Pagina 1 van 3 123 LaatsteLaatste
Weergegeven resultaten: 1 t/m 10 van 23
  1. #1
    Up-to-date  
    Geregistreerd
    16 October 2011
    Berichten
    18
    Bedankjes
    1
    Bedankt
    1 keer in 1 post

    Herhaaldelijke pogingen tot scannen met hijackthis mislukken

    Goedenavond,

    Naar aanleiding van mijn opstartpost in het ander forumgedeelte post ik hier verder. Ik heb ondertussen al een aantal pogingen ondernomen om mijn systeem te scannen met MBAM en hijackthis. Maar telkens zonder succes. Er zijn echter wel een aantal andere scans gelukt. TDSS killer vond "Rootkit.Win32.ZAccess.e" en met hijackthis wist ik de opstartprocessen te scannen. Deze log kan ik plaatsen mocht dit nodig zijn. Alle hulp is zeker welkom.

    Bedankt

  2. #2
    Spyware Slayer   EvelineGirl's schermafbeelding
    Geregistreerd
    4 November 2009
    Locatie
    Spijkenisse Zuid-Holland
    Berichten
    519
    Bedankjes
    99
    Bedankt
    483 keer in 259 posts
    Hallo,

    1.
    Wil je het logje van TDSSKiller ook even hier plakken aub.

    2.
    Download ComboFix van één van deze locaties:
    Link 1
    Link 2

    * BELANGRIJK !!! Sla ComboFix.exe op je Bureaublad op.

    >>Hier<< kunt u lezen hoe u Combofix dient te gebruiken.
    1. Bij Windows XP gebruikers zal er indien nodig gevraagd worden om de "Recovery Console" te installeren, sta dit dan toe (hiervoor is een actieve internet verbinding vereist)
    2. Schakel alle antivirus- en antispywareprogramma's uit, want anders kunnen ze misschien conflicteren met ComboFix.
    * (hier of hier staat een handleiding over hoe je deze kan uitschakelen
    3. Het kan voorkomen dat de computer meerdere malen opnieuw gestart moet worden, dit is normaal.
    4. Dubbelklik op "Combofix.exe" om de tool te starten.
    5. Klik niet in het scherm van Combofix als deze actief is, hierdoor kan de 'tool' vastlopen.
    * Noot !!! Als er een error wordt getoond met de melding "Illegal operation attempted on a registery key that has been marked for deletion." herstart dan de computer.
    6. Wanneer ComboFix klaar is, zal het het een logbestand voor je maken. Post de inhoud van dit logbestand (te vinden als C:\ComboFix.txt) in je volgende bericht.


    Succes,
    Eveline.
    Mvg,


  3. #3
    Up-to-date  
    Geregistreerd
    16 October 2011
    Berichten
    18
    Bedankjes
    1
    Bedankt
    1 keer in 1 post

    Post

    Dag EvelineGirl,

    Bedankt om me te helpen met dit probleem. de beide logfiles vind u dus in de post. Zoals gevraagd. Echter heb ik geen report gesaved van mijn eerdere scans met TDSS. En ik hoop dat de huidige log geen valse info verschaft want ik heb eerst combofix gedraait en had dan pas gezien dat u ook een TDSS report vroeg. Bij deze laatste scan is dus geen melding meer gegeven van de ZeroAccess rootkit.

    TDSS log:

    16:59:27.0970 3868 TDSS rootkit removing tool 2.6.10.0 Oct 17 2011 15:43:23
    16:59:28.0095 3868 ================================================== ==========
    16:59:28.0095 3868 Current date / time: 2011/10/17 16:59:28.0095
    16:59:28.0095 3868 SystemInfo:
    16:59:28.0095 3868
    16:59:28.0095 3868 OS Version: 6.1.7600 ServicePack: 0.0
    16:59:28.0095 3868 Product type: Workstation
    16:59:28.0095 3868 ComputerName: DESKTOPBOVEN
    16:59:28.0095 3868 UserName: Jens Sierens
    16:59:28.0095 3868 Windows directory: C:\Windows
    16:59:28.0095 3868 System windows directory: C:\Windows
    16:59:28.0095 3868 Processor architecture: Intel x86
    16:59:28.0095 3868 Number of processors: 2
    16:59:28.0095 3868 Page size: 0x1000
    16:59:28.0095 3868 Boot type: Normal boot
    16:59:28.0095 3868 ================================================== ==========
    16:59:28.0922 3868 Initialize success
    16:59:52.0275 2736 ================================================== ==========
    16:59:52.0275 2736 Scan started
    16:59:52.0275 2736 Mode: Manual;
    16:59:52.0275 2736 ================================================== ==========
    16:59:53.0227 2736 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\Windows\system32\DRIVERS\1394ohci.sys
    16:59:53.0227 2736 1394ohci - ok
    16:59:53.0383 2736 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\Windows\system32\DRIVERS\ACPI.sys
    16:59:53.0383 2736 ACPI - ok
    16:59:53.0539 2736 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\Windows\system32\DRIVERS\acpipmi.sys
    16:59:53.0539 2736 AcpiPmi - ok
    16:59:53.0726 2736 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
    16:59:53.0726 2736 adp94xx - ok
    16:59:53.0898 2736 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
    16:59:53.0898 2736 adpahci - ok
    16:59:54.0054 2736 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
    16:59:54.0054 2736 adpu320 - ok
    16:59:54.0225 2736 AFD (0db7a48388d54d154ebec120461a0fcd) C:\Windows\system32\drivers\afd.sys
    16:59:54.0241 2736 AFD - ok
    16:59:54.0272 2736 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\DRIVERS\agp440.sys
    16:59:54.0272 2736 agp440 - ok
    16:59:54.0444 2736 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
    16:59:54.0444 2736 aic78xx - ok
    16:59:54.0631 2736 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\DRIVERS\aliide.sys
    16:59:54.0631 2736 aliide - ok
    16:59:54.0678 2736 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\DRIVERS\amdagp.sys
    16:59:54.0678 2736 amdagp - ok
    16:59:54.0740 2736 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\DRIVERS\amdide.sys
    16:59:54.0740 2736 amdide - ok
    16:59:54.0912 2736 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
    16:59:54.0912 2736 AmdK8 - ok
    16:59:54.0943 2736 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
    16:59:54.0943 2736 AmdPPM - ok
    16:59:55.0099 2736 amdsata (19ce906b4cdc11fc4fef5745f33a63b6) C:\Windows\system32\drivers\amdsata.sys
    16:59:55.0099 2736 amdsata - ok
    16:59:55.0224 2736 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
    16:59:55.0224 2736 amdsbs - ok
    16:59:55.0255 2736 amdxata (869e67d66be326a5a9159fba8746fa70) C:\Windows\system32\drivers\amdxata.sys
    16:59:55.0255 2736 amdxata - ok
    16:59:55.0411 2736 AppID (feb834c02ce1e84b6a38f953ca067706) C:\Windows\system32\drivers\appid.sys
    16:59:55.0411 2736 AppID - ok
    16:59:55.0598 2736 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
    16:59:55.0598 2736 arc - ok
    16:59:55.0629 2736 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
    16:59:55.0629 2736 arcsas - ok
    16:59:55.0894 2736 AsIO (9d8cb58b9a9e177ddd599791a58a654d) C:\Windows\system32\drivers\AsIO.sys
    16:59:55.0894 2736 AsIO - ok
    16:59:56.0082 2736 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
    16:59:56.0082 2736 AsyncMac - ok
    16:59:56.0097 2736 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\DRIVERS\atapi.sys
    16:59:56.0097 2736 atapi - ok
    16:59:56.0378 2736 atikmdag (04f09923a393e4e0e8453a8f78361e73) C:\Windows\system32\DRIVERS\atikmdag.sys
    16:59:56.0456 2736 atikmdag - ok
    16:59:56.0612 2736 AtiPcie (b73c832088dd54b55e04ff6f9646ad8c) C:\Windows\system32\DRIVERS\AtiPcie.sys
    16:59:56.0612 2736 AtiPcie - ok
    16:59:56.0815 2736 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
    16:59:56.0830 2736 b06bdrv - ok
    16:59:56.0986 2736 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
    16:59:57.0002 2736 b57nd60x - ok
    16:59:57.0111 2736 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
    16:59:57.0111 2736 Beep - ok
    16:59:57.0283 2736 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
    16:59:57.0283 2736 blbdrive - ok
    16:59:57.0454 2736 bowser (9a5c671b7fbae4865149bb11f59b91b2) C:\Windows\system32\DRIVERS\bowser.sys
    16:59:57.0454 2736 bowser - ok
    16:59:57.0532 2736 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
    16:59:57.0532 2736 BrFiltLo - ok
    16:59:57.0595 2736 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
    16:59:57.0610 2736 BrFiltUp - ok
    16:59:57.0751 2736 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
    16:59:57.0751 2736 Brserid - ok
    16:59:57.0766 2736 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
    16:59:57.0766 2736 BrSerWdm - ok
    16:59:57.0782 2736 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
    16:59:57.0782 2736 BrUsbMdm - ok
    16:59:57.0798 2736 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
    16:59:57.0798 2736 BrUsbSer - ok
    16:59:57.0922 2736 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
    16:59:57.0938 2736 BTHMODEM - ok
    16:59:58.0188 2736 catchme - ok
    16:59:58.0453 2736 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
    16:59:58.0453 2736 cdfs - ok
    16:59:58.0765 2736 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\Windows\system32\DRIVERS\cdrom.sys
    16:59:58.0765 2736 cdrom - ok
    16:59:59.0108 2736 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
    16:59:59.0124 2736 circlass - ok
    16:59:59.0358 2736 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
    16:59:59.0373 2736 CLFS - ok
    16:59:59.0716 2736 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
    16:59:59.0716 2736 CmBatt - ok
    16:59:59.0935 2736 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\DRIVERS\cmdide.sys
    16:59:59.0935 2736 cmdide - ok
    17:00:00.0169 2736 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
    17:00:00.0169 2736 CNG - ok
    17:00:00.0294 2736 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
    17:00:00.0294 2736 Compbatt - ok
    17:00:00.0403 2736 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\Windows\system32\DRIVERS\CompositeBus.sys
    17:00:00.0403 2736 CompositeBus - ok
    17:00:00.0496 2736 cpuz135 - ok
    17:00:00.0590 2736 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
    17:00:00.0590 2736 crcdisk - ok
    17:00:00.0762 2736 CSC (27c9490bdd0ae48911ab8cf1932591ed) C:\Windows\system32\drivers\csc.sys
    17:00:00.0777 2736 CSC - ok
    17:00:01.0074 2736 DfsC (83d1ecea8faae75604c0fa49ac7ad996) C:\Windows\system32\Drivers\dfsc.sys
    17:00:01.0074 2736 DfsC - ok
    17:00:01.0152 2736 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
    17:00:01.0167 2736 discache - ok
    17:00:01.0448 2736 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
    17:00:01.0448 2736 Disk - ok
    17:00:01.0932 2736 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
    17:00:01.0932 2736 drmkaud - ok
    17:00:02.0337 2736 DXGKrnl (1679a4669326cb1a67cc95658d273234) C:\Windows\System32\drivers\dxgkrnl.sys
    17:00:02.0353 2736 DXGKrnl - ok
    17:00:02.0774 2736 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
    17:00:02.0836 2736 ebdrv - ok
    17:00:03.0070 2736 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
    17:00:03.0070 2736 elxstor - ok
    17:00:03.0258 2736 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\DRIVERS\errdev.sys
    17:00:03.0258 2736 ErrDev - ok
    17:00:03.0445 2736 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
    17:00:03.0445 2736 exfat - ok
    17:00:03.0570 2736 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
    17:00:03.0570 2736 fastfat - ok
    17:00:03.0741 2736 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
    17:00:03.0741 2736 fdc - ok
    17:00:03.0819 2736 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
    17:00:03.0835 2736 FileInfo - ok
    17:00:03.0960 2736 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
    17:00:03.0960 2736 Filetrace - ok
    17:00:04.0100 2736 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
    17:00:04.0100 2736 flpydisk - ok
    17:00:04.0116 2736 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
    17:00:04.0116 2736 FltMgr - ok
    17:00:04.0147 2736 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
    17:00:04.0147 2736 FsDepends - ok
    17:00:04.0209 2736 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
    17:00:04.0209 2736 Fs_Rec - ok
    17:00:04.0381 2736 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\Windows\system32\DRIVERS\fvevol.sys
    17:00:04.0381 2736 fvevol - ok
    17:00:04.0537 2736 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
    17:00:04.0537 2736 gagp30kx - ok
    17:00:04.0786 2736 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
    17:00:04.0786 2736 hcw85cir - ok
    17:00:04.0896 2736 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\Windows\system32\drivers\HdAudio.sys
    17:00:04.0896 2736 HdAudAddService - ok
    17:00:05.0005 2736 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\Windows\system32\DRIVERS\HDAudBus.sys
    17:00:05.0005 2736 HDAudBus - ok
    17:00:05.0098 2736 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
    17:00:05.0098 2736 HidBatt - ok
    17:00:05.0192 2736 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
    17:00:05.0192 2736 HidBth - ok
    17:00:05.0395 2736 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
    17:00:05.0395 2736 HidIr - ok
    17:00:05.0598 2736 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\Windows\system32\DRIVERS\hidusb.sys
    17:00:05.0598 2736 HidUsb - ok
    17:00:05.0722 2736 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\DRIVERS\HpSAMD.sys
    17:00:05.0738 2736 HpSAMD - ok
    17:00:05.0894 2736 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\Windows\system32\drivers\HTTP.sys
    17:00:05.0894 2736 HTTP - ok
    17:00:05.0910 2736 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\Windows\system32\drivers\hwpolicy.sys
    17:00:05.0910 2736 hwpolicy - ok
    17:00:06.0097 2736 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\DRIVERS\i8042prt.sys
    17:00:06.0112 2736 i8042prt - ok
    17:00:06.0331 2736 iaStorV (71f1a494fedf4b33c02c4a6a28d6d9e9) C:\Windows\system32\drivers\iaStorV.sys
    17:00:06.0346 2736 iaStorV - ok
    17:00:06.0440 2736 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
    17:00:06.0440 2736 iirsp - ok
    17:00:06.0471 2736 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\DRIVERS\intelide.sys
    17:00:06.0471 2736 intelide - ok
    17:00:06.0627 2736 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
    17:00:06.0627 2736 intelppm - ok
    17:00:06.0674 2736 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
    17:00:06.0690 2736 IpFilterDriver - ok
    17:00:06.0752 2736 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\Windows\system32\DRIVERS\IPMIDrv.sys
    17:00:06.0768 2736 IPMIDRV - ok
    17:00:06.0830 2736 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
    17:00:06.0830 2736 IPNAT - ok
    17:00:06.0955 2736 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
    17:00:06.0955 2736 IRENUM - ok
    17:00:07.0048 2736 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\DRIVERS\isapnp.sys
    17:00:07.0048 2736 isapnp - ok
    17:00:07.0158 2736 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\Windows\system32\DRIVERS\msiscsi.sys
    17:00:07.0158 2736 iScsiPrt - ok
    17:00:07.0329 2736 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
    17:00:07.0329 2736 kbdclass - ok
    17:00:07.0501 2736 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\Windows\system32\DRIVERS\kbdhid.sys
    17:00:07.0501 2736 kbdhid - ok
    17:00:07.0688 2736 KSecDD (e36a061ec11b373826905b21be10948f) C:\Windows\system32\Drivers\ksecdd.sys
    17:00:07.0688 2736 KSecDD - ok
    17:00:07.0719 2736 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\Windows\system32\Drivers\ksecpkg.sys
    17:00:07.0719 2736 KSecPkg - ok
    17:00:07.0891 2736 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
    17:00:07.0891 2736 lltdio - ok
    17:00:08.0062 2736 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
    17:00:08.0062 2736 LSI_FC - ok
    17:00:08.0234 2736 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
    17:00:08.0234 2736 LSI_SAS - ok
    17:00:08.0390 2736 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
    17:00:08.0390 2736 LSI_SAS2 - ok
    17:00:08.0452 2736 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
    17:00:08.0468 2736 LSI_SCSI - ok
    17:00:08.0608 2736 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
    17:00:08.0624 2736 luafv - ok
    17:00:08.0749 2736 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
    17:00:08.0749 2736 megasas - ok
    17:00:08.0920 2736 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
    17:00:08.0920 2736 MegaSR - ok
    17:00:09.0108 2736 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
    17:00:09.0108 2736 Modem - ok
    17:00:09.0264 2736 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
    17:00:09.0264 2736 monitor - ok
    17:00:09.0451 2736 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
    17:00:09.0451 2736 mouclass - ok
    17:00:09.0607 2736 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
    17:00:09.0607 2736 mouhid - ok
    17:00:09.0638 2736 mountmgr (921c18727c5920d6c0300736646931c2) C:\Windows\system32\drivers\mountmgr.sys
    17:00:09.0638 2736 mountmgr - ok
    17:00:09.0654 2736 mpio (2af5997438c55fb79d33d015c30e1974) C:\Windows\system32\DRIVERS\mpio.sys
    17:00:09.0654 2736 mpio - ok
    17:00:09.0685 2736 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
    17:00:09.0685 2736 mpsdrv - ok
    17:00:09.0716 2736 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\Windows\system32\drivers\mrxdav.sys
    17:00:09.0716 2736 MRxDAV - ok
    17:00:09.0872 2736 mrxsmb (ca7570e42522e24324a12161db14ec02) C:\Windows\system32\DRIVERS\mrxsmb.sys
    17:00:09.0872 2736 mrxsmb - ok
    17:00:09.0934 2736 mrxsmb10 (f965c3ab2b2ae5c378f4562486e35051) C:\Windows\system32\DRIVERS\mrxsmb10.sys
    17:00:09.0950 2736 mrxsmb10 - ok
    17:00:09.0981 2736 mrxsmb20 (25c38264a3c72594dd21d355d70d7a5d) C:\Windows\system32\DRIVERS\mrxsmb20.sys
    17:00:09.0981 2736 mrxsmb20 - ok
    17:00:10.0106 2736 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\Windows\system32\DRIVERS\msahci.sys
    17:00:10.0106 2736 msahci - ok
    17:00:10.0153 2736 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\Windows\system32\DRIVERS\msdsm.sys
    17:00:10.0153 2736 msdsm - ok
    17:00:10.0293 2736 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
    17:00:10.0293 2736 Msfs - ok
    17:00:10.0371 2736 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
    17:00:10.0371 2736 mshidkmdf - ok
    17:00:10.0496 2736 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\DRIVERS\msisadrv.sys
    17:00:10.0496 2736 msisadrv - ok
    17:00:10.0668 2736 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
    17:00:10.0668 2736 MSKSSRV - ok
    17:00:10.0777 2736 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
    17:00:10.0777 2736 MSPCLOCK - ok
    17:00:10.0855 2736 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
    17:00:10.0870 2736 MSPQM - ok
    17:00:10.0933 2736 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
    17:00:10.0948 2736 MsRPC - ok
    17:00:11.0073 2736 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys
    17:00:11.0073 2736 mssmbios - ok
    17:00:11.0229 2736 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
    17:00:11.0245 2736 MSTEE - ok
    17:00:11.0385 2736 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
    17:00:11.0432 2736 MTConfig - ok
    17:00:11.0650 2736 MTsensor (cbe71c122434805cb73ffb6619f60598) C:\Windows\system32\DRIVERS\ASACPI.sys
    17:00:11.0650 2736 MTsensor - ok
    17:00:11.0666 2736 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
    17:00:11.0682 2736 Mup - ok
    17:00:11.0822 2736 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
    17:00:11.0838 2736 NativeWifiP - ok
    17:00:11.0994 2736 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\Windows\system32\drivers\ndis.sys
    17:00:12.0009 2736 NDIS - ok
    17:00:12.0150 2736 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
    17:00:12.0165 2736 NdisCap - ok
    17:00:12.0181 2736 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
    17:00:12.0181 2736 NdisTapi - ok
    17:00:12.0306 2736 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\Windows\system32\DRIVERS\ndisuio.sys
    17:00:12.0306 2736 Ndisuio - ok
    17:00:12.0352 2736 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\Windows\system32\DRIVERS\ndiswan.sys
    17:00:12.0352 2736 NdisWan - ok
    17:00:12.0368 2736 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\Windows\system32\drivers\NDProxy.sys
    17:00:12.0368 2736 NDProxy - ok
    17:00:12.0477 2736 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
    17:00:12.0477 2736 NetBIOS - ok
    17:00:12.0524 2736 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
    17:00:12.0524 2736 NetBT - ok
    17:00:12.0727 2736 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
    17:00:12.0727 2736 nfrd960 - ok
    17:00:12.0820 2736 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
    17:00:12.0820 2736 Npfs - ok
    17:00:12.0852 2736 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
    17:00:12.0852 2736 nsiproxy - ok
    17:00:12.0898 2736 Ntfs (187002ce05693c306f43c873f821381f) C:\Windows\system32\drivers\Ntfs.sys
    17:00:12.0914 2736 Ntfs - ok
    17:00:12.0945 2736 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
    17:00:12.0945 2736 Null - ok
    17:00:13.0101 2736 nvraid (f1b0bed906f97e16f6d0c3629d2f21c6) C:\Windows\system32\drivers\nvraid.sys
    17:00:13.0101 2736 nvraid - ok
    17:00:13.0210 2736 nvstor (4520b63899e867f354ee012d34e11536) C:\Windows\system32\drivers\nvstor.sys
    17:00:13.0210 2736 nvstor - ok
    17:00:13.0335 2736 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\DRIVERS\nv_agp.sys
    17:00:13.0335 2736 nv_agp - ok
    17:00:13.0429 2736 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\DRIVERS\ohci1394.sys
    17:00:13.0429 2736 ohci1394 - ok
    17:00:13.0647 2736 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
    17:00:13.0647 2736 Parport - ok
    17:00:13.0663 2736 partmgr (ff4218952b51de44fe910953a3e686b9) C:\Windows\system32\drivers\partmgr.sys
    17:00:13.0663 2736 partmgr - ok
    17:00:13.0678 2736 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
    17:00:13.0678 2736 Parvdm - ok
    17:00:13.0756 2736 pci (c858cb77c577780ecc456a892e7e7d0f) C:\Windows\system32\DRIVERS\pci.sys
    17:00:13.0756 2736 pci - ok
    17:00:13.0834 2736 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\DRIVERS\pciide.sys
    17:00:13.0834 2736 pciide - ok
    17:00:13.0928 2736 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
    17:00:13.0928 2736 pcmcia - ok
    17:00:14.0006 2736 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
    17:00:14.0006 2736 pcw - ok
    17:00:14.0162 2736 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
    17:00:14.0178 2736 PEAUTH - ok
    17:00:14.0334 2736 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
    17:00:14.0334 2736 PptpMiniport - ok
    17:00:14.0396 2736 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
    17:00:14.0396 2736 Processor - ok
    17:00:14.0521 2736 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
    17:00:14.0521 2736 Psched - ok
    17:00:14.0661 2736 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
    17:00:14.0692 2736 ql2300 - ok
    17:00:14.0817 2736 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
    17:00:14.0817 2736 ql40xx - ok
    17:00:14.0911 2736 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
    17:00:14.0911 2736 QWAVEdrv - ok
    17:00:14.0926 2736 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
    17:00:14.0926 2736 RasAcd - ok
    17:00:14.0958 2736 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
    17:00:14.0958 2736 RasAgileVpn - ok
    17:00:15.0051 2736 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
    17:00:15.0051 2736 Rasl2tp - ok
    17:00:15.0067 2736 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
    17:00:15.0067 2736 RasPppoe - ok
    17:00:15.0098 2736 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
    17:00:15.0114 2736 RasSstp - ok
    17:00:15.0176 2736 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\Windows\system32\DRIVERS\rdbss.sys
    17:00:15.0192 2736 rdbss - ok
    17:00:15.0192 2736 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
    17:00:15.0207 2736 rdpbus - ok
    17:00:15.0285 2736 RDPCDD (1e016846895b15a99f9a176a05029075) C:\Windows\system32\DRIVERS\RDPCDD.sys
    17:00:15.0285 2736 RDPCDD - ok
    17:00:15.0332 2736 RDPDR (c5ff95883ffef704d50c40d21cfb3ab5) C:\Windows\system32\drivers\rdpdr.sys
    17:00:15.0332 2736 RDPDR - ok
    17:00:15.0488 2736 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
    17:00:15.0504 2736 RDPENCDD - ok
    17:00:15.0504 2736 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
    17:00:15.0519 2736 RDPREFMP - ok
    17:00:15.0535 2736 RDPWD (801371ba9782282892d00aadb08ee367) C:\Windows\system32\drivers\RDPWD.sys
    17:00:15.0535 2736 RDPWD - ok
    17:00:15.0628 2736 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\Windows\system32\drivers\rdyboost.sys
    17:00:15.0628 2736 rdyboost - ok
    17:00:15.0660 2736 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
    17:00:15.0691 2736 rspndr - ok
    17:00:15.0816 2736 RT61 (581e74880aeb1dba1cb5ac8e6e6c0a69) C:\Windows\system32\DRIVERS\RT61.sys
    17:00:15.0831 2736 RT61 - ok
    17:00:15.0925 2736 RTL8167 (05c2613f661584190c752f6184d1c8ef) C:\Windows\system32\DRIVERS\Rt86win7.sys
    17:00:15.0925 2736 RTL8167 - ok
    17:00:15.0956 2736 s3cap (5423d8437051e89dd34749f242c98648) C:\Windows\system32\DRIVERS\vms3cap.sys
    17:00:15.0956 2736 s3cap - ok
    17:00:16.0050 2736 SASDIFSV - ok
    17:00:16.0081 2736 SASKUTIL - ok
    17:00:16.0237 2736 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\Windows\system32\DRIVERS\sbp2port.sys
    17:00:16.0237 2736 sbp2port - ok
    17:00:16.0393 2736 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\Windows\system32\DRIVERS\scfilter.sys
    17:00:16.0393 2736 scfilter - ok
    17:00:16.0471 2736 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
    17:00:16.0471 2736 secdrv - ok
    17:00:16.0627 2736 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
    17:00:16.0627 2736 Serenum - ok
    17:00:16.0674 2736 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
    17:00:16.0674 2736 sermouse - ok
    17:00:16.0705 2736 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\DRIVERS\sffdisk.sys
    17:00:16.0705 2736 sffdisk - ok
    17:00:16.0736 2736 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\DRIVERS\sffp_mmc.sys
    17:00:16.0736 2736 sffp_mmc - ok
    17:00:16.0752 2736 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) C:\Windows\system32\DRIVERS\sffp_sd.sys
    17:00:16.0752 2736 sffp_sd - ok
    17:00:16.0767 2736 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
    17:00:16.0767 2736 sfloppy - ok
    17:00:16.0814 2736 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\DRIVERS\sisagp.sys
    17:00:16.0830 2736 sisagp - ok
    17:00:16.0876 2736 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
    17:00:16.0876 2736 SiSRaid2 - ok
    17:00:17.0001 2736 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
    17:00:17.0001 2736 SiSRaid4 - ok
    17:00:17.0048 2736 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
    17:00:17.0048 2736 Smb - ok
    17:00:17.0220 2736 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
    17:00:17.0220 2736 spldr - ok
    17:00:17.0282 2736 srv (c4a027b8c0bd3fc0699f41fa5e9e0c87) C:\Windows\system32\DRIVERS\srv.sys
    17:00:17.0298 2736 srv - ok
    17:00:17.0422 2736 srv2 (414bb592cad8a79649d01f9d94318fb3) C:\Windows\system32\DRIVERS\srv2.sys
    17:00:17.0438 2736 srv2 - ok
    17:00:17.0563 2736 srvnet (ff207d67700aa18242aaf985d3e7d8f4) C:\Windows\system32\DRIVERS\srvnet.sys
    17:00:17.0578 2736 srvnet - ok
    17:00:17.0734 2736 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
    17:00:17.0734 2736 stexstor - ok
    17:00:17.0812 2736 storflt (957e346ca948668f2496a6ccf6ff82cc) C:\Windows\system32\DRIVERS\vmstorfl.sys
    17:00:17.0812 2736 storflt - ok
    17:00:17.0937 2736 storvsc (d5751969dc3e4b88bf482ac8ec9fe019) C:\Windows\system32\DRIVERS\storvsc.sys
    17:00:17.0937 2736 storvsc - ok
    17:00:17.0968 2736 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys
    17:00:17.0968 2736 swenum - ok
    17:00:18.0202 2736 Tcpip (c2daaeb48f3a47c410b041a0d2382ee1) C:\Windows\system32\drivers\tcpip.sys
    17:00:18.0202 2736 Tcpip - ok
    17:00:18.0390 2736 TCPIP6 (c2daaeb48f3a47c410b041a0d2382ee1) C:\Windows\system32\DRIVERS\tcpip.sys
    17:00:18.0405 2736 TCPIP6 - ok
    17:00:18.0452 2736 tcpipreg (e64444523add154f86567c469bc0b17f) C:\Windows\system32\drivers\tcpipreg.sys
    17:00:18.0452 2736 tcpipreg - ok
    17:00:18.0561 2736 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\Windows\system32\drivers\tdpipe.sys
    17:00:18.0561 2736 TDPIPE - ok
    17:00:18.0577 2736 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\Windows\system32\drivers\tdtcp.sys
    17:00:18.0577 2736 TDTCP - ok
    17:00:18.0592 2736 tdx (cb39e896a2a83702d1737bfd402b3542) C:\Windows\system32\DRIVERS\tdx.sys
    17:00:18.0608 2736 tdx - ok
    17:00:18.0624 2736 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\Windows\system32\DRIVERS\termdd.sys
    17:00:18.0624 2736 TermDD - ok
    17:00:18.0826 2736 tmrkb (7e2887341a3164dedc9b89082c24aeca) C:\Windows\system32\DRIVERS\tmrkb.sys
    17:00:18.0826 2736 Suspicious file (Forged): C:\Windows\system32\DRIVERS\tmrkb.sys. Real md5: 7e2887341a3164dedc9b89082c24aeca, Fake md5: b44d1e95a4c70853230a2e1cd0dac0b9
    17:00:18.0826 2736 tmrkb ( ForgedFile.Multi.Generic ) - warning
    17:00:18.0826 2736 tmrkb - detected ForgedFile.Multi.Generic (1)
    17:00:18.0982 2736 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\Windows\system32\DRIVERS\tssecsrv.sys
    17:00:18.0982 2736 tssecsrv - ok
    17:00:19.0107 2736 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\Windows\system32\DRIVERS\tunnel.sys
    17:00:19.0123 2736 tunnel - ok
    17:00:19.0170 2736 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
    17:00:19.0185 2736 uagp35 - ok
    17:00:19.0216 2736 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\Windows\system32\DRIVERS\udfs.sys
    17:00:19.0216 2736 udfs - ok
    17:00:19.0248 2736 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\DRIVERS\uliagpkx.sys
    17:00:19.0248 2736 uliagpkx - ok
    17:00:19.0404 2736 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\Windows\system32\DRIVERS\umbus.sys
    17:00:19.0404 2736 umbus - ok
    17:00:19.0450 2736 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
    17:00:19.0450 2736 UmPass - ok
    17:00:19.0606 2736 usbaudio (2436a42aab4ad48a9b714e5b0f344627) C:\Windows\system32\drivers\usbaudio.sys
    17:00:19.0606 2736 usbaudio - ok
    17:00:19.0653 2736 usbccgp (c31ae588e403042632dc796cf09e30b0) C:\Windows\system32\DRIVERS\usbccgp.sys
    17:00:19.0653 2736 usbccgp - ok
    17:00:19.0809 2736 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\DRIVERS\usbcir.sys
    17:00:19.0809 2736 usbcir - ok
    17:00:19.0840 2736 usbehci (e4c436d914768ce965d5e659ba7eebd8) C:\Windows\system32\DRIVERS\usbehci.sys
    17:00:19.0856 2736 usbehci - ok
    17:00:20.0012 2736 usbhub (bdcd7156ec37448f08633fd899823620) C:\Windows\system32\DRIVERS\usbhub.sys
    17:00:20.0012 2736 usbhub - ok
    17:00:20.0043 2736 usbohci (eb2d819a639015253c871cda09d91d58) C:\Windows\system32\DRIVERS\usbohci.sys
    17:00:20.0043 2736 usbohci - ok
    17:00:20.0121 2736 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
    17:00:20.0121 2736 usbprint - ok
    17:00:20.0152 2736 USBSTOR (1c4287739a93594e57e2a9e6a3ed7353) C:\Windows\system32\DRIVERS\USBSTOR.SYS
    17:00:20.0152 2736 USBSTOR - ok
    17:00:20.0184 2736 usbuhci (22480bf4e5a09192e5e30ba4dde79fa4) C:\Windows\system32\drivers\usbuhci.sys
    17:00:20.0184 2736 usbuhci - ok
    17:00:20.0308 2736 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\DRIVERS\vdrvroot.sys
    17:00:20.0308 2736 vdrvroot - ok
    17:00:20.0402 2736 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
    17:00:20.0402 2736 vga - ok
    17:00:20.0480 2736 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
    17:00:20.0480 2736 VgaSave - ok
    17:00:20.0558 2736 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\Windows\system32\DRIVERS\vhdmp.sys
    17:00:20.0558 2736 vhdmp - ok
    17:00:20.0714 2736 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\DRIVERS\viaagp.sys
    17:00:20.0714 2736 viaagp - ok
    17:00:20.0745 2736 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
    17:00:20.0745 2736 ViaC7 - ok
    17:00:20.0886 2736 VIAHdAudAddService (dc56a867a2d92e1c51cb6d3f9c540548) C:\Windows\system32\drivers\viahduaa.sys
    17:00:20.0917 2736 VIAHdAudAddService - ok
    17:00:21.0042 2736 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\DRIVERS\viaide.sys
    17:00:21.0042 2736 viaide - ok
    17:00:21.0120 2736 vmbus (379b349f65f453d2a6e75ea6b7448e49) C:\Windows\system32\DRIVERS\vmbus.sys
    17:00:21.0135 2736 vmbus - ok
    17:00:21.0260 2736 VMBusHID (ec2bbab4b84d0738c6c83d2234dc36fe) C:\Windows\system32\DRIVERS\VMBusHID.sys
    17:00:21.0260 2736 VMBusHID - ok
    17:00:21.0338 2736 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\Windows\system32\DRIVERS\volmgr.sys
    17:00:21.0338 2736 volmgr - ok
    17:00:21.0447 2736 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
    17:00:21.0463 2736 volmgrx - ok
    17:00:21.0510 2736 volsnap (58df9d2481a56edde167e51b334d44fd) C:\Windows\system32\DRIVERS\volsnap.sys
    17:00:21.0510 2736 volsnap - ok
    17:00:21.0728 2736 vpcbus (33e74df34753fcaab06f6f2bdc8cabf5) C:\Windows\system32\DRIVERS\vpchbus.sys
    17:00:21.0759 2736 vpcbus - ok
    17:00:21.0962 2736 vpcnfltr (5f04362ceb5fb5901037e9d9eadd3760) C:\Windows\system32\DRIVERS\vpcnfltr.sys
    17:00:21.0962 2736 vpcnfltr - ok
    17:00:22.0087 2736 vpcusb (625088d6ee9ede977fd03cf18d1cd5c5) C:\Windows\system32\DRIVERS\vpcusb.sys
    17:00:22.0087 2736 vpcusb - ok
    17:00:22.0258 2736 vpcvmm (1023c696d42268e9071bb376dbec8396) C:\Windows\system32\drivers\vpcvmm.sys
    17:00:22.0258 2736 vpcvmm - ok
    17:00:22.0414 2736 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
    17:00:22.0414 2736 vsmraid - ok
    17:00:22.0633 2736 VSPerfDrv100 (5a2ddc5411a092bedb1a07755e087784) C:\Program Files\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\VSPerfDrv100.sys
    17:00:22.0633 2736 VSPerfDrv100 - ok
    17:00:22.0789 2736 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys
    17:00:22.0789 2736 vwifibus - ok
    17:00:22.0976 2736 wacmoumonitor (c3b03ed7b06657a3355f620bc02acfb6) C:\Windows\system32\DRIVERS\wacmoumonitor.sys
    17:00:22.0976 2736 wacmoumonitor - ok
    17:00:23.0007 2736 wacommousefilter (427a8bc96f16c40df81c2d2f4edd32dd) C:\Windows\system32\DRIVERS\wacommousefilter.sys
    17:00:23.0007 2736 wacommousefilter - ok
    17:00:23.0038 2736 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
    17:00:23.0038 2736 WacomPen - ok
    17:00:23.0194 2736 wacomvhid (846b58ea44bf8c92e4b59f4e2252c4c0) C:\Windows\system32\DRIVERS\wacomvhid.sys
    17:00:23.0194 2736 wacomvhid - ok
    17:00:23.0366 2736 WANARP (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
    17:00:23.0366 2736 WANARP - ok
    17:00:23.0366 2736 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
    17:00:23.0366 2736 Wanarpv6 - ok
    17:00:23.0553 2736 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
    17:00:23.0553 2736 Wd - ok
    17:00:23.0584 2736 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
    17:00:23.0584 2736 Wdf01000 - ok
    17:00:23.0756 2736 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
    17:00:23.0756 2736 WfpLwf - ok
    17:00:23.0772 2736 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
    17:00:23.0772 2736 WIMMount - ok
    17:00:23.0959 2736 WinDriver6 (0a597f84bc8af4229b529f655bb2ba14) C:\Windows\system32\drivers\windrvr6.sys
    17:00:23.0959 2736 WinDriver6 - ok
    17:00:24.0177 2736 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\DRIVERS\wmiacpi.sys
    17:00:24.0177 2736 WmiAcpi - ok
    17:00:24.0349 2736 WRkrn (6f759df9b7b1ddd22febe80cd942b54f) C:\Windows\system32\drivers\WRkrn.sys
    17:00:24.0349 2736 WRkrn - ok
    17:00:24.0411 2736 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
    17:00:24.0411 2736 ws2ifsl - ok
    17:00:24.0458 2736 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\Windows\system32\drivers\WudfPf.sys
    17:00:24.0474 2736 WudfPf - ok
    17:00:24.0630 2736 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\Windows\system32\DRIVERS\WUDFRd.sys
    17:00:24.0630 2736 WUDFRd - ok
    17:00:24.0692 2736 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
    17:00:24.0692 2736 \Device\Harddisk0\DR0 - ok
    17:00:24.0708 2736 MBR (0x1B8) (3051207086651214e435112e51817dc5) \Device\Harddisk1\DR1
    17:00:24.0708 2736 \Device\Harddisk1\DR1 - ok
    17:00:24.0708 2736 Boot (0x1200) (71301cf578259c44eac051a30ed79edd) \Device\Harddisk0\DR0\Partition0
    17:00:24.0723 2736 \Device\Harddisk0\DR0\Partition0 - ok
    17:00:24.0723 2736 Boot (0x1200) (2746959d8da5bc6d6b27c080fc47f0e3) \Device\Harddisk0\DR0\Partition1
    17:00:24.0723 2736 \Device\Harddisk0\DR0\Partition1 - ok
    17:00:24.0723 2736 Boot (0x1200) (1b11360251bf637005d28619ac9fa751) \Device\Harddisk1\DR1\Partition0
    17:00:24.0723 2736 \Device\Harddisk1\DR1\Partition0 - ok
    17:00:24.0739 2736 Boot (0x1200) (b1fbf230aa5a079fd8c945ff08808f03) \Device\Harddisk1\DR1\Partition1
    17:00:24.0739 2736 \Device\Harddisk1\DR1\Partition1 - ok
    17:00:24.0739 2736 ================================================== ==========
    17:00:24.0739 2736 Scan finished
    17:00:24.0739 2736 ================================================== ==========
    17:00:24.0754 3840 Detected object count: 1
    17:00:24.0754 3840 Actual detected object count: 1
    17:00:35.0144 3840 tmrkb ( ForgedFile.Multi.Generic ) - skipped by user
    17:00:35.0144 3840 tmrkb ( ForgedFile.Multi.Generic ) - User select action: Skip

