PC-HELP.CZ

EDIT: Důvod kontroly
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:09:31, on 1.2.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Users\Valisek\AppData\Local\MagicHoldem\MagicHoldemLauncher.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
C:\Users\Valisek\AppData\Local\vghd\bin\vghd.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe
C:\Program Files (x86)\OpenVPN Technologies\PrivateTunnel\core\ovpntray.exe
C:\Users\Valisek\AppData\Local\MagicHoldem\MagicHoldem.exe
C:\Users\Valisek\AppData\Local\vghd\bin\VirtuaGirl_Downloader.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Valisek\AppData\Roaming\rundll32 .exe
C:\Users\Valisek\AppData\Roaming\rundll32 .exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = iwsa-01.ph.koop.cz:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~4\Office15\GROOVEEX.DLL
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Freemake.YoutubeButton - {e9e8eb35-ff77-455d-b677-91e5e4fc06c2} - mscoree.dll (file missing)
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Dolby PCEE4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Windows Services for Processes] C:\Users\Valisek\AppData\Roaming\svchost.exe
O4 - HKCU\..\Run: [rundll32] C:\Users\Valisek\AppData\Roaming\rundll32 .exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3331623675-406341173-485340118-1007\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'postgres')
O4 - HKUS\S-1-5-21-3331623675-406341173-485340118-1007\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe" (User 'postgres')
O4 - HKUS\S-1-5-21-3331623675-406341173-485340118-1007\..\Run: [AdobeBridge] (User 'postgres')
O4 - HKUS\S-1-5-21-3331623675-406341173-485340118-1007\..\Run: [Windows Services for Processes] C:\Users\postgres\AppData\Roaming\svchost.exe (User 'postgres')
O4 - HKUS\S-1-5-21-3331623675-406341173-485340118-1007\..\Run: [rundll32] C:\Users\postgres\AppData\Roaming\rundll32 .exe (User 'postgres')
O4 - HKUS\S-1-5-21-3331623675-406341173-485340118-1007\..\Run: [Facebook Update] "C:\Users\Valisek\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver (User 'postgres')
O4 - HKUS\S-1-5-21-3331623675-406341173-485340118-1007\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'postgres')
O4 - HKUS\S-1-5-21-3331623675-406341173-485340118-1008\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3331623675-406341173-485340118-1008\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O4 - Startup: CurseClientStartup.ccip
O4 - Startup: DesktopVideoPlayer.lnk = Valisek\AppData\Local\vghd\bin\vghd.exe
O4 - Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O4 - Startup: rundll32 .exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Users\Valisek\Desktop\PartyPoker.lnk (HKCU)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Users\Valisek\Desktop\PartyPoker.lnk (HKCU)
O9 - Extra button: @C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\IE\IEPluginDownloader.dll,-4 - {FC0EA236-1C31-418e-BFCE-A76DDB7F1362} - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\IE\IEPluginDownloader.dll (HKCU)
O9 - Extra 'Tools' menuitem: Freemake Video Downloader - {FC0EA236-1C31-418e-BFCE-A76DDB7F1362} - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\IE\IEPluginDownloader.dll (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Dragon Age: Origins - Content Updater (DAUpdaterSvc) - BioWare - C:\Games\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FreemakeVideoCapture - Freemake - C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Lookout Citadel Server (LkCitadelServer) - National Instruments, Inc. - C:\Windows\SysWOW64\lkcitdl.exe
O23 - Service: National Instruments PSP Server Locator (lkClassAds) - National Instruments, Inc. - C:\Windows\SysWOW64\lkads.exe
O23 - Service: National Instruments Time Synchronization (lkTimeSync) - National Instruments, Inc. - C:\Windows\SysWOW64\lktsrv.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MagicHoldem Service (MagicHoldem) - Unknown owner - C:\Users\Valisek\AppData\Local\MagicHoldem\MagicHoldem_service.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: National Instruments Domain Service (NIDomainService) - National Instruments, Inc. - C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe
O23 - Service: NI Service Locator (niSvcLoc) - National Instruments Corp. - C:\Windows\SysWOW64\nisvcloc.exe
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: OpenVPN Access Client (OpenVPNAccessClient) - Unknown owner - C:\Program Files (x86)\OpenVPN Technologies\PrivateTunnel\core\capiws.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: postgresql-8.4 - PostgreSQL Server 8.4 (postgresql-8.4) - PostgreSQL Global Development Group - c:/postgreSQL/bin/pg_ctl.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.4.2\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.5.24\bin\mysqld.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 19900 bytes

Důvod kontroly popsán zde - viewtopic.php?f=46&t=102156

Fixni:

Tahle proxy Ti něco říká?
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = iwsa-01.ph.koop.cz:8080

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

===================================================

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

1) Fixnul jsem vše, ale smazalo mi to rundll.exe
2) Jojo, tu proxy znám
3)Provedeno bez problémů
4) Jen jsem to letmo prolítnul a jsem zděšen
Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.02.01.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Valisek :: VALISEK-PC [administrátor]

Ochrana: Povolena

1.2.2013 15:58:16
MBAM-log-2013-02-01 (16-02-55).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 262640
Uplynulý čas: 4 minut, 23 sekund

Nalezené procesy v paměti: 82
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 3768 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 1868 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 2800 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 6532 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5680 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 4608 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5612 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 4624 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 3760 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5620 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7548 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 1932 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 4788 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5656 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 6508 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5652 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5704 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 1032 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 1848 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7444 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7524 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 6568 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 6588 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7400 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 4612 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5672 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7408 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5388 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 6612 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7372 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5604 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5384 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 8028 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7384 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7376 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 9212 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 6540 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5636 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 8368 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 6560 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 8276 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 9208 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5628 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 2860 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7448 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 1108 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 2872 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 8296 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5564 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5696 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 4632 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 8216 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5664 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5700 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 4596 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7552 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7184 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7560 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 924 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 6604 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7536 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 9192 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 2820 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 3708 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 9204 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 2808 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 8408 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7568 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7288 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 5228 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 3572 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 8172 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 2652 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 3144 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7960 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7180 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 6164 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 7988 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 6116 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 8632 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 6340 -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> 8932 -> Nebyla provedena žádná instrukce.

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 3
HKCR\CLSID\{E45C7ECB-AF0B-B6DD-B6D2-CECDBFAD2ACE} (Trojan.Agent) -> Nebyla provedena žádná instrukce.
HKCU\SOFTWARE\Microsoft\Active Setup\Installed Components\{E45C7ECB-AF0B-B6DD-B6D2-CECDBFAD2ACE} (Trojan.Agent) -> Nebyla provedena žádná instrukce.
HKCU\Software\VB and VBA Program Settings\SrvID (Malware.Trace) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Windows Services for Processes (Trojan.Agent) -> Data: C:\Users\Valisek\AppData\Roaming\svchost.exe -> Nebyla provedena žádná instrukce.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run|rundll32 (Trojan.Agent) -> Data: C:\Users\Valisek\AppData\Roaming\rundll32 .exe -> Nebyla provedena žádná instrukce.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 7
C:\Users\Valisek\Downloads\DownloadSetup.exe (PUP.Offerware) -> Nebyla provedena žádná instrukce.
C:\Users\Valisek\Downloads\FastDownload.exe (PUP.Offerware) -> Nebyla provedena žádná instrukce.
C:\Users\Valisek\Downloads\Topher Jones - Brohammer (Nari & Milani Dub Remix) - TRACK at August 9, 2012 - ELECTRO PROGRESSIVE, DUTCH HOUSE - [MP3Juices.com].exe (PUP.Offerware) -> Nebyla provedena žádná instrukce.
C:\Users\Valisek\AppData\Roaming\svchost.exe (Trojan.Agent) -> Nebyla provedena žádná instrukce.
C:\Windows\temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> Nebyla provedena žádná instrukce.
C:\Users\Valisek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rundll32 .exe (Backdoor.Agent) -> Nebyla provedena žádná instrukce.
C:\Users\Valisek\AppData\Roaming\per.bat (Malware.Trace) -> Nebyla provedena žádná instrukce.

(konec)

Znovu spusť MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je označen pro odstranění, stačí restartovat počítač.

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.02.01.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Valisek :: VALISEK-PC [administrátor]

Ochrana: Povolena

1.2.2013 19:14:36
MBAM-log-2013-02-01 (19-19-32).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 261413
Uplynulý čas: 4 minut, 34 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 1
HKCU\Software\VB and VBA Program Settings\SrvID (Malware.Trace) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Windows Services for Processes (Trojan.Agent) -> Data: C:\Users\Valisek\AppData\Roaming\svchost.exe -> Nebyla provedena žádná instrukce.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

Už to vypadá lépe, na těch ostatních krocích zatím pracuji

19:23:14.0533 3624 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
19:23:15.0365 3624 ============================================================
19:23:15.0365 3624 Current date / time: 2013/02/01 19:23:15.0365
19:23:15.0365 3624 SystemInfo:
19:23:15.0365 3624
19:23:15.0365 3624 OS Version: 6.1.7601 ServicePack: 1.0
19:23:15.0365 3624 Product type: Workstation
19:23:15.0365 3624 ComputerName: VALISEK-PC
19:23:15.0365 3624 UserName: Valisek
19:23:15.0365 3624 Windows directory: C:\Windows
19:23:15.0365 3624 System windows directory: C:\Windows
19:23:15.0365 3624 Running under WOW64
19:23:15.0365 3624 Processor architecture: Intel x64
19:23:15.0365 3624 Number of processors: 4
19:23:15.0365 3624 Page size: 0x1000
19:23:15.0365 3624 Boot type: Normal boot
19:23:15.0365 3624 ============================================================
19:23:16.0074 3624 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:23:16.0079 3624 ============================================================
19:23:16.0079 3624 \Device\Harddisk0\DR0:
19:23:16.0079 3624 MBR partitions:
19:23:16.0079 3624 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2400800, BlocksNum 0x32000
19:23:16.0079 3624 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x2432800, BlocksNum 0x6D4B3800
19:23:16.0079 3624 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x6F8E6000, BlocksNum 0x4E20000
19:23:16.0079 3624 ============================================================
19:23:16.0101 3624 C: <-> \Device\Harddisk0\DR0\Partition2
19:23:16.0135 3624 E: <-> \Device\Harddisk0\DR0\Partition3
19:23:16.0136 3624 ============================================================
19:23:16.0136 3624 Initialize success
19:23:16.0136 3624 ============================================================
19:23:17.0455 5848 ============================================================
19:23:17.0455 5848 Scan started
19:23:17.0455 5848 Mode: Manual;
19:23:17.0455 5848 ============================================================
19:23:18.0497 5848 ================ Scan system memory ========================
19:23:18.0497 5848 System memory - ok
19:23:18.0498 5848 ================ Scan services =============================
19:23:18.0884 5848 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
19:23:18.0888 5848 1394ohci - ok
19:23:18.0919 5848 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
19:23:18.0926 5848 ACPI - ok
19:23:18.0956 5848 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
19:23:18.0958 5848 AcpiPmi - ok
19:23:19.0085 5848 [ 11A52CF7B265631DEEB24C6149309EFF ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
19:23:19.0086 5848 AdobeARMservice - ok
19:23:19.0125 5848 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
19:23:19.0132 5848 adp94xx - ok
19:23:19.0177 5848 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
19:23:19.0184 5848 adpahci - ok
19:23:19.0190 5848 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
19:23:19.0192 5848 adpu320 - ok
19:23:19.0224 5848 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
19:23:19.0226 5848 AeLookupSvc - ok
19:23:19.0279 5848 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
19:23:19.0286 5848 AFD - ok
19:23:19.0314 5848 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
19:23:19.0317 5848 agp440 - ok
19:23:19.0347 5848 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
19:23:19.0350 5848 ALG - ok
19:23:19.0367 5848 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
19:23:19.0369 5848 aliide - ok
19:23:19.0372 5848 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
19:23:19.0373 5848 amdide - ok
19:23:19.0393 5848 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
19:23:19.0395 5848 AmdK8 - ok
19:23:19.0399 5848 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
19:23:19.0401 5848 AmdPPM - ok
19:23:19.0443 5848 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
19:23:19.0446 5848 amdsata - ok
19:23:19.0451 5848 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
19:23:19.0455 5848 amdsbs - ok
19:23:19.0474 5848 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
19:23:19.0476 5848 amdxata - ok
19:23:19.0504 5848 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
19:23:19.0506 5848 AppID - ok
19:23:19.0537 5848 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
19:23:19.0538 5848 AppIDSvc - ok
19:23:19.0553 5848 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
19:23:19.0556 5848 Appinfo - ok
19:23:19.0583 5848 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
19:23:19.0586 5848 arc - ok
19:23:19.0590 5848 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
19:23:19.0593 5848 arcsas - ok
19:23:19.0757 5848 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
19:23:19.0792 5848 aspnet_state - ok
19:23:19.0874 5848 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
19:23:19.0876 5848 AsyncMac - ok
19:23:19.0914 5848 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
19:23:19.0916 5848 atapi - ok
19:23:19.0977 5848 [ F88EF61BCD43ADDF2C9555430C16CD96 ] atksgt C:\Windows\system32\DRIVERS\atksgt.sys
19:23:19.0983 5848 atksgt - ok
19:23:20.0021 5848 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
19:23:20.0029 5848 AudioEndpointBuilder - ok
19:23:20.0040 5848 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
19:23:20.0044 5848 AudioSrv - ok
19:23:20.0079 5848 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
19:23:20.0083 5848 AxInstSV - ok
19:23:20.0135 5848 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
19:23:20.0142 5848 b06bdrv - ok
19:23:20.0220 5848 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
19:23:20.0225 5848 b57nd60a - ok
19:23:20.0249 5848 [ A424CB46A145E5AABF15621550976DF2 ] b57xdbd C:\Windows\system32\DRIVERS\b57xdbd.sys
19:23:20.0252 5848 b57xdbd - ok
19:23:20.0266 5848 [ BE4E6FD5A898812B85D5817AD9754A9F ] b57xdmp C:\Windows\system32\DRIVERS\b57xdmp.sys
19:23:20.0268 5848 b57xdmp - ok
19:23:20.0324 5848 [ 87F3BCF82A63E900AF896CD930BF7E05 ] BBSvc C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE
19:23:20.0326 5848 BBSvc - ok
19:23:20.0364 5848 [ 78779EE07231C658B483B1F38B5088DF ] BBUpdate C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
19:23:20.0368 5848 BBUpdate - ok
19:23:20.0414 5848 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
19:23:20.0417 5848 BDESVC - ok
19:23:20.0457 5848 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
19:23:20.0459 5848 Beep - ok
19:23:20.0514 5848 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
19:23:20.0523 5848 BFE - ok
19:23:20.0556 5848 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
19:23:20.0587 5848 BITS - ok
19:23:20.0625 5848 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
19:23:20.0628 5848 blbdrive - ok
19:23:20.0653 5848 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
19:23:20.0655 5848 bowser - ok
19:23:20.0689 5848 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
19:23:20.0691 5848 BrFiltLo - ok
19:23:20.0695 5848 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
19:23:20.0697 5848 BrFiltUp - ok
19:23:20.0741 5848 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
19:23:20.0743 5848 Browser - ok
19:23:20.0776 5848 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
19:23:20.0781 5848 Brserid - ok
19:23:20.0785 5848 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
19:23:20.0787 5848 BrSerWdm - ok
19:23:20.0798 5848 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
19:23:20.0800 5848 BrUsbMdm - ok
19:23:20.0804 5848 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
19:23:20.0806 5848 BrUsbSer - ok
19:23:20.0861 5848 [ 0970D8B7151E9113BF8D44CE2E954DF7 ] bScsiMSa C:\Windows\system32\DRIVERS\bScsiMSa.sys
19:23:20.0863 5848 bScsiMSa - ok
19:23:20.0882 5848 [ 0C1EEE5AF32402D306874B110DE237EC ] bScsiSDa C:\Windows\system32\DRIVERS\bScsiSDa.sys
19:23:20.0885 5848 bScsiSDa - ok
19:23:20.0919 5848 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
19:23:20.0921 5848 BthEnum - ok
19:23:20.0955 5848 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
19:23:20.0958 5848 BTHMODEM - ok
19:23:20.0987 5848 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
19:23:20.0990 5848 BthPan - ok
19:23:21.0055 5848 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
19:23:21.0079 5848 BTHPORT - ok
19:23:21.0111 5848 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
19:23:21.0113 5848 bthserv - ok
19:23:21.0143 5848 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
19:23:21.0145 5848 BTHUSB - ok
19:23:21.0210 5848 [ 4E4F563F17A6D75D4CBD677470DAFAEE ] btwampfl C:\Windows\system32\drivers\btwampfl.sys
19:23:21.0219 5848 btwampfl - ok
19:23:21.0248 5848 [ 409C4117E6027672EF41E68ACE1468AD ] btwaudio C:\Windows\system32\drivers\btwaudio.sys
19:23:21.0253 5848 btwaudio - ok
19:23:21.0292 5848 [ 8CA7CABD13316ABACE386D9F380B4CF3 ] btwavdt C:\Windows\system32\drivers\btwavdt.sys
19:23:21.0296 5848 btwavdt - ok
19:23:21.0396 5848 [ E17A930E8803F0260300B88AF22F5607 ] btwdins C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
19:23:21.0408 5848 btwdins - ok
19:23:21.0458 5848 [ 41933521A618475644B6E8D8487AF326 ] BTWDPAN C:\Windows\system32\DRIVERS\btwdpan.sys
19:23:21.0461 5848 BTWDPAN - ok
19:23:21.0476 5848 [ B9354F9F111C64F2495B60F1E24CB453 ] btwl2cap C:\Windows\system32\DRIVERS\btwl2cap.sys
19:23:21.0478 5848 btwl2cap - ok
19:23:21.0506 5848 [ 71A04F2D9DEB21B162561EB574D7D629 ] btwrchid C:\Windows\system32\DRIVERS\btwrchid.sys
19:23:21.0508 5848 btwrchid - ok
19:23:21.0552 5848 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
19:23:21.0555 5848 cdfs - ok
19:23:21.0602 5848 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
19:23:21.0606 5848 cdrom - ok
19:23:21.0636 5848 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
19:23:21.0639 5848 CertPropSvc - ok
19:23:21.0673 5848 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
19:23:21.0675 5848 circlass - ok
19:23:21.0691 5848 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
19:23:21.0697 5848 CLFS - ok
19:23:21.0770 5848 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:23:21.0773 5848 clr_optimization_v2.0.50727_32 - ok
19:23:21.0809 5848 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
19:23:21.0814 5848 clr_optimization_v2.0.50727_64 - ok
19:23:21.0940 5848 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:23:21.0942 5848 clr_optimization_v4.0.30319_32 - ok
19:23:21.0959 5848 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
19:23:21.0989 5848 clr_optimization_v4.0.30319_64 - ok
19:23:22.0030 5848 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
19:23:22.0032 5848 CmBatt - ok
19:23:22.0053 5848 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
19:23:22.0055 5848 cmdide - ok
19:23:22.0090 5848 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
19:23:22.0098 5848 CNG - ok
19:23:22.0123 5848 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
19:23:22.0125 5848 Compbatt - ok
19:23:22.0170 5848 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
19:23:22.0172 5848 CompositeBus - ok
19:23:22.0183 5848 COMSysApp - ok
19:23:22.0188 5848 cpuz135 - ok
