Hey whaddyaknow, ping.exe virus! [Solved]

I managed to get the two documents you requested. Here you go and thanks again! . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_24 Run by [removed] at 19:41:53 on 2011-12-08 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3070.1876 [GMT -5:00] . AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe C:\Windows\system32\svchost.exe -k rpcss C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Program Files\Alwil Software\Avast5\AvastSvc.exe C:\Windows\system32\atieclxx.exe C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe C:\Windows\system32\nvvsvc.exe C:\Windows\System32\spoolsv.exe C:\Program Files\SUPERAntiSpyware\SASCORE.EXE C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe C:\Program Files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Windows\system32\svchost.exe -k bthsvcs C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\Windows\system32\PnkBstrA.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\Explorer.EXE C:\Program Files\IObit\Advanced SystemCare 4\PMonitor.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\RtHDVCpl.exe C:\Program Files\Alwil Software\Avast5\AvastUI.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\NVIDIA Corporation\Display\nvtray.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Belkin\Router Setup and Monitor\BelkinSetup.exe C:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe C:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServer.exe C:\Windows\system32\wuauclt.exe C:\Windows\servicing\TrustedInstaller.exe C:\Windows\system32\Taskmgr.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.ask.com?o=14196&l=dis uInternet Settings,ProxyOverride = *.local BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\alwil software\avast5\aswWebRepIE.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\alwil software\avast5\aswWebRepIE.dll TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe uRun: [Google Update] "c:\users\nick\appdata\local\google\update\GoogleUpdate.exe" /c mRun: [RtHDVCpl] RtHDVCpl.exe mRun: [avast5] c:\progra~1\alwils~1\avast5\avastUI.exe /nogui mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray mRun: [InstaLAN] "c:\program files\belkin\router setup and monitor\BelkinRouterMonitor.exe" startup mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe" mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" uPolicies-explorer: HideSCAHealth = 1 (0x1) mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0) mPolicies-system: EnableLUA = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000 IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL LSP: mswsock.dll DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab TCP: DhcpNameServer = 192.168.2.1 TCP: Interfaces\{DDB50036-B372-4831-A73C-79C27BA03E06} : DhcpNameServer = 192.168.2.1 SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL . ================= FIREFOX =================== . FF - ProfilePath - c:\users\nick\appdata\roaming\mozilla\firefox\profiles\k8dfqr6u.default\ FF - prefs.js: browser.search.defaulturl - hxxp://aim.search.aol.com/aol/search?query={searchTerms}&invocationType=tb50-ff-aim-chromesbox-en-us FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.aol.com/?src=aim&ncid=snsusaimc00000001 FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=723823&p= FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\microsoft silverlight\4.0.60531.0\npctrlui.dll FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll FF - plugin: c:\program files\mozilla firefox\plugins\npViewpoint.dll FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dv.dll FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dvstreaming.dll FF - plugin: c:\program files\pando networks\media booster\npPandoWebPlugin.dll FF - plugin: c:\program files\viewpoint\viewpoint media player\npViewpoint.dll FF - plugin: c:\users\nick\appdata\local\google\update\1.3.21.79\npGoogleUpdate3.dll . —- FIREFOX POLICIES —- FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(network.protocol-handler.warn-external.dnupdate, false ============= SERVICES / DRIVERS =============== . R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [2011-1-23 15672] R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2011-6-13 442200] R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2009-6-13 320856] R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67664] R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCORE.EXE [2010-6-29 116608] R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2011-6-6 64952] R2 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files\iobit\advanced systemcare 4\ASCService.exe [2011-4-24 353168] R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-4-29 176128] R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-6-13 20568] R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2009-6-13 54616] R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast5\AvastSvc.exe [2010-6-25 44768] R2 Belkin Local Backup Service;Belkin Local Backup Service;c:\program files\belkin\belkin usb print and storage center\BkBackupScheduler.exe [2011-10-6 152064] R2 Belkin Network USB Helper;Belkin Network USB Helper;c:\program files\belkin\belkin usb print and storage center\Bkapcs.exe [2011-10-6 49152] R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-10-22 21504] R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2008-10-22 366152] R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia updatus\daemonu.exe [2011-7-8 2214504] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2011-5-20 378472] R2 sxuptp;SXUPTP Driver;c:\windows\system32\drivers\sxuptp.sys [2011-10-6 247320] R2 TeamViewer6;TeamViewer 6;c:\program files\teamviewer\version6\TeamViewer_Service.exe [2011-7-11 2337144] R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.12.1;c:\windows\system32\drivers\libusb0.sys [2010-7-12 28672] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2008-10-22 22216] R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [2010-12-6 27632] S2 AODService;AODService;c:\program files\amd\overdrive\AODAssist.exe [2010-4-23 136616] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\common files\creative labs shared\service\CTAELicensing.exe [2009-12-25 79360] S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [2010-12-6 13224] S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [2009-6-10 24576] S3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys [2010-12-24 16472] S3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys [2010-12-24 11104] S3 s115bus;Sony Ericsson Device 115 driver (WDM);c:\windows\system32\drivers\s115bus.sys [2007-4-23 83208] S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;c:\windows\system32\drivers\s115mdfl.sys [2007-4-23 15112] S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;c:\windows\system32\drivers\s115mdm.sys [2007-4-23 108680] S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s115mgmt.sys [2007-4-23 100488] S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;c:\windows\system32\drivers\s115obex.sys [2007-4-23 98568] S3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion;c:\program files\sony ericsson\sony ericsson pc companion\PCCService.exe [2010-12-9 155344] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] . =============== Created Last 30 ================ . 2011-12-08 04:12:24 328192 —-a-w- c:\users\nick\appdata\local\qef.exe . ==================== Find3M ==================== . 2011-10-04 18:19:42 87608 —-a-w- c:\users\nick\appdata\roaming\inst.exe 2011-10-04 18:19:42 47360 —-a-w- c:\users\nick\appdata\roaming\pcouffin.sys 2011-09-12 02:05:32 404640 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl . ============= FINISH: 19:44:47.53 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft® Windows Vista™ Home Premium Boot Device: \Device\HarddiskVolume1 Install Date: 9/30/2008 9:05:31 PM System Uptime: 12/8/2011 7:32:57 PM (0 hours ago) . Motherboard: ECS | | MCP61PM-GM Processor: AMD Phenom™ 9500 Quad-Core Processor | Socket AM2 | 2200/235mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 466 GiB total, 382.8 GiB free. D: is CDROM () E: is CDROM () F: is FIXED (NTFS) - 466 GiB total, 378.821 GiB free. . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP682: 12/8/2011 10:04:34 AM - OTL Restore Point - 12/8/2011 10:04:34 AM . ==== Installed Programs ====================== . µTorrent Active@ ISO Burner Adobe AIR Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Reader X (10.1.1) Adobe Shockwave Player 11.5 Advanced SystemCare 4 AMD OverDrive AMD Power Monitor Apple Application Support Apple Mobile Device Support Apple Software Update avast! Free Antivirus Belkin Setup and Router Monitor Belkin USB Print and Storage Center Bonjour Call of Duty® 4 - Modern Warfare™ Call of Duty® 4 - Modern Warfare™ 1.6 Patch Call of Duty® 4 - Modern Warfare™ 1.7 Patch CCleaner (remove only) CDBurnerXP Cognitive Tutor Compatibility Pack for the 2007 Office system D-Link VGA Webcam Dell Driver Download Manager Digital Media Reader DVD Decrypter (Remove Only) DVD Flick 1.3.0.7 DVD Shrink 3.2 Free M4a to MP3 Converter 6.1 FrostWire 4.21.8 Futuremark SystemInfo GIMP 2.6.8 Google Chrome HijackThis 2.0.2 Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) HTC Driver Installer ImgBurn iTunes Java Auto Updater Java DB 10.5.3.0 Java™ 6 Update 24 Java™ SE Development Kit 6 Update 17 Java™ SE Development Kit 6 Update 18 Java™ SE Development Kit 6 Update 21 K-Lite Codec Pack 6.9.8 (Basic) League of Legends LibUSB-Win32-0.1.12.1 Malwarebytes' Anti-Malware version 1.51.2.1300 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Extended Microsoft Games for Windows - LIVE Redistributable Microsoft Games for Windows Marketplace Microsoft Office 2003 Primary Interop Assemblies Microsoft Office Professional Edition 2003 Microsoft Silverlight Microsoft VC9 runtime libraries Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual Studio 2005 Tools for Office Runtime MiniTool Partition Wizard Home Edition 5.2 MiniTool Partition Wizard Home Edition 6.0 MixPad Audio Mixer Mozilla Firefox 8.0.1 (x86 en-US) Mozilla Thunderbird (3.1.12) MSI Afterburner 1.1.0 MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB941833) MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) NVIDIA 3D Vision Controller Driver NVIDIA 3D Vision Controller Driver 275.33 NVIDIA 3D Vision Driver 275.33 NVIDIA Control Panel 275.33 NVIDIA Display Control Panel NVIDIA Drivers NVIDIA Graphics Driver 275.33 NVIDIA Install Application NVIDIA PhysX NVIDIA PhysX System Software 9.10.0514 NVIDIA Stereoscopic 3D Driver NVIDIA Update 1.3.5 NVIDIA Update Components ooVoo Pando Media Booster PVSonyDll QuickTime Realtek High Definition Audio Driver Security Update for CAPICOM (KB931906) Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Extended (KB2416472) Security Update for Microsoft .NET Framework 4 Extended (KB2487367) Security Update for Windows Media Encoder (KB2447961) Security Update for Windows Media Encoder (KB954156) Security Update for Windows Media Encoder (KB979332) Skype™ 5.3 Sony Ericsson PC Companion 2.01.110 Sony Ericsson Update Service SpeedFan (remove only) SpywareBlaster 4.4 Steam SUPERAntiSpyware System Requirements Lab System Requirements Lab CYRI TeamViewer 6 Twin USB Vibration Gamepad Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Extended (KB2468871) Update for Microsoft .NET Framework 4 Extended (KB2533523) VC 9.0 Runtime Ventrilo Client Viewpoint Media Player Visual Studio 2005 Tools for Office Second Edition Runtime Windows Live ID Sign-in Assistant Windows Media Encoder 9 Series WinRAR archiver Xfire (remove only) . ==== Event Viewer Messages From Past Week ======== . 12/8/2011 9:32:30 AM, Error: EventLog [6008] - The previous system shutdown at 9:30:13 AM on 12/8/2011 was unexpected. 12/8/2011 7:38:14 PM, Error: Microsoft-Windows-WMPNSS-Service [14325] - Service 'WMPNetworkSvc' did not start correctly because QueryService encountered error '0x80070424'. In Windows Media Player, turn off media sharing, and then turn it back on. 12/8/2011 7:35:33 PM, Error: Service Control Manager [7023] - The Computer Browser service terminated with the following error: The specified service does not exist as an installed service. 12/8/2011 7:35:30 PM, Error: Microsoft-Windows-PrintSpooler [19] - The print spooler failed to share printer HP psc 2100 Series with shared resource name HP psc 2100 Series. Error 1753. The printer cannot be used by others on the network. 12/8/2011 7:33:27 PM, Error: EventLog [6008] - The previous system shutdown at 10:27:05 AM on 12/8/2011 was unexpected. 12/8/2011 7:33:19 PM, Error: volmgr [46] - Crash dump initialization failed! 12/7/2011 11:14:04 PM, Error: Microsoft-Windows-WMPNSS-Service [14365] - Proximity detection failed due to unknown error '0x80004004'. The best proximity time detected was -1 milliseconds. 12/6/2011 11:12:23 PM, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 192.168.2.2 for the Network Card with network address 001E9068DD9B has been denied by the DHCP server 192.168.2.1 (The DHCP Server sent a DHCPNACK message). . ==== End Of File ===========================

