TDSSKiller.3.0.0.19_31.01.2014_21.38.29_log

21:38:29.0552 0x2740  TDSS rootkit removing tool 3.0.0.19 Nov 18 2013 09:27:50
21:38:29.0552 0x2740  UEFI system
21:38:35.0418 0x2740  ============================================================
21:38:35.0419 0x2740  Current date / time: 2014/01/31 21:38:35.0418
21:38:35.0419 0x2740  SystemInfo:
21:38:35.0419 0x2740
21:38:35.0419 0x2740  OS Version: 6.3.9600 ServicePack: 0.0
21:38:35.0419 0x2740  Product type: Workstation
21:38:35.0419 0x2740  ComputerName: MAMDOUH
21:38:35.0419 0x2740  UserName: Mamdouh
21:38:35.0419 0x2740  Windows directory: C:\WINDOWS
21:38:35.0419 0x2740  System windows directory: C:\WINDOWS
21:38:35.0419 0x2740  Running under WOW64
21:38:35.0419 0x2740  Processor architecture: Intel x64
21:38:35.0419 0x2740  Number of processors: 4
21:38:35.0419 0x2740  Page size: 0x1000
21:38:35.0419 0x2740  Boot type: Normal boot
21:38:35.0419 0x2740  ============================================================
21:38:35.0658 0x2740  KLMD registered as C:\WINDOWS\system32\drivers\72381236.sys
21:38:35.0847 0x2740  System UUID: {51CB8A87-EAF0-AC6F-1BD7-8B241A8F3973}
21:38:36.0519 0x2740  Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:38:36.0539 0x2740  ============================================================
21:38:36.0539 0x2740  \Device\Harddisk0\DR0:
21:38:36.0542 0x2740  GPT partitions:
21:38:36.0543 0x2740  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {2CF6FE8E-FC00-405A-AEAF-6B159E06D546}, Name: , StartLBA 0x800, BlocksNum 0xC8000
21:38:36.0543 0x2740  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {9ED98438-C0BC-4F65-8C9C-9FA39294C67B}, Name: , StartLBA 0xC8800, BlocksNum 0x82000
21:38:36.0543 0x2740  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {DCE37427-18F1-4434-B031-20ECE43AE3C1}, Name: , StartLBA 0x14A800, BlocksNum 0x40000
21:38:36.0543 0x2740  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {14E1D080-E2F1-447F-8341-E0909337DD2D}, Name: , StartLBA 0x18A800, BlocksNum 0x542BF000
21:38:36.0543 0x2740  \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {5808C3B7-2436-4C24-8FDB-75D7FD79513D}, Name: , StartLBA 0x54449800, BlocksNum 0xAF000
21:38:36.0543 0x2740  \Device\Harddisk0\DR0\Partition6: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {866D2B9F-75AB-41AF-A5B8-F19F6E19430A}, Name: , StartLBA 0x544F8800, BlocksNum 0x304D800
21:38:36.0543 0x2740  MBR partitions:
21:38:36.0543 0x2740  ============================================================
21:38:36.0559 0x2740  C: <-> \Device\Harddisk0\DR0\Partition4
21:38:36.0608 0x2740  D: <-> \Device\Harddisk0\DR0\Partition6
21:38:36.0608 0x2740  ============================================================
21:38:36.0608 0x2740  Initialize success
21:38:36.0608 0x2740  ============================================================
21:39:04.0903 0x3f64  KLMD registered as C:\WINDOWS\system32\drivers\63659605.sys
21:39:05.0606 0x3f64  Deinitialize success