    ComboFix log:

    ComboFix 11-10-16.03 - Jens Sierens 17/10/2011 16:19:05.1.2 - x86
    Microsoft Windows 7 Professional 6.1.7600.0.1252.32.1043.18.3327.2457 [GMT 2:00]
    Gestart vanuit: c:\users\Jens Sierens\Desktop\ComboFix.exe
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\users\Jens Sierens\AppData\Roaming\Jeotqo
    c:\users\Jens Sierens\AppData\Roaming\Jeotqo\geedq.puj
    c:\windows\$NtUninstallKB27545$
    c:\windows\$NtUninstallKB27545$\100569496\@
    c:\windows\$NtUninstallKB27545$\100569496\L\xadqgn nk
    c:\windows\$NtUninstallKB27545$\100569496\loader.t lb
    c:\windows\$NtUninstallKB27545$\100569496\U\@00000 001
    c:\windows\$NtUninstallKB27545$\100569496\U\@00000 0c0
    c:\windows\$NtUninstallKB27545$\100569496\U\@00000 0cb
    c:\windows\$NtUninstallKB27545$\100569496\U\@00000 0cf
    c:\windows\$NtUninstallKB27545$\100569496\U\@80000 000
    c:\windows\$NtUninstallKB27545$\100569496\U\@80000 0c0
    c:\windows\$NtUninstallKB27545$\100569496\U\@80000 0cb
    c:\windows\$NtUninstallKB27545$\100569496\U\@80000 0cf
    c:\windows\$NtUninstallKB27545$\3854956871
    c:\windows\{2521BB91-29B1-4d7e-9137-AC9875D77735}
    c:\windows\system32\
    c:\windows\system32\c_11982.nls
    .
    Besmet exemplaar van c:\windows\system32\drivers\netbt.sys werd aangetroffen en gedesinfecteerd
    Hersteld exemplaar van - c:\windows\SoftwareDistribution\Download\18e2c83e4 2cc8f0cc17b5dbfaf982690\x86_microsoft-windows-netbt_31bf3856ad364e35_6.1.7601.17514_none_626c324 d55864070\netbt.sys
    .
    Besmet exemplaar van c:\windows\system32\atiesrxx.exe werd aangetroffen en gedesinfecteerd
    Hersteld exemplaar van - c:\windows\System32\DriverStore\FileRepository\cl_ 87324.inf_x86_neutral_b52c10eae430a1c8\B_86988\ati esrxx.exe
    .
    Besmet exemplaar van c:\windows\Microsoft.NET\Framework\v4.0.30319\msco rsvw.exe werd aangetroffen en gedesinfecteerd
    Hersteld exemplaar van - c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rsvw.exe
    .
    .
    Besmet exemplaar van c:\program files\Tablet\Pen\Pen_Tablet.exe werd aangetroffen en gedesinfecteerd
    Hersteld exemplaar van - c:\combofix\HarddiskVolumeShadowCopy2_!Program Files!Tablet!Pen!Pen_Tablet.exe
    .
    Besmet exemplaar van c:\program files\Tablet\Pen\Pen_TouchService.exe werd aangetroffen en gedesinfecteerd
    Hersteld exemplaar van - c:\combofix\HarddiskVolumeShadowCopy2_!Program Files!Tablet!Pen!Pen_TouchService.exe
    .
    Besmet exemplaar van c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE werd aangetroffen en gedesinfecteerd
    Hersteld exemplaar van - c:\combofix\HarddiskVolumeShadowCopy2_!Program Files!Common Files!microsoft shared!Windows Live!WLIDSVC.EXE
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    -------\Service_5fe9198
    .
    .
    (((((((((((((((((((( Bestanden Gemaakt van 2011-09-17 to 2011-10-17 ))))))))))))))))))))))))))))))
    .
    .
    2011-10-17 14:44 . 2011-10-17 14:46 -------- d-----w- c:\users\Jens Sierens\AppData\Local\temp
    2011-10-17 14:44 . 2011-10-17 14:44 -------- d-----w- c:\users\Default\AppData\Local\temp
    2011-10-17 14:44 . 2011-03-28 18:31 1713536 ----a-w- c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    2011-10-17 14:23 . 2011-10-17 14:23 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{162B1EC0-1BB4-4A6A-8899-7DA50E276F6E}\offreg.dll
    2011-10-17 14:12 . 2009-07-13 23:53 45568 ----a-w- c:\windows\system32\drivers\ndisuio.sys
    2011-10-16 20:11 . 2011-10-16 20:11 65808 ----a-w- c:\windows\system32\drivers\tmrkb.sys
    2011-10-16 20:11 . 2011-10-16 20:11 205072 ----a-w- c:\windows\system32\drivers\tmcomm.sys
    2011-10-16 20:10 . 2011-10-16 20:10 388096 ----a-r- c:\users\Jens Sierens\AppData\Roaming\Microsoft\Installer\{45A66 726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
    2011-10-16 20:10 . 2011-10-16 20:10 -------- d-----w- c:\program files\Trend Micro
    2011-10-16 17:39 . 2011-10-16 17:39 -------- d-----w- c:\program files\HJT
    2011-10-16 15:22 . 2011-10-16 15:22 -------- d-----w- C:\TDSSKiller_Quarantine
    2011-10-16 15:18 . 2011-09-21 07:00 7269712 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{162B1EC0-1BB4-4A6A-8899-7DA50E276F6E}\mpengine.dll
    2011-10-16 13:40 . 2011-10-16 13:40 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
    2011-10-16 13:40 . 2011-10-16 13:40 -------- d-----w- c:\users\Jens Sierens\AppData\Roaming\SUPERAntiSpyware.com
    2011-10-14 20:32 . 2011-10-16 17:29 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2011-10-14 20:32 . 2011-10-14 20:32 -------- d-----w- c:\users\Jens Sierens\AppData\Roaming\Malwarebytes
    2011-10-14 20:32 . 2011-10-14 20:32 -------- d-----w- c:\programdata\Malwarebytes
    2011-10-14 20:31 . 2011-10-16 20:06 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2011-10-14 20:02 . 2011-10-16 19:28 48016 --sha-w- c:\windows\system32\c_11982.nl_
    2011-10-14 19:41 . 2011-10-14 19:41 140760 ----a-w- c:\windows\system32\WRusr.dll
    2011-10-14 19:41 . 2011-10-14 19:41 106312 ----a-w- c:\windows\system32\drivers\WRkrn.sys
    2011-10-14 19:41 . 2011-10-14 19:59 -------- d-----w- c:\programdata\WRData
    2011-10-14 19:41 . 2011-10-14 19:41 -------- d-----w- c:\program files\Webroot
    2011-10-09 20:48 . 2011-10-09 20:48 -------- d-sh--w- c:\users\Jens Sierens\AppData\Local\05fe9198
    2011-10-08 19:28 . 2011-10-08 19:28 -------- d-----w- c:\program files\Advanced File Organizer
    2011-10-03 21:26 . 2011-10-03 21:26 -------- d-----w- c:\program files\DCoder Image Source
    2011-10-03 21:26 . 2011-10-03 21:26 -------- d-----w- c:\program files\7-Zip
    2011-10-03 21:26 . 2011-10-03 21:26 -------- d-----w- c:\program files\FFMPEG Core Files
    2011-10-03 21:25 . 2011-10-03 21:25 -------- d-----w- c:\program files\SHOUTcast Source
    2011-10-03 21:25 . 2011-10-03 21:25 -------- d-----w- c:\program files\MONOGRAM AMR SplitterDecoder
    2011-10-03 21:25 . 2011-10-03 21:25 -------- d-----w- c:\program files\CD Audio Reader Filter
    2011-10-03 21:25 . 2011-10-03 21:25 -------- d-----w- c:\program files\OpenSource AVI Splitter
    2011-10-03 21:25 . 2011-10-03 21:25 -------- d-----w- c:\program files\OpenSource DTSAC3DD+ Source Filter
    2011-10-03 21:25 . 2011-10-03 21:25 -------- d-----w- c:\program files\Gabest MPEG Splitter
    2011-10-03 21:25 . 2011-10-03 21:25 -------- d-----w- c:\program files\DScaler5
    2011-10-03 21:25 . 2011-10-03 21:25 -------- d-----w- c:\program files\AC3Filter
    2011-10-03 21:25 . 2009-08-11 19:18 497664 ----a-w- c:\windows\system32\ac3filter.acm
    2011-10-03 21:25 . 2011-10-03 21:25 -------- d-----w- c:\program files\Bass Audio Decoder
    2011-10-03 21:24 . 2011-10-12 22:59 -------- d-----w- c:\programdata\Zoom Player
    2011-10-03 21:24 . 2011-10-03 21:24 -------- d-----w- c:\program files\Zoom Player
    2011-09-28 20:37 . 2011-09-28 20:42 -------- d-----w- c:\program files\Inkscape
    2011-09-28 20:14 . 2011-09-28 20:14 -------- d-----w- c:\users\Jens Sierens\AppData\Roaming\WTablet
    2011-09-28 20:14 . 2011-09-08 15:48 1107832 ----a-w- c:\windows\system32\Pen_Touch_Tablet.dll
    2011-09-28 20:14 . 2011-09-08 15:49 10752 ----a-w- c:\windows\system32\drivers\wacmoumonitor.sys
    2011-09-28 20:14 . 2011-09-08 15:49 11312 ----a-w- c:\windows\system32\drivers\wacommousefilter.sys
    2011-09-28 20:13 . 2011-09-08 15:49 14120 ----a-w- c:\windows\system32\drivers\wacomvhid.sys
    2011-09-28 20:13 . 2011-09-08 15:48 1156472 ----a-w- c:\windows\system32\Wintab32.dll
    2011-09-28 20:13 . 2011-09-08 15:48 1152888 ----a-w- c:\windows\system32\WacomMT.dll
    2011-09-28 20:13 . 2011-09-08 15:48 1369464 ----a-w- c:\windows\system32\Pen_Tablet.dll
    2011-09-28 20:13 . 2011-09-28 20:14 -------- d-----w- c:\program files\Tablet
    2011-09-26 19:53 . 2011-09-26 19:53 -------- d-----w- c:\users\Jens Sierens\AppData\Roaming\BitTorrent
    2011-09-26 19:53 . 2011-09-26 19:53 -------- d-----w- c:\users\Jens Sierens\AppData\Local\BitTorrent
    2011-09-26 19:51 . 2011-09-26 19:51 -------- d-----w- c:\users\Jens Sierens\AppData\Roaming\uTorrent
    2011-09-26 19:51 . 2011-09-26 19:51 -------- d-----w- c:\users\Jens Sierens\AppData\Local\uTorrent
    2011-09-25 13:38 . 2011-09-27 20:33 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
    2011-09-25 13:22 . 2011-09-25 13:22 -------- d-----w- c:\program files\Adobe Media Player
    .
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))) ))
    .
    2011-10-16 19:21 . 2010-10-19 17:05 295936 ----a-w- c:\windows\system32\drivers\vpcvmm.sys
    2011-10-16 18:30 . 2011-06-16 08:57 78336 ----a-w- c:\windows\system32\drivers\dfsc.sys
    2011-10-16 15:22 . 2009-07-13 23:53 36352 ----a-w- c:\windows\system32\drivers\netbios.sys
    2011-09-18 01:11 . 2010-10-09 14:46 1415680 ----a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\Re sourceCache.dll
    2011-07-20 20:10 . 2011-03-28 16:36 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\pp crlconfig600.dll
    .
    .
    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))) )
    .
    .
    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
    "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
    "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
    "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2011-05-13 4283256]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
    "HDAudDeck"="c:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2009-10-28 1701888]
    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
    "WinampAgent"="c:\program files\Winamp\winampa.exe" [2010-12-09 74752]
    "BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
    "WRSVC"="c:\program files\Webroot\WRSA.exe" [2011-10-14 599616]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnce]
    "AvgUninstallURL"="start http://www.avg.com/nl.special-uninstallation-feedback-appf?lic=NFVZOVgtTlNWVkwtTzRCWlEtUUlNQ0wtUVREQ0gtN ElKTUg&inst=NzctNjI0NjY1MzE5LVFJWDErNC1YMjAxMCsyLU xJQysyMi1GTDEwKzEtU1AxKzEtVFVHKzMtU1VEKzEtUzFJKzEt U1UzKzEtRERUKzQ1NDUxLUREMTBGKzEtU1QxMEZBUFArMQ&pro d=90&ver=10.0.1410" [?]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "aux3"=wdmaud.drv
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\contro l\lsa]
    Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
    .
    [HKLM\~\startupfolder\C:^Users^Jens Sierens^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip]
    path=c:\users\Jens Sierens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip
    backup=c:\windows\pss\CurseClientStartup.ccip.Star tup
    backupExtension=.Startup
    .
    [HKLM\~\startupfolder\C:^Users^Jens Sierens^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3 .lnk]
    path=c:\users\Jens Sierens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3 .lnk
    backup=c:\windows\pss\OpenOffice.org 3.3 .lnk.Startup
    backupExtension=.Startup
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
    2011-03-15 15:42 499608 ------w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.e xe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5.5ServiceManager]
    2011-01-12 05:08 1523360 ----a-w- c:\program files\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManage r.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    2010-05-14 09:44 248552 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
    2010-02-19 11:37 517096 ----a-w- c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
    .
    R1 SASDIFSV;SASDIFSV;c:\users\JENSSI~1\AppData\Local\ Temp\HBCD\SuperAntiSpyware\SASDIFSV.SYS [x]
    R1 SASKUTIL;SASKUTIL;c:\users\JENSSI~1\AppData\Local\ Temp\HBCD\SuperAntiSpyware\SASKUTIL.SYS [x]
    R2 KMService;KMService;c:\windows\system32\srvany.exe [2011-02-03 8192]
    R2 tmrkb;tmrkb;c:\windows\system32\DRIVERS\tmrkb.sys [2011-10-16 65808]
    R2 WRSVC;WRSVC;c:\program files\Webroot\WRSA.exe [2011-10-14 599616]
    R3 AVRZU;AVRZU;c:\users\JENSSI~1\AppData\Local\Temp\A VRZU.exe [x]
    R3 cpuz135;cpuz135;c:\windows\TEMP\cpuz135\cpuz135_x3 2.sys [x]
    R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files\Futuremark\Futuremark SystemInfo\FMSISvc.exe [2011-03-01 130976]
    R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
    R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EX E [2010-01-09 4640000]
    R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
    R3 VSPerfDrv100;Performance Tools Driver 10.0;c:\program files\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\VSPerfDrv100.sys [2009-12-08 48128]
    R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.s ys [2011-09-08 10752]
    R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-10-19 1343400]
    R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
    S0 WRkrn;WRkrn;c:\windows\System32\drivers\WRkrn.sys [2011-10-14 106312]
    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 176128]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\ v4.0.30319\mscorsvw.exe [2009-06-10 66384]
    S2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
    S2 TabletServicePen;TabletServicePen;c:\program files\Tablet\Pen\Pen_Tablet.exe [2011-09-08 5554552]
    S2 TouchServicePen;Wacom Consumer Touch Service;c:\program files\Tablet\Pen\Pen_TouchService.exe [2011-09-08 451960]
    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-08-20 189440]
    S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2009-10-21 1102848]
    .
    .
    Inhoud van de 'Gedeelde Taken' map
    .
    .
    ------- Bijkomende Scan -------
    .
    uInternet Settings,ProxyServer = http=127.0.0.1:62000
    IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
    IE: E&xporteren naar Microsoft Excel - c:\progra~1\MIF5BA~1\Office14\EXCEL.EXE/3000
    Trusted Zone: clonewarsadventures.com
    Trusted Zone: freerealms.com
    Trusted Zone: soe.com
    Trusted Zone: sony.com
    TCP: DhcpNameServer = 192.168.1.1
    FF - ProfilePath - c:\users\Jens Sierens\AppData\Roaming\Mozilla\Firefox\Profiles\l dg5rby9.default\
    FF - prefs.js: browser.search.selectedEngine - AVG Secure Search
    FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=4cb3660a&v=7.008.031.001&i=23&tp=ab&iy=&ychte=u s&lng=nl&q=
    FF - prefs.js: network.proxy.http - 127.0.0.1
    FF - prefs.js: network.proxy.http_port - 62000
    FF - prefs.js: network.proxy.type - 0
    FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
    FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
    FF - Ext: SOE Web Installer: {000F1EA4-5E08-4564-A29B-29076F63A37A} - %profile%\extensions\{000F1EA4-5E08-4564-A29B-29076F63A37A}
    FF - Ext: ChatZilla: {59c81df5-4b7a-477b-912d-4e0fdf64e5f2} - %profile%\extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}
    FF - user.js: network.cookie.cookieBehavior - 0
    FF - user.js: privacy.clearOnShutdown.cookies - false
    FF - user.js: security.warn_viewing_mixed - false
    FF - user.js: security.warn_viewing_mixed.show_once - false
    FF - user.js: security.warn_submit_insecure - false
    FF - user.js: security.warn_submit_insecure.show_once - false
    .
    - - - - ORPHANS VERWIJDERD - - - -
    .
    Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
    WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
    SafeBoot-21069410.sys
    SafeBoot-25256155.sys
    SafeBoot-29504207.sys
    SafeBoot-57272184.sys
    SafeBoot-klmdb.sys
    .
    .
    .
    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------
    .
    [HKEY_USERS\S-1-5-21-1443393807-4273532130-1213093711-1000\Software\SecuROM\License information*]
    "datasecu"=hex:8b,c8,2c,a7,c5,18,ef,aa,fe,72,80,8c ,0b,9c,8a,09,a4,d3,f2,09,e8,
    f6,2c,64,d4,78,a4,07,3a,4e,23,81,c2,ee,2c,87,f5,a6 ,e7,c8,c8,89,2c,7c,2f,d4,\
    "rkeysecu"=hex:5c,de,45,b9,14,cf,66,c0,06,25,22,8d ,d9,37,8b,bc
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PC W\Security]
    @Denied: (Full) (Everyone)
    .
    ------------------------ Andere Aktieve Processen ------------------------
    .
    c:\windows\system32\atieclxx.exe
    c:\windows\SYSTEM32\WISPTIS.EXE
    c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    c:\windows\system32\taskhost.exe
    c:\windows\SYSTEM32\WISPTIS.EXE
    c:\program files\Common Files\microsoft shared\ink\TabTip.exe
    c:\program files\Tablet\Pen\Pen_TouchUser.exe
    c:\program files\ASUS\EPU-4 Engine\FourEngine.exe
    c:\program files\Tablet\Pen\Pen_TabletUser.exe
    c:\windows\system32\WUDFHost.exe
    c:\windows\system32\conhost.exe
    c:\windows\system32\DllHost.exe
    c:\program files\Windows Media Player\wmpnetwk.exe
    c:\program files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
    c:\windows\system32\sppsvc.exe
    c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
    c:\windows\system32\sdclt.exe
    .
    ************************************************** ************************
    .
    Voltooingstijd: 2011-10-17 16:51:46 - machine werd herstart
    ComboFix-quarantined-files.txt 2011-10-17 14:51
    .
    Pre-Run: 50.702.991.360 bytes beschikbaar
    Post-Run: 50.224.832.512 bytes beschikbaar
    .
    - - End Of File - - 908662F077CCBF7858070DF18C6E1771