Hello blahvirus109

First,

Please read through these instructions to familarize yourself with what to expect when this tool runs

Please download ComboFix from one of the following locations:

• LINK 1
• LINK 2

**IMPORTANT! Save ComboFix to your Desktop. Read the following thoroughly

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link :How to Disable your Security Programs
• Double click on 'ComboFix.exe' & follow the prompts.

When finished, it will produce a log for you.
Please include the contents of C:\ComboFix.txt in your next reply.

Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3. ComboFix may reset a number of Internet Explorer's settings, including making Internet Explorer the default browser.
4. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you – please let me know.
5. ComboFix disconnects your machine from the internet. The connection is automatically restored before ComboFix completes its run. If ComboFix runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

In your next reply please post the log created by ComboFix.

Next,

Please read carefully and follow these steps.

• Download TDSSKiller and save it to your Desktop.
• Extract its contents to your desktop.
• Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.

🖼Click to load external image (Posted Image)

• If an infected file is detected, the default action will be Cure, click on Continue.

🖼Click to load external image (Posted Image)

• If a suspicious file is detected, the default action will be Skip, click on Continue.

🖼Click to load external image (Posted Image)

• It may ask you to reboot the computer to complete the process. Click on Reboot Now.

🖼Click to load external image (Posted Image)

• If no reboot is required, click on Report. A log file should appear. Please copy and paste the contents of that file here.
• If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt".
• Please copy and paste the contents of that file here.

Next,

Please download GetPartitions from the link bellow on your desktop

getpartitions.exe

Double click to run it
It will produce C:\DiskReport.txt log please post results from that log here to me.

Next,

Please upload a screen shot of your Disk Management window:

• Click the Start button
• Right Click Computer
• Select Manage
• Select Storage > Disk Management
• Wait a moment while the Disk Management window appears on the right panel
• Expand the window so that we may see the Capacity column of the Active Partition, as shown in the screen shot below
• Take a screen shot of the display
• Upload the image of your screen shot in your next post

[external image: Posted Image]

In your next post, please include:

• ComboFix.txt
• The TDSSKiller log
• DiskReport.txt
• The screen shot of your Disk Management window
• Are you still getting redirects?
• How is the computer running?

Hello again, I got all the logs you requested. Running much smoother now! TDSSKiller did find a file but I chose to ignore it untill we figure out what it is. ComboFix 11-12-09.04 - Nick 12/10/2011 0:15.4.4 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3070.1909 [GMT -5:00] Running from: c:\users\[removed]\Downloads\ComboFix.exe AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Nick\AppData\Local\qef.exe c:\users\Nick\AppData\Roaming\Xbins c:\users\Nick\AppData\Roaming\Xbins\dict c:\users\Nick\AppData\Roaming\Xbins\FileZilla.xml c:\users\Nick\AppData\Roaming\Xbins\icon.ico c:\users\Nick\AppData\Roaming\Xbins\xbinsftp.exe c:\windows\$NtUninstallKB53799$ c:\windows\$NtUninstallKB53799$\1110126192 c:\windows\$NtUninstallKB53799$\3478986106\@ c:\windows\$NtUninstallKB53799$\3478986106\bckfg.tmp c:\windows\$NtUninstallKB53799$\3478986106\cfg.ini c:\windows\$NtUninstallKB53799$\3478986106\Desktop.ini c:\windows\$NtUninstallKB53799$\3478986106\keywords c:\windows\$NtUninstallKB53799$\3478986106\kwrd.dll c:\windows\$NtUninstallKB53799$\3478986106\L\qnbwvoto c:\windows\$NtUninstallKB53799$\3478986106\lsflt7.ver c:\windows\$NtUninstallKB53799$\3478986106\U\00000001.@ c:\windows\$NtUninstallKB53799$\3478986106\U\00000002.@ c:\windows\$NtUninstallKB53799$\3478986106\U\00000004.@ c:\windows\$NtUninstallKB53799$\3478986106\U\80000000.@ c:\windows\$NtUninstallKB53799$\3478986106\U\80000004.@ c:\windows\$NtUninstallKB53799$\3478986106\U\80000032.@ c:\windows\system32\CF16655.exe c:\windows\system32\CF18026.exe c:\windows\system32\CF18140.exe c:\windows\system32\CF30450.exe . Infected copy of c:\windows\system32\drivers\netbt.sys was found and disinfected Restored copy from - The cat found it . ((((((((((((((((((((((((( Files Created from 2011-11-10 to 2011-12-10 ))))))))))))))))))))))))))))))) . . 2011-12-10 05:39 . 2011-12-10 05:39 ——– d—–w- c:\users\UpdatusUser\AppData\Local\temp 2011-12-10 05:39 . 2011-12-10 05:39 ——– d—–w- c:\users\Public\AppData\Local\temp 2011-12-10 05:39 . 2011-12-10 05:39 ——– d—–w- c:\users\Mcx1\AppData\Local\temp 2011-12-10 05:39 . 2011-12-10 05:39 ——– d—–w- c:\users\Default\AppData\Local\temp 2011-12-10 04:47 . 2009-04-11 04:45 185856 —-a-w- c:\windows\system32\drivers\netbt.sys . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-10-04 18:19 . 2011-01-01 05:59 87608 —-a-w- c:\users\Nick\AppData\Roaming\inst.exe 2011-10-04 18:19 . 2011-01-01 05:59 47360 —-a-w- c:\users\Nick\AppData\Roaming\pcouffin.sys 2011-09-12 02:05 . 2011-07-28 03:53 404640 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-11-30 04:14 . 2011-03-25 02:54 134104 —-a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2011-09-06 20:45 122512 —-a-w- c:\program files\Alwil Software\Avast5\ashShell.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="RtHDVCpl.exe" [2007-10-31 4702208] "Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608] "InstaLAN"="c:\program files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe" [2011-02-25 1770400] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920] "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-07-05 421888] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-09 421736] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-10-04 113024] . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux9"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE] @="" . [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Desktop Manager.lnk] path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Desktop Manager.lnk backup=c:\windows\pss\Desktop Manager.lnk.CommonStartup backupExtension=.CommonStartup . [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk] path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk backup=c:\windows\pss\Microsoft Office.lnk.CommonStartup backupExtension=.CommonStartup . [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Philips ×°ÖùÜÀíÔ±.lnk] path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Philips ×°ÖùÜÀíÔ±.lnk backup=c:\windows\pss\Philips ×°ÖùÜÀíÔ±.lnk.CommonStartup backupExtension=.CommonStartup . [HKLM\~\startupfolder\C:^Users^Nick^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.0.lnk] path=c:\users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk backup=c:\windows\pss\OpenOffice.org 3.0.lnk.Startup backupExtension=.Startup . [HKLM\~\startupfolder\C:^Users^Nick^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Xfire.lnk] path=c:\users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk backup=c:\windows\pss\Xfire.lnk.Startup backupExtension=.Startup . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] 2011-06-06 16:55 937920 —-a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 4] 2011-05-28 18:46 412560 —-a-w- c:\program files\IObit\Advanced SystemCare 4\ASCTray.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] 2010-04-01 09:16 357696 —-a-w- c:\program files\DAEMON Tools Lite\DTLite.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe] 2008-01-19 03:33 125952 —-a-w- c:\windows\ehome\ehtray.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] 2011-10-09 22:06 421736 —-a-w- c:\program files\iTunes\iTunesHelper.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ooVoo.exe] 2011-05-18 13:25 22631608 —-a-w- c:\program files\ooVoo\ooVoo.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\P17RunE] 2008-03-28 12:57 14848 —-a-w- c:\windows\System32\P17RunE.dll . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando Media Booster] 2011-07-09 02:39 3077528 —-a-w- c:\program files\Pando Networks\Media Booster\PMB.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] 2011-07-05 22:36 421888 —-a-w- c:\program files\QuickTime\QTTask.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] 2011-06-15 19:02 15141768 —-a-r- c:\program files\Skype\Phone\Skype.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Companion] 2011-01-05 16:31 424448 —-a-w- c:\program files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam] 2011-08-03 22:03 1242448 —-a-w- c:\program files\Steam\Steam.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2010-10-29 19:49 249064 —-a-w- c:\program files\Common Files\Java\Java Update\jusched.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware] 2011-10-04 18:22 4611456 —-a-w- c:\program files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB2Check] 2006-11-06 17:31 81920 —-a-w- c:\windows\System32\PCLECoInst.dll . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender] 2008-01-19 03:38 1008184 —-a-w- c:\program files\Windows Defender\MSASCui.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG] 2008-01-19 03:33 202240 —-a-w- c:\program files\Windows Media Player\wmpnscfg.exe . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-482672959-21369422-2509643319-1000] "EnableNotificationsRef"=dword:00000001 . R2 AODService;AODService;c:\program files\AMD\OverDrive\AODAssist.exe [2010-04-23 136616] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R3 cpuz130;cpuz130;c:\users\Nick\AppData\Local\Temp\cpuz130\cpuz_x32.sys [x] R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2009-12-25 79360] R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2010-12-07 13224] R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-06-10 24576] R3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [2011-01-01 47360] R3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys [2010-08-16 16472] R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys [2010-08-16 11104] R3 s115bus;Sony Ericsson Device 115 driver (WDM);c:\windows\system32\DRIVERS\s115bus.sys [2007-04-23 83208] R3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s115mdfl.sys [2007-04-23 15112] R3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s115mdm.sys [2007-04-23 108680] R3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s115mgmt.sys [2007-04-23 100488] R3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s115obex.sys [2007-04-23 98568] R3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion;c:\program