PC-HELP.CZ

Mám hodně zpomalený notebook

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:34:08, on 30.1.2013
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\System Control Manager\MGSysCtrl.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\QIP 2010\qip.exe
C:\Users\Ondra\Downloads\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [MGSysCtrl] C:\Program Files\System Control Manager\MGSysCtrl.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\Skytel.exe
O4 - HKLM\..\Run: [ABC] C:\PROGRA~1\JTHABC~1\Keylogger.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Ondra\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe
O4 - Global Startup: Akcelerátor spuštění AutoCADu.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MIF5BA~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: Micro Star SCM - Micro-Star International Co., Ltd. - C:\Program Files\System Control Manager\MSIService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

--
End of file - 8422 bytes

Ten keyloogger máš naschvál?
O4 - HKLM\..\Run: [ABC] C:\PROGRA~1\JTHABC~1\Keylogger.exe

Fixni:


Anti-keylogger™
10.3.1 download informatik
Stáhni si Antikeylogger z některého odkazu.
http://www.anti-keyloggers.com/download/antikey.zip
http://www.anti-keyloggers.com/download/ak_help.zip
http://www.anti-keyloggers.com/download ... aSheet.pdf

===================================================

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

===================================================

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Ten keylogger nevím, napadá mě jedině, že by to udělal bratr, jinak nemám tušení.

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Verze: v2013.01.30.07

Windows 7 x86 NTFS
Internet Explorer 9.0.8112.16421
Ondra :: ONDRA-PC [administrátor]

30.1.2013 18:39:34
MBAM-log-2013-01-30 (18-46-48).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 209527
Uplynulý čas: 6 minut, 54 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 2
C:\Users\Ondra\Downloads\SoftonicDownloader_for_windows-essentials-codec-pack.exe (PUP.OfferBundler.ST) -> Nebyla provedena žádná instrukce.
C:\Users\Ondra\Downloads\ESET Antivirus License Finder (MiNODLogin) 3.7.0.2.exe (Riskware.KG) -> Nebyla provedena žádná instrukce.

(konec)

Tak se ho zeptej!

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit
Můžeš sem pak vložit nový log z MbAM.


Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Tak byl to nakonec bratr. Dal ho tam, ale prý smazal, jenže to tam zřejmě zůstalo. Budu si ho hlídat.

# AdwCleaner v2.109 - Logfile created 01/31/2013 at 18:44:41
# Updated 26/01/2013 by Xplode
# Operating system : Windows 7 Professional (32 bits)
# User : Ondra - ONDRA-PC
# Boot Mode : Normal
# Running from : C:\Users\Ondra\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

File Found : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\7wzb66ck.default\searchplugins\Askcom.xml
Folder Found : C:\ProgramData\Ask
Folder Found : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\7wzb66ck.default\Conduit

***** [Registry] *****

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}
Key Found : HKCU\Software\Softonic
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Key Found : HKU\S-1-5-21-3653632025-776030965-2097270881-1000\Software\Microsoft\Internet Explorer\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16450

[OK] Registry is clean.

-\\ Mozilla Firefox v18.0.1 (cs)

File : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\7wzb66ck.default\prefs.js

Found : user_pref("CT2438727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Found : user_pref("CT2438727.CTID", "CT2438727");
Found : user_pref("CT2438727.CurrentServerDate", "10-6-2010");
Found : user_pref("CT2438727.DialogsAlignMode", "LTR");
Found : user_pref("CT2438727.FirstServerDate", "9-6-2010");
Found : user_pref("CT2438727.FirstTime", true);
Found : user_pref("CT2438727.FirstTimeFF3", true);
Found : user_pref("CT2438727.GroupingServerCheckInterval", 1440);
Found : user_pref("CT2438727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Found : user_pref("CT2438727.Initialize", true);
Found : user_pref("CT2438727.InitializeCommonPrefs", true);
Found : user_pref("CT2438727.InstalledDate", "Wed Jun 09 2010 01:38:24 GMT+0200");
Found : user_pref("CT2438727.IsGrouping", false);
Found : user_pref("CT2438727.IsMulticommunity", false);
Found : user_pref("CT2438727.IsOpenThankYouPage", true);
Found : user_pref("CT2438727.IsOpenUninstallPage", true);
Found : user_pref("CT2438727.LanguagePackLastCheckTime", "Thu Jun 10 2010 13:20:10 GMT+0200");
Found : user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
Found : user_pref("CT2438727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Found : user_pref("CT2438727.LastLogin_2.5.8.6", "Thu Jun 10 2010 13:20:10 GMT+0200");
Found : user_pref("CT2438727.LatestVersion", "2.1.0.18");
Found : user_pref("CT2438727.Locale", "en");
Found : user_pref("CT2438727.LoginCache", 4);
Found : user_pref("CT2438727.MCDetectTooltipHeight", "83");
Found : user_pref("CT2438727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Found : user_pref("CT2438727.MCDetectTooltipWidth", "295");
Found : user_pref("CT2438727.SHRINK_TOOLBAR", 1);
Found : user_pref("CT2438727.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
Found : user_pref("CT2438727.SearchFromAddressBarIsInit", true);
Found : user_pref("CT2438727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243[...]
Found : user_pref("CT2438727.SearchInNewTabEnabled", true);
Found : user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
Found : user_pref("CT2438727.SearchInNewTabLastCheckTime", "Thu Jun 10 2010 13:20:09 GMT+0200");
Found : user_pref("CT2438727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Found : user_pref("CT2438727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Found : user_pref("CT2438727.SettingsCheckIntervalMin", 120);
Found : user_pref("CT2438727.SettingsLastCheckTime", "Thu Jun 10 2010 13:20:09 GMT+0200");
Found : user_pref("CT2438727.SettingsLastUpdate", "1275607866");
Found : user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
Found : user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Wed Jun 09 2010 01:38:21 GMT+0200");
Found : user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1275607866");
Found : user_pref("CT2438727.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=[...]
Found : user_pref("CT2438727.UserID", "UN86215364172565222");
Found : user_pref("CT2438727.alertChannelId", "832836");
Found : user_pref("CT2438727.clientLogIsEnabled", false);
Found : user_pref("CT2438727.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
Found : user_pref("CT2438727.myStuffEnabled", true);
Found : user_pref("CT2438727.myStuffPublihserMinWidth", 400);
Found : user_pref("CT2438727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Found : user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
Found : user_pref("CT2438727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Found : user_pref("CT2438727.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.qip.ru/search?from=FF&quer[...]
Found : user_pref("CommunityToolbar.ToolbarsList", "CT2438727");
Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2438727");
Found : user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
Found : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Thu Jun 10 2010 13:20:09 GMT+0200");
Found : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Found : user_pref("CommunityToolbar.alert.locale", "en");
Found : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Found : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Thu Jun 10 2010 13:20:09 GMT+0200");
Found : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1234796400");
Found : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Found : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Found : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Found : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Found : user_pref("CommunityToolbar.alert.userId", "{151a5469-6f33-452a-8544-b549483f11c4}");
Found : user_pref("browser.search.defaultengine", "Ask.com");
Found : user_pref("browser.search.defaultenginename", "Ask.com");
Found : user_pref("browser.search.order.1", "Ask.com");
Found : user_pref("keyword.URL", "hxxp://search.qip.ru/search?from=FF&query=");

*************************

AdwCleaner[R1].txt - [6892 octets] - [31/01/2013 18:44:41]

########## EOF - C:\AdwCleaner[R1].txt - [6952 octets] ##########

18:46:47.0982 5132 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
18:46:48.0054 5132 ============================================================
18:46:48.0054 5132 Current date / time: 2013/01/31 18:46:48.0054
18:46:48.0054 5132 SystemInfo:
18:46:48.0054 5132
18:46:48.0054 5132 OS Version: 6.1.7600 ServicePack: 0.0
18:46:48.0054 5132 Product type: Workstation
18:46:48.0055 5132 ComputerName: ONDRA-PC
18:46:48.0055 5132 UserName: Ondra
18:46:48.0055 5132 Windows directory: C:\Windows
18:46:48.0055 5132 System windows directory: C:\Windows
18:46:48.0055 5132 Processor architecture: Intel x86
18:46:48.0055 5132 Number of processors: 2
18:46:48.0055 5132 Page size: 0x1000
18:46:48.0055 5132 Boot type: Normal boot
18:46:48.0055 5132 ============================================================
18:46:48.0756 5132 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
18:46:48.0786 5132 ============================================================
18:46:48.0786 5132 \Device\Harddisk0\DR0:
18:46:48.0786 5132 MBR partitions:
18:46:48.0786 5132 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x950E482
18:46:48.0786 5132 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x950E800, BlocksNum 0x1BF1F800
18:46:48.0786 5132 ============================================================
18:46:48.0838 5132 C: <-> \Device\Harddisk0\DR0\Partition2
18:46:48.0917 5132 E: <-> \Device\Harddisk0\DR0\Partition1
18:46:48.0917 5132 ============================================================
18:46:48.0917 5132 Initialize success
18:46:48.0917 5132 ============================================================
18:46:53.0132 4036 ============================================================
18:46:53.0132 4036 Scan started
18:46:53.0132 4036 Mode: Manual;
18:46:53.0132 4036 ============================================================
18:46:53.0682 4036 ================ Scan system memory ========================
18:46:53.0682 4036 System memory - ok
18:46:53.0683 4036 ================ Scan services =============================
18:46:54.0554 4036 [ 6D2ACA41739BFE8CB86EE8E85F29697D ] 1394ohci C:\Windows\system32\DRIVERS\1394ohci.sys
18:46:54.0558 4036 1394ohci - ok
18:46:54.0664 4036 [ F0E07D144C8685B8774BC32FC8DA4DF0 ] ACPI C:\Windows\system32\DRIVERS\ACPI.sys
18:46:54.0684 4036 ACPI - ok
18:46:54.0741 4036 [ 98D81CA942D19F7D9153B095162AC013 ] AcpiPmi C:\Windows\system32\DRIVERS\acpipmi.sys
18:46:54.0743 4036 AcpiPmi - ok
18:46:54.0925 4036 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
18:46:54.0929 4036 AdobeARMservice - ok
18:46:55.0052 4036 [ 424877CB9D5517F980FF7BACA2EB379D ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
18:46:55.0066 4036 AdobeFlashPlayerUpdateSvc - ok
18:46:55.0153 4036 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
18:46:55.0167 4036 adp94xx - ok
18:46:55.0254 4036 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
18:46:55.0288 4036 adpahci - ok
18:46:55.0328 4036 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
18:46:55.0373 4036 adpu320 - ok
18:46:55.0431 4036 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
18:46:55.0456 4036 AeLookupSvc - ok
18:46:55.0577 4036 [ 0DB7A48388D54D154EBEC120461A0FCD ] AFD C:\Windows\system32\drivers\afd.sys
18:46:55.0611 4036 AFD - ok
18:46:55.0643 4036 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\DRIVERS\agp440.sys
18:46:55.0647 4036 agp440 - ok
18:46:55.0703 4036 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
18:46:55.0722 4036 aic78xx - ok
18:46:55.0759 4036 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
18:46:55.0762 4036 ALG - ok
18:46:55.0791 4036 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\DRIVERS\aliide.sys
18:46:55.0793 4036 aliide - ok
18:46:55.0825 4036 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\DRIVERS\amdagp.sys
18:46:55.0846 4036 amdagp - ok
18:46:55.0875 4036 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\DRIVERS\amdide.sys
18:46:55.0877 4036 amdide - ok
18:46:55.0901 4036 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
18:46:55.0905 4036 AmdK8 - ok
18:46:55.0933 4036 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
18:46:55.0952 4036 AmdPPM - ok
18:46:55.0982 4036 [ 2101A86C25C154F8314B24EF49D7FBC2 ] amdsata C:\Windows\system32\DRIVERS\amdsata.sys
18:46:55.0986 4036 amdsata - ok
18:46:56.0022 4036 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
18:46:56.0028 4036 amdsbs - ok
18:46:56.0051 4036 [ B81C2B5616F6420A9941EA093A92B150 ] amdxata C:\Windows\system32\DRIVERS\amdxata.sys
18:46:56.0054 4036 amdxata - ok
18:46:56.0087 4036 [ FEB834C02CE1E84B6A38F953CA067706 ] AppID C:\Windows\system32\drivers\appid.sys
18:46:56.0091 4036 AppID - ok
18:46:56.0124 4036 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
18:46:56.0128 4036 AppIDSvc - ok
18:46:56.0149 4036 [ 7DEAD9E3F65DCB2794F2711003BBF650 ] Appinfo C:\Windows\System32\appinfo.dll
18:46:56.0151 4036 Appinfo - ok
18:46:56.0195 4036 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
18:46:56.0239 4036 AppMgmt - ok
18:46:56.0275 4036 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
18:46:56.0279 4036 arc - ok
18:46:56.0316 4036 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
18:46:56.0340 4036 arcsas - ok
18:46:56.0494 4036 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
18:46:56.0514 4036 aspnet_state - ok
18:46:56.0621 4036 [ DE6ED95AEF259979B2830450072A627B ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
18:46:56.0623 4036 aswFsBlk - ok
18:46:56.0697 4036 [ 62F9DCEC95F91B8E0203E85D344A7E65 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
18:46:56.0700 4036 aswMonFlt - ok
18:46:56.0753 4036 [ 81F638A2DD94ABBF0B43880AB38D8DBD ] aswRdr C:\Windows\System32\Drivers\aswrdr2.sys
18:46:56.0756 4036 aswRdr - ok
18:46:56.0864 4036 [ B32E9AD44A1DBB3E8095E80F8DF32B03 ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
18:46:56.0875 4036 aswSnx - ok
18:46:56.0962 4036 [ 67B558895695545FB0568B7541F3BCA7 ] aswSP C:\Windows\system32\drivers\aswSP.sys
18:46:56.0968 4036 aswSP - ok
18:46:57.0057 4036 [ E3E73B2B73A4DFADFDDF557192C4B08A ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
18:46:57.0059 4036 aswTdi - ok
18:46:57.0141 4036 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
18:46:57.0143 4036 AsyncMac - ok
18:46:57.0176 4036 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\DRIVERS\atapi.sys
18:46:57.0179 4036 atapi - ok
18:46:57.0236 4036 [ F0D933B42CD0594048E4D5200AE9E417 ] atksgt C:\Windows\system32\DRIVERS\atksgt.sys
18:46:57.0241 4036 atksgt - ok
18:46:57.0289 4036 [ 510C873BFA135AA829F4180352772734 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
18:46:57.0298 4036 AudioEndpointBuilder - ok
18:46:57.0344 4036 [ 510C873BFA135AA829F4180352772734 ] Audiosrv C:\Windows\System32\Audiosrv.dll
18:46:57.0352 4036 Audiosrv - ok
18:46:57.0464 4036 [ 9F29157695EE58875B06724743CE9C42 ] Autodesk Licensing Service C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
18:46:57.0486 4036 Autodesk Licensing Service - ok
18:46:57.0588 4036 [ 8FA553E9AE69808D99C164733A0F9590 ] avast! Antivirus C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
18:46:57.0591 4036 avast! Antivirus - ok
18:46:57.0642 4036 avast! Firewall - ok
18:46:57.0680 4036 [ DD6A431B43E34B91A767D1CE33728175 ] AxInstSV C:\Windows\System32\AxInstSV.dll
18:46:57.0686 4036 AxInstSV - ok
18:46:57.0726 4036 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
18:46:57.0750 4036 b06bdrv - ok
18:46:57.0775 4036 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
18:46:57.0782 4036 b57nd60x - ok
18:46:57.0808 4036 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
18:46:57.0811 4036 BDESVC - ok
18:46:57.0850 4036 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
18:46:57.0852 4036 Beep - ok
18:46:57.0880 4036 [ 85AC71C045CEB054ED48A7841AAE0C11 ] BFE C:\Windows\System32\bfe.dll
18:46:57.0903 4036 BFE - ok
18:46:57.0993 4036 [ 53F476476F55A27F580661BDE09C4EC4 ] BITS C:\Windows\System32\qmgr.dll
18:46:58.0012 4036 BITS - ok
18:46:58.0077 4036 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
18:46:58.0080 4036 blbdrive - ok
18:46:58.0160 4036 [ 9A5C671B7FBAE4865149BB11F59B91B2 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
18:46:58.0182 4036 bowser - ok
18:46:58.0214 4036 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
18:46:58.0217 4036 BrFiltLo - ok
18:46:58.0235 4036 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
18:46:58.0238 4036 BrFiltUp - ok
18:46:58.0283 4036 [ A0E691DC6589D4D2CBE373171D1A49E5 ] Browser C:\Windows\System32\browser.dll
18:46:58.0285 4036 Browser - ok
18:46:58.0316 4036 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
18:46:58.0324 4036 Brserid - ok
18:46:58.0358 4036 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
18:46:58.0362 4036 BrSerWdm - ok
18:46:58.0385 4036 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
18:46:58.0387 4036 BrUsbMdm - ok
18:46:58.0413 4036 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
18:46:58.0417 4036 BrUsbSer - ok
18:46:58.0437 4036 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
18:46:58.0439 4036 BTHMODEM - ok
18:46:58.0465 4036 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
18:46:58.0468 4036 bthserv - ok
18:46:58.0515 4036 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
18:46:58.0517 4036 cdfs - ok
18:46:58.0547 4036 [ BA6E70AA0E6091BC39DE29477D866A77 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
18:46:58.0551 4036 cdrom - ok
18:46:58.0569 4036 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] CertPropSvc C:\Windows\System32\certprop.dll
18:46:58.0572 4036 CertPropSvc - ok
18:46:58.0589 4036 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
18:46:58.0591 4036 circlass - ok
18:46:58.0610 4036 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
18:46:58.0615 4036 CLFS - ok
18:46:58.0658 4036 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:46:58.0681 4036 clr_optimization_v2.0.50727_32 - ok
18:46:58.0744 4036 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:46:58.0750 4036 clr_optimization_v4.0.30319_32 - ok
18:46:58.0795 4036 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
18:46:58.0797 4036 CmBatt - ok
18:46:58.0818 4036 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\DRIVERS\cmdide.sys
18:46:58.0820 4036 cmdide - ok
18:46:58.0878 4036 [ DB5E008B3744DD60C8498CBBF2A1CFA6 ] CNG C:\Windows\system32\Drivers\cng.sys
18:46:58.0945 4036 CNG - ok
18:46:58.0966 4036 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
18:46:58.0968 4036 Compbatt - ok
18:46:58.0986 4036 [ F1724BA27E97D627F808FB0BA77A28A6 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
18:46:58.0989 4036 CompositeBus - ok
18:46:58.0999 4036 COMSysApp - ok
18:46:59.0024 4036 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
18:46:59.0025 4036 crcdisk - ok
18:46:59.0102 4036 [ 520A108A2657F4BCA7FCED9CA7D885DE ] CryptSvc C:\Windows\system32\cryptsvc.dll
18:46:59.0118 4036 CryptSvc - ok
18:46:59.0197 4036 [ 27C9490BDD0AE48911AB8CF1932591ED ] CSC C:\Windows\system32\drivers\csc.sys
18:46:59.0220 4036 CSC - ok
18:46:59.0255 4036 [ 56FB5F222EA30D3D3FC459879772CB73 ] CscService C:\Windows\System32\cscsvc.dll
18:46:59.0266 4036 CscService - ok
18:46:59.0305 4036 [ B82CD39E336973359D7C9BF911E8E84F ] DcomLaunch C:\Windows\system32\rpcss.dll
18:46:59.0311 4036 DcomLaunch - ok
18:46:59.0374 4036 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
18:46:59.0388 4036 defragsvc - ok
18:46:59.0441 4036 [ 83D1ECEA8FAAE75604C0FA49AC7AD996 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
18:46:59.0443 4036 DfsC - ok
18:46:59.0472 4036 [ C56495FBD770712367CAD35E5DE72DA6 ] Dhcp C:\Windows\system32\dhcpcore.dll
18:46:59.0474 4036 Dhcp - ok
18:46:59.0491 4036 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
18:46:59.0493 4036 discache - ok
18:46:59.0541 4036 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
18:46:59.0543 4036 Disk - ok
18:46:59.0583 4036 [ B15BE77A2BACF9C3177D27518AFE26A9 ] Dnscache C:\Windows\System32\dnsrslvr.dll
18:46:59.0611 4036 Dnscache - ok
18:46:59.0651 4036 [ 4408C85C21EEA48EB0CE486BAEEF0502 ] dot3svc C:\Windows\System32\dot3svc.dll
18:46:59.0657 4036 dot3svc - ok
18:46:59.0680 4036 [ 7FA81C6E11CAA594ADB52084DA73A1E5 ] DPS C:\Windows\system32\dps.dll
18:46:59.0685 4036 DPS - ok
18:46:59.0720 4036 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
18:46:59.0721 4036 drmkaud - ok
18:46:59.0842 4036 [ C94B6C3CC628179CB9B9061C19888B99 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
18:46:59.0850 4036 DXGKrnl - ok
18:46:59.0889 4036 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
18:46:59.0891 4036 EapHost - ok
18:47:00.0335 4036 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
18:47:00.0451 4036 ebdrv - ok
18:47:00.0483 4036 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] EFS C:\Windows\System32\lsass.exe
18:47:00.0486 4036 EFS - ok
18:47:00.0589 4036 [ 3A74A6E33685662B125A3269B1F2114F ] ehRecvr C:\Windows\ehome\ehRecvr.exe
18:47:00.0613 4036 ehRecvr - ok
18:47:00.0631 4036 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
18:47:00.0636 4036 ehSched - ok
18:47:00.0670 4036 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
18:47:00.0692 4036 elxstor - ok
18:47:00.0730 4036 [ F13C945115B8A8C7C4427D5925F88F23 ] enecir C:\Windows\system32\DRIVERS\enecir.sys
18:47:00.0732 4036 enecir - ok
18:47:00.0743 4036 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\DRIVERS\errdev.sys
18:47:00.0744 4036 ErrDev - ok
18:47:00.0787 4036 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
18:47:00.0791 4036 EventSystem - ok
18:47:00.0933 4036 [ A57BE3307ADA2FC086B5B43135735283 ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe
18:47:00.0942 4036 EvtEng - ok
18:47:00.0971 4036 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
18:47:00.0973 4036 exfat - ok
18:47:01.0031 4036 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
18:47:01.0037 4036 fastfat - ok
18:47:01.0103 4036 [ F7EA23CC5E6BF2181F3F399D54F6EFC1 ] Fax C:\Windows\system32\fxssvc.exe
18:47:01.0138 4036 Fax - ok
18:47:01.0172 4036 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
18:47:01.0175 4036 fdc - ok
18:47:01.0192 4036 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
18:47:01.0198 4036 fdPHost - ok
18:47:01.0215 4036 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
18:47:01.0218 4036 FDResPub - ok
18:47:01.0247 4036 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
18:47:01.0249 4036 FileInfo - ok
18:47:01.0258 4036 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
18:47:01.0260 4036 Filetrace - ok
18:47:01.0277 4036 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
18:47:01.0278 4036 flpydisk - ok
18:47:01.0314 4036 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
18:47:01.0318 4036 FltMgr - ok
18:47:01.0433 4036 [ 151258FC2EC8C48BDF8A53350AE0A676 ] FontCache C:\Windows\system32\FntCache.dll
18:47:01.0486 4036 FontCache - ok
18:47:01.0542 4036 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
18:47:01.0569 4036 FontCache3.0.0.0 - ok
18:47:01.0603 4036 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
18:47:01.0606 4036 FsDepends - ok
18:47:01.0652 4036 [ 500A9814FD9446A8126858A5A7F7D273 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
18:47:01.0656 4036 Fs_Rec - ok
18:47:01.0682 4036 [ 5592F5DBA26282D24D2B080EB438A4D7 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
18:47:01.0689 4036 fvevol - ok
18:47:01.0727 4036 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
18:47:01.0729 4036 gagp30kx - ok
18:47:01.0767 4036 [ 8BA3C04702BF8F927AB36AE8313CA4EE ] gpsvc C:\Windows\System32\gpsvc.dll
18:47:01.0774 4036 gpsvc - ok
18:47:01.0835 4036 [ 7929A161F9951D173CA9900FE7067391 ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
18:47:01.0838 4036 hamachi - ok
18:47:01.0876 4036 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
18:47:01.0895 4036 hcw85cir - ok
18:47:01.0954 4036 [ 3530CAD25DEBA7DC7DE8BB51632CBC5F ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
18:47:01.0987 4036 HdAudAddService - ok
18:47:02.0024 4036 [ 717A2207FD6F13AD3E664C7D5A43C7BF ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
18:47:02.0027 4036 HDAudBus - ok
18:47:02.0049 4036 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
18:47:02.0052 4036 HidBatt - ok
18:47:02.0070 4036 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
18:47:02.0074 4036 HidBth - ok
18:47:02.0098 4036 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
18:47:02.0101 4036 HidIr - ok
18:47:02.0135 4036 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
18:47:02.0142 4036 hidserv - ok
18:47:02.0182 4036 [ 25072FB35AC90B25F9E4E3BACF774102 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
18:47:02.0184 4036 HidUsb - ok
18:47:02.0210 4036 [ 741C2A45CA8407E374AABA3E330B7872 ] hkmsvc C:\Windows\system32\kmsvc.dll
18:47:02.0215 4036 hkmsvc - ok
18:47:02.0242 4036 [ A768CA158BB06782A2835B907F4873C3 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
18:47:02.0247 4036 HomeGroupListener - ok
18:47:02.0335 4036 [ FB08DEC5EF43D0C66D83B8E9694E7549 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
18:47:02.0348 4036 HomeGroupProvider - ok
18:47:02.0381 4036 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\DRIVERS\HpSAMD.sys
18:47:02.0383 4036 HpSAMD - ok
18:47:02.0422 4036 [ C531C7FD9E8B62021112787C4E2C5A5A ] HTTP C:\Windows\system32\drivers\HTTP.sys
18:47:02.0444 4036 HTTP - ok
18:47:02.0468 4036 [ 8305F33CDE89AD6C7A0763ED0B5A8D42 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
18:47:02.0470 4036 hwpolicy - ok
18:47:02.0495 4036 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
18:47:02.0498 4036 i8042prt - ok
18:47:02.0557 4036 [ 7548066DF68A8A1A56B043359F915F37 ] IAANTMON C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
18:47:02.0566 4036 IAANTMON - ok
18:47:02.0616 4036 [ D483687EACE0C065EE772481A96E05F5 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
18:47:02.0622 4036 iaStor - ok
18:47:02.0651 4036 [ 934AF4D7C5F457B9F0743F4299B77B67 ] iaStorV C:\Windows\system32\DRIVERS\iaStorV.sys
18:47:02.0657 4036 iaStorV - ok
18:47:02.0723 4036 [ 5AF815EB5BC9802E5A064E2BA62BFC0C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
18:47:02.0758 4036 idsvc - ok
18:47:02.0785 4036 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
18:47:02.0789 4036 iirsp - ok
18:47:02.0842 4036 [ FAC0EE6562B121B1399D6E855583F7A5 ] IKEEXT C:\Windows\System32\ikeext.dll
18:47:02.0857 4036 IKEEXT - ok
18:47:03.0152 4036 [ F2BAA4FF548F7F0317F7638951C1CD9C ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
18:47:03.0172 4036 IntcAzAudAddService - ok
18:47:03.0210 4036 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\DRIVERS\intelide.sys
18:47:03.0236 4036 intelide - ok
18:47:03.0269 4036 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
18:47:03.0272 4036 intelppm - ok
18:47:03.0304 4036 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
18:47:03.0325 4036 IPBusEnum - ok
18:47:03.0355 4036 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:47:03.0358 4036 IpFilterDriver - ok
18:47:03.0394 4036 [ 477397B432A256A50EE7E4339EB9EA14 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
18:47:03.0407 4036 iphlpsvc - ok
18:47:03.0427 4036 [ E4454B6C37D7FFD5649611F6496308A7 ] IPMIDRV C:\Windows\system32\DRIVERS\IPMIDrv.sys
18:47:03.0429 4036 IPMIDRV - ok
18:47:03.0461 4036 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
18:47:03.0463 4036 IPNAT - ok
18:47:03.0481 4036 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
18:47:03.0483 4036 IRENUM - ok
18:47:03.0495 4036 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\DRIVERS\isapnp.sys
18:47:03.0497 4036 isapnp - ok
18:47:03.0520 4036 [ ED46C223AE46C6866AB77CDC41C404B7 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
18:47:03.0524 4036 iScsiPrt - ok
18:47:03.0562 4036 [ 8C17DEB1995E593853373C30485E7368 ] JMCR C:\Windows\system32\DRIVERS\jmcr.sys
18:47:03.0563 4036 JMCR - ok
18:47:03.0578 4036 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
18:47:03.0579 4036 kbdclass - ok
18:47:03.0592 4036 [ 3D9F0EBF350EDCFD6498057301455964 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
18:47:03.0594 4036 kbdhid - ok
18:47:03.0606 4036 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] KeyIso C:\Windows\system32\lsass.exe
18:47:03.0609 4036 KeyIso - ok
18:47:03.0675 4036 [ 52FC17C8589F11747D01D3CF592673D0 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
18:47:03.0687 4036 KSecDD - ok
18:47:03.0707 4036 [ 3E5474B03568CFAB834DA3C38E8C9EFA ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
18:47:03.0712 4036 KSecPkg - ok
18:47:03.0748 4036 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
18:47:03.0771 4036 KtmRm - ok
18:47:03.0836 4036 [ 8F6BF790D3168224C16F2AF68A84438C ] LanmanServer C:\Windows\system32\srvsvc.dll
18:47:03.0851 4036 LanmanServer - ok
18:47:03.0887 4036 [ B9891F885DCF1F0513A51CB58493CB1F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
18:47:03.0894 4036 LanmanWorkstation - ok
18:47:04.0009 4036 [ F8A7212D0864EF5E9185FB95E6623F4D ] lirsgt C:\Windows\system32\DRIVERS\lirsgt.sys
18:47:04.0012 4036 lirsgt - ok
18:47:04.0056 4036 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
18:47:04.0059 4036 lltdio - ok
18:47:04.0087 4036 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
18:47:04.0100 4036 lltdsvc - ok
18:47:04.0125 4036 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
18:47:04.0132 4036 lmhosts - ok
18:47:04.0161 4036 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
18:47:04.0164 4036 LSI_FC - ok
18:47:04.0197 4036 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
18:47:04.0200 4036 LSI_SAS - ok
18:47:04.0214 4036 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
18:47:04.0216 4036 LSI_SAS2 - ok
18:47:04.0236 4036 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
18:47:04.0239 4036 LSI_SCSI - ok
18:47:04.0293 4036 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
18:47:04.0296 4036 luafv - ok
18:47:04.0316 4036 [ E2B0887816ED336685954E3D8FDAA51D ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
18:47:04.0322 4036 Mcx2Svc - ok
18:47:04.0351 4036 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
18:47:04.0373 4036 megasas - ok
18:47:04.0406 4036 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
18:47:04.0414 4036 MegaSR - ok
18:47:04.0490 4036 [ 71C6748EE8DE938532057EF10B4B7E44 ] Micro Star SCM C:\Program Files\System Control Manager\MSIService.exe
18:47:04.0494 4036 Micro Star SCM - ok
18:47:04.0607 4036 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
18:47:04.0640 4036 Microsoft Office Groove Audit Service - ok
18:47:04.0685 4036 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
18:47:04.0694 4036 MMCSS - ok
18:47:04.0750 4036 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
18:47:04.0752 4036 Modem - ok
18:47:04.0799 4036 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
18:47:04.0802 4036 monitor - ok
18:47:04.0829 4036 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
18:47:04.0832 4036 mouclass - ok
18:47:04.0858 4036 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
18:47:04.0861 4036 mouhid - ok
18:47:04.0885 4036 [ 921C18727C5920D6C0300736646931C2 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
18:47:04.0890 4036 mountmgr - ok
18:47:04.0943 4036 [ 9C3758018DED02F4AE53CCA1C5F084A2 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
18:47:04.0948 4036 MozillaMaintenance - ok
18:47:04.0988 4036 [ 2AF5997438C55FB79D33D015C30E1974 ] mpio C:\Windows\system32\DRIVERS\mpio.sys
18:47:05.0013 4036 mpio - ok
18:47:05.0055 4036 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
18:47:05.0059 4036 mpsdrv - ok
18:47:05.0104 4036 [ 5CD996CECF45CBC3E8D109C86B82D69E ] MpsSvc C:\Windows\system32\mpssvc.dll
18:47:05.0138 4036 MpsSvc - ok
18:47:05.0182 4036 [ B1BE47008D20E43DA3ADC37C24CDB89D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
18:47:05.0185 4036 MRxDAV - ok
18:47:05.0252 4036 [ CA7570E42522E24324A12161DB14EC02 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
18:47:05.0257 4036 mrxsmb - ok
18:47:05.0284 4036 [ F965C3AB2B2AE5C378F4562486E35051 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:47:05.0305 4036 mrxsmb10 - ok
18:47:05.0340 4036 [ 25C38264A3C72594DD21D355D70D7A5D ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:47:05.0343 4036 mrxsmb20 - ok
18:47:05.0362 4036 [ 4326D168944123F38DD3B2D9C37A0B12 ] msahci C:\Windows\system32\DRIVERS\msahci.sys
18:47:05.0364 4036 msahci - ok
18:47:05.0386 4036 [ 455029C7174A2DBB03DBA8A0D8BDDD9A ] msdsm C:\Windows\system32\DRIVERS\msdsm.sys
18:47:05.0389 4036 msdsm - ok
18:47:05.0409 4036 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
18:47:05.0416 4036 MSDTC - ok
18:47:05.0453 4036 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
18:47:05.0455 4036 Msfs - ok
18:47:05.0468 4036 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
18:47:05.0469 4036 mshidkmdf - ok
18:47:05.0481 4036 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\DRIVERS\msisadrv.sys
18:47:05.0482 4036 msisadrv - ok
18:47:05.0498 4036 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
18:47:05.0502 4036 MSiSCSI - ok
18:47:05.0506 4036 msiserver - ok
18:47:05.0540 4036 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
18:47:05.0541 4036 MSKSSRV - ok
18:47:05.0563 4036 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
18:47:05.0564 4036 MSPCLOCK - ok
18:47:05.0595 4036 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
18:47:05.0597 4036 MSPQM - ok
18:47:05.0619 4036 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
18:47:05.0622 4036 MsRPC - ok
18:47:05.0633 4036 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
18:47:05.0634 4036 mssmbios - ok
18:47:05.0720 4036 MSSQL$SQLEXPRESS - ok
18:47:05.0853 4036 [ F1761C8FB2B25A32C6D63E36BB88C3AE ] MSSQLServerADHelper100 c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE
18:47:05.0881 4036 MSSQLServerADHelper100 - ok
18:47:05.0909 4036 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
18:47:05.0912 4036 MSTEE - ok
18:47:05.0940 4036 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
18:47:05.0942 4036 MTConfig - ok
18:47:05.0954 4036 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
18:47:05.0956 4036 Mup - ok
18:47:05.0992 4036 [ 80284F1985C70C86F0B5F86DA2DFE1DF ] napagent C:\Windows\system32\qagentRT.dll
18:47:06.0015 4036 napagent - ok
18:47:06.0037 4036 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
18:47:06.0043 4036 NativeWifiP - ok
18:47:06.0095 4036 [ 23759D175A0A9BAAF04D05047BC135A8 ] NDIS C:\Windows\system32\drivers\ndis.sys
18:47:06.0130 4036 NDIS - ok
18:47:06.0172 4036 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
18:47:06.0174 4036 NdisCap - ok
18:47:06.0199 4036 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
18:47:06.0201 4036 NdisTapi - ok
18:47:06.0222 4036 [ B30AE7F2B6D7E343B0DF32E6C08FCE75 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
18:47:06.0224 4036 Ndisuio - ok
18:47:06.0245 4036 [ 267C415EADCBE53C9CA873DEE39CF3A4 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
18:47:06.0249 4036 NdisWan - ok
18:47:06.0272 4036 [ AF7E7C63DCEF3F8772726F86039D6EB4 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
18:47:06.0274 4036 NDProxy - ok
18:47:06.0312 4036 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
18:47:06.0314 4036 NetBIOS - ok
18:47:06.0343 4036 [ DD52A733BF4CA5AF84562A5E2F963B91 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
18:47:06.0348 4036 NetBT - ok
18:47:06.0362 4036 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] Netlogon C:\Windows\system32\lsass.exe
18:47:06.0366 4036 Netlogon - ok
18:47:06.0436 4036 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
18:47:06.0450 4036 Netman - ok
18:47:06.0518 4036 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
18:47:06.0525 4036 NetMsmqActivator - ok
18:47:06.0534 4036 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
18:47:06.0538 4036 NetPipeActivator - ok
18:47:06.0573 4036 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
18:47:06.0580 4036 netprofm - ok
18:47:06.0586 4036 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
18:47:06.0588 4036 NetTcpActivator - ok
18:47:06.0598 4036 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
18:47:06.0599 4036 NetTcpPortSharing - ok
18:47:06.0835 4036 [ EF51B405AD8ACAAE6F0231290D20F516 ] NETw5s32 C:\Windows\system32\DRIVERS\NETw5s32.sys
18:47:07.0002 4036 NETw5s32 - ok
18:47:07.0588 4036 [ 58218EC6B61B1169CF54AAB0D00F5FE2 ] netw5v32 C:\Windows\system32\DRIVERS\netw5v32.sys
18:47:07.0746 4036 netw5v32 - ok
18:47:07.0778 4036 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
18:47:07.0780 4036 nfrd960 - ok
18:47:07.0808 4036 [ 2226496E34BD40734946A054B1CD657F ] NlaSvc C:\Windows\System32\nlasvc.dll
18:47:07.0816 4036 NlaSvc - ok
18:47:07.0844 4036 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
18:47:07.0846 4036 Npfs - ok
18:47:07.0864 4036 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
18:47:07.0869 4036 nsi - ok
18:47:07.0893 4036 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
18:47:07.0895 4036 nsiproxy - ok
18:47:07.0979 4036 [ 3795DCD21F740EE799FB7223234215AF ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
18:47:08.0038 4036 Ntfs - ok
18:47:08.0058 4036 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
18:47:08.0087 4036 Null - ok
18:47:08.0136 4036 [ 93C0F383B39B1F5FE7203E3270D4CF52 ] NVHDA C:\Windows\system32\drivers\nvhda32v.sys
18:47:08.0140 4036 NVHDA - ok
18:47:08.0567 4036 [ 66B4BF606FCC7F0622D4A21BB1461089 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
18:47:08.0623 4036 nvlddmkm - ok
18:47:08.0669 4036 [ 3F3D04B1D08D43C16EA7963954EC768D ] nvraid C:\Windows\system32\DRIVERS\nvraid.sys
18:47:08.0673 4036 nvraid - ok
18:47:08.0717 4036 [ C99F251A5DE63C6F129CF71933ACED0F ] nvstor C:\Windows\system32\DRIVERS\nvstor.sys
18:47:08.0721 4036 nvstor - ok
18:47:08.0784 4036 [ D122F7C5F79C68868F5DC28CEFEB2ECF ] nvsvc C:\Windows\system32\nvvsvc.exe
18:47:08.0799 4036 nvsvc - ok
18:47:08.0829 4036 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\DRIVERS\nv_agp.sys
18:47:08.0832 4036 nv_agp - ok
18:47:08.0962 4036 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
18:47:08.0985 4036 odserv - ok
18:47:09.0025 4036 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
18:47:09.0037 4036 ohci1394 - ok
18:47:09.0119 4036 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:47:09.0126 4036 ose - ok
18:47:09.0186 4036 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
18:47:09.0201 4036 p2pimsvc - ok
18:47:09.0235 4036 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
18:47:09.0244 4036 p2psvc - ok
18:47:09.0271 4036 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
18:47:09.0273 4036 Parport - ok
18:47:09.0323 4036 [ 66D3415C159741ADE7038A277EFFF99F ] partmgr C:\Windows\system32\drivers\partmgr.sys
18:47:09.0325 4036 partmgr - ok
18:47:09.0341 4036 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
18:47:09.0344 4036 Parvdm - ok
18:47:09.0365 4036 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
18:47:09.0372 4036 PcaSvc - ok
18:47:09.0397 4036 [ C858CB77C577780ECC456A892E7E7D0F ] pci C:\Windows\system32\DRIVERS\pci.sys
18:47:09.0402 4036 pci - ok
18:47:09.0422 4036 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\DRIVERS\pciide.sys
18:47:09.0424 4036 pciide - ok
18:47:09.0447 4036 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
18:47:09.0451 4036 pcmcia - ok
18:47:09.0488 4036 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
18:47:09.0490 4036 pcw - ok
18:47:09.0520 4036 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
18:47:09.0549 4036 PEAUTH - ok
18:47:09.0624 4036 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
18:47:09.0703 4036 PeerDistSvc - ok
18:47:09.0917 4036 [ 9C1BFF7910C89A1D12E57343475840CB ] pla C:\Windows\system32\pla.dll
18:47:09.0993 4036 pla - ok
18:47:10.0065 4036 [ 71DEF5EC79774C798342D0EA16E41780 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
18:47:10.0083 4036 PlugPlay - ok
18:47:10.0251 4036 [ 205E1B699FD3F2F9B036EEA2EC30C620 ] PnkBstrA C:\Windows\system32\PnkBstrA.exe
18:47:10.0263 4036 PnkBstrA - ok
18:47:10.0301 4036 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
18:47:10.0326 4036 PNRPAutoReg - ok
18:47:10.0364 4036 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
18:47:10.0379 4036 PNRPsvc - ok
18:47:10.0417 4036 [ 48E1B75C6DC0232FD92BAAE4BD344721 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
18:47:10.0460 4036 PolicyAgent - ok
18:47:10.0512 4036 [ DBFF83F709A91049621C1D35DD45C92C ] Power C:\Windows\system32\umpo.dll
18:47:10.0527 4036 Power - ok
18:47:10.0595 4036 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
18:47:10.0600 4036 PptpMiniport - ok
18:47:10.0650 4036 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
18:47:10.0678 4036 Processor - ok
18:47:10.0722 4036 [ 630CF26F0227498B7D5A92B12548960F ] ProfSvc C:\Windows\system32\profsvc.dll
18:47:10.0736 4036 ProfSvc - ok
18:47:10.0785 4036 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] ProtectedStorage C:\Windows\system32\lsass.exe
18:47:10.0793 4036 ProtectedStorage - ok
18:47:10.0852 4036 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
18:47:10.0857 4036 Psched - ok
18:47:11.0034 4036 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
18:47:11.0111 4036 ql2300 - ok
18:47:11.0149 4036 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
18:47:11.0151 4036 ql40xx - ok
18:47:11.0187 4036 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
18:47:11.0202 4036 QWAVE - ok
18:47:11.0229 4036 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
18:47:11.0231 4036 QWAVEdrv - ok
18:47:11.0244 4036 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
18:47:11.0246 4036 RasAcd - ok
18:47:11.0275 4036 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
18:47:11.0278 4036 RasAgileVpn - ok
18:47:11.0309 4036 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
18:47:11.0317 4036 RasAuto - ok
18:47:11.0352 4036 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
18:47:11.0355 4036 Rasl2tp - ok
18:47:11.0372 4036 [ 0CE66EC736B7FC526D78F7624C7D2A94 ] RasMan C:\Windows\System32\rasmans.dll
18:47:11.0380 4036 RasMan - ok
18:47:11.0428 4036 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
18:47:11.0431 4036 RasPppoe - ok
18:47:11.0446 4036 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
18:47:11.0448 4036 RasSstp - ok
18:47:11.0477 4036 [ 835D7E81BF517A3B72384BDCC85E1CE6 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
18:47:11.0483 4036 rdbss - ok
18:47:11.0521 4036 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
18:47:11.0524 4036 rdpbus - ok
18:47:11.0542 4036 [ 1E016846895B15A99F9A176A05029075 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
18:47:11.0545 4036 RDPCDD - ok
18:47:11.0613 4036 [ C5FF95883FFEF704D50C40D21CFB3AB5 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
18:47:11.0619 4036 RDPDR - ok
18:47:11.0662 4036 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
18:47:11.0663 4036 RDPENCDD - ok
18:47:11.0677 4036 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
18:47:11.0679 4036 RDPREFMP - ok
18:47:11.0726 4036 [ C5B8D47A4688DE9D335204EA757C2240 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
18:47:11.0731 4036 RDPWD - ok
18:47:11.0759 4036 [ 4EA225BF1CF05E158853F30A99CA29A7 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
18:47:11.0763 4036 rdyboost - ok
18:47:11.0833 4036 [ A171029D6B6C2D93C22861A347F43C2A ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
18:47:11.0842 4036 RegSrvc - ok
18:47:11.0874 4036 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
18:47:11.0880 4036 RemoteAccess - ok
18:47:11.0927 4036 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
18:47:11.0955 4036 RemoteRegistry - ok
18:47:12.0020 4036 [ 564297827D213F52C7A3A2FF749568CA ] ROOTMODEM C:\Windows\system32\Drivers\RootMdm.sys
18:47:12.0024 4036 ROOTMODEM - ok
18:47:12.0043 4036 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
18:47:12.0056 4036 RpcEptMapper - ok
18:47:12.0107 4036 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
18:47:12.0112 4036 RpcLocator - ok
18:47:12.0130 4036 [ B82CD39E336973359D7C9BF911E8E84F ] RpcSs C:\Windows\system32\rpcss.dll
18:47:12.0138 4036 RpcSs - ok
18:47:12.0172 4036 [ FEDD2710B75BE3ECF078ADACE790C423 ] RsFx0102 C:\Windows\system32\DRIVERS\RsFx0102.sys
18:47:12.0177 4036 RsFx0102 - ok
18:47:12.0228 4036 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
18:47:12.0232 4036 rspndr - ok
18:47:12.0275 4036 [ 80B66A4181F782884A815E69D0AFA743 ] RTL8167 C:\Windows\system32\DRIVERS\Rt86win7.sys
18:47:12.0278 4036 RTL8167 - ok
18:47:12.0336 4036 [ 5423D8437051E89DD34749F242C98648 ] s3cap C:\Windows\system32\DRIVERS\vms3cap.sys
18:47:12.0363 4036 s3cap - ok
18:47:12.0396 4036 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] SamSs C:\Windows\system32\lsass.exe
18:47:12.0400 4036 SamSs - ok
18:47:12.0428 4036 [ 34EE0C44B724E3E4CE2EFF29126DE5B5 ] sbp2port C:\Windows\system32\DRIVERS\sbp2port.sys
18:47:12.0431 4036 sbp2port - ok
18:47:12.0459 4036 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
18:47:12.0468 4036 SCardSvr - ok
18:47:12.0511 4036 [ A95C54B2AC3CC9C73FCDF9E51A1D6B51 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
18:47:12.0515 4036 scfilter - ok
18:47:12.0582 4036 [ DF1E5C82E4D09CF8105CC644980C4803 ] Schedule C:\Windows\system32\schedsvc.dll
18:47:12.0601 4036 Schedule - ok
18:47:12.0627 4036 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] SCPolicySvc C:\Windows\System32\certprop.dll
18:47:12.0629 4036 SCPolicySvc - ok
18:47:12.0688 4036 [ 7B48CFF3A475FE849DEA65EC4D35C425 ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
18:47:12.0715 4036 sdbus - ok
18:47:12.0748 4036 [ 5FD90ABDBFAEE85986802622CBB03446 ] SDRSVC C:\Windows\System32\SDRSVC.dll
18:47:12.0756 4036 SDRSVC - ok
18:47:12.0794 4036 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
18:47:12.0796 4036 secdrv - ok
18:47:12.0826 4036 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
18:47:12.0833 4036 seclogon - ok
18:47:12.0861 4036 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll
18:47:12.0867 4036 SENS - ok
18:47:12.0907 4036 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
18:47:12.0943 4036 SensrSvc - ok
18:47:12.0979 4036 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
18:47:12.0981 4036 Serenum - ok
18:47:13.0015 4036 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
18:47:13.0018 4036 Serial - ok
18:47:13.0029 4036 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
18:47:13.0031 4036 sermouse - ok
18:47:13.0078 4036 [ 8F55CE568C543D5ADF45C409D16718FC ] SessionEnv C:\Windows\system32\sessenv.dll
18:47:13.0095 4036 SessionEnv - ok
18:47:13.0121 4036 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\DRIVERS\sffdisk.sys
18:47:13.0122 4036 sffdisk - ok
18:47:13.0135 4036 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\DRIVERS\sffp_mmc.sys
18:47:13.0137 4036 sffp_mmc - ok
18:47:13.0142 4036 [ 4F1E5B0FE7C8050668DBFADE8999AEFB ] sffp_sd C:\Windows\system32\DRIVERS\sffp_sd.sys
18:47:13.0144 4036 sffp_sd - ok
18:47:13.0178 4036 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
18:47:13.0179 4036 sfloppy - ok
18:47:13.0215 4036 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
18:47:13.0220 4036 SharedAccess - ok
18:47:13.0305 4036 [ CD2E48FA5B29EE2B3B5858056D246EF2 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
18:47:13.0322 4036 ShellHWDetection - ok
18:47:13.0378 4036 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\DRIVERS\sisagp.sys
18:47:13.0397 4036 sisagp - ok
18:47:13.0424 4036 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
18:47:13.0428 4036 SiSRaid2 - ok
18:47:13.0455 4036 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
18:47:13.0460 4036 SiSRaid4 - ok
18:47:13.0539 4036 [ DDAA5F4A6B958FC313EBD02DD925752F ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
18:47:13.0545 4036 SkypeUpdate - ok
18:47:13.0575 4036 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
18:47:13.0577 4036 Smb - ok
18:47:13.0640 4036 [ 7E6628D18D30F14A56C0D9116310AB8A ] smserial C:\Windows\system32\DRIVERS\smserial.sys
18:47:13.0687 4036 smserial - ok
18:47:13.0733 4036 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
18:47:13.0740 4036 SNMPTRAP - ok
18:47:13.0783 4036 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
18:47:13.0785 4036 spldr - ok
18:47:13.0826 4036 [ D1BB750EB51694DE183E08B9C33BE5B2 ] Spooler C:\Windows\System32\spoolsv.exe
18:47:13.0851 4036 Spooler - ok
18:47:14.0312 4036 [ 4C287F9069FEDBD791178876EE9DE536 ] sppsvc C:\Windows\system32\sppsvc.exe
18:47:14.0409 4036 sppsvc - ok
18:47:14.0437 4036 [ D8E3E19EEBDAB49DD4A8D3062EAD4EC7 ] sppuinotify C:\Windows\system32\sppuinotify.dll
18:47:14.0443 4036 sppuinotify - ok
18:47:14.0507 4036 [ CDDDEC541BC3C96F91ECB48759673505 ] sptd C:\Windows\system32\Drivers\sptd.sys
18:47:14.0509 4036 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: CDDDEC541BC3C96F91ECB48759673505
18:47:14.0512 4036 sptd ( LockedFile.Multi.Generic ) - warning
18:47:14.0513 4036 sptd - detected LockedFile.Multi.Generic (1)
18:47:14.0556 4036 [ EB2FD937449B7ACEB39372F875EB8E78 ] SQLAgent$SQLEXPRESS c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE
18:47:14.0562 4036 SQLAgent$SQLEXPRESS - ok
18:47:14.0597 4036 [ 99DE6ACFA5CA83FAD6A765C81C6F129F ] SQLBrowser c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
18:47:14.0603 4036 SQLBrowser - ok
18:47:14.0632 4036 [ 637A0F23F9012358E92E6F99835494D1 ] SQLWriter c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
18:47:14.0634 4036 SQLWriter - ok
18:47:14.0678 4036 [ C4A027B8C0BD3FC0699F41FA5E9E0C87 ] srv C:\Windows\system32\DRIVERS\srv.sys
18:47:14.0681 4036 srv - ok
18:47:14.0755 4036 [ 414BB592CAD8A79649D01F9D94318FB3 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
18:47:14.0764 4036 srv2 - ok
18:47:14.0776 4036 [ FF207D67700AA18242AAF985D3E7D8F4 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
18:47:14.0779 4036 srvnet - ok
18:47:14.0811 4036 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
18:47:14.0820 4036 SSDPSRV - ok
18:47:14.0833 4036 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
18:47:14.0842 4036 SstpSvc - ok
18:47:14.0882 4036 Steam Client Service - ok
18:47:14.0912 4036 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
18:47:14.0914 4036 stexstor - ok
18:47:14.0960 4036 [ A22825E7BB7018E8AF3E229A5AF17221 ] StiSvc C:\Windows\System32\wiaservc.dll
18:47:14.0994 4036 StiSvc - ok
18:47:15.0038 4036 [ 957E346CA948668F2496A6CCF6FF82CC ] storflt C:\Windows\system32\DRIVERS\vmstorfl.sys
18:47:15.0046 4036 storflt - ok
18:47:15.0070 4036 [ 0BF669F0A910BEDA4A32258D363AF2A5 ] StorSvc C:\Windows\system32\storsvc.dll
18:47:15.0078 4036 StorSvc - ok
18:47:15.0094 4036 [ D5751969DC3E4B88BF482AC8EC9FE019 ] storvsc C:\Windows\system32\DRIVERS\storvsc.sys
18:47:15.0096 4036 storvsc - ok
18:47:15.0117 4036 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
18:47:15.0118 4036 swenum - ok
18:47:15.0150 4036 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
18:47:15.0165 4036 swprv - ok
18:47:15.0224 4036 [ 04105C8DA62353589C29BDAEB8D88BD8 ] SysMain C:\Windows\system32\sysmain.dll
18:47:15.0244 4036 SysMain - ok
18:47:15.0265 4036 [ FCFB6C552FBC0DA299799CBD50AD9FD4 ] TabletInputService C:\Windows\System32\TabSvc.dll
18:47:15.0280 4036 TabletInputService - ok
18:47:15.0300 4036 [ 2F46B0C70A4ADC8C90CF825DA3B4FEAF ] TapiSrv C:\Windows\System32\tapisrv.dll
18:47:15.0307 4036 TapiSrv - ok
18:47:15.0329 4036 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
18:47:15.0335 4036 TBS - ok

18:47:15.0418 4036 [ 55E9965552741F3850CB22CBBA9671ED ] Tcpip C:\Windows\system32\drivers\tcpip.sys
18:47:15.0477 4036 Tcpip - ok
18:47:15.0611 4036 [ 55E9965552741F3850CB22CBBA9671ED ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
18:47:15.0629 4036 TCPIP6 - ok
18:47:15.0673 4036 [ E64444523ADD154F86567C469BC0B17F ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
18:47:15.0674 4036 tcpipreg - ok
18:47:15.0705 4036 [ 1875C1490D99E70E449E3AFAE9FCBADF ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
18:47:15.0706 4036 TDPIPE - ok
18:47:15.0749 4036 [ 7156308896D34EA75A582F9A09E50C17 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
18:47:15.0753 4036 TDTCP - ok
18:47:15.0781 4036 [ CB39E896A2A83702D1737BFD402B3542 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
18:47:15.0784 4036 tdx - ok
18:47:15.0805 4036 [ C36F41EE20E6999DBF4B0425963268A5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
18:47:15.0807 4036 TermDD - ok
18:47:15.0845 4036 [ A01E50A04D7B1960B33E92B9080E6A94 ] TermService C:\Windows\System32\termsrv.dll
18:47:15.0868 4036 TermService - ok
18:47:15.0885 4036 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
18:47:15.0892 4036 Themes - ok
18:47:15.0898 4036 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
18:47:15.0902 4036 THREADORDER - ok
18:47:15.0969 4036 [ AC88D258F20909EEB91796F490CFBB73 ] TOSHIBA Bluetooth Service C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
18:47:15.0974 4036 TOSHIBA Bluetooth Service - ok
18:47:16.0026 4036 [ 90AFA1A4451BBBEE87C9F18A665D8121 ] tosporte C:\Windows\system32\DRIVERS\tosporte.sys
18:47:16.0029 4036 tosporte - ok
18:47:16.0071 4036 [ 00371CE4DA09B68BA0FF953E61820981 ] tosrfbd C:\Windows\system32\DRIVERS\tosrfbd.sys
18:47:16.0078 4036 tosrfbd - ok
18:47:16.0118 4036 [ 74392BAB3F0D4810DA8436EC79D6955D ] tosrfbnp C:\Windows\system32\Drivers\tosrfbnp.sys
18:47:16.0122 4036 tosrfbnp - ok
18:47:16.0151 4036 [ 1AD9EB1B5ABD0AEEE4084C8153476F1E ] Tosrfcom C:\Windows\system32\Drivers\tosrfcom.sys
18:47:16.0153 4036 Tosrfcom - ok
18:47:16.0175 4036 [ A72A3473180F378CC07D342803FFD580 ] Tosrfhid C:\Windows\system32\DRIVERS\Tosrfhid.sys
18:47:16.0178 4036 Tosrfhid - ok
18:47:16.0209 4036 [ B2A1A6538245FD69578224BBF2FD4677 ] tosrfnds C:\Windows\system32\DRIVERS\tosrfnds.sys
18:47:16.0211 4036 tosrfnds - ok
18:47:16.0229 4036 [ F1CA74CCA8241D8B8A024AECC643C547 ] TosRfSnd C:\Windows\system32\drivers\tosrfsnd.sys
18:47:16.0233 4036 TosRfSnd - ok
18:47:16.0247 4036 [ F400FB9616261A1B66E6D2E04B6C3538 ] Tosrfusb C:\Windows\system32\DRIVERS\tosrfusb.sys
18:47:16.0249 4036 Tosrfusb - ok
18:47:16.0278 4036 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
18:47:16.0286 4036 TrkWks - ok
18:47:16.0344 4036 [ 41A4C781D2286208D397D72099304133 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
18:47:16.0350 4036 TrustedInstaller - ok
18:47:16.0374 4036 [ 98AE6FA07D12CB4EC5CF4A9BFA5F4242 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
18:47:16.0378 4036 tssecsrv - ok
18:47:16.0412 4036 [ 3E461D890A97F9D4C168F5FDA36E1D00 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
18:47:16.0415 4036 tunnel - ok
18:47:16.0427 4036 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
18:47:16.0429 4036 uagp35 - ok
18:47:16.0450 4036 [ 09CC3E16F8E5EE7168E01CF8FCBE061A ] udfs C:\Windows\system32\DRIVERS\udfs.sys
18:47:16.0455 4036 udfs - ok
18:47:16.0480 4036 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
18:47:16.0486 4036 UI0Detect - ok
18:47:16.0519 4036 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\DRIVERS\uliagpkx.sys
18:47:16.0521 4036 uliagpkx - ok
18:47:16.0554 4036 [ 049B3A50B3D646BAEEEE9EEC9B0668DC ] umbus C:\Windows\system32\DRIVERS\umbus.sys
18:47:16.0555 4036 umbus - ok
18:47:16.0572 4036 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
18:47:16.0574 4036 UmPass - ok
18:47:16.0617 4036 [ 8ECACA5454844F66386F7BE4AE0D7CD1 ] UmRdpService C:\Windows\System32\umrdp.dll
18:47:16.0632 4036 UmRdpService - ok
18:47:16.0661 4036 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
18:47:16.0667 4036 upnphost - ok
18:47:16.0705 4036 [ 8455C4ED038EFD09E99327F9D2D48FFA ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
18:47:16.0707 4036 usbccgp - ok
18:47:16.0726 4036 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\DRIVERS\usbcir.sys
18:47:16.0728 4036 usbcir - ok
18:47:16.0741 4036 [ 1C333BFD60F2FED2C7AD5DAF533CB742 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
18:47:16.0743 4036 usbehci - ok
18:47:16.0759 4036 [ EE6EF93CCFA94FAE8C6AB298273D8AE2 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
18:47:16.0764 4036 usbhub - ok
18:47:16.0789 4036 [ A6FB7957EA7AFB1165991E54CE934B74 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
18:47:16.0791 4036 usbohci - ok
18:47:16.0803 4036 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
18:47:16.0805 4036 usbprint - ok
18:47:16.0862 4036 [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
18:47:16.0865 4036 usbscan - ok
18:47:16.0898 4036 [ D8889D56E0D27E57ED4591837FE71D27 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:47:16.0901 4036 USBSTOR - ok
18:47:16.0918 4036 [ 78780C3EBCE17405B1CCD07A3A8A7D72 ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
18:47:16.0920 4036 usbuhci - ok
18:47:16.0964 4036 [ F642A7E4BF78CFA359CCA0A3557C28D7 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
18:47:16.0968 4036 usbvideo - ok
18:47:17.0006 4036 [ D82F43D15FDAA666856C0190CB73E7C9 ] usb_rndisx C:\Windows\system32\DRIVERS\usb8023x.sys
18:47:17.0008 4036 usb_rndisx - ok
18:47:17.0036 4036 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
18:47:17.0043 4036 UxSms - ok
18:47:17.0053 4036 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] VaultSvc C:\Windows\system32\lsass.exe
18:47:17.0057 4036 VaultSvc - ok
18:47:17.0090 4036 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\DRIVERS\vdrvroot.sys
18:47:17.0092 4036 vdrvroot - ok
18:47:17.0122 4036 [ 8C4E7C49D3641BC9E299E466A7F8867D ] vds C:\Windows\System32\vds.exe
18:47:17.0156 4036 vds - ok
18:47:17.0189 4036 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
18:47:17.0208 4036 vga - ok
18:47:17.0253 4036 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
18:47:17.0256 4036 VgaSave - ok
18:47:17.0279 4036 [ 3BE6E1F3A4F1AFEC8CEE0D7883F93583 ] vhdmp C:\Windows\system32\DRIVERS\vhdmp.sys
18:47:17.0283 4036 vhdmp - ok
18:47:17.0306 4036 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\DRIVERS\viaagp.sys
18:47:17.0309 4036 viaagp - ok
18:47:17.0327 4036 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
18:47:17.0329 4036 ViaC7 - ok
18:47:17.0354 4036 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\DRIVERS\viaide.sys
18:47:17.0356 4036 viaide - ok
18:47:17.0397 4036 [ 379B349F65F453D2A6E75EA6B7448E49 ] vmbus C:\Windows\system32\DRIVERS\vmbus.sys
18:47:17.0403 4036 vmbus - ok
18:47:17.0434 4036 [ EC2BBAB4B84D0738C6C83D2234DC36FE ] VMBusHID C:\Windows\system32\DRIVERS\VMBusHID.sys
18:47:17.0442 4036 VMBusHID - ok
18:47:17.0456 4036 [ 384E5A2AA49934295171E499F86BA6F3 ] volmgr C:\Windows\system32\DRIVERS\volmgr.sys
18:47:17.0459 4036 volmgr - ok
18:47:17.0495 4036 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
18:47:17.0501 4036 volmgrx - ok
18:47:17.0534 4036 [ 58DF9D2481A56EDDE167E51B334D44FD ] volsnap C:\Windows\system32\DRIVERS\volsnap.sys
18:47:17.0540 4036 volsnap - ok
18:47:17.0559 4036 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
18:47:17.0563 4036 vsmraid - ok
18:47:17.0616 4036 [ 7EA2BCD94D9CFAF4C556F5CC94532A6C ] VSS C:\Windows\system32\vssvc.exe
18:47:17.0687 4036 VSS - ok
18:47:17.0722 4036 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
18:47:17.0724 4036 vwifibus - ok
18:47:17.0741 4036 [ 7090D3436EEB4E7DA3373090A23448F7 ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
18:47:17.0744 4036 vwififlt - ok
18:47:17.0774 4036 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
18:47:17.0796 4036 W32Time - ok
18:47:17.0809 4036 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
18:47:17.0811 4036 WacomPen - ok
18:47:17.0835 4036 [ 692A712062146E96D28BA0B7D75DE31B ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
18:47:17.0838 4036 WANARP - ok
18:47:17.0843 4036 [ 692A712062146E96D28BA0B7D75DE31B ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
18:47:17.0845 4036 Wanarpv6 - ok
18:47:17.0990 4036 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
18:47:18.0059 4036 WatAdminSvc - ok
18:47:18.0142 4036 [ 7790B77FE1E5EE47DCC66247095BB4C9 ] wbengine C:\Windows\system32\wbengine.exe
18:47:18.0204 4036 wbengine - ok
18:47:18.0223 4036 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
18:47:18.0233 4036 WbioSrvc - ok
18:47:18.0242 4036 [ D0F88AA11EE1A62BCC6D6A8A7783CA11 ] wcncsvc C:\Windows\System32\wcncsvc.dll
18:47:18.0250 4036 wcncsvc - ok
18:47:18.0272 4036 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
18:47:18.0278 4036 WcsPlugInService - ok
18:47:18.0305 4036 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
18:47:18.0307 4036 Wd - ok
18:47:18.0338 4036 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
18:47:18.0343 4036 Wdf01000 - ok
18:47:18.0360 4036 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
18:47:18.0366 4036 WdiServiceHost - ok
18:47:18.0370 4036 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
18:47:18.0376 4036 WdiSystemHost - ok
18:47:18.0394 4036 [ D87C7D2C517F82A5AB7A73E203063D9E ] WebClient C:\Windows\System32\webclnt.dll
18:47:18.0405 4036 WebClient - ok
18:47:18.0437 4036 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
18:47:18.0444 4036 Wecsvc - ok
18:47:18.0468 4036 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
18:47:18.0474 4036 wercplsupport - ok
18:47:18.0483 4036 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
18:47:18.0489 4036 WerSvc - ok
18:47:18.0522 4036 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
18:47:18.0524 4036 WfpLwf - ok
18:47:18.0536 4036 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
18:47:18.0538 4036 WIMMount - ok
18:47:18.0633 4036 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
18:47:18.0666 4036 WinDefend - ok
18:47:18.0691 4036 WinHttpAutoProxySvc - ok
18:47:18.0764 4036 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
18:47:18.0769 4036 Winmgmt - ok
18:47:18.0872 4036 [ C4F5D3901D1B41D602DDC196E0B95B51 ] WinRM C:\Windows\system32\WsmSvc.dll
18:47:18.0939 4036 WinRM - ok
18:47:19.0002 4036 [ 30FC6E5448D0CBAAA95280EEEF7FEDAE ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
18:47:19.0003 4036 WinUsb - ok
18:47:19.0040 4036 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
18:47:19.0050 4036 Wlansvc - ok
18:47:19.0139 4036 [ 5144AE67D60EC653F97DDF3FEED29E77 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
18:47:19.0204 4036 wlidsvc - ok
18:47:19.0244 4036 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
18:47:19.0245 4036 WmiAcpi - ok
18:47:19.0287 4036 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
18:47:19.0291 4036 wmiApSrv - ok
18:47:19.0390 4036 [ 77FBD400984CF72BA0FC4B3489D65F74 ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
18:47:19.0436 4036 WMPNetworkSvc - ok
18:47:19.0456 4036 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
18:47:19.0465 4036 WPCSvc - ok
18:47:19.0477 4036 [ B7F658A2EBC07129538AD9AB35212637 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
18:47:19.0484 4036 WPDBusEnum - ok
18:47:19.0498 4036 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
18:47:19.0500 4036 ws2ifsl - ok
18:47:19.0521 4036 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\System32\wscsvc.dll
18:47:19.0527 4036 wscsvc - ok
18:47:19.0532 4036 WSearch - ok
18:47:19.0698 4036 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
18:47:19.0720 4036 wuauserv - ok
18:47:19.0776 4036 [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
18:47:19.0782 4036 WudfPf - ok
18:47:19.0823 4036 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
18:47:19.0827 4036 WUDFRd - ok
18:47:19.0850 4036 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
18:47:19.0858 4036 wudfsvc - ok
18:47:19.0885 4036 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll
18:47:19.0896 4036 WwanSvc - ok
18:47:19.0940 4036 ================ Scan global ===============================
18:47:20.0009 4036 [ 9A595DF601070DA78C40481120DD2C06 ] C:\Windows\system32\basesrv.dll
18:47:20.0065 4036 [ 008F51AE989C3DF1CBAF8B39DC423CCC ] C:\Windows\system32\winsrv.dll
18:47:20.0110 4036 [ 008F51AE989C3DF1CBAF8B39DC423CCC ] C:\Windows\system32\winsrv.dll
18:47:20.0141 4036 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
18:47:20.0179 4036 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
18:47:20.0185 4036 [Global] - ok
18:47:20.0186 4036 ================ Scan MBR ==================================
18:47:20.0208 4036 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
18:47:20.0821 4036 \Device\Harddisk0\DR0 - ok
18:47:20.0821 4036 ================ Scan VBR ==================================
18:47:20.0852 4036 [ 124D2027EB86A3D39C504DD56AB9EAA9 ] \Device\Harddisk0\DR0\Partition1
18:47:20.0856 4036 \Device\Harddisk0\DR0\Partition1 - ok
18:47:20.0913 4036 [ 0E7FBBAB8E1AD94B633B8A192DBADC15 ] \Device\Harddisk0\DR0\Partition2
18:47:20.0931 4036 \Device\Harddisk0\DR0\Partition2 - ok
18:47:20.0932 4036 ============================================================
18:47:20.0932 4036 Scan finished
18:47:20.0932 4036 ============================================================
18:47:20.0950 4196 Detected object count: 1
18:47:20.0950 4196 Actual detected object count: 1
18:48:17.0604 4196 sptd ( LockedFile.Multi.Generic ) - skipped by user
18:48:17.0605 4196 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
18:48:19.0661 5104 Deinitialize success

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.