Prosím o kontrolu logu

indycz · Příspěvekod **indycz** » 30 led 2013 09:37

Mám hodně zpomalený notebook

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:34:08, on 30.1.2013
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\System Control Manager\MGSysCtrl.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\QIP 2010\qip.exe
C:\Users\Ondra\Downloads\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [MGSysCtrl] C:\Program Files\System Control Manager\MGSysCtrl.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\Skytel.exe
O4 - HKLM\..\Run: [ABC] C:\PROGRA~1\JTHABC~1\Keylogger.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Ondra\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe
O4 - Global Startup: Akcelerátor spuštění AutoCADu.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MIF5BA~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: Micro Star SCM - Micro-Star International Co., Ltd. - C:\Program Files\System Control Manager\MSIService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

--
End of file - 8422 bytes

Reklama

Příspěvekod **Orcus** » 30 led 2013 12:36

Ten keyloogger máš naschvál?
O4 - HKLM\..\Run: [ABC] C:\PROGRA~1\JTHABC~1\Keylogger.exe

Fixni:

Kód: Vybrat vše

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: (no name) - - (no file)
O4 - HKLM\..\Run: [ABC] C:\PROGRA~1\JTHABC~1\Keylogger.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Ondra\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

Anti-keylogger™
10.3.1 download informatik
Stáhni si Antikeylogger z některého odkazu.
http://www.anti-keyloggers.com/download/antikey.zip
http://www.anti-keyloggers.com/download/ak_help.zip
http://www.anti-keyloggers.com/download ... aSheet.pdf

===================================================

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

===================================================

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

indycz · Příspěvekod **indycz** » 30 led 2013 18:52

Ten keylogger nevím, napadá mě jedině, že by to udělal bratr, jinak nemám tušení.

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Verze: v2013.01.30.07

Windows 7 x86 NTFS
Internet Explorer 9.0.8112.16421
Ondra :: ONDRA-PC [administrátor]

30.1.2013 18:39:34
MBAM-log-2013-01-30 (18-46-48).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 209527
Uplynulý čas: 6 minut, 54 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 2
C:\Users\Ondra\Downloads\SoftonicDownloader_for_windows-essentials-codec-pack.exe (PUP.OfferBundler.ST) -> Nebyla provedena žádná instrukce.
C:\Users\Ondra\Downloads\ESET Antivirus License Finder (MiNODLogin) 3.7.0.2.exe (Riskware.KG) -> Nebyla provedena žádná instrukce.

(konec)

Příspěvekod **jaro3** » 30 led 2013 19:22

Tak se ho zeptej!

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit
Můžeš sem pak vložit nový log z MbAM.

Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

indycz · Příspěvekod **indycz** » 31 led 2013 18:59

Tak byl to nakonec bratr. Dal ho tam, ale prý smazal, jenže to tam zřejmě zůstalo. Budu si ho hlídat.

# AdwCleaner v2.109 - Logfile created 01/31/2013 at 18:44:41
# Updated 26/01/2013 by Xplode
# Operating system : Windows 7 Professional (32 bits)
# User : Ondra - ONDRA-PC
# Boot Mode : Normal
# Running from : C:\Users\Ondra\Desktop\adwcleaner.exe
# Option [Search]

***** [Services] *****

***** [Files / Folders] *****

File Found : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\7wzb66ck.default\searchplugins\Askcom.xml
Folder Found : C:\ProgramData\Ask
Folder Found : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\7wzb66ck.default\Conduit

***** [Registry] *****

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}
Key Found : HKCU\Software\Softonic
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Key Found : HKU\S-1-5-21-3653632025-776030965-2097270881-1000\Software\Microsoft\Internet Explorer\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16450

[OK] Registry is clean.

-\\ Mozilla Firefox v18.0.1 (cs)

File : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\7wzb66ck.default\prefs.js

Found : user_pref("CT2438727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Found : user_pref("CT2438727.CTID", "CT2438727");
Found : user_pref("CT2438727.CurrentServerDate", "10-6-2010");
Found : user_pref("CT2438727.DialogsAlignMode", "LTR");
Found : user_pref("CT2438727.FirstServerDate", "9-6-2010");
Found : user_pref("CT2438727.FirstTime", true);
Found : user_pref("CT2438727.FirstTimeFF3", true);
Found : user_pref("CT2438727.GroupingServerCheckInterval", 1440);
Found : user_pref("CT2438727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Found : user_pref("CT2438727.Initialize", true);
Found : user_pref("CT2438727.InitializeCommonPrefs", true);
Found : user_pref("CT2438727.InstalledDate", "Wed Jun 09 2010 01:38:24 GMT+0200");
Found : user_pref("CT2438727.IsGrouping", false);
Found : user_pref("CT2438727.IsMulticommunity", false);
Found : user_pref("CT2438727.IsOpenThankYouPage", true);
Found : user_pref("CT2438727.IsOpenUninstallPage", true);
Found : user_pref("CT2438727.LanguagePackLastCheckTime", "Thu Jun 10 2010 13:20:10 GMT+0200");
Found : user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
Found : user_pref("CT2438727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Found : user_pref("CT2438727.LastLogin_2.5.8.6", "Thu Jun 10 2010 13:20:10 GMT+0200");
Found : user_pref("CT2438727.LatestVersion", "2.1.0.18");
Found : user_pref("CT2438727.Locale", "en");
Found : user_pref("CT2438727.LoginCache", 4);
Found : user_pref("CT2438727.MCDetectTooltipHeight", "83");
Found : user_pref("CT2438727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Found : user_pref("CT2438727.MCDetectTooltipWidth", "295");
Found : user_pref("CT2438727.SHRINK_TOOLBAR", 1);
Found : user_pref("CT2438727.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
Found : user_pref("CT2438727.SearchFromAddressBarIsInit", true);
Found : user_pref("CT2438727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243[...]
Found : user_pref("CT2438727.SearchInNewTabEnabled", true);
Found : user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
Found : user_pref("CT2438727.SearchInNewTabLastCheckTime", "Thu Jun 10 2010 13:20:09 GMT+0200");
Found : user_pref("CT2438727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Found : user_pref("CT2438727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Found : user_pref("CT2438727.SettingsCheckIntervalMin", 120);
Found : user_pref("CT2438727.SettingsLastCheckTime", "Thu Jun 10 2010 13:20:09 GMT+0200");
Found : user_pref("CT2438727.SettingsLastUpdate", "1275607866");
Found : user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
Found : user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Wed Jun 09 2010 01:38:21 GMT+0200");
Found : user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1275607866");
Found : user_pref("CT2438727.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=[...]
Found : user_pref("CT2438727.UserID", "UN86215364172565222");
Found : user_pref("CT2438727.alertChannelId", "832836");
Found : user_pref("CT2438727.clientLogIsEnabled", false);
Found : user_pref("CT2438727.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
Found : user_pref("CT2438727.myStuffEnabled", true);
Found : user_pref("CT2438727.myStuffPublihserMinWidth", 400);
Found : user_pref("CT2438727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Found : user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
Found : user_pref("CT2438727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Found : user_pref("CT2438727.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.qip.ru/search?from=FF&quer[...]
Found : user_pref("CommunityToolbar.ToolbarsList", "CT2438727");
Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2438727");
Found : user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
Found : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Thu Jun 10 2010 13:20:09 GMT+0200");
Found : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Found : user_pref("CommunityToolbar.alert.locale", "en");
Found : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Found : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Thu Jun 10 2010 13:20:09 GMT+0200");
Found : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1234796400");
Found : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Found : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Found : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Found : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Found : user_pref("CommunityToolbar.alert.userId", "{151a5469-6f33-452a-8544-b549483f11c4}");
Found : user_pref("browser.search.defaultengine", "Ask.com");
Found : user_pref("browser.search.defaultenginename", "Ask.com");
Found : user_pref("browser.search.order.1", "Ask.com");
Found : user_pref("keyword.URL", "hxxp://search.qip.ru/search?from=FF&query=");

*************************

AdwCleaner[R1].txt - [6892 octets] - [31/01/2013 18:44:41]

