PC-HELP.CZ

Zdravím, v poslednej dobe sa mi veľmi pomaly načítavajú skoro všetky stránky, pričom rýchlosť je v poriadku. Ďakujem =)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:50:47, on 24. 11. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Mouse Tachometer\Mouse Tachometer.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\System32\AtwtusbIcon.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Rainmeter\Rainmeter.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Evernote\Evernote\EvernoteClipper.exe
C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
D:\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.sk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: IE BHO Utility - {5AB7104A-B71F-49AD-9154-F7F8806AE848} - C:\Program Files\Surf Canyon\surfcanyon.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~4\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [Wireless Console 3] C:\Program Files\ASUS\Wireless Console 3\wcourier.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Mouse Tachometer] C:\Program Files\Mouse Tachometer\Mouse Tachometer.exe --hide
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [AtwtusbIcon] AtwtusbIcon.exe
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil32_11_9_900_117_Plugin.exe -update plugin
O4 - Startup: EvernoteClipper.lnk = C:\Program Files\Evernote\Evernote\EvernoteClipper.exe
O4 - Startup: Obrazovková spinka a spúšťač programu OneNote 2010.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
O4 - Global Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O8 - Extra context menu item: Clip Image - C:\Program Files\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4
O8 - Extra context menu item: Clip selection - C:\Program Files\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3
O8 - Extra context menu item: Clip this page - C:\Program Files\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1
O8 - Extra context menu item: Clip URL - C:\Program Files\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: New Note - C:\Program Files\Evernote\Evernote\\EvernoteIERes\NewNote.html
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~1\MICROS~4\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files\Evernote\Evernote\\EvernoteIERes\AddNote.html
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O20 - Winlogon Notify: spba - C:\Program Files\Common Files\SPBA\homefus2.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FMMService - Flarion Technologies, Inc. - C:\PROGRA~1\MOBILI~1\FMMSER~1.EXE
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit (mi-raysat_3dsmax2010_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SRS Volume Sync Service (SRS_VolSync_Service) - SRS Labs, Inc. - C:\Program Files\SRS Labs\SRS Premium Sound\SRS_VolSync.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: WDDMService - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD File Management Engine (WDFME) - Unknown owner - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe
O23 - Service: WD File Management Shadow Engine (WDSC) - Unknown owner - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe
O23 - Service: WTService - Unknown owner - C:\Windows\system32\atwtusb.exe

--
End of file - 11778 bytes

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verzia databázy: v2013.11.25.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16428
Miroslav :: KOBRA [administrátor]

25. 11. 2013 20:29:08
MBAM-log-2013-11-25 (20-41-15).txt

Typ kontroly: Rýchla kontrola
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 249660
Uplynutý čas: 11 min, 33 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 1
HKLM\SOFTWARE\Speedchecker Limited\PC Speed Up (PUP.Optional.PCSpeedUp.A) -> Žiadna úloha nevykonaná.

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 0
(Škodlivé položky neboli zistené)

(koniec)

# AdwCleaner v3.013 - Report created 25/11/2013 at 20:44:13
# Updated 24/11/2013 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (32 bits)
# Username : Miroslav - KOBRA
# Running from : D:\Download\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\n0wmyrw4.default\invalidprefs.js
Folder Found C:\Program Files\myfree codec
Folder Found C:\Program Files\NCH Software
Folder Found C:\Program Files\Splashtop
Folder Found C:\Program Files\Surf Canyon
Folder Found C:\ProgramData\apn
Folder Found C:\ProgramData\boost_interprocess
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Folder Found C:\ProgramData\NCH Software
Folder Found C:\Users\Miroslav\AppData\Local\Splashtop
Folder Found C:\Users\Miroslav\AppData\Roaming\BitLord

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5AB7104A-B71F-49AD-9154-F7F8806AE848}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5AB7104A-B71F-49AD-9154-F7F8806AE848}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Key Found : HKCU\Software\Myfree Codec
Key Found : HKCU\Software\NCH Software
Key Found : HKCU\Software\Surf Canyon
Key Found : HKCU\Software\YahooPartnerToolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Found : HKLM\SOFTWARE\Classes\AppID\{A3514F71-E63F-440B-8076-14226E21B2BF}
Key Found : HKLM\SOFTWARE\Classes\AppID\surfcanyon.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5AB7104A-B71F-49AD-9154-F7F8806AE848}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Key Found : HKLM\SOFTWARE\Classes\Interface\{68AD96A1-2A28-4841-ABD0-F5AA45F008C9}
Key Found : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Found : HKLM\SOFTWARE\Classes\surfcanyon.BhoSite
Key Found : HKLM\SOFTWARE\Classes\surfcanyon.BhoSite.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{BA3105E9-5DE6-4A1E-A819-6F5046AB67F5}
Key Found : HKLM\Software\DeviceVM
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_digiband_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_digiband_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_electronic-piano_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_electronic-piano_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_synthesia_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_synthesia_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_windows-live-messenger_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_windows-live-messenger_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5AB7104A-B71F-49AD-9154-F7F8806AE848}
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Key Found : HKLM\Software\Myfree Codec
Key Found : HKLM\Software\NCH Software
Key Found : HKLM\Software\PIP

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (sk)

[ File : C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\n0wmyrw4.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [4313 octets] - [25/11/2013 20:44:13]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [4373 octets] ##########

Stáhni si Junkware Removal Tool

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Vymazat-Clean“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.


Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Ultimate x86
Ran by Miroslav on ut 26. 11. 2013 at 12:49:54,39
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\surfcanyon.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\surf canyon
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\theseaapp
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\dt soft\daemon tools toolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\surfcanyon.bhosite
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\surfcanyon.bhosite.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\Windows Vista-7 Taskbar Color Changer_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\Windows Vista-7 Taskbar Color Changer_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_digiband_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_digiband_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_electronic-piano_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_electronic-piano_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_synthesia_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_synthesia_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_windows-live-messenger_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_windows-live-messenger_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5AB7104A-B71F-49AD-9154-F7F8806AE848}
Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip"



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"
Successfully deleted: [Folder] "C:\Users\Miroslav\appdata\local\splashtop"
Successfully deleted: [Folder] "C:\Users\Miroslav\appdata\locallow\surfcanyon"
Successfully deleted: [Folder] "C:\Program Files\myfree codec"
Successfully deleted: [Folder] "C:\Program Files\splashtop"
Successfully deleted: [Folder] "C:\Program Files\surf canyon"
Successfully deleted: [Empty Folder] C:\Users\Miroslav\appdata\local\{17F15FCA-F7E0-4F9F-B41B-EC6A4C9BC3FF}
Successfully deleted: [Empty Folder] C:\Users\Miroslav\appdata\local\{18D1275F-D21D-45E1-95AC-0EF11AD859AB}
Successfully deleted: [Empty Folder] C:\Users\Miroslav\appdata\local\{7501653C-0F7E-4D44-9BFF-32E89EE2B450}
Successfully deleted: [Empty Folder] C:\Users\Miroslav\appdata\local\{78D9F4F4-FF11-41C3-8B3A-7427A2787444}
Successfully deleted: [Empty Folder] C:\Users\Miroslav\appdata\local\{7DAC9B67-1EEB-43E9-BE65-8098AACCA0FD}
Successfully deleted: [Empty Folder] C:\Users\Miroslav\appdata\local\{A3C99429-8AC2-40B2-BECA-0DCCAEFD97E2}
Successfully deleted: [Empty Folder] C:\Users\Miroslav\appdata\local\{C07D0319-E4AE-4CE7-88A8-4883F0AA2CBE}
Successfully deleted: [Empty Folder] C:\Users\Miroslav\appdata\local\{D3E3EAC6-403F-4FBE-92E9-0E97E73D2517}
Successfully deleted: [Empty Folder] C:\Users\Miroslav\appdata\local\{E0F106E9-73C1-4929-9B1A-B86D7D338C33}



~~~ FireFox

Successfully deleted: [File] C:\Users\Miroslav\AppData\Roaming\mozilla\firefox\profiles\n0wmyrw4.default\invalidprefs.js
Emptied folder: C:\Users\Miroslav\AppData\Roaming\mozilla\firefox\profiles\n0wmyrw4.default\minidumps [112 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ut 26. 11. 2013 at 12:52:22,61
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


# AdwCleaner v3.013 - Report created 26/11/2013 at 12:55:48
# Updated 24/11/2013 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (32 bits)
# Username : Miroslav - KOBRA
# Running from : D:\Download\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\NCH Software
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Folder Deleted : C:\Program Files\NCH Software
Folder Deleted : C:\Users\Miroslav\AppData\Roaming\BitLord

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{A3514F71-E63F-440B-8076-14226E21B2BF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5AB7104A-B71F-49AD-9154-F7F8806AE848}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{68AD96A1-2A28-4841-ABD0-F5AA45F008C9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{BA3105E9-5DE6-4A1E-A819-6F5046AB67F5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5AB7104A-B71F-49AD-9154-F7F8806AE848}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5AB7104A-B71F-49AD-9154-F7F8806AE848}
Key Deleted : HKCU\Software\Myfree Codec
Key Deleted : HKCU\Software\NCH Software
Key Deleted : HKLM\Software\DeviceVM
Key Deleted : HKLM\Software\Myfree Codec
Key Deleted : HKLM\Software\NCH Software
Key Deleted : HKLM\Software\PIP
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (sk)

[ File : C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\n0wmyrw4.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [4453 octets] - [25/11/2013 20:44:13]
AdwCleaner[R1].txt - [2508 octets] - [26/11/2013 12:55:17]
AdwCleaner[S0].txt - [2485 octets] - [26/11/2013 12:55:48]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2545 octets] ##########

RogueKiller V8.7.9 [Nov 25 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spustené v : Normálny režim
Užívateľ : Miroslav [Práva Správcu]
Režim : Kontrola -- Dátum : 11/26/2013 13:29:29
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy : 0 ¤¤¤

¤¤¤ Záznamy Registrov : 9 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> NÁJDENÉ
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> NÁJDENÉ
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> NÁJDENÉ
[HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NÁJDENÉ
[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> NÁJDENÉ
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NÁJDENÉ
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NÁJDENÉ
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NÁJDENÉ
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NÁJDENÉ

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spustenie položky : 1 ¤¤¤
[Miroslav][SUSP UNIC] Obrazovková spinka a spúšťač programu OneNote 2010.lnk : C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Obrazovková spinka a spúšťač programu OneNote 2010.lnk @C:\PROGRA~1\MICROS~4\Office14\ONENOTEM.EXE /tsr [-][7] -> NÁJDENÉ

¤¤¤ webové prehliadače : 0 ¤¤¤

¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤

¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤

¤¤¤ Vonkajšie Hives: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST9500325AS +++++
--- User ---
[MBR] 88be0104052b79c37b603789589752bb
[BSP] c83f6d3cdea8c218388548da794008b8 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 63 | Size: 12001 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 24579450 | Size: 80011 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 188442450 | Size: 384924 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončené : << RKreport[0]_S_11262013_132929.txt >>

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit
Můžeš sem pak vložit nový log z MbAM.

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.
Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "
- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.

Malwarebytes Anti-Malware 1.75.0.1300
http://www.malwarebytes.org

Verzia databázy: v2013.11.25.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16428
Miroslav :: KOBRA [administrátor]

26. 11. 2013 22:38:37
mbam-log-2013-11-26 (22-38-37).txt

Typ kontroly: Rýchla kontrola
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 250182
Uplynutý čas: 12 min, 56 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 1
HKLM\SOFTWARE\Speedchecker Limited\PC Speed Up (PUP.Optional.PCSpeedUp.A) -> Pridanie do karantény a zmazanie úspešné.

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 0
(Škodlivé položky neboli zistené)

(koniec)

RogueKiller V8.7.9 [Nov 25 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spustené v : Normálny režim
Užívateľ : Miroslav [Práva Správcu]
Režim : Odebrať -- Dátum : 11/26/2013 23:09:35
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy : 0 ¤¤¤

¤¤¤ Záznamy Registrov : 9 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZANÉ
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> VYMAZANÉ
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> VYMAZANÉ
[HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NAHRADENÉ (2)
[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> NAHRADENÉ (1)
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRADENÉ (0)
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRADENÉ (0)
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRADENÉ (0)
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRADENÉ (0)

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spustenie položky : 1 ¤¤¤
[Miroslav][SUSP UNIC] Obrazovková spinka a spúšťač programu OneNote 2010.lnk : C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Obrazovková spinka a spúšťač programu OneNote 2010.lnk @C:\PROGRA~1\MICROS~4\Office14\ONENOTEM.EXE /tsr [-][7] -> VYMAZANÉ

¤¤¤ webové prehliadače : 0 ¤¤¤

¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤

¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤

¤¤¤ Vonkajšie Hives: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST9500325AS +++++
--- User ---
[MBR] 88be0104052b79c37b603789589752bb
[BSP] c83f6d3cdea8c218388548da794008b8 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 63 | Size: 12001 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 24579450 | Size: 80011 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 188442450 | Size: 384924 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončené : << RKreport[0]_D_11262013_230935.txt >>
RKreport[0]_S_11262013_132929.txt;RKreport[0]_S_11262013_230839.txt

Ještě ten TDDS. Rozděl jej na více odpovědí. Bude pravděpodobně dost dlouhý.

23:18:13.0608 5440 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
23:18:14.0185 5440 ============================================================
23:18:14.0185 5440 Current date / time: 2013/11/26 23:18:14.0185
23:18:14.0185 5440 SystemInfo:
23:18:14.0185 5440
23:18:14.0185 5440 OS Version: 6.1.7601 ServicePack: 1.0
23:18:14.0185 5440 Product type: Workstation
23:18:14.0185 5440 ComputerName: KOBRA
23:18:14.0185 5440 UserName: Miroslav
23:18:14.0185 5440 Windows directory: C:\Windows
23:18:14.0185 5440 System windows directory: C:\Windows
23:18:14.0185 5440 Processor architecture: Intel x86
23:18:14.0185 5440 Number of processors: 2
23:18:14.0185 5440 Page size: 0x1000
23:18:14.0185 5440 Boot type: Normal boot
23:18:14.0185 5440 ============================================================
23:18:17.0305 5440 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
23:18:17.0305 5440 ============================================================
23:18:17.0305 5440 \Device\Harddisk0\DR0:
23:18:17.0305 5440 MBR partitions:
23:18:17.0305 5440 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1770D7A, BlocksNum 0x9C459D8
23:18:17.0321 5440 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xB3B6791, BlocksNum 0x2EFCE4B0
23:18:17.0321 5440 ============================================================
23:18:17.0368 5440 C: <-> \Device\Harddisk0\DR0\Partition1
23:18:17.0415 5440 D: <-> \Device\Harddisk0\DR0\Partition2
23:18:17.0415 5440 ============================================================
23:18:17.0415 5440 Initialize success
23:18:17.0415 5440 ============================================================
23:18:19.0661 4180 ============================================================
23:18:19.0661 4180 Scan started
23:18:19.0661 4180 Mode: Manual;
23:18:19.0661 4180 ============================================================
23:18:21.0237 4180 ================ Scan system memory ========================
23:18:21.0237 4180 System memory - ok
23:18:21.0237 4180 ================ Scan services =============================
23:18:21.0377 4180 [ 01E81C84AD1D0ACC61CF3CFD06632210 ] !SASCORE C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
23:18:21.0377 4180 !SASCORE - ok
23:18:22.0672 4180 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
23:18:22.0672 4180 1394ohci - ok
23:18:22.0703 4180 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys
23:18:22.0719 4180 ACPI - ok
23:18:22.0734 4180 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
23:18:22.0734 4180 AcpiPmi - ok
23:18:22.0828 4180 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
23:18:22.0828 4180 AdobeARMservice - ok
23:18:22.0921 4180 [ A283108E14F3970432C21AF4C0CB1BCE ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
23:18:22.0937 4180 AdobeFlashPlayerUpdateSvc - ok
23:18:22.0984 4180 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
23:18:22.0984 4180 adp94xx - ok
23:18:23.0015 4180 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
23:18:23.0031 4180 adpahci - ok
23:18:23.0046 4180 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
23:18:23.0046 4180 adpu320 - ok
23:18:23.0077 4180 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
23:18:23.0077 4180 AeLookupSvc - ok
23:18:23.0124 4180 [ F81BB7E487EDCEAB630A7EE66CF23913 ] AFD C:\Windows\system32\drivers\afd.sys
23:18:23.0140 4180 AFD - ok
23:18:23.0171 4180 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys
23:18:23.0171 4180 agp440 - ok
23:18:23.0218 4180 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
23:18:23.0218 4180 aic78xx - ok
23:18:23.0499 4180 [ BBE9054FDADC8D49D29C5DA4FB84A803 ] Akamai c:\program files\common files\akamai/netsession_win_8fa3539.dll
23:18:23.0514 4180 Suspicious file (Hidden): c:\program files\common files\akamai/netsession_win_8fa3539.dll. md5: BBE9054FDADC8D49D29C5DA4FB84A803
23:18:23.0514 4180 Akamai ( HiddenFile.Multi.Generic ) - warning
23:18:23.0514 4180 Akamai - detected HiddenFile.Multi.Generic (1)
23:18:23.0561 4180 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
23:18:23.0561 4180 ALG - ok
23:18:23.0608 4180 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys
23:18:23.0623 4180 aliide - ok
23:18:23.0639 4180 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys
23:18:23.0639 4180 amdagp - ok
23:18:23.0670 4180 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys
23:18:23.0670 4180 amdide - ok
23:18:23.0717 4180 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
23:18:23.0717 4180 AmdK8 - ok
23:18:23.0733 4180 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
23:18:23.0733 4180 AmdPPM - ok
23:18:23.0779 4180 [ D320BF87125326F996D4904FE24300FC ] amdsata C:\Windows\system32\drivers\amdsata.sys
23:18:23.0779 4180 amdsata - ok
23:18:23.0811 4180 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
23:18:23.0811 4180 amdsbs - ok
23:18:23.0842 4180 [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata C:\Windows\system32\drivers\amdxata.sys
23:18:23.0842 4180 amdxata - ok
23:18:23.0889 4180 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys
23:18:23.0889 4180 AppID - ok
23:18:23.0920 4180 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
23:18:23.0920 4180 AppIDSvc - ok
23:18:23.0982 4180 [ EACFDF31921F51C097629F1F3C9129B4 ] Appinfo C:\Windows\System32\appinfo.dll
23:18:23.0982 4180 Appinfo - ok
23:18:24.0029 4180 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
23:18:24.0029 4180 AppMgmt - ok
23:18:24.0060 4180 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
23:18:24.0060 4180 arc - ok
23:18:24.0076 4180 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
23:18:24.0076 4180 arcsas - ok
23:18:24.0138 4180 [ EB1807795CD3EEAA3288B4A30DE254E8 ] ASLDRService C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
23:18:24.0154 4180 ASLDRService - ok
23:18:24.0216 4180 [ 7B4D08D2017AC06689D422E06C43F0AA ] ASMMAP C:\Program Files\ATKGFNEX\ASMMAP.sys
23:18:24.0216 4180 ASMMAP - ok
23:18:24.0497 4180 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
23:18:24.0513 4180 aspnet_state - ok
23:18:24.0559 4180 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
23:18:24.0559 4180 AsyncMac - ok
23:18:24.0606 4180 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys
23:18:24.0606 4180 atapi - ok
23:18:24.0684 4180 [ 31CB2740BFDBAC1E48E2B7EAD38F0D27 ] athr C:\Windows\system32\DRIVERS\athr.sys
23:18:24.0747 4180 athr - ok
23:18:24.0996 4180 [ 7C157574A181B19B9DCF5F339E25337E ] ATKGFNEXSrv C:\Program Files\ATKGFNEX\GFNEXSrv.exe
23:18:24.0996 4180 ATKGFNEXSrv - ok
23:18:25.0059 4180 [ 547F07839F71A4357A5E503646CAC2B0 ] atksgt C:\Windows\system32\DRIVERS\atksgt.sys
23:18:25.0059 4180 atksgt - ok
23:18:25.0121 4180 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
23:18:25.0137 4180 AudioEndpointBuilder - ok
23:18:25.0137 4180 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll
23:18:25.0137 4180 Audiosrv - ok
23:18:25.0199 4180 [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV C:\Windows\System32\AxInstSV.dll
23:18:25.0199 4180 AxInstSV - ok
23:18:25.0230 4180 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
23:18:25.0246 4180 b06bdrv - ok
23:18:25.0277 4180 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
23:18:25.0293 4180 b57nd60x - ok
23:18:25.0324 4180 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
23:18:25.0324 4180 BDESVC - ok
23:18:25.0355 4180 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
23:18:25.0355 4180 Beep - ok
23:18:25.0417 4180 [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE C:\Windows\System32\bfe.dll
23:18:25.0417 4180 BFE - ok
23:18:25.0464 4180 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll
23:18:25.0464 4180 BITS - ok
23:18:25.0480 4180 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
23:18:25.0480 4180 blbdrive - ok
23:18:25.0527 4180 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
23:18:25.0542 4180 bowser - ok
23:18:25.0558 4180 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
23:18:25.0558 4180 BrFiltLo - ok
23:18:25.0573 4180 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
23:18:25.0573 4180 BrFiltUp - ok
23:18:25.0651 4180 [ 77361D72A04F18809D0EFB6CCEB74D4B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
23:18:25.0651 4180 BridgeMP - ok
23:18:25.0698 4180 [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser C:\Windows\System32\browser.dll
23:18:25.0698 4180 Browser - ok
23:18:25.0729 4180 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
23:18:25.0729 4180 Brserid - ok
23:18:25.0761 4180 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
23:18:25.0761 4180 BrSerWdm - ok
23:18:25.0776 4180 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
23:18:25.0776 4180 BrUsbMdm - ok
23:18:25.0776 4180 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
23:18:25.0776 4180 BrUsbSer - ok
23:18:25.0854 4180 [ 2865A5C8E98C70C605F417908CEBB3A4 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
23:18:25.0854 4180 BthEnum - ok
23:18:25.0885 4180 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
23:18:25.0885 4180 BTHMODEM - ok
23:18:25.0932 4180 [ AD1872E5829E8A2C3B5B4B641C3EAB0E ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
23:18:25.0932 4180 BthPan - ok
23:18:25.0948 4180 [ 1153DE2E4F5941E10C399CB5592F78A1 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
23:18:25.0963 4180 BTHPORT - ok
23:18:25.0995 4180 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
23:18:25.0995 4180 bthserv - ok
23:18:26.0010 4180 [ C81E9413A25A439F436B1D4B6A0CF9E9 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
23:18:26.0010 4180 BTHUSB - ok
23:18:26.0057 4180 [ 463483285B2D2D345443AAEE7B9391E7 ] btwaudio C:\Windows\system32\drivers\btwaudio.sys
23:18:26.0057 4180 btwaudio - ok
23:18:26.0088 4180 [ 4F82B6173EF8637CB26CF4E73B90F172 ] btwavdt C:\Windows\system32\DRIVERS\btwavdt.sys
23:18:26.0104 4180 btwavdt - ok
23:18:26.0229 4180 [ B78D1ACA1BBD0077848D9F87C8207AB1 ] btwdins C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
23:18:26.0244 4180 btwdins - ok
23:18:26.0291 4180 [ ECB98391C756A7B9CFBAE89D9D1235E1 ] btwl2cap C:\Windows\system32\DRIVERS\btwl2cap.sys
23:18:26.0291 4180 btwl2cap - ok
23:18:26.0322 4180 [ F771034F5B59A4A5054A2FA6F4E9F28B ] btwrchid C:\Windows\system32\DRIVERS\btwrchid.sys
23:18:26.0322 4180 btwrchid - ok
23:18:26.0338 4180 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
23:18:26.0338 4180 cdfs - ok
23:18:26.0385 4180 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
23:18:26.0385 4180 cdrom - ok
23:18:26.0416 4180 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll
23:18:26.0431 4180 CertPropSvc - ok
23:18:26.0447 4180 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
23:18:26.0447 4180 circlass - ok
23:18:26.0478 4180 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
23:18:26.0478 4180 CLFS - ok
23:18:26.0541 4180 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:18:26.0541 4180 clr_optimization_v2.0.50727_32 - ok
23:18:26.0603 4180 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
23:18:26.0603 4180 clr_optimization_v4.0.30319_32 - ok
23:18:26.0619 4180 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
23:18:26.0619 4180 CmBatt - ok
23:18:26.0650 4180 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys
23:18:26.0650 4180 cmdide - ok
23:18:26.0697 4180 [ 85449EEBE8F8EBD6481EFBF0F352B4EB ] CNG C:\Windows\system32\Drivers\cng.sys
23:18:26.0712 4180 CNG - ok
23:18:26.0743 4180 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
23:18:26.0743 4180 Compbatt - ok
23:18:26.0821 4180 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
23:18:26.0821 4180 CompositeBus - ok
23:18:26.0821 4180 COMSysApp - ok
23:18:26.0853 4180 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
23:18:26.0853 4180 crcdisk - ok
23:18:26.0915 4180 [ 7CA1BECEA5DE2643ADDAD32670E7A4C9 ] CryptSvc C:\Windows\system32\cryptsvc.dll
23:18:26.0931 4180 CryptSvc - ok
23:18:26.0962 4180 [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC C:\Windows\system32\drivers\csc.sys
23:18:26.0977 4180 CSC - ok
23:18:26.0993 4180 [ 15F93B37F6801943360D9EB42485D5D3 ] CscService C:\Windows\System32\cscsvc.dll
23:18:26.0993 4180 CscService - ok
23:18:27.0040 4180 [ EC0CC1AA9ABFE9A32DAA66832CB06271 ] CYUSB C:\Windows\system32\Drivers\CYUSB.sys
23:18:27.0055 4180 CYUSB - ok
23:18:27.0087 4180 [ 92A16DF81F6CFEEBF93204217C38DAE0 ] danewFltr C:\Windows\system32\drivers\danew.sys
23:18:27.0087 4180 danewFltr - ok
23:18:27.0165 4180 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32\rpcss.dll
23:18:27.0180 4180 DcomLaunch - ok
23:18:27.0211 4180 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
23:18:27.0211 4180 defragsvc - ok
23:18:27.0243 4180 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
23:18:27.0243 4180 DfsC - ok
23:18:27.0305 4180 dgderdrv - ok
23:18:27.0336 4180 [ D720E872772D004E304FCE0CE54E1F8A ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys
23:18:27.0336 4180 dg_ssudbus - ok
23:18:27.0399 4180 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll
23:18:27.0414 4180 Dhcp - ok
23:18:27.0430 4180 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
23:18:27.0430 4180 discache - ok
23:18:27.0461 4180 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
23:18:27.0461 4180 Disk - ok
23:18:27.0508 4180 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
23:18:27.0523 4180 Dnscache - ok
23:18:27.0555 4180 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll
23:18:27.0570 4180 dot3svc - ok
23:18:27.0601 4180 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll
23:18:27.0601 4180 DPS - ok
23:18:27.0648 4180 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
23:18:27.0648 4180 drmkaud - ok
23:18:27.0711 4180 [ 71BC35067CABC02C9453AEAA42B2E43E ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
23:18:27.0726 4180 DXGKrnl - ok
23:18:27.0757 4180 EagleXNt - ok
23:18:27.0789 4180 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
23:18:27.0789 4180 EapHost - ok
23:18:28.0163 4180 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
23:18:28.0257 4180 ebdrv - ok
23:18:28.0288 4180 [ 803B370865D907EA21DC0C2B6A8936B5 ] EFS C:\Windows\System32\lsass.exe
23:18:28.0288 4180 EFS - ok
23:18:28.0397 4180 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
23:18:28.0413 4180 ehRecvr - ok
23:18:28.0444 4180 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
23:18:28.0444 4180 ehSched - ok
23:18:28.0475 4180 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
23:18:28.0491 4180 elxstor - ok
23:18:28.0522 4180 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys
23:18:28.0522 4180 ErrDev - ok
23:18:28.0569 4180 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
23:18:28.0569 4180 EventSystem - ok
23:18:28.0600 4180 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
23:18:28.0600 4180 exfat - ok
23:18:28.0615 4180 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
23:18:28.0615 4180 fastfat - ok
23:18:28.0662 4180 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe
23:18:28.0678 4180 Fax - ok
23:18:28.0709 4180 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
23:18:28.0709 4180 fdc - ok
23:18:28.0725 4180 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
23:18:28.0740 4180 fdPHost - ok
23:18:28.0740 4180 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
23:18:28.0740 4180 FDResPub - ok
23:18:28.0756 4180 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
23:18:28.0771 4180 FileInfo - ok
23:18:28.0787 4180 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
23:18:28.0787 4180 Filetrace - ok
23:18:28.0881 4180 [ F76D04F7413B07DAA029F6520B64B4E8 ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
23:18:28.0881 4180 FLEXnet Licensing Service - ok
23:18:28.0912 4180 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
23:18:28.0912 4180 flpydisk - ok
23:18:28.0959 4180 [ 66D252E6BD9BC2D9EC961032B2246874 ] FlrnUSB C:\Windows\system32\DRIVERS\LtkUSB.sys
23:18:28.0959 4180 FlrnUSB - ok
23:18:28.0990 4180 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
23:18:28.0990 4180 FltMgr - ok
23:18:29.0052 4180 [ 99392D03F32BE1DB9C395708F21551F1 ] FMMService C:\PROGRA~1\MOBILI~1\FMMSER~1.EXE
23:18:29.0052 4180 FMMService - ok
23:18:29.0115 4180 [ E12C4928B32ACE04610259647F072635 ] FontCache C:\Windows\system32\FntCache.dll
23:18:29.0146 4180 FontCache - ok
23:18:29.0208 4180 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
23:18:29.0208 4180 FontCache3.0.0.0 - ok
23:18:29.0208 4180 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
23:18:29.0224 4180 FsDepends - ok
23:18:29.0271 4180 [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
23:18:29.0271 4180 Fs_Rec - ok
23:18:29.0317 4180 [ E306A24D9694C724FA2491278BF50FDB ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
23:18:29.0317 4180 fvevol - ok
23:18:29.0349 4180 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
23:18:29.0349 4180 gagp30kx - ok
23:18:29.0411 4180 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll
23:18:29.0411 4180 gpsvc - ok
23:18:29.0458 4180 [ 69155FC3F92E8DA5A7E1D8F5DE4C534A ] GRemoteBus C:\Windows\system32\DRIVERS\GRemoteBus.sys
23:18:29.0458 4180 GRemoteBus - ok
23:18:29.0505 4180 [ B5A29B6C44F78FAA54E552F7E4AEEBD3 ] GRemoteJoy C:\Windows\system32\DRIVERS\GRemoteJoy.sys
23:18:29.0505 4180 GRemoteJoy - ok
23:18:29.0629 4180 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
23:18:29.0629 4180 gupdate - ok
23:18:29.0661 4180 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
23:18:29.0661 4180 gupdatem - ok
23:18:29.0707 4180 [ 833051C6C6C42117191935F734CFBD97 ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
23:18:29.0707 4180 hamachi - ok
23:18:29.0817 4180 [ 10DD27FE05A03FED8028A946A76FAC50 ] Hamachi2Svc C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
23:18:29.0863 4180 Hamachi2Svc - ok
23:18:29.0910 4180 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
23:18:29.0910 4180 hcw85cir - ok
23:18:29.0957 4180 [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
23:18:29.0973 4180 HdAudAddService - ok
23:18:29.0988 4180 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
23:18:30.0004 4180 HDAudBus - ok
23:18:30.0035 4180 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
23:18:30.0035 4180 HidBatt - ok
23:18:30.0051 4180 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
23:18:30.0051 4180 HidBth - ok
23:18:30.0082 4180 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
23:18:30.0082 4180 HidIr - ok
23:18:30.0113 4180 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\System32\hidserv.dll
23:18:30.0113 4180 hidserv - ok
23:18:30.0175 4180 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\drivers\hidusb.sys
23:18:30.0175 4180 HidUsb - ok
23:18:30.0222 4180 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll
23:18:30.0222 4180 hkmsvc - ok
23:18:30.0238 4180 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
23:18:30.0253 4180 HomeGroupListener - ok
23:18:30.0285 4180 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
23:18:30.0285 4180 HomeGroupProvider - ok
23:18:30.0331 4180 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
23:18:30.0331 4180 HpSAMD - ok
23:18:30.0425 4180 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys
23:18:30.0441 4180 HTTP - ok
23:18:30.0472 4180 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
23:18:30.0472 4180 hwpolicy - ok
23:18:30.0550 4180 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
23:18:30.0550 4180 i8042prt - ok
23:18:30.0597 4180 [ 9F1220113A3A7F4F08042C699324D073 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
23:18:30.0597 4180 iaStor - ok
23:18:30.0643 4180 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
23:18:30.0659 4180 iaStorV - ok
23:18:30.0877 4180 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
23:18:30.0893 4180 IDriverT - ok
23:18:30.0971 4180 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
23:18:31.0002 4180 idsvc - ok
23:18:31.0033 4180 IEEtwCollectorService - ok
23:18:31.0080 4180 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
23:18:31.0080 4180 iirsp - ok
23:18:31.0189 4180 [ B9C54120F46392100478F58F374E5709 ] IKEEXT C:\Windows\System32\ikeext.dll
23:18:31.0236 4180 IKEEXT - ok
23:18:31.0408 4180 [ 22980CE70CF3937E48CB7C46A9A1C5F1 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
23:18:31.0408 4180 IntcAzAudAddService - ok
23:18:31.0501 4180 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys
23:18:31.0501 4180 intelide - ok
23:18:31.0533 4180 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
23:18:31.0533 4180 intelppm - ok
23:18:31.0611 4180 [ 62ABA6DEDD3199C6D44C646CBCC2FAC0 ] Ioxmgr C:\Windows\System32\Drivers\Ioxmgr.sys
23:18:31.0626 4180 Ioxmgr - ok
23:18:31.0657 4180 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
23:18:31.0657 4180 IPBusEnum - ok
23:18:31.0673 4180 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
23:18:31.0673 4180 IpFilterDriver - ok
23:18:31.0735 4180 [ 58F67245D041FBE7AF88F4EAF79DF0FA ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
23:18:31.0751 4180 iphlpsvc - ok
23:18:31.0782 4180 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
23:18:31.0782 4180 IPMIDRV - ok
23:18:31.0829 4180 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
23:18:31.0829 4180 IPNAT - ok
23:18:31.0860 4180 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
23:18:31.0860 4180 IRENUM - ok
23:18:31.0876 4180 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys
23:18:31.0876 4180 isapnp - ok
23:18:31.0891 4180 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
23:18:31.0907 4180 iScsiPrt - ok
23:18:31.0969 4180 [ 37412294EA4B70ED8B4A9338EBAEECAA ] ivusb C:\Windows\system32\DRIVERS\ivusb.sys
23:18:31.0969 4180 ivusb - ok
23:18:32.0001 4180 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
23:18:32.0001 4180 kbdclass - ok
23:18:32.0032 4180 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
23:18:32.0032 4180 kbdhid - ok
23:18:32.0079 4180 [ 7F2B8D0B31FB4A797E5786EF124C5A80 ] kbfiltr C:\Windows\system32\DRIVERS\kbfiltr.sys
23:18:32.0079 4180 kbfiltr - ok
23:18:32.0110 4180 [ 803B370865D907EA21DC0C2B6A8936B5 ] KeyIso C:\Windows\system32\lsass.exe
23:18:32.0110 4180 KeyIso - ok
23:18:32.0157 4180 [ F286830298323272260332D6ABC905C1 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
23:18:32.0172 4180 KSecDD - ok
23:18:32.0203 4180 [ D7C760D57B1656DD748B9E4AB6CB5A51 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
23:18:32.0219 4180 KSecPkg - ok
23:18:32.0235 4180 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
23:18:32.0250 4180 KtmRm - ok
23:18:32.0281 4180 [ 1C2AF919FDE8ED307135B6487AF4D7F8 ] L1C C:\Windows\system32\DRIVERS\L1C60x86.sys
23:18:32.0281 4180 L1C - ok
23:18:32.0344 4180 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\System32\srvsvc.dll
23:18:32.0344 4180 LanmanServer - ok
23:18:32.0375 4180 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
23:18:32.0375 4180 LanmanWorkstation - ok
23:18:32.0422 4180 [ F8A7212D0864EF5E9185FB95E6623F4D ] lirsgt C:\Windows\system32\DRIVERS\lirsgt.sys
23:18:32.0422 4180 lirsgt - ok
23:18:32.0437 4180 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
23:18:32.0453 4180 lltdsvc - ok
23:18:32.0453 4180 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
23:18:32.0469 4180 lmhosts - ok
23:18:32.0515 4180 [ E7BF96BC4C766C2A30D0733CBFEEC438 ] LMIGuardianSvc C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
23:18:32.0531 4180 LMIGuardianSvc - ok
23:18:32.0578 4180 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
23:18:32.0578 4180 LSI_FC - ok
23:18:32.0593 4180 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
23:18:32.0593 4180 LSI_SAS - ok
23:18:32.0609 4180 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
23:18:32.0625 4180 LSI_SAS2 - ok
23:18:32.0625 4180 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
23:18:32.0640 4180 LSI_SCSI - ok
23:18:32.0640 4180 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
23:18:32.0656 4180 luafv - ok
23:18:32.0703 4180 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
23:18:32.0703 4180 Mcx2Svc - ok
23:18:32.0718 4180 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
23:18:32.0718 4180 megasas - ok
23:18:32.0734 4180 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
23:18:32.0734 4180 MegaSR - ok
23:18:32.0890 4180 [ 0AF89452A8CE3928168F4E5B2208C68B ] mi-raysat_3dsmax2010_32 C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
23:18:32.0890 4180 mi-raysat_3dsmax2010_32 - ok
23:18:32.0968 4180 Microsoft SharePoint Workspace Audit Service - ok
23:18:32.0999 4180 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
23:18:32.0999 4180 MMCSS - ok
23:18:33.0030 4180 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
23:18:33.0030 4180 Modem - ok
23:18:33.0061 4180 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
23:18:33.0061 4180 monitor - ok
23:18:33.0108 4180 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
23:18:33.0108 4180 mouclass - ok
23:18:33.0186 4180 [ 9B5D39ED7659BA9B38B64DF2A83F1768 ] moufiltr C:\Windows\system32\DRIVERS\moufiltr.sys
23:18:33.0186 4180 moufiltr - ok
23:18:33.0233 4180 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
23:18:33.0233 4180 mouhid - ok
23:18:33.0280 4180 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
23:18:33.0280 4180 mountmgr - ok
23:18:33.0358 4180 [ FAED3A2C3CE9F07D3CD0AE656320F9B9 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
23:18:33.0373 4180 MozillaMaintenance - ok
23:18:33.0436 4180 [ E77DC03DD3C8E5A388BF9EED2A28F3D1 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
23:18:33.0436 4180 MpFilter - ok
23:18:33.0483 4180 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys
23:18:33.0483 4180 mpio - ok
23:18:33.0514 4180 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
23:18:33.0530 4180 mpsdrv - ok
23:18:33.0576 4180 [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc C:\Windows\system32\mpssvc.dll
23:18:33.0592 4180 MpsSvc - ok
23:18:33.0623 4180 [ 21F4B24ACFC79A483515BD986DD9043F ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
23:18:33.0623 4180 MRxDAV - ok
23:18:33.0670 4180 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
23:18:33.0670 4180 mrxsmb - ok
23:18:33.0732 4180 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
23:18:33.0764 4180 mrxsmb10 - ok
23:18:33.0810 4180 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
23:18:33.0826 4180 mrxsmb20 - ok
23:18:33.0842 4180 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys
23:18:33.0842 4180 msahci - ok
23:18:33.0888 4180 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys
23:18:33.0888 4180 msdsm - ok
23:18:33.0904 4180 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
23:18:33.0904 4180 MSDTC - ok
23:18:33.0935 4180 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
23:18:33.0935 4180 Msfs - ok
23:18:33.0935 4180 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
23:18:33.0951 4180 mshidkmdf - ok
23:18:33.0982 4180 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
23:18:33.0982 4180 msisadrv - ok
23:18:34.0029 4180 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
23:18:34.0029 4180 MSiSCSI - ok
23:18:34.0029 4180 msiserver - ok
23:18:34.0060 4180 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
23:18:34.0060 4180 MSKSSRV - ok
23:18:34.0154 4180 [ B0F49DA36F30922F5DDC3B623B778FCE ] MsMpSvc C:\Program Files\Microsoft Security Client\MsMpEng.exe
23:18:34.0154 4180 MsMpSvc - ok
23:18:34.0200 4180 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
23:18:34.0200 4180 MSPCLOCK - ok
23:18:34.0216 4180 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
23:18:34.0216 4180 MSPQM - ok
23:18:34.0232 4180 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
23:18:34.0232 4180 MsRPC - ok
23:18:34.0263 4180 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
23:18:34.0263 4180 mssmbios - ok
23:18:34.0294 4180 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
23:18:34.0294 4180 MSTEE - ok
23:18:34.0310 4180 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
23:18:34.0310 4180 MTConfig - ok
23:18:34.0325 4180 [ 2E71504A74BE4E3D4EA94568EFF7556E ] MTsensor C:\Windows\system32\DRIVERS\ATKACPI.sys
23:18:34.0325 4180 MTsensor - ok
23:18:34.0341 4180 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
23:18:34.0356 4180 Mup - ok
23:18:34.0388 4180 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll
23:18:34.0403 4180 napagent - ok
23:18:34.0419 4180 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
23:18:34.0434 4180 NativeWifiP - ok
23:18:34.0528 4180 [ 9D1CCE440552500DED3A62F9D779CDB4 ] NAUpdate C:\Program Files\Nero\Update\NASvc.exe
23:18:34.0544 4180 NAUpdate - ok
23:18:34.0606 4180 [ 8C9C922D71F1CD4DEF73F186416B7896 ] NDIS C:\Windows\system32\drivers\ndis.sys
23:18:34.0622 4180 NDIS - ok
23:18:34.0668 4180 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
23:18:34.0668 4180 NdisCap - ok
23:18:34.0700 4180 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
23:18:34.0700 4180 NdisTapi - ok
23:18:34.0746 4180 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
23:18:34.0746 4180 Ndisuio - ok
23:18:34.0809 4180 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
23:18:34.0809 4180 NdisWan - ok
23:18:34.0809 4180 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
23:18:34.0824 4180 NDProxy - ok
23:18:34.0840 4180 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
23:18:34.0840 4180 NetBIOS - ok
23:18:34.0887 4180 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
23:18:34.0902 4180 NetBT - ok
23:18:34.0918 4180 [ 803B370865D907EA21DC0C2B6A8936B5 ] Netlogon C:\Windows\system32\lsass.exe
23:18:34.0918 4180 Netlogon - ok
23:18:34.0965 4180 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
23:18:34.0980 4180 Netman - ok
23:18:35.0058 4180 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
23:18:35.0058 4180 NetMsmqActivator - ok
23:18:35.0058 4180 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
23:18:35.0058 4180 NetPipeActivator - ok
23:18:35.0105 4180 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
23:18:35.0105 4180 netprofm - ok
23:18:35.0121 4180 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
23:18:35.0121 4180 NetTcpActivator - ok
23:18:35.0121 4180 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
23:18:35.0121 4180 NetTcpPortSharing - ok
23:18:35.0168 4180 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
23:18:35.0168 4180 nfrd960 - ok
23:18:35.0214 4180 [ 32FF06EC6D946EF791D98D6C838A3090 ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys
23:18:35.0230 4180 NisDrv - ok
23:18:35.0277 4180 [ 42D33042371BFB1A7D40834590CAFD30 ] NisSrv C:\Program Files\Microsoft Security Client\NisSrv.exe
23:18:35.0277 4180 NisSrv - ok
23:18:35.0324 4180 [ 374071043F9E4231EE43BE2BB48DD36D ] NlaSvc C:\Windows\System32\nlasvc.dll
23:18:35.0324 4180 NlaSvc - ok
23:18:35.0402 4180 [ B48DC6ABCD3AEFF8618350CCBDC6B09A ] NPF C:\Windows\system32\drivers\npf.sys
23:18:35.0402 4180 NPF - ok
23:18:35.0417 4180 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
23:18:35.0417 4180 Npfs - ok
23:18:35.0464 4180 npggsvc - ok
23:18:35.0495 4180 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
23:18:35.0495 4180 nsi - ok
23:18:35.0511 4180 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
23:18:35.0511 4180 nsiproxy - ok
23:18:35.0636 4180 [ 5E43D2B0EE64123D4880DFA6626DEFDE ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
23:18:35.0667 4180 Ntfs - ok
23:18:35.0729 4180 nTuneService - ok
23:18:35.0760 4180 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
23:18:35.0760 4180 Null - ok
23:18:35.0854 4180 [ ED53B817E63AFFBA328C2E9632FBF487 ] NVHDA C:\Windows\system32\drivers\nvhda32v.sys
23:18:35.0854 4180 NVHDA - ok
23:18:36.0026 4180 [ 75FA3DC6C2838F35B15CF45E9E0D10A8 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
23:18:36.0057 4180 nvlddmkm - ok
23:18:36.0119 4180 [ 61D6B1C71AD94F8485E966BEBC36D092 ] NVR0Dev C:\Windows\nvoclock.sys
23:18:36.0119 4180 NVR0Dev - ok
23:18:36.0150 4180 [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid C:\Windows\system32\drivers\nvraid.sys
23:18:36.0166 4180 nvraid - ok
23:18:36.0197 4180 [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor C:\Windows\system32\drivers\nvstor.sys
23:18:36.0197 4180 nvstor - ok
23:18:36.0228 4180 [ 2784C071EC57DCDBA6D4A2A017F56CD4 ] nvsvc C:\Windows\system32\nvvsvc.exe
23:18:36.0228 4180 nvsvc - ok
23:18:36.0306 4180 [ A974E5C310B9B00894070CEB055D467F ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
23:18:36.0338 4180 nvUpdatusService - ok
23:18:36.0369 4180 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
23:18:36.0369 4180 nv_agp - ok
23:18:36.0400 4180 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
23:18:36.0416 4180 ohci1394 - ok
23:18:36.0462 4180 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
23:18:36.0462 4180 ose - ok
23:18:36.0572 4180 [ 358A9CCA612C68EB2F07DDAD4CE1D8D7 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
23:18:36.0681 4180 osppsvc - ok
23:18:36.0712 4180 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
23:18:36.0728 4180 p2pimsvc - ok
23:18:36.0743 4180 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
23:18:36.0759 4180 p2psvc - ok
23:18:36.0774 4180 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
23:18:36.0774 4180 Parport - ok
23:18:36.0821 4180 [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr C:\Windows\system32\drivers\partmgr.sys
23:18:36.0821 4180 partmgr - ok
23:18:36.0837 4180 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
23:18:36.0837 4180 Parvdm - ok
23:18:36.0852 4180 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
23:18:36.0868 4180 PcaSvc - ok
23:18:36.0915 4180 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys
23:18:36.0915 4180 pci - ok
23:18:36.0946 4180 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys
23:18:36.0946 4180 pciide - ok
23:18:36.0977 4180 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
23:18:36.0977 4180 pcmcia - ok
23:18:36.0993 4180 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
23:18:36.0993 4180 pcw - ok
23:18:37.0008 4180 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
23:18:37.0024 4180 PEAUTH - ok
23:18:37.0071 4180 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
23:18:37.0086 4180 PeerDistSvc - ok
23:18:37.0164 4180 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll
23:18:37.0196 4180 pla - ok

23:18:37.0274 4180 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay C:\Windows\system32\umpnpmgr.dll
23:18:37.0274 4180 PlugPlay - ok
23:18:37.0336 4180 [ 3A2E85F7D90D15460C337CE80C2E3B29 ] PnkBstrA C:\Windows\system32\PnkBstrA.exe
23:18:37.0352 4180 PnkBstrA - ok
23:18:37.0367 4180 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
23:18:37.0367 4180 PNRPAutoReg - ok
23:18:37.0398 4180 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
23:18:37.0398 4180 PNRPsvc - ok
23:18:37.0445 4180 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
23:18:37.0445 4180 PolicyAgent - ok
23:18:37.0492 4180 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll
23:18:37.0492 4180 Power - ok
23:18:37.0523 4180 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
23:18:37.0523 4180 PptpMiniport - ok
23:18:37.0554 4180 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
23:18:37.0554 4180 Processor - ok
23:18:37.0586 4180 [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc C:\Windows\system32\profsvc.dll
23:18:37.0586 4180 ProfSvc - ok
23:18:37.0601 4180 [ 803B370865D907EA21DC0C2B6A8936B5 ] ProtectedStorage C:\Windows\system32\lsass.exe
23:18:37.0601 4180 ProtectedStorage - ok
23:18:37.0648 4180 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
23:18:37.0648 4180 Psched - ok
23:18:37.0679 4180 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
23:18:37.0726 4180 ql2300 - ok
23:18:37.0742 4180 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
23:18:37.0742 4180 ql40xx - ok
23:18:37.0773 4180 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
23:18:37.0788 4180 QWAVE - ok
23:18:37.0804 4180 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
23:18:37.0804 4180 QWAVEdrv - ok
23:18:37.0866 4180 [ 8F97D374AD1857E1EED85A79F29A1D3D ] RapiMgr C:\Windows\WindowsMobile\rapimgr.dll
23:18:37.0866 4180 RapiMgr - ok
23:18:37.0882 4180 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
23:18:37.0882 4180 RasAcd - ok
23:18:37.0913 4180 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
23:18:37.0913 4180 RasAgileVpn - ok
23:18:37.0944 4180 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
23:18:37.0944 4180 RasAuto - ok
23:18:37.0960 4180 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
23:18:37.0960 4180 Rasl2tp - ok
23:18:38.0007 4180 [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan C:\Windows\System32\rasmans.dll
23:18:38.0007 4180 RasMan - ok
23:18:38.0022 4180 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
23:18:38.0038 4180 RasPppoe - ok
23:18:38.0038 4180 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
23:18:38.0054 4180 RasSstp - ok
23:18:38.0085 4180 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
23:18:38.0100 4180 rdbss - ok
23:18:38.0100 4180 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
23:18:38.0100 4180 rdpbus - ok
23:18:38.0147 4180 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
23:18:38.0147 4180 RDPCDD - ok
23:18:38.0163 4180 [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
23:18:38.0163 4180 RDPDR - ok
23:18:38.0194 4180 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
23:18:38.0194 4180 RDPENCDD - ok
23:18:38.0210 4180 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
23:18:38.0210 4180 RDPREFMP - ok
23:18:38.0256 4180 [ 65375DF758CA1872AB7EBBBA457FD5E6 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
23:18:38.0256 4180 RdpVideoMiniport - ok
23:18:38.0303 4180 [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
23:18:38.0303 4180 RDPWD - ok
23:18:38.0366 4180 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
23:18:38.0366 4180 rdyboost - ok
23:18:38.0397 4180 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
23:18:38.0397 4180 RemoteAccess - ok
23:18:38.0428 4180 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
23:18:38.0428 4180 RemoteRegistry - ok
23:18:38.0475 4180 [ CB928D9E6DAF51879DD6BA8D02F01321 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
23:18:38.0475 4180 RFCOMM - ok
23:18:38.0490 4180 [ A5B12A4B3B774432DB9B9FA221190E59 ] rimmptsk C:\Windows\system32\DRIVERS\rimmptsk.sys
23:18:38.0490 4180 rimmptsk - ok
23:18:38.0506 4180 [ C398BCA91216755B098679A8DA8A2300 ] rimsptsk C:\Windows\system32\DRIVERS\rimsptsk.sys
23:18:38.0506 4180 rimsptsk - ok
23:18:38.0522 4180 [ 2A2554CB24506E0A0508FC395C4A1B42 ] rismxdp C:\Windows\system32\DRIVERS\rixdptsk.sys
23:18:38.0522 4180 rismxdp - ok
23:18:38.0600 4180 [ B60F58F175DE20A6739194E85B035178 ] rpcapd C:\Program Files\WinPcap\rpcapd.exe
23:18:38.0600 4180 rpcapd - ok
23:18:38.0615 4180 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
23:18:38.0615 4180 RpcEptMapper - ok
23:18:38.0646 4180 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
23:18:38.0646 4180 RpcLocator - ok
23:18:38.0693 4180 [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs C:\Windows\system32\rpcss.dll
23:18:38.0693 4180 RpcSs - ok
23:18:38.0724 4180 [ 7FA7F2E249A5DCBB7970630E15E1F482 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
23:18:38.0740 4180 s3cap - ok
23:18:38.0740 4180 [ 803B370865D907EA21DC0C2B6A8936B5 ] SamSs C:\Windows\system32\lsass.exe
23:18:38.0756 4180 SamSs - ok
23:18:38.0818 4180 [ 39763504067962108505BFF25F024345 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
23:18:38.0818 4180 SASDIFSV - ok
23:18:38.0865 4180 [ 77B9FC20084B48408AD3E87570EB4A85 ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
23:18:38.0865 4180 SASKUTIL - ok
23:18:38.0896 4180 [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
23:18:38.0896 4180 sbp2port - ok
23:18:38.0927 4180 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
23:18:38.0943 4180 SCardSvr - ok
23:18:38.0974 4180 [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
23:18:38.0974 4180 scfilter - ok
23:18:39.0036 4180 [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule C:\Windows\system32\schedsvc.dll
23:18:39.0052 4180 Schedule - ok
23:18:39.0083 4180 [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc C:\Windows\System32\certprop.dll
23:18:39.0083 4180 SCPolicySvc - ok
23:18:39.0146 4180 [ 0328BE1C7F1CBA23848179F8762E391C ] sdbus C:\Windows\system32\drivers\sdbus.sys
23:18:39.0146 4180 sdbus - ok
23:18:39.0192 4180 [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC C:\Windows\System32\SDRSVC.dll
23:18:39.0192 4180 SDRSVC - ok
23:18:39.0239 4180 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
23:18:39.0239 4180 secdrv - ok
23:18:39.0255 4180 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
23:18:39.0255 4180 seclogon - ok
23:18:39.0270 4180 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\system32\sens.dll
23:18:39.0270 4180 SENS - ok
23:18:39.0286 4180 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
23:18:39.0286 4180 SensrSvc - ok
23:18:39.0317 4180 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
23:18:39.0317 4180 Serenum - ok
23:18:39.0333 4180 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
23:18:39.0333 4180 Serial - ok
23:18:39.0364 4180 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
23:18:39.0364 4180 sermouse - ok
23:18:39.0411 4180 [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv C:\Windows\system32\sessenv.dll
23:18:39.0411 4180 SessionEnv - ok
23:18:39.0458 4180 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\DRIVERS\sffdisk.sys
23:18:39.0458 4180 sffdisk - ok
23:18:39.0458 4180 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
23:18:39.0458 4180 sffp_mmc - ok
23:18:39.0473 4180 [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd C:\Windows\system32\DRIVERS\sffp_sd.sys
