PC-HELP.CZ

ahoj,
potřeboval bych poradil známý má zavirovaný PC... Facebook... posílám HJT + MBAM

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:48:17, on 22.4.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16476)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\PROGRAM FILES (X86)\ASUS\ATKOSD2\ATKOSD2.EXE
C:\PROGRAM FILES (X86)\ITUNES\ITUNESHELPER.EXE
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F3 - REG:win.ini: load=C:\Users\Pepa\LOCALS~1\Temp\mspwcpiv.exe
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O1 - Hosts: 192.157.56.28 http://www.google-analytics.com.
O1 - Hosts: 192.157.56.28 ad-emea.doubleclick.net.
O1 - Hosts: 192.157.56.28 http://www.statcounter.com.
O1 - Hosts: 192.157.56.28 connect.facebook.net.
O1 - Hosts: 192.157.56.28 platform.twitter.com.
O1 - Hosts: 93.115.241.27 http://www.google-analytics.com.
O1 - Hosts: 93.115.241.27 ad-emea.doubleclick.net.
O1 - Hosts: 93.115.241.27 http://www.statcounter.com.
O1 - Hosts: 93.115.241.27 connect.facebook.net.
O1 - Hosts: 93.115.241.27 platform.twitter.com.
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [ADSMTray] C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ATKOSD2] c:\program files (x86)\asus\atkosd2\atkosd2.exe
O4 - HKLM\..\Run: [ApnUpdater] c:\program files (x86)\ask.com\updater\updater.exe
O4 - HKLM\..\Run: [iTunesHelper] c:\program files (x86)\itunes\ituneshelper.exe
O4 - HKLM\..\Run: [APSDaemon] c:\program files (x86)\common files\apple\apple application support\apsdaemon.exe
O4 - HKLM\..\Run: [Adobe ARM] c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Google Update] "C:\Users\Pepa\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Facebook Update] "c:\users\pepa\appdata\local\facebook\update\facebookupdate.exe" /c /nocrashserver
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: spmgr - Unknown owner - C:\Program Files (x86)\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8887 bytes

Malwarebytes Anti-Malware 1.75.0.1300
http://www.malwarebytes.org

Verze: v2013.04.22.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Pepa :: PEPA-PC [administrátor]

22.4.2013 19:48:39
MBAM-log-2013-04-22 (19-50-35).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 206577
Uplynulý čas: 1 minut, 19 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 2
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|Load (PUM.UserWLoad) -> Data: C:\Users\Pepa\LOCALS~1\Temp\mspwcpiv.exe -> Nebyla provedena žádná instrukce.
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|Load (Trojan.Agent) -> Data: C:\Users\Pepa\LOCALS~1\Temp\mspwcpiv.exe -> Nebyla provedena žádná instrukce.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\Users\Pepa\AppData\Roaming\winsvcns.sys (Malware.Trace) -> Nebyla provedena žádná instrukce.

(konec)

k HJT - ty IP neznám

díky za pomoc

Odinstaluj McAfee

Fixni:
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
- Pokud používáš Firefox, klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Chrome, nic dalšího nevybírej a dej Empty Selected.
Po vyčištění klikni na Exit k zavření programu.

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Znovu spusť MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si RogueKiller
32bit:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a WIN7 spusť program jako správce, u XP poklepáním.
- Počkej až skončí Prescan.
- Zkontroluj, zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
- Potom klikni na „Prohledat“.
- Program skenuje PC. Po proskenování klikni na „Zpráva“ - celý obsah logu sem zkopíruj.
Pokud je program blokován, zkus ho spustit několikrát. Pokud dále program nepůjde spustit, přejmenuj ho na winlogon.exe.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:37:30, on 23.4.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16476)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F3 - REG:win.ini: load=C:\Users\Pepa\LOCALS~1\Temp\mspwcpiv.exe
O1 - Hosts: ::1 localhost
O1 - Hosts: 192.157.56.28 http://www.google-analytics.com.
O1 - Hosts: 192.157.56.28 ad-emea.doubleclick.net.
O1 - Hosts: 192.157.56.28 http://www.statcounter.com.
O1 - Hosts: 192.157.56.28 connect.facebook.net.
O1 - Hosts: 192.157.56.28 platform.twitter.com.
O1 - Hosts: 93.115.241.27 http://www.google-analytics.com.
O1 - Hosts: 93.115.241.27 ad-emea.doubleclick.net.
O1 - Hosts: 93.115.241.27 http://www.statcounter.com.
O1 - Hosts: 93.115.241.27 connect.facebook.net.
O1 - Hosts: 93.115.241.27 platform.twitter.com.
O4 - HKLM\..\Run: [ADSMTray] C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ATKOSD2] c:\program files (x86)\asus\atkosd2\atkosd2.exe
O4 - HKLM\..\Run: [APSDaemon] c:\program files (x86)\common files\apple\apple application support\apsdaemon.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: spmgr - Unknown owner - C:\Program Files (x86)\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7411 bytes


Malwarebytes Anti-Malware 1.75.0.1300
http://www.malwarebytes.org

Verze: v2013.04.22.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Pepa :: PEPA-PC [administrátor]

23.4.2013 19:31:23
MBAM-log-2013-04-23 (19-34-58).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 206427
Uplynulý čas: 3 minut, 27 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 2
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|Load (PUM.UserWLoad) -> Data: C:\Users\Pepa\LOCALS~1\Temp\mspwcpiv.exe -> Nebyla provedena žádná instrukce.
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|Load (Trojan.Agent) -> Data: C:\Users\Pepa\LOCALS~1\Temp\mspwcpiv.exe -> Nebyla provedena žádná instrukce.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

# AdwCleaner v2.202 - Log vytvooen 23/04/2013 v 19:28:20
# Aktualizováno 23/04/2013 Xplode
# Operaení systém : Windows 7 Professional Service Pack 1 (64 bits)
# Uživatel : Pepa - PEPA-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\Pepa\Desktop\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files (x86)\Ask.com
Složka Nalezeno : C:\Users\Pepa\AppData\LocalLow\AskToolbar

***** [Registry] *****

Klíe Nalezeno : HKCU\Software\APN
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Klíe Nalezeno : HKLM\Software\APN
Klíe Nalezeno : HKLM\Software\AskToolbar
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v9.0.8112.16476

[OK] Registry jsou eisté.

-\\ Google Chrome v26.0.1410.64

Soubor : C:\Users\Pepa\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [1356 octets] - [23/04/2013 19:28:20]

########## EOF - C:\AdwCleaner[R1].txt - [1416 octets] ##########

RogueKiller V8.5.4 _x64_ [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Pepa [Práva správce]
Mód : Kontrola -- Datum : 04/23/2013 19:30:23
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 5 ¤¤¤
[SHELL][SUSP PATH] HKCU\[...]\Windows : Load (C:\Users\Pepa\Local Settings\Temp\mspwcpiv.exe) [x] -> NALEZENO
[SHELL][SUSP PATH] HKUS\S-1-5-21-3093074458-2507233680-1440018403-1000[...]\Windows : Load (C:\Users\Pepa\Local Settings\Temp\mspwcpiv.exe) [x] -> NALEZENO
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ Zvláštní soubory / Složky: ¤¤¤
[ZeroAccess][FILE] @ : C:\$recycle.bin\S-1-5-21-3093074458-2507233680-1440018403-1000\$c0fad88356123afbab95ef6898627b92\@ [-] --> NALEZENO
[ZeroAccess][FOLDER] U : C:\$recycle.bin\S-1-5-18\$c0fad88356123afbab95ef6898627b92\U --> NALEZENO
[ZeroAccess][FOLDER] U : C:\$recycle.bin\S-1-5-21-3093074458-2507233680-1440018403-1000\$c0fad88356123afbab95ef6898627b92\U --> NALEZENO
[ZeroAccess][FOLDER] L : C:\$recycle.bin\S-1-5-18\$c0fad88356123afbab95ef6898627b92\L --> NALEZENO
[ZeroAccess][FOLDER] L : C:\$recycle.bin\S-1-5-21-3093074458-2507233680-1440018403-1000\$c0fad88356123afbab95ef6898627b92\L --> NALEZENO

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Nákaza : Mal.Hosts|ZeroAccess ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 localhost
::1 localhost
192.157.56.28 http://www.google-analytics.com.
192.157.56.28 ad-emea.doubleclick.net.
192.157.56.28 http://www.statcounter.com.
192.157.56.28 connect.facebook.net.
192.157.56.28 platform.twitter.com.
93.115.241.27 http://www.google-analytics.com.
93.115.241.27 ad-emea.doubleclick.net.
93.115.241.27 http://www.statcounter.com.
93.115.241.27 connect.facebook.net.
93.115.241.27 platform.twitter.com.


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: Hitachi HTS543232L9A300 +++++
--- User ---
[MBR] d29f2754edd8a448b82b7ae7517cebdc
[BSP] c83f6d3cdea8c218388548da794008b8 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 63 | Size: 10001 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 20482875 | Size: 152617 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 333043515 | Size: 142623 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[1]_S_04232013_02d1930.txt >>
RKreport[1]_S_04232013_02d1930.txt

k HJT - IP z hosts nejdou odstranit
MBAM - soubory se neodstranily ani po restartu PC, jak program chtel

Zkus to ještě jednou v nouz. režimu:

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit
Můžeš sem pak vložit nový log z MbAM.

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "

- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání skončeno "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

+
Spusť znovu RogueKiller
Pokud používáš Win Vista či W7, klikni na RogueKiller pravým a dej spustit jako správce.
Pak klikni na Oprava Host a Zpráva - otevře se log, ten sem vlož.

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2013.04.22.07

Windows 7 Service Pack 1 x64 NTFS (Nouzový režim)
Internet Explorer 9.0.8112.16421
Pepa :: PEPA-PC [administrátor]

24.4.2013 19:14:28
mbam-log-2013-04-24 (19-14-28).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 205810
Uplynulý čas: 3 minut, 42 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 2
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|Load (PUM.UserWLoad) -> Data: C:\Users\Pepa\LOCALS~1\Temp\mspwcpiv.exe -> Přesun do karantény a smazání se zdařilo.
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|Load (Trojan.Agent) -> Data: C:\Users\Pepa\LOCALS~1\Temp\mspwcpiv.exe -> Přesun do karantény a smazání se zdařilo.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

RogueKiller V8.5.4 _x64_ [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Pepa [Práva správce]
Mód : Odebrat -- Datum : 04/24/2013 19:26:56
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 3 ¤¤¤
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> NAHRAZENO (1)
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ Zvláštní soubory / Složky: ¤¤¤
[ZeroAccess][FILE] @ : C:\$recycle.bin\S-1-5-21-3093074458-2507233680-1440018403-1000\$c0fad88356123afbab95ef6898627b92\@ [-] --> ODSTRANĚN
[ZeroAccess][FOLDER] ROOT : C:\$recycle.bin\S-1-5-18\$c0fad88356123afbab95ef6898627b92\U --> ODSTRANĚN
[ZeroAccess][FOLDER] ROOT : C:\$recycle.bin\S-1-5-21-3093074458-2507233680-1440018403-1000\$c0fad88356123afbab95ef6898627b92\U --> ODSTRANĚN
[ZeroAccess][FOLDER] ROOT : C:\$recycle.bin\S-1-5-18\$c0fad88356123afbab95ef6898627b92\L --> ODSTRANĚN
[ZeroAccess][FOLDER] ROOT : C:\$recycle.bin\S-1-5-21-3093074458-2507233680-1440018403-1000\$c0fad88356123afbab95ef6898627b92\L --> ODSTRANĚN

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Nákaza : Mal.Hosts|ZeroAccess ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 localhost
::1 localhost
192.157.56.28 www.google-analytics.com.
192.157.56.28 ad-emea.doubleclick.net.
192.157.56.28 www.statcounter.com.
192.157.56.28 connect.facebook.net.
192.157.56.28 platform.twitter.com.
93.115.241.27 www.google-analytics.com.
93.115.241.27 ad-emea.doubleclick.net.
93.115.241.27 www.statcounter.com.
93.115.241.27 connect.facebook.net.
93.115.241.27 platform.twitter.com.