    Alvast nogmaals bedankt. Ik wacht in spanning een volgende stap af

  4. #4
    Spyware Slayer   EvelineGirl's schermafbeelding
    Geregistreerd
    4 November 2009
    Locatie
    Spijkenisse Zuid-Holland
    Berichten
    519
    Bedankjes
    99
    Bedankt
    483 keer in 259 posts
    Hallo,

    1.
    Download ProxyFix naar het bureaublad.
    • Dubbelklik op "ProxyFix.exe" om de tool te starten.
    • Vista en Windows 7 rechtsklik "Uitvoeren als Administrator"
    • Geef ik het keuzescherm de letter "D" op en druk op enter.
    • Plaat de inhoud van het kladblok bestand wat is geopend in het volgende bericht.

    2.
    Download aswMBR.exe naar het bureaublad.
    • Dubbelklik op "aswMBR.exe" om de tool te starten.
      Vista en Windows 7 gebruikers: Reschtsklik -> uitvoeren als Administrator.
    • Klik bij het volgende venster op "Nee"
    • Klik op de knop "scan"
    • Als de scan gereed is klikt u op de knop "save log"
    • Plaats dit log bestand in het volgende bericht.

    Succes,
    Eveline.
    Mvg,


  5. #5
    Up-to-date  
    Geregistreerd
    16 October 2011
    Berichten
    18
    Bedankjes
    1
    Bedankt
    1 keer in 1 post
    ProxyFix v 2.0 © by Maxstar
    ma 17/10/2011 - 18:23:44,29


    ----------Internet Explorer----------
    "ProxyEnable"=dword:00000000
    "ProxyServer"="0"

    ----------Firefox----------

    ----------E.O.F----------


    aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
    Run date: 2011-10-17 18:26:18
    -----------------------------
    18:26:18.698 OS Version: Windows 6.1.7600
    18:26:18.698 Number of processors: 2 586 0x6B02
    18:26:18.698 ComputerName: DESKTOPBOVEN UserName: Jens Sierens
    18:26:21.802 Initialize success
    18:26:45.407 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
    18:26:45.407 Disk 0 Vendor: ST3160318AS CC38 Size: 152627MB BusType: 3
    18:26:45.407 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T1L0-2
    18:26:45.422 Disk 1 Vendor: ST3500320AS SD15 Size: 476940MB BusType: 3
    18:26:47.450 Disk 0 MBR read successfully
    18:26:47.450 Disk 0 MBR scan
    18:26:47.466 Disk 0 Windows 7 default MBR code
    18:26:47.466 Disk 0 scanning sectors +312578048
    18:26:47.544 Disk 0 scanning C:\Windows\system32\drivers
    18:26:58.807 Service scanning
    18:26:59.868 Service WRkrn C:\Windows\System32\drivers\WRkrn.sys **LOCKED** 32
    18:27:00.398 Modules scanning
    18:27:07.153 Disk 0 trace - called modules:
    18:27:07.169 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys
    18:27:07.184 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x86713880]
    18:27:07.184 3 CLASSPNP.SYS[83b4359e] -> nt!IofCallDriver -> [0x86720400]
    18:27:07.184 5 ACPI.sys[833ab3b2] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x86714030]
    18:27:07.200 Scan finished successfully
    18:27:30.818 Disk 0 MBR has been saved successfully to "C:\Users\Jens Sierens\Desktop\cleanuplogs\MBR.dat"
    18:27:30.834 The log file has been saved successfully to "C:\Users\Jens Sierens\Desktop\cleanuplogs\aswMBR_log.txt"

  6. #6
    Spyware Slayer   EvelineGirl's schermafbeelding
    Geregistreerd
    4 November 2009
    Locatie
    Spijkenisse Zuid-Holland
    Berichten
    519
    Bedankjes
    99
    Bedankt
    483 keer in 259 posts
    Wil je nu TDSSkiller nog een keer laten scannen?
    Mvg,


