What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Ping.exe process keeps running - virus?

46 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Had what i think was a virus start putting up "security" windows the other day. Basically took control of my computer. Went into safe mode and ran malewarebytes which did eliminate some items - but now a ping.exe starts and eats up all the processing - sometimes freezing the computer. Can anyone help? I have run DDS as requested. Here is the log: . DDS (Ver_11-03-05.01) - NTFSx86 Run by [removed] at 19:38:35.76 on Mon 12/19/2011 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_21 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.52 [GMT -5:00] . AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33} AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83} FW: McAfee Firewall *Disabled* . ============== Running Processes =============== . C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Office keyboard utility\1.2\nhksrv.exe C:\WINDOWS\System32\svchost.exe -k Akamai C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\System32\drivers\CDAC11BA.EXE C:\WINDOWS\system32\svchost.exe -k hpdevmgmt C:\WINDOWS\system32\svchost.exe -k HPService C:\Program Files\Common Files\Dell\EUSW\Support.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Citrix\ICA Client\concentr.exe C:\Program Files\Verizon\McciTrayApp.exe C:\Program Files\Citrix\ICA Client\wfcrun32.exe C:\Program Files\iTunes\iTunesHelper.exe C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe C:\Program Files\Office keyboard utility\1.2\OFFICEKB.exe C:\Program Files\Browser mouse\1.2\mouse32a.exe C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\Office keyboard utility\1.2\MMKEYB.EXE C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Office keyboard utility\1.2\osd.exe C:\program files\microsoft activesync\wcescomm.exe C:\Documents and Settings\Paul Gunson\Local Settings\Application Data\Akamai\netsession_win.exe C:\Program Files\Plaxo\2.13.1.6\PlaxoHelper.exe C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe C:\Program Files\McAfee\SiteAdvisor\McSACore.exe C:\Documents and Settings\Paul Gunson\Local Settings\Application Data\Akamai\netsession_win.exe C:\Program Files\Common Files\Motive\McciCMService.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe C:\Program Files\Seagate\Seagate Dashboard\MemeoDashboard.exe C:\WINDOWS\system32\mfevtps.exe C:\WINDOWS\System32\svchost.exe -k HPZ12 C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe -k HPZ12 C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe C:\Program Files\Seagate\Seagate Dashboard\SeagateDashboardService.exe C:\Program Files\VERIZONDM\bin\sprtsvc.exe C:\WINDOWS\System32\svchost.exe -k imgsvc C:\Program Files\VERIZONDM\bin\tgsrvc.exe C:\WINDOWS\wanmpsvc.exe C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe C:\Program Files\Seagate\Seagate Dashboard\HipServAgent\HipServAgent.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServer.exe C:\Program Files\McAfee.com\Agent\mcagent.exe C:\WINDOWS\System32\svchost.exe -k HTTPFilter C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\WINDOWS\System32\ping.exe C:\Documents and Settings\Paul Gunson\Desktop\dds.scr . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.wtop.com/ uSearch Page = hxxp://www.google.com uDefault_Page_URL = hxxp://www.dellnet.com uSearch Bar = hxxp://www.google.com/ie uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uInternet Settings,ProxyOverride = 127.0.0.1;*.local uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s mSearchAssistant = hxxp://www.google.com/ie uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\common files\mcafee\systemcore\ScriptSn.20111113112116.dll BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll BHO: {fdd3b846-8d59-4ffb-8758-209b6ad74acc} - c:\program files\microsoft money\system\mnyviewer.dll BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File EB: MoneySide: {9404901d-06da-4b23-a0ee-3ea4f64ec9b3} - c:\program files\microsoft money\system\mnyviewer.dll uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NVMCTRAY.DLL,NvTaskbarInit uRun: [Aim6] uRun: [H/PC Connection Agent] "c:\program files\microsoft activesync\wcescomm.exe" uRun: [Akamai NetSession Interface] c:\documents and settings\paul gunson\local settings\application data\akamai\netsession_win.exe uRun: [PlaxoUpdate] c:\program files\plaxo\2.13.1.6\PlaxoHelper.exe -a uRun: [Advanced SystemCare 5] "c:\program files\iobit\advanced systemcare 5\ASCTray.exe" /AutoStart mRun: [DwlClient] c:\program files\common files\dell\eusw\Support.exe mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [nwiz] nwiz.exe /install mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit mRun: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe mRun: [] mRun: [ConnectionCenter] "c:\program files\citrix\ica client\concentr.exe" /startup mRun: [mcui_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [VERIZONDM] "c:\program files\verizondm\bin\sprtcmd.exe" /P VERIZONDM mRun: [Verizon_McciTrayApp] "c:\program files\verizon\McciTrayApp.exe" mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\AppleSyncNotifier.exe mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe" mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRun: [Motive SmartBridge] c:\progra~1\verizo~1\suppor~1\smartb~1\MotiveSB.exe mRun: [Microsoft Works Update Detection] c:\program files\common files\microsoft shared\works shared\WkUFind.exe mRun: [IPHSend] c:\program files\common files\aol\iphsend\IPHSend.exe mRun: [Iomega Drive Icons] c:\program files\iomega\driveicons\ImgIcon.exe mRun: [HPDJ Taskbar Utility] c:\windows\system32\spool\drivers\w32x86\3\hpztsb04.exe mRun: [HostManager] c:\program files\common files\aol\1146916653\ee\AOLSoftware.exe mRun: [FLMOFFICEKEYBOARD] c:\program files\office keyboard utility\1.2\OFFICEKB.exe mRun: [FLMBROWSERMOUSE] c:\program files\browser mouse\1.2\mouse32a.exe mRun: [Deskup] c:\program files\iomega\driveicons\deskup.exe /IMGSTART mRun: [AdaptecDirectCD] "c:\program files\roxio\easy cd creator 5\directcd\DirectCD.exe" mRun: [Memeo Instant Backup] c:\program files\memeo\autobackup\MemeoLauncher2.exe –silent –no_ui mRun: [Seagate Dashboard] c:\program files\seagate\seagate dashboard\MemeoLauncher.exe –silent –no_ui dRunOnce: [RunNarrator] Narrator.exe StartupFolder: c:\docume~1\paulgu~1\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\americ~1.lnk - c:\program files\america online 7.0\aoltray.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\bodyme~1.lnk - c:\program files\bodymedia\sync\BodyMediaSync.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\eventr~1.lnk - c:\program files\broderbund\printmaster\PMREMIND.EXE StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\logite~1.lnk - c:\program files\logitech\setpoint\SetPoint.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\common files\microsoft shared\works shared\wkcalrem.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\quickb~1.lnk - c:\program files\common files\intuit\quickbooks\qbupdate\qbupdate.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\verizo~1.lnk - c:\program files\verizon online\supportcenter\bin\matcli.exe IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000 IE: LimeShop Preferences - file://c:\program files\limeshop\system\temp\limeshop_script0.htm IE: {28D44DAD-D1FC-4d4f-BB1B-ADF037C8DDBC} - c:\program files\verizon online\verizon online control pad\VerizonControlPad.Exe IE: {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - c:\program files\aim\aim.exe IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\program files\microsoft activesync\INETREPL.DLL IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\program files\microsoft activesync\INETREPL.DLL IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll IE: {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - {301DA1EE-F65C-4188-A417-9E915CC8FBFA} - c:\program files\microsoft money\system\mnyviewer.dll LSP: mswsock.dll Trusted Zone: intuit.com\ttlc Trusted Zone: sec.gov\secret Trusted Zone: sec.gov\secret1 Trusted Zone: sec.gov\secrm Trusted Zone: turbotax.com DPF: DirectAnimation Java Classes - file://c:\windows\java\classes\dajava.cab DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/templates/ieawsdc.cab DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/3/9/8/398422c0-8d3e-40e1-a617-af65a72a0465/LegitCheckControl.cab DPF: {19E28AFC-EAE3-4CE5-AC83-2407B42F57C9} - hxxp://download.microsoft.com/download/0/5/c/05c905f4-dd30-427d-a3de-373c3e5552fc/msSecAdv.cab?1066353427078 DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} - hxxp://www.nick.com/common/groove/gx/GrooveAX.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab DPF: {BA2CB6B1-03EE-4068-87CC-F5E4DD772A9B} - hxxps://secret.sec.gov/CitrixLogonPoint/WI/EPAClient/CitrixCAO.cab DPF: {CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/1.3.1/jinstall-131_04-win.cab DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} DPF: {DF6A0F17-0B1E-11D4-829D-00C04F6843FE} - hxxp://officeupdate.microsoft.com/TemplateGallery/downloads/outc.cab Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\progra~1\mcafee\msc\McSnIePl.dll Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll Handler: intu-help-qb1 - {9B0F96C7-2E4B-433e-ABF3-043BA1B54AE3} - c:\program files\intuit\quickbooks 2006\HelpAsyncPluggableProtocol.dll Handler: mctp - {d7b95390-b1c5-11d0-b111-0080c712fe82} - c:\program files\microsoft activesync\AATP.DLL Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - c:\windows\system32\mscoree.dll Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll WinCE Filter: image/bmp - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} - c:\program files\microsoft activesync\CENETFLT.DLL WinCE Filter: image/gif - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} - c:\program files\microsoft activesync\CENETFLT.DLL WinCE Filter: image/jpeg - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} - c:\program files\microsoft activesync\CENETFLT.DLL WinCE Filter: image/xbm - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} - c:\program files\microsoft activesync\CENETFLT.DLL WinCE Filter: text/asp - {6C5C3074-FFAB-11d1-8EC4-00C04F98D57A} - c:\program files\microsoft activesync\CENETFLT.DLL WinCE Filter: text/html - {6C5C3074-FFAB-11d1-8EC4-00C04F98D57A} - c:\program files\microsoft activesync\CENETFLT.DLL SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll LSA: Notification Packages = :\windows\system32\srrstr.dll cli scecli . ================= FIREFOX =================== . FF - ProfilePath - c:\docume~1\paulgu~1\applic~1\mozilla\firefox\profiles\05qiq3ov.default\ FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.wtop.com/ FF - prefs.js: keyword.URL - hxxp://search.alot.com/web?src_id=30046&client_id=04ec1c6aa82b08578c324f09&camp_id=2988&install_time=2011-09-23T23:54:59Z&pr=auto&tb_version=1.0.10000(G)&q= FF - component: c:\program files\mcafee\siteadvisor\components\McFFPlg.dll FF - component: c:\program files\mozilla firefox\distribution\bundles\{d19ca586-dd6c-4a0a-96f8-14644f340d60}\components\scriptff.dll FF - plugin: c:\documents and settings\paul gunson\application data\move networks\plugins\npqmp071705000014.dll FF - plugin: c:\documents and settings\paul gunson\application data\mozilla\firefox\profiles\05qiq3ov.default\extensions\{195a3098-0bd5-4e90-ae22-ba1c540afd1e}\plugins\npGarmin.dll FF - plugin: c:\progra~1\mcafee\msc\npMcSnFFPl.dll FF - plugin: c:\program files\common files\motive\npMotive.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\mcafee\siteadvisor\NPMcFFPlg32.dll FF - plugin: c:\program files\microsoft silverlight\3.0.40818.0\npctrlui.dll FF - plugin: c:\program files\mozilla firefox\plugins\npCouponPrinter.dll FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll FF - plugin: c:\program files\mozilla firefox\plugins\npicaN.dll FF - plugin: c:\program files\mozilla firefox\plugins\npunagi2.dll FF - plugin: c:\program files\mozilla firefox\plugins\npViewpoint.dll FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Garmin Communicator: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E} - %profile%\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b} FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension FF - Ext: McAfee SiteAdvisor: {4ED1F68A-5463-4931-9384-8FFF5ED91D92} - c:\program files\mcafee\SiteAdvisor FF - Ext: Move Media Player: [removed] - c:\documents and settings\paul gunson\application data\Move Networks . ============= SERVICES / DRIVERS =============== . R0 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2009-5-9 464176] R1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\drivers\ctxusbm.sys [2009-9-8 65584] R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [2010-12-29 89792] R1 msikbd2k;Multimedia Keyboard Filter Driver;c:\windows\system32\drivers\msikbd2k.sys [2003-8-3 6656] R2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files\iobit\advanced systemcare 5\ASCService.exe [2011-12-13 494424] R2 Akamai;Akamai NetSession Interface;c:\windows\system32\svchost.exe -k Akamai [2002-8-29 14336] R2 LBeepKE;LBeepKE;c:\windows\system32\drivers\LBeepKE.sys [2006-9-23 3712] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2009-5-10 94880] R2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2010-12-29 214904] R2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2010-12-29 214904] R2 McProxy;McAfee Proxy Service;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2010-12-29 214904] R2 McShield;McAfee McShield;c:\program files\common files\mcafee\systemcore\mcshield.exe [2010-12-29 166288] R2 MemeoBackgroundService;MemeoBackgroundService;c:\program files\memeo\autobackup\MemeoBackgroundService.exe [2011-5-4 25824] R2 mfefire;McAfee Firewall Core Service;c:\program files\common files\mcafee\systemcore\mfefire.exe [2010-12-29 160608] R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2010-12-29 150856] R2 nhksrv;Netropa NHK Server;c:\program files\office keyboard utility\1.2\NHKSRV.EXE [2003-8-3 28672] R2 SeagateDashboardService;Seagate Dashboard Service;c:\program files\seagate\seagate dashboard\SeagateDashboardService.exe [2011-6-1 14088] R2 sprtsvc_verizondm;SupportSoft Sprocket Service (verizondm);c:\program files\verizondm\bin\sprtsvc.exe [2011-2-1 206120] R2 tgsrvc_verizondm;SupportSoft Repair Service (verizondm);c:\program files\verizondm\bin\tgsrvc.exe [2011-2-1 185640] R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2010-12-29 57600] R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2010-12-29 180816] R3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2010-12-29 338176] R3 mfendiskmp;mfendiskmp;c:\windows\system32\drivers\mfendisk.sys [2010-12-29 83856] S0 Lbd;Lbd;c:\windows\system32\drivers\lbd.sys –> c:\windows\system32\drivers\Lbd.sys [?] S2 IHA_MessageCenter;IHA_MessageCenter;c:\program files\verizon\iha_messagecenter\bin\Verizon_IHAMessageCenter.exe [2010-10-13 151552] S3 jbridgep;jbridgep;\??\c:\docume~1\paulgu~1\locals~1\temp\jbridgep.sys –> c:\docume~1\paulgu~1\locals~1\temp\jbridgep.sys [?] S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\AAWService.exe [2011-6-20 2152152] S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\lavasoft\ad-aware\kernexplorer.sys [2011-6-20 15232] S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\2.0.181\McCHSvc.exe [2010-1-15 227232] S3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2009-5-9 59456] S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\system32\drivers\mfendisk.sys [2010-12-29 83856] S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2010-12-29 87656] S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2009-5-9 34248] S3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2009-5-9 40552] S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2002-8-29 14336] S4 vsdatant;vsdatant; [x] . =============== Created Last 30 ================ . 2068-08-24 18:25:14 375808 —-a-w- c:\program files\microsoft games\halo\binkw32.dll 2011-12-18 18:25:46 2106216 —-a-w- c:\program files\mozilla firefox\D3DCompiler_43.dll 2011-12-18 18:25:46 134104 —-a-w- c:\program files\mozilla firefox\components\browsercomps.dll 2011-12-18 18:25:45 1998168 —-a-w- c:\program files\mozilla firefox\d3dx9_43.dll 2011-12-18 18:25:30 89048 —-a-w- c:\program files\mozilla firefox\libEGL.dll 2011-12-18 18:25:29 478168 —-a-w- c:\program files\mozilla firefox\libGLESv2.dll 2011-12-18 18:25:29 15832 —-a-w- c:\program files\mozilla firefox\mozalloc.dll 2011-12-18 18:25:24 1989592 —-a-w- c:\program files\mozilla firefox\mozjs.dll 2011-12-18 18:25:23 801752 —-a-w- c:\program files\mozilla firefox\mozsqlite3.dll 2011-12-17 18:14:01 ——– d—–w- c:\docume~1\alluse~1\applic~1\WeCareReminder 2011-12-16 01:56:33 ——– d—–w- c:\windows\system32\winrm 2011-12-16 01:56:32 ——– d—–w- c:\windows\system32\GroupPolicy 2011-12-16 01:55:57 ——– dc-h–w- c:\windows\$968930Uinstall_KB968930$ 2011-12-16 01:55:06 ——– d—–w- C:\4ff325f672ef19420c1fd9959d35b578 2011-12-16 01:43:15 20312 —-a-w- c:\windows\system32\RegistryDefragBootTime.exe 2011-12-14 00:50:31 ——– d—–w- c:\docume~1\alluse~1\applic~1\IObit 2011-12-14 00:48:20 ——– d—–w- c:\docume~1\paulgu~1\applic~1\IObit 2011-12-14 00:47:37 ——– d—–w- c:\program files\IObit 2011-12-13 03:33:52 ——– d—–w- c:\docume~1\alluse~1\applic~1\MemeoCommon 2011-12-13 03:17:57 ——– d—–w- c:\docume~1\paulgu~1\applic~1\Memeo 2011-12-13 03:06:41 ——– d—–w- c:\program files\common files\Memeo 2011-12-13 01:34:46 ——– d—–w- c:\windows\system32\wbem\repository\FS 2011-12-13 01:34:46 ——– d—–w- c:\windows\system32\wbem\Repository 2011-12-13 00:25:33 ——– d—–w- c:\docume~1\paulgu~1\applic~1\Seagate 2011-12-13 00:24:30 ——– d—–w- c:\program files\Memeo 2011-12-13 00:24:24 ——– d—–w- c:\docume~1\paulgu~1\locals~1\applic~1\temp 2011-12-13 00:23:52 ——– d—–w- c:\program files\Seagate 2011-12-12 03:17:34 ——– d—–w- C:\7c9a1048e842af9602d120b2b9 . ==================== Find3M ==================== . 2011-12-03 15:51:35 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-11-23 13:25:32 1859584 —-a-w- c:\windows\system32\win32k.sys 2011-11-04 19:20:51 916992 —-a-w- c:\windows\system32\wininet.dll 2011-11-04 19:20:51 43520 —-a-w- c:\windows\system32\licmgr10.dll 2011-11-04 19:20:51 1469440 —-a-w- c:\windows\system32\inetcpl.cpl 2011-11-04 11:23:59 385024 —-a-w- c:\windows\system32\html.iec 2011-11-01 16:07:10 1288704 —-a-w- c:\windows\system32\ole32.dll 2011-10-28 05:31:48 33280 —-a-w- c:\windows\system32\csrsrv.dll 2011-10-25 13:33:08 2192768 —-a-w- c:\windows\system32\ntoskrnl.exe 2011-10-25 12:52:03 2069376 —-a-w- c:\windows\system32\ntkrnlpa.exe 2011-10-18 19:32:30 150856 —-a-w- c:\windows\system32\mfevtps.exe 2011-10-18 11:13:22 186880 —-a-w- c:\windows\system32\encdec.dll 2011-09-28 07:06:50 599040 —-a-w- c:\windows\system32\crypt32.dll 2011-09-26 16:41:20 611328 —-a-w- c:\windows\system32\uiautomationcore.dll 2011-09-26 16:41:20 220160 —-a-w- c:\windows\system32\oleacc.dll 2011-09-26 16:41:14 20480 —-a-w- c:\windows\system32\oleaccrc.dll 2007-08-19 13:00:26 50009400 —-a-w- c:\program files\iTunesSetup.exe . ============= FINISH: 19:41:18.79 =============== and here is attach.txt

Attachments:

Post #2
Hello,
Welcome to WhatTheTech. My name is mowman, and I will be helping you fix your problems.

If you do not make a reply in 3 days, we will have to close your topic.

You may want to keep the link to this topic in your favorites. Alternatively, you can click the Options button at the top bar of this topic and Track this topic. The topics you are tracking can be found by clicking on My Topics at the top of any page.

Please take note of some guidelines for this fix:

•Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. Doing so could cause changes to the directions I have to give you and prolong the time required. Further more, you should not be taking any advice relating to this computer from any other source throughout the course of this fix.
•If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
•Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". We do not want to clean you part-way, only to have the system re-infect itself.
•Please reply using the button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply.
Only attach them if requested or if they do not fit into the post





Please download TDSSKiller.zip
  • Extract it to your desktop
  • Double click TDSSKiller.exe
  • Press Start Scan
    • Only if Malicious objects are found then ensure Cure is selected
      If suspicious objects are found select skip
    • Then click Continue > Reboot now
  • Copy and paste the log in your next reply
    • A copy of the log will be saved automatically to the root of the drive (typically C:\)
















Download ComboFix from one of these locations:

Link 1
Link 2


* IMPORTANT !!! Save ComboFix.exe to your Desktop


  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
  • See this Link for programs that need to be disabled and instruction on how to disable them.
  • Remember to re-enable them when we're done.

  • Double click on ComboFix.exe & follow the prompts.

  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


[external image: Posted Image]



Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

*If there is no internet connection when Combofix has completely finished then restart your computer to restore back the connections.
Post #3
This is the TDSS log 15:57:06.0777 3516 TDSS rootkit removing tool [removed] Dec 13 2011 10:39:31 15:57:08.0777 3516 ============================================================ 15:57:08.0777 3516 Current date / time: 2011/12/20 15:57:08.0777 15:57:08.0777 3516 SystemInfo: 15:57:08.0777 3516 15:57:08.0777 3516 OS Version: 5.1.2600 ServicePack: 3.0 15:57:08.0792 3516 Product type: Workstation 15:57:08.0792 3516 ComputerName: DGY7P321 15:57:08.0792 3516 UserName: Paul Gunson 15:57:08.0792 3516 Windows directory: C:\WINDOWS 15:57:08.0792 3516 System windows directory: C:\WINDOWS 15:57:08.0792 3516 Processor architecture: Intel x86 15:57:08.0792 3516 Number of processors: 1 15:57:08.0792 3516 Page size: 0x1000 15:57:08.0792 3516 Boot type: Normal boot 15:57:08.0792 3516 ============================================================ 15:57:12.0605 3516 Initialize success 15:57:15.0886 5124 ============================================================ 15:57:15.0886 5124 Scan started 15:57:15.0886 5124 Mode: Manual; 15:57:15.0886 5124 ============================================================ 15:57:19.0433 5124 Abiosdsk - ok 15:57:19.0730 5124 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\System32\DRIVERS\ABP480N5.SYS 15:57:19.0730 5124 abp480n5 - ok 15:57:19.0839 5124 ac97intc (0f2d66d5f08ebe2f77bb904288dcf6f0) C:\WINDOWS\system32\drivers\ac97intc.sys 15:57:19.0855 5124 ac97intc - ok 15:57:19.0949 5124 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 15:57:19.0964 5124 ACPI - ok 15:57:20.0042 5124 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 15:57:20.0089 5124 ACPIEC - ok 15:57:20.0183 5124 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\System32\DRIVERS\adpu160m.sys 15:57:20.0183 5124 adpu160m - ok 15:57:20.0277 5124 aeaudio (11c04b17ed2abbb4833694bcd644ac90) C:\WINDOWS\system32\drivers\aeaudio.sys 15:57:20.0277 5124 aeaudio - ok 15:57:20.0339 5124 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 15:57:20.0339 5124 aec - ok 15:57:20.0433 5124 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys 15:57:20.0433 5124 AFD - ok 15:57:20.0542 5124 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys 15:57:20.0542 5124 agp440 - ok 15:57:20.0636 5124 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\System32\DRIVERS\agpCPQ.sys 15:57:20.0636 5124 agpCPQ - ok 15:57:20.0730 5124 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\System32\DRIVERS\aha154x.sys 15:57:20.0730 5124 Aha154x - ok 15:57:20.0855 5124 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\System32\DRIVERS\aic78u2.sys 15:57:20.0870 5124 aic78u2 - ok 15:57:20.0964 5124 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\System32\DRIVERS\aic78xx.sys 15:57:20.0964 5124 aic78xx - ok 15:57:21.0058 5124 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\System32\DRIVERS\aliide.sys 15:57:21.0074 5124 AliIde - ok 15:57:21.0199 5124 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\System32\DRIVERS\alim1541.sys 15:57:21.0199 5124 alim1541 - ok 15:57:21.0292 5124 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\System32\DRIVERS\amdagp.sys 15:57:21.0308 5124 amdagp - ok 15:57:21.0402 5124 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\System32\DRIVERS\amsint.sys 15:57:21.0402 5124 amsint - ok 15:57:21.0495 5124 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\System32\DRIVERS\asc.sys 15:57:21.0495 5124 asc - ok 15:57:21.0589 5124 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\System32\DRIVERS\asc3350p.sys 15:57:21.0589 5124 asc3350p - ok 15:57:21.0683 5124 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\System32\DRIVERS\asc3550.sys 15:57:21.0699 5124 asc3550 - ok 15:57:21.0808 5124 ASPI32 (b979979ab8027f7f53fb16ec4229b7db) C:\WINDOWS\system32\drivers\ASPI32.sys 15:57:21.0949 5124 ASPI32 - ok 15:57:22.0042 5124 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 15:57:22.0042 5124 AsyncMac - ok 15:57:22.0120 5124 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 15:57:22.0120 5124 atapi - ok 15:57:22.0183 5124 Atdisk - ok 15:57:22.0277 5124 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 15:57:22.0277 5124 Atmarpc - ok 15:57:22.0355 5124 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 15:57:22.0355 5124 audstub - ok 15:57:22.0433 5124 basic2 (1b9c81ab9a456eabd9f8335f04b5f495) C:\WINDOWS\system32\DRIVERS\HSF_BSC2.sys 15:57:22.0433 5124 basic2 - ok 15:57:22.0511 5124 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 15:57:22.0511 5124 Beep - ok 15:57:22.0589 5124 bvrp_pci - ok 15:57:22.0667 5124 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\System32\DRIVERS\cbidf2k.sys 15:57:22.0667 5124 cbidf - ok 15:57:22.0761 5124 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 15:57:22.0761 5124 cbidf2k - ok 15:57:22.0886 5124 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\System32\DRIVERS\cd20xrnt.sys 15:57:22.0886 5124 cd20xrnt - ok 15:57:22.0980 5124 CdaC15BA (69419792390122eefd84e598d896715b) C:\WINDOWS\System32\drivers\CdaC15BA.SYS 15:57:22.0980 5124 CdaC15BA - ok 15:57:23.0058 5124 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 15:57:23.0105 5124 Cdaudio - ok 15:57:23.0183 5124 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 15:57:23.0199 5124 Cdfs - ok 15:57:23.0308 5124 Cdr4_xp (8dab8fafd6bbad08d5926871202e4e13) C:\WINDOWS\system32\drivers\Cdr4_xp.sys 15:57:23.0417 5124 Cdr4_xp - ok 15:57:23.0480 5124 Cdralw2k (18eb04a0dfd3ffae2ab736c3c1dfea34) C:\WINDOWS\system32\drivers\Cdralw2k.sys 15:57:23.0652 5124 Cdralw2k - ok 15:57:23.0761 5124 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 15:57:23.0761 5124 Cdrom - ok 15:57:23.0824 5124 cdudf_xp (072070a498d5fad70c3a99a5f0b1331b) C:\WINDOWS\system32\drivers\cdudf_xp.sys 15:57:23.0839 5124 cdudf_xp - ok 15:57:23.0933 5124 cfwids (1dcb5209601a70e36c70fe8d197d62cb) C:\WINDOWS\system32\drivers\cfwids.sys 15:57:24.0058 5124 cfwids - ok 15:57:24.0136 5124 Changer - ok 15:57:24.0230 5124 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\System32\DRIVERS\cmdide.sys 15:57:24.0230 5124 CmdIde - ok 15:57:24.0339 5124 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\System32\DRIVERS\cpqarray.sys 15:57:24.0339 5124 Cpqarray - ok 15:57:24.0433 5124 ctxusbm (cb6ff7012bb5d59d7c12350db795ce1f) C:\WINDOWS\system32\DRIVERS\ctxusbm.sys 15:57:24.0433 5124 ctxusbm - ok 15:57:24.0527 5124 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\System32\DRIVERS\dac2w2k.sys 15:57:24.0527 5124 dac2w2k - ok 15:57:24.0620 5124 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\System32\DRIVERS\dac960nt.sys 15:57:24.0620 5124 dac960nt - ok 15:57:24.0714 5124 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 15:57:24.0730 5124 Disk - ok 15:57:24.0902 5124 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 15:57:24.0917 5124 dmboot - ok 15:57:25.0011 5124 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 15:57:25.0011 5124 dmio - ok 15:57:25.0105 5124 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 15:57:25.0105 5124 dmload - ok 15:57:25.0183 5124 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 15:57:25.0183 5124 DMusic - ok 15:57:25.0292 5124 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\System32\DRIVERS\dpti2o.sys 15:57:25.0292 5124 dpti2o - ok 15:57:25.0355 5124 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 15:57:25.0355 5124 drmkaud - ok 15:57:25.0449 5124 dvd_2K (a3997baab606caa92f27e07bc4f070f0) C:\WINDOWS\system32\drivers\dvd_2K.sys 15:57:25.0605 5124 dvd_2K - ok 15:57:25.0683 5124 E100B (56ab585a307909c4447d5900a10c6bc7) C:\WINDOWS\system32\DRIVERS\e100b325.sys 15:57:25.0699 5124 E100B - ok 15:57:25.0777 5124 EL90XBC (6e883bf518296a40959131c2304af714) C:\WINDOWS\system32\DRIVERS\el90xbc5.sys 15:57:25.0777 5124 EL90XBC - ok 15:57:25.0917 5124 Fallback (c823debe2548656549f84a875d65237b) C:\WINDOWS\system32\DRIVERS\HSF_FALL.sys 15:57:25.0933 5124 Fallback - ok 15:57:26.0011 5124 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 15:57:26.0027 5124 Fastfat - ok 15:57:26.0089 5124 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 15:57:26.0089 5124 Fdc - ok 15:57:26.0214 5124 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 15:57:26.0230 5124 Fips - ok 15:57:26.0324 5124 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys 15:57:26.0324 5124 Flpydisk - ok 15:57:26.0402 5124 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 15:57:26.0402 5124 FltMgr - ok 15:57:26.0480 5124 Fsks (6483414841d4cab6c3b4db2ac6edd70b) C:\WINDOWS\system32\DRIVERS\HSF_FSKS.sys 15:57:26.0480 5124 Fsks - ok 15:57:26.0542 5124 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 15:57:26.0558 5124 Fs_Rec - ok 15:57:26.0667 5124 FTDIBUS (a36e8beedb3aaca09bf55a1d17904bc8) C:\WINDOWS\system32\drivers\ftdibus.sys 15:57:26.0667 5124 FTDIBUS - ok 15:57:26.0745 5124 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 15:57:26.0761 5124 Ftdisk - ok 15:57:26.0886 5124 FTSER2K (a14a1f4bb391df9c233cb5dbd05feb70) C:\WINDOWS\system32\drivers\ftser2k.sys 15:57:26.0886 5124 FTSER2K - ok 15:57:26.0980 5124 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys 15:57:26.0995 5124 GEARAspiWDM - ok 15:57:27.0074 5124 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 15:57:27.0074 5124 Gpc - ok 15:57:27.0167 5124 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 15:57:27.0167 5124 HidUsb - ok 15:57:27.0261 5124 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\System32\DRIVERS\hpn.sys 15:57:27.0261 5124 hpn - ok 15:57:27.0370 5124 HPZid412 (d03d10f7ded688fecf50f8fbf1ea9b8a) C:\WINDOWS\system32\DRIVERS\HPZid412.sys 15:57:27.0370 5124 HPZid412 - ok 15:57:27.0449 5124 HPZipr12 (89f41658929393487b6b7d13c8528ce3) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys 15:57:27.0449 5124 HPZipr12 - ok 15:57:27.0527 5124 HPZius12 (abcb05ccdbf03000354b9553820e39f8) C:\WINDOWS\system32\DRIVERS\HPZius12.sys 15:57:27.0542 5124 HPZius12 - ok 15:57:27.0620 5124 HSFHWBS2 (95b894b508db03507b61fe213ef6fe19) C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys 15:57:27.0620 5124 HSFHWBS2 - ok 15:57:27.0745 5124 HSF_DP (f66402179ca2b2ae68493103db5fa48c) C:\WINDOWS\system32\DRIVERS\HSF_DP.sys 15:57:27.0808 5124 HSF_DP - ok 15:57:27.0933 5124 hsf_msft (74e379857d4c0dfb56de2d19b8f4c434) C:\WINDOWS\system32\DRIVERS\HSF_MSFT.sys 15:57:27.0949 5124 hsf_msft - ok 15:57:28.0058 5124 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 15:57:28.0074 5124 HTTP - ok 15:57:28.0152 5124 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys 15:57:28.0199 5124 i2omgmt - ok 15:57:28.0292 5124 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\System32\DRIVERS\i2omp.sys 15:57:28.0292 5124 i2omp - ok 15:57:28.0370 5124 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 15:57:28.0370 5124 i8042prt - ok 15:57:28.0464 5124 i81x (06b7ef73ba5f302eecc294cdf7e19702) C:\WINDOWS\system32\DRIVERS\i81xnt5.sys 15:57:28.0480 5124 i81x - ok 15:57:28.0574 5124 iAimFP0 (7b5b44efe5eb9dadfb8ee29700885d23) C:\WINDOWS\system32\DRIVERS\wADV01nt.sys 15:57:28.0574 5124 iAimFP0 - ok 15:57:28.0683 5124 iAimFP1 (eb1f6bab6c22ede0ba551b527475f7e9) C:\WINDOWS\system32\DRIVERS\wADV02NT.sys 15:57:28.0683 5124 iAimFP1 - ok 15:57:28.0777 5124 iAimFP2 (03ce989d846c1aa81145cb22fcb86d06) C:\WINDOWS\system32\DRIVERS\wADV05NT.sys 15:57:28.0777 5124 iAimFP2 - ok 15:57:28.0886 5124 iAimFP3 (525849b4469de021d5d61b4db9be3a9d) C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys 15:57:28.0886 5124 iAimFP3 - ok 15:57:28.0980 5124 iAimFP4 (589c2bcdb5bd602bf7b63d210407ef8c) C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys 15:57:28.0995 5124 iAimFP4 - ok 15:57:29.0089 5124 iAimTV0 (d83bdd5c059667a2f647a6be5703a4d2) C:\WINDOWS\system32\DRIVERS\wATV01nt.sys 15:57:29.0089 5124 iAimTV0 - ok 15:57:29.0167 5124 iAimTV1 (ed968d23354daa0d7c621580c012a1f6) C:\WINDOWS\system32\DRIVERS\wATV02NT.sys 15:57:29.0167 5124 iAimTV1 - ok 15:57:29.0245 5124 iAimTV2 - ok 15:57:29.0324 5124 iAimTV3 (d738273f218a224c1ddac04203f27a84) C:\WINDOWS\system32\DRIVERS\wATV04nt.sys 15:57:29.0324 5124 iAimTV3 - ok 15:57:29.0402 5124 iAimTV4 (0052d118995cbab152daabe6106d1442) C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys 15:57:29.0402 5124 iAimTV4 - ok 15:57:29.0495 5124 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 15:57:29.0495 5124 Imapi - ok 15:57:29.0589 5124 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\System32\DRIVERS\ini910u.sys 15:57:29.0589 5124 ini910u - ok 15:57:29.0683 5124 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys 15:57:29.0683 5124 IntelIde - ok 15:57:29.0824 5124 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys 15:57:29.0824 5124 intelppm - ok 15:57:29.0933 5124 iomdisk (9d7069d72c0c72952f05e1688a5ae89d) C:\WINDOWS\system32\DRIVERS\iomdisk.sys 15:57:29.0933 5124 iomdisk - ok 15:57:30.0042 5124 ip6fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 15:57:30.0042 5124 ip6fw - ok 15:57:30.0152 5124 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 15:57:30.0152 5124 IpFilterDriver - ok 15:57:30.0245 5124 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 15:57:30.0245 5124 IpInIp - ok 15:57:30.0324 5124 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 15:57:30.0339 5124 IpNat - ok 15:57:30.0417 5124 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 15:57:30.0417 5124 IPSec - ok 15:57:30.0480 5124 IPVNMon - ok 15:57:30.0558 5124 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 15:57:30.0574 5124 IRENUM - ok 15:57:30.0652 5124 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 15:57:30.0652 5124 isapnp - ok 15:57:30.0777 5124 jbridgep - ok 15:57:30.0902 5124 K56 (9c5e3fdbfcc30cf71a49ca178b9ad442) C:\WINDOWS\system32\DRIVERS\HSF_K56K.sys 15:57:30.0933 5124 K56 - ok 15:57:31.0027 5124 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 15:57:31.0027 5124 Kbdclass - ok 15:57:31.0105 5124 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys 15:57:31.0105 5124 kbdhid - ok 15:57:31.0214 5124 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 15:57:31.0230 5124 kmixer - ok 15:57:31.0324 5124 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 15:57:31.0324 5124 KSecDD - ok 15:57:31.0417 5124 L8042Kbd (e141ab3701ea166109212dca4b28ca2c) C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys 15:57:31.0417 5124 L8042Kbd - ok 15:57:31.0511 5124 L8042mou (f0f944e4da9a75dee6a37d4afc7e1bbc) C:\WINDOWS\system32\DRIVERS\L8042mou.Sys 15:57:31.0511 5124 L8042mou - ok 15:57:31.0605 5124 Lavasoft Kernexplorer (6c4a3804510ad8e0f0c07b5be3d44ddb) C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys 15:57:31.0605 5124 Lavasoft Kernexplorer - ok 15:57:31.0683 5124 Lbd - ok 15:57:31.0824 5124 LBeepKE (ac3b39817bfde9735f5654468dbf7d49) C:\WINDOWS\system32\Drivers\LBeepKE.sys 15:57:31.0824 5124 LBeepKE - ok 15:57:31.0917 5124 lbrtfdc - ok 15:57:32.0011 5124 LHidKe (dd40c03d85649205ec086722474c8a63) C:\WINDOWS\system32\DRIVERS\LHidKE.Sys 15:57:32.0011 5124 LHidKe - ok 15:57:32.0089 5124 LHidUsbK (9ffc80e9cb4acc844e5b3cf2fa8ce1ec) C:\WINDOWS\system32\Drivers\LHidUsbK.Sys 15:57:32.0089 5124 LHidUsbK - ok 15:57:32.0167 5124 LMouKE (2ebd4c02d259944869630a912ec86bce) C:\WINDOWS\system32\DRIVERS\LMouKE.Sys 15:57:32.0167 5124 LMouKE - ok 15:57:32.0230 5124 LUsbKbd (0e73e26572bbd0c40bf492806fd8106c) C:\WINDOWS\system32\Drivers\LUsbKbd.Sys 15:57:32.0230 5124 LUsbKbd - ok 15:57:32.0402 5124 mdmxsdk (a1e9d936eac07ee9386e87bac1377fad) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys 15:57:32.0402 5124 mdmxsdk - ok 15:57:32.0511 5124 mfeapfk (36b47b1e9c537f8f2b4481084b8f7d22) C:\WINDOWS\system32\drivers\mfeapfk.sys 15:57:32.0745 5124 mfeapfk - ok 15:57:32.0902 5124 mfeavfk (cde41293db871a75cd99eb0ce781356b) C:\WINDOWS\system32\drivers\mfeavfk.sys 15:57:33.0089 5124 mfeavfk - ok 15:57:33.0167 5124 mfeavfk01 - ok 15:57:33.0245 5124 mfebopk (e22385f64bdf0ad81157479496e33c4a) C:\WINDOWS\system32\drivers\mfebopk.sys 15:57:33.0402 5124 mfebopk - ok 15:57:33.0511 5124 mfefirek (215666a8a85023ef019b510cbb67f678) C:\WINDOWS\system32\drivers\mfefirek.sys 15:57:33.0542 5124 mfefirek - ok 15:57:33.0652 5124 mfehidk (56d330981866a72f061dd16cc5004513) C:\WINDOWS\system32\drivers\mfehidk.sys 15:57:33.0667 5124 mfehidk - ok 15:57:33.0808 5124 mfendisk (62acda4e958e2a392557ba3c6c754a58) C:\WINDOWS\system32\DRIVERS\mfendisk.sys 15:57:33.0808 5124 mfendisk - ok 15:57:33.0824 5124 mfendiskmp (62acda4e958e2a392557ba3c6c754a58) C:\WINDOWS\system32\DRIVERS\mfendisk.sys 15:57:33.0824 5124 mfendiskmp - ok 15:57:33.0995 5124 mferkdet (89b564d63c53fc0c6782ab07eea63acf) C:\WINDOWS\system32\drivers\mferkdet.sys 15:57:34.0011 5124 mferkdet - ok 15:57:34.0136 5124 mferkdk (41fe2f288e05a6c8ab85dd56770ffbad) C:\WINDOWS\system32\drivers\mferkdk.sys 15:57:34.0136 5124 mferkdk - ok 15:57:34.0230 5124 mfesmfk (096b52ea918aa909ba5903d79e129005) C:\WINDOWS\system32\drivers\mfesmfk.sys 15:57:34.0245 5124 mfesmfk - ok 15:57:34.0324 5124 mfetdi2k (922e64ca38e38106498fb3435a8e399d) C:\WINDOWS\system32\drivers\mfetdi2k.sys 15:57:34.0339 5124 mfetdi2k - ok 15:57:34.0449 5124 mmc_2K (e97e3fe03b6f271336cb2fbb24734989) C:\WINDOWS\system32\drivers\mmc_2K.sys 15:57:34.0589 5124 mmc_2K - ok 15:57:34.0667 5124 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 15:57:34.0714 5124 mnmdd - ok 15:57:34.0839 5124 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 15:57:34.0902 5124 Modem - ok 15:57:34.0995 5124 MODEMCSA (1992e0d143b09653ab0f9c5e04b0fd65) C:\WINDOWS\system32\drivers\MODEMCSA.sys 15:57:34.0995 5124 MODEMCSA - ok 15:57:35.0120 5124 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 15:57:35.0136 5124 Mouclass - ok 15:57:35.0230 5124 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys 15:57:35.0230 5124 mouhid - ok 15:57:35.0339 5124 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 15:57:35.0339 5124 MountMgr - ok 15:57:35.0417 5124 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\System32\DRIVERS\mraid35x.sys 15:57:35.0417 5124 mraid35x - ok 15:57:35.0527 5124 MREMP50 (9bd4dcb5412921864a7aacdedfbd1923) C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS 15:57:35.0542 5124 MREMP50 - ok 15:57:35.0542 5124 MREMPR5 - ok 15:57:35.0558 5124 MRENDIS5 - ok 15:57:35.0589 5124 MRESP50 (07c02c892e8e1a72d6bf35004f0e9c5e) C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS 15:57:35.0589 5124 MRESP50 - ok 15:57:35.0667 5124 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 15:57:35.0683 5124 MRxDAV - ok 15:57:35.0777 5124 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 15:57:35.0808 5124 MRxSmb - ok 15:57:35.0933 5124 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 15:57:35.0933 5124 Msfs - ok 15:57:36.0011 5124 msikbd2k (9b99b04c28ccd19741dbbed64480195c) C:\WINDOWS\system32\DRIVERS\msikbd2k.sys 15:57:36.0011 5124 msikbd2k - ok 15:57:36.0105 5124 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 15:57:36.0105 5124 MSKSSRV - ok 15:57:36.0214 5124 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 15:57:36.0214 5124 MSPCLOCK - ok 15:57:36.0339 5124 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 15:57:36.0339 5124 MSPQM - ok 15:57:36.0433 5124 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 15:57:36.0433 5124 mssmbios - ok 15:57:36.0511 5124 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys 15:57:36.0511 5124 Mup - ok 15:57:36.0605 5124 MxlW2k (19dd5c581eef70134ccef87d626f4417) C:\WINDOWS\system32\drivers\MxlW2k.sys 15:57:36.0761 5124 MxlW2k - ok 15:57:36.0902 5124 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 15:57:36.0902 5124 NDIS - ok 15:57:36.0964 5124 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 15:57:36.0964 5124 NdisTapi - ok 15:57:37.0042 5124 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 15:57:37.0042 5124 Ndisuio - ok 15:57:37.0105 5124 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 15:57:37.0105 5124 NdisWan - ok 15:57:37.0167 5124 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys 15:57:37.0324 5124 NDProxy - ok 15:57:37.0402 5124 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 15:57:37.0402 5124 NetBIOS - ok 15:57:37.0480 5124 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 15:57:37.0480 5124 NetBT - ok 15:57:37.0605 5124 NMSCFG (847d6d775524fa5e58d851ddec566a12) C:\WINDOWS\System32\drivers\NMSCFG.SYS 15:57:37.0605 5124 NMSCFG - ok 15:57:37.0699 5124 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 15:57:37.0699 5124 Npfs - ok 15:57:37.0824 5124 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 15:57:37.0855 5124 Ntfs - ok 15:57:37.0933 5124 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 15:57:37.0949 5124 Null - ok 15:57:38.0089 5124 nv (71dbdc08df86b80511e72953fa1ad6b0) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 15:57:38.0136 5124 nv - ok 15:57:38.0230 5124 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 15:57:38.0230 5124 NwlnkFlt - ok 15:57:38.0324 5124 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 15:57:38.0339 5124 NwlnkFwd - ok 15:57:38.0417 5124 omci (1d98907d80461371437a7c898c58c8ae) C:\WINDOWS\system32\DRIVERS\omci.sys 15:57:38.0417 5124 omci - ok 15:57:38.0495 5124 P3 (c90018bafdc7098619a4a95b046b30f3) C:\WINDOWS\system32\DRIVERS\p3.sys 15:57:38.0495 5124 P3 - ok 15:57:38.0558 5124 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 15:57:38.0574 5124 Parport - ok 15:57:38.0636 5124 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 15:57:38.0636 5124 PartMgr - ok 15:57:38.0730 5124 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 15:57:38.0761 5124 ParVdm - ok 15:57:38.0870 5124 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 15:57:38.0870 5124 PCI - ok 15:57:38.0995 5124 PCIDump - ok 15:57:39.0074 5124 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\System32\DRIVERS\pciide.sys 15:57:39.0074 5124 PCIIde - ok 15:57:39.0167 5124 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 15:57:39.0214 5124 Pcmcia - ok 15:57:39.0292 5124 PDCOMP - ok 15:57:39.0370 5124 PDFRAME - ok 15:57:39.0433 5124 PDRELI - ok 15:57:39.0495 5124 PDRFRAME - ok 15:57:39.0652 5124 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\System32\DRIVERS\perc2.sys 15:57:39.0652 5124 perc2 - ok 15:57:39.0761 5124 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\System32\DRIVERS\perc2hib.sys 15:57:39.0761 5124 perc2hib - ok 15:57:39.0902 5124 ppa3 (c740d0cb238670629af1b740414a8f3c) C:\WINDOWS\system32\DRIVERS\ppa3.sys 15:57:39.0902 5124 ppa3 - ok 15:57:39.0980 5124 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 15:57:39.0995 5124 PptpMiniport - ok 15:57:40.0058 5124 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys 15:57:40.0074 5124 Processor - ok 15:57:40.0199 5124 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 15:57:40.0214 5124 PSched - ok 15:57:40.0277 5124 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 15:57:40.0277 5124 Ptilink - ok 15:57:40.0386 5124 pwd_2k (070eddd0e4a5be55dd590d8b30dbff22) C:\WINDOWS\system32\drivers\pwd_2k.sys 15:57:40.0558 5124 pwd_2k - ok 15:57:40.0683 5124 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\System32\DRIVERS\ql1080.sys 15:57:40.0699 5124 ql1080 - ok 15:57:40.0808 5124 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\System32\DRIVERS\ql10wnt.sys 15:57:40.0808 5124 Ql10wnt - ok 15:57:40.0917 5124 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\System32\DRIVERS\ql12160.sys 15:57:40.0917 5124 ql12160 - ok 15:57:41.0011 5124 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\System32\DRIVERS\ql1240.sys 15:57:41.0011 5124 ql1240 - ok 15:57:41.0105 5124 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\System32\DRIVERS\ql1280.sys 15:57:41.0105 5124 ql1280 - ok 15:57:41.0214 5124 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 15:57:41.0214 5124 RasAcd - ok 15:57:41.0417 5124 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 15:57:41.0433 5124 Rasl2tp - ok 15:57:41.0480 5124 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 15:57:41.0495 5124 RasPppoe - ok 15:57:41.0558 5124 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 15:57:41.0558 5124 Raspti - ok 15:57:41.0917 5124 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 15:57:41.0964 5124 Rdbss - ok 15:57:42.0042 5124 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 15:57:42.0042 5124 RDPCDD - ok 15:57:42.0120 5124 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 15:57:42.0136 5124 rdpdr - ok 15:57:42.0230 5124 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys 15:57:42.0527 5124 RDPWD - ok 15:57:42.0605 5124 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 15:57:42.0605 5124 redbook - ok 15:57:42.0714 5124 Rksample (bb7549bd94d1aac3599c7606c50c48a0) C:\WINDOWS\system32\DRIVERS\HSF_SAMP.sys 15:57:42.0714 5124 Rksample - ok 15:57:42.0855 5124 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 15:57:42.0855 5124 Secdrv - ok 15:57:42.0949 5124 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 15:57:42.0949 5124 serenum - ok 15:57:43.0011 5124 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 15:57:43.0027 5124 Serial - ok 15:57:43.0120 5124 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\DRIVERS\sfloppy.sys 15:57:43.0120 5124 Sfloppy - ok 15:57:43.0199 5124 Simbad - ok 15:57:43.0277 5124 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\System32\DRIVERS\sisagp.sys 15:57:43.0277 5124 sisagp - ok 15:57:43.0370 5124 smwdm (8583e3dc5285eb3ddfb74fb646cdf295) C:\WINDOWS\system32\drivers\smwdm.sys 15:57:43.0386 5124 smwdm - ok 15:57:43.0449 5124 SoftFax (d9e8e0ce154a2f6430d9efabdf730867) C:\WINDOWS\system32\DRIVERS\HSF_FAXX.sys 15:57:43.0464 5124 SoftFax - ok 15:57:43.0542 5124 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\System32\DRIVERS\sparrow.sys 15:57:43.0542 5124 Sparrow - ok 15:57:43.0636 5124 SpeakerPhone (6c843c43fd7f0b42cfe477ce88d0f9b3) C:\WINDOWS\system32\DRIVERS\HSF_SPKP.sys 15:57:43.0636 5124 SpeakerPhone - ok 15:57:43.0714 5124 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 15:57:43.0714 5124 splitter - ok 15:57:43.0855 5124 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 15:57:43.0855 5124 sr - ok 15:57:43.0933 5124 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys 15:57:43.0964 5124 Srv - ok 15:57:44.0042 5124 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 15:57:44.0042 5124 swenum - ok 15:57:44.0105 5124 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 15:57:44.0105 5124 swmidi - ok 15:57:44.0183 5124 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\System32\DRIVERS\symc810.sys 15:57:44.0183 5124 symc810 - ok 15:57:44.0292 5124 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\System32\DRIVERS\symc8xx.sys 15:57:44.0292 5124 symc8xx - ok 15:57:44.0386 5124 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\System32\DRIVERS\sym_hi.sys 15:57:44.0386 5124 sym_hi - ok 15:57:44.0480 5124 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\System32\DRIVERS\sym_u3.sys 15:57:44.0480 5124 sym_u3 - ok 15:57:44.0558 5124 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 15:57:44.0558 5124 sysaudio - ok 15:57:44.0652 5124 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys 15:57:44.0683 5124 Tcpip - ok 15:57:44.0761 5124 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 15:57:44.0808 5124 TDPIPE - ok 15:57:44.0917 5124 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 15:57:44.0964 5124 TDTCP - ok 15:57:45.0042 5124 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 15:57:45.0042 5124 TermDD - ok 15:57:45.0152 5124 Tones (8021a499db46b2961c285168671cb9af) C:\WINDOWS\system32\DRIVERS\HSF_TONE.sys 15:57:45.0152 5124 Tones - ok 15:57:45.0261 5124 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\System32\DRIVERS\toside.sys 15:57:45.0261 5124 TosIde - ok 15:57:45.0386 5124 UdfReadr_xp (27e66e79fd742c107fdb23280e17d869) C:\WINDOWS\system32\drivers\UdfReadr_xp.sys 15:57:45.0386 5124 UdfReadr_xp - ok 15:57:45.0464 5124 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 15:57:45.0495 5124 Udfs - ok 15:57:45.0605 5124 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\System32\DRIVERS\ultra.sys 15:57:45.0620 5124 ultra - ok 15:57:45.0714 5124 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 15:57:45.0761 5124 Update - ok 15:57:45.0949 5124 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys 15:57:45.0949 5124 USBAAPL - ok 15:57:46.0074 5124 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys 15:57:46.0074 5124 usbaudio - ok 15:57:46.0214 5124 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 15:57:46.0214 5124 usbccgp - ok 15:57:46.0339 5124 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 15:57:46.0339 5124 usbehci - ok 15:57:46.0402 5124 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 15:57:46.0402 5124 usbhub - ok 15:57:46.0464 5124 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys 15:57:46.0480 5124 usbprint - ok 15:57:46.0558 5124 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys 15:57:46.0574 5124 usbscan - ok 15:57:46.0636 5124 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 15:57:46.0636 5124 USBSTOR - ok 15:57:46.0730 5124 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 15:57:46.0730 5124 usbuhci - ok 15:57:46.0870 5124 V124 (269c0ade94b90029b12497747be408cb) C:\WINDOWS\system32\DRIVERS\HSF_V124.sys 15:57:46.0886 5124 V124 - ok 15:57:46.0964 5124 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 15:57:46.0964 5124 VgaSave - ok 15:57:47.0042 5124 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\System32\DRIVERS\viaagp.sys 15:57:47.0042 5124 viaagp - ok 15:57:47.0136 5124 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\System32\DRIVERS\viaide.sys 15:57:47.0136 5124 ViaIde - ok 15:57:47.0230 5124 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 15:57:47.0230 5124 VolSnap - ok 15:57:47.0292 5124 vsdatant - ok 15:57:47.0370 5124 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 15:57:47.0370 5124 Wanarp - ok 15:57:47.0449 5124 wanatw (ba1d9278448cb26152a18b6a06b61ea3) C:\WINDOWS\system32\DRIVERS\wanatw4.sys 15:57:47.0449 5124 wanatw - ok 15:57:47.0542 5124 wceusbsh (56242d5be3bfc8f2a212e6d1f9a16697) C:\WINDOWS\system32\DRIVERS\wceusbsh.sys 15:57:47.0542 5124 wceusbsh - ok 15:57:47.0620 5124 WDICA - ok 15:57:47.0699 5124 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 15:57:47.0699 5124 wdmaud - ok 15:57:47.0824 5124 winachsf (fe71b3857bed54600e02288b212e7b7c) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys 15:57:47.0870 5124 winachsf - ok 15:57:48.0011 5124 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys 15:57:48.0011 5124 WpdUsb - ok 15:57:48.0120 5124 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 15:57:48.0120 5124 WS2IFSL - ok 15:57:48.0214 5124 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 15:57:48.0214 5124 WudfPf - ok 15:57:48.0292 5124 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 15:57:48.0292 5124 WudfRd - ok 15:57:48.0324 5124 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0 15:57:48.0417 5124 \Device\Harddisk0\DR0 - ok 15:57:48.0417 5124 Boot (0x1200) (8955248291a0d7a75f2565cf964251fc) \Device\Harddisk0\DR0\Partition0 15:57:48.0417 5124 \Device\Harddisk0\DR0\Partition0 - ok 15:57:48.0417 5124 ============================================================ 15:57:48.0417 5124 Scan finished 15:57:48.0417 5124 ============================================================ 15:57:48.0433 1448 Detected object count: 0 15:57:48.0433 1448 Actual detected object count: 0 15:59:05.0089 5964 ============================================================ 15:59:05.0089 5964 Scan started 15:59:05.0089 5964 Mode: Manual; 15:59:05.0089 5964 ============================================================ 15:59:05.0636 5964 Abiosdsk - ok 15:59:05.0745 5964 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\System32\DRIVERS\ABP480N5.SYS 15:59:05.0745 5964 abp480n5 - ok 15:59:05.0824 5964 ac97intc (0f2d66d5f08ebe2f77bb904288dcf6f0) C:\WINDOWS\system32\drivers\ac97intc.sys 15:59:05.0839 5964 ac97intc - ok 15:59:05.0933 5964 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 15:59:05.0933 5964 ACPI - ok 15:59:06.0027 5964 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 15:59:06.0027 5964 ACPIEC - ok 15:59:06.0120 5964 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\System32\DRIVERS\adpu160m.sys 15:59:06.0120 5964 adpu160m - ok 15:59:06.0245 5964 aeaudio (11c04b17ed2abbb4833694bcd644ac90) C:\WINDOWS\system32\drivers\aeaudio.sys 15:59:06.0245 5964 aeaudio - ok 15:59:06.0324 5964 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 15:59:06.0324 5964 aec - ok 15:59:06.0386 5964 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys 15:59:06.0402 5964 AFD - ok 15:59:06.0449 5964 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys 15:59:06.0449 5964 agp440 - ok 15:59:06.0636 5964 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\System32\DRIVERS\agpCPQ.sys 15:59:06.0636 5964 agpCPQ - ok 15:59:06.0761 5964 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\System32\DRIVERS\aha154x.sys 15:59:06.0761 5964 Aha154x - ok 15:59:06.0917 5964 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\System32\DRIVERS\aic78u2.sys 15:59:06.0933 5964 aic78u2 - ok 15:59:07.0027 5964 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\System32\DRIVERS\aic78xx.sys 15:59:07.0027 5964 aic78xx - ok 15:59:07.0120 5964 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\System32\DRIVERS\aliide.sys 15:59:07.0136 5964 AliIde - ok 15:59:07.0214 5964 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\System32\DRIVERS\alim1541.sys 15:59:07.0214 5964 alim1541 - ok 15:59:07.0308 5964 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\System32\DRIVERS\amdagp.sys 15:59:07.0308 5964 amdagp - ok 15:59:07.0402 5964 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\System32\DRIVERS\amsint.sys 15:59:07.0402 5964 amsint - ok 15:59:07.0558 5964 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\System32\DRIVERS\asc.sys 15:59:07.0558 5964 asc - ok 15:59:07.0683 5964 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\System32\DRIVERS\asc3350p.sys 15:59:07.0683 5964 asc3350p - ok 15:59:07.0808 5964 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\System32\DRIVERS\asc3550.sys 15:59:07.0808 5964 asc3550 - ok 15:59:07.0917 5964 ASPI32 (b979979ab8027f7f53fb16ec4229b7db) C:\WINDOWS\system32\drivers\ASPI32.sys 15:59:07.0917 5964 ASPI32 - ok 15:59:08.0011 5964 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 15:59:08.0011 5964 AsyncMac - ok 15:59:08.0089 5964 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 15:59:08.0089 5964 atapi - ok 15:59:08.0152 5964 Atdisk - ok 15:59:08.0230 5964 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 15:59:08.0230 5964 Atmarpc - ok 15:59:08.0370 5964 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 15:59:08.0370 5964 audstub - ok 15:59:08.0449 5964 basic2 (1b9c81ab9a456eabd9f8335f04b5f495) C:\WINDOWS\system32\DRIVERS\HSF_BSC2.sys 15:59:08.0449 5964 basic2 - ok 15:59:08.0589 5964 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 15:59:08.0589 5964 Beep - ok 15:59:08.0714 5964 bvrp_pci - ok 15:59:08.0792 5964 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\System32\DRIVERS\cbidf2k.sys 15:59:08.0792 5964 cbidf - ok 15:59:08.0870 5964 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 15:59:08.0870 5964 cbidf2k - ok 15:59:08.0949 5964 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\System32\DRIVERS\cd20xrnt.sys 15:59:08.0949 5964 cd20xrnt - ok 15:59:09.0042 5964 CdaC15BA (69419792390122eefd84e598d896715b) C:\WINDOWS\System32\drivers\CdaC15BA.SYS 15:59:09.0042 5964 CdaC15BA - ok 15:59:09.0105 5964 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 15:59:09.0105 5964 Cdaudio - ok 15:59:09.0183 5964 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 15:59:09.0183 5964 Cdfs - ok 15:59:09.0292 5964 Cdr4_xp (8dab8fafd6bbad08d5926871202e4e13) C:\WINDOWS\system32\drivers\Cdr4_xp.sys 15:59:09.0292 5964 Cdr4_xp - ok 15:59:09.0355 5964 Cdralw2k (18eb04a0dfd3ffae2ab736c3c1dfea34) C:\WINDOWS\system32\drivers\Cdralw2k.sys 15:59:09.0355 5964 Cdralw2k - ok 15:59:09.0433 5964 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 15:59:09.0433 5964 Cdrom - ok 15:59:09.0511 5964 cdudf_xp (072070a498d5fad70c3a99a5f0b1331b) C:\WINDOWS\system32\drivers\cdudf_xp.sys 15:59:09.0511 5964 cdudf_xp - ok 15:59:09.0589 5964 cfwids (1dcb5209601a70e36c70fe8d197d62cb) C:\WINDOWS\system32\drivers\cfwids.sys 15:59:09.0589 5964 cfwids - ok 15:59:09.0683 5964 Changer - ok 15:59:09.0777 5964 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\System32\DRIVERS\cmdide.sys 15:59:09.0777 5964 CmdIde - ok 15:59:09.0917 5964 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\System32\DRIVERS\cpqarray.sys 15:59:09.0917 5964 Cpqarray - ok 15:59:10.0011 5964 ctxusbm (cb6ff7012bb5d59d7c12350db795ce1f) C:\WINDOWS\system32\DRIVERS\ctxusbm.sys 15:59:10.0011 5964 ctxusbm - ok 15:59:10.0105 5964 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\System32\DRIVERS\dac2w2k.sys 15:59:10.0105 5964 dac2w2k - ok 15:59:10.0370 5964 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\System32\DRIVERS\dac960nt.sys 15:59:10.0370 5964 dac960nt - ok 15:59:10.0480 5964 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 15:59:10.0480 5964 Disk - ok 15:59:10.0589 5964 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 15:59:10.0589 5964 dmboot - ok 15:59:10.0699 5964 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 15:59:10.0699 5964 dmio - ok 15:59:10.0792 5964 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 15:59:10.0792 5964 dmload - ok 15:59:10.0886 5964 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 15:59:10.0886 5964 DMusic - ok 15:59:10.0980 5964 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\System32\DRIVERS\dpti2o.sys 15:59:10.0980 5964 dpti2o - ok 15:59:11.0042 5964 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 15:59:11.0042 5964 drmkaud - ok 15:59:11.0136 5964 dvd_2K (a3997baab606caa92f27e07bc4f070f0) C:\WINDOWS\system32\drivers\dvd_2K.sys 15:59:11.0136 5964 dvd_2K - ok 15:59:11.0230 5964 E100B (56ab585a307909c4447d5900a10c6bc7) C:\WINDOWS\system32\DRIVERS\e100b325.sys 15:59:11.0230 5964 E100B - ok 15:59:11.0324 5964 EL90XBC (6e883bf518296a40959131c2304af714) C:\WINDOWS\system32\DRIVERS\el90xbc5.sys 15:59:11.0324 5964 EL90XBC - ok 15:59:11.0417 5964 Fallback (c823debe2548656549f84a875d65237b) C:\WINDOWS\system32\DRIVERS\HSF_FALL.sys 15:59:11.0417 5964 Fallback - ok 15:59:11.0495 5964 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 15:59:11.0495 5964 Fastfat - ok 15:59:11.0558 5964 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 15:59:11.0558 5964 Fdc - ok 15:59:11.0667 5964 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 15:59:11.0667 5964 Fips - ok 15:59:11.0761 5964 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys 15:59:11.0761 5964 Flpydisk - ok 15:59:11.0824 5964 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 15:59:11.0824 5964 FltMgr - ok 15:59:11.0917 5964 Fsks (6483414841d4cab6c3b4db2ac6edd70b) C:\WINDOWS\system32\DRIVERS\HSF_FSKS.sys 15:59:11.0917 5964 Fsks - ok 15:59:11.0980 5964 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 15:59:11.0980 5964 Fs_Rec - ok 15:59:12.0058 5964 FTDIBUS (a36e8beedb3aaca09bf55a1d17904bc8) C:\WINDOWS\system32\drivers\ftdibus.sys 15:59:12.0058 5964 FTDIBUS - ok 15:59:12.0136 5964 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 15:59:12.0136 5964 Ftdisk - ok 15:59:12.0230 5964 FTSER2K (a14a1f4bb391df9c233cb5dbd05feb70) C:\WINDOWS\system32\drivers\ftser2k.sys 15:59:12.0230 5964 FTSER2K - ok 15:59:12.0339 5964 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys 15:59:12.0339 5964 GEARAspiWDM - ok 15:59:12.0417 5964 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 15:59:12.0417 5964 Gpc - ok 15:59:12.0511 5964 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 15:59:12.0511 5964 HidUsb - ok 15:59:12.0605 5964 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\System32\DRIVERS\hpn.sys 15:59:12.0605 5964 hpn - ok 15:59:12.0714 5964 HPZid412 (d03d10f7ded688fecf50f8fbf1ea9b8a) C:\WINDOWS\system32\DRIVERS\HPZid412.sys 15:59:12.0714 5964 HPZid412 - ok 15:59:12.0808 5964 HPZipr12 (89f41658929393487b6b7d13c8528ce3) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys 15:59:12.0808 5964 HPZipr12 - ok 15:59:12.0902 5964 HPZius12 (abcb05ccdbf03000354b9553820e39f8) C:\WINDOWS\system32\DRIVERS\HPZius12.sys 15:59:12.0902 5964 HPZius12 - ok 15:59:12.0980 5964 HSFHWBS2 (95b894b508db03507b61fe213ef6fe19) C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys 15:59:12.0980 5964 HSFHWBS2 - ok 15:59:13.0089 5964 HSF_DP (f66402179ca2b2ae68493103db5fa48c) C:\WINDOWS\system32\DRIVERS\HSF_DP.sys 15:59:13.0105 5964 HSF_DP - ok 15:59:13.0199 5964 hsf_msft (74e379857d4c0dfb56de2d19b8f4c434) C:\WINDOWS\system32\DRIVERS\HSF_MSFT.sys 15:59:13.0214 5964 hsf_msft - ok 15:59:13.0308 5964 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 15:59:13.0324 5964 HTTP - ok 15:59:13.0402 5964 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys 15:59:13.0402 5964 i2omgmt - ok 15:59:13.0480 5964 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\System32\DRIVERS\i2omp.sys 15:59:13.0495 5964 i2omp - ok 15:59:13.0558 5964 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 15:59:13.0558 5964 i8042prt - ok 15:59:13.0667 5964 i81x (06b7ef73ba5f302eecc294cdf7e19702) C:\WINDOWS\system32\DRIVERS\i81xnt5.sys 15:59:13.0683 5964 i81x - ok 15:59:13.0777 5964 iAimFP0 (7b5b44efe5eb9dadfb8ee29700885d23) C:\WINDOWS\system32\DRIVERS\wADV01nt.sys 15:59:13.0777 5964 iAimFP0 - ok 15:59:13.0902 5964 iAimFP1 (eb1f6bab6c22ede0ba551b527475f7e9) C:\WINDOWS\system32\DRIVERS\wADV02NT.sys 15:59:13.0902 5964 iAimFP1 - ok 15:59:13.0995 5964 iAimFP2 (03ce989d846c1aa81145cb22fcb86d06) C:\WINDOWS\system32\DRIVERS\wADV05NT.sys 15:59:13.0995 5964 iAimFP2 - ok 15:59:14.0089 5964 iAimFP3 (525849b4469de021d5d61b4db9be3a9d) C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys 15:59:14.0089 5964 iAimFP3 - ok 15:59:14.0199 5964 iAimFP4 (589c2bcdb5bd602bf7b63d210407ef8c) C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys 15:59:14.0199 5964 iAimFP4 - ok 15:59:14.0292 5964 iAimTV0 (d83bdd5c059667a2f647a6be5703a4d2) C:\WINDOWS\system32\DRIVERS\wATV01nt.sys 15:59:14.0292 5964 iAimTV0 - ok 15:59:14.0386 5964 iAimTV1 (ed968d23354daa0d7c621580c012a1f6) C:\WINDOWS\system32\DRIVERS\wATV02NT.sys 15:59:14.0386 5964 iAimTV1 - ok 15:59:14.0464 5964 iAimTV2 - ok 15:59:14.0542 5964 iAimTV3 (d738273f218a224c1ddac04203f27a84) C:\WINDOWS\system32\DRIVERS\wATV04nt.sys 15:59:14.0542 5964 iAimTV3 - ok 15:59:14.0636 5964 iAimTV4 (0052d118995cbab152daabe6106d1442) C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys 15:59:14.0636 5964 iAimTV4 - ok 15:59:14.0730 5964 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 15:59:14.0730 5964 Imapi - ok 15:59:14.0824 5964 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\System32\DRIVERS\ini910u.sys 15:59:14.0824 5964 ini910u - ok 15:59:14.0902 5964 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys 15:59:14.0902 5964 IntelIde - ok 15:59:14.0980 5964 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys 15:59:14.0980 5964 intelppm - ok 15:59:15.0058 5964 iomdisk (9d7069d72c0c72952f05e1688a5ae89d) C:\WINDOWS\system32\DRIVERS\iomdisk.sys 15:59:15.0058 5964 iomdisk - ok 15:59:15.0167 5964 ip6fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 15:59:15.0167 5964 ip6fw - ok 15:59:15.0261 5964 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 15:59:15.0261 5964 IpFilterDriver - ok 15:59:15.0355 5964 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 15:59:15.0355 5964 IpInIp - ok 15:59:15.0433 5964 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 15:59:15.0433 5964 IpNat - ok 15:59:15.0511 5964 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 15:59:15.0511 5964 IPSec - ok 15:59:15.0574 5964 IPVNMon - ok 15:59:15.0667 5964 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 15:59:15.0667 5964 IRENUM - ok 15:59:15.0745 5964 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 15:59:15.0761 5964 isapnp - ok 15:59:15.0870 5964 jbridgep - ok 15:59:15.0980 5964 K56 (9c5e3fdbfcc30cf71a49ca178b9ad442) C:\WINDOWS\system32\DRIVERS\HSF_K56K.sys 15:59:15.0980 5964 K56 - ok 15:59:16.0074 5964 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 15:59:16.0074 5964 Kbdclass - ok 15:59:16.0152 5964 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys 15:59:16.0152 5964 kbdhid - ok 15:59:16.0230 5964 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 15:59:16.0230 5964 kmixer - ok 15:59:16.0308 5964 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 15:59:16.0308 5964 KSecDD - ok 15:59:16.0402 5964 L8042Kbd (e141ab3701ea166109212dca4b28ca2c) C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys 15:59:16.0402 5964 L8042Kbd - ok 15:59:16.0495 5964 L8042mou (f0f944e4da9a75dee6a37d4afc7e1bbc) C:\WINDOWS\system32\DRIVERS\L8042mou.Sys 15:59:16.0495 5964 L8042mou - ok 15:59:16.0620 5964 Lavasoft Kernexplorer (6c4a3804510ad8e0f0c07b5be3d44ddb) C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys 15:59:16.0620 5964 Lavasoft Kernexplorer - ok 15:59:16.0730 5964 Lbd - ok 15:59:16.0839 5964 LBeepKE (ac3b39817bfde9735f5654468dbf7d49) C:\WINDOWS\system32\Drivers\LBeepKE.sys 15:59:16.0839 5964 LBeepKE - ok 15:59:16.0933 5964 lbrtfdc - ok 15:59:17.0011 5964 LHidKe (dd40c03d85649205ec086722474c8a63) C:\WINDOWS\system32\DRIVERS\LHidKE.Sys 15:59:17.0011 5964 LHidKe - ok 15:59:17.0089 5964 LHidUsbK (9ffc80e9cb4acc844e5b3cf2fa8ce1ec) C:\WINDOWS\system32\Drivers\LHidUsbK.Sys 15:59:17.0089 5964 LHidUsbK - ok 15:59:17.0167 5964 LMouKE (2ebd4c02d259944869630a912ec86bce) C:\WINDOWS\system32\DRIVERS\LMouKE.Sys 15:59:17.0167 5964 LMouKE - ok 15:59:17.0230 5964 LUsbKbd (0e73e26572bbd0c40bf492806fd8106c) C:\WINDOWS\system32\Drivers\LUsbKbd.Sys 15:59:17.0230 5964 LUsbKbd - ok 15:59:17.0370 5964 mdmxsdk (a1e9d936eac07ee9386e87bac1377fad) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys 15:59:17.0370 5964 mdmxsdk - ok 15:59:17.0480 5964 mfeapfk (36b47b1e9c537f8f2b4481084b8f7d22) C:\WINDOWS\system32\drivers\mfeapfk.sys 15:59:17.0480 5964 mfeapfk - ok 15:59:17.0620 5964 mfeavfk (cde41293db871a75cd99eb0ce781356b) C:\WINDOWS\system32\drivers\mfeavfk.sys 15:59:17.0620 5964 mfeavfk - ok 15:59:17.0683 5964 mfeavfk01 - ok 15:59:17.0761 5964 mfebopk (e22385f64bdf0ad81157479496e33c4a) C:\WINDOWS\system32\drivers\mfebopk.sys 15:59:17.0761 5964 mfebopk - ok 15:59:17.0886 5964 mfefirek (215666a8a85023ef019b510cbb67f678) C:\WINDOWS\system32\drivers\mfefirek.sys 15:59:17.0902 5964 mfefirek - ok 15:59:17.0995 5964 mfehidk (56d330981866a72f061dd16cc5004513) C:\WINDOWS\system32\drivers\mfehidk.sys 15:59:18.0011 5964 mfehidk - ok 15:59:18.0339 5964 mfendisk (62acda4e958e2a392557ba3c6c754a58) C:\WINDOWS\system32\DRIVERS\mfendisk.sys 15:59:18.0339 5964 mfendisk - ok 15:59:18.0355 5964 mfendiskmp (62acda4e958e2a392557ba3c6c754a58) C:\WINDOWS\system32\DRIVERS\mfendisk.sys 15:59:18.0370 5964 mfendiskmp - ok 15:59:18.0495 5964 mferkdet (89b564d63c53fc0c6782ab07eea63acf) C:\WINDOWS\system32\drivers\mferkdet.sys 15:59:18.0495 5964 mferkdet - ok 15:59:18.0605 5964 mferkdk (41fe2f288e05a6c8ab85dd56770ffbad) C:\WINDOWS\system32\drivers\mferkdk.sys 15:59:18.0605 5964 mferkdk - ok 15:59:18.0730 5964 mfesmfk (096b52ea918aa909ba5903d79e129005) C:\WINDOWS\system32\drivers\mfesmfk.sys 15:59:18.0730 5964 mfesmfk - ok 15:59:18.0839 5964 mfetdi2k (922e64ca38e38106498fb3435a8e399d) C:\WINDOWS\system32\drivers\mfetdi2k.sys 15:59:18.0855 5964 mfetdi2k - ok 15:59:18.0995 5964 mmc_2K (e97e3fe03b6f271336cb2fbb24734989) C:\WINDOWS\system32\drivers\mmc_2K.sys 15:59:18.0995 5964 mmc_2K - ok 15:59:19.0136 5964 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 15:59:19.0152 5964 mnmdd - ok 15:59:19.0245 5964 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 15:59:19.0245 5964 Modem - ok 15:59:19.0402 5964 MODEMCSA (1992e0d143b09653ab0f9c5e04b0fd65) C:\WINDOWS\system32\drivers\MODEMCSA.sys 15:59:19.0402 5964 MODEMCSA - ok 15:59:19.0480 5964 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 15:59:19.0480 5964 Mouclass - ok 15:59:19.0558 5964 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys 15:59:19.0574 5964 mouhid - ok 15:59:19.0714 5964 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 15:59:19.0714 5964 MountMgr - ok 15:59:19.0855 5964 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\System32\DRIVERS\mraid35x.sys 15:59:19.0855 5964 mraid35x - ok 15:59:20.0027 5964 MREMP50 (9bd4dcb5412921864a7aacdedfbd1923) C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS 15:59:20.0027 5964 MREMP50 - ok 15:59:20.0027 5964 MREMPR5 - ok 15:59:20.0042 5964 MRENDIS5 - ok 15:59:20.0074 5964 MRESP50 (07c02c892e8e1a72d6bf35004f0e9c5e) C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS 15:59:20.0074 5964 MRESP50 - ok 15:59:20.0167 5964 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 15:59:20.0167 5964 MRxDAV - ok 15:59:20.0324 5964 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 15:59:20.0324 5964 MRxSmb - ok 15:59:20.0402 5964 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 15:59:20.0402 5964 Msfs - ok 15:59:20.0495 5964 msikbd2k (9b99b04c28ccd19741dbbed64480195c) C:\WINDOWS\system32\DRIVERS\msikbd2k.sys 15:59:20.0511 5964 msikbd2k - ok 15:59:20.0620 5964 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 15:59:20.0620 5964 MSKSSRV - ok 15:59:20.0949 5964 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 15:59:20.0949 5964 MSPCLOCK - ok 15:59:21.0120 5964 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 15:59:21.0120 5964 MSPQM - ok 15:59:21.0292 5964 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 15:59:21.0292 5964 mssmbios - ok 15:59:21.0433 5964 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys 15:59:21.0433 5964 Mup - ok 15:59:21.0714 5964 MxlW2k (19dd5c581eef70134ccef87d626f4417) C:\WINDOWS\system32\drivers\MxlW2k.sys 15:59:21.0714 5964 MxlW2k - ok 15:59:22.0011 5964 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 15:59:22.0011 5964 NDIS - ok 15:59:22.0355 5964 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 15:59:22.0370 5964 NdisTapi - ok 15:59:22.0480 5964 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 15:59:22.0480 5964 Ndisuio - ok 15:59:22.0745 5964 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 15:59:22.0745 5964 NdisWan - ok 15:59:23.0027 5964 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys 15:59:23.0027 5964 NDProxy - ok 15:59:23.0214 5964 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 15:59:23.0214 5964 NetBIOS - ok 15:59:23.0433 5964 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 15:59:23.0433 5964 NetBT - ok 15:59:23.0652 5964 NMSCFG (847d6d775524fa5e58d851ddec566a12) C:\WINDOWS\System32\drivers\NMSCFG.SYS 15:59:23.0652 5964 NMSCFG - ok 15:59:23.0824 5964 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 15:59:23.0824 5964 Npfs - ok 15:59:24.0339 5964 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 15:59:24.0339 5964 Ntfs - ok 15:59:24.0824 5964 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 15:59:24.0855 5964 Null - ok 15:59:25.0277 5964 nv (71dbdc08df86b80511e72953fa1ad6b0) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 15:59:25.0449 5964 nv - ok 15:59:25.0839 5964 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 15:59:25.0870 5964 NwlnkFlt - ok 15:59:26.0199 5964 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 15:59:26.0214 5964 NwlnkFwd - ok 15:59:26.0886 5964 omci (1d98907d80461371437a7c898c58c8ae) C:\WINDOWS\system32\DRIVERS\omci.sys 15:59:26.0917 5964 omci - ok 15:59:27.0058 5964 P3 (c90018bafdc7098619a4a95b046b30f3) C:\WINDOWS\system32\DRIVERS\p3.sys 15:59:27.0058 5964 P3 - ok 15:59:27.0230 5964 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 15:59:27.0277 5964 Parport - ok 15:59:27.0449 5964 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 15:59:27.0464 5964 PartMgr - ok 15:59:27.0558 5964 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 15:59:27.0574 5964 ParVdm - ok 15:59:27.0667 5964 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 15:59:27.0667 5964 PCI - ok 15:59:27.0855 5964 PCIDump - ok 15:59:28.0027 5964 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\System32\DRIVERS\pciide.sys 15:59:28.0058 5964 PCIIde - ok 15:59:28.0152 5964 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 15:59:28.0183 5964 Pcmcia - ok 15:59:28.0245 5964 PDCOMP - ok 15:59:28.0308 5964 PDFRAME - ok 15:59:28.0339 5964 PDRELI - ok 15:59:28.0417 5964 PDRFRAME - ok 15:59:28.0745 5964 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\System32\DRIVERS\perc2.sys 15:59:28.0761 5964 perc2 - ok 15:59:29.0042 5964 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\System32\DRIVERS\perc2hib.sys 15:59:29.0058 5964 perc2hib - ok 15:59:29.0370 5964 ppa3 (c740d0cb238670629af1b740414a8f3c) C:\WINDOWS\system32\DRIVERS\ppa3.sys 15:59:29.0386 5964 ppa3 - ok 15:59:29.0527 5964 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 15:59:29.0542 5964 PptpMiniport - ok 15:59:30.0230 5964 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys 15:59:30.0230 5964 Processor - ok 15:59:30.0402 5964 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 15:59:30.0417 5964 PSched - ok 15:59:30.0511 5964 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 15:59:30.0511 5964 Ptilink - ok 15:59:30.0761 5964 pwd_2k (070eddd0e4a5be55dd590d8b30dbff22) C:\WINDOWS\system32\drivers\pwd_2k.sys 15:59:30.0824 5964 pwd_2k - ok 15:59:31.0011 5964 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\System32\DRIVERS\ql1080.sys 15:59:31.0011 5964 ql1080 - ok 15:59:31.0261 5964 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\System32\DRIVERS\ql10wnt.sys 15:59:31.0261 5964 Ql10wnt - ok 15:59:31.0495 5964 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\System32\DRIVERS\ql12160.sys 15:59:31.0527 5964 ql12160 - ok 15:59:31.0917 5964 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\System32\DRIVERS\ql1240.sys 15:59:32.0199 5964 ql1240 - ok 15:59:33.0324 5964 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\System32\DRIVERS\ql1280.sys 15:59:33.0558 5964 ql1280 - ok 15:59:33.0917 5964 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 15:59:33.0933 5964 RasAcd - ok 15:59:34.0136 5964 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 15:59:34.0152 5964 Rasl2tp - ok 15:59:34.0324 5964 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 15:59:34.0339 5964 RasPppoe - ok 15:59:34.0527 5964 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 15:59:34.0542 5964 Raspti - ok 15:59:34.0761 5964 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 15:59:34.0808 5964 Rdbss - ok 15:59:34.0949 5964 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 15:59:34.0949 5964 RDPCDD - ok 15:59:35.0074 5964 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 15:59:35.0074 5964 rdpdr - ok 15:59:35.0308 5964 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys 15:59:35.0324 5964 RDPWD - ok 15:59:35.0495 5964 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 15:59:35.0495 5964 redbook - ok 15:59:35.0667 5964 Rksample (bb7549bd94d1aac3599c7606c50c48a0) C:\WINDOWS\system32\DRIVERS\HSF_SAMP.sys 15:59:35.0667 5964 Rksample - ok 15:59:35.0870 5964 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 15:59:35.0902 5964 Secdrv - ok 15:59:36.0105 5964 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 15:59:36.0136 5964 serenum - ok 15:59:36.0574 5964 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 15:59:36.0574 5964 Serial - ok 15:59:36.0714 5964 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\DRIVERS\sfloppy.sys 15:59:36.0745 5964 Sfloppy - ok 15:59:36.0870 5964 Simbad - ok 15:59:36.0949 5964 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\System32\DRIVERS\sisagp.sys 15:59:36.0949 5964 sisagp - ok 15:59:37.0292 5964 smwdm (8583e3dc5285eb3ddfb74fb646cdf295) C:\WINDOWS\system32\drivers\smwdm.sys 15:59:37.0370 5964 smwdm - ok 15:59:37.0667 5964 SoftFax (d9e8e0ce154a2f6430d9efabdf730867) C:\WINDOWS\system32\DRIVERS\HSF_FAXX.sys 15:59:37.0667 5964 SoftFax - ok 15:59:37.0777 5964 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\System32\DRIVERS\sparrow.sys 15:59:37.0777 5964 Sparrow - ok 15:59:37.0886 5964 SpeakerPhone (6c843c43fd7f0b42cfe477ce88d0f9b3) C:\WINDOWS\system32\DRIVERS\HSF_SPKP.sys 15:59:37.0902 5964 SpeakerPhone - ok 15:59:38.0058 5964 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 15:59:38.0058 5964 splitter - ok 15:59:38.0199 5964 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 15:59:38.0199 5964 sr - ok 15:59:38.0339 5964 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys 15:59:38.0370 5964 Srv - ok 15:59:38.0480 5964 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 15:59:38.0480 5964 swenum - ok 15:59:38.0589 5964 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 15:59:38.0589 5964 swmidi - ok 15:59:38.0792 5964 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\System32\DRIVERS\symc810.sys 15:59:38.0808 5964 symc810 - ok 15:59:38.0949 5964 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\System32\DRIVERS\symc8xx.sys 15:59:38.0949 5964 symc8xx - ok 15:59:39.0042 5964 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\System32\DRIVERS\sym_hi.sys 15:59:39.0042 5964 sym_hi - ok 15:59:39.0152 5964 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\System32\DRIVERS\sym_u3.sys 15:59:39.0152 5964 sym_u3 - ok 15:59:39.0230 5964 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 15:59:39.0230 5964 sysaudio - ok 15:59:39.0370 5964 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys 15:59:39.0449 5964 Tcpip - ok 15:59:39.0730 5964 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 15:59:39.0761 5964 TDPIPE - ok 15:59:39.0902 5964 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 15:59:39.0902 5964 TDTCP - ok 15:59:40.0120 5964 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 15:59:40.0152 5964 TermDD - ok 15:59:40.0370 5964 Tones (8021a499db46b2961c285168671cb9af) C:\WINDOWS\system32\DRIVERS\HSF_TONE.sys 15:59:40.0386 5964 Tones - ok 15:59:40.0605 5964 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\System32\DRIVERS\toside.sys 15:59:40.0636 5964 TosIde - ok 15:59:40.0824 5964 UdfReadr_xp (27e66e79fd742c107fdb23280e17d869) C:\WINDOWS\system32\drivers\UdfReadr_xp.sys 15:59:40.0855 5964 UdfReadr_xp - ok 15:59:41.0011 5964 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 15:59:41.0027 5964 Udfs - ok 15:59:41.0495 5964 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\System32\DRIVERS\ultra.sys 15:59:41.0574 5964 ultra - ok 15:59:42.0480 5964 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 15:59:42.0605 5964 Update - ok 15:59:43.0433 5964 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys 15:59:43.0449 5964 USBAAPL - ok 15:59:43.0574 5964 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys 15:59:43.0574 5964 usbaudio - ok 15:59:43.0824 5964 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 15:59:43.0839 5964 usbccgp - ok 15:59:44.0027 5964 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 15:59:44.0027 5964 usbehci - ok 15:59:44.0167 5964 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 15:59:44.0167 5964 usbhub - ok 15:59:44.0386 5964 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys 15:59:44.0402 5964 usbprint - ok 15:59:44.0605 5964 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys 15:59:44.0605 5964 usbscan - ok 15:59:44.0902 5964 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 15:59:44.0917 5964 USBSTOR - ok 15:59:45.0183 5964 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 15:59:45.0183 5964 usbuhci - ok 15:59:45.0699 5964 V124 (269c0ade94b90029b12497747be408cb) C:\WINDOWS\system32\DRIVERS\HSF_V124.sys 15:59:45.0761 5964 V124 - ok 15:59:45.0855 5964 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 15:59:45.0870 5964 VgaSave - ok 15:59:46.0011 5964 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\System32\DRIVERS\viaagp.sys 15:59:46.0027 5964 viaagp - ok 15:59:46.0214 5964 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\System32\DRIVERS\viaide.sys 15:59:46.0480 5964 ViaIde - ok 15:59:46.0761 5964 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 15:59:46.0855 5964 VolSnap - ok 15:59:47.0214 5964 vsdatant - ok 15:59:47.0324 5964 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 15:59:47.0324 5964 Wanarp - ok 15:59:47.0464 5964 wanatw (ba1d9278448cb26152a18b6a06b61ea3) C:\WINDOWS\system32\DRIVERS\wanatw4.sys 15:59:47.0480 5964 wanatw - ok 15:59:47.0824 5964 wceusbsh (56242d5be3bfc8f2a212e6d1f9a16697) C:\WINDOWS\system32\DRIVERS\wceusbsh.sys 15:59:47.0839 5964 wceusbsh - ok 15:59:47.0949 5964 WDICA - ok 15:59:48.0074 5964 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 15:59:48.0074 5964 wdmaud - ok 15:59:48.0464 5964 winachsf (fe71b3857bed54600e02288b212e7b7c) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys 15:59:48.0620 5964 winachsf - ok 15:59:48.0792 5964 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys 15:59:48.0824 5964 WpdUsb - ok 15:59:49.0042 5964 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 15:59:49.0042 5964 WS2IFSL - ok 15:59:49.0183 5964 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 15:59:49.0199 5964 WudfPf - ok 15:59:49.0339 5964 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 15:59:49.0370 5964 WudfRd - ok 15:59:49.0402 5964 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0 15:59:49.0777 5964 \Device\Harddisk0\DR0 - ok 15:59:49.0777 5964 Boot (0x1200) (8955248291a0d7a75f2565cf964251fc) \Device\Harddisk0\DR0\Partition0 15:59:49.0777 5964 \Device\Harddisk0\DR0\Partition0 - ok 15:59:49.0792 5964 ============================================================ 15:59:49.0792 5964 Scan finished 15:59:49.0792 5964 ============================================================ 15:59:49.0808 1016 Detected object count: 0 15:59:49.0808 1016 Actual detected object count: 0
Post #5
It ran and then asked to reboot. It then started running again in safe mode. It finished and produces a log but it emit give me access to the Internet . I rebooted and tried several times to grt out of safe mode - it won't let me.
Post #8
ComboFix 11-12-20.04 - Paul Gunson 12/20/2011 19:25:15.2.1 - x86 MINIMAL
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.315 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Firewall *Enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\SET449.tmp
c:\windows\system32\SET44B.tmp
c:\windows\system32\SET44C.tmp
c:\windows\system32\SET44D.tmp
c:\windows\system32\SET44E.tmp
c:\windows\system32\SET44F.tmp
c:\windows\system32\SET450.tmp
c:\windows\system32\SET451.tmp
c:\windows\system32\SET452.tmp
c:\windows\system32\SET453.tmp
c:\windows\system32\SET454.tmp
c:\windows\system32\SET455.tmp
c:\windows\system32\SET457.tmp
c:\windows\system32\SET458.tmp
c:\windows\system32\SET459.tmp
c:\windows\system32\SET45A.tmp
c:\windows\system32\SET45B.tmp
c:\windows\system32\SET45C.tmp
c:\windows\system32\SET45D.tmp
c:\windows\system32\SET45E.tmp
c:\windows\system32\SET45F.tmp
c:\windows\system32\SET461.tmp
c:\windows\system32\SET462.tmp
c:\windows\system32\SET463.tmp
c:\windows\system32\SET464.tmp
c:\windows\system32\SET467.tmp
c:\windows\system32\SET46B.tmp
c:\windows\system32\SET46C.tmp
c:\windows\system32\SET46F.tmp
c:\windows\system32\SET471.tmp
c:\windows\system32\SET472.tmp
c:\windows\system32\SET473.tmp
c:\windows\system32\SET474.tmp
c:\windows\system32\SET475.tmp
c:\windows\system32\SET477.tmp
c:\windows\system32\SET479.tmp
c:\windows\system32\SET47B.tmp
c:\windows\system32\SET47C.tmp
c:\windows\system32\SET47F.tmp
c:\windows\system32\SET484.tmp
c:\windows\system32\SET486.tmp
c:\windows\system32\SET488.tmp
c:\windows\system32\SET489.tmp
c:\windows\system32\SET48A.tmp
c:\windows\system32\SET48C.tmp
c:\windows\system32\SET491.tmp
c:\windows\system32\SET492.tmp
c:\windows\system32\SET493.tmp
c:\windows\system32\SET494.tmp
c:\windows\system32\SET495.tmp
c:\windows\system32\SET496.tmp
c:\windows\system32\SET497.tmp
c:\windows\system32\SET498.tmp
c:\windows\system32\SET49C.tmp
c:\windows\system32\SET49E.tmp
c:\windows\system32\SET49F.tmp
c:\windows\system32\SET4A0.tmp
c:\windows\system32\SET4A1.tmp
c:\windows\system32\SET4A3.tmp
c:\windows\system32\SET4A4.tmp
c:\windows\system32\SET4A5.tmp
c:\windows\system32\SET4A8.tmp
c:\windows\system32\SET4AA.tmp
c:\windows\system32\SET4AB.tmp
c:\windows\system32\SET4AC.tmp
c:\windows\system32\SET4AD.tmp
c:\windows\system32\SET4AE.tmp
c:\windows\system32\SET4B2.tmp
c:\windows\system32\SET4B3.tmp
c:\windows\system32\SET4B4.tmp
c:\windows\system32\SET4B7.tmp
c:\windows\system32\SET4B8.tmp
c:\windows\system32\SET4B9.tmp
c:\windows\system32\SET4BA.tmp
c:\windows\system32\SET4BB.tmp
c:\windows\system32\SET4BC.tmp
c:\windows\system32\SET4BD.tmp
c:\windows\system32\SET4C0.tmp
c:\windows\system32\SET4C4.tmp
c:\windows\system32\SET4C6.tmp
c:\windows\system32\SET4C7.tmp
c:\windows\system32\SET4C8.tmp
c:\windows\system32\SET4C9.tmp
c:\windows\system32\SET4CA.tmp
c:\windows\system32\SET4CC.tmp
c:\windows\system32\SET4CE.tmp
c:\windows\system32\SET4CF.tmp
c:\windows\system32\SET4D2.tmp
c:\windows\system32\SET4D3.tmp
c:\windows\system32\SET4D4.tmp
c:\windows\system32\SET4D8.tmp
c:\windows\system32\SET4DA.tmp
c:\windows\system32\SET4DB.tmp
c:\windows\system32\SET4DC.tmp
c:\windows\system32\SET4E0.tmp
c:\windows\system32\SET4E1.tmp
c:\windows\system32\SET4E2.tmp
c:\windows\system32\SET4E3.tmp
c:\windows\system32\SET4E5.tmp
c:\windows\system32\SET4E6.tmp
c:\windows\system32\SET4E8.tmp
c:\windows\system32\SET4E9.tmp
c:\windows\system32\SET4EA.tmp
c:\windows\system32\SET4EB.tmp
c:\windows\system32\SET4EE.tmp
c:\windows\system32\SET4EF.tmp
c:\windows\system32\SET4F0.tmp
c:\windows\system32\SET4F1.tmp
c:\windows\system32\SET4F2.tmp
c:\windows\system32\SET4F3.tmp
c:\windows\system32\SET4F4.tmp
c:\windows\system32\SET4F6.tmp
c:\windows\system32\SET4F7.tmp
c:\windows\system32\SET4F8.tmp
c:\windows\system32\SET4F9.tmp
c:\windows\system32\SET4FA.tmp
c:\windows\system32\SET4FB.tmp
c:\windows\system32\SET4FC.tmp
c:\windows\system32\SET4FD.tmp
c:\windows\system32\SET4FE.tmp
c:\windows\system32\SET4FF.tmp
c:\windows\system32\SET50.tmp
c:\windows\system32\SET501.tmp
c:\windows\system32\SET50F.tmp
c:\windows\system32\SET511.tmp
c:\windows\system32\SET512.tmp
c:\windows\system32\SET513.tmp
c:\windows\system32\SET514.tmp
c:\windows\system32\SET518.tmp
c:\windows\system32\SET519.tmp
c:\windows\system32\SET51A.tmp
c:\windows\system32\SET51B.tmp
c:\windows\system32\SET51C.tmp
c:\windows\system32\SET51E.tmp
c:\windows\system32\SET51F.tmp
c:\windows\system32\SET521.tmp
c:\windows\system32\SET522.tmp
c:\windows\system32\SET524.tmp
c:\windows\system32\SET526.tmp
c:\windows\system32\SET528.tmp
c:\windows\system32\SET529.tmp
c:\windows\system32\SET52A.tmp
c:\windows\system32\SET52B.tmp
c:\windows\system32\SET52F.tmp
c:\windows\system32\SET530.tmp
c:\windows\system32\SET531.tmp
c:\windows\system32\SET532.tmp
c:\windows\system32\SET533.tmp
c:\windows\system32\SET534.tmp
c:\windows\system32\SET538.tmp
c:\windows\system32\SET539.tmp
c:\windows\system32\SET53A.tmp
c:\windows\system32\SET53B.tmp
c:\windows\system32\SET53C.tmp
c:\windows\system32\SET53D.tmp
c:\windows\system32\SET53E.tmp
c:\windows\system32\SET53F.tmp
c:\windows\system32\SET540.tmp
c:\windows\system32\SET541.tmp
c:\windows\system32\SET542.tmp
c:\windows\system32\SET543.tmp
c:\windows\system32\SET544.tmp
c:\windows\system32\SET547.tmp
c:\windows\system32\SET54A.tmp
c:\windows\system32\SET54B.tmp
c:\windows\system32\SET54C.tmp
c:\windows\system32\SET54D.tmp
c:\windows\system32\SET54E.tmp
c:\windows\system32\SET54F.tmp
c:\windows\system32\SET55.tmp
c:\windows\system32\SET550.tmp
c:\windows\system32\SET551.tmp
c:\windows\system32\SET552.tmp
c:\windows\system32\SET553.tmp
c:\windows\system32\SET555.tmp
c:\windows\system32\SET556.tmp
c:\windows\system32\SET55C.tmp
c:\windows\system32\SET55D.tmp
c:\windows\system32\SET55E.tmp
c:\windows\system32\SET560.tmp
c:\windows\system32\SET561.tmp
c:\windows\system32\SET563.tmp
c:\windows\system32\SET567.tmp
c:\windows\system32\SET568.tmp
c:\windows\system32\SET569.tmp
c:\windows\system32\SET56A.tmp
c:\windows\system32\SET56B.tmp
c:\windows\system32\SET56C.tmp
c:\windows\system32\SET56D.tmp
c:\windows\system32\SET56E.tmp
c:\windows\system32\SET56F.tmp
c:\windows\system32\SET571.tmp
c:\windows\system32\SET572.tmp
c:\windows\system32\SET577.tmp
c:\windows\system32\SET578.tmp
c:\windows\system32\SET57A.tmp
c:\windows\system32\SET57B.tmp
c:\windows\system32\SET57E.tmp
c:\windows\system32\SET57F.tmp
c:\windows\system32\SET586.tmp
c:\windows\system32\SET587.tmp
c:\windows\system32\SET588.tmp
c:\windows\system32\SET58A.tmp
c:\windows\system32\SET58C.tmp
c:\windows\system32\SET58E.tmp
c:\windows\system32\SET590.tmp
c:\windows\system32\SET592.tmp
c:\windows\system32\SET593.tmp
c:\windows\system32\SET594.tmp
c:\windows\system32\SET595.tmp
c:\windows\system32\SET597.tmp
c:\windows\system32\SET598.tmp
c:\windows\system32\SET59B.tmp
c:\windows\system32\SET59D.tmp
c:\windows\system32\SET59E.tmp
c:\windows\system32\SET59F.tmp
c:\windows\system32\SET5A0.tmp
c:\windows\system32\SET5A1.tmp
c:\windows\system32\SET5A2.tmp
c:\windows\system32\SET5A3.tmp
c:\windows\system32\SET5A4.tmp
c:\windows\system32\SET5A5.tmp
c:\windows\system32\SET5A7.tmp
c:\windows\system32\SET5A8.tmp
c:\windows\system32\SET5A9.tmp
c:\windows\system32\SET5AC.tmp
c:\windows\system32\SET5AE.tmp
c:\windows\system32\SET5AF.tmp
c:\windows\system32\SET5B1.tmp
c:\windows\system32\SET5B2.tmp
c:\windows\system32\SET5B4.tmp
c:\windows\system32\SET5B6.tmp
c:\windows\system32\SET5B7.tmp
c:\windows\system32\SET5B9.tmp
c:\windows\system32\SET5BA.tmp
c:\windows\system32\SET5BB.tmp
c:\windows\system32\SET5C0.tmp
c:\windows\system32\SET5C1.tmp
c:\windows\system32\SET5C2.tmp
c:\windows\system32\SET5C3.tmp
c:\windows\system32\SET5C4.tmp
c:\windows\system32\SET5C5.tmp
c:\windows\system32\SET5C6.tmp
c:\windows\system32\SET5C7.tmp
c:\windows\system32\SET5CA.tmp
c:\windows\system32\SET5CB.tmp
c:\windows\system32\SET5CC.tmp
c:\windows\system32\SET5CE.tmp
c:\windows\system32\SET5D0.tmp
c:\windows\system32\SET5D1.tmp
c:\windows\system32\SET5D2.tmp
c:\windows\system32\SET5D3.tmp
c:\windows\system32\SET5D5.tmp
c:\windows\system32\SET5D6.tmp
c:\windows\system32\SET5DA.tmp
c:\windows\system32\SET5DB.tmp
c:\windows\system32\SET5DE.tmp
c:\windows\system32\SET5E0.tmp
c:\windows\system32\SET5E1.tmp
c:\windows\system32\SET5E2.tmp
c:\windows\system32\SET5E3.tmp
c:\windows\system32\SET5E4.tmp
c:\windows\system32\SET5E6.tmp
c:\windows\system32\SET5E8.tmp
c:\windows\system32\SET5EB.tmp
c:\windows\system32\SET5EC.tmp
c:\windows\system32\SET5EF.tmp
c:\windows\system32\SET5F1.tmp
c:\windows\system32\SET5F5.tmp
c:\windows\system32\SET5F7.tmp
c:\windows\system32\SET5F8.tmp
c:\windows\system32\SET5F9.tmp
c:\windows\system32\SET5FA.tmp
c:\windows\system32\SET5FB.tmp
c:\windows\system32\SET5FC.tmp
c:\windows\system32\SET5FD.tmp
c:\windows\system32\SET5FE.tmp
c:\windows\system32\SET5FF.tmp
c:\windows\system32\SET603.tmp
c:\windows\system32\SET604.tmp
c:\windows\system32\SET605.tmp
c:\windows\system32\SET609.tmp
c:\windows\system32\SET60A.tmp
c:\windows\system32\SET60B.tmp
c:\windows\system32\SET60D.tmp
c:\windows\system32\SET60E.tmp
c:\windows\system32\SET610.tmp
c:\windows\system32\SET611.tmp
c:\windows\system32\SET612.tmp
c:\windows\system32\SET613.tmp
c:\windows\system32\SET614.tmp
c:\windows\system32\SET615.tmp
c:\windows\system32\SET616.tmp
c:\windows\system32\SET619.tmp
c:\windows\system32\SET61A.tmp
c:\windows\system32\SET61B.tmp
c:\windows\system32\SET61C.tmp
c:\windows\system32\SET61D.tmp
c:\windows\system32\SET61E.tmp
c:\windows\system32\SET61F.tmp
c:\windows\system32\SET620.tmp
c:\windows\system32\SET621.tmp
c:\windows\system32\SET622.tmp
c:\windows\system32\SET623.tmp
c:\windows\system32\SET625.tmp
c:\windows\system32\SET626.tmp
c:\windows\system32\SET627.tmp
c:\windows\system32\SET628.tmp
c:\windows\system32\SET62A.tmp
c:\windows\system32\SET62B.tmp
c:\windows\system32\SET62C.tmp
c:\windows\system32\SET62E.tmp
c:\windows\system32\SET62F.tmp
c:\windows\system32\SET630.tmp
c:\windows\system32\SET631.tmp
c:\windows\system32\SET632.tmp
c:\windows\system32\SET634.tmp
c:\windows\system32\SET635.tmp
c:\windows\system32\SET636.tmp
c:\windows\system32\SET637.tmp
c:\windows\system32\SET638.tmp
c:\windows\system32\SET639.tmp
c:\windows\system32\SET63A.tmp
c:\windows\system32\SET63B.tmp
c:\windows\system32\SET63C.tmp
c:\windows\system32\SET63E.tmp
c:\windows\system32\SET63F.tmp
c:\windows\system32\SET640.tmp
c:\windows\system32\SET642.tmp
c:\windows\system32\SET643.tmp
c:\windows\system32\SET645.tmp
c:\windows\system32\SET649.tmp
c:\windows\system32\SET64A.tmp
c:\windows\system32\SET64B.tmp
c:\windows\system32\SET64C.tmp
c:\windows\system32\SET64D.tmp
c:\windows\system32\SET64E.tmp
c:\windows\system32\SET650.tmp
c:\windows\system32\SET651.tmp
c:\windows\system32\SET652.tmp
c:\windows\system32\SET653.tmp
c:\windows\system32\SET657.tmp
c:\windows\system32\SET658.tmp
c:\windows\system32\SET659.tmp
c:\windows\system32\SET65A.tmp
c:\windows\system32\SET65B.tmp
c:\windows\system32\SET65C.tmp
c:\windows\system32\SET65D.tmp
c:\windows\system32\SET65E.tmp
c:\windows\system32\SET65F.tmp
c:\windows\system32\SET662.tmp
c:\windows\system32\SET665.tmp
c:\windows\system32\SET666.tmp
c:\windows\system32\SET667.tmp
c:\windows\system32\SET668.tmp
c:\windows\system32\SET66A.tmp
c:\windows\system32\SET66B.tmp
c:\windows\system32\SET66D.tmp
c:\windows\system32\SET670.tmp
c:\windows\system32\SET671.tmp
c:\windows\system32\SET672.tmp
c:\windows\system32\SET675.tmp
c:\windows\system32\SET676.tmp
c:\windows\system32\SET678.tmp
c:\windows\system32\SET679.tmp
c:\windows\system32\SET67B.tmp
c:\windows\system32\SET67C.tmp
c:\windows\system32\SET67D.tmp
c:\windows\system32\SET67E.tmp
c:\windows\system32\SET680.tmp
c:\windows\system32\SET683.tmp
c:\windows\system32\SET684.tmp
c:\windows\system32\SET686.tmp
c:\windows\system32\SET687.tmp
c:\windows\system32\SET689.tmp
c:\windows\system32\SET68D.tmp
c:\windows\system32\SET68F.tmp
c:\windows\system32\SET690.tmp
c:\windows\system32\SET691.tmp
c:\windows\system32\SET692.tmp
c:\windows\system32\SET693.tmp
c:\windows\system32\SET694.tmp
c:\windows\system32\SET699.tmp
c:\windows\system32\SET69A.tmp
c:\windows\system32\SET69C.tmp
c:\windows\system32\SET69D.tmp
c:\windows\system32\SET6A0.tmp
c:\windows\system32\SET6A1.tmp
c:\windows\system32\SET6A4.tmp
c:\windows\system32\SET6A6.tmp
c:\windows\system32\SET6A7.tmp
c:\windows\system32\SET6A8.tmp
c:\windows\system32\SET6AA.tmp
c:\windows\system32\SET6AC.tmp
c:\windows\system32\SET6AD.tmp
c:\windows\system32\SET6AE.tmp
c:\windows\system32\SET6B0.tmp
c:\windows\system32\SET6B1.tmp
c:\windows\system32\SET6B2.tmp
c:\windows\system32\SET6B3.tmp
c:\windows\system32\SET6B4.tmp
c:\windows\system32\SET6BA.tmp
c:\windows\system32\SET6BB.tmp
c:\windows\system32\SET6BD.tmp
c:\windows\system32\SET6BE.tmp
c:\windows\system32\SET6BF.tmp
c:\windows\system32\SET6C0.tmp
c:\windows\system32\SET6C2.tmp
c:\windows\system32\SET6C5.tmp
c:\windows\system32\SET6C8.tmp
c:\windows\system32\SET6C9.tmp
c:\windows\system32\SET6CA.tmp
c:\windows\system32\SET6CD.tmp
c:\windows\system32\SET6D5.tmp
c:\windows\system32\SET6D7.tmp
c:\windows\system32\SET6D9.tmp
c:\windows\system32\SET6DA.tmp
c:\windows\system32\SET6DB.tmp
c:\windows\system32\SET6DC.tmp
c:\windows\system32\SET6DE.tmp
c:\windows\system32\SET6DF.tmp
c:\windows\system32\SET6E1.tmp
c:\windows\system32\SET6E6.tmp
c:\windows\system32\SET6E7.tmp
c:\windows\system32\SET6E9.tmp
c:\windows\system32\SET6EA.tmp
c:\windows\system32\SET6EB.tmp
c:\windows\system32\SET6F1.tmp
c:\windows\system32\SET6FC.tmp
c:\windows\system32\SET6FD.tmp
c:\windows\system32\SET700.tmp
c:\windows\system32\SET701.tmp
c:\windows\system32\SET702.tmp
c:\windows\system32\SET703.tmp
c:\windows\system32\SET704.tmp
c:\windows\system32\SET708.tmp
c:\windows\system32\SET70A.tmp
c:\windows\system32\SET70E.tmp
c:\windows\system32\SET712.tmp
c:\windows\system32\SET719.tmp
c:\windows\system32\SET71B.tmp
c:\windows\system32\SET71C.tmp
c:\windows\system32\SET723.tmp
c:\windows\system32\SET725.tmp
c:\windows\system32\SET726.tmp
c:\windows\system32\SET727.tmp
c:\windows\system32\SET729.tmp
c:\windows\system32\SET72B.tmp
c:\windows\system32\SET72D.tmp
c:\windows\system32\SET731.tmp
c:\windows\system32\SET73F.tmp
c:\windows\system32\SET741.tmp
c:\windows\system32\SET742.tmp
c:\windows\system32\SET743.tmp
c:\windows\system32\SET744.tmp
c:\windows\system32\SET748.tmp
c:\windows\system32\SET74A.tmp
c:\windows\system32\SET74C.tmp
c:\windows\system32\SET74F.tmp
c:\windows\system32\SET753.tmp
c:\windows\system32\SET754.tmp
c:\windows\system32\SET758.tmp
c:\windows\system32\SET75A.tmp
c:\windows\system32\SET767.tmp
c:\windows\system32\SET76A.tmp
c:\windows\system32\SET76B.tmp
c:\windows\system32\SET770.tmp
c:\windows\system32\SET772.tmp
c:\windows\system32\SET773.tmp
c:\windows\system32\SET774.tmp
c:\windows\system32\SET77A.tmp
c:\windows\system32\SET77E.tmp
c:\windows\system32\SET78C.tmp
c:\windows\system32\SET78D.tmp
c:\windows\system32\SET78F.tmp
c:\windows\system32\SET790.tmp
c:\windows\system32\SET791.tmp
c:\windows\system32\SET792.tmp
c:\windows\system32\SET797.tmp
c:\windows\system32\SET79B.tmp
c:\windows\system32\SET79E.tmp
c:\windows\system32\SET79F.tmp
c:\windows\system32\SET7A0.tmp
c:\windows\system32\SET7A2.tmp
c:\windows\system32\SET7A3.tmp
c:\windows\system32\SET7A4.tmp
c:\windows\system32\SET7A5.tmp
c:\windows\system32\SET7A6.tmp
c:\windows\system32\SET7A7.tmp
c:\windows\system32\SET7A9.tmp
c:\windows\system32\SET7AA.tmp
c:\windows\system32\SET7AC.tmp
c:\windows\system32\SET7B0.tmp
c:\windows\system32\SET7B1.tmp
c:\windows\system32\SET7B6.tmp
c:\windows\system32\SET7B7.tmp
c:\windows\system32\SET7B9.tmp
c:\windows\system32\SET7BF.tmp
c:\windows\system32\SET7C6.tmp
c:\windows\system32\SET7C8.tmp
c:\windows\system32\SET7CB.tmp
c:\windows\system32\SET7CD.tmp
c:\windows\system32\SET7CE.tmp
c:\windows\system32\SET7CF.tmp
c:\windows\system32\SET7D1.tmp
c:\windows\system32\SET7D3.tmp
c:\windows\system32\SET7D7.tmp
c:\windows\system32\SET7D9.tmp
c:\windows\system32\SET7DA.tmp
c:\windows\system32\SET7DF.tmp
c:\windows\system32\SET7E0.tmp
c:\windows\system32\SET7E1.tmp
c:\windows\system32\SET7E4.tmp
c:\windows\system32\SET7E5.tmp
c:\windows\system32\SET7E8.tmp
c:\windows\system32\SET7EA.tmp
c:\windows\system32\SET7EF.tmp
c:\windows\system32\SET7F2.tmp
c:\windows\system32\SET7F6.tmp
c:\windows\system32\SET7F8.tmp
c:\windows\system32\SET7FA.tmp
c:\windows\system32\SET802.tmp
c:\windows\system32\SET805.tmp
c:\windows\system32\SET80C.tmp
c:\windows\system32\SET813.tmp
c:\windows\system32\SET814.tmp
c:\windows\system32\SET815.tmp
c:\windows\system32\SET817.tmp
c:\windows\system32\SET818.tmp
c:\windows\system32\SET819.tmp
c:\windows\system32\SET81A.tmp
c:\windows\system32\SET81C.tmp
c:\windows\system32\SET81E.tmp
c:\windows\system32\SET81F.tmp
c:\windows\system32\SET821.tmp
c:\windows\system32\SET826.tmp
c:\windows\system32\SET82B.tmp
c:\windows\system32\SET82C.tmp
c:\windows\system32\SET834.tmp
c:\windows\system32\SET83B.tmp
c:\windows\system32\SET83D.tmp
c:\windows\system32\SET840.tmp
c:\windows\system32\SET843.tmp
c:\windows\system32\SET846.tmp
c:\windows\system32\SET848.tmp
c:\windows\system32\SET84C.tmp
c:\windows\system32\SET84E.tmp
c:\windows\system32\SET84F.tmp
c:\windows\system32\SET850.tmp
c:\windows\system32\SET854.tmp
c:\windows\system32\SET855.tmp
c:\windows\system32\SET856.tmp
c:\windows\system32\SET859.tmp
c:\windows\system32\SET85A.tmp
c:\windows\system32\SET85D.tmp
c:\windows\system32\SET85F.tmp
c:\windows\system32\SET864.tmp
c:\windows\system32\SET867.tmp
c:\windows\system32\SET86B.tmp
c:\windows\system32\SET86D.tmp
c:\windows\system32\SET86F.tmp
c:\windows\system32\SETCE.tmp
c:\windows\system32\SETCF.tmp
c:\windows\system32\SETD0.tmp
c:\windows\system32\SETE3C.tmp
c:\windows\system32\SETE3F.tmp
c:\windows\system32\SETE44.tmp
c:\windows\system32\SETE48.tmp
c:\windows\system32\SETE4F.tmp
c:\windows\system32\SETE76.tmp
c:\windows\system32\SETE99.tmp
c:\windows\system32\SETF43.tmp
c:\windows\system32\SETF46.tmp
c:\windows\system32\SETF4B.tmp
c:\windows\system32\SETF4F.tmp
c:\windows\system32\SETF56.tmp
c:\windows\system32\SETF7D.tmp
c:\windows\system32\SETFA0.tmp
.
.
((((((((((((((((((((((((( Files Created from 2011-11-21 to 2011-12-21 )))))))))))))))))))))))))))))))
.
.
2068-08-24 18:25 . 2004-08-24 18:27 375808 —-a-w- c:\program files\Microsoft Games\Halo\binkw32.dll
2011-12-18 18:25 . 2011-12-18 18:25 2106216 —-a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll
2011-12-18 18:25 . 2011-12-18 18:25 134104 —-a-w- c:\program files\Mozilla Firefox\components\browsercomps.dll
2011-12-18 18:25 . 2011-12-18 18:25 1998168 —-a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll
2011-12-18 18:25 . 2011-12-18 18:25 89048 —-a-w- c:\program files\Mozilla Firefox\libEGL.dll
2011-12-18 18:25 . 2011-12-18 18:25 478168 —-a-w- c:\program files\Mozilla Firefox\libGLESv2.dll
2011-12-18 18:25 . 2011-12-18 18:25 15832 —-a-w- c:\program files\Mozilla Firefox\mozalloc.dll
2011-12-18 18:25 . 2011-12-18 18:25 1989592 —-a-w- c:\program files\Mozilla Firefox\mozjs.dll
2011-12-18 18:25 . 2011-12-18 18:25 801752 —-a-w- c:\program files\Mozilla Firefox\mozsqlite3.dll
2011-12-17 18:14 . 2011-12-17 19:39 ——– d—–w- c:\documents and settings\All Users\Application Data\WeCareReminder
2011-12-16 01:56 . 2011-12-16 01:56 ——– d—–w- c:\windows\system32\winrm
2011-12-16 01:56 . 2011-12-16 01:56 ——– d—–w- c:\windows\system32\GroupPolicy
2011-12-16 01:55 . 2011-12-16 01:56 ——– dc-h–w- c:\windows\$968930Uinstall_KB968930$
2011-12-16 01:55 . 2011-12-16 01:55 ——– d—–w- C:\4ff325f672ef19420c1fd9959d35b578
2011-12-16 01:43 . 2011-10-20 03:16 20312 —-a-w- c:\windows\system32\RegistryDefragBootTime.exe
2011-12-15 01:03 . 2011-12-15 01:03 ——– d—–w- c:\windows\system32\config\systemprofile\Application Data\IObit
2011-12-14 00:50 . 2011-12-14 00:50 ——– d—–w- c:\documents and settings\All Users\Application Data\IObit
2011-12-14 00:48 . 2011-12-14 00:48 ——– d—–w- c:\documents and settings\Paul Gunson\Application Data\IObit
2011-12-14 00:47 . 2011-12-14 00:47 ——– d—–w- c:\program files\IObit
2011-12-13 03:33 . 2011-12-13 03:33 ——– d—–w- c:\documents and settings\All Users\Application Data\MemeoCommon
2011-12-13 03:18 . 2011-12-13 03:18 ——– d—–w- c:\documents and settings\LocalService\Application Data\Seagate
2011-12-13 03:18 . 2011-12-13 03:18 ——– d—–w- c:\documents and settings\LocalService\Local Settings\Application Data\ServiceTest
2011-12-13 03:17 . 2011-12-13 03:17 ——– d—–w- c:\documents and settings\Paul Gunson\Application Data\Memeo
2011-12-13 03:06 . 2011-12-13 03:06 ——– d—–w- c:\program files\Common Files\Memeo
2011-12-13 01:34 . 2011-12-13 01:34 ——– d—–w- c:\windows\system32\wbem\Repository
2011-12-13 00:25 . 2011-12-13 00:25 ——– d—–w- c:\documents and settings\Paul Gunson\Application Data\Seagate
2011-12-13 00:24 . 2011-12-13 00:24 ——– d—–w- c:\program files\Memeo
2011-12-13 00:24 . 2011-12-13 00:24 ——– d—–w- c:\documents and settings\Paul Gunson\Local Settings\Application Data\temp
2011-12-13 00:23 . 2011-12-13 02:13 ——– d—–w- c:\program files\Seagate
2011-12-12 03:17 . 2011-12-13 01:31 ——– d—–w- C:\7c9a1048e842af9602d120b2b9
2011-12-11 01:53 . 2011-12-11 01:53 ——– d—–w- c:\documents and settings\Administrator
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-03 15:51 . 2011-05-30 20:50 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-23 13:25 . 2008-10-02 23:57 1859584 —-a-w- c:\windows\system32\win32k.sys
2011-11-04 19:20 . 2004-02-06 22:05 916992 —-a-w- c:\windows\system32\wininet.dll
2011-11-04 19:20 . 2002-08-29 11:00 43520 —-a-w- c:\windows\system32\licmgr10.dll
2011-11-04 19:20 . 2002-08-29 11:00 1469440 —-a-w- c:\windows\system32\inetcpl.cpl
2011-11-04 11:23 . 2004-08-04 05:59 385024 —-a-w- c:\windows\system32\html.iec
2011-11-01 16:07 . 2004-04-14 22:54 1288704 —-a-w- c:\windows\system32\ole32.dll
2011-10-28 05:31 . 2008-10-02 23:57 33280 —-a-w- c:\windows\system32\csrsrv.dll
2011-10-25 13:33 . 2008-10-02 23:57 2192768 —-a-w- c:\windows\system32\ntoskrnl.exe
2011-10-25 12:52 . 2008-10-02 23:57 2069376 —-a-w- c:\windows\system32\ntkrnlpa.exe
2011-10-18 19:32 . 2010-12-30 03:10 150856 —-a-w- c:\windows\system32\mfevtps.exe
2011-10-18 11:13 . 2002-08-29 11:00 186880 —-a-w- c:\windows\system32\encdec.dll
2011-10-15 18:16 . 2010-12-30 03:10 9608 —-a-w- c:\windows\system32\drivers\mfeclnk.sys
2011-10-15 18:16 . 2010-12-30 03:10 89792 —-a-w- c:\windows\system32\drivers\mfetdi2k.sys
2011-10-15 18:16 . 2010-12-30 03:10 87656 —-a-w- c:\windows\system32\drivers\mferkdet.sys
2011-10-15 18:16 . 2010-12-30 03:10 83856 —-a-w- c:\windows\system32\drivers\mfendisk.sys
2011-10-15 18:16 . 2010-12-30 03:10 57600 —-a-w- c:\windows\system32\drivers\cfwids.sys
2011-10-15 18:16 . 2010-12-30 03:10 338176 —-a-w- c:\windows\system32\drivers\mfefirek.sys
2011-10-15 18:16 . 2010-12-30 03:10 180816 —-a-w- c:\windows\system32\drivers\mfeavfk.sys
2011-10-15 18:16 . 2010-12-30 03:10 121256 —-a-w- c:\windows\system32\drivers\mfeapfk.sys
2011-10-15 18:16 . 2009-05-09 15:58 59456 —-a-w- c:\windows\system32\drivers\mfebopk.sys
2011-10-15 18:16 . 2009-05-09 15:58 464176 —-a-w- c:\windows\system32\drivers\mfehidk.sys
2011-09-28 07:06 . 2002-09-23 20:10 599040 —-a-w- c:\windows\system32\crypt32.dll
2011-09-26 16:41 . 2008-07-29 23:59 611328 —-a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 16:41 . 2002-08-29 11:00 220160 —-a-w- c:\windows\system32\oleacc.dll
2011-09-26 16:41 . 2002-08-29 11:00 20480 —-a-w- c:\windows\system32\oleaccrc.dll
2007-08-19 13:00 . 2007-08-19 13:00 50009400 —-a-w- c:\program files\iTunesSetup.exe
2009-09-13 04:05 . 2009-09-13 04:05 124240 —-a-w- c:\program files\mozilla firefox\plugins\CCMSDK.dll
2009-09-13 04:06 . 2009-09-13 04:06 13136 —-a-w- c:\program files\mozilla firefox\plugins\cgpcfg.dll
2009-09-13 04:06 . 2009-09-13 04:06 70488 —-a-w- c:\program files\mozilla firefox\plugins\CgpCore.dll
2009-09-13 04:06 . 2009-09-13 04:06 91480 —-a-w- c:\program files\mozilla firefox\plugins\confmgr.dll
2009-09-13 04:06 . 2009-09-13 04:06 22360 —-a-w- c:\program files\mozilla firefox\plugins\ctxlogging.dll
2009-09-13 04:07 . 2009-09-13 04:07 255312 —-a-w- c:\program files\mozilla firefox\plugins\ctxmui.dll
2009-09-13 04:06 . 2009-09-13 04:06 31064 —-a-w- c:\program files\mozilla firefox\plugins\icafile.dll
2009-09-13 04:06 . 2009-09-13 04:06 40280 —-a-w- c:\program files\mozilla firefox\plugins\icalogon.dll
2009-08-14 18:33 . 2009-08-14 18:33 652640 —-a-w- c:\program files\mozilla firefox\plugins\sslsdk_b.dll
2009-09-13 04:06 . 2009-09-13 04:06 23896 —-a-w- c:\program files\mozilla firefox\plugins\TcpPServ.dll
2011-12-18 18:25 . 2011-12-18 18:25 134104 —-a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2011-04-14 18:01 . 2010-12-30 03:10 24376 —-a-w- c:\program files\mozilla firefox\components\Scriptff.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvMediaCenter"="c:\windows\system32\NVMCTRAY.DLL" [2003-10-06 49152]
"H/PC Connection Agent"="c:\program files\microsoft activesync\wcescomm.exe" [2003-04-22 413775]
"Akamai NetSession Interface"="c:\documents and settings\Paul Gunson\Local Settings\Application Data\Akamai\netsession_win.exe" [2011-12-13 3305760]
"PlaxoUpdate"="c:\program files\Plaxo\2.13.1.6\PlaxoHelper.exe" [2008-04-14 227914]
"Advanced SystemCare 5"="c:\program files\IObit\Advanced SystemCare 5\ASCTray.exe" [2011-12-14 619352]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DwlClient"="c:\program files\Common Files\Dell\EUSW\Support.exe" [2003-05-15 245760]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2003-10-06 5058560]
"nwiz"="nwiz.exe" [2003-10-06 741376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2003-10-06 49152]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2006-05-10 94208]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2010-03-12 49208]
"ConnectionCenter"="c:\program files\Citrix\ICA Client\concentr.exe" [2009-09-13 103768]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-09-16 1318552]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-11-29 421888]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"VERIZONDM"="c:\program files\VERIZONDM\bin\sprtcmd.exe" [2011-02-01 206120]
"Verizon_McciTrayApp"="c:\program files\Verizon\McciTrayApp.exe" [2010-03-17 1565696]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2011-08-31 40368]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-09 421736]
"Motive SmartBridge"="c:\progra~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe" [2005-05-17 385024]
"Microsoft Works Update Detection"="c:\program files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe" [2001-08-17 28738]
"IPHSend"="c:\program files\Common Files\AOL\IPHSend\IPHSend.exe" [2006-02-17 124520]
"Iomega Drive Icons"="c:\program files\Iomega\DriveIcons\ImgIcon.exe" [2002-08-13 86016]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb04.exe" [2001-12-12 196608]
"HostManager"="c:\program files\Common Files\AOL\1146916653\ee\AOLSoftware.exe" [2006-05-10 50760]
"FLMOFFICEKEYBOARD"="c:\program files\Office keyboard utility\1.2\OFFICEKB.exe" [2003-08-03 215040]
"FLMBROWSERMOUSE"="c:\program files\Browser mouse\1.2\mouse32a.exe" [2003-08-03 356352]
"Deskup"="c:\program files\Iomega\DriveIcons\deskup.exe" [2002-07-16 32768]
"AdaptecDirectCD"="c:\program files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" [2002-04-10 679936]
"Memeo Instant Backup"="c:\program files\Memeo\AutoBackup\MemeoLauncher2.exe" [2011-05-04 136416]
"Seagate Dashboard"="c:\program files\Seagate\Seagate Dashboard\MemeoLauncher.exe" [2011-06-01 79112]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"RunNarrator"="Narrator.exe" [2008-04-14 53760]
.
c:\documents and settings\Administrator.DGY7P321.000\Start Menu\Programs\Startup\
Seagate NA0ESCGD Product Registration.lnk - c:\documents and settings\Paul Gunson\Application Data\Leadertech\PowerRegister\Seagate NA0ESCGD Product Registration.exe [N/A]
.
c:\documents and settings\Paul Gunson\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
America Online 7.0 Tray Icon.lnk - c:\program files\America Online 7.0\aoltray.exe [2002-11-24 32839]
BodyMedia Sync.lnk - c:\program files\BodyMedia\Sync\BodyMediaSync.exe [2011-1-31 2115072]
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2002-11-24 45056]
Event Reminder.lnk - c:\program files\Broderbund\PrintMaster\PMREMIND.EXE [2003-10-27 327680]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-10-16 214360]
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2006-1-7 593920]
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
Microsoft Works Calendar Reminders.lnk - c:\program files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe [2001-8-7 24633]
QuickBooks Update Agent.lnk - c:\program files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [2009-9-16 972064]
Verizon Online Support Center.lnk - c:\program files\Verizon Online\SupportCenter\bin\matcli.exe [2004-2-21 204800]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\c:\0autocheck autochk *\0lsdelete
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\Microsoft ActiveSync\\WCESCOMM.EXE"=
"c:\\Program Files\\AIM\\aim.exe"=
"c:\\Program Files\\Microsoft Games\\Halo\\halo.exe"=
"c:\\Program Files\\WinMX\\WinMX.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\Common Files\\AOL\\1146916653\\ee\\aolsoftware.exe"=
"c:\\Program Files\\Common Files\\AOL\\1146916653\\ee\\aim6.exe"=
"c:\\Program Files\\Browser mouse\\1.2\\mouse32a.exe"=
"c:\\Program Files\\Intuit\\QuickBooks 2006\\QBDBMgrN.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\SYSTEM32\\dxdiag.exe"=
"c:\\WINDOWS\\SYSTEM32\\dpnsvr.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Smart Web Printing\\SmartWebPrintExe.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Common Files\\McAfee\\McSvcHost\\McSvHost.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Documents and Settings\\Paul Gunson\\Local Settings\\Application Data\\Akamai\\netsession_win.exe"=
"c:\\Program Files\\Seagate\\Seagate Dashboard\\HipServAgent\\HipServAgent.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3724:TCP"= 3724:TCP:WoW
"6112:TCP"= 6112:TCP:WoW2
"6881:TCP"= 6881:TCP:WoW3
"6999:TCP"= 6999:TCP:WoW4
"50000:UDP"= 50000:UDP:IHA_MessageCenter
"5985:TCP"= 5985:TCP:*:Disabled:Windows Remote Management
"1172:TCP"= 1172:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface
.
R1 msikbd2k;Multimedia Keyboard Filter Driver;c:\windows\SYSTEM32\DRIVERS\msikbd2k.sys [8/3/2003 2:20 PM 6656]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys –> c:\windows\system32\DRIVERS\Lbd.sys [?]
S1 ctxusbm;Citrix USB Monitor Driver;c:\windows\SYSTEM32\DRIVERS\ctxusbm.sys [9/8/2009 6:13 PM 65584]
S1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\SYSTEM32\DRIVERS\mfetdi2k.sys [12/29/2010 10:10 PM 89792]
S2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files\IObit\Advanced SystemCare 5\ASCService.exe [12/13/2011 7:47 PM 494424]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe -k Akamai [8/29/2002 6:00 AM 14336]
S2 IHA_MessageCenter;IHA_MessageCenter;c:\program files\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe [10/13/2010 4:06 PM 151552]
S2 LBeepKE;LBeepKE;c:\windows\SYSTEM32\DRIVERS\LBeepKE.sys [9/23/2006 6:38 AM 3712]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [5/10/2009 5:08 PM 94880]
S2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [12/29/2010 10:09 PM 214904]
S2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [12/29/2010 10:09 PM 214904]
S2 MemeoBackgroundService;MemeoBackgroundService;c:\program files\Memeo\AutoBackup\MemeoBackgroundService.exe [5/4/2011 4:04 PM 25824]
S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\mfefire.exe [12/29/2010 10:11 PM 160608]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\SYSTEM32\mfevtps.exe [12/29/2010 10:10 PM 150856]
S2 nhksrv;Netropa NHK Server;c:\program files\Office keyboard utility\1.2\NHKSRV.EXE [8/3/2003 2:20 PM 28672]
S2 SeagateDashboardService;Seagate Dashboard Service;c:\program files\Seagate\Seagate Dashboard\SeagateDashboardService.exe [6/1/2011 11:42 AM 14088]
S2 sprtsvc_verizondm;SupportSoft Sprocket Service (verizondm);c:\program files\VERIZONDM\bin\sprtsvc.exe [2/1/2011 4:54 AM 206120]
S2 tgsrvc_verizondm;SupportSoft Repair Service (verizondm);c:\program files\VERIZONDM\bin\tgsrvc.exe [2/1/2011 4:54 AM 185640]
S3 cfwids;McAfee Inc. cfwids;c:\windows\SYSTEM32\DRIVERS\cfwids.sys [12/29/2010 10:10 PM 57600]
S3 jbridgep;jbridgep;\??\c:\docume~1\PAULGU~1\LOCALS~1\Temp\jbridgep.sys –> c:\docume~1\PAULGU~1\LOCALS~1\Temp\jbridgep.sys [?]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [6/20/2011 9:31 AM 2152152]
S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\kernexplorer.sys [6/20/2011 9:31 AM 15232]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [1/15/2010 7:49 AM 227232]
S3 mfefirek;McAfee Inc. mfefirek;c:\windows\SYSTEM32\DRIVERS\mfefirek.sys [12/29/2010 10:10 PM 338176]
S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\SYSTEM32\DRIVERS\mfendisk.sys [12/29/2010 10:10 PM 83856]
S3 mfendiskmp;mfendiskmp;c:\windows\SYSTEM32\DRIVERS\mfendisk.sys [12/29/2010 10:10 PM 83856]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\SYSTEM32\DRIVERS\mferkdet.sys [12/29/2010 10:10 PM 87656]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [8/29/2002 6:00 AM 14336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
Akamai REG_MULTI_SZ Akamai
WINRM REG_MULTI_SZ WINRM
.
Contents of the 'Scheduled Tasks' folder
.
2011-12-20 c:\windows\Tasks\Ad-Aware Scan (new).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2011-06-20 07:40]
.
2011-12-20 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2011-06-20 07:40]
.
2011-12-17 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 17:34]
.
2002-12-19 c:\windows\Tasks\Symantec NetDetect.job
- c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2002-11-24 14:04]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.wtop.com/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid;=ie7&rls;=com.microsoft:en-US&ie;=utf8&oe;=utf8
uInternet Settings,ProxyOverride = 127.0.0.1;*.local
uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p;=%s
IE: E&xport; to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: LimeShop Preferences - file://c:\program files\LimeShop\System\Temp\limeshop_script0.htm
Trusted Zone: intuit.com\ttlc
Trusted Zone: sec.gov\secret
Trusted Zone: sec.gov\secret1
Trusted Zone: sec.gov\secrm
Trusted Zone: turbotax.com
TCP: DhcpNameServer = 192.168.1.1
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {BA2CB6B1-03EE-4068-87CC-F5E4DD772A9B} - hxxps://secret.sec.gov/CitrixLogonPoint/WI/EPAClient/CitrixCAO.cab
FF - ProfilePath - c:\documents and settings\Paul Gunson\Application Data\Mozilla\Firefox\Profiles\05qiq3ov.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.wtop.com/
FF - prefs.js: keyword.URL - hxxp://search.alot.com/web?src_id=30046&client;_id=04ec1c6aa82b08578c324f09&camp;_id=2988&install;_time=2011-09-23T23:54Z≺=auto&tb;_version=1.0.10000(G)&q;=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Garmin Communicator: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E} - %profile%\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: McAfee SiteAdvisor: {4ED1F68A-5463-4931-9384-8FFF5ED91D92} - c:\program files\McAfee\SiteAdvisor
FF - Ext: Move Media Player: [removed] - c:\documents and settings\Paul Gunson\Application Data\Move Networks
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-12-20 19:49
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
DwlClient = c:\program files\Common Files\Dell\EUSW\Support.exe?l?e?s?\?D?e?l?l?\?E?U?S?W?\?S?u?p?p?o?r?t?.?e?x?e???????X:??0???x???@???X???????????@???P???? ?w? ?w)??p????????(???y????U?w????????????0??????w, ?w?M?wW??w???w)??p????????x'@?????????X????????"@?e?????
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Akamai]
"ServiceDll"="c:\program files\common files\akamai/netsession_win_b427739.dll"
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Iomega Activity Disk2]
"ImagePath"="\"\""
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\vsdatant]
"ImagePath"=""
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'winlogon.exe'(348)
c:\windows\system32\l3codecx.acm
c:\windows\system32\mobilev.acm
.
Completion time: 2011-12-20 19:54:34
ComboFix-quarantined-files.txt 2011-12-21 00:54
ComboFix2.txt 2011-12-20 22:33
.
Pre-Run: 49,414,537,216 bytes free
Post-Run: 49,382,199,296 bytes free
.
- - End Of File - - 1B12AAB916C81330C4B521434E6A9308
Post #9
Mowman, Thanks for your help with this. I'm following your direction to the T. So just to explain, i've tried running msconfig in safe mode to modify the boot back to normal mode, but that doesn't work. So after each boot i go directly into safe mode (not even sure it is safe mode with networking). And finally, it doesn't recognize my internet connection any further which is why it took me time to get you the combofix.txt appreciate your time.
Post #15
ComboFix 11-12-20.04 - Paul Gunson 12/20/2011 16:49:57.1.1 - x86 MINIMAL
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.317 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Firewall *Disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\DirectCDUserNameE.txt
c:\documents and settings\Paul Gunson\My Documents\~WRL3833.tmp
c:\documents and settings\Paul Gunson\WINDOWS
C:\LOG159.tmp
C:\LOG25.tmp
C:\LOG2B.tmp
C:\LOG4A.tmp
C:\LOG59.tmp
c:\temp\tpBe12
c:\windows\CDAC13BA.EXE
c:\windows\CDAC14BA.DLL
c:\windows\system\msiosd32.dll
c:\windows\system32\_003617_.tmp.dll
c:\windows\system32\_003618_.tmp.dll
c:\windows\system32\_003619_.tmp.dll
c:\windows\system32\_003620_.tmp.dll
c:\windows\system32\_003627_.tmp.dll
c:\windows\system32\_003628_.tmp.dll
c:\windows\system32\_003629_.tmp.dll
c:\windows\system32\_003630_.tmp.dll
c:\windows\system32\_003631_.tmp.dll
c:\windows\system32\_003632_.tmp.dll
c:\windows\system32\_003633_.tmp.dll
c:\windows\system32\_003634_.tmp.dll
c:\windows\system32\_003635_.tmp.dll
c:\windows\system32\_003636_.tmp.dll
c:\windows\system32\_003637_.tmp.dll
c:\windows\system32\_003638_.tmp.dll
c:\windows\system32\_003639_.tmp.dll
c:\windows\system32\_003640_.tmp.dll
c:\windows\system32\_003641_.tmp.dll
c:\windows\system32\_003642_.tmp.dll
c:\windows\system32\_003643_.tmp.dll
c:\windows\system32\_003644_.tmp.dll
c:\windows\system32\_003645_.tmp.dll
c:\windows\system32\_003646_.tmp.dll
c:\windows\system32\_003647_.tmp.dll
c:\windows\system32\_003648_.tmp.dll
c:\windows\system32\_003649_.tmp.dll
c:\windows\system32\_003650_.tmp.dll
c:\windows\system32\_003651_.tmp.dll
c:\windows\system32\_003652_.tmp.dll
c:\windows\system32\_003653_.tmp.dll
c:\windows\system32\_003654_.tmp.dll
c:\windows\system32\_003655_.tmp.dll
c:\windows\system32\_003656_.tmp.dll
c:\windows\system32\_003657_.tmp.dll
c:\windows\system32\_003658_.tmp.dll
c:\windows\system32\_003659_.tmp.dll
c:\windows\system32\_003660_.tmp.dll
c:\windows\system32\_003661_.tmp.dll
c:\windows\system32\_003662_.tmp.dll
c:\windows\system32\_003663_.tmp.dll
c:\windows\system32\_003664_.tmp.dll
c:\windows\system32\_003665_.tmp.dll
c:\windows\system32\_003666_.tmp.dll
c:\windows\system32\_003667_.tmp.dll
c:\windows\system32\_003668_.tmp.dll
c:\windows\system32\_003669_.tmp.dll
c:\windows\system32\_003670_.tmp.dll
c:\windows\system32\_003671_.tmp.dll
c:\windows\system32\_003673_.tmp.dll
c:\windows\system32\_003674_.tmp.dll
c:\windows\system32\_003675_.tmp.dll
c:\windows\system32\_003676_.tmp.dll
c:\windows\system32\_003677_.tmp.dll
c:\windows\system32\_003679_.tmp.dll
c:\windows\system32\_003680_.tmp.dll
c:\windows\system32\_003681_.tmp.dll
c:\windows\system32\_003682_.tmp.dll
c:\windows\system32\_003683_.tmp.dll
c:\windows\system32\_003684_.tmp.dll
c:\windows\system32\_003685_.tmp.dll
c:\windows\system32\_003686_.tmp.dll
c:\windows\system32\_003687_.tmp.dll
c:\windows\system32\_003688_.tmp.dll
c:\windows\system32\_003690_.tmp.dll
c:\windows\system32\_003691_.tmp.dll
c:\windows\system32\_003692_.tmp.dll
c:\windows\system32\_003693_.tmp.dll
c:\windows\system32\_003694_.tmp.dll
c:\windows\system32\_003697_.tmp.dll
c:\windows\system32\_003698_.tmp.dll
c:\windows\system32\_003699_.tmp.dll
c:\windows\system32\_003700_.tmp.dll
c:\windows\system32\_003701_.tmp.dll
c:\windows\system32\_003702_.tmp.dll
c:\windows\system32\_003703_.tmp.dll
c:\windows\system32\_003705_.tmp.dll
c:\windows\system32\_003706_.tmp.dll
c:\windows\system32\_003707_.tmp.dll
c:\windows\system32\_003708_.tmp.dll
c:\windows\system32\_003709_.tmp.dll
c:\windows\system32\_003710_.tmp.dll
c:\windows\system32\_003711_.tmp.dll
c:\windows\system32\_003712_.tmp.dll
c:\windows\system32\_003713_.tmp.dll
c:\windows\system32\_003714_.tmp.dll
c:\windows\system32\_003715_.tmp.dll
c:\windows\system32\_003716_.tmp.dll
c:\windows\system32\_003717_.tmp.dll
c:\windows\system32\_003718_.tmp.dll
c:\windows\system32\_003719_.tmp.dll
c:\windows\system32\_003720_.tmp.dll
c:\windows\system32\_003721_.tmp.dll
c:\windows\system32\_003723_.tmp.dll
c:\windows\system32\_003724_.tmp.dll
c:\windows\system32\_003725_.tmp.dll
c:\windows\system32\_003726_.tmp.dll
c:\windows\system32\_003728_.tmp.dll
c:\windows\system32\_003730_.tmp.dll
c:\windows\system32\_003731_.tmp.dll
c:\windows\system32\_003732_.tmp.dll
c:\windows\system32\_003733_.tmp.dll
c:\windows\system32\_003734_.tmp.dll
c:\windows\system32\_003735_.tmp.dll
c:\windows\system32\_003736_.tmp.dll
c:\windows\system32\_003738_.tmp.dll
c:\windows\system32\_003739_.tmp.dll
c:\windows\system32\_003740_.tmp.dll
c:\windows\system32\_003741_.tmp.dll
c:\windows\system32\_003742_.tmp.dll
c:\windows\system32\_003743_.tmp.dll
c:\windows\system32\_003744_.tmp.dll
c:\windows\system32\_003745_.tmp.dll
c:\windows\system32\_003747_.tmp.dll
c:\windows\system32\_003748_.tmp.dll
c:\windows\system32\_003749_.tmp.dll
c:\windows\system32\_003750_.tmp.dll
c:\windows\system32\_003751_.tmp.dll
c:\windows\system32\_003753_.tmp.dll
c:\windows\system32\_003754_.tmp.dll
c:\windows\system32\_003758_.tmp.dll
c:\windows\system32\_003759_.tmp.dll
c:\windows\system32\_003761_.tmp.dll
c:\windows\system32\_003764_.tmp.dll
c:\windows\system32\_003766_.tmp.dll
c:\windows\system32\_003767_.tmp.dll
c:\windows\system32\_003768_.tmp.dll
c:\windows\system32\_003769_.tmp.dll
c:\windows\system32\_003772_.tmp.dll
c:\windows\system32\_003773_.tmp.dll
c:\windows\system32\_003774_.tmp.dll
c:\windows\system32\_003775_.tmp.dll
c:\windows\system32\_003776_.tmp.dll
c:\windows\system32\_003781_.tmp.dll
c:\windows\system32\_003783_.tmp.dll
c:\windows\system32\_003784_.tmp.dll
c:\windows\system32\_005847_.tmp.dll
c:\windows\system32\_005848_.tmp.dll
c:\windows\system32\_005849_.tmp.dll
c:\windows\system32\_005850_.tmp.dll
c:\windows\system32\_005857_.tmp.dll
c:\windows\system32\_005858_.tmp.dll
c:\windows\system32\_005859_.tmp.dll
c:\windows\system32\_005860_.tmp.dll
c:\windows\system32\_005862_.tmp.dll
c:\windows\system32\_005863_.tmp.dll
c:\windows\system32\_005866_.tmp.dll
c:\windows\system32\_005867_.tmp.dll
c:\windows\system32\_005869_.tmp.dll
c:\windows\system32\_005870_.tmp.dll
c:\windows\system32\_005871_.tmp.dll
c:\windows\system32\_005873_.tmp.dll
c:\windows\system32\_005876_.tmp.dll
c:\windows\system32\_005877_.tmp.dll
c:\windows\system32\_005881_.tmp.dll
c:\windows\system32\_005882_.tmp.dll
c:\windows\system32\_005884_.tmp.dll
c:\windows\system32\_005887_.tmp.dll
c:\windows\system32\_005889_.tmp.dll
c:\windows\system32\_005890_.tmp.dll
c:\windows\system32\_005891_.tmp.dll
c:\windows\system32\_005892_.tmp.dll
c:\windows\system32\_005893_.tmp.dll
c:\windows\system32\_005896_.tmp.dll
c:\windows\system32\_005897_.tmp.dll
c:\windows\system32\_005898_.tmp.dll
c:\windows\system32\_005899_.tmp.dll
c:\windows\system32\_005900_.tmp.dll
c:\windows\system32\_005905_.tmp.dll
c:\windows\system32\_005907_.tmp.dll
c:\windows\system32\_005908_.tmp.dll
c:\windows\system32\bszip.dll
c:\windows\system32\SET105E.tmp
c:\windows\system32\SET1063.tmp
c:\windows\system32\SET1066.tmp
c:\windows\system32\SET1067.tmp
c:\windows\system32\SET106B.tmp
c:\windows\system32\SET109D.tmp
c:\windows\system32\SET1232.tmp
c:\windows\system32\SET1235.tmp
c:\windows\system32\SET123A.tmp
c:\windows\system32\SET126C.tmp
c:\windows\system32\SET12A7.tmp
c:\windows\system32\SET12AA.tmp
c:\windows\system32\SET12AB.tmp
c:\windows\system32\SET12AF.tmp
c:\windows\system32\SET12B3.tmp
c:\windows\system32\SET12BA.tmp
c:\windows\system32\SET12C.tmp
c:\windows\system32\SET12D.tmp
c:\windows\system32\SET12E1.tmp
c:\windows\system32\SET12F.tmp
c:\windows\system32\SET1304.tmp
c:\windows\system32\SET131.tmp
c:\windows\system32\SET133.tmp
c:\windows\system32\SET135.tmp
c:\windows\system32\SET136.tmp
c:\windows\system32\SET138.tmp
c:\windows\system32\SET13A.tmp
c:\windows\system32\SET13B.tmp
c:\windows\system32\SET13C.tmp
c:\windows\system32\SET13E.tmp
c:\windows\system32\SET13F.tmp
c:\windows\system32\SET143.tmp
c:\windows\system32\SET144.tmp
c:\windows\system32\SET145.tmp
c:\windows\system32\SET147.tmp
c:\windows\system32\SET148.tmp
c:\windows\system32\SET149.tmp
c:\windows\system32\SET14A.tmp
c:\windows\system32\SET14B.tmp
c:\windows\system32\SET14D.tmp
c:\windows\system32\SET14E.tmp
c:\windows\system32\SET14F.tmp
c:\windows\system32\SET151.tmp
c:\windows\system32\SET152.tmp
c:\windows\system32\SET153.tmp
c:\windows\system32\SET156.tmp
c:\windows\system32\SET157.tmp
c:\windows\system32\SET158.tmp
c:\windows\system32\SET159.tmp
c:\windows\system32\SET15A.tmp
c:\windows\system32\SET15B.tmp
c:\windows\system32\SET15D.tmp
c:\windows\system32\SET15E.tmp
c:\windows\system32\SET160.tmp
c:\windows\system32\SET161.tmp
c:\windows\system32\SET162.tmp
c:\windows\system32\SET164.tmp
c:\windows\system32\SET166.tmp
c:\windows\system32\SET167.tmp
c:\windows\system32\SET168.tmp
c:\windows\system32\SET169.tmp
c:\windows\system32\SET16B.tmp
c:\windows\system32\SET16C.tmp
c:\windows\system32\SET16D.tmp
c:\windows\system32\SET16E.tmp
c:\windows\system32\SET16F.tmp
c:\windows\system32\SET170.tmp
c:\windows\system32\SET171.tmp
c:\windows\system32\SET172.tmp
c:\windows\system32\SET173.tmp
c:\windows\system32\SET174.tmp
c:\windows\system32\SET175.tmp
c:\windows\system32\SET176.tmp
c:\windows\system32\SET177.tmp
c:\windows\system32\SET178.tmp
c:\windows\system32\SET179.tmp
c:\windows\system32\SET17A.tmp
c:\windows\system32\SET17C.tmp
c:\windows\system32\SET17D.tmp
c:\windows\system32\SET17E.tmp
c:\windows\system32\SET17F.tmp
c:\windows\system32\SET180.tmp
c:\windows\system32\SET181.tmp
c:\windows\system32\SET182.tmp
c:\windows\system32\SET183.tmp
c:\windows\system32\SET184.tmp
c:\windows\system32\SET185.tmp
c:\windows\system32\SET186.tmp
c:\windows\system32\SET187.tmp
c:\windows\system32\SET188.tmp
c:\windows\system32\SET189.tmp
c:\windows\system32\SET18A.tmp
c:\windows\system32\SET18B.tmp
c:\windows\system32\SET18C.tmp
c:\windows\system32\SET18D.tmp
c:\windows\system32\SET18E.tmp
c:\windows\system32\SET18F.tmp
c:\windows\system32\SET191.tmp
c:\windows\system32\SET192.tmp
c:\windows\system32\SET194.tmp
c:\windows\system32\SET195.tmp
c:\windows\system32\SET196.tmp
c:\windows\system32\SET19C.tmp
c:\windows\system32\SET19D.tmp
c:\windows\system32\SET19E.tmp
c:\windows\system32\SET1A0.tmp
c:\windows\system32\SET1A1.tmp
c:\windows\system32\SET1A2.tmp
c:\windows\system32\SET1A3.tmp
c:\windows\system32\SET1A4.tmp
c:\windows\system32\SET1A5.tmp
c:\windows\system32\SET1A6.tmp
c:\windows\system32\SET1A7.tmp
c:\windows\system32\SET1A8.tmp
c:\windows\system32\SET1A9.tmp
c:\windows\system32\SET1AA.tmp
c:\windows\system32\SET1AB.tmp
c:\windows\system32\SET1AC.tmp
c:\windows\system32\SET1AD.tmp
c:\windows\system32\SET1AE.tmp
c:\windows\system32\SET1B1.tmp
c:\windows\system32\SET1B3.tmp
c:\windows\system32\SET1B4.tmp
c:\windows\system32\SET1B5.tmp
c:\windows\system32\SET1B7.tmp
c:\windows\system32\SET1B8.tmp
c:\windows\system32\SET1BA.tmp
c:\windows\system32\SET1BD.tmp
c:\windows\system32\SET1C0.tmp
c:\windows\system32\SET1C1.tmp
c:\windows\system32\SET1C2.tmp
c:\windows\system32\SET1C3.tmp
c:\windows\system32\SET1C4.tmp
c:\windows\system32\SET1C5.tmp
c:\windows\system32\SET1C6.tmp
c:\windows\system32\SET1C9.tmp
c:\windows\system32\SET1CA.tmp
c:\windows\system32\SET1CB.tmp
c:\windows\system32\SET1CC.tmp
c:\windows\system32\SET1CD.tmp
c:\windows\system32\SET1D0.tmp
c:\windows\system32\SET1D1.tmp
c:\windows\system32\SET1D2.tmp
c:\windows\system32\SET1D3.tmp
c:\windows\system32\SET1D4.tmp
c:\windows\system32\SET1D5.tmp
c:\windows\system32\SET1D6.tmp
c:\windows\system32\SET1D8.tmp
c:\windows\system32\SET1DA.tmp
c:\windows\system32\SET1DB.tmp
c:\windows\system32\SET1DC.tmp
c:\windows\system32\SET1DD.tmp
c:\windows\system32\SET1DE.tmp
c:\windows\system32\SET1E1.tmp
c:\windows\system32\SET1E3.tmp
c:\windows\system32\SET1E4.tmp
c:\windows\system32\SET1E5.tmp
c:\windows\system32\SET1E6.tmp
c:\windows\system32\SET1E7.tmp
c:\windows\system32\SET1E8.tmp
c:\windows\system32\SET1E9.tmp
c:\windows\system32\SET1EA.tmp
c:\windows\system32\SET1EB.tmp
c:\windows\system32\SET1EC.tmp
c:\windows\system32\SET1ED.tmp
c:\windows\system32\SET1EE.tmp
c:\windows\system32\SET1EF.tmp
c:\windows\system32\SET1F1.tmp
c:\windows\system32\SET1F3.tmp
c:\windows\system32\SET1F4.tmp
c:\windows\system32\SET1F7.tmp
c:\windows\system32\SET1F8.tmp
c:\windows\system32\SET1FA.tmp
c:\windows\system32\SET1FB.tmp
c:\windows\system32\SET1FF.tmp
c:\windows\system32\SET201.tmp
c:\windows\system32\SET202.tmp
c:\windows\system32\SET203.tmp
c:\windows\system32\SET205.tmp
c:\windows\system32\SET207.tmp
c:\windows\system32\SET208.tmp
c:\windows\system32\SET209.tmp
c:\windows\system32\SET20A.tmp
c:\windows\system32\SET20C.tmp
c:\windows\system32\SET20D.tmp
c:\windows\system32\SET20E.tmp
c:\windows\system32\SET210.tmp
c:\windows\system32\SET212.tmp
c:\windows\system32\SET213.tmp
c:\windows\system32\SET214.tmp
c:\windows\system32\SET215.tmp
c:\windows\system32\SET216.tmp
c:\windows\system32\SET217.tmp
c:\windows\system32\SET218.tmp
c:\windows\system32\SET219.tmp
c:\windows\system32\SET21A.tmp
c:\windows\system32\SET21B.tmp
c:\windows\system32\SET21C.tmp
c:\windows\system32\SET21D.tmp
c:\windows\system32\SET21E.tmp
c:\windows\system32\SET221.tmp
c:\windows\system32\SET226.tmp
c:\windows\system32\SET227.tmp
c:\windows\system32\SET22A.tmp
c:\windows\system32\SET22D.tmp
c:\windows\system32\SET22E.tmp
c:\windows\system32\SET231.tmp
c:\windows\system32\SET232.tmp
c:\windows\system32\SET233.tmp
c:\windows\system32\SET235.tmp
c:\windows\system32\SET236.tmp
c:\windows\system32\SET238.tmp
c:\windows\system32\SET23B.tmp
c:\windows\system32\SET23C.tmp
c:\windows\system32\SET23F.tmp
c:\windows\system32\SET240.tmp
c:\windows\system32\SET241.tmp
c:\windows\system32\SET242.tmp
c:\windows\system32\SET243.tmp
c:\windows\system32\SET244.tmp
c:\windows\system32\SET245.tmp
c:\windows\system32\SET246.tmp
c:\windows\system32\SET247.tmp
c:\windows\system32\SET248.tmp
c:\windows\system32\SET249.tmp
c:\windows\system32\SET24A.tmp
c:\windows\system32\SET24B.tmp
c:\windows\system32\SET24D.tmp
c:\windows\system32\SET250.tmp
c:\windows\system32\SET252.tmp
c:\windows\system32\SET253.tmp
c:\windows\system32\SET254.tmp
c:\windows\system32\SET255.tmp
c:\windows\system32\SET256.tmp
c:\windows\system32\SET257.tmp
c:\windows\system32\SET259.tmp
c:\windows\system32\SET25A.tmp
c:\windows\system32\SET25B.tmp
c:\windows\system32\SET25C.tmp
c:\windows\system32\SET25D.tmp
c:\windows\system32\SET25E.tmp
c:\windows\system32\SET261.tmp
c:\windows\system32\SET263.tmp
c:\windows\system32\SET264.tmp
c:\windows\system32\SET265.tmp
c:\windows\system32\SET266.tmp
c:\windows\system32\SET267.tmp
c:\windows\system32\SET268.tmp
c:\windows\system32\SET269.tmp
c:\windows\system32\SET26A.tmp
c:\windows\system32\SET26B.tmp
c:\windows\system32\SET26C.tmp
c:\windows\system32\SET26D.tmp
c:\windows\system32\SET26E.tmp
c:\windows\system32\SET26F.tmp
c:\windows\system32\SET270.tmp
c:\windows\system32\SET271.tmp
c:\windows\system32\SET272.tmp
c:\windows\system32\SET273.tmp
c:\windows\system32\SET274.tmp
c:\windows\system32\SET277.tmp
c:\windows\system32\SET278.tmp
c:\windows\system32\SET279.tmp
c:\windows\system32\SET27D.tmp
c:\windows\system32\SET281.tmp
c:\windows\system32\SET282.tmp
c:\windows\system32\SET283.tmp
c:\windows\system32\SET284.tmp
c:\windows\system32\SET285.tmp
c:\windows\system32\SET286.tmp
c:\windows\system32\SET287.tmp
c:\windows\system32\SET288.tmp
c:\windows\system32\SET289.tmp
c:\windows\system32\SET28B.tmp
c:\windows\system32\SET28E.tmp
c:\windows\system32\SET28F.tmp
c:\windows\system32\SET291.tmp
c:\windows\system32\SET292.tmp
c:\windows\system32\SET295.tmp
c:\windows\system32\SET298.tmp
c:\windows\system32\SET299.tmp
c:\windows\system32\SET29A.tmp
c:\windows\system32\SET29B.tmp
c:\windows\system32\SET29C.tmp
c:\windows\system32\SET29D.tmp
c:\windows\system32\SET29F.tmp
c:\windows\system32\SET2A4.tmp
c:\windows\system32\SET2A5.tmp
c:\windows\system32\SET2A7.tmp
c:\windows\system32\SET2A9.tmp
c:\windows\system32\SET2AA.tmp
c:\windows\system32\SET2AB.tmp
c:\windows\system32\SET2AD.tmp
c:\windows\system32\SET2AE.tmp
c:\windows\system32\SET2AF.tmp
c:\windows\system32\SET2B0.tmp
c:\windows\system32\SET2B1.tmp
c:\windows\system32\SET2B2.tmp
c:\windows\system32\SET2B3.tmp
c:\windows\system32\SET2B5.tmp
c:\windows\system32\SET2B7.tmp
c:\windows\system32\SET2BA.tmp
c:\windows\system32\SET2BB.tmp
c:\windows\system32\SET2BC.tmp
c:\windows\system32\SET2BD.tmp
c:\windows\system32\SET2BE.tmp
c:\windows\system32\SET2BF.tmp
c:\windows\system32\SET2C3.tmp
c:\windows\system32\SET2C5.tmp
c:\windows\system32\SET2C6.tmp
c:\windows\system32\SET2C8.tmp
c:\windows\system32\SET2C9.tmp
c:\windows\system32\SET2CC.tmp
c:\windows\system32\SET2CD.tmp
c:\windows\system32\SET2CE.tmp
c:\windows\system32\SET2CF.tmp
c:\windows\system32\SET2D0.tmp
c:\windows\system32\SET2D2.tmp
c:\windows\system32\SET2D3.tmp
c:\windows\system32\SET2D4.tmp
c:\windows\system32\SET2D8.tmp
c:\windows\system32\SET2DA.tmp
c:\windows\system32\SET2DB.tmp
c:\windows\system32\SET2DC.tmp
c:\windows\system32\SET2E0.tmp
c:\windows\system32\SET2E4.tmp
c:\windows\system32\SET2E5.tmp
c:\windows\system32\SET2E7.tmp
c:\windows\system32\SET2E9.tmp
c:\windows\system32\SET2EA.tmp
c:\windows\system32\SET2EF.tmp
c:\windows\system32\SET2F0.tmp
c:\windows\system32\SET2F1.tmp
c:\windows\system32\SET2F2.tmp
c:\windows\system32\SET2F3.tmp
c:\windows\system32\SET2F4.tmp
c:\windows\system32\SET2F5.tmp
c:\windows\system32\SET2F6.tmp
c:\windows\system32\SET2F8.tmp
c:\windows\system32\SET2F9.tmp
c:\windows\system32\SET2FA.tmp
c:\windows\system32\SET2FB.tmp
c:\windows\system32\SET2FC.tmp
c:\windows\system32\SET2FD.tmp
c:\windows\system32\SET2FE.tmp
c:\windows\system32\SET2FF.tmp
c:\windows\system32\SET300.tmp
c:\windows\system32\SET302.tmp
c:\windows\system32\SET303.tmp
c:\windows\system32\SET304.tmp
c:\windows\system32\SET306.tmp
c:\windows\system32\SET307.tmp
c:\windows\system32\SET30A.tmp
c:\windows\system32\SET30B.tmp
c:\windows\system32\SET30D.tmp
c:\windows\system32\SET30E.tmp
c:\windows\system32\SET30F.tmp
c:\windows\system32\SET312.tmp
c:\windows\system32\SET313.tmp
c:\windows\system32\SET314.tmp
c:\windows\system32\SET315.tmp
c:\windows\system32\SET319.tmp
c:\windows\system32\SET31A.tmp
c:\windows\system32\SET31B.tmp
c:\windows\system32\SET31C.tmp
c:\windows\system32\SET31D.tmp
c:\windows\system32\SET322.tmp
c:\windows\system32\SET324.tmp
c:\windows\system32\SET325.tmp
c:\windows\system32\SET327.tmp
c:\windows\system32\SET329.tmp
c:\windows\system32\SET32A.tmp
c:\windows\system32\SET32B.tmp
c:\windows\system32\SET32D.tmp
c:\windows\system32\SET32E.tmp
c:\windows\system32\SET32F.tmp
c:\windows\system32\SET330.tmp
c:\windows\system32\SET331.tmp
c:\windows\system32\SET332.tmp
c:\windows\system32\SET334.tmp
c:\windows\system32\SET335.tmp
c:\windows\system32\SET336.tmp
c:\windows\system32\SET337.tmp
c:\windows\system32\SET338.tmp
c:\windows\system32\SET339.tmp
c:\windows\system32\SET33A.tmp
c:\windows\system32\SET33C.tmp
c:\windows\system32\SET33E.tmp
c:\windows\system32\SET342.tmp
c:\windows\system32\SET343.tmp
c:\windows\system32\SET347.tmp
c:\windows\system32\SET349.tmp
c:\windows\system32\SET34A.tmp
c:\windows\system32\SET34B.tmp
c:\windows\system32\SET34C.tmp
c:\windows\system32\SET34D.tmp
c:\windows\system32\SET34E.tmp
c:\windows\system32\SET350.tmp
c:\windows\system32\SET351.tmp
c:\windows\system32\SET352.tmp
c:\windows\system32\SET356.tmp
c:\windows\system32\SET357.tmp
c:\windows\system32\SET358.tmp
c:\windows\system32\SET359.tmp
c:\windows\system32\SET35A.tmp
c:\windows\system32\SET35C.tmp
c:\windows\system32\SET35D.tmp
c:\windows\system32\SET35F.tmp
c:\windows\system32\SET360.tmp
c:\windows\system32\SET362.tmp
c:\windows\system32\SET364.tmp
c:\windows\system32\SET365.tmp
c:\windows\system32\SET367.tmp
c:\windows\system32\SET368.tmp
c:\windows\system32\SET369.tmp
c:\windows\system32\SET36A.tmp
c:\windows\system32\SET36B.tmp
c:\windows\system32\SET36C.tmp
c:\windows\system32\SET371.tmp
c:\windows\system32\SET375.tmp
c:\windows\system32\SET376.tmp
c:\windows\system32\SET37E.tmp
c:\windows\system32\SET380.tmp
c:\windows\system32\SET381.tmp
c:\windows\system32\SET382.tmp
c:\windows\system32\SET384.tmp
c:\windows\system32\SET386.tmp
c:\windows\system32\SET388.tmp
c:\windows\system32\SET38B.tmp
c:\windows\system32\SET38D.tmp
c:\windows\system32\SET38E.tmp
c:\windows\system32\SET393.tmp
c:\windows\system32\SET394.tmp
c:\windows\system32\SET395.tmp
c:\windows\system32\SET398.tmp
c:\windows\system32\SET399.tmp
c:\windows\system32\SET39A.tmp
c:\windows\system32\SET39B.tmp
c:\windows\system32\SET39C.tmp
c:\windows\system32\SET39D.tmp
c:\windows\system32\SET39E.tmp
c:\windows\system32\SET3A0.tmp
c:\windows\system32\SET3A1.tmp
c:\windows\system32\SET3A2.tmp
c:\windows\system32\SET3A3.tmp
c:\windows\system32\SET3A4.tmp
c:\windows\system32\SET3A5.tmp
c:\windows\system32\SET3A6.tmp
c:\windows\system32\SET3A8.tmp
c:\windows\system32\SET3A9.tmp
c:\windows\system32\SET3AA.tmp
c:\windows\system32\SET3AB.tmp
c:\windows\system32\SET3AC.tmp
c:\windows\system32\SET3AD.tmp
c:\windows\system32\SET3AE.tmp
c:\windows\system32\SET3AF.tmp
c:\windows\system32\SET3B0.tmp
c:\windows\system32\SET3B1.tmp
c:\windows\system32\SET3B2.tmp
c:\windows\system32\SET3B4.tmp
c:\windows\system32\SET3B5.tmp
c:\windows\system32\SET3B6.tmp
c:\windows\system32\SET3B7.tmp
c:\windows\system32\SET3BB.tmp
c:\windows\system32\SET3BC.tmp
c:\windows\system32\SET3BE.tmp
c:\windows\system32\SET3C1.tmp
c:\windows\system32\SET3C2.tmp
c:\windows\system32\SET3C4.tmp
c:\windows\system32\SET3C5.tmp
c:\windows\system32\SET3C6.tmp
c:\windows\system32\SET3C7.tmp
c:\windows\system32\SET3C9.tmp
c:\windows\system32\SET3CA.tmp
c:\windows\system32\SET3CE.tmp
c:\windows\system32\SET3CF.tmp
c:\windows\system32\SET3D0.tmp
c:\windows\system32\SET3D1.tmp
c:\windows\system32\SET3D3.tmp
c:\windows\system32\SET3D5.tmp
c:\windows\system32\SET3D6.tmp
c:\windows\system32\SET3D8.tmp
c:\windows\system32\SET3D9.tmp
c:\windows\system32\SET3DB.tmp
c:\windows\system32\SET3DC.tmp
c:\windows\system32\SET3DE.tmp
c:\windows\system32\SET3DF.tmp
c:\windows\system32\SET3E0.tmp
c:\windows\system32\SET3E2.tmp
c:\windows\system32\SET3E4.tmp
c:\windows\system32\SET3E5.tmp
c:\windows\system32\SET3E6.tmp
c:\windows\system32\SET3E7.tmp
c:\windows\system32\SET3EA.tmp
c:\windows\system32\SET3EB.tmp
c:\windows\system32\SET3EC.tmp
c:\windows\system32\SET3ED.tmp
c:\windows\system32\SET3EF.tmp
c:\windows\system32\SET3F0.tmp
c:\windows\system32\SET3F2.tmp
c:\windows\system32\SET3F3.tmp
c:\windows\system32\SET3F4.tmp
c:\windows\system32\SET3F5.tmp
c:\windows\system32\SET3F7.tmp
c:\windows\system32\SET3F8.tmp
c:\windows\system32\SET3FA.tmp
c:\windows\system32\SET3FD.tmp
c:\windows\system32\SET3FE.tmp
c:\windows\system32\SET400.tmp
c:\windows\system32\SET401.tmp
c:\windows\system32\SET402.tmp
c:\windows\system32\SET403.tmp
c:\windows\system32\SET404.tmp
c:\windows\system32\SET405.tmp
c:\windows\system32\SET40A.tmp
c:\windows\system32\SET40B.tmp
c:\windows\system32\SET40F.tmp
c:\windows\system32\SET411.tmp
c:\windows\system32\SET412.tmp
c:\windows\system32\SET413.tmp
c:\windows\system32\SET416.tmp
c:\windows\system32\SET417.tmp
c:\windows\system32\SET41C.tmp
c:\windows\system32\SET41D.tmp
c:\windows\system32\SET41E.tmp
c:\windows\system32\SET41F.tmp
c:\windows\system32\SET420.tmp
c:\windows\system32\SET421.tmp
c:\windows\system32\SET422.tmp
c:\windows\system32\SET424.tmp
c:\windows\system32\SET425.tmp
c:\windows\system32\SET426.tmp
c:\windows\system32\SET427.tmp
c:\windows\system32\SET428.tmp
c:\windows\system32\SET42A.tmp
c:\windows\system32\SET42C.tmp
c:\windows\system32\SET42D.tmp
c:\windows\system32\SET42E.tmp
c:\windows\system32\SET42F.tmp
c:\windows\system32\SET430.tmp
c:\windows\system32\SET431.tmp
c:\windows\system32\SET432.tmp
c:\windows\system32\SET433.tmp
c:\windows\system32\SET435.tmp
c:\windows\system32\SET43A.tmp
c:\windows\system32\SET43D.tmp
c:\windows\system32\SET43E.tmp
c:\windows\system32\SET440.tmp
c:\windows\system32\SET442.tmp
c:\windows\system32\SET443.tmp
c:\windows\system32\SET444.tmp
c:\windows\system32\SET445.tmp
c:\windows\system32\Temp
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
——-\Legacy_ZESOFT
.
.
((((((((((((((((((((((((( Files Created from 2011-11-20 to 2011-12-20 )))))))))))))))))))))))))))))))
.
.
2068-08-24 18:25 . 2004-08-24 18:27 375808 —-a-w- c:\program files\Microsoft Games\Halo\binkw32.dll
2011-12-18 18:25 . 2011-12-18 18:25 2106216 —-a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll
2011-12-18 18:25 . 2011-12-18 18:25 134104 —-a-w- c:\program files\Mozilla Firefox\components\browsercomps.dll
2011-12-18 18:25 . 2011-12-18 18:25 1998168 —-a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll
2011-12-18 18:25 . 2011-12-18 18:25 89048 —-a-w- c:\program files\Mozilla Firefox\libEGL.dll
2011-12-18 18:25 . 2011-12-18 18:25 478168 —-a-w- c:\program files\Mozilla Firefox\libGLESv2.dll
2011-12-18 18:25 . 2011-12-18 18:25 15832 —-a-w- c:\program files\Mozilla Firefox\mozalloc.dll
2011-12-18 18:25 . 2011-12-18 18:25 1989592 —-a-w- c:\program files\Mozilla Firefox\mozjs.dll
2011-12-18 18:25 . 2011-12-18 18:25 801752 —-a-w- c:\program files\Mozilla Firefox\mozsqlite3.dll
2011-12-17 18:14 . 2011-12-17 19:39 ——– d—–w- c:\documents and settings\All Users\Application Data\WeCareReminder
2011-12-16 01:56 . 2011-12-16 01:56 ——– d—–w- c:\windows\system32\winrm
2011-12-16 01:56 . 2011-12-16 01:56 ——– d—–w- c:\windows\system32\GroupPolicy
2011-12-16 01:55 . 2011-12-16 01:56 ——– dc-h–w- c:\windows\$968930Uinstall_KB968930$
2011-12-16 01:55 . 2011-12-16 01:55 ——– d—–w- C:\4ff325f672ef19420c1fd9959d35b578
2011-12-16 01:43 . 2011-10-20 03:16 20312 —-a-w- c:\windows\system32\RegistryDefragBootTime.exe
2011-12-15 01:03 . 2011-12-15 01:03 ——– d—–w- c:\windows\system32\config\systemprofile\Application Data\IObit
2011-12-14 00:50 . 2011-12-14 00:50 ——– d—–w- c:\documents and settings\All Users\Application Data\IObit
2011-12-14 00:48 . 2011-12-14 00:48 ——– d—–w- c:\documents and settings\Paul Gunson\Application Data\IObit
2011-12-14 00:47 . 2011-12-14 00:47 ——– d—–w- c:\program files\IObit
2011-12-13 03:33 . 2011-12-13 03:33 ——– d—–w- c:\documents and settings\All Users\Application Data\MemeoCommon
2011-12-13 03:18 . 2011-12-13 03:18 ——– d—–w- c:\documents and settings\LocalService\Application Data\Seagate
2011-12-13 03:18 . 2011-12-13 03:18 ——– d—–w- c:\documents and settings\LocalService\Local Settings\Application Data\ServiceTest
2011-12-13 03:17 . 2011-12-13 03:17 ——– d—–w- c:\documents and settings\Paul Gunson\Application Data\Memeo
2011-12-13 03:06 . 2011-12-13 03:06 ——– d—–w- c:\program files\Common Files\Memeo
2011-12-13 01:34 . 2011-12-13 01:34 ——– d—–w- c:\windows\system32\wbem\Repository
2011-12-13 00:25 . 2011-12-13 00:25 ——– d—–w- c:\documents and settings\Paul Gunson\Application Data\Seagate
2011-12-13 00:24 . 2011-12-13 00:24 ——– d—–w- c:\program files\Memeo
2011-12-13 00:24 . 2011-12-13 00:24 ——– d—–w- c:\documents and settings\Paul Gunson\Local Settings\Application Data\temp
2011-12-13 00:23 . 2011-12-13 02:13 ——– d—–w- c:\program files\Seagate
2011-12-12 03:17 . 2011-12-13 01:31 ——– d—–w- C:\7c9a1048e842af9602d120b2b9
2011-12-11 01:53 . 2011-12-11 01:53 ——– d—–w- c:\documents and settings\Administrator
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-03 15:51 . 2011-05-30 20:50 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-23 13:25 . 2008-10-02 23:57 1859584 —-a-w- c:\windows\system32\win32k.sys
2011-11-04 19:20 . 2004-02-06 22:05 916992 —-a-w- c:\windows\system32\wininet.dll
2011-11-04 19:20 . 2002-08-29 11:00 43520 —-a-w- c:\windows\system32\licmgr10.dll
2011-11-04 19:20 . 2002-08-29 11:00 1469440 —-a-w- c:\windows\system32\inetcpl.cpl
2011-11-04 11:23 . 2004-08-04 05:59 385024 —-a-w- c:\windows\system32\html.iec
2011-11-01 16:07 . 2004-04-14 22:54 1288704 —-a-w- c:\windows\system32\ole32.dll
2011-10-28 05:31 . 2008-10-02 23:57 33280 —-a-w- c:\windows\system32\csrsrv.dll
2011-10-25 13:33 . 2008-10-02 23:57 2192768 —-a-w- c:\windows\system32\ntoskrnl.exe
2011-10-25 12:52 . 2008-10-02 23:57 2069376 —-a-w- c:\windows\system32\ntkrnlpa.exe
2011-10-18 19:32 . 2010-12-30 03:10 150856 —-a-w- c:\windows\system32\mfevtps.exe
2011-10-18 11:13 . 2002-08-29 11:00 186880 —-a-w- c:\windows\system32\encdec.dll
2011-10-15 18:16 . 2010-12-30 03:10 9608 —-a-w- c:\windows\system32\drivers\mfeclnk.sys
2011-10-15 18:16 . 2010-12-30 03:10 89792 —-a-w- c:\windows\system32\drivers\mfetdi2k.sys
2011-10-15 18:16 . 2010-12-30 03:10 87656 —-a-w- c:\windows\system32\drivers\mferkdet.sys
2011-10-15 18:16 . 2010-12-30 03:10 83856 —-a-w- c:\windows\system32\drivers\mfendisk.sys
2011-10-15 18:16 . 2010-12-30 03:10 57600 —-a-w- c:\windows\system32\drivers\cfwids.sys
2011-10-15 18:16 . 2010-12-30 03:10 338176 —-a-w- c:\windows\system32\drivers\mfefirek.sys
2011-10-15 18:16 . 2010-12-30 03:10 180816 —-a-w- c:\windows\system32\drivers\mfeavfk.sys
2011-10-15 18:16 . 2010-12-30 03:10 121256 —-a-w- c:\windows\system32\drivers\mfeapfk.sys
2011-10-15 18:16 . 2009-05-09 15:58 59456 —-a-w- c:\windows\system32\drivers\mfebopk.sys
2011-10-15 18:16 . 2009-05-09 15:58 464176 —-a-w- c:\windows\system32\drivers\mfehidk.sys
2011-09-28 07:06 . 2002-09-23 20:10 599040 —-a-w- c:\windows\system32\crypt32.dll
2011-09-26 16:41 . 2008-07-29 23:59 611328 —-a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 16:41 . 2002-08-29 11:00 220160 —-a-w- c:\windows\system32\oleacc.dll
2011-09-26 16:41 . 2002-08-29 11:00 20480 —-a-w- c:\windows\system32\oleaccrc.dll
2007-08-19 13:00 . 2007-08-19 13:00 50009400 —-a-w- c:\program files\iTunesSetup.exe
2009-09-13 04:05 . 2009-09-13 04:05 124240 —-a-w- c:\program files\mozilla firefox\plugins\CCMSDK.dll
2009-09-13 04:06 . 2009-09-13 04:06 13136 —-a-w- c:\program files\mozilla firefox\plugins\cgpcfg.dll
2009-09-13 04:06 . 2009-09-13 04:06 70488 —-a-w- c:\program files\mozilla firefox\plugins\CgpCore.dll
2009-09-13 04:06 . 2009-09-13 04:06 91480 —-a-w- c:\program files\mozilla firefox\plugins\confmgr.dll
2009-09-13 04:06 . 2009-09-13 04:06 22360 —-a-w- c:\program files\mozilla firefox\plugins\ctxlogging.dll
2009-09-13 04:07 . 2009-09-13 04:07 255312 —-a-w- c:\program files\mozilla firefox\plugins\ctxmui.dll
2009-09-13 04:06 . 2009-09-13 04:06 31064 —-a-w- c:\program files\mozilla firefox\plugins\icafile.dll
2009-09-13 04:06 . 2009-09-13 04:06 40280 —-a-w- c:\program files\mozilla firefox\plugins\icalogon.dll
2009-08-14 18:33 . 2009-08-14 18:33 652640 —-a-w- c:\program files\mozilla firefox\plugins\sslsdk_b.dll
2009-09-13 04:06 . 2009-09-13 04:06 23896 —-a-w- c:\program files\mozilla firefox\plugins\TcpPServ.dll
2011-12-18 18:25 . 2011-12-18 18:25 134104 —-a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2011-04-14 18:01 . 2010-12-30 03:10 24376 —-a-w- c:\program files\mozilla firefox\components\Scriptff.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvMediaCenter"="c:\windows\system32\NVMCTRAY.DLL" [2003-10-06 49152]
"H/PC Connection Agent"="c:\program files\microsoft activesync\wcescomm.exe" [2003-04-22 413775]
"Akamai NetSession Interface"="c:\documents and settings\Paul Gunson\Local Settings\Application Data\Akamai\netsession_win.exe" [2011-12-13 3305760]
"PlaxoUpdate"="c:\program files\Plaxo\2.13.1.6\PlaxoHelper.exe" [2008-04-14 227914]
"Advanced SystemCare 5"="c:\program files\IObit\Advanced SystemCare 5\ASCTray.exe" [2011-12-14 619352]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DwlClient"="c:\program files\Common Files\Dell\EUSW\Support.exe" [2003-05-15 245760]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2003-10-06 5058560]
"nwiz"="nwiz.exe" [2003-10-06 741376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2003-10-06 49152]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2006-05-10 94208]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2010-03-12 49208]
"ConnectionCenter"="c:\program files\Citrix\ICA Client\concentr.exe" [2009-09-13 103768]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-09-16 1318552]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-11-29 421888]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"VERIZONDM"="c:\program files\VERIZONDM\bin\sprtcmd.exe" [2011-02-01 206120]
"Verizon_McciTrayApp"="c:\program files\Verizon\McciTrayApp.exe" [2010-03-17 1565696]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2011-08-31 40368]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-09 421736]
"Motive SmartBridge"="c:\progra~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe" [2005-05-17 385024]
"Microsoft Works Update Detection"="c:\program files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe" [2001-08-17 28738]
"IPHSend"="c:\program files\Common Files\AOL\IPHSend\IPHSend.exe" [2006-02-17 124520]
"Iomega Drive Icons"="c:\program files\Iomega\DriveIcons\ImgIcon.exe" [2002-08-13 86016]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb04.exe" [2001-12-12 196608]
"HostManager"="c:\program files\Common Files\AOL\1146916653\ee\AOLSoftware.exe" [2006-05-10 50760]
"FLMOFFICEKEYBOARD"="c:\program files\Office keyboard utility\1.2\OFFICEKB.exe" [2003-08-03 215040]
"FLMBROWSERMOUSE"="c:\program files\Browser mouse\1.2\mouse32a.exe" [2003-08-03 356352]
"Deskup"="c:\program files\Iomega\DriveIcons\deskup.exe" [2002-07-16 32768]
"AdaptecDirectCD"="c:\program files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" [2002-04-10 679936]
"Memeo Instant Backup"="c:\program files\Memeo\AutoBackup\MemeoLauncher2.exe" [2011-05-04 136416]
"Seagate Dashboard"="c:\program files\Seagate\Seagate Dashboard\MemeoLauncher.exe" [2011-06-01 79112]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"RunNarrator"="Narrator.exe" [2008-04-14 53760]
.
c:\documents and settings\Administrator.DGY7P321.000\Start Menu\Programs\Startup\
Seagate NA0ESCGD Product Registration.lnk - c:\documents and settings\Paul Gunson\Application Data\Leadertech\PowerRegister\Seagate NA0ESCGD Product Registration.exe [N/A]
.
c:\documents and settings\Paul Gunson\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
America Online 7.0 Tray Icon.lnk - c:\program files\America Online 7.0\aoltray.exe [2002-11-24 32839]
BodyMedia Sync.lnk - c:\program files\BodyMedia\Sync\BodyMediaSync.exe [2011-1-31 2115072]
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2002-11-24 45056]
Event Reminder.lnk - c:\program files\Broderbund\PrintMaster\PMREMIND.EXE [2003-10-27 327680]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-10-16 214360]
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2006-1-7 593920]
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
Microsoft Works Calendar Reminders.lnk - c:\program files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe [2001-8-7 24633]
QuickBooks Update Agent.lnk - c:\program files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [2009-9-16 972064]
Verizon Online Support Center.lnk - c:\program files\Verizon Online\SupportCenter\bin\matcli.exe [2004-2-21 204800]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\c:\0autocheck autochk *\0lsdelete
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\Microsoft ActiveSync\\WCESCOMM.EXE"=
"c:\\Program Files\\AIM\\aim.exe"=
"c:\\Program Files\\Microsoft Games\\Halo\\halo.exe"=
"c:\\Program Files\\WinMX\\WinMX.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\Common Files\\AOL\\1146916653\\ee\\aolsoftware.exe"=
"c:\\Program Files\\Common Files\\AOL\\1146916653\\ee\\aim6.exe"=
"c:\\Program Files\\Browser mouse\\1.2\\mouse32a.exe"=
"c:\\Program Files\\Intuit\\QuickBooks 2006\\QBDBMgrN.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\SYSTEM32\\dxdiag.exe"=
"c:\\WINDOWS\\SYSTEM32\\dpnsvr.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Smart Web Printing\\SmartWebPrintExe.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Common Files\\McAfee\\McSvcHost\\McSvHost.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Documents and Settings\\Paul Gunson\\Local Settings\\Application Data\\Akamai\\netsession_win.exe"=
"c:\\Program Files\\Seagate\\Seagate Dashboard\\HipServAgent\\HipServAgent.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3724:TCP"= 3724:TCP:WoW
"6112:TCP"= 6112:TCP:WoW2
"6881:TCP"= 6881:TCP:WoW3
"6999:TCP"= 6999:TCP:WoW4
"50000:UDP"= 50000:UDP:IHA_MessageCenter
"5985:TCP"= 5985:TCP:*:Disabled:Windows Remote Management
"1172:TCP"= 1172:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface
.
R1 msikbd2k;Multimedia Keyboard Filter Driver;c:\windows\SYSTEM32\DRIVERS\msikbd2k.sys [8/3/2003 2:20 PM 6656]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys –> c:\windows\system32\DRIVERS\Lbd.sys [?]
S1 ctxusbm;Citrix USB Monitor Driver;c:\windows\SYSTEM32\DRIVERS\ctxusbm.sys [9/8/2009 6:13 PM 65584]
S1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\SYSTEM32\DRIVERS\mfetdi2k.sys [12/29/2010 10:10 PM 89792]
S2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files\IObit\Advanced SystemCare 5\ASCService.exe [12/13/2011 7:47 PM 494424]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe -k Akamai [8/29/2002 6:00 AM 14336]
S2 IHA_MessageCenter;IHA_MessageCenter;c:\program files\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe [10/13/2010 4:06 PM 151552]
S2 LBeepKE;LBeepKE;c:\windows\SYSTEM32\DRIVERS\LBeepKE.sys [9/23/2006 6:38 AM 3712]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [5/10/2009 5:08 PM 94880]
S2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [12/29/2010 10:09 PM 214904]
S2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [12/29/2010 10:09 PM 214904]
S2 MemeoBackgroundService;MemeoBackgroundService;c:\program files\Memeo\AutoBackup\MemeoBackgroundService.exe [5/4/2011 4:04 PM 25824]
S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\mfefire.exe [12/29/2010 10:11 PM 160608]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\SYSTEM32\mfevtps.exe [12/29/2010 10:10 PM 150856]
S2 nhksrv;Netropa NHK Server;c:\program files\Office keyboard utility\1.2\NHKSRV.EXE [8/3/2003 2:20 PM 28672]
S2 SeagateDashboardService;Seagate Dashboard Service;c:\program files\Seagate\Seagate Dashboard\SeagateDashboardService.exe [6/1/2011 11:42 AM 14088]
S2 sprtsvc_verizondm;SupportSoft Sprocket Service (verizondm);c:\program files\VERIZONDM\bin\sprtsvc.exe [2/1/2011 4:54 AM 206120]
S2 tgsrvc_verizondm;SupportSoft Repair Service (verizondm);c:\program files\VERIZONDM\bin\tgsrvc.exe [2/1/2011 4:54 AM 185640]
S3 cfwids;McAfee Inc. cfwids;c:\windows\SYSTEM32\DRIVERS\cfwids.sys [12/29/2010 10:10 PM 57600]
S3 jbridgep;jbridgep;\??\c:\docume~1\PAULGU~1\LOCALS~1\Temp\jbridgep.sys –> c:\docume~1\PAULGU~1\LOCALS~1\Temp\jbridgep.sys [?]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [6/20/2011 9:31 AM 2152152]
S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\kernexplorer.sys [6/20/2011 9:31 AM 15232]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [1/15/2010 7:49 AM 227232]
S3 mfefirek;McAfee Inc. mfefirek;c:\windows\SYSTEM32\DRIVERS\mfefirek.sys [12/29/2010 10:10 PM 338176]
S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\SYSTEM32\DRIVERS\mfendisk.sys [12/29/2010 10:10 PM 83856]
S3 mfendiskmp;mfendiskmp;c:\windows\SYSTEM32\DRIVERS\mfendisk.sys [12/29/2010 10:10 PM 83856]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\SYSTEM32\DRIVERS\mferkdet.sys [12/29/2010 10:10 PM 87656]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [8/29/2002 6:00 AM 14336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
Akamai REG_MULTI_SZ Akamai
WINRM REG_MULTI_SZ WINRM
.
Contents of the 'Scheduled Tasks' folder
.
2011-12-20 c:\windows\Tasks\Ad-Aware Scan (new).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2011-06-20 07:40]
.
2011-12-20 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2011-06-20 07:40]
.
2011-12-17 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 17:34]
.
2002-12-19 c:\windows\Tasks\Symantec NetDetect.job
- c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2002-11-24 14:04]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.wtop.com/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid;=ie7&rls;=com.microsoft:en-US&ie;=utf8&oe;=utf8
uInternet Settings,ProxyOverride = 127.0.0.1;*.local
uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p;=%s
IE: E&xport; to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: LimeShop Preferences - file://c:\program files\LimeShop\System\Temp\limeshop_script0.htm
Trusted Zone: intuit.com\ttlc
Trusted Zone: sec.gov\secret
Trusted Zone: sec.gov\secret1
Trusted Zone: sec.gov\secrm
Trusted Zone: turbotax.com
TCP: DhcpNameServer = 192.168.1.1
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {BA2CB6B1-03EE-4068-87CC-F5E4DD772A9B} - hxxps://secret.sec.gov/CitrixLogonPoint/WI/EPAClient/CitrixCAO.cab
FF - ProfilePath - c:\documents and settings\Paul Gunson\Application Data\Mozilla\Firefox\Profiles\05qiq3ov.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.wtop.com/
FF - prefs.js: keyword.URL - hxxp://search.alot.com/web?src_id=30046&client;_id=04ec1c6aa82b08578c324f09&camp;_id=2988&install;_time=2011-09-23T23:54Z≺=auto&tb;_version=1.0.10000(G)&q;=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Garmin Communicator: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E} - %profile%\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: McAfee SiteAdvisor: {4ED1F68A-5463-4931-9384-8FFF5ED91D92} - c:\program files\McAfee\SiteAdvisor
FF - Ext: Move Media Player: [removed] - c:\documents and settings\Paul Gunson\Application Data\Move Networks
.
- - - - ORPHANS REMOVED - - - -
.
HKCU-Run-Aim6 - (no file)
AddRemove-CdaC13Ba - c:\windows\CDAC13BA.EXE
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-12-20 17:24
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
DwlClient = c:\program files\Common Files\Dell\EUSW\Support.exe?l?e?s?\?D?e?l?l?\?E?U?S?W?\?S?u?p?p?o?r?t?.?e?x?e???????X:??0???x???@???X???????????@???P???? ?w? ?w)??p????????(???y????U?w????????????0??????w, ?w?M?wW??w???w)??p????????x'@?????????X????????"@?e?????
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Akamai]
"ServiceDll"="c:\program files\common files\akamai/netsession_win_b427739.dll"
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Iomega Activity Disk2]
"ImagePath"="\"\""
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\vsdatant]
"ImagePath"=""
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'winlogon.exe'(352)
c:\windows\system32\l3codecx.acm
c:\windows\system32\mobilev.acm
.
- - - - - - - > 'explorer.exe'(932)
c:\windows\system32\WININET.dll
c:\program files\Windows Media Player\wmpband.dll
c:\windows\system32\ieframe.dll
.
———————— Other Running Processes ————————
.
c:\progra~1\mcafee.com\agent\mcagent.exe
.
**************************************************************************
.
Completion time: 2011-12-20 17:33:42 - machine was rebooted
ComboFix-quarantined-files.txt 2011-12-20 22:33
.
Pre-Run: 48,513,601,536 bytes free
Post-Run: 49,361,350,656 bytes free
.
- - End Of File - - B385A28256D99C443206EA667F4D1248

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI