PC-HELP.CZ

Ahoj,
chtěl bych požádat o kontrolu.

Díky

Zde je:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:32:04, on 24.1.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Advanced SystemCare 6\Monitor.exe
C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
C:\Users\Honza\AppData\Local\Pokki\v0.260.9.182\pokki.exe
C:\Program Files (x86)\BitTorrent\BitTorrent.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
C:\Program Files (x86)\Ask.com\Updater\Updater.exe
C:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\AVG Secure Search\vprot.exe
C:\Program Files (x86)\BlueStacks\HD-Agent.exe
C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Users\Honza\AppData\Local\Pokki\v0.260.9.182\pokki.exe
C:\Program Files (x86)\Nightly\firefox.exe
C:\Program Files (x86)\Nightly\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe
C:\Users\Honza\AppData\Local\Temp\mexe.com
C:\Program Files (x86)\Screenshot Studio\sstudio.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000.10005&barid={2E69EE17-6159-11E2-99B4-14DAE9A4E3D6}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000.10005&barid={2E69EE17-6159-11E2-99B4-14DAE9A4E3D6}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.7\iobitappsToolbarIE.dll
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: BitTorrentControl_v12 Toolbar - {b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14} - C:\Program Files (x86)\BitTorrentControl_v12\prxtbBitT.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.7\iobitappsToolbarIE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\13.3.0.17\AVG Secure Search_toolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: BitTorrentControl_v12 - {b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14} - C:\Program Files (x86)\BitTorrentControl_v12\prxtbBitT.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: BitTorrentControl_v12 Toolbar - {b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14} - C:\Program Files (x86)\BitTorrentControl_v12\prxtbBitT.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\13.3.0.17\AVG Secure Search_toolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.7\iobitappsToolbarIE.dll
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKCU\..\Run: [Pokki] "C:\Users\Honza\AppData\Local\Pokki\v0.260.9.182\pokki.exe"
O4 - HKCU\..\Run: [Advanced SystemCare 6] "C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com.tw/common/asusTek_sys_ctrl.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\13.3.2\ViProtocol.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

Odinstaluj:
Google Toolbar
Ask Toolbar
Yoonto Bar
AVG Secure Search
Bittorrent toolbar
SweetIM
Iobit app toolbar

Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

pak znovu HJT

# AdwCleaner v2.107 - Logfile created 01/24/2013 at 14:09:26
# Updated 21/01/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Honza - HONZA-PC
# Boot Mode : Normal
# Running from : C:\Users\Honza\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

File Found : C:\user.js
File Found : C:\Windows\Tasks\AmiUpdXp.job
Folder Found : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Found : C:\Program Files (x86)\Common Files\spigot
Folder Found : C:\Program Files (x86)\Conduit
Folder Found : C:\ProgramData\Tarma Installer
Folder Found : C:\Users\Honza\AppData\Local\Conduit
Folder Found : C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Folder Found : C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc
Folder Found : C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Folder Found : C:\Users\Honza\AppData\Local\SwvUpdater
Folder Found : C:\Users\Honza\AppData\LocalLow\Conduit
Folder Found : C:\Users\Honza\AppData\Roaming\OpenCandy

***** [Registry] *****

Key Found : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Found : HKCU\Software\AppDataLow\Software\Search Settings
Key Found : HKCU\Software\AppDataLow\Software\SmartBar
Key Found : HKCU\Software\Ask.com.tmp
Key Found : HKCU\Software\AVG Secure Search
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Google\Chrome\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKLM\Software\AVG Secure Search
Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3225826
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Found : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Key Found : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Found : HKLM\Software\Conduit
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : HKLM\SOFTWARE\Tarma Installer
Key Found : HKU\S-1-5-21-4118014882-1329373572-24983167-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKU\S-1-5-21-4118014882-1329373572-24983167-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKU\S-1-5-21-4118014882-1329373572-24983167-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16457

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://home.sweetim.com/?crg=3.1010000.10005&barid={2E69EE17-6159-11E2-99B4-14DAE9A4E3D6}
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://home.sweetim.com/?crg=3.1010000.10005&barid={2E69EE17-6159-11E2-99B4-14DAE9A4E3D6}

-\\ Mozilla Firefox v18.0.1 (cs)

File : C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\rybm8b9t.default\prefs.js

Found : user_pref("browser.search.order.1", "Ask.com");

-\\ Google Chrome v24.0.1312.52

File : C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Preferences

Found [l.18] : urls_to_restore_on_startup = [ "hxxp://search.conduit.com/?ctid=CT3225826&SearchSource=48", "hxxp://home.sweetim.com/?crg=3.1010000.10005&barid={2E69EE17-6159-11E2-99B4-14DAE9A4E3D6}" ]
Found [l.2439] : urls_to_restore_on_startup = [ "hxxp://search.conduit.com/?ctid=CT3225826&SearchSource=48", "hxxp://home.sweetim.com/?crg=3.1010000.10005&barid={2E69EE17-6159-11E2-99B4-14DAE9A4E3D6}" ]

*************************

AdwCleaner[R1].txt - [9482 octets] - [24/01/2013 14:04:49]
AdwCleaner[R2].txt - [9348 octets] - [24/01/2013 14:08:29]
AdwCleaner[R3].txt - [9231 octets] - [24/01/2013 14:09:26]

########## EOF - C:\AdwCleaner[R3].txt - [9291 octets] ##########

V AdwCleaner nech vše smazat a dej log

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
- Pokud používáš Firefox, klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Chrome, nic dalšího nevybírej a dej Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(ZATÍM SÁM NIC NEMAŽ!).
Vlož sem pak obsah toho logu.

Ten 1. odkza mi hlasi chybu ze nejde najit.

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.01.24.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Honza :: HONZA-PC [administrátor]

Ochrana: Povolena

24.1.2013 14:55:14
MBAM-log-2013-01-24 (15-27-59).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 208827
Uplynulý čas: 6 minut, 12 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 6
HKCR\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9} (PUP.Software.Updater) -> Nebyla provedena žádná instrukce.
HKCR\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476} (PUP.Software.Updater) -> Nebyla provedena žádná instrukce.
HKCR\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} (PUP.Software.Updater) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} (PUP.Software.Updater) -> Nebyla provedena žádná instrukce.
HKCR\Updater.AmiUpd.1 (PUP.Software.Updater) -> Nebyla provedena žádná instrukce.
HKCR\Updater.AmiUpd (PUP.Software.Updater) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 3
HKLM\SOFTWARE\Microsoft\Security Center|AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Špatný: (1) Dobrý: (0) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Security Center|FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Špatný: (1) Dobrý: (0) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Security Center|UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Špatný: (1) Dobrý: (0) -> Nebyla provedena žádná instrukce.

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 2
C:\Users\Honza\AppData\Local\SwvUpdater\Updater.exe (PUP.Software.Updater) -> Nebyla provedena žádná instrukce.
C:\Windows\Tasks\AmiUpdXp.job (PUP.Software.Updater) -> Nebyla provedena žádná instrukce.

(konec)

V Mbam vše smaž

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je označen pro odstranění, stačí restartovat počítač.

TDSSKiller:
18:26:09.0597 2624 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
18:26:09.0831 2624 ============================================================
18:26:09.0831 2624 Current date / time: 2013/01/25 18:26:09.0831
18:26:09.0831 2624 SystemInfo:
18:26:09.0831 2624
18:26:09.0831 2624 OS Version: 6.1.7601 ServicePack: 1.0
18:26:09.0831 2624 Product type: Workstation
18:26:09.0831 2624 ComputerName: HONZA-PC
18:26:09.0831 2624 UserName: Honza
18:26:09.0831 2624 Windows directory: C:\Windows
18:26:09.0831 2624 System windows directory: C:\Windows
18:26:09.0831 2624 Running under WOW64
18:26:09.0831 2624 Processor architecture: Intel x64
18:26:09.0831 2624 Number of processors: 2
18:26:09.0831 2624 Page size: 0x1000
18:26:09.0831 2624 Boot type: Normal boot
18:26:09.0831 2624 ============================================================
18:26:11.0422 2624 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:26:11.0453 2624 ============================================================
18:26:11.0453 2624 \Device\Harddisk0\DR0:
18:26:11.0453 2624 MBR partitions:
18:26:11.0453 2624 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3200800, BlocksNum 0x258D4000
18:26:11.0469 2624 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x28AD5000, BlocksNum 0x2EA71000
18:26:11.0469 2624 ============================================================
18:26:11.0515 2624 C: <-> \Device\Harddisk0\DR0\Partition1
18:26:11.0578 2624 D: <-> \Device\Harddisk0\DR0\Partition2
18:26:11.0578 2624 ============================================================
18:26:11.0578 2624 Initialize success
18:26:11.0578 2624 ============================================================

ComboFix:
ComboFix 13-01-24.02 - Honza 25.01.2013 19:02:15.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.7788.5821 [GMT 1:00]
Spuštěný z: c:\users\Honza\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2013 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: AVG Anti-Virus Free Edition 2013 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: IObit Malware Fighter *Disabled/Outdated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: IObit Security 360 *Disabled/Outdated* {FAE2835A-B90A-9E7A-85DA-82DBDA7C1E3A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Skype
c:\skype\desktop.ini
c:\skype\Phone\Skype.exe
c:\skype\third-party_attributions.txt
c:\skype\Toolbars\Internet Explorer\icon.ico
c:\skype\Toolbars\Internet Explorer\skypeieplugin.dll
c:\skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe
c:\skype\Toolbars\Internet Explorer\uninstall.ico
c:\skype\Toolbars\Shared\SkypeBrowserOptions.dll
c:\skype\Toolbars\Shared\SkypePnr.dll
c:\skype\Toolbars\SkypeToolbars.msi
c:\skype\Updater\Updater.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-25 do 2013-01-25 )))))))))))))))))))))))))))))))
.
.
2013-01-25 18:11 . 2013-01-25 18:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-01-25 16:49 . 2013-01-25 17:24 -------- d-----w- c:\program files (x86)\Nightly
2013-01-25 14:54 . 2013-01-25 14:54 -------- d-----w- c:\program files (x86)\AppGraffiti
2013-01-25 14:14 . 2013-01-25 14:14 -------- d-----w- c:\program files (x86)\Inbox.com
2013-01-25 14:13 . 2013-01-25 17:21 -------- d-----w- c:\program files (x86)\RebateInformer
2013-01-25 14:13 . 2013-01-25 14:13 -------- d-----w- c:\users\Honza\AppData\Roaming\24x7 Help
2013-01-25 14:13 . 2013-01-25 14:13 -------- d-----w- c:\program files (x86)\24x7Help
2013-01-25 14:12 . 2013-01-25 14:12 -------- d-----w- c:\program files (x86)\Inbox Toolbar
2013-01-25 00:18 . 2013-01-25 00:18 11285024 ----a-w- c:\users\Honza\AppData\Roaming\Microsoft\Windows\Templates\IS360Setup.exe
2013-01-24 23:59 . 2013-01-25 00:40 -------- d-----w- c:\users\Honza\AppData\Roaming\.minecraft
2013-01-24 23:37 . 2013-01-24 23:47 -------- d-----w- c:\program files (x86)\YouRecorder Free
2013-01-24 23:33 . 2009-04-22 13:32 47672 ----a-w- c:\windows\system32\drivers\AmdLLD64.sys
2013-01-24 23:33 . 2013-01-24 23:33 -------- d-----w- c:\program files (x86)\AMD
2013-01-24 22:45 . 2013-01-24 22:45 -------- d-----w- c:\program files (x86)\Driver-Soft
2013-01-24 22:19 . 2013-01-24 22:19 -------- d-----w- c:\program files (x86)\Common Files\Java
2013-01-24 22:18 . 2013-01-24 22:18 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-01-24 21:47 . 2013-01-24 21:46 308640 ----a-w- c:\windows\system32\javaws.exe
2013-01-24 21:47 . 2013-01-24 21:46 1081760 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-01-24 21:47 . 2013-01-24 21:46 960416 ----a-w- c:\windows\system32\deployJava1.dll
2013-01-24 21:46 . 2013-01-24 21:46 108448 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2013-01-24 21:46 . 2013-01-24 21:46 188832 ----a-w- c:\windows\system32\javaw.exe
2013-01-24 21:46 . 2013-01-24 21:46 188832 ----a-w- c:\windows\system32\java.exe
2013-01-24 21:46 . 2013-01-24 21:46 -------- d-----w- c:\program files\Java
2013-01-24 21:04 . 2013-01-24 21:04 -------- d-----w- c:\users\Honza\AppData\Local\Hewlett-Packard_Company
2013-01-24 13:53 . 2013-01-24 13:53 -------- d-----w- c:\users\Honza\AppData\Roaming\Malwarebytes
2013-01-24 13:52 . 2013-01-24 13:52 -------- d-----w- c:\programdata\Malwarebytes
2013-01-24 13:52 . 2013-01-24 13:52 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-01-24 13:52 . 2012-12-14 15:49 24176 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-01-24 13:52 . 2013-01-24 13:52 -------- d-----w- c:\users\Honza\AppData\Local\Programs
2013-01-24 13:25 . 2013-01-24 13:25 -------- d-----w- c:\users\Honza\AppData\Local\AVG Secure Search
2013-01-24 11:31 . 2013-01-24 11:31 388096 ----a-r- c:\users\Honza\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-01-24 11:31 . 2013-01-24 11:31 -------- d-----w- c:\program files (x86)\Trend Micro
2013-01-24 11:26 . 2013-01-24 11:26 -------- d-----w- c:\program files\CPUID
2013-01-24 11:01 . 2013-01-24 11:01 -------- d---a-w- c:\windows\VDLL.DLL
2013-01-24 11:01 . 2013-01-24 11:01 -------- d---a-w- c:\windows\SysWow64\runouce.exe
2013-01-24 11:01 . 2013-01-24 11:01 -------- d---a-w- c:\windows\rundll16.exe
2013-01-24 11:01 . 2013-01-24 11:01 -------- d---a-w- c:\windows\RUNDL132.EXE
2013-01-24 11:01 . 2013-01-24 11:01 -------- d---a-w- c:\windows\logo1_.exe
2013-01-24 11:01 . 2013-01-24 11:01 -------- d---a-w- c:\windows\logo_1.exe
2013-01-24 10:49 . 2013-01-24 10:49 632064 ----a-w- c:\windows\SysWow64\msvcr80.dll
2013-01-24 10:49 . 2013-01-24 10:49 554240 ----a-w- c:\windows\SysWow64\msvcp80.dll
2013-01-24 10:49 . 2013-01-24 10:49 34048 ----a-w- c:\windows\SysWow64\eEmpty.exe
2013-01-24 10:49 . 2013-01-24 10:49 -------- d-----w- c:\program files (x86)\Common Files\MicroWorld
2013-01-24 10:49 . 2013-01-24 10:49 -------- d-----w- c:\programdata\MicroWorld
2013-01-23 23:09 . 2013-01-23 23:09 -------- d-----w- c:\program files\CCleaner
2013-01-23 20:54 . 2013-01-23 20:54 -------- d-----w- c:\users\Honza\AppData\Local\Macromedia
2013-01-23 20:38 . 2013-01-23 20:38 -------- d-----w- c:\users\Honza\AppData\Roaming\Screenshot Studio
2013-01-23 20:31 . 2013-01-23 20:31 -------- d-sh--w- c:\programdata\System Restore
2013-01-23 20:30 . 2013-01-23 20:31 -------- d-----w- c:\program files (x86)\Screenshot Studio
2013-01-23 20:24 . 2012-05-08 17:34 32600 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2013-01-23 20:24 . 2010-11-26 17:02 17720 ----a-w- c:\windows\system32\drivers\SmartDefragDriver.sys
2013-01-23 20:13 . 2013-01-23 20:13 -------- d-----w- c:\users\Honza\AppData\Local\Razer
2013-01-23 20:12 . 2013-01-23 20:12 -------- d-----w- c:\programdata\Razer
2013-01-23 20:12 . 2013-01-23 20:12 -------- d-----w- c:\program files (x86)\Razer
2013-01-23 18:10 . 2013-01-23 18:24 -------- d-----w- c:\program files (x86)\rajce
2013-01-23 16:17 . 2013-01-23 16:17 -------- d-----w- c:\users\Honza\AppData\Local\Mozilla
2013-01-23 16:16 . 2013-01-25 17:27 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2013-01-23 15:55 . 2013-01-15 17:49 26432 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2013-01-23 15:40 . 2013-01-23 15:40 -------- d-----w- c:\programdata\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-01-23 15:40 . 2013-01-25 00:18 -------- d-----w- c:\programdata\IObit
2013-01-23 15:40 . 2013-01-25 17:29 -------- d-----w- c:\users\Honza\AppData\Roaming\IObit
2013-01-23 15:40 . 2013-01-25 00:18 -------- d-----w- c:\program files (x86)\IObit
2013-01-23 15:14 . 2013-01-23 15:14 -------- d-----w- c:\users\Honza\AppData\Roaming\Ulozto File Manager
2013-01-23 15:13 . 2013-01-23 15:13 -------- d-----w- c:\program files (x86)\Ulozto File Manager
2013-01-18 10:27 . 2013-01-18 10:27 -------- d-----w- c:\program files (x86)\GotClip
2013-01-18 10:23 . 2013-01-18 10:23 -------- d-----w- c:\users\Honza\AppData\Local\SwvUpdater
2013-01-17 20:36 . 2011-10-03 22:49 2770944 ----a-w- c:\windows\system32\drivers\athrx.sys
2013-01-17 20:36 . 2011-10-03 22:49 2770944 ----a-w- c:\windows\system32\athrx.sys
2013-01-17 20:36 . 2013-01-17 20:37 -------- d-----w- c:\program files (x86)\Qualcomm Atheros WiFi Driver Installation
2013-01-17 20:36 . 2013-01-17 20:36 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2013-01-17 20:33 . 2013-01-17 20:33 -------- d-----w- c:\programdata\Qualcomm Atheros
2013-01-17 19:42 . 2013-01-17 19:42 -------- d-----w- c:\program files (x86)\Lavalys
2013-01-12 13:44 . 2013-01-12 13:44 -------- d-----w- c:\program files (x86)\HLPSOFT
2013-01-12 13:44 . 2002-06-06 15:13 1077344 ----a-w- c:\windows\SysWow64\mscomctl.ocx
2013-01-12 10:21 . 2013-01-24 23:49 -------- d-----w- c:\users\Honza\AppData\Local\Pokki
2013-01-12 09:51 . 2013-01-17 19:44 -------- d-----w- c:\users\Honza\AppData\Local\ElevatedDiagnostics
2013-01-12 09:34 . 2013-01-12 09:34 -------- d-----w- c:\program files (x86)\AVG Secure Search
2013-01-09 13:20 . 2012-11-09 05:45 750592 ----a-w- c:\windows\system32\win32spl.dll
2013-01-09 13:20 . 2012-11-09 04:43 492032 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-01-09 13:12 . 2012-11-01 05:43 2002432 ----a-w- c:\windows\system32\msxml6.dll
2013-01-09 13:12 . 2012-11-01 05:43 1882624 ----a-w- c:\windows\system32\msxml3.dll
2013-01-09 13:12 . 2012-11-01 04:47 1389568 ----a-w- c:\windows\SysWow64\msxml6.dll
2013-01-09 13:12 . 2012-11-01 04:47 1236992 ----a-w- c:\windows\SysWow64\msxml3.dll
2013-01-09 13:06 . 2012-11-30 05:41 424448 ----a-w- c:\windows\system32\KernelBase.dll
2013-01-09 13:05 . 2012-11-23 03:13 68608 ----a-w- c:\windows\system32\taskhost.exe
2013-01-09 13:05 . 2012-11-23 03:26 3149824 ----a-w- c:\windows\system32\win32k.sys
2013-01-09 12:10 . 2013-01-09 12:10 76232 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A15A63F4-16CE-4913-841F-1ADFA260500B}\offreg.dll
2013-01-08 13:09 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A15A63F4-16CE-4913-841F-1ADFA260500B}\mpengine.dll
2013-01-02 10:29 . 2013-01-02 10:30 -------- d-----w- c:\program files (x86)\M2Fish
2013-01-02 10:16 . 2013-01-17 21:57 -------- d-----w- c:\windows\SysWow64\FRVREW
2013-01-02 10:04 . 2013-01-17 22:00 -------- d-sh--w- c:\windows\SysWow64\OGUBSK
2013-01-02 09:54 . 2013-01-17 22:00 -------- d-sh--w- c:\windows\SysWow64\WLGGBN
2013-01-02 08:40 . 2013-01-02 08:40 -------- d-----w- c:\users\Honza\AppData\Local\AMD
2013-01-02 08:40 . 2013-01-02 08:40 -------- d-----w- c:\programdata\ATI
2013-01-02 08:34 . 2013-01-02 08:34 0 ----a-w- c:\windows\ativpsrm.bin
2013-01-02 08:32 . 2013-01-02 08:32 -------- d-----w- c:\program files (x86)\AMD AVT
2013-01-02 08:32 . 2013-01-02 08:32 -------- d-----w- c:\program files (x86)\AMD APP
2013-01-02 08:32 . 2013-01-02 08:32 -------- d-----w- c:\program files\Common Files\ATI Technologies
2013-01-02 08:32 . 2013-01-02 08:32 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2013-01-02 08:28 . 2013-01-02 08:28 -------- d-----w- c:\users\Honza\AppData\Roaming\ATI
2013-01-02 08:28 . 2013-01-02 08:28 -------- d-----w- c:\users\Honza\AppData\Local\ATI
2013-01-02 08:22 . 2013-01-02 08:25 -------- d-----w- C:\AMD
2013-01-02 07:42 . 2013-01-02 08:32 -------- d-----w- c:\programdata\AMD
2013-01-02 07:42 . 2013-01-02 07:42 -------- d-----w- c:\program files (x86)\ATI Technologies
2013-01-02 07:42 . 2013-01-02 08:31 -------- d-----w- c:\program files\ATI Technologies
2013-01-02 07:42 . 2013-01-02 07:42 -------- d-----w- c:\program files\ATI
2013-01-02 07:41 . 2013-01-02 07:41 -------- d-----w- C:\swsetup
2013-01-02 07:09 . 2013-01-02 07:09 -------- d-----w- c:\programdata\TuneUp Software
2013-01-02 07:09 . 2013-01-02 07:56 -------- d-sh--w- c:\programdata\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-01-02 07:08 . 2013-01-02 07:08 -------- d-----w- c:\program files (x86)\SIW
2013-01-02 07:08 . 2013-01-02 07:08 -------- d-----w- c:\program files (x86)\GPU-Z
2013-01-02 06:24 . 2013-01-17 21:40 -------- d-----w- c:\program files (x86)\QuadCoreM2
2013-01-02 05:53 . 2013-01-02 05:53 -------- d-----w- c:\programdata\Caphyon
2013-01-02 05:49 . 2013-01-02 05:49 -------- d-----w- c:\users\Honza\AppData\Roaming\Quadcore Games
2013-01-02 01:06 . 2013-01-02 01:06 21712 ----a-w- c:\windows\SysWow64\drivers\DrvAgent64.SYS
2013-01-02 01:06 . 2013-01-02 01:06 -------- d-----w- c:\users\Honza\AppData\Local\eSupport.com
2013-01-02 00:24 . 2012-11-14 06:04 1392128 ----a-w- c:\windows\system32\wininet.dll
2013-01-01 15:52 . 2012-11-09 05:45 2048 ----a-w- c:\windows\system32\tzres.dll
2013-01-01 15:52 . 2012-11-09 04:42 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2013-01-01 15:51 . 2012-11-02 05:59 478208 ----a-w- c:\windows\system32\dpnet.dll
2013-01-01 15:51 . 2012-11-02 05:11 376832 ----a-w- c:\windows\SysWow64\dpnet.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-24 22:18 . 2012-11-18 21:54 780192 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-01-24 22:18 . 2012-11-18 21:53 859552 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-01-23 20:54 . 2012-11-18 21:30 74248 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-01-23 20:54 . 2012-11-18 21:30 697864 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-01-12 09:33 . 2012-11-20 18:45 30568 ----a-w- c:\windows\system32\drivers\avgtpx64.sys
2013-01-12 09:30 . 2012-11-19 16:21 67599240 ----a-w- c:\windows\system32\MRT.exe
2012-11-30 04:45 . 2013-01-09 13:06 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-11-19 16:31 . 2012-11-19 16:31 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2012-11-19 16:31 . 2012-11-19 16:31 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2012-11-19 16:31 . 2012-11-19 16:31 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-11-19 16:31 . 2012-11-19 16:31 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2012-11-19 16:31 . 2012-11-19 16:31 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2012-11-19 16:31 . 2012-11-19 16:31 367104 ----a-w- c:\windows\SysWow64\html.iec
2012-11-19 16:31 . 2012-11-19 16:31 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2012-11-19 16:31 . 2012-11-19 16:31 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2012-11-19 16:31 . 2012-11-19 16:31 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-11-19 16:31 . 2012-11-19 16:31 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-11-19 16:31 . 2012-11-19 16:31 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2012-11-19 16:31 . 2012-11-19 16:31 85504 ----a-w- c:\windows\system32\iesetup.dll
2012-11-19 16:31 . 2012-11-19 16:31 82432 ----a-w- c:\windows\system32\icardie.dll
2012-11-19 16:31 . 2012-11-19 16:31 76800 ----a-w- c:\windows\system32\tdc.ocx
2012-11-19 16:31 . 2012-11-19 16:31 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2012-11-19 16:31 . 2012-11-19 16:31 65024 ----a-w- c:\windows\system32\pngfilt.dll
2012-11-19 16:31 . 2012-11-19 16:31 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2012-11-19 16:31 . 2012-11-19 16:31 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2012-11-19 16:31 . 2012-11-19 16:31 49664 ----a-w- c:\windows\system32\imgutil.dll
2012-11-19 16:31 . 2012-11-19 16:31 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-11-19 16:31 . 2012-11-19 16:31 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2012-11-19 16:31 . 2012-11-19 16:31 448512 ----a-w- c:\windows\system32\html.iec
2012-11-19 16:31 . 2012-11-19 16:31 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2012-11-19 16:31 . 2012-11-19 16:31 39936 ----a-w- c:\windows\system32\iernonce.dll
2012-11-19 16:31 . 2012-11-19 16:31 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2012-11-19 16:31 . 2012-11-19 16:31 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2012-11-19 16:31 . 2012-11-19 16:31 30720 ----a-w- c:\windows\system32\licmgr10.dll
2012-11-19 16:31 . 2012-11-19 16:31 282112 ----a-w- c:\windows\system32\dxtrans.dll
2012-11-19 16:31 . 2012-11-19 16:31 267776 ----a-w- c:\windows\system32\ieaksie.dll
2012-11-19 16:31 . 2012-11-19 16:31 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-11-19 16:31 . 2012-11-19 16:31 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2012-11-19 16:31 . 2012-11-19 16:31 222208 ----a-w- c:\windows\system32\msls31.dll
2012-11-19 16:31 . 2012-11-19 16:31 197120 ----a-w- c:\windows\system32\msrating.dll
2012-11-19 16:31 . 2012-11-19 16:31 165888 ----a-w- c:\windows\system32\iexpress.exe
2012-11-19 16:31 . 2012-11-19 16:31 163840 ----a-w- c:\windows\system32\ieakui.dll
2012-11-19 16:31 . 2012-11-19 16:31 160256 ----a-w- c:\windows\system32\wextract.exe
2012-11-19 16:31 . 2012-11-19 16:31 160256 ----a-w- c:\windows\system32\ieakeng.dll
2012-11-19 16:31 . 2012-11-19 16:31 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2012-11-19 16:31 . 2012-11-19 16:31 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2012-11-19 16:31 . 2012-11-19 16:31 149504 ----a-w- c:\windows\system32\occache.dll
2012-11-19 16:31 . 2012-11-19 16:31 145920 ----a-w- c:\windows\system32\iepeers.dll
2012-11-19 16:31 . 2012-11-19 16:31 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-11-19 16:31 . 2012-11-19 16:31 12288 ----a-w- c:\windows\system32\mshta.exe
2012-11-19 16:31 . 2012-11-19 16:31 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2012-11-19 16:31 . 2012-11-19 16:31 114176 ----a-w- c:\windows\system32\admparse.dll
2012-11-19 16:31 . 2012-11-19 16:31 111616 ----a-w- c:\windows\system32\iesysprep.dll
2012-11-19 16:31 . 2012-11-19 16:31 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2012-11-19 16:31 . 2012-11-19 16:31 103936 ----a-w- c:\windows\system32\inseng.dll
2012-11-19 16:31 . 2012-11-19 16:31 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-11-15 22:33 . 2012-11-15 22:33 111968 ----a-w- c:\windows\system32\drivers\avgmfx64.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2013-01-12 09:33 1828808 ----a-w- c:\program files (x86)\AVG Secure Search\13.3.0.17\AVG Secure Search_toolbar.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{CCB69577-088B-4004-9ED8-FF5BCC83A039}]
2013-01-10 11:59 834184 ----a-w- c:\progra~2\REBATE~1\RebateI.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\13.3.0.17\AVG Secure Search_toolbar.dll" [2013-01-12 1828808]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Pokki"="c:\users\Honza\AppData\Local\Pokki\v0.260.9.182\pokki.exe" [2013-01-17 5638424]
"Advanced SystemCare 6"="c:\program files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" [2013-01-15 491840]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2012-12-11 3147384]
"vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2013-01-12 1046984]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-09-28 642728]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"InboxToolbar"="c:\program files (x86)\Inbox Toolbar\Inbox.exe" [2012-12-20 1685784]
"24x7HELP"="c:\program files (x86)\24x7Help\App24x7Help.exe" [2013-01-20 1771600]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0SmartDefragBootTime.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"UacDisableNotify"=dword:00000001
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AmdLLD64;AMD Low Level Device Driver;c:\windows\system32\DRIVERS\AmdLLD64.sys [2009-04-22 47672]
R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [2013-01-02 21712]
R3 netr7364;RT73 USB Extensible Wireless LAN Card Driver;c:\windows\system32\DRIVERS\netr7364.sys [2011-10-05 729152]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-11-19 1255736]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [2012-11-13 14544]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2012-10-15 63328]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys [2012-09-21 225120]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2012-11-15 111968]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2012-09-14 40800]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 17720]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2012-10-22 154464]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2012-10-02 185696]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2012-09-21 200032]
S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys [2013-01-12 30568]
S2 24x7HelpSvc;24x7HelpService;c:\program files (x86)\24x7Help\App24x7Svc.exe [2013-01-20 342608]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [2013-01-15 465216]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-09-28 239616]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-09-28 361984]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [2012-11-15 5814904]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664]
S2 IMFservice;IMF Service;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2012-01-09 821592]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-12-14 682344]
S2 TuneUp.UtilitiesSvc;AVG PC TuneUp Service;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2012-08-23 2148216]
S2 vToolbarUpdater13.3.2;vToolbarUpdater13.3.2;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\13.3.2\ToolbarUpdater.exe [2013-01-12 894920]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-05-14 96896]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-12-14 24176]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [2012-07-04 11880]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-01-24 18:40 1607120 ----a-w- c:\program files (x86)\Google\Chrome\Application\24.0.1312.56\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-18 20:54]
.
2013-01-25 c:\windows\Tasks\AmiUpdXp.job
- c:\users\Honza\AppData\Local\SwvUpdater\Updater.exe [2013-01-18 10:23]
.
2013-01-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-11-18 21:30]
.
2013-01-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-11-18 21:30]
.
.
--------- X64 Entries -----------
.
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://home.sweetim.com/?crg=3.1010000.10005&barid={2E69EE17-6159-11E2-99B4-14DAE9A4E3D6}
mStart Page = hxxp://home.sweetim.com/?crg=3.1010000.10005&barid={2E69EE17-6159-11E2-99B4-14DAE9A4E3D6}
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 10.0.0.138
Handler: rebinfo - {AF808758-C780-404C-A4EE-4526323FD9B6} - c:\progra~2\REBATE~1\RebateI.dll
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\13.3.2\ViProtocol.dll
FF - ProfilePath - c:\users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\rybm8b9t.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=utf-8 ... &ilc=12&p=
FF - ExtSQL: 2013-01-25 15:12; inboxcomtoolbar@inbox.com; c:\users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\rybm8b9t.default\extensions\inboxcomtoolbar@inbox.com
FF - ExtSQL: 2013-01-25 15:54; AppGraffiti@AppGraffiti.com; c:\users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\rybm8b9t.default\extensions\AppGraffiti@AppGraffiti.com
FF - ExtSQL: 2013-01-25 15:59; {ED76C299-85BC-4891-9237-74A140C28832}; c:\program files (x86)\RebateInformer\Firefox
# Mozilla User Preferences
/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/
FF - user.js: app.update.lastUpdateTime.addon-background-update-timer - 1358965887
FF - user.js: app.update.lastUpdateTime.background-update-timer - 1358965767
FF - user.js: app.update.lastUpdateTime.blocklist-background-update-timer - 1358966008
FF - user.js: app.update.lastUpdateTime.browser-cleanup-thumbnails - 1358966128
FF - user.js: app.update.lastUpdateTime.search-engine-update-timer - 1358965647
FF - user.js: browser.bookmarks.restore_default_bookmarks - false
FF - user.js: browser.cache.disk.capacity - 358400
FF - user.js: browser.cache.disk.smart_size.first_run - false
FF - user.js: browser.cache.disk.smart_size.use_old_max - false
FF - user.js: browser.cache.disk.smart_size_cached_value - 358400
FF - user.js: browser.migration.version - 8
FF - user.js: browser.newtabpage.storageVersion - 1
FF - user.js: browser.pagethumbnails.storage_version - 2
FF - user.js: browser.places.smartBookmarksVersion - 4
FF - user.js: browser.rights.3.shown - true
FF - user.js: browser.startup.homepage_override.buildID - 20130116073211
FF - user.js: browser.startup.homepage_override.mstone - 18.0.1
FF - user.js: browser.syncPromoViewsLeft - 4
FF - user.js: browser.taskbar.lastgroupid - E7CF176E110C211B
FF - user.js: extensions.blocklist.pingCountTotal - 2
FF - user.js: extensions.blocklist.pingCountVersion - 2
FF - user.js: extensions.bootstrappedAddons - {}
FF - user.js: extensions.databaseSchema - 14
FF - user.js: extensions.enabledAddons - %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0.1
FF - user.js: extensions.installCache - [{\name\:\winreg-app-global\,\addons\:{\avg@toolbar\:{\descriptor\:\c:\\\\ProgramData\\\\AVG Secure Search\\\\FireFoxExt\\\\13.2.0.5\,\mtime\:1353521543814}}},{\name\:\app-global\,\addons\:{\{972ce4c6-7e08-4474-a285-3208198ce6fd}\:{\descriptor\:\c:\\\\Program Files (x86)\\\\Mozilla Firefox\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\,\mtime\:1358957811062}}}]
FF - user.js: extensions.lastAppVersion - 18.0.1
FF - user.js: extensions.lastPlatformVersion - 18.0.1
FF - user.js: extensions.pendingOperations - false
FF - user.js: extensions.shownSelectionUI - true
FF - user.js: gecko.buildID - 20130116073211
FF - user.js: gecko.mstone - 18.0.1
FF - user.js: gfx.direct3d.prefer_10_1 - true
FF - user.js: intl.charsetmenu.browser.cache - windows-1250, UTF-8
FF - user.js: network.cookie.prefsMigrated - true
FF - user.js: places.history.expiration.transient_current_max_pages - 104858
FF - user.js: privacy.sanitize.migrateFx3Prefs - true
FF - user.js: toolkit.startup.last_success - 1358969608
FF - user.js: toolkit.telemetry.prompted - 2
FF - user.js: toolkit.telemetry.rejected - true
FF - user.js: urlclassifier.keyupdatetime.hxxps://sb-ssl.google.com/safebrowsing/newkey - 1361549849
FF - user.js: xpinstall.whitelist.add -
FF - user.js: xpinstall.whitelist.add.180 -
FF - user.js: xpinstall.whitelist.add.36 -
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14} - (no file)
Wow6432Node-HKLM-Run-TaskTray - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\program files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
c:\program files (x86)\IObit\Game Booster\gbtray.exe
c:\program files (x86)\IObit\Advanced SystemCare 6\Monitor.exe
c:\program files (x86)\RebateInformer\RebateInf.exe
c:\program files (x86)\24x7Help\App24x7Hook.exe
.
**************************************************************************
.
Celkový čas: 2013-01-25 19:19:44 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-01-25 18:19
.
Před spuštěním: Volných bajtů: 267 858 944 000
Po spuštění: Volných bajtů: 267 482 497 024
.
- - End Of File - - 4F15495E0E229B16ECA1487A8A7072FC

Vlož celý log z TDSSKilleru.
+
Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

Musím ten TDSSKiller poslat na 2x:
11:39:28.0483 5960 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
11:39:28.0904 5960 ============================================================
11:39:28.0904 5960 Current date / time: 2013/01/26 11:39:28.0904
11:39:28.0904 5960 SystemInfo:
11:39:28.0904 5960
11:39:28.0904 5960 OS Version: 6.1.7601 ServicePack: 1.0
11:39:28.0904 5960 Product type: Workstation
11:39:28.0904 5960 ComputerName: HONZA-PC
11:39:28.0904 5960 UserName: Honza
11:39:28.0904 5960 Windows directory: C:\Windows
11:39:28.0904 5960 System windows directory: C:\Windows
11:39:28.0904 5960 Running under WOW64
11:39:28.0904 5960 Processor architecture: Intel x64
11:39:28.0904 5960 Number of processors: 2
11:39:28.0904 5960 Page size: 0x1000
11:39:28.0904 5960 Boot type: Normal boot
11:39:28.0904 5960 ============================================================
11:39:30.0386 5960 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
11:39:30.0417 5960 ============================================================
11:39:30.0417 5960 \Device\Harddisk0\DR0:
11:39:30.0417 5960 MBR partitions:
11:39:30.0417 5960 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3200800, BlocksNum 0x258D4000
11:39:30.0433 5960 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x28AD5000, BlocksNum 0x2EA71000
11:39:30.0433 5960 ============================================================
11:39:30.0495 5960 C: <-> \Device\Harddisk0\DR0\Partition1
11:39:30.0542 5960 D: <-> \Device\Harddisk0\DR0\Partition2
11:39:30.0542 5960 ============================================================
11:39:30.0542 5960 Initialize success
11:39:30.0542 5960 ============================================================
11:39:34.0426 6124 ============================================================
11:39:34.0426 6124 Scan started
11:39:34.0426 6124 Mode: Manual;
11:39:34.0426 6124 ============================================================
11:39:35.0503 6124 ================ Scan system memory ========================
11:39:35.0503 6124 System memory - ok
11:39:35.0503 6124 ================ Scan services =============================
11:39:35.0752 6124 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
11:39:35.0768 6124 1394ohci - ok
11:39:35.0862 6124 [ D45D9A7E0630F8634327A520BC9CA27F ] 24x7HelpSvc C:\Program Files (x86)\24x7Help\App24x7Svc.exe
11:39:35.0862 6124 24x7HelpSvc - ok
11:39:35.0908 6124 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
11:39:35.0908 6124 ACPI - ok
11:39:35.0924 6124 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
11:39:35.0940 6124 AcpiPmi - ok
11:39:36.0018 6124 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
11:39:36.0018 6124 AdobeARMservice - ok
11:39:36.0174 6124 [ 424877CB9D5517F980FF7BACA2EB379D ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
11:39:36.0174 6124 AdobeFlashPlayerUpdateSvc - ok
11:39:36.0220 6124 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
11:39:36.0236 6124 adp94xx - ok
11:39:36.0283 6124 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
11:39:36.0298 6124 adpahci - ok
11:39:36.0314 6124 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
11:39:36.0314 6124 adpu320 - ok
11:39:36.0408 6124 [ CBFAA333EBA2E402A0439A3A0E5413F3 ] AdvancedSystemCareService6 C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
11:39:36.0408 6124 AdvancedSystemCareService6 - ok
11:39:36.0439 6124 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
11:39:36.0454 6124 AeLookupSvc - ok
11:39:36.0517 6124 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
11:39:36.0532 6124 AFD - ok
11:39:36.0564 6124 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
11:39:36.0564 6124 agp440 - ok
11:39:36.0595 6124 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
11:39:36.0595 6124 ALG - ok
11:39:36.0642 6124 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
11:39:36.0642 6124 aliide - ok
11:39:36.0704 6124 [ 4C1E3649C89C7D542CD18ECC5210099D ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
11:39:36.0704 6124 AMD External Events Utility - ok
11:39:36.0782 6124 AMD FUEL Service - ok
11:39:36.0813 6124 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
11:39:36.0813 6124 amdide - ok
11:39:36.0844 6124 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
11:39:36.0844 6124 AmdK8 - ok
11:39:37.0359 6124 [ A3C0A15B39F979E8F3EABA901D72ECD7 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
11:39:37.0562 6124 amdkmdag - ok
11:39:37.0609 6124 [ 20F3CD38B107C1BD747C0EA37D450165 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
11:39:37.0624 6124 amdkmdap - ok
11:39:37.0656 6124 [ C27E46C19D5A48CA02C11E3C9B58F4C1 ] AmdLLD64 C:\Windows\system32\DRIVERS\AmdLLD64.sys
11:39:37.0656 6124 AmdLLD64 - ok
11:39:37.0701 6124 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
11:39:37.0701 6124 AmdPPM - ok
11:39:37.0761 6124 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
11:39:37.0761 6124 amdsata - ok
11:39:37.0811 6124 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
11:39:37.0811 6124 amdsbs - ok
11:39:37.0831 6124 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
11:39:37.0831 6124 amdxata - ok
11:39:37.0871 6124 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
11:39:37.0881 6124 AppID - ok
11:39:37.0921 6124 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
11:39:37.0921 6124 AppIDSvc - ok
11:39:37.0941 6124 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
11:39:37.0941 6124 Appinfo - ok
11:39:37.0981 6124 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
11:39:37.0991 6124 arc - ok
11:39:38.0011 6124 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
11:39:38.0011 6124 arcsas - ok
11:39:38.0161 6124 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
11:39:38.0161 6124 aspnet_state - ok
11:39:38.0201 6124 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
11:39:38.0201 6124 AsyncMac - ok
11:39:38.0231 6124 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
11:39:38.0231 6124 atapi - ok
11:39:38.0331 6124 [ B4174564AD5834A1680610572477878C ] athr C:\Windows\system32\DRIVERS\athrx.sys
11:39:38.0391 6124 athr - ok
11:39:38.0461 6124 [ B0790FF0E25B7A2674296052F2162C1A ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
11:39:38.0461 6124 AtiHDAudioService - ok
11:39:38.0511 6124 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
11:39:38.0521 6124 AudioEndpointBuilder - ok
11:39:38.0551 6124 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
11:39:38.0561 6124 AudioSrv - ok
11:39:38.0761 6124 [ 4AFC14AFA58878FAA1D249E7E90EA54B ] AVGIDSAgent C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
11:39:38.0821 6124 AVGIDSAgent - ok
11:39:38.0851 6124 [ 388056EBD5FE6718FE669078DBE37897 ] AVGIDSDriver C:\Windows\system32\DRIVERS\avgidsdrivera.sys
11:39:38.0861 6124 AVGIDSDriver - ok
11:39:38.0901 6124 [ 550E981747D6A6C55078C77346FFC2C6 ] AVGIDSHA C:\Windows\system32\DRIVERS\avgidsha.sys
11:39:38.0901 6124 AVGIDSHA - ok
11:39:38.0951 6124 [ 5989592A91A17587799792A81E1541D4 ] Avgldx64 C:\Windows\system32\DRIVERS\avgldx64.sys
11:39:38.0961 6124 Avgldx64 - ok
11:39:38.0991 6124 [ 3FC43AA02545FCDDC22817829114DEC8 ] Avgloga C:\Windows\system32\DRIVERS\avgloga.sys
11:39:38.0991 6124 Avgloga - ok
11:39:39.0031 6124 [ 841C40C193889730848849AC220D9242 ] Avgmfx64 C:\Windows\system32\DRIVERS\avgmfx64.sys
11:39:39.0041 6124 Avgmfx64 - ok
11:39:39.0071 6124 [ FE4F444DBE4BBBDFD8FECF49398DEFC7 ] Avgrkx64 C:\Windows\system32\DRIVERS\avgrkx64.sys
11:39:39.0081 6124 Avgrkx64 - ok
11:39:39.0101 6124 [ 6E634525613D48A1D1657FB21F21F3B2 ] Avgtdia C:\Windows\system32\DRIVERS\avgtdia.sys
11:39:39.0111 6124 Avgtdia - ok
11:39:39.0141 6124 [ EFF8B98EA8A7FF52B8A7FD07FED7C6B6 ] avgtp C:\Windows\system32\drivers\avgtpx64.sys
11:39:39.0151 6124 avgtp - ok
11:39:39.0191 6124 [ 6B72E1E329C4E98C6B6FDD2D265E3BA3 ] avgwd C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
11:39:39.0191 6124 avgwd - ok
11:39:39.0251 6124 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
11:39:39.0261 6124 AxInstSV - ok
11:39:39.0321 6124 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
11:39:39.0331 6124 b06bdrv - ok
11:39:39.0401 6124 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
11:39:39.0401 6124 b57nd60a - ok
11:39:39.0451 6124 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
11:39:39.0451 6124 BDESVC - ok
11:39:39.0491 6124 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
11:39:39.0501 6124 Beep - ok
11:39:39.0551 6124 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
11:39:39.0571 6124 BFE - ok
11:39:39.0621 6124 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\system32\qmgr.dll
11:39:39.0631 6124 BITS - ok
11:39:39.0671 6124 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
11:39:39.0671 6124 blbdrive - ok
11:39:39.0728 6124 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
11:39:39.0728 6124 bowser - ok
11:39:39.0759 6124 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
11:39:39.0759 6124 BrFiltLo - ok
11:39:39.0775 6124 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
11:39:39.0790 6124 BrFiltUp - ok
11:39:39.0806 6124 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
11:39:39.0806 6124 BridgeMP - ok
11:39:39.0853 6124 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
11:39:39.0853 6124 Browser - ok
11:39:39.0884 6124 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
11:39:39.0884 6124 Brserid - ok
11:39:39.0915 6124 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
11:39:39.0915 6124 BrSerWdm - ok
11:39:39.0946 6124 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
11:39:39.0946 6124 BrUsbMdm - ok
11:39:39.0962 6124 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
11:39:39.0962 6124 BrUsbSer - ok
11:39:40.0009 6124 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
11:39:40.0009 6124 BthEnum - ok
11:39:40.0040 6124 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
11:39:40.0040 6124 BTHMODEM - ok
11:39:40.0087 6124 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
11:39:40.0087 6124 BthPan - ok
11:39:40.0134 6124 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
11:39:40.0149 6124 BTHPORT - ok
11:39:40.0181 6124 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
11:39:40.0181 6124 bthserv - ok
11:39:40.0212 6124 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
11:39:40.0227 6124 BTHUSB - ok
11:39:40.0259 6124 catchme - ok
11:39:40.0321 6124 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
11:39:40.0321 6124 cdfs - ok
11:39:40.0383 6124 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
11:39:40.0383 6124 cdrom - ok
11:39:40.0430 6124 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
11:39:40.0430 6124 CertPropSvc - ok
11:39:40.0461 6124 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
11:39:40.0461 6124 circlass - ok
11:39:40.0493 6124 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
11:39:40.0493 6124 CLFS - ok
11:39:40.0586 6124 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
11:39:40.0586 6124 clr_optimization_v2.0.50727_32 - ok
11:39:40.0633 6124 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
11:39:40.0633 6124 clr_optimization_v2.0.50727_64 - ok
11:39:40.0727 6124 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
11:39:40.0727 6124 clr_optimization_v4.0.30319_32 - ok
11:39:40.0742 6124 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
11:39:40.0758 6124 clr_optimization_v4.0.30319_64 - ok
11:39:40.0789 6124 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
11:39:40.0789 6124 CmBatt - ok
11:39:40.0805 6124 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
11:39:40.0805 6124 cmdide - ok
11:39:40.0851 6124 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\Windows\system32\Drivers\cng.sys
11:39:40.0867 6124 CNG - ok
11:39:40.0914 6124 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
11:39:40.0914 6124 Compbatt - ok
11:39:40.0961 6124 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
11:39:40.0961 6124 CompositeBus - ok
11:39:40.0976 6124 COMSysApp - ok
11:39:41.0023 6124 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
11:39:41.0023 6124 crcdisk - ok
11:39:41.0085 6124 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
11:39:41.0085 6124 CryptSvc - ok
11:39:41.0132 6124 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
11:39:41.0148 6124 DcomLaunch - ok
11:39:41.0195 6124 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
11:39:41.0195 6124 defragsvc - ok
11:39:41.0241 6124 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
11:39:41.0241 6124 DfsC - ok
11:39:41.0273 6124 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
11:39:41.0273 6124 Dhcp - ok
11:39:41.0304 6124 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
11:39:41.0319 6124 discache - ok
11:39:41.0366 6124 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
11:39:41.0366 6124 Disk - ok
11:39:41.0397 6124 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
11:39:41.0413 6124 Dnscache - ok
11:39:41.0444 6124 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
11:39:41.0444 6124 dot3svc - ok
11:39:41.0475 6124 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
11:39:41.0475 6124 DPS - ok
11:39:41.0522 6124 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
11:39:41.0522 6124 drmkaud - ok
11:39:41.0663 6124 [ 1ED08A6264C5C92099D6D1DAE5E8F530 ] DrvAgent64 C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS
11:39:41.0663 6124 DrvAgent64 - ok
11:39:41.0725 6124 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
11:39:41.0756 6124 DXGKrnl - ok
11:39:41.0819 6124 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
11:39:41.0819 6124 EapHost - ok
11:39:41.0928 6124 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
11:39:41.0990 6124 ebdrv - ok
11:39:42.0037 6124 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
11:39:42.0037 6124 EFS - ok
11:39:42.0115 6124 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
11:39:42.0115 6124 ehRecvr - ok
11:39:42.0146 6124 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
11:39:42.0146 6124 ehSched - ok
11:39:42.0224 6124 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
11:39:42.0224 6124 elxstor - ok
11:39:42.0255 6124 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
11:39:42.0255 6124 ErrDev - ok
11:39:42.0318 6124 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
11:39:42.0318 6124 EventSystem - ok
11:39:42.0365 6124 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
11:39:42.0365 6124 exfat - ok
11:39:42.0396 6124 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
11:39:42.0396 6124 fastfat - ok
11:39:42.0427 6124 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
11:39:42.0443 6124 Fax - ok
11:39:42.0458 6124 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
11:39:42.0474 6124 fdc - ok
11:39:42.0505 6124 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
11:39:42.0505 6124 fdPHost - ok
11:39:42.0521 6124 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
11:39:42.0521 6124 FDResPub - ok
11:39:42.0552 6124 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
11:39:42.0552 6124 FileInfo - ok
11:39:42.0583 6124 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
11:39:42.0583 6124 Filetrace - ok
11:39:42.0614 6124 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
11:39:42.0614 6124 flpydisk - ok
11:39:42.0645 6124 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
11:39:42.0645 6124 FltMgr - ok
11:39:42.0708 6124 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
11:39:42.0739 6124 FontCache - ok
11:39:42.0801 6124 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
11:39:42.0801 6124 FontCache3.0.0.0 - ok
11:39:42.0817 6124 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
11:39:42.0817 6124 FsDepends - ok
11:39:42.0868 6124 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
11:39:42.0868 6124 Fs_Rec - ok
11:39:42.0938 6124 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
11:39:42.0938 6124 fvevol - ok
11:39:42.0978 6124 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
11:39:42.0978 6124 gagp30kx - ok
11:39:43.0028 6124 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
11:39:43.0038 6124 gpsvc - ok
11:39:43.0148 6124 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
11:39:43.0148 6124 gupdate - ok
11:39:43.0158 6124 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
11:39:43.0158 6124 gupdatem - ok
11:39:43.0198 6124 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
11:39:43.0198 6124 hcw85cir - ok
11:39:43.0248 6124 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
11:39:43.0258 6124 HdAudAddService - ok
11:39:43.0288 6124 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
11:39:43.0298 6124 HDAudBus - ok
11:39:43.0308 6124 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
11:39:43.0308 6124 HidBatt - ok
11:39:43.0338 6124 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
11:39:43.0338 6124 HidBth - ok
11:39:43.0348 6124 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
11:39:43.0358 6124 HidIr - ok
11:39:43.0388 6124 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll
11:39:43.0388 6124 hidserv - ok
11:39:43.0428 6124 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
11:39:43.0428 6124 HidUsb - ok
11:39:43.0478 6124 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
11:39:43.0478 6124 hkmsvc - ok
11:39:43.0518 6124 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
11:39:43.0518 6124 HomeGroupListener - ok
11:39:43.0548 6124 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
11:39:43.0558 6124 HomeGroupProvider - ok
11:39:43.0598 6124 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
11:39:43.0598 6124 HpSAMD - ok
11:39:43.0648 6124 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
11:39:43.0658 6124 HTTP - ok
11:39:43.0678 6124 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
11:39:43.0678 6124 hwpolicy - ok
11:39:43.0718 6124 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
11:39:43.0718 6124 i8042prt - ok
11:39:43.0768 6124 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
11:39:43.0778 6124 iaStorV - ok
11:39:43.0838 6124 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
11:39:43.0868 6124 idsvc - ok
11:39:43.0908 6124 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
11:39:43.0908 6124 iirsp - ok
11:39:43.0968 6124 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
11:39:43.0988 6124 IKEEXT - ok
11:39:44.0088 6124 [ 8AE99EBE30E8338907361018D9030835 ] IMFservice C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
11:39:44.0098 6124 IMFservice - ok
11:39:44.0128 6124 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
11:39:44.0128 6124 intelide - ok
11:39:44.0188 6124 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\drivers\intelppm.sys
11:39:44.0198 6124 intelppm - ok
11:39:44.0218 6124 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
11:39:44.0228 6124 IPBusEnum - ok
11:39:44.0248 6124 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
11:39:44.0258 6124 IpFilterDriver - ok
11:39:44.0288 6124 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
11:39:44.0308 6124 iphlpsvc - ok
11:39:44.0318 6124 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
11:39:44.0318 6124 IPMIDRV - ok
11:39:44.0328 6124 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
11:39:44.0338 6124 IPNAT - ok
11:39:44.0368 6124 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
11:39:44.0368 6124 IRENUM - ok
11:39:44.0418 6124 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
11:39:44.0418 6124 isapnp - ok
11:39:44.0458 6124 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
11:39:44.0468 6124 iScsiPrt - ok
11:39:44.0498 6124 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
11:39:44.0498 6124 kbdclass - ok
11:39:44.0538 6124 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
11:39:44.0538 6124 kbdhid - ok
11:39:44.0558 6124 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
11:39:44.0568 6124 KeyIso - ok
11:39:44.0608 6124 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
11:39:44.0608 6124 KSecDD - ok
11:39:44.0648 6124 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
11:39:44.0648 6124 KSecPkg - ok
11:39:44.0668 6124 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
11:39:44.0668 6124 ksthunk - ok
11:39:44.0698 6124 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
11:39:44.0708 6124 KtmRm - ok
11:39:44.0748 6124 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll
11:39:44.0758 6124 LanmanServer - ok
11:39:44.0798 6124 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
11:39:44.0798 6124 LanmanWorkstation - ok
11:39:44.0848 6124 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
11:39:44.0848 6124 lltdio - ok
11:39:44.0878 6124 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
11:39:44.0888 6124 lltdsvc - ok
11:39:44.0929 6124 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
11:39:44.0929 6124 lmhosts - ok
11:39:44.0976 6124 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
11:39:44.0992 6124 LSI_FC - ok
11:39:45.0007 6124 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
11:39:45.0007 6124 LSI_SAS - ok
11:39:45.0039 6124 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
11:39:45.0039 6124 LSI_SAS2 - ok
11:39:45.0054 6124 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
11:39:45.0054 6124 LSI_SCSI - ok
11:39:45.0117 6124 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
11:39:45.0117 6124 luafv - ok
11:39:45.0148 6124 [ 92EB844D90615CB266F84C3202B8786E ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
11:39:45.0148 6124 MBAMProtector - ok
11:39:45.0210 6124 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
11:39:45.0210 6124 MBAMScheduler - ok
11:39:45.0257 6124 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
11:39:45.0257 6124 MBAMService - ok
11:39:45.0304 6124 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
11:39:45.0319 6124 Mcx2Svc - ok
11:39:45.0335 6124 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
11:39:45.0335 6124 megasas - ok
11:39:45.0366 6124 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
11:39:45.0366 6124 MegaSR - ok
11:39:45.0413 6124 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
11:39:45.0413 6124 MMCSS - ok
11:39:45.0429 6124 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
11:39:45.0429 6124 Modem - ok
11:39:45.0460 6124 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
11:39:45.0460 6124 monitor - ok
11:39:45.0475 6124 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
11:39:45.0475 6124 mouclass - ok
11:39:45.0522 6124 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
11:39:45.0522 6124 mouhid - ok
11:39:45.0553 6124 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
11:39:45.0553 6124 mountmgr - ok
11:39:45.0631 6124 [ 983082FF99B90B1AC9A9792471427977 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
11:39:45.0631 6124 MozillaMaintenance - ok
11:39:45.0663 6124 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
11:39:45.0663 6124 mpio - ok
11:39:45.0694 6124 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
11:39:45.0694 6124 mpsdrv - ok
11:39:45.0741 6124 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
11:39:45.0756 6124 MpsSvc - ok
11:39:45.0787 6124 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
11:39:45.0787 6124 MRxDAV - ok
11:39:45.0819 6124 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
11:39:45.0819 6124 mrxsmb - ok
11:39:45.0850 6124 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
11:39:45.0850 6124 mrxsmb10 - ok
11:39:45.0881 6124 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
11:39:45.0881 6124 mrxsmb20 - ok
11:39:45.0912 6124 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
11:39:45.0912 6124 msahci - ok
11:39:45.0943 6124 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
11:39:45.0943 6124 msdsm - ok
11:39:45.0975 6124 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
11:39:45.0975 6124 MSDTC - ok
11:39:46.0006 6124 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
11:39:46.0006 6124 Msfs - ok
11:39:46.0037 6124 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
11:39:46.0037 6124 mshidkmdf - ok
11:39:46.0053 6124 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
11:39:46.0053 6124 msisadrv - ok
11:39:46.0099 6124 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
11:39:46.0115 6124 MSiSCSI - ok
11:39:46.0131 6124 msiserver - ok
11:39:46.0146 6124 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
11:39:46.0146 6124 MSKSSRV - ok
11:39:46.0177 6124 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
11:39:46.0177 6124 MSPCLOCK - ok
11:39:46.0193 6124 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
11:39:46.0193 6124 MSPQM - ok
11:39:46.0224 6124 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
11:39:46.0240 6124 MsRPC - ok

TDSSKiller
druhá část
11:39:46.0271 6124 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
11:39:46.0271 6124 mssmbios - ok
11:39:46.0287 6124 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
11:39:46.0287 6124 MSTEE - ok
11:39:46.0318 6124 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
11:39:46.0318 6124 MTConfig - ok
11:39:46.0365 6124 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
11:39:46.0365 6124 Mup - ok
11:39:46.0411 6124 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
11:39:46.0411 6124 napagent - ok
11:39:46.0474 6124 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
11:39:46.0474 6124 NativeWifiP - ok
11:39:46.0536 6124 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
11:39:46.0536 6124 NDIS - ok
11:39:46.0583 6124 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
11:39:46.0583 6124 NdisCap - ok
11:39:46.0614 6124 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
11:39:46.0614 6124 NdisTapi - ok
11:39:46.0645 6124 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
11:39:46.0661 6124 Ndisuio - ok
11:39:46.0677 6124 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
11:39:46.0677 6124 NdisWan - ok
11:39:46.0708 6124 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
11:39:46.0708 6124 NDProxy - ok
11:39:46.0739 6124 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
11:39:46.0739 6124 NetBIOS - ok
11:39:46.0770 6124 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
11:39:46.0770 6124 NetBT - ok
11:39:46.0786 6124 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
11:39:46.0801 6124 Netlogon - ok
11:39:46.0848 6124 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
11:39:46.0864 6124 Netman - ok
11:39:46.0957 6124 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:39:46.0957 6124 NetMsmqActivator - ok
11:39:46.0989 6124 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:39:46.0989 6124 NetPipeActivator - ok
11:39:47.0004 6124 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
11:39:47.0020 6124 netprofm - ok
11:39:47.0082 6124 [ F3A1D8B7317939813568992D1BFDDE37 ] netr7364 C:\Windows\system32\DRIVERS\netr7364.sys
11:39:47.0098 6124 netr7364 - ok
11:39:47.0145 6124 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:39:47.0145 6124 NetTcpActivator - ok
11:39:47.0160 6124 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:39:47.0160 6124 NetTcpPortSharing - ok
11:39:47.0191 6124 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
11:39:47.0191 6124 nfrd960 - ok
11:39:47.0254 6124 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
11:39:47.0269 6124 NlaSvc - ok
11:39:47.0285 6124 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
11:39:47.0285 6124 Npfs - ok
11:39:47.0332 6124 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
11:39:47.0332 6124 nsi - ok
11:39:47.0363 6124 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
11:39:47.0363 6124 nsiproxy - ok
11:39:47.0441 6124 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
11:39:47.0472 6124 Ntfs - ok
11:39:47.0488 6124 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
11:39:47.0488 6124 Null - ok
11:39:47.0535 6124 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
11:39:47.0535 6124 nvraid - ok
11:39:47.0566 6124 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
11:39:47.0581 6124 nvstor - ok
11:39:47.0613 6124 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
11:39:47.0613 6124 nv_agp - ok
11:39:47.0628 6124 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
11:39:47.0628 6124 ohci1394 - ok
11:39:47.0691 6124 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
11:39:47.0691 6124 p2pimsvc - ok
11:39:47.0737 6124 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
11:39:47.0753 6124 p2psvc - ok
11:39:47.0769 6124 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys
11:39:47.0769 6124 Parport - ok
11:39:47.0815 6124 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
11:39:47.0815 6124 partmgr - ok
11:39:47.0831 6124 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
11:39:47.0847 6124 PcaSvc - ok
11:39:47.0862 6124 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
11:39:47.0878 6124 pci - ok
11:39:47.0893 6124 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
11:39:47.0893 6124 pciide - ok
11:39:47.0925 6124 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
11:39:47.0925 6124 pcmcia - ok
11:39:47.0956 6124 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
11:39:47.0956 6124 pcw - ok
11:39:47.0987 6124 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
11:39:47.0987 6124 PEAUTH - ok
11:39:48.0127 6124 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
11:39:48.0127 6124 PerfHost - ok
11:39:48.0205 6124 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
11:39:48.0252 6124 pla - ok
11:39:48.0299 6124 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
11:39:48.0299 6124 PlugPlay - ok
11:39:48.0330 6124 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
11:39:48.0346 6124 PNRPAutoReg - ok
11:39:48.0361 6124 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
11:39:48.0377 6124 PNRPsvc - ok
11:39:48.0424 6124 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
11:39:48.0439 6124 PolicyAgent - ok
11:39:48.0471 6124 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
11:39:48.0486 6124 Power - ok
11:39:48.0517 6124 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
11:39:48.0517 6124 PptpMiniport - ok
11:39:48.0549 6124 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys
11:39:48.0549 6124 Processor - ok
11:39:48.0595 6124 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
11:39:48.0611 6124 ProfSvc - ok
11:39:48.0627 6124 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
11:39:48.0627 6124 ProtectedStorage - ok
11:39:48.0658 6124 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
11:39:48.0658 6124 Psched - ok
11:39:48.0720 6124 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
11:39:48.0751 6124 ql2300 - ok
11:39:48.0767 6124 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
11:39:48.0783 6124 ql40xx - ok
11:39:48.0814 6124 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
11:39:48.0829 6124 QWAVE - ok
11:39:48.0861 6124 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
11:39:48.0861 6124 QWAVEdrv - ok
11:39:48.0876 6124 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
11:39:48.0876 6124 RasAcd - ok
11:39:48.0939 6124 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
11:39:48.0954 6124 RasAgileVpn - ok
11:39:48.0970 6124 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
11:39:48.0970 6124 RasAuto - ok
11:39:49.0001 6124 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
11:39:49.0001 6124 Rasl2tp - ok
11:39:49.0032 6124 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
11:39:49.0032 6124 RasMan - ok
11:39:49.0079 6124 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
11:39:49.0079 6124 RasPppoe - ok
11:39:49.0110 6124 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
11:39:49.0126 6124 RasSstp - ok
11:39:49.0141 6124 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
11:39:49.0157 6124 rdbss - ok
11:39:49.0173 6124 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
11:39:49.0173 6124 rdpbus - ok
11:39:49.0204 6124 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
11:39:49.0204 6124 RDPCDD - ok
11:39:49.0235 6124 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
11:39:49.0235 6124 RDPENCDD - ok
11:39:49.0266 6124 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
11:39:49.0266 6124 RDPREFMP - ok
11:39:49.0329 6124 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
11:39:49.0344 6124 RdpVideoMiniport - ok
11:39:49.0375 6124 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
11:39:49.0375 6124 RDPWD - ok
11:39:49.0422 6124 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
11:39:49.0422 6124 rdyboost - ok
11:39:49.0453 6124 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
11:39:49.0469 6124 RemoteAccess - ok
11:39:49.0500 6124 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
11:39:49.0516 6124 RemoteRegistry - ok
11:39:49.0563 6124 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
11:39:49.0578 6124 RFCOMM - ok
11:39:49.0609 6124 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
11:39:49.0609 6124 RpcEptMapper - ok
11:39:49.0656 6124 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
11:39:49.0656 6124 RpcLocator - ok
11:39:49.0687 6124 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\System32\rpcss.dll
11:39:49.0703 6124 RpcSs - ok
11:39:49.0750 6124 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
11:39:49.0750 6124 rspndr - ok
11:39:49.0812 6124 [ EE082E06A82FF630351D1E0EBBD3D8D0 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
11:39:49.0812 6124 RTL8167 - ok
11:39:49.0843 6124 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
11:39:49.0843 6124 SamSs - ok
11:39:49.0890 6124 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
11:39:49.0890 6124 sbp2port - ok
11:39:49.0921 6124 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
11:39:49.0937 6124 SCardSvr - ok
11:39:49.0953 6124 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
11:39:49.0968 6124 scfilter - ok
11:39:49.0999 6124 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
11:39:50.0015 6124 Schedule - ok
11:39:50.0062 6124 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
11:39:50.0062 6124 SCPolicySvc - ok
11:39:50.0093 6124 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
11:39:50.0093 6124 SDRSVC - ok
11:39:50.0140 6124 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
11:39:50.0140 6124 secdrv - ok
11:39:50.0155 6124 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
11:39:50.0155 6124 seclogon - ok
11:39:50.0187 6124 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\system32\sens.dll
11:39:50.0202 6124 SENS - ok
11:39:50.0218 6124 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
11:39:50.0233 6124 SensrSvc - ok
11:39:50.0249 6124 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys
11:39:50.0249 6124 Serenum - ok
11:39:50.0296 6124 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys
11:39:50.0296 6124 Serial - ok
11:39:50.0311 6124 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys
11:39:50.0327 6124 sermouse - ok
11:39:50.0374 6124 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
11:39:50.0374 6124 SessionEnv - ok
11:39:50.0389 6124 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
11:39:50.0389 6124 sffdisk - ok
11:39:50.0405 6124 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
11:39:50.0405 6124 sffp_mmc - ok
11:39:50.0421 6124 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
11:39:50.0421 6124 sffp_sd - ok
11:39:50.0436 6124 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
11:39:50.0436 6124 sfloppy - ok
11:39:50.0483 6124 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
11:39:50.0499 6124 SharedAccess - ok
11:39:50.0530 6124 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
11:39:50.0530 6124 ShellHWDetection - ok
11:39:50.0545 6124 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
11:39:50.0545 6124 SiSRaid2 - ok
11:39:50.0561 6124 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
11:39:50.0561 6124 SiSRaid4 - ok
11:39:50.0608 6124 [ DD0443BC6CC78A19FD399817F8C51401 ] SmartDefragDriver C:\Windows\system32\Drivers\SmartDefragDriver.sys
11:39:50.0608 6124 SmartDefragDriver - ok
11:39:50.0639 6124 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
11:39:50.0639 6124 Smb - ok
11:39:50.0701 6124 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
11:39:50.0701 6124 SNMPTRAP - ok
11:39:50.0717 6124 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
11:39:50.0717 6124 spldr - ok
11:39:50.0779 6124 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
11:39:50.0779 6124 Spooler - ok
11:39:50.0889 6124 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
11:39:50.0982 6124 sppsvc - ok
11:39:51.0029 6124 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
11:39:51.0029 6124 sppuinotify - ok
11:39:51.0091 6124 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
11:39:51.0091 6124 srv - ok
11:39:51.0138 6124 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
11:39:51.0138 6124 srv2 - ok
11:39:51.0185 6124 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
11:39:51.0185 6124 srvnet - ok
11:39:51.0232 6124 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
11:39:51.0232 6124 SSDPSRV - ok
11:39:51.0263 6124 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
11:39:51.0263 6124 SstpSvc - ok
11:39:51.0294 6124 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys
11:39:51.0310 6124 stexstor - ok
11:39:51.0341 6124 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
11:39:51.0372 6124 stisvc - ok
11:39:51.0388 6124 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
11:39:51.0388 6124 swenum - ok
11:39:51.0435 6124 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
11:39:51.0435 6124 swprv - ok
11:39:51.0497 6124 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
11:39:51.0544 6124 SysMain - ok
11:39:51.0575 6124 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
11:39:51.0575 6124 TabletInputService - ok
11:39:51.0606 6124 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
11:39:51.0622 6124 TapiSrv - ok
11:39:51.0637 6124 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
11:39:51.0637 6124 TBS - ok
11:39:51.0715 6124 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
11:39:51.0747 6124 Tcpip - ok
11:39:51.0793 6124 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
11:39:51.0825 6124 TCPIP6 - ok
11:39:51.0876 6124 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
11:39:51.0876 6124 tcpipreg - ok
11:39:51.0916 6124 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
11:39:51.0926 6124 TDPIPE - ok
11:39:51.0956 6124 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
11:39:51.0956 6124 TDTCP - ok
11:39:52.0006 6124 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
11:39:52.0006 6124 tdx - ok
11:39:52.0026 6124 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
11:39:52.0036 6124 TermDD - ok
11:39:52.0076 6124 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
11:39:52.0086 6124 TermService - ok
11:39:52.0106 6124 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
11:39:52.0106 6124 Themes - ok
11:39:52.0126 6124 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
11:39:52.0126 6124 THREADORDER - ok
11:39:52.0156 6124 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
11:39:52.0166 6124 TrkWks - ok
11:39:52.0216 6124 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
11:39:52.0226 6124 TrustedInstaller - ok
11:39:52.0256 6124 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
11:39:52.0266 6124 tssecsrv - ok
11:39:52.0296 6124 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
11:39:52.0306 6124 TsUsbFlt - ok
11:39:52.0336 6124 [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
11:39:52.0336 6124 TsUsbGD - ok
11:39:52.0466 6124 [ DD296C78B0D2C3F5E42DC0D2972CD992 ] TuneUp.UtilitiesSvc C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
11:39:52.0496 6124 TuneUp.UtilitiesSvc - ok
11:39:52.0526 6124 [ 7BC3381C0713F613B31ACDE38B71CB53 ] TuneUpUtilitiesDrv C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys
11:39:52.0536 6124 TuneUpUtilitiesDrv - ok
11:39:52.0586 6124 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
11:39:52.0586 6124 tunnel - ok
11:39:52.0616 6124 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
11:39:52.0616 6124 uagp35 - ok
11:39:52.0646 6124 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
11:39:52.0656 6124 udfs - ok
11:39:52.0706 6124 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
11:39:52.0706 6124 UI0Detect - ok
11:39:52.0746 6124 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
11:39:52.0746 6124 uliagpkx - ok
11:39:52.0786 6124 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
11:39:52.0786 6124 umbus - ok
11:39:52.0816 6124 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys
11:39:52.0826 6124 UmPass - ok
11:39:52.0866 6124 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
11:39:52.0886 6124 upnphost - ok
11:39:52.0946 6124 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
11:39:52.0956 6124 usbccgp - ok
11:39:52.0986 6124 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
11:39:52.0986 6124 usbcir - ok
11:39:53.0006 6124 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
11:39:53.0006 6124 usbehci - ok
11:39:53.0046 6124 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
11:39:53.0046 6124 usbhub - ok
11:39:53.0086 6124 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
11:39:53.0096 6124 usbohci - ok
11:39:53.0106 6124 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\drivers\usbprint.sys
11:39:53.0106 6124 usbprint - ok
11:39:53.0136 6124 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
11:39:53.0136 6124 USBSTOR - ok
11:39:53.0156 6124 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
11:39:53.0166 6124 usbuhci - ok
11:39:53.0206 6124 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
11:39:53.0216 6124 usbvideo - ok
11:39:53.0256 6124 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
11:39:53.0266 6124 UxSms - ok
11:39:53.0286 6124 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
11:39:53.0286 6124 VaultSvc - ok
11:39:53.0326 6124 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
11:39:53.0326 6124 vdrvroot - ok
11:39:53.0366 6124 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
11:39:53.0376 6124 vds - ok
11:39:53.0406 6124 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
11:39:53.0406 6124 vga - ok
11:39:53.0436 6124 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
11:39:53.0436 6124 VgaSave - ok
11:39:53.0456 6124 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
11:39:53.0466 6124 vhdmp - ok
11:39:53.0486 6124 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
11:39:53.0496 6124 viaide - ok
11:39:53.0516 6124 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
11:39:53.0526 6124 volmgr - ok
11:39:53.0556 6124 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
11:39:53.0566 6124 volmgrx - ok
11:39:53.0596 6124 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
11:39:53.0606 6124 volsnap - ok
11:39:53.0646 6124 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
11:39:53.0656 6124 vsmraid - ok
11:39:53.0726 6124 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
11:39:53.0766 6124 VSS - ok
11:39:53.0866 6124 [ EF11725916A69DFAF82AB26EC219F088 ] vToolbarUpdater13.3.2 C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\13.3.2\ToolbarUpdater.exe
11:39:53.0876 6124 vToolbarUpdater13.3.2 - ok
11:39:53.0906 6124 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
11:39:53.0916 6124 vwifibus - ok
11:39:53.0946 6124 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
11:39:53.0946 6124 vwififlt - ok
11:39:53.0976 6124 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
11:39:53.0976 6124 vwifimp - ok
11:39:54.0006 6124 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
11:39:54.0016 6124 W32Time - ok
11:39:54.0046 6124 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys
11:39:54.0056 6124 WacomPen - ok
11:39:54.0086 6124 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
11:39:54.0096 6124 WANARP - ok
11:39:54.0116 6124 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
11:39:54.0116 6124 Wanarpv6 - ok
11:39:54.0206 6124 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
11:39:54.0236 6124 WatAdminSvc - ok
11:39:54.0296 6124 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
11:39:54.0346 6124 wbengine - ok
11:39:54.0366 6124 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
11:39:54.0376 6124 WbioSrvc - ok
11:39:54.0416 6124 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
11:39:54.0426 6124 wcncsvc - ok
11:39:54.0446 6124 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
11:39:54.0456 6124 WcsPlugInService - ok
11:39:54.0496 6124 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys
11:39:54.0496 6124 Wd - ok
11:39:54.0546 6124 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
11:39:54.0566 6124 Wdf01000 - ok
11:39:54.0586 6124 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
11:39:54.0596 6124 WdiServiceHost - ok
11:39:54.0606 6124 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
11:39:54.0606 6124 WdiSystemHost - ok
11:39:54.0636 6124 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
11:39:54.0646 6124 WebClient - ok
11:39:54.0676 6124 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
11:39:54.0686 6124 Wecsvc - ok
11:39:54.0726 6124 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
11:39:54.0726 6124 wercplsupport - ok
11:39:54.0766 6124 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
11:39:54.0776 6124 WerSvc - ok
11:39:54.0806 6124 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
11:39:54.0806 6124 WfpLwf - ok
11:39:54.0846 6124 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
11:39:54.0846 6124 WIMMount - ok
11:39:54.0916 6124 WinDefend - ok
11:39:54.0946 6124 WinHttpAutoProxySvc - ok
11:39:55.0036 6124 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
11:39:55.0036 6124 Winmgmt - ok
11:39:55.0116 6124 [ 0C0195C48B6B8582FA6F6373032118DA ] WinRing0_1_2_0 C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys
11:39:55.0116 6124 WinRing0_1_2_0 - ok
11:39:55.0206 6124 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
11:39:55.0266 6124 WinRM - ok
11:39:55.0346 6124 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
11:39:55.0356 6124 Wlansvc - ok
11:39:55.0376 6124 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
11:39:55.0386 6124 WmiAcpi - ok
11:39:55.0416 6124 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
11:39:55.0426 6124 wmiApSrv - ok
11:39:55.0456 6124 WMPNetworkSvc - ok
11:39:55.0476 6124 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
11:39:55.0486 6124 WPCSvc - ok
11:39:55.0506 6124 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
11:39:55.0516 6124 WPDBusEnum - ok
11:39:55.0556 6124 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
11:39:55.0556 6124 ws2ifsl - ok
11:39:55.0586 6124 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\system32\wscsvc.dll
11:39:55.0586 6124 wscsvc - ok
11:39:55.0596 6124 WSearch - ok
11:39:55.0686 6124 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
11:39:55.0746 6124 wuauserv - ok
11:39:55.0776 6124 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
11:39:55.0776 6124 WudfPf - ok
11:39:55.0826 6124 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
11:39:55.0836 6124 WUDFRd - ok
11:39:55.0866 6124 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
11:39:55.0876 6124 wudfsvc - ok
11:39:55.0916 6124 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
11:39:55.0926 6124 WwanSvc - ok
11:39:56.0023 6124 ================ Scan global ===============================
11:39:56.0054 6124 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
11:39:56.0085 6124 [ 9E479C2B605C25DA4971ABA36250FAEF ] C:\Windows\system32\winsrv.dll
11:39:56.0101 6124 [ 9E479C2B605C25DA4971ABA36250FAEF ] C:\Windows\system32\winsrv.dll
11:39:56.0147 6124 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
11:39:56.0179 6124 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
11:39:56.0179 6124 [Global] - ok
11:39:56.0179 6124 ================ Scan MBR ==================================
11:39:56.0210 6124 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
11:39:56.0569 6124 \Device\Harddisk0\DR0 - ok
11:39:56.0584 6124 ================ Scan VBR ==================================
11:39:56.0584 6124 [ 661BF1E827AE6697CDAB14A315FC2592 ] \Device\Harddisk0\DR0\Partition1
11:39:56.0584 6124 \Device\Harddisk0\DR0\Partition1 - ok
11:39:56.0615 6124 [ ADF0BB13CFE44A54AD8483DCFB6A8E00 ] \Device\Harddisk0\DR0\Partition2
11:39:56.0615 6124 \Device\Harddisk0\DR0\Partition2 - ok
11:39:56.0615 6124 ============================================================
11:39:56.0615 6124 Scan finished
11:39:56.0615 6124 ============================================================
11:39:56.0647 5524 Detected object count: 0
11:39:56.0647 5524 Actual detected object count: 0
11:40:02.0961 5920 Deinitialize success