  7. #7
    Up-to-date  
    Geregistreerd
    16 October 2011
    Berichten
    18
    Bedankjes
    1
    Bedankt
    1 keer in 1 post
    20:05:25.0680 3996 TDSS rootkit removing tool 2.6.10.0 Oct 17 2011 15:43:23
    20:05:25.0820 3996 ================================================== ==========
    20:05:25.0820 3996 Current date / time: 2011/10/17 20:05:25.0820
    20:05:25.0820 3996 SystemInfo:
    20:05:25.0820 3996
    20:05:25.0820 3996 OS Version: 6.1.7600 ServicePack: 0.0
    20:05:25.0820 3996 Product type: Workstation
    20:05:25.0820 3996 ComputerName: DESKTOPBOVEN
    20:05:25.0820 3996 UserName: Jens Sierens
    20:05:25.0820 3996 Windows directory: C:\Windows
    20:05:25.0820 3996 System windows directory: C:\Windows
    20:05:25.0820 3996 Processor architecture: Intel x86
    20:05:25.0820 3996 Number of processors: 2
    20:05:25.0820 3996 Page size: 0x1000
    20:05:25.0820 3996 Boot type: Normal boot
    20:05:25.0820 3996 ================================================== ==========
    20:05:33.0121 3996 Initialize success
    20:05:44.0478 2964 ================================================== ==========
    20:05:44.0478 2964 Scan started
    20:05:44.0478 2964 Mode: Manual;
    20:05:44.0478 2964 ================================================== ==========
    20:05:45.0086 2964 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\Windows\system32\DRIVERS\1394ohci.sys
    20:05:45.0086 2964 1394ohci - ok
    20:05:45.0258 2964 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\Windows\system32\DRIVERS\ACPI.sys
    20:05:45.0258 2964 ACPI - ok
    20:05:45.0414 2964 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\Windows\system32\DRIVERS\acpipmi.sys
    20:05:45.0414 2964 AcpiPmi - ok
    20:05:45.0601 2964 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
    20:05:45.0601 2964 adp94xx - ok
    20:05:45.0772 2964 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
    20:05:45.0772 2964 adpahci - ok
    20:05:45.0944 2964 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
    20:05:45.0944 2964 adpu320 - ok
    20:05:46.0116 2964 AFD (0db7a48388d54d154ebec120461a0fcd) C:\Windows\system32\drivers\afd.sys
    20:05:46.0116 2964 AFD - ok
    20:05:46.0147 2964 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\DRIVERS\agp440.sys
    20:05:46.0162 2964 agp440 - ok
    20:05:46.0318 2964 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
    20:05:46.0318 2964 aic78xx - ok
    20:05:46.0506 2964 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\DRIVERS\aliide.sys
    20:05:46.0506 2964 aliide - ok
    20:05:46.0646 2964 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\DRIVERS\amdagp.sys
    20:05:46.0662 2964 amdagp - ok
    20:05:46.0724 2964 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\DRIVERS\amdide.sys
    20:05:46.0724 2964 amdide - ok
    20:05:46.0927 2964 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
    20:05:46.0927 2964 AmdK8 - ok
    20:05:47.0052 2964 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
    20:05:47.0052 2964 AmdPPM - ok
    20:05:47.0223 2964 amdsata (19ce906b4cdc11fc4fef5745f33a63b6) C:\Windows\system32\drivers\amdsata.sys
    20:05:47.0223 2964 amdsata - ok
    20:05:47.0379 2964 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
    20:05:47.0395 2964 amdsbs - ok
    20:05:47.0489 2964 amdxata (869e67d66be326a5a9159fba8746fa70) C:\Windows\system32\drivers\amdxata.sys
    20:05:47.0489 2964 amdxata - ok
    20:05:47.0598 2964 AppID (feb834c02ce1e84b6a38f953ca067706) C:\Windows\system32\drivers\appid.sys
    20:05:47.0598 2964 AppID - ok
    20:05:47.0785 2964 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
    20:05:47.0785 2964 arc - ok
    20:05:47.0801 2964 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
    20:05:47.0801 2964 arcsas - ok
    20:05:47.0957 2964 AsIO (9d8cb58b9a9e177ddd599791a58a654d) C:\Windows\system32\drivers\AsIO.sys
    20:05:47.0972 2964 AsIO - ok
    20:05:48.0159 2964 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
    20:05:48.0159 2964 AsyncMac - ok
    20:05:48.0191 2964 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\DRIVERS\atapi.sys
    20:05:48.0191 2964 atapi - ok
    20:05:48.0503 2964 atikmdag (04f09923a393e4e0e8453a8f78361e73) C:\Windows\system32\DRIVERS\atikmdag.sys
    20:05:48.0534 2964 atikmdag - ok
    20:05:48.0705 2964 AtiPcie (b73c832088dd54b55e04ff6f9646ad8c) C:\Windows\system32\DRIVERS\AtiPcie.sys
    20:05:48.0705 2964 AtiPcie - ok
    20:05:48.0908 2964 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
    20:05:48.0924 2964 b06bdrv - ok
    20:05:49.0080 2964 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
    20:05:49.0095 2964 b57nd60x - ok
    20:05:49.0251 2964 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
    20:05:49.0267 2964 Beep - ok
    20:05:49.0314 2964 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
    20:05:49.0314 2964 blbdrive - ok
    20:05:49.0454 2964 bowser (9a5c671b7fbae4865149bb11f59b91b2) C:\Windows\system32\DRIVERS\bowser.sys
    20:05:49.0454 2964 bowser - ok
    20:05:49.0470 2964 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
    20:05:49.0470 2964 BrFiltLo - ok
    20:05:49.0595 2964 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
    20:05:49.0595 2964 BrFiltUp - ok
    20:05:49.0813 2964 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
    20:05:49.0813 2964 Brserid - ok
    20:05:49.0891 2964 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
    20:05:49.0891 2964 BrSerWdm - ok
    20:05:49.0953 2964 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
    20:05:49.0953 2964 BrUsbMdm - ok
    20:05:50.0047 2964 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
    20:05:50.0047 2964 BrUsbSer - ok
    20:05:50.0172 2964 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
    20:05:50.0172 2964 BTHMODEM - ok
    20:05:50.0297 2964 catchme - ok
    20:05:50.0468 2964 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
    20:05:50.0468 2964 cdfs - ok
    20:05:50.0640 2964 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\Windows\system32\DRIVERS\cdrom.sys
    20:05:50.0640 2964 cdrom - ok
    20:05:50.0811 2964 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
    20:05:50.0811 2964 circlass - ok
    20:05:50.0905 2964 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
    20:05:50.0905 2964 CLFS - ok
    20:05:51.0077 2964 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
    20:05:51.0077 2964 CmBatt - ok
    20:05:51.0155 2964 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\DRIVERS\cmdide.sys
    20:05:51.0155 2964 cmdide - ok
    20:05:51.0279 2964 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
    20:05:51.0279 2964 CNG - ok
    20:05:51.0420 2964 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
    20:05:51.0420 2964 Compbatt - ok
    20:05:51.0513 2964 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\Windows\system32\DRIVERS\CompositeBus.sys
    20:05:51.0513 2964 CompositeBus - ok
    20:05:51.0638 2964 cpuz135 - ok
    20:05:51.0716 2964 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
    20:05:51.0716 2964 crcdisk - ok
    20:05:51.0903 2964 CSC (27c9490bdd0ae48911ab8cf1932591ed) C:\Windows\system32\drivers\csc.sys
    20:05:51.0919 2964 CSC - ok
    20:05:52.0106 2964 DfsC (83d1ecea8faae75604c0fa49ac7ad996) C:\Windows\system32\Drivers\dfsc.sys
    20:05:52.0106 2964 DfsC - ok
    20:05:52.0137 2964 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
    20:05:52.0137 2964 discache - ok
    20:05:52.0293 2964 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
    20:05:52.0293 2964 Disk - ok
    20:05:52.0481 2964 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
    20:05:52.0481 2964 drmkaud - ok
    20:05:52.0559 2964 DXGKrnl (1679a4669326cb1a67cc95658d273234) C:\Windows\System32\drivers\dxgkrnl.sys
    20:05:52.0559 2964 DXGKrnl - ok
    20:05:52.0793 2964 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
    20:05:52.0824 2964 ebdrv - ok
    20:05:52.0995 2964 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
    20:05:52.0995 2964 elxstor - ok
    20:05:53.0027 2964 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\DRIVERS\errdev.sys
    20:05:53.0027 2964 ErrDev - ok
    20:05:53.0198 2964 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
    20:05:53.0198 2964 exfat - ok
    20:05:53.0339 2964 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
    20:05:53.0339 2964 fastfat - ok
    20:05:53.0495 2964 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
    20:05:53.0495 2964 fdc - ok
    20:05:53.0588 2964 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
    20:05:53.0588 2964 FileInfo - ok
    20:05:53.0697 2964 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
    20:05:53.0697 2964 Filetrace - ok
    20:05:53.0978 2964 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
    20:05:53.0994 2964 flpydisk - ok
    20:05:54.0150 2964 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
    20:05:54.0150 2964 FltMgr - ok
    20:05:54.0290 2964 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
    20:05:54.0306 2964 FsDepends - ok
    20:05:54.0384 2964 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
    20:05:54.0399 2964 Fs_Rec - ok
    20:05:54.0602 2964 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\Windows\system32\DRIVERS\fvevol.sys
    20:05:54.0602 2964 fvevol - ok
    20:05:54.0758 2964 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
    20:05:54.0758 2964 gagp30kx - ok
    20:05:54.0930 2964 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
    20:05:54.0930 2964 hcw85cir - ok
    20:05:55.0055 2964 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\Windows\system32\drivers\HdAudio.sys
    20:05:55.0055 2964 HdAudAddService - ok
    20:05:55.0195 2964 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\Windows\system32\DRIVERS\HDAudBus.sys
    20:05:55.0195 2964 HDAudBus - ok
    20:05:55.0242 2964 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
    20:05:55.0242 2964 HidBatt - ok
    20:05:55.0367 2964 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
    20:05:55.0367 2964 HidBth - ok
    20:05:55.0429 2964 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
    20:05:55.0429 2964 HidIr - ok
    20:05:55.0585 2964 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\Windows\system32\DRIVERS\hidusb.sys
    20:05:55.0585 2964 HidUsb - ok
    20:05:55.0741 2964 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\DRIVERS\HpSAMD.sys
    20:05:55.0757 2964 HpSAMD - ok
    20:05:55.0928 2964 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\Windows\system32\drivers\HTTP.sys
    20:05:55.0944 2964 HTTP - ok
    20:05:56.0069 2964 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\Windows\system32\drivers\hwpolicy.sys
    20:05:56.0069 2964 hwpolicy - ok
    20:05:56.0240 2964 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\DRIVERS\i8042prt.sys
    20:05:56.0240 2964 i8042prt - ok
    20:05:56.0412 2964 iaStorV (71f1a494fedf4b33c02c4a6a28d6d9e9) C:\Windows\system32\drivers\iaStorV.sys
    20:05:56.0412 2964 iaStorV - ok
    20:05:56.0537 2964 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
    20:05:56.0537 2964 iirsp - ok
    20:05:56.0615 2964 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\DRIVERS\intelide.sys
    20:05:56.0615 2964 intelide - ok
    20:05:56.0755 2964 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
    20:05:56.0755 2964 intelppm - ok
    20:05:56.0895 2964 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
    20:05:56.0895 2964 IpFilterDriver - ok
    20:05:57.0051 2964 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\Windows\system32\DRIVERS\IPMIDrv.sys
    20:05:57.0051 2964 IPMIDRV - ok
    20:05:57.0067 2964 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
    20:05:57.0067 2964 IPNAT - ok
    20:05:57.0223 2964 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
    20:05:57.0223 2964 IRENUM - ok
    20:05:57.0301 2964 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\DRIVERS\isapnp.sys
    20:05:57.0301 2964 isapnp - ok
    20:05:57.0441 2964 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\Windows\system32\DRIVERS\msiscsi.sys
    20:05:57.0441 2964 iScsiPrt - ok
    20:05:57.0597 2964 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
    20:05:57.0597 2964 kbdclass - ok
    20:05:57.0753 2964 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\Windows\system32\DRIVERS\kbdhid.sys
    20:05:57.0753 2964 kbdhid - ok
    20:05:57.0941 2964 KSecDD (e36a061ec11b373826905b21be10948f) C:\Windows\system32\Drivers\ksecdd.sys
    20:05:57.0941 2964 KSecDD - ok
    20:05:57.0972 2964 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\Windows\system32\Drivers\ksecpkg.sys
    20:05:57.0972 2964 KSecPkg - ok
    20:05:58.0143 2964 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
    20:05:58.0143 2964 lltdio - ok
    20:05:58.0331 2964 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
    20:05:58.0331 2964 LSI_FC - ok
    20:05:58.0487 2964 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
    20:05:58.0487 2964 LSI_SAS - ok
    20:05:58.0643 2964 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
    20:05:58.0643 2964 LSI_SAS2 - ok
    20:05:58.0814 2964 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
    20:05:58.0814 2964 LSI_SCSI - ok
    20:05:59.0033 2964 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
    20:05:59.0033 2964 luafv - ok
    20:05:59.0204 2964 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
    20:05:59.0204 2964 megasas - ok
    20:05:59.0376 2964 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
    20:05:59.0376 2964 MegaSR - ok
    20:05:59.0563 2964 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
    20:05:59.0579 2964 Modem - ok
    20:05:59.0735 2964 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
    20:05:59.0735 2964 monitor - ok
    20:05:59.0891 2964 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
    20:05:59.0891 2964 mouclass - ok
    20:06:00.0047 2964 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
    20:06:00.0062 2964 mouhid - ok
    20:06:00.0078 2964 mountmgr (921c18727c5920d6c0300736646931c2) C:\Windows\system32\drivers\mountmgr.sys
    20:06:00.0078 2964 mountmgr - ok
    20:06:00.0203 2964 mpio (2af5997438c55fb79d33d015c30e1974) C:\Windows\system32\DRIVERS\mpio.sys
    20:06:00.0203 2964 mpio - ok
    20:06:00.0281 2964 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
    20:06:00.0281 2964 mpsdrv - ok
    20:06:00.0359 2964 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\Windows\system32\drivers\mrxdav.sys
    20:06:00.0359 2964 MRxDAV - ok
    20:06:00.0530 2964 mrxsmb (ca7570e42522e24324a12161db14ec02) C:\Windows\system32\DRIVERS\mrxsmb.sys
    20:06:00.0530 2964 mrxsmb - ok
    20:06:00.0655 2964 mrxsmb10 (f965c3ab2b2ae5c378f4562486e35051) C:\Windows\system32\DRIVERS\mrxsmb10.sys
    20:06:00.0655 2964 mrxsmb10 - ok
    20:06:00.0686 2964 mrxsmb20 (25c38264a3c72594dd21d355d70d7a5d) C:\Windows\system32\DRIVERS\mrxsmb20.sys
    20:06:00.0702 2964 mrxsmb20 - ok
    20:06:00.0827 2964 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\Windows\system32\DRIVERS\msahci.sys
    20:06:00.0827 2964 msahci - ok
    20:06:00.0905 2964 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\Windows\system32\DRIVERS\msdsm.sys
    20:06:00.0905 2964 msdsm - ok
    20:06:01.0061 2964 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
    20:06:01.0061 2964 Msfs - ok
    20:06:01.0139 2964 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
    20:06:01.0139 2964 mshidkmdf - ok
    20:06:01.0279 2964 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\DRIVERS\msisadrv.sys
    20:06:01.0279 2964 msisadrv - ok
    20:06:01.0466 2964 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
    20:06:01.0466 2964 MSKSSRV - ok
    20:06:01.0607 2964 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
    20:06:01.0622 2964 MSPCLOCK - ok
    20:06:01.0731 2964 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
    20:06:01.0731 2964 MSPQM - ok
    20:06:01.0856 2964 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
    20:06:01.0856 2964 MsRPC - ok
    20:06:01.0965 2964 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys
    20:06:01.0965 2964 mssmbios - ok
    20:06:02.0106 2964 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
    20:06:02.0106 2964 MSTEE - ok
    20:06:02.0231 2964 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
    20:06:02.0231 2964 MTConfig - ok
    20:06:02.0371 2964 MTsensor (cbe71c122434805cb73ffb6619f60598) C:\Windows\system32\DRIVERS\ASACPI.sys
    20:06:02.0371 2964 MTsensor - ok
    20:06:02.0433 2964 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
    20:06:02.0433 2964 Mup - ok
    20:06:02.0558 2964 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
    20:06:02.0558 2964 NativeWifiP - ok
    20:06:02.0730 2964 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\Windows\system32\drivers\ndis.sys
    20:06:02.0730 2964 NDIS - ok
    20:06:02.0886 2964 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
    20:06:02.0886 2964 NdisCap - ok
    20:06:03.0057 2964 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
    20:06:03.0057 2964 NdisTapi - ok
    20:06:03.0213 2964 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\Windows\system32\DRIVERS\ndisuio.sys
    20:06:03.0213 2964 Ndisuio - ok
    20:06:03.0260 2964 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\Windows\system32\DRIVERS\ndiswan.sys
    20:06:03.0260 2964 NdisWan - ok
    20:06:03.0385 2964 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\Windows\system32\drivers\NDProxy.sys
    20:06:03.0385 2964 NDProxy - ok
    20:06:03.0494 2964 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
    20:06:03.0494 2964 NetBIOS - ok
    20:06:03.0650 2964 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
    20:06:03.0666 2964 NetBT - ok
    20:06:03.0837 2964 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
    20:06:03.0837 2964 nfrd960 - ok
    20:06:03.0931 2964 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
    20:06:03.0931 2964 Npfs - ok
    20:06:03.0962 2964 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
    20:06:03.0978 2964 nsiproxy - ok
    20:06:04.0227 2964 Ntfs (187002ce05693c306f43c873f821381f) C:\Windows\system32\drivers\Ntfs.sys
    20:06:04.0243 2964 Ntfs - ok
    20:06:04.0321 2964 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
    20:06:04.0321 2964 Null - ok
    20:06:04.0461 2964 nvraid (f1b0bed906f97e16f6d0c3629d2f21c6) C:\Windows\system32\drivers\nvraid.sys
    20:06:04.0461 2964 nvraid - ok
    20:06:04.0617 2964 nvstor (4520b63899e867f354ee012d34e11536) C:\Windows\system32\drivers\nvstor.sys
    20:06:04.0617 2964 nvstor - ok
    20:06:04.0695 2964 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\DRIVERS\nv_agp.sys
    20:06:04.0695 2964 nv_agp - ok
    20:06:04.0789 2964 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\DRIVERS\ohci1394.sys
    20:06:04.0789 2964 ohci1394 - ok
    20:06:04.0992 2964 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
    20:06:05.0007 2964 Parport - ok
    20:06:05.0039 2964 partmgr (ff4218952b51de44fe910953a3e686b9) C:\Windows\system32\drivers\partmgr.sys
    20:06:05.0039 2964 partmgr - ok
    20:06:05.0163 2964 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
    20:06:05.0163 2964 Parvdm - ok
    20:06:05.0288 2964 pci (c858cb77c577780ecc456a892e7e7d0f) C:\Windows\system32\DRIVERS\pci.sys
    20:06:05.0288 2964 pci - ok
    20:06:05.0351 2964 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\DRIVERS\pciide.sys
    20:06:05.0351 2964 pciide - ok
    20:06:05.0444 2964 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
    20:06:05.0444 2964 pcmcia - ok
    20:06:05.0538 2964 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
    20:06:05.0538 2964 pcw - ok
    20:06:05.0694 2964 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
    20:06:05.0694 2964 PEAUTH - ok
    20:06:06.0006 2964 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
    20:06:06.0006 2964 PptpMiniport - ok
    20:06:06.0037 2964 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
    20:06:06.0037 2964 Processor - ok
    20:06:06.0193 2964 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
    20:06:06.0193 2964 Psched - ok
    20:06:06.0240 2964 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
    20:06:06.0255 2964 ql2300 - ok
    20:06:06.0380 2964 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
    20:06:06.0380 2964 ql40xx - ok
    20:06:06.0443 2964 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
    20:06:06.0443 2964 QWAVEdrv - ok
    20:06:06.0567 2964 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
    20:06:06.0567 2964 RasAcd - ok
    20:06:06.0739 2964 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
    20:06:06.0739 2964 RasAgileVpn - ok
    20:06:06.0895 2964 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
    20:06:06.0895 2964 Rasl2tp - ok
    20:06:07.0004 2964 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
    20:06:07.0004 2964 RasPppoe - ok
    20:06:07.0082 2964 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
    20:06:07.0082 2964 RasSstp - ok
    20:06:07.0098 2964 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\Windows\system32\DRIVERS\rdbss.sys
    20:06:07.0098 2964 rdbss - ok
    20:06:07.0113 2964 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
    20:06:07.0113 2964 rdpbus - ok
    20:06:07.0238 2964 RDPCDD (1e016846895b15a99f9a176a05029075) C:\Windows\system32\DRIVERS\RDPCDD.sys
    20:06:07.0238 2964 RDPCDD - ok
    20:06:07.0269 2964 RDPDR (c5ff95883ffef704d50c40d21cfb3ab5) C:\Windows\system32\drivers\rdpdr.sys
    20:06:07.0269 2964 RDPDR - ok
    20:06:07.0425 2964 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
    20:06:07.0425 2964 RDPENCDD - ok
    20:06:07.0441 2964 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
    20:06:07.0441 2964 RDPREFMP - ok
    20:06:07.0472 2964 RDPWD (801371ba9782282892d00aadb08ee367) C:\Windows\system32\drivers\RDPWD.sys
    20:06:07.0472 2964 RDPWD - ok
    20:06:07.0628 2964 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\Windows\system32\drivers\rdyboost.sys
    20:06:07.0628 2964 rdyboost - ok
    20:06:07.0847 2964 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
    20:06:07.0847 2964 rspndr - ok
    20:06:08.0018 2964 RT61 (581e74880aeb1dba1cb5ac8e6e6c0a69) C:\Windows\system32\DRIVERS\RT61.sys
    20:06:08.0018 2964 RT61 - ok
    20:06:08.0190 2964 RTL8167 (05c2613f661584190c752f6184d1c8ef) C:\Windows\system32\DRIVERS\Rt86win7.sys
    20:06:08.0205 2964 RTL8167 - ok
    20:06:08.0237 2964 s3cap (5423d8437051e89dd34749f242c98648) C:\Windows\system32\DRIVERS\vms3cap.sys
    20:06:08.0237 2964 s3cap - ok
    20:06:08.0346 2964 SASDIFSV - ok
    20:06:08.0361 2964 SASKUTIL - ok
    20:06:08.0517 2964 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\Windows\system32\DRIVERS\sbp2port.sys
    20:06:08.0517 2964 sbp2port - ok
    20:06:08.0689 2964 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\Windows\system32\DRIVERS\scfilter.sys
    20:06:08.0689 2964 scfilter - ok
    20:06:08.0814 2964 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
    20:06:08.0829 2964 secdrv - ok
    20:06:09.0032 2964 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
    20:06:09.0048 2964 Serenum - ok
    20:06:09.0063 2964 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
    20:06:09.0063 2964 sermouse - ok
    20:06:09.0282 2964 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\DRIVERS\sffdisk.sys
    20:06:09.0282 2964 sffdisk - ok
    20:06:09.0297 2964 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\DRIVERS\sffp_mmc.sys
    20:06:09.0297 2964 sffp_mmc - ok
    20:06:09.0297 2964 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) C:\Windows\system32\DRIVERS\sffp_sd.sys
    20:06:09.0297 2964 sffp_sd - ok
    20:06:09.0313 2964 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
    20:06:09.0313 2964 sfloppy - ok
    20:06:09.0453 2964 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\DRIVERS\sisagp.sys
    20:06:09.0469 2964 sisagp - ok
    20:06:09.0578 2964 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
    20:06:09.0578 2964 SiSRaid2 - ok
    20:06:09.0641 2964 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
    20:06:09.0641 2964 SiSRaid4 - ok
    20:06:09.0765 2964 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
    20:06:09.0765 2964 Smb - ok
    20:06:09.0953 2964 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
    20:06:09.0953 2964 spldr - ok
    20:06:10.0015 2964 srv (c4a027b8c0bd3fc0699f41fa5e9e0c87) C:\Windows\system32\DRIVERS\srv.sys
    20:06:10.0015 2964 srv - ok
    20:06:10.0155 2964 srv2 (414bb592cad8a79649d01f9d94318fb3) C:\Windows\system32\DRIVERS\srv2.sys
    20:06:10.0155 2964 srv2 - ok
    20:06:10.0249 2964 srvnet (ff207d67700aa18242aaf985d3e7d8f4) C:\Windows\system32\DRIVERS\srvnet.sys
    20:06:10.0249 2964 srvnet - ok
    20:06:10.0421 2964 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
    20:06:10.0421 2964 stexstor - ok
    20:06:10.0467 2964 storflt (957e346ca948668f2496a6ccf6ff82cc) C:\Windows\system32\DRIVERS\vmstorfl.sys
    20:06:10.0467 2964 storflt - ok
    20:06:10.0483 2964 storvsc (d5751969dc3e4b88bf482ac8ec9fe019) C:\Windows\system32\DRIVERS\storvsc.sys
    20:06:10.0483 2964 storvsc - ok
    20:06:10.0577 2964 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys
    20:06:10.0577 2964 swenum - ok
    20:06:10.0857 2964 Tcpip (c2daaeb48f3a47c410b041a0d2382ee1) C:\Windows\system32\drivers\tcpip.sys
    20:06:10.0873 2964 Tcpip - ok
    20:06:11.0060 2964 TCPIP6 (c2daaeb48f3a47c410b041a0d2382ee1) C:\Windows\system32\DRIVERS\tcpip.sys
    20:06:11.0076 2964 TCPIP6 - ok
    20:06:11.0123 2964 tcpipreg (e64444523add154f86567c469bc0b17f) C:\Windows\system32\drivers\tcpipreg.sys
    20:06:11.0123 2964 tcpipreg - ok
    20:06:11.0154 2964 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\Windows\system32\drivers\tdpipe.sys
    20:06:11.0154 2964 TDPIPE - ok
    20:06:11.0279 2964 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\Windows\system32\drivers\tdtcp.sys
    20:06:11.0279 2964 TDTCP - ok
    20:06:11.0294 2964 tdx (cb39e896a2a83702d1737bfd402b3542) C:\Windows\system32\DRIVERS\tdx.sys
    20:06:11.0294 2964 tdx - ok
    20:06:11.0372 2964 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\Windows\system32\DRIVERS\termdd.sys
    20:06:11.0372 2964 TermDD - ok
    20:06:11.0575 2964 tmrkb (7e2887341a3164dedc9b89082c24aeca) C:\Windows\system32\DRIVERS\tmrkb.sys
    20:06:11.0575 2964 Suspicious file (Forged): C:\Windows\system32\DRIVERS\tmrkb.sys. Real md5: 7e2887341a3164dedc9b89082c24aeca, Fake md5: b44d1e95a4c70853230a2e1cd0dac0b9
    20:06:11.0575 2964 tmrkb ( ForgedFile.Multi.Generic ) - warning
    20:06:11.0575 2964 tmrkb - detected ForgedFile.Multi.Generic (1)
    20:06:11.0747 2964 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\Windows\system32\DRIVERS\tssecsrv.sys
    20:06:11.0747 2964 tssecsrv - ok
    20:06:11.0903 2964 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\Windows\system32\DRIVERS\tunnel.sys
    20:06:11.0918 2964 tunnel - ok
    20:06:11.0934 2964 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
    20:06:11.0949 2964 uagp35 - ok
    20:06:12.0074 2964 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\Windows\system32\DRIVERS\udfs.sys
    20:06:12.0074 2964 udfs - ok
    20:06:12.0199 2964 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\DRIVERS\uliagpkx.sys
    20:06:12.0199 2964 uliagpkx - ok
    20:06:12.0324 2964 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\Windows\system32\DRIVERS\umbus.sys
    20:06:12.0324 2964 umbus - ok
    20:06:12.0402 2964 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
    20:06:12.0402 2964 UmPass - ok
    20:06:12.0573 2964 usbaudio (2436a42aab4ad48a9b714e5b0f344627) C:\Windows\system32\drivers\usbaudio.sys
    20:06:12.0573 2964 usbaudio - ok
    20:06:12.0620 2964 usbccgp (c31ae588e403042632dc796cf09e30b0) C:\Windows\system32\DRIVERS\usbccgp.sys
    20:06:12.0620 2964 usbccgp - ok
    20:06:12.0729 2964 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\DRIVERS\usbcir.sys
    20:06:12.0729 2964 usbcir - ok
    20:06:12.0807 2964 usbehci (e4c436d914768ce965d5e659ba7eebd8) C:\Windows\system32\DRIVERS\usbehci.sys
    20:06:12.0807 2964 usbehci - ok
    20:06:12.0963 2964 usbhub (bdcd7156ec37448f08633fd899823620) C:\Windows\system32\DRIVERS\usbhub.sys
    20:06:12.0963 2964 usbhub - ok
    20:06:12.0995 2964 usbohci (eb2d819a639015253c871cda09d91d58) C:\Windows\system32\DRIVERS\usbohci.sys
    20:06:12.0995 2964 usbohci - ok
    20:06:13.0088 2964 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
    20:06:13.0088 2964 usbprint - ok
    20:06:13.0151 2964 USBSTOR (1c4287739a93594e57e2a9e6a3ed7353) C:\Windows\system32\DRIVERS\USBSTOR.SYS
    20:06:13.0151 2964 USBSTOR - ok
    20:06:13.0244 2964 usbuhci (22480bf4e5a09192e5e30ba4dde79fa4) C:\Windows\system32\drivers\usbuhci.sys
    20:06:13.0244 2964 usbuhci - ok
    20:06:13.0369 2964 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\DRIVERS\vdrvroot.sys
    20:06:13.0369 2964 vdrvroot - ok
    20:06:13.0478 2964 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
    20:06:13.0478 2964 vga - ok
    20:06:13.0494 2964 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
    20:06:13.0494 2964 VgaSave - ok
    20:06:13.0541 2964 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\Windows\system32\DRIVERS\vhdmp.sys
    20:06:13.0541 2964 vhdmp - ok
    20:06:13.0619 2964 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\DRIVERS\viaagp.sys
    20:06:13.0619 2964 viaagp - ok
    20:06:13.0697 2964 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
    20:06:13.0697 2964 ViaC7 - ok
    20:06:13.0837 2964 VIAHdAudAddService (dc56a867a2d92e1c51cb6d3f9c540548) C:\Windows\system32\drivers\viahduaa.sys
    20:06:13.0853 2964 VIAHdAudAddService - ok
    20:06:13.0931 2964 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\DRIVERS\viaide.sys
    20:06:13.0931 2964 viaide - ok
    20:06:13.0977 2964 vmbus (379b349f65f453d2a6e75ea6b7448e49) C:\Windows\system32\DRIVERS\vmbus.sys
    20:06:13.0977 2964 vmbus - ok
    20:06:14.0009 2964 VMBusHID (ec2bbab4b84d0738c6c83d2234dc36fe) C:\Windows\system32\DRIVERS\VMBusHID.sys
    20:06:14.0009 2964 VMBusHID - ok
    20:06:14.0087 2964 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\Windows\system32\DRIVERS\volmgr.sys
    20:06:14.0087 2964 volmgr - ok
    20:06:14.0118 2964 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
    20:06:14.0118 2964 volmgrx - ok
    20:06:14.0211 2964 volsnap (58df9d2481a56edde167e51b334d44fd) C:\Windows\system32\DRIVERS\volsnap.sys
    20:06:14.0211 2964 volsnap - ok
    20:06:14.0399 2964 vpcbus (33e74df34753fcaab06f6f2bdc8cabf5) C:\Windows\system32\DRIVERS\vpchbus.sys
    20:06:14.0399 2964 vpcbus - ok
    20:06:14.0570 2964 vpcnfltr (5f04362ceb5fb5901037e9d9eadd3760) C:\Windows\system32\DRIVERS\vpcnfltr.sys
    20:06:14.0570 2964 vpcnfltr - ok
    20:06:14.0742 2964 vpcusb (625088d6ee9ede977fd03cf18d1cd5c5) C:\Windows\system32\DRIVERS\vpcusb.sys
    20:06:14.0742 2964 vpcusb - ok
    20:06:14.0898 2964 vpcvmm (1023c696d42268e9071bb376dbec8396) C:\Windows\system32\drivers\vpcvmm.sys
    20:06:14.0913 2964 vpcvmm - ok
    20:06:15.0069 2964 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
    20:06:15.0069 2964 vsmraid - ok
    20:06:15.0288 2964 VSPerfDrv100 (5a2ddc5411a092bedb1a07755e087784) C:\Program Files\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\VSPerfDrv100.sys
    20:06:15.0288 2964 VSPerfDrv100 - ok
    20:06:15.0444 2964 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys
    20:06:15.0444 2964 vwifibus - ok
    20:06:15.0631 2964 wacmoumonitor (c3b03ed7b06657a3355f620bc02acfb6) C:\Windows\system32\DRIVERS\wacmoumonitor.sys
    20:06:15.0631 2964 wacmoumonitor - ok
    20:06:15.0662 2964 wacommousefilter (427a8bc96f16c40df81c2d2f4edd32dd) C:\Windows\system32\DRIVERS\wacommousefilter.sys
    20:06:15.0662 2964 wacommousefilter - ok
    20:06:15.0803 2964 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
    20:06:15.0803 2964 WacomPen - ok
    20:06:15.0943 2964 wacomvhid (846b58ea44bf8c92e4b59f4e2252c4c0) C:\Windows\system32\DRIVERS\wacomvhid.sys
    20:06:15.0943 2964 wacomvhid - ok
    20:06:16.0068 2964 WANARP (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
    20:06:16.0068 2964 WANARP - ok
    20:06:16.0083 2964 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
    20:06:16.0083 2964 Wanarpv6 - ok
    20:06:16.0271 2964 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
    20:06:16.0271 2964 Wd - ok
    20:06:16.0302 2964 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
    20:06:16.0302 2964 Wdf01000 - ok
    20:06:16.0473 2964 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
    20:06:16.0473 2964 WfpLwf - ok
    20:06:16.0489 2964 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
    20:06:16.0489 2964 WIMMount - ok
    20:06:16.0676 2964 WinDriver6 (0a597f84bc8af4229b529f655bb2ba14) C:\Windows\system32\drivers\windrvr6.sys
    20:06:16.0692 2964 WinDriver6 - ok
    20:06:16.0910 2964 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\DRIVERS\wmiacpi.sys
    20:06:16.0910 2964 WmiAcpi - ok
    20:06:17.0066 2964 WRkrn (6f759df9b7b1ddd22febe80cd942b54f) C:\Windows\system32\drivers\WRkrn.sys
    20:06:17.0066 2964 WRkrn - ok
    20:06:17.0113 2964 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
    20:06:17.0113 2964 ws2ifsl - ok
    20:06:17.0238 2964 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\Windows\system32\drivers\WudfPf.sys
    20:06:17.0238 2964 WudfPf - ok
    20:06:17.0394 2964 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\Windows\system32\DRIVERS\WUDFRd.sys
    20:06:17.0394 2964 WUDFRd - ok
    20:06:17.0503 2964 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
    20:06:17.0519 2964 \Device\Harddisk0\DR0 - ok
    20:06:17.0519 2964 MBR (0x1B8) (3051207086651214e435112e51817dc5) \Device\Harddisk1\DR1
    20:06:17.0519 2964 \Device\Harddisk1\DR1 - ok
    20:06:17.0534 2964 Boot (0x1200) (71301cf578259c44eac051a30ed79edd) \Device\Harddisk0\DR0\Partition0
    20:06:17.0534 2964 \Device\Harddisk0\DR0\Partition0 - ok
    20:06:17.0534 2964 Boot (0x1200) (2746959d8da5bc6d6b27c080fc47f0e3) \Device\Harddisk0\DR0\Partition1
    20:06:17.0534 2964 \Device\Harddisk0\DR0\Partition1 - ok
    20:06:17.0550 2964 Boot (0x1200) (1b11360251bf637005d28619ac9fa751) \Device\Harddisk1\DR1\Partition0
    20:06:17.0550 2964 \Device\Harddisk1\DR1\Partition0 - ok
    20:06:17.0550 2964 Boot (0x1200) (b1fbf230aa5a079fd8c945ff08808f03) \Device\Harddisk1\DR1\Partition1
    20:06:17.0550 2964 \Device\Harddisk1\DR1\Partition1 - ok
    20:06:17.0550 2964 ================================================== ==========
    20:06:17.0550 2964 Scan finished
    20:06:17.0550 2964 ================================================== ==========
    20:06:17.0565 3760 Detected object count: 1
    20:06:17.0565 3760 Actual detected object count: 1
    20:06:29.0983 3760 C:\Windows\system32\DRIVERS\tmrkb.sys - copied to quarantine
    20:06:29.0983 3760 tmrkb ( ForgedFile.Multi.Generic ) - User select action: Quarantine

