PC-HELP.CZ

Zdravím, poslední dobou mi po startu vyskakuje tabulka, viz. obrázek, opravdu mě to už štve, děkuji za váš čas.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:02:27, on 9.11.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16686)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\Origin\Origin.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\SysWOW64\DllHost.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Atheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Cron Service for Prey (CronService) - Fork Ltd. - C:\Prey\platform\windows\cronsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lokátor vzdáleného volání procedur (RPC) (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Zachytávání pro službu SNMP (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Služba Windows Media Player Network Sharing (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8807 bytes

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.11.09.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16686
JAKUB :: JAKUB-HP [administrátor]

Ochrana: Zakázána

9.11.2013 22:10:45
MBAM-log-2013-11-09 (22-22-36).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 212899
Uplynulý čas: 10 minut, 8 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 1
HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo (PUP.Optional.Elex.A) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 6
C:\Users\JAKUB\AppData\Roaming\Milestone\msdn.exe (Trojan.Dropper) -> Nebyla provedena žádná instrukce.
C:\Users\JAKUB\AppData\Roaming\uTorrent\msdn.exe (Trojan.Dropper) -> Nebyla provedena žádná instrukce.
C:\Users\JAKUB\AppData\Local\Temp\nsf3A05.tmp-2\APN_ATU3_.exe (PUP.Optional.Spigot.A) -> Nebyla provedena žádná instrukce.
C:\Users\JAKUB\Downloads\aTubeCatcher.exe (PUP.Optional.Spigot.A) -> Nebyla provedena žádná instrukce.
C:\Users\JAKUB\Downloads\TEST-DRIVE-UNLIMITED-2-RELOADED-CRACK-ONLY.rar (RiskWare.Tool.HCK) -> Nebyla provedena žádná instrukce.
C:\Users\JAKUB\AppData\Local\Application Data\Bundled software uninstaller\bi_client.exe (PUP.Optional.Somoto.A) -> Nebyla provedena žádná instrukce.

(konec)

Zítra dám ADW.

# AdwCleaner v3.005 - Report created 27/09/2013 at 21:13:42
# Updated 22/09/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : JAKUB - JAKUB-HP
# Running from : C:\Users\JAKUB\Downloads\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Found C:\Program Files (x86)\20Dollars2Surf
Folder Found C:\Program Files (x86)\Uniblue\SpeedUpMyPC
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\20Dollars2Surf
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\20Dollars2Surf
Folder Found C:\Users\JAKUB\AppData\Roaming\Uniblue\SpeedUpMyPC

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\nohfdhapjjlndfgjnmdlcabloeembdkj
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Key Found : HKLM\Software\Uniblue\SpeedUpMyPC

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16686


-\\ Mozilla Firefox v20.0.1 (cs)

[ File : C:\Users\JAKUB\AppData\Roaming\Mozilla\Firefox\Profiles\4anqzj7d.default\prefs.js ]


-\\ Google Chrome v29.0.1547.62

[ File : C:\Users\JAKUB\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R2].txt - [2181 octets] - [27/09/2013 17:45:10]
AdwCleaner[R3].txt - [1397 octets] - [27/09/2013 21:13:42]

########## EOF - C:\AdwCleaner\AdwCleaner[R3].txt - [1457 octets] ##########
# AdwCleaner v3.011 - Report created 10/11/2013 at 10:11:23
# Updated 03/11/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : JAKUB - JAKUB-HP
# Running from : C:\Users\JAKUB\Downloads\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Windows\System32\Tasks\Desk 365 RunAsStdUser
File Found : C:\Windows\System32\Tasks\GoforFilesUpdate
Folder Found C:\Program Files (x86)\20Dollars2Surf
Folder Found C:\Program Files (x86)\LSHunter.TV
Folder Found C:\Users\JAKUB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LSHunter.TV

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\fTalk
Key Found : [x64] HKCU\Software\APN PIP
Key Found : [x64] HKCU\Software\fTalk
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Found : HKLM\SOFTWARE\Classes\speedupmypc
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\nohfdhapjjlndfgjnmdlcabloeembdkj
Key Found : HKLM\Software\PIP
Key Found : HKLM\Software\Vittalia
Key Found : HKLM\Software\winzipersvc
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16686


-\\ Mozilla Firefox v20.0.1 (cs)

[ File : C:\Users\JAKUB\AppData\Roaming\Mozilla\Firefox\Profiles\4anqzj7d.default\prefs.js ]


-\\ Google Chrome v29.0.1547.62

[ File : C:\Users\JAKUB\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R2].txt - [2181 octets] - [27/09/2013 16:45:10]
AdwCleaner[R3].txt - [3375 octets] - [27/09/2013 20:13:42]
AdwCleaner[S2].txt - [1538 octets] - [27/09/2013 20:14:29]

########## EOF - C:\AdwCleaner\AdwCleaner[R3].txt - [3495 octets] ##########

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Vymazat-Clean“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit
Můžeš sem pak vložit nový log z MbAM.

