PC-HELP.CZ

Zdravím, chtěl bych vás poprosit o pomoc.

Jenom lehce o tomto problemu.
Už je to počtvrte co se mi tento problem vyskytl a myslím, že hned 2x jsem ho vyřešil díky zdejším uživatelům, tentokráte mi ale nějak nepomohly kroky, ktere jsem podnikl před tím viz viewtopic.php?t=112341.

Problem se objevil již včera, kdy jsem odpoledne zapl pc a už jsem cítil problem, když počas čtení jednoho článku trochu problikla plocha, po pul hodině už ovšem nastal problem, který jsem čekal, obraz zčernal a počítač zamrzl behem surfování, pak jsem to ještě nastartoval a v poho ještě včera.
Dnes již bohužel počítač nejde nastartovat a dostanu se do něj pouze přes nouzový režim ve kterem jsem ted...
Když ho zkusím zapnout poznám problem tak, že při načítání hned po zapnutí BIOSU atd... se písmenka, kterými tam jsou proste všechny ty veci vypsane jsou nektere právě zbarvene do růžova a nektere nejsou ani na spravnem řádku, vše nakonec skončí při načítání Windowsu u XP, kdy to začne blikat po kterem už má být jen vyber uživatele a pracovní plocha, ale tam už není možné delat vubec nic a mužu jen v nouzáku, protože ak jsem psal nic nereaguje.

Počítač jsem zkusil projet ATFCleanerem, TFC, AdwCleaner, Malwarebytes' Anti-Malware, CrystalDiskInfo, Junkware, RogueKiller nebo ComboFix, nekde to našlo nějakou chybu, ale bylo toho dost málo a problém přetrvává. Dyžtak to udělám pak znovu, nechal jsem si to nainstalované.



Tady ještě log
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:44:12, on 23.12.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Stahnuto FF\hijackthis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1ewenusDefaultPack/UP97_FRPage
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 3402380265
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files\PANDORA.TV\PanService\KMPService.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 5995 bytes

Mám obavu, že toto je asi problém HW. Podezřelý je monitor, nebo GK, či její ovladač. Máš-li možnost zkus jiný monitor a případně jinou grafickou kartu (třeba jen půjčené na odzkoušení).

Jak jsem již psal, tento problem už jsem měl 4x....

Grafickou kartou to nebylo a monitor mám rovněž stále stejný, myslím, že to bylo vždy zavirované. Stahoval jsem něco přes torrent a taky jsem u nekterých stránek vypl malware, který mi je blokoval... v poslední době a věřím, že to bude tím znovu.

Navíc tady není na vině asi ten obraz, on zamrzne celý počítač a nedá se nic delat , občas jsem se dostal i k ploše a myš nic nešlo a v nouzáku je to uplně pohoda všechno, to kdyby byla na vině grafická karta tak by mi ani snad nešli ted videa nebo bych nemel správné barvy na stránkách, ale tohle všechno jde... Ale nejsem rozhodně žádný expert, což je asi i vidět z toho jak píšu, takže si rozhodně nechám rád poradit.

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

Zdravím, včera jsem se na pc dostal jen na mmnt večer a dnes až ted.
Chtěl bych jen říci, že jsem poté co jsem sem dal tu zprávu, zkusil odinstalovat program PANDORA.TV + vymazal jsem pár vecí co jsem stahl za poslední dobu a počítač jel pak jakou dobu v pohodě, jenže pak opet stejný problem. A dnes když jsem spustil na poprve opet hruza, na podruhe jsem se dokonce nedostal ani k načítání windowsu či možnosti přepnout do nouzáku ale měl jsem hlášku PLEASE INSERT SYSTEM DISC, či neco v takem smyslu a potřetí, už jsem se normálně do nouzáku dostal a disk to nechtělo, toto to delalo vlastně i dříve, při tomto problemu, nakonec jsem to ale řešil ten problem i tak dlouho dokud jsem se do nouzoveho nedostal vubec,. dostal jsem se sice k te možnosti, když jsem zmačkl F8, abych tam mohl ale při načítání už jsem videl jen černou obrzaovku a blikajíí čárku bílou nahoře vlevo a nic nešlo, dál se to nedostalo. Pak jsem nakonec
musel i do opravny a tam přišli na to, že tam nějaký vir byl, ale že jsem taky měl v hroznem stavu hardware, v tomto smyslu, že docela zaneseno prachem, nevím či to taky muže ovlivnit neco v tomto případě, ale snažil jsem se to nějak vyčistit, ale s vetračkama je bez toho spešl spreje se stlačeným vzduchem celkem problem, hlavně u grafiky ale nejak jsem zkusil profouknout a kapesníčkem lopatku po lopatce Nevím ani co stojí ten sprej vlastně nebo jak se to má dělat jinak Jednou se mi take ale podařilo to vyřešit již zde, no tak to zkouším nejdříve tady a v nejhorším případě pujdu tam, zase nemám až takovou duveru k těm lidem tam, protože tam pc nechám a oni to pak uhrají i tak, aby z toho bylo co nejvíce grošů pro ně



Log z Adwcleaneru, ale po doskenování jsem dal clean, nebylo tam toho moc, navíc jsem ho pouštel už 2 dny zpět...

# AdwCleaner v2.304 - Log vytvooen 11/07/2013 v 00:00:08
# Aktualizováno 03/07/2013 Xplode
# Operaení systém : Microsoft Windows XP Service Pack 3 (32 bits)
# Uživatel : Administrator - UZIVATEL-17711A
# Spuštin systém : Nouzový režim s prací v síti
# Spuštino z : C:\Documents and Settings\Administrator.UZIVATEL-17711A\Dokumenty\Stažené soubory\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****


***** [Registry] *****


***** [Internetové prohlížeee] *****

-\\ Internet Explorer v7.0.5730.13

[OK] Registry jsou eisté.

-\\ Mozilla Firefox v3.6.13 (cs)

*************************

AdwCleaner[R1].txt - [655 octets] - [11/07/2013 00:00:08]

########## EOF - C:\AdwCleaner[R1].txt - [714 octets] ##########



MbaM nenašel nic.
Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org

Database version: v2013.12.23.09

Windows XP Service Pack 3 x86 NTFS (Safe Mode/Networking)
Internet Explorer 8.0.6001.18702
uzivatel :: UZIVATEL-17711A [administrator]

Protection: Disabled

25.12.2013 18:12:24
mbam-log-2013-12-25 (18-12-24).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 242992
Time elapsed: 4 minute(s), 57 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Aha sorry ten log AdWCleaneru byl nějaký starý z disku, ted jsem to ještě zapl v normálním modu, lebo se opet povedlo to nastartovat a vyjel mi jiný log....

# AdwCleaner v3.016 - Report created 25/12/2013 at 18:03:29
# Updated 23/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : uzivatel - UZIVATEL-17711A
# Running from : C:\Documents and Settings\uzivatel\Plocha\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : CltMngSvc

***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\Searchprotect
Folder Deleted : C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Conduit
Folder Deleted : C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Searchprotect
Folder Deleted : C:\Documents and Settings\uzivatel\Data aplikací\ValueApps
Folder Deleted : C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\9fi7nqfs.default\Extensions\{94CD2CC3-083F-49BA-A218-4CDA4B4829FD}
File Deleted : C:\END
File Deleted : C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\9fi7nqfs.default\searchplugins\conduit-search.xml

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_lcnnhcneegeeojhgpfijnlnocjdmlaon]
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F63AAEDC-3602-49EF-AA45-262380A98980}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKLM\Software\SearchProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchProtect

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v26.0 (cs)

[ File : C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\9fi7nqfs.default\prefs.js ]

Line Deleted : user_pref("browser.newtab.url", "hxxp://search.conduit.com/?ctid=CT3310393&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=&Lay=1&UM=2&UP=SP824431FC-C797-4B3B-91B8-5F170F580EBD");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3310393&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP824431FC-C797-4B3B-91B8-5F170F580EBD&SSPV=");

[ File : C:\Documents and Settings\Administrator.UZIVATEL-17711A\Data aplikací\Mozilla\Firefox\Profiles\opvuu7zh.default\prefs.js ]


-\\ Google Chrome v31.0.1650.63

[ File : C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences ]

Deleted : homepage

*************************

AdwCleaner[R0].txt - [9500 octets] - [20/12/2013 18:37:07]
AdwCleaner[R1].txt - [1206 octets] - [23/12/2013 14:37:17]
AdwCleaner[R2].txt - [3889 octets] - [25/12/2013 17:54:43]
AdwCleaner[S0].txt - [8277 octets] - [20/12/2013 18:39:56]
AdwCleaner[S1].txt - [1267 octets] - [23/12/2013 14:40:06]
AdwCleaner[S2].txt - [3166 octets] - [25/12/2013 18:03:29]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [3226 octets] ##########

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Microsoft Windows XP x86
Ran by uzivatel on čt 26.12.2013 at 14:40:55,60
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\smarttweak



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Program Files\smarttweak"



~~~ FireFox

Emptied folder: C:\Documents and Settings\uzivatel\Data aplikací\mozilla\firefox\profiles\9fi7nqfs.default\minidumps [1 files]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on čt 26.12.2013 at 14:55:14,75
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

RogueKiller V8.7.13 [Dec 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : uzivatel [Práva správce]
Mód : Odebrat -- Datum : 12/26/2013 15:08:18
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 3 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZÁNO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO

¤¤¤ naplánované úlohy : 1 ¤¤¤
[V1][SUSP PATH] Math Problem Solver CPU.job : C:\Documents and Settings\uzivatel\Local Settings\Data aplikací\Math Problem Solver\cpu\Solve.exe - -o stratum+tcp://usa-1.liteguardian.com:3335 -u 111213.4 -p x [-][x][x] -> VYMAZÁNO

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 2 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0xc0000033] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ SCSI) Hitachi HDT725025VLA380 +++++
--- User ---
[MBR] 9c9000e772cbb712cd2765cdace40021
[BSP] 8752c13cab3a218b038d259fb8e1305d : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 238464 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ SCSI) SAMSUNG HD642JJ +++++
--- User ---
[MBR] 2611bdb83a515d914265247e47b442d4
[BSP] 9eb7eabb57178955b5c9240db2668a21 : Windows XP MBR Code
Partition table:
0 - [XXXXXX] LINUX-SWP (0x42) [VISIBLE] Offset (sectors): 63 | Size: 610477 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_D_12262013_150818.txt >>
RKreport[0]_S_12262013_150328.txt

Tak skreeny dodané. A momentálně i pc běží v normlanim režimu, po včerejšku kdy jsem to čistil těmi programy, ale udelal jsem i to, že jsem nainstaloval nektere nove ovladače grafiky, které jinak normálně vubec neinstaluji a to by taky mohl být problem, já vlastně nedávám vubec žádné nove ovladače.

Ted jsem sice v jinem tematu, ale chtěl bych zjistit, jestli to temi nejakými viry nemuže být, mohl se dostat nejaký svinak i nekam dost daleko do pc. Ale nakonec asi bude opravdu chyba u te grafiky, protože počítač ted normálně jde težko řici jestli kvuli čistěni od virů nebo novým ovladačům co jsem delal včera. Problem je že pokud pustím nejaké video, film apod... tak mam tak max 2 minuty do dalšího kolapsu.

jaké videa? Kodeky máš? V čem přehráváš?

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

No stačí bohužel pustit jen nejaký live video přenos v prohlížeči, či prostě jen něco z youtube a hned KO. Ted to navíc opět nejde vubec v normalnim režimu. Ty růžová písmenka při startu počítače jsem si všiml, že se ted objevuji přesne na těch stejných místech, jako při posledním spuštěním. Jinak přehrávám v KMP playeru a kodeky žádne neinstaluji nově do něj, ale to je asi zbytečné psát ted, když jsem napsal, že je to v prohlížeči adobe flash playerem, ale kousne se to i v KMP...

14:04:00.0265 0x07c0 TDSS rootkit removing tool 3.0.0.19 Nov 18 2013 09:27:50
14:04:04.0796 0x07c0 ============================================================
14:04:04.0796 0x07c0 Current date / time: 2013/12/27 14:04:04.0796
14:04:04.0796 0x07c0 SystemInfo:
14:04:04.0796 0x07c0
14:04:04.0796 0x07c0 OS Version: 5.1.2600 ServicePack: 3.0
14:04:04.0796 0x07c0 Product type: Workstation
14:04:04.0796 0x07c0 ComputerName: UZIVATEL-17711A
14:04:04.0796 0x07c0 UserName: uzivatel
14:04:04.0796 0x07c0 Windows directory: C:\WINDOWS
14:04:04.0796 0x07c0 System windows directory: C:\WINDOWS
14:04:04.0796 0x07c0 Processor architecture: Intel x86
14:04:04.0796 0x07c0 Number of processors: 2
14:04:04.0796 0x07c0 Page size: 0x1000
14:04:04.0796 0x07c0 Boot type: Safe boot with network
14:04:04.0796 0x07c0 ============================================================
14:04:05.0765 0x07c0 KLMD registered as C:\WINDOWS\system32\drivers\54075664.sys
14:04:05.0890 0x07c0 System UUID: {E03B464D-4921-1447-982D-4CCAA66FF77A}
14:04:06.0765 0x07c0 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
14:04:06.0765 0x07c0 Drive \Device\Harddisk1\DR1 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
14:04:06.0781 0x07c0 ============================================================
14:04:06.0781 0x07c0 \Device\Harddisk0\DR0:
14:04:06.0781 0x07c0 MBR partitions:
14:04:06.0781 0x07c0 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1D1C0681
14:04:06.0781 0x07c0 \Device\Harddisk1\DR1:
14:04:06.0781 0x07c0 MBR partitions:
14:04:06.0781 0x07c0 ============================================================
14:04:06.0796 0x07c0 C: <-> \Device\Harddisk0\DR0\Partition1
14:04:06.0796 0x07c0 ============================================================
14:04:06.0796 0x07c0 Initialize success
14:04:06.0796 0x07c0 ============================================================
14:04:08.0828 0x01a0 ============================================================
14:04:08.0828 0x01a0 Scan started
14:04:08.0828 0x01a0 Mode: Manual;
14:04:08.0828 0x01a0 ============================================================
14:04:08.0828 0x01a0 KSN ping started
14:04:11.0218 0x01a0 KSN ping finished: true
14:04:11.0656 0x01a0 ================ Scan system memory ========================
14:04:11.0656 0x01a0 System memory - ok
14:04:11.0656 0x01a0 ================ Scan services =============================
14:04:11.0968 0x01a0 Abiosdsk - ok
14:04:11.0984 0x01a0 abp480n5 - ok
14:04:12.0062 0x01a0 [ 4FE34F1F3126B61FCC6B2043AA8112C9, DE370865E47A5D2A4B227EEFFB42384F67F08D622BF936A9C9CEF70CC47F324B ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
14:04:12.0062 0x01a0 ACPI - ok
14:04:12.0203 0x01a0 [ AFDFF022A01F0B11C776F0860C3B282F, 135E5257B62D921B76271014301E9EA1E2383D5DBB04E475DC3A7EFFD2561F56 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
14:04:12.0203 0x01a0 ACPIEC - ok
14:04:12.0296 0x01a0 [ 1BA1AB4141A92EB34DA99F1249CA2D4D, 43ADF35146E61E0DE58D2ACC2994538F6025135ECEB30073BEF05A804BB38107 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
14:04:12.0296 0x01a0 AdobeFlashPlayerUpdateSvc - ok
14:04:12.0328 0x01a0 adpu160m - ok
14:04:12.0375 0x01a0 [ 8BED39E3C35D6A489438B8141717A557, 1B5796E56B0927360CE0759641B1151828BC0A9E45620D2B2D880491F5CE33D0 ] aec C:\WINDOWS\system32\drivers\aec.sys
14:04:12.0390 0x01a0 aec - ok
14:04:12.0453 0x01a0 [ 322D0E36693D6E24A2398BEE62A268CD, FB0BFF5846E50DBCC2826639318A6A1DE79EE7DEA2719ED74A5F6F44454E13D0 ] AFD C:\WINDOWS\System32\drivers\afd.sys
14:04:12.0453 0x01a0 AFD - ok
14:04:12.0468 0x01a0 Aha154x - ok
14:04:12.0500 0x01a0 aic78u2 - ok
14:04:12.0515 0x01a0 aic78xx - ok
14:04:12.0593 0x01a0 [ E0A6FA244B8624D78FE5FF6F56A33BAE, 26B828FDB03AE4A4F1DC7A1792F9BAD69CF947897D47F5E567F24F4B6D5CB541 ] Alerter C:\WINDOWS\system32\alrsvc.dll
14:04:12.0593 0x01a0 Alerter - ok
14:04:12.0609 0x01a0 [ 88842DE939A827577BF24243699AC80A, A49C9A6A9941F3A2FBBCFE1F6DB48B632739D00670AC98ECCCBC7FD9E786B21A ] ALG C:\WINDOWS\System32\alg.exe
14:04:12.0609 0x01a0 ALG - ok
14:04:12.0640 0x01a0 AliIde - ok
14:04:12.0656 0x01a0 amsint - ok
14:04:12.0703 0x01a0 [ 6B8E7A90E576D4FE308F97C69060A171, 6CE49BC78715737D78E05DECAC23E26A5672ACD2CF3D10154FEA9D47B318D47C ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
14:04:12.0718 0x01a0 AppMgmt - ok
14:04:12.0734 0x01a0 [ B5B8A80875C1DEDEDA8B02765642C32F, AD0C71D73B1B8225351FBF4FFB43001A32B4DAE69504C59970CD2428BB33D4EF ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
14:04:12.0750 0x01a0 Arp1394 - ok
14:04:12.0765 0x01a0 asc - ok
14:04:12.0781 0x01a0 asc3350p - ok
14:04:12.0812 0x01a0 asc3550 - ok
14:04:13.0000 0x01a0 [ 776ACEFA0CA9DF0FAA51A5FB2F435705, 72DF7ED6B085BC468994F5B3189506FD726A9A17A9C42ACA1E420D787691361D ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
14:04:13.0000 0x01a0 aspnet_state - ok
14:04:13.0046 0x01a0 [ 4AF5F360BA1E8794D32B366E45A64A0A, 6AF5410168E06A6895237183AA9769576031FAF412ABFC46572A013432BE1F86 ] aswFsBlk C:\WINDOWS\system32\drivers\aswFsBlk.sys
14:04:13.0046 0x01a0 aswFsBlk - ok
14:04:13.0078 0x01a0 [ 3FCA5C1A8F33CF9857220CC3A3076A3E, 10160049A796031411F68984C8B0D21BD84F4433A0D71F2DCEC036647F8E0C6E ] aswKbd C:\WINDOWS\system32\drivers\aswKbd.sys
14:04:13.0078 0x01a0 aswKbd - ok
14:04:13.0093 0x01a0 [ 1F7094D4268D46F718C51286DC189791, 4820C1417876C45EBC1C33C66265AC16A6A016599256DDBA45D4D6E147DDE8A0 ] aswMonFlt C:\WINDOWS\system32\drivers\aswMonFlt.sys
14:04:13.0093 0x01a0 aswMonFlt - ok
14:04:13.0156 0x01a0 [ 7B43265F92257A21CBFD88E7A651044C, E01A0E5BB3621CDEA906B63992A0258AC2BC79C487D128551153563FE1CBE819 ] AswRdr C:\WINDOWS\system32\drivers\AswRdr.sys
14:04:13.0156 0x01a0 AswRdr - ok
14:04:13.0250 0x01a0 [ CCD565A8A72AF7D45F9A242013870926, 7E5A0EA32C5BAEA25C093A270CFEEE21E57272BC79221BDA58DDBF1CD9E9868C ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
14:04:13.0281 0x01a0 aswSnx - ok
14:04:13.0312 0x01a0 [ 937300BC7C4CDF7576BCCE44E19BBB9D, 2275DE904940042421D8A33ACC8C0E1C7FAED7E59FA4658938FB8DBE6D624634 ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
14:04:13.0312 0x01a0 aswSP - ok
14:04:13.0328 0x01a0 [ 1F71F170D90E42EFDE9633D81D5E12DC, 62053E412F8269B4E906E482B905CADCFEA0D3296B525C1141944D5EA9B227A8 ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys
14:04:13.0343 0x01a0 aswTdi - ok
14:04:13.0359 0x01a0 [ 8CFAA2B965773A653F48F1207A9CB9C4, A4A58FAF10BB174A0400F3A25912A497300E5EEDF54B93B44FA67CA191047D06 ] aswVmm C:\WINDOWS\system32\drivers\aswVmm.sys
14:04:13.0375 0x01a0 aswVmm - ok
14:04:13.0421 0x01a0 [ B153AFFAC761E7F5FCFA822B9C4E97BC, 7E60F572A6B3C6219E3C86225AA37243AFFD74337DB7F108B04778042E5CC959 ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
14:04:13.0437 0x01a0 AsyncMac - ok
14:04:13.0468 0x01a0 [ 9F3A2F5AA6875C72BF062C712CFA2674, B4DF1D2C56A593C6B54DE57395E3B51D288F547842893B32B0F59228A0CF70B9 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
14:04:13.0484 0x01a0 atapi - ok
14:04:13.0500 0x01a0 Atdisk - ok
14:04:13.0531 0x01a0 [ 9916C1225104BA14794209CFA8012159, 5D6F05F715C52A16D05CAE15C3DFE77A139A7F27F7AE710EC9A10F9EE05115A1 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
14:04:13.0531 0x01a0 Atmarpc - ok
14:04:13.0562 0x01a0 [ DE31B88962A8645DBA5A37B993E7B0F1, CA93F25A3FD0CE68BB9B8E3AB6B813BF38DE3EDDFC990291B3957FAA59B2B274 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
14:04:13.0578 0x01a0 AudioSrv - ok
14:04:13.0609 0x01a0 [ D9F724AA26C010A217C97606B160ED68, 329B5118F2409731D06FDAE85B6ADD64A048292801BCB3546651CEB303111695 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
14:04:13.0609 0x01a0 audstub - ok
14:04:13.0750 0x01a0 [ 28D6701C710AD7BA3CB95E75F8F1A9AA, 66EE8BC56E5043B5A84E1BA37D591EAD132BD949F03CA8092FDCC3E196AB39D0 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
14:04:13.0750 0x01a0 avast! Antivirus - ok
14:04:13.0812 0x01a0 [ F798F61B3B5642D7086B96A891B129D2, C780164F630BE05BF9F4D84AAB3912F4247F40D7AE4753121E7B6292F0087AC6 ] avgtp C:\WINDOWS\system32\drivers\avgtpx86.sys
14:04:13.0812 0x01a0 avgtp - ok
14:04:13.0828 0x01a0 axwvo - ok
14:04:13.0875 0x01a0 [ DA1F27D85E0D1525F6621372E7B685E9, 5A81A46A3BDD19DAFC6C87D277267A5D44F3A1B5302F2CC1111D84B7BAD5610D ] Beep C:\WINDOWS\system32\drivers\Beep.sys
14:04:13.0875 0x01a0 Beep - ok
14:04:13.0937 0x01a0 [ 19395D092FD85DDC2D9C7729CF5A2AC8, 7640F36BA19698EE8A6257BF78A8C57DD9D734BED9CA6BB9B68603BAEA092412 ] BITS C:\WINDOWS\system32\qmgr.dll
14:04:13.0953 0x01a0 BITS - ok
14:04:13.0984 0x01a0 [ 249276D3EF1E74B992299CB96099E4D7, A7E23EC13CB96C0CFD12D2D75E7115361B1F9890DB815D90F7B0A878EF7738F5 ] Browser C:\WINDOWS\System32\browser.dll
14:04:14.0000 0x01a0 Browser - ok
14:04:14.0093 0x01a0 catchme - ok
14:04:14.0140 0x01a0 [ 90A673FC8E12A79AFBED2576F6A7AAF9, BDE7858A3457DB979FEDD8577FA6321BF72848E4A7BF9F173C78A6A10CBB3EBE ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
14:04:14.0140 0x01a0 cbidf2k - ok
14:04:14.0156 0x01a0 cd20xrnt - ok
14:04:14.0203 0x01a0 [ C1B486A7658353D33A10CC15211A873B, AA4DD9E7AAE5AAB1146B360B17001F975D2F29A1281CF7B13E7136480410F347 ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
14:04:14.0203 0x01a0 Cdaudio - ok
14:04:14.0250 0x01a0 [ C885B02847F5D2FD45A24E219ED93B32, B26B2F8E3A831E2B65EB0C5195B0645CD50E22615CE79C9B0B391CD563B121DB ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
14:04:14.0250 0x01a0 Cdfs - ok
14:04:14.0265 0x01a0 [ 1F4260CC5B42272D71F79E570A27A4FE, B51C2A3ED3C309953D0EA45869C8E464C10F2533DADE9E0286AF674979098D1D ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
14:04:14.0265 0x01a0 Cdrom - ok
14:04:14.0312 0x01a0 Changer - ok
14:04:14.0343 0x01a0 [ E390DC1D7C461D7D56EC53402F329928, FB37F84E71353CD83FCDDD39C898C6D84C05130C5F1BEF022E3DFDE160398C0E ] CiSvc C:\WINDOWS\system32\cisvc.exe
14:04:14.0343 0x01a0 CiSvc - ok
14:04:14.0375 0x01a0 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA, 1725067BC759484A7185A4F1A44ED3CBE481529D187FE98EF279425B79177EB1 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
14:04:14.0375 0x01a0 ClipSrv - ok
14:04:14.0421 0x01a0 [ C5A75EB48E2344ABDC162BDA79E16841, 6070A8AAFD38FBC6A68A2B10C20117612354DF21B4492D90CA522BFB6870D726 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:04:14.0421 0x01a0 clr_optimization_v4.0.30319_32 - ok
14:04:14.0437 0x01a0 CmdIde - ok
14:04:14.0468 0x01a0 COMSysApp - ok
14:04:14.0515 0x01a0 Cpqarray - ok
14:04:14.0593 0x01a0 [ F3AB0933CBD166D271992F411C27CCAF, 50E01F3B058F814BE914FA5050B2D972E8584A467719A5ABCF9D9EBD596A54A7 ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
14:04:14.0593 0x01a0 CryptSvc - ok
14:04:14.0609 0x01a0 dac2w2k - ok
14:04:14.0640 0x01a0 dac960nt - ok
14:04:14.0703 0x01a0 [ C868F3AE15CF71A93F2AA3A32856D839, 7F08E40AE8F4F15F110550775183EDA690DBADAC95CF859C98A99B3DF308C8F5 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
14:04:14.0718 0x01a0 DcomLaunch - ok
14:04:14.0734 0x01a0 dgderdrv - ok
14:04:14.0796 0x01a0 [ 8C9A53E285AC5E6704844D0459EC85BE, 9E86AF4C06CEC007C9B1590B6E056319603E4D79BED0C2471C6F1BC251B380CF ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
14:04:14.0812 0x01a0 Dhcp - ok
14:04:14.0843 0x01a0 [ 044452051F3E02E7963599FC8F4F3E25, 584BDDB074618BE76454CF90E74829CFF588B5B5FAEB793E2F7AAD26352DD689 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
14:04:14.0843 0x01a0 Disk - ok
14:04:14.0875 0x01a0 dmadmin - ok
14:04:14.0968 0x01a0 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C, 46074FBBC5E4A40A7B3A45636089DEDD2A619778C7DCD797571C2BB64D775F7E ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
14:04:14.0984 0x01a0 dmboot - ok
14:04:15.0031 0x01a0 [ FFF1720AF51171F32F1EAD5CF71F2810, 2E40D63DC7670C1E88A532DB8923A98ABC8481C351C4D915C2753E10BA77F36D ] dmio C:\WINDOWS\system32\drivers\dmio.sys
14:04:15.0031 0x01a0 dmio - ok
14:04:15.0078 0x01a0 [ E9317282A63CA4D188C0DF5E09C6AC5F, D41E002F555FE9015EF620975255F58BB79198CA1FF0E09EC950CB450FF77CF7 ] dmload C:\WINDOWS\system32\drivers\dmload.sys
14:04:15.0078 0x01a0 dmload - ok
14:04:15.0125 0x01a0 [ 2BFEFE9E865655A76982F050450B9591, 15C7D093D638770519AA43E7D8897310F32AB1F217027F5750D799494A985C35 ] dmserver C:\WINDOWS\System32\dmserver.dll
14:04:15.0125 0x01a0 dmserver - ok
14:04:15.0171 0x01a0 [ 8A208DFCF89792A484E76C40E5F50B45, 4E40E2EB38C6254E7CAA488200E89EE7DEBBBA773890BC6A84313CC68178D54F ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
14:04:15.0171 0x01a0 DMusic - ok
14:04:15.0203 0x01a0 [ 0634B791684B84F4A331F3D3536FEEF8, 562080C56BB92AB41657D43A4D7FA722F6134CF78CA69B58A1D64816234E768D ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
14:04:15.0203 0x01a0 Dnscache - ok
14:04:15.0250 0x01a0 [ 4A3E2BD20157A0946751229E92EB8621, D8C00CC2C18C517F7262EBC3C511C062E5ABA797056AEB22AC5DEB306BA8C526 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
14:04:15.0250 0x01a0 Dot3svc - ok
14:04:15.0265 0x01a0 dpti2o - ok
14:04:15.0328 0x01a0 [ 8F5FCFF8E8848AFAC920905FBD9D33C8, C8C6FB97AB0871C8C88A2201525A5CF10D5131CB6980D32692ED7A8F58399AD5 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
14:04:15.0328 0x01a0 drmkaud - ok
14:04:15.0390 0x01a0 [ 5E72C8FBBA5E949995CEB4D25656F904, CE2B5135AB2C384D970175E4D97A86E63BF1585F3789C359EFA4B9ACF5B270FF ] E100B C:\WINDOWS\system32\DRIVERS\e100b325.sys
14:04:15.0390 0x01a0 E100B - ok
14:04:15.0437 0x01a0 [ 0887D9C2BE8D940778CAD1E3B85F2A41, 2E30DC06D46A5E174B7CAA2D70BDB697015495942572E90425E2EE7AC541BCF4 ] EapHost C:\WINDOWS\System32\eapsvc.dll
14:04:15.0453 0x01a0 EapHost - ok
14:04:15.0484 0x01a0 [ A2A4912798F2BE706ABADD3D30800D16, CCCCA389D22525D984DE9B59E4CEBE0EEEF315F725176EB5C4DC1A5B6157234A ] ERSvc C:\WINDOWS\System32\ersvc.dll
14:04:15.0484 0x01a0 ERSvc - ok
14:04:15.0515 0x01a0 [ E2A355BAF83F7007883E9FADF708E9AC, A4772A182CBB8DFCDF7186D8CA1343E5F061649FC62E72305C58A8920627B6E1 ] Eve C:\WINDOWS\system32\DRIVERS\eve.sys
14:04:15.0515 0x01a0 Eve - ok
14:04:15.0562 0x01a0 [ F0D2AE69035092BF22DAD6B50FAB85C2, 982ED53375D9B5F6D3CE290A93987BE98407C746C24FEC7833F9D4D4AF443AD7 ] Eventlog C:\WINDOWS\system32\services.exe
14:04:15.0562 0x01a0 Eventlog - ok
14:04:15.0625 0x01a0 [ 260C69FD67687B0DC062FC3D31655857, A491071B09A726BC77FB134D59FF4FAB3EF1E09F785D86E49142B3A25A96C192 ] EventSystem C:\WINDOWS\system32\es.dll
14:04:15.0625 0x01a0 EventSystem - ok
14:04:15.0656 0x01a0 [ 38D332A6D56AF32635675F132548343E, E6909DB836AF679B4F4D62C7396D6C82769CC7ABB8C919C2AABFE934FCE268F6 ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
14:04:15.0656 0x01a0 Fastfat - ok
14:04:15.0687 0x01a0 [ B927443008910B412BEC72FC41C1BAD0, B2008DC7EBCEDA0FCCBF4BE1F3BD7F5E27E35695320236D2C9E9C0111CC44774 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
14:04:15.0703 0x01a0 FastUserSwitchingCompatibility - ok
14:04:15.0750 0x01a0 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81, 8307A532AB4D05CBBCE206DC2759497708BF5AAA880BD00F0E4F281D8578A1F5 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys
14:04:15.0750 0x01a0 Fdc - ok
14:04:15.0781 0x01a0 [ AC366695A0796560AA37215AD5762AAF, 6ADC7443EA42D77199D4879AF3C33A07914116C69A34B895D8CB8444EE50077F ] Fips C:\WINDOWS\system32\drivers\Fips.sys
14:04:15.0781 0x01a0 Fips - ok
14:04:15.0812 0x01a0 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0, 69C271AD5BCEBFD8AE5A769BDD7EC51256DA3A8ADAD5D12E5C0D13F4E82D8805 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys
14:04:15.0812 0x01a0 Flpydisk - ok
14:04:15.0859 0x01a0 [ B2CF4B0786F8212CB92ED2B50C6DB6B0, 280F5CF8A90F7BEDE73ADD0DD0F8952088133A7CA9A3D3B7041957E33B36845D ] FltMgr C:\WINDOWS\system32\DRIVERS\fltMgr.sys
14:04:15.0859 0x01a0 FltMgr - ok
14:04:15.0906 0x01a0 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A, EC635E071201A766845D48973772CBE0958942B4162F3F5F70660D114CC877E0 ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
14:04:15.0906 0x01a0 Fs_Rec - ok
14:04:15.0953 0x01a0 [ 4E664D8541DB4A66B73A24257E322E1F, 17A2140AFE2B41E579FCCAFB82532853AD90A6EDBCB13DE80741DAE0AD5B4CC9 ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
14:04:15.0953 0x01a0 Ftdisk - ok
14:04:16.0000 0x01a0 [ 0A02C63C8B144BD8C86B103DEE7C86A2, 7A3235DD3E1995DD72B212FAEB3ECA2A974434DE9BF6D269EA11BA65A80E7E50 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
14:04:16.0000 0x01a0 Gpc - ok
14:04:16.0156 0x01a0 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
14:04:16.0171 0x01a0 gupdate - ok
14:04:16.0187 0x01a0 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
14:04:16.0187 0x01a0 gupdatem - ok
14:04:16.0234 0x01a0 [ 5D4BC124FAAE6730AC002CDB67BF1A1C, 00294F4DC7D17F6DD2A22B9C3299BED40146BA45C972367154D20DB502472551 ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
14:04:16.0250 0x01a0 gusvc - ok
14:04:16.0296 0x01a0 [ 573C7D0A32852B48F3058CFD8026F511, BC384BBA394AFDCDA1A9ABC858C692AA84A1F0A31AF3DDF7F38D120C027927FB ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
14:04:16.0296 0x01a0 HDAudBus - ok
14:04:16.0375 0x01a0 [ FCFE31FB75F8A6295B6B0AF87A626282, 6BA385797DBC73EB29EFE3293B80C21B1B8A1E9B87A462476E73C526C9565E5F ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
14:04:16.0375 0x01a0 helpsvc - ok
14:04:16.0421 0x01a0 [ 00E25EE90166B3E1BE6E74AEBF858306, 92C2F020EF14DE3B4F09E2C5DFF3D2F35D8C50F6D0188F9CEEFE3B6075602EFE ] HidServ C:\WINDOWS\System32\hidserv.dll
14:04:16.0421 0x01a0 HidServ - ok
14:04:16.0468 0x01a0 [ CCF82C5EC8A7326C3066DE870C06DAF1, 93395FA4C26B2E82DC8B7025ED3BCF583885E5D8C5F60CD6EEAA6335D6A126EC ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
14:04:16.0468 0x01a0 HidUsb - ok
14:04:16.0500 0x01a0 [ 7A6B320928F86BC851530D63C82965D9, 1F628759D31098DFBC05244735B5A62ACD8E45DBC5C9D236260D68EB8F1E28F5 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
14:04:16.0500 0x01a0 hkmsvc - ok
14:04:16.0515 0x01a0 hpn - ok
14:04:16.0578 0x01a0 [ F6AACF5BCE2893E0C1754AFEB672E5C9, 62A7A70515B5570A649DC30A3A122B1302F6839A63927C8B29EBE04ABA654892 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
14:04:16.0578 0x01a0 HTTP - ok
14:04:16.0625 0x01a0 [ 58FE2F2DA3BC5573F4A35B3760D3125F, B241ACCE426402EC64DC34C49CECB8CDC0851986D54BFCCED7040D6C43F5787A ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
14:04:16.0625 0x01a0 HTTPFilter - ok
14:04:16.0640 0x01a0 i2omgmt - ok
14:04:16.0671 0x01a0 i2omp - ok
14:04:16.0734 0x01a0 [ C528E27945367191E7BAE364930B6932, 1B95C7B49B4CAE734DC6C9EC22555C5356EEC856B8491C761C777479264CF854 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
14:04:16.0734 0x01a0 i8042prt - ok
14:04:16.0796 0x01a0 [ 997E8F5939F2D12CD9F2E6B395724C16, C22F10BADE29DA6F7EB79D9F5D81D9FBEC17D4D4F8B25E0AF4E5CEAE28E8ABF6 ] iaStor C:\WINDOWS\system32\DRIVERS\iaStor.sys
14:04:16.0812 0x01a0 iaStor - ok
14:04:16.0859 0x01a0 [ 083A052659F5310DD8B6A6CB05EDCF8E, 48D39B03FFB6FAA1529B774443BA12618AE3982D9F65A7B9D18F2269F78B31F4 ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
14:04:16.0859 0x01a0 Imapi - ok
14:04:16.0906 0x01a0 [ F7B93AAFAD33B2320954C17E26C8D361, 8CFDB11A68B59E195F280BE08B25FA59F1F70833832919B8BECCE17616999934 ] ImapiService C:\WINDOWS\system32\imapi.exe
14:04:16.0906 0x01a0 ImapiService - ok
14:04:16.0937 0x01a0 ini910u - ok
14:04:17.0203 0x01a0 [ 39A817320087EF1C851D7A8F1701B3E0, D46B8AC89601A414D957A20A8A01DA0C7C6261B0E902EE8AFCA49F80730FD0E4 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
14:04:17.0328 0x01a0 IntcAzAudAddService - ok
14:04:17.0359 0x01a0 IntelIde - ok
14:04:17.0406 0x01a0 [ 27B290D632AF2CF3CF40BFDDB7370985, 2C266777B4A96706658B8C9A7B30D15D6E495C815FAE23A0A1FC747E9B5AE363 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
14:04:17.0406 0x01a0 intelppm - ok
14:04:17.0453 0x01a0 [ 3BB22519A194418D5FEC05D800A19AD0, F6662F440950596DC1382DD1DB5D7891CCEA30A6062BEA942C18445B5F0D8B16 ] Ip6Fw C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
14:04:17.0453 0x01a0 Ip6Fw - ok
14:04:17.0500 0x01a0 [ 731F22BA402EE4B62748ADAF6363C182, 5C3BEBD008A5BE4DC2F92076FF41A10DDC01E10EC7E6552213CFA11970811848 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
14:04:17.0500 0x01a0 IpFilterDriver - ok
14:04:17.0515 0x01a0 [ B87AB476DCF76E72010632B5550955F5, E6E74D3A86A7917A8BAED44F8E97CCD2EB171E4E4B27E9907F60D1523FAF319A ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
14:04:17.0515 0x01a0 IpInIp - ok
14:04:17.0562 0x01a0 [ CC748EA12C6EFFDE940EE98098BF96BB, AF523E21C25D9A1715EFEA573E4F52AF5D4FC9F28A2D613F5DB629C186C439E0 ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
14:04:17.0578 0x01a0 IpNat - ok
14:04:17.0593 0x01a0 [ 23C74D75E36E7158768DD63D92789A91, 394D296F38E7D8EFD91A6EEC301D9CE6AF910E35EB9819F1A9E3363863AEDFDC ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
14:04:17.0609 0x01a0 IPSec - ok
14:04:17.0656 0x01a0 [ C93C9FF7B04D772627A3646D89F7BF89, 805FA48E7A46D4F10240BF880A2468F53DEA36E83004399228AB70DB7D20544A ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
14:04:17.0656 0x01a0 IRENUM - ok
14:04:17.0703 0x01a0 [ CC9F8A2D60AED1A51A3AC34C59B987AE, CBF69817BE3D9A4617390B1A3306074CB8581F21562CD1357D32BC3E542F3CEE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
14:04:17.0703 0x01a0 isapnp - ok
14:04:17.0859 0x01a0 [ 80A79264302910C7C24BA7E44267EFEF, 6080C233478350C8E07515D20D2D60C3758C4A65432B04E8C8B816248621A3EF ] JavaQuickStarterService C:\Program Files\Java\jre7\bin\jqs.exe
14:04:17.0859 0x01a0 JavaQuickStarterService - ok
14:04:17.0921 0x01a0 [ 1B6162FE7F66B1A71A4B70F941C4AA9B, C2EA494BAB0513A6027414FB1E75834F980A77852D0DC8559E8942FC222A075A ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
14:04:17.0921 0x01a0 Kbdclass - ok
14:04:17.0937 0x01a0 [ 86C8F23616C6C6E5B2776901C17B945B, 211B63FC405A2DDB126D204D61E779D66C7211882CC0374521926C633E180B91 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
14:04:17.0937 0x01a0 kbdhid - ok
14:04:18.0000 0x01a0 [ 692BCF44383D056AED41B045A323D378, 1A99DEE83FFAF64E73067FC049C0A4CE07D94E4AE31EFA17B38CEFA9E41D67DC ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
14:04:18.0015 0x01a0 kmixer - ok
14:04:18.0062 0x01a0 [ 1705745D900DABF2D89F90EBADDC7517, FE90589415BDB3BA482D3EBE1A87A7BF1429791E8F18BCB66BF8874631CC8B2C ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
14:04:18.0078 0x01a0 KSecDD - ok
14:04:18.0125 0x01a0 [ 21920AC69594AB021237054FA728FE46, 01D1E231B85BF3B1979491BE6338EEE4A184AED9B8B113CB9AEFCACFAA7B73E9 ] LanmanServer C:\WINDOWS\System32\srvsvc.dll
14:04:18.0140 0x01a0 LanmanServer - ok
14:04:18.0203 0x01a0 [ 5190783F51A2D7A8495202C664D7C963, A3ABAC9DB3AE7A200B16E569F0C38007FB8D4F19BEDFB67B2F4229121E242531 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
14:04:18.0203 0x01a0 lanmanworkstation - ok
14:04:18.0218 0x01a0 lbrtfdc - ok
14:04:18.0421 0x01a0 [ B1E1C8BB1392537E4D415FCDCB93B1D3, 8F47F88743C1FA0CD9EABF712BD42FDAE04BEFD8568A5BD74CA3146AA975D08E ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
14:04:18.0421 0x01a0 LightScribeService - ok
14:04:18.0468 0x01a0 [ 0AB159F536E3E8F7F07113702A07CCA5, 3218C553183E6697C663B6D12790E09756B50505590858DD5AC62411D37CDD7C ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
14:04:18.0468 0x01a0 LmHosts - ok
14:04:18.0515 0x01a0 [ 4470E3C1E0C3378E4CAB137893C12C3A, CA8E66356F0E671D5454E561E7EAD74DE25DCF53BE452369F96ECACFA8709489 ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
14:04:18.0515 0x01a0 MBAMProtector - ok
14:04:18.0656 0x01a0 [ 65085456FD9A74D7F1A999520C299ECB, EA564BC913EF1B8A4CAA9242FC70F525B68CF1F3CA462F63B0B7215B93FE8530 ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
14:04:18.0656 0x01a0 MBAMScheduler - ok
14:04:18.0718 0x01a0 [ E0D7732F2D2E24B2DB3F67B6750295B8, AA5CA86AF1ACEC900F60339016B3DC55472DB40ADB99186005A7ABE67B7D66FC ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
14:04:18.0734 0x01a0 MBAMService - ok
14:04:18.0765 0x01a0 [ 221CD1C815B8A6B79389C3F5D1018DE8, 6D0D25D6669C4F9452F74EC72C6138A41D9408E01AF5FD01C08F27BE7BC9C905 ] Messenger C:\WINDOWS\System32\msgsvc.dll
14:04:18.0765 0x01a0 Messenger - ok
14:04:18.0812 0x01a0 [ 4AE068242760A1FB6E1A44BF4E16AFA6, 1FB771162B96AAF787AC24867B818DF8511F0780BB094FA9A38C11D8DBFE68BC ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
14:04:18.0812 0x01a0 mnmdd - ok
14:04:18.0843 0x01a0 [ 9A57D046F88F4B69751B11FD40088A61, 62F65433024CE411F111A88723747B8A83B31076FBAF4CFF40FD02A53D7FF7DF ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
14:04:18.0843 0x01a0 mnmsrvc - ok
14:04:18.0906 0x01a0 [ 44032B0C6D9954D3FD26438330B99EE7, A49749A4C00D50F57170AA5DA9E2DEECC8C524A48B144C8B784894F2C202FBEE ] Modem C:\WINDOWS\system32\drivers\Modem.sys
14:04:18.0906 0x01a0 Modem - ok
14:04:18.0953 0x01a0 [ 4CB582831DBDE63CE43B45D771218374, 6D470B26197C5B388983D9213D48D2CDE934C9591572876DC7790FE4B59E0845 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
14:04:18.0953 0x01a0 Mouclass - ok
14:04:18.0984 0x01a0 [ BB269EBA740737AB749B214D568B6812, ABF41D9B521EBBE674E76981CAD31F8FD05976DE7070266C3956FDB67C83C4C2 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
14:04:18.0984 0x01a0 mouhid - ok
14:04:19.0015 0x01a0 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD, 2A5E15ED2C24C6C65EF2F7E1FD93374774076C9D8D451E4422561F4D269C012F ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
14:04:19.0015 0x01a0 MountMgr - ok
14:04:19.0062 0x01a0 [ 3B9398E0146855B1DC0E3D9769C80F01, DF69DB5CA30A5577648635C27DD468AF98515D07DF379B3FFDCC6B40744EDE66 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
14:04:19.0062 0x01a0 MozillaMaintenance - ok
14:04:19.0093 0x01a0 mraid35x - ok
14:04:19.0171 0x01a0 [ 11D42BB6206F33FBB3BA0288D3EF81BD, 76ABCFB62C5AC549F58C231F72A99882CDEB74928104B77FE52554765C2B1A22 ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
14:04:19.0171 0x01a0 MRxDAV - ok
14:04:19.0250 0x01a0 [ 68755F0FF16070178B54674FE5B847B0, 2FFBCE3A67FA7E30E373624521C602E5510C5565F04381C6C9F961253DA928A6 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
14:04:19.0265 0x01a0 MRxSmb - ok
14:04:19.0312 0x01a0 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D, 78D63EE2C0B0852F0771071C099643242EBC9F4DA28847B93BCE9C3CC1091938 ] MSDTC C:\WINDOWS\system32\msdtc.exe
14:04:19.0312 0x01a0 MSDTC - ok
14:04:19.0343 0x01a0 [ C941EA2454BA8350021D774DAF0F1027, C940E978C7B66A713A0FDAB54B5F995DF59D089AFCD96221DD3222948CD49BBD ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
14:04:19.0343 0x01a0 Msfs - ok
14:04:19.0359 0x01a0 MSIServer - ok
14:04:19.0406 0x01a0 [ D1575E71568F4D9E14CA56B7B0453BF1, 4ABE0E24786C0D39FA2B885447E56204CA6942FB175E534DCE675D7BCF0B176A ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
14:04:19.0406 0x01a0 MSKSSRV - ok
14:04:19.0437 0x01a0 [ 325BB26842FC7CCC1FCCE2C457317F3E, C07BE560513B1FB91D756494F0BA4AEEB2E1998DE0E1C21EE83DB1183B0CEE91 ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
14:04:19.0437 0x01a0 MSPCLOCK - ok
14:04:19.0468 0x01a0 [ BAD59648BA099DA4A17680B39730CB3D, 9AD4C7C94C186C8815D0BC75DCAFB962158DA6935A244BA243EDDDEB33F9816C ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
14:04:19.0468 0x01a0 MSPQM - ok
14:04:19.0515 0x01a0 [ AF5F4F3F14A8EA2C26DE30F7A1E17136, AC93A1E4ABB0D038B772E429015567E44CC2EDB66C54DBE23A5F98176FAC1520 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
14:04:19.0515 0x01a0 mssmbios - ok
14:04:19.0562 0x01a0 [ 2F625D11385B1A94360BFC70AAEFDEE1, 23E4974120233CF1A7BEE48977706A0A55418699379D1450502ABEB24191AC80 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
14:04:19.0562 0x01a0 Mup - ok
14:04:19.0625 0x01a0 [ 6EA362E9DB03D44F6B996F4D8BE237E9, FE6B4C546D26C4A2832CF4CB280B86B1723E10E46A3C24AF6C9856FCCAE9D1FC ] napagent C:\WINDOWS\System32\qagentrt.dll
14:04:19.0625 0x01a0 napagent - ok
14:04:19.0671 0x01a0 [ 1DF7F42665C94B825322FAE71721130D, FE0DCB728471465B39A42A7511F4133021FBA5DF88F88BCB5FE2FF34CFD713F9 ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
14:04:19.0687 0x01a0 NDIS - ok
14:04:19.0718 0x01a0 [ 1AB3D00C991AB086E69DB84B6C0ED78F, 1F881FCCF5557C44C078D99CA2DD38D635413D6212DBEDC06A428EDAC7F8B04E ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
14:04:19.0718 0x01a0 NdisTapi - ok
14:04:19.0750 0x01a0 [ F927A4434C5028758A842943EF1A3849, B1AA3AF150C05307461774925901789456B0CCCD03A5E71ADA4AB58455962BEE ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
14:04:19.0765 0x01a0 Ndisuio - ok
14:04:19.0796 0x01a0 [ EDC1531A49C80614B2CFDA43CA8659AB, 494042F790F33721328B4451E79842E21919681CC421A4F9633EC4D383E06097 ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
14:04:19.0796 0x01a0 NdisWan - ok
14:04:19.0843 0x01a0 [ 6215023940CFD3702B46ABC304E1D45A, C767F3A349B365F6E7566C0738E2F62D8FFF8CB4457347E3614BD403BC6CADCB ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
14:04:19.0843 0x01a0 NDProxy - ok
14:04:20.0000 0x01a0 [ 6D4028D458EAAA1782099750790DC8C9, 0D863A61D049235D5BBEC998185814B798674AD861DEBF0C903D28E310CE2768 ] Nero BackItUp Scheduler 3 C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
14:04:20.0015 0x01a0 Nero BackItUp Scheduler 3 - ok
14:04:20.0078 0x01a0 [ 5D81CF9A2F1A3A756B66CF684911CDF0, 7989C36607CAEA17AFA2C1C9904145CA0714A54B9F712D9D4C1AB140D0B2CC0C ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
14:04:20.0078 0x01a0 NetBIOS - ok
14:04:20.0109 0x01a0 [ 74B2B2F5BEA5E9A3DC021D685551BD3D, 7932B71F98B4122BE88F576BF6D745A757AE378A48924B7F4358837B75640A82 ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
14:04:20.0109 0x01a0 NetBT - ok
14:04:20.0140 0x01a0 [ 933DE774986EC85E48210C44AB431DE6, B8C85085003792B8744D96585CE6F2BC474EEEEC364A100CCBCE08176D91E75C ] NetDDE C:\WINDOWS\system32\netdde.exe
14:04:20.0140 0x01a0 NetDDE - ok
14:04:20.0171 0x01a0 [ 933DE774986EC85E48210C44AB431DE6, B8C85085003792B8744D96585CE6F2BC474EEEEC364A100CCBCE08176D91E75C ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
14:04:20.0171 0x01a0 NetDDEdsdm - ok
14:04:20.0218 0x01a0 [ ED0A176354487CEED65B80A7148AB739, 71295D7D7684539DBD2924B437660960C01E073A521FE12D1519969327EC8DC4 ] Netlogon C:\WINDOWS\system32\lsass.exe
14:04:20.0218 0x01a0 Netlogon - ok
14:04:20.0281 0x01a0 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40, 588C8BA14A7255FD36A88960CBE34341301773765ECF2A9A0F1760A509A08A5B ] Netman C:\WINDOWS\System32\netman.dll
14:04:20.0281 0x01a0 Netman - ok
14:04:20.0359 0x01a0 [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:04:20.0359 0x01a0 NetTcpPortSharing - ok
14:04:20.0406 0x01a0 [ E9E47CFB2D461FA0FC75B7A74C6383EA, 544136F5BFD4DC23D45E90F12FA48B82FD9EAEA9EAF3E0F5F0BD27E23D672C3E ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
14:04:20.0406 0x01a0 NIC1394 - ok
14:04:20.0468 0x01a0 [ AAC97DAB5F8A0573CF10E0EAC42A7724, DF151B3F1C6BBE59E72E3AC1053E6A6D2C60FDB21CD5819E6A69182BB4A90D76 ] Nla C:\WINDOWS\System32\mswsock.dll
14:04:20.0484 0x01a0 Nla - ok
14:04:20.0578 0x01a0 [ FF4D73B16EA3A32D34CEB3A7BC3C3773, 373A17D3885AE6F4405940EA0FA1200A4536F2B38D4421D1162D54981213237B ] NMIndexingService C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
14:04:20.0593 0x01a0 NMIndexingService - ok
14:04:20.0640 0x01a0 [ 3182D64AE053D6FB034F44B6DEF8034A, 4ADFC76965BA2A5F488E71789A4E4EA702A74AF42725F72130D1CA919406CF19 ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
14:04:20.0640 0x01a0 Npfs - ok
14:04:20.0718 0x01a0 [ 78A08DD6A8D65E697C18E1DB01C5CDCA, E0E6F3ED05068E32F1D5C2D2B38CDEF4536B8656DB6756C66CF6B40B60C8F3DA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
14:04:20.0734 0x01a0 Ntfs - ok
14:04:20.0781 0x01a0 [ ED0A176354487CEED65B80A7148AB739, 71295D7D7684539DBD2924B437660960C01E073A521FE12D1519969327EC8DC4 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
14:04:20.0781 0x01a0 NtLmSsp - ok
14:04:20.0843 0x01a0 [ 023DD70573D644F3D9C8B1258A7BFD08, 9A1D3210ED5FD8BEDF92ED577A9B30E37035408A73EB66A8C950B75AB7539B83 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
14:04:20.0843 0x01a0 NtmsSvc - ok
14:04:20.0890 0x01a0 [ 73C1E1F395918BC2C6DD67AF7591A3AD, B21133A75253EC15E2DFF66D3B480AB1A7E1A2360476C810E7AA55D0F0EB08D4 ] Null C:\WINDOWS\system32\drivers\Null.sys
14:04:20.0890 0x01a0 Null - ok
14:04:21.0390 0x01a0 [ 18C9B152DA7BEA76B2F9E4B6412E0AAF, 3D9FEC1C0FA5BADE81FFF5ACD687114D61BBBA56CE84BD90110A4566D641C7D1 ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
14:04:21.0656 0x01a0 nv - ok
14:04:21.0734 0x01a0 [ A8C1E6FF53FB0628A302843EA5FA5AB6, FE632CD206752052C23726E1E5468F4CF7605C923D838F677E6A6BEFC5491D3F ] nvsvc C:\WINDOWS\system32\nvsvc32.exe
14:04:21.0750 0x01a0 nvsvc - ok
14:04:21.0937 0x01a0 [ 815290E27B7B7D12AF013638819BE1B6, 83078B422954BBF9FFEF606EB1788EC78A1F69E7FF99F0588B72A07873797C98 ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
14:04:22.0000 0x01a0 nvUpdatusService - ok
14:04:22.0046 0x01a0 [ B305F3FAD35083837EF46A0BBCE2FC57, 9D0E0E666D652D0FC9EAB97280A5D67AAF61D6B21929DF7CF8ED72A367720464 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
14:04:22.0046 0x01a0 NwlnkFlt - ok
14:04:22.0078 0x01a0 [ C99B3415198D1AAB7227F2C88FD664B9, DD8DA4B5E804F134AB9233859544C025062902DFC3E8FB8A09A67337A4E73F55 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
14:04:22.0078 0x01a0 NwlnkFwd - ok
14:04:22.0109 0x01a0 [ CA33832DF41AFB202EE7AEB05145922F, 9DD0089C2E13C7F81214C3B5A4A61276292052F9BBFEA7FCD0F6AA27815D5F95 ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
14:04:22.0125 0x01a0 ohci1394 - ok
14:04:22.0171 0x01a0 [ 46F8DB73B4A53E543F8E371DC7C75BAE, F6C5E7DE4B4AE0ED785DB075BE14EA6A0FC9050C95669B26DEF2B82D7B7D3B2C ] Parport C:\WINDOWS\system32\drivers\Parport.sys
14:04:22.0171 0x01a0 Parport - ok
14:04:22.0203 0x01a0 [ BEB3BA25197665D82EC7065B724171C6, 7E71C13BA30CD95CEE8A9CC85E6F48A01F30EDEAADEE69D80AE828BF97E5A5CA ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
14:04:22.0203 0x01a0 PartMgr - ok
14:04:22.0234 0x01a0 [ 1FAE19D0457176318BBA4A8795656EBC, 5F3D6CABA203A0485D67F63A6A81151724EE200BE49ED095CFCB1EF29C19D19F ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
14:04:22.0234 0x01a0 ParVdm - ok
14:04:22.0265 0x01a0 [ 6CE351D149CB4BEFC702951E471E1730, 758327683BB45F01D5AE550AF21856822B4CF55E17F2A4F452F559088D242B37 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
14:04:22.0281 0x01a0 PCI - ok
14:04:22.0296 0x01a0 PCIDump - ok
14:04:22.0343 0x01a0 [ 2DA4EC85E0EA7A45C6B2A05820492D5A, A8C6BD93D3BC33A5B36EB523997EF9E0783B6E6EAFB6E7F58BCC2629009BDCF9 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
14:04:22.0343 0x01a0 PCIIde - ok
14:04:22.0390 0x01a0 [ 4FC31E6C19A5CE5198B1ABFF94CAE758, A031E21EC1F15DA5E8429269F435337FA961C3C06D535DAFD448C7355F33FD0C ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
14:04:22.0390 0x01a0 Pcmcia - ok
14:04:22.0406 0x01a0 PDCOMP - ok
14:04:22.0437 0x01a0 PDFRAME - ok
14:04:22.0468 0x01a0 PDRELI - ok
14:04:22.0484 0x01a0 PDRFRAME - ok
14:04:22.0515 0x01a0 perc2 - ok
14:04:22.0546 0x01a0 perc2hib - ok
14:04:22.0640 0x01a0 [ F0D2AE69035092BF22DAD6B50FAB85C2, 982ED53375D9B5F6D3CE290A93987BE98407C746C24FEC7833F9D4D4AF443AD7 ] PlugPlay C:\WINDOWS\system32\services.exe
14:04:22.0640 0x01a0 PlugPlay - ok
14:04:22.0687 0x01a0 [ 205E1B699FD3F2F9B036EEA2EC30C620, 9D5C8009BC3F6F76438FC82C3DAAA3E9CC87F74CDE841A0ADD9EF00E98DB6890 ] PnkBstrA C:\WINDOWS\system32\PnkBstrA.exe
14:04:22.0687 0x01a0 PnkBstrA - ok
14:04:22.0734 0x01a0 [ ED0A176354487CEED65B80A7148AB739, 71295D7D7684539DBD2924B437660960C01E073A521FE12D1519969327EC8DC4 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
14:04:22.0734 0x01a0 PolicyAgent - ok
14:04:22.0765 0x01a0 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99, C5F0C8C66A3AF7E7BB04CEDE4AC5306F8387AB384A2107DC5BE413AAE968EFF1 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
14:04:22.0765 0x01a0 PptpMiniport - ok
14:04:22.0796 0x01a0 [ ED0A176354487CEED65B80A7148AB739, 71295D7D7684539DBD2924B437660960C01E073A521FE12D1519969327EC8DC4 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
14:04:22.0796 0x01a0 ProtectedStorage - ok
14:04:22.0828 0x01a0 [ 09298EC810B07E5D582CB3A3F9255424, 35473A1BE25AC289474090EB0806AC6B3035DC33D1F3DF97A14BF1E361AC6AC3 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
14:04:22.0828 0x01a0 PSched - ok
14:04:22.0875 0x01a0 [ 80D317BD1C3DBC5D4FE7B1678C60CADD, DA76804B55D0CAB3DDD01EFC06673764AE4860693375C658B6063FB14AF7F12C ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
14:04:22.0875 0x01a0 Ptilink - ok
14:04:22.0906 0x01a0 ql1080 - ok
14:04:22.0921 0x01a0 Ql10wnt - ok
14:04:22.0953 0x01a0 ql12160 - ok
14:04:22.0984 0x01a0 ql1240 - ok
14:04:23.0015 0x01a0 ql1280 - ok
14:04:23.0062 0x01a0 [ FE0D99D6F31E4FAD8159F690D68DED9C, 998685622ABE631984B7E4DBF91AB3594B1F574378D75EB9F6265F4650470692 ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
14:04:23.0062 0x01a0 RasAcd - ok
14:04:23.0093 0x01a0 [ 2B5E44EA009F2F374B980E1E9A70635D, 62D8FDB80C8ACBA2C42C12760B785587C43BEDFE015EC5C41B25F2BB735EFEB0 ] RasAuto C:\WINDOWS\System32\rasauto.dll
14:04:23.0093 0x01a0 RasAuto - ok
14:04:23.0140 0x01a0 [ 11B4A627BC9614B885C4969BFA5FF8A6, EAE0A412A2B0F68919C32A96B3A08CC1A06585E4998819F5C9051745F63FF5AD ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
14:04:23.0140 0x01a0 Rasl2tp - ok
14:04:23.0203 0x01a0 [ D57554C664B64604BD1EE13EA2C07E77, B090C05B91EA602BFF9A5E89AB1A0FFDE869611961FF749DA8B3F4D00F04E756 ] RasMan C:\WINDOWS\System32\rasmans.dll
14:04:23.0203 0x01a0 RasMan - ok
14:04:23.0234 0x01a0 [ 5BC962F2654137C9909C3D4603587DEE, A5CE5653D0105240F5E86CFAAB89E7917D42D939E2F27A5A7D6979289CA651B8 ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
14:04:23.0234 0x01a0 RasPppoe - ok
14:04:23.0250 0x01a0 [ FDBB1D60066FCFBB7452FD8F9829B242, 10A2DACF944BD000032EBA8C095CB3D879CC55B28C377ADF6E52E508E47444DB ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
14:04:23.0250 0x01a0 Raspti - ok
14:04:23.0296 0x01a0 [ 7AD224AD1A1437FE28D89CF22B17780A, 6645235CA27D671954E3557FA37082881C3D7D47492C71264CD8CB8D108EC801 ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
14:04:23.0296 0x01a0 Rdbss - ok
14:04:23.0328 0x01a0 [ 4912D5B403614CE99C28420F75353332, 975341ECD660209987B5E5171B8315E032439E408CBE8A5986E67AF767F373BB ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
14:04:23.0328 0x01a0 RDPCDD - ok
14:04:23.0437 0x01a0 [ 15CABD0F7C00C47C70124907916AF3F1, 66B5C978B7FB6359AD8BAC9F568FE9D469E358FEAB07B1F129BA9E85F1DF723E ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
14:04:23.0437 0x01a0 rdpdr - ok
14:04:23.0515 0x01a0 [ 6728E45B66F93C08F11DE2E316FC70DD, EA63ECD4F84CAE08BD2BF843C48AF505B1B9D7B61349A63536C9C6FEBEF23452 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
14:04:23.0515 0x01a0 RDPWD - ok
14:04:23.0578 0x01a0 [ C0D9D9711CB74EE9BC66353D8CBDAB0E, F1AF9A26910707E76BF213D8DE5C902B0088D8A29EBDFF72DE6A4D867E298CC8 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
14:04:23.0593 0x01a0 RDSessMgr - ok
14:04:23.0625 0x01a0 [ 611BFD220305BE3A85AE876EA47D4AA5, FDF87878EB3886649025E5A12F1C3FC9072D66CCD3217944710085C1F8A4512E ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
14:04:23.0625 0x01a0 redbook - ok
14:04:23.0671 0x01a0 [ 127C26B5371651043450E52542099ABA, 98AADAD8D5211CB894AA7C59B6299861B1F44B6D8F46AB5837E7D2F5B615B14A ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
14:04:23.0671 0x01a0 RemoteAccess - ok
14:04:23.0734 0x01a0 [ 8F31505484A190D5B22274708799F4EC, 170FF8193C95CEE73B9342B6FB7D83DF4E80B2CCBB27DF41F4AB5F2FB9AF60E1 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
14:04:23.0734 0x01a0 RemoteRegistry - ok
14:04:23.0765 0x01a0 [ 718B3BDC0BC3C2F7D065A53D26202AF9, 9E58243628F1E1396AB82A80D046FF50803A230EE07B007E0CA5D744C77B091A ] RpcLocator C:\WINDOWS\system32\locator.exe
14:04:23.0765 0x01a0 RpcLocator - ok
14:04:23.0812 0x01a0 [ C868F3AE15CF71A93F2AA3A32856D839, 7F08E40AE8F4F15F110550775183EDA690DBADAC95CF859C98A99B3DF308C8F5 ] RpcSs C:\WINDOWS\System32\rpcss.dll
14:04:23.0828 0x01a0 RpcSs - ok
14:04:23.0875 0x01a0 [ 09AB2E71E58B078038E3BFDBA7FFC984, 8CA277DEEF6376B0F48C6BA5DBBC3E8AF2245983BA9AF6AB83D1A920D35FAF93 ] RSVP C:\WINDOWS\system32\rsvp.exe
14:04:23.0875 0x01a0 RSVP - ok
14:04:23.0906 0x01a0 [ ED0A176354487CEED65B80A7148AB739, 71295D7D7684539DBD2924B437660960C01E073A521FE12D1519969327EC8DC4 ] SamSs C:\WINDOWS\system32\lsass.exe
14:04:23.0906 0x01a0 SamSs - ok
14:04:23.0953 0x01a0 [ 410046E401EB11E1E6749E9DEEA41D4A, 9507268ACD24EF51E994DC418E8EB3E10DEDE61EE892226A22A5DA7662397E25 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
14:04:23.0953 0x01a0 SCardSvr - ok
14:04:24.0015 0x01a0 [ 3FF232A7731621B8902D81D42418C93C, 2030C9A843D9555170179883BD4CC1E978D5FC5EC0D7FCA56518224E428BE421 ] Schedule C:\WINDOWS\system32\schedsvc.dll
14:04:24.0015 0x01a0 Schedule - ok
14:04:24.0046 0x01a0 [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
14:04:24.0046 0x01a0 Secdrv - ok
14:04:24.0078 0x01a0 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6, 82EEB2345AC19050FAB202DE76C2CDD93E753F5AB67789A86A1726D3040C02E5 ] seclogon C:\WINDOWS\System32\seclogon.dll
14:04:24.0078 0x01a0 seclogon - ok
14:04:24.0125 0x01a0 [ A530B75C10C23C9AB28FDB6CE719E21F, 14568DF6457758E2F534A46A8E6245C364895C3993BEF2B5A889B98DBB201A27 ] SENS C:\WINDOWS\system32\sens.dll
14:04:24.0125 0x01a0 SENS - ok
14:04:24.0171 0x01a0 [ B842729337C9B921615C40D3C1A1AF96, 503670A56423B996C6ED6AE95F07FB88910767C4A2041A4BE9070C57A016E7FA ] Serial C:\WINDOWS\system32\drivers\Serial.sys
14:04:24.0171 0x01a0 Serial - ok
14:04:24.0250 0x01a0 [ 8E6B8C671615D126FDC553D1E2DE5562, CEEC0067514555D5CA489F50E3D7562FCA8DB8E952C3C878604C9277FC77959F ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
14:04:24.0250 0x01a0 Sfloppy - ok
14:04:24.0296 0x01a0 [ F58FACA9621D2DB01BD0927D9A0A208E, 239C87E09261BC9D1DBE99DABCFC4787D42289E8769563A5EFB323BE6F177C9A ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
14:04:24.0296 0x01a0 SharedAccess - ok
14:04:24.0343 0x01a0 [ B927443008910B412BEC72FC41C1BAD0, B2008DC7EBCEDA0FCCBF4BE1F3BD7F5E27E35695320236D2C9E9C0111CC44774 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
14:04:24.0343 0x01a0 ShellHWDetection - ok
14:04:24.0359 0x01a0 Simbad - ok
14:04:24.0656 0x01a0 [ 9F712B26EE3B0242DE997A42FD302E2C, 12663EB108F158282A965EE70980627C2F2332BA7944D7DE03B78E18BEB87D26 ] Skype C2C Service C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
14:04:24.0750 0x01a0 Skype C2C Service - ok
14:04:24.0843 0x01a0 [ F5BBEDF602C310B00036EB2DBF4348A5, AC2712E639F0C54BCF00EB4E90E805335871EA27AE8A45DFC53EDF28822318C4 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
14:04:24.0843 0x01a0 SkypeUpdate - ok
14:04:24.0875 0x01a0 Sparrow - ok
14:04:24.0921 0x01a0 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F, DD17733CBB370FCA08F0296704D7CBEACA3C8F76D0ABE4761C3B1FFDF7481D9E ] splitter C:\WINDOWS\system32\drivers\splitter.sys
14:04:24.0921 0x01a0 splitter - ok
14:04:24.0953 0x01a0 [ CB1090BCA0E7B40D0B5B4E4D66531809, BFA487D989B4C63FB40407A4FC877B54A3104D7394316E9B8A52E77129816B3D ] Spooler C:\WINDOWS\system32\spoolsv.exe
14:04:24.0968 0x01a0 Spooler - ok
14:04:25.0015 0x01a0 [ 94610C8653635E4459316A0050D55CE7, D148D33B3D2B0757060531C526F2161504A8D7C4E5957D092C7EBDB007271339 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
14:04:25.0015 0x01a0 sr - ok
14:04:25.0031 0x01a0 [ 35B91147124F64AC8081A2EDB9EA4DEE, 1609D19156DAC6EE3C2D2350B062966B64D9CDC289E9B8FEB6D244AAEBE90BBF ] srservice C:\WINDOWS\system32\srsvc.dll
14:04:25.0046 0x01a0 srservice - ok
14:04:25.0109 0x01a0 [ 5252605079810904E31C332E241CD59B, 039DD965DE2137219168F95CA3BF1CA7353957026BDD0481F7964E2578DF2128 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
14:04:25.0125 0x01a0 Srv - ok
14:04:25.0156 0x01a0 [ BECD5271DC4E3B7C3D035F790FCBC1E5, D63B9DB81332553C963EC5057D241CE2287AF652387333C1FD79AF8C9B5F2BA7 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
14:04:25.0171 0x01a0 SSDPSRV - ok
14:04:25.0203 0x01a0 Steam Client Service - ok
14:04:25.0250 0x01a0 [ C1CDD9275F6A115BB0AE1D55D8D27BA6, CD0511FD7F6AD832CBEB931C605AB3AD217631C57399CB8033248D27619541E4 ] stisvc C:\WINDOWS\system32\wiaservc.dll
14:04:25.0265 0x01a0 stisvc - ok
14:04:25.0296 0x01a0 [ 3941D127AEF12E93ADDF6FE6EE027E0F, EA1F0E32E1C5E90FA4AAC421DEBBE086512340758D3217A6334E886BCE638B51 ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
14:04:25.0296 0x01a0 swenum - ok
14:04:25.0328 0x01a0 [ 8CE882BCC6CF8A62F2B2323D95CB3D01, B408550A581F3DA222355964AFA4E976AD8471F0AA37573C42C4948AE5A23A3B ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
14:04:25.0343 0x01a0 swmidi - ok
14:04:25.0359 0x01a0 SwPrv - ok
14:04:25.0375 0x01a0 symc810 - ok
14:04:25.0406 0x01a0 symc8xx - ok
14:04:25.0437 0x01a0 sym_hi - ok
14:04:25.0468 0x01a0 sym_u3 - ok
14:04:25.0500 0x01a0 [ 8B83F3ED0F1688B4958F77CD6D2BF290, 546D3602183702B4F53E84413CFA2C933D64C8540378E54A8DCD148F3F36A2DA ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
14:04:25.0500 0x01a0 sysaudio - ok
14:04:25.0562 0x01a0 [ CE06F01B88ACE199A1BF460CAC29C110, 3CD89E5B8E53203287D889C107E4795225742DB6C6ACA2DC0611BD9728382A27 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
14:04:25.0562 0x01a0 SysmonLog - ok
14:04:25.0593 0x01a0 [ DFF91B06828380ADD3A15BF73C2F9BFD, A966C911A9DD4388DAF9A080780334484CCB6A7EC5CC0E99D823DDF5ADC43E58 ] tap0901 C:\WINDOWS\system32\DRIVERS\tap0901.sys
14:04:25.0593 0x01a0 tap0901 - ok
14:04:25.0640 0x01a0 [ C2546CD7A398476F9DF5614B2AE160E8, 11C8435BA983553E9C0806494E9B3C7080515C0375B0604F029D89B50726161A ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
14:04:25.0656 0x01a0 TapiSrv - ok
14:04:25.0718 0x01a0 [ 93EA8D04EC73A85DB02EB8805988F733, 013008E23F5F14E0C836C28524D1181759BAF84530C6331163882A772217F398 ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
14:04:25.0734 0x01a0 Tcpip - ok
14:04:25.0765 0x01a0 [ 6471A66807F5E104E4885F5B67349397, F35CBFFB8BB235CCE30EF94A5273333900DD49FD506BF9D55D99A320B8A53A5A ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
14:04:25.0781 0x01a0 TDPIPE - ok
14:04:25.0812 0x01a0 [ C56B6D0402371CF3700EB322EF3AAF61, 7743FA4C734BCE38EFB1CA69BC17364D8421E2CD172F856F7E38E7AE1EE93F2F ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
14:04:25.0812 0x01a0 TDTCP - ok
14:04:25.0859 0x01a0 [ 88155247177638048422893737429D9E, B6D4E8691917946332C2208D01F8C8281978C1AD1E9951C5D99DF0D49AC34B3B ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
14:04:25.0859 0x01a0 TermDD - ok
14:04:25.0921 0x01a0 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E, 3D2B1D899061448EAD993CDE97D1EF50DD64728E9F44D80FEAE591198A937653 ] TermService C:\WINDOWS\System32\termsrv.dll
14:04:25.0937 0x01a0 TermService - ok
14:04:25.0968 0x01a0 [ B927443008910B412BEC72FC41C1BAD0, B2008DC7EBCEDA0FCCBF4BE1F3BD7F5E27E35695320236D2C9E9C0111CC44774 ] Themes C:\WINDOWS\System32\shsvcs.dll
14:04:25.0968 0x01a0 Themes - ok
14:04:26.0031 0x01a0 [ CD0CC7B167D78043A41C98D4921EFB54, 31AAB5D6D6BA52EBDDE1B5DEB8F9B4D9597FFBA4485F959C846F635060CCB5C0 ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
14:04:26.0031 0x01a0 TlntSvr - ok
14:04:26.0046 0x01a0 TosIde - ok
14:04:26.0093 0x01a0 [ 38853304CCB938D30E0C4CDE8D2C2A8A, 966E7BCC9F63A1A7777F8A12E51C2A91EC688CE96109943ADC4CB4EB58DC34A6 ] TrkWks C:\WINDOWS\system32\trkwks.dll
14:04:26.0093 0x01a0 TrkWks - ok
14:04:26.0171 0x01a0 [ 5787B80C2E3C5E2F56C2A233D91FA2C9, 3774905CF77954DFCECDA5BCC7CDE3D0ED72712BFAAD85ADAE5246306447E46C ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
14:04:26.0171 0x01a0 Udfs - ok
14:04:26.0203 0x01a0 ultra - ok
14:04:26.0281 0x01a0 [ C81B8635DEE0D3EF5F64B3DD643023A5, 6D7438A5FB7168352099F726BD0980AD398A7CFE929B8D2BD362B238C1540D85 ] UMWdf C:\WINDOWS\system32\wdfmgr.exe
14:04:26.0281 0x01a0 UMWdf - ok
14:04:26.0343 0x01a0 [ 402DDC88356B1BAC0EE3DD1580C76A31, 32A686595710336A6BFD54C03F552AE39439611662F84EF5D24193AE5665C6F3 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
14:04:26.0359 0x01a0 Update - ok
14:04:26.0406 0x01a0 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E, AF7662BCA0819F82CE5EE0863E47149CC127DE664CB3DC6359B63FBD71DB54F8 ] upnphost C:\WINDOWS\System32\upnphost.dll
14:04:26.0421 0x01a0 upnphost - ok
14:04:26.0437 0x01a0 [ 20A0F6A11959E92908717D09E87D670D, 3DD6C99AB0F70FAA43DF470B30078B8A51B8AF735CD5C50DBB195FEA70F4C36E ] UPS C:\WINDOWS\System32\ups.exe
14:04:26.0453 0x01a0 UPS - ok
14:04:26.0500 0x01a0 [ 173F317CE0DB8E21322E71B7E60A27E8, 7042441BA63AE38AE9D7BE0BC5CA7404FC9EE5BB3F084604A68F01E82769652A ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
14:04:26.0500 0x01a0 usbccgp - ok
14:04:26.0562 0x01a0 [ 65DCF09D0E37D4C6B11B5B0B76D470A7, 90EBA8BAF45932B453D905EDF2BDDDF3A432BFD50B9F7DF58CDEAE98D11C2E2F ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
14:04:26.0562 0x01a0 usbehci - ok
14:04:26.0593 0x01a0 [ 1AB3CDDE553B6E064D2E754EFE20285C, A99C4528C4227B1E96847614745AAFACD3C5F1BDFE435214DBF78740FFB300FE ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
14:04:26.0593 0x01a0 usbhub - ok
14:04:26.0656 0x01a0 [ A0B8CF9DEB1184FBDD20784A58FA75D4, D8AFD45BD9CF7B02F2554AA6085194DE82893AF794EDF479BC9B9E9C1758DC75 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
14:04:26.0656 0x01a0 usbscan - ok
14:04:26.0687 0x01a0 [ A32426D9B14A089EAA1D922E0C5801A9, ED1DC52EE45F8EAD3AEC4B1F817BB25634141CF48295494C5947DCE6CF7A9817 ] usbstor C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
14:04:26.0687 0x01a0 usbstor - ok
14:04:26.0718 0x01a0 [ 26496F9DEE2D787FC3E61AD54821FFE6, 8BE7FF647470B9A951CBB478FAF83D657A15CC78037F42348A6B738F21D523DA ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
14:04:26.0718 0x01a0 usbuhci - ok
14:04:26.0765 0x01a0 [ 0D3A8FAFCEACD8B7625CD549757A7DF1, B9CFDEFCD66AA139F3DC2F967B184669532922563AD5A71769BABDC4370D065E ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
14:04:26.0765 0x01a0 VgaSave - ok
14:04:26.0781 0x01a0 ViaIde - ok
14:04:26.0828 0x01a0 [ 28A4B296B47782173C346E376CB374D1, FE799FE4A41752A2B47027EA88214BF3E39B317302939F4A2D0F2A4EFAAC2F13 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
14:04:26.0843 0x01a0 VolSnap - ok
14:04:26.0875 0x01a0 [ D6BA1A63D9E00933F1CD2A885573AFB2, 36311A060635CEC1DBB6D8A746B8A4D007706EAE97D51A5E12F9958AB16BE486 ] VSS C:\WINDOWS\System32\vssvc.exe
14:04:26.0890 0x01a0 VSS - ok
14:04:26.0953 0x01a0 [ FA4E1CDBA256787F2149F4AAD07BC91F, 1B5FC5248335D70094D04501AA2C30F54782B58FF8D573BE8E784A21529C7CAF ] W32Time C:\WINDOWS\system32\w32time.dll
14:04:26.0953 0x01a0 W32Time - ok
14:04:27.0000 0x01a0 [ E20B95BAEDB550F32DD489265C1DA1F6, 5589B2067E6C9FBA290D8C5EADDC198EBAF39C50C3CD7D2BC5CDA7CBFBC445E5 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
14:04:27.0000 0x01a0 Wanarp - ok
14:04:27.0093 0x01a0 [ BBCFEAB7E871CDDAC2D397EE7FA91FDC, 06FC132E0E256B9A4E4DDD05D3AF4D75E40C750ECCF94A76251B104C65CFFCDF ] Wdf01000 C:\WINDOWS\system32\Drivers\wdf01000.sys
14:04:27.0093 0x01a0 Wdf01000 - ok
14:04:27.0125 0x01a0 WDICA - ok
14:04:27.0187 0x01a0 [ 6768ACF64B18196494413695F0C3A00F, 3A8F8586F1D997D19A8478345338D2AECD785AEABDB61531DD3F92003D3230A5 ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
14:04:27.0187 0x01a0 wdmaud - ok
14:04:27.0234 0x01a0 [ 47AE51048A82DFA1CD6B51D369F7E169, 742F2162B8BDE00D83715093EA9743338964597ED22648B9F4F139D7278235A4 ] WebClient C:\WINDOWS\System32\webclnt.dll
14:04:27.0250 0x01a0 WebClient - ok
14:04:27.0375 0x01a0 [ E488332126E3B1182D2B8A0C35408EC6, F9F60911DF0A539753B2BEF6FAD2D0AED1BC1C3F43509F79D9AF2F810CDE5D9B ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
14:04:27.0375 0x01a0 winmgmt - ok
14:04:27.0453 0x01a0 [ FD600B032E741EB6AAB509FC630F7C42, 2AF671D0648A5C2D2C4A7D0FDE803F07CC079CF1FA4E237DB912A8C77D9EC1F6 ] WinUSB C:\WINDOWS\system32\DRIVERS\WinUSB.sys
14:04:27.0453 0x01a0 WinUSB - ok
14:04:27.0484 0x01a0 [ A477391B7A8B0A0DAABADB17CF533A4B, 9B1929B5BBF2738BA3D402809FCB8DAA09EF4727F860567895D5E73EBE43E627 ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
14:04:27.0484 0x01a0 WmdmPmSN - ok
14:04:27.0546 0x01a0 [ 6538D6BDE04B56737FE743C24D4CE83D, 66F807C849FE7E4ED327915F2901D03D7C4B33530BD2D801C9A47E1483455F91 ] Wmi C:\WINDOWS\System32\advapi32.dll
14:04:27.0578 0x01a0 Wmi - ok
14:04:27.0625 0x01a0 [ 23F6F03272F7E5679F1F050AED5ACEE6, 87EBE773F3E8FFE2F1E1DB435BB0E8852031AA88112EB791085AD3DA918B49CC ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
14:04:27.0640 0x01a0 WmiApSrv - ok
14:04:27.0781 0x01a0 [ 3739866D20ABD42F26A7B85F9E2560AF, 9DD01194A553590146A1A1D790B2F891D244C8C0EE34DA423CF2B1F7418BD3AC ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
14:04:27.0796 0x01a0 WMPNetworkSvc - ok
14:04:27.0937 0x01a0 [ DCF3E3EDF5109EE8BC02FE6E1F045795, 4B8E14B1CFB095982D34DAEC336114F5039D7793080FB787DC95A63B6B945DD0 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
14:04:27.0953 0x01a0 WPFFontCache_v0400 - ok
14:04:28.0015 0x01a0 [ 6ABE6E225ADB5A751622A9CC3BC19CE8, 4061C5D0F051DFF1730E2A3BFC1CCA97B29602FC50F10F6B44D93B0D28F42024 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
14:04:28.0015 0x01a0 WS2IFSL - ok
14:04:28.0062 0x01a0 [ 4C86D5FAF78194995AF9CC1075F65DD3, D3B23BB0971E0DBC0A51720067489C224323B603178E91149BF56F779DE352F0 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
14:04:28.0062 0x01a0 wscsvc - ok
14:04:28.0093 0x01a0 [ C1364564800EE9784192145324A23308, 5345BAE00364233594C9CF99CE2CC485E65B5D4FFBB81C86B2950EDA2427584C ] wuauserv C:\WINDOWS\system32\wuauserv.dll
14:04:28.0093 0x01a0 wuauserv - ok
14:04:28.0125 0x01a0 [ F15FEAFFFBB3644CCC80C5DA584E6311, 79B3E9AF35976CE49921E9BEA3BA3B4A8AF762FD3F284B62954038B5FFB32471 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
14:04:28.0140 0x01a0 WudfPf - ok
14:04:28.0171 0x01a0 [ 28B524262BCE6DE1F7EF9F510BA3985B, AEFF02B899801A63CBB262757C3D4369E38BFF0690BD085DE60E873DFBE3C3F4 ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
14:04:28.0171 0x01a0 WudfRd - ok
14:04:28.0218 0x01a0 [ 05231C04253C5BC30B26CBAAE680ED89, 5C03C2D7E0B573646D32F4093E2FF2C3BA391C39F5BA37D67F69D38E357FCC3D ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
14:04:28.0218 0x01a0 WudfSvc - ok
14:04:28.0281 0x01a0 [ A27D4BA7264C0BF52F32D10405BEA1D4, 5F28607CCAB15FB601BEB35FF0B1A5CD27C678C6D1CA724E842C33EED4579B8C ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
14:04:28.0296 0x01a0 WZCSVC - ok
14:04:28.0328 0x01a0 [ EAA4BB9EDB3FB10CF8979FE65E63658F, B80EB477100FD3E26513360E09DB6EBF0C8D8B0618F1F4BF1F387ABA6DEC9B64 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
14:04:28.0328 0x01a0 xmlprov - ok
14:04:28.0359 0x01a0 ================ Scan global ===============================
14:04:28.0390 0x01a0 [ F36278E42C8C5DF03CE17DAC8231C91C, D012A3C8F394DF4F0BF5D5A4C10E73BBF427762B7D3DB6CF5FAB96536E082B7A ] C:\WINDOWS\system32\basesrv.dll
14:04:28.0421 0x01a0 [ 77A41C497ADB0C96D1E8DF6F71D843C0, 39A425A66B127F91B9A6FB5A0832B51ACD5928645D62D09FDA0AB95D3836E479 ] C:\WINDOWS\system32\winsrv.dll
14:04:28.0437 0x01a0 [ 77A41C497ADB0C96D1E8DF6F71D843C0, 39A425A66B127F91B9A6FB5A0832B51ACD5928645D62D09FDA0AB95D3836E479 ] C:\WINDOWS\system32\winsrv.dll
14:04:28.0468 0x01a0 [ F0D2AE69035092BF22DAD6B50FAB85C2, 982ED53375D9B5F6D3CE290A93987BE98407C746C24FEC7833F9D4D4AF443AD7 ] C:\WINDOWS\system32\services.exe
14:04:28.0468 0x01a0 [ Global ] - ok
14:04:28.0468 0x01a0 ================ Scan MBR ==================================
14:04:28.0500 0x01a0 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk0\DR0
14:04:28.0703 0x01a0 \Device\Harddisk0\DR0 - ok
14:04:28.0718 0x01a0 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
14:04:28.0734 0x01a0 \Device\Harddisk1\DR1 - ok
14:04:28.0734 0x01a0 ================ Scan VBR ==================================
14:04:28.0750 0x01a0 [ 99C197118DFE0A679D3B297AF9A3E2C3 ] \Device\Harddisk0\DR0\Partition1
14:04:28.0750 0x01a0 \Device\Harddisk0\DR0\Partition1 - ok
14:04:28.0765 0x01a0 Waiting for KSN requests completion. In queue: 183
14:04:29.0765 0x01a0 Waiting for KSN requests completion. In queue: 183
14:04:30.0765 0x01a0 Waiting for KSN requests completion. In queue: 183
14:04:31.0812 0x01a0 Win FW state via NFM: enabled
14:04:34.0171 0x01a0 ============================================================
14:04:34.0171 0x01a0 Scan finished
14:04:34.0171 0x01a0 ============================================================
14:04:34.0187 0x0760 Detected object count: 0
14:04:34.0187 0x0760 Actual detected object count: 0
14:04:38.0812 0x07e8 Deinitialize success