PC-HELP.CZ

ahoj, prosím o kontrolu logu, na PC nejde spustit avast :/

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:41:29, on 15.7.2013
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19443)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\PixArt\Pac7302\Monitor.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\Taskmgr.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: IMPI Helper - {17E113E6-CD0E-4045-B154-65F0E57959EF} - C:\Program Files\IMPI\Extension32.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\Windows\PixArt\PAC7302\Monitor.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [ArcSoft Connection Service] c:\program files\common files\arcsoft\connection service\bin\acdaemon.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
O8 - Extra context menu item: Free YouTube Download - C:\Users\HAL3000\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\HAL3000\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: CWS_MySQL_3306 - Unknown owner - C:\ComplexWebServer\mysql\bin\mysqld.exe
O23 - Service: DokanMounter - Unknown owner - C:\Program Files\Dokan\DokanLibrary\mounter.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate1ca5807d0ac6c41) (gupdate1ca5807d0ac6c41) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: IMPI Updater - Unknown owner - C:\Program Files\IMPI\ExtensionUpdaterService.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 7620 bytes

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2013.07.15.04

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 8.0.6001.19443
HAL3000 :: HAL3000-PC [administrátor]

15.7.2013 17:52:35
mbam-log-2013-07-15 (17-52-35).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 242784
Uplynulý čas: 7 minut, 30 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

# AdwCleaner v2.305 - Log vytvooen 15/07/2013 v 18:01:03
# Aktualizováno 11/07/2013 Xplode
# Operaení systém : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Uživatel : HAL3000 - HAL3000-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\HAL3000\Downloads\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files\Common Files\DVDVideoSoft\TB
Složka Nalezeno : C:\Users\HAL3000\AppData\Roaming\dvdvideosoftiehelpers
Složka Nalezeno : C:\Users\HAL3000\AppData\Roaming\Mozilla\Firefox\Profiles\pnfksmr3.default\extensions\{ACAA314B-EEBA-48E4-AD47-84E31C44796C}
Složka Nalezeno : C:\Users\HAL3000\AppData\Roaming\Mozilla\Firefox\Profiles\pnfksmr3.default\extensions\staged

***** [Registry] *****

Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Nalezeno : HKCU\Software\YahooPartnerToolbar
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Klíe Nalezeno : HKLM\Software\ICQ\ICQToolbar
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Nalezeno : HKLM\SOFTWARE\Software

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v8.0.6001.19443

[OK] Registry jsou eisté.

-\\ Mozilla Firefox v12.0 (cs)

Soubor : C:\Users\HAL3000\AppData\Roaming\Mozilla\Firefox\Profiles\pnfksmr3.default\prefs.js

Nalezeno : user_pref("icqtoolbar.allowSendURL", false);
Nalezeno : user_pref("icqtoolbar.engineVerified", false);
Nalezeno : user_pref("icqtoolbar.hiddenElements", "itb_options");
Nalezeno : user_pref("icqtoolbar.history", "winnuke%20download||z%C3%A1klady%20hackingu||hackov%C3%A1n%C3%AD%20[...]
Nalezeno : user_pref("icqtoolbar.installTime", "1282806496");
Nalezeno : user_pref("icqtoolbar.installsource", "1");
Nalezeno : user_pref("icqtoolbar.newtab_state", "1");
Nalezeno : user_pref("icqtoolbar.numberOfSearches", 0);
Nalezeno : user_pref("icqtoolbar.previousFFVersion", "3.6.13");
Nalezeno : user_pref("icqtoolbar.skip_default_search", "no");
Nalezeno : user_pref("icqtoolbar.suggestions", false);
Nalezeno : user_pref("icqtoolbar.uniqueID", "129797135412979717361298306259464");
Nalezeno : user_pref("icqtoolbar.usageStatstTimestamp", 1313671944);
Nalezeno : user_pref("icqtoolbar.version", "1.1.6");
Nalezeno : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Nalezeno : user_pref("icqtoolbar.xmlLanguage", "cs");

-\\ Google Chrome v28.0.1500.72

Soubor : C:\Users\HAL3000\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R3].txt - [4367 octets] - [15/07/2013 18:01:03]

########## EOF - C:\AdwCleaner[R3].txt - [4427 octets] ##########

V adw nech vše smazat a dej sem pak log

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

# AdwCleaner v2.305 - Log vytvooen 15/07/2013 v 18:10:37
# Aktualizováno 11/07/2013 Xplode
# Operaení systém : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Uživatel : HAL3000 - HAL3000-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\HAL3000\Downloads\adwcleaner.exe
# Volba [Vymazat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Vymazáno : C:\Program Files\Common Files\DVDVideoSoft\TB
Složka Vymazáno : C:\Users\HAL3000\AppData\Roaming\dvdvideosoftiehelpers
Složka Vymazáno : C:\Users\HAL3000\AppData\Roaming\Mozilla\Firefox\Profiles\pnfksmr3.default\extensions\{ACAA314B-EEBA-48E4-AD47-84E31C44796C}
Složka Vymazáno : C:\Users\HAL3000\AppData\Roaming\Mozilla\Firefox\Profiles\pnfksmr3.default\extensions\staged

***** [Registry] *****

Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Vymazáno : HKCU\Software\YahooPartnerToolbar
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Klíe Vymazáno : HKLM\Software\ICQ\ICQToolbar
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Vymazáno : HKLM\SOFTWARE\Software

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v8.0.6001.19443

[OK] Registry jsou eisté.

-\\ Mozilla Firefox v12.0 (cs)

Soubor : C:\Users\HAL3000\AppData\Roaming\Mozilla\Firefox\Profiles\pnfksmr3.default\prefs.js

Vymazáno : user_pref("icqtoolbar.allowSendURL", false);
Vymazáno : user_pref("icqtoolbar.engineVerified", false);
Vymazáno : user_pref("icqtoolbar.hiddenElements", "itb_options");
Vymazáno : user_pref("icqtoolbar.history", "winnuke%20download||z%C3%A1klady%20hackingu||hackov%C3%A1n%C3%AD%20[...]
Vymazáno : user_pref("icqtoolbar.installTime", "1282806496");
Vymazáno : user_pref("icqtoolbar.installsource", "1");
Vymazáno : user_pref("icqtoolbar.newtab_state", "1");
Vymazáno : user_pref("icqtoolbar.numberOfSearches", 0);
Vymazáno : user_pref("icqtoolbar.previousFFVersion", "3.6.13");
Vymazáno : user_pref("icqtoolbar.skip_default_search", "no");
Vymazáno : user_pref("icqtoolbar.suggestions", false);
Vymazáno : user_pref("icqtoolbar.uniqueID", "129797135412979717361298306259464");
Vymazáno : user_pref("icqtoolbar.usageStatstTimestamp", 1313671944);
Vymazáno : user_pref("icqtoolbar.version", "1.1.6");
Vymazáno : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Vymazáno : user_pref("icqtoolbar.xmlLanguage", "cs");

-\\ Google Chrome v28.0.1500.72

Soubor : C:\Users\HAL3000\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R3].txt - [4496 octets] - [15/07/2013 18:01:03]
AdwCleaner[R4].txt - [4556 octets] - [15/07/2013 18:10:17]
AdwCleaner[S3].txt - [4485 octets] - [15/07/2013 18:10:37]

########## EOF - C:\AdwCleaner[S3].txt - [4545 octets] ##########

RogueKiller V8.6.2 [Jul 5 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Spuštěno v : Normální režim
Uživatel : HAL3000 [Práva správce]
Mód : Kontrola -- Datum : 07/15/2013 18:22:13
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 4 ¤¤¤
[HJ DESK] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> NALEZENO
[HJ DESK] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤
[Address] IRP[IRP_MJ_CREATE] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x864231F8)
[Address] IRP[IRP_MJ_CLOSE] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x864231F8)
[Address] IRP[IRP_MJ_DEVICE_CONTROL] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x864231F8)
[Address] IRP[IRP_MJ_INTERNAL_DEVICE_CONTROL] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x864231F8)
[Address] IRP[IRP_MJ_POWER] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x864231F8)
[Address] IRP[IRP_MJ_SYSTEM_CONTROL] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x864231F8)
[Address] IRP[IRP_MJ_PNP] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x864231F8)

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: SAMSUNG HD502IJ ATA Device +++++
--- User ---
[MBR] 9acbb4ba2b2c27a12394e4e32e8160d6
[BSP] 99015492a3552c0da59616d1fc5525ca : Windows Vista MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 476938 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_S_07152013_182213.txt >>

