PC-HELP.CZ

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:52:52, on 8.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16611)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFi GO! Server.exe
C:\Windows\DAODx.exe
C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EzUpdt.exe
C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFile\WiFileTransfer.exe
C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelp.exe
C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetiCtrlTray.exe
C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AsDLNAServerReal.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\ADVANC~1\BROWER~1\ASCPLU~1.DLL
O4 - HKLM\..\Run: [ASUS WiFi GO! FileTransfer Execute] C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFile\WiFileTransfer.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKCU\..\Run: [Advanced SystemCare 6] "C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
O23 - Service: ASDiskUnlocker - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUSTek Computer Inc\Disk Unlocker\ASPFSVS64.exe
O23 - Service: ASUS HM Com Service (asHmComSvc) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
O23 - Service: ASUS System Control Service (AsSysCtrlService) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
O23 - Service: AsusFanControlService - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.10\AsusFanControlService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Dragon Age: Prameny - aktualizace obsahu (DAUpdaterSvc) - BioWare - C:\Hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9101 bytes

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

LOG z Malware:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2013.07.08.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16618
Lukáš :: AUŠUS [administrátor]

8.7.2013 23:07:46
MBAM-log-2013-07-08 (23-12-23).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 212188
Uplynulý čas: 1 minut, 56 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\Users\Lukáš\AppData\Local\Temp\oddLkyDW.zip.part (Trojan.FakeAlert.ED) -> Nebyla provedena žádná instrukce.

(konec)


Log z AdwCleaner:

# AdwCleaner v2.304 - Log vytvooen 08/07/2013 v 23:13:33
# Aktualizováno 03/07/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Lukáš - AUŠUS
# Spuštin systém : Normální
# Spuštino z : C:\Users\Lukáš\Desktop\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****


***** [Registry] *****

Klíe Nalezeno : HKCU\Software\APN PIP
Klíe Nalezeno : HKCU\Software\Conduit
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\Software\PIP

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16611

[OK] Registry jsou eisté.

-\\ Mozilla Firefox v22.0 (cs)

Soubor : C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\vrw3sjo0.default-1199145335939\prefs.js

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [847 octets] - [08/07/2013 23:13:33]

########## EOF - C:\AdwCleaner[R1].txt - [906 octets] ##########

V Mbam i adw nech vše smazat a dej logy po smazání

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
- Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Log z RogueKiller:

RogueKiller V8.6.2 _x64_ [Jul 2 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : hxxp://www.adlice.com/forum/
Webové stránky : hxxp://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Lukáš [Práva správce]
Mód : Kontrola -- Datum : 07/09/2013 16:49:29
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 1 ¤¤¤
[SUSP PATH] DAODx.exe -- C:\Windows\DAODx.exe [-] -> SMAZÁNO [TermProc]

¤¤¤ ¤¤¤ Záznamy Registrů: : 6 ¤¤¤
[HJ POL] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NALEZENO
[HJ POL] HKLM\[...]\System : EnableLUA (0) -> NALEZENO
[HJ POL] HKLM\[...]\Wow6432Node\[...]\System : ConsentPromptBehaviorAdmin (0) -> NALEZENO
[HJ POL] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 1 ¤¤¤
[V2][SUSP PATH] RunDAOD : C:\Windows\DAODx.exe [-] -> NALEZENO

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST1000DM003-1CH162 ATA Device +++++
--- User ---
[MBR] c1edca1b857621a26692a47ff70718b8
[BSP] a39ed7b76ffe4810cb5c1feca0fae0f3 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 400767 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 820977664 | Size: 553000 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_S_07092013_164929.txt >>


Log z JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.0.2 (07.09.2013:1)
OS: Windows 7 Home Premium x64
Ran by Luk ç on Łt 09.07.2013 at 16:51:33,91
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip"
Successfully deleted: [Registry Key] "hkey_local_machine\software\pip"



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Luk ç\AppData\Roaming\mozilla\firefox\profiles\vrw3sjo0.default-1199145335939\minidumps [21 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Łt 09.07.2013 at 16:53:37,84
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "

- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání- Finished "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller


Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

RogueKiller V8.6.2 _x64_ [Jul 2 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : hxxp://www.adlice.com/forum/
Webové stránky : hxxp://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Lukáš [Práva správce]
Mód : Odebrat -- Datum : 07/09/2013 20:43:50
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 8 ¤¤¤
[HJ POL] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZÁNO
[HJ POL] HKCU\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ POL] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NAHRAZENO (2)
[HJ POL] HKLM\[...]\System : EnableLUA (0) -> NAHRAZENO (1)
[HJ POL] HKLM\[...]\Wow6432Node\[...]\System : ConsentPromptBehaviorAdmin (0) -> NAHRAZENO (2)
[HJ POL] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> NAHRAZENO (1)
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 1 ¤¤¤
[V2][SUSP PATH] RunDAOD : C:\Windows\DAODx.exe [-] -> VYMAZÁNO

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST1000DM003-1CH162 ATA Device +++++
--- User ---
[MBR] c1edca1b857621a26692a47ff70718b8
[BSP] a39ed7b76ffe4810cb5c1feca0fae0f3 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 400767 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 820977664 | Size: 553000 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_D_07092013_204350.txt >>
RKreport[0]_S_07092013_204239.txt

20:45:26.0263 5520 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
20:45:26.0437 5520 ============================================================
20:45:26.0437 5520 Current date / time: 2013/07/09 20:45:26.0437
20:45:26.0437 5520 SystemInfo:
20:45:26.0437 5520
20:45:26.0437 5520 OS Version: 6.1.7601 ServicePack: 1.0
20:45:26.0437 5520 Product type: Workstation
20:45:26.0437 5520 ComputerName: AUŠUS
20:45:26.0438 5520 UserName: Lukáš
20:45:26.0438 5520 Windows directory: C:\Windows
20:45:26.0438 5520 System windows directory: C:\Windows
20:45:26.0438 5520 Running under WOW64
20:45:26.0438 5520 Processor architecture: Intel x64
20:45:26.0438 5520 Number of processors: 4
20:45:26.0438 5520 Page size: 0x1000
20:45:26.0438 5520 Boot type: Normal boot
20:45:26.0438 5520 ============================================================
20:45:27.0400 5520 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:45:27.0403 5520 ============================================================
20:45:27.0403 5520 \Device\Harddisk0\DR0:
20:45:27.0403 5520 MBR partitions:
20:45:27.0403 5520 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
20:45:27.0403 5520 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x30EBF800
20:45:27.0403 5520 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x30EF2000, BlocksNum 0x43814000
20:45:27.0403 5520 ============================================================
20:45:27.0418 5520 C: <-> \Device\Harddisk0\DR0\Partition2
20:45:27.0452 5520 D: <-> \Device\Harddisk0\DR0\Partition3
20:45:27.0465 5520 Z: <-> \Device\Harddisk0\DR0\Partition1
20:45:27.0466 5520 ============================================================
20:45:27.0466 5520 Initialize success
20:45:27.0466 5520 ============================================================
20:45:30.0580 4460 ============================================================
20:45:30.0580 4460 Scan started
20:45:30.0580 4460 Mode: Manual;
20:45:30.0580 4460 ============================================================
20:45:31.0339 4460 ================ Scan system memory ========================
20:45:31.0340 4460 System memory - ok
20:45:31.0341 4460 ================ Scan services =============================
20:45:31.0462 4460 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
20:45:31.0467 4460 1394ohci - ok
20:45:31.0492 4460 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
20:45:31.0497 4460 ACPI - ok
20:45:31.0518 4460 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
20:45:31.0520 4460 AcpiPmi - ok
20:45:31.0624 4460 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
20:45:31.0626 4460 AdobeARMservice - ok
20:45:31.0738 4460 [ 9915504F602D277EE47FD843A677FD15 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
20:45:31.0743 4460 AdobeFlashPlayerUpdateSvc - ok
20:45:31.0766 4460 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
20:45:31.0774 4460 adp94xx - ok
20:45:31.0797 4460 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
20:45:31.0803 4460 adpahci - ok
20:45:31.0818 4460 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
20:45:31.0822 4460 adpu320 - ok
20:45:31.0903 4460 [ 9243229DFCCC99B5441750EBA49F1B14 ] AdvancedSystemCareService6 C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
20:45:31.0913 4460 AdvancedSystemCareService6 - ok
20:45:31.0952 4460 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
20:45:31.0954 4460 AeLookupSvc - ok
20:45:31.0990 4460 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
20:45:31.0998 4460 AFD - ok
20:45:32.0015 4460 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
20:45:32.0017 4460 agp440 - ok
20:45:32.0039 4460 [ 4BFB41025FA1C37205EDEEFDE36F7771 ] AiChargerPlus C:\Windows\syswow64\drivers\AiChargerPlus.sys
20:45:32.0039 4460 AiChargerPlus - ok
20:45:32.0051 4460 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
20:45:32.0052 4460 ALG - ok
20:45:32.0066 4460 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
20:45:32.0067 4460 aliide - ok
20:45:32.0101 4460 [ D45D3540C5AE2A48C6112DF03F06F374 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
20:45:32.0103 4460 AMD External Events Utility - ok
20:45:32.0157 4460 AMD FUEL Service - ok
20:45:32.0171 4460 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
20:45:32.0172 4460 amdide - ok
20:45:32.0196 4460 [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64 C:\Windows\system32\DRIVERS\amdiox64.sys
20:45:32.0198 4460 amdiox64 - ok
20:45:32.0217 4460 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
20:45:32.0217 4460 AmdK8 - ok
20:45:32.0388 4460 [ 5B871F3E4A4A6C4693A413E3138B51D0 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
20:45:32.0432 4460 amdkmdag - ok
20:45:32.0460 4460 [ 9BE1140CE8D2C5E878F136A7B85D41B3 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
20:45:32.0462 4460 amdkmdap - ok
20:45:32.0475 4460 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
20:45:32.0477 4460 AmdPPM - ok
20:45:32.0509 4460 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
20:45:32.0512 4460 amdsata - ok
20:45:32.0533 4460 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
20:45:32.0536 4460 amdsbs - ok
20:45:32.0564 4460 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
20:45:32.0566 4460 amdxata - ok
20:45:32.0578 4460 [ 5B25D1A753CC3A3EDB909BB759AC1098 ] AODDriver4.1 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
20:45:32.0580 4460 AODDriver4.1 - ok
20:45:32.0601 4460 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
20:45:32.0601 4460 AppID - ok
20:45:32.0614 4460 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
20:45:32.0614 4460 AppIDSvc - ok
20:45:32.0641 4460 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll
20:45:32.0642 4460 Appinfo - ok
20:45:32.0652 4460 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
20:45:32.0653 4460 arc - ok
20:45:32.0659 4460 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
20:45:32.0660 4460 arcsas - ok
20:45:32.0708 4460 [ 31E2470E61D5A390405BA41C279D8446 ] asComSvc C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
20:45:32.0714 4460 asComSvc - ok
20:45:32.0757 4460 [ 579D97BC00C7AB95A173FEF85A53512A ] ASDiskUnlocker C:\Program Files (x86)\ASUSTek Computer Inc\Disk Unlocker\ASPFSVS64.exe
20:45:32.0762 4460 ASDiskUnlocker - ok
20:45:32.0791 4460 [ 2921131F9A111FD6C6D2C5E1E5B6B75C ] ASFLTDrv.sys C:\Program Files (x86)\ASUSTek Computer Inc\Disk Unlocker\ASFLTDrv64.sys
20:45:32.0792 4460 ASFLTDrv.sys - ok
20:45:32.0818 4460 [ 0466B91EE5767A769E9F8EDB8EF94DDB ] asHmComSvc C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
20:45:32.0824 4460 asHmComSvc - ok
20:45:32.0835 4460 [ 798DE15F187C1F013095BBBEB6FB6197 ] AsIO C:\Windows\syswow64\drivers\AsIO.sys
20:45:32.0835 4460 AsIO - ok
20:45:32.0847 4460 [ 22842362DF890F5492F85AA60916A697 ] asmthub3 C:\Windows\system32\DRIVERS\asmthub3.sys
20:45:32.0849 4460 asmthub3 - ok
20:45:32.0863 4460 [ 08E2D77766CC05E75A0707207D9FC684 ] asmtxhci C:\Windows\system32\DRIVERS\asmtxhci.sys
20:45:32.0865 4460 asmtxhci - ok
20:45:32.0886 4460 [ AD8947D621FDCA48F1F39F4624B60AA1 ] AsSysCtrlService C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
20:45:32.0887 4460 AsSysCtrlService - ok
20:45:32.0905 4460 [ 1392B92179B07B672720763D9B1028A5 ] AsUpIO C:\Windows\syswow64\drivers\AsUpIO.sys
20:45:32.0906 4460 AsUpIO - ok
20:45:32.0948 4460 [ E73BD58EFACB75B2C66AF74B65EF8755 ] AsusFanControlService C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.10\AsusFanControlService.exe
20:45:32.0970 4460 AsusFanControlService - ok
20:45:33.0014 4460 [ A5E4CDB420540095D1293C874B5F89AA ] ASUSFILTER C:\Windows\syswow64\drivers\ASUSFILTER.sys
20:45:33.0017 4460 ASUSFILTER - ok
20:45:33.0033 4460 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
20:45:33.0034 4460 AsyncMac - ok
20:45:33.0050 4460 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
20:45:33.0050 4460 atapi - ok
20:45:33.0073 4460 [ 24464B908E143D2561E9E452FEE97309 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
20:45:33.0074 4460 AtiHDAudioService - ok
20:45:33.0232 4460 [ 5B871F3E4A4A6C4693A413E3138B51D0 ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys
20:45:33.0276 4460 atikmdag - ok
20:45:33.0309 4460 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
20:45:33.0312 4460 AudioEndpointBuilder - ok
20:45:33.0318 4460 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
20:45:33.0320 4460 AudioSrv - ok
20:45:33.0475 4460 [ 50185186719134FA8F307D269106A51C ] AVGIDSAgent C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
20:45:33.0500 4460 AVGIDSAgent - ok
20:45:33.0514 4460 [ 139BD30C32BEE830D0CF39C5324D79DE ] AVGIDSDriver C:\Windows\system32\DRIVERS\avgidsdrivera.sys
20:45:33.0515 4460 AVGIDSDriver - ok
20:45:33.0519 4460 [ 2940FACB6EF92BD1936E4A1E2502468E ] AVGIDSHA C:\Windows\system32\DRIVERS\avgidsha.sys
20:45:33.0519 4460 AVGIDSHA - ok
20:45:33.0532 4460 [ 54B66C4AEEC6C4F742F3569EBA03EBB8 ] Avgldx64 C:\Windows\system32\DRIVERS\avgldx64.sys
20:45:33.0533 4460 Avgldx64 - ok