########## EOF - C:\AdwCleaner[R1].txt - [6952 octets] ##########

indycz · Příspěvekod **indycz** » 31 led 2013 19:01

18:46:47.0982 5132 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
18:46:48.0054 5132 ============================================================
18:46:48.0054 5132 Current date / time: 2013/01/31 18:46:48.0054
18:46:48.0054 5132 SystemInfo:
18:46:48.0054 5132
18:46:48.0054 5132 OS Version: 6.1.7600 ServicePack: 0.0
18:46:48.0054 5132 Product type: Workstation
18:46:48.0055 5132 ComputerName: ONDRA-PC
18:46:48.0055 5132 UserName: Ondra
18:46:48.0055 5132 Windows directory: C:\Windows
18:46:48.0055 5132 System windows directory: C:\Windows
18:46:48.0055 5132 Processor architecture: Intel x86
18:46:48.0055 5132 Number of processors: 2
18:46:48.0055 5132 Page size: 0x1000
18:46:48.0055 5132 Boot type: Normal boot
18:46:48.0055 5132 ============================================================
18:46:48.0756 5132 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
18:46:48.0786 5132 ============================================================
18:46:48.0786 5132 \Device\Harddisk0\DR0:
18:46:48.0786 5132 MBR partitions:
18:46:48.0786 5132 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x950E482
18:46:48.0786 5132 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x950E800, BlocksNum 0x1BF1F800
18:46:48.0786 5132 ============================================================
18:46:48.0838 5132 C: <-> \Device\Harddisk0\DR0\Partition2
18:46:48.0917 5132 E: <-> \Device\Harddisk0\DR0\Partition1
18:46:48.0917 5132 ============================================================
18:46:48.0917 5132 Initialize success
18:46:48.0917 5132 ============================================================
18:46:53.0132 4036 ============================================================
18:46:53.0132 4036 Scan started
18:46:53.0132 4036 Mode: Manual;
18:46:53.0132 4036 ============================================================
18:46:53.0682 4036 ================ Scan system memory ========================
18:46:53.0682 4036 System memory - ok
18:46:53.0683 4036 ================ Scan services =============================
18:46:54.0554 4036 [ 6D2ACA41739BFE8CB86EE8E85F29697D ] 1394ohci C:\Windows\system32\DRIVERS\1394ohci.sys
18:46:54.0558 4036 1394ohci - ok
18:46:54.0664 4036 [ F0E07D144C8685B8774BC32FC8DA4DF0 ] ACPI C:\Windows\system32\DRIVERS\ACPI.sys
18:46:54.0684 4036 ACPI - ok
18:46:54.0741 4036 [ 98D81CA942D19F7D9153B095162AC013 ] AcpiPmi C:\Windows\system32\DRIVERS\acpipmi.sys
18:46:54.0743 4036 AcpiPmi - ok
18:46:54.0925 4036 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
18:46:54.0929 4036 AdobeARMservice - ok
18:46:55.0052 4036 [ 424877CB9D5517F980FF7BACA2EB379D ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
18:46:55.0066 4036 AdobeFlashPlayerUpdateSvc - ok
18:46:55.0153 4036 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
18:46:55.0167 4036 adp94xx - ok
18:46:55.0254 4036 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
18:46:55.0288 4036 adpahci - ok
18:46:55.0328 4036 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
18:46:55.0373 4036 adpu320 - ok
18:46:55.0431 4036 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
18:46:55.0456 4036 AeLookupSvc - ok
18:46:55.0577 4036 [ 0DB7A48388D54D154EBEC120461A0FCD ] AFD C:\Windows\system32\drivers\afd.sys
18:46:55.0611 4036 AFD - ok
18:46:55.0643 4036 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\DRIVERS\agp440.sys
18:46:55.0647 4036 agp440 - ok
18:46:55.0703 4036 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
18:46:55.0722 4036 aic78xx - ok
18:46:55.0759 4036 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
18:46:55.0762 4036 ALG - ok
18:46:55.0791 4036 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\DRIVERS\aliide.sys
18:46:55.0793 4036 aliide - ok
18:46:55.0825 4036 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\DRIVERS\amdagp.sys
18:46:55.0846 4036 amdagp - ok
18:46:55.0875 4036 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\DRIVERS\amdide.sys
18:46:55.0877 4036 amdide - ok
18:46:55.0901 4036 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
18:46:55.0905 4036 AmdK8 - ok
18:46:55.0933 4036 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
18:46:55.0952 4036 AmdPPM - ok
18:46:55.0982 4036 [ 2101A86C25C154F8314B24EF49D7FBC2 ] amdsata C:\Windows\system32\DRIVERS\amdsata.sys
18:46:55.0986 4036 amdsata - ok
18:46:56.0022 4036 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
18:46:56.0028 4036 amdsbs - ok
18:46:56.0051 4036 [ B81C2B5616F6420A9941EA093A92B150 ] amdxata C:\Windows\system32\DRIVERS\amdxata.sys
18:46:56.0054 4036 amdxata - ok
18:46:56.0087 4036 [ FEB834C02CE1E84B6A38F953CA067706 ] AppID C:\Windows\system32\drivers\appid.sys
18:46:56.0091 4036 AppID - ok
18:46:56.0124 4036 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
18:46:56.0128 4036 AppIDSvc - ok
18:46:56.0149 4036 [ 7DEAD9E3F65DCB2794F2711003BBF650 ] Appinfo C:\Windows\System32\appinfo.dll
18:46:56.0151 4036 Appinfo - ok
18:46:56.0195 4036 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
18:46:56.0239 4036 AppMgmt - ok
18:46:56.0275 4036 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
18:46:56.0279 4036 arc - ok
18:46:56.0316 4036 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
18:46:56.0340 4036 arcsas - ok
18:46:56.0494 4036 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
18:46:56.0514 4036 aspnet_state - ok
18:46:56.0621 4036 [ DE6ED95AEF259979B2830450072A627B ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
18:46:56.0623 4036 aswFsBlk - ok
18:46:56.0697 4036 [ 62F9DCEC95F91B8E0203E85D344A7E65 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
18:46:56.0700 4036 aswMonFlt - ok
18:46:56.0753 4036 [ 81F638A2DD94ABBF0B43880AB38D8DBD ] aswRdr C:\Windows\System32\Drivers\aswrdr2.sys
18:46:56.0756 4036 aswRdr - ok
18:46:56.0864 4036 [ B32E9AD44A1DBB3E8095E80F8DF32B03 ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
18:46:56.0875 4036 aswSnx - ok
18:46:56.0962 4036 [ 67B558895695545FB0568B7541F3BCA7 ] aswSP C:\Windows\system32\drivers\aswSP.sys
18:46:56.0968 4036 aswSP - ok
18:46:57.0057 4036 [ E3E73B2B73A4DFADFDDF557192C4B08A ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
18:46:57.0059 4036 aswTdi - ok
18:46:57.0141 4036 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
18:46:57.0143 4036 AsyncMac - ok
18:46:57.0176 4036 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\DRIVERS\atapi.sys
18:46:57.0179 4036 atapi - ok
18:46:57.0236 4036 [ F0D933B42CD0594048E4D5200AE9E417 ] atksgt C:\Windows\system32\DRIVERS\atksgt.sys
18:46:57.0241 4036 atksgt - ok
18:46:57.0289 4036 [ 510C873BFA135AA829F4180352772734 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
18:46:57.0298 4036 AudioEndpointBuilder - ok
18:46:57.0344 4036 [ 510C873BFA135AA829F4180352772734 ] Audiosrv C:\Windows\System32\Audiosrv.dll
18:46:57.0352 4036 Audiosrv - ok
18:46:57.0464 4036 [ 9F29157695EE58875B06724743CE9C42 ] Autodesk Licensing Service C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
18:46:57.0486 4036 Autodesk Licensing Service - ok
18:46:57.0588 4036 [ 8FA553E9AE69808D99C164733A0F9590 ] avast! Antivirus C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
18:46:57.0591 4036 avast! Antivirus - ok
18:46:57.0642 4036 avast! Firewall - ok
18:46:57.0680 4036 [ DD6A431B43E34B91A767D1CE33728175 ] AxInstSV C:\Windows\System32\AxInstSV.dll
18:46:57.0686 4036 AxInstSV - ok
18:46:57.0726 4036 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
18:46:57.0750 4036 b06bdrv - ok
18:46:57.0775 4036 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
18:46:57.0782 4036 b57nd60x - ok
18:46:57.0808 4036 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
18:46:57.0811 4036 BDESVC - ok
18:46:57.0850 4036 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
18:46:57.0852 4036 Beep - ok
18:46:57.0880 4036 [ 85AC71C045CEB054ED48A7841AAE0C11 ] BFE C:\Windows\System32\bfe.dll
18:46:57.0903 4036 BFE - ok
18:46:57.0993 4036 [ 53F476476F55A27F580661BDE09C4EC4 ] BITS C:\Windows\System32\qmgr.dll
18:46:58.0012 4036 BITS - ok
18:46:58.0077 4036 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
18:46:58.0080 4036 blbdrive - ok
18:46:58.0160 4036 [ 9A5C671B7FBAE4865149BB11F59B91B2 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
18:46:58.0182 4036 bowser - ok
18:46:58.0214 4036 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
18:46:58.0217 4036 BrFiltLo - ok
18:46:58.0235 4036 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
18:46:58.0238 4036 BrFiltUp - ok
18:46:58.0283 4036 [ A0E691DC6589D4D2CBE373171D1A49E5 ] Browser C:\Windows\System32\browser.dll
18:46:58.0285 4036 Browser - ok
18:46:58.0316 4036 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
18:46:58.0324 4036 Brserid - ok
18:46:58.0358 4036 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
18:46:58.0362 4036 BrSerWdm - ok
18:46:58.0385 4036 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
18:46:58.0387 4036 BrUsbMdm - ok
18:46:58.0413 4036 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
18:46:58.0417 4036 BrUsbSer - ok
18:46:58.0437 4036 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
18:46:58.0439 4036 BTHMODEM - ok
18:46:58.0465 4036 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
18:46:58.0468 4036 bthserv - ok
18:46:58.0515 4036 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
18:46:58.0517 4036 cdfs - ok
18:46:58.0547 4036 [ BA6E70AA0E6091BC39DE29477D866A77 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
18:46:58.0551 4036 cdrom - ok
18:46:58.0569 4036 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] CertPropSvc C:\Windows\System32\certprop.dll
18:46:58.0572 4036 CertPropSvc - ok
18:46:58.0589 4036 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
18:46:58.0591 4036 circlass - ok
18:46:58.0610 4036 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
18:46:58.0615 4036 CLFS - ok
18:46:58.0658 4036 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:46:58.0681 4036 clr_optimization_v2.0.50727_32 - ok
18:46:58.0744 4036 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:46:58.0750 4036 clr_optimization_v4.0.30319_32 - ok
18:46:58.0795 4036 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
18:46:58.0797 4036 CmBatt - ok
18:46:58.0818 4036 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\DRIVERS\cmdide.sys
18:46:58.0820 4036 cmdide - ok
18:46:58.0878 4036 [ DB5E008B3744DD60C8498CBBF2A1CFA6 ] CNG C:\Windows\system32\Drivers\cng.sys
18:46:58.0945 4036 CNG - ok
18:46:58.0966 4036 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
18:46:58.0968 4036 Compbatt - ok
18:46:58.0986 4036 [ F1724BA27E97D627F808FB0BA77A28A6 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
18:46:58.0989 4036 CompositeBus - ok
18:46:58.0999 4036 COMSysApp - ok
18:46:59.0024 4036 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
18:46:59.0025 4036 crcdisk - ok
18:46:59.0102 4036 [ 520A108A2657F4BCA7FCED9CA7D885DE ] CryptSvc C:\Windows\system32\cryptsvc.dll
18:46:59.0118 4036 CryptSvc - ok
18:46:59.0197 4036 [ 27C9490BDD0AE48911AB8CF1932591ED ] CSC C:\Windows\system32\drivers\csc.sys
18:46:59.0220 4036 CSC - ok
18:46:59.0255 4036 [ 56FB5F222EA30D3D3FC459879772CB73 ] CscService C:\Windows\System32\cscsvc.dll
18:46:59.0266 4036 CscService - ok
18:46:59.0305 4036 [ B82CD39E336973359D7C9BF911E8E84F ] DcomLaunch C:\Windows\system32\rpcss.dll
18:46:59.0311 4036 DcomLaunch - ok
18:46:59.0374 4036 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
18:46:59.0388 4036 defragsvc - ok
18:46:59.0441 4036 [ 83D1ECEA8FAAE75604C0FA49AC7AD996 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
18:46:59.0443 4036 DfsC - ok
18:46:59.0472 4036 [ C56495FBD770712367CAD35E5DE72DA6 ] Dhcp C:\Windows\system32\dhcpcore.dll
18:46:59.0474 4036 Dhcp - ok
18:46:59.0491 4036 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
18:46:59.0493 4036 discache - ok
18:46:59.0541 4036 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
18:46:59.0543 4036 Disk - ok
18:46:59.0583 4036 [ B15BE77A2BACF9C3177D27518AFE26A9 ] Dnscache C:\Windows\System32\dnsrslvr.dll
18:46:59.0611 4036 Dnscache - ok
18:46:59.0651 4036 [ 4408C85C21EEA48EB0CE486BAEEF0502 ] dot3svc C:\Windows\System32\dot3svc.dll
18:46:59.0657 4036 dot3svc - ok
18:46:59.0680 4036 [ 7FA81C6E11CAA594ADB52084DA73A1E5 ] DPS C:\Windows\system32\dps.dll
18:46:59.0685 4036 DPS - ok
18:46:59.0720 4036 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
18:46:59.0721 4036 drmkaud - ok
18:46:59.0842 4036 [ C94B6C3CC628179CB9B9061C19888B99 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
18:46:59.0850 4036 DXGKrnl - ok
18:46:59.0889 4036 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
18:46:59.0891 4036 EapHost - ok
18:47:00.0335 4036 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
18:47:00.0451 4036 ebdrv - ok
18:47:00.0483 4036 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] EFS C:\Windows\System32\lsass.exe
18:47:00.0486 4036 EFS - ok
18:47:00.0589 4036 [ 3A74A6E33685662B125A3269B1F2114F ] ehRecvr C:\Windows\ehome\ehRecvr.exe
18:47:00.0613 4036 ehRecvr - ok
18:47:00.0631 4036 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
18:47:00.0636 4036 ehSched - ok
18:47:00.0670 4036 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
18:47:00.0692 4036 elxstor - ok
18:47:00.0730 4036 [ F13C945115B8A8C7C4427D5925F88F23 ] enecir C:\Windows\system32\DRIVERS\enecir.sys
18:47:00.0732 4036 enecir - ok
18:47:00.0743 4036 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\DRIVERS\errdev.sys
18:47:00.0744 4036 ErrDev - ok
18:47:00.0787 4036 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
18:47:00.0791 4036 EventSystem - ok
18:47:00.0933 4036 [ A57BE3307ADA2FC086B5B43135735283 ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe
18:47:00.0942 4036 EvtEng - ok
18:47:00.0971 4036 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
18:47:00.0973 4036 exfat - ok
18:47:01.0031 4036 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
18:47:01.0037 4036 fastfat - ok
18:47:01.0103 4036 [ F7EA23CC5E6BF2181F3F399D54F6EFC1 ] Fax C:\Windows\system32\fxssvc.exe
18:47:01.0138 4036 Fax - ok
18:47:01.0172 4036 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
18:47:01.0175 4036 fdc - ok
18:47:01.0192 4036 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
18:47:01.0198 4036 fdPHost - ok
18:47:01.0215 4036 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
18:47:01.0218 4036 FDResPub - ok
18:47:01.0247 4036 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
18:47:01.0249 4036 FileInfo - ok
18:47:01.0258 4036 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
18:47:01.0260 4036 Filetrace - ok
18:47:01.0277 4036 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
18:47:01.0278 4036 flpydisk - ok
18:47:01.0314 4036 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
18:47:01.0318 4036 FltMgr - ok
18:47:01.0433 4036 [ 151258FC2EC8C48BDF8A53350AE0A676 ] FontCache C:\Windows\system32\FntCache.dll
18:47:01.0486 4036 FontCache - ok
18:47:01.0542 4036 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
18:47:01.0569 4036 FontCache3.0.0.0 - ok
18:47:01.0603 4036 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
18:47:01.0606 4036 FsDepends - ok
18:47:01.0652 4036 [ 500A9814FD9446A8126858A5A7F7D273 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
18:47:01.0656 4036 Fs_Rec - ok
18:47:01.0682 4036 [ 5592F5DBA26282D24D2B080EB438A4D7 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
18:47:01.0689 4036 fvevol - ok
18:47:01.0727 4036 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
18:47:01.0729 4036 gagp30kx - ok
18:47:01.0767 4036 [ 8BA3C04702BF8F927AB36AE8313CA4EE ] gpsvc C:\Windows\System32\gpsvc.dll
18:47:01.0774 4036 gpsvc - ok
18:47:01.0835 4036 [ 7929A161F9951D173CA9900FE7067391 ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
18:47:01.0838 4036 hamachi - ok
18:47:01.0876 4036 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
18:47:01.0895 4036 hcw85cir - ok
18:47:01.0954 4036 [ 3530CAD25DEBA7DC7DE8BB51632CBC5F ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
18:47:01.0987 4036 HdAudAddService - ok
18:47:02.0024 4036 [ 717A2207FD6F13AD3E664C7D5A43C7BF ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
18:47:02.0027 4036 HDAudBus - ok
18:47:02.0049 4036 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
18:47:02.0052 4036 HidBatt - ok
18:47:02.0070 4036 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
18:47:02.0074 4036 HidBth - ok
18:47:02.0098 4036 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
18:47:02.0101 4036 HidIr - ok
18:47:02.0135 4036 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
18:47:02.0142 4036 hidserv - ok
18:47:02.0182 4036 [ 25072FB35AC90B25F9E4E3BACF774102 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
18:47:02.0184 4036 HidUsb - ok
18:47:02.0210 4036 [ 741C2A45CA8407E374AABA3E330B7872 ] hkmsvc C:\Windows\system32\kmsvc.dll
18:47:02.0215 4036 hkmsvc - ok
18:47:02.0242 4036 [ A768CA158BB06782A2835B907F4873C3 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
18:47:02.0247 4036 HomeGroupListener - ok
18:47:02.0335 4036 [ FB08DEC5EF43D0C66D83B8E9694E7549 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
18:47:02.0348 4036 HomeGroupProvider - ok
18:47:02.0381 4036 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\DRIVERS\HpSAMD.sys
18:47:02.0383 4036 HpSAMD - ok
18:47:02.0422 4036 [ C531C7FD9E8B62021112787C4E2C5A5A ] HTTP C:\Windows\system32\drivers\HTTP.sys
18:47:02.0444 4036 HTTP - ok
18:47:02.0468 4036 [ 8305F33CDE89AD6C7A0763ED0B5A8D42 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
18:47:02.0470 4036 hwpolicy - ok
18:47:02.0495 4036 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
18:47:02.0498 4036 i8042prt - ok
18:47:02.0557 4036 [ 7548066DF68A8A1A56B043359F915F37 ] IAANTMON C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
18:47:02.0566 4036 IAANTMON - ok
18:47:02.0616 4036 [ D483687EACE0C065EE772481A96E05F5 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
18:47:02.0622 4036 iaStor - ok
18:47:02.0651 4036 [ 934AF4D7C5F457B9F0743F4299B77B67 ] iaStorV C:\Windows\system32\DRIVERS\iaStorV.sys
18:47:02.0657 4036 iaStorV - ok
18:47:02.0723 4036 [ 5AF815EB5BC9802E5A064E2BA62BFC0C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
18:47:02.0758 4036 idsvc - ok
18:47:02.0785 4036 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
18:47:02.0789 4036 iirsp - ok
18:47:02.0842 4036 [ FAC0EE6562B121B1399D6E855583F7A5 ] IKEEXT C:\Windows\System32\ikeext.dll
18:47:02.0857 4036 IKEEXT - ok
18:47:03.0152 4036 [ F2BAA4FF548F7F0317F7638951C1CD9C ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
18:47:03.0172 4036 IntcAzAudAddService - ok
18:47:03.0210 4036 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\DRIVERS\intelide.sys
18:47:03.0236 4036 intelide - ok
18:47:03.0269 4036 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
18:47:03.0272 4036 intelppm - ok
18:47:03.0304 4036 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
18:47:03.0325 4036 IPBusEnum - ok
18:47:03.0355 4036 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:47:03.0358 4036 IpFilterDriver - ok
18:47:03.0394 4036 [ 477397B432A256A50EE7E4339EB9EA14 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
18:47:03.0407 4036 iphlpsvc - ok
18:47:03.0427 4036 [ E4454B6C37D7FFD5649611F6496308A7 ] IPMIDRV C:\Windows\system32\DRIVERS\IPMIDrv.sys
18:47:03.0429 4036 IPMIDRV - ok
18:47:03.0461 4036 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
18:47:03.0463 4036 IPNAT - ok
18:47:03.0481 4036 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
18:47:03.0483 4036 IRENUM - ok
18:47:03.0495 4036 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\DRIVERS\isapnp.sys
18:47:03.0497 4036 isapnp - ok
18:47:03.0520 4036 [ ED46C223AE46C6866AB77CDC41C404B7 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
18:47:03.0524 4036 iScsiPrt - ok
18:47:03.0562 4036 [ 8C17DEB1995E593853373C30485E7368 ] JMCR C:\Windows\system32\DRIVERS\jmcr.sys
18:47:03.0563 4036 JMCR - ok
18:47:03.0578 4036 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
18:47:03.0579 4036 kbdclass - ok
18:47:03.0592 4036 [ 3D9F0EBF350EDCFD6498057301455964 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
18:47:03.0594 4036 kbdhid - ok
18:47:03.0606 4036 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] KeyIso C:\Windows\system32\lsass.exe
18:47:03.0609 4036 KeyIso - ok
18:47:03.0675 4036 [ 52FC17C8589F11747D01D3CF592673D0 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
18:47:03.0687 4036 KSecDD - ok
18:47:03.0707 4036 [ 3E5474B03568CFAB834DA3C38E8C9EFA ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
18:47:03.0712 4036 KSecPkg - ok
18:47:03.0748 4036 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
18:47:03.0771 4036 KtmRm - ok
18:47:03.0836 4036 [ 8F6BF790D3168224C16F2AF68A84438C ] LanmanServer C:\Windows\system32\srvsvc.dll
18:47:03.0851 4036 LanmanServer - ok
18:47:03.0887 4036 [ B9891F885DCF1F0513A51CB58493CB1F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
18:47:03.0894 4036 LanmanWorkstation - ok
18:47:04.0009 4036 [ F8A7212D0864EF5E9185FB95E6623F4D ] lirsgt C:\Windows\system32\DRIVERS\lirsgt.sys
18:47:04.0012 4036 lirsgt - ok
18:47:04.0056 4036 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
18:47:04.0059 4036 lltdio - ok
18:47:04.0087 4036 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
18:47:04.0100 4036 lltdsvc - ok
18:47:04.0125 4036 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
18:47:04.0132 4036 lmhosts - ok
18:47:04.0161 4036 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
18:47:04.0164 4036 LSI_FC - ok
18:47:04.0197 4036 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
18:47:04.0200 4036 LSI_SAS - ok
18:47:04.0214 4036 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
18:47:04.0216 4036 LSI_SAS2 - ok
18:47:04.0236 4036 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
18:47:04.0239 4036 LSI_SCSI - ok
18:47:04.0293 4036 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
18:47:04.0296 4036 luafv - ok
18:47:04.0316 4036 [ E2B0887816ED336685954E3D8FDAA51D ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
18:47:04.0322 4036 Mcx2Svc - ok
18:47:04.0351 4036 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
18:47:04.0373 4036 megasas - ok
18:47:04.0406 4036 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
18:47:04.0414 4036 MegaSR - ok
18:47:04.0490 4036 [ 71C6748EE8DE938532057EF10B4B7E44 ] Micro Star SCM C:\Program Files\System Control Manager\MSIService.exe
18:47:04.0494 4036 Micro Star SCM - ok
18:47:04.0607 4036 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
18:47:04.0640 4036 Microsoft Office Groove Audit Service - ok
18:47:04.0685 4036 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
18:47:04.0694 4036 MMCSS - ok
18:47:04.0750 4036 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
18:47:04.0752 4036 Modem - ok
18:47:04.0799 4036 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
18:47:04.0802 4036 monitor - ok
18:47:04.0829 4036 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
18:47:04.0832 4036 mouclass - ok
18:47:04.0858 4036 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
18:47:04.0861 4036 mouhid - ok
18:47:04.0885 4036 [ 921C18727C5920D6C0300736646931C2 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
18:47:04.0890 4036 mountmgr - ok
18:47:04.0943 4036 [ 9C3758018DED02F4AE53CCA1C5F084A2 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
18:47:04.0948 4036 MozillaMaintenance - ok
18:47:04.0988 4036 [ 2AF5997438C55FB79D33D015C30E1974 ] mpio C:\Windows\system32\DRIVERS\mpio.sys
18:47:05.0013 4036 mpio - ok
18:47:05.0055 4036 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
18:47:05.0059 4036 mpsdrv - ok
18:47:05.0104 4036 [ 5CD996CECF45CBC3E8D109C86B82D69E ] MpsSvc C:\Windows\system32\mpssvc.dll
18:47:05.0138 4036 MpsSvc - ok
18:47:05.0182 4036 [ B1BE47008D20E43DA3ADC37C24CDB89D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
18:47:05.0185 4036 MRxDAV - ok
18:47:05.0252 4036 [ CA7570E42522E24324A12161DB14EC02 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
18:47:05.0257 4036 mrxsmb - ok
18:47:05.0284 4036 [ F965C3AB2B2AE5C378F4562486E35051 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:47:05.0305 4036 mrxsmb10 - ok
18:47:05.0340 4036 [ 25C38264A3C72594DD21D355D70D7A5D ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:47:05.0343 4036 mrxsmb20 - ok
18:47:05.0362 4036 [ 4326D168944123F38DD3B2D9C37A0B12 ] msahci C:\Windows\system32\DRIVERS\msahci.sys
18:47:05.0364 4036 msahci - ok
18:47:05.0386 4036 [ 455029C7174A2DBB03DBA8A0D8BDDD9A ] msdsm C:\Windows\system32\DRIVERS\msdsm.sys
18:47:05.0389 4036 msdsm - ok
18:47:05.0409 4036 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
18:47:05.0416 4036 MSDTC - ok
18:47:05.0453 4036 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
18:47:05.0455 4036 Msfs - ok
18:47:05.0468 4036 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
18:47:05.0469 4036 mshidkmdf - ok
18:47:05.0481 4036 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\DRIVERS\msisadrv.sys
18:47:05.0482 4036 msisadrv - ok
18:47:05.0498 4036 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
18:47:05.0502 4036 MSiSCSI - ok
18:47:05.0506 4036 msiserver - ok
18:47:05.0540 4036 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
18:47:05.0541 4036 MSKSSRV - ok
18:47:05.0563 4036 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
18:47:05.0564 4036 MSPCLOCK - ok
18:47:05.0595 4036 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
18:47:05.0597 4036 MSPQM - ok
18:47:05.0619 4036 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
18:47:05.0622 4036 MsRPC - ok
18:47:05.0633 4036 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
18:47:05.0634 4036 mssmbios - ok
18:47:05.0720 4036 MSSQL$SQLEXPRESS - ok
18:47:05.0853 4036 [ F1761C8FB2B25A32C6D63E36BB88C3AE ] MSSQLServerADHelper100 c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE
18:47:05.0881 4036 MSSQLServerADHelper100 - ok
18:47:05.0909 4036 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
18:47:05.0912 4036 MSTEE - ok
18:47:05.0940 4036 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
18:47:05.0942 4036 MTConfig - ok
18:47:05.0954 4036 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
18:47:05.0956 4036 Mup - ok
18:47:05.0992 4036 [ 80284F1985C70C86F0B5F86DA2DFE1DF ] napagent C:\Windows\system32\qagentRT.dll
18:47:06.0015 4036 napagent - ok
18:47:06.0037 4036 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
18:47:06.0043 4036 NativeWifiP - ok
18:47:06.0095 4036 [ 23759D175A0A9BAAF04D05047BC135A8 ] NDIS C:\Windows\system32\drivers\ndis.sys
18:47:06.0130 4036 NDIS - ok
18:47:06.0172 4036 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
18:47:06.0174 4036 NdisCap - ok
18:47:06.0199 4036 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
18:47:06.0201 4036 NdisTapi - ok
18:47:06.0222 4036 [ B30AE7F2B6D7E343B0DF32E6C08FCE75 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
18:47:06.0224 4036 Ndisuio - ok
18:47:06.0245 4036 [ 267C415EADCBE53C9CA873DEE39CF3A4 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
18:47:06.0249 4036 NdisWan - ok
18:47:06.0272 4036 [ AF7E7C63DCEF3F8772726F86039D6EB4 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
18:47:06.0274 4036 NDProxy - ok
18:47:06.0312 4036 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
18:47:06.0314 4036 NetBIOS - ok
18:47:06.0343 4036 [ DD52A733BF4CA5AF84562A5E2F963B91 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
18:47:06.0348 4036 NetBT - ok
18:47:06.0362 4036 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] Netlogon C:\Windows\system32\lsass.exe
18:47:06.0366 4036 Netlogon - ok
18:47:06.0436 4036 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
18:47:06.0450 4036 Netman - ok
18:47:06.0518 4036 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
18:47:06.0525 4036 NetMsmqActivator - ok
18:47:06.0534 4036 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
18:47:06.0538 4036 NetPipeActivator - ok
18:47:06.0573 4036 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
18:47:06.0580 4036 netprofm - ok
18:47:06.0586 4036 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
18:47:06.0588 4036 NetTcpActivator - ok
18:47:06.0598 4036 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
18:47:06.0599 4036 NetTcpPortSharing - ok
18:47:06.0835 4036 [ EF51B405AD8ACAAE6F0231290D20F516 ] NETw5s32 C:\Windows\system32\DRIVERS\NETw5s32.sys
18:47:07.0002 4036 NETw5s32 - ok
18:47:07.0588 4036 [ 58218EC6B61B1169CF54AAB0D00F5FE2 ] netw5v32 C:\Windows\system32\DRIVERS\netw5v32.sys
18:47:07.0746 4036 netw5v32 - ok
18:47:07.0778 4036 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
18:47:07.0780 4036 nfrd960 - ok
18:47:07.0808 4036 [ 2226496E34BD40734946A054B1CD657F ] NlaSvc C:\Windows\System32\nlasvc.dll
18:47:07.0816 4036 NlaSvc - ok
18:47:07.0844 4036 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
18:47:07.0846 4036 Npfs - ok
18:47:07.0864 4036 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
18:47:07.0869 4036 nsi - ok
18:47:07.0893 4036 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
18:47:07.0895 4036 nsiproxy - ok
18:47:07.0979 4036 [ 3795DCD21F740EE799FB7223234215AF ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
18:47:08.0038 4036 Ntfs - ok
18:47:08.0058 4036 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
18:47:08.0087 4036 Null - ok
18:47:08.0136 4036 [ 93C0F383B39B1F5FE7203E3270D4CF52 ] NVHDA C:\Windows\system32\drivers\nvhda32v.sys
18:47:08.0140 4036 NVHDA - ok
18:47:08.0567 4036 [ 66B4BF606FCC7F0622D4A21BB1461089 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
18:47:08.0623 4036 nvlddmkm - ok
18:47:08.0669 4036 [ 3F3D04B1D08D43C16EA7963954EC768D ] nvraid C:\Windows\system32\DRIVERS\nvraid.sys
18:47:08.0673 4036 nvraid - ok
18:47:08.0717 4036 [ C99F251A5DE63C6F129CF71933ACED0F ] nvstor C:\Windows\system32\DRIVERS\nvstor.sys
18:47:08.0721 4036 nvstor - ok
18:47:08.0784 4036 [ D122F7C5F79C68868F5DC28CEFEB2ECF ] nvsvc C:\Windows\system32\nvvsvc.exe
18:47:08.0799 4036 nvsvc - ok
18:47:08.0829 4036 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\DRIVERS\nv_agp.sys
18:47:08.0832 4036 nv_agp - ok
18:47:08.0962 4036 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
18:47:08.0985 4036 odserv - ok
18:47:09.0025 4036 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
18:47:09.0037 4036 ohci1394 - ok
18:47:09.0119 4036 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:47:09.0126 4036 ose - ok
18:47:09.0186 4036 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
18:47:09.0201 4036 p2pimsvc - ok
18:47:09.0235 4036 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
18:47:09.0244 4036 p2psvc - ok
18:47:09.0271 4036 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
18:47:09.0273 4036 Parport - ok
18:47:09.0323 4036 [ 66D3415C159741ADE7038A277EFFF99F ] partmgr C:\Windows\system32\drivers\partmgr.sys
18:47:09.0325 4036 partmgr - ok
18:47:09.0341 4036 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
18:47:09.0344 4036 Parvdm - ok
18:47:09.0365 4036 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
18:47:09.0372 4036 PcaSvc - ok
18:47:09.0397 4036 [ C858CB77C577780ECC456A892E7E7D0F ] pci C:\Windows\system32\DRIVERS\pci.sys
18:47:09.0402 4036 pci - ok
18:47:09.0422 4036 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\DRIVERS\pciide.sys
18:47:09.0424 4036 pciide - ok
18:47:09.0447 4036 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
18:47:09.0451 4036 pcmcia - ok
18:47:09.0488 4036 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
18:47:09.0490 4036 pcw - ok
18:47:09.0520 4036 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
18:47:09.0549 4036 PEAUTH - ok
18:47:09.0624 4036 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
18:47:09.0703 4036 PeerDistSvc - ok
18:47:09.0917 4036 [ 9C1BFF7910C89A1D12E57343475840CB ] pla C:\Windows\system32\pla.dll
18:47:09.0993 4036 pla - ok
18:47:10.0065 4036 [ 71DEF5EC79774C798342D0EA16E41780 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
18:47:10.0083 4036 PlugPlay - ok
18:47:10.0251 4036 [ 205E1B699FD3F2F9B036EEA2EC30C620 ] PnkBstrA C:\Windows\system32\PnkBstrA.exe
18:47:10.0263 4036 PnkBstrA - ok
18:47:10.0301 4036 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
18:47:10.0326 4036 PNRPAutoReg - ok
18:47:10.0364 4036 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
18:47:10.0379 4036 PNRPsvc - ok
18:47:10.0417 4036 [ 48E1B75C6DC0232FD92BAAE4BD344721 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
18:47:10.0460 4036 PolicyAgent - ok
18:47:10.0512 4036 [ DBFF83F709A91049621C1D35DD45C92C ] Power C:\Windows\system32\umpo.dll
18:47:10.0527 4036 Power - ok
18:47:10.0595 4036 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
18:47:10.0600 4036 PptpMiniport - ok
18:47:10.0650 4036 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
18:47:10.0678 4036 Processor - ok
18:47:10.0722 4036 [ 630CF26F0227498B7D5A92B12548960F ] ProfSvc C:\Windows\system32\profsvc.dll
18:47:10.0736 4036 ProfSvc - ok
18:47:10.0785 4036 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] ProtectedStorage C:\Windows\system32\lsass.exe
18:47:10.0793 4036 ProtectedStorage - ok
18:47:10.0852 4036 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
18:47:10.0857 4036 Psched - ok
18:47:11.0034 4036 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
18:47:11.0111 4036 ql2300 - ok
18:47:11.0149 4036 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
18:47:11.0151 4036 ql40xx - ok
18:47:11.0187 4036 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
18:47:11.0202 4036 QWAVE - ok
18:47:11.0229 4036 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
18:47:11.0231 4036 QWAVEdrv - ok
18:47:11.0244 4036 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
18:47:11.0246 4036 RasAcd - ok
18:47:11.0275 4036 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
18:47:11.0278 4036 RasAgileVpn - ok
18:47:11.0309 4036 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
18:47:11.0317 4036 RasAuto - ok
18:47:11.0352 4036 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
18:47:11.0355 4036 Rasl2tp - ok
18:47:11.0372 4036 [ 0CE66EC736B7FC526D78F7624C7D2A94 ] RasMan C:\Windows\System32\rasmans.dll
18:47:11.0380 4036 RasMan - ok
18:47:11.0428 4036 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
18:47:11.0431 4036 RasPppoe - ok
18:47:11.0446 4036 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
18:47:11.0448 4036 RasSstp - ok
18:47:11.0477 4036 [ 835D7E81BF517A3B72384BDCC85E1CE6 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
18:47:11.0483 4036 rdbss - ok
18:47:11.0521 4036 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
18:47:11.0524 4036 rdpbus - ok
18:47:11.0542 4036 [ 1E016846895B15A99F9A176A05029075 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
18:47:11.0545 4036 RDPCDD - ok
18:47:11.0613 4036 [ C5FF95883FFEF704D50C40D21CFB3AB5 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
18:47:11.0619 4036 RDPDR - ok
18:47:11.0662 4036 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
18:47:11.0663 4036 RDPENCDD - ok
18:47:11.0677 4036 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
18:47:11.0679 4036 RDPREFMP - ok
18:47:11.0726 4036 [ C5B8D47A4688DE9D335204EA757C2240 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
18:47:11.0731 4036 RDPWD - ok
18:47:11.0759 4036 [ 4EA225BF1CF05E158853F30A99CA29A7 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
18:47:11.0763 4036 rdyboost - ok
18:47:11.0833 4036 [ A171029D6B6C2D93C22861A347F43C2A ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
18:47:11.0842 4036 RegSrvc - ok
18:47:11.0874 4036 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
18:47:11.0880 4036 RemoteAccess - ok
18:47:11.0927 4036 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
18:47:11.0955 4036 RemoteRegistry - ok
18:47:12.0020 4036 [ 564297827D213F52C7A3A2FF749568CA ] ROOTMODEM C:\Windows\system32\Drivers\RootMdm.sys
18:47:12.0024 4036 ROOTMODEM - ok
18:47:12.0043 4036 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
18:47:12.0056 4036 RpcEptMapper - ok
18:47:12.0107 4036 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
18:47:12.0112 4036 RpcLocator - ok
18:47:12.0130 4036 [ B82CD39E336973359D7C9BF911E8E84F ] RpcSs C:\Windows\system32\rpcss.dll
18:47:12.0138 4036 RpcSs - ok
18:47:12.0172 4036 [ FEDD2710B75BE3ECF078ADACE790C423 ] RsFx0102 C:\Windows\system32\DRIVERS\RsFx0102.sys
18:47:12.0177 4036 RsFx0102 - ok
18:47:12.0228 4036 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
18:47:12.0232 4036 rspndr - ok
18:47:12.0275 4036 [ 80B66A4181F782884A815E69D0AFA743 ] RTL8167 C:\Windows\system32\DRIVERS\Rt86win7.sys
18:47:12.0278 4036 RTL8167 - ok
18:47:12.0336 4036 [ 5423D8437051E89DD34749F242C98648 ] s3cap C:\Windows\system32\DRIVERS\vms3cap.sys
18:47:12.0363 4036 s3cap - ok
18:47:12.0396 4036 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] SamSs C:\Windows\system32\lsass.exe
18:47:12.0400 4036 SamSs - ok
18:47:12.0428 4036 [ 34EE0C44B724E3E4CE2EFF29126DE5B5 ] sbp2port C:\Windows\system32\DRIVERS\sbp2port.sys
18:47:12.0431 4036 sbp2port - ok
18:47:12.0459 4036 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
18:47:12.0468 4036 SCardSvr - ok
18:47:12.0511 4036 [ A95C54B2AC3CC9C73FCDF9E51A1D6B51 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
18:47:12.0515 4036 scfilter - ok
18:47:12.0582 4036 [ DF1E5C82E4D09CF8105CC644980C4803 ] Schedule C:\Windows\system32\schedsvc.dll
18:47:12.0601 4036 Schedule - ok
18:47:12.0627 4036 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] SCPolicySvc C:\Windows\System32\certprop.dll
18:47:12.0629 4036 SCPolicySvc - ok
18:47:12.0688 4036 [ 7B48CFF3A475FE849DEA65EC4D35C425 ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
18:47:12.0715 4036 sdbus - ok
18:47:12.0748 4036 [ 5FD90ABDBFAEE85986802622CBB03446 ] SDRSVC C:\Windows\System32\SDRSVC.dll
18:47:12.0756 4036 SDRSVC - ok
18:47:12.0794 4036 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
18:47:12.0796 4036 secdrv - ok
18:47:12.0826 4036 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
18:47:12.0833 4036 seclogon - ok
18:47:12.0861 4036 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll
18:47:12.0867 4036 SENS - ok
18:47:12.0907 4036 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
18:47:12.0943 4036 SensrSvc - ok
18:47:12.0979 4036 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
18:47:12.0981 4036 Serenum - ok
18:47:13.0015 4036 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
18:47:13.0018 4036 Serial - ok
18:47:13.0029 4036 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
18:47:13.0031 4036 sermouse - ok
18:47:13.0078 4036 [ 8F55CE568C543D5ADF45C409D16718FC ] SessionEnv C:\Windows\system32\sessenv.dll
18:47:13.0095 4036 SessionEnv - ok
18:47:13.0121 4036 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\DRIVERS\sffdisk.sys
18:47:13.0122 4036 sffdisk - ok
18:47:13.0135 4036 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\DRIVERS\sffp_mmc.sys
18:47:13.0137 4036 sffp_mmc - ok
18:47:13.0142 4036 [ 4F1E5B0FE7C8050668DBFADE8999AEFB ] sffp_sd C:\Windows\system32\DRIVERS\sffp_sd.sys
18:47:13.0144 4036 sffp_sd - ok
18:47:13.0178 4036 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
18:47:13.0179 4036 sfloppy - ok
18:47:13.0215 4036 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
18:47:13.0220 4036 SharedAccess - ok
18:47:13.0305 4036 [ CD2E48FA5B29EE2B3B5858056D246EF2 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
18:47:13.0322 4036 ShellHWDetection - ok
18:47:13.0378 4036 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\DRIVERS\sisagp.sys
18:47:13.0397 4036 sisagp - ok
18:47:13.0424 4036 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
18:47:13.0428 4036 SiSRaid2 - ok
18:47:13.0455 4036 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
18:47:13.0460 4036 SiSRaid4 - ok
18:47:13.0539 4036 [ DDAA5F4A6B958FC313EBD02DD925752F ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
18:47:13.0545 4036 SkypeUpdate - ok
18:47:13.0575 4036 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
18:47:13.0577 4036 Smb - ok
18:47:13.0640 4036 [ 7E6628D18D30F14A56C0D9116310AB8A ] smserial C:\Windows\system32\DRIVERS\smserial.sys
18:47:13.0687 4036 smserial - ok
18:47:13.0733 4036 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
18:47:13.0740 4036 SNMPTRAP - ok
18:47:13.0783 4036 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
18:47:13.0785 4036 spldr - ok
18:47:13.0826 4036 [ D1BB750EB51694DE183E08B9C33BE5B2 ] Spooler C:\Windows\System32\spoolsv.exe
18:47:13.0851 4036 Spooler - ok
18:47:14.0312 4036 [ 4C287F9069FEDBD791178876EE9DE536 ] sppsvc C:\Windows\system32\sppsvc.exe
18:47:14.0409 4036 sppsvc - ok
18:47:14.0437 4036 [ D8E3E19EEBDAB49DD4A8D3062EAD4EC7 ] sppuinotify C:\Windows\system32\sppuinotify.dll
18:47:14.0443 4036 sppuinotify - ok
18:47:14.0507 4036 [ CDDDEC541BC3C96F91ECB48759673505 ] sptd C:\Windows\system32\Drivers\sptd.sys
18:47:14.0509 4036 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: CDDDEC541BC3C96F91ECB48759673505
18:47:14.0512 4036 sptd ( LockedFile.Multi.Generic ) - warning
18:47:14.0513 4036 sptd - detected LockedFile.Multi.Generic (1)
18:47:14.0556 4036 [ EB2FD937449B7ACEB39372F875EB8E78 ] SQLAgent$SQLEXPRESS c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE
18:47:14.0562 4036 SQLAgent$SQLEXPRESS - ok
18:47:14.0597 4036 [ 99DE6ACFA5CA83FAD6A765C81C6F129F ] SQLBrowser c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
18:47:14.0603 4036 SQLBrowser - ok
18:47:14.0632 4036 [ 637A0F23F9012358E92E6F99835494D1 ] SQLWriter c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
18:47:14.0634 4036 SQLWriter - ok
18:47:14.0678 4036 [ C4A027B8C0BD3FC0699F41FA5E9E0C87 ] srv C:\Windows\system32\DRIVERS\srv.sys
18:47:14.0681 4036 srv - ok
18:47:14.0755 4036 [ 414BB592CAD8A79649D01F9D94318FB3 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
18:47:14.0764 4036 srv2 - ok
18:47:14.0776 4036 [ FF207D67700AA18242AAF985D3E7D8F4 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
18:47:14.0779 4036 srvnet - ok
18:47:14.0811 4036 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
18:47:14.0820 4036 SSDPSRV - ok
18:47:14.0833 4036 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
18:47:14.0842 4036 SstpSvc - ok
18:47:14.0882 4036 Steam Client Service - ok
18:47:14.0912 4036 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
18:47:14.0914 4036 stexstor - ok
18:47:14.0960 4036 [ A22825E7BB7018E8AF3E229A5AF17221 ] StiSvc C:\Windows\System32\wiaservc.dll
18:47:14.0994 4036 StiSvc - ok
18:47:15.0038 4036 [ 957E346CA948668F2496A6CCF6FF82CC ] storflt C:\Windows\system32\DRIVERS\vmstorfl.sys
18:47:15.0046 4036 storflt - ok
18:47:15.0070 4036 [ 0BF669F0A910BEDA4A32258D363AF2A5 ] StorSvc C:\Windows\system32\storsvc.dll
18:47:15.0078 4036 StorSvc - ok
18:47:15.0094 4036 [ D5751969DC3E4B88BF482AC8EC9FE019 ] storvsc C:\Windows\system32\DRIVERS\storvsc.sys
18:47:15.0096 4036 storvsc - ok
18:47:15.0117 4036 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
18:47:15.0118 4036 swenum - ok
18:47:15.0150 4036 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
18:47:15.0165 4036 swprv - ok
18:47:15.0224 4036 [ 04105C8DA62353589C29BDAEB8D88BD8 ] SysMain C:\Windows\system32\sysmain.dll
18:47:15.0244 4036 SysMain - ok
18:47:15.0265 4036 [ FCFB6C552FBC0DA299799CBD50AD9FD4 ] TabletInputService C:\Windows\System32\TabSvc.dll
18:47:15.0280 4036 TabletInputService - ok
18:47:15.0300 4036 [ 2F46B0C70A4ADC8C90CF825DA3B4FEAF ] TapiSrv C:\Windows\System32\tapisrv.dll
18:47:15.0307 4036 TapiSrv - ok
18:47:15.0329 4036 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
18:47:15.0335 4036 TBS - ok

indycz · Příspěvekod **indycz** » 31 led 2013 19:02

18:47:15.0418 4036 [ 55E9965552741F3850CB22CBBA9671ED ] Tcpip C:\Windows\system32\drivers\tcpip.sys
18:47:15.0477 4036 Tcpip - ok
18:47:15.0611 4036 [ 55E9965552741F3850CB22CBBA9671ED ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
18:47:15.0629 4036 TCPIP6 - ok
18:47:15.0673 4036 [ E64444523ADD154F86567C469BC0B17F ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
18:47:15.0674 4036 tcpipreg - ok
18:47:15.0705 4036 [ 1875C1490D99E70E449E3AFAE9FCBADF ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
18:47:15.0706 4036 TDPIPE - ok
18:47:15.0749 4036 [ 7156308896D34EA75A582F9A09E50C17 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
18:47:15.0753 4036 TDTCP - ok
18:47:15.0781 4036 [ CB39E896A2A83702D1737BFD402B3542 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
18:47:15.0784 4036 tdx - ok
18:47:15.0805 4036 [ C36F41EE20E6999DBF4B0425963268A5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
18:47:15.0807 4036 TermDD - ok
18:47:15.0845 4036 [ A01E50A04D7B1960B33E92B9080E6A94 ] TermService C:\Windows\System32\termsrv.dll
18:47:15.0868 4036 TermService - ok
18:47:15.0885 4036 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
18:47:15.0892 4036 Themes - ok
18:47:15.0898 4036 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
18:47:15.0902 4036 THREADORDER - ok
18:47:15.0969 4036 [ AC88D258F20909EEB91796F490CFBB73 ] TOSHIBA Bluetooth Service C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
18:47:15.0974 4036 TOSHIBA Bluetooth Service - ok
18:47:16.0026 4036 [ 90AFA1A4451BBBEE87C9F18A665D8121 ] tosporte C:\Windows\system32\DRIVERS\tosporte.sys
18:47:16.0029 4036 tosporte - ok
18:47:16.0071 4036 [ 00371CE4DA09B68BA0FF953E61820981 ] tosrfbd C:\Windows\system32\DRIVERS\tosrfbd.sys
18:47:16.0078 4036 tosrfbd - ok
18:47:16.0118 4036 [ 74392BAB3F0D4810DA8436EC79D6955D ] tosrfbnp C:\Windows\system32\Drivers\tosrfbnp.sys
18:47:16.0122 4036 tosrfbnp - ok
18:47:16.0151 4036 [ 1AD9EB1B5ABD0AEEE4084C8153476F1E ] Tosrfcom C:\Windows\system32\Drivers\tosrfcom.sys
18:47:16.0153 4036 Tosrfcom - ok
18:47:16.0175 4036 [ A72A3473180F378CC07D342803FFD580 ] Tosrfhid C:\Windows\system32\DRIVERS\Tosrfhid.sys
18:47:16.0178 4036 Tosrfhid - ok
18:47:16.0209 4036 [ B2A1A6538245FD69578224BBF2FD4677 ] tosrfnds C:\Windows\system32\DRIVERS\tosrfnds.sys
18:47:16.0211 4036 tosrfnds - ok
18:47:16.0229 4036 [ F1CA74CCA8241D8B8A024AECC643C547 ] TosRfSnd C:\Windows\system32\drivers\tosrfsnd.sys
18:47:16.0233 4036 TosRfSnd - ok
18:47:16.0247 4036 [ F400FB9616261A1B66E6D2E04B6C3538 ] Tosrfusb C:\Windows\system32\DRIVERS\tosrfusb.sys
18:47:16.0249 4036 Tosrfusb - ok
18:47:16.0278 4036 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
18:47:16.0286 4036 TrkWks - ok
18:47:16.0344 4036 [ 41A4C781D2286208D397D72099304133 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
18:47:16.0350 4036 TrustedInstaller - ok
18:47:16.0374 4036 [ 98AE6FA07D12CB4EC5CF4A9BFA5F4242 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
18:47:16.0378 4036 tssecsrv - ok
18:47:16.0412 4036 [ 3E461D890A97F9D4C168F5FDA36E1D00 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
18:47:16.0415 4036 tunnel - ok
18:47:16.0427 4036 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
18:47:16.0429 4036 uagp35 - ok
18:47:16.0450 4036 [ 09CC3E16F8E5EE7168E01CF8FCBE061A ] udfs C:\Windows\system32\DRIVERS\udfs.sys
18:47:16.0455 4036 udfs - ok
18:47:16.0480 4036 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
18:47:16.0486 4036 UI0Detect - ok
18:47:16.0519 4036 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\DRIVERS\uliagpkx.sys
18:47:16.0521 4036 uliagpkx - ok
18:47:16.0554 4036 [ 049B3A50B3D646BAEEEE9EEC9B0668DC ] umbus C:\Windows\system32\DRIVERS\umbus.sys
18:47:16.0555 4036 umbus - ok
18:47:16.0572 4036 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
18:47:16.0574 4036 UmPass - ok
18:47:16.0617 4036 [ 8ECACA5454844F66386F7BE4AE0D7CD1 ] UmRdpService C:\Windows\System32\umrdp.dll
18:47:16.0632 4036 UmRdpService - ok
18:47:16.0661 4036 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
18:47:16.0667 4036 upnphost - ok
18:47:16.0705 4036 [ 8455C4ED038EFD09E99327F9D2D48FFA ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
18:47:16.0707 4036 usbccgp - ok
18:47:16.0726 4036 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\DRIVERS\usbcir.sys
18:47:16.0728 4036 usbcir - ok
18:47:16.0741 4036 [ 1C333BFD60F2FED2C7AD5DAF533CB742 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
18:47:16.0743 4036 usbehci - ok
18:47:16.0759 4036 [ EE6EF93CCFA94FAE8C6AB298273D8AE2 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
18:47:16.0764 4036 usbhub - ok
18:47:16.0789 4036 [ A6FB7957EA7AFB1165991E54CE934B74 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
18:47:16.0791 4036 usbohci - ok
18:47:16.0803 4036 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
18:47:16.0805 4036 usbprint - ok
18:47:16.0862 4036 [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
18:47:16.0865 4036 usbscan - ok
18:47:16.0898 4036 [ D8889D56E0D27E57ED4591837FE71D27 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:47:16.0901 4036 USBSTOR - ok
18:47:16.0918 4036 [ 78780C3EBCE17405B1CCD07A3A8A7D72 ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
18:47:16.0920 4036 usbuhci - ok
18:47:16.0964 4036 [ F642A7E4BF78CFA359CCA0A3557C28D7 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
18:47:16.0968 4036 usbvideo - ok
18:47:17.0006 4036 [ D82F43D15FDAA666856C0190CB73E7C9 ] usb_rndisx C:\Windows\system32\DRIVERS\usb8023x.sys
18:47:17.0008 4036 usb_rndisx - ok
18:47:17.0036 4036 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
18:47:17.0043 4036 UxSms - ok
18:47:17.0053 4036 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] VaultSvc C:\Windows\system32\lsass.exe
18:47:17.0057 4036 VaultSvc - ok
18:47:17.0090 4036 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\DRIVERS\vdrvroot.sys
18:47:17.0092 4036 vdrvroot - ok
18:47:17.0122 4036 [ 8C4E7C49D3641BC9E299E466A7F8867D ] vds C:\Windows\System32\vds.exe
18:47:17.0156 4036 vds - ok
18:47:17.0189 4036 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
18:47:17.0208 4036 vga - ok
18:47:17.0253 4036 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
18:47:17.0256 4036 VgaSave - ok
18:47:17.0279 4036 [ 3BE6E1F3A4F1AFEC8CEE0D7883F93583 ] vhdmp C:\Windows\system32\DRIVERS\vhdmp.sys
18:47:17.0283 4036 vhdmp - ok
18:47:17.0306 4036 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\DRIVERS\viaagp.sys
18:47:17.0309 4036 viaagp - ok
18:47:17.0327 4036 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
18:47:17.0329 4036 ViaC7 - ok
18:47:17.0354 4036 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\DRIVERS\viaide.sys
18:47:17.0356 4036 viaide - ok
18:47:17.0397 4036 [ 379B349F65F453D2A6E75EA6B7448E49 ] vmbus C:\Windows\system32\DRIVERS\vmbus.sys
18:47:17.0403 4036 vmbus - ok
18:47:17.0434 4036 [ EC2BBAB4B84D0738C6C83D2234DC36FE ] VMBusHID C:\Windows\system32\DRIVERS\VMBusHID.sys
18:47:17.0442 4036 VMBusHID - ok
18:47:17.0456 4036 [ 384E5A2AA49934295171E499F86BA6F3 ] volmgr C:\Windows\system32\DRIVERS\volmgr.sys
18:47:17.0459 4036 volmgr - ok
18:47:17.0495 4036 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
18:47:17.0501 4036 volmgrx - ok
18:47:17.0534 4036 [ 58DF9D2481A56EDDE167E51B334D44FD ] volsnap C:\Windows\system32\DRIVERS\volsnap.sys
18:47:17.0540 4036 volsnap - ok
18:47:17.0559 4036 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
18:47:17.0563 4036 vsmraid - ok
18:47:17.0616 4036 [ 7EA2BCD94D9CFAF4C556F5CC94532A6C ] VSS C:\Windows\system32\vssvc.exe
18:47:17.0687 4036 VSS - ok
18:47:17.0722 4036 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
18:47:17.0724 4036 vwifibus - ok
18:47:17.0741 4036 [ 7090D3436EEB4E7DA3373090A23448F7 ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
18:47:17.0744 4036 vwififlt - ok
18:47:17.0774 4036 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
18:47:17.0796 4036 W32Time - ok
18:47:17.0809 4036 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
18:47:17.0811 4036 WacomPen - ok
18:47:17.0835 4036 [ 692A712062146E96D28BA0B7D75DE31B ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
18:47:17.0838 4036 WANARP - ok
18:47:17.0843 4036 [ 692A712062146E96D28BA0B7D75DE31B ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
18:47:17.0845 4036 Wanarpv6 - ok
18:47:17.0990 4036 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
18:47:18.0059 4036 WatAdminSvc - ok
18:47:18.0142 4036 [ 7790B77FE1E5EE47DCC66247095BB4C9 ] wbengine C:\Windows\system32\wbengine.exe
18:47:18.0204 4036 wbengine - ok
18:47:18.0223 4036 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
18:47:18.0233 4036 WbioSrvc - ok
18:47:18.0242 4036 [ D0F88AA11EE1A62BCC6D6A8A7783CA11 ] wcncsvc C:\Windows\System32\wcncsvc.dll
18:47:18.0250 4036 wcncsvc - ok
18:47:18.0272 4036 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
18:47:18.0278 4036 WcsPlugInService - ok
18:47:18.0305 4036 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
18:47:18.0307 4036 Wd - ok
18:47:18.0338 4036 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
18:47:18.0343 4036 Wdf01000 - ok
18:47:18.0360 4036 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
18:47:18.0366 4036 WdiServiceHost - ok
18:47:18.0370 4036 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
18:47:18.0376 4036 WdiSystemHost - ok
18:47:18.0394 4036 [ D87C7D2C517F82A5AB7A73E203063D9E ] WebClient C:\Windows\System32\webclnt.dll
18:47:18.0405 4036 WebClient - ok
18:47:18.0437 4036 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
18:47:18.0444 4036 Wecsvc - ok
18:47:18.0468 4036 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
18:47:18.0474 4036 wercplsupport - ok
18:47:18.0483 4036 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
18:47:18.0489 4036 WerSvc - ok
18:47:18.0522 4036 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
18:47:18.0524 4036 WfpLwf - ok
18:47:18.0536 4036 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
18:47:18.0538 4036 WIMMount - ok
18:47:18.0633 4036 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
18:47:18.0666 4036 WinDefend - ok
18:47:18.0691 4036 WinHttpAutoProxySvc - ok
18:47:18.0764 4036 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
18:47:18.0769 4036 Winmgmt - ok
18:47:18.0872 4036 [ C4F5D3901D1B41D602DDC196E0B95B51 ] WinRM C:\Windows\system32\WsmSvc.dll
18:47:18.0939 4036 WinRM - ok
18:47:19.0002 4036 [ 30FC6E5448D0CBAAA95280EEEF7FEDAE ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
18:47:19.0003 4036 WinUsb - ok
18:47:19.0040 4036 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
18:47:19.0050 4036 Wlansvc - ok
18:47:19.0139 4036 [ 5144AE67D60EC653F97DDF3FEED29E77 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
18:47:19.0204 4036 wlidsvc - ok
18:47:19.0244 4036 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
18:47:19.0245 4036 WmiAcpi - ok
18:47:19.0287 4036 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
18:47:19.0291 4036 wmiApSrv - ok
18:47:19.0390 4036 [ 77FBD400984CF72BA0FC4B3489D65F74 ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
18:47:19.0436 4036 WMPNetworkSvc - ok
18:47:19.0456 4036 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
18:47:19.0465 4036 WPCSvc - ok
18:47:19.0477 4036 [ B7F658A2EBC07129538AD9AB35212637 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
18:47:19.0484 4036 WPDBusEnum - ok
18:47:19.0498 4036 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
18:47:19.0500 4036 ws2ifsl - ok
18:47:19.0521 4036 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\System32\wscsvc.dll
18:47:19.0527 4036 wscsvc - ok
18:47:19.0532 4036 WSearch - ok
18:47:19.0698 4036 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
18:47:19.0720 4036 wuauserv - ok
18:47:19.0776 4036 [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
18:47:19.0782 4036 WudfPf - ok
18:47:19.0823 4036 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
18:47:19.0827 4036 WUDFRd - ok
18:47:19.0850 4036 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
18:47:19.0858 4036 wudfsvc - ok
18:47:19.0885 4036 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll
18:47:19.0896 4036 WwanSvc - ok
18:47:19.0940 4036 ================ Scan global ===============================
18:47:20.0009 4036 [ 9A595DF601070DA78C40481120DD2C06 ] C:\Windows\system32\basesrv.dll
18:47:20.0065 4036 [ 008F51AE989C3DF1CBAF8B39DC423CCC ] C:\Windows\system32\winsrv.dll
18:47:20.0110 4036 [ 008F51AE989C3DF1CBAF8B39DC423CCC ] C:\Windows\system32\winsrv.dll
18:47:20.0141 4036 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
18:47:20.0179 4036 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
18:47:20.0185 4036 [Global] - ok
18:47:20.0186 4036 ================ Scan MBR ==================================
18:47:20.0208 4036 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
18:47:20.0821 4036 \Device\Harddisk0\DR0 - ok
18:47:20.0821 4036 ================ Scan VBR ==================================
18:47:20.0852 4036 [ 124D2027EB86A3D39C504DD56AB9EAA9 ] \Device\Harddisk0\DR0\Partition1
18:47:20.0856 4036 \Device\Harddisk0\DR0\Partition1 - ok
18:47:20.0913 4036 [ 0E7FBBAB8E1AD94B633B8A192DBADC15 ] \Device\Harddisk0\DR0\Partition2
18:47:20.0931 4036 \Device\Harddisk0\DR0\Partition2 - ok
18:47:20.0932 4036 ============================================================
18:47:20.0932 4036 Scan finished
18:47:20.0932 4036 ============================================================
18:47:20.0950 4196 Detected object count: 1
18:47:20.0950 4196 Actual detected object count: 1
18:48:17.0604 4196 sptd ( LockedFile.Multi.Generic ) - skipped by user
18:48:17.0605 4196 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
18:48:19.0661 5104 Deinitialize success

Příspěvekod **jaro3** » 31 led 2013 21:09

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Prosím o kontrolu logu

Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Kdo je online