Hjälp

26 februari, 2011

Sitter just nu på annan dator.

Den andra är kapad av AntiMalware GO

Kan inte öppna eller installera program.

Det enda jag KAN göra är att köpa något skit på internet.

Någon som kan lösa upp det här?

Jag vet att jag skall ändra LAN-inställningen (ta bort proxyserver) men denna ändring läggs tillbaka av programmet med blixtens hastighet. Därefter blockeras ala andra program. Det enda som ser ut att fungera är att köpa SpyHunter, men varför skulle inte detta också vara en fejk (lika väl som att köpa licens för AntiMalware).

En lösning som INTE involverar att köpa något suspekt på internet vore att öredra

26 februari, 2011

SpyHunter i sig är inte något skadligt, däremot är antagligen webbsidan där du får rådet att använda det falskt, dvs det är inte alls säkert att SpyHunter hjälper utan den som skrivit webbsidan är bara ute efter att få lite pengar för att du köper SpyHunter.

1. Starta om datorn i felsäkert läge med nätverk (tryck F8 upprepade gånger under uppstarten och välj "felsäkert läge med nätverk" i menyn).

2. Se om det nu går bättre att ta bort proxy-servern.

3. Spara RKill av Grinler på Skrivbordet. Ladda ner det från :

http://download.bleepingcomputer.com/grinler/iExplore.exe

Det är programmet RKill fast filen kallas iExplore.exe för att lura det skadliga programmet.

Starta Rkill genom att dubbelklicka på den.

Det blir ett svart fönster/ruta en stund om programmet lyckades köra.

Upprepa körningen av RKill några gånger.

Om du får ett meddelande om att RKill är skadligt så bry dig inte om det. Det är det skadliga programmen som inte vill bli stoppat. Lämna kvar varningen på skärmen och kör RKill en gång till.

Om det inte hjälper att köra ovanstående RKill några gånger för att få ett tillfälligt stopp på det skadliga programmet pröva med de andra varianterna av RKill som finns på http://www.bleepingcomputer.com/download/anti-virus/rkill

4. Ladda ner Malwarebytes Anti-Malware (MBAM) från en av dessa länkar:

http://www.malwarebytes.org/mbam-download.php

http://majorgeeks.com/downloadget.php?id=5756&file=15&evp=693ee0b20204960edfd909666f809b26

http://dw.com.com/redir?edId=3&siteId=4&oId=3000-8022_4-10804572&ontId=8022_4&spi=b4a0904e0f02b40bf2ae9ce030ef5c99&lop=link&tag=tdw_dltext&ltype=dl_dlnow&pid=11375988&mfgId=6290020&merId=6290020&pguid=XI3P-goPjFwAACI-g4wAAAA4&destUrl=http%3A%2F%2Fdownload.cnet.com%2F3001-8022_4-10804572.html%3Fspi%3Db4a0904e0f02b40bf2ae9ce030ef5c99

http://fileforum.betanews.com/detail/Malwarebytes-AntiMalware/1186760019/1

Om du inte kan ladda ner MBAM ändra proxy-inställningarna igen (det kan gå bättre nu när du kört RKill).

Stäng av alla program du ser till.

Dubbelklicka på mbam-setup för att installera programmet.

Se till i slutet av installationen att det är bockar för:

Uppdatera Malwarebytes' Anti-Malware

Starta Malwarebytes' Anti-Malware

Klicka på Slutför

Om det finns någon uppdatering så kommer den att laddas ner och installeras.

Om MBAM ber om en omstart av datorn så neka det eftersom de skadliga programmen då vaknar till liv igen.

När programmet startar så välj Utför fullständig skanning och klicka på Skanna.

Skanningen tar lång tid.

När den är klar så klicka på OK och sedan Visa resultat.

Bocka för allt och tryck sedan Ta bort markerade.

När borttagningen är klar så öppnar Anteckningar med en logg.

Eventuellt så kommer det upp en begäran om att starta om datorn (Restart). I så fall gör det.

Om det blir ett felmeddelande Error loading... efter omstarten så starta om datorn än en gång.

Om programmet inte kommer igång efter omstarten så starta det.

Om loggen inte kommer upp själv i Anteckningar så hittar du loggen på fliken Loggar i MBAM.

Kopiera loggen och klistra in den i ditt svar.

5. För kontroll av om det finns fler skadliga filer i datorn:

Spara DDS på Skrivbordet.

http://download.bleepingcomputer.com/sUBs/dds.scr

Starta programmet genom att dubbelklicka på det.

Tryck Yes/Ja om frågan om Optional Scan dyker upp.

I ditt svar klistrar du in loggen DSS.txt. Medan du bifogar Attach.txt som en fil.

26 februari, 2011

Tack Cecilia.

Startade upp i felsäkert läge med nätverk som du bad om.

Klickade bort proxyservern.

Gick dit där programmet lagt sig och tog bort detta (gick nu bra).

Tog även bort resten som låg i "temp" med samma datum och klockslag.

Körde Advanced System Care Prof. som rensade registret

och voila

Har även kört både SpyHunter och Microsoft Security Essentials för att vara helt säker.

Datorn är nu ren som en nytvättade babyrumpa.

26 februari, 2011

Jag råder dig absolut att köra DDS och MBAM för att vara på den säkra sidan. Vare sig SpyHunter och Microsoft Security Essentials är program som ligger i toppklass när det gäller denna typ av falska program.

För att inte tala om det behövs en genomgång för att se efter vilket program du har som innehåller kända säkerhetshål som datorn blev smittad genom.

1 mars, 2011

Jag råder dig absolut att köra DDS och MBAM för att vara på den säkra sidan. Vare sig SpyHunter och Microsoft Security Essentials är program som ligger i toppklass när det gäller denna typ av falska program.

För att inte tala om det behövs en genomgång för att se efter vilket program du har som innehåller kända säkerhetshål som datorn blev smittad genom.

Okay.

Körde DDS som svarade följande:

Warning: possible TDL4 rootkit infection !

TDL4 rootkit infection detected ! Use: "mbr.exe -f" to fix.

Kan jag följa rekommendationerna på:

http://www.scanforfree.com/74/mbr-exe-removal.html

eller har du ett bättre förslag?

mvh

1 mars, 2011

Nej, du ska inte göra som det står på den sidan. Se folks åsikter om sidan på http://www.mywot.com/sv/scorecard/scanforfree.com

Fick du inga loggar från DDS, DDS.txt och Attach.txt?

Jag skulle vilja se dem för att kunna vägleda dig vidare med att få bort rootkit. Men om DDS inte kunde göra färdigt tar vi till ett annat program.

2 mars, 2011

Nej, du ska inte göra som det står på den sidan. Se folks åsikter om sidan på http://www.mywot.com...scanforfree.com

Fick du inga loggar från DDS, DDS.txt och Attach.txt?

Jag skulle vilja se dem för att kunna vägleda dig vidare med att få bort rootkit. Men om DDS inte kunde göra färdigt tar vi till ett annat program.

Visst fick jag det, men jag hade glömt hur man skickar det i packat format.

DDS (Ver_10-12-12.02) - NTFSx86

Run by Leif at 10:51:20,75 on 2011-03-01

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_24

Microsoft Windows XP Home Edition 5.1.2600.3.1252.46.1053.18.1012.262 [GMT 1:00]

AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch

C:\WINDOWS\system32\svchost -k rpcss

c:\Program\Microsoft Security Client\Antimalware\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k NetworkService

C:\WINDOWS\system32\svchost.exe -k LocalService

C:\WINDOWS\system32\spoolsv.exe

C:\Program\Ant.com\IE add-on\AntUpdaterService.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\bgsvcgen.exe

C:\Program\Tele2 Connect\ATService.exe

C:\Program\Tele2 Connect\Connect.exe

C:\Program\Java\jre6\bin\jqs.exe

C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdnserv.exe

C:\WINDOWS\system32\lxdncoms.exe

C:\Program\Intel\Intel Matrix Storage Manager\iaanotif.exe

C:\Program\Acer\Acer VCM\RS_Service.exe

C:\Program\Synaptics\SynTP\SynTPEnh.exe

C:\Program\Microsoft Security Client\msseces.exe

C:\WINDOWS\system32\tcpsvcs.exe

C:\Program\Tific\Tific Client G1\ConnecteSupport.exe

C:\Program\Delade filer\Java\Java Update\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program\IObit\Advanced SystemCare 3\AWC.exe

C:\Program\Launch Manager\LManager.exe

C:\Program\Tele2 Connect\WVPNMonitor.exe

C:\WINDOWS\system32\svchost.exe -k netsvcs

C:\Program\DesktopEarth\DesktopEarth.exe

C:\Program\Intel\Intel Matrix Storage Manager\IAANTMon.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\system32\igfxext.exe

C:\WINDOWS\system32\igfxsrvc.exe

C:\WINDOWS\System32\alg.exe

C:\Program\Internet Explorer\iexplore.exe

C:\Program\Ant.com\IE add-on\AntMaintainer.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program\Internet Explorer\iexplore.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\Documents and Settings\Leif\Skrivbord\dds.scr

C:\WINDOWS\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = about:blank

uSearch Page = hxxp://g.msn.se/0SESVSE/SAOS01?FORM=TOOLBR

uDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=041d&s=0&o=xph&d=0709&m=ao531h

uSearch Bar = hxxp://g.msn.se/0SESVSE/SAOS01?FORM=TOOLBR

uInternet Settings,ProxyServer = http=127.0.0.1:33440

mURLSearchHooks: H - No File

BHO: Lexmark Verktygsfält: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - c:\program\lexmark toolbar\toolband.dll

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program\delade filer\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Open FVD Suite IE Plugin: {2b171655-a70c-5c18-b693-6cb5dc269d44} - c:\program\fvdiep~1\FVDIEPlugin_1.dll

BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program\micros~2\office14\GROOVEEX.DLL

BHO: Windows Live inloggningshjälpen: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program\delade filer\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program\delade filer\adobe\acrobat\activex\AcroIEFavClient.dll

BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\program\micros~2\office14\URLREDIR.DLL

BHO: Windows Live Toolbar Helper: {bdbd1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program\windows live toolbar\msntb.dll

BHO: 1 (0x1) - No File

BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - c:\program\delade filer\adobe\acrobat\activex\AcroIEFavClient.dll

BHO: IEButton Class: {f81d52bf-f2f1-4f49-bf5f-05664e803039} - c:\program\unh solutions\flash saving plugin\FlashSButton.dll

TB: Lexmark Verktygsfält: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - c:\program\lexmark toolbar\toolband.dll

TB: FVD Suite IE Plugin: {2b171655-a70c-5c18-b693-6cb5dc269d41} - c:\program\fvdiep~1\FVDIEPlugin_1.dll

TB: {0BF43445-2F28-4351-9252-17FE6E806AA0} - No File

TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File

TB: Windows Live Toolbar: {bdad1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program\windows live toolbar\msntb.dll

TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program\delade filer\adobe\acrobat\activex\AcroIEFavClient.dll

TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File

TB: {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - No File

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [Advanced SystemCare 3] "c:\program\iobit\advanced systemcare 3\AWC.exe" /startup

uRun: [LManager] c:\program\launch manager\LManager.exe

mRun: [iAAnotif] c:\program\intel\intel matrix storage manager\iaanotif.exe

mRun: [Alcmtr] :ALCMTR.EXE

mRun: [synTPEnh] c:\program\synaptics\syntp\SynTPEnh.exe

mRun: [QuickTime Task] :"c:\program\quicktime\qttask.exe" -atboottime

mRun: [MSC] "c:\program\microsoft security client\msseces.exe" -hide -runkey

mRun: [Adobe Reader Speed Launcher] :"c:\program\adobe\reader 9.0\reader\Reader_sl.exe"

mRun: [Adobe ARM] :"c:\program\delade filer\adobe\arm\1.0\AdobeARM.exe"

mRun: [Adobe Acrobat Speed Launcher] :"c:\program\adobe\acrobat 10.0\acrobat\Acrobat_sl.exe"

mRun: [Acrobat Assistant 8.0] :"c:\program\adobe\acrobat 10.0\acrobat\Acrotray.exe"

mRun: [ConnecteSupport] "c:\program\tific\tific client g1\ConnecteSupport.exe" /HIDE /ONLINECHECK /WAIT 5 /DEFLANG "Svenska" /SERVER t2connectsebg.tele2.com

mRun: [sunJavaUpdateSched] "c:\program\delade filer\java\java update\jusched.exe"

mRun: [spyHunter Security Suite] :c:\program\enigma software group\spyhunter\SpyHunter4.exe

dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE

dRun: [DWQueuedReporting] "c:\program\delade~1\micros~1\dw\dwtrig20.exe" -t

StartupFolder: c:\docume~1\leif\start-~1\program\autost~1\deskto~1.lnk - c:\docume~1\leif\applic~1\microsoft\installer\{dba5e973-660d-4cbe-a469-f5c37fbf0ce4}\_C1A9BF9D98647632ED5172.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\connec~1.lnk - c:\program\tele2 connect\WVPNMonitor.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\~disab~1\acervc~1.lnk - c:\program\acer\acer vcm\AcerVCM.exe

StartupFolder: c:\docume~1\alluse~1\start-~1\program\autost~1\~disab~1\winzip~1.lnk - c:\program\winzip\WZQKPICK.EXE

uPolicies-system: oduwjblmkjufynwjwliqTaskMgr = 0 (0x0)

mPolicies-system: EnableLUA = 0 (0x0)

IE: &Windows Live Search - c:\program\windows live toolbar\msntb.dll/search.htm

IE: Append Link Target to Existing PDF - c:\program\delade filer\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

IE: Append to Existing PDF - c:\program\delade filer\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html

IE: Convert Link Target to Adobe PDF - c:\program\delade filer\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

IE: Convert to Adobe PDF - c:\program\delade filer\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html

IE: E&xportera till Microsoft Excel - c:\program\micros~2\office14\EXCEL.EXE/3000

IE: FVDIEPlugin Add Page - c:\program\fvdiep~1\FVDIEPlugin_1.dll/IECONTEXT.DLL.HTM

IE: Google Sidewiki... - c:\program\google\google toolbar\component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html

IE: Save Flash - c:\program\unh solutions\flash saving plugin\FlashSButton.dll/210

IE: Save YouTube Video - c:\program\unh solutions\flash saving plugin\FlashSButton.dll/217

IE: Ski&cka till OneNote - c:\program\micros~2\office14\ONBttnIE.dll/105

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program\messenger\msmsgs.exe

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program\windows live\writer\WriterBrowserExtension.dll

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program\microsoft office\office14\ONBttnIE.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program\microsoft office\office14\ONBttnIELinkedNotes.dll

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

TCP: {05055A95-2AF7-4E39-A5CC-5E97452BD061} = 130.244.127.161 130.244.127.169

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program\delade filer\microsoft shared\office14\MSOXMLMF.DLL

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program\acer\acer vcm\Skype4COM.dll

Notify: igfxcui - igfxdev.dll

AppInit_DLLs: c:\program\google\google~1\GOEC62~1.DLL

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program\windows desktop search\MSNLNamespaceMgr.dll

SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program\micros~2\office14\GROOVEEX.DLL

Hosts: 127.0.0.

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\leif\applic~1\mozilla\firefox\profiles\p7e0rniu.default\

FF - prefs.js: browser.startup.homepage -

FF - prefs.js: keyword.URL - hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_us&p=

FF - prefs.js: network.proxy.type - 4

FF - component: c:\program\adobe\acrobat 10.0\acrobat\browser\wcfirefoxextn\components\WCFirefoxExtn.dll

FF - component: c:\program\mozilla firefox 4.0 beta 11\components\GoogleDesktopMozilla.dll

FF - plugin: c:\program\java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: c:\program\micros~2\office14\NPAUTHZ.DLL

FF - plugin: c:\program\micros~2\office14\NPSPWRAP.DLL

FF - plugin: c:\program\mozilla firefox\plugins\np_gp.dll

FF - plugin: c:\program\mozilla firefox\plugins\npdeploytk.dll

FF - plugin: c:\program\mozilla firefox\plugins\npLegitCheckPlugin.dll

FF - plugin: c:\program\mozilla firefox\plugins\npnul32.dll

FF - plugin: c:\program\mozilla firefox\plugins\nppdf32.dll

FF - plugin: c:\program\mozilla firefox\plugins\npqtplugin.dll

FF - plugin: c:\program\mozilla firefox\plugins\npqtplugin2.dll

FF - plugin: c:\program\mozilla firefox\plugins\npqtplugin3.dll

FF - plugin: c:\program\mozilla firefox\plugins\npqtplugin4.dll

FF - plugin: c:\program\mozilla firefox\plugins\npqtplugin5.dll

FF - plugin: c:\program\mozilla firefox\plugins\npqtplugin6.dll

FF - plugin: c:\program\mozilla firefox\plugins\npqtplugin7.dll

FF - plugin: c:\program\nos\bin\np_gp.dll

FF - plugin: c:\program\windows live\photo gallery\NPWLPG.dll

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program\mozilla firefox 4.0 beta 11\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}

FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension

FF - Ext: Adobe Acrobat - Create PDF: web2pdfextension@web2pdf.adobedotcom - c:\program\adobe\acrobat 10.0\acrobat\browser\WCFirefoxExtn

FF - Ext: Java Quick Starter: jqs@sun.com - c:\program\java\jre6\lib\deploy\jqs\ff

---- FIREFOX POLICIES ----

FF - user.js: network.http.max-connections-per-server - 6

FF - user.js: network.http.max-persistent-connections-per-server - 3

FF - user.js: nglayout.initialpaint.delay - 750

FF - user.js: content.notify.interval - 750000

FF - user.js: content.max.tokenizing.time - 2250000

============= SERVICES / DRIVERS ===============

R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2010-10-24 165264]

R1 MpKslc0dc6068;MpKslc0dc6068;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{085da6bb-7518-49cc-8c57-b08cfb0b69c7}\MpKslc0dc6068.sys [2011-3-1 28752]

R2 CTATSvc;Tele2 Connect AT Service;c:\program\tele2 connect\ATService.exe [2010-10-1 578880]

R2 CTConnect;Tele2 Connect Monitor;c:\program\tele2 connect\Connect.exe [2010-10-1 2602304]

R2 Iprip;RIP Listener;c:\windows\system32\svchost.exe -k netsvcs [2009-3-5 14336]

R2 lxdn_device;lxdn_device;c:\windows\system32\lxdncoms.exe -service --> c:\windows\system32\lxdncoms.exe -service [?]

R2 lxdnCATSCustConnectService;lxdnCATSCustConnectService;c:\windows\system32\spool\drivers\w32x86\3\lxdnserv.exe [2009-10-2 98984]

R2 RS_Service;Raw Socket Service;c:\program\acer\acer vcm\RS_Service.exe [2009-3-4 237568]

R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\drivers\ewusbdev.sys [2011-1-15 100736]

S1 MpKsl0bd57535;MpKsl0bd57535;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c1a5fdc1-bdab-4f19-9ea6-4d40e0760ea1}\mpksl0bd57535.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c1a5fdc1-bdab-4f19-9ea6-4d40e0760ea1}\MpKsl0bd57535.sys [?]

S1 MpKsl3ea683a2;MpKsl3ea683a2;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8257168e-2b3a-481e-8571-6ea3eb4f8f76}\mpksl3ea683a2.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8257168e-2b3a-481e-8571-6ea3eb4f8f76}\MpKsl3ea683a2.sys [?]

S1 MpKsl5151f3e2;MpKsl5151f3e2;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f4cf8a6c-3880-4019-9e9c-7fb3b7d96505}\mpksl5151f3e2.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f4cf8a6c-3880-4019-9e9c-7fb3b7d96505}\MpKsl5151f3e2.sys [?]

S1 MpKsl52e2f260;MpKsl52e2f260;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{658a3a1f-7eed-4292-9f82-982468dc1878}\mpksl52e2f260.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{658a3a1f-7eed-4292-9f82-982468dc1878}\MpKsl52e2f260.sys [?]

S1 MpKsl554800c2;MpKsl554800c2;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c1a5fdc1-bdab-4f19-9ea6-4d40e0760ea1}\mpksl554800c2.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c1a5fdc1-bdab-4f19-9ea6-4d40e0760ea1}\MpKsl554800c2.sys [?]

S1 MpKsl8de3d5c7;MpKsl8de3d5c7;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{136e7be0-32fb-4c66-8062-d7e9dbda87dc}\mpksl8de3d5c7.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{136e7be0-32fb-4c66-8062-d7e9dbda87dc}\MpKsl8de3d5c7.sys [?]

S1 MpKsl9e6acdc4;MpKsl9e6acdc4;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c1a5fdc1-bdab-4f19-9ea6-4d40e0760ea1}\mpksl9e6acdc4.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c1a5fdc1-bdab-4f19-9ea6-4d40e0760ea1}\MpKsl9e6acdc4.sys [?]

S1 MpKsle77b73dd;MpKsle77b73dd;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{136e7be0-32fb-4c66-8062-d7e9dbda87dc}\mpksle77b73dd.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{136e7be0-32fb-4c66-8062-d7e9dbda87dc}\MpKsle77b73dd.sys [?]

S1 MpKsledafdfd3;MpKsledafdfd3;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f4cf8a6c-3880-4019-9e9c-7fb3b7d96505}\mpksledafdfd3.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f4cf8a6c-3880-4019-9e9c-7fb3b7d96505}\MpKsledafdfd3.sys [?]

S1 MpKslf1ec8a81;MpKslf1ec8a81;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c1a5fdc1-bdab-4f19-9ea6-4d40e0760ea1}\mpkslf1ec8a81.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c1a5fdc1-bdab-4f19-9ea6-4d40e0760ea1}\MpKslf1ec8a81.sys [?]

S2 SpyHunter 4 Service;SpyHunter 4 Service;c:\program\enigma~1\spyhun~1\SH4SER~1.EXE [2010-5-18 327064]

S3 esgiguard;esgiguard;c:\program\enigma software group\spyhunter\esgiguard.sys [2010-1-27 5248]

S3 GoogleDesktopManager-051210-111108;Google Desktop-hanteraren 5.9.1005.12335;c:\program\google\google desktop search\GoogleDesktop.exe [2009-3-4 30192]

S3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\drivers\ewusbfake.sys --> c:\windows\system32\drivers\ewusbfake.sys [?]

S3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [2009-3-4 112480]

S3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [2009-7-30 7680]

S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program\microsoft office\office14\GROOVE.EXE [2010-3-25 30969208]

S3 nosGetPlusHelper;getPlus® Helper 3004;c:\windows\system32\svchost.exe -k nosGetPlusHelper [2009-3-5 14336]

S3 osppsvc;Office Software Protection Platform;c:\program\delade filer\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EXE [2010-1-9 4640000]

S3 RSUSBSTOR;RTS5121.Sys Realtek USB Card Reader;c:\windows\system32\drivers\rts5121.sys --> c:\windows\system32\drivers\RTS5121.sys [?]

S3 Rts516xIR;Realtek IR Driver;c:\windows\system32\drivers\rts516xir.sys --> c:\windows\system32\drivers\Rts516xIR.sys [?]

S3 ZTEusbnet;ZTE USB-NDIS miniport;c:\windows\system32\drivers\ZTEusbnet.sys [2009-7-30 110080]

S3 ZTEusbvoice;ZTE VoUSB Port;c:\windows\system32\drivers\zteusbvoice.sys [2009-7-30 104960]

=============== Created Last 30 ================

2011-03-01 09:36:30 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{085da6bb-7518-49cc-8c57-b08cfb0b69c7}\MpKslc0dc6068.sys

2011-03-01 04:46:15 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{085da6bb-7518-49cc-8c57-b08cfb0b69c7}\MpKsl34600279.sys

2011-02-26 17:11:27 110080 ----a-r- c:\docume~1\leif\applic~1\microsoft\installer\{4fc9da9d-f608-454e-8191-d7effdcc5726}\IconF7A21AF7.exe

2011-02-26 17:11:27 110080 ----a-r- c:\docume~1\leif\applic~1\microsoft\installer\{4fc9da9d-f608-454e-8191-d7effdcc5726}\IconD7F16134.exe

2011-02-26 17:11:22 -------- d-----w- C:\sh4ldr

2011-02-26 17:09:28 -------- d-----w- c:\windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP

2011-02-26 16:23:35 472808 ----a-w- c:\windows\system32\deployJava1.dll

2011-02-26 16:05:13 -------- d-----w- c:\program\Mozilla Firefox 4.0 Beta 11

2011-02-26 15:58:33 -------- d-----w- c:\program\DesktopEarth

2011-02-26 15:03:26 5943120 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{085da6bb-7518-49cc-8c57-b08cfb0b69c7}\mpengine.dll

2011-02-22 20:09:59 2297552 ----a-w- c:\windows\system32\d3dx9_26.dll

2011-02-22 19:59:38 -------- d-----w- C:\AOE3

2011-02-19 10:37:05 -------- d-----w- c:\docume~1\alluse~1\applic~1\regid.1986-12.com.adobe

2011-02-16 12:00:14 -------- d-----w- c:\program\SourceTec

2011-02-14 22:35:12 -------- d-----w- c:\program\Enigma Software Group

2011-02-14 22:33:16 -------- d-----w- c:\windows\41EBC322660F4D16A0DF53147210CBDB.TMP

2011-02-14 22:17:19 -------- d-----w- C:\8b4633c5247e9d0fb1abc51d

2011-02-14 22:17:04 -------- d-----w- C:\64f4d8e6ecf817ecf9ff75bc07

2011-02-14 22:11:03 -------- d-----w- C:\8f7a517b8f00890388d0de49c6df5b66

2011-02-08 08:07:41 5943120 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll

2011-02-08 07:28:59 -------- d--h--w- c:\windows\PIF

2011-02-07 05:56:05 222080 ------w- c:\windows\system32\MpSigStub.exe

2011-02-07 05:48:20 -------- d-----w- c:\program\Microsoft Security Client

2011-02-05 08:43:54 -------- d-----w- c:\windows\system32\wbem\repository\FS

2011-02-05 08:43:54 -------- d-----w- c:\windows\system32\wbem\Repository

2011-02-02 06:21:39 35136 ----a-w- c:\program\mozilla firefox\plugins\np_gp.dll

2011-02-02 03:51:37 -------- d-----w- c:\program\Windows Live Toolbar

2011-02-02 02:40:14 -------- d-----w- c:\docume~1\leif\applic~1\Windows Live Writer

2011-02-02 02:40:02 -------- d-----w- c:\docume~1\leif\lokala~1\applic~1\Windows Live Writer

2011-02-01 17:23:58 -------- d-----w- c:\docume~1\leif\applic~1\SourceTec

2011-02-01 17:23:13 -------- d-----w- c:\program\delade filer\SourceTec

2011-01-31 08:43:30 114432 ----a-w- c:\windows\system32\drivers\ewusbnet.sys

2011-01-31 08:43:29 24448 ----a-w- c:\windows\system32\drivers\ewdcsc.sys

2011-01-31 08:43:29 102912 ----a-w- c:\windows\system32\drivers\ewusbmdm.sys

2011-01-31 08:43:02 -------- d-----w- c:\docume~1\alluse~1\applic~1\Columbitech

2011-01-31 08:43:00 -------- d-----w- c:\program\Tele2 Connect

2011-01-31 08:42:45 -------- d-----w- c:\docume~1\leif\lokala~1\applic~1\Tific

2011-01-31 08:42:45 -------- d-----w- c:\docume~1\leif\applic~1\Tific

2011-01-31 08:42:42 -------- d-----w- c:\program\Tific

2011-01-31 08:42:39 -------- d-----w- c:\program\delade filer\Tific

2011-01-30 13:57:00 103864 ----a-w- c:\program\internet explorer\plugins\nppdf32.dll

==================== Find3M ====================

2011-02-02 18:19:39 73728 ----a-w- c:\windows\system32\javacpl.cpl

2011-01-21 14:44:07 439808 ----a-w- c:\windows\system32\shimgvw.dll

2011-01-11 08:37:40 59240 ----a-w- c:\windows\system32\GenSvcInst.exe

2011-01-11 08:37:40 139264 ----a-w- c:\windows\system32\bgsvcgen.exe

2011-01-07 14:09:02 290048 ----a-w- c:\windows\system32\atmfd.dll

2010-12-31 14:04:15 1854976 ----a-w- c:\windows\system32\win32k.sys

2010-12-22 12:34:22 301568 ----a-w- c:\windows\system32\kerberos.dll

2010-12-20 23:52:41 916480 ----a-w- c:\windows\system32\wininet.dll

2010-12-20 23:52:40 43520 ----a-w- c:\windows\system32\licmgr10.dll

2010-12-20 23:52:40 1469440 ----a-w- c:\windows\system32\inetcpl.cpl

2010-12-20 17:25:55 730624 ----a-w- c:\windows\system32\lsasrv.dll

2010-12-20 12:55:37 385024 ----a-w- c:\windows\system32\html.iec

2010-12-13 13:22:01 61440 ----a-w- c:\windows\system32\leasrsa.dll

2010-12-09 15:15:15 722944 ----a-w- c:\windows\system32\ntdll.dll

2010-12-09 15:13:58 2028032 ----a-w- c:\windows\system32\ntkrnlpa.exe

2010-12-09 15:13:56 2149888 ----a-w- c:\windows\system32\ntoskrnl.exe

2010-12-09 14:30:25 33280 ----a-w- c:\windows\system32\csrsrv.dll

=================== ROOTKIT ====================

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net

Windows 5.1.2600 Disk: TOSHIBA_ rev.FG01 -> Harddisk0\DR0 -> \Device\Ide\iaStor0

device: opened successfully

user: MBR read successfully

Disk trace:

called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x861D7439]<<

_asm { PUSH EBP; MOV EBP, ESP; PUSH ECX; MOV EAX, [EBP+0x8]; CMP EAX, [0x861dd7b8]; MOV EAX, [0x861dd834]; PUSH EBX; PUSH ESI; MOV ESI, [EBP+0xc]; MOV EBX, [ESI+0x60]; PUSH EDI; JNZ 0x20; MOV [EBP+0x8], EAX; }

1 nt!IofCallDriver[0x804E13B9] -> \Device\Harddisk0\DR0[0x86B64370]

3 CLASSPNP[0xF7567FD7] -> nt!IofCallDriver[0x804E13B9] -> \Device\0000009c[0x86B7F320]

5 ACPI[0xF745E620] -> nt!IofCallDriver[0x804E13B9] -> [0x86B67028]

\Driver\iaStor[0x86B83E60] -> IRP_MJ_CREATE -> 0x861D7439

kernel: MBR read successfully

_asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00; MOV ES, AX; MOV DS, AX; MOV SI, 0x7c00; MOV DI, 0x600; MOV CX, 0x200; CLD ; REP MOVSB ; PUSH AX; PUSH 0x61c; RETF ; STI ; PUSHA ; MOV CX, 0x132; MOV BP, 0x62a; ROR BYTE [bP+0x0], CL; INC BP; }

detected disk devices:

\Device\Ide\IAAStorageDevice-0 -> \??\IDE#DiskTOSHIBA_MK1655GSX_______________________FG011J__#4&39d28377&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} device not found

detected hooks:

user != kernel MBR !!!

sectors 312581806 (+255): user != kernel

Warning: possible TDL4 rootkit infection !

TDL4 rootkit infection detected ! Use: "mbr.exe -f" to fix.

============= FINISH: 10:56:19,78 ===============

2 mars, 2011

Numera fungerar det inte så bra att packa/komprimera loggar för ofta försvinner radbrytningarna då.

1.

Spara DeFogger by jpshortstuff http://www.jpshortstuff.247fixes.com/Defogger.exe på Skrivbordet.

Starta DeFogger.

När programmets fönster kommer upp trycker du på knappen Disable för att inaktivera drivrutinerna som hör ihop med ditt installerade CD-emuleringsprogram.

Tryck på Yes/Ja för att fortsätta.

När programmet är klart kommer det upp ett meddelande 'Finished!'.

Tryck på OK.

Programmet ber om omstart av datorn, tryck på OK.

VIKTIGT! Om du får ett felmeddelande medan DeFogger kör, så klistra in loggen defogger_disable som då skapas på Skrivbordet.

Aktivera inte dessa drivrutiner innan rensningen är helt klar.

2.

Spara TDSSKiller på Skrivbordet:

http://support.kaspersky.com/downloads/utils/tdsskiller.zip

Högerklicka och välj Extrahera alla. Kom ihåg var du packar upp filen.

Stäng av dina vanliga program, men du kan lämna antivirusprogram och liknande igång.

Kör programmet TDSSKiller.exe som finns i mappen där du packade upp filerna.

Klicka på Start Scan.

Om några hot hittas så välj Cure och klicka på Continue. Om inte Cure finns så välj Skip. Välj INTE Quarantine eller Delete. Eventuellt behöver datorn startas om.

Klistra in innehållet i loggen som du hittar i C:\ med namnet TDSSKiller följt av version och tidpunkt.

6 mars, 2011

2011/03/06 20:41:37.0375 0464 TDSS rootkit removing tool 2.4.20.0 Mar 2 2011 10:44:30

2011/03/06 20:41:39.0265 0464 ================================================================================

2011/03/06 20:41:39.0265 0464 SystemInfo:

2011/03/06 20:41:39.0265 0464

2011/03/06 20:41:39.0265 0464 OS Version: 5.1.2600 ServicePack: 3.0

2011/03/06 20:41:39.0265 0464 Product type: Workstation

2011/03/06 20:41:39.0265 0464 ComputerName: ACER-B42C7CB454

2011/03/06 20:41:39.0265 0464 UserName: Leif

2011/03/06 20:41:39.0265 0464 Windows directory: C:\WINDOWS

2011/03/06 20:41:39.0265 0464 System windows directory: C:\WINDOWS

2011/03/06 20:41:39.0265 0464 Processor architecture: Intel x86

2011/03/06 20:41:39.0265 0464 Number of processors: 2

2011/03/06 20:41:39.0265 0464 Page size: 0x1000

2011/03/06 20:41:39.0265 0464 Boot type: Normal boot

2011/03/06 20:41:39.0265 0464 ================================================================================

2011/03/06 20:41:40.0859 0464 Initialize success

2011/03/06 20:41:43.0984 2988 ================================================================================

2011/03/06 20:41:43.0984 2988 Scan started

2011/03/06 20:41:43.0984 2988 Mode: Manual;

2011/03/06 20:41:43.0984 2988 ================================================================================

2011/03/06 20:41:44.0359 2988 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS

2011/03/06 20:41:44.0390 2988 ACPI (48547e29772befe3c554ff5e4855bf51) C:\WINDOWS\system32\DRIVERS\ACPI.sys

2011/03/06 20:41:44.0421 2988 ACPIEC (decedc736cef3c0fff6e981b31e73a61) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys

2011/03/06 20:41:44.0500 2988 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys

2011/03/06 20:41:44.0546 2988 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys

2011/03/06 20:41:44.0734 2988 AFD (7e775010ef291da96ad17ca4b17137d7) C:\WINDOWS\System32\drivers\afd.sys

2011/03/06 20:41:44.0796 2988 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys

2011/03/06 20:41:45.0015 2988 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys

2011/03/06 20:41:45.0062 2988 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys

2011/03/06 20:41:45.0125 2988 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys

2011/03/06 20:41:45.0156 2988 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys

2011/03/06 20:41:45.0218 2988 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys

2011/03/06 20:41:45.0375 2988 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys

2011/03/06 20:41:45.0421 2988 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys

2011/03/06 20:41:45.0484 2988 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys

2011/03/06 20:41:45.0593 2988 AR5416 (a2f96787b7a958989a962ef3824d9ca8) C:\WINDOWS\system32\DRIVERS\athw.sys

2011/03/06 20:41:45.0765 2988 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys

2011/03/06 20:41:45.0828 2988 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys

2011/03/06 20:41:46.0031 2988 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys

2011/03/06 20:41:46.0140 2988 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys

2011/03/06 20:41:46.0312 2988 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys

2011/03/06 20:41:46.0437 2988 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys

2011/03/06 20:41:46.0562 2988 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys

2011/03/06 20:41:46.0640 2988 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys

2011/03/06 20:41:46.0828 2988 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys

2011/03/06 20:41:46.0859 2988 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys

2011/03/06 20:41:46.0906 2988 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys

2011/03/06 20:41:47.0078 2988 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys

2011/03/06 20:41:47.0140 2988 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys

2011/03/06 20:41:47.0171 2988 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys

2011/03/06 20:41:47.0328 2988 cdrbsdrv (9008ad94f28360a2f1409592bfc7acf7) C:\WINDOWS\system32\drivers\cdrbsdrv.sys

2011/03/06 20:41:47.0390 2988 Cdrom (4b0a100eaf5c49ef3cca8c641431eacc) C:\WINDOWS\system32\DRIVERS\cdrom.sys

2011/03/06 20:41:47.0625 2988 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys

2011/03/06 20:41:47.0687 2988 CmdIde (4c36a458153f8d7329e96192e653cb01) C:\WINDOWS\system32\DRIVERS\cmdide.sys

2011/03/06 20:41:47.0828 2988 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys

2011/03/06 20:41:47.0937 2988 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys

2011/03/06 20:41:48.0156 2988 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys

2011/03/06 20:41:48.0171 2988 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys

2011/03/06 20:41:48.0250 2988 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys

2011/03/06 20:41:48.0406 2988 DKbFltr (08d30af92c270f2e76787c81589dbad6) C:\WINDOWS\system32\DRIVERS\DKbFltr.sys

2011/03/06 20:41:48.0484 2988 dmboot (80008bd0c19d97b0b3f4d1d9cbf190a8) C:\WINDOWS\system32\drivers\dmboot.sys

2011/03/06 20:41:48.0640 2988 dmio (41862731f82be80f0cfba5d0da36b683) C:\WINDOWS\system32\drivers\dmio.sys

2011/03/06 20:41:48.0687 2988 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys

2011/03/06 20:41:48.0828 2988 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys

2011/03/06 20:41:48.0921 2988 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys

2011/03/06 20:41:49.0140 2988 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys

2011/03/06 20:41:49.0265 2988 esgiguard (051a2e2a75adb6d1c5c27e940fdabcba) C:\Program\Enigma Software Group\SpyHunter\esgiguard.sys

2011/03/06 20:41:49.0500 2988 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys

2011/03/06 20:41:49.0562 2988 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys

2011/03/06 20:41:49.0703 2988 Fips (b66ddb75642f6722468707840c67a394) C:\WINDOWS\system32\drivers\Fips.sys

2011/03/06 20:41:49.0781 2988 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys

2011/03/06 20:41:49.0937 2988 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys

2011/03/06 20:41:50.0000 2988 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys

2011/03/06 20:41:50.0187 2988 Ftdisk (45fc410cfe68ff036ad232a141e69c19) C:\WINDOWS\system32\DRIVERS\ftdisk.sys

2011/03/06 20:41:50.0281 2988 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys

2011/03/06 20:41:50.0406 2988 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys

2011/03/06 20:41:50.0531 2988 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys

2011/03/06 20:41:50.0703 2988 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys

2011/03/06 20:41:50.0781 2988 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys

2011/03/06 20:41:50.0984 2988 hwdatacard (93e5d34d95ff9011beed886e3627f442) C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys

2011/03/06 20:41:51.0046 2988 hwusbdev (922065957563d851b5a68b95aadac6ad) C:\WINDOWS\system32\DRIVERS\ewusbdev.sys

2011/03/06 20:41:51.0250 2988 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys

2011/03/06 20:41:51.0296 2988 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys

2011/03/06 20:41:51.0468 2988 i8042prt (82e56cd09b2ce1edec3fba9111c7ee3a) C:\WINDOWS\system32\DRIVERS\i8042prt.sys

2011/03/06 20:41:51.0765 2988 ialm (48846b31be5a4fa662ccfde7a1ba86b9) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys

2011/03/06 20:41:52.0000 2988 iaStor (8ef427c54497c5f8a7a645990e4278c7) C:\WINDOWS\system32\drivers\iaStor.sys

2011/03/06 20:41:52.0078 2988 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys

2011/03/06 20:41:52.0265 2988 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys

2011/03/06 20:41:52.0562 2988 IntcAzAudAddService (2feb5bf0312e1cb76cd2caa875cbaa5d) C:\WINDOWS\system32\drivers\RtkHDAud.sys

2011/03/06 20:41:52.0765 2988 IntelIde (3012ee13f357a99361ad8b0d93e13c45) C:\WINDOWS\system32\DRIVERS\intelide.sys

2011/03/06 20:41:52.0843 2988 intelppm (02431778e84a525d29929d14bab71d53) C:\WINDOWS\system32\DRIVERS\intelppm.sys

2011/03/06 20:41:53.0000 2988 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys

2011/03/06 20:41:53.0062 2988 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

2011/03/06 20:41:53.0109 2988 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys

2011/03/06 20:41:53.0265 2988 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys

2011/03/06 20:41:53.0359 2988 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys

2011/03/06 20:41:53.0515 2988 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys

2011/03/06 20:41:53.0609 2988 isapnp (48f97c77daf8811598cfae21368eacb6) C:\WINDOWS\system32\DRIVERS\isapnp.sys

2011/03/06 20:41:53.0765 2988 JMCR (59e7fd6d845f08003efb8f812eca41bc) C:\WINDOWS\system32\DRIVERS\jmcr.sys

2011/03/06 20:41:53.0828 2988 Kbdclass (d655ca94c8e2e0223c1bc28bcd95723a) C:\WINDOWS\system32\DRIVERS\kbdclass.sys

2011/03/06 20:41:54.0000 2988 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys

2011/03/06 20:41:54.0093 2988 KProcessHacker2 (4af27cb32d2fe975fcee12b9e50eefad) C:\Program\Process Hacker 2\kprocesshacker.sys

2011/03/06 20:41:54.0359 2988 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys

2011/03/06 20:41:54.0437 2988 L1e (131f87c6dcd9bb7caf31e315a4fbdc8b) C:\WINDOWS\system32\DRIVERS\l1e51x86.sys

2011/03/06 20:41:54.0687 2988 massfilter (f0435fe3c1ec2659d2bbf073ca0752ee) C:\WINDOWS\system32\DRIVERS\massfilter.sys

2011/03/06 20:41:54.0765 2988 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys

2011/03/06 20:41:54.0953 2988 Modem (42ce19726d9c410dff75d3ff1cc79db2) C:\WINDOWS\system32\drivers\Modem.sys

2011/03/06 20:41:55.0015 2988 Mouclass (e0c4c36573bcf0c0d2a1578caa791f7d) C:\WINDOWS\system32\DRIVERS\mouclass.sys

2011/03/06 20:41:55.0093 2988 mouhid (98e474ecf11f1db62fb072157a95ea83) C:\WINDOWS\system32\DRIVERS\mouhid.sys

2011/03/06 20:41:55.0265 2988 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys

2011/03/06 20:41:55.0312 2988 MpFilter (7e34bfa1a7b60bba1da03d677f16cd63) C:\WINDOWS\system32\DRIVERS\MpFilter.sys

2011/03/06 20:41:55.0453 2988 MpKsl0677f99f (5f53edfead46fa7adb78eee9ecce8fdf) c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A6E0D371-A1FD-4C7A-962E-A92C22C406B5}\MpKsl0677f99f.sys

2011/03/06 20:41:55.0953 2988 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys

2011/03/06 20:41:56.0015 2988 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys

2011/03/06 20:41:56.0218 2988 MRxSmb (f3aefb11abc521122b67095044169e98) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

2011/03/06 20:41:56.0375 2988 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys

2011/03/06 20:41:56.0468 2988 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys

2011/03/06 20:41:56.0546 2988 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys

2011/03/06 20:41:56.0687 2988 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys

2011/03/06 20:41:56.0765 2988 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys

2011/03/06 20:41:56.0906 2988 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys

2011/03/06 20:41:56.0968 2988 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys

2011/03/06 20:41:57.0000 2988 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys

2011/03/06 20:41:57.0140 2988 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys

2011/03/06 20:41:57.0203 2988 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys

2011/03/06 20:41:57.0375 2988 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys

2011/03/06 20:41:57.0421 2988 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys

2011/03/06 20:41:57.0593 2988 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys

2011/03/06 20:41:57.0656 2988 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys

2011/03/06 20:41:57.0828 2988 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys

2011/03/06 20:41:57.0890 2988 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys

2011/03/06 20:41:58.0156 2988 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys

2011/03/06 20:41:58.0218 2988 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys

2011/03/06 20:41:58.0406 2988 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys

2011/03/06 20:41:58.0453 2988 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys

2011/03/06 20:41:58.0609 2988 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys

2011/03/06 20:41:58.0859 2988 Parport (19e28ed86e7244d76fda792c2810188e) C:\WINDOWS\system32\drivers\Parport.sys

2011/03/06 20:41:59.0031 2988 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys

2011/03/06 20:41:59.0078 2988 ParVdm (5cf71e14a108c492c1fb07543d579af5) C:\WINDOWS\system32\drivers\ParVdm.sys

2011/03/06 20:41:59.0140 2988 PCI (8a185f0112cf5b42ff1aaff31b8b3091) C:\WINDOWS\system32\DRIVERS\pci.sys

2011/03/06 20:41:59.0281 2988 PCIIde (239de4275ee40fdf9912761467025244) C:\WINDOWS\system32\DRIVERS\pciide.sys

2011/03/06 20:41:59.0359 2988 Pcmcia (904053aa6e251c77cf85371ce644cfd7) C:\WINDOWS\system32\drivers\Pcmcia.sys

2011/03/06 20:41:59.0609 2988 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys

2011/03/06 20:41:59.0734 2988 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys

2011/03/06 20:41:59.0906 2988 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys

2011/03/06 20:41:59.0937 2988 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys

2011/03/06 20:41:59.0984 2988 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys

2011/03/06 20:42:00.0062 2988 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys

2011/03/06 20:42:00.0187 2988 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys

2011/03/06 20:42:00.0265 2988 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys

2011/03/06 20:42:00.0468 2988 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys

2011/03/06 20:42:00.0515 2988 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys

2011/03/06 20:42:00.0687 2988 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys

2011/03/06 20:42:00.0781 2988 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys

2011/03/06 20:42:00.0968 2988 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys

2011/03/06 20:42:01.0000 2988 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys

2011/03/06 20:42:01.0046 2988 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys

2011/03/06 20:42:01.0078 2988 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

2011/03/06 20:42:01.0156 2988 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys

2011/03/06 20:42:01.0328 2988 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys

2011/03/06 20:42:01.0390 2988 redbook (97130d37842819fa39fd5f1e90a5d676) C:\WINDOWS\system32\DRIVERS\redbook.sys

2011/03/06 20:42:01.0562 2988 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys

2011/03/06 20:42:01.0828 2988 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys

2011/03/06 20:42:02.0000 2988 Serial (f7d35464062edc08909e568bcd8ae77d) C:\WINDOWS\system32\drivers\Serial.sys

2011/03/06 20:42:02.0093 2988 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys

2011/03/06 20:42:02.0234 2988 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys

2011/03/06 20:42:02.0375 2988 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys

2011/03/06 20:42:02.0515 2988 SNP2UVC (0302bc619d4a723317e7f8eb0c362bd3) C:\WINDOWS\system32\DRIVERS\snp2uvc.sys

2011/03/06 20:42:02.0703 2988 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys

2011/03/06 20:42:02.0765 2988 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys

2011/03/06 20:42:02.0937 2988 sr (1193ef00869f6367367e6e7cb96be325) C:\WINDOWS\system32\DRIVERS\sr.sys

2011/03/06 20:42:03.0000 2988 Srv (0f6aefad3641a657e18081f52d0c15af) C:\WINDOWS\system32\DRIVERS\srv.sys

2011/03/06 20:42:03.0109 2988 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys

2011/03/06 20:42:03.0265 2988 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys

2011/03/06 20:42:03.0328 2988 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys

2011/03/06 20:42:03.0546 2988 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys

2011/03/06 20:42:03.0593 2988 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys

2011/03/06 20:42:03.0734 2988 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys

2011/03/06 20:42:03.0812 2988 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys

2011/03/06 20:42:04.0000 2988 SynTP (3b7b7ab4a42321f6c49d1ab0e27d89c4) C:\WINDOWS\system32\DRIVERS\SynTP.sys

2011/03/06 20:42:04.0109 2988 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys

2011/03/06 20:42:04.0343 2988 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys

2011/03/06 20:42:04.0421 2988 Tcpip6 (4e53bbcc4be37d7a4bd6ef1098c89ff7) C:\WINDOWS\system32\DRIVERS\tcpip6.sys

2011/03/06 20:42:04.0593 2988 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys

2011/03/06 20:42:04.0656 2988 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys

2011/03/06 20:42:04.0843 2988 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys

2011/03/06 20:42:04.0984 2988 TosIde (67b0bb00b577d37e54497e5fdfcaadc0) C:\WINDOWS\system32\DRIVERS\toside.sys

2011/03/06 20:42:05.0125 2988 tunmp (8f861eda21c05857eb8197300a92501c) C:\WINDOWS\system32\DRIVERS\tunmp.sys

2011/03/06 20:42:05.0187 2988 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys

2011/03/06 20:42:05.0281 2988 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys

2011/03/06 20:42:05.0453 2988 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys

2011/03/06 20:42:05.0531 2988 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys

2011/03/06 20:42:05.0734 2988 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys

2011/03/06 20:42:05.0781 2988 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys

2011/03/06 20:42:05.0968 2988 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys

2011/03/06 20:42:06.0000 2988 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys

2011/03/06 20:42:06.0093 2988 usbstor (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

2011/03/06 20:42:06.0265 2988 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys

2011/03/06 20:42:06.0359 2988 usbvideo (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys

2011/03/06 20:42:06.0531 2988 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys

2011/03/06 20:42:06.0609 2988 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys

2011/03/06 20:42:06.0750 2988 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys

2011/03/06 20:42:06.0796 2988 VolSnap (57187ec04878147e1f4f2d9224b12205) C:\WINDOWS\system32\drivers\VolSnap.sys

2011/03/06 20:42:06.0890 2988 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys

2011/03/06 20:42:06.0968 2988 Wdf01000 (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS\system32\Drivers\wdf01000.sys

2011/03/06 20:42:07.0187 2988 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys

2011/03/06 20:42:07.0359 2988 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys

2011/03/06 20:42:07.0671 2988 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS

2011/03/06 20:42:07.0718 2988 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys

2011/03/06 20:42:07.0843 2988 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys

2011/03/06 20:42:07.0937 2988 ZTEusbmdm6k (b8b466103280e45e391e876f05122607) C:\WINDOWS\system32\DRIVERS\ZTEusbmdm6k.sys

2011/03/06 20:42:07.0968 2988 ZTEusbnet (911ba85906bc7602c73441502abfb565) C:\WINDOWS\system32\DRIVERS\ZTEusbnet.sys

2011/03/06 20:42:08.0000 2988 ZTEusbnmea (69774b89725ddc4781e0eeb9809f3b20) C:\WINDOWS\system32\DRIVERS\ZTEusbnmea.sys

2011/03/06 20:42:08.0046 2988 ZTEusbser6k (b8b466103280e45e391e876f05122607) C:\WINDOWS\system32\DRIVERS\ZTEusbser6k.sys

2011/03/06 20:42:08.0109 2988 ZTEusbvoice (b8b466103280e45e391e876f05122607) C:\WINDOWS\system32\DRIVERS\ZTEusbvoice.sys

2011/03/06 20:42:08.0250 2988 \HardDisk0 - detected Rootkit.Win32.TDSS.tdl4 (0)

2011/03/06 20:42:08.0671 2988 ================================================================================

2011/03/06 20:42:08.0671 2988 Scan finished

2011/03/06 20:42:08.0671 2988 ================================================================================

2011/03/06 20:42:08.0703 1852 Detected object count: 1

2011/03/06 20:42:44.0343 1852 \HardDisk0 - will be cured after reboot

2011/03/06 20:42:44.0343 1852 Rootkit.Win32.TDSS.tdl4(\HardDisk0) - User select action: Cure

2011/03/06 20:42:50.0468 3868 Deinitialize success

6 mars, 2011

Ser ju ut som att TDSSKiller kunde fixa en del. Starta om datorn och kör TDSSKiller igen så att vi ser att det verkligen är borta för gott. Kör sedan DDS igen så får vi se hur det ser ut i den loggen nu.

7 mars, 2011

Cecilia

Det känns oerhört värdefullt att ha dig som support.

Du riktigt glänser av kompetens.

Jag önskar jag hade hälften av denna DU besitter.

All heder åt dig !!!!

TDSSKiller:

2011/03/07 19:56:35.0531 2216 TDSS rootkit removing tool 2.4.20.0 Mar 2 2011 10:44:30

2011/03/07 19:56:37.0343 2216 ================================================================================

2011/03/07 19:56:37.0343 2216 SystemInfo:

2011/03/07 19:56:37.0343 2216

2011/03/07 19:56:37.0343 2216 OS Version: 5.1.2600 ServicePack: 3.0

2011/03/07 19:56:37.0343 2216 Product type: Workstation

2011/03/07 19:56:37.0343 2216 ComputerName: ACER-B42C7CB454

2011/03/07 19:56:37.0343 2216 UserName: Leif

2011/03/07 19:56:37.0343 2216 Windows directory: C:\WINDOWS

2011/03/07 19:56:37.0343 2216 System windows directory: C:\WINDOWS

2011/03/07 19:56:37.0343 2216 Processor architecture: Intel x86

2011/03/07 19:56:37.0343 2216 Number of processors: 2

2011/03/07 19:56:37.0343 2216 Page size: 0x1000

2011/03/07 19:56:37.0343 2216 Boot type: Normal boot

2011/03/07 19:56:37.0343 2216 ================================================================================

2011/03/07 19:56:39.0250 2216 Initialize success

2011/03/07 19:56:45.0468 2276 ================================================================================

2011/03/07 19:56:45.0468 2276 Scan started

2011/03/07 19:56:45.0468 2276 Mode: Manual;

2011/03/07 19:56:45.0468 2276 ================================================================================

2011/03/07 19:56:45.0906 2276 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS

2011/03/07 19:56:45.0953 2276 ACPI (48547e29772befe3c554ff5e4855bf51) C:\WINDOWS\system32\DRIVERS\ACPI.sys

2011/03/07 19:56:46.0078 2276 ACPIEC (decedc736cef3c0fff6e981b31e73a61) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys

2011/03/07 19:56:46.0125 2276 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys

2011/03/07 19:56:46.0218 2276 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys

2011/03/07 19:56:46.0406 2276 AFD (7e775010ef291da96ad17ca4b17137d7) C:\WINDOWS\System32\drivers\afd.sys

2011/03/07 19:56:46.0500 2276 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys

2011/03/07 19:56:46.0656 2276 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys

2011/03/07 19:56:46.0718 2276 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys

2011/03/07 19:56:46.0750 2276 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys

2011/03/07 19:56:46.0796 2276 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys

2011/03/07 19:56:46.0937 2276 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys

2011/03/07 19:56:47.0078 2276 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys

2011/03/07 19:56:47.0109 2276 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys

2011/03/07 19:56:47.0171 2276 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys

2011/03/07 19:56:47.0296 2276 AR5416 (a2f96787b7a958989a962ef3824d9ca8) C:\WINDOWS\system32\DRIVERS\athw.sys

2011/03/07 19:56:47.0484 2276 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys

2011/03/07 19:56:47.0546 2276 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys

2011/03/07 19:56:47.0671 2276 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys

2011/03/07 19:56:47.0750 2276 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys

2011/03/07 19:56:47.0796 2276 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys

2011/03/07 19:56:47.0968 2276 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys

2011/03/07 19:56:48.0093 2276 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys

2011/03/07 19:56:48.0187 2276 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys

2011/03/07 19:56:48.0281 2276 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys

2011/03/07 19:56:48.0421 2276 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys

2011/03/07 19:56:48.0484 2276 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys

2011/03/07 19:56:48.0625 2276 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys

2011/03/07 19:56:48.0671 2276 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys

2011/03/07 19:56:48.0718 2276 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys

2011/03/07 19:56:48.0890 2276 cdrbsdrv (9008ad94f28360a2f1409592bfc7acf7) C:\WINDOWS\system32\drivers\cdrbsdrv.sys

2011/03/07 19:56:49.0109 2276 Cdrom (4b0a100eaf5c49ef3cca8c641431eacc) C:\WINDOWS\system32\DRIVERS\cdrom.sys

2011/03/07 19:56:49.0234 2276 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys

2011/03/07 19:56:49.0406 2276 CmdIde (4c36a458153f8d7329e96192e653cb01) C:\WINDOWS\system32\DRIVERS\cmdide.sys

2011/03/07 19:56:49.0453 2276 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys

2011/03/07 19:56:49.0531 2276 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys

2011/03/07 19:56:49.0609 2276 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys

2011/03/07 19:56:49.0640 2276 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys

2011/03/07 19:56:49.0703 2276 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys

2011/03/07 19:56:49.0781 2276 DKbFltr (08d30af92c270f2e76787c81589dbad6) C:\WINDOWS\system32\DRIVERS\DKbFltr.sys

2011/03/07 19:56:49.0984 2276 dmboot (80008bd0c19d97b0b3f4d1d9cbf190a8) C:\WINDOWS\system32\drivers\dmboot.sys

2011/03/07 19:56:50.0046 2276 dmio (41862731f82be80f0cfba5d0da36b683) C:\WINDOWS\system32\drivers\dmio.sys

2011/03/07 19:56:50.0203 2276 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys

2011/03/07 19:56:50.0281 2276 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys

2011/03/07 19:56:50.0453 2276 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys

2011/03/07 19:56:50.0531 2276 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys

2011/03/07 19:56:50.0671 2276 esgiguard (051a2e2a75adb6d1c5c27e940fdabcba) C:\Program\Enigma Software Group\SpyHunter\esgiguard.sys

2011/03/07 19:56:50.0906 2276 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys

2011/03/07 19:56:51.0000 2276 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys

2011/03/07 19:56:51.0187 2276 Fips (b66ddb75642f6722468707840c67a394) C:\WINDOWS\system32\drivers\Fips.sys

2011/03/07 19:56:51.0265 2276 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys

2011/03/07 19:56:51.0312 2276 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys

2011/03/07 19:56:51.0484 2276 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys

2011/03/07 19:56:51.0593 2276 Ftdisk (45fc410cfe68ff036ad232a141e69c19) C:\WINDOWS\system32\DRIVERS\ftdisk.sys

2011/03/07 19:56:51.0781 2276 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys

2011/03/07 19:56:51.0875 2276 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys

2011/03/07 19:56:52.0093 2276 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys

2011/03/07 19:56:52.0250 2276 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys

2011/03/07 19:56:52.0437 2276 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys

2011/03/07 19:56:52.0578 2276 hwdatacard (93e5d34d95ff9011beed886e3627f442) C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys

2011/03/07 19:56:52.0781 2276 hwusbdev (922065957563d851b5a68b95aadac6ad) C:\WINDOWS\system32\DRIVERS\ewusbdev.sys

2011/03/07 19:56:52.0953 2276 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys

2011/03/07 19:56:53.0078 2276 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys

2011/03/07 19:56:53.0156 2276 i8042prt (82e56cd09b2ce1edec3fba9111c7ee3a) C:\WINDOWS\system32\DRIVERS\i8042prt.sys

2011/03/07 19:56:53.0468 2276 ialm (48846b31be5a4fa662ccfde7a1ba86b9) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys

2011/03/07 19:56:53.0843 2276 iaStor (8ef427c54497c5f8a7a645990e4278c7) C:\WINDOWS\system32\drivers\iaStor.sys

2011/03/07 19:56:53.0921 2276 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys

2011/03/07 19:56:54.0109 2276 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys

2011/03/07 19:56:54.0406 2276 IntcAzAudAddService (2feb5bf0312e1cb76cd2caa875cbaa5d) C:\WINDOWS\system32\drivers\RtkHDAud.sys

2011/03/07 19:56:54.0750 2276 IntelIde (3012ee13f357a99361ad8b0d93e13c45) C:\WINDOWS\system32\DRIVERS\intelide.sys

2011/03/07 19:56:54.0812 2276 intelppm (02431778e84a525d29929d14bab71d53) C:\WINDOWS\system32\DRIVERS\intelppm.sys

2011/03/07 19:56:54.0968 2276 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys

2011/03/07 19:56:55.0015 2276 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

2011/03/07 19:56:55.0062 2276 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys

2011/03/07 19:56:55.0218 2276 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys

2011/03/07 19:56:55.0296 2276 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys

2011/03/07 19:56:55.0343 2276 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys

2011/03/07 19:56:55.0531 2276 isapnp (48f97c77daf8811598cfae21368eacb6) C:\WINDOWS\system32\DRIVERS\isapnp.sys

2011/03/07 19:56:55.0609 2276 JMCR (59e7fd6d845f08003efb8f812eca41bc) C:\WINDOWS\system32\DRIVERS\jmcr.sys

2011/03/07 19:56:55.0765 2276 Kbdclass (d655ca94c8e2e0223c1bc28bcd95723a) C:\WINDOWS\system32\DRIVERS\kbdclass.sys

2011/03/07 19:56:55.0843 2276 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys

2011/03/07 19:56:55.0953 2276 KProcessHacker2 (4af27cb32d2fe975fcee12b9e50eefad) C:\Program\Process Hacker 2\kprocesshacker.sys

2011/03/07 19:56:56.0218 2276 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys

2011/03/07 19:56:56.0296 2276 L1e (131f87c6dcd9bb7caf31e315a4fbdc8b) C:\WINDOWS\system32\DRIVERS\l1e51x86.sys

2011/03/07 19:56:56.0484 2276 massfilter (f0435fe3c1ec2659d2bbf073ca0752ee) C:\WINDOWS\system32\DRIVERS\massfilter.sys

2011/03/07 19:56:56.0656 2276 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys

2011/03/07 19:56:56.0765 2276 Modem (42ce19726d9c410dff75d3ff1cc79db2) C:\WINDOWS\system32\drivers\Modem.sys

2011/03/07 19:56:56.0953 2276 Mouclass (e0c4c36573bcf0c0d2a1578caa791f7d) C:\WINDOWS\system32\DRIVERS\mouclass.sys

2011/03/07 19:56:57.0078 2276 mouhid (98e474ecf11f1db62fb072157a95ea83) C:\WINDOWS\system32\DRIVERS\mouhid.sys

2011/03/07 19:56:57.0234 2276 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys

2011/03/07 19:56:57.0296 2276 MpFilter (7e34bfa1a7b60bba1da03d677f16cd63) C:\WINDOWS\system32\DRIVERS\MpFilter.sys

2011/03/07 19:56:57.0984 2276 MpKslfc325259 (5f53edfead46fa7adb78eee9ecce8fdf) c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A6E0D371-A1FD-4C7A-962E-A92C22C406B5}\MpKslfc325259.sys

2011/03/07 19:56:58.0156 2276 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys

2011/03/07 19:56:58.0265 2276 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys

2011/03/07 19:56:58.0500 2276 MRxSmb (f3aefb11abc521122b67095044169e98) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

2011/03/07 19:56:58.0593 2276 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys

2011/03/07 19:56:58.0671 2276 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys

2011/03/07 19:56:58.0828 2276 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys

2011/03/07 19:56:58.0890 2276 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys

2011/03/07 19:56:59.0062 2276 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys

2011/03/07 19:56:59.0171 2276 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys

2011/03/07 19:56:59.0281 2276 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys

2011/03/07 19:56:59.0453 2276 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys

2011/03/07 19:56:59.0562 2276 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys

2011/03/07 19:56:59.0734 2276 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys

2011/03/07 19:56:59.0812 2276 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys

2011/03/07 19:56:59.0953 2276 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys

2011/03/07 19:57:00.0046 2276 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys

2011/03/07 19:57:00.0203 2276 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys

2011/03/07 19:57:00.0281 2276 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys

2011/03/07 19:57:00.0375 2276 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys

2011/03/07 19:57:00.0703 2276 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys

2011/03/07 19:57:00.0781 2276 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys

2011/03/07 19:57:00.0984 2276 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys

2011/03/07 19:57:01.0031 2276 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys

2011/03/07 19:57:01.0171 2276 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys

2011/03/07 19:57:01.0296 2276 Parport (19e28ed86e7244d76fda792c2810188e) C:\WINDOWS\system32\drivers\Parport.sys

2011/03/07 19:57:01.0343 2276 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys

2011/03/07 19:57:01.0500 2276 ParVdm (5cf71e14a108c492c1fb07543d579af5) C:\WINDOWS\system32\drivers\ParVdm.sys

2011/03/07 19:57:01.0562 2276 PCI (8a185f0112cf5b42ff1aaff31b8b3091) C:\WINDOWS\system32\DRIVERS\pci.sys

2011/03/07 19:57:01.0718 2276 PCIIde (239de4275ee40fdf9912761467025244) C:\WINDOWS\system32\DRIVERS\pciide.sys

2011/03/07 19:57:01.0796 2276 Pcmcia (904053aa6e251c77cf85371ce644cfd7) C:\WINDOWS\system32\drivers\Pcmcia.sys

2011/03/07 19:57:02.0156 2276 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys

2011/03/07 19:57:02.0187 2276 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys

2011/03/07 19:57:02.0359 2276 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys

2011/03/07 19:57:02.0500 2276 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys

2011/03/07 19:57:02.0531 2276 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys

2011/03/07 19:57:02.0578 2276 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys

2011/03/07 19:57:02.0625 2276 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys

2011/03/07 19:57:02.0796 2276 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys

2011/03/07 19:57:02.0843 2276 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys

2011/03/07 19:57:03.0000 2276 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys

2011/03/07 19:57:03.0078 2276 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys

2011/03/07 19:57:03.0218 2276 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys

2011/03/07 19:57:03.0296 2276 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys

2011/03/07 19:57:03.0343 2276 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys

2011/03/07 19:57:03.0421 2276 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys

2011/03/07 19:57:03.0593 2276 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

2011/03/07 19:57:03.0671 2276 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys

2011/03/07 19:57:03.0859 2276 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys

2011/03/07 19:57:03.0937 2276 redbook (97130d37842819fa39fd5f1e90a5d676) C:\WINDOWS\system32\DRIVERS\redbook.sys

2011/03/07 19:57:04.0125 2276 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys

2011/03/07 19:57:04.0406 2276 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys

2011/03/07 19:57:04.0609 2276 Serial (f7d35464062edc08909e568bcd8ae77d) C:\WINDOWS\system32\drivers\Serial.sys

2011/03/07 19:57:04.0687 2276 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys

2011/03/07 19:57:04.0921 2276 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys

2011/03/07 19:57:04.0984 2276 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys

2011/03/07 19:57:05.0281 2276 SNP2UVC (0302bc619d4a723317e7f8eb0c362bd3) C:\WINDOWS\system32\DRIVERS\snp2uvc.sys

2011/03/07 19:57:05.0500 2276 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys

2011/03/07 19:57:05.0562 2276 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys

2011/03/07 19:57:05.0734 2276 sr (1193ef00869f6367367e6e7cb96be325) C:\WINDOWS\system32\DRIVERS\sr.sys

2011/03/07 19:57:05.0828 2276 Srv (0f6aefad3641a657e18081f52d0c15af) C:\WINDOWS\system32\DRIVERS\srv.sys

2011/03/07 19:57:05.0937 2276 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys

2011/03/07 19:57:06.0109 2276 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys

2011/03/07 19:57:06.0203 2276 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys

2011/03/07 19:57:06.0343 2276 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys

2011/03/07 19:57:06.0390 2276 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys

2011/03/07 19:57:06.0453 2276 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys

2011/03/07 19:57:06.0500 2276 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys

2011/03/07 19:57:06.0593 2276 SynTP (3b7b7ab4a42321f6c49d1ab0e27d89c4) C:\WINDOWS\system32\DRIVERS\SynTP.sys

2011/03/07 19:57:06.0781 2276 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys

2011/03/07 19:57:06.0921 2276 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys

2011/03/07 19:57:07.0093 2276 Tcpip6 (4e53bbcc4be37d7a4bd6ef1098c89ff7) C:\WINDOWS\system32\DRIVERS\tcpip6.sys

2011/03/07 19:57:07.0156 2276 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys

2011/03/07 19:57:07.0281 2276 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys

2011/03/07 19:57:07.0390 2276 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys

2011/03/07 19:57:07.0593 2276 TosIde (67b0bb00b577d37e54497e5fdfcaadc0) C:\WINDOWS\system32\DRIVERS\toside.sys

2011/03/07 19:57:07.0656 2276 tunmp (8f861eda21c05857eb8197300a92501c) C:\WINDOWS\system32\DRIVERS\tunmp.sys

2011/03/07 19:57:07.0812 2276 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys

2011/03/07 19:57:07.0890 2276 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys

2011/03/07 19:57:08.0078 2276 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys

2011/03/07 19:57:08.0156 2276 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys

2011/03/07 19:57:08.0343 2276 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys

2011/03/07 19:57:08.0421 2276 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys

2011/03/07 19:57:08.0578 2276 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys

2011/03/07 19:57:08.0656 2276 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys

2011/03/07 19:57:08.0828 2276 usbstor (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

2011/03/07 19:57:08.0906 2276 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys

2011/03/07 19:57:09.0046 2276 usbvideo (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys

2011/03/07 19:57:09.0109 2276 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys

2011/03/07 19:57:09.0328 2276 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys

2011/03/07 19:57:09.0359 2276 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys

2011/03/07 19:57:09.0421 2276 VolSnap (57187ec04878147e1f4f2d9224b12205) C:\WINDOWS\system32\drivers\VolSnap.sys

2011/03/07 19:57:09.0578 2276 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys

2011/03/07 19:57:09.0671 2276 Wdf01000 (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS\system32\Drivers\wdf01000.sys

2011/03/07 19:57:09.0890 2276 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys

2011/03/07 19:57:10.0031 2276 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys

2011/03/07 19:57:10.0312 2276 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS

2011/03/07 19:57:10.0671 2276 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys

2011/03/07 19:57:11.0000 2276 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys

2011/03/07 19:57:11.0343 2276 ZTEusbmdm6k (b8b466103280e45e391e876f05122607) C:\WINDOWS\system32\DRIVERS\ZTEusbmdm6k.sys

2011/03/07 19:57:11.0687 2276 ZTEusbnet (911ba85906bc7602c73441502abfb565) C:\WINDOWS\system32\DRIVERS\ZTEusbnet.sys

2011/03/07 19:57:11.0968 2276 ZTEusbnmea (69774b89725ddc4781e0eeb9809f3b20) C:\WINDOWS\system32\DRIVERS\ZTEusbnmea.sys

2011/03/07 19:57:12.0015 2276 ZTEusbser6k (b8b466103280e45e391e876f05122607) C:\WINDOWS\system32\DRIVERS\ZTEusbser6k.sys

2011/03/07 19:57:12.0062 2276 ZTEusbvoice (b8b466103280e45e391e876f05122607) C:\WINDOWS\system32\DRIVERS\ZTEusbvoice.sys

2011/03/07 19:57:12.0390 2276 ================================================================================

2011/03/07 19:57:12.0390 2276 Scan finished

2011/03/07 19:57:12.0390 2276 ================================================================================

DDS.txt:

DDS (Ver_10-12-12.02) - NTFSx86

Run by Leif at 19:59:09,34 on 2011-03-07

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_24

Microsoft Windows XP Home Edition 5.1.2600.3.1252.46.1053.18.1012.366 [GMT 1:00]

AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}

============== Running Processes ===============

C:\Program\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE

C:\WINDOWS\system32\svchost -k DcomLaunch

C:\WINDOWS\system32\svchost -k rpcss

c:\Program\Microsoft Security Client\Antimalware\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k NetworkService

C:\WINDOWS\system32\svchost.exe -k LocalService

C:\WINDOWS\system32\spoolsv.exe

C:\Program\Ant.com\IE add-on\AntUpdaterService.exe

C:\WINDOWS\system32\bgsvcgen.exe

C:\Program\Tele2 Connect\ATService.exe

C:\Program\Tele2 Connect\Connect.exe

C:\Program\IObit\IObit Security 360\IS360srv.exe

C:\WINDOWS\Explorer.EXE

C:\Program\Java\jre6\bin\jqs.exe

C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdnserv.exe

C:\WINDOWS\system32\lxdncoms.exe

C:\Program\Acer\Acer VCM\RS_Service.exe

C:\WINDOWS\system32\tcpsvcs.exe

C:\WINDOWS\system32\svchost.exe -k netsvcs

C:\Program\Intel\Intel Matrix Storage Manager\IAANTMon.exe

C:\Program\Intel\Intel Matrix Storage Manager\iaanotif.exe

C:\Program\Synaptics\SynTP\SynTPEnh.exe

C:\Program\Microsoft Security Client\msseces.exe

C:\Program\Tific\Tific Client G1\ConnecteSupport.exe

C:\WINDOWS\System32\alg.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program\Launch Manager\LManager.exe

C:\Program\Spybot - Search & Destroy\TeaTimer.exe

C:\Program\Tele2 Connect\WVPNMonitor.exe

C:\Program\DesktopEarth\DesktopEarth.exe

C:\WINDOWS\system32\igfxext.exe

C:\WINDOWS\system32\igfxsrvc.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\Program\Delade filer\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

C:\Program\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Leif\Skrivbord\dds.scr

C:\WINDOWS\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = about:blank

uSearch Page = hxxp://g.msn.se/0SESVSE/SAOS01?FORM=TOOLBR

uDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=041d&s=0&o=xph&d=0709&m=ao531h

uSearch Bar = hxxp://g.msn.se/0SESVSE/SAOS01?FORM=TOOLBR

uInternet Settings,ProxyServer = http=127.0.0.1:33440

mURLSearchHooks: H - No File

BHO: Lexmark Verktygsfält: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - c:\program\lexmark toolbar\toolband.dll

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program\delade filer\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Open FVD Suite IE Plugin: {2b171655-a70c-5c18-b693-6cb5dc269d44} - c:\program\fvdiep~1\FVDIEPlugin_1.dll

BHO: Ant.com browser helper (video detector): {346fde31-dff9-418a-90c8-ba31dc9ff2ef} - c:\program\ant.com\ie add-on\Download.dll

BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\program\spybot~1\SDHelper.dll

BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program\micros~2\office14\GROOVEEX.DLL

BHO: Windows Live inloggningshjälpen: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program\delade filer\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program\delade filer\adobe\acrobat\activex\AcroIEFavClient.dll

BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\program\micros~2\office14\URLREDIR.DLL

BHO: Windows Live Toolbar Helper: {bdbd1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program\windows live toolbar\msntb.dll

BHO: 1 (0x1) - No File

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - c:\program\delade filer\adobe\acrobat\activex\AcroIEFavClient.dll

BHO: IEButton Class: {f81d52bf-f2f1-4f49-bf5f-05664e803039} - c:\program\unh solutions\flash saving plugin\FlashSButton.dll

TB: Lexmark Verktygsfält: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - c:\program\lexmark toolbar\toolband.dll

TB: FVD Suite IE Plugin: {2b171655-a70c-5c18-b693-6cb5dc269d41} - c:\program\fvdiep~1\FVDIEPlugin_1.dll

TB: {0BF43445-2F28-4351-9252-17FE6E806AA0} - No File

TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File

TB: Ant.com Download Toolbar: {2e924f4f-67f0-4bd8-9560-49f468e843d2} - c:\program\ant.com\ie add-on\AntToolbar.dll

TB: Windows Live Toolbar: {bdad1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program\windows live toolbar\msntb.dll

TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program\delade filer\adobe\acrobat\activex\AcroIEFavClient.dll

TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File

TB: {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - No File

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [Advanced SystemCare 3] :"c:\program\iobit\advanced systemcare 3\AWC.exe" /startup

uRun: [LManager] c:\program\launch manager\LManager.exe

uRun: [Process Hacker 2] :"c:\program\process hacker 2\ProcessHacker.exe"

uRun: [spybotSD TeaTimer] c:\program\spybot - search & destroy\TeaTimer.exe

mRun: [iAAnotif] c:\program\intel\intel matrix storage manager\iaanotif.exe

mRun: [Alcmtr] :ALCMTR.EXE

mRun: [synTPEnh] c:\program\synaptics\syntp\SynTPEnh.exe

mRun: [iObit Security 360] :"c:\program\iobit\iobit security 360\IS360tray.exe" /autostart

mRun: [QuickTime Task] "c:\program\quicktime\qttask.exe" -atboottime

mRun: [MSC] "c:\program\microsoft security client\msseces.exe" -hide -runkey

mRun: [Adobe Reader Speed Launcher] :"c:\program\adobe\reader 9.0\reader\Reader_sl.exe"

mRun: [Adobe ARM] :"c:\program\delade filer\adobe\arm\1.0\AdobeARM.exe"

mRun: [Adobe Acrobat Speed Launcher] :"c:\program\adobe\acrobat 10.0\acrobat\Acrobat_sl.exe"

mRun: [Acrobat Assistant 8.0] :"c:\program\adobe\acrobat 10.0\acrobat\Acrotray.exe"

mRun: [ConnecteSupport] "c:\program\tific\tific client g1\ConnecteSupport.exe" /HIDE /ONLINECHECK /WAIT 5 /DEFLANG "Svenska" /SERVER t2connectsebg.tele2.com

mRun: [sunJavaUpdateSched] :"c:\program\delade filer\java\java update\jusched.exe"