20:45:33.0552 4460 [ 13667B5D6310228A9FEF2BA5FCD9081F ] Avgloga C:\Windows\system32\DRIVERS\avgloga.sys
20:45:33.0553 4460 Avgloga - ok
20:45:33.0562 4460 [ BE82F9A1F2CCF4CE746D0C645D94079E ] Avgmfx64 C:\Windows\system32\DRIVERS\avgmfx64.sys
20:45:33.0562 4460 Avgmfx64 - ok
20:45:33.0571 4460 [ 5D11620DEF66F9DC9468FEE385A8429B ] Avgrkx64 C:\Windows\system32\DRIVERS\avgrkx64.sys
20:45:33.0571 4460 Avgrkx64 - ok
20:45:33.0585 4460 [ 69BD90E337625F96C718CACE7A9C9E29 ] Avgtdia C:\Windows\system32\DRIVERS\avgtdia.sys
20:45:33.0586 4460 Avgtdia - ok
20:45:33.0621 4460 [ 3A0977CB68AF13E2579E47EB8984056B ] avgwd C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
20:45:33.0627 4460 avgwd - ok
20:45:33.0656 4460 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
20:45:33.0659 4460 AxInstSV - ok
20:45:33.0685 4460 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
20:45:33.0692 4460 b06bdrv - ok
20:45:33.0722 4460 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
20:45:33.0727 4460 b57nd60a - ok
20:45:33.0767 4460 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
20:45:33.0771 4460 BDESVC - ok
20:45:33.0783 4460 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
20:45:33.0784 4460 Beep - ok
20:45:33.0810 4460 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
20:45:33.0816 4460 BFE - ok
20:45:33.0849 4460 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
20:45:33.0857 4460 BITS - ok
20:45:33.0870 4460 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
20:45:33.0871 4460 blbdrive - ok
20:45:33.0895 4460 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
20:45:33.0896 4460 bowser - ok
20:45:33.0906 4460 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
20:45:33.0906 4460 BrFiltLo - ok
20:45:33.0919 4460 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
20:45:33.0919 4460 BrFiltUp - ok
20:45:33.0943 4460 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
20:45:33.0946 4460 Browser - ok
20:45:33.0972 4460 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
20:45:33.0977 4460 Brserid - ok
20:45:33.0994 4460 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
20:45:33.0996 4460 BrSerWdm - ok
20:45:34.0010 4460 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
20:45:34.0011 4460 BrUsbMdm - ok
20:45:34.0023 4460 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
20:45:34.0025 4460 BrUsbSer - ok
20:45:34.0043 4460 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
20:45:34.0044 4460 BTHMODEM - ok
20:45:34.0051 4460 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
20:45:34.0052 4460 bthserv - ok
20:45:34.0081 4460 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
20:45:34.0082 4460 cdfs - ok
20:45:34.0087 4460 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
20:45:34.0088 4460 cdrom - ok
20:45:34.0111 4460 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
20:45:34.0113 4460 CertPropSvc - ok
20:45:34.0126 4460 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
20:45:34.0127 4460 circlass - ok
20:45:34.0141 4460 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
20:45:34.0144 4460 CLFS - ok
20:45:34.0201 4460 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:45:34.0206 4460 clr_optimization_v2.0.50727_32 - ok
20:45:34.0250 4460 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
20:45:34.0255 4460 clr_optimization_v2.0.50727_64 - ok
20:45:34.0327 4460 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:45:34.0330 4460 clr_optimization_v4.0.30319_32 - ok
20:45:34.0351 4460 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
20:45:34.0355 4460 clr_optimization_v4.0.30319_64 - ok
20:45:34.0368 4460 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
20:45:34.0369 4460 CmBatt - ok
20:45:34.0382 4460 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
20:45:34.0382 4460 cmdide - ok
20:45:34.0416 4460 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\Windows\system32\Drivers\cng.sys
20:45:34.0419 4460 CNG - ok
20:45:34.0427 4460 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
20:45:34.0427 4460 Compbatt - ok
20:45:34.0440 4460 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
20:45:34.0440 4460 CompositeBus - ok
20:45:34.0444 4460 COMSysApp - ok
20:45:34.0460 4460 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
20:45:34.0460 4460 crcdisk - ok
20:45:34.0490 4460 [ D8129C49798CBBFB2E4351D4B7B8EF9C ] CryptSvc C:\Windows\system32\cryptsvc.dll
20:45:34.0492 4460 CryptSvc - ok
20:45:34.0590 4460 [ 914A7156B0C0F10BE645A02E13F576B2 ] DAUpdaterSvc C:\Hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
20:45:34.0594 4460 DAUpdaterSvc - ok
20:45:34.0642 4460 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
20:45:34.0654 4460 DcomLaunch - ok
20:45:34.0668 4460 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
20:45:34.0671 4460 defragsvc - ok
20:45:34.0684 4460 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
20:45:34.0685 4460 DfsC - ok
20:45:34.0694 4460 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
20:45:34.0696 4460 Dhcp - ok
20:45:34.0703 4460 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
20:45:34.0704 4460 discache - ok
20:45:34.0716 4460 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
20:45:34.0717 4460 Disk - ok
20:45:34.0739 4460 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
20:45:34.0740 4460 Dnscache - ok
20:45:34.0773 4460 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
20:45:34.0780 4460 dot3svc - ok
20:45:34.0791 4460 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
20:45:34.0795 4460 DPS - ok
20:45:34.0826 4460 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
20:45:34.0827 4460 drmkaud - ok
20:45:34.0851 4460 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
20:45:34.0853 4460 dtsoftbus01 - ok
20:45:34.0891 4460 [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
20:45:34.0896 4460 DXGKrnl - ok
20:45:34.0908 4460 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
20:45:34.0910 4460 EapHost - ok
20:45:34.0952 4460 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
20:45:34.0969 4460 ebdrv - ok
20:45:34.0989 4460 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
20:45:34.0990 4460 EFS - ok
20:45:35.0051 4460 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
20:45:35.0064 4460 ehRecvr - ok
20:45:35.0079 4460 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
20:45:35.0083 4460 ehSched - ok
20:45:35.0112 4460 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
20:45:35.0120 4460 elxstor - ok
20:45:35.0139 4460 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
20:45:35.0140 4460 ErrDev - ok
20:45:35.0179 4460 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
20:45:35.0181 4460 EventSystem - ok
20:45:35.0199 4460 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
20:45:35.0200 4460 exfat - ok
20:45:35.0217 4460 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
20:45:35.0218 4460 fastfat - ok
20:45:35.0237 4460 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
20:45:35.0243 4460 Fax - ok
20:45:35.0254 4460 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
20:45:35.0254 4460 fdc - ok
20:45:35.0266 4460 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
20:45:35.0267 4460 fdPHost - ok
20:45:35.0280 4460 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
20:45:35.0281 4460 FDResPub - ok
20:45:35.0292 4460 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
20:45:35.0293 4460 FileInfo - ok
20:45:35.0383 4460 [ D409D4A4517865131999FAC96D366CBF ] FileMonitor C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys
20:45:35.0384 4460 FileMonitor - ok
20:45:35.0399 4460 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
20:45:35.0400 4460 Filetrace - ok
20:45:35.0420 4460 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
20:45:35.0420 4460 flpydisk - ok
20:45:35.0426 4460 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
20:45:35.0428 4460 FltMgr - ok
20:45:35.0460 4460 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
20:45:35.0467 4460 FontCache - ok
20:45:35.0507 4460 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
20:45:35.0511 4460 FontCache3.0.0.0 - ok
20:45:35.0526 4460 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
20:45:35.0528 4460 FsDepends - ok
20:45:35.0547 4460 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
20:45:35.0549 4460 Fs_Rec - ok
20:45:35.0574 4460 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
20:45:35.0576 4460 fvevol - ok
20:45:35.0591 4460 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
20:45:35.0592 4460 gagp30kx - ok
20:45:35.0613 4460 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
20:45:35.0618 4460 gpsvc - ok
20:45:35.0634 4460 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
20:45:35.0635 4460 hcw85cir - ok
20:45:35.0672 4460 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
20:45:35.0675 4460 HdAudAddService - ok
20:45:35.0679 4460 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