  8. #8
    Spyware Slayer   EvelineGirl's schermafbeelding
    Geregistreerd
    4 November 2009
    Locatie
    Spijkenisse Zuid-Holland
    Berichten
    519
    Bedankjes
    99
    Bedankt
    483 keer in 259 posts
    'Copied to quarantine.'
    Herstart de computer en doe de scan nog eens.
    Ik ga alvast iets voor bereiden.
    Mvg,


  9. #9
    Up-to-date  
    Geregistreerd
    16 October 2011
    Berichten
    18
    Bedankjes
    1
    Bedankt
    1 keer in 1 post
    Even ter duideliijkheid? Is er een specifieke actie die ik moet ondernemen bij deze threat? Ik krijg dezelfde melding. Log volgt onmiddelijk

    edit: nvm, tdsskiller heeft al beslist. hier de log:

    20:24:05.0843 2996 TDSS rootkit removing tool 2.6.10.0 Oct 17 2011 15:43:23
    20:24:05.0983 2996 ================================================== ==========
    20:24:05.0983 2996 Current date / time: 2011/10/17 20:24:05.0983
    20:24:05.0983 2996 SystemInfo:
    20:24:05.0983 2996
    20:24:05.0983 2996 OS Version: 6.1.7600 ServicePack: 0.0
    20:24:05.0983 2996 Product type: Workstation
    20:24:05.0983 2996 ComputerName: DESKTOPBOVEN
    20:24:05.0983 2996 UserName: Jens Sierens
    20:24:05.0983 2996 Windows directory: C:\Windows
    20:24:05.0983 2996 System windows directory: C:\Windows
    20:24:05.0983 2996 Processor architecture: Intel x86
    20:24:05.0983 2996 Number of processors: 2
    20:24:05.0983 2996 Page size: 0x1000
    20:24:05.0983 2996 Boot type: Normal boot
    20:24:05.0983 2996 ================================================== ==========
    20:24:07.0153 2996 Initialize success
    20:24:14.0750 2560 ================================================== ==========
    20:24:14.0750 2560 Scan started
    20:24:14.0750 2560 Mode: Manual;
    20:24:14.0750 2560 ================================================== ==========
    20:24:15.0952 2560 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\Windows\system32\DRIVERS\1394ohci.sys
    20:24:15.0952 2560 1394ohci - ok
    20:24:16.0123 2560 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\Windows\system32\DRIVERS\ACPI.sys
    20:24:16.0123 2560 ACPI - ok
    20:24:16.0279 2560 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\Windows\system32\DRIVERS\acpipmi.sys
    20:24:16.0279 2560 AcpiPmi - ok
    20:24:16.0466 2560 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
    20:24:16.0466 2560 adp94xx - ok
    20:24:16.0638 2560 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
    20:24:16.0654 2560 adpahci - ok
    20:24:16.0810 2560 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
    20:24:16.0825 2560 adpu320 - ok
    20:24:17.0012 2560 AFD (0db7a48388d54d154ebec120461a0fcd) C:\Windows\system32\drivers\afd.sys
    20:24:17.0028 2560 AFD - ok
    20:24:17.0044 2560 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\DRIVERS\agp440.sys
    20:24:17.0059 2560 agp440 - ok
    20:24:17.0215 2560 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
    20:24:17.0215 2560 aic78xx - ok
    20:24:17.0402 2560 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\DRIVERS\aliide.sys
    20:24:17.0402 2560 aliide - ok
    20:24:17.0496 2560 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\DRIVERS\amdagp.sys
    20:24:17.0496 2560 amdagp - ok
    20:24:17.0558 2560 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\DRIVERS\amdide.sys
    20:24:17.0558 2560 amdide - ok
    20:24:17.0699 2560 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
    20:24:17.0699 2560 AmdK8 - ok
    20:24:17.0714 2560 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
    20:24:17.0714 2560 AmdPPM - ok
    20:24:17.0886 2560 amdsata (19ce906b4cdc11fc4fef5745f33a63b6) C:\Windows\system32\drivers\amdsata.sys
    20:24:17.0886 2560 am
    Laatst gewijzigd door Shinma; 17 October 2011 om 20:30

  10. #10
    Up-to-date  
    Geregistreerd
    16 October 2011
    Berichten
    18
    Bedankjes
    1
    Bedankt
    1 keer in 1 post
    Dat was hem niet volledig; Mijn excuses.

