антивирусы ничего не находят, но hosts файл пополняется паразитными IP

Отчет TDSSKiller:
[CODE]23:28:31.0390 0148 TDSS rootkit removing tool 2.7.46.0 Jul 16 2012 22:10:11
23:28:31.0578 0148 ============================================================
23:28:31.0578 0148 Current date / time: 2012/07/19 23:28:31.0578
23:28:31.0578 0148 SystemInfo:
23:28:31.0578 0148
23:28:31.0578 0148 OS Version: 5.1.2600 ServicePack: 3.0
23:28:31.0578 0148 Product type: Workstation
23:28:31.0578 0148 ComputerName: ART
23:28:31.0578 0148 UserName: bobrovskij
23:28:31.0578 0148 Windows directory: C:\WINDOWS
23:28:31.0578 0148 System windows directory: C:\WINDOWS
23:28:31.0578 0148 Processor architecture: Intel x86
23:28:31.0578 0148 Number of processors: 2
23:28:31.0578 0148 Page size: 0x1000
23:28:31.0578 0148 Boot type: Normal boot
23:28:31.0578 0148 ============================================================
23:28:33.0312 0148 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
23:28:33.0312 0148 ============================================================
23:28:33.0312 0148 \Device\Harddisk0\DR0:
23:28:33.0312 0148 MBR partitions:
23:28:33.0312 0148 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x61A7927
23:28:33.0328 0148 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x61A79A5, BlocksNum 0xC86D25B
23:28:33.0328 0148 ============================================================
23:28:33.0390 0148 C: <-> \Device\Harddisk0\DR0\Partition0
23:28:33.0484 0148 D: <-> \Device\Harddisk0\DR0\Partition1
23:28:33.0484 0148 ============================================================
23:28:33.0484 0148 Initialize success
23:28:33.0484 0148 ============================================================
23:28:57.0093 2880 ============================================================
23:28:57.0093 2880 Scan started
23:28:57.0093 2880 Mode: Manual;
23:28:57.0093 2880 ============================================================
23:28:57.0796 2880 Aavmker4 (0b27ae82c113d3687024d18459440426) C:\WINDOWS\system32\drivers\Aavmker4.sys
23:28:57.0796 2880 Aavmker4 - ok
23:28:57.0812 2880 Abiosdsk - ok
23:28:57.0828 2880 abp480n5 - ok
23:28:57.0875 2880 ACPI (e28afa761d7ecaa705a00b4a86f68da9) C:\WINDOWS\system32\DRIVERS\ACPI.sys
23:28:57.0875 2880 ACPI - ok
23:28:57.0906 2880 ACPIEC (cea8d1da7696acbfc69a3823bcf1c738) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
23:28:57.0906 2880 ACPIEC - ok
23:28:57.0984 2880 AdobeFlashPlayerUpdateSvc (5e1a953c6472e7bb644892a4d0df5e72) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
23:28:57.0984 2880 AdobeFlashPlayerUpdateSvc - ok
23:28:58.0015 2880 adpu160m - ok
23:28:58.0062 2880 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
23:28:58.0062 2880 aec - ok
23:28:58.0156 2880 AFD (38d7b715504da4741df35e3594fe2099) C:\WINDOWS\System32\drivers\afd.sys
23:28:58.0171 2880 AFD - ok
23:28:58.0171 2880 Aha154x - ok
23:28:58.0218 2880 aic78u2 - ok
23:28:58.0234 2880 aic78xx - ok
23:28:58.0265 2880 Alerter (4bdc19b678e140c900e6973acef7182c) C:\WINDOWS\system32\alrsvc.dll
23:28:58.0265 2880 Alerter - ok
23:28:58.0296 2880 ALG (1f559252e6d787b9b48463bb2c8ceac2) C:\WINDOWS\System32\alg.exe
23:28:58.0312 2880 ALG - ok
23:28:58.0312 2880 AliIde - ok
23:28:58.0421 2880 Ambfilt (f6af59d6eee5e1c304f7f73706ad11d8) C:\WINDOWS\system32\drivers\Ambfilt.sys
23:28:58.0453 2880 Ambfilt - ok
23:28:58.0562 2880 amsint - ok
23:28:58.0593 2880 AnyDVD (6133cda37c8bc47b8dfcbfcbb06cb488) C:\WINDOWS\system32\Drivers\AnyDVD.sys
23:28:58.0593 2880 AnyDVD - ok
23:28:58.0718 2880 Apple Mobile Device (b8e865d24f2753a35cc2a9a6a3ce1ad4) C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
23:28:58.0718 2880 Apple Mobile Device - ok
23:28:58.0765 2880 AppMgmt (49cd07f6a6d14430d773d83e7e60bb07) C:\WINDOWS\System32\appmgmts.dll
23:28:58.0765 2880 AppMgmt - ok
23:28:58.0828 2880 AR5211 (d07ccc37476034ebf5de4608a8af4386) C:\WINDOWS\system32\DRIVERS\ar5211.sys
23:28:58.0843 2880 AR5211 - ok
23:28:58.0953 2880 AR5416 (dde307d6c228960df411b55765a4af90) C:\WINDOWS\system32\DRIVERS\athw.sys
23:28:58.0984 2880 AR5416 - ok
23:28:59.0125 2880 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
23:28:59.0140 2880 Arp1394 - ok
23:28:59.0140 2880 asc - ok
23:28:59.0171 2880 asc3350p - ok
23:28:59.0187 2880 asc3550 - ok
23:28:59.0328 2880 aspnet_state (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
23:28:59.0328 2880 aspnet_state - ok
23:28:59.0359 2880 aswFsBlk (1c1f3d6dddc046c920c493a779649f66) C:\WINDOWS\system32\drivers\aswFsBlk.sys
23:28:59.0359 2880 aswFsBlk - ok
23:28:59.0390 2880 aswMon2 (9e912fe7b41650701ef2b227aca440f3) C:\WINDOWS\system32\drivers\aswMon2.sys
23:28:59.0390 2880 aswMon2 - ok
23:28:59.0421 2880 aswRdr (982e275d1c5801042fe94209fb0160fb) C:\WINDOWS\system32\drivers\aswRdr.sys
23:28:59.0421 2880 aswRdr - ok
23:28:59.0500 2880 aswSnx (73dbcf808e00580f2a47f93dd9b03876) C:\WINDOWS\system32\drivers\aswSnx.sys
23:28:59.0500 2880 aswSnx - ok
23:28:59.0546 2880 aswSP (6cbd7d3a33f498d09c831cdd732da2e0) C:\WINDOWS\system32\drivers\aswSP.sys
23:28:59.0546 2880 aswSP - ok
23:28:59.0578 2880 aswTdi (7109a9aa551f37cd168c02368465957e) C:\WINDOWS\system32\drivers\aswTdi.sys
23:28:59.0578 2880 aswTdi - ok
23:28:59.0609 2880 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
23:28:59.0609 2880 AsyncMac - ok
23:28:59.0640 2880 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
23:28:59.0640 2880 atapi - ok
23:28:59.0656 2880 Atdisk - ok
23:28:59.0671 2880 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
23:28:59.0687 2880 Atmarpc - ok
23:28:59.0734 2880 AudioSrv (be9255e19aa4ccec236824c034b0f968) C:\WINDOWS\System32\audiosrv.dll
23:28:59.0734 2880 AudioSrv - ok
23:28:59.0765 2880 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
23:28:59.0765 2880 audstub - ok
23:28:59.0875 2880 avast! Antivirus (2f7c0f3e39c45e0127fb78b2f18a41f3) d:\Program Files\Alwil Software\Avast5\AvastSvc.exe
23:28:59.0875 2880 avast! Antivirus - ok
23:28:59.0921 2880 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
23:28:59.0921 2880 Beep - ok
23:28:59.0953 2880 BITS (2110ec6988cedfeb9b520af9beb3af7f) C:\WINDOWS\system32\qmgr.dll
23:29:00.0000 2880 BITS - ok
23:29:00.0062 2880 Bonjour Service (9efe4236f8670846b6e7c5b0eff6e715) C:\Program Files\Bonjour\mDNSResponder.exe
23:29:00.0078 2880 Bonjour Service - ok
23:29:00.0109 2880 Browser (598e378a5cb821a0e2968449b73a791b) C:\WINDOWS\System32\browser.dll
23:29:00.0125 2880 Browser - ok
23:29:00.0156 2880 BthEnum (b279426e3c0c344893ed78a613a73bde) C:\WINDOWS\system32\DRIVERS\BthEnum.sys
23:29:00.0171 2880 BthEnum - ok
23:29:00.0187 2880 BTHMODEM (fca6f069597b62d42495191ace3fc6c1) C:\WINDOWS\system32\DRIVERS\bthmodem.sys
23:29:00.0187 2880 BTHMODEM - ok
23:29:00.0218 2880 BthPan (80602b8746d3738f5886ce3d67ef06b6) C:\WINDOWS\system32\DRIVERS\bthpan.sys
23:29:00.0218 2880 BthPan - ok
23:29:00.0281 2880 BTHPORT (58dbe6a50e6e4b56061db3bc319b513a) C:\WINDOWS\system32\Drivers\BTHport.sys
23:29:00.0281 2880 BTHPORT - ok
23:29:00.0328 2880 BthServ (0b3d9878289bc53281fdf41abb16f373) C:\WINDOWS\System32\bthserv.dll
23:29:00.0343 2880 BthServ - ok
23:29:00.0359 2880 BTHUSB (61364cd71ef63b0f038b7e9df00f1efa) C:\WINDOWS\system32\Drivers\BTHUSB.sys
23:29:00.0359 2880 BTHUSB - ok
23:29:00.0437 2880 Cam5603D (0df97c67eaa3d9d443d00b3e6ad9dbbb) C:\WINDOWS\system32\Drivers\BisonCam.sys
23:29:00.0453 2880 Cam5603D - ok
23:29:00.0484 2880 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
23:29:00.0500 2880 cbidf2k - ok
23:29:00.0515 2880 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
23:29:00.0515 2880 CCDECODE - ok
23:29:00.0531 2880 cd20xrnt - ok
23:29:00.0562 2880 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
23:29:00.0562 2880 Cdaudio - ok
23:29:00.0593 2880 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
23:29:00.0609 2880 Cdfs - ok
23:29:00.0640 2880 Cdrom (4b0a100eaf5c49ef3cca8c641431eacc) C:\WINDOWS\system32\DRIVERS\cdrom.sys
23:29:00.0640 2880 Cdrom - ok
23:29:00.0656 2880 Changer - ok
23:29:00.0703 2880 CiSvc (fb0de648d9f0fbd13fb2be4d5a4332b5) C:\WINDOWS\system32\cisvc.exe
23:29:00.0718 2880 CiSvc - ok
23:29:00.0859 2880 CLHNServiceForPowerDVD (9f7dbe12a2b5be09f9c9e3be20d81e38) d:\Program Files\CyberLink\PowerDVD11\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe
23:29:00.0859 2880 CLHNServiceForPowerDVD - ok
23:29:00.0906 2880 ClipSrv (133ad99f24b382746a354b9fdf5f5b6b) C:\WINDOWS\system32\clipsrv.exe
23:29:00.0906 2880 ClipSrv - ok
23:29:01.0015 2880 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:29:01.0015 2880 clr_optimization_v2.0.50727_32 - ok
23:29:01.0046 2880 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
23:29:01.0046 2880 CmBatt - ok
23:29:01.0234 2880 cmdAgent (837b66cb0b3f2b13f53a95d27738adaa) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
23:29:01.0265 2880 cmdAgent - ok
23:29:01.0406 2880 cmdGuard (cc56fa45ba18904cb04382ae9f52b1a5) C:\WINDOWS\system32\DRIVERS\cmdguard.sys
23:29:01.0421 2880 cmdGuard - ok
23:29:01.0437 2880 cmdHlp (3a70948ab6e966bdaef2baec1f8ef9d1) C:\WINDOWS\system32\DRIVERS\cmdhlp.sys
23:29:01.0437 2880 cmdHlp - ok
23:29:01.0453 2880 CmdIde - ok
23:29:01.0484 2880 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
23:29:01.0484 2880 Compbatt - ok
23:29:01.0500 2880 COMSysApp - ok
23:29:01.0531 2880 Cpqarray - ok
23:29:01.0578 2880 CryptSvc (31c42002b8560e7767b4a99b5ef8d4cb) C:\WINDOWS\System32\cryptsvc.dll
23:29:01.0593 2880 CryptSvc - ok
23:29:01.0687 2880 CyberLink PowerDVD 11.0 Monitor Service (9deedbd844f84e3b7bc163974e3fdcad) d:\Program Files\CyberLink\PowerDVD11\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
23:29:01.0687 2880 CyberLink PowerDVD 11.0 Monitor Service - ok
23:29:01.0718 2880 CyberLink PowerDVD 11.0 Service (e2a1450811017e781a1f886dca52ec23) d:\Program Files\CyberLink\PowerDVD11\PowerDVD11\Common\MediaServer\CLMSServer.exe
23:29:01.0734 2880 CyberLink PowerDVD 11.0 Service - ok
23:29:01.0750 2880 dac2w2k - ok
23:29:01.0750 2880 dac960nt - ok
23:29:01.0812 2880 DcomLaunch (f70cc57608bf3cc9f89222a9e515dccf) C:\WINDOWS\system32\rpcss.dll
23:29:01.0828 2880 DcomLaunch - ok
23:29:01.0843 2880 Dhcp (3b6537ad7d31a89c3d5ced4ac1213a46) C:\WINDOWS\System32\dhcpcsvc.dll
23:29:01.0875 2880 Dhcp - ok
23:29:01.0890 2880 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
23:29:01.0890 2880 Disk - ok
23:29:01.0906 2880 dmadmin - ok
23:29:02.0000 2880 dmboot (d71be7c02b8b147e85456238d0660478) C:\WINDOWS\system32\drivers\dmboot.sys
23:29:02.0015 2880 dmboot - ok
23:29:02.0031 2880 dmio (5f25de6f05c986dcc36adaf532c3ce0d) C:\WINDOWS\system32\drivers\dmio.sys
23:29:02.0046 2880 dmio - ok
23:29:02.0078 2880 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
23:29:02.0078 2880 dmload - ok
23:29:02.0109 2880 dmserver (fe2a378def73f20165194f90a8938792) C:\WINDOWS\System32\dmserver.dll
23:29:02.0125 2880 dmserver - ok
23:29:02.0156 2880 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
23:29:02.0171 2880 DMusic - ok
23:29:02.0187 2880 Dnscache (3224a00763dbe8f356c77a38fd8e82c3) C:\WINDOWS\System32\dnsrslvr.dll
23:29:02.0203 2880 Dnscache - ok
23:29:02.0234 2880 Dot3svc (949a1b177b633a7c66c2b57fe73f53aa) C:\WINDOWS\System32\dot3svc.dll
23:29:02.0234 2880 Dot3svc - ok
23:29:02.0250 2880 dpti2o - ok
23:29:02.0281 2880 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
23:29:02.0281 2880 drmkaud - ok
23:29:02.0296 2880 EapHost (05a36b2b002944bbe47d9dd375142543) C:\WINDOWS\System32\eapsvc.dll
23:29:02.0296 2880 EapHost - ok
23:29:02.0328 2880 ElbyCDIO (303166d9874a2594568b31d4c24fe08d) C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
23:29:02.0328 2880 ElbyCDIO - ok
23:29:02.0359 2880 ERSvc (5fea86eafeb2985444e924510707c8f4) C:\WINDOWS\System32\ersvc.dll
23:29:02.0359 2880 ERSvc - ok
23:29:02.0406 2880 Eventlog (0af0d6af45220adb9c30b33cfec41831) C:\WINDOWS\system32\services.exe
23:29:02.0421 2880 Eventlog - ok
23:29:02.0453 2880 EventSystem (ac0e5ff3e00e31f7dc97143ba8ea0735) C:\WINDOWS\system32\es.dll
23:29:02.0453 2880 EventSystem - ok
23:29:02.0515 2880 exFat (4d893323dae445e34a4c9038b0551bc9) C:\WINDOWS\system32\drivers\exFat.sys
23:29:02.0515 2880 exFat - ok
23:29:02.0562 2880 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
23:29:02.0562 2880 Fastfat - ok
23:29:02.0609 2880 FastUserSwitchingCompatibility (e0a26df02095b3cc4c3641df6f0f4960) C:\WINDOWS\System32\shsvcs.dll
23:29:02.0625 2880 FastUserSwitchingCompatibility - ok
23:29:02.0656 2880 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
23:29:02.0656 2880 Fdc - ok
23:29:02.0687 2880 FileDisk (4a2d7ff9487ca10126600f65bc8fdf5e) C:\WINDOWS\system32\drivers\FileDisk.sys
23:29:02.0687 2880 FileDisk - ok
23:29:02.0718 2880 Fips (1541a3a7a460decd6a2221065794a0de) C:\WINDOWS\system32\drivers\Fips.sys
23:29:02.0718 2880 Fips - ok
23:29:02.0734 2880 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
23:29:02.0750 2880 Flpydisk - ok
23:29:02.0781 2880 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
23:29:02.0796 2880 FltMgr - ok
23:29:02.0890 2880 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
23:29:02.0906 2880 FontCache3.0.0.0 - ok
23:29:02.0937 2880 Fs_Rec (30d42943a54704ef13e2562911dbfcea) C:\WINDOWS\system32\drivers\Fs_Rec.sys
23:29:02.0937 2880 Fs_Rec - ok
23:29:03.0000 2880 Ftdisk (fdd9e4cf0c558f64a58115cb2fc197ac) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
23:29:03.0000 2880 Ftdisk - ok
23:29:03.0093 2880 GEARAspiWDM (ab8a6a87d9d7255c3884d5b9541a6e80) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
23:29:03.0093 2880 GEARAspiWDM - ok
23:29:03.0125 2880 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
23:29:03.0125 2880 Gpc - ok
23:29:03.0171 2880 GT680x (7b90be6811334caa9243b89f3d3fee1a) C:\WINDOWS\system32\Drivers\gt680x.sys
23:29:03.0171 2880 GT680x - ok
23:29:03.0281 2880 gupdate (506708142bc63daba64f2d3ad1dcd5bf) C:\Program Files\Google\Update\GoogleUpdate.exe
23:29:03.0281 2880 gupdate - ok
23:29:03.0296 2880 gupdatem (506708142bc63daba64f2d3ad1dcd5bf) C:\Program Files\Google\Update\GoogleUpdate.exe
23:29:03.0296 2880 gupdatem - ok
23:29:03.0328 2880 hcmon (709613742863ecb727eda5564889cae0) C:\WINDOWS\system32\drivers\hcmon.sys
23:29:03.0328 2880 hcmon - ok
23:29:03.0375 2880 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
23:29:03.0375 2880 HDAudBus - ok
23:29:03.0453 2880 helpsvc (01e26bf2718ef2fe403ade932c91c096) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
23:29:03.0453 2880 helpsvc - ok
23:29:03.0484 2880 HidServ (c86bbd8051efb6cb543f7c1f8ed636d3) C:\WINDOWS\System32\hidserv.dll
23:29:03.0484 2880 HidServ - ok
23:29:03.0515 2880 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
23:29:03.0515 2880 HidUsb - ok
23:29:03.0562 2880 hkmsvc (fc69696ddef5ef99036a2cad69a0a4ed) C:\WINDOWS\System32\kmsvc.dll
23:29:03.0562 2880 hkmsvc - ok
23:29:03.0578 2880 hpn - ok
23:29:03.0687 2880 HSFHWAZL (0aaef566e6782957252fa79f566fbc0b) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
23:29:03.0687 2880 HSFHWAZL - ok
23:29:03.0781 2880 HSF_DPV (068734475cedd18ca52dd99c8fefe43b) C:\WINDOWS\system32\DRIVERS\HSX_DPV.sys
23:29:03.0812 2880 HSF_DPV - ok
23:29:03.0843 2880 HSXHWAZL (ae5e2bbb2b9373b72aad801a749de1f0) C:\WINDOWS\system32\DRIVERS\HSXHWAZL.sys
23:29:03.0843 2880 HSXHWAZL - ok
23:29:03.0890 2880 HTTP (937031c085718c1c04a9c0864625ec6b) C:\WINDOWS\system32\Drivers\HTTP.sys
23:29:03.0890 2880 HTTP - ok
23:29:03.0906 2880 HTTPFilter (62520b6b40283b593b87849d0aadda1d) C:\WINDOWS\System32\w3ssl.dll
23:29:03.0937 2880 HTTPFilter - ok
23:29:03.0984 2880 hwdatacard (20330198554b7ddb44403af21d6ae179) C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys
23:29:03.0984 2880 hwdatacard - ok
23:29:04.0031 2880 hwusbdev (922065957563d851b5a68b95aadac6ad) C:\WINDOWS\system32\DRIVERS\ewusbdev.sys
23:29:04.0031 2880 hwusbdev - ok
23:29:04.0046 2880 hwusbfake - ok
23:29:04.0062 2880 i2omgmt - ok
23:29:04.0078 2880 i2omp - ok
23:29:04.0125 2880 i8042prt (f9850bdd47dffd2797e984fe60c8b3b6) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
23:29:04.0125 2880 i8042prt - ok
23:29:04.0265 2880 idsvc (c01ac32dc5c03076cfb852cb5da5229c) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
23:29:04.0281 2880 idsvc - ok
23:29:04.0312 2880 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
23:29:04.0312 2880 Imapi - ok
23:29:04.0359 2880 ImapiService (883597bb9deed9d68732668f1702b504) C:\WINDOWS\system32\imapi.exe
23:29:04.0375 2880 ImapiService - ok
23:29:04.0390 2880 ini910u - ok
23:29:04.0437 2880 Inspect (28c95218d0c19db3a86bb4e53d6586e9) C:\WINDOWS\system32\DRIVERS\inspect.sys
23:29:04.0453 2880 Inspect - ok
23:29:04.0734 2880 IntcAzAudAddService (27fea349f8043666f62b09729feb81ac) C:\WINDOWS\system32\drivers\RtkHDAud.sys
23:29:04.0843 2880 IntcAzAudAddService - ok
23:29:05.0015 2880 IntelIde - ok
23:29:05.0046 2880 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
23:29:05.0046 2880 Ip6Fw - ok
23:29:05.0078 2880 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
23:29:05.0093 2880 IpFilterDriver - ok
23:29:05.0093 2880 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
23:29:05.0109 2880 IpInIp - ok
23:29:05.0125 2880 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
23:29:05.0125 2880 IpNat - ok
23:29:05.0203 2880 iPod Service (d2e8efb8af35fcf5a7af22f5a0ce1a82) C:\Program Files\iPod\bin\iPodService.exe
23:29:05.0218 2880 iPod Service - ok
23:29:05.0265 2880 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
23:29:05.0265 2880 IPSec - ok
23:29:05.0312 2880 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
23:29:05.0312 2880 IRENUM - ok
23:29:05.0359 2880 isapnp (1c93959977cad7168b4c816e8b29fe9b) C:\WINDOWS\system32\DRIVERS\isapnp.sys
23:29:05.0359 2880 isapnp - ok
23:29:05.0421 2880 JavaQuickStarterService (39133291cb607bdd87cfc565a4a1e7a5) C:\Program Files\Java\jre6\bin\jqs.exe
23:29:05.0421 2880 JavaQuickStarterService - ok
23:29:05.0453 2880 Kbdclass (2b0018de01bfb628d0a49a301f34b46f) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
23:29:05.0453 2880 Kbdclass - ok
23:29:05.0484 2880 kbdhid (5be693a08508c6fd29b24ecb71dcc727) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
23:29:05.0484 2880 kbdhid - ok
23:29:05.0515 2880 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
23:29:05.0531 2880 kmixer - ok
23:29:05.0562 2880 KSecDD (c6ebf1d6ad71df30db49b8d3287e1368) C:\WINDOWS\system32\drivers\KSecDD.sys
23:29:05.0562 2880 KSecDD - ok
23:29:05.0609 2880 LanmanServer (5d40c1f347320f7a9a59fc6f41ea12aa) C:\WINDOWS\System32\srvsvc.dll
23:29:05.0625 2880 LanmanServer - ok
23:29:05.0640 2880 lanmanworkstation (78f51b0fb6831f0064c6abded88f1134) C:\WINDOWS\System32\wkssvc.dll
23:29:05.0687 2880 lanmanworkstation - ok
23:29:05.0687 2880 lbrtfdc - ok
23:29:05.0734 2880 LmHosts (17ff4dc871d53168d9c628835eb727f1) C:\WINDOWS\System32\lmhsvc.dll
23:29:05.0750 2880 LmHosts - ok
23:29:05.0796 2880 mdmxsdk (e246a32c445056996074a397da56e815) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
23:29:05.0812 2880 mdmxsdk - ok
23:29:05.0828 2880 Messenger (1cea42e9b7dc30fc313c8277ebdc8fcf) C:\WINDOWS\System32\msgsvc.dll
23:29:05.0843 2880 Messenger - ok
23:29:05.0859 2880 mnmdd - ok
23:29:05.0890 2880 Modem (5bced2c68331a18534ab8dbae71d93fc) C:\WINDOWS\system32\drivers\Modem.sys
23:29:05.0890 2880 Modem - ok
23:29:05.0984 2880 Monfilt (9fa7207d1b1adead88ae8eed9cdbbaa5) C:\WINDOWS\system32\drivers\Monfilt.sys
23:29:06.0015 2880 Monfilt - ok
23:29:06.0046 2880 Mouclass (cbb891fda0c5ec9f557abba86ca5cb76) C:\WINDOWS\system32\DRIVERS\mouclass.sys
23:29:06.0062 2880 Mouclass - ok
23:29:06.0093 2880 mouhid (dcf669a6b5682768d3fcf2906453ea97) C:\WINDOWS\system32\DRIVERS\mouhid.sys
23:29:06.0093 2880 mouhid - ok
23:29:06.0125 2880 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
23:29:06.0125 2880 MountMgr - ok
23:29:06.0140 2880 mraid35x - ok
23:29:06.0156 2880 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
23:29:06.0171 2880 MRxDAV - ok
23:29:06.0203 2880 MRxSmb (7170ab42b51954def2781a4d1cce65f4) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
23:29:06.0218 2880 MRxSmb - ok
23:29:06.0250 2880 MSDTC (f99a228828cfa37a17aba3508c18210a) C:\WINDOWS\system32\msdtc.exe
23:29:06.0250 2880 MSDTC - ok
23:29:06.0265 2880 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
23:29:06.0281 2880 Msfs - ok
23:29:06.0281 2880 MSIServer - ok
23:29:06.0328 2880 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
23:29:06.0328 2880 MSKSSRV - ok
23:29:06.0343 2880 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
23:29:06.0343 2880 MSPCLOCK - ok
23:29:06.0359 2880 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
23:29:06.0359 2880 MSPQM - ok
23:29:06.0390 2880 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
23:29:06.0390 2880 mssmbios - ok
23:29:06.0437 2880 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
23:29:06.0437 2880 MSTEE - ok
23:29:06.0453 2880 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys
23:29:06.0453 2880 Mup - ok
23:29:06.0500 2880 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
23:29:06.0515 2880 NABTSFEC - ok
23:29:06.0562 2880 napagent (af7ee86468a06c98cb30e61735179be1) C:\WINDOWS\System32\qagentrt.dll
23:29:06.0578 2880 napagent - ok
23:29:06.0609 2880 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
23:29:06.0625 2880 NDIS - ok
23:29:06.0656 2880 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
23:29:06.0656 2880 NdisIP - ok
23:29:06.0687 2880 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
23:29:06.0687 2880 NdisTapi - ok
23:29:06.0734 2880 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
23:29:06.0734 2880 Ndisuio - ok
23:29:06.0750 2880 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
23:29:06.0750 2880 NdisWan - ok
23:29:06.0765 2880 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys
23:29:06.0765 2880 NDProxy - ok
23:29:06.0781 2880 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
23:29:06.0796 2880 NetBIOS - ok
23:29:06.0812 2880 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
23:29:06.0828 2880 NetBT - ok
23:29:06.0859 2880 NetDDE (860714ee75c888265f483de3d8c61f1d) C:\WINDOWS\system32\netdde.exe
23:29:06.0875 2880 NetDDE - ok
23:29:06.0875 2880 NetDDEdsdm (860714ee75c888265f483de3d8c61f1d) C:\WINDOWS\system32\netdde.exe
23:29:06.0906 2880 NetDDEdsdm - ok
23:29:06.0921 2880 Netlogon (17c1ac326238efadf17a0612afd822ad) C:\WINDOWS\system32\lsass.exe
23:29:06.0937 2880 Netlogon - ok
23:29:06.0968 2880 Netman (e6fd229cfe63179917c7e4fab088cfe5) C:\WINDOWS\System32\netman.dll
23:29:07.0000 2880 Netman - ok
23:29:07.0093 2880 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
23:29:07.0093 2880 NetTcpPortSharing - ok
23:29:07.0140 2880 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
23:29:07.0140 2880 NIC1394 - ok
23:29:07.0187 2880 Nla (63e4c6002cf30e755bd622cc0aadac59) C:\WINDOWS\System32\mswsock.dll
23:29:07.0203 2880 Nla - ok
23:29:07.0218 2880 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
23:29:07.0234 2880 Npfs - ok
23:29:07.0281 2880 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
23:29:07.0296 2880 Ntfs - ok
23:29:07.0343 2880 ntk_PowerDVD (170ee229d4def31dbe95348c9a88fe74) d:\Program Files\CyberLink\PowerDVD11\PowerDVD11\Kernel\DMP\ntk_PowerDVD.sys
23:29:07.0359 2880 ntk_PowerDVD - ok
23:29:07.0359 2880 NtLmSsp (17c1ac326238efadf17a0612afd822ad) C:\WINDOWS\system32\lsass.exe
23:29:07.0375 2880 NtLmSsp - ok
23:29:07.0421 2880 NtmsSvc (8e6a3aac5a889ad59479a05a990e8ed3) C:\WINDOWS\system32\ntmssvc.dll
23:29:07.0453 2880 NtmsSvc - ok
23:29:07.0484 2880 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
23:29:07.0484 2880 Null - ok
23:29:07.0781 2880 nv (71d5ae11bf1a595d987be8ea36365e83) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
23:29:07.0906 2880 nv - ok
23:29:08.0093 2880 nvata (c03e15101f6d9e82cd9b0e7d715f5de3) C:\WINDOWS\system32\DRIVERS\nvata.sys
23:29:08.0093 2880 nvata - ok
23:29:08.0125 2880 NVENETFD (b9333604527e02cd2223f200c0bae7e0) C:\WINDOWS\system32\DRIVERS\NVENETFD.sys
23:29:08.0125 2880 NVENETFD - ok
23:29:08.0171 2880 nvnetbus (5e9e55f7ee644c7c5fd78a206fbe37ab) C:\WINDOWS\system32\DRIVERS\nvnetbus.sys
23:29:08.0171 2880 nvnetbus - ok
23:29:08.0203 2880 nvsmu (e0f76fab86fec98778047d0c7c39cbb9) C:\WINDOWS\system32\DRIVERS\nvsmu.sys
23:29:08.0203 2880 nvsmu - ok
23:29:08.0234 2880 NVSvc (5e8878f15555ef4dd41ab2908249e843) C:\WINDOWS\system32\nvsvc32.exe
23:29:08.0250 2880 NVSvc - ok
23:29:08.0281 2880 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
23:29:08.0296 2880 NwlnkFlt - ok
23:29:08.0312 2880 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
23:29:08.0312 2880 NwlnkFwd - ok
23:29:08.0421 2880 odserv (84de1dd996b48b05ace31ad015fa108a) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
23:29:08.0453 2880 odserv - ok
23:29:08.0484 2880 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
23:29:08.0484 2880 ohci1394 - ok
23:29:08.0531 2880 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
23:29:08.0531 2880 ose - ok
23:29:08.0578 2880 Parport (fa3a44ade1d355be8e29d3b6bf0ba702) C:\WINDOWS\system32\drivers\Parport.sys
23:29:08.0593 2880 Parport - ok
23:29:08.0609 2880 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
23:29:08.0609 2880 PartMgr - ok
23:29:08.0656 2880 ParVdm (f6167f46184c50a9bc2feb87067d1b97) C:\WINDOWS\system32\drivers\ParVdm.sys
23:29:08.0656 2880 ParVdm - ok
23:29:08.0703 2880 Pcatip (6d3c5deef9a7ec5cd2a40e0113192d27) C:\WINDOWS\system32\DRIVERS\Pcatip.sys
23:29:08.0703 2880 Pcatip - ok
23:29:08.0734 2880 PCI (f9b93d158c4d9f54fbdf1a9c807a1a5a) C:\WINDOWS\system32\DRIVERS\pci.sys
23:29:08.0750 2880 PCI - ok
23:29:08.0765 2880 PCIDump - ok
23:29:08.0796 2880 PCIIde (0d5ea82e0b16fa4c162635fa78e2ddc3) C:\WINDOWS\system32\DRIVERS\pciide.sys
23:29:08.0796 2880 PCIIde - ok
23:29:08.0843 2880 Pcmcia (b266a636c370476f25d307b30894d990) C:\WINDOWS\system32\drivers\Pcmcia.sys
23:29:08.0843 2880 Pcmcia - ok
23:29:08.0890 2880 Pcouffin (e35bbe95051ce765b874ae5419e49e1d) C:\WINDOWS\system32\Drivers\Pcouffin.sys
23:29:08.0890 2880 Pcouffin - ok
23:29:08.0906 2880 PDCOMP - ok
23:29:08.0906 2880 PDFRAME - ok
23:29:08.0921 2880 PDRELI - ok
23:29:08.0937 2880 PDRFRAME - ok
23:29:08.0953 2880 perc2 - ok
23:29:08.0968 2880 perc2hib - ok
23:29:09.0031 2880 PlugPlay (0af0d6af45220adb9c30b33cfec41831) C:\WINDOWS\system32\services.exe
23:29:09.0062 2880 PlugPlay - ok
23:29:09.0093 2880 PolicyAgent (17c1ac326238efadf17a0612afd822ad) C:\WINDOWS\system32\lsass.exe
23:29:09.0109 2880 PolicyAgent - ok
23:29:09.0156 2880 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
23:29:09.0156 2880 PptpMiniport - ok
23:29:09.0203 2880 Processor (1c0b6883250b95cf889a6421483c1201) C:\WINDOWS\system32\DRIVERS\processr.sys
23:29:09.0203 2880 Processor - ok
23:29:09.0218 2880 ProtectedStorage (17c1ac326238efadf17a0612afd822ad) C:\WINDOWS\system32\lsass.exe
23:29:09.0234 2880 ProtectedStorage - ok
23:29:09.0250 2880 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
23:29:09.0265 2880 PSched - ok
23:29:09.0312 2880 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
23:29:09.0312 2880 Ptilink - ok
23:29:09.0328 2880 ql1080 - ok
23:29:09.0343 2880 Ql10wnt - ok
23:29:09.0359 2880 ql12160 - ok
23:29:09.0375 2880 ql1240 - ok
23:29:09.0375 2880 ql1280 - ok
23:29:09.0421 2880 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
23:29:09.0437 2880 RasAcd - ok
23:29:09.0453 2880 RasAuto (c7f1c27d7cd10b86079cb62800974880) C:\WINDOWS\System32\rasauto.dll
23:29:09.0484 2880 RasAuto - ok
23:29:09.0515 2880 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
23:29:09.0515 2880 Rasl2tp - ok
23:29:09.0546 2880 RasMan (b82b8ef94df80f3efd83720519e44da3) C:\WINDOWS\System32\rasmans.dll
23:29:09.0578 2880 RasMan - ok
23:29:09.0578 2880 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
23:29:09.0593 2880 RasPppoe - ok
23:29:09.0609 2880 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
23:29:09.0625 2880 Raspti - ok
23:29:09.0640 2880 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
23:29:09.0656 2880 Rdbss - ok
23:29:09.0671 2880 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
23:29:09.0671 2880 RDPCDD - ok
23:29:09.0718 2880 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
23:29:09.0734 2880 rdpdr - ok
23:29:09.0781 2880 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys
23:29:09.0781 2880 RDPWD - ok
23:29:09.0812 2880 RDSessMgr (79caaa94e8598cfabb06025ad5476e3b) C:\WINDOWS\system32\sessmgr.exe
23:29:09.0843 2880 RDSessMgr - ok
23:29:09.0875 2880 redbook (868c8de05325f3b250f806666de18f0d) C:\WINDOWS\system32\DRIVERS\redbook.sys
23:29:09.0875 2880 redbook - ok
23:29:09.0906 2880 RemoteAccess (f9cb60b29efd582ee92cd32fc8cc2bb9) C:\WINDOWS\System32\mprdim.dll
23:29:09.0921 2880 RemoteAccess - ok
23:29:09.0953 2880 RemoteRegistry (7ae94a5cedb2916f20a2811e14ddfd7e) C:\WINDOWS\system32\regsvc.dll
23:29:09.0968 2880 RemoteRegistry - ok
23:29:10.0000 2880 RFCOMM (851c30df2807fcfa21e4c681a7d6440e) C:\WINDOWS\system32\DRIVERS\rfcomm.sys
23:29:10.0000 2880 RFCOMM - ok
23:29:10.0031 2880 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys
23:29:10.0046 2880 ROOTMODEM - ok
23:29:10.0078 2880 RpcLocator (db0a7358ed55a40a84dafec6459d62dd) C:\WINDOWS\system32\locator.exe
23:29:10.0093 2880 RpcLocator - ok
23:29:10.0125 2880 RpcSs (f70cc57608bf3cc9f89222a9e515dccf) C:\WINDOWS\system32\rpcss.dll
23:29:10.0156 2880 RpcSs - ok
23:29:10.0218 2880 rspndr (743d7d59767073a617b1dcc6c546f234) C:\WINDOWS\system32\DRIVERS\rspndr.sys
23:29:10.0218 2880 rspndr - ok
23:29:10.0265 2880 RSVP (5b7cb4cc88a53a90c6f56d92ed5d55ce) C:\WINDOWS\system32\rsvp.exe
23:29:10.0296 2880 RSVP - ok
23:29:10.0328 2880 SamSs (17c1ac326238efadf17a0612afd822ad) C:\WINDOWS\system32\lsass.exe
23:29:10.0343 2880 SamSs - ok
23:29:10.0390 2880 SCardSvr (f896e628bdea97e323773d604473d1e9) C:\WINDOWS\System32\SCardSvr.exe
23:29:10.0406 2880 SCardSvr - ok
23:29:10.0437 2880 Schedule (962e76142bfe6aa160855326a488e778) C:\WINDOWS\system32\schedsvc.dll
23:29:10.0468 2880 Schedule - ok
23:29:10.0500 2880 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
23:29:10.0500 2880 Secdrv - ok
23:29:10.0531 2880 seclogon (90c86f09afbf236076955b92b8f09dda) C:\WINDOWS\System32\seclogon.dll
23:29:10.0562 2880 seclogon - ok
23:29:10.0578 2880 SENS (0d1da74be08251fe76e911dc3f1a7774) C:\WINDOWS\system32\sens.dll
23:29:10.0593 2880 SENS - ok
23:29:10.0609 2880 Serial (27645ae9dcc60be467f3c92ddabed1b0) C:\WINDOWS\system32\drivers\Serial.sys
23:29:10.0625 2880 Serial - ok
23:29:10.0671 2880 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
23:29:10.0687 2880 Sfloppy - ok
23:29:10.0718 2880 SharedAccess (b501e9b7c84b370bfe84a3035cceabaa) C:\WINDOWS\System32\ipnathlp.dll
23:29:10.0750 2880 SharedAccess - ok
23:29:10.0781 2880 ShellHWDetection (e0a26df02095b3cc4c3641df6f0f4960) C:\WINDOWS\System32\shsvcs.dll
23:29:10.0812 2880 ShellHWDetection - ok
23:29:10.0921 2880 Simbad - ok
23:29:10.0968 2880 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
23:29:10.0968 2880 SLIP - ok
23:29:10.0984 2880 Sparrow - ok
23:29:11.0031 2880 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
23:29:11.0031 2880 splitter - ok
23:29:11.0062 2880 Spooler (0139187cdd1b598b6cbb235517117832) C:\WINDOWS\system32\spoolsv.exe
23:29:11.0093 2880 Spooler - ok
23:29:11.0156 2880 sptd (cdddec541bc3c96f91ecb48759673505) C:\WINDOWS\system32\Drivers\sptd.sys
23:29:11.0171 2880 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505
23:29:11.0171 2880 sptd ( LockedFile.Multi.Generic ) - warning
23:29:11.0171 2880 sptd - detected LockedFile.Multi.Generic (1)
23:29:11.0218 2880 sr (4a7b3b22c87f0897a68821734afe9528) C:\WINDOWS\system32\DRIVERS\sr.sys
23:29:11.0234 2880 sr - ok
23:29:11.0281 2880 srservice (44dfd21576643453c1cb3a03d655bf7b) C:\WINDOWS\system32\srsvc.dll
23:29:11.0296 2880 srservice - ok
23:29:11.0343 2880 Srv (e89b42b216bc86ada4345908284519cb) C:\WINDOWS\system32\DRIVERS\srv.sys
23:29:11.0359 2880 Srv - ok
23:29:11.0390 2880 SSDPSRV (1f6a48b6ee85a23764cac6466f164009) C:\WINDOWS\System32\ssdpsrv.dll
23:29:11.0406 2880 SSDPSRV - ok
23:29:11.0453 2880 stisvc (7bf256f38e77b02dfeb0cce6a5d39611) C:\WINDOWS\system32\wiaservc.dll
23:29:11.0515 2880 stisvc - ok
23:29:11.0546 2880 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
23:29:11.0546 2880 streamip - ok
23:29:11.0578 2880 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
23:29:11.0593 2880 swenum - ok
23:29:12.0390 2880 SwitchBoard (f577910a133a592234ebaad3f3afa258) C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
23:29:12.0406 2880 SwitchBoard - ok
23:29:12.0437 2880 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
23:29:12.0437 2880 swmidi - ok
23:29:12.0453 2880 SwPrv - ok
23:29:12.0468 2880 symc810 - ok
23:29:12.0484 2880 symc8xx - ok
23:29:12.0515 2880 sym_hi - ok
23:29:12.0546 2880 sym_u3 - ok
23:29:12.0578 2880 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
23:29:12.0578 2880 sysaudio - ok
23:29:12.0625 2880 SysmonLog (046964a82253fe8f5097e127c563d505) C:\WINDOWS\system32\smlogsvc.exe
23:29:12.0656 2880 SysmonLog - ok
23:29:12.0687 2880 TapiSrv (b2918c85efdebe5cbc5fc930a4e4635c) C:\WINDOWS\System32\tapisrv.dll
23:29:12.0718 2880 TapiSrv - ok
23:29:12.0750 2880 Tcpip (6a104ba98d99d53ab0c91825ce659fc6) C:\WINDOWS\system32\DRIVERS\tcpip.sys
23:29:12.0765 2880 Tcpip - ok
23:29:12.0796 2880 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
23:29:12.0812 2880 TDPIPE - ok
23:29:12.0828 2880 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
23:29:12.0828 2880 TDTCP - ok
23:29:12.0875 2880 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
23:29:12.0875 2880 TermDD - ok
23:29:12.0906 2880 TermService (804a741e1806e8c33c8c642781896c0d) C:\WINDOWS\System32\termsrv.dll
23:29:12.0937 2880 TermService - ok
23:29:12.0984 2880 Themes (e0a26df02095b3cc4c3641df6f0f4960) C:\WINDOWS\System32\shsvcs.dll
23:29:13.0000 2880 Themes - ok
23:29:13.0046 2880 TlntSvr (111d0582e34bc10e7dddc014f1e4e352) C:\WINDOWS\system32\tlntsvr.exe
23:29:13.0062 2880 TlntSvr - ok
23:29:13.0078 2880 TosIde - ok
23:29:13.0109 2880 TrkWks (7291c77298d55136daea2bfbea702b93) C:\WINDOWS\system32\trkwks.dll
23:29:13.0125 2880 TrkWks - ok
23:29:13.0265 2880 tvtool (77ebf3e9386daa51551af429052d88d0) C:\Program Files\TotalCmd\Programm\TVTool 6.5\tvtool.sys
23:29:13.0265 2880 tvtool - ok
23:29:13.0312 2880 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
23:29:13.0312 2880 Udfs - ok
23:29:13.0484 2880 ufad-ws60 (60217ba49d2796ea149ded4d030af728) D:\Program Files\VMware\vmware-ufad.exe
23:29:13.0484 2880 ufad-ws60 - ok
23:29:13.0531 2880 ultra - ok
23:29:13.0593 2880 UnlockerDriver5 (f365fa561c3ab455d8685770d208691a) C:\Program Files\Unlocker\UnlockerDriver5.sys
23:29:13.0593 2880 UnlockerDriver5 - ok
23:29:13.0671 2880 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
23:29:13.0671 2880 Update - ok
23:29:13.0718 2880 upnphost (973e83b801ce31fdc76378b826364dbb) C:\WINDOWS\System32\upnphost.dll
23:29:13.0750 2880 upnphost - ok
23:29:13.0781 2880 UPS (55100f548265f1a9932122cb64359245) C:\WINDOWS\System32\ups.exe
23:29:13.0796 2880 UPS - ok
23:29:13.0843 2880 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys
23:29:13.0843 2880 usbaudio - ok
23:29:13.0890 2880 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
23:29:13.0906 2880 usbccgp - ok
23:29:13.0937 2880 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
23:29:13.0937 2880 usbehci - ok
23:29:13.0968 2880 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
23:29:13.0968 2880 usbhub - ok
23:29:13.0984 2880 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys
23:29:13.0984 2880 usbohci - ok
23:29:14.0046 2880 USBSafelyRemoveService (6bbad4a32963859758c175973a1410cf) C:\Program Files\USB Safely Remove\USBSRService.exe
23:29:14.0046 2880 USBSafelyRemoveService - ok
23:29:14.0093 2880 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
23:29:14.0093 2880 USBSTOR - ok
23:29:14.0140 2880 usbvideo (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys
23:29:14.0156 2880 usbvideo - ok
23:29:14.0187 2880 usb_rndisx (b6cc50279d6cd28e090a5d33244adc9a) C:\WINDOWS\system32\DRIVERS\usb8023x.sys
23:29:14.0187 2880 usb_rndisx - ok
23:29:14.0234 2880 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
23:29:14.0234 2880 VgaSave - ok
23:29:14.0250 2880 ViaIde - ok
23:29:14.0312 2880 VMAuthdService (ccdb9eb785868dc87dab204d3015ba42) D:\Program Files\VMware\vmware-authd.exe
23:29:14.0312 2880 VMAuthdService - ok
23:29:14.0359 2880 vmci (a564ff4a12c9e631f02676969d502e4b) C:\WINDOWS\system32\Drivers\vmci.sys
23:29:14.0375 2880 vmci - ok
23:29:14.0406 2880 vmkbd (bf2b2505951ea35f9ec51711c574777a) C:\WINDOWS\system32\drivers\VMkbd.sys
23:29:14.0406 2880 vmkbd - ok
23:29:14.0453 2880 VMnetAdapter (898706a05d20b706848a440961c52436) C:\WINDOWS\system32\DRIVERS\vmnetadapter.sys
23:29:14.0453 2880 VMnetAdapter - ok
23:29:14.0500 2880 VMnetBridge (5692cbd2a25e04c62707bfc311884b65) C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys
23:29:14.0515 2880 VMnetBridge - ok
23:29:14.0546 2880 VMnetDHCP (5d074014559dab894af53ce149bdccbd) C:\WINDOWS\system32\vmnetdhcp.exe
23:29:14.0578 2880 VMnetDHCP - ok
23:29:14.0609 2880 VMnetuserif (57ff51b915ae6655209c22f900c11e24) C:\WINDOWS\system32\drivers\vmnetuserif.sys
23:29:14.0625 2880 VMnetuserif - ok
23:29:14.0671 2880 VMware NAT Service (126a1163be51d3d8caf212126fc42124) C:\WINDOWS\system32\vmnat.exe
23:29:14.0718 2880 VMware NAT Service - ok
23:29:14.0781 2880 vmx86 (210a7107c3e19f7e5a3949e855801ff8) C:\WINDOWS\system32\Drivers\vmx86.sys
23:29:14.0812 2880 vmx86 - ok
23:29:14.0859 2880 VolSnap (a79d899dfd0467c4df29af19902ecd18) C:\WINDOWS\system32\drivers\VolSnap.sys
23:29:14.0859 2880 VolSnap - ok
23:29:14.0906 2880 VSS (65dde548ac8d7a5c55fc6352865d80fc) C:\WINDOWS\System32\vssvc.exe
23:29:14.0937 2880 VSS - ok
23:29:14.0984 2880 vstor2-ws60 (e4fa7aff5046fc49de22e903b7e35add) D:\Program Files\VMware\vstor2-ws60.sys
23:29:14.0984 2880 vstor2-ws60 - ok
23:29:15.0031 2880 W32Time (9b1bd39b85c7c79b2fd694571f77fdf3) C:\WINDOWS\system32\w32time.dll
23:29:15.0062 2880 W32Time - ok
23:29:15.0109 2880 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
23:29:15.0109 2880 Wanarp - ok
23:29:15.0140 2880 wceusbsh (74e40aed2c3653f8465df19d381a8ce5) C:\WINDOWS\system32\DRIVERS\wceusbsh.sys
23:29:15.0156 2880 wceusbsh - ok
23:29:15.0171 2880 WDICA - ok
23:29:15.0203 2880 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
23:29:15.0218 2880 wdmaud - ok
23:29:15.0234 2880 WebClient (1d4e8123e7a78d1d7684ba0260fc8827) C:\WINDOWS\System32\webclnt.dll
23:29:15.0265 2880 WebClient - ok
23:29:15.0343 2880 winachsf (1b2696e94900f4e236e6a585ff534309) C:\WINDOWS\system32\DRIVERS\HSX_CNXT.sys
23:29:15.0359 2880 winachsf - ok
23:29:15.0421 2880 winmgmt (b053995e60dece511bb600645ce3022b) C:\WINDOWS\system32\wbem\WMIsvc.dll
23:29:15.0437 2880 winmgmt - ok
23:29:15.0484 2880 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\mspmsnsv.dll
23:29:15.0500 2880 WmdmPmSN - ok
23:29:15.0578 2880 Wmi (8d8c3fce564a27fa66dd7324246777af) C:\WINDOWS\System32\advapi32.dll
23:29:15.0593 2880 Wmi - ok
23:29:15.0656 2880 WmiApSrv (c537b70d8ede999a81e8f7c56f07b665) C:\WINDOWS\system32\wbem\wmiapsrv.exe
23:29:15.0656 2880 WmiApSrv - ok
23:29:15.0781 2880 WMPNetworkSvc (30e4f162eb4a91026ae330f2146e6b9f) C:\Program Files\Windows Media Player\wmpnetwk.exe
23:29:15.0796 2880 WMPNetworkSvc - ok
23:29:15.0828 2880 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
23:29:15.0843 2880 WS2IFSL - ok
23:29:15.0875 2880 wscsvc (da6423c36f766c6ea41dcf147869b407) C:\WINDOWS\system32\wscsvc.dll
23:29:15.0906 2880 wscsvc - ok
23:29:15.0953 2880 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
23:29:15.0953 2880 WSTCODEC - ok
23:29:16.0000 2880 wuauserv (02e4055488047729b333f99d93877038) C:\WINDOWS\system32\wuauserv.dll
23:29:16.0031 2880 wuauserv - ok
23:29:16.0062 2880 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
23:29:16.0078 2880 WudfPf - ok
23:29:16.0093 2880 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
23:29:16.0109 2880 WudfRd - ok
23:29:16.0125 2880 WudfSvc (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll
23:29:16.0171 2880 WudfSvc - ok
23:29:16.0218 2880 WZCSVC (7f572b42a68f54e4d8f17bbdaf3686c0) C:\WINDOWS\System32\wzcsvc.dll
23:29:16.0250 2880 WZCSVC - ok
23:29:16.0265 2880 xmlprov (d490b2f1c26d4d038012ea7f3e22b314) C:\WINDOWS\System32\xmlprov.dll
23:29:16.0296 2880 xmlprov - ok
23:29:16.0406 2880 {329F96B6-DF1E-4328-BFDA-39EA953C1312} (3cb263cf60b253bead6e0205e1fa5669) d:\Program Files\CyberLink\PowerDVD11\PowerDVD11\Common\NavFilter\000.fcl
23:29:16.0406 2880 {329F96B6-DF1E-4328-BFDA-39EA953C1312} - ok
23:29:16.0468 2880 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
23:29:17.0218 2880 \Device\Harddisk0\DR0 - ok
23:29:17.0250 2880 Boot (0x1200) (177baf3d08558fe4348495aec27758ca) \Device\Harddisk0\DR0\Partition0
23:29:17.0265 2880 \Device\Harddisk0\DR0\Partition0 - ok
23:29:17.0296 2880 Boot (0x1200) (59e36ad2a5b58d70ea024dad6d1df16a) \Device\Harddisk0\DR0\Partition1
23:29:17.0296 2880 \Device\Harddisk0\DR0\Partition1 - ok
23:29:17.0296 2880 ============================================================
23:29:17.0296 2880 Scan finished
23:29:17.0296 2880 ============================================================
23:29:17.0359 2312 Detected object count: 1
23:29:17.0359 2312 Actual detected object count: 1
23:40:57.0156 2312 C:\WINDOWS\system32\Drivers\sptd.sys - copied to quarantine
23:40:57.0312 2312 sptd ( LockedFile.Multi.Generic ) - User select action: Quarantine
[/CODE]