PC-HELP.CZ

Zdravím, po čisté instalaci W7 na nové SSD se vyskytlo pár problému. Zaprvé se často stává, že při používání prohlížeče (ať už chromu nebo opery) stránky načítají dlouho (řádově 5-10 sekund). Zadruhé při vypínání počítače se obraz sekne na modré obrazovce "Vypínání..." tohle trvá cca 10 a nebo se není schopný vypnout vůbec. Tímto bych chtěl někoho poprosit zda by nemohl kouknout na log jestli v něm něco nenajde. Děkuji.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:56:41, on 28.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16490)
Boot mode: Normal

Running processes:
I:\Windows\system32\IRMonitor.exe
Z:\Software\RocketDock\RocketDock.exe
Z:\Software\AVAST Software\Avast\AvastUI.exe
Z:\Games\League of Legends\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
Z:\Games\League of Legends\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.171\deploy\LoLLauncher.exe
Z:\Games\League of Legends\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.30\deploy\LolClient.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Users\Petr\AppData\Roaming\uTorrent\utorrent.exe
I:\Program Files (x86)\Opera\opera.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = I:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - Z:\Software\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - Z:\Software\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "Z:\Software\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [RocketDock] "Z:\Software\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "Z:\software\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] I:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] I:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] I:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "I:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "I:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - I:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - I:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - I:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - I:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - I:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: avast! Antivirus - AVAST Software - Z:\Software\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - I:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - I:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - I:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - I:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - I:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - I:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - I:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: JMB36X - Unknown owner - I:\Windows\SysWOW64\XSrvSetup.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - I:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - I:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - I:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - I:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - I:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - I:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - I:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - I:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - I:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - I:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - I:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - I:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - I:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - I:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - I:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - I:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - I:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - I:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - I:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8219 bytes

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod



Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

AdwCleaner

# AdwCleaner v2.303 - Log vytvooen 28/06/2013 v 20:11:57
# Aktualizováno 08/06/2013 Xplode
# Operaení systém : Windows 7 Ultimate Service Pack 1 (64 bits)
# Uživatel : Petr - PETR-PC
# Spuštin systém : Normální
# Spuštino z : I:\Users\Petr\Downloads\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : I:\Users\Petr\AppData\Roaming\PerformerSoft

***** [Registry] *****

Klíe Nalezeno : HKCU\Software\APN PIP
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\SmartBar
Klíe Nalezeno : HKCU\Software\BI
Klíe Nalezeno : HKCU\Software\Conduit
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\Software\PIP
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v9.0.8112.16490

[OK] Registry jsou eisté.

-\\ Google Chrome v27.0.1453.116

Soubor : I:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

-\\ Opera v12.15.1748.0

Soubor : I:\Users\Petr\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [1201 octets] - [28/06/2013 20:11:57]

########## EOF - I:\AdwCleaner[R1].txt - [1261 octets] ##########


Malwarebytes' Anti-Malware

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
http://www.malwarebytes.org

Verze: v2013.06.28.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Petr :: PETR-PC [administrátor]

Ochrana: Zakázána

28.6.2013 20:14:44
mbam-log-2013-06-28 (20-14-44).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 209726
Uplynulý čas: 1 minut, 41 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

V adw nech vše smazat a dodej log po mazání

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

AdwCleaner

# AdwCleaner v2.303 - Log vytvooen 28/06/2013 v 21:34:25
# Aktualizováno 08/06/2013 Xplode
# Operaení systém : Windows 7 Ultimate Service Pack 1 (64 bits)
# Uživatel : Petr - PETR-PC
# Spuštin systém : Normální
# Spuštino z : I:\Users\Petr\Downloads\adwcleaner.exe
# Volba [Vymazat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Vymazáno : I:\Users\Petr\AppData\Roaming\PerformerSoft

***** [Registry] *****

Klíe Vymazáno : HKCU\Software\APN PIP
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\SmartBar
Klíe Vymazáno : HKCU\Software\BI
Klíe Vymazáno : HKCU\Software\Conduit
Klíe Vymazáno : HKLM\Software\Conduit
Klíe Vymazáno : HKLM\Software\PIP
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v9.0.8112.16490

[OK] Registry jsou eisté.

-\\ Google Chrome v27.0.1453.116

Soubor : I:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

-\\ Opera v12.15.1748.0

Soubor : I:\Users\Petr\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [1330 octets] - [28/06/2013 20:11:57]
AdwCleaner[R2].txt - [1390 octets] - [28/06/2013 21:34:16]
AdwCleaner[S1].txt - [1319 octets] - [28/06/2013 21:34:25]

########## EOF - I:\AdwCleaner[S1].txt - [1379 octets] ##########


RogueKiller

RogueKiller V8.6.1 _x64_ [Jun 25 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : hxxp://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Petr [Práva správce]
Mód : Kontrola -- Datum : 06/28/2013 21:39:26
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 6 ¤¤¤
[HJ POL] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NALEZENO
[HJ POL] HKLM\[...]\System : EnableLUA (0) -> NALEZENO
[HJ POL] HKLM\[...]\Wow6432Node\[...]\System : ConsentPromptBehaviorAdmin (0) -> NALEZENO
[HJ POL] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST310005 28AS SATA Disk Device +++++
--- User ---
[MBR] c2c7687f5973915f7b74320af9676067
[BSP] ae366d9e6f724ce8807d378b11235010 : Windows XP MBR Code
Partition table:
0 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 16065 | Size: 953859 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

+++++ PhysicalDrive1: ST310005 28AS SATA Disk Device +++++
--- User ---
[MBR] f251ae993caa505e5fa3f95ab3fa9145
[BSP] 6df9374fc995fe27c0d16d29a6f1e4b2 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 114470 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_S_06282013_213926.txt >>

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "

- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání- Finished "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller


Jak je na tom PC? Co rychlost připojení? Proveď test na www.speedtest.net a dodej výsledek

RogueKiller V8.6.1 _x64_ [Jun 25 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : hxxp://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Petr [Práva správce]
Mód : Odebrat -- Datum : 06/28/2013 23:56:24
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 6 ¤¤¤
[HJ POL] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NAHRAZENO (2)
[HJ POL] HKLM\[...]\System : EnableLUA (0) -> NAHRAZENO (1)
[HJ POL] HKLM\[...]\Wow6432Node\[...]\System : ConsentPromptBehaviorAdmin (0) -> NAHRAZENO (2)
[HJ POL] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> NAHRAZENO (1)
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST310005 28AS SATA Disk Device +++++
--- User ---
[MBR] c2c7687f5973915f7b74320af9676067
[BSP] ae366d9e6f724ce8807d378b11235010 : Windows XP MBR Code
Partition table:
0 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 16065 | Size: 953859 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

+++++ PhysicalDrive1: ST310005 28AS SATA Disk Device +++++
--- User ---
[MBR] f251ae993caa505e5fa3f95ab3fa9145
[BSP] 6df9374fc995fe27c0d16d29a6f1e4b2 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 114470 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_D_06282013_235624.txt >>
RKreport[0]_S_06282013_213926.txt;RKreport[0]_S_06282013_235614.txt









Při zapnuté již výše zmíněném Windows Media Center se webové stránky pořád načítají pomalu a test se vůbec nespustí. Každopádně počítač se vypnul cca za 90 vteřin což je znatelný skok. Pokusím se ještě zjistit jaké další aplikaci způsobují zpomalení internetu.

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

TDSSKiller (1)

09:29:51.0265 0464 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
09:29:51.0437 0464 ============================================================
09:29:51.0437 0464 Current date / time: 2013/06/29 09:29:51.0437
09:29:51.0437 0464 SystemInfo:
09:29:51.0437 0464
09:29:51.0437 0464 OS Version: 6.1.7601 ServicePack: 1.0
09:29:51.0437 0464 Product type: Workstation
09:29:51.0437 0464 ComputerName: PETR-PC
09:29:51.0437 0464 UserName: Petr
09:29:51.0437 0464 Windows directory: I:\Windows
09:29:51.0437 0464 System windows directory: I:\Windows
09:29:51.0437 0464 Running under WOW64
09:29:51.0437 0464 Processor architecture: Intel x64
09:29:51.0437 0464 Number of processors: 4
09:29:51.0437 0464 Page size: 0x1000
09:29:51.0437 0464 Boot type: Normal boot
09:29:51.0437 0464 ============================================================
09:29:51.0690 0464 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1D9265, SectorsPerTrack: 0x3F, TracksPerCylinder: 0x10, Type 'K0', Flags 0x00000040
09:29:51.0690 0464 Drive \Device\Harddisk1\DR1 - Size: 0x1BF2976000 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3901, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
09:29:51.0701 0464 ============================================================
09:29:51.0701 0464 \Device\Harddisk0\DR0:
09:29:51.0701 0464 MBR partitions:
09:29:51.0704 0464 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F00, BlocksNum 0x74701AC1
09:29:51.0704 0464 \Device\Harddisk1\DR1:
09:29:51.0704 0464 MBR partitions:
09:29:51.0704 0464 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xDF93782
09:29:51.0704 0464 ============================================================
09:29:51.0727 0464 Z: <-> \Device\Harddisk0\DR0\Partition1
09:29:51.0730 0464 I: <-> \Device\Harddisk1\DR1\Partition1
09:29:51.0730 0464 ============================================================
09:29:51.0730 0464 Initialize success
09:29:51.0730 0464 ============================================================
09:30:04.0400 4868 ============================================================
09:30:04.0400 4868 Scan started
09:30:04.0400 4868 Mode: Manual;
09:30:04.0400 4868 ============================================================
09:30:04.0580 4868 ================ Scan system memory ========================
09:30:04.0580 4868 System memory - ok
09:30:04.0590 4868 ================ Scan services =============================
09:30:04.0650 4868 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci I:\Windows\system32\drivers\1394ohci.sys
09:30:04.0650 4868 1394ohci - ok
09:30:04.0660 4868 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI I:\Windows\system32\drivers\ACPI.sys
09:30:04.0660 4868 ACPI - ok
09:30:04.0670 4868 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi I:\Windows\system32\drivers\acpipmi.sys
09:30:04.0670 4868 AcpiPmi - ok
09:30:04.0710 4868 [ 9915504F602D277EE47FD843A677FD15 ] AdobeFlashPlayerUpdateSvc I:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
09:30:04.0710 4868 AdobeFlashPlayerUpdateSvc - ok
09:30:04.0720 4868 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx I:\Windows\system32\DRIVERS\adp94xx.sys
09:30:04.0730 4868 adp94xx - ok
09:30:04.0740 4868 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci I:\Windows\system32\DRIVERS\adpahci.sys
09:30:04.0740 4868 adpahci - ok
09:30:04.0750 4868 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 I:\Windows\system32\DRIVERS\adpu320.sys
09:30:04.0750 4868 adpu320 - ok
09:30:04.0760 4868 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc I:\Windows\System32\aelupsvc.dll
09:30:04.0760 4868 AeLookupSvc - ok
09:30:04.0770 4868 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD I:\Windows\system32\drivers\afd.sys
09:30:04.0770 4868 AFD - ok
09:30:04.0780 4868 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 I:\Windows\system32\drivers\agp440.sys
09:30:04.0780 4868 agp440 - ok
09:30:04.0780 4868 [ 3290D6946B5E30E70414990574883DDB ] ALG I:\Windows\System32\alg.exe
09:30:04.0780 4868 ALG - ok
09:30:04.0790 4868 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide I:\Windows\system32\drivers\aliide.sys
09:30:04.0790 4868 aliide - ok
09:30:04.0800 4868 [ 310F86335B0505DDC6D2DD48E66EF06B ] AMD External Events Utility I:\Windows\system32\atiesrxx.exe
09:30:04.0800 4868 AMD External Events Utility - ok
09:30:04.0810 4868 AMD FUEL Service - ok
09:30:04.0810 4868 [ 1FF8B4431C353CE385C875F194924C0C ] amdide I:\Windows\system32\drivers\amdide.sys
09:30:04.0810 4868 amdide - ok
09:30:04.0820 4868 [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64 I:\Windows\system32\DRIVERS\amdiox64.sys
09:30:04.0820 4868 amdiox64 - ok
09:30:04.0820 4868 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 I:\Windows\system32\DRIVERS\amdk8.sys
09:30:04.0830 4868 AmdK8 - ok
09:30:04.0980 4868 [ 79CC9BE187E3144E1B58A54B842475E7 ] amdkmdag I:\Windows\system32\DRIVERS\atikmdag.sys
09:30:05.0120 4868 amdkmdag - ok
09:30:05.0130 4868 [ 07561D3B7FD99F6E186C49C2D0628E38 ] amdkmdap I:\Windows\system32\DRIVERS\atikmpag.sys
09:30:05.0130 4868 amdkmdap - ok
09:30:05.0140 4868 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM I:\Windows\system32\DRIVERS\amdppm.sys
09:30:05.0140 4868 AmdPPM - ok
09:30:05.0140 4868 [ 12A5062C06E03FF70DB47800F91C7A13 ] amdsata I:\Windows\system32\DRIVERS\amdsata.sys
09:30:05.0140 4868 amdsata - ok
09:30:05.0150 4868 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs I:\Windows\system32\DRIVERS\amdsbs.sys
09:30:05.0150 4868 amdsbs - ok
09:30:05.0160 4868 [ 8A7F289B45CEACAC761E14D5FAC59EB9 ] amdxata I:\Windows\system32\DRIVERS\amdxata.sys
09:30:05.0160 4868 amdxata - ok
09:30:05.0160 4868 [ 5A528A540B1AEE8B1C77ED65094E8CDF ] AODDriver4.2 I:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
09:30:05.0160 4868 AODDriver4.2 - ok
09:30:05.0170 4868 [ 89A69C3F2F319B43379399547526D952 ] AppID I:\Windows\system32\drivers\appid.sys
09:30:05.0170 4868 AppID - ok
09:30:05.0180 4868 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc I:\Windows\System32\appidsvc.dll
09:30:05.0180 4868 AppIDSvc - ok
09:30:05.0180 4868 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo I:\Windows\System32\appinfo.dll
09:30:05.0180 4868 Appinfo - ok
09:30:05.0190 4868 [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt I:\Windows\System32\appmgmts.dll
09:30:05.0190 4868 AppMgmt - ok
09:30:05.0200 4868 [ C484F8CEB1717C540242531DB7845C4E ] arc I:\Windows\system32\DRIVERS\arc.sys
09:30:05.0200 4868 arc - ok
09:30:05.0200 4868 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas I:\Windows\system32\DRIVERS\arcsas.sys
09:30:05.0210 4868 arcsas - ok
09:30:05.0210 4868 [ 0BAEFD3F648C6E7AB52990DD9565E4E2 ] aswFsBlk I:\Windows\system32\drivers\aswFsBlk.sys
09:30:05.0210 4868 aswFsBlk - ok
09:30:05.0220 4868 [ FA562F34ED6633C66170B09182B4C049 ] aswMonFlt I:\Windows\system32\drivers\aswMonFlt.sys
09:30:05.0220 4868 aswMonFlt - ok
09:30:05.0220 4868 [ 64E2BAB4096C13D2342BC4661C967E07 ] aswRdr I:\Windows\System32\Drivers\aswrdr2.sys
09:30:05.0220 4868 aswRdr - ok
09:30:05.0230 4868 [ 5573AA70993A2BB81525B1C704B88763 ] aswRvrt I:\Windows\system32\drivers\aswRvrt.sys
09:30:05.0230 4868 aswRvrt - ok
09:30:05.0240 4868 [ 8C0800CDB501CFC1164B286A0478DC10 ] aswSnx I:\Windows\system32\drivers\aswSnx.sys
09:30:05.0250 4868 aswSnx - ok
09:30:05.0260 4868 [ 3815DB16CDA62190F5C0A65118F3D714 ] aswSP I:\Windows\system32\drivers\aswSP.sys
09:30:05.0260 4868 aswSP - ok
09:30:05.0260 4868 [ 29DD8E458A84171202AA4979364C30C0 ] aswTdi I:\Windows\system32\drivers\aswTdi.sys
09:30:05.0260 4868 aswTdi - ok
09:30:05.0270 4868 [ 22F521108881DC59837F6FC614E0568F ] aswVmm I:\Windows\system32\drivers\aswVmm.sys
09:30:05.0270 4868 aswVmm - ok
09:30:05.0280 4868 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac I:\Windows\system32\DRIVERS\asyncmac.sys
09:30:05.0280 4868 AsyncMac - ok
09:30:05.0280 4868 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi I:\Windows\system32\drivers\atapi.sys
09:30:05.0280 4868 atapi - ok
09:30:05.0290 4868 [ ED3A041014FBBFDC23D6C04F9C7A5D79 ] AtiHDAudioService I:\Windows\system32\drivers\AtihdW76.sys
09:30:05.0290 4868 AtiHDAudioService - ok
09:30:05.0300 4868 [ 7C5D273E29DCC5505469B299C6F29163 ] AtiPcie I:\Windows\system32\DRIVERS\AtiPcie.sys
09:30:05.0300 4868 AtiPcie - ok
09:30:05.0310 4868 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder I:\Windows\System32\Audiosrv.dll
09:30:05.0310 4868 AudioEndpointBuilder - ok
09:30:05.0320 4868 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv I:\Windows\System32\Audiosrv.dll
09:30:05.0330 4868 AudioSrv - ok
09:30:05.0390 4868 [ 28D6701C710AD7BA3CB95E75F8F1A9AA ] avast! Antivirus Z:\Software\AVAST Software\Avast\AvastSvc.exe
09:30:05.0390 4868 avast! Antivirus - ok
09:30:05.0410 4868 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV I:\Windows\System32\AxInstSV.dll
09:30:05.0410 4868 AxInstSV - ok
09:30:05.0430 4868 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv I:\Windows\system32\DRIVERS\bxvbda.sys
09:30:05.0430 4868 b06bdrv - ok
09:30:05.0440 4868 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a I:\Windows\system32\DRIVERS\b57nd60a.sys
09:30:05.0450 4868 b57nd60a - ok
09:30:05.0460 4868 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC I:\Windows\System32\bdesvc.dll
09:30:05.0460 4868 BDESVC - ok
09:30:05.0460 4868 [ 16A47CE2DECC9B099349A5F840654746 ] Beep I:\Windows\system32\drivers\Beep.sys
09:30:05.0470 4868 Beep - ok
09:30:05.0480 4868 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE I:\Windows\System32\bfe.dll
09:30:05.0490 4868 BFE - ok
09:30:05.0500 4868 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS I:\Windows\System32\qmgr.dll
09:30:05.0520 4868 BITS - ok
09:30:05.0520 4868 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive I:\Windows\system32\DRIVERS\blbdrive.sys
09:30:05.0520 4868 blbdrive - ok
09:30:05.0530 4868 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser I:\Windows\system32\DRIVERS\bowser.sys
09:30:05.0530 4868 bowser - ok
09:30:05.0540 4868 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo I:\Windows\system32\DRIVERS\BrFiltLo.sys
09:30:05.0540 4868 BrFiltLo - ok
09:30:05.0550 4868 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp I:\Windows\system32\DRIVERS\BrFiltUp.sys
09:30:05.0550 4868 BrFiltUp - ok
09:30:05.0550 4868 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser I:\Windows\System32\browser.dll
09:30:05.0560 4868 Browser - ok
09:30:05.0560 4868 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid I:\Windows\System32\Drivers\Brserid.sys
09:30:05.0570 4868 Brserid - ok
09:30:05.0570 4868 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm I:\Windows\System32\Drivers\BrSerWdm.sys
09:30:05.0570 4868 BrSerWdm - ok
09:30:05.0580 4868 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm I:\Windows\System32\Drivers\BrUsbMdm.sys
09:30:05.0580 4868 BrUsbMdm - ok
09:30:05.0580 4868 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer I:\Windows\System32\Drivers\BrUsbSer.sys
09:30:05.0580 4868 BrUsbSer - ok
09:30:05.0590 4868 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum I:\Windows\system32\drivers\BthEnum.sys
09:30:05.0590 4868 BthEnum - ok
09:30:05.0590 4868 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM I:\Windows\system32\DRIVERS\bthmodem.sys
09:30:05.0590 4868 BTHMODEM - ok
09:30:05.0600 4868 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan I:\Windows\system32\DRIVERS\bthpan.sys
09:30:05.0600 4868 BthPan - ok
09:30:05.0610 4868 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT I:\Windows\System32\Drivers\BTHport.sys
09:30:05.0620 4868 BTHPORT - ok
09:30:05.0620 4868 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv I:\Windows\system32\bthserv.dll
09:30:05.0620 4868 bthserv - ok
09:30:05.0630 4868 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB I:\Windows\System32\Drivers\BTHUSB.sys
09:30:05.0630 4868 BTHUSB - ok
09:30:05.0630 4868 [ B8BD2BB284668C84865658C77574381A ] cdfs I:\Windows\system32\DRIVERS\cdfs.sys
09:30:05.0640 4868 cdfs - ok
09:30:05.0640 4868 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom I:\Windows\system32\drivers\cdrom.sys
09:30:05.0650 4868 cdrom - ok
09:30:05.0650 4868 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc I:\Windows\System32\certprop.dll
09:30:05.0650 4868 CertPropSvc - ok
09:30:05.0660 4868 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass I:\Windows\system32\DRIVERS\circlass.sys
09:30:05.0660 4868 circlass - ok
09:30:05.0670 4868 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS I:\Windows\system32\CLFS.sys
09:30:05.0670 4868 CLFS - ok
09:30:05.0680 4868 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 I:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
09:30:05.0690 4868 clr_optimization_v2.0.50727_32 - ok
09:30:05.0700 4868 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 I:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
09:30:05.0700 4868 clr_optimization_v2.0.50727_64 - ok
09:30:05.0720 4868 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 I:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
09:30:05.0720 4868 clr_optimization_v4.0.30319_32 - ok
09:30:05.0730 4868 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 I:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
09:30:05.0730 4868 clr_optimization_v4.0.30319_64 - ok
09:30:05.0740 4868 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt I:\Windows\system32\DRIVERS\CmBatt.sys
09:30:05.0740 4868 CmBatt - ok
09:30:05.0740 4868 [ E19D3F095812725D88F9001985B94EDD ] cmdide I:\Windows\system32\drivers\cmdide.sys
09:30:05.0740 4868 cmdide - ok
09:30:05.0750 4868 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG I:\Windows\system32\Drivers\cng.sys
09:30:05.0760 4868 CNG - ok
09:30:05.0760 4868 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt I:\Windows\system32\DRIVERS\compbatt.sys
09:30:05.0760 4868 Compbatt - ok
09:30:05.0770 4868 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus I:\Windows\system32\drivers\CompositeBus.sys
09:30:05.0770 4868 CompositeBus - ok
09:30:05.0770 4868 COMSysApp - ok
09:30:05.0780 4868 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk I:\Windows\system32\DRIVERS\crcdisk.sys
09:30:05.0780 4868 crcdisk - ok
09:30:05.0790 4868 [ C0EAD9F8AB83D41FF07303C75589C2B8 ] Creative Audio Engine Licensing Service I:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
09:30:05.0790 4868 Creative Audio Engine Licensing Service - ok
09:30:05.0800 4868 [ D8129C49798CBBFB2E4351D4B7B8EF9C ] CryptSvc I:\Windows\system32\cryptsvc.dll
09:30:05.0800 4868 CryptSvc - ok
09:30:05.0810 4868 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC I:\Windows\system32\drivers\csc.sys
09:30:05.0820 4868 CSC - ok
09:30:05.0830 4868 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService I:\Windows\System32\cscsvc.dll
09:30:05.0830 4868 CscService - ok
09:30:05.0840 4868 [ CACB67BC2E73894ECBCBC4EAD2F02456 ] CTAudSvcService I:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
09:30:05.0840 4868 CTAudSvcService - ok
09:30:05.0860 4868 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch I:\Windows\system32\rpcss.dll
09:30:05.0860 4868 DcomLaunch - ok
09:30:05.0870 4868 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc I:\Windows\System32\defragsvc.dll
09:30:05.0870 4868 defragsvc - ok
09:30:05.0880 4868 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC I:\Windows\system32\Drivers\dfsc.sys
09:30:05.0880 4868 DfsC - ok
09:30:05.0890 4868 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp I:\Windows\system32\dhcpcore.dll
09:30:05.0890 4868 Dhcp - ok
09:30:05.0900 4868 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache I:\Windows\system32\drivers\discache.sys
09:30:05.0900 4868 discache - ok
09:30:05.0900 4868 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk I:\Windows\system32\DRIVERS\disk.sys
09:30:05.0900 4868 Disk - ok
09:30:05.0910 4868 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache I:\Windows\System32\dnsrslvr.dll
09:30:05.0910 4868 Dnscache - ok
09:30:05.0920 4868 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc I:\Windows\System32\dot3svc.dll
09:30:05.0920 4868 dot3svc - ok
09:30:05.0930 4868 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS I:\Windows\system32\dps.dll
09:30:05.0930 4868 DPS - ok
09:30:05.0930 4868 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud I:\Windows\system32\drivers\drmkaud.sys
09:30:05.0940 4868 drmkaud - ok
09:30:05.0940 4868 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 I:\Windows\system32\DRIVERS\dtsoftbus01.sys