19:23:22.0210 5848 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
19:23:22.0212 5848 crcdisk - ok
19:23:22.0258 5848 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
19:23:22.0261 5848 CryptSvc - ok
19:23:22.0301 5848 cvintdrv - ok
19:23:22.0568 5848 [ 914A7156B0C0F10BE645A02E13F576B2 ] DAUpdaterSvc C:\Games\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
19:23:22.0569 5848 DAUpdaterSvc - ok
19:23:22.0612 5848 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
19:23:22.0618 5848 DcomLaunch - ok
19:23:22.0678 5848 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
19:23:22.0683 5848 defragsvc - ok
19:23:22.0725 5848 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
19:23:22.0728 5848 DfsC - ok
19:23:22.0755 5848 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
19:23:22.0761 5848 Dhcp - ok
19:23:22.0799 5848 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
19:23:22.0802 5848 discache - ok
19:23:22.0841 5848 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
19:23:22.0844 5848 Disk - ok
19:23:22.0869 5848 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
19:23:22.0874 5848 Dnscache - ok
19:23:22.0919 5848 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
19:23:22.0923 5848 dot3svc - ok
19:23:22.0928 5848 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
19:23:22.0931 5848 DPS - ok
19:23:22.0985 5848 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
19:23:22.0986 5848 drmkaud - ok
19:23:23.0037 5848 [ 9DD3A22F804697606C2B7FF9E912FF6B ] DsiWMIService C:\Program Files (x86)\Launch Manager\dsiwmis.exe
19:23:23.0041 5848 DsiWMIService - ok
19:23:23.0122 5848 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
19:23:23.0126 5848 dtsoftbus01 - ok
19:23:23.0213 5848 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
19:23:23.0224 5848 DXGKrnl - ok
19:23:23.0294 5848 [ 082DAB566F704D258D35BA89F21239CA ] eamon C:\Windows\system32\DRIVERS\eamon.sys
19:23:23.0297 5848 eamon - ok
19:23:23.0349 5848 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
19:23:23.0352 5848 EapHost - ok
19:23:23.0457 5848 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
19:23:23.0547 5848 ebdrv - ok
19:23:23.0582 5848 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
19:23:23.0584 5848 EFS - ok
19:23:23.0647 5848 [ 5332EC2BA1C112BD4BB1F38127848FEF ] EgisTec Ticket Service C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
19:23:23.0648 5848 EgisTec Ticket Service - ok
19:23:23.0709 5848 [ 4FF6F92F170550E226B4595766C4D6A6 ] ehdrv C:\Windows\system32\DRIVERS\ehdrv.sys
19:23:23.0712 5848 ehdrv - ok
19:23:23.0814 5848 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
19:23:23.0823 5848 ehRecvr - ok
19:23:23.0857 5848 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
19:23:23.0860 5848 ehSched - ok
19:23:23.0968 5848 [ 98B82B6AFA03F8F0DD058C3DFCEA472A ] EhttpSrv C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
19:23:23.0969 5848 EhttpSrv - ok
19:23:24.0033 5848 [ 9737FC97B5C941F083C4E46CBCCE2D4A ] ekrn C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
19:23:24.0042 5848 ekrn - ok
19:23:24.0118 5848 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
19:23:24.0126 5848 elxstor - ok
19:23:24.0163 5848 [ 71C8CBDE6B18F90F19E9C7CB884F87C8 ] epfwwfpr C:\Windows\system32\DRIVERS\epfwwfpr.sys
19:23:24.0166 5848 epfwwfpr - ok
19:23:24.0354 5848 [ 48425C93B6F36529707206E4FA680CF3 ] ePowerSvc C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
19:23:24.0363 5848 ePowerSvc - ok
19:23:24.0393 5848 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
19:23:24.0394 5848 ErrDev - ok
19:23:24.0436 5848 [ DBAA0C650C9549DC5C599D1E81DEDAAD ] ETD C:\Windows\system32\DRIVERS\ETD.sys
19:23:24.0439 5848 ETD - ok
19:23:24.0479 5848 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
19:23:24.0486 5848 EventSystem - ok
19:23:24.0581 5848 [ 54FC81B0162478A72A93DBBEAFB35671 ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe
19:23:24.0596 5848 EvtEng - ok
19:23:24.0646 5848 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
19:23:24.0649 5848 exfat - ok
19:23:24.0710 5848 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
19:23:24.0714 5848 fastfat - ok
19:23:24.0826 5848 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
19:23:24.0837 5848 Fax - ok
19:23:24.0893 5848 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
19:23:24.0895 5848 fdc - ok
19:23:24.0934 5848 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
19:23:24.0935 5848 fdPHost - ok
19:23:24.0950 5848 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
19:23:24.0952 5848 FDResPub - ok
19:23:24.0979 5848 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
19:23:24.0981 5848 FileInfo - ok
19:23:24.0994 5848 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
19:23:24.0996 5848 Filetrace - ok
19:23:25.0037 5848 [ BB0667B0171B632B97EA759515476F07 ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
19:23:25.0046 5848 FLEXnet Licensing Service - ok
19:23:25.0074 5848 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
19:23:25.0076 5848 flpydisk - ok
19:23:25.0105 5848 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
19:23:25.0110 5848 FltMgr - ok
19:23:25.0147 5848 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
19:23:25.0160 5848 FontCache - ok
19:23:25.0215 5848 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:23:25.0216 5848 FontCache3.0.0.0 - ok
19:23:25.0294 5848 [ 44E56BCE70583FEDB09F915A69D6A6F9 ] FreemakeVideoCapture C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
19:23:25.0295 5848 FreemakeVideoCapture - ok
19:23:25.0345 5848 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
19:23:25.0347 5848 FsDepends - ok
19:23:25.0386 5848 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
19:23:25.0387 5848 Fs_Rec - ok
19:23:25.0499 5848 [ 0D015D3584704EC814A58276232F143B ] Futuremark SystemInfo Service C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
19:23:25.0501 5848 Futuremark SystemInfo Service - ok
19:23:25.0530 5848 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
19:23:25.0534 5848 fvevol - ok
19:23:25.0583 5848 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
19:23:25.0585 5848 gagp30kx - ok
19:23:25.0666 5848 [ C403C5DB49A0F9AAF4F2128EDC0106D8 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
19:23:25.0671 5848 GamesAppService - ok
19:23:25.0747 5848 GGSAFERDriver - ok
19:23:25.0797 5848 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
19:23:25.0806 5848 gpsvc - ok
19:23:25.0852 5848 [ C9B2D1D3F86FD3673EF847DEF73B6F9E ] GREGService C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
19:23:25.0854 5848 GREGService - ok
19:23:25.0895 5848 [ F8F0851D336C3B88DBD7232B6348E09A ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
19:23:25.0898 5848 hamachi - ok
19:23:25.0925 5848 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
19:23:25.0927 5848 hcw85cir - ok
19:23:25.0958 5848 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
19:23:25.0963 5848 HdAudAddService - ok
19:23:26.0008 5848 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
19:23:26.0011 5848 HDAudBus - ok
19:23:26.0015 5848 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
19:23:26.0016 5848 HidBatt - ok
19:23:26.0038 5848 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
19:23:26.0040 5848 HidBth - ok
19:23:26.0062 5848 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
19:23:26.0064 5848 HidIr - ok
19:23:26.0088 5848 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
19:23:26.0090 5848 hidserv - ok
19:23:26.0104 5848 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
19:23:26.0106 5848 HidUsb - ok
19:23:26.0146 5848 [ C7F37B5BF7BBDE161E4256ED08E79108 ] HiPatchService C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
19:23:26.0147 5848 HiPatchService - ok
19:23:26.0195 5848 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
19:23:26.0198 5848 hkmsvc - ok
19:23:26.0215 5848 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
19:23:26.0219 5848 HomeGroupListener - ok
19:23:26.0245 5848 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
19:23:26.0249 5848 HomeGroupProvider - ok
19:23:26.0266 5848 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
19:23:26.0268 5848 HpSAMD - ok
19:23:26.0312 5848 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
19:23:26.0321 5848 HTTP - ok
19:23:26.0348 5848 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
19:23:26.0350 5848 hwpolicy - ok
19:23:26.0405 5848 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
19:23:26.0407 5848 i8042prt - ok
19:23:26.0486 5848 [ 26CF4275034214ECEDD8EC17B0A18A99 ] iaStor C:\Windows\system32\drivers\iaStor.sys
19:23:26.0490 5848 iaStor - ok
19:23:26.0563 5848 [ E79A8E33BD136D14BAE1FA20EB2EF124 ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
19:23:26.0564 5848 IAStorDataMgrSvc - ok
19:23:26.0601 5848 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
19:23:26.0607 5848 iaStorV - ok
19:23:26.0704 5848 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
19:23:26.0705 5848 IDriverT - ok
19:23:26.0783 5848 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
19:23:26.0825 5848 idsvc - ok
19:23:27.0130 5848 [ 9937600A1584FF00565D5379EB4C9EDB ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
19:23:27.0323 5848 igfx - ok
19:23:27.0366 5848 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
19:23:27.0368 5848 iirsp - ok
19:23:27.0406 5848 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
19:23:27.0416 5848 IKEEXT - ok
19:23:27.0470 5848 [ CADDF0927DAC63EDAE48F5C35A61D87D ] intaud_WaveExtensible C:\Windows\system32\drivers\intelaud.sys
19:23:27.0472 5848 intaud_WaveExtensible - ok
19:23:27.0589 5848 [ CB7DADEF3D83FE2C12655A0BDCBA99F2 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
19:23:27.0622 5848 IntcAzAudAddService - ok
19:23:27.0707 5848 [ FC727061C0F47C8059E88E05D5C8E381 ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys
19:23:27.0712 5848 IntcDAud - ok
19:23:27.0744 5848 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
19:23:27.0746 5848 intelide - ok
19:23:27.0788 5848 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
19:23:27.0790 5848 intelppm - ok
19:23:27.0826 5848 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
19:23:27.0828 5848 IPBusEnum - ok
19:23:27.0847 5848 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:23:27.0849 5848 IpFilterDriver - ok
19:23:27.0947 5848 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
19:23:27.0954 5848 iphlpsvc - ok
19:23:27.0992 5848 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
19:23:27.0995 5848 IPMIDRV - ok
19:23:27.0999 5848 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
19:23:28.0002 5848 IPNAT - ok
19:23:28.0055 5848 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
19:23:28.0056 5848 IRENUM - ok
19:23:28.0073 5848 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
19:23:28.0075 5848 isapnp - ok
19:23:28.0097 5848 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
19:23:28.0102 5848 iScsiPrt - ok
19:23:28.0143 5848 [ 716F66336F10885D935B08174DC54242 ] iwdbus C:\Windows\system32\DRIVERS\iwdbus.sys
19:23:28.0145 5848 iwdbus - ok
19:23:28.0190 5848 [ 455B75C19BF3F1F2EE3AC10E1169826C ] k57nd60a C:\Windows\system32\DRIVERS\k57nd60a.sys
19:23:28.0196 5848 k57nd60a - ok
19:23:28.0250 5848 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
19:23:28.0252 5848 kbdclass - ok
19:23:28.0277 5848 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
19:23:28.0278 5848 kbdhid - ok
19:23:28.0294 5848 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
19:23:28.0295 5848 KeyIso - ok
19:23:28.0317 5848 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
19:23:28.0319 5848 KSecDD - ok
19:23:28.0351 5848 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
19:23:28.0354 5848 KSecPkg - ok
19:23:28.0387 5848 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
19:23:28.0389 5848 ksthunk - ok
19:23:28.0429 5848 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
19:23:28.0435 5848 KtmRm - ok
19:23:28.0458 5848 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
19:23:28.0463 5848 LanmanServer - ok
19:23:28.0499 5848 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:23:28.0502 5848 LanmanWorkstation - ok
19:23:28.0548 5848 [ 5EA407821BB3104C31A705175AB4F309 ] lirsgt C:\Windows\system32\DRIVERS\lirsgt.sys
19:23:28.0550 5848 lirsgt - ok
19:23:28.0593 5848 [ B705C7097F9A0EC941D02DCE7C7D426C ] Live Updater Service C:\Program Files\Acer\Acer Updater\UpdaterService.exe
19:23:28.0595 5848 Live Updater Service - ok
19:23:28.0777 5848 [ 47A111A4DC0D67DA431DF9F91EE09682 ] LkCitadelServer C:\Windows\SysWOW64\lkcitdl.exe
19:23:28.0784 5848 LkCitadelServer - ok
19:23:28.0820 5848 [ 93CD77EF951E426A2C36A33D750D9321 ] lkClassAds C:\Windows\SysWOW64\lkads.exe
19:23:28.0822 5848 lkClassAds - ok
19:23:28.0848 5848 [ 9F616DF9EC606BA99323DAC363C4D414 ] lkTimeSync C:\Windows\SysWOW64\lktsrv.exe
19:23:28.0850 5848 lkTimeSync - ok
19:23:28.0875 5848 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
19:23:28.0877 5848 lltdio - ok
19:23:28.0910 5848 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
19:23:28.0915 5848 lltdsvc - ok
19:23:28.0938 5848 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
19:23:28.0940 5848 lmhosts - ok
19:23:28.0983 5848 [ 50C7CE53EF461870410355F1F2E7D515 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
19:23:28.0985 5848 LMS - ok
19:23:29.0015 5848 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
19:23:29.0017 5848 LSI_FC - ok
19:23:29.0022 5848 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
19:23:29.0025 5848 LSI_SAS - ok
19:23:29.0029 5848 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
19:23:29.0031 5848 LSI_SAS2 - ok
19:23:29.0036 5848 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
19:23:29.0038 5848 LSI_SCSI - ok
19:23:29.0097 5848 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
19:23:29.0100 5848 luafv - ok
19:23:29.0293 5848 [ 4BD9B94B80AEFDA5D7354BCB667F4DF8 ] MagicHoldem C:\Users\Valisek\AppData\Local\MagicHoldem\MagicHoldem_service.exe
19:23:29.0298 5848 MagicHoldem - ok
19:23:29.0389 5848 [ 92EB844D90615CB266F84C3202B8786E ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
19:23:29.0391 5848 MBAMProtector - ok
19:23:29.0494 5848 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
19:23:29.0498 5848 MBAMScheduler - ok
19:23:29.0556 5848 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
19:23:29.0562 5848 MBAMService - ok
19:23:29.0621 5848 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
19:23:29.0624 5848 Mcx2Svc - ok
19:23:29.0669 5848 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
19:23:29.0671 5848 megasas - ok
19:23:29.0698 5848 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
19:23:29.0704 5848 MegaSR - ok
19:23:29.0754 5848 [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64 C:\Windows\system32\DRIVERS\HECIx64.sys
19:23:29.0756 5848 MEIx64 - ok
19:23:29.0795 5848 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
19:23:29.0798 5848 MMCSS - ok
19:23:29.0820 5848 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
19:23:29.0822 5848 Modem - ok
19:23:29.0853 5848 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
19:23:29.0855 5848 monitor - ok
19:23:29.0897 5848 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
19:23:29.0899 5848 mouclass - ok
19:23:29.0918 5848 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
19:23:29.0920 5848 mouhid - ok
19:23:29.0936 5848 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
19:23:29.0939 5848 mountmgr - ok
19:23:29.0962 5848 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
19:23:29.0965 5848 mpio - ok
19:23:29.0983 5848 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
19:23:29.0985 5848 mpsdrv - ok
19:23:30.0045 5848 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
19:23:30.0055 5848 MpsSvc - ok
19:23:30.0086 5848 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
19:23:30.0089 5848 MRxDAV - ok
19:23:30.0131 5848 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
19:23:30.0134 5848 mrxsmb - ok
19:23:30.0140 5848 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:23:30.0145 5848 mrxsmb10 - ok
19:23:30.0184 5848 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:23:30.0187 5848 mrxsmb20 - ok
19:23:30.0196 5848 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
19:23:30.0198 5848 msahci - ok
19:23:30.0203 5848 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
19:23:30.0206 5848 msdsm - ok
19:23:30.0234 5848 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
19:23:30.0238 5848 MSDTC - ok
19:23:30.0277 5848 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
19:23:30.0278 5848 Msfs - ok
19:23:30.0305 5848 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
19:23:30.0306 5848 mshidkmdf - ok
19:23:30.0325 5848 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
19:23:30.0326 5848 msisadrv - ok
19:23:30.0358 5848 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
19:23:30.0362 5848 MSiSCSI - ok
19:23:30.0365 5848 msiserver - ok
19:23:30.0407 5848 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
19:23:30.0408 5848 MSKSSRV - ok
19:23:30.0418 5848 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
19:23:30.0420 5848 MSPCLOCK - ok
19:23:30.0423 5848 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
19:23:30.0425 5848 MSPQM - ok
19:23:30.0475 5848 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
19:23:30.0481 5848 MsRPC - ok
19:23:30.0526 5848 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
19:23:30.0528 5848 mssmbios - ok
19:23:30.0537 5848 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
19:23:30.0539 5848 MSTEE - ok
19:23:30.0543 5848 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
19:23:30.0544 5848 MTConfig - ok
19:23:30.0563 5848 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
19:23:30.0565 5848 Mup - ok
19:23:30.0597 5848 [ C009123B206C56854F4E88596035231D ] mwlPSDFilter C:\Windows\system32\DRIVERS\mwlPSDFilter.sys
19:23:30.0599 5848 mwlPSDFilter - ok
19:23:30.0610 5848 [ BF3739EEB9F008B1DEBAC115089A53F8 ] mwlPSDNServ C:\Windows\system32\DRIVERS\mwlPSDNServ.sys
19:23:30.0611 5848 mwlPSDNServ - ok
19:23:30.0625 5848 [ 38DD143D95E7A01B86F219DDA9C28779 ] mwlPSDVDisk C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys
19:23:30.0627 5848 mwlPSDVDisk - ok
19:23:30.0687 5848 [ 4BBB9D9C4DF259FAE2D172C5BB25DDD0 ] MyWiFiDHCPDNS C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
19:23:30.0691 5848 MyWiFiDHCPDNS - ok
19:23:30.0723 5848 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
19:23:30.0730 5848 napagent - ok
19:23:30.0774 5848 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
19:23:30.0779 5848 NativeWifiP - ok
19:23:30.0946 5848 [ E0E4A1F81A7D69C595A8A9DDAD084C19 ] NAUpdate C:\Program Files (x86)\Nero\Update\NASvc.exe
19:23:30.0954 5848 NAUpdate - ok
19:23:31.0003 5848 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
19:23:31.0013 5848 NDIS - ok
19:23:31.0038 5848 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
19:23:31.0040 5848 NdisCap - ok
19:23:31.0089 5848 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
19:23:31.0090 5848 NdisTapi - ok
19:23:31.0117 5848 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
19:23:31.0119 5848 Ndisuio - ok
19:23:31.0132 5848 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
19:23:31.0135 5848 NdisWan - ok
19:23:31.0153 5848 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
19:23:31.0154 5848 NDProxy - ok
19:23:31.0186 5848 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
19:23:31.0188 5848 NetBIOS - ok
19:23:31.0194 5848 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
19:23:31.0198 5848 NetBT - ok
19:23:31.0216 5848 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
19:23:31.0217 5848 Netlogon - ok
19:23:31.0257 5848 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
19:23:31.0263 5848 Netman - ok
19:23:31.0327 5848 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:23:31.0343 5848 NetMsmqActivator - ok
19:23:31.0359 5848 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:23:31.0361 5848 NetPipeActivator - ok
19:23:31.0395 5848 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
19:23:31.0403 5848 netprofm - ok
19:23:31.0438 5848 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:23:31.0439 5848 NetTcpActivator - ok
19:23:31.0443 5848 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:23:31.0444 5848 NetTcpPortSharing - ok
19:23:31.0624 5848 [ AC69618DE5BCCE8747C9AB0AAE1003C1 ] NETwNs64 C:\Windows\system32\DRIVERS\NETwNs64.sys
19:23:31.0794 5848 NETwNs64 - ok
19:23:31.0828 5848 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
19:23:31.0830 5848 nfrd960 - ok
19:23:31.0938 5848 [ B60EB6D73C59436200A5B9AD8504A0BD ] NIDomainService C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe
19:23:31.0941 5848 NIDomainService - ok
19:23:31.0944 5848 niSvcLoc - ok
19:23:32.0017 5848 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
19:23:32.0020 5848 NlaSvc - ok
19:23:32.0115 5848 [ 5839A8027D6D324A7CD494051A96628C ] NOBU C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
19:23:32.0141 5848 NOBU - ok
19:23:32.0204 5848 [ 351533ACC2A069B94E80BBFC177E8FDF ] npf C:\Windows\system32\drivers\npf.sys
19:23:32.0206 5848 npf - ok
19:23:32.0228 5848 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
19:23:32.0230 5848 Npfs - ok
19:23:32.0258 5848 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
19:23:32.0260 5848 nsi - ok
19:23:32.0274 5848 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
19:23:32.0276 5848 nsiproxy - ok
19:23:32.0333 5848 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
19:23:32.0349 5848 Ntfs - ok
19:23:32.0409 5848 [ 1873214666F6F0A883742DF91FBC48C9 ] NTI IScheduleSvc C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
19:23:32.0413 5848 NTI IScheduleSvc - ok
19:23:32.0436 5848 [ EE3BA1024594D5D09E314F206B94069E ] NTIDrvr C:\Windows\system32\drivers\NTIDrvr.sys
19:23:32.0438 5848 NTIDrvr - ok
19:23:32.0451 5848 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
19:23:32.0453 5848 Null - ok
19:23:32.0693 5848 [ 26AA3C7E6E1DB7107BF93503F6F57E88 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
19:23:32.0903 5848 nvlddmkm - ok
19:23:32.0959 5848 [ 6D785C898F9D70905A90655F4D0D0AFB ] nvpciflt C:\Windows\system32\DRIVERS\nvpciflt.sys
19:23:32.0961 5848 nvpciflt - ok
19:23:33.0040 5848 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
19:23:33.0043 5848 nvraid - ok
19:23:33.0049 5848 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
19:23:33.0052 5848 nvstor - ok
19:23:33.0149 5848 [ A83AC04D672567CAF8BE7A4D73C0B850 ] nvsvc C:\Windows\system32\nvvsvc.exe
19:23:33.0159 5848 nvsvc - ok
19:23:33.0283 5848 [ FB660F80BDC4F13D594996976AFAECD9 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
19:23:33.0297 5848 nvUpdatusService - ok
19:23:33.0336 5848 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
19:23:33.0339 5848 nv_agp - ok
19:23:33.0352 5848 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
19:23:33.0354 5848 ohci1394 - ok
19:23:33.0469 5848 [ 6FF6EF1CC25E558CF0335928B658D11E ] OpenVPNAccessClient C:\Program Files (x86)\OpenVPN Technologies\PrivateTunnel\core\capiws.exe
19:23:33.0470 5848 OpenVPNAccessClient - ok
19:23:33.0543 5848 [ B9C125314A025127FE562C116D614AA3 ] ose64 C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:23:33.0546 5848 ose64 - ok
19:23:33.0770 5848 [ FE9C0029E1AF26350D9985D00520E5C8 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
19:23:33.0872 5848 osppsvc - ok
19:23:33.0902 5848 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
19:23:33.0907 5848 p2pimsvc - ok
19:23:33.0943 5848 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
19:23:33.0950 5848 p2psvc - ok
19:23:33.0978 5848 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys
19:23:33.0981 5848 Parport - ok
19:23:34.0009 5848 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
19:23:34.0011 5848 partmgr - ok
19:23:34.0033 5848 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
19:23:34.0037 5848 PcaSvc - ok
19:23:34.0056 5848 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
19:23:34.0060 5848 pci - ok
19:23:34.0073 5848 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
19:23:34.0075 5848 pciide - ok
19:23:34.0102 5848 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
19:23:34.0106 5848 pcmcia - ok
19:23:34.0132 5848 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
19:23:34.0134 5848 pcw - ok
19:23:34.0158 5848 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
19:23:34.0167 5848 PEAUTH - ok
19:23:34.0200 5848 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
19:23:34.0204 5848 PerfHost - ok
19:23:34.0260 5848 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
19:23:34.0276 5848 pla - ok
19:23:34.0322 5848 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
19:23:34.0329 5848 PlugPlay - ok
19:23:34.0369 5848 PnkBstrA - ok
19:23:34.0405 5848 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
19:23:34.0408 5848 PNRPAutoReg - ok
19:23:34.0436 5848 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
19:23:34.0438 5848 PNRPsvc - ok
19:23:34.0466 5848 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
19:23:34.0473 5848 PolicyAgent - ok
19:23:34.0567 5848 postgresql-8.4 - ok
19:23:34.0602 5848 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
19:23:34.0606 5848 Power - ok
19:23:34.0637 5848 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
19:23:34.0639 5848 PptpMiniport - ok
19:23:34.0649 5848 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys
19:23:34.0651 5848 Processor - ok
19:23:34.0679 5848 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
19:23:34.0683 5848 ProfSvc - ok
19:23:34.0694 5848 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
19:23:34.0695 5848 ProtectedStorage - ok
19:23:34.0718 5848 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
19:23:34.0721 5848 Psched - ok
19:23:34.0823 5848 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
19:23:34.0840 5848 ql2300 - ok
19:23:34.0857 5848 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
19:23:34.0860 5848 ql40xx - ok
19:23:34.0879 5848 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
19:23:34.0884 5848 QWAVE - ok
19:23:34.0899 5848 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
19:23:34.0901 5848 QWAVEdrv - ok
19:23:34.0919 5848 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
19:23:34.0920 5848 RasAcd - ok
19:23:34.0958 5848 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
19:23:34.0960 5848 RasAgileVpn - ok
19:23:34.0984 5848 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
19:23:34.0988 5848 RasAuto - ok
19:23:35.0007 5848 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
19:23:35.0010 5848 Rasl2tp - ok
19:23:35.0027 5848 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
19:23:35.0033 5848 RasMan - ok
19:23:35.0055 5848 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
19:23:35.0057 5848 RasPppoe - ok
19:23:35.0087 5848 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
19:23:35.0090 5848 RasSstp - ok
19:23:35.0108 5848 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
19:23:35.0113 5848 rdbss - ok
19:23:35.0125 5848 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
19:23:35.0127 5848 rdpbus - ok
19:23:35.0154 5848 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
19:23:35.0155 5848 RDPCDD - ok
19:23:35.0173 5848 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
19:23:35.0174 5848 RDPENCDD - ok
19:23:35.0188 5848 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
19:23:35.0189 5848 RDPREFMP - ok
19:23:35.0224 5848 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
19:23:35.0228 5848 RDPWD - ok
19:23:35.0277 5848 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
19:23:35.0280 5848 rdyboost - ok
19:23:35.0337 5848 [ A436F5E7D80BBDBB0826D0F176D5BEA8 ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
19:23:35.0345 5848 RegSrvc - ok
19:23:35.0399 5848 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
19:23:35.0402 5848 RemoteAccess - ok
19:23:35.0472 5848 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
19:23:35.0476 5848 RemoteRegistry - ok
19:23:35.0511 5848 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
19:23:35.0514 5848 RFCOMM - ok
19:23:35.0531 5848 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
19:23:35.0534 5848 RpcEptMapper - ok
19:23:35.0555 5848 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
19:23:35.0557 5848 RpcLocator - ok
19:23:35.0590 5848 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
19:23:35.0595 5848 RpcSs - ok
19:23:35.0646 5848 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
19:23:35.0649 5848 rspndr - ok
19:23:35.0694 5848 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
19:23:35.0695 5848 SamSs - ok
19:23:35.0716 5848 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
19:23:35.0718 5848 sbp2port - ok
19:23:35.0750 5848 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
19:23:35.0755 5848 SCardSvr - ok
19:23:35.0771 5848 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
19:23:35.0773 5848 scfilter - ok
19:23:35.0800 5848 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
19:23:35.0814 5848 Schedule - ok
19:23:35.0837 5848 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
19:23:35.0838 5848 SCPolicySvc - ok
19:23:35.0866 5848 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
19:23:35.0868 5848 sdbus - ok
19:23:35.0893 5848 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
19:23:35.0897 5848 SDRSVC - ok
19:23:35.0961 5848 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
19:23:35.0963 5848 secdrv - ok
19:23:36.0003 5848 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
19:23:36.0005 5848 seclogon - ok
19:23:36.0039 5848 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
19:23:36.0042 5848 SENS - ok
19:23:36.0055 5848 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
19:23:36.0058 5848 SensrSvc - ok
19:23:36.0078 5848 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys
19:23:36.0079 5848 Serenum - ok
19:23:36.0097 5848 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys
19:23:36.0100 5848 Serial - ok
19:23:36.0110 5848 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys
19:23:36.0111 5848 sermouse - ok
19:23:36.0141 5848 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
19:23:36.0145 5848 SessionEnv - ok
19:23:36.0148 5848 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
19:23:36.0150 5848 sffdisk - ok
19:23:36.0155 5848 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
19:23:36.0156 5848 sffp_mmc - ok
19:23:36.0159 5848 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
19:23:36.0161 5848 sffp_sd - ok
19:23:36.0165 5848 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
19:23:36.0166 5848 sfloppy - ok
19:23:36.0204 5848 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
19:23:36.0210 5848 SharedAccess - ok
19:23:36.0234 5848 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
19:23:36.0240 5848 ShellHWDetection - ok
19:23:36.0273 5848 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
19:23:36.0275 5848 SiSRaid2 - ok
19:23:36.0279 5848 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
19:23:36.0281 5848 SiSRaid4 - ok
19:23:36.0315 5848 [ A4FAB5F7818A69DA6E740943CB8F7CA9 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
19:23:36.0329 5848 SkypeUpdate - ok
19:23:36.0345 5848 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
19:23:36.0348 5848 Smb - ok
19:23:36.0383 5848 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
19:23:36.0386 5848 SNMPTRAP - ok
19:23:36.0445 5848 [ 12583AF6CBE0050651EAF2723B3AD7B3 ] speedfan C:\Windows\syswow64\speedfan.sys
19:23:36.0447 5848 speedfan - ok
19:23:36.0481 5848 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
19:23:36.0483 5848 spldr - ok
19:23:36.0521 5848 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
19:23:36.0530 5848 Spooler - ok
19:23:36.0644 5848 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
19:23:36.0680 5848 sppsvc - ok
19:23:36.0691 5848 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
19:23:36.0694 5848 sppuinotify - ok
19:23:36.0709 5848 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
19:23:36.0715 5848 srv - ok
19:23:36.0735 5848 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
19:23:36.0740 5848 srv2 - ok
19:23:36.0754 5848 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
19:23:36.0757 5848 srvnet - ok
19:23:36.0795 5848 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
19:23:36.0800 5848 SSDPSRV - ok
19:23:36.0811 5848 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
19:23:36.0814 5848 SstpSvc - ok
19:23:36.0864 5848 Steam Client Service - ok
19:23:36.0876 5848 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys
19:23:36.0878 5848 stexstor - ok
19:23:36.0914 5848 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
19:23:36.0922 5848 stisvc - ok
19:23:36.0938 5848 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
19:23:36.0939 5848 swenum - ok
19:23:37.0188 5848 [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
19:23:37.0194 5848 SwitchBoard - ok
19:23:37.0219 5848 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
19:23:37.0227 5848 swprv - ok
19:23:37.0270 5848 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
19:23:37.0290 5848 SysMain - ok
19:23:37.0301 5848 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:23:37.0304 5848 TabletInputService - ok

19:23:37.0332 5848 [ F9BE29D5E097F03F81D3CD12B794CB66 ] tap0901 C:\Windows\system32\DRIVERS\tap0901.sys
19:23:37.0334 5848 tap0901 - ok
19:23:37.0354 5848 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
19:23:37.0359 5848 TapiSrv - ok
19:23:37.0413 5848 [ 927D0CDB3F96EFC1E98FB1A2C9FB67AD ] tapoas C:\Windows\system32\DRIVERS\tapoas.sys
19:23:37.0415 5848 tapoas - ok
19:23:37.0447 5848 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
19:23:37.0450 5848 TBS - ok
19:23:37.0525 5848 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
19:23:37.0546 5848 Tcpip - ok
19:23:37.0588 5848 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
19:23:37.0601 5848 TCPIP6 - ok
19:23:37.0660 5848 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
19:23:37.0661 5848 tcpipreg - ok
19:23:37.0723 5848 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
19:23:37.0724 5848 TDPIPE - ok
19:23:37.0749 5848 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
19:23:37.0751 5848 TDTCP - ok
19:23:37.0770 5848 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
19:23:37.0773 5848 tdx - ok
19:23:37.0908 5848 [ 9F3E7CABE86BBDECA009DE291DB6D9E2 ] TeamViewer8 C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
19:23:37.0948 5848 TeamViewer8 - ok
19:23:37.0986 5848 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
19:23:37.0988 5848 TermDD - ok
19:23:38.0028 5848 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
19:23:38.0057 5848 TermService - ok
19:23:38.0071 5848 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
19:23:38.0074 5848 Themes - ok
19:23:38.0095 5848 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
19:23:38.0096 5848 THREADORDER - ok
19:23:38.0118 5848 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
19:23:38.0121 5848 TrkWks - ok
19:23:38.0155 5848 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:23:38.0156 5848 TrustedInstaller - ok
19:23:38.0177 5848 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
19:23:38.0179 5848 tssecsrv - ok
19:23:38.0196 5848 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
19:23:38.0198 5848 TsUsbFlt - ok
19:23:38.0209 5848 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
19:23:38.0210 5848 TsUsbGD - ok
19:23:38.0304 5848 [ DC612EF358AB3E1D369D9E46420D2610 ] TuneUp.UtilitiesSvc C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
19:23:38.0329 5848 TuneUp.UtilitiesSvc - ok
19:23:38.0377 5848 [ 7BC3381C0713F613B31ACDE38B71CB53 ] TuneUpUtilitiesDrv C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys
19:23:38.0379 5848 TuneUpUtilitiesDrv - ok
19:23:38.0401 5848 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
19:23:38.0403 5848 tunnel - ok
19:23:38.0433 5848 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
19:23:38.0436 5848 uagp35 - ok
19:23:38.0454 5848 [ A17D5E1A6DF4EAB0A480F2C490DE4C9D ] UBHelper C:\Windows\system32\drivers\UBHelper.sys
19:23:38.0456 5848 UBHelper - ok
19:23:38.0471 5848 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
19:23:38.0477 5848 udfs - ok
19:23:38.0507 5848 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
19:23:38.0510 5848 UI0Detect - ok
19:23:38.0532 5848 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
19:23:38.0534 5848 uliagpkx - ok
19:23:38.0570 5848 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
19:23:38.0572 5848 umbus - ok
19:23:38.0582 5848 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys
19:23:38.0583 5848 UmPass - ok
19:23:38.0761 5848 [ 374EBDA379A8F38E0CFC2211611E7167 ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
19:23:38.0820 5848 UNS - ok
19:23:38.0853 5848 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
19:23:38.0859 5848 upnphost - ok
19:23:38.0885 5848 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
19:23:38.0887 5848 usbccgp - ok
19:23:38.0916 5848 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
19:23:38.0918 5848 usbcir - ok
19:23:38.0935 5848 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
19:23:38.0937 5848 usbehci - ok
19:23:38.0958 5848 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\drivers\usbhub.sys
19:23:38.0963 5848 usbhub - ok
19:23:38.0984 5848 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
19:23:38.0986 5848 usbohci - ok
19:23:38.0992 5848 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\drivers\usbprint.sys
19:23:38.0994 5848 usbprint - ok
19:23:39.0014 5848 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:23:39.0016 5848 USBSTOR - ok
19:23:39.0019 5848 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
19:23:39.0021 5848 usbuhci - ok
19:23:39.0052 5848 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
19:23:39.0055 5848 usbvideo - ok
19:23:39.0069 5848 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
19:23:39.0072 5848 UxSms - ok
19:23:39.0082 5848 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
19:23:39.0084 5848 VaultSvc - ok
19:23:39.0099 5848 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
19:23:39.0100 5848 vdrvroot - ok
19:23:39.0118 5848 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
19:23:39.0126 5848 vds - ok
19:23:39.0169 5848 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
19:23:39.0171 5848 vga - ok
19:23:39.0186 5848 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
19:23:39.0188 5848 VgaSave - ok
19:23:39.0193 5848 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
19:23:39.0198 5848 vhdmp - ok
19:23:39.0201 5848 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
19:23:39.0202 5848 viaide - ok
19:23:39.0225 5848 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
19:23:39.0228 5848 volmgr - ok
19:23:39.0249 5848 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
19:23:39.0254 5848 volmgrx - ok
19:23:39.0260 5848 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
19:23:39.0265 5848 volsnap - ok
19:23:39.0308 5848 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
19:23:39.0311 5848 vsmraid - ok
19:23:39.0370 5848 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
19:23:39.0388 5848 VSS - ok
19:23:39.0404 5848 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
19:23:39.0406 5848 vwifibus - ok
19:23:39.0415 5848 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
19:23:39.0417 5848 vwififlt - ok
19:23:39.0432 5848 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
19:23:39.0433 5848 vwifimp - ok
19:23:39.0440 5848 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
19:23:39.0447 5848 W32Time - ok
19:23:39.0476 5848 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys
19:23:39.0478 5848 WacomPen - ok
19:23:39.0591 5848 [ C8E546516E0BF477DB2AFC46B1065786 ] wampapache c:\wamp\bin\apache\apache2.4.2\bin\httpd.exe
19:23:39.0593 5848 wampapache - ok
19:23:39.0686 5848 wampmysqld - ok
19:23:39.0750 5848 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
19:23:39.0753 5848 WANARP - ok
19:23:39.0756 5848 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
19:23:39.0757 5848 Wanarpv6 - ok
19:23:39.0895 5848 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
19:23:39.0909 5848 WatAdminSvc - ok
19:23:39.0972 5848 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
19:23:39.0989 5848 wbengine - ok
19:23:39.0995 5848 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
19:23:40.0000 5848 WbioSrvc - ok
19:23:40.0038 5848 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
19:23:40.0042 5848 wcncsvc - ok
19:23:40.0058 5848 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
19:23:40.0061 5848 WcsPlugInService - ok
19:23:40.0090 5848 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys
19:23:40.0091 5848 Wd - ok
19:23:40.0123 5848 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
19:23:40.0133 5848 Wdf01000 - ok
19:23:40.0151 5848 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
19:23:40.0154 5848 WdiServiceHost - ok
19:23:40.0157 5848 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
19:23:40.0160 5848 WdiSystemHost - ok
19:23:40.0183 5848 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
19:23:40.0188 5848 WebClient - ok
19:23:40.0201 5848 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
19:23:40.0206 5848 Wecsvc - ok
19:23:40.0226 5848 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
19:23:40.0230 5848 wercplsupport - ok
19:23:40.0259 5848 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
19:23:40.0261 5848 WerSvc - ok
19:23:40.0299 5848 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
19:23:40.0300 5848 WfpLwf - ok
19:23:40.0310 5848 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
19:23:40.0311 5848 WIMMount - ok
19:23:40.0344 5848 WinDefend - ok
19:23:40.0350 5848 WinHttpAutoProxySvc - ok
19:23:40.0406 5848 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
19:23:40.0410 5848 Winmgmt - ok
19:23:40.0490 5848 [ 0C0195C48B6B8582FA6F6373032118DA ] WinRing0_1_2_0 C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys
19:23:40.0492 5848 WinRing0_1_2_0 - ok
19:23:40.0551 5848 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
19:23:40.0573 5848 WinRM - ok
19:23:40.0624 5848 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
19:23:40.0626 5848 WinUsb - ok
19:23:40.0681 5848 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
19:23:40.0692 5848 Wlansvc - ok
19:23:40.0767 5848 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
19:23:40.0769 5848 wlcrasvc - ok
19:23:40.0830 5848 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
19:23:40.0852 5848 wlidsvc - ok
19:23:40.0889 5848 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
19:23:40.0891 5848 WmiAcpi - ok
19:23:40.0927 5848 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
19:23:40.0931 5848 wmiApSrv - ok
19:23:40.0964 5848 WMPNetworkSvc - ok
19:23:40.0991 5848 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
19:23:40.0994 5848 WPCSvc - ok
19:23:41.0012 5848 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
19:23:41.0016 5848 WPDBusEnum - ok
19:23:41.0038 5848 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
19:23:41.0040 5848 ws2ifsl - ok
19:23:41.0059 5848 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
19:23:41.0062 5848 wscsvc - ok
19:23:41.0066 5848 WSearch - ok
19:23:41.0133 5848 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
19:23:41.0160 5848 wuauserv - ok
19:23:41.0191 5848 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
19:23:41.0193 5848 WudfPf - ok
19:23:41.0209 5848 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
19:23:41.0214 5848 WUDFRd - ok
19:23:41.0251 5848 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
19:23:41.0269 5848 wudfsvc - ok
19:23:41.0297 5848 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
19:23:41.0302 5848 WwanSvc - ok
19:23:41.0360 5848 ================ Scan global ===============================
19:23:41.0402 5848 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
19:23:41.0453 5848 [ 9E479C2B605C25DA4971ABA36250FAEF ] C:\Windows\system32\winsrv.dll
19:23:41.0462 5848 [ 9E479C2B605C25DA4971ABA36250FAEF ] C:\Windows\system32\winsrv.dll
19:23:41.0501 5848 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
19:23:41.0530 5848 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
19:23:41.0536 5848 [Global] - ok
19:23:41.0536 5848 ================ Scan MBR ==================================
19:23:41.0553 5848 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
19:23:41.0784 5848 \Device\Harddisk0\DR0 - ok
19:23:41.0784 5848 ================ Scan VBR ==================================
19:23:41.0806 5848 [ 96768BF22709312B068AEAD296611879 ] \Device\Harddisk0\DR0\Partition1
19:23:41.0808 5848 \Device\Harddisk0\DR0\Partition1 - ok
19:23:41.0820 5848 [ CAF88A4C74377A1441CE0E84360359E0 ] \Device\Harddisk0\DR0\Partition2
19:23:41.0821 5848 \Device\Harddisk0\DR0\Partition2 - ok
19:23:41.0848 5848 [ B7365C9198EA8B1BFFCE59C93669748A ] \Device\Harddisk0\DR0\Partition3
19:23:41.0849 5848 \Device\Harddisk0\DR0\Partition3 - ok
19:23:41.0850 5848 ============================================================
19:23:41.0850 5848 Scan finished
19:23:41.0850 5848 ============================================================
19:23:41.0857 2140 Detected object count: 0
19:23:41.0857 2140 Actual detected object count: 0

A tím to skončilo, po tom, co jsem spustil ten poslední program, restartoval win sám a pak když se to dkončilo a chtěl jsem psotnout log sem, zapnul chrome tak to napsalo něco ve smyslu:
ERROR
cesta ke chromu
Program se snaží spustit registr, který je určen k odstanění
nejde spustit vůbec nic, odstranilo to i NOD32
Takže asi reinstall, že?

Ne, máš to v návodu... Buď restartuj několikrát PC a nebo dej poslední funkční konfiguraci

Aha, jsem to ale blb, díky :)

ComboFix 13-02-01.04 - Valisek 01.02.2013 19:30:26.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3948.2285 [GMT 1:00]
Spuštěný z: c:\users\Valisek\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *Disabled/Updated* {CB0F8167-5331-BA19-698E-64816B6801A5}
SP: ESET NOD32 Antivirus 4.0 *Disabled/Updated* {706E6083-750B-B597-533E-5FF310EF4B18}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\0.bak
C:\install.exe
c:\programdata\Roaming
c:\users\Valisek\AppData\Roaming\4F557LN0RRServer.exe
c:\users\Valisek\AppData\Roaming\96JGIZPMBQBHV3Server.exe
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\pthreadVC.dll
c:\windows\SysWow64\tmp4AC2.tmp
c:\windows\SysWow64\tmp4AC3.tmp
c:\windows\SysWow64\wpcap.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_npf
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-01-01 do 2013-02-01 )))))))))))))))))))))))))))))))
.
.
2013-02-01 18:41 . 2013-02-01 18:41 -------- d-----w- c:\users\postgres\AppData\Local\temp
2013-02-01 18:41 . 2013-02-01 18:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-02-01 18:13 . 2013-02-01 18:13 -------- d-----w- c:\users\Valisek\AppData\Local\Acer
2013-02-01 15:43 . 2013-02-01 15:43 -------- d-----w- c:\program files\ESET
2013-02-01 14:57 . 2013-02-01 14:57 -------- d-----w- c:\users\Valisek\AppData\Roaming\Malwarebytes
2013-02-01 14:57 . 2013-02-01 14:57 -------- d-----w- c:\users\Valisek\AppData\Local\Apps
2013-02-01 14:57 . 2013-02-01 14:57 -------- d-----w- c:\programdata\Malwarebytes
2013-02-01 14:57 . 2013-02-01 14:57 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-02-01 14:57 . 2012-12-14 15:49 24176 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-02-01 14:57 . 2013-02-01 14:57 -------- d-----w- c:\users\Valisek\AppData\Local\Programs
2013-02-01 14:07 . 2013-02-01 14:07 388096 ----a-r- c:\users\Valisek\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-02-01 14:07 . 2013-02-01 14:07 -------- d-----w- c:\program files (x86)\Trend Micro
2013-01-31 16:19 . 2013-01-31 16:19 -------- d-----w- c:\users\Valisek\AppData\Roaming\ParetoLogic
2013-01-31 16:19 . 2013-01-31 16:19 -------- d-----w- c:\users\Valisek\AppData\Roaming\DriverCure
2013-01-31 16:18 . 2013-01-31 16:18 -------- d-----w- c:\program files (x86)\Common Files\ParetoLogic
2013-01-31 16:18 . 2013-01-31 16:18 -------- d-----w- c:\programdata\ParetoLogic
2013-01-31 16:18 . 2013-01-31 16:18 -------- d-----w- c:\program files (x86)\ParetoLogic
2013-01-29 20:18 . 2013-01-29 20:18 -------- d-----w- c:\windows\SysWow64\NV
2013-01-29 20:18 . 2013-01-29 20:18 -------- d-----w- c:\windows\system32\NV
2013-01-29 19:44 . 2005-04-03 22:00 63488 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\ISBEW64.exe
2013-01-29 19:44 . 2005-04-03 22:02 753664 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iKernel.dll
2013-01-29 19:44 . 2005-04-03 22:02 69714 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\ctor.dll
2013-01-29 19:44 . 2005-04-03 22:01 274432 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iscript.dll
2013-01-29 19:44 . 2005-04-03 22:00 184320 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iuser.dll
2013-01-29 19:44 . 2005-04-03 21:59 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\DotNetInstaller.exe
2013-01-29 19:43 . 2013-01-29 19:43 200836 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iGdi.dll
2013-01-29 19:43 . 2013-01-29 19:43 331908 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\setup.dll
2013-01-29 13:33 . 2002-12-05 13:10 155648 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2013-01-29 13:33 . 2002-12-02 12:33 237568 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2013-01-29 13:33 . 2002-12-05 13:12 692224 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2013-01-29 13:33 . 2002-12-02 14:22 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2013-01-29 13:33 . 2002-12-02 12:33 57344 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2013-01-29 13:33 . 2013-01-29 13:33 163972 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2013-01-29 13:33 . 2013-01-29 13:33 282756 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2013-01-28 09:59 . 2013-01-28 09:59 -------- d-----w- c:\users\UpdatusUser
2013-01-28 09:59 . 2013-01-28 09:59 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2013-01-28 09:58 . 2012-12-29 08:40 6382008 ----a-w- c:\windows\system32\nvcpl.dll
2013-01-28 09:58 . 2012-12-29 08:40 3455416 ----a-w- c:\windows\system32\nvsvc64.dll
2013-01-28 09:58 . 2012-12-29 08:40 2923201 ----a-w- c:\windows\system32\nvcoproc.bin
2013-01-28 09:58 . 2012-12-29 08:40 997816 ----a-w- c:\windows\system32\nv3dappshext.dll
2013-01-28 09:58 . 2012-12-29 08:40 884152 ----a-w- c:\windows\system32\nvvsvc.exe
2013-01-28 09:58 . 2012-12-29 08:40 63928 ----a-w- c:\windows\system32\nvshext.dll
2013-01-28 09:58 . 2012-12-29 08:40 55736 ----a-w- c:\windows\system32\nv3dappshextr.dll
2013-01-28 09:58 . 2012-12-29 08:40 2558392 ----a-w- c:\windows\system32\nvsvcr.dll
2013-01-28 09:58 . 2012-12-29 08:40 118712 ----a-w- c:\windows\system32\nvmctray.dll
2013-01-28 09:57 . 2013-01-28 09:57 -------- d-----w- c:\programdata\NVIDIA Corporation
2013-01-27 01:32 . 2013-01-27 01:32 -------- d-----w- c:\users\Valisek\AppData\Roaming\Doublefine
2013-01-25 22:27 . 2013-01-30 13:10 -------- d-----w- c:\program files (x86)\SpeedFan
2013-01-25 22:22 . 2013-01-25 22:22 22528 ----a-w- c:\windows\system32\drivers\nhcDriver.sys
2013-01-25 22:20 . 2013-01-25 22:21 -------- d-----w- c:\program files (x86)\Notebook Hardware Control
2013-01-21 13:36 . 2013-01-21 13:40 -------- d-----w- c:\programdata\TmForever
2013-01-17 14:36 . 2013-01-17 14:36 -------- d-----w- c:\users\Valisek\AppData\Roaming\xim
2013-01-17 10:56 . 2013-01-17 10:56 -------- d-----w- c:\users\Valisek\AppData\Roaming\PT client 'Shards'
2013-01-16 07:39 . 2013-01-16 07:39 -------- d-----w- c:\users\Valisek\AppData\Local\Futuremark_Corporation
2013-01-16 07:38 . 2013-01-16 08:03 -------- d-----w- c:\program files (x86)\Futuremark
2013-01-16 07:38 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\SysWow64\D3DCompiler_43.dll
2013-01-16 07:38 . 2010-05-26 10:41 1998168 ----a-w- c:\windows\SysWow64\D3DX9_43.dll
2013-01-16 07:37 . 2013-01-16 07:37 -------- d-----w- c:\program files\Futuremark
2013-01-15 10:12 . 2013-01-15 10:12 -------- d-----w- c:\program files (x86)\Electronic Arts
2013-01-13 20:50 . 2013-01-14 20:25 -------- d-----w- c:\users\Valisek\AppData\Roaming\Xfire
2013-01-13 20:50 . 2013-01-13 20:54 -------- d-----w- c:\programdata\Xfire
2013-01-13 20:50 . 2013-01-13 20:50 -------- d-----w- c:\program files (x86)\Xfire
2013-01-11 12:46 . 2008-07-12 07:18 467984 ----a-w- c:\windows\SysWow64\d3dx10_39.dll
2013-01-11 12:46 . 2008-07-12 07:18 1493528 ----a-w- c:\windows\SysWow64\D3DCompiler_39.dll
2013-01-11 12:46 . 2008-07-12 07:18 540688 ----a-w- c:\windows\system32\d3dx10_39.dll
2013-01-11 12:46 . 2008-07-12 07:18 1942552 ----a-w- c:\windows\system32\D3DCompiler_39.dll
2013-01-11 12:46 . 2008-07-12 07:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
2013-01-11 12:46 . 2008-07-12 07:18 4992520 ----a-w- c:\windows\system32\D3DX9_39.dll
2013-01-11 11:36 . 2013-01-11 11:36 -------- d-----w- c:\users\Valisek\Games
2013-01-11 10:37 . 2013-01-11 10:37 -------- d-----w- c:\windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2013-01-11 10:07 . 2013-01-11 10:07 -------- d-----w- c:\users\Valisek\AppData\Local\Quadriga Games
2013-01-10 11:42 . 2012-11-23 03:13 68608 ----a-w- c:\windows\system32\taskhost.exe
2013-01-10 11:42 . 2012-11-09 05:45 750592 ----a-w- c:\windows\system32\win32spl.dll
2013-01-10 11:42 . 2012-11-09 04:43 492032 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-01-10 11:42 . 2012-11-01 05:43 2002432 ----a-w- c:\windows\system32\msxml6.dll
2013-01-10 11:42 . 2012-11-01 05:43 1882624 ----a-w- c:\windows\system32\msxml3.dll
2013-01-10 11:42 . 2012-11-01 04:47 1389568 ----a-w- c:\windows\SysWow64\msxml6.dll
2013-01-10 11:42 . 2012-11-01 04:47 1236992 ----a-w- c:\windows\SysWow64\msxml3.dll
2013-01-10 11:42 . 2012-11-20 05:48 307200 ----a-w- c:\windows\system32\ncrypt.dll
2013-01-10 11:42 . 2012-11-20 04:51 220160 ----a-w- c:\windows\SysWow64\ncrypt.dll
2013-01-10 11:42 . 2012-11-22 05:44 800768 ----a-w- c:\windows\system32\usp10.dll
2013-01-10 11:42 . 2012-11-22 04:45 626688 ----a-w- c:\windows\SysWow64\usp10.dll
2013-01-10 11:40 . 2012-11-30 05:41 424448 ----a-w- c:\windows\system32\KernelBase.dll
2013-01-10 11:39 . 2012-11-23 03:26 3149824 ----a-w- c:\windows\system32\win32k.sys
2013-01-08 16:16 . 2013-01-08 16:16 -------- d-----w- c:\users\Valisek\AppData\Roaming\Wargaming.net
2013-01-08 13:17 . 2013-01-08 13:17 -------- d-----w- c:\programdata\Curse Client
2013-01-06 21:51 . 2013-01-06 21:51 -------- d-----w- c:\users\Valisek\AppData\Roaming\ts3overlay
2013-01-06 21:50 . 2013-01-29 20:13 -------- d-----w- c:\users\Valisek\AppData\Roaming\TS3Client
2013-01-06 21:49 . 2013-01-06 21:49 -------- d-----w- c:\program files (x86)\TeamSpeak 3 Client
2013-01-05 16:14 . 2013-01-05 16:16 -------- d-----w- c:\users\Valisek\AppData\Roaming\twinstar_launcher
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-16 08:05 . 2012-09-29 15:53 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2013-01-16 08:05 . 2012-09-29 15:53 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2013-01-16 08:05 . 2012-09-29 15:53 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2013-01-16 08:05 . 2012-09-29 15:53 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2013-01-15 08:22 . 2012-12-05 14:51 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-01-15 08:22 . 2012-09-28 10:21 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-01-15 08:20 . 2012-09-28 10:21 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2012-12-16 17:11 . 2012-12-24 02:00 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-12-16 14:45 . 2012-12-24 02:00 367616 ----a-w- c:\windows\system32\atmfd.dll
2012-12-16 14:13 . 2012-12-24 02:00 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2012-12-16 14:13 . 2012-12-24 02:00 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2012-12-07 20:40 . 2012-12-07 20:40 42440 ----a-w- c:\windows\SysWow64\xfcodec.dll
2012-12-07 20:40 . 2012-12-07 20:40 28104 ----a-w- c:\windows\system32\xfcodec64.dll
2012-12-05 14:49 . 2012-09-28 10:21 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2012-11-30 04:45 . 2013-01-10 11:40 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-11-21 13:10 . 2012-11-21 13:10 3123272 ----a-r- c:\windows\SysWow64\pbsvc.exe
2012-11-14 07:06 . 2012-12-16 04:05 17811968 ----a-w- c:\windows\system32\mshtml.dll
2012-11-14 06:32 . 2012-12-16 04:05 10925568 ----a-w- c:\windows\system32\ieframe.dll
2012-11-14 06:11 . 2012-12-16 04:06 2312704 ----a-w- c:\windows\system32\jscript9.dll
2012-11-14 06:04 . 2012-12-16 04:06 1346048 ----a-w- c:\windows\system32\urlmon.dll
2012-11-14 06:04 . 2012-12-16 04:06 1392128 ----a-w- c:\windows\system32\wininet.dll
2012-11-14 06:02 . 2012-12-16 04:06 1494528 ----a-w- c:\windows\system32\inetcpl.cpl