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: Hitachi HTS543232L9A300 +++++
--- User ---
[MBR] d29f2754edd8a448b82b7ae7517cebdc
[BSP] c83f6d3cdea8c218388548da794008b8 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 63 | Size: 10001 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 20482875 | Size: 152617 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 333043515 | Size: 142623 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[2]_D_04242013_02d1926.txt >>
RKreport[1]_S_04242013_02d1925.txt ; RKreport[2]_D_04242013_02d1926.txt

RogueKiller V8.5.4 _x64_ [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Pepa [Práva správce]
Mód : Oprava HOSTS -- Datum : 04/24/2013 19:28:52
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Nákaza : Mal.Hosts ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 localhost
::1 localhost
192.157.56.28 www.google-analytics.com.
192.157.56.28 ad-emea.doubleclick.net.
192.157.56.28 www.statcounter.com.
192.157.56.28 connect.facebook.net.
192.157.56.28 platform.twitter.com.
93.115.241.27 www.google-analytics.com.
93.115.241.27 ad-emea.doubleclick.net.
93.115.241.27 www.statcounter.com.
93.115.241.27 connect.facebook.net.
93.115.241.27 platform.twitter.com.


¤¤¤ Resetovaný HOSTS: ¤¤¤
127.0.0.1 localhost

Dokončeno : << RKreport[3]_H_04242013_02d1928.txt >>
RKreport[1]_S_04242013_02d1925.txt ; RKreport[2]_D_04242013_02d1926.txt ; RKreport[3]_H_04242013_02d1928.txt

19:30:24.0717 0752 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
19:30:25.0106 0752 ============================================================
19:30:25.0106 0752 Current date / time: 2013/04/24 19:30:25.0106
19:30:25.0106 0752 SystemInfo:
19:30:25.0106 0752
19:30:25.0106 0752 OS Version: 6.1.7601 ServicePack: 1.0
19:30:25.0106 0752 Product type: Workstation
19:30:25.0106 0752 ComputerName: PEPA-PC
19:30:25.0107 0752 UserName: Pepa
19:30:25.0107 0752 Windows directory: C:\Windows
19:30:25.0107 0752 System windows directory: C:\Windows
19:30:25.0107 0752 Running under WOW64
19:30:25.0107 0752 Processor architecture: Intel x64
19:30:25.0107 0752 Number of processors: 2
19:30:25.0107 0752 Page size: 0x1000
19:30:25.0107 0752 Boot type: Normal boot
19:30:25.0107 0752 ============================================================
19:30:25.0574 0752 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:30:25.0581 0752 Drive \Device\Harddisk1\DR1 - Size: 0x7C00000 (0.12 Gb), SectorSize: 0x200, Cylinders: 0xF, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
19:30:25.0585 0752 ============================================================
19:30:25.0585 0752 \Device\Harddisk0\DR0:
19:30:25.0586 0752 MBR partitions:
19:30:25.0586 0752 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1388B3B, BlocksNum 0x12A14C00
19:30:25.0600 0752 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x13D9D77A, BlocksNum 0x1168FF47
19:30:25.0600 0752 \Device\Harddisk1\DR1:
19:30:25.0601 0752 MBR partitions:
19:30:25.0601 0752 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x6, StartLBA 0x20, BlocksNum 0x3DFE0
19:30:25.0601 0752 ============================================================
19:30:25.0635 0752 C: <-> \Device\Harddisk0\DR0\Partition1
19:30:25.0655 0752 D: <-> \Device\Harddisk0\DR0\Partition2
19:30:25.0655 0752 ============================================================
19:30:25.0656 0752 Initialize success
19:30:25.0656 0752 ============================================================
19:30:33.0054 2832 ============================================================
19:30:33.0054 2832 Scan started
19:30:33.0054 2832 Mode: Manual;
19:30:33.0054 2832 ============================================================
19:30:33.0434 2832 ================ Scan system memory ========================
19:30:33.0434 2832 System memory - ok