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.0.9 (07.12.2013:2)
OS: Windows Vista (TM) Home Premium x64
Ran by HAL3000 on po 15.07.2013 at 18:27:34,74
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\utorrentbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\HAL3000\appdata\locallow\utorrentbar"
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{114B1898-17A0-4600-BD8C-9D5762BA9362}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{11A8F0D3-233F-4949-9431-D713ECB3482A}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{1B2A3FD9-C2BC-4105-B5FC-08EAD0472408}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{2065403C-C8DB-4632-8517-F03C335A7694}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{247BB57E-3B65-4706-B76F-36674F1DC84E}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{24A66C0A-EF06-4A65-98C4-18CE338DA226}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{2A33E41B-1554-4B0F-A5EB-921DCDD5972B}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{2B931849-0597-4AEA-9375-6CF5262C6C00}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{2BE7FC99-D851-4A0A-83B7-E5DF16953083}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{30E68B53-FEBD-484C-9D24-85A6D0D8C9BD}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{371A3254-CD88-4AE6-BA06-61A61B688557}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{4883E3DD-E352-4C38-B34B-B6F8110AB661}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{52EA5F0E-4BA0-44E2-A372-DE1DC833FB25}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{54A481C4-8883-4DBE-963C-5352045B6A20}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{5B28435A-EEF0-4307-87A4-5FB6F801A881}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{63E09FD5-CD03-4FAF-8EC9-A8FA265B23F7}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{7E396F86-615E-4571-BE88-8736DDDF301C}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{8E3372D5-8176-4D06-9D58-C085F247830D}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{A6C478EC-C25B-4D6C-A87C-EED539DF24E2}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{ACD14289-0D7B-4425-BCCF-9F4F57611063}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{CBC0951C-7CBA-47D4-A5F7-11A89AF841D7}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{D3DC0D77-A3F2-4BCF-895C-750581B06C6D}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{D92D40FC-A504-42F5-9120-7567A977E836}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{E78EFCA8-6798-4FD7-AEA9-6DEF451D003E}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{ED1D3F50-0E65-4390-95B8-D288EC68B32E}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{FA1902D5-1FD0-4451-8990-45573AC5ED77}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{FB01ECA5-DA95-4937-B240-85D01E85C07E}
Successfully deleted: [Empty Folder] C:\Users\HAL3000\appdata\local\{FEE4585C-470B-44E2-B27C-B56265712286}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 15.07.2013 at 18:30:04,84
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "

- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání- Finished "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

RogueKiller V8.6.2 [Jul 5 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Spuštěno v : Normální režim
Uživatel : HAL3000 [Práva správce]
Mód : Odebrat -- Datum : 07/15/2013 20:29:31
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 4 ¤¤¤
[HJ DESK] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> NAHRAZENO (0)
[HJ DESK] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> NAHRAZENO (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤
[Address] IRP[IRP_MJ_CREATE] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x864231F8)
[Address] IRP[IRP_MJ_CLOSE] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x864231F8)
[Address] IRP[IRP_MJ_DEVICE_CONTROL] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x864231F8)
[Address] IRP[IRP_MJ_INTERNAL_DEVICE_CONTROL] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x864231F8)
[Address] IRP[IRP_MJ_POWER] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x864231F8)
[Address] IRP[IRP_MJ_SYSTEM_CONTROL] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x864231F8)
[Address] IRP[IRP_MJ_PNP] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x864231F8)

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: SAMSUNG HD502IJ ATA Device +++++
--- User ---
[MBR] 9acbb4ba2b2c27a12394e4e32e8160d6
[BSP] 99015492a3552c0da59616d1fc5525ca : Windows Vista MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 476938 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_D_07152013_202931.txt >>
RKreport[0]_S_07152013_182213.txt

20:35:58.0349 2964 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
20:35:59.0437 2964 ============================================================
20:35:59.0437 2964 Current date / time: 2013/07/15 20:35:59.0437
20:35:59.0437 2964 SystemInfo:
20:35:59.0437 2964
20:35:59.0437 2964 OS Version: 6.0.6002 ServicePack: 2.0
20:35:59.0437 2964 Product type: Workstation
20:35:59.0437 2964 ComputerName: HAL3000-PC
20:35:59.0437 2964 UserName: HAL3000
20:35:59.0437 2964 Windows directory: C:\Windows
20:35:59.0437 2964 System windows directory: C:\Windows
20:35:59.0437 2964 Processor architecture: Intel x86
20:35:59.0437 2964 Number of processors: 2
20:35:59.0437 2964 Page size: 0x1000
20:35:59.0437 2964 Boot type: Normal boot
20:35:59.0437 2964 ============================================================
20:36:00.0407 2964 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
20:36:00.0451 2964 ============================================================
20:36:00.0451 2964 \Device\Harddisk0\DR0:
20:36:00.0451 2964 MBR partitions:
20:36:00.0451 2964 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x3A385000
20:36:00.0451 2964 ============================================================
20:36:00.0528 2964 C: <-> \Device\Harddisk0\DR0\Partition1
20:36:00.0528 2964 ============================================================
20:36:00.0528 2964 Initialize success
20:36:00.0528 2964 ============================================================
20:36:02.0504 1816 ============================================================
20:36:02.0504 1816 Scan started
20:36:02.0504 1816 Mode: Manual;
20:36:02.0504 1816 ============================================================
20:36:03.0325 1816 ================ Scan system memory ========================
20:36:03.0325 1816 System memory - ok
20:36:03.0325 1816 ================ Scan services =============================
20:36:03.0461 1816 [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
20:36:03.0479 1816 ACDaemon - ok
20:36:03.0685 1816 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys
20:36:03.0686 1816 ACPI - ok
20:36:03.0727 1816 [ 2EDC5BBAC6C651ECE337BDE8ED97C9FB ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
20:36:03.0730 1816 adp94xx - ok
20:36:03.0758 1816 [ B84088CA3CDCA97DA44A984C6CE1CCAD ] adpahci C:\Windows\system32\drivers\adpahci.sys
20:36:03.0760 1816 adpahci - ok
20:36:03.0798 1816 [ 7880C67BCCC27C86FD05AA2AFB5EA469 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
20:36:03.0799 1816 adpu160m - ok
20:36:03.0860 1816 [ 9AE713F8E30EFC2ABCCD84904333DF4D ] adpu320 C:\Windows\system32\drivers\adpu320.sys
20:36:03.0861 1816 adpu320 - ok
20:36:03.0910 1816 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
20:36:03.0910 1816 AeLookupSvc - ok
20:36:03.0953 1816 [ 3911B972B55FEA0478476B2E777B29FA ] AFD C:\Windows\system32\drivers\afd.sys
20:36:03.0954 1816 AFD - ok
20:36:03.0982 1816 [ EF23439CDD587F64C2C1B8825CEAD7D8 ] agp440 C:\Windows\system32\drivers\agp440.sys
20:36:03.0983 1816 agp440 - ok
20:36:04.0029 1816 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
20:36:04.0030 1816 aic78xx - ok
20:36:04.0104 1816 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
20:36:04.0128 1816 ALG - ok
20:36:04.0162 1816 [ 90395B64600EBB4552E26E178C94B2E4 ] aliide C:\Windows\system32\drivers\aliide.sys
20:36:04.0163 1816 aliide - ok
20:36:04.0174 1816 [ 2B13E304C9DFDFA5EB582F6A149FA2C7 ] amdagp C:\Windows\system32\drivers\amdagp.sys
20:36:04.0175 1816 amdagp - ok
20:36:04.0185 1816 [ 0577DF1D323FE75A739C787893D300EA ] amdide C:\Windows\system32\drivers\amdide.sys
20:36:04.0186 1816 amdide - ok
20:36:04.0201 1816 [ DC487885BCEF9F28EECE6FAC0E5DDFC5 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
20:36:04.0202 1816 AmdK7 - ok
20:36:04.0206 1816 [ 0CA0071DA4315B00FC1328CA86B425DA ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
20:36:04.0207 1816 AmdK8 - ok
20:36:04.0236 1816 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
20:36:04.0238 1816 Appinfo - ok
20:36:04.0264 1816 [ 5F673180268BB1FDB69C99B6619FE379 ] arc C:\Windows\system32\drivers\arc.sys
20:36:04.0265 1816 arc - ok
20:36:04.0271 1816 [ 957F7540B5E7F602E44648C7DE5A1C05 ] arcsas C:\Windows\system32\drivers\arcsas.sys
20:36:04.0272 1816 arcsas - ok
20:36:04.0390 1816 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
20:36:04.0391 1816 aspnet_state - ok
20:36:04.0437 1816 [ 4AF5F360BA1E8794D32B366E45A64A0A ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
20:36:04.0438 1816 aswFsBlk - ok
20:36:04.0472 1816 [ 1F7094D4268D46F718C51286DC189791 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
20:36:04.0473 1816 aswMonFlt - ok
20:36:04.0512 1816 [ 7B43265F92257A21CBFD88E7A651044C ] aswRdr C:\Windows\system32\drivers\aswRdr.sys
20:36:04.0513 1816 aswRdr - ok
20:36:04.0536 1816 [ B680134BA1813B78B47FDD1DFF223CA5 ] aswRvrt C:\Windows\system32\drivers\aswRvrt.sys
20:36:04.0538 1816 aswRvrt - ok
20:36:04.0561 1816 [ CCD565A8A72AF7D45F9A242013870926 ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
20:36:04.0566 1816 aswSnx - ok
20:36:04.0611 1816 [ 937300BC7C4CDF7576BCCE44E19BBB9D ] aswSP C:\Windows\system32\drivers\aswSP.sys
20:36:04.0613 1816 aswSP - ok
20:36:04.0637 1816 [ 1F71F170D90E42EFDE9633D81D5E12DC ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
20:36:04.0638 1816 aswTdi - ok
20:36:04.0677 1816 [ 8CFAA2B965773A653F48F1207A9CB9C4 ] aswVmm C:\Windows\system32\drivers\aswVmm.sys
20:36:04.0680 1816 aswVmm - ok
20:36:04.0718 1816 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
20:36:04.0718 1816 AsyncMac - ok
20:36:04.0763 1816 [ 1F05B78AB91C9075565A9D8A4B880BC4 ] atapi C:\Windows\system32\drivers\atapi.sys
20:36:04.0763 1816 atapi - ok
20:36:04.0839 1816 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
20:36:04.0844 1816 AudioEndpointBuilder - ok
20:36:04.0850 1816 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll
20:36:04.0852 1816 Audiosrv - ok
20:36:04.0882 1816 [ 28D6701C710AD7BA3CB95E75F8F1A9AA ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
20:36:04.0883 1816 avast! Antivirus - ok
20:36:04.0927 1816 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
20:36:04.0928 1816 Beep - ok
20:36:05.0048 1816 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll
20:36:05.0080 1816 BFE - ok
20:36:05.0131 1816 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\System32\qmgr.dll
20:36:05.0159 1816 BITS - ok
20:36:05.0164 1816 blbdrive - ok
20:36:05.0197 1816 [ 35F376253F687BDE63976CCB3F2108CA ] bowser C:\Windows\system32\DRIVERS\bowser.sys
20:36:05.0197 1816 bowser - ok
20:36:05.0230 1816 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
20:36:05.0231 1816 BrFiltLo - ok
20:36:05.0240 1816 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
20:36:05.0241 1816 BrFiltUp - ok
20:36:05.0265 1816 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
20:36:05.0297 1816 Browser - ok
20:36:05.0322 1816 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
20:36:05.0323 1816 Brserid - ok
20:36:05.0334 1816 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
20:36:05.0335 1816 BrSerWdm - ok
20:36:05.0350 1816 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
20:36:05.0351 1816 BrUsbMdm - ok
20:36:05.0356 1816 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
20:36:05.0357 1816 BrUsbSer - ok
20:36:05.0365 1816 [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
20:36:05.0366 1816 BTHMODEM - ok
20:36:05.0374 1816 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
20:36:05.0375 1816 cdfs - ok
20:36:05.0396 1816 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
20:36:05.0397 1816 cdrom - ok
20:36:05.0408 1816 CEDRIVER55 - ok
20:36:05.0444 1816 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll
20:36:05.0445 1816 CertPropSvc - ok
20:36:05.0467 1816 [ DA8E0AFC7BAA226C538EF53AC2F90897 ] circlass C:\Windows\system32\drivers\circlass.sys
20:36:05.0468 1816 circlass - ok
20:36:05.0492 1816 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys
20:36:05.0494 1816 CLFS - ok
20:36:05.0535 1816 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:36:05.0537 1816 clr_optimization_v2.0.50727_32 - ok
20:36:05.0581 1816 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:36:05.0583 1816 clr_optimization_v4.0.30319_32 - ok
20:36:05.0608 1816 [ 45201046C776FFDAF3FC8A0029C581C8 ] cmdide C:\Windows\system32\drivers\cmdide.sys
20:36:05.0609 1816 cmdide - ok
20:36:05.0617 1816 [ 82B8C91D327CFECF76CB58716F7D4997 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
20:36:05.0618 1816 Compbatt - ok
20:36:05.0623 1816 COMSysApp - ok
20:36:05.0666 1816 [ C2EB4539A4F6AB6EDD01BDC191619975 ] cpuz135 C:\Windows\system32\drivers\cpuz135_x32.sys
20:36:05.0667 1816 cpuz135 - ok
20:36:05.0675 1816 [ 2A213AE086BBEC5E937553C7D9A2B22C ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
20:36:05.0676 1816 crcdisk - ok
20:36:05.0680 1816 [ 22A7F883508176489F559EE745B5BF5D ] Crusoe C:\Windows\system32\drivers\crusoe.sys
20:36:05.0681 1816 Crusoe - ok
20:36:05.0714 1816 [ 3EDE4C1F9672C972479201544969ADCB ] CryptSvc C:\Windows\system32\cryptsvc.dll
20:36:05.0716 1816 CryptSvc - ok
20:36:05.0748 1816 CWS_MySQL_3306 - ok
20:36:05.0801 1816 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll
20:36:05.0811 1816 DcomLaunch - ok
20:36:05.0855 1816 [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC C:\Windows\system32\Drivers\dfsc.sys
20:36:05.0856 1816 DfsC - ok
20:36:06.0432 1816 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe
20:36:06.0554 1816 DFSR - ok
20:36:06.0601 1816 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll
20:36:06.0604 1816 Dhcp - ok
20:36:06.0637 1816 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys
20:36:06.0638 1816 disk - ok
20:36:06.0667 1816 [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache C:\Windows\System32\dnsrslvr.dll
20:36:06.0670 1816 Dnscache - ok
20:36:06.0704 1816 [ 99BA7D125927C2B3DFE7373673C29DA4 ] Dokan C:\Windows\system32\drivers\dokan.sys
20:36:06.0705 1816 Dokan - ok
20:36:06.0816 1816 [ 7F5C325B16A5A237F2DF6932BF853621 ] DokanMounter C:\Program Files\Dokan\DokanLibrary\mounter.exe
20:36:06.0855 1816 DokanMounter - ok
20:36:06.0876 1816 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll
20:36:06.0879 1816 dot3svc - ok
20:36:06.0937 1816 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
20:36:06.0960 1816 DPS - ok
20:36:06.0986 1816 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
20:36:06.0986 1816 drmkaud - ok
20:36:07.0111 1816 [ 5DE0FAEC9E5D1AAE74F8568897891A01 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
20:36:07.0114 1816 DXGKrnl - ok
20:36:07.0190 1816 [ F88FB26547FD2CE6D0A5AF2985892C48 ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
20:36:07.0191 1816 E1G60 - ok
20:36:07.0235 1816 EagleNT - ok
20:36:07.0241 1816 EagleXNt - ok
20:36:07.0261 1816 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
20:36:07.0263 1816 EapHost - ok
20:36:07.0289 1816 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys
20:36:07.0290 1816 Ecache - ok
20:36:07.0491 1816 [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
20:36:07.0496 1816 ehRecvr - ok
20:36:07.0520 1816 [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched C:\Windows\ehome\ehsched.exe
20:36:07.0523 1816 ehSched - ok
20:36:07.0526 1816 [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart C:\Windows\ehome\ehstart.dll
20:36:07.0527 1816 ehstart - ok
20:36:07.0552 1816 [ E8F3F21A71720C84BCF423B80028359F ] elxstor C:\Windows\system32\drivers\elxstor.sys
20:36:07.0554 1816 elxstor - ok
20:36:07.0590 1816 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
20:36:07.0599 1816 EMDMgmt - ok
20:36:07.0637 1816 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll
20:36:07.0642 1816 EventSystem - ok
20:36:07.0683 1816 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys
20:36:07.0686 1816 exfat - ok
20:36:07.0712 1816 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys
20:36:07.0715 1816 fastfat - ok
20:36:07.0738 1816 [ AFE1E8B9782A0DD7FB46BBD88E43F89A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
20:36:07.0739 1816 fdc - ok
20:36:07.0758 1816 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
20:36:07.0760 1816 fdPHost - ok
20:36:07.0787 1816 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
20:36:07.0789 1816 FDResPub - ok
20:36:07.0820 1816 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
20:36:07.0821 1816 FileInfo - ok
20:36:07.0834 1816 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
20:36:07.0835 1816 Filetrace - ok
20:36:07.0889 1816 [ D60EF46DC0E757FE5EB579DB95B88954 ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
20:36:07.0916 1816 FLEXnet Licensing Service - ok
20:36:07.0938 1816 [ 85B7CF99D532820495D68D747FDA9EBD ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
20:36:07.0939 1816 flpydisk - ok
20:36:07.0980 1816 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
20:36:07.0982 1816 FltMgr - ok
20:36:08.0072 1816 [ 119ACA7CADCA75BEA6B38E999443BAA6 ] FontCache C:\Windows\system32\FntCache.dll
20:36:08.0097 1816 FontCache - ok
20:36:08.0185 1816 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
20:36:08.0186 1816 FontCache3.0.0.0 - ok
20:36:08.0218 1816 [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
20:36:08.0224 1816 Fs_Rec - ok
20:36:08.0244 1816 [ 4E1CD0A45C50A8882616CAE5BF82F3C5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
20:36:08.0245 1816 gagp30kx - ok
20:36:08.0248 1816 GGSAFERDriver - ok
20:36:08.0277 1816 [ 77EBF3E9386DAA51551AF429052D88D0 ] giveio C:\Windows\system32\giveio.sys
20:36:08.0285 1816 giveio - ok
20:36:08.0288 1816 GMSIPCI - ok
20:36:08.0325 1816 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll
20:36:08.0333 1816 gpsvc - ok
20:36:08.0399 1816 [ 626A24ED1228580B9518C01930936DF9 ] gupdate1ca5807d0ac6c41 C:\Program Files\Google\Update\GoogleUpdate.exe
20:36:08.0401 1816 gupdate1ca5807d0ac6c41 - ok
20:36:08.0406 1816 [ 626A24ED1228580B9518C01930936DF9 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
20:36:08.0407 1816 gupdatem - ok
20:36:08.0419 1816 [ 833051C6C6C42117191935F734CFBD97 ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
20:36:08.0420 1816 hamachi - ok
20:36:08.0512 1816 [ 176825151F2F93415BCB37C29AF11A3D ] Hamachi2Svc C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
20:36:08.0526 1816 Hamachi2Svc - ok
20:36:08.0559 1816 [ 3F90E001369A07243763BD5A523D8722 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
20:36:08.0561 1816 HdAudAddService - ok
20:36:08.0593 1816 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
20:36:08.0596 1816 HDAudBus - ok
20:36:08.0634 1816 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
20:36:08.0635 1816 HidBth - ok
20:36:08.0672 1816 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys
20:36:08.0673 1816 HidIr - ok
20:36:08.0709 1816 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\System32\hidserv.dll
20:36:08.0718 1816 hidserv - ok
20:36:08.0760 1816 [ CCA4B519B17E23A00B826C55716809CC ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
20:36:08.0761 1816 HidUsb - ok
20:36:08.0781 1816 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
20:36:08.0784 1816 hkmsvc - ok
20:36:08.0789 1816 [ DF353B401001246853763C4B7AAA6F50 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
20:36:08.0790 1816 HpCISSs - ok
20:36:08.0817 1816 [ F870AA3E254628EBEAFE754108D664DE ] HTTP C:\Windows\system32\drivers\HTTP.sys
20:36:08.0820 1816 HTTP - ok
20:36:08.0835 1816 [ 324C2152FF2C61ABAE92D09F3CCA4D63 ] i2omp C:\Windows\system32\drivers\i2omp.sys
20:36:08.0836 1816 i2omp - ok
20:36:08.0871 1816 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
20:36:08.0872 1816 i8042prt - ok
20:36:08.0900 1816 [ C957BF4B5D80B46C5017BF0101E6C906 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
20:36:08.0901 1816 iaStorV - ok
20:36:08.0987 1816 [ DAF66902F08796F9C694901660E5A64A ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
20:36:09.0003 1816 IDriverT - ok
20:36:09.0128 1816 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
20:36:09.0139 1816 idsvc - ok
20:36:09.0208 1816 [ 9378D57E2B96C0A185D844770AD49948 ] igfx C:\Windows\system32\DRIVERS\igdkmd32.sys
20:36:09.0220 1816 igfx - ok
20:36:09.0232 1816 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
20:36:09.0233 1816 iirsp - ok
20:36:09.0265 1816 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll
20:36:09.0272 1816 IKEEXT - ok
20:36:09.0333 1816 [ AF87012C22372CC982A1E5B597DEB5FA ] IMPI Updater C:\Program Files\IMPI\ExtensionUpdaterService.exe
20:36:09.0335 1816 IMPI Updater - ok
20:36:09.0411 1816 [ 50CFD8FE34AE9659B8566A51B6DFDCF3 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
20:36:09.0423 1816 IntcAzAudAddService - ok
20:36:09.0463 1816 [ 83AA759F3189E6370C30DE5DC5590718 ] intelide C:\Windows\system32\drivers\intelide.sys
20:36:09.0463 1816 intelide - ok
20:36:09.0493 1816 [ 224191001E78C89DFA78924C3EA595FF ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
20:36:09.0494 1816 intelppm - ok
20:36:09.0509 1816 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
20:36:09.0512 1816 IPBusEnum - ok
20:36:09.0523 1816 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:36:09.0524 1816 IpFilterDriver - ok
20:36:09.0568 1816 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
20:36:09.0572 1816 iphlpsvc - ok
20:36:09.0577 1816 IpInIp - ok
20:36:09.0588 1816 [ 40F34F8ABA2A015D780E4B09138B6C17 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
20:36:09.0589 1816 IPMIDRV - ok
20:36:09.0613 1816 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
20:36:09.0614 1816 IPNAT - ok
20:36:09.0629 1816 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
20:36:09.0629 1816 IRENUM - ok
20:36:09.0650 1816 [ 350FCA7E73CF65BCEF43FAE1E4E91293 ] isapnp C:\Windows\system32\drivers\isapnp.sys
20:36:09.0650 1816 isapnp - ok
20:36:09.0675 1816 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
20:36:09.0677 1816 iScsiPrt - ok
20:36:09.0713 1816 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
20:36:09.0714 1816 iteatapi - ok
20:36:09.0729 1816 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
20:36:09.0731 1816 iteraid - ok
20:36:09.0748 1816 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
20:36:09.0749 1816 kbdclass - ok
20:36:09.0771 1816 [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
20:36:09.0772 1816 kbdhid - ok
20:36:09.0796 1816 [ A3E186B4B935905B829219502557314E ] KeyIso C:\Windows\system32\lsass.exe
20:36:09.0799 1816 KeyIso - ok
20:36:09.0829 1816 [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
20:36:09.0831 1816 KSecDD - ok
20:36:09.0871 1816 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
20:36:09.0878 1816 KtmRm - ok
20:36:09.0906 1816 [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer C:\Windows\System32\srvsvc.dll
20:36:09.0910 1816 LanmanServer - ok
20:36:09.0950 1816 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
20:36:09.0956 1816 LanmanWorkstation - ok
20:36:09.0984 1816 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
20:36:09.0985 1816 lltdio - ok
20:36:10.0009 1816 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
20:36:10.0013 1816 lltdsvc - ok
20:36:10.0045 1816 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
20:36:10.0047 1816 lmhosts - ok
20:36:10.0064 1816 [ A2262FB9F28935E862B4DB46438C80D2 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
20:36:10.0065 1816 LSI_FC - ok
20:36:10.0076 1816 [ 30D73327D390F72A62F32C103DAF1D6D ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
20:36:10.0077 1816 LSI_SAS - ok
20:36:10.0092 1816 [ E1E36FEFD45849A95F1AB81DE0159FE3 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
20:36:10.0093 1816 LSI_SCSI - ok
20:36:10.0117 1816 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
20:36:10.0119 1816 luafv - ok
20:36:10.0171 1816 [ 4F74184920B2D6E33024409B4C5C57C1 ] McciCMService C:\Program Files\Common Files\Motive\McciCMService.exe
20:36:10.0175 1816 McciCMService - ok
20:36:10.0195 1816 [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
20:36:10.0198 1816 Mcx2Svc - ok
20:36:10.0229 1816 [ D153B14FC6598EAE8422A2037553ADCE ] megasas C:\Windows\system32\drivers\megasas.sys
20:36:10.0230 1816 megasas - ok
20:36:10.0252 1816 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
20:36:10.0255 1816 MMCSS - ok
20:36:10.0269 1816 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
20:36:10.0270 1816 Modem - ok
20:36:10.0300 1816 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
20:36:10.0301 1816 monitor - ok
20:36:10.0324 1816 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
20:36:10.0325 1816 mouclass - ok
20:36:10.0345 1816 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
20:36:10.0346 1816 mouhid - ok
20:36:10.0350 1816 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
20:36:10.0352 1816 MountMgr - ok
20:36:10.0388 1816 [ 96AA8BA23142CC8E2B30F3CAE0C80254 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
20:36:10.0391 1816 MozillaMaintenance - ok
20:36:10.0411 1816 [ 583A41F26278D9E0EA548163D6139397 ] mpio C:\Windows\system32\drivers\mpio.sys
20:36:10.0412 1816 mpio - ok
20:36:10.0423 1816 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
20:36:10.0424 1816 mpsdrv - ok
20:36:10.0450 1816 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll
20:36:10.0458 1816 MpsSvc - ok
20:36:10.0469 1816 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
20:36:10.0470 1816 Mraid35x - ok
20:36:10.0501 1816 [ 9BD4DCB5412921864A7AACDEDFBD1923 ] MREMP50 C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS
20:36:10.0502 1816 MREMP50 - ok
20:36:10.0505 1816 MREMP50a64 - ok
20:36:10.0529 1816 MREMPR5 - ok
20:36:10.0543 1816 MRENDIS5 - ok
20:36:10.0572 1816 [ 07C02C892E8E1A72D6BF35004F0E9C5E ] MRESP50 C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS
20:36:10.0573 1816 MRESP50 - ok
20:36:10.0577 1816 MRESP50a64 - ok
20:36:10.0608 1816 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
20:36:10.0609 1816 MRxDAV - ok
20:36:10.0627 1816 [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
20:36:10.0628 1816 mrxsmb - ok
20:36:10.0681 1816 [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:36:10.0682 1816 mrxsmb10 - ok
20:36:10.0690 1816 [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:36:10.0691 1816 mrxsmb20 - ok
20:36:10.0704 1816 [ 742AED7939E734C36B7E8D6228CE26B7 ] msahci C:\Windows\system32\drivers\msahci.sys
20:36:10.0705 1816 msahci - ok
20:36:10.0723 1816 [ 3FC82A2AE4CC149165A94699183D3028 ] msdsm C:\Windows\system32\drivers\msdsm.sys
20:36:10.0724 1816 msdsm - ok

20:36:10.0750 1816 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
20:36:10.0754 1816 MSDTC - ok
20:36:10.0791 1816 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
20:36:10.0792 1816 Msfs - ok
20:36:10.0809 1816 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
20:36:10.0809 1816 msisadrv - ok
20:36:10.0825 1816 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
20:36:10.0829 1816 MSiSCSI - ok
20:36:10.0846 1816 msiserver - ok
20:36:10.0868 1816 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
20:36:10.0869 1816 MSKSSRV - ok
20:36:10.0879 1816 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
20:36:10.0880 1816 MSPCLOCK - ok
20:36:10.0884 1816 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
20:36:10.0885 1816 MSPQM - ok
20:36:10.0913 1816 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
20:36:10.0915 1816 MsRPC - ok
20:36:10.0927 1816 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
20:36:10.0928 1816 mssmbios - ok
20:36:10.0958 1816 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
20:36:10.0959 1816 MSTEE - ok
20:36:10.0975 1816 [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup C:\Windows\system32\Drivers\mup.sys
20:36:10.0975 1816 Mup - ok
20:36:10.0993 1816 [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent C:\Windows\system32\qagentRT.dll
20:36:10.0999 1816 napagent - ok
20:36:11.0035 1816 [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
20:36:11.0037 1816 NativeWifiP - ok
20:36:11.0066 1816 [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS C:\Windows\system32\drivers\ndis.sys
20:36:11.0070 1816 NDIS - ok
20:36:11.0089 1816 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
20:36:11.0089 1816 NdisTapi - ok
20:36:11.0100 1816 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
20:36:11.0101 1816 Ndisuio - ok
20:36:11.0124 1816 [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
20:36:11.0126 1816 NdisWan - ok
20:36:11.0138 1816 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
20:36:11.0140 1816 NDProxy - ok
20:36:11.0222 1816 [ 7D2633295EB6FF2B938185874884059D ] Nero BackItUp Scheduler 4.0 C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
20:36:11.0232 1816 Nero BackItUp Scheduler 4.0 - ok
20:36:11.0253 1816 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
20:36:11.0254 1816 NetBIOS - ok
20:36:11.0276 1816 [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
20:36:11.0278 1816 netbt - ok
20:36:11.0289 1816 [ A3E186B4B935905B829219502557314E ] Netlogon C:\Windows\system32\lsass.exe
20:36:11.0291 1816 Netlogon - ok
20:36:11.0304 1816 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
20:36:11.0309 1816 Netman - ok
20:36:11.0332 1816 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
20:36:11.0334 1816 NetMsmqActivator - ok
20:36:11.0338 1816 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
20:36:11.0340 1816 NetPipeActivator - ok
20:36:11.0362 1816 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
20:36:11.0368 1816 netprofm - ok
20:36:11.0372 1816 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
20:36:11.0374 1816 NetTcpActivator - ok
20:36:11.0378 1816 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
20:36:11.0380 1816 NetTcpPortSharing - ok
20:36:11.0401 1816 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
20:36:11.0402 1816 nfrd960 - ok
20:36:11.0418 1816 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
20:36:11.0423 1816 NlaSvc - ok
20:36:11.0471 1816 [ A00877C05933FBA8AFB3390DD72D4679 ] nmwcd C:\Windows\system32\drivers\ccdcmb.sys
20:36:11.0471 1816 nmwcd - ok
20:36:11.0492 1816 [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs C:\Windows\system32\drivers\Npfs.sys
20:36:11.0493 1816 Npfs - ok
20:36:11.0516 1816 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
20:36:11.0518 1816 nsi - ok
20:36:11.0529 1816 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
20:36:11.0530 1816 nsiproxy - ok
20:36:11.0674 1816 [ 2C1121F2B87E9A6B12485DF53CD848C7 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
20:36:11.0761 1816 Ntfs - ok
20:36:11.0782 1816 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
20:36:11.0783 1816 ntrigdigi - ok
20:36:11.0794 1816 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
20:36:11.0795 1816 Null - ok
20:36:11.0826 1816 [ A0A9E53B4AAC3C6534A063ABA69BC19F ] NVHDA C:\Windows\system32\drivers\nvhda32v.sys
20:36:11.0828 1816 NVHDA - ok
20:36:12.0010 1816 [ B69E6F70CE1151C8D62ABC9DEF64DFBE ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
20:36:12.0056 1816 nvlddmkm - ok
20:36:12.0083 1816 [ E69E946F80C1C31C53003BFBF50CBB7C ] nvraid C:\Windows\system32\drivers\nvraid.sys
20:36:12.0085 1816 nvraid - ok
20:36:12.0098 1816 [ 9E0BA19A28C498A6D323D065DB76DFFC ] nvstor C:\Windows\system32\drivers\nvstor.sys
20:36:12.0099 1816 nvstor - ok
20:36:12.0149 1816 [ E4284FCF99FEA13A7E1836F87AE356F6 ] NVSvc C:\Windows\system32\nvvsvc.exe
20:36:12.0155 1816 NVSvc - ok
20:36:12.0211 1816 [ 03E60E0BFA53ED15DC984FA34B44BB0F ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
20:36:12.0223 1816 nvUpdatusService - ok
20:36:12.0238 1816 [ 07C186427EB8FCC3D8D7927187F260F7 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
20:36:12.0240 1816 nv_agp - ok
20:36:12.0244 1816 NwlnkFlt - ok
20:36:12.0249 1816 NwlnkFwd - ok
20:36:12.0266 1816 [ BE32DA025A0BE1878F0EE8D6D9386CD5 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
20:36:12.0268 1816 ohci1394 - ok
20:36:12.0305 1816 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc C:\Windows\system32\p2psvc.dll
20:36:12.0315 1816 p2pimsvc - ok
20:36:12.0326 1816 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc C:\Windows\system32\p2psvc.dll
20:36:12.0332 1816 p2psvc - ok
20:36:12.0370 1816 [ 3F988A7C348F6990DC65C744469BF296 ] PAC7302 C:\Windows\system32\DRIVERS\PAC7302.SYS
20:36:12.0374 1816 PAC7302 - ok
20:36:12.0410 1816 [ 8A79FDF04A73428597E2CAF9D0D67850 ] Parport C:\Windows\system32\DRIVERS\parport.sys
20:36:12.0411 1816 Parport - ok
20:36:12.0438 1816 [ B9C2B89F08670E159F7181891E449CD9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
20:36:12.0440 1816 partmgr - ok
20:36:12.0451 1816 [ 6C580025C81CAF3AE9E3617C22CAD00E ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
20:36:12.0452 1816 Parvdm - ok
20:36:12.0473 1816 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
20:36:12.0476 1816 PcaSvc - ok
20:36:12.0532 1816 [ F451DCACBAA67F3307305EBD4A39EA07 ] pccsmcfd C:\Windows\system32\DRIVERS\pccsmcfd.sys
20:36:12.0533 1816 pccsmcfd - ok
20:36:12.0561 1816 [ 941DC1D19E7E8620F40BBC206981EFDB ] pci C:\Windows\system32\drivers\pci.sys
20:36:12.0562 1816 pci - ok
20:36:12.0574 1816 [ 3B1901E401473E03EB8C874271E50C26 ] pciide C:\Windows\system32\drivers\pciide.sys
20:36:12.0575 1816 pciide - ok
20:36:12.0609 1816 [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
20:36:12.0611 1816 pcmcia - ok
20:36:12.0658 1816 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
20:36:12.0663 1816 PEAUTH - ok
20:36:12.0721 1816 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
20:36:12.0740 1816 pla - ok
20:36:12.0766 1816 [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
20:36:12.0773 1816 PlugPlay - ok
20:36:12.0795 1816 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
20:36:12.0801 1816 PNRPAutoReg - ok
20:36:12.0809 1816 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc C:\Windows\system32\p2psvc.dll
20:36:12.0816 1816 PNRPsvc - ok
20:36:12.0837 1816 [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
20:36:12.0844 1816 PolicyAgent - ok
20:36:12.0870 1816 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
20:36:12.0871 1816 PptpMiniport - ok
20:36:12.0887 1816 [ 0E3CEF5D28B40CF273281D620C50700A ] Processor C:\Windows\system32\drivers\processr.sys
20:36:12.0887 1816 Processor - ok
20:36:12.0908 1816 [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc C:\Windows\system32\profsvc.dll
20:36:12.0913 1816 ProfSvc - ok
20:36:12.0947 1816 [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe
20:36:12.0950 1816 ProtectedStorage - ok
20:36:12.0972 1816 [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched C:\Windows\system32\DRIVERS\pacer.sys
20:36:12.0974 1816 PSched - ok
20:36:13.0021 1816 [ CCDAC889326317792480C0A67156A1EC ] ql2300 C:\Windows\system32\drivers\ql2300.sys
20:36:13.0027 1816 ql2300 - ok
20:36:13.0044 1816 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
20:36:13.0046 1816 ql40xx - ok
20:36:13.0174 1816 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
20:36:13.0205 1816 QWAVE - ok
20:36:13.0236 1816 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
20:36:13.0237 1816 QWAVEdrv - ok
20:36:13.0247 1816 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
20:36:13.0248 1816 RasAcd - ok
20:36:13.0294 1816 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
20:36:13.0317 1816 RasAuto - ok
20:36:13.0344 1816 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
20:36:13.0345 1816 Rasl2tp - ok
20:36:13.0392 1816 [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan C:\Windows\System32\rasmans.dll
20:36:13.0416 1816 RasMan - ok
20:36:13.0448 1816 [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
20:36:13.0449 1816 RasPppoe - ok
20:36:13.0493 1816 [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
20:36:13.0494 1816 RasSstp - ok
20:36:13.0624 1816 [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
20:36:13.0625 1816 rdbss - ok
20:36:13.0630 1816 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
20:36:13.0631 1816 RDPCDD - ok
20:36:13.0661 1816 [ E8BD98D46F2ED77132BA927FCCB47D8B ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
20:36:13.0662 1816 rdpdr - ok
20:36:13.0685 1816 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
20:36:13.0686 1816 RDPENCDD - ok
20:36:13.0822 1816 [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
20:36:13.0881 1816 RDPWD - ok
20:36:13.0924 1816 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
20:36:13.0926 1816 RemoteAccess - ok
20:36:13.0971 1816 [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry C:\Windows\system32\regsvc.dll
20:36:13.0993 1816 RemoteRegistry - ok
20:36:14.0025 1816 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
20:36:14.0027 1816 RpcLocator - ok
20:36:14.0045 1816 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs C:\Windows\system32\rpcss.dll
20:36:14.0050 1816 RpcSs - ok
20:36:14.0096 1816 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
20:36:14.0097 1816 rspndr - ok
20:36:14.0234 1816 [ 2D19A7469EA19993D0C12E627F4530BC ] RTL8169 C:\Windows\system32\DRIVERS\Rtlh86.sys
20:36:14.0236 1816 RTL8169 - ok
20:36:14.0265 1816 [ A3E186B4B935905B829219502557314E ] SamSs C:\Windows\system32\lsass.exe
20:36:14.0267 1816 SamSs - ok
20:36:14.0337 1816 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
20:36:14.0338 1816 sbp2port - ok
20:36:14.0433 1816 [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr C:\Windows\System32\SCardSvr.dll
20:36:14.0437 1816 SCardSvr - ok
20:36:14.0471 1816 [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule C:\Windows\system32\schedsvc.dll
20:36:14.0498 1816 Schedule - ok
20:36:14.0524 1816 [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc C:\Windows\System32\certprop.dll
20:36:14.0525 1816 SCPolicySvc - ok
20:36:14.0550 1816 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
20:36:14.0574 1816 SDRSVC - ok
20:36:14.0596 1816 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
20:36:14.0597 1816 secdrv - ok
20:36:14.0622 1816 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
20:36:14.0626 1816 seclogon - ok
20:36:14.0673 1816 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\system32\sens.dll
20:36:14.0690 1816 SENS - ok
20:36:14.0720 1816 [ CE9EC966638EF0B10B864DDEDF62A099 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
20:36:14.0721 1816 Serenum - ok
20:36:14.0804 1816 [ 6D663022DB3E7058907784AE14B69898 ] Serial C:\Windows\system32\DRIVERS\serial.sys
20:36:14.0805 1816 Serial - ok
20:36:14.0889 1816 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
20:36:14.0889 1816 sermouse - ok
20:36:15.0314 1816 [ 78F7BB9F4924BE164294C59B8C3FC096 ] ServiceLayer C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
20:36:15.0339 1816 ServiceLayer - ok
20:36:15.0376 1816 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
20:36:15.0380 1816 SessionEnv - ok
20:36:15.0396 1816 [ 103B79418DA647736EE95645F305F68A ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
20:36:15.0397 1816 sffdisk - ok
20:36:15.0407 1816 [ 8FD08A310645FE872EEEC6E08C6BF3EE ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
20:36:15.0408 1816 sffp_mmc - ok
20:36:15.0418 1816 [ 9CFA05FCFCB7124E69CFC812B72F9614 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
20:36:15.0419 1816 sffp_sd - ok
20:36:15.0434 1816 [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
20:36:15.0435 1816 sfloppy - ok
20:36:15.0471 1816 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
20:36:15.0476 1816 SharedAccess - ok
20:36:15.0500 1816 [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
20:36:15.0505 1816 ShellHWDetection - ok
20:36:15.0517 1816 [ D2A595D6EEBEEAF4334F8E50EFBC9931 ] sisagp C:\Windows\system32\drivers\sisagp.sys
20:36:15.0518 1816 sisagp - ok
20:36:15.0527 1816 [ CEDD6F4E7D84E9F98B34B3FE988373AA ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
20:36:15.0528 1816 SiSRaid2 - ok
20:36:15.0537 1816 [ DF843C528C4F69D12CE41CE462E973A7 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
20:36:15.0539 1816 SiSRaid4 - ok
20:36:15.0664 1816 [ EB17DF573B4423DF0B3B2EE3B268A6DE ] Skype C2C Service C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
20:36:15.0696 1816 Skype C2C Service - ok
20:36:15.0760 1816 [ 3E587DBBDFF938DDE5D4CE4047BE9041 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
20:36:15.0763 1816 SkypeUpdate - ok
20:36:16.0526 1816 [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc C:\Windows\system32\SLsvc.exe
20:36:16.0546 1816 slsvc - ok
20:36:16.0608 1816 [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify C:\Windows\system32\SLUINotify.dll
20:36:16.0612 1816 SLUINotify - ok
20:36:16.0646 1816 [ 7B75299A4D201D6A6533603D6914AB04 ] Smb C:\Windows\system32\DRIVERS\smb.sys
20:36:16.0647 1816 Smb - ok
20:36:16.0725 1816 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
20:36:16.0753 1816 SNMPTRAP - ok
20:36:16.0789 1816 [ 3FA2E254BFBCE52B3C6F1BF23AAB6911 ] speedfan C:\Windows\system32\speedfan.sys
20:36:16.0811 1816 speedfan - ok
20:36:16.0878 1816 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
20:36:16.0884 1816 spldr - ok
20:36:16.0917 1816 [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler C:\Windows\System32\spoolsv.exe
20:36:16.0920 1816 Spooler - ok
20:36:16.0960 1816 [ CDDDEC541BC3C96F91ECB48759673505 ] sptd C:\Windows\system32\Drivers\sptd.sys
20:36:16.0961 1816 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: CDDDEC541BC3C96F91ECB48759673505
20:36:16.0963 1816 sptd ( LockedFile.Multi.Generic ) - warning
20:36:16.0963 1816 sptd - detected LockedFile.Multi.Generic (1)
20:36:16.0978 1816 [ 41987F9FC0E61ADF54F581E15029AD91 ] srv C:\Windows\system32\DRIVERS\srv.sys
20:36:16.0980 1816 srv - ok
20:36:17.0041 1816 [ FF33AFF99564B1AA534F58868CBE41EF ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
20:36:17.0042 1816 srv2 - ok
20:36:17.0102 1816 [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
20:36:17.0103 1816 srvnet - ok
20:36:17.0260 1816 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
20:36:17.0320 1816 SSDPSRV - ok
20:36:17.0352 1816 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
20:36:17.0357 1816 SstpSvc - ok
20:36:17.0390 1816 [ 8BB19094DEF583E0EECE1830457444EE ] stdriver C:\Windows\system32\DRIVERS\stdriver32.sys
20:36:17.0391 1816 stdriver - ok
20:36:17.0410 1816 Steam Client Service - ok
20:36:17.0468 1816 [ 5A19667A580B1CE886EAF968B9743F45 ] Stereo Service C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
20:36:17.0471 1816 Stereo Service - ok
20:36:17.0533 1816 [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc C:\Windows\System32\wiaservc.dll
20:36:17.0541 1816 stisvc - ok
20:36:17.0553 1816 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
20:36:17.0554 1816 swenum - ok
20:36:17.0611 1816 [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv C:\Windows\System32\swprv.dll
20:36:17.0618 1816 swprv - ok
20:36:17.0689 1816 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
20:36:17.0706 1816 Symc8xx - ok
20:36:17.0729 1816 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
20:36:17.0730 1816 Sym_hi - ok
20:36:17.0766 1816 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
20:36:17.0767 1816 Sym_u3 - ok
20:36:17.0956 1816 [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain C:\Windows\system32\sysmain.dll
20:36:17.0965 1816 SysMain - ok
20:36:17.0993 1816 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
20:36:17.0998 1816 TabletInputService - ok
20:36:18.0019 1816 [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv C:\Windows\System32\tapisrv.dll
20:36:18.0026 1816 TapiSrv - ok
20:36:18.0044 1816 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
20:36:18.0048 1816 TBS - ok
20:36:18.0267 1816 [ 548E198BAE21EFC21F8B5F0C1728AD27 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
20:36:18.0273 1816 Tcpip - ok
20:36:18.0497 1816 [ 548E198BAE21EFC21F8B5F0C1728AD27 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
20:36:18.0503 1816 Tcpip6 - ok
20:36:18.0527 1816 [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
20:36:18.0528 1816 tcpipreg - ok
20:36:18.0570 1816 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
20:36:18.0571 1816 TDPIPE - ok
20:36:18.0603 1816 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
20:36:18.0604 1816 TDTCP - ok
20:36:18.0622 1816 [ 76B06EB8A01FC8624D699E7045303E54 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
20:36:18.0623 1816 tdx - ok
20:36:18.0645 1816 [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
20:36:18.0646 1816 TermDD - ok
20:36:18.0748 1816 [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService C:\Windows\System32\termsrv.dll
20:36:18.0762 1816 TermService - ok
20:36:18.0792 1816 [ C7230FBEE14437716701C15BE02C27B8 ] Themes C:\Windows\system32\shsvcs.dll
20:36:18.0796 1816 Themes - ok
20:36:18.0810 1816 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
20:36:18.0813 1816 THREADORDER - ok
20:36:18.0884 1816 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
20:36:18.0914 1816 TrkWks - ok
20:36:18.0967 1816 [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
20:36:18.0985 1816 TrustedInstaller - ok
20:36:19.0029 1816 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
20:36:19.0030 1816 tssecsrv - ok
20:36:19.0070 1816 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
20:36:19.0071 1816 tunmp - ok
20:36:19.0113 1816 [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
20:36:19.0114 1816 tunnel - ok
20:36:19.0146 1816 [ C3ADE15414120033A36C0F293D4A4121 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
20:36:19.0147 1816 uagp35 - ok
20:36:19.0182 1816 [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
20:36:19.0184 1816 udfs - ok
20:36:19.0227 1816 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
20:36:19.0245 1816 UI0Detect - ok
20:36:19.0268 1816 [ 75E6890EBFCE0841D3291B02E7A8BDB0 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
20:36:19.0269 1816 uliagpkx - ok
20:36:19.0285 1816 [ 3CD4EA35A6221B85DCC25DAA46313F8D ] uliahci C:\Windows\system32\drivers\uliahci.sys
20:36:19.0286 1816 uliahci - ok
20:36:19.0306 1816 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
20:36:19.0308 1816 UlSata - ok
20:36:19.0340 1816 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
20:36:19.0341 1816 ulsata2 - ok
20:36:19.0409 1816 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
20:36:19.0410 1816 umbus - ok
20:36:19.0494 1816 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
20:36:19.0520 1816 upnphost - ok
20:36:19.0562 1816 [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
20:36:19.0564 1816 usbccgp - ok
20:36:19.0589 1816 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
20:36:19.0590 1816 usbcir - ok
20:36:19.0638 1816 [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
20:36:19.0639 1816 usbehci - ok
20:36:19.0697 1816 [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
20:36:19.0698 1816 usbhub - ok
20:36:19.0720 1816 [ 38DBC7DD6CC5A72011F187425384388B ] usbohci C:\Windows\system32\drivers\usbohci.sys
20:36:19.0721 1816 usbohci - ok
20:36:19.0795 1816 [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
20:36:19.0796 1816 usbprint - ok
20:36:19.0892 1816 [ A508C9BD8724980512136B039BBA65E9 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
20:36:19.0893 1816 usbscan - ok
20:36:19.0979 1816 [ D575246188F63DE0ACCF6EAC5FB59E6A ] usbser C:\Windows\system32\DRIVERS\usbser.sys
20:36:19.0980 1816 usbser - ok
20:36:19.0991 1816 [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:36:19.0992 1816 USBSTOR - ok
20:36:20.0028 1816 [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
20:36:20.0029 1816 usbuhci - ok
20:36:20.0040 1816 [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms C:\Windows\System32\uxsms.dll
20:36:20.0044 1816 UxSms - ok
20:36:20.0073 1816 [ FCE98C43B5C5DB8E0DA8EA0E2B45E044 ] VClone C:\Windows\system32\DRIVERS\VClone.sys
20:36:20.0074 1816 VClone - ok
20:36:20.0236 1816 [ CD88D1B7776DC17A119049742EC07EB4 ] vds C:\Windows\System32\vds.exe
20:36:20.0265 1816 vds - ok
20:36:20.0304 1816 [ 87B06E1F30B749A114F74622D013F8D4 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
20:36:20.0305 1816 vga - ok
20:36:20.0330 1816 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
20:36:20.0331 1816 VgaSave - ok
20:36:20.0404 1816 [ 045D9961E591CF0674A920B6BA3BA5CB ] viaagp C:\Windows\system32\drivers\viaagp.sys
20:36:20.0419 1816 viaagp - ok
20:36:20.0440 1816 [ 56A4DE5F02F2E88182B0981119B4DD98 ] ViaC7 C:\Windows\system32\drivers\viac7.sys
20:36:20.0441 1816 ViaC7 - ok
20:36:20.0454 1816 [ FD2E3175FCADA350C7AB4521DCA187EC ] viaide C:\Windows\system32\drivers\viaide.sys
20:36:20.0455 1816 viaide - ok
20:36:20.0486 1816 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys
20:36:20.0487 1816 volmgr - ok
20:36:20.0513 1816 [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
20:36:20.0515 1816 volmgrx - ok
20:36:20.0543 1816 [ 786DB5771F05EF300390399F626BF30A ] volsnap C:\Windows\system32\drivers\volsnap.sys
20:36:20.0545 1816 volsnap - ok
20:36:20.0625 1816 [ D984439746D42B30FC65A4C3546C6829 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
20:36:20.0626 1816 vsmraid - ok
20:36:20.0885 1816 [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS C:\Windows\system32\vssvc.exe
20:36:20.0905 1816 VSS - ok
20:36:20.0940 1816 [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time C:\Windows\system32\w32time.dll
20:36:20.0947 1816 W32Time - ok
20:36:20.0971 1816 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
20:36:20.0973 1816 WacomPen - ok
20:36:21.0008 1816 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
20:36:21.0009 1816 Wanarp - ok
20:36:21.0012 1816 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
20:36:21.0014 1816 Wanarpv6 - ok
20:36:21.0044 1816 [ A3CD60FD826381B49F03832590E069AF ] wcncsvc C:\Windows\System32\wcncsvc.dll
20:36:21.0054 1816 wcncsvc - ok
20:36:21.0075 1816 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
20:36:21.0079 1816 WcsPlugInService - ok
20:36:21.0103 1816 [ AFC5AD65B991C1E205CF25CFDBF7A6F4 ] Wd C:\Windows\system32\drivers\wd.sys
20:36:21.0104 1816 Wd - ok
20:36:21.0335 1816 [ A840213F1ACDCC175B4D1D5AAEAC0D7A ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
20:36:21.0339 1816 Wdf01000 - ok
20:36:21.0423 1816 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll
20:36:21.0454 1816 WdiServiceHost - ok
20:36:21.0458 1816 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll
20:36:21.0462 1816 WdiSystemHost - ok
20:36:21.0503 1816 [ 04C37D8107320312FBAE09926103D5E2 ] WebClient C:\Windows\System32\webclnt.dll
20:36:21.0530 1816 WebClient - ok
20:36:21.0563 1816 [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc C:\Windows\system32\wecsvc.dll
20:36:21.0583 1816 Wecsvc - ok
20:36:21.0622 1816 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll
20:36:21.0627 1816 wercplsupport - ok
20:36:21.0661 1816 [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc C:\Windows\System32\WerSvc.dll
20:36:21.0685 1816 WerSvc - ok
20:36:21.0727 1816 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
20:36:21.0731 1816 WinDefend - ok
20:36:21.0739 1816 WinHttpAutoProxySvc - ok
20:36:21.0962 1816 [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
20:36:21.0963 1816 Winmgmt - ok
20:36:22.0036 1816 WinRing0_1_2_0 - ok
20:36:22.0591 1816 [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM C:\Windows\system32\WsmSvc.dll
20:36:22.0608 1816 WinRM - ok
20:36:22.0647 1816 [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc C:\Windows\System32\wlansvc.dll
20:36:22.0655 1816 Wlansvc - ok
20:36:23.0005 1816 [ FB01D4AE207B9EFDBABFC55DC95C7E31 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
20:36:23.0025 1816 wlidsvc - ok
20:36:23.0050 1816 [ 701A9F884A294327E9141D73746EE279 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
20:36:23.0052 1816 WmiAcpi - ok
20:36:23.0140 1816 [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
20:36:23.0153 1816 wmiApSrv - ok
20:36:23.0209 1816 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
20:36:23.0237 1816 WMPNetworkSvc - ok
20:36:23.0273 1816 [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc C:\Windows\System32\wpcsvc.dll
20:36:23.0277 1816 WPCSvc - ok
20:36:23.0301 1816 [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
20:36:23.0322 1816 WPDBusEnum - ok
20:36:23.0368 1816 [ DE9D36F91A4DF3D911626643DEBF11EA ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys
20:36:23.0369 1816 WpdUsb - ok
20:36:23.0626 1816 [ B800EEC15851597405784126C407188C ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
20:36:23.0635 1816 WPFFontCache_v0400 - ok
20:36:23.0672 1816 [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
20:36:23.0673 1816 ws2ifsl - ok
20:36:23.0724 1816 [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc C:\Windows\system32\wscsvc.dll
20:36:23.0751 1816 wscsvc - ok
20:36:23.0756 1816 WSearch - ok
20:36:24.0650 1816 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
20:36:24.0675 1816 wuauserv - ok
20:36:24.0712 1816 [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
20:36:24.0713 1816 WudfPf - ok
20:36:24.0742 1816 [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
20:36:24.0744 1816 WUDFRd - ok
20:36:24.0820 1816 [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
20:36:24.0854 1816 wudfsvc - ok
20:36:24.0894 1816 [ F8D742FB60BAE5AE61FD3B1733816620 ] zebrbus C:\Windows\system32\DRIVERS\zebrbus.sys
20:36:24.0895 1816 zebrbus - ok
20:36:24.0935 1816 [ 3E6A291D9353E7F86B1506B561A943F5 ] zebrmdfl C:\Windows\system32\DRIVERS\zebrmdfl.sys
20:36:24.0936 1816 zebrmdfl - ok
20:36:24.0950 1816 [ 11B30CD51AEE64CC91FA71199DAF9C0F ] zebrmdm C:\Windows\system32\DRIVERS\zebrmdm.sys
20:36:24.0951 1816 zebrmdm - ok
20:36:25.0002 1816 [ 3D7F8257EEBAF89EE427FF4D956064DD ] zebrmdmc C:\Windows\system32\DRIVERS\zebrmdmc.sys
20:36:25.0004 1816 zebrmdmc - ok
20:36:25.0011 1816 ================ Scan global ===============================
20:36:25.0119 1816 [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll
20:36:25.0179 1816 [ A508314231C49AEE86987CEA3EAECAD1 ] C:\Windows\system32\winsrv.dll
20:36:25.0192 1816 [ A508314231C49AEE86987CEA3EAECAD1 ] C:\Windows\system32\winsrv.dll
20:36:25.0224 1816 [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe
20:36:25.0228 1816 [Global] - ok
20:36:25.0228 1816 ================ Scan MBR ==================================
20:36:25.0270 1816 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
20:36:26.0925 1816 \Device\Harddisk0\DR0 - ok
20:36:26.0925 1816 ================ Scan VBR ==================================
20:36:26.0963 1816 [ 19577041AE79B482D81A5CB2012E4DBD ] \Device\Harddisk0\DR0\Partition1
20:36:27.0044 1816 \Device\Harddisk0\DR0\Partition1 - ok
20:36:27.0044 1816 ============================================================
20:36:27.0044 1816 Scan finished
20:36:27.0044 1816 ============================================================
20:36:27.0055 5724 Detected object count: 1
20:36:27.0055 5724 Actual detected object count: 1
20:36:40.0931 5724 C:\Windows\system32\Drivers\sptd.sys - copied to quarantine
20:36:40.0951 5724 sptd ( LockedFile.Multi.Generic ) - User select action: Quarantine