20:45:35.0680 4460 HDAudBus - ok
20:45:35.0694 4460 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
20:45:35.0694 4460 HidBatt - ok
20:45:35.0706 4460 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
20:45:35.0707 4460 HidBth - ok
20:45:35.0717 4460 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
20:45:35.0718 4460 HidIr - ok
20:45:35.0727 4460 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
20:45:35.0729 4460 hidserv - ok
20:45:35.0742 4460 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
20:45:35.0743 4460 HidUsb - ok
20:45:35.0767 4460 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
20:45:35.0769 4460 hkmsvc - ok
20:45:35.0786 4460 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
20:45:35.0789 4460 HomeGroupListener - ok
20:45:35.0815 4460 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
20:45:35.0818 4460 HomeGroupProvider - ok
20:45:35.0830 4460 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
20:45:35.0831 4460 HpSAMD - ok
20:45:35.0860 4460 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
20:45:35.0865 4460 HTTP - ok
20:45:35.0878 4460 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
20:45:35.0879 4460 hwpolicy - ok
20:45:35.0883 4460 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
20:45:35.0884 4460 i8042prt - ok
20:45:35.0903 4460 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
20:45:35.0906 4460 iaStorV - ok
20:45:35.0939 4460 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
20:45:35.0946 4460 idsvc - ok
20:45:35.0958 4460 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
20:45:35.0958 4460 iirsp - ok
20:45:35.0976 4460 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
20:45:35.0984 4460 IKEEXT - ok
20:45:36.0019 4460 [ 24EA4E2F76E216CE70353736E3556585 ] IMFservice C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
20:45:36.0021 4460 IMFservice - ok
20:45:36.0134 4460 [ 8524178B895E4BC04776B319DA3A70EC ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
20:45:36.0157 4460 IntcAzAudAddService - ok
20:45:36.0167 4460 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
20:45:36.0167 4460 intelide - ok
20:45:36.0187 4460 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\drivers\intelppm.sys
20:45:36.0188 4460 intelppm - ok
20:45:36.0202 4460 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
20:45:36.0204 4460 IPBusEnum - ok
20:45:36.0216 4460 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:45:36.0217 4460 IpFilterDriver - ok
20:45:36.0244 4460 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
20:45:36.0249 4460 iphlpsvc - ok
20:45:36.0260 4460 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
20:45:36.0261 4460 IPMIDRV - ok
20:45:36.0275 4460 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
20:45:36.0276 4460 IPNAT - ok
20:45:36.0292 4460 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
20:45:36.0293 4460 IRENUM - ok
20:45:36.0307 4460 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
20:45:36.0307 4460 isapnp - ok
20:45:36.0323 4460 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
20:45:36.0325 4460 iScsiPrt - ok
20:45:36.0340 4460 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
20:45:36.0340 4460 kbdclass - ok
20:45:36.0351 4460 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
20:45:36.0352 4460 kbdhid - ok
20:45:36.0364 4460 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
20:45:36.0366 4460 KeyIso - ok
20:45:36.0390 4460 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
20:45:36.0391 4460 KSecDD - ok
20:45:36.0417 4460 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
20:45:36.0420 4460 KSecPkg - ok
20:45:36.0438 4460 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
20:45:36.0439 4460 ksthunk - ok
20:45:36.0462 4460 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
20:45:36.0466 4460 KtmRm - ok
20:45:36.0495 4460 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
20:45:36.0504 4460 LanmanServer - ok
20:45:36.0534 4460 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
20:45:36.0541 4460 LanmanWorkstation - ok
20:45:36.0562 4460 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
20:45:36.0564 4460 lltdio - ok
20:45:36.0597 4460 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
20:45:36.0601 4460 lltdsvc - ok
20:45:36.0610 4460 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
20:45:36.0611 4460 lmhosts - ok
20:45:36.0625 4460 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
20:45:36.0626 4460 LSI_FC - ok
20:45:36.0634 4460 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
20:45:36.0635 4460 LSI_SAS - ok
20:45:36.0648 4460 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
20:45:36.0649 4460 LSI_SAS2 - ok
20:45:36.0662 4460 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
20:45:36.0663 4460 LSI_SCSI - ok
20:45:36.0676 4460 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
20:45:36.0677 4460 luafv - ok
20:45:36.0707 4460 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
20:45:36.0713 4460 Mcx2Svc - ok
20:45:36.0772 4460 [ 11F714F85530A2BD134074DC30E99FCA ] MDM C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
20:45:36.0777 4460 MDM - ok
20:45:36.0798 4460 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
20:45:36.0800 4460 megasas - ok
20:45:36.0818 4460 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
20:45:36.0823 4460 MegaSR - ok
20:45:36.0839 4460 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
20:45:36.0843 4460 MMCSS - ok
20:45:36.0855 4460 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
20:45:36.0856 4460 Modem - ok
20:45:36.0860 4460 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
20:45:36.0861 4460 monitor - ok
20:45:36.0871 4460 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
20:45:36.0872 4460 mouclass - ok
20:45:36.0883 4460 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
20:45:36.0883 4460 mouhid - ok
20:45:36.0902 4460 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
20:45:36.0903 4460 mountmgr - ok
20:45:36.0949 4460 [ 528A5C2570F468155A1B3CF0A2FF5EBD ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
20:45:36.0953 4460 MozillaMaintenance - ok
20:45:36.0976 4460 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
20:45:36.0979 4460 mpio - ok
20:45:36.0989 4460 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
20:45:36.0992 4460 mpsdrv - ok
20:45:37.0018 4460 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
20:45:37.0023 4460 MpsSvc - ok
20:45:37.0037 4460 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
20:45:37.0038 4460 MRxDAV - ok
20:45:37.0067 4460 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
20:45:37.0070 4460 mrxsmb - ok
20:45:37.0088 4460 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:45:37.0093 4460 mrxsmb10 - ok
20:45:37.0104 4460 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:45:37.0106 4460 mrxsmb20 - ok
20:45:37.0115 4460 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
20:45:37.0116 4460 msahci - ok
20:45:37.0126 4460 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
20:45:37.0127 4460 msdsm - ok
20:45:37.0144 4460 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
20:45:37.0146 4460 MSDTC - ok
20:45:37.0171 4460 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
20:45:37.0171 4460 Msfs - ok
20:45:37.0182 4460 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
20:45:37.0182 4460 mshidkmdf - ok
20:45:37.0189 4460 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
20:45:37.0190 4460 msisadrv - ok
20:45:37.0217 4460 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
20:45:37.0220 4460 MSiSCSI - ok
20:45:37.0223 4460 msiserver - ok
20:45:37.0248 4460 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
20:45:37.0249 4460 MSKSSRV - ok
20:45:37.0256 4460 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
20:45:37.0256 4460 MSPCLOCK - ok
20:45:37.0263 4460 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
20:45:37.0264 4460 MSPQM - ok
20:45:37.0279 4460 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
20:45:37.0282 4460 MsRPC - ok
20:45:37.0293 4460 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
20:45:37.0293 4460 mssmbios - ok
20:45:37.0310 4460 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
20:45:37.0310 4460 MSTEE - ok
20:45:37.0327 4460 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
20:45:37.0328 4460 MTConfig - ok
20:45:37.0339 4460 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
20:45:37.0340 4460 Mup - ok
20:45:37.0368 4460 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
20:45:37.0373 4460 napagent - ok
20:45:37.0385 4460 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
20:45:37.0387 4460 NativeWifiP - ok
20:45:37.0407 4460 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
20:45:37.0412 4460 NDIS - ok
20:45:37.0430 4460 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
20:45:37.0430 4460 NdisCap - ok
20:45:37.0469 4460 [ 270B10B8BD822DD4673781E0A1935DFB ] ndisrd C:\Windows\system32\DRIVERS\ndisrd.sys
20:45:37.0469 4460 ndisrd - ok
20:45:37.0486 4460 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
20:45:37.0487 4460 NdisTapi - ok
20:45:37.0507 4460 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
20:45:37.0508 4460 Ndisuio - ok
20:45:37.0513 4460 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
20:45:37.0515 4460 NdisWan - ok
20:45:37.0536 4460 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
20:45:37.0537 4460 NDProxy - ok
20:45:37.0547 4460 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
20:45:37.0548 4460 NetBIOS - ok
20:45:37.0562 4460 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
20:45:37.0564 4460 NetBT - ok
20:45:37.0573 4460 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
20:45:37.0574 4460 Netlogon - ok
20:45:37.0608 4460 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
20:45:37.0617 4460 Netman - ok
20:45:37.0634 4460 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
20:45:37.0638 4460 netprofm - ok
20:45:37.0658 4460 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
20:45:37.0660 4460 NetTcpPortSharing - ok
20:45:37.0678 4460 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
20:45:37.0679 4460 nfrd960 - ok
20:45:37.0700 4460 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
20:45:37.0703 4460 NlaSvc - ok
20:45:37.0716 4460 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
20:45:37.0716 4460 Npfs - ok
20:45:37.0724 4460 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
20:45:37.0726 4460 nsi - ok
20:45:37.0729 4460 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
20:45:37.0730 4460 nsiproxy - ok
20:45:37.0776 4460 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
20:45:37.0786 4460 Ntfs - ok
20:45:37.0794 4460 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
20:45:37.0794 4460 Null - ok
20:45:37.0811 4460 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
20:45:37.0812 4460 nvraid - ok
20:45:37.0843 4460 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
20:45:37.0845 4460 nvstor - ok
20:45:37.0857 4460 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
20:45:37.0858 4460 nv_agp - ok
20:45:37.0864 4460 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
20:45:37.0865 4460 ohci1394 - ok
20:45:37.0893 4460 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
20:45:37.0895 4460 ose - ok
20:45:37.0910 4460 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
20:45:37.0914 4460 p2pimsvc - ok
20:45:37.0930 4460 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
20:45:37.0935 4460 p2psvc - ok
20:45:37.0946 4460 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys
20:45:37.0947 4460 Parport - ok
20:45:37.0976 4460 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
20:45:37.0977 4460 partmgr - ok
20:45:37.0992 4460 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
20:45:37.0999 4460 PcaSvc - ok
20:45:38.0017 4460 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
20:45:38.0021 4460 pci - ok
20:45:38.0035 4460 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
20:45:38.0037 4460 pciide - ok
20:45:38.0053 4460 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
20:45:38.0055 4460 pcmcia - ok
20:45:38.0065 4460 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
20:45:38.0066 4460 pcw - ok
20:45:38.0074 4460 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
20:45:38.0078 4460 PEAUTH - ok
20:45:38.0141 4460 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
20:45:38.0143 4460 PerfHost - ok
20:45:38.0192 4460 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
20:45:38.0229 4460 pla - ok
20:45:38.0401 4460 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
20:45:38.0411 4460 PlugPlay - ok
20:45:38.0438 4460 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
20:45:38.0443 4460 PNRPAutoReg - ok
20:45:38.0449 4460 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
20:45:38.0452 4460 PNRPsvc - ok
20:45:38.0477 4460 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
20:45:38.0482 4460 PolicyAgent - ok
20:45:38.0508 4460 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
20:45:38.0511 4460 Power - ok
20:45:38.0527 4460 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
20:45:38.0528 4460 PptpMiniport - ok
20:45:38.0538 4460 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys
20:45:38.0539 4460 Processor - ok
20:45:38.0573 4460 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
20:45:38.0576 4460 ProfSvc - ok
20:45:38.0589 4460 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
20:45:38.0591 4460 ProtectedStorage - ok
20:45:38.0604 4460 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
20:45:38.0605 4460 Psched - ok
20:45:38.0631 4460 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
20:45:38.0640 4460 ql2300 - ok
20:45:38.0649 4460 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
20:45:38.0650 4460 ql40xx - ok
20:45:38.0664 4460 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
20:45:38.0666 4460 QWAVE - ok
20:45:38.0676 4460 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
20:45:38.0676 4460 QWAVEdrv - ok
20:45:38.0689 4460 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
20:45:38.0689 4460 RasAcd - ok
20:45:38.0703 4460 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
20:45:38.0703 4460 RasAgileVpn - ok
20:45:38.0708 4460 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
20:45:38.0710 4460 RasAuto - ok
20:45:38.0713 4460 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
20:45:38.0714 4460 Rasl2tp - ok
20:45:38.0726 4460 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
20:45:38.0729 4460 RasMan - ok
20:45:38.0735 4460 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
20:45:38.0736 4460 RasPppoe - ok
20:45:38.0744 4460 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
20:45:38.0745 4460 RasSstp - ok
20:45:38.0749 4460 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
20:45:38.0750 4460 rdbss - ok
20:45:38.0764 4460 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
20:45:38.0764 4460 rdpbus - ok
20:45:38.0774 4460 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
20:45:38.0774 4460 RDPCDD - ok
20:45:38.0782 4460 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
20:45:38.0782 4460 RDPENCDD - ok
20:45:38.0790 4460 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
20:45:38.0790 4460 RDPREFMP - ok
20:45:38.0813 4460 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
20:45:38.0814 4460 RdpVideoMiniport - ok
20:45:38.0841 4460 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
20:45:38.0846 4460 RDPWD - ok
20:45:38.0867 4460 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
20:45:38.0871 4460 rdyboost - ok
20:45:38.0920 4460 [ BB26BDE6308A46A8497AA7C4AB569B77 ] RegFilter C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys
20:45:38.0921 4460 RegFilter - ok
20:45:38.0953 4460 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
20:45:38.0958 4460 RemoteAccess - ok
20:45:38.0995 4460 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
20:45:39.0002 4460 RemoteRegistry - ok
20:45:39.0032 4460 [ 9C3AC71A9934B884FAC567A8807E9C4D ] Revoflt C:\Windows\system32\DRIVERS\revoflt.sys
20:45:39.0034 4460 Revoflt - ok
20:45:39.0051 4460 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
20:45:39.0056 4460 RpcEptMapper - ok
20:45:39.0086 4460 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
20:45:39.0090 4460 RpcLocator - ok
20:45:39.0106 4460 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
20:45:39.0118 4460 RpcSs - ok
20:45:39.0134 4460 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
20:45:39.0136 4460 rspndr - ok
20:45:39.0185 4460 [ 3713DACCA1025B05A6343104112708D9 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
20:45:39.0194 4460 RTL8167 - ok
20:45:39.0206 4460 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
20:45:39.0207 4460 SamSs - ok
20:45:39.0221 4460 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
20:45:39.0222 4460 sbp2port - ok
20:45:39.0239 4460 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
20:45:39.0242 4460 SCardSvr - ok
20:45:39.0249 4460 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
20:45:39.0250 4460 scfilter - ok
20:45:39.0271 4460 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
20:45:39.0278 4460 Schedule - ok
20:45:39.0303 4460 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
20:45:39.0304 4460 SCPolicySvc - ok
20:45:39.0316 4460 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
20:45:39.0319 4460 SDRSVC - ok
20:45:39.0326 4460 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
20:45:39.0326 4460 secdrv - ok
20:45:39.0330 4460 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
20:45:39.0332 4460 seclogon - ok
20:45:39.0342 4460 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
20:45:39.0344 4460 SENS - ok
20:45:39.0350 4460 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
20:45:39.0351 4460 SensrSvc - ok
20:45:39.0363 4460 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
20:45:39.0364 4460 Serenum - ok
20:45:39.0384 4460 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
20:45:39.0385 4460 Serial - ok
20:45:39.0399 4460 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys
20:45:39.0400 4460 sermouse - ok
20:45:39.0415 4460 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
20:45:39.0418 4460 SessionEnv - ok
20:45:39.0427 4460 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
20:45:39.0428 4460 sffdisk - ok
20:45:39.0438 4460 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
20:45:39.0439 4460 sffp_mmc - ok
20:45:39.0447 4460 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
20:45:39.0448 4460 sffp_sd - ok
20:45:39.0455 4460 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
20:45:39.0456 4460 sfloppy - ok
20:45:39.0483 4460 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
20:45:39.0486 4460 SharedAccess - ok
20:45:39.0501 4460 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
20:45:39.0505 4460 ShellHWDetection - ok
20:45:39.0523 4460 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
20:45:39.0523 4460 SiSRaid2 - ok
20:45:39.0537 4460 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
20:45:39.0537 4460 SiSRaid4 - ok
20:45:39.0647 4460 [ EB17DF573B4423DF0B3B2EE3B268A6DE ] Skype C2C Service C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
20:45:39.0665 4460 Skype C2C Service - ok
20:45:39.0693 4460 [ 4E8A4BB5B11D828FF986F6228B1CD3DF ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
20:45:39.0694 4460 SkypeUpdate - ok
20:45:39.0751 4460 [ DD0443BC6CC78A19FD399817F8C51401 ] SmartDefragDriver C:\Windows\system32\Drivers\SmartDefragDriver.sys
20:45:39.0753 4460 SmartDefragDriver - ok
20:45:39.0775 4460 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
20:45:39.0778 4460 Smb - ok
20:45:39.0802 4460 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
20:45:39.0807 4460 SNMPTRAP - ok
20:45:39.0816 4460 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
20:45:39.0817 4460 spldr - ok
20:45:39.0835 4460 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
20:45:39.0840 4460 Spooler - ok
20:45:39.0916 4460 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
20:45:39.0971 4460 sppsvc - ok
20:45:39.0983 4460 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
20:45:39.0985 4460 sppuinotify - ok
20:45:40.0022 4460 [ D6AB7C13FCDD2E4CAC35244D2C172D9A ] sptd C:\Windows\System32\Drivers\sptd.sys
20:45:40.0026 4460 sptd - ok
20:45:40.0050 4460 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
20:45:40.0053 4460 srv - ok
20:45:40.0069 4460 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
20:45:40.0072 4460 srv2 - ok
20:45:40.0099 4460 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
20:45:40.0100 4460 srvnet - ok
20:45:40.0111 4460 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
20:45:40.0115 4460 SSDPSRV - ok
20:45:40.0124 4460 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
20:45:40.0126 4460 SstpSvc - ok
20:45:40.0137 4460 Steam Client Service - ok
20:45:40.0151 4460 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys
20:45:40.0151 4460 stexstor - ok
20:45:40.0197 4460 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
20:45:40.0212 4460 stisvc - ok
20:45:40.0220 4460 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
20:45:40.0220 4460 swenum - ok
20:45:40.0228 4460 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
20:45:40.0235 4460 swprv - ok
20:45:40.0263 4460 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
20:45:40.0278 4460 SysMain - ok
20:45:40.0287 4460 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
20:45:40.0290 4460 TabletInputService - ok
20:45:40.0302 4460 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
20:45:40.0307 4460 TapiSrv - ok
20:45:40.0321 4460 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
20:45:40.0323 4460 TBS - ok
20:45:40.0365 4460 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] Tcpip C:\Windows\system32\drivers\tcpip.sys
20:45:40.0376 4460 Tcpip - ok
20:45:40.0401 4460 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
20:45:40.0408 4460 TCPIP6 - ok
20:45:40.0444 4460 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
20:45:40.0445 4460 tcpipreg - ok
20:45:40.0460 4460 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
20:45:40.0461 4460 TDPIPE - ok
20:45:40.0479 4460 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
20:45:40.0480 4460 TDTCP - ok
20:45:40.0497 4460 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
20:45:40.0498 4460 tdx - ok
20:45:40.0505 4460 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
20:45:40.0505 4460 TermDD - ok
20:45:40.0524 4460 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
20:45:40.0528 4460 TermService - ok
20:45:40.0535 4460 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
20:45:40.0537 4460 Themes - ok
20:45:40.0547 4460 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
20:45:40.0547 4460 THREADORDER - ok
20:45:40.0553 4460 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
20:45:40.0555 4460 TrkWks - ok
20:45:40.0602 4460 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
20:45:40.0603 4460 TrustedInstaller - ok
20:45:40.0621 4460 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
20:45:40.0623 4460 tssecsrv - ok
20:45:40.0647 4460 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
20:45:40.0648 4460 TsUsbFlt - ok
20:45:40.0671 4460 [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
20:45:40.0672 4460 TsUsbGD - ok
20:45:40.0690 4460 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
20:45:40.0691 4460 tunnel - ok
20:45:40.0708 4460 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
20:45:40.0709 4460 uagp35 - ok
20:45:40.0722 4460 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
20:45:40.0724 4460 udfs - ok
20:45:40.0731 4460 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
20:45:40.0734 4460 UI0Detect - ok
20:45:40.0743 4460 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
20:45:40.0744 4460 uliagpkx - ok
20:45:40.0754 4460 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
20:45:40.0754 4460 umbus - ok
20:45:40.0771 4460 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys
20:45:40.0771 4460 UmPass - ok
20:45:40.0787 4460 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
20:45:40.0792 4460 upnphost - ok
20:45:40.0808 4460 [ C2C5672B001A471FCE195CC15910AED9 ] UrlFilter C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys
20:45:40.0809 4460 UrlFilter - ok
20:45:40.0823 4460 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
20:45:40.0824 4460 usbccgp - ok
20:45:40.0842 4460 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
20:45:40.0843 4460 usbcir - ok
20:45:40.0866 4460 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
20:45:40.0866 4460 usbehci - ok
20:45:40.0879 4460 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
20:45:40.0881 4460 usbhub - ok
20:45:40.0892 4460 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
20:45:40.0893 4460 usbohci - ok
20:45:40.0903 4460 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\drivers\usbprint.sys
20:45:40.0903 4460 usbprint - ok
20:45:40.0915 4460 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:45:40.0915 4460 USBSTOR - ok
20:45:40.0925 4460 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
20:45:40.0926 4460 usbuhci - ok
20:45:40.0939 4460 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
20:45:40.0941 4460 UxSms - ok
20:45:40.0948 4460 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
20:45:40.0949 4460 VaultSvc - ok
20:45:40.0982 4460 [ 25B454EBFDEB17A0DA44067DC6887B94 ] VDiskBus C:\Windows\system32\DRIVERS\VDiskBus64.sys
20:45:40.0983 4460 VDiskBus - ok
20:45:40.0994 4460 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
20:45:40.0996 4460 vdrvroot - ok
20:45:41.0019 4460 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
20:45:41.0027 4460 vds - ok
20:45:41.0041 4460 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
20:45:41.0042 4460 vga - ok
20:45:41.0050 4460 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
20:45:41.0051 4460 VgaSave - ok
20:45:41.0069 4460 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
20:45:41.0070 4460 vhdmp - ok
20:45:41.0079 4460 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
20:45:41.0080 4460 viaide - ok
20:45:41.0096 4460 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
20:45:41.0097 4460 volmgr - ok
20:45:41.0108 4460 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
20:45:41.0111 4460 volmgrx - ok
20:45:41.0128 4460 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
20:45:41.0130 4460 volsnap - ok
20:45:41.0150 4460 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
20:45:41.0151 4460 vsmraid - ok
20:45:41.0206 4460 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
20:45:41.0235 4460 VSS - ok
20:45:41.0244 4460 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
20:45:41.0245 4460 vwifibus - ok

20:45:41.0253 4460 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
20:45:41.0258 4460 W32Time - ok
20:45:41.0271 4460 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys
20:45:41.0272 4460 WacomPen - ok
20:45:41.0303 4460 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
20:45:41.0304 4460 WANARP - ok
20:45:41.0308 4460 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
20:45:41.0309 4460 Wanarpv6 - ok
20:45:41.0325 4460 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
20:45:41.0339 4460 wbengine - ok
20:45:41.0348 4460 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
20:45:41.0351 4460 WbioSrvc - ok
20:45:41.0357 4460 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
20:45:41.0360 4460 wcncsvc - ok
20:45:41.0364 4460 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
20:45:41.0365 4460 WcsPlugInService - ok
20:45:41.0382 4460 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys
20:45:41.0382 4460 Wd - ok
20:45:41.0405 4460 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
20:45:41.0408 4460 Wdf01000 - ok
20:45:41.0419 4460 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
20:45:41.0424 4460 WdiServiceHost - ok
20:45:41.0427 4460 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
20:45:41.0428 4460 WdiSystemHost - ok
20:45:41.0443 4460 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
20:45:41.0446 4460 WebClient - ok
20:45:41.0450 4460 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
20:45:41.0453 4460 Wecsvc - ok
20:45:41.0466 4460 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
20:45:41.0467 4460 wercplsupport - ok
20:45:41.0491 4460 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
20:45:41.0493 4460 WerSvc - ok
20:45:41.0499 4460 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
20:45:41.0500 4460 WfpLwf - ok
20:45:41.0509 4460 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
20:45:41.0509 4460 WIMMount - ok
20:45:41.0529 4460 WinDefend - ok
20:45:41.0542 4460 WinHttpAutoProxySvc - ok
20:45:41.0592 4460 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
20:45:41.0597 4460 Winmgmt - ok
20:45:41.0636 4460 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
20:45:41.0653 4460 WinRM - ok
20:45:41.0674 4460 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
20:45:41.0680 4460 Wlansvc - ok
20:45:41.0683 4460 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
20:45:41.0683 4460 WmiAcpi - ok
20:45:41.0694 4460 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
20:45:41.0696 4460 wmiApSrv - ok
20:45:41.0705 4460 WMPNetworkSvc - ok
20:45:41.0716 4460 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
20:45:41.0718 4460 WPCSvc - ok
20:45:41.0730 4460 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
20:45:41.0732 4460 WPDBusEnum - ok
20:45:41.0739 4460 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
20:45:41.0739 4460 ws2ifsl - ok
20:45:41.0755 4460 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
20:45:41.0758 4460 wscsvc - ok
20:45:41.0760 4460 WSearch - ok
20:45:41.0834 4460 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
20:45:41.0869 4460 wuauserv - ok
20:45:41.0899 4460 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
20:45:41.0900 4460 WudfPf - ok
20:45:41.0919 4460 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
20:45:41.0920 4460 WUDFRd - ok
20:45:41.0950 4460 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
20:45:41.0954 4460 wudfsvc - ok
20:45:41.0988 4460 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\Windows\System32\wwansvc.dll
20:45:41.0997 4460 WwanSvc - ok
20:45:42.0051 4460 [ 4A5CE13408945E525503B5F73D29B9C5 ] xnacc C:\Windows\system32\DRIVERS\xnacc.sys
20:45:42.0062 4460 xnacc - ok
20:45:42.0082 4460 ================ Scan global ===============================
20:45:42.0109 4460 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
20:45:42.0141 4460 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
20:45:42.0157 4460 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
20:45:42.0173 4460 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
20:45:42.0192 4460 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
20:45:42.0195 4460 [Global] - ok
20:45:42.0195 4460 ================ Scan MBR ==================================
20:45:42.0204 4460 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
20:45:42.0459 4460 \Device\Harddisk0\DR0 - ok
20:45:42.0459 4460 ================ Scan VBR ==================================
20:45:42.0461 4460 [ 04CC8F8A7931C0252D71C56EE5FB04C4 ] \Device\Harddisk0\DR0\Partition1
20:45:42.0462 4460 \Device\Harddisk0\DR0\Partition1 - ok
20:45:42.0477 4460 [ B20519F68023D05A2A011D10A10F62C2 ] \Device\Harddisk0\DR0\Partition2
20:45:42.0478 4460 \Device\Harddisk0\DR0\Partition2 - ok
20:45:42.0497 4460 [ 7285E64AECF55014CFE702018244F3E0 ] \Device\Harddisk0\DR0\Partition3
20:45:42.0500 4460 \Device\Harddisk0\DR0\Partition3 - ok
20:45:42.0501 4460 ============================================================
20:45:42.0501 4460 Scan finished
20:45:42.0501 4460 ============================================================
20:45:42.0556 1208 Detected object count: 0
20:45:42.0556 1208 Actual detected object count: 0
20:45:51.0953 5348 Deinitialize success

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

ComboFix 13-07-11.01 - Lukáš 11.07.2013 17:21:59.1.4 - x64a
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.8110.6401 [GMT 2:00]
Spuštěný z: c:\users\LukßÜ\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\PFRO.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-06-11 do 2013-07-11 )))))))))))))))))))))))))))))))
.
.
2013-07-09 19:02 . 2013-07-09 19:02 -------- d-----w- c:\users\Lukáš\AppData\Local\Diagnostics
2013-07-09 14:51 . 2013-07-09 14:51 -------- d-----w- c:\windows\ERUNT
2013-07-08 16:49 . 2013-07-08 16:49 -------- d-----w- c:\users\Default\AppData\Roaming\TuneUp Software
2013-07-07 18:56 . 2013-07-07 18:56 388096 ----a-r- c:\users\Lukáš\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-07-07 18:56 . 2013-07-07 18:56 -------- d-----w- c:\program files (x86)\Trend Micro
2013-06-26 15:50 . 2013-06-26 15:50 -------- d-----w- c:\users\Lukáš\AppData\Roaming\AVG2013
2013-06-26 15:49 . 2013-06-26 15:49 -------- d-----w- c:\users\Lukáš\AppData\Roaming\TuneUp Software
2013-06-26 15:49 . 2013-06-26 15:50 -------- d-----w- c:\programdata\AVG2013
2013-06-26 15:49 . 2013-06-26 15:49 -------- d-----w- C:\$AVG
2013-06-26 15:49 . 2013-06-26 15:49 -------- d-----w- c:\program files (x86)\AVG
2013-06-26 15:43 . 2013-06-26 16:11 -------- d-----w- c:\users\Lukáš\AppData\Local\Avg2013
2013-06-26 15:42 . 2013-06-26 15:42 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-06-26 15:41 . 2013-06-26 15:42 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2013-06-25 20:43 . 2013-06-25 20:44 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird
2013-06-22 17:24 . 2013-06-22 17:24 -------- d-----w- c:\users\Luk?
2013-06-22 17:02 . 2013-06-26 16:47 -------- d-----w- c:\users\Lukáš\AppData\Roaming\Skype
2013-06-22 17:01 . 2013-06-22 17:02 -------- d-----r- c:\program files (x86)\Skype
2013-06-22 17:01 . 2013-06-22 17:01 -------- d-----w- c:\program files (x86)\Common Files\Skype
2013-06-22 17:01 . 2013-06-22 17:02 -------- d-----w- c:\programdata\Skype
2013-06-22 16:49 . 2013-06-22 16:49 -------- d-----w- c:\programdata\EA Core
2013-06-22 04:39 . 2013-05-22 16:49 32600 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2013-06-22 04:39 . 2013-05-22 16:49 17720 ----a-w- c:\windows\system32\drivers\SmartDefragDriver.sys
2013-06-12 09:03 . 2013-06-08 14:08 1365504 ----a-w- c:\windows\system32\urlmon.dll
2013-06-12 09:03 . 2013-06-08 14:08 279040 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2013-06-12 09:03 . 2013-06-08 12:28 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-06-12 09:03 . 2013-06-08 11:41 218112 ----a-w- c:\program files (x86)\Internet Explorer\sqmapi.dll
2013-06-12 09:03 . 2013-06-08 11:13 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-06-12 09:03 . 2013-06-08 14:06 526336 ----a-w- c:\windows\system32\ieui.dll
2013-06-12 09:03 . 2013-06-08 14:06 2648064 ----a-w- c:\windows\system32\iertutil.dll
2013-06-12 09:03 . 2013-06-08 14:06 15404544 ----a-w- c:\windows\system32\ieframe.dll
2013-06-12 09:03 . 2013-06-08 14:07 19233792 ----a-w- c:\windows\system32\mshtml.dll
2013-06-12 09:01 . 2013-05-10 05:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2013-06-12 09:01 . 2013-05-10 03:20 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2013-06-12 09:01 . 2013-05-08 06:39 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-11 15:27 . 2013-02-19 19:28 1048576 ----a-w- c:\windows\PE_Rom.dll
2013-07-07 18:56 . 2013-07-07 18:56 388096 ----a-r- c:\users\Lukáš\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-07-07 18:56 . 2013-07-07 18:56 388096 ----a-r- c:\users\Lukáš\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-06-12 09:27 . 2013-02-19 21:07 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-12 09:27 . 2013-02-19 21:07 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-12 09:05 . 2013-02-19 20:25 75825640 ----a-w- c:\windows\system32\MRT.exe
2013-04-21 15:38 . 2013-04-21 15:38 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-04-21 15:38 . 2013-04-21 15:38 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-04-21 15:38 . 2013-04-21 15:38 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-04-21 15:38 . 2013-04-21 15:38 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-04-21 15:38 . 2013-04-21 15:38 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-04-21 15:38 . 2013-04-21 15:38 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-04-21 15:38 . 2013-04-21 15:38 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-04-21 15:38 . 2013-04-21 15:38 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-04-21 15:38 . 2013-04-21 15:38 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-04-21 15:38 . 2013-04-21 15:38 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-04-21 15:38 . 2013-04-21 15:38 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-04-21 15:38 . 2013-04-21 15:38 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-04-21 15:38 . 2013-04-21 15:38 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-04-21 15:38 . 2013-04-21 15:38 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-04-21 15:38 . 2013-04-21 15:38 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-04-21 15:38 . 2013-04-21 15:38 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-04-21 15:38 . 2013-04-21 15:38 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-04-21 15:38 . 2013-04-21 15:38 81408 ----a-w- c:\windows\system32\icardie.dll
2013-04-21 15:38 . 2013-04-21 15:38 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-04-21 15:38 . 2013-04-21 15:38 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-04-21 15:38 . 2013-04-21 15:38 441856 ----a-w- c:\windows\system32\html.iec
2013-04-21 15:38 . 2013-04-21 15:38 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-04-21 15:38 . 2013-04-21 15:38 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-04-21 15:38 . 2013-04-21 15:38 235008 ----a-w- c:\windows\system32\url.dll
2013-04-21 15:38 . 2013-04-21 15:38 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-04-21 15:38 . 2013-04-21 15:38 216064 ----a-w- c:\windows\system32\msls31.dll
2013-04-21 15:38 . 2013-04-21 15:38 197120 ----a-w- c:\windows\system32\msrating.dll
2013-04-21 15:38 . 2013-04-21 15:38 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-04-21 15:38 . 2013-04-21 15:38 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-04-21 15:38 . 2013-04-21 15:38 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-04-21 15:38 . 2013-04-21 15:38 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-04-21 15:38 . 2013-04-21 15:38 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-04-21 15:38 . 2013-04-21 15:38 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-04-21 15:38 . 2013-04-21 15:38 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-04-21 15:38 . 2013-04-21 15:38 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-04-21 15:38 . 2013-04-21 15:38 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-04-21 15:38 . 2013-04-21 15:38 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-04-21 15:38 . 2013-04-21 15:38 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-04-21 15:38 . 2013-04-21 15:38 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-04-21 15:38 . 2013-04-21 15:38 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-04-21 15:38 . 2013-04-21 15:38 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-04-21 15:38 . 2013-04-21 15:38 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-04-21 15:38 . 2013-04-21 15:38 149504 ----a-w- c:\windows\system32\occache.dll
2013-04-21 15:38 . 2013-04-21 15:38 144896 ----a-w- c:\windows\system32\wextract.exe
2013-04-21 15:38 . 2013-04-21 15:38 13824 ----a-w- c:\windows\system32\mshta.exe
2013-04-21 15:38 . 2013-04-21 15:38 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-04-21 15:38 . 2013-04-21 15:38 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-04-21 15:38 . 2013-04-21 15:38 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-04-21 15:38 . 2013-04-21 15:38 102912 ----a-w- c:\windows\system32\inseng.dll
2013-04-17 18:20 . 2013-02-20 21:30 26432 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2013-04-13 05:49 . 2013-05-15 03:05 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 03:05 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 03:05 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 03:05 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 03:05 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 03:05 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 6"="c:\program files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" [2013-04-18 491840]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ASUS WiFi GO! FileTransfer Execute"="c:\program files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFile\WiFileTransfer.exe" [2012-07-12 1384608]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2013-04-28 4408368]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu;c:\hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe;c:\hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RegFilter;RegFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 UrlFilter;UrlFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [x]
R4 FileMonitor;FileMonitor;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys;c:\windows\SYSNATIVE\Drivers\SmartDefragDriver.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys;SysWow64\drivers\AsUpIO.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 ndisrd;WinpkFilter LightWeight Filter;c:\windows\system32\DRIVERS\ndisrd.sys;c:\windows\SYSNATIVE\DRIVERS\ndisrd.sys [x]
S1 VDiskBus;ASUS Disk Unlocker;c:\windows\system32\DRIVERS\VDiskBus64.sys;c:\windows\SYSNATIVE\DRIVERS\VDiskBus64.sys [x]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe;c:\program files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [x]
S2 ASDiskUnlocker;ASDiskUnlocker;c:\program files (x86)\ASUSTek Computer Inc\Disk Unlocker\ASPFSVS64.exe;c:\program files (x86)\ASUSTek Computer Inc\Disk Unlocker\ASPFSVS64.exe [x]
S2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe;c:\program files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [x]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [x]
S2 AsusFanControlService;AsusFanControlService;c:\program files (x86)\ASUS\AsusFanControlService\1.01.10\AsusFanControlService.exe;c:\program files (x86)\ASUS\AsusFanControlService\1.01.10\AsusFanControlService.exe [x]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [x]
S2 IMFservice;IMF Service;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [x]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
S2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
S3 AiChargerPlus;AiChargerPlus;SysWow64\drivers\AiChargerPlus.sys;SysWow64\drivers\AiChargerPlus.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 ASFLTDrv.sys;ASFLTDrv.sys;c:\program files (x86)\ASUSTek Computer Inc\Disk Unlocker\ASFLTDrv64.sys;c:\program files (x86)\ASUSTek Computer Inc\Disk Unlocker\ASFLTDrv64.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 ASUSFILTER;ASUSFILTER;SysWow64\drivers\ASUSFILTER.sys;SysWow64\drivers\ASUSFILTER.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - ASFLTDRV.SYS
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2013-07-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-19 09:27]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2012-08-07 6827664]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\vrw3sjo0.default-1199145335939\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?FORM=UP97DF& ... =062213&q=
FF - ExtSQL: 2013-05-21 10:03; ascsurfingprotection@iobit.com; c:\users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\vrw3sjo0.default-1199145335939\extensions\ascsurfingprotection@iobit.com
FF - ExtSQL: 2013-06-22 19:02; {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}; c:\program files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10d.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10d.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\ASUS\AI Suite II\AsRoutineController.exe
c:\program files (x86)\ASUS\AI Suite II\EasyUpdate\EzUpdt.exe
c:\program files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelpEntry.exe
c:\program files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
c:\program files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
c:\program files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
c:\program files (x86)\ASUS\AI Suite II\AI Suite II.exe
c:\program files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
.
**************************************************************************
.
Celkový čas: 2013-07-11 17:28:37 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-07-11 15:28
.
Před spuštěním: Volných bajtů: 303 751 606 272
Po spuštění: Volných bajtů: 303 588 544 512
.
- - End Of File - - 215BCC7E8B6E112CF0728F0EA3582D9F
A36C5E4F47E84449FF07ED3517B43A31

Nedal si log adwcleaneru po výmazu.

SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}
odinstaluj!

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
c:\windows\PE_Rom.dll

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

Nebo na:
http://www.virscan.org/

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.