Signed: - Status: - Name: ql1280.sys Image Path: ql1280.sys Address: 0xF76C7000 Size: 49024 File Visible: - Signed: - Status: - Name: rasacd.sys Image Path: C:\WINDOWS\system32\DRIVERS\rasacd.sys Address: 0xB050B000 Size: 8832 File Visible: - Signed: - Status: - Name: rasl2tp.sys Image Path: C:\WINDOWS\system32\DRIVERS\rasl2tp.sys Address: 0xBAE25000 Size: 51328 File Visible: - Signed: - Status: - Name: raspppoe.sys Image Path: C:\WINDOWS\system32\DRIVERS\raspppoe.sys Address: 0xBAFF0000 Size: 41472 File Visible: - Signed: - Status: - Name: raspptp.sys Image Path: C:\WINDOWS\system32\DRIVERS\raspptp.sys Address: 0xBAFE0000 Size: 48384 File Visible: - Signed: - Status: - Name: raspti.sys Image Path: C:\WINDOWS\system32\DRIVERS\raspti.sys Address: 0xB96B1000 Size: 16512 File Visible: - Signed: - Status: - Name: RAW Image Path: \FileSystem\RAW Address: 0x804D7000 Size: 2260992 File Visible: - Signed: - Status: - Name: rdbss.sys Image Path: C:\WINDOWS\system32\DRIVERS\rdbss.sys Address: 0xA62F0000 Size: 175744 File Visible: - Signed: - Status: - Name: RDPCDD.sys Image Path: C:\WINDOWS\System32\DRIVERS\RDPCDD.sys Address: 0xA7959000 Size: 4224 File Visible: - Signed: - Status: - Name: rdpdr.sys Image Path: C:\WINDOWS\system32\DRIVERS\rdpdr.sys Address: 0xB60D1000 Size: 196224 File Visible: - Signed: - Status: - Name: redbook.sys Image Path: C:\WINDOWS\system32\DRIVERS\redbook.sys Address: 0xB96D1000 Size: 57600 File Visible: - Signed: - Status: - Name: rfcomm.sys Image Path: C:\WINDOWS\system32\DRIVERS\rfcomm.sys Address: 0xAC1A1000 Size: 59136 File Visible: - Signed: - Status: - Name: rootrepeal.sys Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys Address: 0xBADD5000 Size: 49152 File Visible: No Signed: - Status: - Name: s24trans.sys Image Path: C:\WINDOWS\system32\DRIVERS\s24trans.sys Address: 0xB1D3E000 Size: 12288 File Visible: - Signed: - Status: - Name: SCSIPORT.SYS Image Path: C:\WINDOWS\System32\Drivers\SCSIPORT.SYS Address: 0xF74CB000 Size: 98304 File Visible: - Signed: - Status: - Name: sisagp.sys Image Path: sisagp.sys Address: 0xF747C000 Size: 40960 File Visible: - Signed: - Status: - Name: smserial.sys Image Path: C:\WINDOWS\system32\DRIVERS\smserial.sys Address: 0xB1B49000 Size: 980736 File Visible: - Signed: - Status: - Name: sparrow.sys Image Path: sparrow.sys Address: 0xF771F000 Size: 19072 File Visible: - Signed: - Status: - Name: SPBBCDrv.sys Image Path: C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys Address: 0xA631B000 Size: 434176 File Visible: - Signed: - Status: - Name: sptd Image Path: \Driver\sptd Address: 0x00000000 Size: 0 File Visible: No Signed: - Status: - Name: spyz.sys Image Path: spyz.sys Address: 0xF74E3000 Size: 995328 File Visible: No Signed: - Status: - Name: sr.sys Image Path: sr.sys Address: 0xBAEE9000 Size: 73472 File Visible: - Signed: - Status: - Name: SRTSP.SYS Image Path: C:\WINDOWS\System32\Drivers\SRTSP.SYS Address: 0xAD089000 Size: 303104 File Visible: - Signed: - Status: - Name: SRTSPX.SYS Image Path: C:\WINDOWS\System32\Drivers\SRTSPX.SYS Address: 0xB2C8B000 Size: 36992 File Visible: - Signed: - Status: - Name: srv.sys Image Path: C:\WINDOWS\system32\DRIVERS\srv.sys Address: 0xA4B51000 Size: 333952 File Visible: - Signed: - Status: - Name: ssfs0bbc.sys Image Path: ssfs0bbc.sys Address: 0xF7637000 Size: 45056 File Visible: - Signed: - Status: - Name: sshrmd.sys Image Path: sshrmd.sys Address: 0xF7627000 Size: 36864 File Visible: - Signed: - Status: - Name: ssidrv.sys Image Path: ssidrv.sys Address: 0xF7849000 Size: 188416 File Visible: - Signed: - Status: - Name: sthda.sys Image Path: C:\WINDOWS\system32\drivers\sthda.sys Address: 0xB1C39000 Size: 1067968 File Visible: - Signed: - Status: - Name: swenum.sys Image Path: C:\WINDOWS\system32\DRIVERS\swenum.sys Address: 0xF79D5000 Size: 4352 File Visible: - Signed: - Status: - Name: sym_hi.sys Image Path: sym_hi.sys Address: 0xF7747000 Size: 28384 File Visible: - Signed: - Status: - Name: sym_u3.sys Image Path: sym_u3.sys Address: 0xF774F000 Size: 30688 File Visible: - Signed: - Status: - Name: symc810.sys Image Path: symc810.sys Address: 0xF78AF000 Size: 16256 File Visible: - Signed: - Status: - Name: symc8xx.sys Image Path: symc8xx.sys Address: 0xF773F000 Size: 32640 File Visible: - Signed: - Status: - Name: SYMEVENT.SYS Image Path: C:\WINDOWS\system32\Drivers\SYMEVENT.SYS Address: 0xACF22000 Size: 151552 File Visible: - Signed: - Status: - Name: SynTP.sys Image Path: C:\WINDOWS\system32\DRIVERS\SynTP.sys Address: 0xB6218000 Size: 185824 File Visible: - Signed: - Status: - Name: sysaudio.sys Image Path: C:\WINDOWS\system32\drivers\sysaudio.sys Address: 0xAC1B1000 Size: 60800 File Visible: - Signed: - Status: - Name: tcpip.sys Image Path: C:\WINDOWS\system32\DRIVERS\tcpip.sys Address: 0xA6408000 Size: 361600 File Visible: - Signed: - Status: - Name: TDI.SYS Image Path: C:\WINDOWS\system32\DRIVERS\TDI.SYS Address: 0xF7707000 Size: 20480 File Visible: - Signed: - Status: - Name: termdd.sys Image Path: C:\WINDOWS\system32\DRIVERS\termdd.sys Address: 0xBAFC0000 Size: 40704 File Visible: - Signed: - Status: - Name: tifm21.sys Image Path: C:\WINDOWS\system32\drivers\tifm21.sys Address: 0xB6246000 Size: 188416 File Visible: - Signed: - Status: - Name: toside.sys Image Path: toside.sys Address: 0xF798F000 Size: 4992 File Visible: - Signed: - Status: - Name: ultra.sys Image Path: ultra.sys Address: 0xF76A7000 Size: 36736 File Visible: - Signed: - Status: - Name: update.sys Image Path: C:\WINDOWS\system32\DRIVERS\update.sys Address: 0xB547A000 Size: 384768 File Visible: - Signed: - Status: - Name: usbccgp.sys Image Path: C:\WINDOWS\system32\DRIVERS\usbccgp.sys Address: 0xAD229000 Size: 32128 File Visible: - Signed: - Status: - Name: USBD.SYS Image Path: C:\WINDOWS\system32\DRIVERS\USBD.SYS Address: 0xF79CF000 Size: 8192 File Visible: - Signed: - Status: - Name: usbehci.sys Image Path: C:\WINDOWS\system32\DRIVERS\usbehci.sys Address: 0xF77D7000 Size: 30208 File Visible: - Signed: - Status: - Name: usbhub.sys Image Path: C:\WINDOWS\system32\DRIVERS\usbhub.sys Address: 0xAFBA0000 Size: 59520 File Visible: - Signed: - Status: - Name: USBPORT.SYS Image Path: C:\WINDOWS\system32\DRIVERS\USBPORT.SYS Address: 0xB6274000 Size: 147456 File Visible: - Signed: - Status: - Name: usbprint.sys Image Path: C:\WINDOWS\system32\DRIVERS\usbprint.sys Address: 0xAC3CD000 Size: 25856 File Visible: - Signed: - Status: - Name: usbscan.sys Image Path: C:\WINDOWS\system32\DRIVERS\usbscan.sys Address: 0xB03D4000 Size: 15104 File Visible: - Signed: - Status: - Name: USBSTOR.SYS Image Path: C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS Address: 0xF77A7000 Size: 26368 File Visible: - Signed: - Status: - Name: usbuhci.sys Image Path: C:\WINDOWS\system32\DRIVERS\usbuhci.sys Address: 0xF77CF000 Size: 20608 File Visible: - Signed: - Status: - Name: vga.sys Image Path: C:\WINDOWS\System32\drivers\vga.sys Address: 0xAD211000 Size: 20992 File Visible: - Signed: - Status: - Name: viaagp.sys Image Path: viaagp.sys Address: 0xF746C000 Size: 42240 File Visible: - Signed: - Status: - Name: viaide.sys Image Path: viaide.sys Address: 0xF7991000 Size: 5376 File Visible: - Signed: - Status: - Name: VIDEOPRT.SYS Image Path: C:\WINDOWS\system32\DRIVERS\VIDEOPRT.SYS Address: 0xB64E3000 Size: 81920 File Visible: - Signed: - Status: - Name: VolSnap.sys Image Path: VolSnap.sys Address: 0xF7657000 Size: 52352 File Visible: - Signed: - Status: - Name: wanarp.sys Image Path: C:\WINDOWS\system32\DRIVERS\wanarp.sys Address: 0xB28E1000 Size: 34560 File Visible: - Signed: - Status: - Name: watchdog.sys Image Path: C:\WINDOWS\System32\watchdog.sys Address: 0xB68C3000 Size: 20480 File Visible: - Signed: - Status: - Name: wdmaud.sys Image Path: C:\WINDOWS\system32\drivers\wdmaud.sys Address: 0xA4E79000 Size: 83072 File Visible: - Signed: - Status: - Name: Win32k Image Path: \Driver\Win32k Address: 0xBF800000 Size: 1851392 File Visible: - Signed: - Status: - Name: win32k.sys Image Path: C:\WINDOWS\System32\win32k.sys Address: 0xBF800000 Size: 1851392 File Visible: - Signed: - Status: - Name: WMILIB.SYS Image Path: C:\WINDOWS\System32\Drivers\WMILIB.SYS Address: 0xF7989000 Size: 8192 File Visible: - Signed: - Status: - Name: WMIxWDM Image Path: \Driver\WMIxWDM Address: 0x804D7000 Size: 2260992 File Visible: - Signed: - Status: -