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

# AdwCleaner v3.005 - Report created 27/09/2013 at 21:14:29
# Updated 22/09/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : JAKUB - JAKUB-HP
# Running from : C:\Users\JAKUB\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\20Dollars2Surf
Folder Deleted : C:\Program Files (x86)\20Dollars2Surf
Folder Deleted : C:\Program Files (x86)\Uniblue\SpeedUpMyPC
Folder Deleted : C:\Users\JAKUB\AppData\Roaming\Uniblue\SpeedUpMyPC

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\nohfdhapjjlndfgjnmdlcabloeembdkj
Key Deleted : HKLM\Software\Uniblue\SpeedUpMyPC
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16686


-\\ Mozilla Firefox v20.0.1 (cs)

[ File : C:\Users\JAKUB\AppData\Roaming\Mozilla\Firefox\Profiles\4anqzj7d.default\prefs.js ]


-\\ Google Chrome v29.0.1547.62

[ File : C:\Users\JAKUB\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R2].txt - [2181 octets] - [27/09/2013 17:45:10]
AdwCleaner[R3].txt - [1537 octets] - [27/09/2013 21:13:42]
AdwCleaner[S2].txt - [1398 octets] - [27/09/2013 21:14:29]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1458 octets] ##########
# AdwCleaner v3.011 - Report created 10/11/2013 at 21:02:10
# Updated 03/11/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : JAKUB - JAKUB-HP
# Running from : C:\Users\JAKUB\Downloads\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\20Dollars2Surf
Folder Deleted : C:\Program Files (x86)\LSHunter.TV
Folder Deleted : C:\Users\JAKUB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LSHunter.TV
File Deleted : C:\Windows\System32\Tasks\Desk 365 RunAsStdUser
File Deleted : C:\Windows\System32\Tasks\GoforFilesUpdate

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\nohfdhapjjlndfgjnmdlcabloeembdkj
Key Deleted : HKLM\SOFTWARE\Classes\speedupmypc
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\fTalk
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\Vittalia
Key Deleted : HKLM\Software\winzipersvc

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16686


-\\ Mozilla Firefox v20.0.1 (cs)

[ File : C:\Users\JAKUB\AppData\Roaming\Mozilla\Firefox\Profiles\4anqzj7d.default\prefs.js ]


-\\ Google Chrome v29.0.1547.62

[ File : C:\Users\JAKUB\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R2].txt - [2181 octets] - [27/09/2013 16:45:10]
AdwCleaner[R3].txt - [3587 octets] - [27/09/2013 20:13:42]
AdwCleaner[R4].txt - [2110 octets] - [10/11/2013 20:59:50]
AdwCleaner[S2].txt - [3463 octets] - [27/09/2013 20:14:29]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [3523 octets] ##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by JAKUB on ne 10.11.2013 at 21:18:49,81
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1617569673-3034970362-4137664275-1001\Software\sweetim



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 10.11.2013 at 21:34:54,86
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.11.10.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16686
JAKUB :: JAKUB-HP [administrátor]

Ochrana: Zakázána

10.11.2013 21:24:37
mbam-log-2013-11-10 (21-24-37).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 213086
Uplynulý čas: 16 minut, 32 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 6
C:\Users\JAKUB\AppData\Roaming\Milestone\msdn.exe (Trojan.Dropper) -> Přesun do karantény a smazání se zdařilo.
C:\Users\JAKUB\AppData\Roaming\uTorrent\msdn.exe (Trojan.Dropper) -> Přesun do karantény a smazání se zdařilo.
C:\Users\JAKUB\AppData\Local\Temp\nsf3A05.tmp-2\APN_ATU3_.exe (PUP.Optional.Spigot.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\JAKUB\Downloads\aTubeCatcher.exe (PUP.Optional.Spigot.A) -> Přesun do karantény a smazání se zdařilo.
C:\Users\JAKUB\Downloads\TEST-DRIVE-UNLIMITED-2-RELOADED-CRACK-ONLY.rar (RiskWare.Tool.HCK) -> Přesun do karantény a smazání se zdařilo.
C:\Users\JAKUB\AppData\Local\Application Data\Bundled software uninstaller\bi_client.exe (PUP.Optional.Somoto.A) -> Přesun do karantény a smazání se zdařilo.

(konec)

RogueKiller V8.7.6 _x64_ [Oct 28 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : JAKUB [Práva správce]
Mód : Kontrola -- Datum : 11/10/2013 21:42:49
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 12 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> NALEZENO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : ConsentPromptBehaviorAdmin (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 1 ¤¤¤
[V2][SUSP PATH] MigrationUpdateTask : C:\Users\JAKUB\AppData\Local\MigsUpdater\mupdater.exe - /hr [7] -> NALEZENO

¤¤¤ spuštění položky : 4 ¤¤¤
[Default][SUSP UNIC] RECOVERY (D) ??� zástupce.lnk : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RECOVERY (D) ??� zástupce.lnk [x] -> NALEZENO
[desktop.ini][SUSP UNIC] RECOVERY (D) ??� zástupce.lnk : C:\Users\desktop.ini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RECOVERY (D) ??� zástupce.lnk [x] -> NALEZENO
[JAKUB][SUSP UNIC] Registrace NHL?�� 09.lnk : C:\Users\JAKUB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registrace NHL?�� 09.lnk @C:\PROGRA~2\EASPOR~1\NHL09~1\Support\EAREGI~1.EXE /remind /language=CS /PRID="ODS:15374.110.Base Product" /WHPR="NHL?�� 09" /PRNM="Electronic Arts Product" [-][7][x][x][x] -> NALEZENO
[Public][SUSP UNIC] RECOVERY (D) ??� zástupce.lnk : C:\Users\Public\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RECOVERY (D) ??� zástupce.lnk [x] -> NALEZENO

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Hitachi HTS545050B9A300 SATA Disk Device +++++
--- User ---
[MBR] 6e997b9746195685cb80686963356235
[BSP] 69f60bab93a5619804b2e80f8366bf95 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 199 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 409600 | Size: 460243 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 942987264 | Size: 16393 Mo
3 - [XXXXXX] FAT32-LBA (0x0c) [VISIBLE] Offset (sectors): 976560128 | Size: 103 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_S_11102013_214249.txt >>



Poslední dobou se mi zdá, že PC je mírně zpomalené.

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.
Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "
- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.

RogueKiller V8.7.7 _x64_ [Nov 11 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : JAKUB [Práva správce]
Mód : Odebrat -- Datum : 11/11/2013 16:10:22
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 12 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZÁNO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NAHRAZENO (2)
[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> NAHRAZENO (1)
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : DisableRegistryTools (0) -> [0x2] Systém nemůže nalézt uvedený soubor.
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : ConsentPromptBehaviorAdmin (0) -> NAHRAZENO (2)
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> NAHRAZENO (1)
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 1 ¤¤¤
[V2][SUSP PATH] MigrationUpdateTask : C:\Users\JAKUB\AppData\Local\MigsUpdater\mupdater.exe - /hr [7] -> VYMAZÁNO

¤¤¤ spuštění položky : 4 ¤¤¤
[Default][SUSP UNIC] RECOVERY (D) ??� zástupce.lnk : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RECOVERY (D) ??� zástupce.lnk [x] ->
[desktop.ini][SUSP UNIC] RECOVERY (D) ??� zástupce.lnk : C:\Users\desktop.ini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RECOVERY (D) ??� zástupce.lnk [x] ->
[JAKUB][SUSP UNIC] Registrace NHL?�� 09.lnk : C:\Users\JAKUB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registrace NHL?�� 09.lnk @C:\PROGRA~2\EASPOR~1\NHL09~1\Support\EAREGI~1.EXE /remind /language=CS /PRID="ODS:15374.110.Base Product" /WHPR="NHL?�� 09" /PRNM="Electronic Arts Product" [-][7][x][x][x] -> VYMAZÁNO
[Public][SUSP UNIC] RECOVERY (D) ??� zástupce.lnk : C:\Users\Public\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RECOVERY (D) ??� zástupce.lnk [x] ->

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Hitachi HTS545050B9A300 SATA Disk Device +++++
--- User ---
[MBR] 6e997b9746195685cb80686963356235
[BSP] 69f60bab93a5619804b2e80f8366bf95 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 199 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 409600 | Size: 460243 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 942987264 | Size: 16393 Mo
3 - [XXXXXX] FAT32-LBA (0x0c) [VISIBLE] Offset (sectors): 976560128 | Size: 103 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_D_11112013_161022.txt >>
RKreport[0]_S_11102013_214249.txt;RKreport[0]_S_11112013_161015.txt

16:11:51.0526 2660 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
16:12:01.0749 2660 ============================================================
16:12:01.0749 2660 Current date / time: 2013/11/11 16:12:01.0749
16:12:01.0749 2660 SystemInfo:
16:12:01.0749 2660
16:12:01.0749 2660 OS Version: 6.1.7601 ServicePack: 1.0
16:12:01.0749 2660 Product type: Workstation
16:12:01.0749 2660 ComputerName: JAKUB-HP
16:12:01.0749 2660 UserName: JAKUB
16:12:01.0749 2660 Windows directory: C:\Windows
16:12:01.0749 2660 System windows directory: C:\Windows
16:12:01.0749 2660 Running under WOW64
16:12:01.0749 2660 Processor architecture: Intel x64
16:12:01.0749 2660 Number of processors: 2
16:12:01.0749 2660 Page size: 0x1000
16:12:01.0749 2660 Boot type: Normal boot
16:12:01.0749 2660 ============================================================
16:12:02.0607 2660 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:12:02.0607 2660 ============================================================
16:12:02.0607 2660 \Device\Harddisk0\DR0:
16:12:02.0607 2660 MBR partitions:
16:12:02.0607 2660 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x63800
16:12:02.0607 2660 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x64000, BlocksNum 0x382E9800
16:12:02.0607 2660 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x3834D800, BlocksNum 0x2004800
16:12:02.0607 2660 \Device\Harddisk0\DR0\Partition4: MBR, Type 0xC, StartLBA 0x3A352000, BlocksNum 0x33830
16:12:02.0607 2660 ============================================================
16:12:02.0653 2660 C: <-> \Device\Harddisk0\DR0\Partition2
16:12:02.0685 2660 D: <-> \Device\Harddisk0\DR0\Partition3
16:12:02.0685 2660 ============================================================
16:12:02.0685 2660 Initialize success
16:12:02.0685 2660 ============================================================
16:12:06.0491 2696 ============================================================
16:12:06.0491 2696 Scan started
16:12:06.0491 2696 Mode: Manual;
16:12:06.0491 2696 ============================================================
16:12:07.0068 2696 ================ Scan system memory ========================
16:12:07.0068 2696 System memory - ok
16:12:07.0068 2696 ================ Scan services =============================
16:12:07.0209 2696 [ ABDCD326E1DD1C62509ED94C278A7453 ] !SASCORE C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
16:12:07.0209 2696 !SASCORE - ok
16:12:07.0443 2696 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
16:12:07.0443 2696 1394ohci - ok
16:12:07.0489 2696 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
16:12:07.0489 2696 ACPI - ok
16:12:07.0521 2696 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
16:12:07.0521 2696 AcpiPmi - ok
16:12:07.0661 2696 [ A283108E14F3970432C21AF4C0CB1BCE ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
16:12:07.0677 2696 AdobeFlashPlayerUpdateSvc - ok
16:12:07.0739 2696 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
16:12:07.0739 2696 adp94xx - ok
16:12:07.0770 2696 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
16:12:07.0786 2696 adpahci - ok
16:12:07.0833 2696 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
16:12:07.0833 2696 adpu320 - ok
16:12:07.0879 2696 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
16:12:07.0879 2696 AeLookupSvc - ok
16:12:07.0942 2696 [ D1E343BC00136CE03C4D403194D06A80 ] AERTFilters C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
16:12:07.0942 2696 AERTFilters - ok
16:12:07.0989 2696 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
16:12:07.0989 2696 AFD - ok
16:12:08.0051 2696 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
16:12:08.0051 2696 agp440 - ok
16:12:08.0067 2696 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
16:12:08.0067 2696 ALG - ok
16:12:08.0113 2696 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
16:12:08.0113 2696 aliide - ok
16:12:08.0176 2696 [ DDEA39A56B801A675E118429AF6A30D2 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
16:12:08.0176 2696 AMD External Events Utility - ok
16:12:08.0223 2696 AMD FUEL Service - ok
16:12:08.0254 2696 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
16:12:08.0254 2696 amdide - ok
16:12:08.0332 2696 [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64 C:\Windows\system32\DRIVERS\amdiox64.sys
16:12:08.0332 2696 amdiox64 - ok
16:12:08.0379 2696 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
16:12:08.0379 2696 AmdK8 - ok
16:12:08.0675 2696 [ 7F2BDD27F3611041D6B0D6C565A748A7 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
16:12:08.0753 2696 amdkmdag - ok
16:12:08.0847 2696 [ 8E2A3479CF4E871F37D0F023692E6694 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
16:12:08.0847 2696 amdkmdap - ok
16:12:08.0909 2696 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
16:12:08.0909 2696 AmdPPM - ok
16:12:08.0971 2696 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
16:12:08.0971 2696 amdsata - ok
16:12:09.0003 2696 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
16:12:09.0003 2696 amdsbs - ok
16:12:09.0049 2696 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
16:12:09.0049 2696 amdxata - ok
16:12:09.0096 2696 [ F9D46B6B322708BD5AFCC8767EBDC901 ] amd_sata C:\Windows\system32\DRIVERS\amd_sata.sys
16:12:09.0096 2696 amd_sata - ok
16:12:09.0143 2696 [ 329CC9C7E20DEEBCD4CD10816193EF14 ] amd_xata C:\Windows\system32\DRIVERS\amd_xata.sys
16:12:09.0143 2696 amd_xata - ok
16:12:09.0283 2696 [ 746497D339C854053193119D119799BA ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
16:12:09.0283 2696 AntiVirSchedulerService - ok
16:12:09.0330 2696 [ A2D4915D1CCD0338AB85F14D1C22FD0C ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
16:12:09.0330 2696 AntiVirService - ok
16:12:09.0393 2696 [ 616D075E0DA5B6674D572372F1B6727E ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
16:12:09.0455 2696 AntiVirWebService - ok
16:12:09.0533 2696 [ 5B25D1A753CC3A3EDB909BB759AC1098 ] AODDriver4.1 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
16:12:09.0533 2696 AODDriver4.1 - ok
16:12:09.0595 2696 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
16:12:09.0595 2696 AppID - ok
16:12:09.0627 2696 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
16:12:09.0627 2696 AppIDSvc - ok
16:12:09.0674 2696 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll
16:12:09.0674 2696 Appinfo - ok
16:12:09.0783 2696 [ 565116C41EAF90319DA8DD3CAB99C5D7 ] AR5416 C:\Windows\system32\DRIVERS\athwx.sys
16:12:09.0798 2696 AR5416 - ok
16:12:09.0830 2696 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
16:12:09.0830 2696 arc - ok
16:12:09.0845 2696 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
16:12:09.0845 2696 arcsas - ok
16:12:10.0001 2696 [ 108FB6DDB69E537A2EA53F425363FAE5 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
16:12:10.0079 2696 aspnet_state - ok
16:12:10.0110 2696 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
16:12:10.0110 2696 AsyncMac - ok
16:12:10.0142 2696 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
16:12:10.0142 2696 atapi - ok
16:12:10.0188 2696 [ CBE61B4494165F458BD87E37181EE934 ] AthBTPort C:\Windows\system32\DRIVERS\btath_flt.sys
16:12:10.0188 2696 AthBTPort - ok
16:12:10.0251 2696 [ 650F111D5CDA64C10AE4B9D1BA9D4FFF ] Atheros Bt&Wlan Coex Agent C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
16:12:10.0251 2696 Atheros Bt&Wlan Coex Agent - ok
16:12:10.0266 2696 [ 7DF4FC861D1AB4977195936025B1B940 ] AtherosSvc C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
16:12:10.0266 2696 AtherosSvc - ok
16:12:10.0407 2696 [ B347A59887FA80074403743090CF8D14 ] athr C:\Windows\system32\DRIVERS\athrx.sys
16:12:10.0438 2696 athr - ok
16:12:10.0500 2696 [ B0790FF0E25B7A2674296052F2162C1A ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
16:12:10.0500 2696 AtiHDAudioService - ok
16:12:10.0547 2696 [ 2D648572BA9A610952FCAFBA1E119C2D ] AtiHdmiService C:\Windows\system32\drivers\AtiHdmi.sys
16:12:10.0547 2696 AtiHdmiService - ok
16:12:10.0563 2696 atillk64 - ok
16:12:10.0594 2696 [ E82E61F46D1336447F4DEFF8C074F13E ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie64.sys
16:12:10.0594 2696 AtiPcie - ok
16:12:10.0641 2696 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
16:12:10.0656 2696 AudioEndpointBuilder - ok
16:12:10.0656 2696 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
16:12:10.0672 2696 AudioSrv - ok
16:12:10.0719 2696 [ 0D5C96FD25D6455D97A5C4D7706DFAB1 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
16:12:10.0734 2696 avgntflt - ok
16:12:10.0781 2696 [ E26B3C8E9C3DDE047B32C5719955D715 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
16:12:10.0781 2696 avipbb - ok
16:12:10.0797 2696 [ 490FA25161BF3E51993EB724ECF0ACEB ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
16:12:10.0797 2696 avkmgr - ok
16:12:10.0812 2696 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
16:12:10.0828 2696 AxInstSV - ok
16:12:10.0875 2696 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
16:12:10.0875 2696 b06bdrv - ok
16:12:10.0890 2696 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
16:12:10.0906 2696 b57nd60a - ok
16:12:10.0953 2696 [ 9E84A931DBEE0292E38ED672F6293A99 ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl664.sys
16:12:10.0968 2696 BCM43XX - ok
16:12:11.0000 2696 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
16:12:11.0015 2696 BDESVC - ok
16:12:11.0031 2696 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
16:12:11.0031 2696 Beep - ok
16:12:11.0062 2696 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
16:12:11.0062 2696 BFE - ok
16:12:11.0109 2696 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
16:12:11.0124 2696 BITS - ok
16:12:11.0140 2696 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
16:12:11.0140 2696 blbdrive - ok
16:12:11.0156 2696 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
16:12:11.0156 2696 bowser - ok
16:12:11.0171 2696 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
16:12:11.0171 2696 BrFiltLo - ok
16:12:11.0187 2696 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
16:12:11.0187 2696 BrFiltUp - ok
16:12:11.0218 2696 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
16:12:11.0218 2696 BridgeMP - ok
16:12:11.0265 2696 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
16:12:11.0265 2696 Browser - ok
16:12:11.0296 2696 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
16:12:11.0296 2696 Brserid - ok
16:12:11.0343 2696 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
16:12:11.0343 2696 BrSerWdm - ok
16:12:11.0358 2696 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
16:12:11.0358 2696 BrUsbMdm - ok
16:12:11.0390 2696 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
16:12:11.0390 2696 BrUsbSer - ok
16:12:11.0421 2696 [ FE70889A85C57A9268101B2DB0474509 ] BTATH_A2DP C:\Windows\system32\drivers\btath_a2dp.sys
16:12:11.0421 2696 BTATH_A2DP - ok
16:12:11.0468 2696 [ A9DF22429E8D69ED849B0BBBE16BD327 ] BTATH_BUS C:\Windows\system32\DRIVERS\btath_bus.sys
16:12:11.0468 2696 BTATH_BUS - ok
16:12:11.0499 2696 [ C864FF85EE16D61C2BDD5EF76824625F ] BTATH_HCRP C:\Windows\system32\DRIVERS\btath_hcrp.sys
16:12:11.0499 2696 BTATH_HCRP - ok
16:12:11.0514 2696 [ 0DEA505EFB5D771826D177EF8B8A208F ] BTATH_LWFLT C:\Windows\system32\DRIVERS\btath_lwflt.sys
16:12:11.0530 2696 BTATH_LWFLT - ok
16:12:11.0546 2696 [ 724C8088C96EFE7A3E63FEC21D4681C0 ] BTATH_RCP C:\Windows\system32\DRIVERS\btath_rcp.sys
16:12:11.0546 2696 BTATH_RCP - ok
16:12:11.0577 2696 [ 433ED82856EB245577544DA94D0C0565 ] BtFilter C:\Windows\system32\DRIVERS\btfilter.sys
16:12:11.0577 2696 BtFilter - ok
16:12:11.0608 2696 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\DRIVERS\BthEnum.sys
16:12:11.0608 2696 BthEnum - ok
16:12:11.0639 2696 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
16:12:11.0639 2696 BTHMODEM - ok
16:12:11.0670 2696 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
16:12:11.0670 2696 BthPan - ok
16:12:11.0702 2696 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys
16:12:11.0702 2696 BTHPORT - ok
16:12:11.0748 2696 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
16:12:11.0764 2696 bthserv - ok
16:12:11.0764 2696 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys
16:12:11.0764 2696 BTHUSB - ok
16:12:11.0780 2696 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
16:12:11.0780 2696 cdfs - ok
16:12:11.0826 2696 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
16:12:11.0826 2696 cdrom - ok
16:12:11.0842 2696 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
16:12:11.0842 2696 CertPropSvc - ok
16:12:11.0873 2696 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
16:12:11.0873 2696 circlass - ok
16:12:11.0904 2696 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
16:12:11.0904 2696 CLFS - ok
16:12:11.0982 2696 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16:12:11.0982 2696 clr_optimization_v2.0.50727_32 - ok
16:12:12.0045 2696 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
16:12:12.0045 2696 clr_optimization_v2.0.50727_64 - ok
16:12:12.0154 2696 [ 6D7C8A951AF6AD6835C029B3CB88D333 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
16:12:12.0232 2696 clr_optimization_v4.0.30319_32 - ok
16:12:12.0263 2696 [ 86329C35FF23CFEF0FB6C0023BA06BCE ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
16:12:12.0279 2696 clr_optimization_v4.0.30319_64 - ok
16:12:12.0310 2696 [ 50F92C943F18B070F166D019DFAB3D9A ] clwvd C:\Windows\system32\DRIVERS\clwvd.sys
16:12:12.0310 2696 clwvd - ok
16:12:12.0357 2696 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
16:12:12.0357 2696 CmBatt - ok
16:12:12.0388 2696 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
16:12:12.0388 2696 cmdide - ok
16:12:12.0450 2696 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\Windows\system32\Drivers\cng.sys
16:12:12.0450 2696 CNG - ok
16:12:12.0466 2696 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
16:12:12.0466 2696 Compbatt - ok
16:12:12.0482 2696 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
16:12:12.0482 2696 CompositeBus - ok
16:12:12.0482 2696 COMSysApp - ok
16:12:12.0513 2696 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
16:12:12.0513 2696 crcdisk - ok
16:12:12.0575 2696 [ 2C53AB51F07EF7B58D32C36D8F2F8C16 ] CronService C:\Prey\platform\windows\cronsvc.exe
16:12:12.0591 2696 CronService - ok
16:12:12.0622 2696 [ 6B400F211BEE880A37A1ED0368776BF4 ] CryptSvc C:\Windows\system32\cryptsvc.dll
16:12:12.0622 2696 CryptSvc - ok
16:12:12.0700 2696 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
16:12:12.0700 2696 DcomLaunch - ok
16:12:12.0731 2696 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
16:12:12.0747 2696 defragsvc - ok
16:12:12.0762 2696 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
16:12:12.0762 2696 DfsC - ok
16:12:12.0778 2696 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
16:12:12.0778 2696 Dhcp - ok
16:12:12.0809 2696 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
16:12:12.0809 2696 discache - ok
16:12:12.0809 2696 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
16:12:12.0809 2696 Disk - ok
16:12:12.0856 2696 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
16:12:12.0856 2696 Dnscache - ok
16:12:12.0903 2696 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
16:12:12.0918 2696 dot3svc - ok
16:12:12.0934 2696 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
16:12:12.0934 2696 DPS - ok
16:12:12.0965 2696 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
16:12:12.0965 2696 drmkaud - ok
16:12:13.0012 2696 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
16:12:13.0012 2696 dtsoftbus01 - ok
16:12:13.0090 2696 [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
16:12:13.0106 2696 DXGKrnl - ok
16:12:13.0106 2696 EagleX64 - ok
16:12:13.0137 2696 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
16:12:13.0137 2696 EapHost - ok
16:12:13.0246 2696 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
16:12:13.0277 2696 ebdrv - ok
16:12:13.0324 2696 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
16:12:13.0324 2696 EFS - ok
16:12:13.0402 2696 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
16:12:13.0418 2696 ehRecvr - ok
16:12:13.0433 2696 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
16:12:13.0433 2696 ehSched - ok
16:12:13.0464 2696 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
16:12:13.0480 2696 elxstor - ok
16:12:13.0496 2696 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
16:12:13.0496 2696 ErrDev - ok
16:12:13.0574 2696 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
16:12:13.0589 2696 EventSystem - ok
16:12:13.0605 2696 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
16:12:13.0605 2696 exfat - ok
16:12:13.0698 2696 FairplayKD - ok
16:12:13.0730 2696 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
16:12:13.0730 2696 fastfat - ok
16:12:13.0776 2696 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
16:12:13.0776 2696 Fax - ok
16:12:13.0808 2696 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
16:12:13.0808 2696 fdc - ok
16:12:13.0823 2696 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
16:12:13.0823 2696 fdPHost - ok
16:12:13.0839 2696 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
16:12:13.0854 2696 FDResPub - ok
16:12:13.0870 2696 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
16:12:13.0870 2696 FileInfo - ok
16:12:13.0886 2696 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
16:12:13.0886 2696 Filetrace - ok
16:12:13.0932 2696 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
16:12:13.0932 2696 flpydisk - ok
16:12:13.0964 2696 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
16:12:13.0964 2696 FltMgr - ok
16:12:14.0010 2696 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
16:12:14.0026 2696 FontCache - ok
16:12:14.0120 2696 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
16:12:14.0120 2696 FontCache3.0.0.0 - ok
16:12:14.0151 2696 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
16:12:14.0151 2696 FsDepends - ok
16:12:14.0166 2696 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
16:12:14.0166 2696 Fs_Rec - ok
16:12:14.0213 2696 [ 82D4BD620F7E27EA268EA0E2F701A7AE ] FTDIBUS C:\Windows\system32\drivers\ftdibus.sys
16:12:14.0213 2696 FTDIBUS - ok
16:12:14.0244 2696 [ 1FA21FF2D7B50B528D8B73DB34AD06BC ] FTSER2K C:\Windows\system32\drivers\ftser2k.sys
16:12:14.0244 2696 FTSER2K - ok
16:12:14.0322 2696 [ 290EBA98AD0CE0D1B880B5D71194B069 ] Futuremark SystemInfo Service C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
16:12:14.0338 2696 Futuremark SystemInfo Service - ok
16:12:14.0369 2696 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
16:12:14.0385 2696 fvevol - ok
16:12:14.0432 2696 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
16:12:14.0432 2696 gagp30kx - ok
16:12:14.0463 2696 GDPkIcpt - ok
16:12:14.0525 2696 [ 7508FCFB8D93556213F530DFFAEDEC45 ] GearAspiWDM C:\Windows\system32\drivers\GEARAspiWDM.sys
16:12:14.0525 2696 GearAspiWDM - ok
16:12:14.0572 2696 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
16:12:14.0588 2696 gpsvc - ok
16:12:14.0619 2696 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
16:12:14.0619 2696 hamachi - ok
16:12:14.0790 2696 [ 243424EDDC9563B7912268B54307783D ] Hamachi2Svc C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
16:12:14.0806 2696 Hamachi2Svc - ok
16:12:14.0853 2696 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
16:12:14.0853 2696 hcw85cir - ok
16:12:14.0884 2696 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
16:12:14.0884 2696 HdAudAddService - ok
16:12:14.0915 2696 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
16:12:14.0915 2696 HDAudBus - ok
16:12:14.0931 2696 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
16:12:14.0931 2696 HidBatt - ok
16:12:14.0962 2696 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
16:12:14.0962 2696 HidBth - ok
16:12:14.0978 2696 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
16:12:14.0978 2696 HidIr - ok
16:12:15.0024 2696 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll
16:12:15.0024 2696 hidserv - ok
16:12:15.0056 2696 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
16:12:15.0056 2696 HidUsb - ok
16:12:15.0087 2696 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
16:12:15.0087 2696 hkmsvc - ok
16:12:15.0118 2696 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
16:12:15.0149 2696 HomeGroupListener - ok
16:12:15.0180 2696 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
16:12:15.0180 2696 HomeGroupProvider - ok
16:12:15.0290 2696 [ BB1FC298BE53AAB1E110F6E786BD8AC5 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
16:12:15.0290 2696 HP Support Assistant Service - ok
16:12:15.0368 2696 [ C930128C8F8FF03D8F8C42B570920D56 ] HP Wireless Assistant Service C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
16:12:15.0368 2696 HP Wireless Assistant Service - ok
16:12:15.0461 2696 [ 9B7EDD3FE7C211C36E921D34D18A3A0A ] hpqwmiex C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
16:12:15.0461 2696 hpqwmiex - ok
16:12:15.0492 2696 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
16:12:15.0492 2696 HpSAMD - ok
16:12:15.0570 2696 [ 2BEC76BDCD1BC080210325E7B5094834 ] HPWMISVC C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
16:12:15.0570 2696 HPWMISVC - ok
16:12:15.0602 2696 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
16:12:15.0602 2696 HTTP - ok
16:12:15.0726 2696 [ 6EC01A825F92861E7BCB84D1D43CD5A1 ] HWiNFO32 C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS
16:12:15.0726 2696 HWiNFO32 - ok
16:12:15.0742 2696 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
16:12:15.0742 2696 hwpolicy - ok
16:12:15.0773 2696 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
16:12:15.0773 2696 i8042prt - ok
16:12:15.0820 2696 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
16:12:15.0820 2696 iaStorV - ok
16:12:15.0914 2696 [ ABEFA4BD23329FD9BD47496BF2E58774 ] IconMan_R C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
16:12:15.0929 2696 IconMan_R - ok
16:12:16.0070 2696 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
16:12:16.0085 2696 IDriverT - ok
16:12:16.0179 2696 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
16:12:16.0194 2696 idsvc - ok
16:12:16.0226 2696 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
16:12:16.0226 2696 iirsp - ok
16:12:16.0272 2696 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
16:12:16.0288 2696 IKEEXT - ok
16:12:16.0475 2696 [ C2F868881D48A568B525255F084EF063 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
16:12:16.0491 2696 IntcAzAudAddService - ok
16:12:16.0538 2696 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
16:12:16.0538 2696 intelide - ok
16:12:16.0553 2696 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\drivers\intelppm.sys
16:12:16.0553 2696 intelppm - ok
16:12:16.0584 2696 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
16:12:16.0600 2696 IPBusEnum - ok
16:12:16.0631 2696 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
16:12:16.0631 2696 IpFilterDriver - ok
16:12:16.0678 2696 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
16:12:16.0678 2696 iphlpsvc - ok
16:12:16.0694 2696 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
16:12:16.0694 2696 IPMIDRV - ok
16:12:16.0725 2696 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
16:12:16.0725 2696 IPNAT - ok
16:12:16.0756 2696 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
16:12:16.0756 2696 IRENUM - ok
16:12:16.0787 2696 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
16:12:16.0787 2696 isapnp - ok
16:12:16.0818 2696 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
16:12:16.0818 2696 iScsiPrt - ok
16:12:16.0834 2696 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
16:12:16.0834 2696 kbdclass - ok
16:12:16.0850 2696 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
16:12:16.0850 2696 kbdhid - ok
16:12:16.0881 2696 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
16:12:16.0881 2696 KeyIso - ok
16:12:16.0896 2696 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
16:12:16.0896 2696 KSecDD - ok
16:12:16.0943 2696 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
16:12:16.0943 2696 KSecPkg - ok
16:12:16.0974 2696 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
16:12:16.0974 2696 ksthunk - ok
16:12:17.0021 2696 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
16:12:17.0037 2696 KtmRm - ok
16:12:17.0068 2696 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll
16:12:17.0068 2696 LanmanServer - ok
16:12:17.0115 2696 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
16:12:17.0115 2696 LanmanWorkstation - ok
16:12:17.0146 2696 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
16:12:17.0146 2696 lltdio - ok
16:12:17.0177 2696 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
16:12:17.0193 2696 lltdsvc - ok
16:12:17.0240 2696 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
16:12:17.0240 2696 lmhosts - ok
16:12:17.0302 2696 [ 02468469C450CD16FB66A56FAB70138B ] LMIGuardianSvc C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
16:12:17.0302 2696 LMIGuardianSvc - ok
16:12:17.0333 2696 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
16:12:17.0333 2696 LSI_FC - ok
16:12:17.0364 2696 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
16:12:17.0364 2696 LSI_SAS - ok
16:12:17.0396 2696 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
16:12:17.0396 2696 LSI_SAS2 - ok
16:12:17.0411 2696 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
16:12:17.0411 2696 LSI_SCSI - ok
16:12:17.0442 2696 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
16:12:17.0442 2696 luafv - ok
16:12:17.0474 2696 [ 024DA28053D57E9E32BEE52600576BBB ] MarvinBus C:\Windows\system32\DRIVERS\MarvinBus64.sys
16:12:17.0474 2696 MarvinBus - ok
16:12:17.0505 2696 [ 0BB97D43299910CBFBA59C461B99B910 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
16:12:17.0505 2696 MBAMProtector - ok
16:12:17.0598 2696 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
16:12:17.0598 2696 MBAMScheduler - ok
16:12:17.0630 2696 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
16:12:17.0630 2696 MBAMService - ok
16:12:17.0661 2696 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
16:12:17.0676 2696 Mcx2Svc - ok
16:12:17.0708 2696 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
16:12:17.0708 2696 megasas - ok
16:12:17.0739 2696 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
16:12:17.0739 2696 MegaSR - ok
16:12:17.0770 2696 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
16:12:17.0770 2696 MMCSS - ok
16:12:17.0786 2696 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
16:12:17.0786 2696 Modem - ok
16:12:17.0801 2696 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
16:12:17.0801 2696 monitor - ok
16:12:17.0817 2696 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
16:12:17.0817 2696 mouclass - ok
16:12:17.0832 2696 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
16:12:17.0832 2696 mouhid - ok
16:12:17.0848 2696 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
16:12:17.0848 2696 mountmgr - ok
16:12:17.0879 2696 [ 7EDBBB9351A38C6BB0FE98CFD44DB430 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
16:12:17.0895 2696 MozillaMaintenance - ok
16:12:17.0910 2696 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
16:12:17.0910 2696 mpio - ok
16:12:17.0942 2696 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
16:12:17.0942 2696 mpsdrv - ok
16:12:17.0973 2696 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
16:12:17.0988 2696 MpsSvc - ok
16:12:17.0988 2696 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
16:12:18.0004 2696 MRxDAV - ok
16:12:18.0020 2696 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
16:12:18.0020 2696 mrxsmb - ok
16:12:18.0051 2696 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
16:12:18.0051 2696 mrxsmb10 - ok
16:12:18.0082 2696 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
16:12:18.0082 2696 mrxsmb20 - ok
16:12:18.0098 2696 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
16:12:18.0098 2696 msahci - ok
16:12:18.0144 2696 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
16:12:18.0144 2696 msdsm - ok
16:12:18.0176 2696 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
16:12:18.0176 2696 MSDTC - ok
16:12:18.0222 2696 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
16:12:18.0222 2696 Msfs - ok
16:12:18.0222 2696 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
16:12:18.0222 2696 mshidkmdf - ok
16:12:18.0238 2696 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
16:12:18.0238 2696 msisadrv - ok
16:12:18.0269 2696 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
16:12:18.0300 2696 MSiSCSI - ok
16:12:18.0300 2696 msiserver - ok
16:12:18.0332 2696 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
16:12:18.0332 2696 MSKSSRV - ok
16:12:18.0363 2696 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
16:12:18.0363 2696 MSPCLOCK - ok
16:12:18.0378 2696 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
16:12:18.0378 2696 MSPQM - ok
16:12:18.0410 2696 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
16:12:18.0410 2696 MsRPC - ok
16:12:18.0425 2696 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
16:12:18.0425 2696 mssmbios - ok
16:12:18.0441 2696 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
16:12:18.0441 2696 MSTEE - ok
16:12:18.0472 2696 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
16:12:18.0472 2696 MTConfig - ok
16:12:18.0488 2696 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
16:12:18.0488 2696 Mup - ok
16:12:18.0534 2696 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
16:12:18.0534 2696 napagent - ok
16:12:18.0581 2696 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
16:12:18.0581 2696 NativeWifiP - ok
16:12:18.0628 2696 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
16:12:18.0644 2696 NDIS - ok
16:12:18.0659 2696 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
16:12:18.0659 2696 NdisCap - ok
16:12:18.0690 2696 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys