PC-HELP.CZ

Ahoj,
mám docela malý systémový disk, ale vždy jsem tam měl aspoň 2 GB volného místa (spíše více, data jsem už pak ukládal jinam), ale asi před měsícem mi systém začal hlásit nedostatek prostoru (nic jsem neinstaloval). Tak jsem teda přesunul/smazal nějaká data, pak bylo asi 500 MB volných, ale za týden zase nedostek prostoru, takže jsem zase mazal. A tak to šlo dokola a za měsíc mi záhadně zmizelo, tak 3-5GB prostoru.

PC jsem projel antivirem, ale nic nenašel.

Log:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:13:47, on 20.10.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16514)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Users\Radim\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\Drive\googledrivesync.exe
C:\Program Files\Google\Drive\googledrivesync.exe
C:\Users\Radim\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\HyperCam Toolbar\tbcore3.dll
O3 - Toolbar: HyperCam Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\HyperCam Toolbar\tbcore3.dll
O4 - HKLM\..\Run: [BCU] "C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [SkyDrive] "C:\Users\Radim\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Radim\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
O4 - Startup: Dropbox.lnk = C:\Users\Radim\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: firefox – zástupce.lnk = C:\Program Files\Mozilla Firefox\firefox.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{95E635F5-B84E-4D33-8076-47AB93A275F0}: NameServer = 62.129.50.20,85.135.32.100
O17 - HKLM\System\CS1\Services\Tcpip\..\{95E635F5-B84E-4D33-8076-47AB93A275F0}: NameServer = 62.129.50.20,85.135.32.100
O17 - HKLM\System\CS2\Services\Tcpip\..\{95E635F5-B84E-4D33-8076-47AB93A275F0}: NameServer = 62.129.50.20,85.135.32.100
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 7116 bytes


A ještě při scanu hijackthis vyskočila tahle chyba


Díky

To není chyba, je tam napsáno spouštět jako Administrátor.

Porid si vetsi disk

To ze se Windows adresar zvetsuje je normalni, ukladaji se tam instalatory, aktualizace a dalsi systemove veci. 2 GB mista fakticky nestaci, spis tak 20 a vice GB. To ze ty nic neinstalujes neznamena ze neco neprobiha automaticky - treba instalace hotfixu.

Hosts soubor je jen pro cteni (to je spravne), aplikace se jen snazi rict ze pokud ji nespustis jako admin, tak do nej nemuze zapisovat.


/// A co když se jedná o 1 TB velký disk? Pak může soubory tvořit i infekce v PC. Orcus

Prvně bych vypnul obnovu systému, tím se smaže hafo GB a následně vytvořil nový bod. P.S. Jak je ten systémový disk velký?

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

===================================================

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

====================================================

Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

====================================================

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Vychazim z prvniho prispevku:

"mám docela malý systémový disk, ale vždy jsem tam měl aspoň 2 GB volného místa"

2 GB volneho mista je na beh Windows 7 nedostatecna kapacita i bez viru, Windows 7 se neustale zvetsuje tim jak se instaluje kdeco (napr. lze v C:\Windows nalezt a pripadne smazat instalacni soubory vetsiny hotfixu).

Jde smazat nepotrebna data, ale tim se problem nevyresi, protoze se to misto opet zaplni. Zabranit Windows 7 aby se stale pomalu nezvetsoval nelze, jedine vypnout aktualizace a nic neinstalovat.

Ten disk má 64 GB (celkově má 320GB, ale mám ho rozdělený na dvě části).
Ty body obnovy byly asi vypnuté celou dobu, takže nejde nic odstranit.

To že se sytém zvětšuje chápu, ale dva roky nic moc a pak najednou za měsíc 4 GB, což mi přijde divné. Navíc požadakvy na Windows 7 jsou 16 GB místa na disku a já mám 4-krát tolik.




Malwarebytes Anti-Malware 1.75.0.1300
http://www.malwarebytes.org

Verze: v2013.10.21.02

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Radim :: RADIM-PC [administrátor]

21.10.2013 10:08:17
mbam-log-2013-10-21 (10-08-17).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 219133
Uplynulý čas: 16 minut, 13 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)



------------------------------------------------------------------------




# AdwCleaner v3.010 - Report created 21/10/2013 at 10:28:03
# Updated 20/10/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (32 bits)
# Username : Radim - RADIM-PC
# Running from : C:\Users\Radim\Desktop\Nová složka\adwcleaner.exe
# Option : Scan

***** [ Services ] *****

Service Found : BCUService

***** [ Files / Folders ] *****

Folder Found : C:\Users\Radim\AppData\Roaming\Mozilla\Firefox\Profiles\traxidc3.radim\Extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}
Folder Found C:\Program Files\DeviceVM
Folder Found C:\Program Files\HyperCam Toolbar
Folder Found C:\Program Files\RegClean Pro
Folder Found C:\Users\Radim\AppData\LocalLow\Toolbar4
Folder Found C:\Users\Radim\AppData\Roaming\Mozilla\Firefox\Profiles\traxidc3.radim\ICQToolbarData
Folder Found C:\Users\Radim\AppData\Roaming\Systweak

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\DeviceVM
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{338B4DFE-2E2C-4338-9E41-E176D497299E}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{338B4DFE-2E2C-4338-9E41-E176D497299E}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Found : HKCU\Software\Somoto Toolbar
Key Found : HKCU\Software\YahooPartnerToolbar
Key Found : HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook
Key Found : HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook.1
Key Found : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Key Found : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Found : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{338B4DFE-2E2C-4338-9E41-E176D497299E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Found : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler
Key Found : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1
Key Found : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Found : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Found : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
Key Found : HKLM\SOFTWARE\Classes\SMTTB2009.IEToolbar
Key Found : HKLM\SOFTWARE\Classes\SMTTB2009.IEToolbar.1
Key Found : HKLM\SOFTWARE\Classes\SMTTB2009.SMTTB2009
Key Found : HKLM\SOFTWARE\Classes\SMTTB2009.SMTTB2009.3
Key Found : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
Key Found : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbTask
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
Key Found : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.SMTTB2009
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.SMTTB2009.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{77AA6435-2488-4A94-9FE5-49519DD2ED9B}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}
Key Found : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook
Key Found : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\DeviceVM
Key Found : HKLM\Software\Freeze.com
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{94366E2C-9923-431C-B0D6-747447DD0F2B}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{338B4DFE-2E2C-4338-9E41-E176D497299E}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [BCU]

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16514


-\\ Mozilla Firefox v24.0 (cs)

[ File : C:\Users\Radim\AppData\Roaming\Mozilla\Firefox\Profiles\traxidc3.radim\prefs.js ]

Line Found : user_pref("icqtoolbar.allowSendURL", false);
Line Found : user_pref("icqtoolbar.engineVerified", true);
Line Found : user_pref("icqtoolbar.hiddenElements", "itb_options");
Line Found : user_pref("icqtoolbar.history", "hry%20na%20k510i%20zdarma||dr.%20house||%C5%A1akram||%C5%A1akran||superhry||autorefresh%20mozilla%20download||autorefresh||d%C3%ADvky%20||d%C3%ADvky||50%2C845N14%2C351[...]
Line Found : user_pref("icqtoolbar.numberOfSearches", 0);
Line Found : user_pref("icqtoolbar.previousFFVersion", "2.0.0.16");
Line Found : user_pref("icqtoolbar.suggestions", false);
Line Found : user_pref("icqtoolbar.uniqueID", "120556661612055666161205598953729");
Line Found : user_pref("icqtoolbar.usageStatstTimestamp", 1220453670);
Line Found : user_pref("icqtoolbar.version", "1.1.2");
Line Found : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Line Found : user_pref("icqtoolbar.xmlLanguage", "cs");

-\\ Google Chrome v

[ File : C:\Users\Radim\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [9384 octets] - [21/10/2013 10:28:03]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [9444 octets] ##########





------------------------------------------------------------------------------------





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.7 (10.15.2013:3)
OS: Windows 7 Professional x86
Ran by Radim on po 21.10.2013 at 10:31:33,01
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\tbcommonutils.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\tbhelper.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\dt soft\daemon tools toolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\freeze.com
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\comobject.deskbarenabler
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\comobject.deskbarenabler.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbcommonutils.commonutils
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbcommonutils.commonutils.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbdownloadmanager
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbdownloadmanager.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbpropertymanager
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbpropertymanager.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbrequest
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbrequest.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbtask
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbtask.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.toolbarhelper
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.toolbarhelper.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.contextmenunotifier
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.contextmenunotifier.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.custominternetsecurityimpl
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.custominternetsecurityimpl.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\urlsearchhook.toolbarurlsearchhook
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\urlsearchhook.toolbarurlsearchhook.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Radim\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\Radim\appdata\local\apn"
Successfully deleted: [Folder] "C:\Users\Radim\appdata\locallow\toolbar4"
Successfully deleted: [Folder] "C:\Program Files\hypercam toolbar"
Successfully deleted: [Folder] "C:\Program Files\regclean pro"



~~~ FireFox

Emptied folder: C:\Users\Radim\AppData\Roaming\mozilla\firefox\profiles\traxidc3.radim\minidumps [359 files]



~~~ Chrome

Successfully deleted: [Folder] C:\Users\Radim\appdata\local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 21.10.2013 at 10:34:01,17
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Vymazat-Clean“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Máš absolutní nedostatek místa na syst. disku!!!
Je třeba něco odinstalovat , smazat.!
Je třeba mít alespoň 15% volného místa , pro správný chod windows.

# AdwCleaner v3.010 - Report created 22/10/2013 at 10:17:28
# Updated 20/10/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (32 bits)
# Username : Radim - RADIM-PC
# Running from : C:\Users\Radim\Desktop\Nová složka\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : BCUService

***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files\DeviceVM
Folder Deleted : C:\Users\Radim\AppData\Roaming\Mozilla\Firefox\Profiles\traxidc3.radim\ICQToolbarData
Folder Deleted : C:\Users\Radim\AppData\Roaming\Mozilla\Firefox\Profiles\traxidc3.radim\Extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook
Key Deleted : HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook.1
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [BCU]
Key Deleted : HKLM\SOFTWARE\Classes\SMTTB2009.IEToolbar
Key Deleted : HKLM\SOFTWARE\Classes\SMTTB2009.IEToolbar.1
Key Deleted : HKLM\SOFTWARE\Classes\SMTTB2009.SMTTB2009
Key Deleted : HKLM\SOFTWARE\Classes\SMTTB2009.SMTTB2009.3
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SMTTB2009
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SMTTB2009.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{338B4DFE-2E2C-4338-9E41-E176D497299E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{77AA6435-2488-4A94-9FE5-49519DD2ED9B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{338B4DFE-2E2C-4338-9E41-E176D497299E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{338B4DFE-2E2C-4338-9E41-E176D497299E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{94366E2C-9923-431C-B0D6-747447DD0F2B}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{338B4DFE-2E2C-4338-9E41-E176D497299E}]
Key Deleted : HKCU\Software\DeviceVM
Key Deleted : HKCU\Software\Somoto Toolbar
Key Deleted : HKLM\Software\DeviceVM

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16514


-\\ Mozilla Firefox v24.0 (cs)

[ File : C:\Users\Radim\AppData\Roaming\Mozilla\Firefox\Profiles\traxidc3.radim\prefs.js ]

Line Deleted : user_pref("icqtoolbar.allowSendURL", false);
Line Deleted : user_pref("icqtoolbar.engineVerified", true);
Line Deleted : user_pref("icqtoolbar.hiddenElements", "itb_options");
Line Deleted : user_pref("icqtoolbar.history", "hry%20na%20k510i%20zdarma||dr.%20house||%C5%A1akram||%C5%A1akran||superhry||autorefresh%20mozilla%20download||autorefresh||d%C3%ADvky%20||d%C3%ADvky||50%2C845N14%2C351[...]
Line Deleted : user_pref("icqtoolbar.numberOfSearches", 0);
Line Deleted : user_pref("icqtoolbar.previousFFVersion", "2.0.0.16");
Line Deleted : user_pref("icqtoolbar.suggestions", false);
Line Deleted : user_pref("icqtoolbar.uniqueID", "120556661612055666161205598953729");
Line Deleted : user_pref("icqtoolbar.usageStatstTimestamp", 1220453670);
Line Deleted : user_pref("icqtoolbar.version", "1.1.2");
Line Deleted : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Line Deleted : user_pref("icqtoolbar.xmlLanguage", "cs");

-\\ Google Chrome v

[ File : C:\Users\Radim\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [9524 octets] - [21/10/2013 10:28:03]
AdwCleaner[R1].txt - [7248 octets] - [22/10/2013 10:13:25]
AdwCleaner[S0].txt - [7327 octets] - [22/10/2013 10:17:28]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7387 octets] ##########



-----------------------------------------------------------------------------------------------



RogueKiller V8.7.4 [Oct 16 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spuštěno v : Normální režim
Uživatel : Radim [Práva správce]
Mód : Kontrola -- Datum : 10/22/2013 10:33:21
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 9 ¤¤¤
[DNS][PUM] HKLM\[...]\CCSet\[...]\{95E635F5-B84E-4D33-8076-47AB93A275F0} : NameServer (62.129.50.20,85.135.32.100) -> NALEZENO
[DNS][PUM] HKLM\[...]\CS001\[...]\{95E635F5-B84E-4D33-8076-47AB93A275F0} : NameServer (62.129.50.20,85.135.32.100) -> NALEZENO
[DNS][PUM] HKLM\[...]\CS002\[...]\{95E635F5-B84E-4D33-8076-47AB93A275F0} : NameServer (62.129.50.20,85.135.32.100) -> NALEZENO
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> NALEZENO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 1 ¤¤¤
[Radim][SUSP UNIC] firefox ??� zástupce.lnk : C:\Users\Radim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\firefox ??� zástupce.lnk @C:\PROGRA~1\MOZILL~1\firefox.exe [-][7] -> NALEZENO

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤
[Address] SSDT[84] : NtCreateSection @ 0x82E3313D -> HOOKED (Unknown @ 0x8E1706DE)
[Address] SSDT[299] : NtRequestWaitReplyPort @ 0x82E4DB22 -> HOOKED (Unknown @ 0x8E1706E8)
[Address] SSDT[316] : NtSetContextThread @ 0x82EED84F -> HOOKED (Unknown @ 0x8E1706E3)
[Address] SSDT[347] : NtSetSecurityObject @ 0x82E11805 -> HOOKED (Unknown @ 0x8E1706ED)
[Address] SSDT[368] : NtSystemDebugControl @ 0x82E95802 -> HOOKED (Unknown @ 0x8E1706F2)
[Address] SSDT[370] : NtTerminateProcess @ 0x82E6AD9A -> HOOKED (Unknown @ 0x8E17067F)
[Address] Shadow SSDT[585] : NtUserSetWindowsHookEx -> HOOKED (Unknown @ 0x8E170706)
[Address] Shadow SSDT[588] : NtUserSetWinEventHook -> HOOKED (Unknown @ 0x8E17070B)
[Address] IRP[IRP_MJ_CREATE] : C:\Windows\system32\drivers\winhv.sys -> HOOKED (Unknown @ 0x84E7A1F8)
[Address] IRP[IRP_MJ_CLOSE] : C:\Windows\system32\drivers\winhv.sys -> HOOKED (Unknown @ 0x84E7A1F8)
[Address] IRP[IRP_MJ_DEVICE_CONTROL] : C:\Windows\system32\drivers\winhv.sys -> HOOKED (Unknown @ 0x84E7A1F8)
[Address] IRP[IRP_MJ_INTERNAL_DEVICE_CONTROL] : C:\Windows\system32\drivers\winhv.sys -> HOOKED (Unknown @ 0x84E7A1F8)
[Address] IRP[IRP_MJ_POWER] : C:\Windows\system32\drivers\winhv.sys -> HOOKED (Unknown @ 0x84E7A1F8)
[Address] IRP[IRP_MJ_SYSTEM_CONTROL] : C:\Windows\system32\drivers\winhv.sys -> HOOKED (Unknown @ 0x84E7A1F8)
[Address] IRP[IRP_MJ_PNP] : C:\Windows\system32\drivers\winhv.sys -> HOOKED (Unknown @ 0x84E7A1F8)
[Inline] EAT @explorer.exe (?MILLIS_PER_SECOND@GCDate@@2JB) : GrooveUtil.DLL -> HOOKED (Unknown @ 0xCD24333C)

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) (Standardní diskové jednotky) - WDC WD3200AAKS-00C9A0 ATA Device +++++
--- User ---
[MBR] b6c652887bf1faea51c6dee3ddf068c4
[BSP] 18524fac285a6954574d982a109a98f5 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 64897 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 133115904 | Size: 240244 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ IDE) (Standardní diskové jednotky) - WDC WD5000AACS-00ZUB0 ATA Device +++++
--- User ---
[MBR] b8dd808e71d47ed069e0890fce24498a
[BSP] 7fdd58c8a4c173eb9930914ac8491d75 : Windows XP MBR Code
Partition table:
0 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 16065 | Size: 476929 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_S_10222013_103321.txt >>

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.
Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "
- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.

RogueKiller V8.7.4 [Oct 16 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spuštěno v : Normální režim
Uživatel : Radim [Práva správce]
Mód : Odebrat -- Datum : 10/22/2013 11:09:43
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 6 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZÁNO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> NAHRAZENO (1)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 1 ¤¤¤
[Radim][SUSP UNIC] firefox ??� zástupce.lnk : C:\Users\Radim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\firefox ??� zástupce.lnk @C:\PROGRA~1\MOZILL~1\firefox.exe [-][7] -> VYMAZÁNO

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤
[Address] SSDT[84] : NtCreateSection @ 0x82E3313D -> HOOKED (Unknown @ 0x8E1706DE)
[Address] SSDT[299] : NtRequestWaitReplyPort @ 0x82E4DB22 -> HOOKED (Unknown @ 0x8E1706E8)
[Address] SSDT[316] : NtSetContextThread @ 0x82EED84F -> HOOKED (Unknown @ 0x8E1706E3)
[Address] SSDT[347] : NtSetSecurityObject @ 0x82E11805 -> HOOKED (Unknown @ 0x8E1706ED)
[Address] SSDT[368] : NtSystemDebugControl @ 0x82E95802 -> HOOKED (Unknown @ 0x8E1706F2)
[Address] SSDT[370] : NtTerminateProcess @ 0x82E6AD9A -> HOOKED (Unknown @ 0x8E17067F)
[Address] Shadow SSDT[585] : NtUserSetWindowsHookEx -> HOOKED (Unknown @ 0x8E170706)
[Address] Shadow SSDT[588] : NtUserSetWinEventHook -> HOOKED (Unknown @ 0x8E17070B)
[Inline] EAT @explorer.exe (?MILLIS_PER_SECOND@GCDate@@2JB) : GrooveUtil.DLL -> HOOKED (Unknown @ 0xCD24333C)
[Inline] EAT @explorer.exe (??_7CBaseAce@@6B@) : wbemcomn.dll -> HOOKED (Unknown @ 0x59597A31)

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) (Standardní diskové jednotky) - WDC WD3200AAKS-00C9A0 ATA Device +++++
--- User ---
[MBR] b6c652887bf1faea51c6dee3ddf068c4
[BSP] 18524fac285a6954574d982a109a98f5 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 64897 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 133115904 | Size: 240244 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ IDE) (Standardní diskové jednotky) - WDC WD5000AACS-00ZUB0 ATA Device +++++
--- User ---
[MBR] b8dd808e71d47ed069e0890fce24498a
[BSP] 7fdd58c8a4c173eb9930914ac8491d75 : Windows XP MBR Code
Partition table:
0 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 16065 | Size: 476929 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_D_10222013_110943.txt >>
RKreport[0]_S_10222013_103321.txt;RKreport[0]_S_10222013_110921.txt

11:10:49.0145 3000 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
11:10:49.0160 3000 ============================================================
11:10:49.0160 3000 Current date / time: 2013/10/22 11:10:49.0160
11:10:49.0160 3000 SystemInfo:
11:10:49.0160 3000
11:10:49.0160 3000 OS Version: 6.1.7601 ServicePack: 1.0
11:10:49.0160 3000 Product type: Workstation
11:10:49.0160 3000 ComputerName: RADIM-PC
11:10:49.0160 3000 UserName: Radim
11:10:49.0160 3000 Windows directory: C:\Windows
11:10:49.0160 3000 System windows directory: C:\Windows
11:10:49.0160 3000 Processor architecture: Intel x86
11:10:49.0160 3000 Number of processors: 2
11:10:49.0160 3000 Page size: 0x1000
11:10:49.0160 3000 Boot type: Normal boot
11:10:49.0160 3000 ============================================================
11:10:50.0050 3000 Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
11:10:50.0065 3000 Drive \Device\Harddisk0\DR0 - Size: 0x4A85C4DE00 (298.09 Gb), SectorSize: 0x200, Cylinders: 0xA181, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000050
11:10:50.0065 3000 ============================================================
11:10:50.0065 3000 \Device\Harddisk1\DR1:
11:10:50.0065 3000 MBR partitions:
11:10:50.0486 3000 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F00, BlocksNum 0x3A380D41
11:10:50.0486 3000 \Device\Harddisk0\DR0:
11:10:50.0486 3000 MBR partitions:
11:10:50.0486 3000 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
11:10:50.0486 3000 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x7EC0800
11:10:50.0486 3000 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x7EF3000, BlocksNum 0x1D53A000
11:10:50.0486 3000 ============================================================
11:10:50.0533 3000 C: <-> \Device\Harddisk0\DR0\Partition2
11:10:50.0564 3000 E: <-> \Device\Harddisk0\DR0\Partition3
11:10:50.0564 3000 F: <-> \Device\Harddisk1\DR1\Partition1
11:10:50.0564 3000 ============================================================
11:10:50.0564 3000 Initialize success
11:10:50.0564 3000 ============================================================
11:10:58.0458 1968 ============================================================
11:10:58.0458 1968 Scan started
11:10:58.0458 1968 Mode: Manual;
11:10:58.0458 1968 ============================================================
11:10:58.0864 1968 ================ Scan system memory ========================
11:10:58.0864 1968 System memory - ok
11:10:58.0864 1968 ================ Scan services =============================
11:10:58.0973 1968 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
11:10:58.0988 1968 1394ohci - ok
11:10:59.0020 1968 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys
11:10:59.0020 1968 ACPI - ok
11:10:59.0051 1968 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
11:10:59.0051 1968 AcpiPmi - ok
11:10:59.0160 1968 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
11:10:59.0160 1968 AdobeARMservice - ok
11:10:59.0207 1968 [ A283108E14F3970432C21AF4C0CB1BCE ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
11:10:59.0207 1968 AdobeFlashPlayerUpdateSvc - ok
11:10:59.0254 1968 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
11:10:59.0254 1968 adp94xx - ok
11:10:59.0285 1968 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
11:10:59.0285 1968 adpahci - ok
11:10:59.0300 1968 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
11:10:59.0300 1968 adpu320 - ok
11:10:59.0332 1968 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
11:10:59.0332 1968 AeLookupSvc - ok
11:10:59.0378 1968 [ F81BB7E487EDCEAB630A7EE66CF23913 ] AFD C:\Windows\system32\drivers\afd.sys
11:10:59.0394 1968 AFD - ok
11:10:59.0410 1968 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys
11:10:59.0410 1968 agp440 - ok
11:10:59.0425 1968 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
11:10:59.0425 1968 aic78xx - ok
11:10:59.0456 1968 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
11:10:59.0456 1968 ALG - ok
11:10:59.0488 1968 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys
11:10:59.0488 1968 aliide - ok
11:10:59.0503 1968 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys
11:10:59.0503 1968 amdagp - ok
11:10:59.0519 1968 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys
11:10:59.0519 1968 amdide - ok
11:10:59.0550 1968 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
11:10:59.0550 1968 AmdK8 - ok
11:10:59.0550 1968 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
11:10:59.0566 1968 AmdPPM - ok
11:10:59.0581 1968 [ D320BF87125326F996D4904FE24300FC ] amdsata C:\Windows\system32\drivers\amdsata.sys
11:10:59.0581 1968 amdsata - ok
11:10:59.0612 1968 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
11:10:59.0612 1968 amdsbs - ok
11:10:59.0628 1968 [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata C:\Windows\system32\drivers\amdxata.sys
11:10:59.0628 1968 amdxata - ok
11:10:59.0706 1968 [ 746497D339C854053193119D119799BA ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
11:10:59.0706 1968 AntiVirSchedulerService - ok
11:10:59.0737 1968 [ A2D4915D1CCD0338AB85F14D1C22FD0C ] AntiVirService C:\Program Files\Avira\AntiVir Desktop\avguard.exe
11:10:59.0737 1968 AntiVirService - ok
11:10:59.0768 1968 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys
11:10:59.0768 1968 AppID - ok
11:10:59.0800 1968 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
11:10:59.0800 1968 AppIDSvc - ok
11:10:59.0831 1968 [ EACFDF31921F51C097629F1F3C9129B4 ] Appinfo C:\Windows\System32\appinfo.dll
11:10:59.0831 1968 Appinfo - ok
11:10:59.0862 1968 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
11:10:59.0862 1968 AppMgmt - ok
11:10:59.0878 1968 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
11:10:59.0878 1968 arc - ok
11:10:59.0893 1968 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
11:10:59.0893 1968 arcsas - ok
11:10:59.0909 1968 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
11:10:59.0909 1968 AsyncMac - ok
11:10:59.0940 1968 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys
11:10:59.0940 1968 atapi - ok
11:10:59.0971 1968 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
11:10:59.0971 1968 AudioEndpointBuilder - ok
11:10:59.0987 1968 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll
11:10:59.0987 1968 Audiosrv - ok
11:11:00.0018 1968 [ 40A34E457431625086F7E161E59A0528 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
11:11:00.0034 1968 avgntflt - ok
11:11:00.0065 1968 [ F260F2EE3D21D00BEC0B08068E27BADB ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
11:11:00.0065 1968 avipbb - ok
11:11:00.0096 1968 [ CB8741CD7B126499FED40C9B197F6AC5 ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
11:11:00.0096 1968 avkmgr - ok
11:11:00.0112 1968 [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV C:\Windows\System32\AxInstSV.dll
11:11:00.0112 1968 AxInstSV - ok
11:11:00.0143 1968 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
11:11:00.0143 1968 b06bdrv - ok
11:11:00.0158 1968 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
11:11:00.0174 1968 b57nd60x - ok
11:11:00.0205 1968 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
11:11:00.0205 1968 BDESVC - ok
11:11:00.0221 1968 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
11:11:00.0221 1968 Beep - ok
11:11:00.0252 1968 [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE C:\Windows\System32\bfe.dll
11:11:00.0252 1968 BFE - ok
11:11:00.0283 1968 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll
11:11:00.0299 1968 BITS - ok
11:11:00.0314 1968 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
11:11:00.0314 1968 blbdrive - ok
11:11:00.0346 1968 [ 73686FE0B2E0469F89FD2075BE724704 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
11:11:00.0346 1968 Bonjour Service - ok
11:11:00.0361 1968 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
11:11:00.0361 1968 bowser - ok
11:11:00.0377 1968 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
11:11:00.0392 1968 BrFiltLo - ok
11:11:00.0392 1968 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
11:11:00.0392 1968 BrFiltUp - ok
11:11:00.0424 1968 [ 77361D72A04F18809D0EFB6CCEB74D4B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
11:11:00.0424 1968 BridgeMP - ok
11:11:00.0455 1968 [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser C:\Windows\System32\browser.dll
11:11:00.0455 1968 Browser - ok
11:11:00.0470 1968 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
11:11:00.0486 1968 Brserid - ok
11:11:00.0502 1968 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
11:11:00.0502 1968 BrSerWdm - ok
11:11:00.0517 1968 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
11:11:00.0517 1968 BrUsbMdm - ok
11:11:00.0533 1968 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
11:11:00.0533 1968 BrUsbSer - ok
11:11:00.0533 1968 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
11:11:00.0548 1968 BTHMODEM - ok
11:11:00.0564 1968 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
11:11:00.0564 1968 bthserv - ok
11:11:00.0626 1968 catchme - ok
11:11:00.0642 1968 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
11:11:00.0642 1968 cdfs - ok
11:11:00.0673 1968 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
11:11:00.0673 1968 cdrom - ok
11:11:00.0704 1968 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll
11:11:00.0704 1968 CertPropSvc - ok
11:11:00.0720 1968 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
11:11:00.0720 1968 circlass - ok
11:11:00.0736 1968 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
11:11:00.0736 1968 CLFS - ok
11:11:00.0782 1968 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
11:11:00.0782 1968 clr_optimization_v2.0.50727_32 - ok
11:11:00.0845 1968 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
11:11:00.0845 1968 clr_optimization_v4.0.30319_32 - ok
11:11:00.0876 1968 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
11:11:00.0876 1968 CmBatt - ok
11:11:00.0892 1968 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys
11:11:00.0892 1968 cmdide - ok
11:11:00.0923 1968 [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG C:\Windows\system32\Drivers\cng.sys
11:11:00.0923 1968 CNG - ok
11:11:00.0938 1968 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
11:11:00.0938 1968 Compbatt - ok
11:11:00.0954 1968 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
11:11:00.0954 1968 CompositeBus - ok
11:11:00.0970 1968 COMSysApp - ok
11:11:00.0985 1968 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
11:11:00.0985 1968 crcdisk - ok
11:11:01.0001 1968 [ 7CA1BECEA5DE2643ADDAD32670E7A4C9 ] CryptSvc C:\Windows\system32\cryptsvc.dll
11:11:01.0001 1968 CryptSvc - ok
11:11:01.0032 1968 [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC C:\Windows\system32\drivers\csc.sys
11:11:01.0048 1968 CSC - ok
11:11:01.0063 1968 [ 15F93B37F6801943360D9EB42485D5D3 ] CscService C:\Windows\System32\cscsvc.dll
11:11:01.0063 1968 CscService - ok
11:11:01.0110 1968 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32\rpcss.dll
11:11:01.0110 1968 DcomLaunch - ok
11:11:01.0126 1968 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
11:11:01.0141 1968 defragsvc - ok
11:11:01.0157 1968 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
11:11:01.0157 1968 DfsC - ok
11:11:01.0188 1968 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll
11:11:01.0188 1968 Dhcp - ok
11:11:01.0204 1968 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
11:11:01.0204 1968 discache - ok
11:11:01.0235 1968 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
11:11:01.0235 1968 Disk - ok
11:11:01.0250 1968 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
11:11:01.0250 1968 Dnscache - ok
11:11:01.0266 1968 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll
11:11:01.0282 1968 dot3svc - ok
11:11:01.0297 1968 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll
11:11:01.0297 1968 DPS - ok
11:11:01.0344 1968 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
11:11:01.0344 1968 drmkaud - ok
11:11:01.0360 1968 [ 71BC35067CABC02C9453AEAA42B2E43E ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
11:11:01.0360 1968 DXGKrnl - ok
11:11:01.0391 1968 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
11:11:01.0391 1968 EapHost - ok
11:11:01.0500 1968 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
11:11:01.0547 1968 ebdrv - ok
11:11:01.0578 1968 [ 81951F51E318AECC2D68559E47485CC4 ] EFS C:\Windows\System32\lsass.exe
11:11:01.0578 1968 EFS - ok
11:11:01.0625 1968 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
11:11:01.0640 1968 ehRecvr - ok
11:11:01.0672 1968 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
11:11:01.0672 1968 ehSched - ok
11:11:01.0703 1968 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
11:11:01.0703 1968 elxstor - ok
11:11:01.0734 1968 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys
11:11:01.0734 1968 ErrDev - ok
11:11:01.0781 1968 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
11:11:01.0781 1968 EventSystem - ok
11:11:01.0796 1968 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
11:11:01.0796 1968 exfat - ok
11:11:01.0828 1968 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
11:11:01.0828 1968 fastfat - ok
11:11:01.0843 1968 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe
11:11:01.0859 1968 Fax - ok
11:11:01.0874 1968 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
11:11:01.0874 1968 fdc - ok
11:11:01.0890 1968 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
11:11:01.0890 1968 fdPHost - ok
11:11:01.0890 1968 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
11:11:01.0906 1968 FDResPub - ok
11:11:01.0906 1968 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
11:11:01.0906 1968 FileInfo - ok
11:11:01.0921 1968 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
11:11:01.0921 1968 Filetrace - ok
11:11:01.0984 1968 [ F76D04F7413B07DAA029F6520B64B4E8 ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
11:11:01.0999 1968 FLEXnet Licensing Service - ok
11:11:02.0015 1968 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
11:11:02.0015 1968 flpydisk - ok
11:11:02.0030 1968 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
11:11:02.0046 1968 FltMgr - ok
11:11:02.0093 1968 [ E12C4928B32ACE04610259647F072635 ] FontCache C:\Windows\system32\FntCache.dll
11:11:02.0124 1968 FontCache - ok
11:11:02.0171 1968 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
11:11:02.0171 1968 FontCache3.0.0.0 - ok
11:11:02.0202 1968 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
11:11:02.0202 1968 FsDepends - ok
11:11:02.0233 1968 [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
11:11:02.0233 1968 Fs_Rec - ok
11:11:02.0264 1968 [ E306A24D9694C724FA2491278BF50FDB ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
11:11:02.0264 1968 fvevol - ok
11:11:02.0280 1968 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
11:11:02.0280 1968 gagp30kx - ok
11:11:02.0296 1968 gdrv - ok
11:11:02.0327 1968 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll
11:11:02.0342 1968 gpsvc - ok
11:11:02.0405 1968 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
11:11:02.0405 1968 gupdate - ok
11:11:02.0420 1968 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
11:11:02.0420 1968 gupdatem - ok
11:11:02.0436 1968 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
11:11:02.0436 1968 hcw85cir - ok
11:11:02.0467 1968 [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
11:11:02.0483 1968 HdAudAddService - ok
11:11:02.0498 1968 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
11:11:02.0498 1968 HDAudBus - ok
11:11:02.0514 1968 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
11:11:02.0514 1968 HidBatt - ok
11:11:02.0530 1968 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
11:11:02.0530 1968 HidBth - ok
11:11:02.0545 1968 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
11:11:02.0545 1968 HidIr - ok
11:11:02.0576 1968 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\System32\hidserv.dll
11:11:02.0576 1968 hidserv - ok
11:11:02.0608 1968 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\drivers\hidusb.sys
11:11:02.0608 1968 HidUsb - ok
11:11:02.0639 1968 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll
11:11:02.0639 1968 hkmsvc - ok
11:11:02.0654 1968 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
11:11:02.0670 1968 HomeGroupListener - ok
11:11:02.0686 1968 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
11:11:02.0686 1968 HomeGroupProvider - ok
11:11:02.0701 1968 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
11:11:02.0701 1968 HpSAMD - ok
11:11:02.0732 1968 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys
11:11:02.0748 1968 HTTP - ok
11:11:02.0764 1968 [ 6D1FE3A24A49EE8A3E0F5F589813E934 ] HWiNFO32 C:\Program Files\HWiNFO32\HWiNFO32.SYS
11:11:02.0764 1968 HWiNFO32 - ok
11:11:02.0795 1968 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
11:11:02.0795 1968 hwpolicy - ok
11:11:02.0826 1968 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
11:11:02.0826 1968 i8042prt - ok
11:11:02.0842 1968 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
11:11:02.0842 1968 iaStorV - ok
11:11:02.0904 1968 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
11:11:02.0935 1968 idsvc - ok
11:11:02.0951 1968 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
11:11:02.0966 1968 iirsp - ok
11:11:02.0998 1968 [ F95622F161474511B8D80D6B093AA610 ] IKEEXT C:\Windows\System32\ikeext.dll
11:11:03.0013 1968 IKEEXT - ok
11:11:03.0122 1968 [ 5DE4220DC9B74D155266FDE5BCBA9580 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
11:11:03.0138 1968 IntcAzAudAddService - ok
11:11:03.0169 1968 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys
11:11:03.0169 1968 intelide - ok
11:11:03.0185 1968 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
11:11:03.0185 1968 intelppm - ok
11:11:03.0216 1968 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
11:11:03.0216 1968 IPBusEnum - ok
11:11:03.0232 1968 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
11:11:03.0232 1968 IpFilterDriver - ok
11:11:03.0263 1968 [ 58F67245D041FBE7AF88F4EAF79DF0FA ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
11:11:03.0263 1968 iphlpsvc - ok
11:11:03.0310 1968 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
11:11:03.0310 1968 IPMIDRV - ok
11:11:03.0325 1968 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
11:11:03.0325 1968 IPNAT - ok
11:11:03.0341 1968 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
11:11:03.0341 1968 IRENUM - ok
11:11:03.0356 1968 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys
11:11:03.0356 1968 isapnp - ok
11:11:03.0403 1968 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
11:11:03.0403 1968 iScsiPrt - ok
11:11:03.0419 1968 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
11:11:03.0419 1968 kbdclass - ok
11:11:03.0450 1968 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
11:11:03.0450 1968 kbdhid - ok
11:11:03.0466 1968 [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso C:\Windows\system32\lsass.exe
11:11:03.0466 1968 KeyIso - ok
11:11:03.0481 1968 [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
11:11:03.0481 1968 KSecDD - ok
11:11:03.0497 1968 [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
11:11:03.0497 1968 KSecPkg - ok
11:11:03.0528 1968 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
11:11:03.0544 1968 KtmRm - ok
11:11:03.0559 1968 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\System32\srvsvc.dll
11:11:03.0575 1968 LanmanServer - ok
11:11:03.0590 1968 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
11:11:03.0590 1968 LanmanWorkstation - ok
11:11:03.0622 1968 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
11:11:03.0622 1968 lltdio - ok
11:11:03.0653 1968 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
11:11:03.0653 1968 lltdsvc - ok
11:11:03.0668 1968 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
11:11:03.0668 1968 lmhosts - ok
11:11:03.0684 1968 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
11:11:03.0684 1968 LSI_FC - ok
11:11:03.0700 1968 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
11:11:03.0700 1968 LSI_SAS - ok
11:11:03.0715 1968 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
11:11:03.0715 1968 LSI_SAS2 - ok
11:11:03.0731 1968 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
11:11:03.0731 1968 LSI_SCSI - ok
11:11:03.0762 1968 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
11:11:03.0762 1968 luafv - ok
11:11:03.0778 1968 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
11:11:03.0778 1968 Mcx2Svc - ok
11:11:03.0793 1968 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
11:11:03.0793 1968 megasas - ok
11:11:03.0809 1968 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
11:11:03.0809 1968 MegaSR - ok
11:11:03.0871 1968 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
11:11:03.0871 1968 Microsoft Office Groove Audit Service - ok
11:11:03.0887 1968 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
11:11:03.0887 1968 MMCSS - ok
11:11:03.0902 1968 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
11:11:03.0902 1968 Modem - ok
11:11:03.0934 1968 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
11:11:03.0934 1968 monitor - ok
11:11:03.0949 1968 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
11:11:03.0949 1968 mouclass - ok
11:11:03.0965 1968 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
11:11:03.0965 1968 mouhid - ok
11:11:03.0996 1968 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
11:11:03.0996 1968 mountmgr - ok
11:11:04.0043 1968 [ 0329A45C849C9D77901094B8FFE8BBB9 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
11:11:04.0043 1968 MozillaMaintenance - ok
11:11:04.0058 1968 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys
11:11:04.0058 1968 mpio - ok
11:11:04.0074 1968 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
11:11:04.0074 1968 mpsdrv - ok
11:11:04.0105 1968 [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc C:\Windows\system32\mpssvc.dll
11:11:04.0136 1968 MpsSvc - ok
11:11:04.0168 1968 [ 21F4B24ACFC79A483515BD986DD9043F ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
11:11:04.0168 1968 MRxDAV - ok
11:11:04.0199 1968 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
11:11:04.0214 1968 mrxsmb - ok
11:11:04.0246 1968 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
11:11:04.0246 1968 mrxsmb10 - ok
11:11:04.0277 1968 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
11:11:04.0277 1968 mrxsmb20 - ok
11:11:04.0292 1968 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys
11:11:04.0292 1968 msahci - ok
11:11:04.0324 1968 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys
11:11:04.0324 1968 msdsm - ok
11:11:04.0339 1968 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
11:11:04.0339 1968 MSDTC - ok
11:11:04.0370 1968 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
11:11:04.0370 1968 Msfs - ok
11:11:04.0386 1968 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
11:11:04.0386 1968 mshidkmdf - ok
11:11:04.0417 1968 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
11:11:04.0417 1968 msisadrv - ok
11:11:04.0433 1968 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
11:11:04.0448 1968 MSiSCSI - ok
11:11:04.0448 1968 msiserver - ok
11:11:04.0480 1968 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
11:11:04.0480 1968 MSKSSRV - ok
11:11:04.0495 1968 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
11:11:04.0495 1968 MSPCLOCK - ok
11:11:04.0511 1968 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
11:11:04.0511 1968 MSPQM - ok
11:11:04.0526 1968 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
11:11:04.0526 1968 MsRPC - ok
11:11:04.0542 1968 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
11:11:04.0542 1968 mssmbios - ok
11:11:04.0558 1968 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
11:11:04.0573 1968 MSTEE - ok
11:11:04.0573 1968 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
11:11:04.0573 1968 MTConfig - ok
11:11:04.0589 1968 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
11:11:04.0589 1968 Mup - ok
11:11:04.0620 1968 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll
11:11:04.0620 1968 napagent - ok
11:11:04.0667 1968 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
11:11:04.0667 1968 NativeWifiP - ok
11:11:04.0714 1968 [ 8C9C922D71F1CD4DEF73F186416B7896 ] NDIS C:\Windows\system32\drivers\ndis.sys
11:11:04.0714 1968 NDIS - ok
11:11:04.0729 1968 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
11:11:04.0745 1968 NdisCap - ok
11:11:04.0760 1968 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
11:11:04.0760 1968 NdisTapi - ok
11:11:04.0776 1968 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
11:11:04.0776 1968 Ndisuio - ok
11:11:04.0807 1968 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
11:11:04.0807 1968 NdisWan - ok
11:11:04.0823 1968 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
11:11:04.0823 1968 NDProxy - ok
11:11:04.0838 1968 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
11:11:04.0838 1968 NetBIOS - ok
11:11:04.0854 1968 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
11:11:04.0854 1968 NetBT - ok
11:11:04.0870 1968 [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon C:\Windows\system32\lsass.exe
11:11:04.0870 1968 Netlogon - ok
11:11:04.0901 1968 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
11:11:04.0916 1968 Netman - ok
11:11:04.0932 1968 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
11:11:04.0932 1968 netprofm - ok
11:11:04.0963 1968 [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
11:11:04.0963 1968 NetTcpPortSharing - ok
11:11:04.0994 1968 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
11:11:04.0994 1968 nfrd960 - ok
11:11:05.0026 1968 [ 374071043F9E4231EE43BE2BB48DD36D ] NlaSvc C:\Windows\System32\nlasvc.dll
11:11:05.0026 1968 NlaSvc - ok
11:11:05.0057 1968 [ CFE3462A9E94A57DCD9676F6B7FE7F67 ] nmwcd C:\Windows\system32\drivers\ccdcmb.sys
11:11:05.0057 1968 nmwcd - ok
11:11:05.0088 1968 [ 8F2A94F991F8C73CEC26B4B5620D1EDC ] nmwcdc C:\Windows\system32\drivers\ccdcmbo.sys
11:11:05.0088 1968 nmwcdc - ok
11:11:05.0104 1968 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
11:11:05.0104 1968 Npfs - ok
11:11:05.0119 1968 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
11:11:05.0119 1968 nsi - ok
11:11:05.0150 1968 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
11:11:05.0150 1968 nsiproxy - ok
11:11:05.0197 1968 [ 5E43D2B0EE64123D4880DFA6626DEFDE ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
11:11:05.0228 1968 Ntfs - ok
11:11:05.0244 1968 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
11:11:05.0244 1968 Null - ok
11:11:05.0494 1968 [ C8CB6135884CBC2A10225C4C3CEF0F95 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
11:11:05.0556 1968 nvlddmkm - ok
11:11:05.0587 1968 [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid C:\Windows\system32\drivers\nvraid.sys
11:11:05.0587 1968 nvraid - ok
11:11:05.0603 1968 [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor C:\Windows\system32\drivers\nvstor.sys
11:11:05.0603 1968 nvstor - ok
11:11:05.0634 1968 [ C1303870D5F9EAD4BEB68559AAB7A87B ] nvsvc C:\Windows\system32\nvvsvc.exe
11:11:05.0634 1968 nvsvc - ok
11:11:05.0665 1968 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
11:11:05.0665 1968 nv_agp - ok
11:11:05.0712 1968 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
11:11:05.0712 1968 odserv - ok
11:11:05.0743 1968 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
11:11:05.0743 1968 ohci1394 - ok
11:11:05.0759 1968 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
11:11:05.0759 1968 ose - ok
11:11:05.0790 1968 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
11:11:05.0790 1968 p2pimsvc - ok
11:11:05.0821 1968 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
11:11:05.0821 1968 p2psvc - ok
11:11:05.0837 1968 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
11:11:05.0837 1968 Parport - ok
11:11:05.0868 1968 [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr C:\Windows\system32\drivers\partmgr.sys
11:11:05.0868 1968 partmgr - ok
11:11:05.0884 1968 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
11:11:05.0884 1968 Parvdm - ok
11:11:05.0899 1968 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
11:11:05.0899 1968 PcaSvc - ok
11:11:05.0930 1968 [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd C:\Windows\system32\DRIVERS\pccsmcfd.sys
11:11:05.0946 1968 pccsmcfd - ok
11:11:05.0946 1968 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys
11:11:05.0962 1968 pci - ok
11:11:05.0962 1968 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys
11:11:05.0962 1968 pciide - ok
11:11:05.0977 1968 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
11:11:05.0993 1968 pcmcia - ok
11:11:05.0993 1968 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
11:11:06.0008 1968 pcw - ok
11:11:06.0024 1968 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
11:11:06.0040 1968 PEAUTH - ok
11:11:06.0071 1968 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
11:11:06.0102 1968 PeerDistSvc - ok
11:11:06.0149 1968 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll
11:11:06.0180 1968 pla - ok
11:11:06.0227 1968 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay C:\Windows\system32\umpnpmgr.dll
11:11:06.0227 1968 PlugPlay - ok
11:11:06.0242 1968 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
11:11:06.0242 1968 PNRPAutoReg - ok
11:11:06.0274 1968 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
11:11:06.0274 1968 PNRPsvc - ok
11:11:06.0305 1968 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
11:11:06.0320 1968 PolicyAgent - ok
11:11:06.0367 1968 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll
11:11:06.0367 1968 Power - ok
11:11:06.0398 1968 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
11:11:06.0398 1968 PptpMiniport - ok
11:11:06.0414 1968 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
11:11:06.0414 1968 Processor - ok
11:11:06.0445 1968 [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc C:\Windows\system32\profsvc.dll
11:11:06.0445 1968 ProfSvc - ok
11:11:06.0461 1968 [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe
11:11:06.0461 1968 ProtectedStorage - ok
11:11:06.0476 1968 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
11:11:06.0476 1968 Psched - ok
11:11:06.0523 1968 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
11:11:06.0523 1968 ql2300 - ok
11:11:06.0539 1968 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
11:11:06.0539 1968 ql40xx - ok
11:11:06.0554 1968 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
11:11:06.0570 1968 QWAVE - ok
11:11:06.0586 1968 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
11:11:06.0586 1968 QWAVEdrv - ok
11:11:06.0601 1968 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
11:11:06.0601 1968 RasAcd - ok
11:11:06.0617 1968 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
11:11:06.0617 1968 RasAgileVpn - ok
11:11:06.0632 1968 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
11:11:06.0632 1968 RasAuto - ok
11:11:06.0648 1968 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
11:11:06.0648 1968 Rasl2tp - ok
11:11:06.0679 1968 [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan C:\Windows\System32\rasmans.dll
11:11:06.0679 1968 RasMan - ok
11:11:06.0695 1968 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
11:11:06.0695 1968 RasPppoe - ok
11:11:06.0710 1968 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
11:11:06.0710 1968 RasSstp - ok
11:11:06.0726 1968 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
11:11:06.0726 1968 rdbss - ok
11:11:06.0742 1968 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
11:11:06.0742 1968 rdpbus - ok
11:11:06.0757 1968 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
11:11:06.0757 1968 RDPCDD - ok
11:11:06.0788 1968 [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
11:11:06.0788 1968 RDPDR - ok
11:11:06.0866 1968 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
11:11:06.0866 1968 RDPENCDD - ok
11:11:06.0898 1968 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
11:11:06.0898 1968 RDPREFMP - ok
11:11:06.0960 1968 [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
11:11:06.0960 1968 RDPWD - ok
11:11:07.0069 1968 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
11:11:07.0069 1968 rdyboost - ok
11:11:07.0100 1968 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
11:11:07.0100 1968 RemoteAccess - ok
11:11:07.0116 1968 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
11:11:07.0116 1968 RemoteRegistry - ok
11:11:07.0132 1968 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
11:11:07.0132 1968 RpcEptMapper - ok
11:11:07.0163 1968 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
11:11:07.0163 1968 RpcLocator - ok
11:11:07.0178 1968 [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs C:\Windows\system32\rpcss.dll
11:11:07.0178 1968 RpcSs - ok
11:11:07.0194 1968 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
11:11:07.0194 1968 rspndr - ok
11:11:07.0225 1968 [ 05C2613F661584190C752F6184D1C8EF ] RTL8167 C:\Windows\system32\DRIVERS\Rt86win7.sys
11:11:07.0241 1968 RTL8167 - ok
11:11:07.0256 1968 [ 7FA7F2E249A5DCBB7970630E15E1F482 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
11:11:07.0256 1968 s3cap - ok
11:11:07.0272 1968 [ 81951F51E318AECC2D68559E47485CC4 ] SamSs C:\Windows\system32\lsass.exe
11:11:07.0272 1968 SamSs - ok
11:11:07.0303 1968 [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
11:11:07.0303 1968 sbp2port - ok
11:11:07.0319 1968 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
11:11:07.0319 1968 SCardSvr - ok
11:11:07.0334 1968 [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
11:11:07.0334 1968 scfilter - ok
11:11:07.0366 1968 [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule C:\Windows\system32\schedsvc.dll
11:11:07.0381 1968 Schedule - ok
11:11:07.0397 1968 [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc C:\Windows\System32\certprop.dll
11:11:07.0397 1968 SCPolicySvc - ok
11:11:07.0428 1968 [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC C:\Windows\System32\SDRSVC.dll
11:11:07.0428 1968 SDRSVC - ok
11:11:07.0444 1968 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
11:11:07.0444 1968 secdrv - ok
11:11:07.0459 1968 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
11:11:07.0459 1968 seclogon - ok
11:11:07.0475 1968 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\system32\sens.dll
11:11:07.0490 1968 SENS - ok
11:11:07.0506 1968 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
11:11:07.0522 1968 SensrSvc - ok
11:11:07.0522 1968 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
11:11:07.0522 1968 Serenum - ok
11:11:07.0553 1968 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
11:11:07.0553 1968 Serial - ok
11:11:07.0568 1968 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
11:11:07.0568 1968 sermouse - ok
11:11:07.0631 1968 [ 8C1F87F5FDD92229D1754B98F073913F ] ServiceLayer C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
11:11:07.0662 1968 ServiceLayer - ok
11:11:07.0724 1968 [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv C:\Windows\system32\sessenv.dll
11:11:07.0724 1968 SessionEnv - ok
11:11:07.0756 1968 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
11:11:07.0756 1968 sffdisk - ok
11:11:07.0771 1968 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
11:11:07.0771 1968 sffp_mmc - ok
11:11:07.0771 1968 [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
11:11:07.0771 1968 sffp_sd - ok
11:11:07.0787 1968 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
11:11:07.0787 1968 sfloppy - ok
11:11:07.0818 1968 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
11:11:07.0834 1968 SharedAccess - ok
11:11:07.0865 1968 [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
11:11:07.0865 1968 ShellHWDetection - ok
11:11:07.0896 1968 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\drivers\sisagp.sys
11:11:07.0896 1968 sisagp - ok
11:11:07.0927 1968 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
11:11:07.0927 1968 SiSRaid2 - ok
11:11:07.0943 1968 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
11:11:07.0943 1968 SiSRaid4 - ok
11:11:07.0990 1968 [ F5BBEDF602C310B00036EB2DBF4348A5 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
11:11:08.0005 1968 SkypeUpdate - ok
11:11:08.0036 1968 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
11:11:08.0036 1968 Smb - ok
11:11:08.0068 1968 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
11:11:08.0068 1968 SNMPTRAP - ok
11:11:08.0083 1968 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
11:11:08.0083 1968 spldr - ok
11:11:08.0114 1968 [ 9AEA093B8F9C37CF45538382CABA2475 ] Spooler C:\Windows\System32\spoolsv.exe
11:11:08.0130 1968 Spooler - ok
11:11:08.0208 1968 [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc C:\Windows\system32\sppsvc.exe
11:11:08.0239 1968 sppsvc - ok
11:11:08.0255 1968 [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify C:\Windows\system32\sppuinotify.dll
11:11:08.0255 1968 sppuinotify - ok
11:11:08.0317 1968 [ CDDDEC541BC3C96F91ECB48759673505 ] sptd C:\Windows\system32\Drivers\sptd.sys
11:11:08.0317 1968 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: CDDDEC541BC3C96F91ECB48759673505
11:11:08.0317 1968 sptd ( LockedFile.Multi.Generic ) - warning
11:11:08.0317 1968 sptd - detected LockedFile.Multi.Generic (1)
11:11:08.0333 1968 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv C:\Windows\system32\DRIVERS\srv.sys
11:11:08.0348 1968 srv - ok
11:11:08.0364 1968 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
11:11:08.0364 1968 srv2 - ok
11:11:08.0380 1968 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
11:11:08.0380 1968 srvnet - ok
11:11:08.0395 1968 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
11:11:08.0395 1968 SSDPSRV - ok
11:11:08.0426 1968 [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv C:\Windows\system32\DRIVERS\ssmdrv.sys
11:11:08.0426 1968 ssmdrv - ok
11:11:08.0442 1968 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
11:11:08.0442 1968 SstpSvc - ok
11:11:08.0458 1968 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
11:11:08.0458 1968 stexstor - ok
11:11:08.0489 1968 [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc C:\Windows\System32\wiaservc.dll
11:11:08.0489 1968 StiSvc - ok
11:11:08.0504 1968 [ 472AF0311073DCECEAA8FA18BA2BDF89 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
11:11:08.0504 1968 storflt - ok
11:11:08.0520 1968 [ 0BF669F0A910BEDA4A32258D363AF2A5 ] StorSvc C:\Windows\system32\storsvc.dll
11:11:08.0520 1968 StorSvc - ok
11:11:08.0551 1968 [ DCAFFD62259E0BDB433DD67B5BB37619 ] storvsc C:\Windows\system32\drivers\storvsc.sys
11:11:08.0551 1968 storvsc - ok
11:11:08.0567 1968 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\drivers\swenum.sys
11:11:08.0567 1968 swenum - ok
11:11:08.0582 1968 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
11:11:08.0598 1968 swprv - ok
11:11:08.0645 1968 [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain C:\Windows\system32\sysmain.dll
11:11:08.0660 1968 SysMain - ok
11:11:08.0676 1968 [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll
11:11:08.0692 1968 TabletInputService - ok
11:11:08.0707 1968 [ 613BF4820361543956909043A265C6AC ] TapiSrv C:\Windows\System32\tapisrv.dll

11:11:08.0707 1968 TapiSrv - ok
11:11:08.0723 1968 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
11:11:08.0723 1968 TBS - ok
11:11:08.0770 1968 [ CA59F7C570AF70BC174F477CFE2D9EE3 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
11:11:08.0785 1968 Tcpip - ok
11:11:08.0832 1968 [ CA59F7C570AF70BC174F477CFE2D9EE3 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
11:11:08.0848 1968 TCPIP6 - ok
11:11:08.0863 1968 [ 3EEBD3BD93DA46A26E89893C7AB2FF3B ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
11:11:08.0863 1968 tcpipreg - ok
11:11:08.0894 1968 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
11:11:08.0894 1968 TDPIPE - ok
11:11:08.0910 1968 [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
11:11:08.0910 1968 TDTCP - ok
11:11:08.0926 1968 [ B459575348C20E8121D6039DA063C704 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
11:11:08.0926 1968 tdx - ok
11:11:08.0941 1968 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD C:\Windows\system32\drivers\termdd.sys
11:11:08.0941 1968 TermDD - ok
11:11:08.0957 1968 [ 382C804C92811BE57829D8E550A900E2 ] TermService C:\Windows\System32\termsrv.dll
11:11:08.0972 1968 TermService - ok
11:11:08.0988 1968 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
11:11:08.0988 1968 Themes - ok
11:11:09.0004 1968 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
11:11:09.0004 1968 THREADORDER - ok
11:11:09.0019 1968 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
11:11:09.0019 1968 TrkWks - ok
11:11:09.0050 1968 [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
11:11:09.0050 1968 TrustedInstaller - ok
11:11:09.0082 1968 [ B37B08F2E5EEB1A37E448E09BACE1101 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
11:11:09.0082 1968 tssecsrv - ok
11:11:09.0113 1968 [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
11:11:09.0113 1968 TsUsbFlt - ok
11:11:09.0128 1968 [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
11:11:09.0128 1968 tunnel - ok
11:11:09.0160 1968 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
11:11:09.0160 1968 uagp35 - ok
11:11:09.0175 1968 [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs C:\Windows\system32\DRIVERS\udfs.sys
11:11:09.0175 1968 udfs - ok
11:11:09.0206 1968 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
11:11:09.0206 1968 UI0Detect - ok
11:11:09.0222 1968 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
11:11:09.0222 1968 uliagpkx - ok
11:11:09.0253 1968 [ D295BED4B898F0FD999FCFA9B32B071B ] umbus C:\Windows\system32\drivers\umbus.sys
11:11:09.0253 1968 umbus - ok
11:11:09.0269 1968 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
11:11:09.0269 1968 UmPass - ok
11:11:09.0284 1968 [ 409994A8EACEEE4E328749C0353527A0 ] UmRdpService C:\Windows\System32\umrdp.dll
11:11:09.0300 1968 UmRdpService - ok
11:11:09.0316 1968 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
11:11:09.0316 1968 upnphost - ok
11:11:09.0362 1968 [ EC01DA44B090D2651FC032C8B9257232 ] upperdev C:\Windows\system32\DRIVERS\usbser_lowerflt.sys
11:11:09.0362 1968 upperdev - ok
11:11:09.0378 1968 [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
11:11:09.0378 1968 usbccgp - ok
11:11:09.0394 1968 [ 2352AB5F9F8F097BF9D41D5A4718A041 ] usbcir C:\Windows\system32\drivers\usbcir.sys
11:11:09.0394 1968 usbcir - ok
11:11:09.0425 1968 [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
11:11:09.0425 1968 usbehci - ok
11:11:09.0456 1968 [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
11:11:09.0456 1968 usbhub - ok
11:11:09.0487 1968 [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
11:11:09.0487 1968 usbohci - ok
11:11:09.0487 1968 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
11:11:09.0503 1968 usbprint - ok
11:11:09.0534 1968 [ 007C0C8D5B01D82ACEB70431D15083F6 ] usbser C:\Windows\system32\drivers\usbser.sys
11:11:09.0534 1968 usbser - ok
11:11:09.0550 1968 [ 4ABD37CFBD710E64F01F9DA8710C73F7 ] UsbserFilt C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys
11:11:09.0550 1968 UsbserFilt - ok
11:11:09.0581 1968 [ F991AB9CC6B908DB552166768176896A ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
11:11:09.0581 1968 USBSTOR - ok
11:11:09.0581 1968 [ 78780C3EBCE17405B1CCD07A3A8A7D72 ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
11:11:09.0581 1968 usbuhci - ok
11:11:09.0596 1968 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
11:11:09.0596 1968 UxSms - ok
11:11:09.0612 1968 [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc C:\Windows\system32\lsass.exe
11:11:09.0612 1968 VaultSvc - ok
11:11:09.0628 1968 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
11:11:09.0628 1968 vdrvroot - ok
11:11:09.0659 1968 [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds C:\Windows\System32\vds.exe
11:11:09.0674 1968 vds - ok
11:11:09.0690 1968 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
11:11:09.0690 1968 vga - ok
11:11:09.0706 1968 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
11:11:09.0706 1968 VgaSave - ok
11:11:09.0737 1968 [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
11:11:09.0737 1968 vhdmp - ok
11:11:09.0768 1968 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\drivers\viaagp.sys
11:11:09.0768 1968 viaagp - ok
11:11:09.0784 1968 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
11:11:09.0784 1968 ViaC7 - ok
11:11:09.0815 1968 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\drivers\viaide.sys
11:11:09.0815 1968 viaide - ok
11:11:09.0830 1968 [ C2F2911156FDC7817C52829C86DA494E ] vmbus C:\Windows\system32\drivers\vmbus.sys
11:11:09.0830 1968 vmbus - ok
11:11:09.0846 1968 [ D4D77455211E204F370D08F4963063CE ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
11:11:09.0846 1968 VMBusHID - ok
11:11:09.0862 1968 [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr C:\Windows\system32\drivers\volmgr.sys
11:11:09.0877 1968 volmgr - ok
11:11:09.0893 1968 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
11:11:09.0893 1968 volmgrx - ok
11:11:09.0908 1968 [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap C:\Windows\system32\drivers\volsnap.sys
11:11:09.0908 1968 volsnap - ok
11:11:09.0924 1968 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
11:11:09.0924 1968 vsmraid - ok
11:11:09.0955 1968 [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS C:\Windows\system32\vssvc.exe
11:11:09.0971 1968 VSS - ok
11:11:10.0002 1968 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
11:11:10.0002 1968 vwifibus - ok
11:11:10.0018 1968 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
11:11:10.0018 1968 W32Time - ok
11:11:10.0033 1968 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
11:11:10.0033 1968 WacomPen - ok
11:11:10.0064 1968 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
11:11:10.0064 1968 WANARP - ok
11:11:10.0064 1968 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
11:11:10.0064 1968 Wanarpv6 - ok
11:11:10.0158 1968 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
11:11:10.0189 1968 WatAdminSvc - ok
11:11:10.0236 1968 [ 691E3285E53DCA558E1A84667F13E15A ] wbengine C:\Windows\system32\wbengine.exe
11:11:10.0267 1968 wbengine - ok
11:11:10.0283 1968 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
11:11:10.0283 1968 WbioSrvc - ok
11:11:10.0314 1968 [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc C:\Windows\System32\wcncsvc.dll
11:11:10.0314 1968 wcncsvc - ok
11:11:10.0330 1968 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
11:11:10.0330 1968 WcsPlugInService - ok
11:11:10.0345 1968 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
11:11:10.0345 1968 Wd - ok
11:11:10.0376 1968 [ 25944D2CC49E0A6C581D02A74B7D6645 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
11:11:10.0376 1968 Wdf01000 - ok
11:11:10.0392 1968 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
11:11:10.0392 1968 WdiServiceHost - ok
11:11:10.0408 1968 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
11:11:10.0408 1968 WdiSystemHost - ok
11:11:10.0439 1968 [ 75E8EBD7040CE238684333F97014762A ] WebClient C:\Windows\System32\webclnt.dll
11:11:10.0439 1968 WebClient - ok
11:11:10.0470 1968 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
11:11:10.0470 1968 Wecsvc - ok
11:11:10.0486 1968 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
11:11:10.0486 1968 wercplsupport - ok
11:11:10.0501 1968 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
11:11:10.0517 1968 WerSvc - ok
11:11:10.0532 1968 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
11:11:10.0532 1968 WfpLwf - ok
11:11:10.0548 1968 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
11:11:10.0548 1968 WIMMount - ok
11:11:10.0610 1968 [ 082CF481F659FAE0DE51AD060881EB47 ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
11:11:10.0626 1968 WinDefend - ok
11:11:10.0642 1968 WinHttpAutoProxySvc - ok
11:11:10.0688 1968 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
11:11:10.0688 1968 Winmgmt - ok
11:11:10.0751 1968 [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM C:\Windows\system32\WsmSvc.dll
11:11:10.0782 1968 WinRM - ok
11:11:10.0829 1968 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
11:11:10.0844 1968 Wlansvc - ok
11:11:10.0860 1968 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
11:11:10.0860 1968 WmiAcpi - ok
11:11:10.0891 1968 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
11:11:10.0891 1968 wmiApSrv - ok
11:11:10.0954 1968 [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
11:11:10.0954 1968 WMPNetworkSvc - ok
11:11:10.0969 1968 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
11:11:10.0985 1968 WPCSvc - ok
11:11:11.0000 1968 [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
11:11:11.0000 1968 WPDBusEnum - ok
11:11:11.0016 1968 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
11:11:11.0016 1968 ws2ifsl - ok
11:11:11.0032 1968 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\system32\wscsvc.dll
11:11:11.0032 1968 wscsvc - ok
11:11:11.0047 1968 WSearch - ok
11:11:11.0110 1968 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
11:11:11.0141 1968 wuauserv - ok
11:11:11.0156 1968 [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
11:11:11.0156 1968 WudfPf - ok
11:11:11.0188 1968 [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
11:11:11.0203 1968 WUDFRd - ok
11:11:11.0219 1968 [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
11:11:11.0219 1968 wudfsvc - ok
11:11:11.0250 1968 [ 3C5E51C05BE9B56EAFF4E388C3AB25E4 ] WwanSvc C:\Windows\System32\wwansvc.dll
11:11:11.0250 1968 WwanSvc - ok
11:11:11.0266 1968 ================ Scan global ===============================
11:11:11.0281 1968 [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll
11:11:11.0297 1968 [ 51BB04243DF6196C06E125898127E397 ] C:\Windows\system32\winsrv.dll
11:11:11.0312 1968 [ 51BB04243DF6196C06E125898127E397 ] C:\Windows\system32\winsrv.dll
11:11:11.0359 1968 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
11:11:11.0375 1968 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
11:11:11.0375 1968 [Global] - ok
11:11:11.0375 1968 ================ Scan MBR ==================================
11:11:11.0375 1968 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
11:11:11.0390 1968 \Device\Harddisk1\DR1 - ok
11:11:11.0390 1968 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
11:11:11.0593 1968 \Device\Harddisk0\DR0 - ok
11:11:11.0593 1968 ================ Scan VBR ==================================
11:11:11.0609 1968 [ F4CC9A9A561C0CBC67B086229B319A9D ] \Device\Harddisk1\DR1\Partition1
11:11:11.0609 1968 \Device\Harddisk1\DR1\Partition1 - ok
11:11:11.0624 1968 [ 176D3A00F1B90042B0D2F98DFE1AF710 ] \Device\Harddisk0\DR0\Partition1
11:11:11.0624 1968 \Device\Harddisk0\DR0\Partition1 - ok
11:11:11.0640 1968 [ 7182D1A75C1A8200F8EEEE7FE91A8348 ] \Device\Harddisk0\DR0\Partition2
11:11:11.0640 1968 \Device\Harddisk0\DR0\Partition2 - ok
11:11:11.0656 1968 [ B4261526528456EAD2AC0BEBF2CAAEFF ] \Device\Harddisk0\DR0\Partition3
11:11:11.0656 1968 \Device\Harddisk0\DR0\Partition3 - ok
11:11:11.0656 1968 ============================================================
11:11:11.0656 1968 Scan finished
11:11:11.0656 1968 ============================================================
11:11:11.0671 1188 Detected object count: 1
11:11:11.0671 1188 Actual detected object count: 1
11:11:23.0465 1188 sptd ( LockedFile.Multi.Generic ) - skipped by user
11:11:23.0465 1188 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
11:11:50.0188 2364 ============================================================
11:11:50.0188 2364 Scan started
11:11:50.0188 2364 Mode: Manual;
11:11:50.0188 2364 ============================================================
11:11:50.0422 2364 ================ Scan system memory ========================
11:11:50.0422 2364 System memory - ok
11:11:50.0422 2364 ================ Scan services =============================
11:11:50.0546 2364 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
11:11:50.0546 2364 1394ohci - ok
11:11:50.0578 2364 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys
11:11:50.0578 2364 ACPI - ok
11:11:50.0593 2364 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
11:11:50.0593 2364 AcpiPmi - ok
11:11:50.0656 2364 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
11:11:50.0656 2364 AdobeARMservice - ok
11:11:50.0718 2364 [ A283108E14F3970432C21AF4C0CB1BCE ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
11:11:50.0718 2364 AdobeFlashPlayerUpdateSvc - ok
11:11:50.0765 2364 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
11:11:50.0765 2364 adp94xx - ok
11:11:50.0796 2364 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
11:11:50.0796 2364 adpahci - ok
11:11:50.0812 2364 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
11:11:50.0812 2364 adpu320 - ok
11:11:50.0843 2364 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
11:11:50.0843 2364 AeLookupSvc - ok
11:11:50.0874 2364 [ F81BB7E487EDCEAB630A7EE66CF23913 ] AFD C:\Windows\system32\drivers\afd.sys
11:11:50.0874 2364 AFD - ok
11:11:50.0905 2364 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys
11:11:50.0905 2364 agp440 - ok
11:11:50.0921 2364 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
11:11:50.0921 2364 aic78xx - ok
11:11:50.0936 2364 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
11:11:50.0936 2364 ALG - ok
11:11:50.0952 2364 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys
11:11:50.0952 2364 aliide - ok
11:11:50.0968 2364 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys
11:11:50.0968 2364 amdagp - ok
11:11:50.0999 2364 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys
11:11:50.0999 2364 amdide - ok
11:11:51.0014 2364 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
11:11:51.0014 2364 AmdK8 - ok
11:11:51.0030 2364 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
11:11:51.0030 2364 AmdPPM - ok
11:11:51.0046 2364 [ D320BF87125326F996D4904FE24300FC ] amdsata C:\Windows\system32\drivers\amdsata.sys
11:11:51.0046 2364 amdsata - ok
11:11:51.0061 2364 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
11:11:51.0061 2364 amdsbs - ok
11:11:51.0077 2364 [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata C:\Windows\system32\drivers\amdxata.sys
11:11:51.0077 2364 amdxata - ok
11:11:51.0139 2364 [ 746497D339C854053193119D119799BA ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
11:11:51.0139 2364 AntiVirSchedulerService - ok
11:11:51.0170 2364 [ A2D4915D1CCD0338AB85F14D1C22FD0C ] AntiVirService C:\Program Files\Avira\AntiVir Desktop\avguard.exe
11:11:51.0170 2364 AntiVirService - ok
11:11:51.0202 2364 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys
11:11:51.0202 2364 AppID - ok
11:11:51.0217 2364 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
11:11:51.0217 2364 AppIDSvc - ok
11:11:51.0264 2364 [ EACFDF31921F51C097629F1F3C9129B4 ] Appinfo C:\Windows\System32\appinfo.dll
11:11:51.0264 2364 Appinfo - ok
11:11:51.0295 2364 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
11:11:51.0295 2364 AppMgmt - ok
11:11:51.0311 2364 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
11:11:51.0311 2364 arc - ok
11:11:51.0326 2364 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
11:11:51.0326 2364 arcsas - ok
11:11:51.0342 2364 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
11:11:51.0342 2364 AsyncMac - ok
11:11:51.0358 2364 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys
11:11:51.0358 2364 atapi - ok
11:11:51.0389 2364 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
11:11:51.0389 2364 AudioEndpointBuilder - ok
11:11:51.0420 2364 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll
11:11:51.0420 2364 Audiosrv - ok
11:11:51.0436 2364 [ 40A34E457431625086F7E161E59A0528 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
11:11:51.0436 2364 avgntflt - ok
11:11:51.0451 2364 [ F260F2EE3D21D00BEC0B08068E27BADB ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
11:11:51.0451 2364 avipbb - ok
11:11:51.0467 2364 [ CB8741CD7B126499FED40C9B197F6AC5 ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
11:11:51.0467 2364 avkmgr - ok
11:11:51.0482 2364 [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV C:\Windows\System32\AxInstSV.dll
11:11:51.0482 2364 AxInstSV - ok
11:11:51.0514 2364 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
11:11:51.0514 2364 b06bdrv - ok
11:11:51.0529 2364 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
11:11:51.0529 2364 b57nd60x - ok
11:11:51.0560 2364 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
11:11:51.0576 2364 BDESVC - ok
11:11:51.0576 2364 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
11:11:51.0576 2364 Beep - ok
11:11:51.0607 2364 [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE C:\Windows\System32\bfe.dll
11:11:51.0623 2364 BFE - ok
11:11:51.0654 2364 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll
11:11:51.0654 2364 BITS - ok
11:11:51.0670 2364 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
11:11:51.0670 2364 blbdrive - ok
11:11:51.0701 2364 [ 73686FE0B2E0469F89FD2075BE724704 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
11:11:51.0701 2364 Bonjour Service - ok
11:11:51.0716 2364 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
11:11:51.0716 2364 bowser - ok
11:11:51.0732 2364 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
11:11:51.0732 2364 BrFiltLo - ok
11:11:51.0748 2364 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
11:11:51.0748 2364 BrFiltUp - ok
11:11:51.0763 2364 [ 77361D72A04F18809D0EFB6CCEB74D4B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
11:11:51.0779 2364 BridgeMP - ok
11:11:51.0794 2364 [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser C:\Windows\System32\browser.dll
11:11:51.0794 2364 Browser - ok
11:11:51.0826 2364 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
11:11:51.0826 2364 Brserid - ok
11:11:51.0841 2364 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
11:11:51.0841 2364 BrSerWdm - ok
11:11:51.0857 2364 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
11:11:51.0857 2364 BrUsbMdm - ok
11:11:51.0872 2364 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
11:11:51.0872 2364 BrUsbSer - ok
11:11:51.0872 2364 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
11:11:51.0872 2364 BTHMODEM - ok
11:11:51.0888 2364 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
11:11:51.0888 2364 bthserv - ok
11:11:51.0966 2364 catchme - ok
11:11:51.0982 2364 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
11:11:51.0982 2364 cdfs - ok
11:11:52.0013 2364 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
11:11:52.0013 2364 cdrom - ok
11:11:52.0044 2364 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll
11:11:52.0044 2364 CertPropSvc - ok
11:11:52.0044 2364 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
11:11:52.0044 2364 circlass - ok
11:11:52.0075 2364 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
11:11:52.0075 2364 CLFS - ok
11:11:52.0122 2364 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
11:11:52.0122 2364 clr_optimization_v2.0.50727_32 - ok
11:11:52.0169 2364 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
11:11:52.0169 2364 clr_optimization_v4.0.30319_32 - ok
11:11:52.0184 2364 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
11:11:52.0184 2364 CmBatt - ok
11:11:52.0200 2364 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys
11:11:52.0200 2364 cmdide - ok
11:11:52.0231 2364 [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG C:\Windows\system32\Drivers\cng.sys
11:11:52.0231 2364 CNG - ok
11:11:52.0247 2364 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
11:11:52.0247 2364 Compbatt - ok
11:11:52.0262 2364 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
11:11:52.0262 2364 CompositeBus - ok
11:11:52.0278 2364 COMSysApp - ok
11:11:52.0294 2364 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
11:11:52.0294 2364 crcdisk - ok
11:11:52.0325 2364 [ 7CA1BECEA5DE2643ADDAD32670E7A4C9 ] CryptSvc C:\Windows\system32\cryptsvc.dll
11:11:52.0325 2364 CryptSvc - ok
11:11:52.0356 2364 [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC C:\Windows\system32\drivers\csc.sys
11:11:52.0356 2364 CSC - ok
11:11:52.0387 2364 [ 15F93B37F6801943360D9EB42485D5D3 ] CscService C:\Windows\System32\cscsvc.dll
11:11:52.0387 2364 CscService - ok
11:11:52.0418 2364 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32\rpcss.dll
11:11:52.0418 2364 DcomLaunch - ok
11:11:52.0450 2364 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
11:11:52.0450 2364 defragsvc - ok
11:11:52.0465 2364 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
11:11:52.0465 2364 DfsC - ok
11:11:52.0481 2364 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll
11:11:52.0481 2364 Dhcp - ok
11:11:52.0496 2364 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
11:11:52.0496 2364 discache - ok
11:11:52.0512 2364 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
11:11:52.0512 2364 Disk - ok
11:11:52.0528 2364 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
11:11:52.0543 2364 Dnscache - ok
11:11:52.0559 2364 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll
11:11:52.0559 2364 dot3svc - ok
11:11:52.0590 2364 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll
11:11:52.0590 2364 DPS - ok
11:11:52.0606 2364 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
11:11:52.0606 2364 drmkaud - ok
11:11:52.0652 2364 [ 71BC35067CABC02C9453AEAA42B2E43E ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
11:11:52.0652 2364 DXGKrnl - ok
11:11:52.0668 2364 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
11:11:52.0684 2364 EapHost - ok
11:11:52.0777 2364 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
11:11:52.0808 2364 ebdrv - ok
11:11:52.0824 2364 [ 81951F51E318AECC2D68559E47485CC4 ] EFS C:\Windows\System32\lsass.exe
11:11:52.0824 2364 EFS - ok
11:11:52.0871 2364 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
11:11:52.0871 2364 ehRecvr - ok
11:11:52.0902 2364 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
11:11:52.0902 2364 ehSched - ok
11:11:52.0918 2364 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
11:11:52.0918 2364 elxstor - ok
11:11:52.0949 2364 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys
11:11:52.0949 2364 ErrDev - ok
11:11:52.0996 2364 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
11:11:52.0996 2364 EventSystem - ok
11:11:53.0011 2364 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
11:11:53.0011 2364 exfat - ok
11:11:53.0027 2364 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
11:11:53.0027 2364 fastfat - ok
11:11:53.0042 2364 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe
11:11:53.0058 2364 Fax - ok
11:11:53.0074 2364 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
11:11:53.0074 2364 fdc - ok
11:11:53.0089 2364 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
11:11:53.0089 2364 fdPHost - ok
11:11:53.0105 2364 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
11:11:53.0105 2364 FDResPub - ok
11:11:53.0120 2364 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
11:11:53.0120 2364 FileInfo - ok
11:11:53.0136 2364 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
11:11:53.0136 2364 Filetrace - ok
11:11:53.0167 2364 [ F76D04F7413B07DAA029F6520B64B4E8 ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
11:11:53.0183 2364 FLEXnet Licensing Service - ok
11:11:53.0183 2364 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
11:11:53.0183 2364 flpydisk - ok
11:11:53.0198 2364 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
11:11:53.0214 2364 FltMgr - ok
11:11:53.0245 2364 [ E12C4928B32ACE04610259647F072635 ] FontCache C:\Windows\system32\FntCache.dll
11:11:53.0261 2364 FontCache - ok
11:11:53.0292 2364 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
11:11:53.0292 2364 FontCache3.0.0.0 - ok
11:11:53.0308 2364 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
11:11:53.0308 2364 FsDepends - ok
11:11:53.0339 2364 [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
11:11:53.0339 2364 Fs_Rec - ok
11:11:53.0370 2364 [ E306A24D9694C724FA2491278BF50FDB ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
11:11:53.0370 2364 fvevol - ok
11:11:53.0386 2364 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
11:11:53.0386 2364 gagp30kx - ok
11:11:53.0386 2364 gdrv - ok
11:11:53.0448 2364 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll
11:11:53.0448 2364 gpsvc - ok
11:11:53.0510 2364 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
11:11:53.0510 2364 gupdate - ok
11:11:53.0526 2364 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
11:11:53.0526 2364 gupdatem - ok
11:11:53.0542 2364 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
11:11:53.0542 2364 hcw85cir - ok
11:11:53.0588 2364 [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
11:11:53.0588 2364 HdAudAddService - ok
11:11:53.0604 2364 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
11:11:53.0604 2364 HDAudBus - ok
11:11:53.0620 2364 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
11:11:53.0620 2364 HidBatt - ok
11:11:53.0635 2364 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
11:11:53.0635 2364 HidBth - ok
11:11:53.0651 2364 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
11:11:53.0651 2364 HidIr - ok
11:11:53.0682 2364 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\System32\hidserv.dll
11:11:53.0682 2364 hidserv - ok
11:11:53.0698 2364 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\drivers\hidusb.sys
11:11:53.0698 2364 HidUsb - ok
11:11:53.0729 2364 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll
11:11:53.0729 2364 hkmsvc - ok
11:11:53.0760 2364 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
11:11:53.0760 2364 HomeGroupListener - ok
11:11:53.0791 2364 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
11:11:53.0791 2364 HomeGroupProvider - ok
11:11:53.0807 2364 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
11:11:53.0807 2364 HpSAMD - ok
11:11:53.0838 2364 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys
11:11:53.0838 2364 HTTP - ok
11:11:53.0869 2364 [ 6D1FE3A24A49EE8A3E0F5F589813E934 ] HWiNFO32 C:\Program Files\HWiNFO32\HWiNFO32.SYS
11:11:53.0869 2364 HWiNFO32 - ok
11:11:53.0885 2364 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
11:11:53.0885 2364 hwpolicy - ok
11:11:53.0916 2364 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
11:11:53.0916 2364 i8042prt - ok
11:11:53.0932 2364 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
11:11:53.0932 2364 iaStorV - ok
11:11:53.0994 2364 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
11:11:54.0010 2364 idsvc - ok
11:11:54.0025 2364 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
11:11:54.0025 2364 iirsp - ok
11:11:54.0056 2364 [ F95622F161474511B8D80D6B093AA610 ] IKEEXT C:\Windows\System32\ikeext.dll
11:11:54.0072 2364 IKEEXT - ok
11:11:54.0181 2364 [ 5DE4220DC9B74D155266FDE5BCBA9580 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
11:11:54.0228 2364 IntcAzAudAddService - ok
11:11:54.0244 2364 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys
11:11:54.0244 2364 intelide - ok
11:11:54.0259 2364 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
11:11:54.0259 2364 intelppm - ok
11:11:54.0275 2364 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
11:11:54.0290 2364 IPBusEnum - ok
11:11:54.0306 2364 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
11:11:54.0306 2364 IpFilterDriver - ok
11:11:54.0337 2364 [ 58F67245D041FBE7AF88F4EAF79DF0FA ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
11:11:54.0337 2364 iphlpsvc - ok
11:11:54.0353 2364 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
11:11:54.0353 2364 IPMIDRV - ok
11:11:54.0368 2364 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
11:11:54.0368 2364 IPNAT - ok
11:11:54.0368 2364 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
11:11:54.0368 2364 IRENUM - ok
11:11:54.0384 2364 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys
11:11:54.0384 2364 isapnp - ok
11:11:54.0415 2364 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
11:11:54.0415 2364 iScsiPrt - ok
11:11:54.0415 2364 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
11:11:54.0415 2364 kbdclass - ok
11:11:54.0431 2364 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
11:11:54.0431 2364 kbdhid - ok
11:11:54.0446 2364 [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso C:\Windows\system32\lsass.exe
11:11:54.0446 2364 KeyIso - ok
11:11:54.0478 2364 [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
11:11:54.0478 2364 KSecDD - ok
11:11:54.0478 2364 [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
11:11:54.0493 2364 KSecPkg - ok
11:11:54.0509 2364 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
11:11:54.0524 2364 KtmRm - ok
11:11:54.0540 2364 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\System32\srvsvc.dll
11:11:54.0540 2364 LanmanServer - ok
11:11:54.0556 2364 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
11:11:54.0571 2364 LanmanWorkstation - ok
11:11:54.0587 2364 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
11:11:54.0587 2364 lltdio - ok
11:11:54.0618 2364 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
11:11:54.0618 2364 lltdsvc - ok
11:11:54.0634 2364 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
11:11:54.0634 2364 lmhosts - ok
11:11:54.0665 2364 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
11:11:54.0665 2364 LSI_FC - ok
11:11:54.0680 2364 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
11:11:54.0680 2364 LSI_SAS - ok
11:11:54.0680 2364 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
11:11:54.0680 2364 LSI_SAS2 - ok
11:11:54.0696 2364 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
11:11:54.0712 2364 LSI_SCSI - ok
11:11:54.0727 2364 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
11:11:54.0727 2364 luafv - ok
11:11:54.0743 2364 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
11:11:54.0743 2364 Mcx2Svc - ok
11:11:54.0758 2364 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
11:11:54.0758 2364 megasas - ok
11:11:54.0774 2364 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
11:11:54.0774 2364 MegaSR - ok
11:11:54.0836 2364 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
11:11:54.0836 2364 Microsoft Office Groove Audit Service - ok
11:11:54.0852 2364 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
11:11:54.0852 2364 MMCSS - ok
11:11:54.0883 2364 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
11:11:54.0883 2364 Modem - ok
11:11:54.0914 2364 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
11:11:54.0914 2364 monitor - ok
11:11:54.0930 2364 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
11:11:54.0930 2364 mouclass - ok
11:11:54.0946 2364 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
11:11:54.0961 2364 mouhid - ok
11:11:54.0977 2364 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
11:11:54.0977 2364 mountmgr - ok
11:11:55.0024 2364 [ 0329A45C849C9D77901094B8FFE8BBB9 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
11:11:55.0024 2364 MozillaMaintenance - ok
11:11:55.0039 2364 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys
11:11:55.0039 2364 mpio - ok
11:11:55.0055 2364 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
11:11:55.0055 2364 mpsdrv - ok
11:11:55.0086 2364 [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc C:\Windows\system32\mpssvc.dll
11:11:55.0102 2364 MpsSvc - ok
11:11:55.0117 2364 [ 21F4B24ACFC79A483515BD986DD9043F ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
11:11:55.0117 2364 MRxDAV - ok
11:11:55.0148 2364 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
11:11:55.0148 2364 mrxsmb - ok
11:11:55.0180 2364 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
11:11:55.0180 2364 mrxsmb10 - ok
11:11:55.0195 2364 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
11:11:55.0195 2364 mrxsmb20 - ok
11:11:55.0226 2364 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys
11:11:55.0226 2364 msahci - ok
11:11:55.0258 2364 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys
11:11:55.0258 2364 msdsm - ok
11:11:55.0273 2364 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
11:11:55.0273 2364 MSDTC - ok
11:11:55.0304 2364 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
11:11:55.0304 2364 Msfs - ok
11:11:55.0320 2364 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
11:11:55.0320 2364 mshidkmdf - ok
11:11:55.0336 2364 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
11:11:55.0336 2364 msisadrv - ok
11:11:55.0367 2364 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
11:11:55.0367 2364 MSiSCSI - ok
11:11:55.0367 2364 msiserver - ok
11:11:55.0382 2364 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
11:11:55.0382 2364 MSKSSRV - ok
11:11:55.0398 2364 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
11:11:55.0398 2364 MSPCLOCK - ok
11:11:55.0414 2364 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
11:11:55.0414 2364 MSPQM - ok
11:11:55.0429 2364 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
11:11:55.0429 2364 MsRPC - ok
11:11:55.0445 2364 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
11:11:55.0445 2364 mssmbios - ok
11:11:55.0460 2364 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
11:11:55.0460 2364 MSTEE - ok
11:11:55.0476 2364 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
11:11:55.0476 2364 MTConfig - ok
11:11:55.0492 2364 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
11:11:55.0492 2364 Mup - ok
11:11:55.0538 2364 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll
11:11:55.0538 2364 napagent - ok
11:11:55.0616 2364 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
11:11:55.0632 2364 NativeWifiP - ok
11:11:55.0679 2364 [ 8C9C922D71F1CD4DEF73F186416B7896 ] NDIS C:\Windows\system32\drivers\ndis.sys
11:11:55.0679 2364 NDIS - ok
11:11:55.0694 2364 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
11:11:55.0694 2364 NdisCap - ok
11:11:55.0710 2364 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
11:11:55.0710 2364 NdisTapi - ok
11:11:55.0726 2364 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
11:11:55.0726 2364 Ndisuio - ok
11:11:55.0757 2364 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
11:11:55.0757 2364 NdisWan - ok
11:11:55.0772 2364 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
11:11:55.0772 2364 NDProxy - ok
11:11:55.0772 2364 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
11:11:55.0772 2364 NetBIOS - ok
11:11:55.0788 2364 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
11:11:55.0788 2364 NetBT - ok
11:11:55.0804 2364 [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon C:\Windows\system32\lsass.exe
11:11:55.0804 2364 Netlogon - ok
11:11:55.0835 2364 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
11:11:55.0850 2364 Netman - ok
11:11:55.0866 2364 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
11:11:55.0882 2364 netprofm - ok
11:11:55.0913 2364 [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
11:11:55.0913 2364 NetTcpPortSharing - ok
11:11:55.0928 2364 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
11:11:55.0928 2364 nfrd960 - ok
11:11:55.0960 2364 [ 374071043F9E4231EE43BE2BB48DD36D ] NlaSvc C:\Windows\System32\nlasvc.dll
11:11:55.0960 2364 NlaSvc - ok
11:11:55.0975 2364 [ CFE3462A9E94A57DCD9676F6B7FE7F67 ] nmwcd C:\Windows\system32\drivers\ccdcmb.sys
11:11:55.0975 2364 nmwcd - ok
11:11:55.0991 2364 [ 8F2A94F991F8C73CEC26B4B5620D1EDC ] nmwcdc C:\Windows\system32\drivers\ccdcmbo.sys
11:11:55.0991 2364 nmwcdc - ok
11:11:56.0006 2364 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
11:11:56.0006 2364 Npfs - ok
11:11:56.0022 2364 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
11:11:56.0022 2364 nsi - ok
11:11:56.0038 2364 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
11:11:56.0038 2364 nsiproxy - ok
11:11:56.0084 2364 [ 5E43D2B0EE64123D4880DFA6626DEFDE ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
11:11:56.0100 2364 Ntfs - ok
11:11:56.0116 2364 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
11:11:56.0116 2364 Null - ok
11:11:56.0334 2364 [ C8CB6135884CBC2A10225C4C3CEF0F95 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
11:11:56.0396 2364 nvlddmkm - ok
11:11:56.0443 2364 [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid C:\Windows\system32\drivers\nvraid.sys
11:11:56.0443 2364 nvraid - ok
11:11:56.0459 2364 [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor C:\Windows\system32\drivers\nvstor.sys
11:11:56.0459 2364 nvstor - ok
11:11:56.0474 2364 [ C1303870D5F9EAD4BEB68559AAB7A87B ] nvsvc C:\Windows\system32\nvvsvc.exe
11:11:56.0474 2364 nvsvc - ok
11:11:56.0506 2364 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
11:11:56.0506 2364 nv_agp - ok
11:11:56.0552 2364 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
11:11:56.0568 2364 odserv - ok
11:11:56.0584 2364 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
11:11:56.0584 2364 ohci1394 - ok
11:11:56.0599 2364 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
11:11:56.0599 2364 ose - ok
11:11:56.0630 2364 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
11:11:56.0630 2364 p2pimsvc - ok
11:11:56.0646 2364 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
11:11:56.0662 2364 p2psvc - ok
11:11:56.0677 2364 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
11:11:56.0677 2364 Parport - ok
11:11:56.0708 2364 [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr C:\Windows\system32\drivers\partmgr.sys
11:11:56.0708 2364 partmgr - ok
11:11:56.0724 2364 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
11:11:56.0724 2364 Parvdm - ok
11:11:56.0740 2364 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
11:11:56.0740 2364 PcaSvc - ok
11:11:56.0771 2364 [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd C:\Windows\system32\DRIVERS\pccsmcfd.sys
11:11:56.0771 2364 pccsmcfd - ok
11:11:56.0786 2364 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys
11:11:56.0786 2364 pci - ok
11:11:56.0802 2364 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys
11:11:56.0802 2364 pciide - ok
11:11:56.0818 2364 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
11:11:56.0818 2364 pcmcia - ok
11:11:56.0833 2364 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
11:11:56.0833 2364 pcw - ok
11:11:56.0864 2364 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
11:11:56.0864 2364 PEAUTH - ok
11:11:56.0911 2364 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
11:11:56.0911 2364 PeerDistSvc - ok
11:11:56.0974 2364 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll
11:11:56.0989 2364 pla - ok
11:11:57.0005 2364 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay C:\Windows\system32\umpnpmgr.dll
11:11:57.0020 2364 PlugPlay - ok
11:11:57.0036 2364 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
11:11:57.0036 2364 PNRPAutoReg - ok
11:11:57.0052 2364 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
11:11:57.0067 2364 PNRPsvc - ok
11:11:57.0098 2364 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
11:11:57.0098 2364 PolicyAgent - ok
11:11:57.0130 2364 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll
11:11:57.0130 2364 Power - ok
11:11:57.0145 2364 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
11:11:57.0145 2364 PptpMiniport - ok
11:11:57.0161 2364 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
11:11:57.0161 2364 Processor - ok
11:11:57.0192 2364 [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc C:\Windows\system32\profsvc.dll
11:11:57.0192 2364 ProfSvc - ok
11:11:57.0208 2364 [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe
11:11:57.0208 2364 ProtectedStorage - ok
11:11:57.0223 2364 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
11:11:57.0223 2364 Psched - ok
11:11:57.0270 2364 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
11:11:57.0270 2364 ql2300 - ok
11:11:57.0301 2364 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
11:11:57.0301 2364 ql40xx - ok
11:11:57.0317 2364 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
11:11:57.0317 2364 QWAVE - ok
11:11:57.0332 2364 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
11:11:57.0332 2364 QWAVEdrv - ok
11:11:57.0348 2364 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
11:11:57.0348 2364 RasAcd - ok
11:11:57.0364 2364 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
11:11:57.0364 2364 RasAgileVpn - ok
11:11:57.0379 2364 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
11:11:57.0379 2364 RasAuto - ok
11:11:57.0395 2364 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
11:11:57.0395 2364 Rasl2tp - ok
11:11:57.0410 2364 [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan C:\Windows\System32\rasmans.dll
11:11:57.0426 2364 RasMan - ok
11:11:57.0442 2364 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
11:11:57.0442 2364 RasPppoe - ok
11:11:57.0457 2364 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
11:11:57.0457 2364 RasSstp - ok
11:11:57.0473 2364 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
11:11:57.0473 2364 rdbss - ok
11:11:57.0488 2364 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
11:11:57.0488 2364 rdpbus - ok
11:11:57.0504 2364 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
11:11:57.0504 2364 RDPCDD - ok
11:11:57.0535 2364 [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
11:11:57.0535 2364 RDPDR - ok
11:11:57.0551 2364 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
11:11:57.0551 2364 RDPENCDD - ok
11:11:57.0551 2364 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
11:11:57.0551 2364 RDPREFMP - ok
11:11:57.0582 2364 [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
11:11:57.0582 2364 RDPWD - ok
11:11:57.0613 2364 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
11:11:57.0613 2364 rdyboost - ok
11:11:57.0629 2364 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
11:11:57.0644 2364 RemoteAccess - ok