23:18:39.0473 4180 sffp_sd - ok
23:18:39.0504 4180 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
23:18:39.0504 4180 sfloppy - ok
23:18:39.0536 4180 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
23:18:39.0536 4180 SharedAccess - ok
23:18:39.0582 4180 [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
23:18:39.0598 4180 ShellHWDetection - ok
23:18:39.0598 4180 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\drivers\sisagp.sys
23:18:39.0598 4180 sisagp - ok
23:18:39.0629 4180 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
23:18:39.0629 4180 SiSRaid2 - ok
23:18:39.0660 4180 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
23:18:39.0660 4180 SiSRaid4 - ok
23:18:39.0723 4180 [ F5BBEDF602C310B00036EB2DBF4348A5 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
23:18:39.0738 4180 SkypeUpdate - ok
23:18:39.0770 4180 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
23:18:39.0770 4180 Smb - ok
23:18:39.0801 4180 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
23:18:39.0801 4180 SNMPTRAP - ok
23:18:39.0879 4180 [ 060F51141B20B8156804446A04AB8B2A ] SNP2UVC C:\Windows\system32\DRIVERS\snp2uvc.sys
23:18:39.0926 4180 SNP2UVC - ok
23:18:39.0941 4180 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
23:18:39.0941 4180 spldr - ok
23:18:39.0988 4180 [ 9AEA093B8F9C37CF45538382CABA2475 ] Spooler C:\Windows\System32\spoolsv.exe
23:18:39.0988 4180 Spooler - ok
23:18:40.0082 4180 [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc C:\Windows\system32\sppsvc.exe
23:18:40.0160 4180 sppsvc - ok
23:18:40.0191 4180 [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify C:\Windows\system32\sppuinotify.dll
23:18:40.0206 4180 sppuinotify - ok
23:18:40.0238 4180 [ A199171385BE17973FD800FA91F8F78A ] sptd C:\Windows\system32\Drivers\sptd.sys
23:18:40.0238 4180 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: A199171385BE17973FD800FA91F8F78A
23:18:40.0238 4180 sptd ( LockedFile.Multi.Generic ) - warning
23:18:40.0238 4180 sptd - detected LockedFile.Multi.Generic (1)
23:18:40.0300 4180 [ B747EA555A72070F258B3E31E1392D62 ] SRS_PremiumSound_Service C:\Windows\system32\drivers\srs_PremiumSound_i386.sys
23:18:40.0300 4180 SRS_PremiumSound_Service - ok
23:18:40.0347 4180 [ 543B82F5846CEF761EE98D727C15D539 ] SRS_VolSync_Service C:\Program Files\SRS Labs\SRS Premium Sound\SRS_VolSync.exe
23:18:40.0347 4180 SRS_VolSync_Service - ok
23:18:40.0394 4180 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv C:\Windows\system32\DRIVERS\srv.sys
23:18:40.0409 4180 srv - ok
23:18:40.0425 4180 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
23:18:40.0425 4180 srv2 - ok
23:18:40.0440 4180 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
23:18:40.0440 4180 srvnet - ok
23:18:40.0472 4180 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
23:18:40.0487 4180 SSDPSRV - ok
23:18:40.0503 4180 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
23:18:40.0503 4180 SstpSvc - ok
23:18:40.0518 4180 ssudmdm - ok
23:18:40.0612 4180 [ B1691AF4A072CB674D600DB16DD7308E ] StarWindServiceAE C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
23:18:40.0612 4180 StarWindServiceAE - ok
23:18:40.0643 4180 Steam Client Service - ok
23:18:40.0674 4180 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
23:18:40.0674 4180 stexstor - ok
23:18:40.0721 4180 [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc C:\Windows\System32\wiaservc.dll
23:18:40.0737 4180 StiSvc - ok
23:18:40.0768 4180 [ 472AF0311073DCECEAA8FA18BA2BDF89 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
23:18:40.0768 4180 storflt - ok
23:18:40.0784 4180 [ DCAFFD62259E0BDB433DD67B5BB37619 ] storvsc C:\Windows\system32\drivers\storvsc.sys
23:18:40.0784 4180 storvsc - ok
23:18:40.0799 4180 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\drivers\swenum.sys
23:18:40.0799 4180 swenum - ok
23:18:40.0893 4180 [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
23:18:40.0908 4180 SwitchBoard - ok
23:18:40.0940 4180 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
23:18:40.0940 4180 swprv - ok
23:18:40.0971 4180 [ 55F6E55CC2430CA8713387106FA79817 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
23:18:40.0971 4180 SynTP - ok
23:18:41.0033 4180 [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain C:\Windows\system32\sysmain.dll
23:18:41.0064 4180 SysMain - ok
23:18:41.0111 4180 [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll
23:18:41.0111 4180 TabletInputService - ok
23:18:41.0142 4180 [ 613BF4820361543956909043A265C6AC ] TapiSrv C:\Windows\System32\tapisrv.dll
23:18:41.0158 4180 TapiSrv - ok
23:18:41.0174 4180 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
23:18:41.0174 4180 TBS - ok
23:18:41.0236 4180 [ CA59F7C570AF70BC174F477CFE2D9EE3 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
23:18:41.0267 4180 Tcpip - ok
23:18:41.0330 4180 [ CA59F7C570AF70BC174F477CFE2D9EE3 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
23:18:41.0330 4180 TCPIP6 - ok
23:18:41.0376 4180 [ 3EEBD3BD93DA46A26E89893C7AB2FF3B ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
23:18:41.0376 4180 tcpipreg - ok
23:18:41.0423 4180 [ 72B9E77565DA5FA564581976E000D29B ] TcUsb C:\Windows\system32\Drivers\tcusb.sys
23:18:41.0423 4180 TcUsb - ok
23:18:41.0454 4180 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
23:18:41.0454 4180 TDPIPE - ok
23:18:41.0501 4180 [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
23:18:41.0501 4180 TDTCP - ok
23:18:41.0517 4180 [ B459575348C20E8121D6039DA063C704 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
23:18:41.0517 4180 tdx - ok
23:18:42.0359 4180 [ F67C21CC4195F6AFC447418FE163E156 ] TeamViewer8 C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
23:18:42.0390 4180 TeamViewer8 - ok
23:18:42.0406 4180 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD C:\Windows\system32\drivers\termdd.sys
23:18:42.0406 4180 TermDD - ok
23:18:42.0484 4180 [ 382C804C92811BE57829D8E550A900E2 ] TermService C:\Windows\System32\termsrv.dll
23:18:42.0500 4180 TermService - ok
23:18:42.0546 4180 [ 59CFDA4EACB3788F8B17F87B49B0AC0E ] Themes C:\Windows\system32\themeservice.dll
23:18:42.0546 4180 Themes - ok
23:18:42.0562 4180 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
23:18:42.0562 4180 THREADORDER - ok
23:18:42.0593 4180 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
23:18:42.0593 4180 TrkWks - ok
23:18:42.0671 4180 [ 91B6DFBA0FD7D0F4836FB711D1B5D81C ] TrueSight C:\Windows\system32\TrueSight.sys
23:18:42.0671 4180 TrueSight - ok
23:18:42.0749 4180 [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
23:18:42.0749 4180 TrustedInstaller - ok
23:18:42.0780 4180 [ B37B08F2E5EEB1A37E448E09BACE1101 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
23:18:42.0796 4180 tssecsrv - ok
23:18:42.0827 4180 [ 9CE253214ACAA5A7D323327D2055EFAA ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
23:18:42.0827 4180 TsUsbFlt - ok
23:18:42.0890 4180 [ 3BAD51CD26FBE57AD7A4E2A6CC4E282A ] TS_AR5416 C:\Windows\system32\DRIVERS\ts_athw.sys
23:18:42.0936 4180 TS_AR5416 - ok
23:18:42.0999 4180 [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
23:18:43.0014 4180 tunnel - ok
23:18:43.0030 4180 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
23:18:43.0030 4180 uagp35 - ok
23:18:43.0092 4180 [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs C:\Windows\system32\DRIVERS\udfs.sys
23:18:43.0092 4180 udfs - ok
23:18:43.0124 4180 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
23:18:43.0124 4180 UI0Detect - ok
23:18:43.0170 4180 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
23:18:43.0170 4180 uliagpkx - ok
23:18:43.0186 4180 [ D295BED4B898F0FD999FCFA9B32B071B ] umbus C:\Windows\system32\drivers\umbus.sys
23:18:43.0186 4180 umbus - ok
23:18:43.0217 4180 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
23:18:43.0217 4180 UmPass - ok
23:18:43.0264 4180 [ 409994A8EACEEE4E328749C0353527A0 ] UmRdpService C:\Windows\System32\umrdp.dll
23:18:43.0264 4180 UmRdpService - ok
23:18:43.0295 4180 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
23:18:43.0295 4180 upnphost - ok
23:18:43.0342 4180 [ 71D97F1A3CC47A56728F7A400A3F8295 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
23:18:43.0358 4180 usbccgp - ok
23:18:43.0389 4180 [ 2352AB5F9F8F097BF9D41D5A4718A041 ] usbcir C:\Windows\system32\drivers\usbcir.sys
23:18:43.0404 4180 usbcir - ok
23:18:43.0404 4180 [ C4FB8E7ADEA9B5CEEA885A1B504B7E40 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
23:18:43.0404 4180 usbehci - ok
23:18:43.0451 4180 [ 86AA95ACB611001E26CD2C0145F2225A ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
23:18:43.0451 4180 usbhub - ok
23:18:43.0498 4180 [ DCDF9855145A14DFCA0AB32308871961 ] usbohci C:\Windows\system32\drivers\usbohci.sys
23:18:43.0498 4180 usbohci - ok
23:18:43.0529 4180 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
23:18:43.0529 4180 usbprint - ok
23:18:43.0576 4180 [ FC6B21DB4B5B398AB93DBE59CBF11036 ] usbscan C:\Windows\system32\drivers\usbscan.sys
23:18:43.0576 4180 usbscan - ok
23:18:43.0607 4180 [ F991AB9CC6B908DB552166768176896A ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
23:18:43.0607 4180 USBSTOR - ok
23:18:43.0638 4180 [ 8E51D04175BAA14C4F79AA5F6D248770 ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
23:18:43.0638 4180 usbuhci - ok
23:18:43.0685 4180 [ DE014425522610BEDCA3821BB8C0F1D5 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
23:18:43.0685 4180 usbvideo - ok
23:18:43.0732 4180 [ AF77716205C97E902E6C5B78DECE2CCA ] usb_rndisx C:\Windows\system32\drivers\usb8023x.sys
23:18:43.0732 4180 usb_rndisx - ok
23:18:43.0763 4180 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
23:18:43.0763 4180 UxSms - ok
23:18:43.0779 4180 [ 803B370865D907EA21DC0C2B6A8936B5 ] VaultSvc C:\Windows\system32\lsass.exe
23:18:43.0779 4180 VaultSvc - ok
23:18:43.0826 4180 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
23:18:43.0841 4180 vdrvroot - ok
23:18:43.0872 4180 [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds C:\Windows\System32\vds.exe
23:18:43.0888 4180 vds - ok
23:18:43.0904 4180 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
23:18:43.0904 4180 vga - ok
23:18:43.0919 4180 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
23:18:43.0919 4180 VgaSave - ok
23:18:43.0966 4180 [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
23:18:43.0966 4180 vhdmp - ok
23:18:44.0013 4180 [ 2AB44BE1479FDB6D99D3AD0E765AC233 ] vhidmini C:\Windows\system32\DRIVERS\walvhid.sys
23:18:44.0013 4180 vhidmini - ok
23:18:44.0044 4180 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\drivers\viaagp.sys
23:18:44.0044 4180 viaagp - ok
23:18:44.0075 4180 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
23:18:44.0075 4180 ViaC7 - ok
23:18:44.0122 4180 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\drivers\viaide.sys
23:18:44.0122 4180 viaide - ok
23:18:44.0169 4180 [ 07C20E596A0838809BC5FF5DE5A65973 ] VKbms C:\Windows\system32\DRIVERS\VKbms.sys
23:18:44.0169 4180 VKbms - ok
23:18:44.0231 4180 [ C2F2911156FDC7817C52829C86DA494E ] vmbus C:\Windows\system32\drivers\vmbus.sys
23:18:44.0231 4180 vmbus - ok
23:18:44.0247 4180 [ D4D77455211E204F370D08F4963063CE ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
23:18:44.0247 4180 VMBusHID - ok
23:18:44.0262 4180 [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr C:\Windows\system32\drivers\volmgr.sys
23:18:44.0262 4180 volmgr - ok
23:18:44.0278 4180 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
23:18:44.0294 4180 volmgrx - ok
23:18:44.0309 4180 [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap C:\Windows\system32\drivers\volsnap.sys
23:18:44.0309 4180 volsnap - ok
23:18:44.0340 4180 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
23:18:44.0340 4180 vsmraid - ok
23:18:44.0418 4180 [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS C:\Windows\system32\vssvc.exe
23:18:44.0434 4180 VSS - ok
23:18:44.0450 4180 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
23:18:44.0450 4180 vwifibus - ok
23:18:44.0481 4180 [ 7090D3436EEB4E7DA3373090A23448F7 ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
23:18:44.0481 4180 vwififlt - ok
23:18:44.0528 4180 [ A3F04CBEA6C2A10E6CB01F8B47611882 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
23:18:44.0528 4180 vwifimp - ok
23:18:44.0574 4180 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
23:18:44.0574 4180 W32Time - ok
23:18:44.0606 4180 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
23:18:44.0606 4180 WacomPen - ok
23:18:44.0621 4180 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
23:18:44.0637 4180 WANARP - ok
23:18:44.0637 4180 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
23:18:44.0637 4180 Wanarpv6 - ok
23:18:44.0730 4180 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
23:18:44.0777 4180 WatAdminSvc - ok
23:18:44.0840 4180 [ 691E3285E53DCA558E1A84667F13E15A ] wbengine C:\Windows\system32\wbengine.exe
23:18:44.0855 4180 wbengine - ok
23:18:44.0886 4180 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
23:18:44.0902 4180 WbioSrvc - ok
23:18:44.0933 4180 [ 59E19BD13C3BDB857646B9E436BA27F7 ] WcesComm C:\Windows\WindowsMobile\wcescomm.dll
23:18:44.0933 4180 WcesComm - ok
23:18:44.0980 4180 [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc C:\Windows\System32\wcncsvc.dll
23:18:44.0996 4180 wcncsvc - ok
23:18:45.0011 4180 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
23:18:45.0011 4180 WcsPlugInService - ok
23:18:45.0027 4180 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
23:18:45.0027 4180 Wd - ok
23:18:45.0074 4180 [ D6EFAF429FD30C5DF613D220E344CCE7 ] WDC_SAM C:\Windows\system32\DRIVERS\wdcsam.sys
23:18:45.0074 4180 WDC_SAM - ok
23:18:45.0136 4180 [ 90C0FE55328FB79292A2DC3B3CBEB12A ] WDDMService C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
23:18:45.0152 4180 WDDMService - ok
23:18:45.0198 4180 [ 25944D2CC49E0A6C581D02A74B7D6645 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
23:18:45.0214 4180 Wdf01000 - ok
23:18:45.0292 4180 [ DD017DEB8A60085559E94089801BCCB1 ] WDFME C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe
23:18:45.0323 4180 WDFME - ok
23:18:45.0339 4180 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
23:18:45.0339 4180 WdiServiceHost - ok
23:18:45.0339 4180 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
23:18:45.0339 4180 WdiSystemHost - ok
23:18:45.0386 4180 [ 796A652180ACBAB0771E206043C1F628 ] WDSC C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe
23:18:45.0386 4180 WDSC - ok
23:18:45.0448 4180 [ 75E8EBD7040CE238684333F97014762A ] WebClient C:\Windows\System32\webclnt.dll
23:18:45.0464 4180 WebClient - ok
23:18:45.0479 4180 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
23:18:45.0495 4180 Wecsvc - ok
23:18:45.0510 4180 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
23:18:45.0510 4180 wercplsupport - ok
23:18:45.0526 4180 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
23:18:45.0542 4180 WerSvc - ok
23:18:45.0557 4180 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
23:18:45.0557 4180 WfpLwf - ok
23:18:45.0588 4180 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
23:18:45.0588 4180 WIMMount - ok
23:18:45.0776 4180 [ 082CF481F659FAE0DE51AD060881EB47 ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
23:18:45.0822 4180 WinDefend - ok
23:18:45.0900 4180 WinHttpAutoProxySvc - ok
23:18:45.0932 4180 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
23:18:45.0947 4180 Winmgmt - ok
23:18:46.0025 4180 [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM C:\Windows\system32\WsmSvc.dll
23:18:46.0056 4180 WinRM - ok
23:18:46.0103 4180 [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUsb C:\Windows\system32\DRIVERS\WinUSB.sys
23:18:46.0103 4180 WinUsb - ok
23:18:46.0150 4180 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
23:18:46.0166 4180 Wlansvc - ok
23:18:46.0275 4180 [ 6067ACEF367E79914AF628FA1E9B5330 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
23:18:46.0275 4180 wlcrasvc - ok
23:18:46.0337 4180 [ 0A70F4022EC2E14C159EFC4F69AA2477 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
23:18:46.0384 4180 wlidsvc - ok
23:18:46.0446 4180 [ 5D410936831F7FB58EFF941EAC3F6D3D ] WmBEnum C:\Windows\system32\drivers\WmBEnum.sys
23:18:46.0446 4180 WmBEnum - ok
23:18:46.0493 4180 [ 7A13CFDE92956CA61A0927D766C5AD4F ] WmFilter C:\Windows\system32\drivers\WmFilter.sys
23:18:46.0493 4180 WmFilter - ok
23:18:46.0509 4180 [ 1F596392149CAC51F7C095AF7D533934 ] WmHidLo C:\Windows\system32\drivers\WmHidLo.sys
23:18:46.0509 4180 WmHidLo - ok
23:18:46.0556 4180 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
23:18:46.0556 4180 WmiAcpi - ok
23:18:46.0587 4180 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
23:18:46.0587 4180 wmiApSrv - ok
23:18:46.0696 4180 [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
23:18:46.0774 4180 WMPNetworkSvc - ok
23:18:46.0821 4180 [ 6F04646BC690F8BBFC344BE32A60796D ] WmVirHid C:\Windows\system32\drivers\WmVirHid.sys
23:18:46.0821 4180 WmVirHid - ok
23:18:46.0868 4180 [ 1D6CA43D562333F4DFB40BCEF2453F3A ] WmXlCore C:\Windows\system32\drivers\WmXlCore.sys
23:18:46.0868 4180 WmXlCore - ok
23:18:46.0883 4180 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
23:18:46.0883 4180 WPCSvc - ok
23:18:46.0930 4180 [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
23:18:46.0946 4180 WPDBusEnum - ok
23:18:46.0977 4180 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
23:18:46.0977 4180 ws2ifsl - ok
23:18:46.0992 4180 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\system32\wscsvc.dll
23:18:46.0992 4180 wscsvc - ok
23:18:46.0992 4180 WSearch - ok
23:18:47.0024 4180 WTService - ok
23:18:47.0195 4180 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
23:18:47.0242 4180 wuauserv - ok
23:18:47.0289 4180 [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
23:18:47.0289 4180 WudfPf - ok
23:18:47.0304 4180 [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
23:18:47.0320 4180 WUDFRd - ok
23:18:47.0320 4180 [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
23:18:47.0336 4180 wudfsvc - ok
23:18:47.0367 4180 [ 3C5E51C05BE9B56EAFF4E388C3AB25E4 ] WwanSvc C:\Windows\System32\wwansvc.dll
23:18:47.0367 4180 WwanSvc - ok
23:18:47.0445 4180 ================ Scan global ===============================
23:18:47.0492 4180 [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll
23:18:47.0538 4180 [ 51BB04243DF6196C06E125898127E397 ] C:\Windows\system32\winsrv.dll
23:18:47.0538 4180 [ 51BB04243DF6196C06E125898127E397 ] C:\Windows\system32\winsrv.dll
23:18:47.0570 4180 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
23:18:47.0585 4180 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
23:18:47.0601 4180 [Global] - ok
23:18:47.0601 4180 ================ Scan MBR ==================================
23:18:47.0601 4180 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
23:18:48.0786 4180 \Device\Harddisk0\DR0 - ok
23:18:48.0786 4180 ================ Scan VBR ==================================
23:18:48.0818 4180 [ 7E6781A8BD0FBC35E04A6BE02E38EFBE ] \Device\Harddisk0\DR0\Partition1
23:18:48.0833 4180 \Device\Harddisk0\DR0\Partition1 - ok
23:18:48.0927 4180 [ 9A4771A1B2B6C3C3140DE6C7A802023B ] \Device\Harddisk0\DR0\Partition2
23:18:48.0942 4180 \Device\Harddisk0\DR0\Partition2 - ok
23:18:48.0942 4180 ============================================================
23:18:48.0942 4180 Scan finished
23:18:48.0942 4180 ============================================================
23:18:48.0958 0348 Detected object count: 2
23:18:48.0958 0348 Actual detected object count: 2
23:24:44.0632 0348 c:\program files\common files\akamai/netsession_win_8fa3539.dll - copied to quarantine
23:24:44.0632 0348 Akamai ( HiddenFile.Multi.Generic ) - User select action: Quarantine
23:24:44.0663 0348 C:\Windows\system32\Drivers\sptd.sys - copied to quarantine
23:24:44.0663 0348 sptd ( LockedFile.Multi.Generic ) - User select action: Quarantine
23:24:58.0610 4600 Deinitialize success

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.