files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2010-10-26 155344] R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504] S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 15672] S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-11-01 691696] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2011-10-04 67664] S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [2011-10-04 116608] S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952] S2 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files\IObit\Advanced SystemCare 4\ASCService.exe [2011-05-28 353168] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-04-29 176128] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-09-06 54616] S2 Belkin Local Backup Service;Belkin Local Backup Service;c:\program files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe [2010-02-17 152064] S2 Belkin Network USB Helper;Belkin Network USB Helper;c:\program files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe [2010-02-09 49152] S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152] S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-25 2214504] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-05-21 378472] S2 sxuptp;SXUPTP Driver;c:\windows\system32\DRIVERS\sxuptp.sys [2009-06-22 247320] S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [2011-06-01 2337144] S3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.12.1;c:\windows\system32\drivers\libusb0.sys [2007-03-20 28672] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-08-31 22216] S3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\DRIVERS\seehcri.sys [2010-12-07 27632] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] bthsvcs REG_MULTI_SZ BthServ LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache . Contents of the 'Scheduled Tasks' folder . 2011-12-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-482672959-21369422-2509643319-1000Core.job - c:\users\Nick\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-04 18:21] . 2011-12-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-482672959-21369422-2509643319-1000UA.job - c:\users\Nick\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-04 18:21] . . ——- Supplementary Scan ——- . uStart Page = hxxp://www.ask.com?o=14196&l;=dis uInternet Settings,ProxyOverride = *.local IE: E&xport; to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.2.1 FF - ProfilePath - c:\users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\k8dfqr6u.default\ FF - prefs.js: browser.search.defaulturl - hxxp://aim.search.aol.com/aol/search?query={searchTerms}&invocationType;=tb50-ff-aim-chromesbox-en-us FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.aol.com/?src=aim&ncid;=snsusaimc00000001 FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei;=utf-8&type;=723823&p;= FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(network.protocol-handler.warn-external.dnupdate, false . - - - - ORPHANS REMOVED - - - - . WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe MSConfigStartUp-Aim - c:\program files\AIM7\aim.exe MSConfigStartUp-ApnUpdater - c:\program files\Ask.com\Updater\Updater.exe MSConfigStartUp-BlackBerryAutoUpdate - c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe . . . ************************************************************************** scanning hidden processes … . scanning hidden autostart entries … . scanning hidden files … . scan completed successfully hidden files: . ************************************************************************** . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_USERS\S-1-5-21-482672959-21369422-2509643319-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{63F58102-9851-13BC-E98A-5A06A8BDAF82}*] @Allowed: (Read) (RestrictedCode) "oaigpkjgbclchaocjjpjdicmllafle"=hex:6a,61,6d,6e,63,63,65,64,69,61,6f,6d,6e,6d, 68,64,6d,69,6f,62,00,71 "nakdfpjgfhmeamgibnhogmonjmae"=hex:6a,61,6d,6e,63,63,65,64,69,61,6f,6d,6e,6d, 68,64,6d,69,6f,62,00,71 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0010\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0011\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0012\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0013\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0014\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . ———————— Other Running Processes ———————— . c:\windows\system32\nvvsvc.exe c:\windows\system32\atieclxx.exe c:\program files\NVIDIA Corporation\Display\nvxdsync.exe c:\windows\system32\nvvsvc.exe c:\program files\Alwil Software\Avast5\AvastSvc.exe c:\program files\IObit\Advanced SystemCare 4\PMonitor.exe c:\program files\Belkin\Router Setup and Monitor\BelkinService.exe c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\CDBurnerXP\NMSAccessU.exe c:\windows\system32\PnkBstrA.exe c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe c:\program files\TeamViewer\Version6\TeamViewer.exe c:\windows\RtHDVCpl.exe c:\program files\Belkin\Belkin USB Print and Storage Center\connect.exe c:\program files\Belkin\Router Setup and Monitor\BelkinSetup.exe c:\program files\iPod\bin\iPodService.exe c:\windows\system32\wbem\unsecapp.exe c:\windows\servicing\TrustedInstaller.exe . ************************************************************************** . Completion time: 2011-12-10 00:51:58 - machine was rebooted ComboFix-quarantined-files.txt 2011-12-10 05:51 ComboFix2.txt 2010-10-25 22:17 ComboFix3.txt 2010-02-24 21:32 . Pre-Run: 412,578,869,248 bytes free Post-Run: 412,228,198,400 bytes free . - - End Of File - - FEE4F9E847E9B767D0CD74229D53102D 00:57:14.0603 2440 TDSS rootkit removing tool [removed] Dec 7 2011 13:21:06 00:57:14.0930 2440 ============================================================ 00:57:14.0930 2440 Current date / time: 2011/12/10 00:57:14.0930 00:57:14.0930 2440 SystemInfo: 00:57:14.0930 2440 00:57:14.0930 2440 OS Version: 6.0.6002 ServicePack: 2.0 00:57:14.0930 2440 Product type: Workstation 00:57:14.0930 2440 ComputerName: NICK-MAINPC 00:57:14.0930 2440 UserName: Nick 00:57:14.0930 2440 Windows directory: C:\Windows 00:57:14.0930 2440 System windows directory: C:\Windows 00:57:14.0930 2440 Processor architecture: Intel x86 00:57:14.0930 2440 Number of processors: 4 00:57:14.0930 2440 Page size: 0x1000 00:57:14.0930 2440 Boot type: Normal boot 00:57:14.0930 2440 ============================================================ 00:57:15.0383 2440 Initialize success 00:57:18.0565 4060 ============================================================ 00:57:18.0565 4060 Scan started 00:57:18.0565 4060 Mode: Manual; 00:57:18.0565 4060 ============================================================ 00:57:18.0940 4060 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys 00:57:18.0955 4060 ACPI - ok 00:57:19.0018 4060 adp94xx (2edc5bbac6c651ece337bde8ed97c9fb) C:\Windows\system32\drivers\adp94xx.sys 00:57:19.0018 4060 adp94xx - ok 00:57:19.0033 4060 adpahci (b84088ca3cdca97da44a984c6ce1ccad) C:\Windows\system32\drivers\adpahci.sys 00:57:19.0033 4060 adpahci - ok 00:57:19.0064 4060 adpu160m (7880c67bccc27c86fd05aa2afb5ea469) C:\Windows\system32\drivers\adpu160m.sys 00:57:19.0064 4060 adpu160m - ok 00:57:19.0064 4060 adpu320 (9ae713f8e30efc2abccd84904333df4d) C:\Windows\system32\drivers\adpu320.sys 00:57:19.0080 4060 adpu320 - ok 00:57:19.0189 4060 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys 00:57:19.0189 4060 AFD - ok 00:57:19.0252 4060 agp440 (ef23439cdd587f64c2c1b8825cead7d8) C:\Windows\system32\drivers\agp440.sys 00:57:19.0252 4060 agp440 - ok 00:57:19.0298 4060 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys 00:57:19.0298 4060 aic78xx - ok 00:57:19.0314 4060 aliide (90395b64600ebb4552e26e178c94b2e4) C:\Windows\system32\drivers\aliide.sys 00:57:19.0314 4060 aliide - ok 00:57:19.0361 4060 amdagp (2b13e304c9dfdfa5eb582f6a149fa2c7) C:\Windows\system32\drivers\amdagp.sys 00:57:19.0361 4060 amdagp - ok 00:57:19.0376 4060 amdide (0577df1d323fe75a739c787893d300ea) C:\Windows\system32\drivers\amdide.sys 00:57:19.0376 4060 amdide - ok 00:57:19.0392 4060 AmdK7 (dc487885bcef9f28eece6fac0e5ddfc5) C:\Windows\system32\drivers\amdk7.sys 00:57:19.0392 4060 AmdK7 - ok 00:57:19.0423 4060 AmdK8 (0ca0071da4315b00fc1328ca86b425da) C:\Windows\system32\drivers\amdk8.sys 00:57:19.0423 4060 AmdK8 - ok 00:57:19.0486 4060 AmdLLD (ad8fa28d8ed0d0a689a0559085ce0f18) C:\Windows\system32\DRIVERS\AmdLLD.sys 00:57:19.0486 4060 AmdLLD - ok 00:57:19.0595 4060 arc (5f673180268bb1fdb69c99b6619fe379) C:\Windows\system32\drivers\arc.sys 00:57:19.0595 4060 arc - ok 00:57:19.0626 4060 arcsas (957f7540b5e7f602e44648c7de5a1c05) C:\Windows\system32\drivers\arcsas.sys 00:57:19.0626 4060 arcsas - ok 00:57:19.0688 4060 aswFsBlk (c47623ffd181a1e7d63574dde2a0a711) C:\Windows\system32\drivers\aswFsBlk.sys 00:57:19.0688 4060 aswFsBlk - ok 00:57:19.0751 4060 aswMonFlt (4804753a4ec7d67cc22d226bffd1c1e3) C:\Windows\system32\drivers\aswMonFlt.sys 00:57:19.0751 4060 aswMonFlt - ok 00:57:19.0766 4060 aswRdr (36239e24470a3dd81fae37510953cc6c) C:\Windows\system32\drivers\aswRdr.sys 00:57:19.0766 4060 aswRdr - ok 00:57:19.0829 4060 aswSnx (caa846e9c83836bdc3d2d700c678db65) C:\Windows\system32\drivers\aswSnx.sys 00:57:19.0844 4060 aswSnx - ok 00:57:19.0876 4060 aswSP (748ae7f2d7da33adb063fe05704a9969) C:\Windows\system32\drivers\aswSP.sys 00:57:19.0876 4060 aswSP - ok 00:57:19.0891 4060 aswTdi (ca9925ce1dbd07ffe1eb357752cf5577) C:\Windows\system32\drivers\aswTdi.sys 00:57:19.0891 4060 aswTdi - ok 00:57:19.0938 4060 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys 00:57:19.0954 4060 AsyncMac - ok 00:57:19.0969 4060 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys 00:57:19.0969 4060 atapi - ok 00:57:20.0172 4060 atikmdag (18f4c1c503f1cdd39ad006aa54b79ea8) C:\Windows\system32\DRIVERS\atikmdag.sys 00:57:20.0312 4060 atikmdag - ok 00:57:20.0437 4060 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys 00:57:20.0437 4060 Beep - ok 00:57:20.0484 4060 blbdrive - ok 00:57:20.0562 4060 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys 00:57:20.0578 4060 bowser - ok 00:57:20.0624 4060 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys 00:57:20.0624 4060 BrFiltLo - ok 00:57:20.0624 4060 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys 00:57:20.0640 4060 BrFiltUp - ok 00:57:20.0656 4060 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys 00:57:20.0656 4060 Brserid - ok 00:57:20.0687 4060 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys 00:57:20.0687 4060 BrSerWdm - ok 00:57:20.0702 4060 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys 00:57:20.0702 4060 BrUsbMdm - ok 00:57:20.0718 4060 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys 00:57:20.0718 4060 BrUsbSer - ok 00:57:20.0780 4060 BthEnum (6d39c954799b63ba866910234cf7d726) C:\Windows\system32\DRIVERS\BthEnum.sys 00:57:20.0780 4060 BthEnum - ok 00:57:20.0827 4060 BTHMODEM (9a966a8e86d1771911ae34a20d11bff3) C:\Windows\system32\DRIVERS\bthmodem.sys 00:57:20.0827 4060 BTHMODEM - ok 00:57:20.0858 4060 BthPan (5904efa25f829bf84ea6fb045134a1d8) C:\Windows\system32\DRIVERS\bthpan.sys 00:57:20.0858 4060 BthPan - ok 00:57:20.0968 4060 BTHPORT (611ff3f2f095c8d4a6d4cfd9dcc09793) C:\Windows\system32\Drivers\BTHport.sys 00:57:20.0983 4060 BTHPORT - ok 00:57:21.0030 4060 BTHUSB (d330803eab2a15caec7f011f1d4cb30e) C:\Windows\system32\Drivers\BTHUSB.sys 00:57:21.0030 4060 BTHUSB - ok 00:57:21.0046 4060 catchme - ok 00:57:21.0108 4060 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys 00:57:21.0124 4060 cdfs - ok 00:57:21.0155 4060 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys 00:57:21.0155 4060 cdrom - ok 00:57:21.0170 4060 circlass (da8e0afc7baa226c538ef53ac2f90897) C:\Windows\system32\drivers\circlass.sys 00:57:21.0170 4060 circlass - ok 00:57:21.0202 4060 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys 00:57:21.0217 4060 CLFS - ok 00:57:21.0248 4060 cmdide (45201046c776ffdaf3fc8a0029c581c8) C:\Windows\system32\drivers\cmdide.sys 00:57:21.0248 4060 cmdide - ok 00:57:21.0264 4060 Compbatt (82b8c91d327cfecf76cb58716f7d4997) C:\Windows\system32\drivers\compbatt.sys 00:57:21.0264 4060 Compbatt - ok 00:57:21.0373 4060 cpuz130 - ok 00:57:21.0389 4060 crcdisk (2a213ae086bbec5e937553c7d9a2b22c) C:\Windows\system32\drivers\crcdisk.sys 00:57:21.0389 4060 crcdisk - ok 00:57:21.0436 4060 Crusoe (22a7f883508176489f559ee745b5bf5d) C:\Windows\system32\drivers\crusoe.sys 00:57:21.0436 4060 Crusoe - ok 00:57:21.0482 4060 DCamUSBEMPIA (5118ea8a2f55fa4d4295516500b78229) C:\Windows\system32\DRIVERS\emDevice.sys 00:57:21.0498 4060 DCamUSBEMPIA - ok 00:57:21.0529 4060 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys 00:57:21.0545 4060 DfsC - ok 00:57:21.0592 4060 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys 00:57:21.0592 4060 disk - ok 00:57:21.0654 4060 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys 00:57:21.0670 4060 drmkaud - ok 00:57:21.0716 4060 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys 00:57:21.0732 4060 DXGKrnl - ok 00:57:21.0763 4060 E1G60 (f88fb26547fd2ce6d0a5af2985892c48) C:\Windows\system32\DRIVERS\E1G60I32.sys 00:57:21.0779 4060 E1G60 - ok 00:57:21.0841 4060 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys 00:57:21.0857 4060 Ecache - ok 00:57:21.0919 4060 elxstor (e8f3f21a71720c84bcf423b80028359f) C:\Windows\system32\drivers\elxstor.sys 00:57:21.0935 4060 elxstor - ok 00:57:21.0997 4060 emAudio (200da4f1964c11b3c19a07f937394624) C:\Windows\system32\drivers\emAudio.sys 00:57:22.0013 4060 emAudio - ok 00:57:22.0091 4060 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys 00:57:22.0091 4060 exfat - ok 00:57:22.0138 4060 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys 00:57:22.0138 4060 fastfat - ok 00:57:22.0153 4060 fdc (63bdada84951b9c03e641800e176898a) C:\Windows\system32\DRIVERS\fdc.sys 00:57:22.0153 4060 fdc - ok 00:57:22.0216 4060 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys 00:57:22.0216 4060 FileInfo - ok 00:57:22.0247 4060 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys 00:57:22.0247 4060 Filetrace - ok 00:57:22.0278 4060 FiltUSBEMPIA (6f87e4706f59463b74bc4fad0f67338f) C:\Windows\system32\DRIVERS\emFilter.sys 00:57:22.0278 4060 FiltUSBEMPIA - ok 00:57:22.0294 4060 flpydisk (6603957eff5ec62d25075ea8ac27de68) C:\Windows\system32\DRIVERS\flpydisk.sys 00:57:22.0294 4060 flpydisk - ok 00:57:22.0325 4060 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys 00:57:22.0325 4060 FltMgr - ok 00:57:22.0387 4060 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys 00:57:22.0387 4060 Fs_Rec - ok 00:57:22.0403 4060 gagp30kx (4e1cd0a45c50a8882616cae5bf82f3c5) C:\Windows\system32\drivers\gagp30kx.sys 00:57:22.0403 4060 gagp30kx - ok 00:57:22.0434 4060 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 00:57:22.0434 4060 GEARAspiWDM - ok 00:57:22.0450 4060 ggflt (007aea2e06e7cef7372e40c277163959) C:\Windows\system32\DRIVERS\ggflt.sys 00:57:22.0465 4060 ggflt - ok 00:57:22.0496 4060 ggsemc (c73de35960ca75c5ab4ae636b127c64e) C:\Windows\system32\DRIVERS\ggsemc.sys 00:57:22.0512 4060 ggsemc - ok 00:57:22.0528 4060 giveio (77ebf3e9386daa51551af429052d88d0) C:\Windows\system32\giveio.sys 00:57:22.0543 4060 giveio - ok 00:57:22.0606 4060 HdAudAddService (3f90e001369a07243763bd5a523d8722) C:\Windows\system32\drivers\HdAudio.sys 00:57:22.0621 4060 HdAudAddService - ok 00:57:22.0668 4060 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys 00:57:22.0684 4060 HDAudBus - ok 00:57:22.0715 4060 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys 00:57:22.0715 4060 HidBth - ok 00:57:22.0715 4060 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys 00:57:22.0730 4060 HidIr - ok 00:57:22.0762 4060 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys 00:57:22.0762 4060 HidUsb - ok 00:57:22.0777 4060 HpCISSs (df353b401001246853763c4b7aaa6f50) C:\Windows\system32\drivers\hpcisss.sys 00:57:22.0793 4060 HpCISSs - ok 00:57:22.0793 4060 HSF_DPV - ok 00:57:22.0808 4060 HSXHWBS2 - ok 00:57:22.0871 4060 HTCAND32 (cbd09ed9cf6822177ee85aea4d8816a2) C:\Windows\system32\Drivers\ANDROIDUSB.sys 00:57:22.0871 4060 HTCAND32 - ok 00:57:22.0933 4060 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys 00:57:22.0933 4060 HTTP - ok 00:57:22.0964 4060 i2omp (324c2152ff2c61abae92d09f3cca4d63) C:\Windows\system32\drivers\i2omp.sys 00:57:22.0964 4060 i2omp - ok 00:57:23.0042 4060 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys 00:57:23.0042 4060 i8042prt - ok 00:57:23.0074 4060 iaStorV (c957bf4b5d80b46c5017bf0101e6c906) C:\Windows\system32\drivers\iastorv.sys 00:57:23.0089 4060 iaStorV - ok 00:57:23.0105 4060 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys 00:57:23.0105 4060 iirsp - ok 00:57:23.0245 4060 IntcAzAudAddService (4e38a2883df3ba382a59132b3e7d709e) C:\Windows\system32\drivers\RTKVHDA.sys 00:57:23.0261 4060 IntcAzAudAddService - ok 00:57:23.0292 4060 intelide (97469037714070e45194ed318d636401) C:\Windows\system32\drivers\intelide.sys 00:57:23.0292 4060 intelide - ok 00:57:23.0308 4060 intelppm (ce44cc04262f28216dd4341e9e36a16f) C:\Windows\system32\DRIVERS\intelppm.sys 00:57:23.0308 4060 intelppm - ok 00:57:23.0386 4060 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys 00:57:23.0386 4060 IpFilterDriver - ok 00:57:23.0401 4060 IpInIp - ok 00:57:23.0417 4060 IPMIDRV (40f34f8aba2a015d780e4b09138b6c17) C:\Windows\system32\drivers\ipmidrv.sys 00:57:23.0417 4060 IPMIDRV - ok 00:57:23.0448 4060 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys 00:57:23.0448 4060 IPNAT - ok 00:57:23.0479 4060 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys 00:57:23.0479 4060 IRENUM - ok 00:57:23.0495 4060 isapnp (350fca7e73cf65bcef43fae1e4e91293) C:\Windows\system32\drivers\isapnp.sys 00:57:23.0495 4060 isapnp - ok 00:57:23.0557 4060 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys 00:57:23.0557 4060 iScsiPrt - ok 00:57:23.0588 4060 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys 00:57:23.0588 4060 iteatapi - ok 00:57:23.0620 4060 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys 00:57:23.0620 4060 iteraid - ok 00:57:23.0651 4060 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys 00:57:23.0651 4060 kbdclass - ok 00:57:23.0666 4060 kbdhid (d2600cb17b7408b4a83f231dc9a11ac3) C:\Windows\system32\drivers\kbdhid.sys 00:57:23.0666 4060 kbdhid - ok 00:57:23.0713 4060 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys 00:57:23.0729 4060 KSecDD - ok 00:57:23.0838 4060 libusb0 (34d6730e198a5b0fce0790a6b4769ef2) C:\Windows\system32\drivers\libusb0.sys 00:57:23.0854 4060 libusb0 - ok 00:57:23.0885 4060 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys 00:57:23.0885 4060 lltdio - ok 00:57:23.0932 4060 LSI_FC (a2262fb9f28935e862b4db46438c80d2) C:\Windows\system32\drivers\lsi_fc.sys 00:57:23.0932 4060 LSI_FC - ok 00:57:23.0947 4060 LSI_SAS (30d73327d390f72a62f32c103daf1d6d) C:\Windows\system32\drivers\lsi_sas.sys 00:57:23.0947 4060 LSI_SAS - ok 00:57:23.0947 4060 LSI_SCSI (e1e36fefd45849a95f1ab81de0159fe3) C:\Windows\system32\drivers\lsi_scsi.sys 00:57:23.0963 4060 LSI_SCSI - ok 00:57:23.0994 4060 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys 00:57:23.0994 4060 luafv - ok 00:57:24.0025 4060 MarvinBus (a3e700d78eec390f1208098cdca5c6b6) C:\Windows\system32\DRIVERS\MarvinBus.sys 00:57:24.0025 4060 MarvinBus - ok 00:57:24.0103 4060 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\Windows\system32\drivers\mbam.sys 00:57:24.0103 4060 MBAMProtector - ok 00:57:24.0150 4060 mdmxsdk - ok 00:57:24.0166 4060 megasas (d153b14fc6598eae8422a2037553adce) C:\Windows\system32\drivers\megasas.sys 00:57:24.0181 4060 megasas - ok 00:57:24.0197 4060 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys 00:57:24.0212 4060 Modem - ok 00:57:24.0259 4060 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys 00:57:24.0275 4060 monitor - ok 00:57:24.0290 4060 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys 00:57:24.0306 4060 mouclass - ok 00:57:24.0322 4060 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys 00:57:24.0322 4060 mouhid - ok 00:57:24.0353 4060 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys 00:57:24.0353 4060 MountMgr - ok 00:57:24.0400 4060 mpio (583a41f26278d9e0ea548163d6139397) C:\Windows\system32\drivers\mpio.sys 00:57:24.0400 4060 mpio - ok 00:57:24.0446 4060 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys 00:57:24.0462 4060 mpsdrv - ok 00:57:24.0478 4060 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys 00:57:24.0478 4060 Mraid35x - ok 00:57:24.0524 4060 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys 00:57:24.0524 4060 MRxDAV - ok 00:57:24.0556 4060 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys 00:57:24.0556 4060 mrxsmb - ok 00:57:24.0602 4060 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys 00:57:24.0602 4060 mrxsmb10 - ok 00:57:24.0634 4060 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys 00:57:24.0634 4060 mrxsmb20 - ok 00:57:24.0665 4060 msahci (742aed7939e734c36b7e8d6228ce26b7) C:\Windows\system32\drivers\msahci.sys 00:57:24.0665 4060 msahci - ok 00:57:24.0680 4060 msdsm (3fc82a2ae4cc149165a94699183d3028) C:\Windows\system32\drivers\msdsm.sys 00:57:24.0680 4060 msdsm - ok 00:57:24.0712 4060 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys 00:57:24.0712 4060 Msfs - ok 00:57:24.0727 4060 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys 00:57:24.0727 4060 msisadrv - ok 00:57:24.0790 4060 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys 00:57:24.0790 4060 MSKSSRV - ok 00:57:24.0836 4060 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys 00:57:24.0836 4060 MSPCLOCK - ok 00:57:24.0899 4060 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys 00:57:24.0899 4060 MSPQM - ok 00:57:24.0930 4060 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys 00:57:24.0946 4060 MsRPC - ok 00:57:24.0977 4060 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys 00:57:24.0977 4060 mssmbios - ok 00:57:24.0992 4060 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys 00:57:24.0992 4060 MSTEE - ok 00:57:25.0024 4060 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys 00:57:25.0024 4060 Mup - ok 00:57:25.0086 4060 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys 00:57:25.0086 4060 NativeWifiP - ok 00:57:25.0133 4060 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys 00:57:25.0164 4060 NDIS - ok 00:57:25.0195 4060 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys 00:57:25.0195 4060 NdisTapi - ok 00:57:25.0211 4060 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys 00:57:25.0211 4060 Ndisuio - ok 00:57:25.0273 4060 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys 00:57:25.0273 4060 NdisWan - ok 00:57:25.0289 4060 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys 00:57:25.0289 4060 NDProxy - ok 00:57:25.0320 4060 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys 00:57:25.0320 4060 NetBIOS - ok 00:57:25.0351 4060 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys 00:57:25.0351 4060 netbt - ok 00:57:25.0414 4060 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys 00:57:25.0429 4060 nfrd960 - ok 00:57:25.0523 4060 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys 00:57:25.0523 4060 Npfs - ok 00:57:25.0554 4060 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys 00:57:25.0554 4060 nsiproxy - ok 00:57:25.0616 4060 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys 00:57:25.0648 4060 Ntfs - ok 00:57:25.0679 4060 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys 00:57:25.0679 4060 ntrigdigi - ok 00:57:25.0694 4060 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys 00:57:25.0694 4060 Null - ok 00:57:25.0741 4060 NVENETFD (1efec38a852ab35883bfff3427b92b3f) C:\Windows\system32\DRIVERS\nvmfdx32.sys 00:57:25.0757 4060 NVENETFD - ok 00:57:26.0147 4060 nvlddmkm (847b1755f7757f825305a1ffe6dac3e9) C:\Windows\system32\DRIVERS\nvlddmkm.sys 00:57:26.0272 4060 nvlddmkm - ok 00:57:26.0412 4060 NVNET (1efec38a852ab35883bfff3427b92b3f) C:\Windows\system32\DRIVERS\nvmfdx32.sys 00:57:26.0428 4060 NVNET - ok 00:57:26.0459 4060 nvraid (e69e946f80c1c31c53003bfbf50cbb7c) C:\Windows\system32\drivers\nvraid.sys 00:57:26.0459 4060 nvraid - ok 00:57:26.0490 4060 nvstor (4a5fcab82d9bf6af8a023a66802fe9e9) C:\Windows\system32\drivers\nvstor.sys 00:57:26.0506 4060 nvstor - ok 00:57:26.0552 4060 nvstor32 (dc5f166422beebf195e3e4bb8ab4ee22) C:\Windows\system32\DRIVERS\nvstor32.sys 00:57:26.0552 4060 nvstor32 - ok 00:57:26.0568 4060 nv_agp (07c186427eb8fcc3d8d7927187f260f7) C:\Windows\system32\drivers\nv_agp.sys 00:57:26.0568 4060 nv_agp - ok 00:57:26.0568 4060 NwlnkFlt - ok 00:57:26.0584 4060 NwlnkFwd - ok 00:57:26.0630 4060 ohci1394 (be32da025a0be1878f0ee8d6d9386cd5) C:\Windows\system32\drivers\ohci1394.sys 00:57:26.0646 4060 ohci1394 - ok 00:57:26.0818 4060 ovt519 (4cdadec3dc1300ee1d313ea5494e6472) C:\Windows\system32\Drivers\ov519vid.sys 00:57:26.0833 4060 ovt519 - ok 00:57:27.0426 4060 P17 (f2519d547a6ac2afe0df0dc826a085a7) C:\Windows\system32\drivers\P17.sys 00:57:27.0457 4060 P17 - ok 00:57:27.0566 4060 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys 00:57:27.0566 4060 Parport - ok 00:57:27.0598 4060 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys 00:57:27.0598 4060 partmgr - ok 00:57:27.0613 4060 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys 00:57:27.0613 4060 Parvdm - ok 00:57:27.0660 4060 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys 00:57:27.0660 4060 pci - ok 00:57:27.0691 4060 pciide (1636d43f10416aeb483bc6001097b26c) C:\Windows\system32\drivers\pciide.sys 00:57:27.0691 4060 pciide - ok 00:57:27.0722 4060 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys 00:57:27.0722 4060 pcmcia - ok 00:57:27.0769 4060 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\Windows\system32\Drivers\pcouffin.sys 00:57:27.0785 4060 pcouffin - ok 00:57:27.0863 4060 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys 00:57:27.0863 4060 PEAUTH - ok 00:57:27.0972 4060 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys 00:57:28.0003 4060 PptpMiniport - ok 00:57:28.0034 4060 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\DRIVERS\processr.sys 00:57:28.0050 4060 Processor - ok 00:57:28.0112 4060 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys 00:57:28.0128 4060 PSched - ok 00:57:28.0190 4060 pwdrvio (c50de6d0c04b230f185a13fde0f047fa) C:\Windows\system32\pwdrvio.sys 00:57:28.0206 4060 pwdrvio - ok 00:57:28.0331 4060 pwdspio (cdc5704308222400ad606bcf87b006a5) C:\Windows\system32\pwdspio.sys 00:57:28.0331 4060 pwdspio - ok 00:57:28.0393 4060 ql2300 (ccdac889326317792480c0a67156a1ec) C:\Windows\system32\drivers\ql2300.sys 00:57:28.0424 4060 ql2300 - ok 00:57:28.0440 4060 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys 00:57:28.0440 4060 ql40xx - ok 00:57:28.0487 4060 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys 00:57:28.0487 4060 QWAVEdrv - ok 00:57:28.0518 4060 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys 00:57:28.0534 4060 RasAcd - ok 00:57:28.0565 4060 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys 00:57:28.0565 4060 Rasl2tp - ok 00:57:28.0596 4060 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys 00:57:28.0596 4060 RasPppoe - ok 00:57:28.0627 4060 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys 00:57:28.0627 4060 RasSstp - ok 00:57:28.0674 4060 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys 00:57:28.0674 4060 rdbss - ok 00:57:28.0705 4060 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys 00:57:28.0705 4060 RDPCDD - ok 00:57:28.0736 4060 rdpdr (e8bd98d46f2ed77132ba927fccb47d8b) C:\Windows\system32\drivers\rdpdr.sys 00:57:28.0736 4060 rdpdr - ok 00:57:28.0768 4060 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys 00:57:28.0768 4060 RDPENCDD - ok 00:57:28.0799 4060 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys 00:57:28.0799 4060 RDPWD - ok 00:57:28.0877 4060 RFCOMM (6482707f9f4da0ecbab43b2e0398a101) C:\Windows\system32\DRIVERS\rfcomm.sys 00:57:28.0877 4060 RFCOMM - ok 00:57:28.0892 4060 RimUsb - ok 00:57:28.0970 4060 RimVSerPort (2c4fb2e9f039287767c384e46ee91030) C:\Windows\system32\DRIVERS\RimSerial.sys 00:57:28.0970 4060 RimVSerPort - ok 00:57:29.0002 4060 ROOTMODEM (75e8a6bfa7374aba833ae92bf41ae4e6) C:\Windows\system32\Drivers\RootMdm.sys 00:57:29.0002 4060 ROOTMODEM - ok 00:57:29.0048 4060 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys 00:57:29.0048 4060 rspndr - ok 00:57:29.0080 4060 s115bus (e1ab463b36a7ef31d8a73a97a9b57afa) C:\Windows\system32\DRIVERS\s115bus.sys 00:57:29.0095 4060 s115bus - ok 00:57:29.0111 4060 s115mdfl (e24113fc13b8737c94cf4e3415488c76) C:\Windows\system32\DRIVERS\s115mdfl.sys 00:57:29.0111 4060 s115mdfl - ok 00:57:29.0158 4060 s115mdm (4029e49e7c673aa0670bd206b0af1b5b) C:\Windows\system32\DRIVERS\s115mdm.sys 00:57:29.0173 4060 s115mdm - ok 00:57:29.0189 4060 s115mgmt (eb02ab4ca8bccecfde236cad8fc6e135) C:\Windows\system32\DRIVERS\s115mgmt.sys 00:57:29.0204 4060 s115mgmt - ok 00:57:29.0220 4060 s115obex (089869db9ffd2ac807fa87fe82ac7761) C:\Windows\system32\DRIVERS\s115obex.sys 00:57:29.0220 4060 s115obex - ok 00:57:29.0392 4060 SASKUTIL (77b9fc20084b48408ad3e87570eb4a85) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS 00:57:29.0392 4060 SASKUTIL - ok 00:57:29.0423 4060 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys 00:57:29.0423 4060 sbp2port - ok 00:57:29.0485 4060 ScanUSBEMPIA (f5a633609777c212ec5ff19927fc5955) C:\Windows\system32\DRIVERS\emScan.sys 00:57:29.0485 4060 ScanUSBEMPIA - ok 00:57:29.0516 4060 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys 00:57:29.0516 4060 secdrv - ok 00:57:29.0563 4060 seehcri (e5b56569a9f79b70314fede6c953641e) C:\Windows\system32\DRIVERS\seehcri.sys 00:57:29.0563 4060 seehcri - ok 00:57:29.0579 4060 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys 00:57:29.0579 4060 Serenum - ok 00:57:29.0610 4060 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys 00:57:29.0610 4060 Serial - ok 00:57:29.0641 4060 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys 00:57:29.0641 4060 sermouse - ok 00:57:29.0672 4060 sffdisk (103b79418da647736ee95645f305f68a) C:\Windows\system32\drivers\sffdisk.sys 00:57:29.0672 4060 sffdisk - ok 00:57:29.0704 4060 sffp_mmc (8fd08a310645fe872eeec6e08c6bf3ee) C:\Windows\system32\drivers\sffp_mmc.sys 00:57:29.0704 4060 sffp_mmc - ok 00:57:29.0735 4060 sffp_sd (9cfa05fcfcb7124e69cfc812b72f9614) C:\Windows\system32\drivers\sffp_sd.sys 00:57:29.0735 4060 sffp_sd - ok 00:57:29.0750 4060 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys 00:57:29.0750 4060 sfloppy - ok 00:57:29.0766 4060 sisagp (d2a595d6eebeeaf4334f8e50efbc9931) C:\Windows\system32\drivers\sisagp.sys 00:57:29.0766 4060 sisagp - ok 00:57:29.0782 4060 SiSRaid2 (cedd6f4e7d84e9f98b34b3fe988373aa) C:\Windows\system32\drivers\sisraid2.sys 00:57:29.0782 4060 SiSRaid2 - ok 00:57:29.0797 4060 SiSRaid4 (df843c528c4f69d12ce41ce462e973a7) C:\Windows\system32\drivers\sisraid4.sys 00:57:29.0797 4060 SiSRaid4 - ok 00:57:29.0860 4060 SmartDefragDriver (46b40982af166bf89c3f51fb13e60d6d) C:\Windows\system32\Drivers\SmartDefragDriver.sys 00:57:29.0860 4060 SmartDefragDriver - ok 00:57:29.0891 4060 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys 00:57:29.0922 4060 Smb - ok 00:57:30.0078 4060 speedfan (5d6401db90ec81b71f8e2c5c8f0fef23) C:\Windows\system32\speedfan.sys 00:57:30.0125 4060 speedfan - ok 00:57:30.0234 4060 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys 00:57:30.0250 4060 spldr - ok 00:57:30.0624 4060 sptd (cdddec541bc3c96f91ecb48759673505) C:\Windows\system32\Drivers\sptd.sys 00:57:30.0624 4060 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505 00:57:30.0624 4060 sptd ( LockedFile.Multi.Generic ) - warning 00:57:30.0624 4060 sptd - detected LockedFile.Multi.Generic (1) 00:57:30.0858 4060 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys 00:57:30.0858 4060 srv - ok 00:57:31.0123 4060 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys 00:57:31.0123 4060 srv2 - ok 00:57:31.0201 4060 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys 00:57:31.0217 4060 srvnet - ok 00:57:31.0576 4060 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys 00:57:31.0576 4060 swenum - ok 00:57:31.0950 4060 sxuptp (86083b04dc2b90397f4b47add6eaa407) C:\Windows\system32\DRIVERS\sxuptp.sys 00:57:31.0950 4060 sxuptp - ok 00:57:31.0981 4060 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys 00:57:31.0981 4060 Symc8xx - ok 00:57:31.0997 4060 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys 00:57:31.0997 4060 Sym_hi - ok 00:57:32.0012 4060 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys 00:57:32.0012 4060 Sym_u3 - ok 00:57:32.0246 4060 Tcpip (2756186e287139310997090797e0182b) C:\Windows\system32\drivers\tcpip.sys 00:57:32.0278 4060 Tcpip - ok 00:57:32.0293 4060 Tcpip6 (2756186e287139310997090797e0182b) C:\Windows\system32\DRIVERS\tcpip.sys 00:57:32.0309 4060 Tcpip6 - ok 00:57:32.0418 4060 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys 00:57:32.0418 4060 tcpipreg - ok 00:57:32.0465 4060 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys 00:57:32.0465 4060 TDPIPE - ok 00:57:32.0527 4060 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys 00:57:32.0527 4060 TDTCP - ok 00:57:32.0558 4060 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys 00:57:32.0558 4060 tdx - ok 00:57:32.0605 4060 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys 00:57:32.0605 4060 TermDD - ok 00:57:32.0668 4060 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys 00:57:32.0668 4060 tssecsrv - ok 00:57:32.0699 4060 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys 00:57:32.0699 4060 tunmp - ok 00:57:32.0730 4060 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys 00:57:32.0730 4060 tunnel - ok 00:57:32.0746 4060 uagp35 (c3ade15414120033a36c0f293d4a4121) C:\Windows\system32\drivers\uagp35.sys 00:57:32.0746 4060 uagp35 - ok 00:57:32.0824 4060 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys 00:57:32.0824 4060 udfs - ok 00:57:32.0870 4060 uliagpkx (75e6890ebfce0841d3291b02e7a8bdb0) C:\Windows\system32\drivers\uliagpkx.sys 00:57:32.0870 4060 uliagpkx - ok 00:57:32.0886 4060 uliahci (3cd4ea35a6221b85dcc25daa46313f8d) C:\Windows\system32\drivers\uliahci.sys 00:57:32.0902 4060 uliahci - ok 00:57:32.0933 4060 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys 00:57:32.0933 4060 UlSata - ok 00:57:32.0948 4060 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys 00:57:32.0948 4060 ulsata2 - ok 00:57:33.0011 4060 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys 00:57:33.0011 4060 umbus - ok 00:57:33.0058 4060 UMPass (88bd96a1baeed33ee8bdf9499c07a841) C:\Windows\system32\DRIVERS\umpass.sys 00:57:33.0058 4060 UMPass - ok 00:57:33.0136 4060 USB28xxBGA (56b0b784e0ed3b6a9beb67f63cd6d4a2) C:\Windows\system32\DRIVERS\emBDA.sys 00:57:33.0167 4060 USB28xxBGA - ok 00:57:33.0182 4060 USB28xxOEM (d74634509e22ea69692ea173586db8e6) C:\Windows\system32\DRIVERS\emOEM.sys 00:57:33.0182 4060 USB28xxOEM - ok 00:57:33.0229 4060 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\Windows\system32\Drivers\usbaapl.sys 00:57:33.0229 4060 USBAAPL - ok 00:57:33.0276 4060 usbaudio (32db9517628ff0d070682aab61e688f0) C:\Windows\system32\drivers\usbaudio.sys 00:57:33.0276 4060 usbaudio - ok 00:57:33.0307 4060 usbbus (5353218b3265e3b8190335059f697a11) C:\Windows\system32\DRIVERS\lgusbbus.sys 00:57:33.0307 4060 usbbus - ok 00:57:33.0370 4060 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys 00:57:33.0385 4060 usbccgp - ok 00:57:33.0401 4060 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys 00:57:33.0416 4060 usbcir - ok 00:57:33.0463 4060 UsbDiag (7dd3eefc62a1ef44e5f940fa651ed9ed) C:\Windows\system32\DRIVERS\lgusbdiag.sys 00:57:33.0463 4060 UsbDiag - ok 00:57:33.0494 4060 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys 00:57:33.0494 4060 usbehci - ok 00:57:33.0541 4060 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys 00:57:33.0541 4060 usbhub - ok 00:57:33.0572 4060 USBModem (083031a78822eccbd7510bccd3e20d4c) C:\Windows\system32\DRIVERS\lgusbmodem.sys 00:57:33.0572 4060 USBModem - ok 00:57:33.0588 4060 usbohci (ce697fee0d479290d89bec80dfe793b7) C:\Windows\system32\DRIVERS\usbohci.sys 00:57:33.0588 4060 usbohci - ok 00:57:33.0619 4060 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys 00:57:33.0619 4060 usbprint - ok 00:57:33.0682 4060 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys 00:57:33.0682 4060 usbscan - ok 00:57:33.0697 4060 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS 00:57:33.0697 4060 USBSTOR - ok 00:57:33.0713 4060 usbuhci (325dbbacb8a36af9988ccf40eac228cc) C:\Windows\system32\DRIVERS\usbuhci.sys 00:57:33.0728 4060 usbuhci - ok 00:57:33.0760 4060 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys 00:57:33.0760 4060 vga - ok 00:57:33.0791 4060 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys 00:57:33.0791 4060 VgaSave - ok 00:57:33.0791 4060 viaagp (045d9961e591cf0674a920b6ba3ba5cb) C:\Windows\system32\drivers\viaagp.sys 00:57:33.0806 4060 viaagp - ok 00:57:33.0806 4060 ViaC7 (56a4de5f02f2e88182b0981119b4dd98) C:\Windows\system32\drivers\viac7.sys 00:57:33.0806 4060 ViaC7 - ok 00:57:33.0822 4060 viaide (fd2e3175fcada350c7ab4521dca187ec) C:\Windows\system32\drivers\viaide.sys 00:57:33.0822 4060 viaide - ok 00:57:33.0838 4060 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys 00:57:33.0838 4060 volmgr - ok 00:57:33.0869 4060 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys 00:57:33.0884 4060 volmgrx - ok 00:57:33.0900 4060 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys 00:57:33.0916 4060 volsnap - ok 00:57:33.0947 4060 vsmraid (d984439746d42b30fc65a4c3546c6829) C:\Windows\system32\drivers\vsmraid.sys 00:57:33.0962 4060 vsmraid - ok 00:57:33.0978 4060 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys 00:57:33.0978 4060 WacomPen - ok 00:57:34.0009 4060 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 00:57:34.0009 4060 Wanarp - ok 00:57:34.0040 4060 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 00:57:34.0040 4060 Wanarpv6 - ok 00:57:34.0056 4060 Wd (afc5ad65b991c1e205cf25cfdbf7a6f4) C:\Windows\system32\drivers\wd.sys 00:57:34.0056 4060 Wd - ok 00:57:34.0118 4060 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys 00:57:34.0134 4060 Wdf01000 - ok 00:57:34.0165 4060 winachsf - ok 00:57:34.0274 4060 WinUSB (676f4b665bdd8053eaa53ac1695b8074) C:\Windows\system32\DRIVERS\WinUSB.sys 00:57:34.0274 4060 WinUSB - ok 00:57:34.0306 4060 WmiAcpi (701a9f884a294327e9141d73746ee279) C:\Windows\system32\drivers\wmiacpi.sys 00:57:34.0337 4060 WmiAcpi - ok 00:57:34.0446 4060 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys 00:57:34.0446 4060 WpdUsb - ok 00:57:34.0540 4060 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys 00:57:34.0540 4060 ws2ifsl - ok 00:57:34.0602 4060 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys 00:57:34.0618 4060 WUDFRd - ok 00:57:34.0633 4060 XAudio - ok 00:57:34.0758 4060 xnacc (9eea6d029fef5f3016d089b1a603837d) C:\Windows\system32\DRIVERS\xnacc.sys 00:57:34.0789 4060 xnacc - ok 00:57:34.0867 4060 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0 00:57:34.0883 4060 \Device\Harddisk0\DR0 - ok 00:57:34.0898 4060 Boot (0x1200) (2c24bf4e6bc99448bb211e1987850ccb) \Device\Harddisk0\DR0\Partition0 00:57:34.0898 4060 \Device\Harddisk0\DR0\Partition0 - ok 00:57:34.0898 4060 ============================================================ 00:57:34.0898 4060 Scan finished 00:57:34.0898 4060 ============================================================ 00:57:34.0930 2536 Detected object count: 1 00:57:34.0930 2536 Actual detected object count: 1 00:58:20.0560 2536 sptd ( LockedFile.Multi.Generic ) - skipped by user 00:58:20.0560 2536 sptd ( LockedFile.Multi.Generic ) - User select action: Skip 00:59:41.0252 0228 Deinitialize success Microsoft DiskPart version 6.0.6002 Copyright © 1999-2007 Microsoft Corporation. On computer: NICK-MAINPC Volume ### Ltr Label Fs Type Size Status Info ———- — ———– —– ———- ——- ——— ——– Volume 0 D DVD-ROM 0 B No Media Volume 1 E DVD-ROM 0 B No Media Volume 2 C NTFS Partition 466 GB Healthy System