09:30:05.0950 4868 dtsoftbus01 - ok
09:30:05.0960 4868 [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl I:\Windows\System32\drivers\dxgkrnl.sys
09:30:05.0960 4868 DXGKrnl - ok
09:30:05.0970 4868 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost I:\Windows\System32\eapsvc.dll
09:30:05.0970 4868 EapHost - ok
09:30:06.0010 4868 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv I:\Windows\system32\DRIVERS\evbda.sys
09:30:06.0040 4868 ebdrv - ok
09:30:06.0040 4868 [ C118A82CD78818C29AB228366EBF81C3 ] EFS I:\Windows\System32\lsass.exe
09:30:06.0040 4868 EFS - ok
09:30:06.0060 4868 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr I:\Windows\ehome\ehRecvr.exe
09:30:06.0060 4868 ehRecvr - ok
09:30:06.0070 4868 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched I:\Windows\ehome\ehsched.exe
09:30:06.0070 4868 ehSched - ok
09:30:06.0080 4868 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor I:\Windows\system32\DRIVERS\elxstor.sys
09:30:06.0080 4868 elxstor - ok
09:30:06.0090 4868 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev I:\Windows\system32\drivers\errdev.sys
09:30:06.0090 4868 ErrDev - ok
09:30:06.0100 4868 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem I:\Windows\system32\es.dll
09:30:06.0110 4868 EventSystem - ok
09:30:06.0110 4868 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat I:\Windows\system32\drivers\exfat.sys
09:30:06.0110 4868 exfat - ok
09:30:06.0120 4868 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat I:\Windows\system32\drivers\fastfat.sys
09:30:06.0120 4868 fastfat - ok
09:30:06.0130 4868 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax I:\Windows\system32\fxssvc.exe
09:30:06.0140 4868 Fax - ok
09:30:06.0150 4868 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc I:\Windows\system32\DRIVERS\fdc.sys
09:30:06.0150 4868 fdc - ok
09:30:06.0150 4868 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost I:\Windows\system32\fdPHost.dll
09:30:06.0150 4868 fdPHost - ok
09:30:06.0160 4868 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub I:\Windows\system32\fdrespub.dll
09:30:06.0160 4868 FDResPub - ok
09:30:06.0160 4868 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo I:\Windows\system32\drivers\fileinfo.sys
09:30:06.0160 4868 FileInfo - ok
09:30:06.0170 4868 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace I:\Windows\system32\drivers\filetrace.sys
09:30:06.0170 4868 Filetrace - ok
09:30:06.0170 4868 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk I:\Windows\system32\DRIVERS\flpydisk.sys
09:30:06.0180 4868 flpydisk - ok
09:30:06.0180 4868 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr I:\Windows\system32\drivers\fltmgr.sys
09:30:06.0190 4868 FltMgr - ok
09:30:06.0200 4868 [ B4447F606BB19FD8AD0BAFB59B90F5D9 ] FontCache I:\Windows\system32\FntCache.dll
09:30:06.0210 4868 FontCache - ok
09:30:06.0220 4868 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 I:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
09:30:06.0220 4868 FontCache3.0.0.0 - ok
09:30:06.0230 4868 [ D43703496149971890703B4B1B723EAC ] FsDepends I:\Windows\system32\drivers\FsDepends.sys
09:30:06.0230 4868 FsDepends - ok
09:30:06.0230 4868 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec I:\Windows\system32\drivers\Fs_Rec.sys
09:30:06.0230 4868 Fs_Rec - ok
09:30:06.0240 4868 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol I:\Windows\system32\DRIVERS\fvevol.sys
09:30:06.0240 4868 fvevol - ok
09:30:06.0250 4868 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx I:\Windows\system32\DRIVERS\gagp30kx.sys
09:30:06.0250 4868 gagp30kx - ok
09:30:06.0250 4868 gdrv - ok
09:30:06.0260 4868 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc I:\Windows\System32\gpsvc.dll
09:30:06.0270 4868 gpsvc - ok
09:30:06.0280 4868 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate I:\Program Files (x86)\Google\Update\GoogleUpdate.exe
09:30:06.0280 4868 gupdate - ok
09:30:06.0280 4868 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem I:\Program Files (x86)\Google\Update\GoogleUpdate.exe
09:30:06.0280 4868 gupdatem - ok
09:30:06.0290 4868 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir I:\Windows\system32\drivers\hcw85cir.sys
09:30:06.0290 4868 hcw85cir - ok
09:30:06.0300 4868 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService I:\Windows\system32\drivers\HdAudio.sys
09:30:06.0300 4868 HdAudAddService - ok
09:30:06.0310 4868 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus I:\Windows\system32\drivers\HDAudBus.sys
09:30:06.0310 4868 HDAudBus - ok
09:30:06.0310 4868 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt I:\Windows\system32\DRIVERS\HidBatt.sys
09:30:06.0310 4868 HidBatt - ok
09:30:06.0320 4868 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth I:\Windows\system32\DRIVERS\hidbth.sys
09:30:06.0320 4868 HidBth - ok
09:30:06.0330 4868 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr I:\Windows\system32\DRIVERS\hidir.sys
09:30:06.0330 4868 HidIr - ok
09:30:06.0330 4868 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv I:\Windows\system32\hidserv.dll
09:30:06.0330 4868 hidserv - ok
09:30:06.0340 4868 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb I:\Windows\system32\DRIVERS\hidusb.sys
09:30:06.0340 4868 HidUsb - ok
09:30:06.0340 4868 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc I:\Windows\system32\kmsvc.dll
09:30:06.0350 4868 hkmsvc - ok
09:30:06.0350 4868 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener I:\Windows\system32\ListSvc.dll
09:30:06.0360 4868 HomeGroupListener - ok
09:30:06.0360 4868 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider I:\Windows\system32\provsvc.dll
09:30:06.0370 4868 HomeGroupProvider - ok
09:30:06.0370 4868 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD I:\Windows\system32\drivers\HpSAMD.sys
09:30:06.0370 4868 HpSAMD - ok
09:30:06.0390 4868 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP I:\Windows\system32\drivers\HTTP.sys
09:30:06.0390 4868 HTTP - ok
09:30:06.0400 4868 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy I:\Windows\system32\drivers\hwpolicy.sys
09:30:06.0400 4868 hwpolicy - ok
09:30:06.0400 4868 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt I:\Windows\system32\drivers\i8042prt.sys
09:30:06.0400 4868 i8042prt - ok
09:30:06.0410 4868 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV I:\Windows\system32\drivers\iaStorV.sys
09:30:06.0420 4868 iaStorV - ok
09:30:06.0420 4868 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT I:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
09:30:06.0430 4868 IDriverT - ok
09:30:06.0440 4868 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc I:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
09:30:06.0450 4868 idsvc - ok
09:30:06.0450 4868 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp I:\Windows\system32\DRIVERS\iirsp.sys
09:30:06.0450 4868 iirsp - ok
09:30:06.0470 4868 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT I:\Windows\System32\ikeext.dll
09:30:06.0480 4868 IKEEXT - ok
09:30:06.0500 4868 [ 76877DD763A2287F58908795F3F5CCCB ] IntcAzAudAddService I:\Windows\system32\drivers\RTKVHD64.sys
09:30:06.0520 4868 IntcAzAudAddService - ok
09:30:06.0520 4868 [ F00F20E70C6EC3AA366910083A0518AA ] intelide I:\Windows\system32\drivers\intelide.sys
09:30:06.0520 4868 intelide - ok
09:30:06.0530 4868 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm I:\Windows\system32\DRIVERS\intelppm.sys
09:30:06.0530 4868 intelppm - ok
09:30:06.0530 4868 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum I:\Windows\system32\ipbusenum.dll
09:30:06.0540 4868 IPBusEnum - ok
09:30:06.0540 4868 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver I:\Windows\system32\DRIVERS\ipfltdrv.sys
09:30:06.0540 4868 IpFilterDriver - ok
09:30:06.0550 4868 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc I:\Windows\System32\iphlpsvc.dll
09:30:06.0560 4868 iphlpsvc - ok
09:30:06.0560 4868 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV I:\Windows\system32\drivers\IPMIDrv.sys
09:30:06.0570 4868 IPMIDRV - ok
09:30:06.0570 4868 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT I:\Windows\system32\drivers\ipnat.sys
09:30:06.0570 4868 IPNAT - ok
09:30:06.0580 4868 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM I:\Windows\system32\drivers\irenum.sys
09:30:06.0580 4868 IRENUM - ok
09:30:06.0580 4868 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp I:\Windows\system32\drivers\isapnp.sys
09:30:06.0580 4868 isapnp - ok
09:30:06.0590 4868 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt I:\Windows\system32\drivers\msiscsi.sys
09:30:06.0590 4868 iScsiPrt - ok
09:30:06.0600 4868 [ 492F2DF02CD817CE8D544F96097BD77A ] IT9135BDA I:\Windows\system32\Drivers\IT9135BDA.sys
09:30:06.0600 4868 IT9135BDA - ok
09:30:06.0640 4868 [ B4CDA1B4263B53D249AC27A4892DA634 ] JMB36X I:\Windows\SysWOW64\XSrvSetup.exe
09:30:06.0640 4868 JMB36X - ok
09:30:06.0650 4868 [ 75DDB94A2A24F9F7037D10A2DDA06D36 ] JRAID I:\Windows\system32\DRIVERS\jraid.sys
09:30:06.0650 4868 JRAID - ok
09:30:06.0660 4868 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass I:\Windows\system32\DRIVERS\kbdclass.sys
09:30:06.0660 4868 kbdclass - ok
09:30:06.0660 4868 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid I:\Windows\system32\DRIVERS\kbdhid.sys
09:30:06.0660 4868 kbdhid - ok
09:30:06.0670 4868 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso I:\Windows\system32\lsass.exe
09:30:06.0670 4868 KeyIso - ok
09:30:06.0670 4868 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD I:\Windows\system32\Drivers\ksecdd.sys
09:30:06.0670 4868 KSecDD - ok
09:30:06.0680 4868 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg I:\Windows\system32\Drivers\ksecpkg.sys
09:30:06.0680 4868 KSecPkg - ok
09:30:06.0690 4868 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk I:\Windows\system32\drivers\ksthunk.sys
09:30:06.0690 4868 ksthunk - ok
09:30:06.0700 4868 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm I:\Windows\system32\msdtckrm.dll
09:30:06.0700 4868 KtmRm - ok
09:30:06.0710 4868 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer I:\Windows\system32\srvsvc.dll
09:30:06.0710 4868 LanmanServer - ok
09:30:06.0720 4868 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation I:\Windows\System32\wkssvc.dll
09:30:06.0720 4868 LanmanWorkstation - ok
09:30:06.0730 4868 [ 1538831CF8AD2979A04C423779465827 ] lltdio I:\Windows\system32\DRIVERS\lltdio.sys
09:30:06.0730 4868 lltdio - ok
09:30:06.0740 4868 [ C1185803384AB3FEED115F79F109427F ] lltdsvc I:\Windows\System32\lltdsvc.dll
09:30:06.0740 4868 lltdsvc - ok
09:30:06.0750 4868 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts I:\Windows\System32\lmhsvc.dll
09:30:06.0750 4868 lmhosts - ok
09:30:06.0760 4868 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC I:\Windows\system32\DRIVERS\lsi_fc.sys
09:30:06.0760 4868 LSI_FC - ok
09:30:06.0760 4868 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS I:\Windows\system32\DRIVERS\lsi_sas.sys
09:30:06.0770 4868 LSI_SAS - ok
09:30:06.0770 4868 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 I:\Windows\system32\DRIVERS\lsi_sas2.sys
09:30:06.0770 4868 LSI_SAS2 - ok
09:30:06.0780 4868 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI I:\Windows\system32\DRIVERS\lsi_scsi.sys
09:30:06.0780 4868 LSI_SCSI - ok
09:30:06.0790 4868 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv I:\Windows\system32\drivers\luafv.sys
09:30:06.0790 4868 luafv - ok
09:30:06.0790 4868 [ 0BB97D43299910CBFBA59C461B99B910 ] MBAMProtector I:\Windows\system32\drivers\mbam.sys
09:30:06.0790 4868 MBAMProtector - ok
09:30:06.0800 4868 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler I:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
09:30:06.0800 4868 MBAMScheduler - ok
09:30:06.0820 4868 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService I:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
09:30:06.0820 4868 MBAMService - ok
09:30:06.0830 4868 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc I:\Windows\system32\Mcx2Svc.dll
09:30:06.0830 4868 Mcx2Svc - ok
09:30:06.0840 4868 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas I:\Windows\system32\DRIVERS\megasas.sys
09:30:06.0840 4868 megasas - ok
09:30:06.0840 4868 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR I:\Windows\system32\DRIVERS\MegaSR.sys
09:30:06.0850 4868 MegaSR - ok
09:30:06.0850 4868 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS I:\Windows\system32\mmcss.dll
09:30:06.0850 4868 MMCSS - ok
09:30:06.0860 4868 [ 800BA92F7010378B09F9ED9270F07137 ] Modem I:\Windows\system32\drivers\modem.sys
09:30:06.0860 4868 Modem - ok
09:30:06.0860 4868 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor I:\Windows\system32\DRIVERS\monitor.sys
09:30:06.0870 4868 monitor - ok
09:30:06.0870 4868 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass I:\Windows\system32\drivers\mouclass.sys
09:30:06.0870 4868 mouclass - ok
09:30:06.0880 4868 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid I:\Windows\system32\DRIVERS\mouhid.sys
09:30:06.0880 4868 mouhid - ok
09:30:06.0880 4868 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr I:\Windows\system32\drivers\mountmgr.sys
09:30:06.0880 4868 mountmgr - ok
09:30:06.0890 4868 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio I:\Windows\system32\drivers\mpio.sys
09:30:06.0890 4868 mpio - ok
09:30:06.0900 4868 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv I:\Windows\system32\drivers\mpsdrv.sys
09:30:06.0900 4868 mpsdrv - ok
09:30:06.0910 4868 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc I:\Windows\system32\mpssvc.dll
09:30:06.0920 4868 MpsSvc - ok
09:30:06.0920 4868 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV I:\Windows\system32\drivers\mrxdav.sys
09:30:06.0930 4868 MRxDAV - ok
09:30:06.0930 4868 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb I:\Windows\system32\DRIVERS\mrxsmb.sys
09:30:06.0940 4868 mrxsmb - ok
09:30:06.0940 4868 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 I:\Windows\system32\DRIVERS\mrxsmb10.sys
09:30:06.0950 4868 mrxsmb10 - ok
09:30:06.0950 4868 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 I:\Windows\system32\DRIVERS\mrxsmb20.sys
09:30:06.0950 4868 mrxsmb20 - ok
09:30:06.0960 4868 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci I:\Windows\system32\drivers\msahci.sys
09:30:06.0960 4868 msahci - ok
09:30:06.0960 4868 [ DB801A638D011B9633829EB6F663C900 ] msdsm I:\Windows\system32\drivers\msdsm.sys
09:30:06.0970 4868 msdsm - ok
09:30:06.0970 4868 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC I:\Windows\System32\msdtc.exe
09:30:06.0980 4868 MSDTC - ok
09:30:06.0980 4868 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs I:\Windows\system32\drivers\Msfs.sys
09:30:06.0980 4868 Msfs - ok
09:30:06.0990 4868 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf I:\Windows\System32\drivers\mshidkmdf.sys
09:30:06.0990 4868 mshidkmdf - ok
09:30:06.0990 4868 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv I:\Windows\system32\drivers\msisadrv.sys
09:30:07.0000 4868 msisadrv - ok
09:30:07.0000 4868 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI I:\Windows\system32\iscsiexe.dll
09:30:07.0010 4868 MSiSCSI - ok
09:30:07.0010 4868 msiserver - ok
09:30:07.0010 4868 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV I:\Windows\system32\drivers\MSKSSRV.sys
09:30:07.0020 4868 MSKSSRV - ok
09:30:07.0020 4868 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK I:\Windows\system32\drivers\MSPCLOCK.sys
09:30:07.0020 4868 MSPCLOCK - ok
09:30:07.0020 4868 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM I:\Windows\system32\drivers\MSPQM.sys
09:30:07.0030 4868 MSPQM - ok
09:30:07.0030 4868 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC I:\Windows\system32\drivers\MsRPC.sys
09:30:07.0040 4868 MsRPC - ok
09:30:07.0040 4868 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios I:\Windows\system32\drivers\mssmbios.sys
09:30:07.0040 4868 mssmbios - ok
09:30:07.0050 4868 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE I:\Windows\system32\drivers\MSTEE.sys
09:30:07.0050 4868 MSTEE - ok
09:30:07.0050 4868 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig I:\Windows\system32\DRIVERS\MTConfig.sys
09:30:07.0060 4868 MTConfig - ok
09:30:07.0060 4868 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup I:\Windows\system32\Drivers\mup.sys
09:30:07.0060 4868 Mup - ok
