PC-HELP.CZ

Měl jsem teď trochu potíže s JS/TrojanClicker.Agent.NDY. Gen Trojský kůň. Prosím o kontrolu logu, jestli nenapáchal nějaké škody. Díky moc

Výpis z HJT:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:47:51, on 29.1.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\LOLReplay\LOLRecorder.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\Opera\opera.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\trend micro\HiJackThis\HiJackThis.exe
C:\Windows\system32\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
O1 - Hosts: ::1 localhost
O1 - Hosts: 81.0.254.162 L2authd.Lineage2.com
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [BCU] "C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM\..\Run: [reset] regedit /s reset.reg
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [NokiaMusic FastStart] "C:\Program Files\Nokia\Ovi Player\NokiaOviPlayer.exe" /command:faststart
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [NCsoft Launcher] C:\Program Files\NCSoft\Launcher\NCLauncher.exe /Minimized
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-21-3009867086-3189602457-734651762-1004\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3009867086-3189602457-734651762-1004\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: LOLRecorder.lnk = C:\Program Files\LOLReplay\LOLRecorder.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Koberus\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: Dragon Age: Prameny - aktualizace obsahu (DAUpdaterSvc) - BioWare - C:\Program Files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: hpdj - Unknown owner - C:\Users\Koberus\AppData\Local\Temp\hpdj.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 8171 bytes

Fixni:
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
- Pokud používáš Firefox, klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Chrome, nic dalšího nevybírej a dej Empty Selected.
Po vyčištění klikni na Exit k zavření programu.

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(ZATÍM SÁM NIC NEMAŽ!).
Vlož sem pak obsah toho logu.

Ochrana: Povolena

29.1.2013 18:51:21
MBAM-log-2013-01-29 (18-58-51).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 243325
Uplynulý čas: 7 minut, 4 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\Users\Koberus\Downloads\download.exe (Adware.Dropper) -> Nebyla provedena žádná instrukce.

(konec)

Znovu spusť MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je označen pro odstranění, stačí restartovat počítač.

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.01.29.08

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 8.0.7601.17514
Koberus :: KOBERUS-PC [administrátor]

Ochrana: Povolena

29.1.2013 19:10:52
mbam-log-2013-01-29 (19-10-52).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 243420
Uplynulý čas: 3 minut, 49 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\Users\Koberus\Downloads\download.exe (Adware.Dropper) -> Přesun do karantény a smazání se zdařilo.

(konec)

19:21:56.0398 4576 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
19:21:56.0648 4576 ============================================================
19:21:56.0648 4576 Current date / time: 2013/01/29 19:21:56.0648
19:21:56.0648 4576 SystemInfo:
19:21:56.0648 4576
19:21:56.0648 4576 OS Version: 6.1.7601 ServicePack: 1.0
19:21:56.0648 4576 Product type: Workstation
19:21:56.0648 4576 ComputerName: KOBERUS-PC
19:21:56.0648 4576 UserName: Koberus
19:21:56.0648 4576 Windows directory: C:\Windows
19:21:56.0648 4576 System windows directory: C:\Windows
19:21:56.0648 4576 Processor architecture: Intel x86
19:21:56.0648 4576 Number of processors: 4
19:21:56.0648 4576 Page size: 0x1000
19:21:56.0648 4576 Boot type: Normal boot
19:21:56.0648 4576 ============================================================
19:21:59.0316 4576 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
19:21:59.0331 4576 ============================================================
19:21:59.0331 4576 \Device\Harddisk0\DR0:
19:21:59.0331 4576 MBR partitions:
19:21:59.0331 4576 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
19:21:59.0331 4576 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3A353000
19:21:59.0331 4576 ============================================================
19:21:59.0347 4576 C: <-> \Device\Harddisk0\DR0\Partition2
19:21:59.0347 4576 ============================================================
19:21:59.0347 4576 Initialize success
19:21:59.0347 4576 ============================================================
19:22:09.0534 4968 ============================================================
19:22:09.0534 4968 Scan started
19:22:09.0534 4968 Mode: Manual;
19:22:09.0534 4968 ============================================================
19:22:10.0969 4968 ================ Scan system memory ========================
19:22:10.0969 4968 System memory - ok
19:22:10.0969 4968 ================ Scan services =============================
19:22:11.0094 4968 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
19:22:11.0094 4968 1394ohci - ok
19:22:11.0172 4968 ACDaemon - ok
19:22:11.0234 4968 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys
19:22:11.0234 4968 ACPI - ok
19:22:11.0250 4968 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
19:22:11.0250 4968 AcpiPmi - ok
19:22:11.0359 4968 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
19:22:11.0359 4968 AdobeARMservice - ok
19:22:11.0437 4968 [ 424877CB9D5517F980FF7BACA2EB379D ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
19:22:11.0437 4968 AdobeFlashPlayerUpdateSvc - ok
19:22:11.0468 4968 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
19:22:11.0484 4968 adp94xx - ok
19:22:11.0499 4968 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
19:22:11.0499 4968 adpahci - ok
19:22:11.0515 4968 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
19:22:11.0515 4968 adpu320 - ok
19:22:11.0546 4968 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
19:22:11.0546 4968 AeLookupSvc - ok
19:22:11.0609 4968 [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD C:\Windows\system32\drivers\afd.sys
19:22:11.0624 4968 AFD - ok
19:22:11.0671 4968 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys
19:22:11.0687 4968 agp440 - ok
19:22:11.0702 4968 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
19:22:11.0702 4968 aic78xx - ok
19:22:11.0718 4968 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
19:22:11.0718 4968 ALG - ok
19:22:11.0733 4968 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys
19:22:11.0733 4968 aliide - ok
19:22:11.0749 4968 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys
19:22:11.0749 4968 amdagp - ok
19:22:11.0765 4968 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys
19:22:11.0765 4968 amdide - ok
19:22:11.0780 4968 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
19:22:11.0796 4968 AmdK8 - ok
19:22:11.0796 4968 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
19:22:11.0811 4968 AmdPPM - ok
19:22:11.0827 4968 [ D320BF87125326F996D4904FE24300FC ] amdsata C:\Windows\system32\drivers\amdsata.sys
19:22:11.0827 4968 amdsata - ok
19:22:11.0843 4968 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
19:22:11.0858 4968 amdsbs - ok
19:22:11.0874 4968 [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata C:\Windows\system32\drivers\amdxata.sys
19:22:11.0874 4968 amdxata - ok
19:22:11.0936 4968 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys
19:22:11.0936 4968 AppID - ok
19:22:11.0967 4968 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
19:22:11.0967 4968 AppIDSvc - ok
19:22:11.0999 4968 [ FB1959012294D6AD43E5304DF65E3C26 ] Appinfo C:\Windows\System32\appinfo.dll
19:22:12.0014 4968 Appinfo - ok
19:22:12.0045 4968 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
19:22:12.0061 4968 arc - ok
19:22:12.0077 4968 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
19:22:12.0077 4968 arcsas - ok
19:22:12.0108 4968 [ 9D8CB58B9A9E177DDD599791A58A654D ] AsIO C:\Windows\system32\drivers\AsIO.sys
19:22:12.0108 4968 AsIO - ok
19:22:12.0139 4968 [ B6E6B264E9C4D0AD0E97AF8434C8754D ] asusgsb C:\Windows\system32\drivers\asusgsb.sys
19:22:12.0139 4968 asusgsb - ok
19:22:12.0155 4968 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
19:22:12.0155 4968 AsyncMac - ok
19:22:12.0201 4968 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys
19:22:12.0201 4968 atapi - ok
19:22:12.0217 4968 [ 409AAFBD2642813F2C1BB446C816E354 ] atkdisplf C:\Windows\system32\drivers\ATKDispLowFilter.sys
19:22:12.0217 4968 atkdisplf - ok
19:22:12.0264 4968 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
19:22:12.0279 4968 AudioEndpointBuilder - ok
19:22:12.0279 4968 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll
19:22:12.0295 4968 Audiosrv - ok
19:22:12.0357 4968 [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV C:\Windows\System32\AxInstSV.dll
19:22:12.0373 4968 AxInstSV - ok
19:22:12.0420 4968 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
19:22:12.0420 4968 b06bdrv - ok
19:22:12.0451 4968 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
19:22:12.0451 4968 b57nd60x - ok
19:22:12.0513 4968 [ 7ED4E1D2E124AD4E6A287CF49DBC9BBA ] BCUService C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
19:22:12.0513 4968 BCUService - ok
19:22:12.0545 4968 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
19:22:12.0545 4968 BDESVC - ok
19:22:12.0545 4968 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
19:22:12.0545 4968 Beep - ok
19:22:12.0607 4968 [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE C:\Windows\System32\bfe.dll
19:22:12.0623 4968 BFE - ok
19:22:12.0669 4968 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll
19:22:12.0685 4968 BITS - ok
19:22:12.0685 4968 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
19:22:12.0701 4968 blbdrive - ok
19:22:12.0747 4968 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
19:22:12.0747 4968 bowser - ok
19:22:12.0779 4968 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
19:22:12.0779 4968 BrFiltLo - ok
19:22:12.0779 4968 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
19:22:12.0794 4968 BrFiltUp - ok
19:22:12.0810 4968 [ 77361D72A04F18809D0EFB6CCEB74D4B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
19:22:12.0810 4968 BridgeMP - ok
19:22:12.0857 4968 [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser C:\Windows\System32\browser.dll
19:22:12.0872 4968 Browser - ok
19:22:12.0903 4968 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
19:22:12.0903 4968 Brserid - ok
19:22:12.0919 4968 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
19:22:12.0919 4968 BrSerWdm - ok
19:22:12.0950 4968 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
19:22:12.0950 4968 BrUsbMdm - ok
19:22:12.0950 4968 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
19:22:12.0966 4968 BrUsbSer - ok
19:22:12.0981 4968 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
19:22:12.0981 4968 BTHMODEM - ok
19:22:12.0997 4968 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
19:22:13.0013 4968 bthserv - ok
19:22:13.0013 4968 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
19:22:13.0028 4968 cdfs - ok
19:22:13.0091 4968 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
19:22:13.0091 4968 cdrom - ok
19:22:13.0153 4968 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll
19:22:13.0153 4968 CertPropSvc - ok
19:22:13.0169 4968 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
19:22:13.0169 4968 circlass - ok
19:22:13.0184 4968 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
19:22:13.0200 4968 CLFS - ok
19:22:13.0247 4968 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:22:13.0262 4968 clr_optimization_v2.0.50727_32 - ok
19:22:13.0387 4968 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:22:13.0434 4968 clr_optimization_v4.0.30319_32 - ok
19:22:13.0449 4968 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
19:22:13.0449 4968 CmBatt - ok
19:22:13.0496 4968 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys
19:22:13.0496 4968 cmdide - ok
19:22:13.0559 4968 [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG C:\Windows\system32\Drivers\cng.sys
19:22:13.0574 4968 CNG - ok
19:22:13.0590 4968 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
19:22:13.0590 4968 Compbatt - ok
19:22:13.0621 4968 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
19:22:13.0621 4968 CompositeBus - ok
19:22:13.0637 4968 COMSysApp - ok
19:22:13.0652 4968 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
19:22:13.0652 4968 crcdisk - ok
19:22:13.0683 4968 [ 96C0E38905CFD788313BE8E11DAE3F2F ] CryptSvc C:\Windows\system32\cryptsvc.dll
19:22:13.0699 4968 CryptSvc - ok
19:22:13.0824 4968 [ 914A7156B0C0F10BE645A02E13F576B2 ] DAUpdaterSvc C:\Program Files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
19:22:13.0839 4968 DAUpdaterSvc - ok
19:22:13.0886 4968 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32\rpcss.dll
19:22:13.0902 4968 DcomLaunch - ok
19:22:13.0917 4968 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
19:22:13.0933 4968 defragsvc - ok
19:22:13.0995 4968 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
19:22:13.0995 4968 DfsC - ok
19:22:14.0027 4968 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll
19:22:14.0027 4968 Dhcp - ok
19:22:14.0042 4968 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
19:22:14.0042 4968 discache - ok
19:22:14.0073 4968 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
19:22:14.0073 4968 Disk - ok
19:22:14.0120 4968 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
19:22:14.0151 4968 Dnscache - ok
19:22:14.0183 4968 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll
19:22:14.0198 4968 dot3svc - ok
19:22:14.0214 4968 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll
19:22:14.0214 4968 DPS - ok
19:22:14.0245 4968 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
19:22:14.0245 4968 drmkaud - ok
19:22:14.0307 4968 [ 23F5D28378A160352BA8F817BD8C71CB ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
19:22:14.0339 4968 DXGKrnl - ok
19:22:14.0432 4968 [ 04238864710460C5682E260207D06192 ] eamonm C:\Windows\system32\DRIVERS\eamonm.sys
19:22:14.0448 4968 eamonm - ok
19:22:14.0463 4968 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
19:22:14.0463 4968 EapHost - ok
19:22:14.0541 4968 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
19:22:14.0604 4968 ebdrv - ok
19:22:14.0651 4968 [ 81951F51E318AECC2D68559E47485CC4 ] EFS C:\Windows\System32\lsass.exe
19:22:14.0651 4968 EFS - ok
19:22:14.0713 4968 [ DEFF87F04AB5F6DD5EDF2B80853BBE10 ] ehdrv C:\Windows\system32\DRIVERS\ehdrv.sys
19:22:14.0713 4968 ehdrv - ok
19:22:14.0791 4968 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
19:22:14.0791 4968 ehRecvr - ok
19:22:14.0822 4968 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
19:22:14.0822 4968 ehSched - ok
19:22:14.0869 4968 [ 42584EC72495F4DA1704123A20AC1012 ] EIO C:\Windows\system32\DRIVERS\EIO.sys
19:22:14.0885 4968 EIO - ok
19:22:15.0009 4968 [ C7BB95CF9631AA401E4ADED1648F6AF7 ] ekrn C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
19:22:15.0025 4968 ekrn - ok
19:22:15.0072 4968 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
19:22:15.0072 4968 elxstor - ok
19:22:15.0103 4968 [ 5BA193CA0AE31209AAA39939CE6736B2 ] epfw C:\Windows\system32\DRIVERS\epfw.sys
19:22:15.0103 4968 epfw - ok
19:22:15.0150 4968 [ 9CEFD59C8E5EBFB48165AEF54617F539 ] EpfwLWF C:\Windows\system32\DRIVERS\EpfwLWF.sys
19:22:15.0181 4968 EpfwLWF - ok
19:22:15.0243 4968 [ 490329BF80F333E788DF9596A752A915 ] Epfwndis C:\Windows\system32\DRIVERS\Epfwndis.sys
19:22:15.0275 4968 Epfwndis - ok
19:22:15.0306 4968 [ 7144A06AC105A2A7302944602E415EC1 ] epfwwfp C:\Windows\system32\DRIVERS\epfwwfp.sys
19:22:15.0306 4968 epfwwfp - ok
19:22:15.0368 4968 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys
19:22:15.0368 4968 ErrDev - ok
19:22:15.0415 4968 esgiguard - ok
19:22:15.0446 4968 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
19:22:15.0446 4968 EventSystem - ok
19:22:15.0477 4968 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
19:22:15.0477 4968 exfat - ok
19:22:15.0493 4968 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
19:22:15.0509 4968 fastfat - ok
19:22:15.0571 4968 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe
19:22:15.0571 4968 Fax - ok
19:22:15.0587 4968 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
19:22:15.0602 4968 fdc - ok
19:22:15.0602 4968 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
19:22:15.0602 4968 fdPHost - ok
19:22:15.0633 4968 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
19:22:15.0633 4968 FDResPub - ok
19:22:15.0649 4968 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
19:22:15.0649 4968 FileInfo - ok
19:22:15.0649 4968 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
19:22:15.0649 4968 Filetrace - ok
19:22:15.0665 4968 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
19:22:15.0665 4968 flpydisk - ok
19:22:15.0696 4968 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
19:22:15.0696 4968 FltMgr - ok
19:22:15.0743 4968 [ B3A5EC6B6B6673DB7E87C2BCDBDDC074 ] FontCache C:\Windows\system32\FntCache.dll
19:22:15.0758 4968 FontCache - ok
19:22:15.0805 4968 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
19:22:15.0805 4968 FontCache3.0.0.0 - ok
19:22:15.0821 4968 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
19:22:15.0821 4968 FsDepends - ok
19:22:15.0867 4968 [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
19:22:15.0867 4968 Fs_Rec - ok
19:22:15.0930 4968 [ 8A73E79089B282100B9393B644CB853B ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
19:22:15.0945 4968 fvevol - ok
19:22:15.0977 4968 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
19:22:15.0977 4968 gagp30kx - ok
19:22:16.0086 4968 GGSAFERDriver - ok
19:22:16.0148 4968 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll
19:22:16.0164 4968 gpsvc - ok
19:22:16.0289 4968 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
19:22:16.0289 4968 gupdate - ok
19:22:16.0304 4968 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
19:22:16.0304 4968 gupdatem - ok
19:22:16.0351 4968 [ 833051C6C6C42117191935F734CFBD97 ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
19:22:16.0367 4968 hamachi - ok
19:22:16.0460 4968 [ F31D7F8A7699575DBB3B3A3AB4AA6216 ] Hamachi2Svc C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
19:22:16.0476 4968 Hamachi2Svc - ok
19:22:16.0507 4968 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
19:22:16.0507 4968 hcw85cir - ok
19:22:16.0554 4968 [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
19:22:16.0569 4968 HdAudAddService - ok
19:22:16.0601 4968 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
19:22:16.0601 4968 HDAudBus - ok
19:22:16.0616 4968 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
19:22:16.0616 4968 HidBatt - ok
19:22:16.0632 4968 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
19:22:16.0632 4968 HidBth - ok
19:22:16.0647 4968 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
19:22:16.0663 4968 HidIr - ok
19:22:16.0679 4968 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\System32\hidserv.dll
19:22:16.0679 4968 hidserv - ok
19:22:16.0741 4968 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
19:22:16.0741 4968 HidUsb - ok
19:22:16.0788 4968 [ AFC2004D9BB385DCE713E5088A1ED554 ] hipeer20 C:\Windows\system32\DRIVERS\remobo32.sys
19:22:16.0803 4968 hipeer20 - ok
19:22:16.0850 4968 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll
19:22:16.0866 4968 hkmsvc - ok
19:22:16.0928 4968 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
19:22:16.0944 4968 HomeGroupListener - ok
19:22:16.0991 4968 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
19:22:17.0022 4968 HomeGroupProvider - ok
19:22:17.0100 4968 hpdj - ok
19:22:17.0193 4968 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
19:22:17.0209 4968 HpSAMD - ok
19:22:17.0256 4968 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys
19:22:17.0287 4968 HTTP - ok
19:22:17.0303 4968 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
19:22:17.0318 4968 hwpolicy - ok
19:22:17.0427 4968 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
19:22:17.0443 4968 i8042prt - ok
19:22:17.0583 4968 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
19:22:17.0599 4968 iaStorV - ok
19:22:17.0693 4968 [ 6F95324909B502E2651442C1548AB12F ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
19:22:17.0739 4968 IDriverT - ok
19:22:17.0833 4968 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
19:22:17.0864 4968 idsvc - ok
19:22:17.0895 4968 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
19:22:17.0895 4968 iirsp - ok
19:22:17.0942 4968 [ F95622F161474511B8D80D6B093AA610 ] IKEEXT C:\Windows\System32\ikeext.dll
19:22:17.0958 4968 IKEEXT - ok
19:22:17.0973 4968 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys
19:22:17.0973 4968 intelide - ok
19:22:17.0989 4968 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
19:22:17.0989 4968 intelppm - ok
19:22:18.0020 4968 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
19:22:18.0020 4968 IPBusEnum - ok
19:22:18.0036 4968 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:22:18.0036 4968 IpFilterDriver - ok
19:22:18.0098 4968 [ 58F67245D041FBE7AF88F4EAF79DF0FA ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
19:22:18.0098 4968 iphlpsvc - ok
19:22:18.0145 4968 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
19:22:18.0145 4968 IPMIDRV - ok
19:22:18.0176 4968 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
19:22:18.0176 4968 IPNAT - ok
19:22:18.0192 4968 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
19:22:18.0192 4968 IRENUM - ok
19:22:18.0223 4968 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys
19:22:18.0223 4968 isapnp - ok
19:22:18.0223 4968 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
19:22:18.0239 4968 iScsiPrt - ok
19:22:18.0254 4968 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
19:22:18.0254 4968 kbdclass - ok
19:22:18.0270 4968 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
19:22:18.0270 4968 kbdhid - ok
19:22:18.0285 4968 [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso C:\Windows\system32\lsass.exe
19:22:18.0285 4968 KeyIso - ok
19:22:18.0332 4968 [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
19:22:18.0348 4968 KSecDD - ok
19:22:18.0379 4968 [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
19:22:18.0395 4968 KSecPkg - ok
19:22:18.0426 4968 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
19:22:18.0426 4968 KtmRm - ok
19:22:18.0457 4968 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\System32\srvsvc.dll
19:22:18.0457 4968 LanmanServer - ok
19:22:18.0504 4968 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:22:18.0519 4968 LanmanWorkstation - ok
19:22:18.0551 4968 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
19:22:18.0551 4968 lltdio - ok
19:22:18.0566 4968 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
19:22:18.0566 4968 lltdsvc - ok
19:22:18.0582 4968 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
19:22:18.0582 4968 lmhosts - ok
19:22:18.0613 4968 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
19:22:18.0613 4968 LSI_FC - ok
19:22:18.0629 4968 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
19:22:18.0629 4968 LSI_SAS - ok
19:22:18.0644 4968 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
19:22:18.0644 4968 LSI_SAS2 - ok
19:22:18.0660 4968 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
19:22:18.0660 4968 LSI_SCSI - ok
19:22:18.0675 4968 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
19:22:18.0675 4968 luafv - ok
19:22:18.0722 4968 [ 144011D14BD35F4E36136AE057B1AADD ] LUsbFilt C:\Windows\system32\Drivers\LUsbFilt.Sys
19:22:18.0722 4968 LUsbFilt - ok
19:22:18.0753 4968 [ 629CABB0421668C9D3D402A3C3D77E14 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
19:22:18.0753 4968 MBAMProtector - ok
19:22:18.0800 4968 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
19:22:18.0800 4968 MBAMScheduler - ok
19:22:18.0831 4968 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
19:22:18.0847 4968 MBAMService - ok
19:22:18.0878 4968 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
19:22:18.0878 4968 Mcx2Svc - ok
19:22:18.0909 4968 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
19:22:18.0909 4968 megasas - ok
19:22:18.0941 4968 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
19:22:18.0941 4968 MegaSR - ok
19:22:19.0003 4968 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
19:22:19.0019 4968 Microsoft Office Groove Audit Service - ok
19:22:19.0050 4968 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
19:22:19.0050 4968 MMCSS - ok
19:22:19.0065 4968 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
19:22:19.0065 4968 Modem - ok
19:22:19.0097 4968 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
19:22:19.0097 4968 monitor - ok
19:22:19.0159 4968 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
19:22:19.0159 4968 mouclass - ok
19:22:19.0175 4968 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
19:22:19.0175 4968 mouhid - ok
19:22:19.0221 4968 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
19:22:19.0237 4968 mountmgr - ok
19:22:19.0253 4968 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys
19:22:19.0268 4968 mpio - ok
19:22:19.0299 4968 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
19:22:19.0315 4968 mpsdrv - ok
19:22:19.0362 4968 [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc C:\Windows\system32\mpssvc.dll
19:22:19.0377 4968 MpsSvc - ok
19:22:19.0424 4968 [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
19:22:19.0424 4968 MRxDAV - ok
19:22:19.0471 4968 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
19:22:19.0487 4968 mrxsmb - ok
19:22:19.0533 4968 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:22:19.0533 4968 mrxsmb10 - ok
19:22:19.0549 4968 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:22:19.0549 4968 mrxsmb20 - ok
19:22:19.0596 4968 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys
19:22:19.0596 4968 msahci - ok
19:22:19.0627 4968 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys
19:22:19.0627 4968 msdsm - ok
19:22:19.0658 4968 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
19:22:19.0658 4968 MSDTC - ok
19:22:19.0689 4968 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
19:22:19.0689 4968 Msfs - ok
19:22:19.0689 4968 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
19:22:19.0705 4968 mshidkmdf - ok
19:22:19.0705 4968 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
19:22:19.0721 4968 msisadrv - ok
19:22:19.0752 4968 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
19:22:19.0752 4968 MSiSCSI - ok
19:22:19.0752 4968 msiserver - ok
19:22:19.0767 4968 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
19:22:19.0783 4968 MSKSSRV - ok
19:22:19.0783 4968 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
19:22:19.0783 4968 MSPCLOCK - ok
19:22:19.0799 4968 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
19:22:19.0799 4968 MSPQM - ok
19:22:19.0814 4968 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
19:22:19.0814 4968 MsRPC - ok
19:22:19.0830 4968 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
19:22:19.0830 4968 mssmbios - ok
19:22:19.0845 4968 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
19:22:19.0845 4968 MSTEE - ok
19:22:19.0861 4968 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
19:22:19.0861 4968 MTConfig - ok
19:22:19.0892 4968 [ CBE71C122434805CB73FFB6619F60598 ] MTsensor C:\Windows\system32\DRIVERS\ASACPI.sys
19:22:19.0892 4968 MTsensor - ok
19:22:19.0908 4968 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
19:22:19.0908 4968 Mup - ok
19:22:19.0970 4968 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll
19:22:19.0970 4968 napagent - ok
19:22:20.0001 4968 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
19:22:20.0001 4968 NativeWifiP - ok
19:22:20.0111 4968 [ E0E4A1F81A7D69C595A8A9DDAD084C19 ] NAUpdate C:\Program Files\Nero\Update\NASvc.exe
19:22:20.0126 4968 NAUpdate - ok
19:22:20.0189 4968 [ 8C9C922D71F1CD4DEF73F186416B7896 ] NDIS C:\Windows\system32\drivers\ndis.sys
19:22:20.0189 4968 NDIS - ok
19:22:20.0220 4968 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
19:22:20.0220 4968 NdisCap - ok
19:22:20.0251 4968 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
19:22:20.0251 4968 NdisTapi - ok
19:22:20.0298 4968 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
19:22:20.0298 4968 Ndisuio - ok
19:22:20.0313 4968 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
19:22:20.0313 4968 NdisWan - ok
19:22:20.0360 4968 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
19:22:20.0360 4968 NDProxy - ok
19:22:20.0423 4968 [ 1352E1648213551923A0A822E441553C ] Netaapl C:\Windows\system32\DRIVERS\netaapl.sys
19:22:20.0423 4968 Netaapl - ok
19:22:20.0454 4968 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
19:22:20.0454 4968 NetBIOS - ok
19:22:20.0501 4968 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
19:22:20.0516 4968 NetBT - ok
19:22:20.0516 4968 [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon C:\Windows\system32\lsass.exe
19:22:20.0516 4968 Netlogon - ok
19:22:20.0563 4968 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
19:22:20.0563 4968 Netman - ok
19:22:20.0579 4968 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
19:22:20.0579 4968 netprofm - ok
19:22:20.0610 4968 [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:22:20.0610 4968 NetTcpPortSharing - ok
19:22:20.0657 4968 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
19:22:20.0657 4968 nfrd960 - ok
19:22:20.0719 4968 [ 374071043F9E4231EE43BE2BB48DD36D ] NlaSvc C:\Windows\System32\nlasvc.dll
19:22:20.0719 4968 NlaSvc - ok
19:22:20.0781 4968 [ 28E36E677849174C910FAAEAD3E60E9E ] nmwcd C:\Windows\system32\drivers\ccdcmb.sys
19:22:20.0813 4968 nmwcd - ok
19:22:20.0859 4968 [ 3823DEB17F9F6775DE0187A98FA0536D ] nmwcdc C:\Windows\system32\drivers\ccdcmbo.sys
19:22:20.0875 4968 nmwcdc - ok
19:22:20.0875 4968 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
19:22:20.0875 4968 Npfs - ok
19:22:20.0922 4968 npggsvc - ok
19:22:20.0937 4968 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
19:22:20.0937 4968 nsi - ok
19:22:20.0953 4968 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
19:22:20.0953 4968 nsiproxy - ok
19:22:21.0031 4968 [ 0D87503986BB3DFED58E343FE39DDE13 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
19:22:21.0047 4968 Ntfs - ok
19:22:21.0078 4968 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
19:22:21.0078 4968 Null - ok
19:22:21.0359 4968 [ C1E661888C719FC2E12C057F233FB238 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
19:22:21.0405 4968 nvlddmkm - ok
19:22:21.0437 4968 [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid C:\Windows\system32\drivers\nvraid.sys
19:22:21.0437 4968 nvraid - ok
19:22:21.0452 4968 [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor C:\Windows\system32\drivers\nvstor.sys
19:22:21.0452 4968 nvstor - ok
19:22:21.0515 4968 [ 31D7E63B62BC4680B5D1358F91DA104E ] nvsvc C:\Windows\system32\nvvsvc.exe
19:22:21.0530 4968 nvsvc - ok
19:22:21.0639 4968 [ 143B429F2D19A0F123ED8E4BCA8DB751 ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
19:22:21.0686 4968 nvUpdatusService - ok
19:22:21.0749 4968 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
19:22:21.0749 4968 nv_agp - ok
19:22:21.0811 4968 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
19:22:21.0827 4968 odserv - ok
19:22:21.0858 4968 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
19:22:21.0873 4968 ohci1394 - ok
19:22:21.0905 4968 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:22:21.0920 4968 ose - ok
19:22:21.0967 4968 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
19:22:21.0967 4968 p2pimsvc - ok
19:22:21.0983 4968 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
19:22:21.0983 4968 p2psvc - ok
19:22:22.0014 4968 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
19:22:22.0014 4968 Parport - ok
19:22:22.0061 4968 [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr C:\Windows\system32\drivers\partmgr.sys
19:22:22.0061 4968 partmgr - ok
19:22:22.0076 4968 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
19:22:22.0076 4968 Parvdm - ok
19:22:22.0092 4968 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
19:22:22.0107 4968 PcaSvc - ok
19:22:22.0154 4968 [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd C:\Windows\system32\DRIVERS\pccsmcfd.sys
19:22:22.0170 4968 pccsmcfd - ok
19:22:22.0217 4968 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys
19:22:22.0217 4968 pci - ok
19:22:22.0232 4968 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys
19:22:22.0232 4968 pciide - ok
19:22:22.0248 4968 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
19:22:22.0248 4968 pcmcia - ok
19:22:22.0263 4968 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
19:22:22.0279 4968 pcw - ok
19:22:22.0295 4968 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
19:22:22.0295 4968 PEAUTH - ok
19:22:22.0373 4968 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll
19:22:22.0404 4968 pla - ok
19:22:22.0482 4968 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay C:\Windows\system32\umpnpmgr.dll
19:22:22.0482 4968 PlugPlay - ok
19:22:22.0560 4968 [ 205E1B699FD3F2F9B036EEA2EC30C620 ] PnkBstrA C:\Windows\system32\PnkBstrA.exe
19:22:22.0560 4968 PnkBstrA - ok
19:22:22.0591 4968 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
19:22:22.0591 4968 PNRPAutoReg - ok
19:22:22.0607 4968 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
19:22:22.0607 4968 PNRPsvc - ok
19:22:22.0669 4968 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
19:22:22.0669 4968 PolicyAgent - ok
19:22:22.0731 4968 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll
19:22:22.0731 4968 Power - ok
19:22:22.0763 4968 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
19:22:22.0763 4968 PptpMiniport - ok
19:22:22.0778 4968 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
19:22:22.0778 4968 Processor - ok
19:22:22.0825 4968 [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc C:\Windows\system32\profsvc.dll
19:22:22.0841 4968 ProfSvc - ok
19:22:22.0841 4968 [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe
19:22:22.0841 4968 ProtectedStorage - ok
19:22:22.0872 4968 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
19:22:22.0872 4968 Psched - ok
19:22:22.0919 4968 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
19:22:22.0950 4968 ql2300 - ok
19:22:22.0965 4968 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
19:22:22.0981 4968 ql40xx - ok
19:22:22.0997 4968 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
19:22:22.0997 4968 QWAVE - ok
19:22:23.0012 4968 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
19:22:23.0028 4968 QWAVEdrv - ok
19:22:23.0028 4968 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
19:22:23.0043 4968 RasAcd - ok
19:22:23.0059 4968 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
19:22:23.0075 4968 RasAgileVpn - ok
19:22:23.0075 4968 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
19:22:23.0090 4968 RasAuto - ok
19:22:23.0106 4968 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
19:22:23.0106 4968 Rasl2tp - ok
19:22:23.0153 4968 [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan C:\Windows\System32\rasmans.dll
19:22:23.0168 4968 RasMan - ok
19:22:23.0184 4968 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
19:22:23.0184 4968 RasPppoe - ok
19:22:23.0184 4968 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
19:22:23.0199 4968 RasSstp - ok
19:22:23.0246 4968 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
19:22:23.0246 4968 rdbss - ok
19:22:23.0262 4968 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
19:22:23.0262 4968 rdpbus - ok
19:22:23.0309 4968 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
19:22:23.0309 4968 RDPCDD - ok
19:22:23.0324 4968 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
19:22:23.0340 4968 RDPENCDD - ok
19:22:23.0340 4968 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
19:22:23.0355 4968 RDPREFMP - ok
19:22:23.0402 4968 [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
19:22:23.0402 4968 RDPWD - ok
19:22:23.0449 4968 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
19:22:23.0449 4968 rdyboost - ok
19:22:23.0480 4968 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
19:22:23.0480 4968 RemoteAccess - ok
19:22:23.0496 4968 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
19:22:23.0496 4968 RemoteRegistry - ok
19:22:23.0527 4968 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
19:22:23.0543 4968 RpcEptMapper - ok
19:22:23.0558 4968 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
19:22:23.0558 4968 RpcLocator - ok
19:22:23.0605 4968 [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs C:\Windows\system32\rpcss.dll
19:22:23.0605 4968 RpcSs - ok
19:22:23.0636 4968 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
19:22:23.0636 4968 rspndr - ok
19:22:23.0714 4968 [ 5283B9A27FF230F2FF70D92451FF409A ] RTL8167 C:\Windows\system32\DRIVERS\Rt86win7.sys
19:22:23.0714 4968 RTL8167 - ok
19:22:23.0730 4968 [ 81951F51E318AECC2D68559E47485CC4 ] SamSs C:\Windows\system32\lsass.exe
19:22:23.0730 4968 SamSs - ok
19:22:23.0777 4968 [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
19:22:23.0792 4968 sbp2port - ok
19:22:23.0808 4968 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
19:22:23.0808 4968 SCardSvr - ok
19:22:23.0839 4968 [ C23DBD9BFBA8B1170706E0896B3CF7DA ] SCDEmu C:\Windows\system32\drivers\SCDEmu.sys
19:22:23.0839 4968 SCDEmu - ok
19:22:23.0855 4968 [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
19:22:23.0855 4968 scfilter - ok
19:22:23.0917 4968 [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule C:\Windows\system32\schedsvc.dll
19:22:23.0933 4968 Schedule - ok
19:22:23.0979 4968 [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc C:\Windows\System32\certprop.dll
19:22:23.0979 4968 SCPolicySvc - ok
19:22:23.0995 4968 [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC C:\Windows\System32\SDRSVC.dll
19:22:24.0011 4968 SDRSVC - ok
19:22:24.0042 4968 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
19:22:24.0042 4968 secdrv - ok
19:22:24.0057 4968 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
19:22:24.0057 4968 seclogon - ok
19:22:24.0073 4968 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll
19:22:24.0073 4968 SENS - ok
19:22:24.0089 4968 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
19:22:24.0120 4968 SensrSvc - ok
19:22:24.0151 4968 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
19:22:24.0151 4968 Serenum - ok
19:22:24.0167 4968 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
19:22:24.0167 4968 Serial - ok
19:22:24.0198 4968 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
19:22:24.0198 4968 sermouse - ok
19:22:24.0354 4968 [ 5BF59C6BC737BAAF541168E5CB2EC1D9 ] ServiceLayer C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe
19:22:24.0385 4968 ServiceLayer - ok
19:22:24.0432 4968 [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv C:\Windows\system32\sessenv.dll
19:22:24.0432 4968 SessionEnv - ok
19:22:24.0510 4968 [ 56250672235BBE54BA8A4963B1AC997C ] sfdrv01 C:\Windows\system32\drivers\sfdrv01.sys
19:22:24.0541 4968 sfdrv01 - ok
19:22:24.0572 4968 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
19:22:24.0572 4968 sffdisk - ok
19:22:24.0588 4968 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
19:22:24.0588 4968 sffp_mmc - ok
19:22:24.0603 4968 [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
19:22:24.0603 4968 sffp_sd - ok
19:22:24.0666 4968 [ 3AD2B15CCC03FEBFBAF5FF057822AA75 ] sfhlp02 C:\Windows\system32\drivers\sfhlp02.sys
19:22:24.0666 4968 sfhlp02 - ok
19:22:24.0697 4968 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
19:22:24.0697 4968 sfloppy - ok
19:22:24.0713 4968 [ 798D918D8F20380008277CE3CE5319D1 ] sfsync02 C:\Windows\system32\drivers\sfsync02.sys
19:22:24.0744 4968 sfsync02 - ok
19:22:24.0775 4968 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
19:22:24.0791 4968 SharedAccess - ok
19:22:24.0837 4968 [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
19:22:24.0853 4968 ShellHWDetection - ok
19:22:24.0869 4968 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\drivers\sisagp.sys
19:22:24.0869 4968 sisagp - ok
19:22:24.0900 4968 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
19:22:24.0900 4968 SiSRaid2 - ok
19:22:24.0915 4968 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
19:22:24.0915 4968 SiSRaid4 - ok
19:22:24.0993 4968 [ 8C4F0DCC6A5100D48F9B2F950CDD220F ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
19:22:24.0993 4968 SkypeUpdate - ok
19:22:25.0009 4968 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
19:22:25.0025 4968 Smb - ok
19:22:25.0056 4968 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
19:22:25.0056 4968 SNMPTRAP - ok
19:22:25.0071 4968 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
19:22:25.0071 4968 spldr - ok
19:22:25.0134 4968 [ 9AEA093B8F9C37CF45538382CABA2475 ] Spooler C:\Windows\System32\spoolsv.exe
19:22:25.0134 4968 Spooler - ok
19:22:25.0227 4968 [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc C:\Windows\system32\sppsvc.exe
19:22:25.0259 4968 sppsvc - ok
19:22:25.0321 4968 [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify C:\Windows\system32\sppuinotify.dll
19:22:25.0321 4968 sppuinotify - ok
19:22:25.0352 4968 [ A199171385BE17973FD800FA91F8F78A ] sptd C:\Windows\system32\Drivers\sptd.sys
19:22:25.0368 4968 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: A199171385BE17973FD800FA91F8F78A
19:22:25.0368 4968 sptd ( LockedFile.Multi.Generic ) - warning
19:22:25.0368 4968 sptd - detected LockedFile.Multi.Generic (1)
19:22:25.0430 4968 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv C:\Windows\system32\DRIVERS\srv.sys
19:22:25.0446 4968 srv - ok
19:22:25.0477 4968 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
19:22:25.0477 4968 srv2 - ok
19:22:25.0493 4968 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
19:22:25.0493 4968 srvnet - ok
19:22:25.0508 4968 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
19:22:25.0524 4968 SSDPSRV - ok
19:22:25.0539 4968 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
19:22:25.0539 4968 SstpSvc - ok
19:22:25.0602 4968 Steam Client Service - ok
19:22:25.0664 4968 [ 0632004181860960CF6E10DE8DDEF78B ] Stereo Service C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
19:22:25.0664 4968 Stereo Service - ok
19:22:25.0680 4968 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
19:22:25.0680 4968 stexstor - ok
19:22:25.0727 4968 [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc C:\Windows\System32\wiaservc.dll
19:22:25.0727 4968 StiSvc - ok
19:22:25.0773 4968 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\drivers\swenum.sys
19:22:25.0773 4968 swenum - ok
19:22:25.0805 4968 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
19:22:25.0805 4968 swprv - ok
19:22:25.0883 4968 [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain C:\Windows\system32\sysmain.dll
19:22:25.0914 4968 SysMain - ok
19:22:25.0929 4968 [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:22:25.0929 4968 TabletInputService - ok
19:22:25.0976 4968 [ 613BF4820361543956909043A265C6AC ] TapiSrv C:\Windows\System32\tapisrv.dll
19:22:25.0976 4968 TapiSrv - ok
19:22:25.0992 4968 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
19:22:25.0992 4968 TBS - ok
19:22:26.0085 4968 [ E23A56F843E2AEBBB209D0ACCA73C640 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
19:22:26.0132 4968 Tcpip - ok
19:22:26.0179 4968 [ E23A56F843E2AEBBB209D0ACCA73C640 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
19:22:26.0195 4968 TCPIP6 - ok
19:22:26.0210 4968 [ 3EEBD3BD93DA46A26E89893C7AB2FF3B ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
19:22:26.0210 4968 tcpipreg - ok
19:22:26.0257 4968 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
19:22:26.0273 4968 TDPIPE - ok
19:22:26.0304 4968 [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
19:22:26.0319 4968 TDTCP - ok
19:22:26.0351 4968 [ B459575348C20E8121D6039DA063C704 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
19:22:26.0366 4968 tdx - ok
19:22:26.0413 4968 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD C:\Windows\system32\drivers\termdd.sys
19:22:26.0413 4968 TermDD - ok
19:22:26.0475 4968 [ 382C804C92811BE57829D8E550A900E2 ] TermService C:\Windows\System32\termsrv.dll
19:22:26.0491 4968 TermService - ok
19:22:26.0507 4968 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
19:22:26.0507 4968 Themes - ok
19:22:26.0522 4968 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
19:22:26.0522 4968 THREADORDER - ok
19:22:26.0538 4968 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
19:22:26.0538 4968 TrkWks - ok
19:22:26.0569 4968 [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:22:26.0585 4968 TrustedInstaller - ok

19:22:26.0600 4968 [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
19:22:26.0600 4968 tssecsrv - ok
19:22:26.0647 4968 [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
19:22:26.0647 4968 TsUsbFlt - ok
19:22:26.0709 4968 [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
19:22:26.0709 4968 tunnel - ok
19:22:26.0741 4968 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
19:22:26.0741 4968 uagp35 - ok
19:22:26.0787 4968 [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs C:\Windows\system32\DRIVERS\udfs.sys
19:22:26.0803 4968 udfs - ok
19:22:26.0834 4968 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
19:22:26.0834 4968 UI0Detect - ok
19:22:26.0897 4968 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
19:22:26.0897 4968 uliagpkx - ok
19:22:26.0928 4968 [ D295BED4B898F0FD999FCFA9B32B071B ] umbus C:\Windows\system32\drivers\umbus.sys
19:22:26.0928 4968 umbus - ok
19:22:26.0943 4968 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
19:22:26.0943 4968 UmPass - ok
19:22:26.0959 4968 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
19:22:26.0959 4968 upnphost - ok
19:22:27.0021 4968 [ B1B8BEE26227DAD9835019201552CB05 ] upperdev C:\Windows\system32\DRIVERS\usbser_lowerflt.sys
19:22:27.0021 4968 upperdev - ok
19:22:27.0084 4968 [ 83CAFCB53201BBAC04D822F32438E244 ] USBAAPL C:\Windows\system32\Drivers\usbaapl.sys
19:22:27.0084 4968 USBAAPL - ok
19:22:27.0131 4968 [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
19:22:27.0146 4968 usbccgp - ok
19:22:27.0193 4968 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\drivers\usbcir.sys
19:22:27.0209 4968 usbcir - ok
19:22:27.0271 4968 [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci C:\Windows\system32\drivers\usbehci.sys
19:22:27.0287 4968 usbehci - ok
19:22:27.0302 4968 [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
19:22:27.0318 4968 usbhub - ok
19:22:27.0380 4968 [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci C:\Windows\system32\drivers\usbohci.sys
19:22:27.0380 4968 usbohci - ok
19:22:27.0396 4968 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
19:22:27.0411 4968 usbprint - ok
19:22:27.0474 4968 [ 31181DE6190B39FC8007DFFD1A48FFD6 ] usbser C:\Windows\system32\drivers\usbser.sys
19:22:27.0474 4968 usbser - ok
19:22:27.0521 4968 [ 98E1FF1D732C6C7200B6C59D4FF8C1C3 ] UsbserFilt C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys
19:22:27.0536 4968 UsbserFilt - ok
19:22:27.0567 4968 [ F991AB9CC6B908DB552166768176896A ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:22:27.0567 4968 USBSTOR - ok
19:22:27.0630 4968 [ 68DF884CF41CDADA664BEB01DAF67E3D ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
19:22:27.0645 4968 usbuhci - ok
19:22:27.0677 4968 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
19:22:27.0692 4968 UxSms - ok
19:22:27.0692 4968 [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc C:\Windows\system32\lsass.exe
19:22:27.0692 4968 VaultSvc - ok
19:22:27.0723 4968 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
19:22:27.0723 4968 vdrvroot - ok
19:22:27.0770 4968 [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds C:\Windows\System32\vds.exe
19:22:27.0786 4968 vds - ok
19:22:27.0801 4968 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
19:22:27.0801 4968 vga - ok
19:22:27.0817 4968 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
19:22:27.0817 4968 VgaSave - ok
19:22:27.0864 4968 [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
19:22:27.0864 4968 vhdmp - ok
19:22:27.0911 4968 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\drivers\viaagp.sys
19:22:27.0911 4968 viaagp - ok
19:22:27.0926 4968 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
19:22:27.0926 4968 ViaC7 - ok
19:22:27.0973 4968 [ DC56A867A2D92E1C51CB6D3F9C540548 ] VIAHdAudAddService C:\Windows\system32\drivers\viahduaa.sys
19:22:28.0004 4968 VIAHdAudAddService - ok
19:22:28.0051 4968 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\drivers\viaide.sys
19:22:28.0051 4968 viaide - ok
19:22:28.0067 4968 [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr C:\Windows\system32\drivers\volmgr.sys
19:22:28.0067 4968 volmgr - ok
19:22:28.0082 4968 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
19:22:28.0082 4968 volmgrx - ok
19:22:28.0113 4968 [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap C:\Windows\system32\drivers\volsnap.sys
19:22:28.0113 4968 volsnap - ok
19:22:28.0129 4968 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
19:22:28.0129 4968 vsmraid - ok
19:22:28.0191 4968 [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS C:\Windows\system32\vssvc.exe
19:22:28.0207 4968 VSS - ok
19:22:28.0223 4968 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
19:22:28.0223 4968 vwifibus - ok
19:22:28.0269 4968 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
19:22:28.0269 4968 W32Time - ok
19:22:28.0285 4968 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
19:22:28.0285 4968 WacomPen - ok
19:22:28.0347 4968 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
19:22:28.0347 4968 WANARP - ok
19:22:28.0363 4968 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
19:22:28.0363 4968 Wanarpv6 - ok
19:22:28.0410 4968 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
19:22:28.0441 4968 WatAdminSvc - ok
19:22:28.0535 4968 [ 691E3285E53DCA558E1A84667F13E15A ] wbengine C:\Windows\system32\wbengine.exe
19:22:28.0566 4968 wbengine - ok
19:22:28.0581 4968 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
19:22:28.0581 4968 WbioSrvc - ok
19:22:28.0644 4968 [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc C:\Windows\System32\wcncsvc.dll
19:22:28.0659 4968 wcncsvc - ok
19:22:28.0659 4968 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
19:22:28.0659 4968 WcsPlugInService - ok
19:22:28.0691 4968 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
19:22:28.0691 4968 Wd - ok
19:22:28.0737 4968 [ A840213F1ACDCC175B4D1D5AAEAC0D7A ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
19:22:28.0753 4968 Wdf01000 - ok
19:22:28.0769 4968 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
19:22:28.0769 4968 WdiServiceHost - ok
19:22:28.0784 4968 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
19:22:28.0784 4968 WdiSystemHost - ok
19:22:28.0800 4968 [ A9D880F97530D5B8FEE278923349929D ] WebClient C:\Windows\System32\webclnt.dll
19:22:28.0800 4968 WebClient - ok
19:22:28.0815 4968 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
19:22:28.0815 4968 Wecsvc - ok
19:22:28.0815 4968 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
19:22:28.0831 4968 wercplsupport - ok
19:22:28.0847 4968 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
19:22:28.0862 4968 WerSvc - ok
19:22:28.0878 4968 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
19:22:28.0878 4968 WfpLwf - ok
19:22:28.0893 4968 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
19:22:28.0893 4968 WIMMount - ok
19:22:28.0925 4968 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
19:22:28.0940 4968 WinDefend - ok
19:22:28.0956 4968 WinHttpAutoProxySvc - ok
19:22:28.0987 4968 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
19:22:28.0987 4968 Winmgmt - ok
19:22:29.0049 4968 [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM C:\Windows\system32\WsmSvc.dll
19:22:29.0081 4968 WinRM - ok
19:22:29.0143 4968 [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
19:22:29.0143 4968 WinUsb - ok
19:22:29.0174 4968 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
19:22:29.0190 4968 Wlansvc - ok
19:22:29.0268 4968 [ 5144AE67D60EC653F97DDF3FEED29E77 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
19:22:29.0283 4968 wlidsvc - ok
19:22:29.0315 4968 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
19:22:29.0315 4968 WmiAcpi - ok
19:22:29.0361 4968 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
19:22:29.0361 4968 wmiApSrv - ok
19:22:29.0455 4968 [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
19:22:29.0455 4968 WMPNetworkSvc - ok
19:22:29.0471 4968 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
19:22:29.0471 4968 WPCSvc - ok
19:22:29.0517 4968 [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
19:22:29.0533 4968 WPDBusEnum - ok
19:22:29.0549 4968 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
19:22:29.0549 4968 ws2ifsl - ok
19:22:29.0564 4968 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\system32\wscsvc.dll
19:22:29.0564 4968 wscsvc - ok
19:22:29.0564 4968 WSearch - ok
19:22:29.0673 4968 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
19:22:29.0705 4968 wuauserv - ok
19:22:29.0736 4968 [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
19:22:29.0751 4968 WudfPf - ok
19:22:29.0767 4968 [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
19:22:29.0767 4968 WUDFRd - ok
19:22:29.0783 4968 [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
19:22:29.0798 4968 wudfsvc - ok
19:22:29.0798 4968 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll
19:22:29.0814 4968 WwanSvc - ok
19:22:29.0829 4968 ================ Scan global ===============================
19:22:29.0892 4968 [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll
19:22:29.0923 4968 [ D70FE45855CAD4C0C6B1C1426ABDEBA9 ] C:\Windows\system32\winsrv.dll
19:22:29.0939 4968 [ D70FE45855CAD4C0C6B1C1426ABDEBA9 ] C:\Windows\system32\winsrv.dll
19:22:29.0970 4968 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
19:22:29.0985 4968 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
19:22:29.0985 4968 [Global] - ok
19:22:29.0985 4968 ================ Scan MBR ==================================
19:22:30.0001 4968 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
19:22:30.0110 4968 \Device\Harddisk0\DR0 - ok
19:22:30.0110 4968 ================ Scan VBR ==================================
19:22:30.0110 4968 [ 102030FDC7BEEB0BD2F906E3CC2920B8 ] \Device\Harddisk0\DR0\Partition1
19:22:30.0110 4968 \Device\Harddisk0\DR0\Partition1 - ok
19:22:30.0141 4968 [ F46D81ABD9960AF58D8FB6BD7D2A23FD ] \Device\Harddisk0\DR0\Partition2
19:22:30.0141 4968 \Device\Harddisk0\DR0\Partition2 - ok
19:22:30.0141 4968 ============================================================
19:22:30.0141 4968 Scan finished
19:22:30.0141 4968 ============================================================
19:22:30.0141 4980 Detected object count: 1
19:22:30.0141 4980 Actual detected object count: 1
19:22:48.0159 4980 sptd ( LockedFile.Multi.Generic ) - skipped by user
19:22:48.0159 4980 sptd ( LockedFile.Multi.Generic ) - User select action: Skip

ComboFix 13-01-15.02 - Koberus 29.01.2013 19:39:45.1.4 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3575.2285 [GMT 1:00]
Spuštěný z: c:\users\Koberus\Desktop\ComboFix.exe
AV: ESET Smart Security 5.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 5.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Koberus\AppData\Local\assembly\tmp
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\system32\drivers\etc\hosts.ics
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-28 do 2013-01-29 )))))))))))))))))))))))))))))))
.
.
2013-01-29 17:50 . 2013-01-29 17:50 -------- d-----w- c:\users\Koberus\AppData\Roaming\Malwarebytes
2013-01-29 17:50 . 2013-01-29 17:50 -------- d-----w- c:\programdata\Malwarebytes
2013-01-29 17:50 . 2013-01-29 17:50 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-01-29 17:50 . 2012-12-14 15:49 21104 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-01-29 09:45 . 2013-01-08 04:57 6991832 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{53E38CFE-3497-49E2-A507-DDAF4B683973}\mpengine.dll
2013-01-29 09:44 . 2013-01-29 09:44 388096 ----a-r- c:\users\Koberus\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-01-28 12:19 . 2013-01-28 12:19 -------- d-----w- c:\program files\Common Files\Skype
2013-01-28 12:19 . 2013-01-28 12:19 -------- d-----r- c:\program files\Skype
2013-01-14 15:49 . 2013-01-14 15:49 -------- d-----w- c:\program files\Common Files\DVDVideoSoft
2013-01-10 18:33 . 2013-01-10 18:41 -------- d-----w- c:\program files\Nero
2013-01-09 14:20 . 2012-11-22 04:45 626688 ----a-w- c:\windows\system32\usp10.dll
2013-01-09 14:20 . 2012-11-23 02:56 2345984 ----a-w- c:\windows\system32\win32k.sys
2013-01-09 14:20 . 2012-11-09 04:43 492032 ----a-w- c:\windows\system32\win32spl.dll
2013-01-09 14:20 . 2012-11-23 02:48 49152 ----a-w- c:\windows\system32\taskhost.exe
2013-01-09 14:20 . 2012-11-01 04:47 1389568 ----a-w- c:\windows\system32\msxml6.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-09 16:29 . 2012-04-19 04:02 697864 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-01-09 16:29 . 2011-05-23 11:47 74248 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-12-16 14:13 . 2012-12-22 02:00 295424 ----a-w- c:\windows\system32\atmfd.dll
2012-12-16 14:13 . 2012-12-22 02:00 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-03 15:39 . 2012-12-18 13:53 9373032 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2012-12-03 15:39 . 2012-12-18 13:53 7819016 ----a-w- c:\windows\system32\nvcuda.dll
2012-12-03 15:39 . 2012-12-18 13:53 6149904 ----a-w- c:\windows\system32\nvopencl.dll
2012-12-03 15:39 . 2012-12-18 13:53 2606440 ----a-w- c:\windows\system32\nvcuvid.dll
2012-12-03 15:39 . 2012-12-18 13:53 20335976 ----a-w- c:\windows\system32\nvoglv32.dll
2012-12-03 15:39 . 2012-12-18 13:53 1874280 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-12-03 15:39 . 2012-12-18 13:53 17559912 ----a-w- c:\windows\system32\nvcompiler.dll
2012-12-03 15:39 . 2012-10-10 20:14 889192 ----a-w- c:\windows\system32\nvdispgenco32.dll
2012-12-03 15:39 . 2012-10-10 20:14 12603960 ----a-w- c:\windows\system32\nvwgf2um.dll
2012-12-03 15:39 . 2012-10-10 20:14 2496976 ----a-w- c:\windows\system32\nvapi.dll
2012-12-03 15:39 . 2012-10-10 20:14 15122280 ----a-w- c:\windows\system32\nvd3dum.dll
2012-12-03 15:39 . 2011-11-02 18:56 1011048 ----a-w- c:\windows\system32\nvdispco32.dll
2012-12-01 04:38 . 2010-07-09 14:37 2869608 ----a-w- c:\windows\system32\nvsvc.dll
2012-12-01 04:38 . 2010-07-09 14:37 3984744 ----a-w- c:\windows\system32\nvcpl.dll
2012-12-01 04:37 . 2010-07-09 14:37 645480 ----a-w- c:\windows\system32\nvvsvc.exe
2012-12-01 04:37 . 2010-07-09 14:37 108392 ----a-w- c:\windows\system32\nvmctray.dll
2012-12-01 04:37 . 2009-09-27 15:47 62312 ----a-w- c:\windows\system32\nvshext.dll
2012-12-01 04:37 . 2009-09-27 15:47 2557288 ----a-w- c:\windows\system32\nvsvcr.dll
2012-11-30 21:43 . 2012-11-30 21:43 438632 ----a-w- c:\windows\system32\nvStreaming.exe
2012-11-12 11:52 . 2012-12-12 07:09 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2012-11-09 04:42 . 2012-12-12 07:09 2048 ----a-w- c:\windows\system32\tzres.dll
2012-11-02 05:11 . 2012-12-12 07:09 376832 ----a-w- c:\windows\system32\dpnet.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-01-08 18705664]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"HDAudDeck"="c:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2009-10-28 1701888]
"BCU"="c:\program files\DeviceVM\Browser Configuration Utility\BCU.exe" [2009-10-26 375000]
"NokiaMusic FastStart"="c:\program files\Nokia\Ovi Player\NokiaOviPlayer.exe" [2010-03-04 2192672]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-06-27 1996200]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-09-22 3080264]
.
c:\users\Koberus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Stardock ObjectDock.lnk - c:\program files\Stardock\ObjectDock\ObjectDock.exe [2010-7-18 3444008]
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R3 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu;c:\program files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [x]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files\Garena Plus\Room\safedrv.sys [x]
R3 hipeer20;Remobo Instant Private Network;c:\windows\system32\DRIVERS\remobo32.sys [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl.sys [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [x]
S2 BCUService;Browser Configuration Utility Service;c:\program files\DeviceVM\Browser Configuration Utility\BCUService.exe [x]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [x]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-01-24 22:38 1607120 ----a-w- c:\program files\Google\Chrome\Application\24.0.1312.56\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-29 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-19 16:29]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Free YouTube to Mp3 Converter - c:\users\Koberus\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-10 - (no file)
HKCU-Run-NCsoft Launcher - c:\program files\NCSoft\Launcher\NCLauncher.exe
AddRemove-504244733D18C8F63FF584AEB290E3904E791693 - c:\progra~1\DIFX\B4723E9A0713E5B1\dpinst.exe
AddRemove-OpenAL - c:\program files\OpenAL\OalinstGridRelease.exe
AddRemove-Uninstall_is1 - c:\program files\Common Files\DVDVideoSoft\unins000.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-01-29 19:49:32
ComboFix-quarantined-files.txt 2013-01-29 18:49
.
Před spuštěním: Volných bajtů: 18 416 779 264
Po spuštění: Volných bajtů: 18 323 025 920
.
- - End Of File - - 1794562AFABCBEF08A78AB2AC00D7E1F

Používáš Garenu?

Ne. Je tam ještě něco v nepořádku?

Máš tam:
ESET Smart Security 5.0
nebo:
ESET NOD32 Antivirus ?

Odinstaluj :
Garena
SpyHunter

Garena je pryč, ale Spyhuntera nemůžu najít, ani přes program files ani přes hledání, nevim o tom že bych ho tam měl. Jinak mám ESET Smart Security 5.0