19:30:33.0434 2832 ================ Scan services =============================
19:30:33.0590 2832 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
19:30:33.0591 2832 1394ohci - ok
19:30:33.0635 2832 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
19:30:33.0637 2832 ACPI - ok
19:30:33.0653 2832 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
19:30:33.0653 2832 AcpiPmi - ok
19:30:33.0734 2832 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
19:30:33.0735 2832 AdobeARMservice - ok
19:30:33.0824 2832 [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
19:30:33.0826 2832 AdobeFlashPlayerUpdateSvc - ok
19:30:33.0878 2832 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
19:30:33.0881 2832 adp94xx - ok
19:30:33.0918 2832 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
19:30:33.0920 2832 adpahci - ok
19:30:33.0947 2832 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
19:30:33.0948 2832 adpu320 - ok
19:30:34.0031 2832 [ C0BF554D2277F7A4C735D475ADE2E3B2 ] ADSMService C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
19:30:34.0033 2832 ADSMService - ok
19:30:34.0067 2832 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
19:30:34.0069 2832 AeLookupSvc - ok
19:30:34.0113 2832 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
19:30:34.0116 2832 AFD - ok
19:30:34.0173 2832 [ B65F8DBA54F251906BBE8611B5A0E7AB ] AgereModemAudio C:\Program Files\LSI SoftModem\agr64svc.exe
19:30:34.0173 2832 AgereModemAudio - ok
19:30:34.0210 2832 [ 2173E070647AC68C16B8214FE5C05EC3 ] AgereSoftModem C:\Windows\system32\DRIVERS\agrsm64.sys
19:30:34.0217 2832 AgereSoftModem - ok
19:30:34.0239 2832 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
19:30:34.0240 2832 agp440 - ok
19:30:34.0263 2832 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
19:30:34.0265 2832 ALG - ok
19:30:34.0287 2832 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
19:30:34.0287 2832 aliide - ok
19:30:34.0303 2832 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
19:30:34.0304 2832 amdide - ok
19:30:34.0324 2832 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
19:30:34.0325 2832 AmdK8 - ok
19:30:34.0338 2832 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
19:30:34.0339 2832 AmdPPM - ok
19:30:34.0361 2832 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
19:30:34.0362 2832 amdsata - ok
19:30:34.0380 2832 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
19:30:34.0381 2832 amdsbs - ok
19:30:34.0404 2832 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
19:30:34.0404 2832 amdxata - ok
19:30:34.0433 2832 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
19:30:34.0434 2832 AppID - ok
19:30:34.0469 2832 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
19:30:34.0470 2832 AppIDSvc - ok
19:30:34.0493 2832 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
19:30:34.0495 2832 Appinfo - ok
19:30:34.0544 2832 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
19:30:34.0578 2832 Apple Mobile Device - ok
19:30:34.0611 2832 [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt C:\Windows\System32\appmgmts.dll
19:30:34.0614 2832 AppMgmt - ok
19:30:34.0651 2832 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
19:30:34.0652 2832 arc - ok
19:30:34.0669 2832 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
19:30:34.0670 2832 arcsas - ok
19:30:34.0695 2832 [ 88FBC8BEBFD38566235EAA5E4DBC4E05 ] AsDsm C:\Windows\system32\drivers\AsDsm.sys
19:30:34.0695 2832 AsDsm - ok
19:30:34.0732 2832 [ 18E5C2F937F9DEB8C282DF66A3761925 ] ASLDRService C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
19:30:34.0733 2832 ASLDRService - ok
19:30:34.0748 2832 [ 2DB34EDD17D3A8DA7105A19C95A3DD68 ] ASMMAP64 C:\Program Files\ATKGFNEX\ASMMAP64.sys
19:30:34.0749 2832 ASMMAP64 - ok
19:30:34.0768 2832 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
19:30:34.0768 2832 AsyncMac - ok
19:30:34.0796 2832 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
19:30:34.0797 2832 atapi - ok
19:30:34.0811 2832 [ 7C157574A181B19B9DCF5F339E25337E ] ATKGFNEXSrv C:\Program Files\ATKGFNEX\GFNEXSrv.exe
19:30:34.0812 2832 ATKGFNEXSrv - ok
19:30:34.0849 2832 [ F1AC6C48F5DDA6AE94A8AF696E09733D ] ATSwpWDF C:\Windows\system32\Drivers\ATSwpWDF.sys
19:30:34.0853 2832 ATSwpWDF - ok
19:30:34.0892 2832 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
19:30:34.0902 2832 AudioEndpointBuilder - ok
19:30:34.0914 2832 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
19:30:34.0918 2832 AudioSrv - ok
19:30:34.0944 2832 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
19:30:34.0946 2832 AxInstSV - ok
19:30:34.0987 2832 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
19:30:34.0990 2832 b06bdrv - ok
19:30:35.0025 2832 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
19:30:35.0027 2832 b57nd60a - ok
19:30:35.0060 2832 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
19:30:35.0062 2832 BDESVC - ok
19:30:35.0078 2832 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
19:30:35.0079 2832 Beep - ok
19:30:35.0109 2832 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
19:30:35.0119 2832 BFE - ok
19:30:35.0161 2832 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
19:30:35.0175 2832 BITS - ok
19:30:35.0189 2832 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
19:30:35.0190 2832 blbdrive - ok
19:30:35.0202 2832 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
19:30:35.0203 2832 bowser - ok
19:30:35.0233 2832 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
19:30:35.0234 2832 BrFiltLo - ok
19:30:35.0251 2832 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
19:30:35.0251 2832 BrFiltUp - ok
19:30:35.0274 2832 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
19:30:35.0277 2832 Browser - ok
19:30:35.0288 2832 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
19:30:35.0290 2832 Brserid - ok
19:30:35.0307 2832 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
19:30:35.0308 2832 BrSerWdm - ok
19:30:35.0318 2832 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
19:30:35.0319 2832 BrUsbMdm - ok
19:30:35.0338 2832 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
19:30:35.0339 2832 BrUsbSer - ok
19:30:35.0368 2832 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
19:30:35.0369 2832 BthEnum - ok
19:30:35.0386 2832 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
19:30:35.0387 2832 BTHMODEM - ok
19:30:35.0414 2832 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
19:30:35.0415 2832 BthPan - ok
19:30:35.0441 2832 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
19:30:35.0444 2832 BTHPORT - ok
19:30:35.0465 2832 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
19:30:35.0467 2832 bthserv - ok
19:30:35.0480 2832 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
19:30:35.0481 2832 BTHUSB - ok
19:30:35.0514 2832 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
19:30:35.0515 2832 cdfs - ok
19:30:35.0552 2832 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\drivers\cdrom.sys
19:30:35.0553 2832 cdrom - ok
19:30:35.0583 2832 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
19:30:35.0585 2832 CertPropSvc - ok
19:30:35.0603 2832 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
19:30:35.0604 2832 circlass - ok
19:30:35.0634 2832 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
19:30:35.0637 2832 CLFS - ok
19:30:35.0722 2832 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:30:35.0738 2832 clr_optimization_v2.0.50727_32 - ok
19:30:35.0810 2832 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
19:30:35.0837 2832 clr_optimization_v2.0.50727_64 - ok
19:30:35.0898 2832 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:30:35.0997 2832 clr_optimization_v4.0.30319_32 - ok
19:30:36.0028 2832 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
19:30:36.0082 2832 clr_optimization_v4.0.30319_64 - ok
19:30:36.0101 2832 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
19:30:36.0101 2832 CmBatt - ok
19:30:36.0116 2832 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
19:30:36.0117 2832 cmdide - ok
19:30:36.0155 2832 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
19:30:36.0157 2832 CNG - ok
19:30:36.0189 2832 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
19:30:36.0190 2832 Compbatt - ok
19:30:36.0213 2832 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
19:30:36.0213 2832 CompositeBus - ok
19:30:36.0218 2832 COMSysApp - ok
19:30:36.0240 2832 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
19:30:36.0241 2832 crcdisk - ok
19:30:36.0276 2832 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
19:30:36.0280 2832 CryptSvc - ok
19:30:36.0322 2832 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC C:\Windows\system32\drivers\csc.sys
19:30:36.0325 2832 CSC - ok
19:30:36.0367 2832 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService C:\Windows\System32\cscsvc.dll
19:30:36.0377 2832 CscService - ok
19:30:36.0405 2832 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
19:30:36.0414 2832 DcomLaunch - ok
19:30:36.0442 2832 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
19:30:36.0447 2832 defragsvc - ok
19:30:36.0476 2832 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
19:30:36.0477 2832 DfsC - ok
19:30:36.0505 2832 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
19:30:36.0511 2832 Dhcp - ok
19:30:36.0539 2832 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
19:30:36.0539 2832 discache - ok
19:30:36.0551 2832 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
19:30:36.0552 2832 Disk - ok
19:30:36.0607 2832 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
19:30:36.0611 2832 Dnscache - ok
19:30:36.0639 2832 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
19:30:36.0644 2832 dot3svc - ok
19:30:36.0682 2832 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
19:30:36.0686 2832 DPS - ok
19:30:36.0712 2832 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
19:30:36.0713 2832 drmkaud - ok
19:30:36.0749 2832 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
19:30:36.0754 2832 DXGKrnl - ok
19:30:36.0771 2832 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
19:30:36.0774 2832 EapHost - ok
19:30:36.0879 2832 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
19:30:36.0896 2832 ebdrv - ok
19:30:36.0930 2832 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
19:30:36.0933 2832 EFS - ok
19:30:36.0989 2832 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
19:30:37.0011 2832 ehRecvr - ok
19:30:37.0050 2832 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
19:30:37.0051 2832 ehSched - ok
19:30:37.0082 2832 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
19:30:37.0086 2832 elxstor - ok
19:30:37.0104 2832 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
19:30:37.0105 2832 ErrDev - ok
19:30:37.0147 2832 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
19:30:37.0151 2832 EventSystem - ok
19:30:37.0176 2832 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
19:30:37.0178 2832 exfat - ok
19:30:37.0201 2832 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
19:30:37.0203 2832 fastfat - ok
19:30:37.0250 2832 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
19:30:37.0255 2832 Fax - ok
19:30:37.0289 2832 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
19:30:37.0290 2832 fdc - ok
19:30:37.0323 2832 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
19:30:37.0325 2832 fdPHost - ok
19:30:37.0340 2832 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
19:30:37.0342 2832 FDResPub - ok
19:30:37.0357 2832 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
19:30:37.0358 2832 FileInfo - ok
19:30:37.0373 2832 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
19:30:37.0373 2832 Filetrace - ok
19:30:37.0388 2832 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
19:30:37.0389 2832 flpydisk - ok
19:30:37.0419 2832 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
19:30:37.0421 2832 FltMgr - ok
19:30:37.0479 2832 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
19:30:37.0497 2832 FontCache - ok
19:30:37.0546 2832 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:30:37.0547 2832 FontCache3.0.0.0 - ok
19:30:37.0571 2832 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
19:30:37.0572 2832 FsDepends - ok
19:30:37.0588 2832 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
19:30:37.0589 2832 Fs_Rec - ok
19:30:37.0625 2832 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
19:30:37.0626 2832 fvevol - ok
19:30:37.0644 2832 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
19:30:37.0645 2832 gagp30kx - ok
19:30:37.0672 2832 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
19:30:37.0672 2832 GEARAspiWDM - ok
19:30:37.0701 2832 [ 7D66EBDE8B7F9B4E00BEEFEEE82670D4 ] ghaio C:\Program Files (x86)\ASUS\NB Probe\SPM\ghaio.sys
19:30:37.0701 2832 ghaio - ok
19:30:37.0737 2832 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
19:30:37.0749 2832 gpsvc - ok
19:30:37.0799 2832 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:30:37.0802 2832 gupdate - ok
19:30:37.0808 2832 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:30:37.0809 2832 gupdatem - ok
19:30:37.0830 2832 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
19:30:37.0831 2832 hcw85cir - ok
19:30:37.0869 2832 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
19:30:37.0871 2832 HdAudAddService - ok
19:30:37.0895 2832 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
19:30:37.0896 2832 HDAudBus - ok
19:30:37.0923 2832 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
19:30:37.0923 2832 HidBatt - ok
19:30:37.0941 2832 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
19:30:37.0942 2832 HidBth - ok
19:30:37.0964 2832 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
19:30:37.0965 2832 HidIr - ok
19:30:37.0990 2832 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
19:30:37.0992 2832 hidserv - ok
19:30:38.0026 2832 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
19:30:38.0027 2832 HidUsb - ok
19:30:38.0057 2832 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
19:30:38.0060 2832 hkmsvc - ok
19:30:38.0083 2832 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
19:30:38.0088 2832 HomeGroupListener - ok
19:30:38.0127 2832 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
19:30:38.0131 2832 HomeGroupProvider - ok
19:30:38.0149 2832 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
19:30:38.0150 2832 HpSAMD - ok
19:30:38.0193 2832 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
19:30:38.0197 2832 HTTP - ok
19:30:38.0224 2832 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
19:30:38.0224 2832 hwpolicy - ok
19:30:38.0256 2832 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
19:30:38.0257 2832 i8042prt - ok
19:30:38.0287 2832 [ BBB3B6DF1ABB0FE35802EDE85CC1C011 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
19:30:38.0289 2832 iaStor - ok
19:30:38.0331 2832 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
19:30:38.0333 2832 iaStorV - ok
19:30:38.0398 2832 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
19:30:38.0422 2832 idsvc - ok
19:30:38.0454 2832 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
19:30:38.0454 2832 iirsp - ok
19:30:38.0502 2832 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
19:30:38.0515 2832 IKEEXT - ok
19:30:38.0581 2832 [ 58A60DF2B6D0D6B09E44CAC7F1D2AB6A ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
19:30:38.0592 2832 IntcAzAudAddService - ok
19:30:38.0618 2832 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
19:30:38.0619 2832 intelide - ok
19:30:38.0640 2832 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
19:30:38.0641 2832 intelppm - ok
19:30:38.0666 2832 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
19:30:38.0669 2832 IPBusEnum - ok
19:30:38.0703 2832 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:30:38.0704 2832 IpFilterDriver - ok
19:30:38.0735 2832 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
19:30:38.0736 2832 IPMIDRV - ok
19:30:38.0752 2832 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
19:30:38.0753 2832 IPNAT - ok
19:30:38.0811 2832 [ 4EFFC8FF6D349E971E94B1C670C0C66A ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
19:30:38.0819 2832 iPod Service - ok
19:30:38.0832 2832 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
19:30:38.0832 2832 IRENUM - ok
19:30:38.0858 2832 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
19:30:38.0858 2832 isapnp - ok
19:30:38.0904 2832 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
19:30:38.0906 2832 iScsiPrt - ok
19:30:38.0936 2832 [ 8D990A44B4F2B68E2C56A3724EC3EB84 ] itecir C:\Windows\system32\DRIVERS\itecir.sys
19:30:38.0937 2832 itecir - ok
19:30:38.0965 2832 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
19:30:38.0965 2832 kbdclass - ok
19:30:38.0979 2832 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
19:30:38.0980 2832 kbdhid - ok
19:30:38.0987 2832 [ E63EF8C3271D014F14E2469CE75FECB4 ] kbfiltr C:\Windows\system32\DRIVERS\kbfiltr.sys
19:30:38.0988 2832 kbfiltr - ok
19:30:38.0997 2832 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
19:30:39.0000 2832 KeyIso - ok
19:30:39.0034 2832 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
19:30:39.0035 2832 KSecDD - ok
19:30:39.0061 2832 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
19:30:39.0062 2832 KSecPkg - ok
19:30:39.0088 2832 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
19:30:39.0089 2832 ksthunk - ok
19:30:39.0122 2832 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
19:30:39.0130 2832 KtmRm - ok
19:30:39.0169 2832 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
19:30:39.0176 2832 LanmanServer - ok
19:30:39.0204 2832 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:30:39.0210 2832 LanmanWorkstation - ok
19:30:39.0229 2832 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
19:30:39.0230 2832 lltdio - ok
19:30:39.0266 2832 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
19:30:39.0272 2832 lltdsvc - ok
19:30:39.0293 2832 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
19:30:39.0295 2832 lmhosts - ok
19:30:39.0316 2832 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
19:30:39.0317 2832 LSI_FC - ok
19:30:39.0332 2832 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
19:30:39.0333 2832 LSI_SAS - ok
19:30:39.0346 2832 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
19:30:39.0346 2832 LSI_SAS2 - ok
19:30:39.0360 2832 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
19:30:39.0361 2832 LSI_SCSI - ok
19:30:39.0375 2832 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
19:30:39.0376 2832 luafv - ok
19:30:39.0410 2832 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
19:30:39.0413 2832 Mcx2Svc - ok
19:30:39.0437 2832 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
19:30:39.0438 2832 megasas - ok
19:30:39.0454 2832 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
19:30:39.0456 2832 MegaSR - ok
19:30:39.0487 2832 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
19:30:39.0490 2832 MMCSS - ok
19:30:39.0501 2832 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
19:30:39.0502 2832 Modem - ok
19:30:39.0519 2832 [ E38AEF079CD3BCFA19F2072A214F829D ] MODEMCSA C:\Windows\system32\drivers\MODEMCSA.sys
19:30:39.0520 2832 MODEMCSA - ok
19:30:39.0544 2832 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
19:30:39.0545 2832 monitor - ok
19:30:39.0559 2832 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
19:30:39.0560 2832 mouclass - ok
19:30:39.0564 2832 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
19:30:39.0565 2832 mouhid - ok
19:30:39.0593 2832 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
19:30:39.0594 2832 mountmgr - ok
19:30:39.0641 2832 [ F8A10560B35C66F9DE212F03DAD5BFA7 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
19:30:39.0643 2832 MpFilter - ok
19:30:39.0660 2832 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
19:30:39.0661 2832 mpio - ok
19:30:39.0678 2832 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
19:30:39.0679 2832 mpsdrv - ok
19:30:39.0709 2832 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
19:30:39.0710 2832 MRxDAV - ok
19:30:39.0739 2832 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
19:30:39.0741 2832 mrxsmb - ok
19:30:39.0756 2832 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:30:39.0758 2832 mrxsmb10 - ok
19:30:39.0772 2832 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:30:39.0773 2832 mrxsmb20 - ok
19:30:39.0793 2832 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
19:30:39.0794 2832 msahci - ok
19:30:39.0813 2832 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
19:30:39.0814 2832 msdsm - ok
19:30:39.0837 2832 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
19:30:39.0841 2832 MSDTC - ok
19:30:39.0892 2832 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
19:30:39.0892 2832 Msfs - ok
19:30:39.0903 2832 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
19:30:39.0904 2832 mshidkmdf - ok
19:30:39.0930 2832 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
19:30:39.0930 2832 msisadrv - ok
19:30:39.0959 2832 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
19:30:39.0964 2832 MSiSCSI - ok
19:30:39.0968 2832 msiserver - ok
19:30:39.0990 2832 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
19:30:39.0991 2832 MSKSSRV - ok
19:30:40.0043 2832 [ E07DEC52FF801841BA9B6878A60304FB ] MsMpSvc C:\Program Files\Microsoft Security Client\MsMpEng.exe
19:30:40.0060 2832 MsMpSvc - ok
19:30:40.0081 2832 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
19:30:40.0081 2832 MSPCLOCK - ok
19:30:40.0112 2832 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
19:30:40.0113 2832 MSPQM - ok
19:30:40.0143 2832 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
19:30:40.0146 2832 MsRPC - ok
19:30:40.0184 2832 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
19:30:40.0185 2832 mssmbios - ok
19:30:40.0206 2832 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
19:30:40.0207 2832 MSTEE - ok
19:30:40.0223 2832 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
19:30:40.0224 2832 MTConfig - ok
19:30:40.0257 2832 [ 032D35C996F21D19A205A7C8F0B76F3C ] MTsensor C:\Windows\system32\DRIVERS\ATK64AMD.sys
19:30:40.0257 2832 MTsensor - ok
19:30:40.0274 2832 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
19:30:40.0275 2832 Mup - ok
19:30:40.0312 2832 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
19:30:40.0321 2832 napagent - ok
19:30:40.0358 2832 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
19:30:40.0360 2832 NativeWifiP - ok
19:30:40.0398 2832 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
19:30:40.0404 2832 NDIS - ok
19:30:40.0433 2832 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
19:30:40.0434 2832 NdisCap - ok
19:30:40.0446 2832 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
19:30:40.0447 2832 NdisTapi - ok
19:30:40.0464 2832 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
19:30:40.0465 2832 Ndisuio - ok
19:30:40.0486 2832 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
19:30:40.0488 2832 NdisWan - ok
19:30:40.0509 2832 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
19:30:40.0510 2832 NDProxy - ok
19:30:40.0525 2832 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
19:30:40.0526 2832 NetBIOS - ok
19:30:40.0545 2832 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
19:30:40.0546 2832 NetBT - ok
19:30:40.0564 2832 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
19:30:40.0566 2832 Netlogon - ok
19:30:40.0597 2832 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
19:30:40.0604 2832 Netman - ok
19:30:40.0614 2832 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
19:30:40.0619 2832 netprofm - ok
19:30:40.0645 2832 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:30:40.0646 2832 NetTcpPortSharing - ok
19:30:40.0824 2832 [ 4D85A450EDEF10C38882182753A49AAE ] NETw5s64 C:\Windows\system32\DRIVERS\NETw5s64.sys
19:30:40.0861 2832 NETw5s64 - ok
19:30:40.0999 2832 [ 64428DFDAF6E88366CB51F45A79C5F69 ] netw5v64 C:\Windows\system32\DRIVERS\netw5v64.sys
19:30:41.0028 2832 netw5v64 - ok
19:30:41.0236 2832 [ 9AA75919D0A5F33BEA0DF7B9DB09B755 ] NETwNs64 C:\Windows\system32\DRIVERS\NETwNs64.sys
19:30:41.0279 2832 NETwNs64 - ok
19:30:41.0307 2832 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
19:30:41.0308 2832 nfrd960 - ok
19:30:41.0347 2832 [ 162100E0BC8377710F9D170631921C03 ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys
19:30:41.0348 2832 NisDrv - ok
19:30:41.0367 2832 [ C6E15F2F95F9C0A6098D43510B604E52 ] NisSrv C:\Program Files\Microsoft Security Client\NisSrv.exe
19:30:41.0369 2832 NisSrv - ok
19:30:41.0391 2832 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
19:30:41.0398 2832 NlaSvc - ok
19:30:41.0425 2832 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
19:30:41.0426 2832 Npfs - ok
19:30:41.0443 2832 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
19:30:41.0446 2832 nsi - ok
19:30:41.0459 2832 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
19:30:41.0460 2832 nsiproxy - ok
19:30:41.0526 2832 [ B8965FB53551B5455630A4B804D0791F ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
19:30:41.0535 2832 Ntfs - ok
19:30:41.0567 2832 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
19:30:41.0568 2832 Null - ok
19:30:41.0598 2832 [ 857FB74754EBFF94EE3AD40788740916 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
19:30:41.0599 2832 NVHDA - ok
19:30:41.0901 2832 [ F12C5F17D48D9F5C70E4408B3CCB5443 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
19:30:41.0968 2832 nvlddmkm - ok
19:30:41.0994 2832 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
19:30:41.0995 2832 nvraid - ok
19:30:42.0011 2832 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
19:30:42.0013 2832 nvstor - ok
19:30:42.0059 2832 [ 8A55543C379B0582F0C33DB447D1C892 ] nvsvc C:\Windows\system32\nvvsvc.exe
19:30:42.0067 2832 nvsvc - ok
19:30:42.0102 2832 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
19:30:42.0103 2832 nv_agp - ok
19:30:42.0178 2832 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
19:30:42.0220 2832 odserv - ok
19:30:42.0253 2832 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
19:30:42.0254 2832 ohci1394 - ok
19:30:42.0276 2832 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:30:42.0277 2832 ose - ok
19:30:42.0305 2832 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
19:30:42.0312 2832 p2pimsvc - ok
19:30:42.0332 2832 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
19:30:42.0341 2832 p2psvc - ok
19:30:42.0400 2832 [ 77CDC6C43D8C3E05D0E21B36EAABEBAE ] PanService C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
19:30:42.0404 2832 PanService - ok
19:30:42.0430 2832 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
19:30:42.0432 2832 Parport - ok
19:30:42.0466 2832 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
19:30:42.0467 2832 partmgr - ok
19:30:42.0496 2832 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
19:30:42.0501 2832 PcaSvc - ok
19:30:42.0530 2832 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
19:30:42.0532 2832 pci - ok
19:30:42.0548 2832 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
19:30:42.0549 2832 pciide - ok
19:30:42.0585 2832 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
19:30:42.0587 2832 pcmcia - ok
19:30:42.0609 2832 [ AF7CE12C4F3DC8CB2B07685C916BBCFE ] pcouffin C:\Windows\system32\Drivers\pcouffin.sys
19:30:42.0610 2832 pcouffin - ok
19:30:42.0628 2832 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
19:30:42.0629 2832 pcw - ok
19:30:42.0657 2832 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
19:30:42.0660 2832 PEAUTH - ok
19:30:42.0709 2832 [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
19:30:42.0730 2832 PeerDistSvc - ok
19:30:42.0803 2832 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
19:30:42.0805 2832 PerfHost - ok
19:30:42.0866 2832 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
19:30:42.0887 2832 pla - ok
19:30:42.0941 2832 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
19:30:42.0950 2832 PlugPlay - ok
19:30:42.0968 2832 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
19:30:42.0972 2832 PNRPAutoReg - ok
19:30:42.0995 2832 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
19:30:42.0999 2832 PNRPsvc - ok
19:30:43.0049 2832 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
19:30:43.0057 2832 PolicyAgent - ok
19:30:43.0096 2832 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
19:30:43.0101 2832 Power - ok
19:30:43.0128 2832 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
19:30:43.0129 2832 PptpMiniport - ok
19:30:43.0156 2832 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
19:30:43.0157 2832 Processor - ok
19:30:43.0184 2832 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
19:30:43.0190 2832 ProfSvc - ok
19:30:43.0197 2832 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
19:30:43.0200 2832 ProtectedStorage - ok
19:30:43.0228 2832 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
19:30:43.0229 2832 Psched - ok
19:30:43.0273 2832 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
19:30:43.0281 2832 ql2300 - ok
19:30:43.0312 2832 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
19:30:43.0313 2832 ql40xx - ok
19:30:43.0346 2832 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
19:30:43.0353 2832 QWAVE - ok
19:30:43.0365 2832 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
19:30:43.0366 2832 QWAVEdrv - ok
19:30:43.0379 2832 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
19:30:43.0380 2832 RasAcd - ok
19:30:43.0403 2832 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
19:30:43.0404 2832 RasAgileVpn - ok
19:30:43.0421 2832 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
19:30:43.0425 2832 RasAuto - ok
19:30:43.0450 2832 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
19:30:43.0451 2832 Rasl2tp - ok
19:30:43.0482 2832 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
19:30:43.0489 2832 RasMan - ok
19:30:43.0521 2832 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
19:30:43.0522 2832 RasPppoe - ok
19:30:43.0540 2832 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
19:30:43.0541 2832 RasSstp - ok
19:30:43.0557 2832 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
19:30:43.0559 2832 rdbss - ok
19:30:43.0571 2832 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
19:30:43.0571 2832 rdpbus - ok
19:30:43.0579 2832 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
19:30:43.0580 2832 RDPCDD - ok
19:30:43.0620 2832 [ 1B6163C503398B23FF8B939C67747683 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
19:30:43.0622 2832 RDPDR - ok
19:30:43.0636 2832 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
19:30:43.0637 2832 RDPENCDD - ok
19:30:43.0646 2832 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
19:30:43.0647 2832 RDPREFMP - ok
19:30:43.0671 2832 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
19:30:43.0673 2832 RDPWD - ok
19:30:43.0703 2832 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
19:30:43.0705 2832 rdyboost - ok
19:30:43.0746 2832 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
19:30:43.0749 2832 RemoteAccess - ok
19:30:43.0773 2832 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
19:30:43.0778 2832 RemoteRegistry - ok
19:30:43.0801 2832 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
19:30:43.0803 2832 RFCOMM - ok
19:30:43.0836 2832 [ 6FAF5B04BEDC66D300D9D233B2D222F0 ] rimmptsk C:\Windows\system32\DRIVERS\rimmpx64.sys
19:30:43.0837 2832 rimmptsk - ok
19:30:43.0855 2832 [ 67F50C31713106FD1B0F286F86AA2B2E ] rimsptsk C:\Windows\system32\DRIVERS\rimspx64.sys
19:30:43.0856 2832 rimsptsk - ok
19:30:43.0873 2832 [ 4D7EF3D46346EC4C58784DB964B365DE ] rismxdp C:\Windows\system32\DRIVERS\rixdpx64.sys
19:30:43.0874 2832 rismxdp - ok
19:30:43.0896 2832 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
19:30:43.0900 2832 RpcEptMapper - ok
19:30:43.0923 2832 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
19:30:43.0926 2832 RpcLocator - ok
19:30:43.0961 2832 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
19:30:43.0967 2832 RpcSs - ok
19:30:43.0988 2832 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
19:30:43.0989 2832 rspndr - ok
19:30:44.0022 2832 [ EE082E06A82FF630351D1E0EBBD3D8D0 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
19:30:44.0025 2832 RTL8167 - ok
19:30:44.0051 2832 [ E60C0A09F997826C7627B244195AB581 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
19:30:44.0051 2832 s3cap - ok
19:30:44.0064 2832 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
19:30:44.0066 2832 SamSs - ok
19:30:44.0093 2832 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
19:30:44.0094 2832 sbp2port - ok
19:30:44.0124 2832 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
19:30:44.0130 2832 SCardSvr - ok
19:30:44.0158 2832 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
19:30:44.0159 2832 scfilter - ok
19:30:44.0204 2832 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
19:30:44.0222 2832 Schedule - ok
19:30:44.0250 2832 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
19:30:44.0251 2832 SCPolicySvc - ok
19:30:44.0276 2832 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\drivers\sdbus.sys
19:30:44.0277 2832 sdbus - ok
19:30:44.0288 2832 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
19:30:44.0294 2832 SDRSVC - ok
19:30:44.0325 2832 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
19:30:44.0326 2832 secdrv - ok
19:30:44.0347 2832 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
19:30:44.0350 2832 seclogon - ok
19:30:44.0377 2832 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
19:30:44.0381 2832 SENS - ok
19:30:44.0397 2832 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
19:30:44.0401 2832 SensrSvc - ok
19:30:44.0423 2832 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
19:30:44.0424 2832 Serenum - ok
19:30:44.0441 2832 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
19:30:44.0443 2832 Serial - ok
19:30:44.0474 2832 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
19:30:44.0475 2832 sermouse - ok
19:30:44.0510 2832 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
19:30:44.0515 2832 SessionEnv - ok
19:30:44.0533 2832 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
19:30:44.0534 2832 sffdisk - ok
19:30:44.0545 2832 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
19:30:44.0546 2832 sffp_mmc - ok
19:30:44.0563 2832 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
19:30:44.0564 2832 sffp_sd - ok
19:30:44.0590 2832 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
19:30:44.0590 2832 sfloppy - ok
19:30:44.0622 2832 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
19:30:44.0630 2832 ShellHWDetection - ok
19:30:44.0651 2832 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
19:30:44.0652 2832 SiSRaid2 - ok
19:30:44.0670 2832 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
19:30:44.0671 2832 SiSRaid4 - ok
19:30:44.0694 2832 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
19:30:44.0695 2832 Smb - ok
19:30:44.0718 2832 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
19:30:44.0722 2832 SNMPTRAP - ok
19:30:44.0784 2832 [ A415C67B40DFB903ACCC1D40FBEE3269 ] SNP2UVC C:\Windows\system32\DRIVERS\snp2uvc.sys
19:30:44.0794 2832 SNP2UVC - ok
19:30:44.0825 2832 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
19:30:44.0825 2832 spldr - ok
19:30:44.0890 2832 [ 739DB668DBD812285ECC553E64A5E212 ] spmgr C:\Program Files (x86)\ASUS\NB Probe\SPM\spmgr.exe
19:30:44.0891 2832 spmgr - ok
19:30:44.0917 2832 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
19:30:44.0928 2832 Spooler - ok
19:30:45.0028 2832 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
19:30:45.0120 2832 sppsvc - ok
19:30:45.0146 2832 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
19:30:45.0150 2832 sppuinotify - ok
19:30:45.0182 2832 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
19:30:45.0185 2832 srv - ok
19:30:45.0207 2832 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
19:30:45.0210 2832 srv2 - ok
19:30:45.0228 2832 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
19:30:45.0229 2832 srvnet - ok
19:30:45.0244 2832 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
19:30:45.0250 2832 SSDPSRV - ok
19:30:45.0279 2832 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
19:30:45.0286 2832 SstpSvc - ok
19:30:45.0353 2832 [ 8C37C35FB2D9692DDA0EDDBCA58BFE18 ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
19:30:45.0355 2832 Stereo Service - ok
19:30:45.0379 2832 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
19:30:45.0380 2832 stexstor - ok
19:30:45.0412 2832 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
19:30:45.0423 2832 stisvc - ok
19:30:45.0450 2832 [ 7785DC213270D2FC066538DAF94087E7 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
19:30:45.0451 2832 storflt - ok
19:30:45.0475 2832 [ C40841817EF57D491F22EB103DA587CC ] StorSvc C:\Windows\system32\storsvc.dll
19:30:45.0479 2832 StorSvc - ok
19:30:45.0499 2832 [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc C:\Windows\system32\drivers\storvsc.sys
19:30:45.0500 2832 storvsc - ok
19:30:45.0512 2832 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
19:30:45.0512 2832 swenum - ok
19:30:45.0545 2832 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
19:30:45.0554 2832 swprv - ok
19:30:45.0616 2832 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
19:30:45.0642 2832 SysMain - ok
19:30:45.0667 2832 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:30:45.0672 2832 TabletInputService - ok
19:30:45.0688 2832 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
19:30:45.0695 2832 TapiSrv - ok
19:30:45.0724 2832 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
19:30:45.0728 2832 TBS - ok
19:30:45.0794 2832 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
19:30:45.0804 2832 Tcpip - ok
19:30:45.0836 2832 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
19:30:45.0846 2832 TCPIP6 - ok
19:30:45.0872 2832 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
19:30:45.0873 2832 tcpipreg - ok
19:30:45.0905 2832 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
19:30:45.0906 2832 TDPIPE - ok
19:30:45.0928 2832 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
19:30:45.0929 2832 TDTCP - ok
19:30:45.0958 2832 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
19:30:45.0959 2832 tdx - ok
19:30:45.0977 2832 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
19:30:45.0978 2832 TermDD - ok
19:30:46.0009 2832 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
19:30:46.0022 2832 TermService - ok
19:30:46.0042 2832 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
19:30:46.0046 2832 Themes - ok
19:30:46.0054 2832 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
19:30:46.0056 2832 THREADORDER - ok
19:30:46.0073 2832 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
19:30:46.0078 2832 TrkWks - ok
19:30:46.0127 2832 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:30:46.0198 2832 TrustedInstaller - ok
19:30:46.0226 2832 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
19:30:46.0227 2832 tssecsrv - ok
19:30:46.0256 2832 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
19:30:46.0257 2832 TsUsbFlt - ok
19:30:46.0281 2832 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
19:30:46.0282 2832 tunnel - ok
19:30:46.0310 2832 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
19:30:46.0311 2832 uagp35 - ok
19:30:46.0343 2832 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
19:30:46.0345 2832 udfs - ok
19:30:46.0371 2832 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
19:30:46.0374 2832 UI0Detect - ok
19:30:46.0387 2832 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
19:30:46.0388 2832 uliagpkx - ok
19:30:46.0411 2832 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
19:30:46.0412 2832 umbus - ok
19:30:46.0426 2832 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
19:30:46.0427 2832 UmPass - ok
19:30:46.0456 2832 [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService C:\Windows\System32\umrdp.dll
19:30:46.0462 2832 UmRdpService - ok
19:30:46.0486 2832 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
19:30:46.0494 2832 upnphost - ok
19:30:46.0526 2832 [ C9E9D59C0099A9FF51697E9306A44240 ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
19:30:46.0527 2832 USBAAPL64 - ok
19:30:46.0558 2832 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
19:30:46.0560 2832 usbccgp - ok
19:30:46.0585 2832 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
19:30:46.0587 2832 usbcir - ok
19:30:46.0600 2832 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
19:30:46.0601 2832 usbehci - ok
19:30:46.0620 2832 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
19:30:46.0622 2832 usbhub - ok
19:30:46.0640 2832 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
19:30:46.0641 2832 usbohci - ok
19:30:46.0672 2832 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
19:30:46.0673 2832 usbprint - ok
19:30:46.0707 2832 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
19:30:46.0707 2832 usbscan - ok
19:30:46.0722 2832 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:30:46.0723 2832 USBSTOR - ok
19:30:46.0752 2832 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
19:30:46.0753 2832 usbuhci - ok
19:30:46.0788 2832 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
19:30:46.0789 2832 usbvideo - ok
19:30:46.0804 2832 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
19:30:46.0809 2832 UxSms - ok
19:30:46.0820 2832 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
19:30:46.0822 2832 VaultSvc - ok
19:30:46.0831 2832 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
19:30:46.0833 2832 vdrvroot - ok
19:30:46.0876 2832 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
19:30:46.0882 2832 vds - ok
19:30:46.0911 2832 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
19:30:46.0911 2832 vga - ok
19:30:46.0929 2832 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
19:30:46.0930 2832 VgaSave - ok
19:30:46.0968 2832 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
19:30:46.0970 2832 vhdmp - ok
19:30:46.0997 2832 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
19:30:46.0997 2832 viaide - ok
19:30:47.0018 2832 [ 86EA3E79AE350FEA5331A1303054005F ] vmbus C:\Windows\system32\drivers\vmbus.sys
19:30:47.0020 2832 vmbus - ok
19:30:47.0033 2832 [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
19:30:47.0034 2832 VMBusHID - ok
19:30:47.0039 2832 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
19:30:47.0040 2832 volmgr - ok
19:30:47.0077 2832 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
19:30:47.0080 2832 volmgrx - ok
19:30:47.0103 2832 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
19:30:47.0105 2832 volsnap - ok
19:30:47.0134 2832 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
19:30:47.0135 2832 vsmraid - ok
19:30:47.0204 2832 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
19:30:47.0216 2832 VSS - ok
19:30:47.0233 2832 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
19:30:47.0234 2832 vwifibus - ok
19:30:47.0249 2832 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
19:30:47.0250 2832 vwififlt - ok
19:30:47.0274 2832 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
19:30:47.0283 2832 W32Time - ok
19:30:47.0317 2832 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
19:30:47.0318 2832 WacomPen - ok
19:30:47.0352 2832 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
19:30:47.0353 2832 WANARP - ok
19:30:47.0357 2832 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
19:30:47.0358 2832 Wanarpv6 - ok
19:30:47.0422 2832 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
19:30:47.0429 2832 WatAdminSvc - ok
19:30:47.0486 2832 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
19:30:47.0497 2832 wbengine - ok
19:30:47.0538 2832 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
19:30:47.0545 2832 WbioSrvc - ok
19:30:47.0574 2832 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
19:30:47.0583 2832 wcncsvc - ok

19:30:47.0600 2832 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
19:30:47.0604 2832 WcsPlugInService - ok
19:30:47.0629 2832 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
19:30:47.0629 2832 Wd - ok
19:30:47.0669 2832 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
19:30:47.0673 2832 Wdf01000 - ok
19:30:47.0693 2832 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
19:30:47.0698 2832 WdiServiceHost - ok
19:30:47.0715 2832 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
19:30:47.0720 2832 WdiSystemHost - ok
19:30:47.0746 2832 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
19:30:47.0753 2832 WebClient - ok
19:30:47.0770 2832 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
19:30:47.0777 2832 Wecsvc - ok
19:30:47.0790 2832 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
19:30:47.0795 2832 wercplsupport - ok
19:30:47.0803 2832 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
19:30:47.0809 2832 WerSvc - ok
19:30:47.0831 2832 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
19:30:47.0832 2832 WfpLwf - ok
19:30:47.0848 2832 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
19:30:47.0849 2832 WIMMount - ok
19:30:47.0854 2832 WinHttpAutoProxySvc - ok
19:30:47.0912 2832 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
19:30:47.0937 2832 Winmgmt - ok
19:30:47.0998 2832 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
19:30:48.0029 2832 WinRM - ok
19:30:48.0056 2832 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
19:30:48.0056 2832 WinUsb - ok
19:30:48.0112 2832 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
19:30:48.0128 2832 Wlansvc - ok
19:30:48.0146 2832 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
19:30:48.0147 2832 WmiAcpi - ok
19:30:48.0181 2832 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
19:30:48.0183 2832 wmiApSrv - ok
19:30:48.0205 2832 WMPNetworkSvc - ok
19:30:48.0230 2832 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
19:30:48.0235 2832 WPCSvc - ok
19:30:48.0264 2832 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
19:30:48.0270 2832 WPDBusEnum - ok
19:30:48.0292 2832 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
19:30:48.0293 2832 ws2ifsl - ok
19:30:48.0296 2832 WSearch - ok
19:30:48.0370 2832 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
19:30:48.0438 2832 wuauserv - ok
19:30:48.0471 2832 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
19:30:48.0472 2832 WudfPf - ok
19:30:48.0489 2832 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
19:30:48.0491 2832 WUDFRd - ok
19:30:48.0519 2832 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
19:30:48.0525 2832 wudfsvc - ok
19:30:48.0560 2832 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
19:30:48.0567 2832 WwanSvc - ok
19:30:48.0576 2832 ================ Scan global ===============================
19:30:48.0625 2832 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
19:30:48.0654 2832 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
19:30:48.0666 2832 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
19:30:48.0690 2832 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
19:30:48.0733 2832 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
19:30:48.0738 2832 [Global] - ok
19:30:48.0738 2832 ================ Scan MBR ==================================
19:30:48.0755 2832 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
19:30:49.0151 2832 \Device\Harddisk0\DR0 - ok
19:30:49.0157 2832 [ E5FA06ACA0D60BA9C870D0EF3D9898C9 ] \Device\Harddisk1\DR1
19:30:51.0278 2832 \Device\Harddisk1\DR1 - ok
19:30:51.0278 2832 ================ Scan VBR ==================================
19:30:51.0280 2832 [ C088D962AC36733795412934B2D0F48D ] \Device\Harddisk0\DR0\Partition1
19:30:51.0282 2832 \Device\Harddisk0\DR0\Partition1 - ok
19:30:51.0304 2832 [ 6F5948375B1253A018DE0E0E9677AB17 ] \Device\Harddisk0\DR0\Partition2
19:30:51.0306 2832 \Device\Harddisk0\DR0\Partition2 - ok
19:30:51.0310 2832 [ 25DA3974CD8F3D9F136774024BA4748C ] \Device\Harddisk1\DR1\Partition1
19:30:51.0311 2832 \Device\Harddisk1\DR1\Partition1 - ok
19:30:51.0312 2832 ============================================================
19:30:51.0312 2832 Scan finished
19:30:51.0312 2832 ============================================================
19:30:51.0320 1628 Detected object count: 0
19:30:51.0320 1628 Actual detected object count: 0
19:31:17.0478 2240 Deinitialize success

Ještě jednou:
Spusť znovu RogueKiller
Pokud používáš Win Vista či W7, klikni na RogueKiller pravým a dej spustit jako správce.
Pak klikni na Oprava Host a Zpráva - otevře se log, ten sem vlož.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

RogueKiller V8.5.4 _x64_ [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Pepa [Práva správce]
Mód : Oprava HOSTS -- Datum : 04/24/2013 20:03:24
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 localhost


¤¤¤ Resetovaný HOSTS: ¤¤¤
127.0.0.1 localhost

Dokončeno : << RKreport[5]_H_04242013_02d2003.txt >>
RKreport[1]_S_04242013_02d1925.txt ; RKreport[2]_D_04242013_02d1926.txt ; RKreport[3]_H_04242013_02d1928.txt ; RKreport[4]_PR_04242013_02d2003.txt ; RKreport[5]_H_04242013_02d2003.txt

CF peobiha

ComboFix 13-04-24.03 - Pepa 24.04.2013 20:15:07.1.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4095.2974 [GMT 2:00]
Spuštěný z: c:\users\Pepa\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}
SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Pepa\68956435567898775
c:\users\Pepa\75439967573920484
c:\users\Pepa\76968780866536342
c:\users\Pepa\AppData\Roaming\Adobeflash
c:\users\Pepa\AppData\Roaming\Adobeflash\jaoiiahdoamhobamdkmcmielddmnelko.crx
c:\users\Pepa\AppData\Roaming\Adobeflash\update.xml
c:\users\Pepa\AppData\Roaming\inst.exe
c:\windows\msvcr71.dll
c:\windows\PolicyDefinitions
c:\windows\PolicyDefinitions\ActiveXInstallService.admx
c:\windows\PolicyDefinitions\AddRemovePrograms.admx
c:\windows\PolicyDefinitions\AppCompat.admx
c:\windows\PolicyDefinitions\AttachmentManager.admx
c:\windows\PolicyDefinitions\AutoPlay.admx
c:\windows\PolicyDefinitions\Biometrics.admx
c:\windows\PolicyDefinitions\Bits.admx
c:\windows\PolicyDefinitions\CEIPEnable.admx
c:\windows\PolicyDefinitions\CipherSuiteOrder.admx
c:\windows\PolicyDefinitions\COM.admx
c:\windows\PolicyDefinitions\Conf.admx
c:\windows\PolicyDefinitions\ControlPanel.admx
c:\windows\PolicyDefinitions\ControlPanelDisplay.admx
c:\windows\PolicyDefinitions\Cpls.admx
c:\windows\PolicyDefinitions\CredentialProviders.admx
c:\windows\PolicyDefinitions\CredSsp.admx
c:\windows\PolicyDefinitions\CredUI.admx
c:\windows\PolicyDefinitions\cs-CZ\ActiveXInstallService.adml
c:\windows\PolicyDefinitions\cs-CZ\AddRemovePrograms.adml
c:\windows\PolicyDefinitions\cs-CZ\AppCompat.adml
c:\windows\PolicyDefinitions\cs-CZ\AttachmentManager.adml
c:\windows\PolicyDefinitions\cs-CZ\AutoPlay.adml
c:\windows\PolicyDefinitions\cs-CZ\Biometrics.adml
c:\windows\PolicyDefinitions\cs-CZ\Bits.adml
c:\windows\PolicyDefinitions\cs-CZ\CEIPEnable.adml
c:\windows\PolicyDefinitions\cs-CZ\CipherSuiteOrder.adml
c:\windows\PolicyDefinitions\cs-CZ\COM.adml
c:\windows\PolicyDefinitions\cs-CZ\Conf.adml
c:\windows\PolicyDefinitions\cs-CZ\ControlPanel.adml
c:\windows\PolicyDefinitions\cs-CZ\ControlPanelDisplay.adml
c:\windows\PolicyDefinitions\cs-CZ\Cpls.adml
c:\windows\PolicyDefinitions\cs-CZ\CredentialProviders.adml
c:\windows\PolicyDefinitions\cs-CZ\CredSsp.adml
c:\windows\PolicyDefinitions\cs-CZ\CredUI.adml
c:\windows\PolicyDefinitions\cs-CZ\CtrlAltDel.adml
c:\windows\PolicyDefinitions\cs-CZ\DCOM.adml
c:\windows\PolicyDefinitions\cs-CZ\Desktop.adml
c:\windows\PolicyDefinitions\cs-CZ\DeviceInstallation.adml
c:\windows\PolicyDefinitions\cs-CZ\DeviceRedirection.adml
c:\windows\PolicyDefinitions\cs-CZ\DFS.adml
c:\windows\PolicyDefinitions\cs-CZ\DigitalLocker.adml
c:\windows\PolicyDefinitions\cs-CZ\DiskDiagnostic.adml
c:\windows\PolicyDefinitions\cs-CZ\DiskNVCache.adml
c:\windows\PolicyDefinitions\cs-CZ\DiskQuota.adml
c:\windows\PolicyDefinitions\cs-CZ\DistributedLinkTracking.adml
c:\windows\PolicyDefinitions\cs-CZ\DnsClient.adml
c:\windows\PolicyDefinitions\cs-CZ\DWM.adml
c:\windows\PolicyDefinitions\cs-CZ\EncryptFilesonMove.adml
c:\windows\PolicyDefinitions\cs-CZ\EnhancedStorage.adml
c:\windows\PolicyDefinitions\cs-CZ\ErrorReporting.adml
c:\windows\PolicyDefinitions\cs-CZ\EventForwarding.adml
c:\windows\PolicyDefinitions\cs-CZ\EventLog.adml
c:\windows\PolicyDefinitions\cs-CZ\EventViewer.adml
c:\windows\PolicyDefinitions\cs-CZ\Explorer.adml
c:\windows\PolicyDefinitions\cs-CZ\FileRecovery.adml
c:\windows\PolicyDefinitions\cs-CZ\FileSys.adml
c:\windows\PolicyDefinitions\cs-CZ\FolderRedirection.adml
c:\windows\PolicyDefinitions\cs-CZ\FramePanes.adml
c:\windows\PolicyDefinitions\cs-CZ\fthsvc.adml
c:\windows\PolicyDefinitions\cs-CZ\GameExplorer.adml
c:\windows\PolicyDefinitions\cs-CZ\Globalization.adml
c:\windows\PolicyDefinitions\cs-CZ\GroupPolicy.adml
c:\windows\PolicyDefinitions\cs-CZ\Help.adml
c:\windows\PolicyDefinitions\cs-CZ\HelpAndSupport.adml
c:\windows\PolicyDefinitions\cs-CZ\HotStart.adml
c:\windows\PolicyDefinitions\cs-CZ\ICM.adml
c:\windows\PolicyDefinitions\cs-CZ\IIS.adml
c:\windows\PolicyDefinitions\cs-CZ\InetRes.adml
c:\windows\PolicyDefinitions\cs-CZ\InkWatson.adml
c:\windows\PolicyDefinitions\cs-CZ\InputPersonalization.adml
c:\windows\PolicyDefinitions\cs-CZ\iSCSI.adml
c:\windows\PolicyDefinitions\cs-CZ\Kerberos.adml
c:\windows\PolicyDefinitions\cs-CZ\LanmanServer.adml
c:\windows\PolicyDefinitions\cs-CZ\LeakDiagnostic.adml
c:\windows\PolicyDefinitions\cs-CZ\LinkLayerTopologyDiscovery.adml
c:\windows\PolicyDefinitions\cs-CZ\Logon.adml
c:\windows\PolicyDefinitions\cs-CZ\MediaCenter.adml
c:\windows\PolicyDefinitions\cs-CZ\MMC.adml
c:\windows\PolicyDefinitions\cs-CZ\MMCSnapins.adml
c:\windows\PolicyDefinitions\cs-CZ\MobilePCMobilityCenter.adml
c:\windows\PolicyDefinitions\cs-CZ\MobilePCPresentationSettings.adml
c:\windows\PolicyDefinitions\cs-CZ\MSDT.adml
c:\windows\PolicyDefinitions\cs-CZ\Msi-FileRecovery.adml
c:\windows\PolicyDefinitions\cs-CZ\MSI.adml
c:\windows\PolicyDefinitions\cs-CZ\NCSI.adml
c:\windows\PolicyDefinitions\cs-CZ\Netlogon.adml
c:\windows\PolicyDefinitions\cs-CZ\NetworkConnections.adml
c:\windows\PolicyDefinitions\cs-CZ\NetworkProjection.adml
c:\windows\PolicyDefinitions\cs-CZ\OfflineFiles.adml
c:\windows\PolicyDefinitions\cs-CZ\P2P-pnrp.adml
c:\windows\PolicyDefinitions\cs-CZ\ParentalControls.adml
c:\windows\PolicyDefinitions\cs-CZ\pca.adml
c:\windows\PolicyDefinitions\cs-CZ\PeerToPeerCaching.adml
c:\windows\PolicyDefinitions\cs-CZ\PenTraining.adml
c:\windows\PolicyDefinitions\cs-CZ\PerfCenterCPL.adml
c:\windows\PolicyDefinitions\cs-CZ\PerformanceDiagnostics.adml
c:\windows\PolicyDefinitions\cs-CZ\PerformancePerftrack.adml
c:\windows\PolicyDefinitions\cs-CZ\Power.adml
c:\windows\PolicyDefinitions\cs-CZ\PreviousVersions.adml
c:\windows\PolicyDefinitions\cs-CZ\Printing.adml
c:\windows\PolicyDefinitions\cs-CZ\Programs.adml
c:\windows\PolicyDefinitions\cs-CZ\QOS.adml
c:\windows\PolicyDefinitions\cs-CZ\RacWmiProv.adml
c:\windows\PolicyDefinitions\cs-CZ\Radar.adml
c:\windows\PolicyDefinitions\cs-CZ\ReAgent.adml
c:\windows\PolicyDefinitions\cs-CZ\Reliability.adml
c:\windows\PolicyDefinitions\cs-CZ\RemoteAssistance.adml
c:\windows\PolicyDefinitions\cs-CZ\RemovableStorage.adml
c:\windows\PolicyDefinitions\cs-CZ\RPC.adml
c:\windows\PolicyDefinitions\cs-CZ\Scripts.adml
c:\windows\PolicyDefinitions\cs-CZ\sdiageng.adml
c:\windows\PolicyDefinitions\cs-CZ\sdiagschd.adml
c:\windows\PolicyDefinitions\cs-CZ\Search.adml
c:\windows\PolicyDefinitions\cs-CZ\Securitycenter.adml
c:\windows\PolicyDefinitions\cs-CZ\Sensors.adml
c:\windows\PolicyDefinitions\cs-CZ\Setup.adml
c:\windows\PolicyDefinitions\cs-CZ\ShapeCollector.adml
c:\windows\PolicyDefinitions\cs-CZ\SharedFolders.adml
c:\windows\PolicyDefinitions\cs-CZ\Sharing.adml
c:\windows\PolicyDefinitions\cs-CZ\Shell-CommandPrompt-RegEditTools.adml
c:\windows\PolicyDefinitions\cs-CZ\ShellWelcomeCenter.adml
c:\windows\PolicyDefinitions\cs-CZ\Sidebar.adml
c:\windows\PolicyDefinitions\cs-CZ\Sideshow.adml
c:\windows\PolicyDefinitions\cs-CZ\Smartcard.adml
c:\windows\PolicyDefinitions\cs-CZ\Snmp.adml
c:\windows\PolicyDefinitions\cs-CZ\SoundRec.adml
c:\windows\PolicyDefinitions\cs-CZ\StartMenu.adml
c:\windows\PolicyDefinitions\cs-CZ\SystemResourceManager.adml
c:\windows\PolicyDefinitions\cs-CZ\SystemRestore.adml
c:\windows\PolicyDefinitions\cs-CZ\TabletPCInputPanel.adml
c:\windows\PolicyDefinitions\cs-CZ\TabletShell.adml
c:\windows\PolicyDefinitions\cs-CZ\Taskbar.adml
c:\windows\PolicyDefinitions\cs-CZ\TaskScheduler.adml
c:\windows\PolicyDefinitions\cs-CZ\tcpip.adml
c:\windows\PolicyDefinitions\cs-CZ\TerminalServer.adml
c:\windows\PolicyDefinitions\cs-CZ\Thumbnails.adml
c:\windows\PolicyDefinitions\cs-CZ\TouchInput.adml
c:\windows\PolicyDefinitions\cs-CZ\TPM.adml
c:\windows\PolicyDefinitions\cs-CZ\UserDataBackup.adml
c:\windows\PolicyDefinitions\cs-CZ\UserProfiles.adml
c:\windows\PolicyDefinitions\cs-CZ\VolumeEncryption.adml
c:\windows\PolicyDefinitions\cs-CZ\W32Time.adml
c:\windows\PolicyDefinitions\cs-CZ\WDI.adml
c:\windows\PolicyDefinitions\cs-CZ\WinCal.adml
c:\windows\PolicyDefinitions\cs-CZ\Windows.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsAnytimeUpgrade.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsBackup.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsColorSystem.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsConnectNow.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsDefender.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsExplorer.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsFileProtection.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsFirewall.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsMail.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsMediaDRM.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsMediaPlayer.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsMessenger.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsProducts.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsRemoteManagement.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsRemoteShell.adml
c:\windows\PolicyDefinitions\cs-CZ\WindowsUpdate.adml
c:\windows\PolicyDefinitions\cs-CZ\WinInit.adml
c:\windows\PolicyDefinitions\cs-CZ\WinLogon.adml
c:\windows\PolicyDefinitions\cs-CZ\Winsrv.adml
c:\windows\PolicyDefinitions\cs-CZ\WordWheel.adml
c:\windows\PolicyDefinitions\CtrlAltDel.admx
c:\windows\PolicyDefinitions\DCOM.admx
c:\windows\PolicyDefinitions\Desktop.admx
c:\windows\PolicyDefinitions\DeviceInstallation.admx
c:\windows\PolicyDefinitions\DeviceRedirection.admx
c:\windows\PolicyDefinitions\DFS.admx
c:\windows\PolicyDefinitions\DigitalLocker.admx
c:\windows\PolicyDefinitions\DiskDiagnostic.admx
c:\windows\PolicyDefinitions\DiskNVCache.admx
c:\windows\PolicyDefinitions\DiskQuota.admx
c:\windows\PolicyDefinitions\DistributedLinkTracking.admx
c:\windows\PolicyDefinitions\DnsClient.admx
c:\windows\PolicyDefinitions\DWM.admx
c:\windows\PolicyDefinitions\en-US\InetRes.adml
c:\windows\PolicyDefinitions\EncryptFilesonMove.admx
c:\windows\PolicyDefinitions\EnhancedStorage.admx
c:\windows\PolicyDefinitions\ErrorReporting.admx
c:\windows\PolicyDefinitions\EventForwarding.admx
c:\windows\PolicyDefinitions\EventLog.admx
c:\windows\PolicyDefinitions\EventViewer.admx
c:\windows\PolicyDefinitions\Explorer.admx
c:\windows\PolicyDefinitions\FileRecovery.admx
c:\windows\PolicyDefinitions\FileSys.admx
c:\windows\PolicyDefinitions\FolderRedirection.admx
c:\windows\PolicyDefinitions\FramePanes.admx
c:\windows\PolicyDefinitions\fthsvc.admx
c:\windows\PolicyDefinitions\GameExplorer.admx
c:\windows\PolicyDefinitions\Globalization.admx
c:\windows\PolicyDefinitions\GroupPolicy.admx
c:\windows\PolicyDefinitions\Help.admx
c:\windows\PolicyDefinitions\HelpAndSupport.admx
c:\windows\PolicyDefinitions\HotStart.admx
c:\windows\PolicyDefinitions\ICM.admx
c:\windows\PolicyDefinitions\IIS.admx
c:\windows\PolicyDefinitions\inetres.admx
c:\windows\PolicyDefinitions\InkWatson.admx
c:\windows\PolicyDefinitions\InputPersonalization.admx
c:\windows\PolicyDefinitions\iSCSI.admx
c:\windows\PolicyDefinitions\Kerberos.admx
c:\windows\PolicyDefinitions\LanmanServer.admx
c:\windows\PolicyDefinitions\LeakDiagnostic.admx
c:\windows\PolicyDefinitions\LinkLayerTopologyDiscovery.admx
c:\windows\PolicyDefinitions\Logon.admx
c:\windows\PolicyDefinitions\MediaCenter.admx
c:\windows\PolicyDefinitions\MMC.admx
c:\windows\PolicyDefinitions\MMCSnapins.admx
c:\windows\PolicyDefinitions\MobilePCMobilityCenter.admx
c:\windows\PolicyDefinitions\MobilePCPresentationSettings.admx
c:\windows\PolicyDefinitions\MSDT.admx
c:\windows\PolicyDefinitions\Msi-FileRecovery.admx