    20:24:05.0843 2996 TDSS rootkit removing tool 2.6.10.0 Oct 17 2011 15:43:23
    20:24:05.0983 2996 ================================================== ==========
    20:24:05.0983 2996 Current date / time: 2011/10/17 20:24:05.0983
    20:24:05.0983 2996 SystemInfo:
    20:24:05.0983 2996
    20:24:05.0983 2996 OS Version: 6.1.7600 ServicePack: 0.0
    20:24:05.0983 2996 Product type: Workstation
    20:24:05.0983 2996 ComputerName: DESKTOPBOVEN
    20:24:05.0983 2996 UserName: Jens Sierens
    20:24:05.0983 2996 Windows directory: C:\Windows
    20:24:05.0983 2996 System windows directory: C:\Windows
    20:24:05.0983 2996 Processor architecture: Intel x86
    20:24:05.0983 2996 Number of processors: 2
    20:24:05.0983 2996 Page size: 0x1000
    20:24:05.0983 2996 Boot type: Normal boot
    20:24:05.0983 2996 ================================================== ==========
    20:24:07.0153 2996 Initialize success
    20:24:14.0750 2560 ================================================== ==========
    20:24:14.0750 2560 Scan started
    20:24:14.0750 2560 Mode: Manual;
    20:24:14.0750 2560 ================================================== ==========
    20:24:15.0952 2560 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\Windows\system32\DRIVERS\1394ohci.sys
    20:24:15.0952 2560 1394ohci - ok
    20:24:16.0123 2560 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\Windows\system32\DRIVERS\ACPI.sys
    20:24:16.0123 2560 ACPI - ok
    20:24:16.0279 2560 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\Windows\system32\DRIVERS\acpipmi.sys
    20:24:16.0279 2560 AcpiPmi - ok
    20:24:16.0466 2560 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
    20:24:16.0466 2560 adp94xx - ok
    20:24:16.0638 2560 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
    20:24:16.0654 2560 adpahci - ok
    20:24:16.0810 2560 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
    20:24:16.0825 2560 adpu320 - ok
    20:24:17.0012 2560 AFD (0db7a48388d54d154ebec120461a0fcd) C:\Windows\system32\drivers\afd.sys
    20:24:17.0028 2560 AFD - ok
    20:24:17.0044 2560 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\DRIVERS\agp440.sys
    20:24:17.0059 2560 agp440 - ok
    20:24:17.0215 2560 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
    20:24:17.0215 2560 aic78xx - ok
    20:24:17.0402 2560 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\DRIVERS\aliide.sys
    20:24:17.0402 2560 aliide - ok
    20:24:17.0496 2560 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\DRIVERS\amdagp.sys
    20:24:17.0496 2560 amdagp - ok
    20:24:17.0558 2560 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\DRIVERS\amdide.sys
    20:24:17.0558 2560 amdide - ok
    20:24:17.0699 2560 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
    20:24:17.0699 2560 AmdK8 - ok
    20:24:17.0714 2560 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
    20:24:17.0714 2560 AmdPPM - ok
    20:24:17.0886 2560 amdsata (19ce906b4cdc11fc4fef5745f33a63b6) C:\Windows\system32\drivers\amdsata.sys
    20:24:17.0886 2560 amdsata - ok
    20:24:18.0042 2560 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
    20:24:18.0058 2560 amdsbs - ok
    20:24:18.0151 2560 amdxata (869e67d66be326a5a9159fba8746fa70) C:\Windows\system32\drivers\amdxata.sys
    20:24:18.0151 2560 amdxata - ok
    20:24:18.0323 2560 AppID (feb834c02ce1e84b6a38f953ca067706) C:\Windows\system32\drivers\appid.sys
    20:24:18.0323 2560 AppID - ok
    20:24:18.0619 2560 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
    20:24:18.0619 2560 arc - ok
    20:24:18.0713 2560 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
    20:24:18.0713 2560 arcsas - ok
    20:24:18.0884 2560 AsIO (9d8cb58b9a9e177ddd599791a58a654d) C:\Windows\system32\drivers\AsIO.sys
    20:24:18.0884 2560 AsIO - ok
    20:24:19.0087 2560 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
    20:24:19.0087 2560 AsyncMac - ok
    20:24:19.0150 2560 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\DRIVERS\atapi.sys
    20:24:19.0165 2560 atapi - ok
    20:24:19.0430 2560 atikmdag (04f09923a393e4e0e8453a8f78361e73) C:\Windows\system32\DRIVERS\atikmdag.sys
    20:24:19.0508 2560 atikmdag - ok
    20:24:19.0680 2560 AtiPcie (b73c832088dd54b55e04ff6f9646ad8c) C:\Windows\system32\DRIVERS\AtiPcie.sys
    20:24:19.0680 2560 AtiPcie - ok
    20:24:19.0883 2560 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
    20:24:19.0883 2560 b06bdrv - ok
    20:24:20.0054 2560 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
    20:24:20.0054 2560 b57nd60x - ok
    20:24:20.0179 2560 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
    20:24:20.0179 2560 Beep - ok
    20:24:20.0335 2560 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
    20:24:20.0335 2560 blbdrive - ok
    20:24:20.0507 2560 bowser (9a5c671b7fbae4865149bb11f59b91b2) C:\Windows\system32\DRIVERS\bowser.sys
    20:24:20.0507 2560 bowser - ok
    20:24:20.0585 2560 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
    20:24:20.0585 2560 BrFiltLo - ok
    20:24:20.0647 2560 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
    20:24:20.0647 2560 BrFiltUp - ok
    20:24:20.0819 2560 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
    20:24:20.0819 2560 Brserid - ok
    20:24:20.0834 2560 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
    20:24:20.0834 2560 BrSerWdm - ok
    20:24:20.0850 2560 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
    20:24:20.0850 2560 BrUsbMdm - ok
    20:24:20.0975 2560 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
    20:24:20.0975 2560 BrUsbSer - ok
    20:24:21.0037 2560 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
    20:24:21.0037 2560 BTHMODEM - ok
    20:24:21.0162 2560 catchme - ok
    20:24:21.0318 2560 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
    20:24:21.0318 2560 cdfs - ok
    20:24:21.0490 2560 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\Windows\system32\DRIVERS\cdrom.sys
    20:24:21.0490 2560 cdrom - ok
    20:24:21.0708 2560 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
    20:24:21.0708 2560 circlass - ok
    20:24:21.0848 2560 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
    20:24:21.0848 2560 CLFS - ok
    20:24:22.0067 2560 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
    20:24:22.0082 2560 CmBatt - ok
    20:24:22.0223 2560 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\DRIVERS\cmdide.sys
    20:24:22.0223 2560 cmdide - ok
    20:24:22.0363 2560 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
    20:24:22.0363 2560 CNG - ok
    20:24:22.0535 2560 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
    20:24:22.0535 2560 Compbatt - ok
    20:24:22.0706 2560 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\Windows\system32\DRIVERS\CompositeBus.sys
    20:24:22.0706 2560 CompositeBus - ok
    20:24:22.0816 2560 cpuz135 - ok
    20:24:22.0894 2560 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
    20:24:22.0894 2560 crcdisk - ok
    20:24:23.0065 2560 CSC (27c9490bdd0ae48911ab8cf1932591ed) C:\Windows\system32\drivers\csc.sys
    20:24:23.0065 2560 CSC - ok
    20:24:23.0533 2560 DfsC (83d1ecea8faae75604c0fa49ac7ad996) C:\Windows\system32\Drivers\dfsc.sys
    20:24:23.0549 2560 DfsC - ok
    20:24:23.0767 2560 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
    20:24:23.0767 2560 discache - ok
    20:24:24.0001 2560 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
    20:24:24.0001 2560 Disk - ok
    20:24:24.0188 2560 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
    20:24:24.0188 2560 drmkaud - ok
    20:24:24.0282 2560 DXGKrnl (1679a4669326cb1a67cc95658d273234) C:\Windows\System32\drivers\dxgkrnl.sys
    20:24:24.0282 2560 DXGKrnl - ok
    20:24:24.0516 2560 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
    20:24:24.0578 2560 ebdrv - ok
    20:24:24.0750 2560 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
    20:24:24.0766 2560 elxstor - ok
    20:24:24.0781 2560 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\DRIVERS\errdev.sys
    20:24:24.0781 2560 ErrDev - ok
    20:24:24.0953 2560 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
    20:24:24.0953 2560 exfat - ok
    20:24:24.0984 2560 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
    20:24:24.0984 2560 fastfat - ok
    20:24:25.0140 2560 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
    20:24:25.0140 2560 fdc - ok
    20:24:25.0171 2560 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
    20:24:25.0171 2560 FileInfo - ok
    20:24:25.0296 2560 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
    20:24:25.0296 2560 Filetrace - ok
    20:24:25.0343 2560 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
    20:24:25.0358 2560 flpydisk - ok
    20:24:25.0452 2560 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
    20:24:25.0468 2560 FltMgr - ok
    20:24:25.0546 2560 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
    20:24:25.0561 2560 FsDepends - ok
    20:24:25.0624 2560 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
    20:24:25.0624 2560 Fs_Rec - ok
    20:24:26.0014 2560 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\Windows\system32\DRIVERS\fvevol.sys
    20:24:26.0045 2560 fvevol - ok
    20:24:26.0326 2560 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
    20:24:26.0341 2560 gagp30kx - ok
    20:24:26.0825 2560 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
    20:24:26.0856 2560 hcw85cir - ok
    20:24:27.0308 2560 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\Windows\system32\drivers\HdAudio.sys
    20:24:27.0324 2560 HdAudAddService - ok
    20:24:27.0558 2560 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\Windows\system32\DRIVERS\HDAudBus.sys
    20:24:27.0558 2560 HDAudBus - ok
    20:24:27.0761 2560 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
    20:24:27.0761 2560 HidBatt - ok
    20:24:27.0995 2560 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
    20:24:27.0995 2560 HidBth - ok
    20:24:28.0260 2560 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
    20:24:28.0276 2560 HidIr - ok
    20:24:28.0572 2560 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\Windows\system32\DRIVERS\hidusb.sys
    20:24:28.0588 2560 HidUsb - ok
    20:24:28.0931 2560 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\DRIVERS\HpSAMD.sys
    20:24:28.0946 2560 HpSAMD - ok
    20:24:29.0305 2560 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\Windows\system32\drivers\HTTP.sys
    20:24:29.0321 2560 HTTP - ok
    20:24:29.0555 2560 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\Windows\system32\drivers\hwpolicy.sys
    20:24:29.0555 2560 hwpolicy - ok
    20:24:29.0773 2560 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\DRIVERS\i8042prt.sys
    20:24:29.0773 2560 i8042prt - ok
    20:24:29.0945 2560 iaStorV (71f1a494fedf4b33c02c4a6a28d6d9e9) C:\Windows\system32\drivers\iaStorV.sys
    20:24:29.0945 2560 iaStorV - ok
    20:24:30.0116 2560 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
    20:24:30.0116 2560 iirsp - ok
    20:24:30.0226 2560 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\DRIVERS\intelide.sys
    20:24:30.0226 2560 intelide - ok
    20:24:30.0366 2560 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
    20:24:30.0382 2560 intelppm - ok
    20:24:30.0444 2560 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
    20:24:30.0444 2560 IpFilterDriver - ok
    20:24:30.0584 2560 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\Windows\system32\DRIVERS\IPMIDrv.sys
    20:24:30.0600 2560 IPMIDRV - ok
    20:24:30.0678 2560 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
    20:24:30.0678 2560 IPNAT - ok
    20:24:30.0834 2560 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
    20:24:30.0834 2560 IRENUM - ok
    20:24:30.0896 2560 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\DRIVERS\isapnp.sys
    20:24:30.0896 2560 isapnp - ok
    20:24:31.0021 2560 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\Windows\system32\DRIVERS\msiscsi.sys
    20:24:31.0021 2560 iScsiPrt - ok
    20:24:31.0193 2560 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
    20:24:31.0193 2560 kbdclass - ok
    20:24:31.0364 2560 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\Windows\system32\DRIVERS\kbdhid.sys
    20:24:31.0380 2560 kbdhid - ok
    20:24:31.0567 2560 KSecDD (e36a061ec11b373826905b21be10948f) C:\Windows\system32\Drivers\ksecdd.sys
    20:24:31.0567 2560 KSecDD - ok
    20:24:31.0661 2560 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\Windows\system32\Drivers\ksecpkg.sys
    20:24:31.0676 2560 KSecPkg - ok
    20:24:31.0817 2560 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
    20:24:31.0817 2560 lltdio - ok
    20:24:31.0879 2560 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
    20:24:31.0879 2560 LSI_FC - ok
    20:24:31.0957 2560 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
    20:24:31.0957 2560 LSI_SAS - ok
    20:24:32.0113 2560 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
    20:24:32.0113 2560 LSI_SAS2 - ok
    20:24:32.0191 2560 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
    20:24:32.0191 2560 LSI_SCSI - ok
    20:24:32.0347 2560 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
    20:24:32.0347 2560 luafv - ok
    20:24:32.0441 2560 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
    20:24:32.0456 2560 megasas - ok
    20:24:32.0706 2560 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
    20:24:32.0722 2560 MegaSR - ok
    20:24:32.0987 2560 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
    20:24:32.0987 2560 Modem - ok
    20:24:33.0158 2560 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
    20:24:33.0158 2560 monitor - ok
    20:24:33.0361 2560 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
    20:24:33.0361 2560 mouclass - ok
    20:24:33.0548 2560 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
    20:24:33.0548 2560 mouhid - ok
    20:24:33.0720 2560 mountmgr (921c18727c5920d6c0300736646931c2) C:\Windows\system32\drivers\mountmgr.sys
    20:24:33.0720 2560 mountmgr - ok
    20:24:33.0907 2560 mpio (2af5997438c55fb79d33d015c30e1974) C:\Windows\system32\DRIVERS\mpio.sys
    20:24:33.0923 2560 mpio - ok
    20:24:34.0126 2560 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
    20:24:34.0126 2560 mpsdrv - ok
    20:24:34.0297 2560 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\Windows\system32\drivers\mrxdav.sys
    20:24:34.0297 2560 MRxDAV - ok
    20:24:34.0516 2560 mrxsmb (ca7570e42522e24324a12161db14ec02) C:\Windows\system32\DRIVERS\mrxsmb.sys
    20:24:34.0516 2560 mrxsmb - ok
    20:24:34.0687 2560 mrxsmb10 (f965c3ab2b2ae5c378f4562486e35051) C:\Windows\system32\DRIVERS\mrxsmb10.sys
    20:24:34.0687 2560 mrxsmb10 - ok
    20:24:34.0874 2560 mrxsmb20 (25c38264a3c72594dd21d355d70d7a5d) C:\Windows\system32\DRIVERS\mrxsmb20.sys
    20:24:34.0874 2560 mrxsmb20 - ok
    20:24:35.0046 2560 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\Windows\system32\DRIVERS\msahci.sys
    20:24:35.0046 2560 msahci - ok
    20:24:35.0218 2560 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\Windows\system32\DRIVERS\msdsm.sys
    20:24:35.0218 2560 msdsm - ok
    20:24:35.0592 2560 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
    20:24:35.0608 2560 Msfs - ok
    20:24:35.0779 2560 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
    20:24:35.0795 2560 mshidkmdf - ok
    20:24:35.0888 2560 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\DRIVERS\msisadrv.sys
    20:24:35.0888 2560 msisadrv - ok
    20:24:36.0076 2560 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
    20:24:36.0076 2560 MSKSSRV - ok
    20:24:36.0216 2560 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
    20:24:36.0232 2560 MSPCLOCK - ok
    20:24:36.0388 2560 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
    20:24:36.0388 2560 MSPQM - ok
    20:24:36.0528 2560 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
    20:24:36.0528 2560 MsRPC - ok
    20:24:36.0668 2560 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys
    20:24:36.0668 2560 mssmbios - ok
    20:24:36.0856 2560 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
    20:24:36.0871 2560 MSTEE - ok
    20:24:37.0012 2560 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
    20:24:37.0012 2560 MTConfig - ok
    20:24:37.0168 2560 MTsensor (cbe71c122434805cb73ffb6619f60598) C:\Windows\system32\DRIVERS\ASACPI.sys
    20:24:37.0168 2560 MTsensor - ok
    20:24:37.0324 2560 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
    20:24:37.0339 2560 Mup - ok
    20:24:37.0495 2560 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
    20:24:37.0511 2560 NativeWifiP - ok
    20:24:37.0729 2560 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\Windows\system32\drivers\ndis.sys
    20:24:37.0745 2560 NDIS - ok
    20:24:37.0916 2560 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
    20:24:37.0932 2560 NdisCap - ok
    20:24:38.0104 2560 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
    20:24:38.0104 2560 NdisTapi - ok
    20:24:38.0306 2560 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\Windows\system32\DRIVERS\ndisuio.sys
    20:24:38.0306 2560 Ndisuio - ok
    20:24:38.0447 2560 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\Windows\system32\DRIVERS\ndiswan.sys
    20:24:38.0462 2560 NdisWan - ok
    20:24:38.0681 2560 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\Windows\system32\drivers\NDProxy.sys
    20:24:38.0712 2560 NDProxy - ok
    20:24:38.0977 2560 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
    20:24:38.0993 2560 NetBIOS - ok
    20:24:39.0258 2560 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
    20:24:39.0258 2560 NetBT - ok
    20:24:39.0570 2560 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
    20:24:39.0601 2560 nfrd960 - ok
    20:24:39.0820 2560 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
    20:24:39.0820 2560 Npfs - ok
    20:24:39.0913 2560 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
    20:24:39.0929 2560 nsiproxy - ok
    20:24:40.0116 2560 Ntfs (187002ce05693c306f43c873f821381f) C:\Windows\system32\drivers\Ntfs.sys
    20:24:40.0132 2560 Ntfs - ok
    20:24:40.0272 2560 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
    20:24:40.0272 2560 Null - ok
    20:24:40.0444 2560 nvraid (f1b0bed906f97e16f6d0c3629d2f21c6) C:\Windows\system32\drivers\nvraid.sys
    20:24:40.0459 2560 nvraid - ok
    20:24:40.0646 2560 nvstor (4520b63899e867f354ee012d34e11536) C:\Windows\system32\drivers\nvstor.sys
    20:24:40.0646 2560 nvstor - ok
    20:24:40.0756 2560 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\DRIVERS\nv_agp.sys
    20:24:40.0771 2560 nv_agp - ok
    20:24:40.0880 2560 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\DRIVERS\ohci1394.sys
    20:24:40.0880 2560 ohci1394 - ok
    20:24:41.0130 2560 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
    20:24:41.0146 2560 Parport - ok
    20:24:41.0270 2560 partmgr (ff4218952b51de44fe910953a3e686b9) C:\Windows\system32\drivers\partmgr.sys
    20:24:41.0270 2560 partmgr - ok
    20:24:41.0411 2560 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
    20:24:41.0411 2560 Parvdm - ok
    20:24:41.0551 2560 pci (c858cb77c577780ecc456a892e7e7d0f) C:\Windows\system32\DRIVERS\pci.sys
    20:24:41.0567 2560 pci - ok
    20:24:41.0707 2560 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\DRIVERS\pciide.sys
    20:24:41.0707 2560 pciide - ok
    20:24:41.0863 2560 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
    20:24:41.0863 2560 pcmcia - ok
    20:24:42.0004 2560 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
    20:24:42.0004 2560 pcw - ok
    20:24:42.0160 2560 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
    20:24:42.0191 2560 PEAUTH - ok
    20:24:42.0409 2560 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
    20:24:42.0409 2560 PptpMiniport - ok
    20:24:42.0550 2560 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
    20:24:42.0550 2560 Processor - ok
    20:24:42.0768 2560 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
    20:24:42.0768 2560 Psched - ok
    20:24:43.0220 2560 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
    20:24:43.0267 2560 ql2300 - ok
    20:24:43.0876 2560 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
    20:24:43.0907 2560 ql40xx - ok
    20:24:44.0453 2560 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
    20:24:44.0468 2560 QWAVEdrv - ok
    20:24:44.0921 2560 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
    20:24:44.0952 2560 RasAcd - ok
    20:24:45.0170 2560 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
    20:24:45.0170 2560 RasAgileVpn - ok
    20:24:45.0592 2560 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
    20:24:45.0607 2560 Rasl2tp - ok
    20:24:46.0044 2560 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
    20:24:46.0044 2560 RasPppoe - ok
    20:24:46.0418 2560 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
    20:24:46.0418 2560 RasSstp - ok
    20:24:46.0637 2560 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\Windows\system32\DRIVERS\rdbss.sys
    20:24:46.0637 2560 rdbss - ok
    20:24:46.0824 2560 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
    20:24:46.0824 2560 rdpbus - ok
    20:24:47.0011 2560 RDPCDD (1e016846895b15a99f9a176a05029075) C:\Windows\system32\DRIVERS\RDPCDD.sys
    20:24:47.0011 2560 RDPCDD - ok
    20:24:47.0261 2560 RDPDR (c5ff95883ffef704d50c40d21cfb3ab5) C:\Windows\system32\drivers\rdpdr.sys
    20:24:47.0276 2560 RDPDR - ok
    20:24:47.0510 2560 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
    20:24:47.0588 2560 RDPENCDD - ok
    20:24:47.0807 2560 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
    20:24:47.0807 2560 RDPREFMP - ok
    20:24:48.0041 2560 RDPWD (801371ba9782282892d00aadb08ee367) C:\Windows\system32\drivers\RDPWD.sys
    20:24:48.0041 2560 RDPWD - ok
    20:24:48.0275 2560 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\Windows\system32\drivers\rdyboost.sys
    20:24:48.0290 2560 rdyboost - ok
    20:24:48.0540 2560 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
    20:24:48.0540 2560 rspndr - ok
    20:24:48.0712 2560 RT61 (581e74880aeb1dba1cb5ac8e6e6c0a69) C:\Windows\system32\DRIVERS\RT61.sys
    20:24:48.0712 2560 RT61 - ok
    20:24:48.0992 2560 RTL8167 (05c2613f661584190c752f6184d1c8ef) C:\Windows\system32\DRIVERS\Rt86win7.sys
    20:24:49.0008 2560 RTL8167 - ok
    20:24:49.0180 2560 s3cap (5423d8437051e89dd34749f242c98648) C:\Windows\system32\DRIVERS\vms3cap.sys
    20:24:49.0195 2560 s3cap - ok
    20:24:49.0289 2560 SASDIFSV - ok
    20:24:49.0382 2560 SASKUTIL - ok
    20:24:49.0554 2560 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\Windows\system32\DRIVERS\sbp2port.sys
    20:24:49.0554 2560 sbp2port - ok
    20:24:49.0726 2560 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\Windows\system32\DRIVERS\scfilter.sys
    20:24:49.0726 2560 scfilter - ok
    20:24:49.0788 2560 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
    20:24:49.0788 2560 secdrv - ok
    20:24:49.0991 2560 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
    20:24:49.0991 2560 Serenum - ok
    20:24:50.0069 2560 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
    20:24:50.0069 2560 sermouse - ok
    20:24:50.0225 2560 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\DRIVERS\sffdisk.sys
    20:24:50.0225 2560 sffdisk - ok
    20:24:50.0303 2560 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\DRIVERS\sffp_mmc.sys
    20:24:50.0303 2560 sffp_mmc - ok
    20:24:50.0381 2560 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) C:\Windows\system32\DRIVERS\sffp_sd.sys
    20:24:50.0381 2560 sffp_sd - ok
    20:24:50.0428 2560 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
    20:24:50.0428 2560 sfloppy - ok
    20:24:50.0537 2560 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\DRIVERS\sisagp.sys
    20:24:50.0537 2560 sisagp - ok
    20:24:50.0693 2560 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
    20:24:50.0693 2560 SiSRaid2 - ok
    20:24:50.0818 2560 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
    20:24:50.0818 2560 SiSRaid4 - ok
    20:24:50.0974 2560 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
    20:24:50.0989 2560 Smb - ok
    20:24:51.0161 2560 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
    20:24:51.0161 2560 spldr - ok
    20:24:51.0348 2560 srv (c4a027b8c0bd3fc0699f41fa5e9e0c87) C:\Windows\system32\DRIVERS\srv.sys
    20:24:51.0348 2560 srv - ok
    20:24:51.0488 2560 srv2 (414bb592cad8a79649d01f9d94318fb3) C:\Windows\system32\DRIVERS\srv2.sys
    20:24:51.0504 2560 srv2 - ok
    20:24:51.0644 2560 srvnet (ff207d67700aa18242aaf985d3e7d8f4) C:\Windows\system32\DRIVERS\srvnet.sys
    20:24:51.0644 2560 srvnet - ok
    20:24:51.0816 2560 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
    20:24:51.0816 2560 stexstor - ok
    20:24:51.0972 2560 storflt (957e346ca948668f2496a6ccf6ff82cc) C:\Windows\system32\DRIVERS\vmstorfl.sys
    20:24:51.0972 2560 storflt - ok
    20:24:52.0112 2560 storvsc (d5751969dc3e4b88bf482ac8ec9fe019) C:\Windows\system32\DRIVERS\storvsc.sys
    20:24:52.0112 2560 storvsc - ok
    20:24:52.0190 2560 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys
    20:24:52.0190 2560 swenum - ok
    20:24:52.0487 2560 Tcpip (c2daaeb48f3a47c410b041a0d2382ee1) C:\Windows\system32\drivers\tcpip.sys
    20:24:52.0502 2560 Tcpip - ok
    20:24:52.0768 2560 TCPIP6 (c2daaeb48f3a47c410b041a0d2382ee1) C:\Windows\system32\DRIVERS\tcpip.sys
    20:24:52.0783 2560 TCPIP6 - ok
    20:24:53.0017 2560 tcpipreg (e64444523add154f86567c469bc0b17f) C:\Windows\system32\drivers\tcpipreg.sys
    20:24:53.0017 2560 tcpipreg - ok
    20:24:53.0282 2560 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\Windows\system32\drivers\tdpipe.sys
    20:24:53.0282 2560 TDPIPE - ok
    20:24:53.0516 2560 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\Windows\system32\drivers\tdtcp.sys
    20:24:53.0516 2560 TDTCP - ok
    20:24:53.0735 2560 tdx (cb39e896a2a83702d1737bfd402b3542) C:\Windows\system32\DRIVERS\tdx.sys
    20:24:53.0766 2560 tdx - ok
    20:24:54.0047 2560 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\Windows\system32\DRIVERS\termdd.sys
    20:24:54.0047 2560 TermDD - ok
    20:24:54.0374 2560 tmrkb (7e2887341a3164dedc9b89082c24aeca) C:\Windows\system32\DRIVERS\tmrkb.sys
    20:24:54.0374 2560 Suspicious file (Forged): C:\Windows\system32\DRIVERS\tmrkb.sys. Real md5: 7e2887341a3164dedc9b89082c24aeca, Fake md5: b44d1e95a4c70853230a2e1cd0dac0b9
    20:24:54.0374 2560 tmrkb ( ForgedFile.Multi.Generic ) - warning
    20:24:54.0374 2560 tmrkb - detected ForgedFile.Multi.Generic (1)
    20:24:54.0671 2560 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\Windows\system32\DRIVERS\tssecsrv.sys
    20:24:54.0686 2560 tssecsrv - ok
    20:24:54.0920 2560 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\Windows\system32\DRIVERS\tunnel.sys
    20:24:54.0920 2560 tunnel - ok
    20:24:55.0139 2560 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
    20:24:55.0139 2560 uagp35 - ok
    20:24:55.0513 2560 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\Windows\system32\DRIVERS\udfs.sys
    20:24:55.0513 2560 udfs - ok
    20:24:55.0794 2560 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\DRIVERS\uliagpkx.sys
    20:24:55.0794 2560 uliagpkx - ok
    20:24:56.0075 2560 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\Windows\system32\DRIVERS\umbus.sys
    20:24:56.0090 2560 umbus - ok
    20:24:56.0371 2560 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
    20:24:56.0371 2560 UmPass - ok
    20:24:56.0714 2560 usbaudio (2436a42aab4ad48a9b714e5b0f344627) C:\Windows\system32\drivers\usbaudio.sys
    20:24:56.0730 2560 usbaudio - ok
    20:24:56.0933 2560 usbccgp (c31ae588e403042632dc796cf09e30b0) C:\Windows\system32\DRIVERS\usbccgp.sys
    20:24:56.0933 2560 usbccgp - ok
    20:24:57.0182 2560 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\DRIVERS\usbcir.sys
    20:24:57.0198 2560 usbcir - ok
    20:24:57.0338 2560 usbehci (e4c436d914768ce965d5e659ba7eebd8) C:\Windows\system32\DRIVERS\usbehci.sys
    20:24:57.0338 2560 usbehci - ok
    20:24:57.0619 2560 usbhub (bdcd7156ec37448f08633fd899823620) C:\Windows\system32\DRIVERS\usbhub.sys
    20:24:57.0635 2560 usbhub - ok
    20:24:57.0884 2560 usbohci (eb2d819a639015253c871cda09d91d58) C:\Windows\system32\DRIVERS\usbohci.sys
    20:24:57.0884 2560 usbohci - ok
    20:24:58.0118 2560 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
    20:24:58.0134 2560 usbprint - ok
    20:24:58.0384 2560 USBSTOR (1c4287739a93594e57e2a9e6a3ed7353) C:\Windows\system32\DRIVERS\USBSTOR.SYS
    20:24:58.0399 2560 USBSTOR - ok
    20:24:58.0571 2560 usbuhci (22480bf4e5a09192e5e30ba4dde79fa4) C:\Windows\system32\drivers\usbuhci.sys
    20:24:58.0586 2560 usbuhci - ok
    20:24:58.0758 2560 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\DRIVERS\vdrvroot.sys
    20:24:58.0774 2560 vdrvroot - ok
    20:24:59.0023 2560 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
    20:24:59.0039 2560 vga - ok
    20:24:59.0242 2560 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
    20:24:59.0257 2560 VgaSave - ok
    20:24:59.0382 2560 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\Windows\system32\DRIVERS\vhdmp.sys
    20:24:59.0382 2560 vhdmp - ok
    20:24:59.0663 2560 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\DRIVERS\viaagp.sys
    20:24:59.0678 2560 viaagp - ok
    20:24:59.0803 2560 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
    20:24:59.0819 2560 ViaC7 - ok
    20:25:00.0053 2560 VIAHdAudAddService (dc56a867a2d92e1c51cb6d3f9c540548) C:\Windows\system32\drivers\viahduaa.sys
    20:25:00.0100 2560 VIAHdAudAddService - ok
    20:25:00.0287 2560 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\DRIVERS\viaide.sys
    20:25:00.0287 2560 viaide - ok
    20:25:00.0521 2560 vmbus (379b349f65f453d2a6e75ea6b7448e49) C:\Windows\system32\DRIVERS\vmbus.sys
    20:25:00.0521 2560 vmbus - ok
    20:25:00.0770 2560 VMBusHID (ec2bbab4b84d0738c6c83d2234dc36fe) C:\Windows\system32\DRIVERS\VMBusHID.sys
    20:25:00.0786 2560 VMBusHID - ok
    20:25:01.0098 2560 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\Windows\system32\DRIVERS\volmgr.sys
    20:25:01.0098 2560 volmgr - ok
    20:25:01.0301 2560 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
    20:25:01.0316 2560 volmgrx - ok
    20:25:01.0519 2560 volsnap (58df9d2481a56edde167e51b334d44fd) C:\Windows\system32\DRIVERS\volsnap.sys
    20:25:01.0535 2560 volsnap - ok
    20:25:01.0722 2560 vpcbus (33e74df34753fcaab06f6f2bdc8cabf5) C:\Windows\system32\DRIVERS\vpchbus.sys
    20:25:01.0722 2560 vpcbus - ok
    20:25:01.0894 2560 vpcnfltr (5f04362ceb5fb5901037e9d9eadd3760) C:\Windows\system32\DRIVERS\vpcnfltr.sys
    20:25:01.0894 2560 vpcnfltr - ok
    20:25:02.0112 2560 vpcusb (625088d6ee9ede977fd03cf18d1cd5c5) C:\Windows\system32\DRIVERS\vpcusb.sys
    20:25:02.0128 2560 vpcusb - ok
    20:25:02.0455 2560 vpcvmm (1023c696d42268e9071bb376dbec8396) C:\Windows\system32\drivers\vpcvmm.sys
    20:25:02.0455 2560 vpcvmm - ok
    20:25:02.0705 2560 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
    20:25:02.0720 2560 vsmraid - ok
    20:25:03.0001 2560 VSPerfDrv100 (5a2ddc5411a092bedb1a07755e087784) C:\Program Files\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\VSPerfDrv100.sys
    20:25:03.0110 2560 VSPerfDrv100 - ok
    20:25:03.0344 2560 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys
    20:25:03.0344 2560 vwifibus - ok
    20:25:03.0610 2560 wacmoumonitor (c3b03ed7b06657a3355f620bc02acfb6) C:\Windows\system32\DRIVERS\wacmoumonitor.sys
    20:25:03.0610 2560 wacmoumonitor - ok
    20:25:03.0797 2560 wacommousefilter (427a8bc96f16c40df81c2d2f4edd32dd) C:\Windows\system32\DRIVERS\wacommousefilter.sys
    20:25:03.0812 2560 wacommousefilter - ok
    20:25:04.0000 2560 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
    20:25:04.0000 2560 WacomPen - ok
    20:25:04.0202 2560 wacomvhid (846b58ea44bf8c92e4b59f4e2252c4c0) C:\Windows\system32\DRIVERS\wacomvhid.sys
    20:25:04.0202 2560 wacomvhid - ok
    20:25:04.0390 2560 WANARP (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
    20:25:04.0390 2560 WANARP - ok
    20:25:04.0405 2560 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
    20:25:04.0405 2560 Wanarpv6 - ok
    20:25:04.0686 2560 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
    20:25:04.0702 2560 Wd - ok
    20:25:04.0904 2560 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
    20:25:04.0920 2560 Wdf01000 - ok
    20:25:05.0170 2560 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
    20:25:05.0185 2560 WfpLwf - ok
    20:25:05.0341 2560 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
    20:25:05.0357 2560 WIMMount - ok
    20:25:05.0591 2560 WinDriver6 (0a597f84bc8af4229b529f655bb2ba14) C:\Windows\system32\drivers\windrvr6.sys
    20:25:05.0591 2560 WinDriver6 - ok
    20:25:05.0918 2560 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\DRIVERS\wmiacpi.sys
    20:25:05.0918 2560 WmiAcpi - ok
    20:25:06.0152 2560 WRkrn (6f759df9b7b1ddd22febe80cd942b54f) C:\Windows\system32\drivers\WRkrn.sys
    20:25:06.0152 2560 WRkrn - ok
    20:25:06.0355 2560 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
    20:25:06.0371 2560 ws2ifsl - ok
    20:25:06.0636 2560 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\Windows\system32\drivers\WudfPf.sys
    20:25:06.0667 2560 WudfPf - ok
    20:25:07.0026 2560 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\Windows\system32\DRIVERS\WUDFRd.sys
    20:25:07.0042 2560 WUDFRd - ok
    20:25:07.0135 2560 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
    20:25:07.0166 2560 \Device\Harddisk0\DR0 - ok
    20:25:07.0182 2560 MBR (0x1B8) (3051207086651214e435112e51817dc5) \Device\Harddisk1\DR1
    20:25:07.0182 2560 \Device\Harddisk1\DR1 - ok
    20:25:07.0182 2560 Boot (0x1200) (71301cf578259c44eac051a30ed79edd) \Device\Harddisk0\DR0\Partition0
    20:25:07.0182 2560 \Device\Harddisk0\DR0\Partition0 - ok
    20:25:07.0198 2560 Boot (0x1200) (2746959d8da5bc6d6b27c080fc47f0e3) \Device\Harddisk0\DR0\Partition1
    20:25:07.0198 2560 \Device\Harddisk0\DR0\Partition1 - ok
    20:25:07.0213 2560 Boot (0x1200) (1b11360251bf637005d28619ac9fa751) \Device\Harddisk1\DR1\Partition0
    20:25:07.0213 2560 \Device\Harddisk1\DR1\Partition0 - ok
    20:25:07.0229 2560 Boot (0x1200) (b1fbf230aa5a079fd8c945ff08808f03) \Device\Harddisk1\DR1\Partition1
    20:25:07.0244 2560 \Device\Harddisk1\DR1\Partition1 - ok
    20:25:07.0244 2560 ================================================== ==========
    20:25:07.0244 2560 Scan finished
    20:25:07.0244 2560 ================================================== ==========
    20:25:07.0260 2756 Detected object count: 1
    20:25:07.0260 2756 Actual detected object count: 1
    20:25:43.0655 2756 tmrkb ( ForgedFile.Multi.Generic ) - skipped by user
    20:25:43.0655 2756 tmrkb ( ForgedFile.Multi.Generic ) - User select action: Skip

Discussie informatie

Users Browsing this Thread

Momenteel bekijken 1 gebruikers deze discussie. (0 leden en 1 gasten)

Soortgelijke discussies

  1. geen toegang tot internet met draadloos netwerk
    Door white diamond in forum Netwerken en internetproviders
    Reacties: 15
    Laatste bericht: 5 September 2009, 13:49
  2. planning scannen met avast home
    Door senna in forum Malware
    Reacties: 2
    Laatste bericht: 27 February 2006, 20:25
  3. Scannen met Spybot
    Door Tjoolaere in forum Malware
    Reacties: 17
    Laatste bericht: 17 November 2005, 12:32
  4. pc valt uit bij scannen met ad-adware
    Door tasha in forum Malware
    Reacties: 11
    Laatste bericht: 15 November 2005, 16:55

Favorieten/bladwijzers

Favorieten/bladwijzers

Regels voor berichten

  • Je mag geen nieuwe discussies starten
  • Je mag niet reageren op berichten
  • Je mag geen bijlagen versturen
  • Je mag niet je berichten bewerken
  •