2012-11-14 06:02 . 2012-12-16 04:06 237056 ----a-w- c:\windows\system32\url.dll
2012-11-14 05:59 . 2012-12-16 04:06 85504 ----a-w- c:\windows\system32\jsproxy.dll
2012-11-14 05:58 . 2012-12-16 04:05 816640 ----a-w- c:\windows\system32\jscript.dll
2012-11-14 05:57 . 2012-12-16 04:05 599040 ----a-w- c:\windows\system32\vbscript.dll
2012-11-14 05:57 . 2012-12-16 04:06 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2012-11-14 05:55 . 2012-12-16 04:05 2144768 ----a-w- c:\windows\system32\iertutil.dll
2012-11-14 05:55 . 2012-12-16 04:06 729088 ----a-w- c:\windows\system32\msfeeds.dll
2012-11-14 05:53 . 2012-12-16 04:06 96768 ----a-w- c:\windows\system32\mshtmled.dll
2012-11-14 05:52 . 2012-12-16 04:06 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-11-14 05:46 . 2012-12-16 04:06 248320 ----a-w- c:\windows\system32\ieui.dll
2012-11-14 02:09 . 2012-12-16 04:05 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll
2012-11-14 01:58 . 2012-12-16 04:06 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2012-11-14 01:57 . 2012-12-16 04:06 1129472 ----a-w- c:\windows\SysWow64\wininet.dll
2012-11-14 01:49 . 2012-12-16 04:06 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2012-11-14 01:48 . 2012-12-16 04:06 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-11-14 01:44 . 2012-12-16 04:06 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2012-11-09 05:45 . 2012-12-12 08:42 2048 ----a-w- c:\windows\system32\tzres.dll
2012-11-09 04:42 . 2012-12-12 08:42 2048 ----a-w- c:\windows\SysWow64\tzres.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-12-09 04:43 1720928 ----a-w- c:\progra~2\MICROS~4\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-12-09 04:43 1720928 ----a-w- c:\progra~2\MICROS~4\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-12-09 04:43 1720928 ----a-w- c:\progra~2\MICROS~4\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\users\Valisek\Downloads\uTorrent.exe" [2012-09-26 896912]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-07-01 1103440]
"Dolby Advanced Audio v2"="c:\dolby pcee4\pcee4.exe" [2011-06-01 506712]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2011-09-20 341360]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"IsMyWinLockerReboot"="msiexec.exe" [2010-11-21 73216]
.
c:\users\Valisek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
DesktopVideoPlayer.lnk - c:\users\Valisek\AppData\Local\vghd\bin\vghd.exe [2012-11-27 2836480]
Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2012-10-7 41160]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli c:\program files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-06-07 191752]
R3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys [2011-08-30 620072]
R3 BTWDPAN;Bluetooth Personal Area Network;c:\windows\system32\DRIVERS\btwdpan.sys [2011-08-30 89640]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2011-08-30 39976]
R3 cpuz135;cpuz135;c:\windows\TEMP\cpuz135\cpuz135_x64.sys [x]
R3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;c:\games\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-12-15 25832]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe [2011-12-09 135584]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files (x86)\Garena Plus\Room\safedrv.sys [x]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [2011-06-21 34200]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-05-02 340240]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-10-01 178824]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 tapoas;TAP-Win32 Adapter OAS;c:\windows\system32\DRIVERS\tapoas.sys [2012-07-15 30720]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-10-02 1255736]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2012-12-29 30648]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-09-26 283200]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-09-29 136584]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2011-11-27 22648]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2011-11-27 20520]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2011-11-27 62776]
S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-05-13 249648]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2011-07-01 353360]
S2 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-06-21 173424]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2009-09-29 735960]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2009-09-29 123200]
S2 ePowerSvc;ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2011-08-02 872552]
S2 FreemakeVideoCapture;FreemakeVideoCapture;c:\program files (x86)\Freemake\CaptureLib\CaptureLibService.exe [2012-12-04 8704]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2011-05-30 36456]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-04-30 13592]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2011-04-22 244624]
S2 MagicHoldem;MagicHoldem Service;c:\users\Valisek\AppData\Local\MagicHoldem\MagicHoldem_service.exe [2013-01-06 74752]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-12-14 682344]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2012-07-13 769432]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-04-24 256832]
S2 OpenVPNAccessClient;OpenVPN Access Client;c:\program files (x86)\OpenVPN Technologies\PrivateTunnel\core\capiws.exe [2012-12-14 24064]
S2 postgresql-8.4;postgresql-8.4 - PostgreSQL Server 8.4;c:/postgreSQL/bin/pg_ctl.exe runservice -N postgresql-8.4 -D c:/postgreSQL/data -w [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2012-12-14 3467768]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2012-11-02 2365792]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
S3 b57xdbd;Broadcom xD Picture Bus Driver Service;c:\windows\system32\DRIVERS\b57xdbd.sys [2011-01-21 67624]
S3 b57xdmp;Broadcom xD Picture vstorp client drv;c:\windows\system32\DRIVERS\b57xdmp.sys [2011-01-21 19496]
S3 bScsiMSa;bScsiMSa;c:\windows\system32\DRIVERS\bScsiMSa.sys [2011-05-16 51240]
S3 bScsiSDa;bScsiSDa;c:\windows\system32\DRIVERS\bScsiSDa.sys [2011-05-06 86056]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2011-04-05 142632]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [2011-06-21 25496]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2011-05-10 425000]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-12-14 24176]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [2012-09-19 11880]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-31 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3331623675-406341173-485340118-1001Core.job
- c:\users\Valisek\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-11-21 09:57]
.
2013-02-01 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3331623675-406341173-485340118-1001UA.job
- c:\users\Valisek\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-11-21 09:57]
.
2013-02-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3331623675-406341173-485340118-1001Core.job
- c:\users\Valisek\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-26 16:24]
.
2013-02-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3331623675-406341173-485340118-1001UA.job
- c:\users\Valisek\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-26 16:24]
.
2013-02-01 c:\windows\Tasks\ParetoLogic Registration3.job
- c:\windows\system32\rundll32.exe [2009-07-13 01:14]
.
2013-02-01 c:\windows\Tasks\ParetoLogic Update Version3 Startup Task.job
- c:\program files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe [2012-06-27 21:07]
.
2013-01-31 c:\windows\Tasks\ParetoLogic Update Version3.job
- c:\program files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe [2012-06-27 21:07]
.
2013-01-31 c:\windows\Tasks\RegCure Pro.job
- c:\program files (x86)\ParetoLogic\RegCure Pro\RegCurePro.exe [2013-01-18 18:35]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-12-09 04:40 2323040 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-12-09 04:40 2323040 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-12-09 04:40 2323040 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-06-21 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-06-21 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-06-21 416024]
"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-05-02 1935120]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-08-16 12673128]
"RtHDVBg_Dolby"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-08-16 2277480]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-09-29 2716216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyServer = iwsa-01.ph.koop.cz:8080
uInternet Settings,ProxyOverride = <local>
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\MICROS~2\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 10.0.0.138
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
.
.
------- Asociace souborů -------
.
txtfile="c:\program files (x86)\PSPad editor\PSPad.exe" "%1"
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-Windows Services for Processes - c:\users\Valisek\AppData\Roaming\svchost.exe
Toolbar-Locked - (no file)
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
AddRemove-Abe's Oddysee - c:\program files (x86)\Abe's Oddysee\Uninst.isu
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\postgresql-8.4]
"ImagePath"="c:/postgreSQL/bin/pg_ctl.exe runservice -N \"postgresql-8.4\" -D \"c:/postgreSQL/data\" -w"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\postgresql-8.4]
"ImagePath"="c:/postgreSQL/bin/pg_ctl.exe runservice -N \"postgresql-8.4\" -D \"c:/postgreSQL/data\" -w"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3331623675-406341173-485340118-1001\Software\SecuROM\License information*]
"datasecu"=hex:60,a5,07,66,98,90,03,20,ee,48,88,46,3b,87,66,25,18,49,c0,4a,25,
76,a6,58,cd,2b,09,b4,9d,70,9d,c0,11,4e,52,62,d1,12,be,e2,77,4e,cf,02,60,e4,\
"rkeysecu"=hex:3c,a5,00,9c,6c,fe,72,07,2a,12,95,c9,a4,a1,32,56
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG*]
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Launch Manager\LMutilps32.exe
c:\users\Valisek\AppData\Local\MagicHoldem\MagicHoldemLauncher.exe
c:\windows\SysWOW64\rundll32.exe
c:\users\Valisek\AppData\Local\MagicHoldem\MagicHoldem.exe
c:\windows\SysWOW64\lkcitdl.exe
c:\windows\SysWOW64\lkads.exe
c:\windows\SysWOW64\lktsrv.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\program files (x86)\National Instruments\Shared\Security\nidmsrv.exe
c:\windows\SysWOW64\nisvcloc.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\postgresql\bin\pg_ctl.exe
c:\program files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
c:\program files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
c:\postgresql\bin\postgres.exe
c:\postgresql\bin\postgres.exe
c:\postgresql\bin\postgres.exe
c:\postgresql\bin\postgres.exe
c:\postgresql\bin\postgres.exe
c:\program files (x86)\OpenVPN Technologies\PrivateTunnel\core\ovpntray.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
.
**************************************************************************
.
Celkový čas: 2013-02-01 19:51:17 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-02-01 18:51
.
Před spuštěním: Volných bajtů: 36 595 122 176
Po spuštění: Volných bajtů: 35 817 828 352
.
- - End Of File - - 70FED6FF5BEFB754830ECA908900A258

Jestli nepoužíváš Garenu, odinstaluj ji

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE
Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.


- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu