PC-HELP.CZ

Ahoj.
Prosím o kontrolu logu.
Dost mně posledních 14 dní zpomalil pc.
Díky předem.

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 13:47:53, on 2. 1. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.16384)


Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Downloads\Software\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://localoem.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {3444c3c5-6c56-4a16-a453-832b05bf6ea4} - (no file)
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O8 - Extra context menu item: Stáhnout FDM - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video FDM - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané FDM - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše FDM - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7705 bytes

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

===================================================

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

====================================================

Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

====================================================

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2014.01.02.02

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16476
Petr :: PETRMALENKA [administrátor]

Ochrana: Povolena

2. 1. 2014 13:57:52
MBAM-log-2014-01-02 (14-02-10).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 247830
Uplynulý čas: 3 minut, 18 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 2
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3444c3c5-6c56-4a16-a453-832b05bf6ea4} (PUP.Optional.MoviesToolBar.A) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\DATAMNGR (PUP.Optional.MoviesToolbar.A) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 3
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{3444c3c5-6c56-4a16-a453-832b05bf6ea4} (PUP.Optional.MoviesToolBar.A) -> Data: Movies Toolbar (Dist. by Somoto Ltd.) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{3444c3c5-6c56-4a16-a453-832b05bf6ea4} (PUP.Optional.MoviesToolBar.A) -> Data: -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Datamngr|uninstallstring (PUP.Optional.MoviesToolbar.A) -> Data: C:\Program Files (x86)\Movies Toolbar\SafetyNut\uninstall.exe -> Nebyla provedena žádná instrukce.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 2
C:\Users\Petr\AppData\Roaming\OPENCANDY (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Users\Petr\AppData\Roaming\OPENCANDY\989CE342D80F433088B4B3DDC92DC872 (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 1
C:\Users\Petr\AppData\Roaming\OPENCANDY\989CE342D80F433088B4B3DDC92DC872\chrometest.html (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.

(konec)

# AdwCleaner v3.016 - Report created 02/01/2014 at 14:03:25
# Updated 23/12/2013 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : Petr - PETRMALENKA
# Running from : C:\Users\Petr\Desktop\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\WINDOWS\System32\roboot64.exe
Folder Found C:\Users\Petr\AppData\Local\somotomoviestoolbar1
Folder Found C:\Users\Petr\AppData\LocalLow\somotomoviestoolbar1
Folder Found C:\Users\Petr\AppData\Roaming\B1Toolbar
Folder Found C:\Users\Petr\AppData\Roaming\OpenCandy

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\APN DTX
Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\BI
Key Found : HKCU\Software\OCS
Key Found : HKCU\Software\Softonic
Key Found : [x64] HKCU\Software\APN DTX
Key Found : [x64] HKCU\Software\APN PIP
Key Found : [x64] HKCU\Software\BI
Key Found : [x64] HKCU\Software\OCS
Key Found : [x64] HKCU\Software\Softonic
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3444C3C5-6C56-4A16-A453-832B05BF6EA4}
Key Found : HKLM\Software\SafetyNut
Key Found : HKLM\Software\systweak
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{3444C3C5-6C56-4A16-A453-832B05BF6EA4}]

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16384


-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1561 octets] - [02/01/2014 14:03:25]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1621 octets] ##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.9 (01.01.2014:1)
OS: Windows 8.1 x64
Ran by Petr on źt 02. 01. 2014 at 15:38:02,21
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{3444c3c5-6c56-4a16-a453-832b05bf6ea4}



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\apn dtx
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\bi
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\systweak
Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip"



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\fighters"
Successfully deleted: [Folder] "C:\Users\Petr\AppData\Roaming\b1toolbar"
Successfully deleted: [Folder] "C:\Users\Petr\AppData\Roaming\opencandy"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on źt 02. 01. 2014 at 15:43:21,06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Znovu spusť MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

====================================================

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Smazat“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

====================================================

Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

====================================================

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

# AdwCleaner v3.016 - Report created 02/01/2014 at 18:03:51
# Updated 23/12/2013 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : Petr - PETRMALENKA
# Running from : C:\Users\Petr\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Petr\AppData\Local\somotomoviestoolbar1
Folder Deleted : C:\Users\Petr\AppData\LocalLow\somotomoviestoolbar1
File Deleted : C:\WINDOWS\System32\roboot64.exe

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\OCS
Key Deleted : HKLM\Software\SafetyNut

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16384


-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1721 octets] - [02/01/2014 14:03:50]
AdwCleaner[R1].txt - [1076 octets] - [02/01/2014 18:03:44]
AdwCleaner[S0].txt - [976 octets] - [02/01/2014 18:03:51]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1035 octets] ##########

