23:02:40.0678 2960 TDSS rootkit removing tool 2.7.1.0 Jan 13 2012 15:24:05 23:02:41.0590 2960 ============================================================ 23:02:41.0600 2960 Current date / time: 2012/01/13 23:02:41.0590 23:02:41.0600 2960 SystemInfo: 23:02:41.0600 2960 23:02:41.0600 2960 OS Version: 5.1.2600 ServicePack: 3.0 23:02:41.0600 2960 Product type: Workstation 23:02:41.0600 2960 ComputerName: VOYAGER 23:02:41.0600 2960 UserName: admin 23:02:41.0600 2960 Windows directory: C:\WINDOWS 23:02:41.0600 2960 System windows directory: C:\WINDOWS 23:02:41.0600 2960 Processor architecture: Intel x86 23:02:41.0600 2960 Number of processors: 1 23:02:41.0600 2960 Page size: 0x1000 23:02:41.0600 2960 Boot type: Normal boot 23:02:41.0600 2960 ============================================================ 23:02:43.0723 2960 Drive \Device\Harddisk0\DR0 - Size: 0x953C94000, SectorSize: 0x200, Cylinders: 0x1306, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K', Flags 0x00000054 23:02:43.0843 2960 Drive \Device\Harddisk1\DR1 - Size: 0x12A3F92000, SectorSize: 0x200, Cylinders: 0x2605, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K', Flags 0x00000054 23:02:44.0424 2960 Initialize success 23:02:49.0170 1592 ============================================================ 23:02:49.0170 1592 Scan started 23:02:49.0170 1592 Mode: Manual; 23:02:49.0170 1592 ============================================================ 23:02:49.0601 1592 Abiosdsk - ok 23:02:49.0711 1592 abp480n5 - ok 23:02:49.0831 1592 ACPI (d31241e64dba17d1642739993e14d2f3) C:\WINDOWS\system32\DRIVERS\ACPI.sys 23:02:49.0841 1592 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\ACPI.sys. Real md5: d31241e64dba17d1642739993e14d2f3, Fake md5: 05118282f5d039595a2b92b4a4afe197 23:02:49.0871 1592 ACPI ( Virus.Win32.Rloader.a ) - infected 23:02:49.0871 1592 ACPI - detected Virus.Win32.Rloader.a (0) 23:02:50.0002 1592 ACPIEC (66a42b7db194e24b973bbcce840a0f3f) C:\WINDOWS\system32\drivers\ACPIEC.sys 23:02:50.0012 1592 ACPIEC - ok 23:02:50.0172 1592 adpu160m - ok 23:02:50.0322 1592 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 23:02:50.0332 1592 aec - ok 23:02:50.0502 1592 AegisP (2c5c22990156a1063e19ad162191dc1d) C:\WINDOWS\system32\DRIVERS\AegisP.sys 23:02:50.0502 1592 AegisP - ok 23:02:50.0673 1592 AFD (322d0e36693d6e24a2398bee62a268cd) C:\WINDOWS\System32\drivers\afd.sys 23:02:50.0683 1592 AFD - ok 23:02:50.0753 1592 Aha154x - ok 23:02:50.0863 1592 aic78u2 - ok 23:02:50.0953 1592 aic78xx - ok 23:02:51.0133 1592 AliIde - ok 23:02:51.0223 1592 AmdK7 (6f41705041a671feb1fc8cfbadbb90ca) C:\WINDOWS\system32\DRIVERS\amdk7.sys 23:02:51.0223 1592 AmdK7 - ok 23:02:51.0304 1592 amsint - ok 23:02:51.0554 1592 AR5211 (9108f38c07f4953ea4ee89243e787cad) C:\WINDOWS\system32\DRIVERS\ar5211.sys 23:02:51.0564 1592 AR5211 - ok 23:02:51.0694 1592 asc - ok 23:02:51.0784 1592 asc3350p - ok 23:02:51.0844 1592 asc3550 - ok 23:02:51.0944 1592 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 23:02:51.0954 1592 AsyncMac - ok 23:02:52.0055 1592 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 23:02:52.0065 1592 atapi - ok 23:02:52.0185 1592 Atdisk - ok 23:02:52.0285 1592 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 23:02:52.0285 1592 Atmarpc - ok 23:02:52.0475 1592 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 23:02:52.0475 1592 audstub - ok 23:02:52.0666 1592 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 23:02:52.0676 1592 Beep - ok 23:02:52.0846 1592 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 23:02:52.0846 1592 cbidf2k - ok 23:02:52.0986 1592 cd20xrnt - ok 23:02:53.0086 1592 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 23:02:53.0086 1592 Cdaudio - ok 23:02:53.0246 1592 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 23:02:53.0246 1592 Cdfs - ok 23:02:53.0377 1592 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 23:02:53.0387 1592 Cdrom - ok 23:02:53.0497 1592 Changer - ok 23:02:53.0657 1592 CmdIde - ok 23:02:53.0837 1592 Cpqarray - ok 23:02:53.0957 1592 dac2w2k - ok 23:02:54.0088 1592 dac960nt - ok 23:02:54.0278 1592 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 23:02:54.0278 1592 Disk - ok 23:02:54.0548 1592 dmboot (bc9219abc5696942e6f9ac8a9b28670f) C:\WINDOWS\system32\drivers\dmboot.sys 23:02:54.0568 1592 dmboot - ok 23:02:54.0748 1592 dmio (5fa232e3ba6e1346f9f5a7e519320cb0) C:\WINDOWS\system32\drivers\dmio.sys 23:02:54.0759 1592 dmio - ok 23:02:54.0879 1592 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 23:02:54.0879 1592 dmload - ok 23:02:55.0089 1592 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 23:02:55.0089 1592 DMusic - ok 23:02:55.0510 1592 dpti2o - ok 23:02:55.0610 1592 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 23:02:55.0610 1592 drmkaud - ok 23:02:55.0820 1592 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 23:02:55.0820 1592 Fastfat - ok 23:02:55.0930 1592 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 23:02:55.0930 1592 Fdc - ok 23:02:56.0030 1592 Fips (09e2a4d33f81a06a8aab2ba0a0b5d235) C:\WINDOWS\system32\drivers\Fips.sys 23:02:56.0030 1592 Fips - ok 23:02:56.0130 1592 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys 23:02:56.0140 1592 Flpydisk - ok 23:02:56.0241 1592 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 23:02:56.0251 1592 FltMgr - ok 23:02:56.0341 1592 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 23:02:56.0341 1592 Fs_Rec - ok 23:02:56.0531 1592 Ftdisk (ed6d921d8ab423138fb35beee6d6a6cb) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 23:02:56.0541 1592 Ftdisk - ok 23:02:56.0671 1592 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 23:02:56.0671 1592 Gpc - ok 23:02:56.0902 1592 hpn - ok 23:02:57.0022 1592 HPZid412 (30ca91e657cede2f95359d6ef186f650) C:\WINDOWS\system32\DRIVERS\HPZid412.sys 23:02:57.0022 1592 HPZid412 - ok 23:02:57.0162 1592 HPZipr12 (efd31afa752aa7c7bbb57bcbe2b01c78) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys 23:02:57.0162 1592 HPZipr12 - ok 23:02:57.0252 1592 HPZius12 (7ac43c38ca8fd7ed0b0a4466f753e06e) C:\WINDOWS\system32\DRIVERS\HPZius12.sys 23:02:57.0252 1592 HPZius12 - ok 23:02:57.0412 1592 HTTP (f6aacf5bce2893e0c1754afeb672e5c9) C:\WINDOWS\system32\Drivers\HTTP.sys 23:02:57.0422 1592 HTTP - ok 23:02:57.0563 1592 i2omgmt - ok 23:02:57.0653 1592 i2omp - ok 23:02:57.0783 1592 i8042prt (177b372af55c4460d0968b5f1d02aa1c) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 23:02:57.0793 1592 i8042prt - ok 23:02:57.0893 1592 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 23:02:57.0893 1592 Imapi - ok 23:02:58.0053 1592 ini910u - ok 23:02:58.0163 1592 IntelIde - ok 23:02:58.0304 1592 ip6fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 23:02:58.0314 1592 ip6fw - ok 23:02:58.0484 1592 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 23:02:58.0484 1592 IpFilterDriver - ok 23:02:58.0644 1592 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 23:02:58.0644 1592 IpInIp - ok 23:02:58.0774 1592 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 23:02:58.0774 1592 IpNat - ok 23:02:58.0904 1592 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 23:02:58.0904 1592 IPSec - ok 23:02:59.0005 1592 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 23:02:59.0005 1592 IRENUM - ok 23:02:59.0115 1592 isapnp (c8eef2e93835b81bd335de2123121283) C:\WINDOWS\system32\DRIVERS\isapnp.sys 23:02:59.0115 1592 isapnp - ok 23:02:59.0235 1592 Kbdclass (2aeca45d4aeaacbdcb77ad11184e4601) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 23:02:59.0245 1592 Kbdclass - ok 23:02:59.0375 1592 kl1 (cd6a8fa9395460ffe7fd8881a6c67254) C:\WINDOWS\system32\drivers\kl1.sys 23:02:59.0385 1592 kl1 - ok 23:02:59.0555 1592 klbg (f9089982ed97340984e3dd60edd75490) C:\WINDOWS\system32\drivers\klbg.sys 23:02:59.0565 1592 klbg - ok 23:02:59.0716 1592 KLIF (2627c389ba33065b2e98118ce9d71e57) C:\WINDOWS\system32\DRIVERS\klif.sys 23:02:59.0726 1592 KLIF - ok 23:02:59.0866 1592 klim5 (cd16a39c6f61c2ae0272e1f431353bf7) C:\WINDOWS\system32\DRIVERS\klim5.sys 23:02:59.0866 1592 klim5 - ok 23:03:00.0006 1592 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 23:03:00.0006 1592 kmixer - ok 23:03:00.0126 1592 KSecDD (1705745d900dabf2d89f90ebaddc7517) C:\WINDOWS\system32\drivers\KSecDD.sys 23:03:00.0136 1592 KSecDD - ok 23:03:00.0286 1592 lbrtfdc - ok 23:03:00.0487 1592 MBAMProtector (b7ca8cc3f978201856b6ab82f40953c3) C:\WINDOWS\system32\drivers\mbam.sys 23:03:00.0497 1592 MBAMProtector - ok 23:03:00.0737 1592 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 23:03:00.0737 1592 mnmdd - ok 23:03:00.0907 1592 Modem (4a068db7dc37d5afedb6512d2931d7b3) C:\WINDOWS\system32\drivers\Modem.sys 23:03:00.0907 1592 Modem - ok 23:03:01.0018 1592 Mouclass (fbed3df6b884f8cf00447b73507f2c48) C:\WINDOWS\system32\DRIVERS\mouclass.sys 23:03:01.0018 1592 Mouclass - ok 23:03:01.0148 1592 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 23:03:01.0148 1592 MountMgr - ok 23:03:01.0298 1592 mraid35x - ok 23:03:01.0608 1592 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 23:03:01.0618 1592 MRxDAV - ok 23:03:01.0919 1592 MRxSmb (dfeca6ddd50e5226740e12aaea1c90aa) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 23:03:01.0949 1592 MRxSmb - ok 23:03:02.0169 1592 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 23:03:02.0169 1592 Msfs - ok 23:03:02.0359 1592 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 23:03:02.0369 1592 MSKSSRV - ok 23:03:02.0560 1592 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 23:03:02.0560 1592 MSPCLOCK - ok 23:03:02.0760 1592 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 23:03:02.0760 1592 MSPQM - ok 23:03:02.0930 1592 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 23:03:02.0930 1592 mssmbios - ok 23:03:03.0080 1592 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys 23:03:03.0080 1592 Mup - ok 23:03:03.0281 1592 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 23:03:03.0291 1592 NDIS - ok 23:03:03.0381 1592 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 23:03:03.0381 1592 NdisTapi - ok 23:03:03.0661 1592 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 23:03:03.0661 1592 Ndisuio - ok 23:03:03.0802 1592 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 23:03:03.0832 1592 NdisWan - ok 23:03:03.0962 1592 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys 23:03:03.0962 1592 NDProxy - ok 23:03:04.0082 1592 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 23:03:04.0082 1592 NetBIOS - ok 23:03:04.0222 1592 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 23:03:04.0222 1592 NetBT - ok 23:03:04.0533 1592 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 23:03:04.0543 1592 Npfs - ok 23:03:04.0693 1592 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 23:03:04.0713 1592 Ntfs - ok 23:03:04.0883 1592 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 23:03:04.0893 1592 Null - ok 23:03:05.0324 1592 nv (ba1b732c1a70cfea0c1b64f2850bf44f) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 23:03:05.0404 1592 nv - ok 23:03:05.0644 1592 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 23:03:05.0654 1592 NwlnkFlt - ok 23:03:05.0844 1592 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 23:03:05.0844 1592 NwlnkFwd - ok 23:03:06.0035 1592 Parport (2d4cdaebced17743aa9e25d3016dc229) C:\WINDOWS\system32\DRIVERS\parport.sys 23:03:06.0035 1592 Parport - ok 23:03:06.0195 1592 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 23:03:06.0195 1592 PartMgr - ok 23:03:06.0335 1592 ParVdm (453ec2c2a20a1382f564541918520eeb) C:\WINDOWS\system32\drivers\ParVdm.sys 23:03:06.0365 1592 ParVdm - ok 23:03:06.0555 1592 PCI (6862c69168d787b85a7d95ccd33c694e) C:\WINDOWS\system32\DRIVERS\pci.sys 23:03:06.0565 1592 PCI - ok 23:03:06.0666 1592 PCIDump - ok 23:03:06.0756 1592 PCIIde - ok 23:03:06.0936 1592 Pcmcia (8db27f1ae9593c94095485305a583862) C:\WINDOWS\system32\drivers\Pcmcia.sys 23:03:06.0936 1592 Pcmcia - ok 23:03:07.0076 1592 PDCOMP - ok 23:03:07.0176 1592 PDFRAME - ok 23:03:07.0277 1592 PDRELI - ok 23:03:07.0377 1592 PDRFRAME - ok 23:03:07.0527 1592 perc2 - ok 23:03:07.0637 1592 perc2hib - ok 23:03:07.0957 1592 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 23:03:07.0957 1592 PptpMiniport - ok 23:03:08.0118 1592 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 23:03:08.0118 1592 PSched - ok 23:03:08.0228 1592 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 23:03:08.0228 1592 Ptilink - ok 23:03:08.0328 1592 ql1080 - ok 23:03:08.0408 1592 Ql10wnt - ok 23:03:08.0538 1592 ql12160 - ok 23:03:08.0628 1592 ql1240 - ok 23:03:08.0719 1592 ql1280 - ok 23:03:08.0839 1592 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 23:03:08.0839 1592 RasAcd - ok 23:03:09.0049 1592 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 23:03:09.0059 1592 Rasl2tp - ok 23:03:09.0199 1592 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 23:03:09.0209 1592 RasPppoe - ok 23:03:09.0380 1592 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 23:03:09.0390 1592 Raspti - ok 23:03:09.0620 1592 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 23:03:09.0630 1592 Rdbss - ok 23:03:09.0740 1592 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 23:03:09.0740 1592 RDPCDD - ok 23:03:09.0890 1592 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 23:03:09.0900 1592 rdpdr - ok 23:03:10.0061 1592 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys 23:03:10.0061 1592 RDPWD - ok 23:03:10.0221 1592 redbook (e0c7bbd18040b58651bac700c804861d) C:\WINDOWS\system32\DRIVERS\redbook.sys 23:03:10.0231 1592 redbook - ok 23:03:10.0591 1592 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 23:03:10.0601 1592 Secdrv - ok 23:03:10.0731 1592 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 23:03:10.0731 1592 serenum - ok 23:03:10.0862 1592 Serial (d07b02f88165e69b9f17162cf592c8a6) C:\WINDOWS\system32\DRIVERS\serial.sys 23:03:10.0872 1592 Serial - ok 23:03:10.0992 1592 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 23:03:10.0992 1592 Sfloppy - ok 23:03:11.0142 1592 Simbad - ok 23:03:11.0242 1592 Sparrow - ok 23:03:11.0422 1592 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 23:03:11.0432 1592 splitter - ok 23:03:11.0593 1592 sr (eb032822be406ef220d546ddffcf0002) C:\WINDOWS\system32\DRIVERS\sr.sys 23:03:11.0603 1592 sr - ok 23:03:11.0763 1592 Srv (5252605079810904e31c332e241cd59b) C:\WINDOWS\system32\DRIVERS\srv.sys 23:03:11.0783 1592 Srv - ok 23:03:11.0933 1592 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 23:03:11.0933 1592 swenum - ok 23:03:12.0043 1592 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 23:03:12.0053 1592 swmidi - ok 23:03:12.0184 1592 symc810 - ok 23:03:12.0324 1592 symc8xx - ok 23:03:12.0434 1592 sym_hi - ok 23:03:12.0594 1592 sym_u3 - ok 23:03:13.0225 1592 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 23:03:13.0235 1592 sysaudio - ok 23:03:13.0525 1592 Tcpip (93ea8d04ec73a85db02eb8805988f733) C:\WINDOWS\system32\DRIVERS\tcpip.sys 23:03:13.0536 1592 Tcpip - ok 23:03:13.0666 1592 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 23:03:13.0676 1592 TDPIPE - ok 23:03:13.0786 1592 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 23:03:13.0786 1592 TDTCP - ok 23:03:13.0916 1592 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 23:03:13.0916 1592 TermDD - ok 23:03:14.0096 1592 TosIde - ok 23:03:14.0297 1592 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 23:03:14.0297 1592 Udfs - ok 23:03:14.0437 1592 ultra - ok 23:03:14.0637 1592 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 23:03:14.0677 1592 Update - ok 23:03:14.0847 1592 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 23:03:14.0847 1592 usbccgp - ok 23:03:15.0008 1592 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 23:03:15.0008 1592 usbhub - ok 23:03:15.0138 1592 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys 23:03:15.0138 1592 usbprint - ok 23:03:15.0258 1592 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys 23:03:15.0268 1592 usbscan - ok 23:03:15.0448 1592 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 23:03:15.0448 1592 USBSTOR - ok 23:03:15.0619 1592 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 23:03:15.0619 1592 usbuhci - ok 23:03:15.0749 1592 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 23:03:15.0749 1592 VgaSave - ok 23:03:15.0859 1592 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys 23:03:15.0859 1592 viaagp - ok 23:03:15.0979 1592 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys 23:03:15.0979 1592 ViaIde - ok 23:03:16.0139 1592 VIAudio (819bf44085104be6527b86a88acf856b) C:\WINDOWS\system32\drivers\ac97via.sys 23:03:16.0139 1592 VIAudio - ok 23:03:16.0249 1592 VolSnap (56b191ac5fc0df219949c95a6c87afe7) C:\WINDOWS\system32\drivers\VolSnap.sys 23:03:16.0249 1592 VolSnap - ok 23:03:16.0470 1592 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 23:03:16.0470 1592 Wanarp - ok 23:03:16.0620 1592 WDICA - ok 23:03:16.0740 1592 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 23:03:16.0750 1592 wdmaud - ok 23:03:17.0111 1592 MBR (0x1B8) (32052574bf9f325ae309abc7bfd04460) \Device\Harddisk0\DR0 23:03:17.0301 1592 \Device\Harddisk0\DR0 - ok 23:03:17.0391 1592 MBR (0x1B8) (32052574bf9f325ae309abc7bfd04460) \Device\Harddisk1\DR1 23:03:17.0401 1592 \Device\Harddisk1\DR1 - ok 23:03:17.0441 1592 Boot (0x1200) (7974beb05af52e6af24d8d75764d3ee6) \Device\Harddisk0\DR0\Partition0 23:03:17.0451 1592 \Device\Harddisk0\DR0\Partition0 - ok 23:03:17.0531 1592 Boot (0x1200) (40821241db5e21c1d62bd56237e01489) \Device\Harddisk0\DR0\Partition1 23:03:17.0531 1592 \Device\Harddisk0\DR0\Partition1 - ok 23:03:17.0581 1592 Boot (0x1200) (789033da7fbb4cc30fbdf2eebed9c371) \Device\Harddisk1\DR1\Partition0 23:03:17.0581 1592 \Device\Harddisk1\DR1\Partition0 - ok 23:03:17.0671 1592 Boot (0x1200) (bd78ad773b8172b70d4e5f466d423a24) \Device\Harddisk1\DR1\Partition1 23:03:17.0671 1592 \Device\Harddisk1\DR1\Partition1 - ok 23:03:17.0722 1592 Boot (0x1200) (b98abdbba1b29353efc2b13da3c43ba0) \Device\Harddisk1\DR1\Partition2 23:03:17.0722 1592 \Device\Harddisk1\DR1\Partition2 - ok 23:03:17.0752 1592 ============================================================ 23:03:17.0752 1592 Scan finished 23:03:17.0752 1592 ============================================================ 23:03:17.0842 0532 Detected object count: 1 23:03:17.0842 0532 Actual detected object count: 1 23:03:26.0334 0532 Backup copy found, using it.. 23:03:26.0384 0532 C:\WINDOWS\system32\DRIVERS\ACPI.sys - will be cured on reboot 23:03:26.0384 0532 ACPI ( Virus.Win32.Rloader.a ) - User select action: Cure 23:03:36.0879 2568 Deinitialize success