09:30:07.0070 4868 [ 582AC6D9873E31DFA28A4547270862DD ] napagent I:\Windows\system32\qagentRT.dll
09:30:07.0080 4868 napagent - ok
09:30:07.0080 4868 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP I:\Windows\system32\DRIVERS\nwifi.sys
09:30:07.0090 4868 NativeWifiP - ok
09:30:07.0100 4868 [ 760E38053BF56E501D562B70AD796B88 ] NDIS I:\Windows\system32\drivers\ndis.sys
09:30:07.0110 4868 NDIS - ok
09:30:07.0120 4868 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap I:\Windows\system32\DRIVERS\ndiscap.sys
09:30:07.0120 4868 NdisCap - ok
09:30:07.0120 4868 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi I:\Windows\system32\DRIVERS\ndistapi.sys
09:30:07.0120 4868 NdisTapi - ok
09:30:07.0130 4868 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio I:\Windows\system32\DRIVERS\ndisuio.sys
09:30:07.0130 4868 Ndisuio - ok
09:30:07.0130 4868 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan I:\Windows\system32\DRIVERS\ndiswan.sys
09:30:07.0140 4868 NdisWan - ok
09:30:07.0140 4868 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy I:\Windows\system32\drivers\NDProxy.sys
09:30:07.0140 4868 NDProxy - ok
09:30:07.0150 4868 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS I:\Windows\system32\DRIVERS\netbios.sys
09:30:07.0150 4868 NetBIOS - ok
09:30:07.0160 4868 [ 09594D1089C523423B32A4229263F068 ] NetBT I:\Windows\system32\DRIVERS\netbt.sys
09:30:07.0160 4868 NetBT - ok
09:30:07.0160 4868 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon I:\Windows\system32\lsass.exe
09:30:07.0160 4868 Netlogon - ok
09:30:07.0170 4868 [ 847D3AE376C0817161A14A82C8922A9E ] Netman I:\Windows\System32\netman.dll
09:30:07.0180 4868 Netman - ok
09:30:07.0190 4868 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm I:\Windows\System32\netprofm.dll
09:30:07.0190 4868 netprofm - ok
09:30:07.0200 4868 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing I:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
09:30:07.0200 4868 NetTcpPortSharing - ok
09:30:07.0200 4868 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 I:\Windows\system32\DRIVERS\nfrd960.sys
09:30:07.0210 4868 nfrd960 - ok
09:30:07.0210 4868 [ 8AD77806D336673F270DB31645267293 ] NlaSvc I:\Windows\System32\nlasvc.dll
09:30:07.0220 4868 NlaSvc - ok
09:30:07.0220 4868 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs I:\Windows\system32\drivers\Npfs.sys
09:30:07.0220 4868 Npfs - ok
09:30:07.0230 4868 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi I:\Windows\system32\nsisvc.dll
09:30:07.0230 4868 nsi - ok
09:30:07.0230 4868 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy I:\Windows\system32\drivers\nsiproxy.sys
09:30:07.0230 4868 nsiproxy - ok
09:30:07.0260 4868 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs I:\Windows\system32\drivers\Ntfs.sys
09:30:07.0270 4868 Ntfs - ok
09:30:07.0280 4868 [ 9899284589F75FA8724FF3D16AED75C1 ] Null I:\Windows\system32\drivers\Null.sys
09:30:07.0280 4868 Null - ok
09:30:07.0280 4868 [ 785298579B5F9B4032152DFBB992FDB6 ] nusb3hub I:\Windows\system32\DRIVERS\nusb3hub.sys
09:30:07.0290 4868 nusb3hub - ok
09:30:07.0290 4868 [ DF2750481B4964814467C974F2B0EEF1 ] nusb3xhc I:\Windows\system32\DRIVERS\nusb3xhc.sys
09:30:07.0290 4868 nusb3xhc - ok
09:30:07.0300 4868 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid I:\Windows\system32\drivers\nvraid.sys
09:30:07.0300 4868 nvraid - ok
09:30:07.0310 4868 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor I:\Windows\system32\drivers\nvstor.sys
09:30:07.0310 4868 nvstor - ok
09:30:07.0320 4868 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp I:\Windows\system32\drivers\nv_agp.sys
09:30:07.0320 4868 nv_agp - ok
09:30:07.0330 4868 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 I:\Windows\system32\drivers\ohci1394.sys
09:30:07.0330 4868 ohci1394 - ok
09:30:07.0330 4868 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc I:\Windows\system32\pnrpsvc.dll
09:30:07.0340 4868 p2pimsvc - ok
09:30:07.0350 4868 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc I:\Windows\system32\p2psvc.dll
09:30:07.0350 4868 p2psvc - ok
09:30:07.0360 4868 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport I:\Windows\system32\DRIVERS\parport.sys
09:30:07.0360 4868 Parport - ok
09:30:07.0370 4868 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr I:\Windows\system32\drivers\partmgr.sys
09:30:07.0370 4868 partmgr - ok
09:30:07.0370 4868 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc I:\Windows\System32\pcasvc.dll
09:30:07.0380 4868 PcaSvc - ok
09:30:07.0380 4868 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci I:\Windows\system32\drivers\pci.sys
09:30:07.0380 4868 pci - ok
09:30:07.0390 4868 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide I:\Windows\system32\drivers\pciide.sys
09:30:07.0390 4868 pciide - ok
09:30:07.0400 4868 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia I:\Windows\system32\DRIVERS\pcmcia.sys
09:30:07.0400 4868 pcmcia - ok
09:30:07.0400 4868 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw I:\Windows\system32\drivers\pcw.sys
09:30:07.0410 4868 pcw - ok
09:30:07.0420 4868 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH I:\Windows\system32\drivers\peauth.sys
09:30:07.0420 4868 PEAUTH - ok
09:30:07.0440 4868 [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc I:\Windows\system32\peerdistsvc.dll
09:30:07.0460 4868 PeerDistSvc - ok
09:30:07.0470 4868 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost I:\Windows\SysWow64\perfhost.exe
09:30:07.0470 4868 PerfHost - ok
09:30:07.0490 4868 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla I:\Windows\system32\pla.dll
09:30:07.0500 4868 pla - ok
09:30:07.0510 4868 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay I:\Windows\system32\umpnpmgr.dll
09:30:07.0520 4868 PlugPlay - ok
09:30:07.0520 4868 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg I:\Windows\system32\pnrpauto.dll
09:30:07.0530 4868 PNRPAutoReg - ok
09:30:07.0530 4868 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc I:\Windows\system32\pnrpsvc.dll
09:30:07.0540 4868 PNRPsvc - ok
09:30:07.0550 4868 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent I:\Windows\System32\ipsecsvc.dll
09:30:07.0550 4868 PolicyAgent - ok
09:30:07.0560 4868 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power I:\Windows\system32\umpo.dll
09:30:07.0570 4868 Power - ok
09:30:07.0570 4868 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport I:\Windows\system32\DRIVERS\raspptp.sys
09:30:07.0570 4868 PptpMiniport - ok
09:30:07.0580 4868 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor I:\Windows\system32\DRIVERS\processr.sys
09:30:07.0580 4868 Processor - ok
09:30:07.0590 4868 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc I:\Windows\system32\profsvc.dll
09:30:07.0590 4868 ProfSvc - ok
09:30:07.0590 4868 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage I:\Windows\system32\lsass.exe
09:30:07.0600 4868 ProtectedStorage - ok
09:30:07.0600 4868 [ 0557CF5A2556BD58E26384169D72438D ] Psched I:\Windows\system32\DRIVERS\pacer.sys
09:30:07.0600 4868 Psched - ok
09:30:07.0620 4868 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 I:\Windows\system32\DRIVERS\ql2300.sys
09:30:07.0640 4868 ql2300 - ok
09:30:07.0640 4868 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx I:\Windows\system32\DRIVERS\ql40xx.sys
09:30:07.0650 4868 ql40xx - ok
09:30:07.0650 4868 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE I:\Windows\system32\qwave.dll
09:30:07.0660 4868 QWAVE - ok
09:30:07.0660 4868 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv I:\Windows\system32\drivers\qwavedrv.sys
09:30:07.0660 4868 QWAVEdrv - ok
09:30:07.0670 4868 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd I:\Windows\system32\DRIVERS\rasacd.sys
09:30:07.0670 4868 RasAcd - ok
09:30:07.0670 4868 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn I:\Windows\system32\DRIVERS\AgileVpn.sys
09:30:07.0670 4868 RasAgileVpn - ok
09:30:07.0680 4868 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto I:\Windows\System32\rasauto.dll
09:30:07.0680 4868 RasAuto - ok
09:30:07.0690 4868 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp I:\Windows\system32\DRIVERS\rasl2tp.sys
09:30:07.0690 4868 Rasl2tp - ok
09:30:07.0700 4868 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan I:\Windows\System32\rasmans.dll
09:30:07.0700 4868 RasMan - ok
09:30:07.0710 4868 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe I:\Windows\system32\DRIVERS\raspppoe.sys
09:30:07.0710 4868 RasPppoe - ok
09:30:07.0720 4868 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp I:\Windows\system32\DRIVERS\rassstp.sys
09:30:07.0720 4868 RasSstp - ok
09:30:07.0720 4868 [ 77F665941019A1594D887A74F301FA2F ] rdbss I:\Windows\system32\DRIVERS\rdbss.sys
09:30:07.0730 4868 rdbss - ok
09:30:07.0730 4868 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus I:\Windows\system32\DRIVERS\rdpbus.sys
09:30:07.0730 4868 rdpbus - ok
09:30:07.0740 4868 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD I:\Windows\system32\DRIVERS\RDPCDD.sys
09:30:07.0740 4868 RDPCDD - ok
09:30:07.0750 4868 [ 1B6163C503398B23FF8B939C67747683 ] RDPDR I:\Windows\system32\drivers\rdpdr.sys
09:30:07.0750 4868 RDPDR - ok
09:30:07.0750 4868 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD I:\Windows\system32\drivers\rdpencdd.sys
09:30:07.0750 4868 RDPENCDD - ok
09:30:07.0760 4868 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP I:\Windows\system32\drivers\rdprefmp.sys
09:30:07.0760 4868 RDPREFMP - ok
09:30:07.0770 4868 [ 70CBA1A0C98600A2AA1863479B35CB90 ] RdpVideoMiniport I:\Windows\system32\drivers\rdpvideominiport.sys
09:30:07.0770 4868 RdpVideoMiniport - ok
09:30:07.0770 4868 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD I:\Windows\system32\drivers\RDPWD.sys
09:30:07.0780 4868 RDPWD - ok
09:30:07.0780 4868 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost I:\Windows\system32\drivers\rdyboost.sys
09:30:07.0790 4868 rdyboost - ok
09:30:07.0790 4868 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess I:\Windows\System32\mprdim.dll
09:30:07.0790 4868 RemoteAccess - ok
09:30:07.0800 4868 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry I:\Windows\system32\regsvc.dll
09:30:07.0800 4868 RemoteRegistry - ok
09:30:07.0810 4868 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM I:\Windows\system32\DRIVERS\rfcomm.sys
09:30:07.0810 4868 RFCOMM - ok
09:30:07.0820 4868 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper I:\Windows\System32\RpcEpMap.dll
09:30:07.0820 4868 RpcEptMapper - ok
09:30:07.0820 4868 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator I:\Windows\system32\locator.exe
09:30:07.0830 4868 RpcLocator - ok
09:30:07.0840 4868 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs I:\Windows\system32\rpcss.dll
09:30:07.0840 4868 RpcSs - ok
09:30:07.0850 4868 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr I:\Windows\system32\DRIVERS\rspndr.sys
09:30:07.0850 4868 rspndr - ok
09:30:07.0850 4868 [ 4E821C740A675F6D040BE41D59A62B1D ] RTHDMIAzAudService I:\Windows\system32\drivers\RtHDMIVX.sys
09:30:07.0860 4868 RTHDMIAzAudService - ok
09:30:07.0860 4868 [ BAEFEE35D27A5440D35092CE10267BEC ] RTL8167 I:\Windows\system32\DRIVERS\Rt64win7.sys
09:30:07.0870 4868 RTL8167 - ok
09:30:07.0870 4868 [ E60C0A09F997826C7627B244195AB581 ] s3cap I:\Windows\system32\drivers\vms3cap.sys
09:30:07.0870 4868 s3cap - ok
09:30:07.0880 4868 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs I:\Windows\system32\lsass.exe
09:30:07.0880 4868 SamSs - ok
09:30:07.0880 4868 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port I:\Windows\system32\drivers\sbp2port.sys
09:30:07.0880 4868 sbp2port - ok
09:30:07.0890 4868 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr I:\Windows\System32\SCardSvr.dll
09:30:07.0900 4868 SCardSvr - ok
09:30:07.0900 4868 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter I:\Windows\system32\DRIVERS\scfilter.sys
09:30:07.0900 4868 scfilter - ok
09:30:07.0920 4868 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule I:\Windows\system32\schedsvc.dll
09:30:07.0930 4868 Schedule - ok
09:30:07.0950 4868 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc I:\Windows\System32\certprop.dll
09:30:07.0950 4868 SCPolicySvc - ok
09:30:07.0950 4868 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC I:\Windows\System32\SDRSVC.dll
09:30:07.0960 4868 SDRSVC - ok
09:30:07.0960 4868 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv I:\Windows\system32\drivers\secdrv.sys
09:30:07.0960 4868 secdrv - ok
09:30:07.0970 4868 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon I:\Windows\system32\seclogon.dll
09:30:07.0970 4868 seclogon - ok
09:30:07.0970 4868 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS I:\Windows\System32\sens.dll
09:30:07.0980 4868 SENS - ok
09:30:07.0980 4868 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc I:\Windows\system32\sensrsvc.dll
09:30:07.0990 4868 SensrSvc - ok
09:30:07.0990 4868 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum I:\Windows\system32\DRIVERS\serenum.sys
09:30:07.0990 4868 Serenum - ok
09:30:08.0000 4868 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial I:\Windows\system32\DRIVERS\serial.sys
09:30:08.0000 4868 Serial - ok
09:30:08.0000 4868 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse I:\Windows\system32\DRIVERS\sermouse.sys
09:30:08.0000 4868 sermouse - ok
09:30:08.0010 4868 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv I:\Windows\system32\sessenv.dll
09:30:08.0020 4868 SessionEnv - ok
09:30:08.0020 4868 [ A554811BCD09279536440C964AE35BBF ] sffdisk I:\Windows\system32\drivers\sffdisk.sys
09:30:08.0020 4868 sffdisk - ok
09:30:08.0030 4868 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc I:\Windows\system32\drivers\sffp_mmc.sys
09:30:08.0030 4868 sffp_mmc - ok
09:30:08.0030 4868 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd I:\Windows\system32\drivers\sffp_sd.sys
09:30:08.0040 4868 sffp_sd - ok
09:30:08.0040 4868 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy I:\Windows\system32\DRIVERS\sfloppy.sys
09:30:08.0040 4868 sfloppy - ok
09:30:08.0050 4868 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess I:\Windows\System32\ipnathlp.dll
09:30:08.0050 4868 SharedAccess - ok
09:30:08.0060 4868 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection I:\Windows\System32\shsvcs.dll
09:30:08.0070 4868 ShellHWDetection - ok
09:30:08.0070 4868 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 I:\Windows\system32\DRIVERS\SiSRaid2.sys
09:30:08.0070 4868 SiSRaid2 - ok
09:30:08.0080 4868 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 I:\Windows\system32\DRIVERS\sisraid4.sys
09:30:08.0080 4868 SiSRaid4 - ok
09:30:08.0090 4868 [ 01ACB9228C303DE1FFF82B807D28B2B0 ] skfiltv I:\Windows\system32\drivers\skfiltv.sys
09:30:08.0090 4868 skfiltv - ok
09:30:08.0090 4868 [ 4E8A4BB5B11D828FF986F6228B1CD3DF ] SkypeUpdate I:\Program Files (x86)\Skype\Updater\Updater.exe
09:30:08.0100 4868 SkypeUpdate - ok
09:30:08.0100 4868 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb I:\Windows\system32\DRIVERS\smb.sys
09:30:08.0100 4868 Smb - ok
09:30:08.0110 4868 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP I:\Windows\System32\snmptrap.exe
09:30:08.0120 4868 SNMPTRAP - ok
09:30:08.0120 4868 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr I:\Windows\system32\drivers\spldr.sys
09:30:08.0120 4868 spldr - ok
09:30:08.0130 4868 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler I:\Windows\System32\spoolsv.exe
09:30:08.0140 4868 Spooler - ok
09:30:08.0180 4868 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc I:\Windows\system32\sppsvc.exe
09:30:08.0210 4868 sppsvc - ok
09:30:08.0220 4868 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify I:\Windows\system32\sppuinotify.dll
09:30:08.0220 4868 sppuinotify - ok
09:30:08.0230 4868 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv I:\Windows\system32\DRIVERS\srv.sys
09:30:08.0240 4868 srv - ok
09:30:08.0240 4868 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 I:\Windows\system32\DRIVERS\srv2.sys
09:30:08.0250 4868 srv2 - ok
09:30:08.0250 4868 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet I:\Windows\system32\DRIVERS\srvnet.sys
09:30:08.0260 4868 srvnet - ok
09:30:08.0260 4868 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV I:\Windows\System32\ssdpsrv.dll
09:30:08.0270 4868 SSDPSRV - ok
09:30:08.0270 4868 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc I:\Windows\system32\sstpsvc.dll

TDSSKiller (2)


09:30:08.0280 4868 SstpSvc - ok
09:30:08.0280 4868 Steam Client Service - ok
09:30:08.0280 4868 [ F3817967ED533D08327DC73BC4D5542A ] stexstor I:\Windows\system32\DRIVERS\stexstor.sys
09:30:08.0290 4868 stexstor - ok
09:30:08.0300 4868 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc I:\Windows\System32\wiaservc.dll
09:30:08.0300 4868 stisvc - ok
09:30:08.0310 4868 [ 7785DC213270D2FC066538DAF94087E7 ] storflt I:\Windows\system32\drivers\vmstorfl.sys
09:30:08.0310 4868 storflt - ok
09:30:08.0310 4868 [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc I:\Windows\system32\drivers\storvsc.sys
09:30:08.0320 4868 storvsc - ok
09:30:08.0320 4868 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum I:\Windows\system32\drivers\swenum.sys
09:30:08.0320 4868 swenum - ok
09:30:08.0330 4868 [ E08E46FDD841B7184194011CA1955A0B ] swprv I:\Windows\System32\swprv.dll
09:30:08.0340 4868 swprv - ok
09:30:08.0340 4868 Synth3dVsc - ok
09:30:08.0360 4868 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain I:\Windows\system32\sysmain.dll
09:30:08.0380 4868 SysMain - ok
09:30:08.0390 4868 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService I:\Windows\System32\TabSvc.dll
09:30:08.0390 4868 TabletInputService - ok
09:30:08.0400 4868 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv I:\Windows\System32\tapisrv.dll
09:30:08.0410 4868 TapiSrv - ok
09:30:08.0410 4868 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS I:\Windows\System32\tbssvc.dll
09:30:08.0410 4868 TBS - ok
09:30:08.0440 4868 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] Tcpip I:\Windows\system32\drivers\tcpip.sys
09:30:08.0460 4868 Tcpip - ok
09:30:08.0480 4868 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] TCPIP6 I:\Windows\system32\DRIVERS\tcpip.sys
09:30:08.0490 4868 TCPIP6 - ok
09:30:08.0500 4868 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg I:\Windows\system32\drivers\tcpipreg.sys
09:30:08.0500 4868 tcpipreg - ok
09:30:08.0500 4868 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE I:\Windows\system32\drivers\tdpipe.sys
09:30:08.0510 4868 TDPIPE - ok
09:30:08.0510 4868 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP I:\Windows\system32\drivers\tdtcp.sys
09:30:08.0510 4868 TDTCP - ok
09:30:08.0520 4868 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx I:\Windows\system32\DRIVERS\tdx.sys
09:30:08.0520 4868 tdx - ok
09:30:08.0520 4868 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD I:\Windows\system32\drivers\termdd.sys
09:30:08.0520 4868 TermDD - ok
09:30:08.0530 4868 [ 2E648163254233755035B46DD7B89123 ] TermService I:\Windows\System32\termsrv.dll
09:30:08.0540 4868 TermService - ok
09:30:08.0550 4868 [ F0344071948D1A1FA732231785A0664C ] Themes I:\Windows\system32\themeservice.dll
09:30:08.0550 4868 Themes - ok
09:30:08.0560 4868 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER I:\Windows\system32\mmcss.dll
09:30:08.0560 4868 THREADORDER - ok
09:30:08.0560 4868 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks I:\Windows\System32\trkwks.dll
09:30:08.0570 4868 TrkWks - ok
09:30:08.0570 4868 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller I:\Windows\servicing\TrustedInstaller.exe
09:30:08.0570 4868 TrustedInstaller - ok
09:30:08.0580 4868 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv I:\Windows\system32\DRIVERS\tssecsrv.sys
09:30:08.0580 4868 tssecsrv - ok
09:30:08.0590 4868 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt I:\Windows\system32\drivers\tsusbflt.sys
09:30:08.0590 4868 TsUsbFlt - ok
09:30:08.0590 4868 tsusbhub - ok
09:30:08.0600 4868 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel I:\Windows\system32\DRIVERS\tunnel.sys
09:30:08.0600 4868 tunnel - ok
09:30:08.0610 4868 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 I:\Windows\system32\DRIVERS\uagp35.sys
09:30:08.0610 4868 uagp35 - ok
09:30:08.0610 4868 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs I:\Windows\system32\DRIVERS\udfs.sys
09:30:08.0620 4868 udfs - ok
09:30:08.0630 4868 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect I:\Windows\system32\UI0Detect.exe
09:30:08.0630 4868 UI0Detect - ok
09:30:08.0630 4868 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx I:\Windows\system32\drivers\uliagpkx.sys
09:30:08.0640 4868 uliagpkx - ok
09:30:08.0640 4868 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus I:\Windows\system32\drivers\umbus.sys
09:30:08.0640 4868 umbus - ok
09:30:08.0650 4868 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass I:\Windows\system32\DRIVERS\umpass.sys
09:30:08.0650 4868 UmPass - ok
09:30:08.0650 4868 [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService I:\Windows\System32\umrdp.dll
09:30:08.0660 4868 UmRdpService - ok
09:30:08.0670 4868 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost I:\Windows\System32\upnphost.dll
09:30:08.0670 4868 upnphost - ok
09:30:08.0680 4868 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio I:\Windows\system32\drivers\usbaudio.sys
09:30:08.0680 4868 usbaudio - ok
09:30:08.0690 4868 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp I:\Windows\system32\DRIVERS\usbccgp.sys
09:30:08.0690 4868 usbccgp - ok
09:30:08.0690 4868 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir I:\Windows\system32\drivers\usbcir.sys
09:30:08.0700 4868 usbcir - ok
09:30:08.0700 4868 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci I:\Windows\system32\DRIVERS\usbehci.sys
09:30:08.0700 4868 usbehci - ok
09:30:08.0710 4868 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub I:\Windows\system32\DRIVERS\usbhub.sys
09:30:08.0710 4868 usbhub - ok
09:30:08.0720 4868 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci I:\Windows\system32\DRIVERS\usbohci.sys
09:30:08.0720 4868 usbohci - ok
09:30:08.0720 4868 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint I:\Windows\system32\DRIVERS\usbprint.sys
09:30:08.0720 4868 usbprint - ok
09:30:08.0730 4868 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR I:\Windows\system32\drivers\USBSTOR.SYS
09:30:08.0730 4868 USBSTOR - ok
09:30:08.0740 4868 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci I:\Windows\system32\drivers\usbuhci.sys
09:30:08.0740 4868 usbuhci - ok
09:30:08.0740 4868 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms I:\Windows\System32\uxsms.dll
09:30:08.0750 4868 UxSms - ok
09:30:08.0750 4868 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc I:\Windows\system32\lsass.exe
09:30:08.0750 4868 VaultSvc - ok
09:30:08.0760 4868 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot I:\Windows\system32\drivers\vdrvroot.sys
09:30:08.0760 4868 vdrvroot - ok
09:30:08.0770 4868 [ 8D6B481601D01A456E75C3210F1830BE ] vds I:\Windows\System32\vds.exe
09:30:08.0770 4868 vds - ok
09:30:08.0780 4868 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga I:\Windows\system32\DRIVERS\vgapnp.sys
09:30:08.0780 4868 vga - ok
09:30:08.0780 4868 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave I:\Windows\System32\drivers\vga.sys
09:30:08.0790 4868 VgaSave - ok
09:30:08.0790 4868 VGPU - ok
09:30:08.0800 4868 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp I:\Windows\system32\drivers\vhdmp.sys
09:30:08.0800 4868 vhdmp - ok
09:30:08.0800 4868 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide I:\Windows\system32\drivers\viaide.sys
09:30:08.0800 4868 viaide - ok
09:30:08.0810 4868 [ 86EA3E79AE350FEA5331A1303054005F ] vmbus I:\Windows\system32\drivers\vmbus.sys
09:30:08.0810 4868 vmbus - ok
09:30:08.0820 4868 [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID I:\Windows\system32\drivers\VMBusHID.sys
09:30:08.0820 4868 VMBusHID - ok
09:30:08.0820 4868 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr I:\Windows\system32\drivers\volmgr.sys
09:30:08.0820 4868 volmgr - ok
09:30:08.0830 4868 [ A255814907C89BE58B79EF2F189B843B ] volmgrx I:\Windows\system32\drivers\volmgrx.sys
09:30:08.0840 4868 volmgrx - ok
09:30:08.0840 4868 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap I:\Windows\system32\drivers\volsnap.sys
09:30:08.0850 4868 volsnap - ok
09:30:08.0850 4868 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid I:\Windows\system32\DRIVERS\vsmraid.sys
09:30:08.0860 4868 vsmraid - ok
09:30:08.0880 4868 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS I:\Windows\system32\vssvc.exe
09:30:08.0890 4868 VSS - ok
09:30:08.0900 4868 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus I:\Windows\System32\drivers\vwifibus.sys
09:30:08.0900 4868 vwifibus - ok
09:30:08.0910 4868 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time I:\Windows\system32\w32time.dll
09:30:08.0910 4868 W32Time - ok
09:30:08.0920 4868 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen I:\Windows\system32\DRIVERS\wacompen.sys
09:30:08.0920 4868 WacomPen - ok
09:30:08.0930 4868 [ 356AFD78A6ED4457169241AC3965230C ] WANARP I:\Windows\system32\DRIVERS\wanarp.sys
09:30:08.0930 4868 WANARP - ok
09:30:08.0930 4868 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 I:\Windows\system32\DRIVERS\wanarp.sys
09:30:08.0930 4868 Wanarpv6 - ok
09:30:08.0950 4868 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc I:\Windows\system32\Wat\WatAdminSvc.exe
09:30:08.0970 4868 WatAdminSvc - ok
09:30:08.0980 4868 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine I:\Windows\system32\wbengine.exe
09:30:09.0000 4868 wbengine - ok
09:30:09.0010 4868 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc I:\Windows\System32\wbiosrvc.dll
09:30:09.0010 4868 WbioSrvc - ok
09:30:09.0020 4868 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc I:\Windows\System32\wcncsvc.dll
09:30:09.0030 4868 wcncsvc - ok
09:30:09.0030 4868 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService I:\Windows\System32\WcsPlugInService.dll
09:30:09.0040 4868 WcsPlugInService - ok
09:30:09.0040 4868 [ 72889E16FF12BA0F235467D6091B17DC ] Wd I:\Windows\system32\DRIVERS\wd.sys
09:30:09.0040 4868 Wd - ok
09:30:09.0050 4868 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 I:\Windows\system32\drivers\Wdf01000.sys
09:30:09.0060 4868 Wdf01000 - ok
09:30:09.0070 4868 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost I:\Windows\system32\wdi.dll
09:30:09.0070 4868 WdiServiceHost - ok
09:30:09.0070 4868 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost I:\Windows\system32\wdi.dll
09:30:09.0080 4868 WdiSystemHost - ok
09:30:09.0080 4868 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient I:\Windows\System32\webclnt.dll
09:30:09.0090 4868 WebClient - ok
09:30:09.0090 4868 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc I:\Windows\system32\wecsvc.dll
09:30:09.0100 4868 Wecsvc - ok
09:30:09.0110 4868 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport I:\Windows\System32\wercplsupport.dll
09:30:09.0110 4868 wercplsupport - ok
09:30:09.0110 4868 [ 6D137963730144698CBD10F202E9F251 ] WerSvc I:\Windows\System32\WerSvc.dll
09:30:09.0120 4868 WerSvc - ok
09:30:09.0120 4868 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf I:\Windows\system32\DRIVERS\wfplwf.sys
09:30:09.0120 4868 WfpLwf - ok
09:30:09.0130 4868 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount I:\Windows\system32\drivers\wimmount.sys
09:30:09.0130 4868 WIMMount - ok
09:30:09.0130 4868 WinDefend - ok
09:30:09.0140 4868 WinHttpAutoProxySvc - ok
09:30:09.0150 4868 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt I:\Windows\system32\wbem\WMIsvc.dll
09:30:09.0160 4868 Winmgmt - ok
09:30:09.0180 4868 [ BCB1310604AA415C4508708975B3931E ] WinRM I:\Windows\system32\WsmSvc.dll
09:30:09.0200 4868 WinRM - ok
09:30:09.0220 4868 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc I:\Windows\System32\wlansvc.dll
09:30:09.0230 4868 Wlansvc - ok
09:30:09.0240 4868 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi I:\Windows\system32\drivers\wmiacpi.sys
09:30:09.0240 4868 WmiAcpi - ok
09:30:09.0240 4868 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv I:\Windows\system32\wbem\WmiApSrv.exe
09:30:09.0250 4868 wmiApSrv - ok
09:30:09.0250 4868 WMPNetworkSvc - ok
09:30:09.0260 4868 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc I:\Windows\System32\wpcsvc.dll
09:30:09.0260 4868 WPCSvc - ok
09:30:09.0260 4868 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum I:\Windows\system32\wpdbusenum.dll
09:30:09.0270 4868 WPDBusEnum - ok
09:30:09.0270 4868 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl I:\Windows\system32\drivers\ws2ifsl.sys
09:30:09.0270 4868 ws2ifsl - ok
09:30:09.0280 4868 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc I:\Windows\System32\wscsvc.dll
09:30:09.0280 4868 wscsvc - ok
09:30:09.0290 4868 WSearch - ok
09:30:09.0320 4868 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv I:\Windows\system32\wuaueng.dll
09:30:09.0340 4868 wuauserv - ok
09:30:09.0350 4868 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf I:\Windows\system32\drivers\WudfPf.sys
09:30:09.0350 4868 WudfPf - ok
09:30:09.0360 4868 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd I:\Windows\system32\DRIVERS\WUDFRd.sys
09:30:09.0360 4868 WUDFRd - ok
09:30:09.0370 4868 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc I:\Windows\System32\WUDFSvc.dll
09:30:09.0370 4868 wudfsvc - ok
09:30:09.0380 4868 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc I:\Windows\System32\wwansvc.dll
09:30:09.0380 4868 WwanSvc - ok
09:30:09.0390 4868 [ 4A5CE13408945E525503B5F73D29B9C5 ] xnacc I:\Windows\system32\DRIVERS\xnacc.sys
09:30:09.0400 4868 xnacc - ok
09:30:09.0410 4868 [ 2EE48CFCE7CA8E0DB4C44C7476C0943B ] xusb21 I:\Windows\system32\DRIVERS\xusb21.sys
09:30:09.0410 4868 xusb21 - ok
09:30:09.0410 4868 ================ Scan global ===============================
09:30:09.0420 4868 [ BA0CD8C393E8C9F83354106093832C7B ] I:\Windows\system32\basesrv.dll
09:30:09.0420 4868 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] I:\Windows\system32\winsrv.dll
09:30:09.0440 4868 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] I:\Windows\system32\winsrv.dll
09:30:09.0440 4868 [ D6160F9D869BA3AF0B787F971DB56368 ] I:\Windows\system32\sxssrv.dll
09:30:09.0450 4868 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] I:\Windows\system32\services.exe
09:30:09.0460 4868 [Global] - ok
09:30:09.0460 4868 ================ Scan MBR ==================================
09:30:09.0480 4868 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0
09:30:09.0480 4868 \Device\Harddisk0\DR0 - ok
09:30:09.0480 4868 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
09:30:09.0750 4868 \Device\Harddisk1\DR1 - ok
09:30:09.0750 4868 ================ Scan VBR ==================================
09:30:09.0750 4868 [ 94AD2873B21A1306956A4A37C3A17842 ] \Device\Harddisk0\DR0\Partition1
09:30:09.0750 4868 \Device\Harddisk0\DR0\Partition1 - ok
09:30:09.0760 4868 [ 4D9D67015225320E2FAA776B85D3C2B4 ] \Device\Harddisk1\DR1\Partition1
09:30:09.0760 4868 \Device\Harddisk1\DR1\Partition1 - ok
09:30:09.0760 4868 ============================================================
09:30:09.0760 4868 Scan finished
09:30:09.0760 4868 ============================================================
09:30:09.0770 4240 Detected object count: 0
09:30:09.0770 4240 Actual detected object count: 0
09:45:24.0763 4792 Deinitialize success


ComboFix

ComboFix 13-06-28.02 - Petr 29.06.2013 9:54.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.8189.6850 [GMT 2:00]
Spuštěný z: i:\users\Petr\Desktop\ComboFix.exe
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
i:\users\Petr\AppData\Roaming\technic-launcher.jar
i:\windows\SysWow64\AF9100EX.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-05-28 do 2013-06-29 )))))))))))))))))))))))))))))))
.
.
2013-06-29 07:58 . 2013-06-29 07:58 -------- d-----w- i:\users\Default\AppData\Local\temp
2013-06-29 07:58 . 2013-06-29 07:58 76232 ----a-w- i:\programdata\Microsoft\Windows Defender\Definition Updates\{E1B7A632-3CE3-425E-8571-474C9D5741E5}\offreg.dll
2013-06-29 06:55 . 2013-06-29 06:55 165504 ----a-w- i:\windows\system32\drivers\IT9135BDA.sys
2013-06-28 22:23 . 2013-06-28 22:23 -------- d-----w- i:\program files (x86)\CrystalDiskInfo
2013-06-28 18:13 . 2013-06-28 18:13 -------- d-----w- i:\program files (x86)\Malwarebytes' Anti-Malware
2013-06-28 18:13 . 2013-04-04 12:50 25928 ----a-w- i:\windows\system32\drivers\mbam.sys
2013-06-28 15:56 . 2013-06-28 15:56 -------- d-----w- i:\program files (x86)\Trend Micro
2013-06-28 11:32 . 2013-06-28 11:32 -------- d-----w- i:\program files\CCleaner
2013-06-28 07:55 . 2013-06-17 00:10 9552976 ----a-w- i:\programdata\Microsoft\Windows Defender\Definition Updates\{E1B7A632-3CE3-425E-8571-474C9D5741E5}\mpengine.dll
2013-06-27 18:37 . 2013-06-29 06:37 73728 ----a-w- i:\windows\system32\AF9100EX.dll
2013-06-27 18:37 . 2013-06-29 06:37 114688 ----a-w- i:\windows\system32\IRMonitor.exe
2013-06-27 18:37 . 2007-06-16 04:30 238 ----a-r- i:\windows\system32\AF15IRTBL.bin
2013-06-27 10:58 . 2013-06-27 10:58 -------- d-----w- i:\programdata\Malwarebytes
2013-06-27 09:56 . 2013-05-08 06:39 1910632 ----a-w- i:\windows\system32\drivers\tcpip.sys
2013-06-27 09:56 . 2012-10-09 18:17 55296 ----a-w- i:\windows\system32\dhcpcsvc6.dll
2013-06-27 09:56 . 2012-10-09 18:17 226816 ----a-w- i:\windows\system32\dhcpcore6.dll
2013-06-27 09:56 . 2012-10-09 17:40 44032 ----a-w- i:\windows\SysWow64\dhcpcsvc6.dll
2013-06-27 09:56 . 2012-10-09 17:40 193536 ----a-w- i:\windows\SysWow64\dhcpcore6.dll
2013-06-27 09:56 . 2013-04-10 03:30 3153920 ----a-w- i:\windows\system32\win32k.sys
2013-06-27 09:56 . 2013-03-19 05:53 230400 ----a-w- i:\windows\system32\wwansvc.dll
2013-06-27 09:56 . 2012-08-22 18:12 950128 ----a-w- i:\windows\system32\drivers\ndis.sys
2013-06-27 09:56 . 2012-07-04 20:26 41472 ----a-w- i:\windows\system32\drivers\RNDISMP.sys
2013-06-27 09:56 . 2013-03-19 05:53 48640 ----a-w- i:\windows\system32\wwanprotdim.dll
2013-06-27 09:56 . 2012-08-21 21:01 245760 ----a-w- i:\windows\system32\OxpsConverter.exe
2013-06-27 09:54 . 2013-04-26 05:51 751104 ----a-w- i:\windows\system32\win32spl.dll
2013-06-27 09:54 . 2013-04-26 04:55 492544 ----a-w- i:\windows\SysWow64\win32spl.dll
2013-06-26 20:27 . 2013-06-26 20:27 -------- d-----w- i:\program files\PlayReady
2013-06-26 20:24 . 2013-06-26 20:24 48648 ----a-w- i:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2013-06-26 20:24 . 2013-06-26 20:24 483952 ----a-w- i:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2013-06-26 06:36 . 2013-06-26 06:36 -------- d-----w- i:\windows\system32\SPReview
2013-06-26 06:35 . 2013-06-26 06:35 -------- d-----w- i:\windows\system32\EventProviders
2013-06-25 15:51 . 2010-11-05 01:57 48976 ----a-w- i:\windows\system32\netfxperf.dll
2013-06-25 15:51 . 2010-11-05 01:57 1942856 ----a-w- i:\windows\system32\dfshim.dll
2013-06-25 15:51 . 2010-11-05 01:58 1130824 ----a-w- i:\windows\SysWow64\dfshim.dll
2013-06-25 15:49 . 2010-11-20 13:27 40960 ----a-w- i:\windows\system32\TsUsbGDCoInstaller.dll
2013-06-25 15:48 . 2010-11-20 12:21 189952 ----a-w- i:\windows\SysWow64\sqmapi.dll
2013-06-25 15:48 . 2010-11-20 12:21 363008 ----a-w- i:\windows\SysWow64\wbemcomn.dll
2013-06-25 15:48 . 2010-11-20 12:21 189952 ----a-w- i:\program files (x86)\Windows Portable Devices\sqmapi.dll
2013-06-25 15:48 . 2010-11-20 12:19 606208 ----a-w- i:\windows\SysWow64\wbem\fastprox.dll
2013-06-25 15:48 . 2010-11-20 13:27 529408 ----a-w- i:\windows\system32\wbemcomn.dll
2013-06-25 15:48 . 2010-11-20 13:27 244736 ----a-w- i:\program files\Windows Portable Devices\sqmapi.dll
2013-06-25 15:48 . 2010-11-20 13:27 244736 ----a-w- i:\windows\system32\sqmapi.dll
2013-06-25 06:30 . 2013-06-25 06:30 71048 ----a-w- i:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-25 06:30 . 2013-06-25 06:30 692104 ----a-w- i:\windows\SysWow64\FlashPlayerApp.exe
2013-06-25 06:30 . 2013-06-25 06:30 -------- d-----w- i:\windows\SysWow64\Macromed
2013-06-25 06:30 . 2013-06-25 06:30 -------- d-----w- i:\windows\system32\Macromed
2013-06-25 06:19 . 2013-06-25 06:19 -------- d-----w- i:\program files (x86)\Opera
2013-06-24 21:47 . 2013-06-24 21:47 -------- d-----w- i:\program files (x86)\Common Files\Steam
2013-06-24 21:41 . 2013-06-24 21:41 -------- d-----w- i:\programdata\Steam
2013-06-24 21:41 . 2013-06-24 21:41 -------- d-----w- i:\programdata\Codemasters
2013-06-24 21:34 . 2013-06-24 21:34 -------- d-----w- i:\programdata\ATI
2013-06-24 21:34 . 2013-06-24 21:34 -------- d-----w- i:\program files (x86)\AMD AVT
2013-06-24 21:31 . 2013-06-24 21:31 -------- d-----w- I:\AMD
2013-06-24 21:24 . 2013-06-24 21:24 -------- d-----w- i:\program files (x86)\NEC Electronics
2013-06-24 21:24 . 2009-04-28 01:03 67128 ----a-w- i:\windows\system32\drivers\amdsata.sys
2013-06-24 21:24 . 2009-04-28 01:03 28216 ----a-w- i:\windows\system32\drivers\amdxata.sys
2013-06-24 21:24 . 2009-05-05 02:00 16440 ----a-w- i:\windows\system32\drivers\AtiPcie.sys
2013-06-24 21:24 . 2013-06-24 21:24 -------- d-----w- I:\RaidTool
2013-06-24 21:24 . 2009-08-26 08:49 1970176 ------r- i:\windows\SysWow64\xRaidSetup.exe
2013-06-24 21:24 . 2009-08-25 11:16 151552 ------r- i:\windows\SysWow64\xRaidAPI.dll
2013-06-24 21:24 . 2009-08-06 05:51 65536 ------r- i:\windows\SysWow64\XSrvSetup.exe
2013-06-24 21:24 . 2009-10-29 08:14 115824 ----a-w- i:\windows\system32\drivers\jraid.sys
2013-06-24 21:24 . 2013-06-24 21:24 -------- d-----w- i:\windows\RaidTool
2013-06-24 20:47 . 2010-02-04 08:01 22360 ----a-w- i:\windows\SysWow64\X3DAudio1_7.dll
2013-06-24 20:46 . 2005-03-18 15:19 3823312 ----a-w- i:\windows\system32\d3dx9_25.dll
2013-06-24 20:46 . 2005-02-05 17:45 3544272 ----a-w- i:\windows\system32\d3dx9_24.dll
2013-06-24 20:17 . 2008-07-31 08:41 68616 ----a-w- i:\windows\SysWow64\XAPOFX1_1.dll
2013-06-24 20:17 . 2008-07-31 08:40 509448 ----a-w- i:\windows\SysWow64\XAudio2_2.dll
2013-06-24 20:17 . 2008-07-12 06:18 467984 ----a-w- i:\windows\SysWow64\d3dx10_39.dll
2013-06-24 20:17 . 2008-07-12 06:18 3851784 ----a-w- i:\windows\SysWow64\D3DX9_39.dll
2013-06-24 20:17 . 2008-07-12 06:18 1493528 ----a-w- i:\windows\SysWow64\D3DCompiler_39.dll
2013-06-24 20:06 . 2013-06-24 21:36 -------- d-----w- i:\programdata\Origin
2013-06-24 20:06 . 2013-06-24 21:36 -------- d-----w- i:\programdata\Electronic Arts
2013-06-24 20:02 . 2013-06-24 20:02 -------- d-----w- i:\program files (x86)\Microsoft.NET
2013-06-24 20:01 . 2012-12-19 13:53 19632 ----a-w- i:\windows\system32\roboot64.exe
2013-06-24 20:00 . 2013-06-24 20:00 -------- d-----w- i:\program files (x86)\Seznam.cz
2013-06-24 20:00 . 2013-06-24 20:00 283200 ----a-w- i:\windows\system32\drivers\dtsoftbus01.sys
2013-06-24 19:58 . 2013-06-24 20:33 -------- d-----w- i:\programdata\DAEMON Tools Lite
2013-06-24 19:56 . 2013-06-24 19:56 -------- d-----w- i:\program files (x86)\Common Files\Skype
2013-06-24 19:56 . 2013-06-24 19:56 -------- d-----r- i:\program files (x86)\Skype
2013-06-24 19:56 . 2013-06-24 19:56 -------- d-----w- i:\programdata\Skype
2013-06-24 19:54 . 2013-06-28 21:18 -------- d-----w- i:\programdata\PMB Files
2013-06-24 19:54 . 2013-06-24 19:54 -------- d-----w- i:\program files (x86)\Pando Networks
2013-06-24 19:49 . 2013-06-27 19:28 378944 ----a-w- i:\windows\system32\drivers\aswSP.sys
2013-06-24 19:49 . 2013-05-09 08:59 72016 ----a-w- i:\windows\system32\drivers\aswRdr2.sys
2013-06-24 19:49 . 2013-05-09 08:59 33400 ----a-w- i:\windows\system32\drivers\aswFsBlk.sys
2013-06-24 19:49 . 2013-06-27 19:28 189936 ----a-w- i:\windows\system32\drivers\aswVmm.sys
2013-06-24 19:49 . 2013-06-27 19:28 1030952 ----a-w- i:\windows\system32\drivers\aswSnx.sys
2013-06-24 19:49 . 2013-05-09 08:59 65336 ----a-w- i:\windows\system32\drivers\aswRvrt.sys
2013-06-24 19:49 . 2013-05-09 08:59 64288 ----a-w- i:\windows\system32\drivers\aswTdi.sys
2013-06-24 19:49 . 2013-05-09 08:59 80816 ----a-w- i:\windows\system32\drivers\aswMonFlt.sys
2013-06-24 19:49 . 2013-05-09 08:58 287840 ----a-w- i:\windows\system32\aswBoot.exe
2013-06-24 19:49 . 2013-05-09 08:58 41664 ----a-w- i:\windows\avastSS.scr
2013-06-24 19:48 . 2013-06-24 19:49 -------- d-----w- i:\programdata\AVAST Software
2013-06-24 19:39 . 2013-06-24 19:39 -------- d-----w- i:\program files\WinRAR
2013-06-24 19:17 . 2013-06-24 19:17 -------- d-----w- i:\windows\SysWow64\Wat
2013-06-24 19:17 . 2013-06-24 19:17 -------- d-----w- i:\windows\system32\Wat
2013-06-24 19:15 . 2012-11-07 05:29 -------- d-----w- i:\users\Default\AppData\Local\Microsoft Help
2013-06-24 19:14 . 2013-06-28 08:14 -------- d-----w- i:\program files (x86)\Google
2013-06-24 19:13 . 2013-06-26 20:01 -------- d-----w- i:\programdata\Creative
2013-06-24 19:10 . 2013-06-24 19:10 0 ----a-w- i:\windows\ativpsrm.bin
2013-06-24 18:49 . 2013-06-28 11:33 -------- d-----w- i:\windows\Panther
2013-06-24 18:48 . 2013-05-02 00:06 278800 ------w- i:\windows\system32\MpSigStub.exe
2013-06-24 18:39 . 2012-07-26 07:40 2560 ----a-w- i:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-06-24 18:39 . 2012-07-26 04:55 785512 ----a-w- i:\windows\system32\drivers\Wdf01000.sys
2013-06-24 18:39 . 2012-07-26 04:55 54376 ----a-w- i:\windows\system32\drivers\WdfLdr.sys
2013-06-24 18:39 . 2012-07-26 02:36 9728 ----a-w- i:\windows\system32\Wdfres.dll
2013-06-24 18:29 . 2010-02-23 08:16 294912 ----a-w- i:\windows\system32\browserchoice.exe
2013-06-24 18:18 . 2013-06-02 15:11 75825640 ----a-w- i:\windows\system32\MRT.exe
2013-06-24 18:17 . 2012-12-16 17:11 46080 ----a-w- i:\windows\system32\atmlib.dll
2013-06-24 18:17 . 2012-12-16 14:13 34304 ----a-w- i:\windows\SysWow64\atmlib.dll
2013-06-24 18:17 . 2010-09-30 06:47 70656 ----a-w- i:\windows\SysWow64\fontsub.dll
2013-06-24 18:17 . 2012-12-16 14:45 367616 ----a-w- i:\windows\system32\atmfd.dll
2013-06-24 18:17 . 2012-12-16 14:13 295424 ----a-w- i:\windows\SysWow64\atmfd.dll
2013-06-24 18:17 . 2010-09-30 10:41 100864 ----a-w- i:\windows\system32\fontsub.dll
2013-06-24 18:16 . 2012-07-26 03:08 229888 ----a-w- i:\windows\system32\WUDFHost.exe
2013-06-24 18:16 . 2012-07-26 03:08 84992 ----a-w- i:\windows\system32\WUDFSvc.dll
2013-06-24 18:16 . 2012-07-26 03:08 744448 ----a-w- i:\windows\system32\WUDFx.dll
2013-06-24 18:16 . 2012-07-26 03:08 45056 ----a-w- i:\windows\system32\WUDFCoinstaller.dll
2013-06-24 18:16 . 2012-07-26 03:08 194048 ----a-w- i:\windows\system32\WUDFPlatform.dll
2013-06-24 18:16 . 2012-07-26 02:26 87040 ----a-w- i:\windows\system32\drivers\WUDFPf.sys
2013-06-24 18:16 . 2012-07-26 02:26 198656 ----a-w- i:\windows\system32\drivers\WUDFRd.sys
2013-06-24 18:13 . 2012-03-01 06:46 23408 ----a-w- i:\windows\system32\drivers\fs_rec.sys
2013-06-24 18:13 . 2012-03-01 06:33 81408 ----a-w- i:\windows\system32\imagehlp.dll
2013-06-24 18:13 . 2012-03-01 06:28 5120 ----a-w- i:\windows\system32\wmi.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-26 20:50 . 2009-07-14 02:36 152576 ----a-w- i:\windows\SysWow64\msclmd.dll
2013-06-26 20:50 . 2009-07-14 02:36 175616 ----a-w- i:\windows\system32\msclmd.dll
2013-06-24 18:26 . 2013-06-24 18:26 203776 ----a-w- i:\windows\SysWow64\webcheck.dll
2013-06-24 18:26 . 2013-06-24 18:26 249344 ----a-w- i:\windows\system32\webcheck.dll
2013-04-13 05:49 . 2013-06-27 09:57 135168 ----a-w- i:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-06-27 09:57 350208 ----a-w- i:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-06-27 09:57 308736 ----a-w- i:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-06-27 09:57 111104 ----a-w- i:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-06-27 09:57 474624 ----a-w- i:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-06-27 09:57 2176512 ----a-w- i:\windows\apppatch\AcGenral.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="z:\software\RocketDock\RocketDock.exe" [2007-09-02 495616]
"DAEMON Tools Lite"="z:\software\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
"Sidebar"="i:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avast"="z:\software\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;i:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;i:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 JMB36X;JMB36X;i:\windows\SysWOW64\XSrvSetup.exe;i:\windows\SysWOW64\XSrvSetup.exe [x]
R2 SkypeUpdate;Skype Updater;i:\program files (x86)\Skype\Updater\Updater.exe;i:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 amdiox64;AMD IO Driver;i:\windows\system32\DRIVERS\amdiox64.sys;i:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;i:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;i:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;i:\windows\system32\drivers\rdpvideominiport.sys;i:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;i:\windows\system32\drivers\synth3dvsc.sys;i:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;i:\windows\system32\drivers\tsusbflt.sys;i:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;i:\windows\system32\drivers\tsusbhub.sys;i:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;i:\windows\system32\drivers\rdvgkmd.sys;i:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;i:\windows\system32\Wat\WatAdminSvc.exe;i:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;i:\windows\system32\DRIVERS\dtsoftbus01.sys;i:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;i:\windows\system32\atiesrxx.exe;i:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;i:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;i:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.2;AODDriver4.2;i:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;i:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;i:\windows\system32\drivers\aswMonFlt.sys;i:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 MBAMService;MBAMService;i:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;i:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;i:\windows\system32\drivers\AtihdW76.sys;i:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 IT9135BDA;IT9135 BDA Devices;i:\windows\system32\Drivers\IT9135BDA.sys;i:\windows\SYSNATIVE\Drivers\IT9135BDA.sys [x]
S3 MBAMProtector;MBAMProtector;i:\windows\system32\drivers\mbam.sys;i:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;i:\windows\system32\DRIVERS\nusb3hub.sys;i:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;i:\windows\system32\DRIVERS\nusb3xhc.sys;i:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Ovladač Realtek 8167 NT;i:\windows\system32\DRIVERS\Rt64win7.sys;i:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 skfiltv;skfiltv;i:\windows\system32\drivers\skfiltv.sys;i:\windows\SYSNATIVE\drivers\skfiltv.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-28 08:15 1165776 ----a-w- i:\program files (x86)\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-06-29 i:\windows\Tasks\Adobe Flash Player Updater.job
- i:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-25 06:30]
.
2013-06-29 i:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- i:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-28 08:14]
.
2013-06-29 i:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- i:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-28 08:14]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 133840 ----a-w- z:\software\AVAST Software\Avast\ashShA64.dll
.
------- Doplňkový sken -------
.
uLocal Page = i:\windows\system32\blank.htm
mLocal Page = i:\windows\SYSTEM32\blank.htm
TCP: DhcpNameServer = 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-IT9130 DriverInstaller_11.4.26.1 - i:\users\Petr\AppData\Local\Temp\\DriverInstall64.exe
AddRemove-IT9130 DriverInstaller_12.2.3.1 - i:\users\Petr\AppData\Local\Temp\\DriverInstall64.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-06-29 10:00:26
ComboFix-quarantined-files.txt 2013-06-29 08:00
.
Před spuštěním: Volných bajtů: 47 316 641 792
Po spuštění: Volných bajtů: 47 182 091 264
.
- - End Of File - - 79A936207F21B23DCFED6863BDD58993
D41D8CD98F00B204E9800998ECF8427E

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:



Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

Stáhni si CrystalDiskInfo
Spusť program a klikni na Úpravy-Kopírovat. Poté sem vlož pomocí Ctrl+V obsah logu.

ComboFix

ComboFix 13-06-28.02 - Petr 29.06.2013 20:41:07.2.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.8189.6666 [GMT 2:00]
Spuštěný z: i:\users\Petr\Desktop\ComboFix.exe
Použité ovládací přepínače :: i:\users\Petr\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"i:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"i:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
i:\program files (x86)\Google\Update
i:\program files (x86)\Google\Update\1.3.21.149\GoogleCrashHandler.exe
i:\program files (x86)\Google\Update\1.3.21.149\GoogleCrashHandler64.exe
i:\program files (x86)\Google\Update\1.3.21.149\GoogleUpdate.exe
i:\program files (x86)\Google\Update\1.3.21.149\GoogleUpdateBroker.exe
i:\program files (x86)\Google\Update\1.3.21.149\GoogleUpdateHelper.msi
i:\program files (x86)\Google\Update\1.3.21.149\GoogleUpdateOnDemand.exe
i:\program files (x86)\Google\Update\1.3.21.149\GoogleUpdateSetup.exe
i:\program files (x86)\Google\Update\1.3.21.149\goopdate.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_am.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_ar.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_bg.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_bn.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_ca.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_cs.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_da.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_de.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_el.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_en-GB.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_en.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_es-419.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_es.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_et.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_fa.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_fi.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_fil.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_fr.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_gu.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_hi.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_hr.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_hu.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_id.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_is.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_it.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_iw.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_ja.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_kn.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_ko.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_lt.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_lv.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_ml.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_mr.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_ms.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_nl.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_no.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_pl.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_pt-BR.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_pt-PT.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_ro.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_ru.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_sk.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_sl.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_sr.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_sv.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_sw.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_ta.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_te.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_th.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_tr.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_uk.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_ur.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_vi.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_zh-CN.dll
i:\program files (x86)\Google\Update\1.3.21.149\goopdateres_zh-TW.dll
i:\program files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll
i:\program files (x86)\Google\Update\1.3.21.149\psmachine.dll
i:\program files (x86)\Google\Update\1.3.21.149\psuser.dll
i:\program files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\27.0.1453.116\27.0.1453.116_chrome_installer.exe
i:\program files (x86)\Google\Update\GoogleUpdate.exe
i:\program files (x86)\Skype\Updater
i:\program files (x86)\Skype\Updater\Updater.dll
i:\program files (x86)\Skype\Updater\Updater.exe
i:\windows\Tasks\GoogleUpdateTaskMachineCore.job
i:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SkypeUpdate
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-05-28 do 2013-06-29 )))))))))))))))))))))))))))))))
.
.
2013-06-29 18:45 . 2013-06-29 18:45 -------- d-----w- i:\users\Default\AppData\Local\temp
2013-06-29 10:02 . 2013-06-29 10:02 -------- d--h--w- i:\windows\system32\CanonIJ Uninstaller Information
2013-06-29 10:01 . 2013-06-29 10:01 -------- d--h--w- i:\programdata\CanonBJ
2013-06-29 10:01 . 2012-03-14 03:00 99840 ----a-w- i:\windows\system32\Spool\prtprocs\x64\CNMPPAD.DLL
2013-06-29 10:01 . 2012-03-14 03:00 30208 ----a-w- i:\windows\system32\Spool\prtprocs\x64\CNMPDAD.DLL
2013-06-29 10:01 . 2012-03-14 03:00 385024 ----a-w- i:\windows\system32\CNMLMAD.DLL
2013-06-29 10:01 . 2010-03-18 17:25 307200 ----a-w- i:\windows\SysWow64\CNC5100L.dll
2013-06-29 10:01 . 2010-03-18 15:11 106496 ----a-w- i:\windows\SysWow64\CNC5100U.dll
2013-06-29 10:01 . 2008-08-25 16:02 15872 ----a-w- i:\windows\SysWow64\CNHMCA.dll
2013-06-29 10:01 . 2010-03-18 17:26 348672 ----a-w- i:\windows\system32\CNC5100L.dll
2013-06-29 10:01 . 2010-03-18 15:13 1354240 ----a-w- i:\windows\system32\CNC5100C.dll
2013-06-29 10:01 . 2010-03-18 15:13 112128 ----a-w- i:\windows\system32\CNC5100I.dll
2013-06-29 10:01 . 2008-08-25 16:02 17920 ----a-w- i:\windows\system32\CNHMCA6.dll
2013-06-29 06:55 . 2013-06-29 06:55 165504 ----a-w- i:\windows\system32\drivers\IT9135BDA.sys
2013-06-28 22:23 . 2013-06-28 22:23 -------- d-----w- i:\program files (x86)\CrystalDiskInfo
2013-06-28 18:13 . 2013-06-28 18:13 -------- d-----w- i:\program files (x86)\Malwarebytes' Anti-Malware
2013-06-28 18:13 . 2013-04-04 12:50 25928 ----a-w- i:\windows\system32\drivers\mbam.sys
2013-06-28 15:56 . 2013-06-28 15:56 -------- d-----w- i:\program files (x86)\Trend Micro
2013-06-28 11:32 . 2013-06-28 11:32 -------- d-----w- i:\program files\CCleaner
2013-06-28 07:55 . 2013-06-17 00:10 9552976 ----a-w- i:\programdata\Microsoft\Windows Defender\Definition Updates\{E1B7A632-3CE3-425E-8571-474C9D5741E5}\mpengine.dll
2013-06-27 18:37 . 2013-06-29 06:37 73728 ----a-w- i:\windows\system32\AF9100EX.dll
2013-06-27 18:37 . 2013-06-29 06:37 114688 ----a-w- i:\windows\system32\IRMonitor.exe
2013-06-27 18:37 . 2007-06-16 04:30 238 ----a-r- i:\windows\system32\AF15IRTBL.bin
2013-06-27 10:58 . 2013-06-27 10:58 -------- d-----w- i:\programdata\Malwarebytes
2013-06-27 09:56 . 2013-05-08 06:39 1910632 ----a-w- i:\windows\system32\drivers\tcpip.sys
2013-06-27 09:56 . 2012-10-09 18:17 55296 ----a-w- i:\windows\system32\dhcpcsvc6.dll
2013-06-27 09:56 . 2012-10-09 18:17 226816 ----a-w- i:\windows\system32\dhcpcore6.dll
2013-06-27 09:56 . 2012-10-09 17:40 44032 ----a-w- i:\windows\SysWow64\dhcpcsvc6.dll
2013-06-27 09:56 . 2012-10-09 17:40 193536 ----a-w- i:\windows\SysWow64\dhcpcore6.dll
2013-06-27 09:56 . 2013-04-10 03:30 3153920 ----a-w- i:\windows\system32\win32k.sys
2013-06-27 09:56 . 2013-03-19 05:53 230400 ----a-w- i:\windows\system32\wwansvc.dll
2013-06-27 09:56 . 2012-08-22 18:12 950128 ----a-w- i:\windows\system32\drivers\ndis.sys
2013-06-27 09:56 . 2012-07-04 20:26 41472 ----a-w- i:\windows\system32\drivers\RNDISMP.sys
2013-06-27 09:56 . 2013-03-19 05:53 48640 ----a-w- i:\windows\system32\wwanprotdim.dll
2013-06-27 09:56 . 2012-08-21 21:01 245760 ----a-w- i:\windows\system32\OxpsConverter.exe
2013-06-27 09:54 . 2013-04-26 05:51 751104 ----a-w- i:\windows\system32\win32spl.dll
2013-06-27 09:54 . 2013-04-26 04:55 492544 ----a-w- i:\windows\SysWow64\win32spl.dll
2013-06-26 20:27 . 2013-06-26 20:27 -------- d-----w- i:\program files\PlayReady
2013-06-26 20:24 . 2013-06-26 20:24 48648 ----a-w- i:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2013-06-26 20:24 . 2013-06-26 20:24 483952 ----a-w- i:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2013-06-26 06:36 . 2013-06-26 06:36 -------- d-----w- i:\windows\system32\SPReview
2013-06-26 06:35 . 2013-06-26 06:35 -------- d-----w- i:\windows\system32\EventProviders
2013-06-25 15:51 . 2010-11-05 01:57 48976 ----a-w- i:\windows\system32\netfxperf.dll
2013-06-25 15:51 . 2010-11-05 01:57 1942856 ----a-w- i:\windows\system32\dfshim.dll
2013-06-25 15:51 . 2010-11-05 01:58 1130824 ----a-w- i:\windows\SysWow64\dfshim.dll
2013-06-25 15:49 . 2010-11-20 13:27 40960 ----a-w- i:\windows\system32\TsUsbGDCoInstaller.dll
2013-06-25 15:48 . 2010-11-20 12:21 189952 ----a-w- i:\windows\SysWow64\sqmapi.dll
2013-06-25 15:48 . 2010-11-20 12:21 363008 ----a-w- i:\windows\SysWow64\wbemcomn.dll
2013-06-25 15:48 . 2010-11-20 12:21 189952 ----a-w- i:\program files (x86)\Windows Portable Devices\sqmapi.dll
2013-06-25 15:48 . 2010-11-20 12:19 606208 ----a-w- i:\windows\SysWow64\wbem\fastprox.dll
2013-06-25 15:48 . 2010-11-20 13:27 529408 ----a-w- i:\windows\system32\wbemcomn.dll
2013-06-25 15:48 . 2010-11-20 13:27 244736 ----a-w- i:\program files\Windows Portable Devices\sqmapi.dll
2013-06-25 15:48 . 2010-11-20 13:27 244736 ----a-w- i:\windows\system32\sqmapi.dll
2013-06-25 06:30 . 2013-06-25 06:30 71048 ----a-w- i:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-25 06:30 . 2013-06-25 06:30 692104 ----a-w- i:\windows\SysWow64\FlashPlayerApp.exe
2013-06-25 06:30 . 2013-06-25 06:30 -------- d-----w- i:\windows\SysWow64\Macromed
2013-06-25 06:30 . 2013-06-25 06:30 -------- d-----w- i:\windows\system32\Macromed
2013-06-25 06:19 . 2013-06-25 06:19 -------- d-----w- i:\program files (x86)\Opera
2013-06-24 21:47 . 2013-06-24 21:47 -------- d-----w- i:\program files (x86)\Common Files\Steam
2013-06-24 21:41 . 2013-06-24 21:41 -------- d-----w- i:\programdata\Steam
2013-06-24 21:41 . 2013-06-24 21:41 -------- d-----w- i:\programdata\Codemasters
2013-06-24 21:34 . 2013-06-24 21:34 -------- d-----w- i:\programdata\ATI
2013-06-24 21:34 . 2013-06-24 21:34 -------- d-----w- i:\program files (x86)\AMD AVT
2013-06-24 21:31 . 2013-06-24 21:31 -------- d-----w- I:\AMD
2013-06-24 21:24 . 2013-06-24 21:24 -------- d-----w- i:\program files (x86)\NEC Electronics
2013-06-24 21:24 . 2009-04-28 01:03 67128 ----a-w- i:\windows\system32\drivers\amdsata.sys
2013-06-24 21:24 . 2009-04-28 01:03 28216 ----a-w- i:\windows\system32\drivers\amdxata.sys
2013-06-24 21:24 . 2009-05-05 02:00 16440 ----a-w- i:\windows\system32\drivers\AtiPcie.sys
2013-06-24 21:24 . 2013-06-24 21:24 -------- d-----w- I:\RaidTool
2013-06-24 21:24 . 2009-08-26 08:49 1970176 ------r- i:\windows\SysWow64\xRaidSetup.exe
2013-06-24 21:24 . 2009-08-25 11:16 151552 ------r- i:\windows\SysWow64\xRaidAPI.dll
2013-06-24 21:24 . 2009-08-06 05:51 65536 ------r- i:\windows\SysWow64\XSrvSetup.exe
2013-06-24 21:24 . 2009-10-29 08:14 115824 ----a-w- i:\windows\system32\drivers\jraid.sys
2013-06-24 21:24 . 2013-06-24 21:24 -------- d-----w- i:\windows\RaidTool
2013-06-24 20:47 . 2010-02-04 08:01 22360 ----a-w- i:\windows\SysWow64\X3DAudio1_7.dll
2013-06-24 20:46 . 2005-03-18 15:19 3823312 ----a-w- i:\windows\system32\d3dx9_25.dll
2013-06-24 20:46 . 2005-02-05 17:45 3544272 ----a-w- i:\windows\system32\d3dx9_24.dll
2013-06-24 20:17 . 2008-07-31 08:41 68616 ----a-w- i:\windows\SysWow64\XAPOFX1_1.dll
2013-06-24 20:17 . 2008-07-31 08:40 509448 ----a-w- i:\windows\SysWow64\XAudio2_2.dll
2013-06-24 20:17 . 2008-07-12 06:18 467984 ----a-w- i:\windows\SysWow64\d3dx10_39.dll
2013-06-24 20:17 . 2008-07-12 06:18 3851784 ----a-w- i:\windows\SysWow64\D3DX9_39.dll
2013-06-24 20:17 . 2008-07-12 06:18 1493528 ----a-w- i:\windows\SysWow64\D3DCompiler_39.dll
2013-06-24 20:06 . 2013-06-24 21:36 -------- d-----w- i:\programdata\Origin
2013-06-24 20:06 . 2013-06-24 21:36 -------- d-----w- i:\programdata\Electronic Arts
2013-06-24 20:02 . 2013-06-24 20:02 -------- d-----w- i:\program files (x86)\Microsoft.NET
2013-06-24 20:01 . 2012-12-19 13:53 19632 ----a-w- i:\windows\system32\roboot64.exe
2013-06-24 20:00 . 2013-06-24 20:00 -------- d-----w- i:\program files (x86)\Seznam.cz
2013-06-24 20:00 . 2013-06-24 20:00 283200 ----a-w- i:\windows\system32\drivers\dtsoftbus01.sys
2013-06-24 19:58 . 2013-06-24 20:33 -------- d-----w- i:\programdata\DAEMON Tools Lite
2013-06-24 19:56 . 2013-06-29 18:44 -------- d-----r- i:\program files (x86)\Skype
2013-06-24 19:56 . 2013-06-24 19:56 -------- d-----w- i:\program files (x86)\Common Files\Skype
2013-06-24 19:56 . 2013-06-24 19:56 -------- d-----w- i:\programdata\Skype
2013-06-24 19:54 . 2013-06-29 18:37 -------- d-----w- i:\programdata\PMB Files
2013-06-24 19:54 . 2013-06-24 19:54 -------- d-----w- i:\program files (x86)\Pando Networks
2013-06-24 19:49 . 2013-06-27 19:28 378944 ----a-w- i:\windows\system32\drivers\aswSP.sys
2013-06-24 19:49 . 2013-05-09 08:59 72016 ----a-w- i:\windows\system32\drivers\aswRdr2.sys
2013-06-24 19:49 . 2013-05-09 08:59 33400 ----a-w- i:\windows\system32\drivers\aswFsBlk.sys
2013-06-24 19:49 . 2013-06-27 19:28 189936 ----a-w- i:\windows\system32\drivers\aswVmm.sys
2013-06-24 19:49 . 2013-06-27 19:28 1030952 ----a-w- i:\windows\system32\drivers\aswSnx.sys
2013-06-24 19:49 . 2013-05-09 08:59 65336 ----a-w- i:\windows\system32\drivers\aswRvrt.sys
2013-06-24 19:49 . 2013-05-09 08:59 64288 ----a-w- i:\windows\system32\drivers\aswTdi.sys
2013-06-24 19:49 . 2013-05-09 08:59 80816 ----a-w- i:\windows\system32\drivers\aswMonFlt.sys
2013-06-24 19:49 . 2013-05-09 08:58 287840 ----a-w- i:\windows\system32\aswBoot.exe
2013-06-24 19:49 . 2013-05-09 08:58 41664 ----a-w- i:\windows\avastSS.scr
2013-06-24 19:48 . 2013-06-24 19:49 -------- d-----w- i:\programdata\AVAST Software
2013-06-24 19:39 . 2013-06-24 19:39 -------- d-----w- i:\program files\WinRAR
2013-06-24 19:17 . 2013-06-24 19:17 -------- d-----w- i:\windows\SysWow64\Wat
2013-06-24 19:17 . 2013-06-24 19:17 -------- d-----w- i:\windows\system32\Wat
2013-06-24 19:15 . 2012-11-07 05:29 -------- d-----w- i:\users\Default\AppData\Local\Microsoft Help
2013-06-24 19:14 . 2013-06-28 08:14 -------- d-----w- i:\program files (x86)\Google
2013-06-24 19:13 . 2013-06-26 20:01 -------- d-----w- i:\programdata\Creative
2013-06-24 19:10 . 2013-06-24 19:10 0 ----a-w- i:\windows\ativpsrm.bin
2013-06-24 18:49 . 2013-06-28 11:33 -------- d-----w- i:\windows\Panther
2013-06-24 18:48 . 2013-05-02 00:06 278800 ------w- i:\windows\system32\MpSigStub.exe
2013-06-24 18:39 . 2012-07-26 07:40 2560 ----a-w- i:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-06-24 18:39 . 2012-07-26 04:55 785512 ----a-w- i:\windows\system32\drivers\Wdf01000.sys
2013-06-24 18:39 . 2012-07-26 04:55 54376 ----a-w- i:\windows\system32\drivers\WdfLdr.sys
2013-06-24 18:39 . 2012-07-26 02:36 9728 ----a-w- i:\windows\system32\Wdfres.dll
2013-06-24 18:29 . 2010-02-23 08:16 294912 ----a-w- i:\windows\system32\browserchoice.exe
2013-06-24 18:18 . 2013-06-02 15:11 75825640 ----a-w- i:\windows\system32\MRT.exe
2013-06-24 18:17 . 2012-12-16 17:11 46080 ----a-w- i:\windows\system32\atmlib.dll
2013-06-24 18:17 . 2012-12-16 14:13 34304 ----a-w- i:\windows\SysWow64\atmlib.dll
2013-06-24 18:17 . 2010-09-30 06:47 70656 ----a-w- i:\windows\SysWow64\fontsub.dll
2013-06-24 18:17 . 2012-12-16 14:45 367616 ----a-w- i:\windows\system32\atmfd.dll
2013-06-24 18:17 . 2012-12-16 14:13 295424 ----a-w- i:\windows\SysWow64\atmfd.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-26 20:50 . 2009-07-14 02:36 152576 ----a-w- i:\windows\SysWow64\msclmd.dll
2013-06-26 20:50 . 2009-07-14 02:36 175616 ----a-w- i:\windows\system32\msclmd.dll
2013-06-24 18:26 . 2013-06-24 18:26 203776 ----a-w- i:\windows\SysWow64\webcheck.dll
2013-06-24 18:26 . 2013-06-24 18:26 249344 ----a-w- i:\windows\system32\webcheck.dll
2013-04-13 05:49 . 2013-06-27 09:57 135168 ----a-w- i:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-06-27 09:57 350208 ----a-w- i:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-06-27 09:57 308736 ----a-w- i:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-06-27 09:57 111104 ----a-w- i:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-06-27 09:57 474624 ----a-w- i:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-06-27 09:57 2176512 ----a-w- i:\windows\apppatch\AcGenral.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="z:\software\RocketDock\RocketDock.exe" [2007-09-02 495616]
"DAEMON Tools Lite"="z:\software\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
"Sidebar"="i:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avast"="z:\software\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;i:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;i:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 amdiox64;AMD IO Driver;i:\windows\system32\DRIVERS\amdiox64.sys;i:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;i:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;i:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;i:\windows\system32\drivers\rdpvideominiport.sys;i:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;i:\windows\system32\drivers\synth3dvsc.sys;i:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;i:\windows\system32\drivers\tsusbflt.sys;i:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;i:\windows\system32\drivers\tsusbhub.sys;i:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;i:\windows\system32\drivers\rdvgkmd.sys;i:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;i:\windows\system32\Wat\WatAdminSvc.exe;i:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;i:\windows\system32\DRIVERS\dtsoftbus01.sys;i:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;i:\windows\system32\atiesrxx.exe;i:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;i:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;i:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.2;AODDriver4.2;i:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;i:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;i:\windows\system32\drivers\aswMonFlt.sys;i:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 JMB36X;JMB36X;i:\windows\SysWOW64\XSrvSetup.exe;i:\windows\SysWOW64\XSrvSetup.exe [x]
S2 MBAMService;MBAMService;i:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;i:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;i:\windows\system32\drivers\AtihdW76.sys;i:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 IT9135BDA;IT9135 BDA Devices;i:\windows\system32\Drivers\IT9135BDA.sys;i:\windows\SYSNATIVE\Drivers\IT9135BDA.sys [x]
S3 MBAMProtector;MBAMProtector;i:\windows\system32\drivers\mbam.sys;i:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;i:\windows\system32\DRIVERS\nusb3hub.sys;i:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;i:\windows\system32\DRIVERS\nusb3xhc.sys;i:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Ovladač Realtek 8167 NT;i:\windows\system32\DRIVERS\Rt64win7.sys;i:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 skfiltv;skfiltv;i:\windows\system32\drivers\skfiltv.sys;i:\windows\SYSNATIVE\drivers\skfiltv.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-28 08:15 1165776 ----a-w- i:\program files (x86)\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-06-29 i:\windows\Tasks\Adobe Flash Player Updater.job
- i:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-25 06:30]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 133840 ----a-w- z:\software\AVAST Software\Avast\ashShA64.dll
.
------- Doplňkový sken -------
.
uLocal Page = i:\windows\system32\blank.htm
mLocal Page = i:\windows\SYSTEM32\blank.htm
TCP: DhcpNameServer = 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-IT9130 DriverInstaller_11.4.26.1 - i:\users\Petr\AppData\Local\Temp\\DriverInstall64.exe
AddRemove-IT9130 DriverInstaller_12.2.3.1 - i:\users\Petr\AppData\Local\Temp\\DriverInstall64.exe
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
i:\program files (x86)\Creative\Shared Files\CTAudSvc.exe
z:\software\AVAST Software\Avast\AvastSvc.exe
i:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
i:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
.
**************************************************************************
.
Celkový čas: 2013-06-29 20:47:53 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-06-29 18:47
ComboFix2.txt 2013-06-29 08:00
.
Před spuštěním: Volných bajtů: 46 688 118 272
Po spuštění: Volných bajtů: 46 207 885 312
.
- - End Of File - - 490FFDDF8D3C5B3F4F1595FC0808CDF8
D41D8CD98F00B204E9800998ECF8427E


HiJackThis

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:53:57, on 29.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16490)
Boot mode: Normal

Running processes:
I:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
Z:\Software\RocketDock\RocketDock.exe
Z:\Software\AVAST Software\Avast\AvastUI.exe
I:\Program Files (x86)\Skype\Phone\Skype.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
I:\Program Files (x86)\Google\Chrome\Application\chrome.exe
I:\Windows\SysWOW64\DllHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - Z:\Software\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - Z:\Software\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "Z:\Software\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [RocketDock] "Z:\Software\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "Z:\Software\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] I:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - I:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - I:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - I:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - I:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - I:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: avast! Antivirus - AVAST Software - Z:\Software\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - I:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - I:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - I:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - I:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - I:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: JMB36X - Unknown owner - I:\Windows\SysWOW64\XSrvSetup.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - I:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - I:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - I:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - I:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - I:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - I:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - I:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - I:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - I:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - I:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - I:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - I:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - I:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - I:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - I:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - I:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - I:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - I:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - I:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - I:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6583 bytes