internal power failure during restart and shut down


  1. Posts : 2
    windows 7 professional 32
       #1

    internal power failure during restart and shut down


    Hi,

    Need help here. The blue screen thingy popped out after i installed a certain software recently, and even uninstalling, delete and virus scan, it's still the same..My google chrome ceased to function all of a sudden too. I've followed the instructions for the BSOD reporting. Mine is a Windows 7 professional 32-bit, full retail. My original operating system was a windows vista 32bit before i upgrade it to windows 7. My windows 7 system was just installed recently, less than 3weeks. Please help!thanks alot!
      My Computer


  2. Posts : 5,705
    Win7 x64 + x86
       #2

    5 memory dumps in 1 day (07 May 2011)

    After we're finished here, please visit the PC manufacturer's website and update ALL drivers.
    Then visit Windows Update...Important Updates - and download/install Service Pack 1. This is important for the reliable functioning of your system.

    Your startups show this entry:
    R8388QA8U8
    c:\users\yan\appdata\local\temp\hnz.exe Yan-PC\Yan
    HKU\S-1-5-21-457023650-1641315942-786751149-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    All references to this file seem to point to a rootkit. I'd suggest going on over to the Security forums for assistance in removing this nasty bugger!!! It's located here: System Security - Windows 7 Forums

    BTW - the QVOD program seems to be having lots of problems. I'd suggest uninstalling it also.
      My Computer


  3. Posts : 5,705
    Win7 x64 + x86
       #3

    Just adding this info to complete the record of what's been analyzed - no need to do any of this until the rootkit is eradicated
    *****************************************************************************************
    OLDER DRIVERS PRESENT IN THE DUMP FILES
    - Create a System Restore Point prior to doing any of this. DO NOT mess with the drivers themselves - leave the Windows\System32\drivers directory alone unless we specifically direct you to it!
    - Please update these drivers from the device manufacturer's website - or uninstall them from your system. Reference links are included below.
    - DO NOT use Windows Update or the Update Drivers function of Device Manager.
    - Please feel free to post back about any drivers that you are having difficulty locating.
    - Windows Update exceptions may be noted below for Windows drivers:
    Code:
    
    amdxata.sys       Fri Mar 19 12:19:01 2010 (4BA3A3F5) - Windows Update will take care of this
    PxHelp20.sys      Tue Jun 23 19:16:17 2009 (4A416241)
    hpdskflt.sys      Fri Jul 16 11:02:49 2010 (4C407499)
    ssmdrv.sys        Tue May 05 06:05:18 2009 (4A000F5E)
    atikmdag.sys      Mon Aug 17 23:03:58 2009 (4A8A1A1E)
    taphss.sys        Wed Sep 09 16:55:14 2009 (4AA81632)
    NETw5s32.sys      Wed Jan 13 11:36:36 2010 (4B4DF694) - your Intel WiFi Link 5100 AGN wireless driver
    yk62x86.sys       Mon Feb 23 09:44:18 2009 (49A2B642)
    Accelerometer.sys Fri Jul 16 11:02:49 2010 (4C407499)
    cpqbttn.sys       Tue Feb 23 14:52:19 2010 (4B8431F3)
    AGRSM.sys         Mon Nov 10 09:56:37 2008 (49184BA5)
    avgntflt.sys      Thu Nov 11 10:54:47 2010 (4CDC11C7)
    
    http://www.carrona.org/dvrref.html#amdxata.sys
    http://www.carrona.org/dvrref.html#PxHelp20.sys
    http://www.carrona.org/dvrref.html#hpdskflt.sys
    http://www.carrona.org/dvrref.html#ssmdrv.sys
    http://www.carrona.org/dvrref.html#atikmdag.sys
    http://www.carrona.org/dvrref.html#taphss.sys
    http://www.carrona.org/dvrref.html#yk62x86.sys
    http://www.carrona.org/dvrref.html#Accelerometer.sys
    http://www.carrona.org/dvrref.html#cpqbttn.sys
    http://www.carrona.org/dvrref.html#AGRSM.sys
    http://www.carrona.org/dvrref.html#avgntflt.sys
    After we're finished here, please visit the PC manufacturer's website and update ALL drivers.
    Then visit Windows Update...Important Updates - and download/install Service Pack 1. This is important for the reliable functioning of your system.

    BSOD BUGCHECK SUMMARY
    Code:
    
    Built by: 7600.16695.x86fre.win7_gdr.101026-1503
    Debug session time: Sat May  7 11:28:23.068 2011 (UTC - 4:00)
    System Uptime: 0 days 0:08:18.940
    BUGCHECK_STR:  0xA0
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    PROCESS_NAME:  wininit.exe
    FAILURE_BUCKET_ID:  0xA0_nt!PopAllocateIrp+a0
    Bugcheck code 000000A0
    Arguments 00000001 00000006 861f2768 00000000
    BiosVersion = 68PZD Ver. F.05
    BiosReleaseDate = 07/29/2008
    CPUID:        "Intel(R) Core(TM)2 Duo CPU     T5670  @ 1.80GHz"
    MaxSpeed:     1800
    CurrentSpeed: 1795
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    Built by: 7600.16695.x86fre.win7_gdr.101026-1503
    Debug session time: Sat May  7 11:18:42.473 2011 (UTC - 4:00)
    System Uptime: 0 days 0:53:55.346
    BUGCHECK_STR:  0xA0
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    PROCESS_NAME:  wininit.exe
    FAILURE_BUCKET_ID:  0xA0_nt!PopAllocateIrp+a0
    Bugcheck code 000000A0
    Arguments 00000001 00000006 861f2d18 00000000
    BiosVersion = 68PZD Ver. F.05
    BiosReleaseDate = 07/29/2008
    CPUID:        "Intel(R) Core(TM)2 Duo CPU     T5670  @ 1.80GHz"
    MaxSpeed:     1800
    CurrentSpeed: 1795
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    Built by: 7600.16695.x86fre.win7_gdr.101026-1503
    Debug session time: Sat May  7 10:21:39.537 2011 (UTC - 4:00)
    System Uptime: 0 days 0:11:07.410
    BUGCHECK_STR:  0xA0
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    PROCESS_NAME:  wininit.exe
    FAILURE_BUCKET_ID:  0xA0_nt!PopAllocateIrp+a0
    Bugcheck code 000000A0
    Arguments 00000001 00000006 861f2d18 00000000
    BiosVersion = 68PZD Ver. F.05
    BiosReleaseDate = 07/29/2008
    CPUID:        "Intel(R) Core(TM)2 Duo CPU     T5670  @ 1.80GHz"
    MaxSpeed:     1800
    CurrentSpeed: 1795
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    Built by: 7600.16695.x86fre.win7_gdr.101026-1503
    Debug session time: Sat May  7 10:07:01.468 2011 (UTC - 4:00)
    System Uptime: 0 days 0:01:18.968
    BUGCHECK_STR:  0xA0
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    PROCESS_NAME:  wininit.exe
    FAILURE_BUCKET_ID:  0xA0_nt!PopAllocateIrp+a0
    Bugcheck code 000000A0
    Arguments 00000001 00000006 851dbd18 00000000
    BiosVersion = 68PZD Ver. F.05
    BiosReleaseDate = 07/29/2008
    CPUID:        "Intel(R) Core(TM)2 Duo CPU     T5670  @ 1.80GHz"
    MaxSpeed:     1800
    CurrentSpeed: 1795
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    Built by: 7600.16695.x86fre.win7_gdr.101026-1503
    Debug session time: Sat May  7 10:03:15.621 2011 (UTC - 4:00)
    System Uptime: 0 days 11:08:57.493
    BUGCHECK_STR:  0xA0
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    PROCESS_NAME:  wininit.exe
    FAILURE_BUCKET_ID:  0xA0_nt!PopAllocateIrp+a0
    Bugcheck code 000000A0
    Arguments 00000001 00000006 85ff2d18 00000000
    BiosVersion = 68PZD Ver. F.05
    BiosReleaseDate = 07/29/2008
    CPUID:        "Intel(R) Core(TM)2 Duo CPU     T5670  @ 1.80GHz"
    MaxSpeed:     1800
    CurrentSpeed: 1795
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
      
      
      My Computer


  4. Posts : 2
    windows 7 professional 32
    Thread Starter
       #4

    okay..first of all..thanks for replying to my thread, really a life-saver!

    i've browse around the forum here and came across removing rootkits with TDSSKiller. Already downloaded it, scan and yes, there is one rootkit that popped out in the radar..Rebooted it to cure it twice, once in normal mode and another in safe mode. It seems to work cause' it finally rebooted without the BSOD popping out. My Google Chrome seems to working again and no weird anomalies is happening like what happened before. I just hope it stays that way. Below is the report from the TDSS:


    2011/05/08 12:05:03.0599 2476 TDSS rootkit removing tool 2.5.0.0 May 1 2011 14:20:16
    2011/05/08 12:05:04.0450 2476 ================================================================================
    2011/05/08 12:05:04.0450 2476 SystemInfo:
    2011/05/08 12:05:04.0451 2476
    2011/05/08 12:05:04.0451 2476 OS Version: 6.1.7600 ServicePack: 0.0
    2011/05/08 12:05:04.0451 2476 Product type: Workstation
    2011/05/08 12:05:04.0451 2476 ComputerName: YAN-PC
    2011/05/08 12:05:04.0451 2476 UserName: Yan
    2011/05/08 12:05:04.0451 2476 Windows directory: C:\Windows
    2011/05/08 12:05:04.0451 2476 System windows directory: C:\Windows
    2011/05/08 12:05:04.0452 2476 Processor architecture: Intel x86
    2011/05/08 12:05:04.0452 2476 Number of processors: 2
    2011/05/08 12:05:04.0452 2476 Page size: 0x1000
    2011/05/08 12:05:04.0452 2476 Boot type: Normal boot
    2011/05/08 12:05:04.0452 2476 ================================================================================
    2011/05/08 12:05:04.0812 2476 Initialize success
    2011/05/08 12:14:34.0531 3592 ================================================================================
    2011/05/08 12:14:34.0531 3592 Scan started
    2011/05/08 12:14:34.0531 3592 Mode: Manual;
    2011/05/08 12:14:34.0531 3592 ================================================================================
    2011/05/08 12:14:35.0108 3592 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\Windows\system32\DRIVERS\1394ohci.sys
    2011/05/08 12:14:35.0183 3592 Accelerometer (465b6baaba53a628f7252846d0e900ee) C:\Windows\system32\DRIVERS\Accelerometer.sys
    2011/05/08 12:14:35.0231 3592 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\Windows\system32\DRIVERS\ACPI.sys
    2011/05/08 12:14:35.0329 3592 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\Windows\system32\DRIVERS\acpipmi.sys
    2011/05/08 12:14:35.0416 3592 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
    2011/05/08 12:14:35.0477 3592 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
    2011/05/08 12:14:35.0546 3592 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
    2011/05/08 12:14:35.0653 3592 AFD (ddc040fdb01ef1712a6b13e52afb104c) C:\Windows\system32\drivers\afd.sys
    2011/05/08 12:14:35.0760 3592 AgereSoftModem (7e10e3bb9b258ad8a9300f91214d67b9) C:\Windows\system32\DRIVERS\AGRSM.sys
    2011/05/08 12:14:35.0852 3592 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\DRIVERS\agp440.sys
    2011/05/08 12:14:35.0938 3592 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
    2011/05/08 12:14:36.0075 3592 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\DRIVERS\aliide.sys
    2011/05/08 12:14:36.0130 3592 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\DRIVERS\amdagp.sys
    2011/05/08 12:14:36.0197 3592 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\DRIVERS\amdide.sys
    2011/05/08 12:14:36.0259 3592 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
    2011/05/08 12:14:36.0298 3592 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
    2011/05/08 12:14:36.0374 3592 amdsata (19ce906b4cdc11fc4fef5745f33a63b6) C:\Windows\system32\drivers\amdsata.sys
    2011/05/08 12:14:36.0424 3592 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
    2011/05/08 12:14:36.0489 3592 amdxata (869e67d66be326a5a9159fba8746fa70) C:\Windows\system32\drivers\amdxata.sys
    2011/05/08 12:14:36.0565 3592 AppID (feb834c02ce1e84b6a38f953ca067706) C:\Windows\system32\drivers\appid.sys
    2011/05/08 12:14:36.0670 3592 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
    2011/05/08 12:14:36.0725 3592 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
    2011/05/08 12:14:36.0800 3592 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
    2011/05/08 12:14:36.0832 3592 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\DRIVERS\atapi.sys
    2011/05/08 12:14:37.0037 3592 atikmdag (04f09923a393e4e0e8453a8f78361e73) C:\Windows\system32\DRIVERS\atikmdag.sys
    2011/05/08 12:14:37.0273 3592 avipbb (5fedef54757b34fb611b9ec8fb399364) C:\Windows\system32\DRIVERS\avipbb.sys
    2011/05/08 12:14:37.0351 3592 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
    2011/05/08 12:14:37.0449 3592 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
    2011/05/08 12:14:37.0565 3592 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
    2011/05/08 12:14:37.0628 3592 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
    2011/05/08 12:14:37.0700 3592 bowser (9a5c671b7fbae4865149bb11f59b91b2) C:\Windows\system32\DRIVERS\bowser.sys
    2011/05/08 12:14:37.0742 3592 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
    2011/05/08 12:14:37.0783 3592 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
    2011/05/08 12:14:37.0931 3592 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
    2011/05/08 12:14:38.0041 3592 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
    2011/05/08 12:14:38.0085 3592 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
    2011/05/08 12:14:38.0113 3592 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
    2011/05/08 12:14:38.0153 3592 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
    2011/05/08 12:14:38.0212 3592 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
    2011/05/08 12:14:38.0323 3592 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\Windows\system32\DRIVERS\cdrom.sys
    2011/05/08 12:14:38.0383 3592 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
    2011/05/08 12:14:38.0456 3592 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
    2011/05/08 12:14:38.0643 3592 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
    2011/05/08 12:14:38.0726 3592 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\DRIVERS\cmdide.sys
    2011/05/08 12:14:38.0778 3592 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
    2011/05/08 12:14:38.0835 3592 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
    2011/05/08 12:14:38.0891 3592 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\Windows\system32\DRIVERS\CompositeBus.sys
    2011/05/08 12:14:38.0984 3592 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
    2011/05/08 12:14:39.0060 3592 CSC (27c9490bdd0ae48911ab8cf1932591ed) C:\Windows\system32\drivers\csc.sys
    2011/05/08 12:14:39.0136 3592 DfsC (8e09e52ee2e3ceb199ef3dd99cf9e3fb) C:\Windows\system32\Drivers\dfsc.sys
    2011/05/08 12:14:39.0175 3592 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
    2011/05/08 12:14:39.0253 3592 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
    2011/05/08 12:14:39.0329 3592 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
    2011/05/08 12:14:39.0401 3592 DXGKrnl (1679a4669326cb1a67cc95658d273234) C:\Windows\System32\drivers\dxgkrnl.sys
    2011/05/08 12:14:39.0522 3592 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
    2011/05/08 12:14:39.0673 3592 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
    2011/05/08 12:14:39.0791 3592 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\DRIVERS\errdev.sys
    2011/05/08 12:14:39.0873 3592 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
    2011/05/08 12:14:39.0916 3592 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
    2011/05/08 12:14:39.0973 3592 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
    2011/05/08 12:14:40.0030 3592 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
    2011/05/08 12:14:40.0096 3592 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
    2011/05/08 12:14:40.0145 3592 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
    2011/05/08 12:14:40.0184 3592 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
    2011/05/08 12:14:40.0238 3592 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
    2011/05/08 12:14:40.0274 3592 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
    2011/05/08 12:14:40.0345 3592 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\Windows\system32\DRIVERS\fvevol.sys
    2011/05/08 12:14:40.0430 3592 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
    2011/05/08 12:14:40.0526 3592 HBtnKey (c172f0d0329e46513b09e1fc60a27b9d) C:\Windows\system32\DRIVERS\cpqbttn.sys
    2011/05/08 12:14:40.0559 3592 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
    2011/05/08 12:14:40.0635 3592 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\Windows\system32\drivers\HdAudio.sys
    2011/05/08 12:14:40.0729 3592 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\Windows\system32\DRIVERS\HDAudBus.sys
    2011/05/08 12:14:40.0764 3592 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
    2011/05/08 12:14:40.0798 3592 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
    2011/05/08 12:14:40.0838 3592 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
    2011/05/08 12:14:40.0926 3592 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\Windows\system32\DRIVERS\hidusb.sys
    2011/05/08 12:14:41.0028 3592 hpdskflt (d5c35e6416a379c445cda826b9fe452f) C:\Windows\system32\DRIVERS\hpdskflt.sys
    2011/05/08 12:14:41.0100 3592 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\DRIVERS\HpSAMD.sys
    2011/05/08 12:14:41.0189 3592 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\Windows\system32\drivers\HTTP.sys
    2011/05/08 12:14:41.0260 3592 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\Windows\system32\drivers\hwpolicy.sys
    2011/05/08 12:14:41.0334 3592 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\DRIVERS\i8042prt.sys
    2011/05/08 12:14:41.0414 3592 iaStorV (71f1a494fedf4b33c02c4a6a28d6d9e9) C:\Windows\system32\drivers\iaStorV.sys
    2011/05/08 12:14:41.0472 3592 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
    2011/05/08 12:14:41.0554 3592 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\DRIVERS\intelide.sys
    2011/05/08 12:14:41.0600 3592 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
    2011/05/08 12:14:41.0668 3592 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
    2011/05/08 12:14:41.0705 3592 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\Windows\system32\DRIVERS\IPMIDrv.sys
    2011/05/08 12:14:41.0742 3592 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
    2011/05/08 12:14:41.0787 3592 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
    2011/05/08 12:14:41.0841 3592 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\DRIVERS\isapnp.sys
    2011/05/08 12:14:41.0886 3592 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\Windows\system32\DRIVERS\msiscsi.sys
    2011/05/08 12:14:41.0934 3592 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
    2011/05/08 12:14:41.0990 3592 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\Windows\system32\DRIVERS\kbdhid.sys
    2011/05/08 12:14:42.0028 3592 KSecDD (e36a061ec11b373826905b21be10948f) C:\Windows\system32\Drivers\ksecdd.sys
    2011/05/08 12:14:42.0087 3592 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\Windows\system32\Drivers\ksecpkg.sys
    2011/05/08 12:14:42.0201 3592 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
    2011/05/08 12:14:42.0257 3592 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
    2011/05/08 12:14:42.0294 3592 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
    2011/05/08 12:14:42.0338 3592 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
    2011/05/08 12:14:42.0384 3592 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
    2011/05/08 12:14:42.0417 3592 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
    2011/05/08 12:14:42.0486 3592 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
    2011/05/08 12:14:42.0537 3592 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
    2011/05/08 12:14:42.0611 3592 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
    2011/05/08 12:14:42.0659 3592 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
    2011/05/08 12:14:42.0739 3592 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
    2011/05/08 12:14:42.0779 3592 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
    2011/05/08 12:14:42.0828 3592 mountmgr (921c18727c5920d6c0300736646931c2) C:\Windows\system32\drivers\mountmgr.sys
    2011/05/08 12:14:42.0873 3592 mpio (2af5997438c55fb79d33d015c30e1974) C:\Windows\system32\DRIVERS\mpio.sys
    2011/05/08 12:14:42.0994 3592 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
    2011/05/08 12:14:43.0069 3592 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\Windows\system32\drivers\mrxdav.sys
    2011/05/08 12:14:43.0132 3592 mrxsmb (b4c76ef46322a9711c7b0f4e21ef6ea5) C:\Windows\system32\DRIVERS\mrxsmb.sys
    2011/05/08 12:14:43.0183 3592 mrxsmb10 (e593d45024a3fdd11e93cc4a6ca91101) C:\Windows\system32\DRIVERS\mrxsmb10.sys
    2011/05/08 12:14:43.0231 3592 mrxsmb20 (a9f86c82c9cc3b679cc3957e1183a30f) C:\Windows\system32\DRIVERS\mrxsmb20.sys
    2011/05/08 12:14:43.0274 3592 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\Windows\system32\DRIVERS\msahci.sys
    2011/05/08 12:14:43.0322 3592 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\Windows\system32\DRIVERS\msdsm.sys
    2011/05/08 12:14:43.0393 3592 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
    2011/05/08 12:14:43.0435 3592 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
    2011/05/08 12:14:43.0492 3592 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\DRIVERS\msisadrv.sys
    2011/05/08 12:14:43.0603 3592 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
    2011/05/08 12:14:43.0742 3592 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
    2011/05/08 12:14:43.0778 3592 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
    2011/05/08 12:14:43.0827 3592 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
    2011/05/08 12:14:43.0881 3592 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys
    2011/05/08 12:14:43.0957 3592 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
    2011/05/08 12:14:44.0012 3592 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
    2011/05/08 12:14:44.0046 3592 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
    2011/05/08 12:14:44.0122 3592 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
    2011/05/08 12:14:44.0189 3592 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\Windows\system32\drivers\ndis.sys
    2011/05/08 12:14:44.0275 3592 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
    2011/05/08 12:14:44.0329 3592 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
    2011/05/08 12:14:44.0365 3592 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\Windows\system32\DRIVERS\ndisuio.sys
    2011/05/08 12:14:44.0396 3592 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\Windows\system32\DRIVERS\ndiswan.sys
    2011/05/08 12:14:44.0457 3592 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\Windows\system32\drivers\NDProxy.sys
    2011/05/08 12:14:44.0510 3592 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
    2011/05/08 12:14:44.0573 3592 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\Windows\system32\DRIVERS\netbt.sys
    2011/05/08 12:14:44.0851 3592 NETw5s32 (5b2dfa9c5c02ddf2a113cc0f551b59df) C:\Windows\system32\DRIVERS\NETw5s32.sys
    2011/05/08 12:14:45.0166 3592 netw5v32 (58218ec6b61b1169cf54aab0d00f5fe2) C:\Windows\system32\DRIVERS\netw5v32.sys
    2011/05/08 12:14:45.0349 3592 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
    2011/05/08 12:14:45.0415 3592 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
    2011/05/08 12:14:45.0463 3592 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
    2011/05/08 12:14:45.0576 3592 Ntfs (187002ce05693c306f43c873f821381f) C:\Windows\system32\drivers\Ntfs.sys
    2011/05/08 12:14:45.0718 3592 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
    2011/05/08 12:14:45.0785 3592 nvraid (f1b0bed906f97e16f6d0c3629d2f21c6) C:\Windows\system32\drivers\nvraid.sys
    2011/05/08 12:14:45.0836 3592 nvstor (4520b63899e867f354ee012d34e11536) C:\Windows\system32\drivers\nvstor.sys
    2011/05/08 12:14:45.0889 3592 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\DRIVERS\nv_agp.sys
    2011/05/08 12:14:45.0970 3592 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\DRIVERS\ohci1394.sys
    2011/05/08 12:14:46.0080 3592 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
    2011/05/08 12:14:46.0110 3592 partmgr (ff4218952b51de44fe910953a3e686b9) C:\Windows\system32\drivers\partmgr.sys
    2011/05/08 12:14:46.0147 3592 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
    2011/05/08 12:14:46.0186 3592 pci (c858cb77c577780ecc456a892e7e7d0f) C:\Windows\system32\DRIVERS\pci.sys
    2011/05/08 12:14:46.0241 3592 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\DRIVERS\pciide.sys
    2011/05/08 12:14:46.0293 3592 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
    2011/05/08 12:14:46.0346 3592 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
    2011/05/08 12:14:46.0398 3592 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
    2011/05/08 12:14:46.0583 3592 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
    2011/05/08 12:14:46.0637 3592 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
    2011/05/08 12:14:46.0712 3592 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
    2011/05/08 12:14:46.0791 3592 PxHelp20 (40fedd328f98245ad201cf5f9f311724) C:\Windows\system32\Drivers\PxHelp20.sys
    2011/05/08 12:14:46.0894 3592 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
    2011/05/08 12:14:46.0994 3592 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
    2011/05/08 12:14:47.0061 3592 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
    2011/05/08 12:14:47.0109 3592 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
    2011/05/08 12:14:47.0167 3592 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
    2011/05/08 12:14:47.0235 3592 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
    2011/05/08 12:14:47.0316 3592 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
    2011/05/08 12:14:47.0351 3592 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
    2011/05/08 12:14:47.0400 3592 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\Windows\system32\DRIVERS\rdbss.sys
    2011/05/08 12:14:47.0435 3592 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
    2011/05/08 12:14:47.0466 3592 RDPCDD (1e016846895b15a99f9a176a05029075) C:\Windows\system32\DRIVERS\RDPCDD.sys
    2011/05/08 12:14:47.0571 3592 RDPDR (c5ff95883ffef704d50c40d21cfb3ab5) C:\Windows\system32\drivers\rdpdr.sys
    2011/05/08 12:14:47.0664 3592 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
    2011/05/08 12:14:47.0704 3592 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
    2011/05/08 12:14:47.0745 3592 RDPWD (801371ba9782282892d00aadb08ee367) C:\Windows\system32\drivers\RDPWD.sys
    2011/05/08 12:14:47.0826 3592 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\Windows\system32\drivers\rdyboost.sys
    2011/05/08 12:14:48.0032 3592 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
    2011/05/08 12:14:48.0086 3592 s3cap (5423d8437051e89dd34749f242c98648) C:\Windows\system32\DRIVERS\vms3cap.sys
    2011/05/08 12:14:48.0150 3592 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\Windows\system32\DRIVERS\sbp2port.sys
    2011/05/08 12:14:48.0188 3592 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\Windows\system32\DRIVERS\scfilter.sys
    2011/05/08 12:14:48.0271 3592 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
    2011/05/08 12:14:48.0336 3592 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
    2011/05/08 12:14:48.0384 3592 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
    2011/05/08 12:14:48.0441 3592 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
    2011/05/08 12:14:48.0506 3592 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\DRIVERS\sffdisk.sys
    2011/05/08 12:14:48.0561 3592 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\DRIVERS\sffp_mmc.sys
    2011/05/08 12:14:48.0613 3592 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) C:\Windows\system32\DRIVERS\sffp_sd.sys
    2011/05/08 12:14:48.0657 3592 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
    2011/05/08 12:14:48.0718 3592 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\DRIVERS\sisagp.sys
    2011/05/08 12:14:48.0780 3592 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
    2011/05/08 12:14:48.0844 3592 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
    2011/05/08 12:14:48.0903 3592 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
    2011/05/08 12:14:48.0967 3592 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
    2011/05/08 12:14:49.0054 3592 srv (4a9b0f215de2519e2363f91df25c1e97) C:\Windows\system32\DRIVERS\srv.sys
    2011/05/08 12:14:49.0100 3592 srv2 (14c44875518ae1c982e54ea8c5f7fe28) C:\Windows\system32\DRIVERS\srv2.sys
    2011/05/08 12:14:49.0160 3592 srvnet (07a14223b0a50e76ade003fdf95d4fec) C:\Windows\system32\DRIVERS\srvnet.sys
    2011/05/08 12:14:49.0231 3592 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\Windows\system32\DRIVERS\ssmdrv.sys
    2011/05/08 12:14:49.0291 3592 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
    2011/05/08 12:14:49.0353 3592 storflt (957e346ca948668f2496a6ccf6ff82cc) C:\Windows\system32\DRIVERS\vmstorfl.sys
    2011/05/08 12:14:49.0392 3592 storvsc (d5751969dc3e4b88bf482ac8ec9fe019) C:\Windows\system32\DRIVERS\storvsc.sys
    2011/05/08 12:14:49.0472 3592 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys
    2011/05/08 12:14:49.0568 3592 taphss (0c3b2a9c4bd2dd9a6c2e4084314dd719) C:\Windows\system32\DRIVERS\taphss.sys
    2011/05/08 12:14:49.0663 3592 Tcpip (bb7f39c31c4a4417fd318e7cd184e225) C:\Windows\system32\drivers\tcpip.sys
    2011/05/08 12:14:49.0807 3592 TCPIP6 (bb7f39c31c4a4417fd318e7cd184e225) C:\Windows\system32\DRIVERS\tcpip.sys
    2011/05/08 12:14:49.0901 3592 tcpipreg (e64444523add154f86567c469bc0b17f) C:\Windows\system32\drivers\tcpipreg.sys
    2011/05/08 12:14:49.0949 3592 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\Windows\system32\drivers\tdpipe.sys
    2011/05/08 12:14:49.0993 3592 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\Windows\system32\drivers\tdtcp.sys
    2011/05/08 12:14:50.0035 3592 tdx (cb39e896a2a83702d1737bfd402b3542) C:\Windows\system32\DRIVERS\tdx.sys
    2011/05/08 12:14:50.0075 3592 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\Windows\system32\DRIVERS\termdd.sys
    2011/05/08 12:14:50.0168 3592 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\Windows\system32\DRIVERS\tssecsrv.sys
    2011/05/08 12:14:50.0241 3592 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\Windows\system32\DRIVERS\tunnel.sys
    2011/05/08 12:14:50.0286 3592 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
    2011/05/08 12:14:50.0331 3592 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\Windows\system32\DRIVERS\udfs.sys
    2011/05/08 12:14:50.0410 3592 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\DRIVERS\uliagpkx.sys
    2011/05/08 12:14:50.0474 3592 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\Windows\system32\DRIVERS\umbus.sys
    2011/05/08 12:14:50.0539 3592 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
    2011/05/08 12:14:50.0607 3592 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\Windows\system32\DRIVERS\usbccgp.sys
    2011/05/08 12:14:50.0642 3592 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\DRIVERS\usbcir.sys
    2011/05/08 12:14:50.0679 3592 usbehci (1c333bfd60f2fed2c7ad5daf533cb742) C:\Windows\system32\DRIVERS\usbehci.sys
    2011/05/08 12:14:50.0734 3592 usbhub (ee6ef93ccfa94fae8c6ab298273d8ae2) C:\Windows\system32\DRIVERS\usbhub.sys
    2011/05/08 12:14:50.0797 3592 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\Windows\system32\DRIVERS\usbohci.sys
    2011/05/08 12:14:50.0880 3592 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
    2011/05/08 12:14:50.0936 3592 USBSTOR (1c4287739a93594e57e2a9e6a3ed7353) C:\Windows\system32\DRIVERS\USBSTOR.SYS
    2011/05/08 12:14:50.0971 3592 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) C:\Windows\system32\DRIVERS\usbuhci.sys
    2011/05/08 12:14:51.0031 3592 usbvideo (b5f6a992d996282b7fae7048e50af83a) C:\Windows\System32\Drivers\usbvideo.sys
    2011/05/08 12:14:51.0116 3592 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\DRIVERS\vdrvroot.sys
    2011/05/08 12:14:51.0201 3592 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
    2011/05/08 12:14:51.0237 3592 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
    2011/05/08 12:14:51.0266 3592 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\Windows\system32\DRIVERS\vhdmp.sys
    2011/05/08 12:14:51.0319 3592 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\DRIVERS\viaagp.sys
    2011/05/08 12:14:51.0358 3592 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
    2011/05/08 12:14:51.0393 3592 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\DRIVERS\viaide.sys
    2011/05/08 12:14:51.0467 3592 vmbus (379b349f65f453d2a6e75ea6b7448e49) C:\Windows\system32\DRIVERS\vmbus.sys
    2011/05/08 12:14:51.0509 3592 VMBusHID (ec2bbab4b84d0738c6c83d2234dc36fe) C:\Windows\system32\DRIVERS\VMBusHID.sys
    2011/05/08 12:14:51.0563 3592 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\Windows\system32\DRIVERS\volmgr.sys
    2011/05/08 12:14:51.0612 3592 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
    2011/05/08 12:14:51.0663 3592 volsnap (58df9d2481a56edde167e51b334d44fd) C:\Windows\system32\DRIVERS\volsnap.sys
    2011/05/08 12:14:51.0716 3592 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
    2011/05/08 12:14:51.0781 3592 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\system32\DRIVERS\vwifibus.sys
    2011/05/08 12:14:51.0844 3592 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\Windows\system32\DRIVERS\vwififlt.sys
    2011/05/08 12:14:51.0907 3592 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
    2011/05/08 12:14:51.0965 3592 WANARP (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
    2011/05/08 12:14:51.0981 3592 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
    2011/05/08 12:14:52.0074 3592 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
    2011/05/08 12:14:52.0132 3592 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
    2011/05/08 12:14:52.0245 3592 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
    2011/05/08 12:14:52.0291 3592 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
    2011/05/08 12:14:52.0411 3592 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\DRIVERS\wmiacpi.sys
    2011/05/08 12:14:52.0490 3592 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
    2011/05/08 12:14:52.0567 3592 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\Windows\system32\drivers\WudfPf.sys
    2011/05/08 12:14:52.0639 3592 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\Windows\system32\DRIVERS\WUDFRd.sys
    2011/05/08 12:14:52.0745 3592 yukonw7 (b07c5b7efdf936ff93d4f540938725be) C:\Windows\system32\DRIVERS\yk62x86.sys
    2011/05/08 12:14:52.0824 3592 ================================================================================
    2011/05/08 12:14:52.0824 3592 Scan finished
    2011/05/08 12:14:52.0824 3592 ================================================================================

    So, to be clear here on the next step, create a System restore point, update the drivers as mentioned from the web and then download the Service Pack 1....anything I left out here?
      My Computer


  5. Posts : 5,705
    Win7 x64 + x86
       #5

    Normally one or two scannings with a single tool isn't sufficient to remove all infections. If you don't want to visit the Security forums for assistance, run several of these free online tools until the system comes up clean several times in a row: Free Online AntiMalware Scanners (read the details at the link)

    CAVEAT: I am not a malware removal expert. It takes an expert to ensure that all traces of the malware are gone. FYI - there is a new strain of the TDSS rootkit out - and I don't know what tools (if any) can locate it.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

й Designer Media Ltd
All times are GMT -5. The time now is 00:07.
Find Us