c:\windows\PolicyDefinitions\MSI.admx
c:\windows\PolicyDefinitions\NCSI.admx
c:\windows\PolicyDefinitions\Netlogon.admx
c:\windows\PolicyDefinitions\NetworkConnections.admx
c:\windows\PolicyDefinitions\NetworkProjection.admx
c:\windows\PolicyDefinitions\OfflineFiles.admx
c:\windows\PolicyDefinitions\P2P-pnrp.admx
c:\windows\PolicyDefinitions\ParentalControls.admx
c:\windows\PolicyDefinitions\pca.admx
c:\windows\PolicyDefinitions\PeerToPeerCaching.admx
c:\windows\PolicyDefinitions\PenTraining.admx
c:\windows\PolicyDefinitions\PerfCenterCPL.admx
c:\windows\PolicyDefinitions\PerformanceDiagnostics.admx
c:\windows\PolicyDefinitions\PerformancePerftrack.admx
c:\windows\PolicyDefinitions\Power.admx
c:\windows\PolicyDefinitions\PreviousVersions.admx
c:\windows\PolicyDefinitions\Printing.admx
c:\windows\PolicyDefinitions\Programs.admx
c:\windows\PolicyDefinitions\QOS.admx
c:\windows\PolicyDefinitions\RacWmiProv.admx
c:\windows\PolicyDefinitions\Radar.admx
c:\windows\PolicyDefinitions\ReAgent.admx
c:\windows\PolicyDefinitions\Reliability.admx
c:\windows\PolicyDefinitions\RemoteAssistance.admx
c:\windows\PolicyDefinitions\RemovableStorage.admx
c:\windows\PolicyDefinitions\RPC.admx
c:\windows\PolicyDefinitions\Scripts.admx
c:\windows\PolicyDefinitions\sdiageng.admx
c:\windows\PolicyDefinitions\sdiagschd.admx
c:\windows\PolicyDefinitions\Search.admx
c:\windows\PolicyDefinitions\Securitycenter.admx
c:\windows\PolicyDefinitions\Sensors.admx
c:\windows\PolicyDefinitions\Setup.admx
c:\windows\PolicyDefinitions\ShapeCollector.admx
c:\windows\PolicyDefinitions\SharedFolders.admx
c:\windows\PolicyDefinitions\Sharing.admx
c:\windows\PolicyDefinitions\Shell-CommandPrompt-RegEditTools.admx
c:\windows\PolicyDefinitions\ShellWelcomeCenter.admx
c:\windows\PolicyDefinitions\Sidebar.admx
c:\windows\PolicyDefinitions\Sideshow.admx
c:\windows\PolicyDefinitions\Smartcard.admx
c:\windows\PolicyDefinitions\Snmp.admx
c:\windows\PolicyDefinitions\SoundRec.admx
c:\windows\PolicyDefinitions\StartMenu.admx
c:\windows\PolicyDefinitions\SystemResourceManager.admx
c:\windows\PolicyDefinitions\SystemRestore.admx
c:\windows\PolicyDefinitions\TabletPCInputPanel.admx
c:\windows\PolicyDefinitions\TabletShell.admx
c:\windows\PolicyDefinitions\Taskbar.admx
c:\windows\PolicyDefinitions\TaskScheduler.admx
c:\windows\PolicyDefinitions\tcpip.admx
c:\windows\PolicyDefinitions\TerminalServer.admx
c:\windows\PolicyDefinitions\Thumbnails.admx
c:\windows\PolicyDefinitions\TouchInput.admx
c:\windows\PolicyDefinitions\TPM.admx
c:\windows\PolicyDefinitions\UserDataBackup.admx
c:\windows\PolicyDefinitions\UserProfiles.admx
c:\windows\PolicyDefinitions\VolumeEncryption.admx
c:\windows\PolicyDefinitions\W32Time.admx
c:\windows\PolicyDefinitions\WDI.admx
c:\windows\PolicyDefinitions\WinCal.admx
c:\windows\PolicyDefinitions\Windows.admx
c:\windows\PolicyDefinitions\WindowsAnytimeUpgrade.admx
c:\windows\PolicyDefinitions\WindowsBackup.admx
c:\windows\PolicyDefinitions\WindowsColorSystem.admx
c:\windows\PolicyDefinitions\WindowsConnectNow.admx
c:\windows\PolicyDefinitions\WindowsDefender.admx
c:\windows\PolicyDefinitions\WindowsExplorer.admx
c:\windows\PolicyDefinitions\WindowsFileProtection.admx
c:\windows\PolicyDefinitions\WindowsFirewall.admx
c:\windows\PolicyDefinitions\WindowsMail.admx
c:\windows\PolicyDefinitions\WindowsMediaDRM.admx
c:\windows\PolicyDefinitions\WindowsMediaPlayer.admx
c:\windows\PolicyDefinitions\WindowsMessenger.admx
c:\windows\PolicyDefinitions\WindowsProducts.admx
c:\windows\PolicyDefinitions\WindowsRemoteManagement.admx
c:\windows\PolicyDefinitions\WindowsRemoteShell.admx
c:\windows\PolicyDefinitions\WindowsUpdate.admx
c:\windows\PolicyDefinitions\WinInit.admx
c:\windows\PolicyDefinitions\WinLogon.admx
c:\windows\PolicyDefinitions\Winsrv.admx
c:\windows\PolicyDefinitions\WordWheel.admx
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-03-24 do 2013-04-24 )))))))))))))))))))))))))))))))
.
.
2013-04-24 14:44 . 2013-04-12 14:45 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-24 14:43 . 2013-04-10 03:46 9317456 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7235803A-8C6B-453D-B57D-510DC880F9B1}\mpengine.dll
2013-04-23 17:43 . 2013-04-10 03:46 9317456 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-04-22 18:17 . 2013-04-24 18:22 16152 ----a-w- c:\windows\system32\drivers\SWDUMon.sys
2013-04-22 18:17 . 2013-04-22 18:17 -------- d-----w- c:\users\Pepa\AppData\Local\SlimWare Utilities Inc
2013-04-22 18:17 . 2013-04-22 18:17 -------- d-----w- c:\program files (x86)\SlimDrivers
2013-04-22 18:08 . 2013-04-22 18:08 -------- d-----w- c:\users\Pepa\AppData\Roaming\TeamViewer
2013-04-22 17:34 . 2013-04-22 17:34 -------- d-----w- c:\users\Pepa\AppData\Roaming\Malwarebytes
2013-04-22 17:32 . 2013-04-22 17:32 -------- d-----w- c:\program files (x86)\Trend Micro
2013-04-22 17:31 . 2013-04-22 17:31 -------- d-----w- c:\program files\CCleaner
2013-04-22 17:30 . 2013-04-22 17:30 -------- d-----w- c:\programdata\Malwarebytes
2013-04-22 17:30 . 2013-04-22 17:30 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-04-22 17:30 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-04-22 17:30 . 2013-04-22 17:30 -------- d-----w- c:\users\Pepa\AppData\Local\Programs
2013-04-09 23:17 . 2013-02-15 06:06 3717632 ----a-w- c:\windows\system32\mstscax.dll
2013-04-09 23:17 . 2013-02-15 04:37 3217408 ----a-w- c:\windows\SysWow64\mstscax.dll
2013-04-09 23:17 . 2013-02-15 06:08 44032 ----a-w- c:\windows\system32\tsgqec.dll
2013-04-09 23:17 . 2013-02-15 06:02 158720 ----a-w- c:\windows\system32\aaclient.dll
2013-04-09 23:17 . 2013-02-15 04:34 131584 ----a-w- c:\windows\SysWow64\aaclient.dll
2013-04-09 23:17 . 2013-02-15 03:25 36864 ----a-w- c:\windows\SysWow64\tsgqec.dll
2013-04-09 23:17 . 2013-03-01 03:36 3153408 ----a-w- c:\windows\system32\win32k.sys
2013-04-09 23:17 . 2013-01-24 06:01 223752 ----a-w- c:\windows\system32\drivers\fvevol.sys
2013-04-09 23:17 . 2013-03-19 06:04 5550424 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-04-09 23:17 . 2013-03-19 05:04 3968856 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-04-09 23:17 . 2013-03-19 05:04 3913560 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-04-09 23:17 . 2013-03-19 03:06 112640 ----a-w- c:\windows\system32\smss.exe
2013-04-09 23:16 . 2013-03-19 05:46 43520 ----a-w- c:\windows\system32\csrsrv.dll
2013-04-09 23:16 . 2013-03-19 04:47 6656 ----a-w- c:\windows\SysWow64\apisetschema.dll
2013-03-27 18:39 . 2013-03-27 18:39 -------- d-----w- c:\program files\iPod
2013-03-27 18:39 . 2013-03-27 18:40 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-03-27 18:39 . 2013-03-27 18:39 -------- d-----w- c:\program files\iTunes
2013-03-27 18:39 . 2013-03-27 18:39 -------- d-----w- c:\program files (x86)\iTunes
2013-03-26 00:30 . 2013-02-12 04:12 19968 ----a-w- c:\windows\system32\drivers\usb8023.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-04-10 06:33 . 2012-01-04 13:29 72702784 ----a-w- c:\windows\system32\MRT.exe
2013-04-02 10:34 . 2012-01-04 13:12 282744 ------w- c:\windows\system32\MpSigStub.exe
2013-03-13 09:00 . 2013-01-21 20:23 73432 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-03-13 09:00 . 2013-01-21 20:23 693976 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-03-11 21:34 . 2012-01-06 14:28 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2013-02-26 13:39 . 2012-01-09 09:10 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2013-02-14 19:06 . 2012-01-06 14:28 483952 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2013-02-12 05:45 . 2013-03-13 19:58 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-02-12 05:45 . 2013-03-13 19:58 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-02-12 05:45 . 2013-03-13 19:58 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-02-12 05:45 . 2013-03-13 19:58 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-02-12 04:48 . 2013-03-13 19:59 474112 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-02-12 04:48 . 2013-03-13 19:59 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 16:08 143360 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ADSMTray"="c:\program files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe" [2009-06-24 272952]
"HControlUser"="c:\program files (x86)\ASUS\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Media\DMedia.exe" [2009-08-19 170624]
"ATKOSD2"="c:\program files (x86)\asus\atkosd2\atkosd2.exe" [2009-08-17 6859392]
"APSDaemon"="c:\program files (x86)\common files\apple\apple application support\apsdaemon.exe" [2013-01-28 59720]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 NETw5s64;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [2009-09-15 6952960]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 64bitový systém Windows Vista;c:\windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 130008]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2013-01-27 379360]
R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys [2013-04-24 16152]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-12-13 54784]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-01-04 1255736]
S2 ASMMAP64;ASMMAP64;c:\program files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
S2 PanService;PandoraService;c:\program files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-04-06 624856]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-01-07 378984]
S3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver;c:\windows\system32\Drivers\ATSwpWDF.sys [2009-08-21 716800]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [2012-01-07 82816]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2013-04-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-21 09:00]
.
2013-04-23 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3093074458-2507233680-1440018403-1000Core.job
- c:\users\Pepa\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-04-25 20:36]
.
2013-04-24 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3093074458-2507233680-1440018403-1000UA.job
- c:\users\Pepa\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-04-25 20:36]
.
2013-04-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-24 06:58]
.
2013-04-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-24 06:58]
.
2013-04-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3093074458-2507233680-1440018403-1000Core.job
- c:\users\Pepa\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-04 13:58]
.
2013-04-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3093074458-2507233680-1440018403-1000UA.job
- c:\users\Pepa\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-04 13:58]
.
2013-04-24 c:\windows\Tasks\SlimDrivers Startup.job
- c:\program files (x86)\SlimDrivers\SlimDrivers.exe [2013-03-29 14:22]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 15:52 159744 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-07-31 323072]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
"RtHDVCpl"="c:\program files\realtek\audio\hda\ravcpl64.exe" [2009-09-16 8114720]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.3.0.1 10.1.0.20
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-NB Probe - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\synaptics\syntp\syntpenh.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\ASUS\SmartLogon\smartlogon.exe
c:\program files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
c:\program files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\program files (x86)\ASUS\ATK Hotkey\HControl.exe
c:\program files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
c:\program files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
c:\program files (x86)\ASUS\ATK Hotkey\WDC.exe
c:\program files (x86)\ASUS\SmartLogon\sensorsrv.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\ASUS\NB Probe\SPM\spmgr.exe
.
**************************************************************************
.
Celkový čas: 2013-04-24 20:26:15 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-04-24 18:26
.
Před spuštěním: 9 197 989 888
Po spuštění: 9 059 446 784
.
- - End Of File - - 7EB6DCEDC5B35D856FF38AF959772BFE

Máš docela málo volného místa na systémovém disku... Mělo by být volno cca 15 % kapacity

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upus.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu