Tech Support Forum banner
Status
Not open for further replies.

Suspected Trojan Infection: Crippling Blue Screens

1.1K views 2 replies 2 participants last post by  amateur  
#1 ·
I've been having problems with my laptop which sprung up in the last week, caused by a trojan infection. I believe the harnig trojan is to blame, but obviously I am not sure(or else I wouldn't be here asking you to help me) and would appreciate any help in cleaning up my computer.

Sometimes a blue screen will pop up, and say that windows was forced to shut down and has deleted certain files, and to restart my computer.

I have read the pre-thread creation instructions...so here it goes.

dds.txt

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Nicholas at 10:11:35.65 on Tue 04/26/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.338 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe -k itlsvc
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\eiqsp.exe
C:\Program Files\Belkin\Router Setup and Monitor\BelkinSetup.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Nicholas\My Documents\Downloads\dds.scr
.
============== Pseudo HJT Report ===============
.
uInternet Settings,ProxyOverride = *.local
mWinlogon: Userinit=userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [UpdateMyDrivers] c:\program files\smarttweak software\updatemydrivers\UpdateMyDrivers.exe -t
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [Broadcom Wireless Manager UI] c:\windows\system32\WLTRAY.exe
mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\cli.exe" runtime -Delay
mRun: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe
mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW
mRun: [InstaLAN] "c:\program files\belkin\router setup and monitor\BelkinRouterMonitor.exe" startup
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [cftmon] c:\windows\system32\eiqsp.exe
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
StartupFolder: c:\docume~1\nicholas\startm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1276263130114
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1276265775390
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: AtiExtEvent - Ati2evxx.dll
Notify: itlntfy - itlnfw32.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\docume~1\nicholas\applic~1\mozilla\firefox\profiles\4wj5kwel.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/webhp?rls=ig
FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
.
============= SERVICES / DRIVERS ===============
.
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2009-12-2 165264]
R1 MpKsl359d6ee3;MpKsl359d6ee3;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKsl359d6ee3.sys [2011-4-24 28752]
R1 MpKsl36efbe3f;MpKsl36efbe3f;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKsl36efbe3f.sys [2011-4-25 28752]
R1 MpKsl4b8e5d56;MpKsl4b8e5d56;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKsl4b8e5d56.sys [2011-4-25 28752]
R1 MpKsl84efd55f;MpKsl84efd55f;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKsl84efd55f.sys [2011-4-24 28752]
R1 MpKsl869d6e8f;MpKsl869d6e8f;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKsl869d6e8f.sys [2011-4-24 28752]
R1 MpKslc23c408c;MpKslc23c408c;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKslc23c408c.sys [2011-4-25 28752]
R1 MpKslc8ff8cbe;MpKslc8ff8cbe;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKslc8ff8cbe.sys [2011-4-26 28752]
R1 MpKsldd17ef3a;MpKsldd17ef3a;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKsldd17ef3a.sys [2011-4-25 28752]
R1 MpKsled011474;MpKsled011474;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKsled011474.sys [2011-4-25 28752]
R1 MpKslfece8df6;MpKslfece8df6;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKslfece8df6.sys [2011-4-24 28752]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67656]
R2 itlperf;Intel CPU;c:\windows\system32\svchost.exe -k itlsvc [2008-4-14 14336]
S1 MpKsl00926725;MpKsl00926725;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bb50af53-dd04-4c82-9414-a49f3eaf2657}\mpksl00926725.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bb50af53-dd04-4c82-9414-a49f3eaf2657}\MpKsl00926725.sys [?]
S1 MpKsl0157a6c2;MpKsl0157a6c2;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{eb8dd224-5d66-4bf0-a43f-c071e7892bdd}\mpksl0157a6c2.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{eb8dd224-5d66-4bf0-a43f-c071e7892bdd}\MpKsl0157a6c2.sys [?]
S1 MpKsl016883c4;MpKsl016883c4;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4eca2494-23ec-43c5-b114-15264c5d4db5}\mpksl016883c4.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4eca2494-23ec-43c5-b114-15264c5d4db5}\MpKsl016883c4.sys [?]
S1 MpKsl0249749e;MpKsl0249749e;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7f6921f9-6d1d-4382-8eca-c57e4491192e}\mpksl0249749e.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7f6921f9-6d1d-4382-8eca-c57e4491192e}\MpKsl0249749e.sys [?]
S1 MpKsl05849af0;MpKsl05849af0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{306e06ce-7c8d-4338-9806-16a7401f8e87}\mpksl05849af0.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{306e06ce-7c8d-4338-9806-16a7401f8e87}\MpKsl05849af0.sys [?]
S1 MpKsl0c56a7ab;MpKsl0c56a7ab;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpksl0c56a7ab.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKsl0c56a7ab.sys [?]
S1 MpKsl0d14a5ad;MpKsl0d14a5ad;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{91a8b15b-4cf2-4331-a272-00115a75c4e5}\mpksl0d14a5ad.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{91a8b15b-4cf2-4331-a272-00115a75c4e5}\MpKsl0d14a5ad.sys [?]
S1 MpKsl0e174396;MpKsl0e174396;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpksl0e174396.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKsl0e174396.sys [?]
S1 MpKsl0e370af9;MpKsl0e370af9;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e51a68e3-1105-4132-95ee-d719bfa4ace6}\mpksl0e370af9.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e51a68e3-1105-4132-95ee-d719bfa4ace6}\MpKsl0e370af9.sys [?]
S1 MpKsl0ee85b1a;MpKsl0ee85b1a;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bb50af53-dd04-4c82-9414-a49f3eaf2657}\mpksl0ee85b1a.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bb50af53-dd04-4c82-9414-a49f3eaf2657}\MpKsl0ee85b1a.sys [?]
S1 MpKsl14c00db8;MpKsl14c00db8;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{fde03875-b664-4f4d-a367-8744cbb71461}\mpksl14c00db8.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{fde03875-b664-4f4d-a367-8744cbb71461}\MpKsl14c00db8.sys [?]
S1 MpKsl15ecafc0;MpKsl15ecafc0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{de131745-c79c-4431-9dcb-80c01ebec9ac}\mpksl15ecafc0.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{de131745-c79c-4431-9dcb-80c01ebec9ac}\MpKsl15ecafc0.sys [?]
S1 MpKsl165ee677;MpKsl165ee677;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpksl165ee677.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKsl165ee677.sys [?]
S1 MpKsl169224a2;MpKsl169224a2;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{401b725f-7e82-45a7-b550-0aa7da00d789}\mpksl169224a2.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{401b725f-7e82-45a7-b550-0aa7da00d789}\MpKsl169224a2.sys [?]
S1 MpKsl25473a36;MpKsl25473a36;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4eca2494-23ec-43c5-b114-15264c5d4db5}\mpksl25473a36.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4eca2494-23ec-43c5-b114-15264c5d4db5}\MpKsl25473a36.sys [?]
S1 MpKsl2735728e;MpKsl2735728e;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{810e7228-636a-4d1d-b3ab-198784068b7d}\mpksl2735728e.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{810e7228-636a-4d1d-b3ab-198784068b7d}\MpKsl2735728e.sys [?]
S1 MpKsl2948cede;MpKsl2948cede;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2bd9030e-99d5-4b08-b136-c5d11f9c576f}\mpksl2948cede.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2bd9030e-99d5-4b08-b136-c5d11f9c576f}\MpKsl2948cede.sys [?]
S1 MpKsl2af49d24;MpKsl2af49d24;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e3a3cc1-a95b-4ccb-b78d-816f06dc8f85}\mpksl2af49d24.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e3a3cc1-a95b-4ccb-b78d-816f06dc8f85}\MpKsl2af49d24.sys [?]
S1 MpKsl2d1c0ef8;MpKsl2d1c0ef8;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{87c65bce-b36f-48e9-ac85-62f19f849a9e}\mpksl2d1c0ef8.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{87c65bce-b36f-48e9-ac85-62f19f849a9e}\MpKsl2d1c0ef8.sys [?]
S1 MpKsl2e5c2530;MpKsl2e5c2530;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{401b725f-7e82-45a7-b550-0aa7da00d789}\mpksl2e5c2530.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{401b725f-7e82-45a7-b550-0aa7da00d789}\MpKsl2e5c2530.sys [?]
S1 MpKsl3177fd0f;MpKsl3177fd0f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5aa5207e-2a1f-4061-ab83-816a874eec20}\mpksl3177fd0f.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5aa5207e-2a1f-4061-ab83-816a874eec20}\MpKsl3177fd0f.sys [?]
S1 MpKsl325f28ee;MpKsl325f28ee;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cb756378-f087-44b4-bd77-540eb20f1aac}\mpksl325f28ee.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cb756378-f087-44b4-bd77-540eb20f1aac}\MpKsl325f28ee.sys [?]
S1 MpKsl33fd194c;MpKsl33fd194c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{fde03875-b664-4f4d-a367-8744cbb71461}\mpksl33fd194c.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{fde03875-b664-4f4d-a367-8744cbb71461}\MpKsl33fd194c.sys [?]
S1 MpKsl340e0754;MpKsl340e0754;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{36e027b6-a97d-42bb-a9ba-dbb51ddf4fde}\mpksl340e0754.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{36e027b6-a97d-42bb-a9ba-dbb51ddf4fde}\MpKsl340e0754.sys [?]
S1 MpKsl357871b9;MpKsl357871b9;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{98e74abb-6d13-444d-bdd1-19e8b6bc81f1}\mpksl357871b9.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{98e74abb-6d13-444d-bdd1-19e8b6bc81f1}\MpKsl357871b9.sys [?]
S1 MpKsl3976c7bf;MpKsl3976c7bf;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{401b725f-7e82-45a7-b550-0aa7da00d789}\mpksl3976c7bf.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{401b725f-7e82-45a7-b550-0aa7da00d789}\MpKsl3976c7bf.sys [?]
S1 MpKsl3ab22e23;MpKsl3ab22e23;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0441d2fb-a3d6-4374-80be-5d2e762711fe}\mpksl3ab22e23.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0441d2fb-a3d6-4374-80be-5d2e762711fe}\MpKsl3ab22e23.sys [?]
S1 MpKsl3da02597;MpKsl3da02597;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{98e74abb-6d13-444d-bdd1-19e8b6bc81f1}\mpksl3da02597.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{98e74abb-6d13-444d-bdd1-19e8b6bc81f1}\MpKsl3da02597.sys [?]
S1 MpKsl4037f4f4;MpKsl4037f4f4;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpksl4037f4f4.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKsl4037f4f4.sys [?]
S1 MpKsl4f5ab60c;MpKsl4f5ab60c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{fde03875-b664-4f4d-a367-8744cbb71461}\mpksl4f5ab60c.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{fde03875-b664-4f4d-a367-8744cbb71461}\MpKsl4f5ab60c.sys [?]
S1 MpKsl5a7e0c8f;MpKsl5a7e0c8f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3d80f15e-803d-4d77-9856-90de011b5d75}\mpksl5a7e0c8f.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3d80f15e-803d-4d77-9856-90de011b5d75}\MpKsl5a7e0c8f.sys [?]
S1 MpKsl5bfd7f2d;MpKsl5bfd7f2d;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpksl5bfd7f2d.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKsl5bfd7f2d.sys [?]
S1 MpKsl612bedcc;MpKsl612bedcc;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpksl612bedcc.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKsl612bedcc.sys [?]
S1 MpKsl61e28bc9;MpKsl61e28bc9;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0316076c-62e6-4af7-b4b5-279ca4542ac4}\mpksl61e28bc9.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0316076c-62e6-4af7-b4b5-279ca4542ac4}\MpKsl61e28bc9.sys [?]
S1 MpKsl63dbda59;MpKsl63dbda59;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bbe04489-7f7d-487a-8f09-a813a84208a4}\mpksl63dbda59.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bbe04489-7f7d-487a-8f09-a813a84208a4}\MpKsl63dbda59.sys [?]
S1 MpKsl6402e745;MpKsl6402e745;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5918c29f-ee8a-4128-9af5-32f0c1cfecb8}\mpksl6402e745.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5918c29f-ee8a-4128-9af5-32f0c1cfecb8}\MpKsl6402e745.sys [?]
S1 MpKsl65c1913c;MpKsl65c1913c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7f6921f9-6d1d-4382-8eca-c57e4491192e}\mpksl65c1913c.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7f6921f9-6d1d-4382-8eca-c57e4491192e}\MpKsl65c1913c.sys [?]
S1 MpKsl66c5fab7;MpKsl66c5fab7;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpksl66c5fab7.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKsl66c5fab7.sys [?]
S1 MpKsl670278e2;MpKsl670278e2;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d781e74e-ebd9-433b-b27e-05e4204d54ac}\mpksl670278e2.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d781e74e-ebd9-433b-b27e-05e4204d54ac}\MpKsl670278e2.sys [?]
S1 MpKsl688d94ff;MpKsl688d94ff;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cb756378-f087-44b4-bd77-540eb20f1aac}\mpksl688d94ff.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cb756378-f087-44b4-bd77-540eb20f1aac}\MpKsl688d94ff.sys [?]
S1 MpKsl69deda7e;MpKsl69deda7e;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9f2378f7-b59f-44b5-b055-fd71356d2cc4}\mpksl69deda7e.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9f2378f7-b59f-44b5-b055-fd71356d2cc4}\MpKsl69deda7e.sys [?]
S1 MpKsl6b6079f6;MpKsl6b6079f6;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4eca2494-23ec-43c5-b114-15264c5d4db5}\mpksl6b6079f6.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4eca2494-23ec-43c5-b114-15264c5d4db5}\MpKsl6b6079f6.sys [?]
S1 MpKsl6e14a473;MpKsl6e14a473;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{401b725f-7e82-45a7-b550-0aa7da00d789}\mpksl6e14a473.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{401b725f-7e82-45a7-b550-0aa7da00d789}\MpKsl6e14a473.sys [?]
S1 MpKsl6ed2bf37;MpKsl6ed2bf37;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e3a3cc1-a95b-4ccb-b78d-816f06dc8f85}\mpksl6ed2bf37.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e3a3cc1-a95b-4ccb-b78d-816f06dc8f85}\MpKsl6ed2bf37.sys [?]
S1 MpKsl78392f43;MpKsl78392f43;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{aa3b1b9c-1e74-46b6-a96c-9d5b351ced15}\mpksl78392f43.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{aa3b1b9c-1e74-46b6-a96c-9d5b351ced15}\MpKsl78392f43.sys [?]
S1 MpKsl7ad0ad54;MpKsl7ad0ad54;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{79ab8ba0-aa3f-4f3a-829e-f1c9e3a32ce1}\mpksl7ad0ad54.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{79ab8ba0-aa3f-4f3a-829e-f1c9e3a32ce1}\MpKsl7ad0ad54.sys [?]
S1 MpKsl7b7c746d;MpKsl7b7c746d;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4eca2494-23ec-43c5-b114-15264c5d4db5}\mpksl7b7c746d.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4eca2494-23ec-43c5-b114-15264c5d4db5}\MpKsl7b7c746d.sys [?]
S1 MpKsl8549620a;MpKsl8549620a;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{aa3b1b9c-1e74-46b6-a96c-9d5b351ced15}\mpksl8549620a.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{aa3b1b9c-1e74-46b6-a96c-9d5b351ced15}\MpKsl8549620a.sys [?]
S1 MpKsl86a5acbd;MpKsl86a5acbd;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{512d5daf-edae-4822-8289-6abc3020532c}\mpksl86a5acbd.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{512d5daf-edae-4822-8289-6abc3020532c}\MpKsl86a5acbd.sys [?]
S1 MpKsl8967119f;MpKsl8967119f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e3a3cc1-a95b-4ccb-b78d-816f06dc8f85}\mpksl8967119f.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e3a3cc1-a95b-4ccb-b78d-816f06dc8f85}\MpKsl8967119f.sys [?]
S1 MpKsl8f4407dc;MpKsl8f4407dc;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpksl8f4407dc.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKsl8f4407dc.sys [?]
S1 MpKsl91c3ccec;MpKsl91c3ccec;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3d80f15e-803d-4d77-9856-90de011b5d75}\mpksl91c3ccec.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3d80f15e-803d-4d77-9856-90de011b5d75}\MpKsl91c3ccec.sys [?]
S1 MpKsl91e85bbb;MpKsl91e85bbb;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpksl91e85bbb.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKsl91e85bbb.sys [?]
S1 MpKsl9223c053;MpKsl9223c053;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d781e74e-ebd9-433b-b27e-05e4204d54ac}\mpksl9223c053.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d781e74e-ebd9-433b-b27e-05e4204d54ac}\MpKsl9223c053.sys [?]
S1 MpKsl973c8f31;MpKsl973c8f31;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{adca32ad-d756-4e58-8a79-53983b34f594}\mpksl973c8f31.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{adca32ad-d756-4e58-8a79-53983b34f594}\MpKsl973c8f31.sys [?]
S1 MpKsl9c003887;MpKsl9c003887;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0316076c-62e6-4af7-b4b5-279ca4542ac4}\mpksl9c003887.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0316076c-62e6-4af7-b4b5-279ca4542ac4}\MpKsl9c003887.sys [?]
S1 MpKsl9c62eb32;MpKsl9c62eb32;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0441d2fb-a3d6-4374-80be-5d2e762711fe}\mpksl9c62eb32.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0441d2fb-a3d6-4374-80be-5d2e762711fe}\MpKsl9c62eb32.sys [?]
S1 MpKsl9eab1d93;MpKsl9eab1d93;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{34825739-d324-4e0b-9f72-859674dda064}\mpksl9eab1d93.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{34825739-d324-4e0b-9f72-859674dda064}\MpKsl9eab1d93.sys [?]
S1 MpKsl9f26e657;MpKsl9f26e657;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{79ab8ba0-aa3f-4f3a-829e-f1c9e3a32ce1}\mpksl9f26e657.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{79ab8ba0-aa3f-4f3a-829e-f1c9e3a32ce1}\MpKsl9f26e657.sys [?]
S1 MpKsl9fff50e1;MpKsl9fff50e1;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{401b725f-7e82-45a7-b550-0aa7da00d789}\mpksl9fff50e1.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{401b725f-7e82-45a7-b550-0aa7da00d789}\MpKsl9fff50e1.sys [?]
S1 MpKsla2ff3811;MpKsla2ff3811;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2f9ea2c6-e46f-4879-85d7-16889cfeecd9}\mpksla2ff3811.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2f9ea2c6-e46f-4879-85d7-16889cfeecd9}\MpKsla2ff3811.sys [?]
S1 MpKsla640b9a3;MpKsla640b9a3;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9f2378f7-b59f-44b5-b055-fd71356d2cc4}\mpksla640b9a3.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9f2378f7-b59f-44b5-b055-fd71356d2cc4}\MpKsla640b9a3.sys [?]
S1 MpKslae163fb2;MpKslae163fb2;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9f2378f7-b59f-44b5-b055-fd71356d2cc4}\mpkslae163fb2.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9f2378f7-b59f-44b5-b055-fd71356d2cc4}\MpKslae163fb2.sys [?]
S1 MpKslae8add27;MpKslae8add27;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9f2378f7-b59f-44b5-b055-fd71356d2cc4}\mpkslae8add27.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9f2378f7-b59f-44b5-b055-fd71356d2cc4}\MpKslae8add27.sys [?]
S1 MpKslaeef9d43;MpKslaeef9d43;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e3a3cc1-a95b-4ccb-b78d-816f06dc8f85}\mpkslaeef9d43.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e3a3cc1-a95b-4ccb-b78d-816f06dc8f85}\MpKslaeef9d43.sys [?]
S1 MpKslaf1c42c0;MpKslaf1c42c0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cb756378-f087-44b4-bd77-540eb20f1aac}\mpkslaf1c42c0.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cb756378-f087-44b4-bd77-540eb20f1aac}\MpKslaf1c42c0.sys [?]
S1 MpKslb1dcc573;MpKslb1dcc573;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{512d5daf-edae-4822-8289-6abc3020532c}\mpkslb1dcc573.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{512d5daf-edae-4822-8289-6abc3020532c}\MpKslb1dcc573.sys [?]
S1 MpKslb223a696;MpKslb223a696;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpkslb223a696.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKslb223a696.sys [?]
S1 MpKslb65d0eaf;MpKslb65d0eaf;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e51a68e3-1105-4132-95ee-d719bfa4ace6}\mpkslb65d0eaf.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e51a68e3-1105-4132-95ee-d719bfa4ace6}\MpKslb65d0eaf.sys [?]
S1 MpKslb89c7865;MpKslb89c7865;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{810e7228-636a-4d1d-b3ab-198784068b7d}\mpkslb89c7865.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{810e7228-636a-4d1d-b3ab-198784068b7d}\MpKslb89c7865.sys [?]
S1 MpKslb97f0897;MpKslb97f0897;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpkslb97f0897.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKslb97f0897.sys [?]
S1 MpKslc41c6c77;MpKslc41c6c77;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpkslc41c6c77.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKslc41c6c77.sys [?]
S1 MpKslca94256a;MpKslca94256a;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4eca2494-23ec-43c5-b114-15264c5d4db5}\mpkslca94256a.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4eca2494-23ec-43c5-b114-15264c5d4db5}\MpKslca94256a.sys [?]
S1 MpKslceb67700;MpKslceb67700;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cb47b945-d91a-43e6-bf24-0ca030756c67}\mpkslceb67700.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cb47b945-d91a-43e6-bf24-0ca030756c67}\MpKslceb67700.sys [?]
S1 MpKsld20c1d6b;MpKsld20c1d6b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e3a3cc1-a95b-4ccb-b78d-816f06dc8f85}\mpksld20c1d6b.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e3a3cc1-a95b-4ccb-b78d-816f06dc8f85}\MpKsld20c1d6b.sys [?]
S1 MpKsld47158a2;MpKsld47158a2;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3f06cf55-736e-448e-9385-f5e69b520294}\mpksld47158a2.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3f06cf55-736e-448e-9385-f5e69b520294}\MpKsld47158a2.sys [?]
S1 MpKsld656411c;MpKsld656411c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpksld656411c.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKsld656411c.sys [?]
S1 MpKsld74dd59a;MpKsld74dd59a;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpksld74dd59a.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKsld74dd59a.sys [?]
S1 MpKsldb4b5a98;MpKsldb4b5a98;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5f4d6aca-7989-4af3-8794-5cabe05ceda0}\mpksldb4b5a98.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5f4d6aca-7989-4af3-8794-5cabe05ceda0}\MpKsldb4b5a98.sys [?]
S1 MpKsldf28db62;MpKsldf28db62;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0441d2fb-a3d6-4374-80be-5d2e762711fe}\mpksldf28db62.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0441d2fb-a3d6-4374-80be-5d2e762711fe}\MpKsldf28db62.sys [?]
S1 MpKsle288fd00;MpKsle288fd00;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpksle288fd00.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKsle288fd00.sys [?]
S1 MpKsle451626f;MpKsle451626f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e51a68e3-1105-4132-95ee-d719bfa4ace6}\mpksle451626f.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e51a68e3-1105-4132-95ee-d719bfa4ace6}\MpKsle451626f.sys [?]
S1 MpKsle4d5939c;MpKsle4d5939c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\mpksle4d5939c.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46de468b-5141-40e5-835e-e9b4053cec5a}\MpKsle4d5939c.sys [?]
S1 MpKsle76fe56b;MpKsle76fe56b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{99b762be-e058-45a6-93ca-89bf5ec6c1dc}\mpksle76fe56b.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{99b762be-e058-45a6-93ca-89bf5ec6c1dc}\MpKsle76fe56b.sys [?]
S1 MpKsle7c8a3ae;MpKsle7c8a3ae;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4eca2494-23ec-43c5-b114-15264c5d4db5}\mpksle7c8a3ae.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4eca2494-23ec-43c5-b114-15264c5d4db5}\MpKsle7c8a3ae.sys [?]
S1 MpKslf02e386c;MpKslf02e386c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{6029b8b6-d3fe-4c6f-bda4-473b30edc6e8}\mpkslf02e386c.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{6029b8b6-d3fe-4c6f-bda4-473b30edc6e8}\MpKslf02e386c.sys [?]
S1 MpKslf15b3550;MpKslf15b3550;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bcbaa73a-1f36-4ea0-a2ad-42cd29aecae8}\mpkslf15b3550.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bcbaa73a-1f36-4ea0-a2ad-42cd29aecae8}\MpKslf15b3550.sys [?]
S1 MpKslf22f2cfd;MpKslf22f2cfd;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9f2378f7-b59f-44b5-b055-fd71356d2cc4}\mpkslf22f2cfd.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9f2378f7-b59f-44b5-b055-fd71356d2cc4}\MpKslf22f2cfd.sys [?]
S1 MpKslf240eac0;MpKslf240eac0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e3a3cc1-a95b-4ccb-b78d-816f06dc8f85}\mpkslf240eac0.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e3a3cc1-a95b-4ccb-b78d-816f06dc8f85}\MpKslf240eac0.sys [?]
S1 MpKslf2735d5c;MpKslf2735d5c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cb756378-f087-44b4-bd77-540eb20f1aac}\mpkslf2735d5c.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cb756378-f087-44b4-bd77-540eb20f1aac}\MpKslf2735d5c.sys [?]
S1 MpKslf6aad164;MpKslf6aad164;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e3a3cc1-a95b-4ccb-b78d-816f06dc8f85}\mpkslf6aad164.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e3a3cc1-a95b-4ccb-b78d-816f06dc8f85}\MpKslf6aad164.sys [?]
S1 MpKslf7b4c568;MpKslf7b4c568;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cb47b945-d91a-43e6-bf24-0ca030756c67}\mpkslf7b4c568.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cb47b945-d91a-43e6-bf24-0ca030756c67}\MpKslf7b4c568.sys [?]
S1 MpKslf7f57502;MpKslf7f57502;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0316076c-62e6-4af7-b4b5-279ca4542ac4}\mpkslf7f57502.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0316076c-62e6-4af7-b4b5-279ca4542ac4}\MpKslf7f57502.sys [?]
S1 MpKslf804cf12;MpKslf804cf12;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9f2378f7-b59f-44b5-b055-fd71356d2cc4}\mpkslf804cf12.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9f2378f7-b59f-44b5-b055-fd71356d2cc4}\MpKslf804cf12.sys [?]
S1 MpKslfdf9a5df;MpKslfdf9a5df;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b26f1345-ff06-432b-8cce-1d53b9f50fab}\mpkslfdf9a5df.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b26f1345-ff06-432b-8cce-1d53b9f50fab}\MpKslfdf9a5df.sys [?]
.
=============== Created Last 30 ================
.
2011-04-26 14:08:06 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKslc8ff8cbe.sys
2011-04-25 23:57:40 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKsled011474.sys
2011-04-25 22:00:22 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKslc23c408c.sys
2011-04-25 16:59:40 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKsl4032e712.sys
2011-04-25 15:55:27 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKsldd17ef3a.sys
2011-04-25 15:03:03 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKsl4b8e5d56.sys
2011-04-25 12:46:19 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKsl36efbe3f.sys
2011-04-25 01:58:45 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKslfece8df6.sys
2011-04-24 23:28:46 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKsl84efd55f.sys
2011-04-24 16:38:14 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKsl359d6ee3.sys
2011-04-24 14:56:34 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\MpKsl869d6e8f.sys
2011-04-24 14:56:09 7071056 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{0bbcaf62-d56f-463a-b89c-fbbb6706f035}\mpengine.dll
2011-04-21 22:26:45 385024 ----a-w- c:\windows\system32\eiqsp.exe
2011-04-19 02:38:17 34816 ----a-w- c:\windows\system32\itlnfw32.dll
2011-04-19 02:38:17 215040 ----a-w- c:\windows\system32\itlpfw32.dll
2011-04-18 14:45:48 -------- d-----w- c:\docume~1\nicholas\applic~1\Malwarebytes
2011-04-18 14:44:44 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-04-18 14:44:43 -------- d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2011-04-18 14:44:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-04-18 14:44:39 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-04-13 15:14:54 781272 ----a-w- c:\program files\mozilla firefox\mozsqlite3.dll
2011-04-13 15:14:53 728024 ----a-w- c:\program files\mozilla firefox\libGLESv2.dll
2011-04-13 15:14:53 1874904 ----a-w- c:\program files\mozilla firefox\mozjs.dll
2011-04-13 15:14:53 15832 ----a-w- c:\program files\mozilla firefox\mozalloc.dll
2011-04-13 15:14:52 142296 ----a-w- c:\program files\mozilla firefox\libEGL.dll
2011-04-13 15:14:51 1893336 ----a-w- c:\program files\mozilla firefox\d3dx9_42.dll
2011-04-13 15:14:50 1975768 ----a-w- c:\program files\mozilla firefox\D3DCompiler_42.dll
2011-04-13 15:14:50 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
==================== Find3M ====================
.
2011-03-08 16:18:17 21840 ----atw- c:\windows\system32\SIntfNT.dll
2011-03-08 16:18:17 17212 ----atw- c:\windows\system32\SIntf32.dll
2011-03-08 16:18:16 12067 ----atw- c:\windows\system32\SIntf16.dll
2011-03-07 05:33:50 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-04 06:37:06 420864 ----a-w- c:\windows\system32\vbscript.dll
2011-03-03 13:21:11 1857920 ----a-w- c:\windows\system32\win32k.sys
2011-02-22 23:06:29 916480 ----a-w- c:\windows\system32\wininet.dll
2011-02-22 23:06:29 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-02-22 23:06:29 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-02-22 11:41:59 385024 ----a-w- c:\windows\system32\html.iec
2011-02-17 12:32:12 5120 ----a-w- c:\windows\system32\xpsp4res.dll
2011-02-15 12:56:39 290432 ----a-w- c:\windows\system32\atmfd.dll
2011-02-09 13:53:52 270848 ----a-w- c:\windows\system32\sbe.dll
2011-02-09 13:53:52 186880 ----a-w- c:\windows\system32\encdec.dll
2011-02-08 13:33:55 978944 ----a-w- c:\windows\system32\mfc42.dll
2011-02-08 13:33:55 974848 ----a-w- c:\windows\system32\mfc42u.dll
2011-02-02 22:11:20 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-02-02 07:58:35 2067456 ----a-w- c:\windows\system32\mstscax.dll
2011-01-27 11:57:06 677888 ----a-w- c:\windows\system32\mstsc.exe
.
=================== ROOTKIT ====================
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover
Windows 5.1.2600 Disk: ST9120821AS rev.8.03 -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
.
device: opened successfully
user: MBR read successfully
.
Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x866F14F0]<<
_asm { PUSH EBP; MOV EBP, ESP; PUSH ECX; MOV EAX, [EBP+0x8]; CMP EAX, [0x866f77d0]; MOV EAX, [0x866f784c]; PUSH EBX; PUSH ESI; MOV ESI, [EBP+0xc]; MOV EBX, [ESI+0x60]; PUSH EDI; JNZ 0x20; MOV [EBP+0x8], EAX; }
1 ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Harddisk0\DR0[0x8670DAB8]
3 CLASSPNP[0xF7671FD7] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> [0x86654108]
\Driver\atapi[0x86703A10] -> IRP_MJ_CREATE -> 0x866F14F0
error: Read A device attached to the system is not functioning.
kernel: MBR read successfully
_asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00; STI ; PUSH AX; POP ES; PUSH AX; POP DS; CLD ; MOV SI, 0x7c1b; MOV DI, 0x61b; PUSH AX; PUSH DI; MOV CX, 0x1e5; REP MOVSB ; RETF ; MOV BP, 0x7be; MOV CL, 0x4; CMP [BP+0x0], CH; JL 0x2e; JNZ 0x3a; }
detected disk devices:
detected hooks:
\Driver\atapi DriverStartIo -> 0x866F133B
user & kernel MBR OK
Warning: possible TDL3 rootkit infection !
.
============= FINISH: 10:13:57.79 ===============







I have also attached the Attach.txt file as a zip file. I also do not have access to a Windows Install disc.


Thank you in advance for any help I receive. Trying to hold onto this laptop as long as I can, 5 years strong and I don't think its ready to die yet.
 

Attachments

#2 ·
Hello and welcome to TSF.

I am not seeing the GMER log. Did you have any problem running it.

Let's try this special version of gmer.


Download GMER Rootkit Scanner from herehttp://www.gmer.net/download.phphttp://www.gmer.net/download.php to your desktop.
  • Double click the exe file. If asked to allow gmer.sys driver to load, please consent .
  • If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.


    Click the image to enlarge it
  • In the right panel, you will see several boxes that have been checked. Uncheck the following ...
    • IAT/EAT
    • Drives/Partition other than System drive (typically C:\)
    • Show All (don't miss this one)
  • Then click the Scan button & wait for it to finish.
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop, and post it in reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries


If you still have trouble, try running the scan in Safe Mode.

Restart your computer and boot into Safe Mode by tapping the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work. Login on your usual account. Make sure to close any open browsers.

---------------------------------

If you still have difficulty, run the scan with ONLY the Sections and C drive boxes ticked.


Click the image to enlarge it
 
Status
Not open for further replies.
You have insufficient privileges to reply here.