18:09:33.0289 4324 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
18:09:35.0399 4324 ============================================================
18:09:35.0399 4324 Current date / time: 2014/01/02 18:09:35.0399
18:09:35.0399 4324 SystemInfo:
18:09:35.0399 4324
18:09:35.0399 4324 OS Version: 6.2.9200 ServicePack: 0.0
18:09:35.0399 4324 Product type: Workstation
18:09:35.0399 4324 ComputerName: PETRMALENKA
18:09:35.0399 4324 UserName: Petr
18:09:35.0399 4324 Windows directory: C:\WINDOWS
18:09:35.0399 4324 System windows directory: C:\WINDOWS
18:09:35.0399 4324 Running under WOW64
18:09:35.0399 4324 Processor architecture: Intel x64
18:09:35.0399 4324 Number of processors: 4
18:09:35.0399 4324 Page size: 0x1000
18:09:35.0399 4324 Boot type: Normal boot
18:09:35.0399 4324 ============================================================
18:09:36.0023 4324 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:09:36.0039 4324 Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
18:09:36.0383 4324 ============================================================
18:09:36.0383 4324 \Device\Harddisk0\DR0:
18:09:36.0383 4324 MBR partitions:
18:09:36.0383 4324 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xAFFED
18:09:36.0383 4324 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xB07ED, BlocksNum 0x74655800
18:09:36.0383 4324 \Device\Harddisk1\DR1:
18:09:36.0383 4324 MBR partitions:
18:09:36.0383 4324 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x40, BlocksNum 0x74705980
18:09:36.0383 4324 ============================================================
18:09:36.0399 4324 C: <-> \Device\Harddisk0\DR0\Partition2
18:09:36.0399 4324 E: <-> \Device\Harddisk1\DR1\Partition1
18:09:36.0399 4324 ============================================================
18:09:36.0399 4324 Initialize success
18:09:36.0399 4324 ============================================================
18:09:38.0420 1752 ============================================================
18:09:38.0420 1752 Scan started
18:09:38.0420 1752 Mode: Manual;
18:09:38.0420 1752 ============================================================
18:09:39.0014 1752 ================ Scan system memory ========================
18:09:39.0014 1752 System memory - ok
18:09:39.0014 1752 ================ Scan services =============================
18:09:39.0170 1752 [ E1832BD9FD7E0FC2DC9FA5935DE3E8C1 ] 1394ohci C:\WINDOWS\System32\drivers\1394ohci.sys
18:09:39.0170 1752 1394ohci - ok
18:09:39.0185 1752 [ AD508A1A46EC21B740AB31C28EFDFDB1 ] 3ware C:\WINDOWS\system32\drivers\3ware.sys
18:09:39.0185 1752 3ware - ok
18:09:39.0217 1752 [ 3D30878A269D934100FA5F972E53AF39 ] ACPI C:\WINDOWS\system32\drivers\ACPI.sys
18:09:39.0232 1752 ACPI - ok
18:09:39.0232 1752 [ AC8279D229398BCF05C3154ADCA86813 ] acpiex C:\WINDOWS\system32\Drivers\acpiex.sys
18:09:39.0232 1752 acpiex - ok
18:09:39.0248 1752 [ A8970D9BF23CD309E0403978A1B58F3F ] acpipagr C:\WINDOWS\System32\drivers\acpipagr.sys
18:09:39.0248 1752 acpipagr - ok
18:09:39.0279 1752 [ 111A89C99C5B4F1A7BCE5F643DD86F65 ] AcpiPmi C:\WINDOWS\System32\drivers\acpipmi.sys
18:09:39.0279 1752 AcpiPmi - ok
18:09:39.0295 1752 [ 5758387D68A20AE7D3245011B07E36E7 ] acpitime C:\WINDOWS\System32\drivers\acpitime.sys
18:09:39.0295 1752 acpitime - ok
18:09:39.0310 1752 [ 7C1FDF1B48298CBA7CE4BDD4978951AD ] ADP80XX C:\WINDOWS\system32\drivers\ADP80XX.SYS
18:09:39.0310 1752 ADP80XX - ok
18:09:39.0342 1752 [ B19CA8E441D35AA2B1EE51C10B27DA1B ] AeLookupSvc C:\WINDOWS\System32\aelupsvc.dll
18:09:39.0342 1752 AeLookupSvc - ok
18:09:39.0373 1752 [ 239268BAB58EAE9A3FF4E08334C00451 ] AFD C:\WINDOWS\system32\drivers\afd.sys
18:09:39.0373 1752 AFD - ok
18:09:39.0388 1752 [ 7DFAEBA9AD62D20102B576D5CAC45EC8 ] agp440 C:\WINDOWS\system32\drivers\agp440.sys
18:09:39.0388 1752 agp440 - ok
18:09:39.0404 1752 [ 8E8E34B7BA059050EED827410D0697A2 ] ahcache C:\WINDOWS\system32\DRIVERS\ahcache.sys
18:09:39.0420 1752 ahcache - ok
18:09:39.0435 1752 [ A91D8E1E433EFB32551BCE69037E1CE7 ] ALG C:\WINDOWS\System32\alg.exe
18:09:39.0435 1752 ALG - ok
18:09:39.0467 1752 [ 7589DE749DB6F71A68489DCE04158729 ] AmdK8 C:\WINDOWS\System32\drivers\amdk8.sys
18:09:39.0467 1752 AmdK8 - ok
18:09:39.0482 1752 [ B46D2D89AFF8A9490FA8C98C7A5616E3 ] AmdPPM C:\WINDOWS\System32\drivers\amdppm.sys
18:09:39.0482 1752 AmdPPM - ok
18:09:39.0498 1752 [ D2BF2F94A47D332814910FD47C6BBCD2 ] amdsata C:\WINDOWS\system32\drivers\amdsata.sys
18:09:39.0498 1752 amdsata - ok
18:09:39.0514 1752 [ A8E04943C7BBA7219AA50400272C3C6E ] amdsbs C:\WINDOWS\system32\drivers\amdsbs.sys
18:09:39.0514 1752 amdsbs - ok
18:09:39.0529 1752 [ CEA5F4F27CFC08E3A44D576811B35F50 ] amdxata C:\WINDOWS\system32\drivers\amdxata.sys
18:09:39.0529 1752 amdxata - ok
18:09:39.0545 1752 [ 04951A9A937CBE28A2D3FEEA360B6D1F ] AppID C:\WINDOWS\system32\drivers\appid.sys
18:09:39.0545 1752 AppID - ok
18:09:39.0576 1752 [ C0DC3F58214A227980AEB091CFD2F973 ] AppIDSvc C:\WINDOWS\System32\appidsvc.dll
18:09:39.0576 1752 AppIDSvc - ok
18:09:39.0576 1752 [ 7E790DE2487CEDB349D1750B9E47F090 ] Appinfo C:\WINDOWS\System32\appinfo.dll
18:09:39.0576 1752 Appinfo - ok
18:09:39.0592 1752 [ 4B964AE0DF433A3BFA7BD24713BC2E9B ] AppReadiness C:\WINDOWS\system32\AppReadiness.dll
18:09:39.0607 1752 AppReadiness - ok
18:09:39.0638 1752 [ 0B726D9ED75C787D6FFAF1E3873BCC70 ] AppXSvc C:\WINDOWS\system32\appxdeploymentserver.dll
18:09:39.0670 1752 AppXSvc - ok
18:09:39.0701 1752 [ 65045784366F7EC5FB4E71BCF923187B ] arcsas C:\WINDOWS\system32\drivers\arcsas.sys
18:09:39.0701 1752 arcsas - ok
18:09:39.0732 1752 [ 9C2BEA3957EFFD45F352F0938DFB3721 ] aswMonFlt C:\WINDOWS\system32\drivers\aswMonFlt.sys
18:09:39.0732 1752 aswMonFlt - ok
18:09:39.0748 1752 [ 679712B7A353EE665B9301592164A172 ] aswRdr C:\WINDOWS\system32\drivers\aswRdr2.sys
18:09:39.0748 1752 aswRdr - ok
18:09:39.0764 1752 [ C04F7B373881009D7994D9BF55D24AB4 ] aswRvrt C:\WINDOWS\system32\drivers\aswRvrt.sys
18:09:39.0764 1752 aswRvrt - ok
18:09:39.0779 1752 [ 52B5F8FAF7E78C02D26B0B6E3A05F596 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
18:09:39.0795 1752 aswSnx - ok
18:09:39.0842 1752 [ 251360C2FCA22BAFE0583314B3262F98 ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
18:09:39.0842 1752 aswSP - ok
18:09:39.0873 1752 [ AAB5F5336EDBB5D99CC7E1A9F4D8F63F ] aswStm C:\WINDOWS\system32\drivers\aswStm.sys
18:09:39.0873 1752 aswStm - ok
18:09:39.0888 1752 [ 90399625F341AB76BA4B85A5E860EB1F ] aswVmm C:\WINDOWS\system32\drivers\aswVmm.sys
18:09:39.0888 1752 aswVmm - ok
18:09:39.0904 1752 [ 74B14192CF79A72F7536B27CB8814FBD ] atapi C:\WINDOWS\system32\drivers\atapi.sys
18:09:39.0904 1752 atapi - ok
18:09:39.0920 1752 [ 4903CBC14742B5AB4DCF7A92F7DEC483 ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
18:09:39.0920 1752 AudioEndpointBuilder - ok
18:09:39.0951 1752 [ 86DD7884124D363A63CCE7A11FDEBBED ] Audiosrv C:\WINDOWS\System32\Audiosrv.dll
18:09:39.0951 1752 Audiosrv - ok
18:09:40.0029 1752 [ D74884939D53612FD84AC82C59CCFE27 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
18:09:40.0029 1752 avast! Antivirus - ok
18:09:40.0045 1752 [ 96E8CAF20FC4B6C31CAD7816A801EB78 ] AxInstSV C:\WINDOWS\System32\AxInstSV.dll
18:09:40.0060 1752 AxInstSV - ok
18:09:40.0092 1752 [ A4A73F631FE2AA2826FBE4A399B04DEF ] b06bdrv C:\WINDOWS\system32\drivers\bxvbda.sys
18:09:40.0107 1752 b06bdrv - ok
18:09:40.0123 1752 [ 8CC7F7E4AFCBA605921B137ED7992C68 ] BasicDisplay C:\WINDOWS\System32\drivers\BasicDisplay.sys
18:09:40.0123 1752 BasicDisplay - ok
18:09:40.0139 1752 [ 2748E116F8621A4DB0D39FCDD7318C01 ] BasicRender C:\WINDOWS\System32\drivers\BasicRender.sys
18:09:40.0139 1752 BasicRender - ok
18:09:40.0154 1752 [ C1ABB0F7E3BEA48A0417BDF6FF14AB21 ] bcmfn2 C:\WINDOWS\System32\drivers\bcmfn2.sys
18:09:40.0154 1752 bcmfn2 - ok
18:09:40.0185 1752 [ BBE61A40665B83488901E41082A6097D ] BDESVC C:\WINDOWS\System32\bdesvc.dll
18:09:40.0185 1752 BDESVC - ok
18:09:40.0217 1752 [ EC19013E4CF87609534165DF897274D6 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
18:09:40.0217 1752 Beep - ok
18:09:40.0264 1752 [ 6468B696C65775D51A06615830E0E79D ] BFE C:\WINDOWS\System32\bfe.dll
18:09:40.0279 1752 BFE - ok
18:09:40.0326 1752 [ 15225081966C785A9192782401643FD4 ] BITS C:\WINDOWS\System32\qmgr.dll
18:09:40.0373 1752 BITS - ok
18:09:40.0388 1752 [ 6B4FFFDDC618FCF64473CAA86E305697 ] bowser C:\WINDOWS\system32\DRIVERS\bowser.sys
18:09:40.0388 1752 bowser - ok
18:09:40.0420 1752 [ 748141CC03DF40C38F17D3F96BB15C80 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
18:09:40.0420 1752 BrokerInfrastructure - ok
18:09:40.0451 1752 [ D528D6A92D187777691993DD757AF19A ] Browser C:\WINDOWS\System32\browser.dll
18:09:40.0451 1752 Browser - ok
18:09:40.0467 1752 [ A8F23D453A424FF4DE04989C4727ECC7 ] BthAvrcpTg C:\WINDOWS\System32\drivers\BthAvrcpTg.sys
18:09:40.0467 1752 BthAvrcpTg - ok
18:09:40.0482 1752 [ 746B9F94214915AECDE4B7FEA5FF9664 ] BthHFEnum C:\WINDOWS\System32\drivers\bthhfenum.sys
18:09:40.0482 1752 BthHFEnum - ok
18:09:40.0513 1752 [ 71FE2A48E4C93DDB9798C024880B6C07 ] bthhfhid C:\WINDOWS\System32\drivers\BthHFHid.sys
18:09:40.0513 1752 bthhfhid - ok
18:09:40.0529 1752 [ 07E33226AD218A2A162662A05CAFB52F ] BTHMODEM C:\WINDOWS\System32\drivers\bthmodem.sys
18:09:40.0529 1752 BTHMODEM - ok
18:09:40.0560 1752 [ E5E48FEED73D463175EAB1542495191C ] bthserv C:\WINDOWS\system32\bthserv.dll
18:09:40.0560 1752 bthserv - ok
18:09:40.0576 1752 [ 2FA6510E33F7DEFEC03658B74101A9B9 ] cdfs C:\WINDOWS\system32\DRIVERS\cdfs.sys
18:09:40.0576 1752 cdfs - ok
18:09:40.0607 1752 [ C6796EA22B513E3457514D92DCDB1A3D ] cdrom C:\WINDOWS\System32\drivers\cdrom.sys
18:09:40.0607 1752 cdrom - ok
18:09:40.0623 1752 [ AB285CE3431FF3D2ACE669245874C1C7 ] CertPropSvc C:\WINDOWS\System32\certprop.dll
18:09:40.0623 1752 CertPropSvc - ok
18:09:40.0639 1752 [ BE9936EDD3267FAAFF94A7835867F00B ] circlass C:\WINDOWS\System32\drivers\circlass.sys
18:09:40.0639 1752 circlass - ok
18:09:40.0654 1752 [ 7F006813C2AFE622C13D7AF94F56CD07 ] CLFS C:\WINDOWS\system32\drivers\CLFS.sys
18:09:40.0654 1752 CLFS - ok
18:09:40.0685 1752 [ EF6EF85DADC3184A10D8F2F7159973CB ] CmBatt C:\WINDOWS\System32\drivers\CmBatt.sys
18:09:40.0685 1752 CmBatt - ok
18:09:40.0701 1752 [ 825BE21E6395E00698D8A23955A87972 ] CNG C:\WINDOWS\system32\Drivers\cng.sys
18:09:40.0717 1752 CNG - ok
18:09:40.0732 1752 [ 03AAED827C36F35D70900558B8274905 ] CompositeBus C:\WINDOWS\System32\drivers\CompositeBus.sys
18:09:40.0732 1752 CompositeBus - ok
18:09:40.0748 1752 COMSysApp - ok
18:09:40.0748 1752 [ A1FF7DFBFBE164CF92603C651D304DD2 ] condrv C:\WINDOWS\system32\drivers\condrv.sys
18:09:40.0748 1752 condrv - ok
18:09:40.0779 1752 [ 0EFE4B5884A8032617826A4D76F80969 ] CryptSvc C:\WINDOWS\system32\cryptsvc.dll
18:09:40.0779 1752 CryptSvc - ok
18:09:40.0795 1752 [ 315BA4BC19316D72B2E037534E048B93 ] dam C:\WINDOWS\system32\drivers\dam.sys
18:09:40.0795 1752 dam - ok
18:09:40.0842 1752 [ 3FD5AE42EC87C6F532A931F96BE731DD ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
18:09:40.0857 1752 DcomLaunch - ok
18:09:40.0873 1752 [ F4CCAADC2C78F57E4F16B24C9201CE22 ] defragsvc C:\WINDOWS\System32\defragsvc.dll
18:09:40.0873 1752 defragsvc - ok
18:09:40.0920 1752 [ 0BC71D4D3B5883903C37BF4E13B0F0C5 ] DeviceAssociationService C:\WINDOWS\system32\das.dll
18:09:40.0920 1752 DeviceAssociationService - ok
18:09:40.0935 1752 [ 752A457320A946E03C3AA86C3ACD735E ] DeviceInstall C:\WINDOWS\system32\umpnpmgr.dll
18:09:40.0935 1752 DeviceInstall - ok
18:09:40.0967 1752 [ 5DB26D7E0216D0BF364A81D3829AD7B9 ] Dfsc C:\WINDOWS\system32\Drivers\dfsc.sys
18:09:40.0967 1752 Dfsc - ok
18:09:40.0967 1752 [ 8B107F55FD61654A6C9F1B819AEC5FC4 ] Dhcp C:\WINDOWS\system32\dhcpcore.dll
18:09:40.0982 1752 Dhcp - ok
18:09:40.0998 1752 [ 4D40C9B33F738797CF50E77CB7C53E85 ] disk C:\WINDOWS\system32\drivers\disk.sys
18:09:40.0998 1752 disk - ok
18:09:41.0014 1752 [ EB70A894708D1BC176AFD690FF06085F ] dmvsc C:\WINDOWS\System32\drivers\dmvsc.sys
18:09:41.0014 1752 dmvsc - ok
18:09:41.0029 1752 [ 5BAF7714E68F93515A937A3FA8587EF9 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
18:09:41.0029 1752 Dnscache - ok
18:09:41.0045 1752 [ 50288EA079BB520C2B8C8A154202D518 ] dot3svc C:\WINDOWS\System32\dot3svc.dll
18:09:41.0045 1752 dot3svc - ok
18:09:41.0076 1752 [ 281BEE07BA97E3E98D12A822D923D0D8 ] DPS C:\WINDOWS\system32\dps.dll
18:09:41.0092 1752 DPS - ok
18:09:41.0107 1752 [ DDC11A202207C0400CBE07315B8FDE5E ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
18:09:41.0107 1752 drmkaud - ok
18:09:41.0123 1752 [ 5B074F14F5DD6418F46EE4CA2DEB7EA8 ] DsmSvc C:\WINDOWS\System32\DeviceSetupManager.dll
18:09:41.0123 1752 DsmSvc - ok
18:09:41.0154 1752 [ A3D1CB64DF885ACE126543E6D7067348 ] DXGKrnl C:\WINDOWS\System32\drivers\dxgkrnl.sys
18:09:41.0201 1752 DXGKrnl - ok
18:09:41.0217 1752 [ 6073537F250B45E1CB2A02E97F0FE1B2 ] Eaphost C:\WINDOWS\System32\eapsvc.dll
18:09:41.0217 1752 Eaphost - ok
18:09:41.0279 1752 [ 114BCFDF367FF37C3F1B0A96AF542E4D ] ebdrv C:\WINDOWS\system32\drivers\evbda.sys
18:09:41.0342 1752 ebdrv - ok
18:09:41.0357 1752 [ F6F209DDB94959BA104FC8FC87C53759 ] EFS C:\WINDOWS\System32\lsass.exe
18:09:41.0357 1752 EFS - ok
18:09:41.0373 1752 [ 43531A5993380CC5113242C29D265FD9 ] EhStorClass C:\WINDOWS\system32\drivers\EhStorClass.sys
18:09:41.0373 1752 EhStorClass - ok
18:09:41.0388 1752 [ 6F8E738A9505A388B1157FDDE7B3101B ] EhStorTcgDrv C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
18:09:41.0388 1752 EhStorTcgDrv - ok
18:09:41.0420 1752 [ BE2902E13CA69383F449B6BF927844FB ] ElbyCDIO C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
18:09:41.0420 1752 ElbyCDIO - ok
18:09:41.0435 1752 [ DFFFAE1442BA4076E18EED5E406FA0D3 ] ErrDev C:\WINDOWS\System32\drivers\errdev.sys
18:09:41.0435 1752 ErrDev - ok
18:09:41.0467 1752 [ 030CE75B7D8F75FAA7BA1EC6FD0EB5A3 ] EventSystem C:\WINDOWS\system32\es.dll
18:09:41.0467 1752 EventSystem - ok
18:09:41.0482 1752 [ 7729D294A555C7AEB281ED8E4D0E01E4 ] exfat C:\WINDOWS\system32\drivers\exfat.sys
18:09:41.0482 1752 exfat - ok
18:09:41.0498 1752 [ 7C4E0D5900B2A1D11EDD626D6DDB937B ] fastfat C:\WINDOWS\system32\drivers\fastfat.sys
18:09:41.0498 1752 fastfat - ok
18:09:41.0529 1752 [ 2BC8532ABF2B3756B78FA1DA54147DDE ] Fax C:\WINDOWS\system32\fxssvc.exe
18:09:41.0545 1752 Fax - ok
18:09:41.0560 1752 [ 5D8402613E778B3BD45E687A8372710B ] fdc C:\WINDOWS\System32\drivers\fdc.sys
18:09:41.0560 1752 fdc - ok
18:09:41.0576 1752 [ DC1A78BCCCB7EE53D6FD3BD615A8E222 ] fdPHost C:\WINDOWS\system32\fdPHost.dll
18:09:41.0592 1752 fdPHost - ok
18:09:41.0607 1752 [ E5AD448F2DC84B1CF387FA7F2A3D1936 ] FDResPub C:\WINDOWS\system32\fdrespub.dll
18:09:41.0607 1752 FDResPub - ok
18:09:41.0623 1752 [ 0046E0BD031213D37123876B0D0FA61C ] fhsvc C:\WINDOWS\system32\fhsvc.dll
18:09:41.0639 1752 fhsvc - ok
18:09:41.0654 1752 [ 957A7A8F5ACCAF23DD9DFF6DAA393CE5 ] FileInfo C:\WINDOWS\system32\drivers\fileinfo.sys
18:09:41.0654 1752 FileInfo - ok
18:09:41.0670 1752 [ A1A66C4FDAFD6B0289523232AFB7D8AF ] Filetrace C:\WINDOWS\system32\drivers\filetrace.sys
18:09:41.0670 1752 Filetrace - ok
18:09:41.0685 1752 [ BE743083CF7063C486A4398E3AEFE59A ] flpydisk C:\WINDOWS\System32\drivers\flpydisk.sys
18:09:41.0685 1752 flpydisk - ok
18:09:41.0701 1752 [ 60D5067FCE6D9433D35E04C01D8538B3 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
18:09:41.0717 1752 FltMgr - ok
18:09:41.0748 1752 [ 183CA7699474FDE235853967D1DA4D9B ] FontCache C:\WINDOWS\system32\FntCache.dll
18:09:41.0779 1752 FontCache - ok
18:09:41.0888 1752 [ 1C52387BF5A127F5F3BFB31288F30D93 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
18:09:41.0888 1752 FontCache3.0.0.0 - ok
18:09:41.0904 1752 [ 35005534E600E993A90B036E4E599F2B ] FsDepends C:\WINDOWS\system32\drivers\FsDepends.sys
18:09:41.0920 1752 FsDepends - ok
18:09:41.0935 1752 [ 09F460AFEDCA03F3BF6E07D1CCC9AC42 ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
18:09:41.0935 1752 Fs_Rec - ok
18:09:41.0967 1752 [ 83E1F0983B02A6F8EC764D18E24ECF10 ] fvevol C:\WINDOWS\system32\DRIVERS\fvevol.sys
18:09:41.0982 1752 fvevol - ok
18:09:41.0982 1752 [ 9591D0B9351ED489EAFD9D1CE52A8015 ] FxPPM C:\WINDOWS\System32\drivers\fxppm.sys
18:09:41.0998 1752 FxPPM - ok
18:09:41.0998 1752 [ FC3EF65EE20D39F8749C2218DBA681CA ] gagp30kx C:\WINDOWS\system32\drivers\gagp30kx.sys
18:09:42.0013 1752 gagp30kx - ok
18:09:42.0013 1752 [ 0BF5CAD281E25F1418E5B8875DC5ADD1 ] gencounter C:\WINDOWS\System32\drivers\vmgencounter.sys
18:09:42.0013 1752 gencounter - ok
18:09:42.0029 1752 [ FDA72810CA2F8409D9B31E833C448E34 ] GPIOClx0101 C:\WINDOWS\system32\Drivers\msgpioclx.sys
18:09:42.0029 1752 GPIOClx0101 - ok
18:09:42.0076 1752 [ 0BDE0FCF597E9B65600121EF54FF8340 ] gpsvc C:\WINDOWS\System32\gpsvc.dll
18:09:42.0107 1752 gpsvc - ok
18:09:42.0170 1752 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:09:42.0170 1752 gupdate - ok
18:09:42.0170 1752 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:09:42.0170 1752 gupdatem - ok
18:09:42.0201 1752 [ 03909BDBFF0DCACCABF2B2D4ADEE44DC ] HDAudBus C:\WINDOWS\System32\drivers\HDAudBus.sys
18:09:42.0201 1752 HDAudBus - ok
18:09:42.0201 1752 [ 10A70BC1871CD955D85CD88372724906 ] HidBatt C:\WINDOWS\System32\drivers\HidBatt.sys
18:09:42.0217 1752 HidBatt - ok
18:09:42.0217 1752 [ 1EA1B4FABB8CC348E73CA90DBA22E104 ] HidBth C:\WINDOWS\System32\drivers\hidbth.sys
18:09:42.0217 1752 HidBth - ok
18:09:42.0232 1752 [ C241A8BAFBBFC90176EA0F5240EACC17 ] hidi2c C:\WINDOWS\System32\drivers\hidi2c.sys
18:09:42.0232 1752 hidi2c - ok
18:09:42.0248 1752 [ 9BDDEE26255421017E161CCB9D5EDA95 ] HidIr C:\WINDOWS\System32\drivers\hidir.sys
18:09:42.0248 1752 HidIr - ok
18:09:42.0263 1752 [ 449A20A674AA3FAA7F0DD4E33EE2DC20 ] hidserv C:\WINDOWS\system32\hidserv.dll
18:09:42.0263 1752 hidserv - ok
18:09:42.0279 1752 [ F31397220D9687E11EB448649AA6E038 ] HidUsb C:\WINDOWS\System32\drivers\hidusb.sys
18:09:42.0279 1752 HidUsb - ok
18:09:42.0310 1752 [ 7BF3ADCBD021D4F4A84CF40EB49C71B5 ] hkmsvc C:\WINDOWS\system32\kmsvc.dll
18:09:42.0310 1752 hkmsvc - ok
18:09:42.0342 1752 [ 6CD9C3819BE8C0A3DACC82AE5D3C4F18 ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll
18:09:42.0342 1752 HomeGroupListener - ok
18:09:42.0373 1752 [ BE5F89BAFBD4272D5A0C0A37B97865ED ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll
18:09:42.0373 1752 HomeGroupProvider - ok
18:09:42.0404 1752 [ A6AACEA4C785789BDA5912AD1FEDA80D ] HpSAMD C:\WINDOWS\system32\drivers\HpSAMD.sys
18:09:42.0404 1752 HpSAMD - ok
18:09:42.0435 1752 [ 3502776E366C913D49C0DA928AE3E6CB ] HTTP C:\WINDOWS\system32\drivers\HTTP.sys
18:09:42.0451 1752 HTTP - ok
18:09:42.0467 1752 [ 90656C0B3864804B090434EFC582404F ] hwpolicy C:\WINDOWS\system32\drivers\hwpolicy.sys
18:09:42.0467 1752 hwpolicy - ok
18:09:42.0482 1752 [ 6D6F9E3BF0484967E52F7E846BFF1CA1 ] hyperkbd C:\WINDOWS\System32\drivers\hyperkbd.sys
18:09:42.0482 1752 hyperkbd - ok
18:09:42.0498 1752 [ 907C870F8C31F8DDD6F090857B46AB25 ] HyperVideo C:\WINDOWS\system32\DRIVERS\HyperVideo.sys
18:09:42.0498 1752 HyperVideo - ok
18:09:42.0513 1752 [ 84CFC5EFA97D0C965EDE1D56F116A541 ] i8042prt C:\WINDOWS\System32\drivers\i8042prt.sys
18:09:42.0513 1752 i8042prt - ok
18:09:42.0513 1752 [ 5D90E32E36CE5D4C535D17CE08AEAF05 ] iaLPSSi_GPIO C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys
18:09:42.0529 1752 iaLPSSi_GPIO - ok
18:09:42.0545 1752 [ DD05E7E80F52ADE9AEB292819920F32C ] iaLPSSi_I2C C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys
18:09:42.0545 1752 iaLPSSi_I2C - ok
18:09:42.0560 1752 [ 08BFE413B0B4AA8DFA4B5684CE06D3DC ] iaStorAV C:\WINDOWS\system32\drivers\iaStorAV.sys
18:09:42.0576 1752 iaStorAV - ok
18:09:42.0607 1752 [ A2200C3033FA4EF249FC096A7A7D02A2 ] iaStorV C:\WINDOWS\system32\drivers\iaStorV.sys
18:09:42.0607 1752 iaStorV - ok
18:09:42.0623 1752 IEEtwCollectorService - ok
18:09:42.0639 1752 [ B82255670D270B75D2D2F0F8747D1443 ] IKEEXT C:\WINDOWS\System32\ikeext.dll
18:09:42.0654 1752 IKEEXT - ok
18:09:42.0748 1752 [ C2F868881D48A568B525255F084EF063 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
18:09:42.0842 1752 IntcAzAudAddService - ok
18:09:42.0857 1752 [ 4E448FCFFD00E8D657CD9E48D3E47157 ] intelide C:\WINDOWS\system32\drivers\intelide.sys
18:09:42.0857 1752 intelide - ok
18:09:42.0873 1752 [ 139CFCDCD36B1B1782FD8C0014AC9B0E ] intelpep C:\WINDOWS\system32\drivers\intelpep.sys
18:09:42.0873 1752 intelpep - ok
18:09:42.0888 1752 [ 47E74A8E53C7C24DCE38311E1451C1D9 ] intelppm C:\WINDOWS\System32\drivers\intelppm.sys
18:09:42.0888 1752 intelppm - ok
18:09:42.0904 1752 [ 9DB76D7F9E4E53EFE5DD8C53DE837514 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
18:09:42.0904 1752 IpFilterDriver - ok
18:09:42.0935 1752 [ DFC4050D58565ADBEE793A8D4AEBDAE6 ] iphlpsvc C:\WINDOWS\System32\iphlpsvc.dll
18:09:42.0951 1752 iphlpsvc - ok
18:09:42.0967 1752 [ 9949A3C7590B8C536C05312205079A82 ] IPMIDRV C:\WINDOWS\System32\drivers\IPMIDrv.sys
18:09:42.0967 1752 IPMIDRV - ok
18:09:42.0982 1752 [ E23D32BAF152FBE35F18C6A2AB8EF271 ] IPNAT C:\WINDOWS\system32\drivers\ipnat.sys
18:09:42.0982 1752 IPNAT - ok
18:09:42.0998 1752 [ AE44C526AB5F8A487D941CEB57B10C97 ] IRENUM C:\WINDOWS\system32\drivers\irenum.sys
18:09:42.0998 1752 IRENUM - ok
18:09:43.0014 1752 [ 8AFEEA3955AA43616A60F133B1D25F21 ] isapnp C:\WINDOWS\system32\drivers\isapnp.sys
18:09:43.0014 1752 isapnp - ok
18:09:43.0029 1752 [ 034D4BD9DC67C64F3A4C8A049B5173BF ] iScsiPrt C:\WINDOWS\System32\drivers\msiscsi.sys
18:09:43.0029 1752 iScsiPrt - ok
18:09:43.0045 1752 [ 8BE92376799B6B44D543E8D07CDCF885 ] kbdclass C:\WINDOWS\System32\drivers\kbdclass.sys
18:09:43.0045 1752 kbdclass - ok
18:09:43.0045 1752 [ FB6E47E569D4872ABEB506BE03A45FBA ] kbdhid C:\WINDOWS\System32\drivers\kbdhid.sys
18:09:43.0045 1752 kbdhid - ok
18:09:43.0060 1752 [ 813871C7D402A05F2E3A7075F9584A05 ] kdnic C:\WINDOWS\system32\DRIVERS\kdnic.sys
18:09:43.0060 1752 kdnic - ok
18:09:43.0076 1752 [ F6F209DDB94959BA104FC8FC87C53759 ] KeyIso C:\WINDOWS\system32\lsass.exe
18:09:43.0076 1752 KeyIso - ok
18:09:43.0092 1752 [ ADDECBCC777665BD113BED437E602AB0 ] KSecDD C:\WINDOWS\system32\Drivers\ksecdd.sys
18:09:43.0092 1752 KSecDD - ok
18:09:43.0107 1752 [ 7296EA420134EAC390798B3232D066A4 ] KSecPkg C:\WINDOWS\system32\Drivers\ksecpkg.sys
18:09:43.0107 1752 KSecPkg - ok
18:09:43.0107 1752 [ 11AFB527AA370B1DAFD5C36F35F6D45F ] ksthunk C:\WINDOWS\system32\drivers\ksthunk.sys
18:09:43.0123 1752 ksthunk - ok
18:09:43.0154 1752 [ 32B1A8351160F307A8C66BCB0F94A9C2 ] KtmRm C:\WINDOWS\system32\msdtckrm.dll
18:09:43.0154 1752 KtmRm - ok
18:09:43.0185 1752 [ 27B58E16CF895AC1F1A97C04814C2239 ] LanmanServer C:\WINDOWS\system32\srvsvc.dll
18:09:43.0185 1752 LanmanServer - ok
18:09:43.0185 1752 [ D0D9C2ECA4D03A8F06DCD91236B90C98 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
18:09:43.0201 1752 LanmanWorkstation - ok
18:09:43.0217 1752 [ EE289BD147FDFF95EF1B9BD65D3B974A ] lfsvc C:\WINDOWS\System32\GeofenceMonitorService.dll
18:09:43.0232 1752 lfsvc - ok
18:09:43.0248 1752 [ C09010B3680860131631F53E8FE7BAD8 ] lltdio C:\WINDOWS\system32\DRIVERS\lltdio.sys
18:09:43.0248 1752 lltdio - ok
18:09:43.0264 1752 [ 00E070FC0C673311AFD4B068D1242780 ] lltdsvc C:\WINDOWS\System32\lltdsvc.dll
18:09:43.0279 1752 lltdsvc - ok
18:09:43.0295 1752 [ D113FAD71A5E67AA94B32A0F8828D265 ] lmhosts C:\WINDOWS\System32\lmhsvc.dll
18:09:43.0295 1752 lmhosts - ok
18:09:43.0326 1752 [ C755AE4635457AA2A11F79C0DF857ABC ] LSI_SAS C:\WINDOWS\system32\drivers\lsi_sas.sys
18:09:43.0326 1752 LSI_SAS - ok
18:09:43.0326 1752 [ ADAC09CBE7A2040B7F68B5E5C9A75141 ] LSI_SAS2 C:\WINDOWS\system32\drivers\lsi_sas2.sys
18:09:43.0326 1752 LSI_SAS2 - ok
18:09:43.0342 1752 [ 04D1274BB9BBCCF12BD12374002AA191 ] LSI_SAS3 C:\WINDOWS\system32\drivers\lsi_sas3.sys
18:09:43.0342 1752 LSI_SAS3 - ok
18:09:43.0342 1752 [ 327469EEF3833D0C584B7E88A76AEC0C ] LSI_SSS C:\WINDOWS\system32\drivers\lsi_sss.sys
18:09:43.0357 1752 LSI_SSS - ok
18:09:43.0373 1752 [ B6B69FF200F68888A7FAFDF204D00C91 ] LSM C:\WINDOWS\System32\lsm.dll
18:09:43.0389 1752 LSM - ok
18:09:43.0389 1752 [ 5EF604B0698F4FA962778285E8C5F1F2 ] luafv C:\WINDOWS\system32\drivers\luafv.sys
18:09:43.0389 1752 luafv - ok
18:09:43.0420 1752 [ 0BB97D43299910CBFBA59C461B99B910 ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
18:09:43.0420 1752 MBAMProtector - ok
18:09:43.0467 1752 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
18:09:43.0467 1752 MBAMScheduler - ok
18:09:43.0482 1752 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
18:09:43.0498 1752 MBAMService - ok
18:09:43.0514 1752 [ EB5C03A070F30D64A6DF80E53B22F53F ] megasas C:\WINDOWS\system32\drivers\megasas.sys
18:09:43.0514 1752 megasas - ok
18:09:43.0529 1752 [ F6F13533196DE7A582D422B0241E4363 ] megasr C:\WINDOWS\system32\drivers\megasr.sys
18:09:43.0529 1752 megasr - ok
18:09:43.0560 1752 [ 6B01B7414A105B9E51652089A03027CF ] MEIx64 C:\WINDOWS\System32\drivers\HECIx64.sys
18:09:43.0560 1752 MEIx64 - ok
18:09:43.0576 1752 [ FD788C2D96EA91469A3C1D13E80D7473 ] MMCSS C:\WINDOWS\system32\mmcss.dll
18:09:43.0576 1752 MMCSS - ok
18:09:43.0592 1752 [ 8B38C44F69259987C95135C9627E2378 ] Modem C:\WINDOWS\system32\drivers\modem.sys
18:09:43.0592 1752 Modem - ok
18:09:43.0592 1752 [ 601589000CC90F0DF8DA2CC254A3CCC9 ] monitor C:\WINDOWS\System32\drivers\monitor.sys
18:09:43.0592 1752 monitor - ok
18:09:43.0607 1752 [ CEAC6D40FE887CE8406C2393CF97DE06 ] mouclass C:\WINDOWS\System32\drivers\mouclass.sys
18:09:43.0607 1752 mouclass - ok
18:09:43.0623 1752 [ 02D98BF804084E9A0D69D1C69B02CCA9 ] mouhid C:\WINDOWS\System32\drivers\mouhid.sys
18:09:43.0623 1752 mouhid - ok
18:09:43.0639 1752 [ 515549560D481138E6E21AF7C6998E56 ] mountmgr C:\WINDOWS\system32\drivers\mountmgr.sys
18:09:43.0639 1752 mountmgr - ok
18:09:43.0639 1752 [ F170510BE94CF45E3C6274578F6204B2 ] mpsdrv C:\WINDOWS\system32\drivers\mpsdrv.sys
18:09:43.0639 1752 mpsdrv - ok
18:09:43.0670 1752 [ D186C5844393252147BE934F3871DB7A ] MpsSvc C:\WINDOWS\system32\mpssvc.dll
18:09:43.0670 1752 MpsSvc - ok
18:09:43.0685 1752 [ 59DCEC7499095DE5AED741358037AE2D ] MRxDAV C:\WINDOWS\system32\drivers\mrxdav.sys
18:09:43.0685 1752 MRxDAV - ok
18:09:43.0701 1752 [ 6129EDB793A4255B1E2FB41773AC9D9A ] mrxsmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
18:09:43.0717 1752 mrxsmb - ok
18:09:43.0717 1752 [ 295771B092D4F7FCF2B62F80CCD14320 ] mrxsmb10 C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys
18:09:43.0717 1752 mrxsmb10 - ok
18:09:43.0732 1752 [ AAF56E4E84D35411B4E446C445732DFE ] mrxsmb20 C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
18:09:43.0732 1752 mrxsmb20 - ok
18:09:43.0748 1752 [ 4E888019078AC363076A5433E89AA4F8 ] MsBridge C:\WINDOWS\system32\DRIVERS\bridge.sys
18:09:43.0748 1752 MsBridge - ok
18:09:43.0764 1752 [ A082C17D14D0790E27D064EA4B138AE1 ] MSDTC C:\WINDOWS\System32\msdtc.exe
18:09:43.0779 1752 MSDTC - ok
18:09:43.0795 1752 [ D13329FBF8345B28AB30F44CC247DC08 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
18:09:43.0810 1752 Msfs - ok
18:09:43.0826 1752 [ C6B474E46F9E543B875981ED3FFE6ADD ] msgpiowin32 C:\WINDOWS\System32\drivers\msgpiowin32.sys
18:09:43.0826 1752 msgpiowin32 - ok

18:09:43.0842 1752 [ 65C92EB9D08DB5C69F28C7FFD4E84E31 ] mshidkmdf C:\WINDOWS\System32\drivers\mshidkmdf.sys
18:09:43.0842 1752 mshidkmdf - ok
18:09:43.0857 1752 [ 52299F086AC2DAFD100DD5DC4A8614BA ] mshidumdf C:\WINDOWS\System32\drivers\mshidumdf.sys
18:09:43.0857 1752 mshidumdf - ok
18:09:43.0873 1752 [ 36D92AF3343C3A3E57FEF11C449AEA4C ] msisadrv C:\WINDOWS\system32\drivers\msisadrv.sys
18:09:43.0889 1752 msisadrv - ok
18:09:43.0904 1752 [ 810F8A0A0680662BB0CE44D0E2CEF90C ] MSiSCSI C:\WINDOWS\system32\iscsiexe.dll
18:09:43.0920 1752 MSiSCSI - ok
18:09:43.0920 1752 msiserver - ok
18:09:43.0935 1752 [ A9BBBD2BAE6142253B9195E949AC2E8D ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
18:09:43.0935 1752 MSKSSRV - ok
18:09:43.0951 1752 [ 375E44168F2DFB91A68B8A3F619C5A7C ] MsLldp C:\WINDOWS\system32\DRIVERS\mslldp.sys
18:09:43.0951 1752 MsLldp - ok
18:09:43.0967 1752 [ 7B2128EB875DCBC006E6A913211006D6 ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
18:09:43.0967 1752 MSPCLOCK - ok
18:09:43.0982 1752 [ 1E88171579B218115C7A772F8DE04BD8 ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
18:09:43.0982 1752 MSPQM - ok
18:09:43.0998 1752 [ BBE2A455053E63BECBF42C2F9B21FAE0 ] MsRPC C:\WINDOWS\system32\drivers\MsRPC.sys
18:09:43.0998 1752 MsRPC - ok
18:09:44.0013 1752 [ 8D6B7D515C5CBCDB75B928A0B73C3C5E ] mssmbios C:\WINDOWS\System32\drivers\mssmbios.sys
18:09:44.0013 1752 mssmbios - ok
18:09:44.0029 1752 [ 115019AE01E0EB9C048530D2928AB4A2 ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
18:09:44.0029 1752 MSTEE - ok
18:09:44.0045 1752 [ 96D604A35070360F0DD4A7A8AF410B5E ] MTConfig C:\WINDOWS\System32\drivers\MTConfig.sys
18:09:44.0045 1752 MTConfig - ok
18:09:44.0060 1752 [ 619CA29326B82372621DB2C0964D8365 ] Mup C:\WINDOWS\system32\Drivers\mup.sys
18:09:44.0060 1752 Mup - ok
18:09:44.0076 1752 [ B8C35C94DCB2DFEAF03BB42131F2F77F ] mvumis C:\WINDOWS\system32\drivers\mvumis.sys
18:09:44.0076 1752 mvumis - ok
18:09:44.0107 1752 [ 41A45D2A75494EABF2806EA051E00376 ] napagent C:\WINDOWS\system32\qagentRT.dll
18:09:44.0123 1752 napagent - ok
18:09:44.0123 1752 [ CF8B989D89D6807B887690F2CF24EFD9 ] NativeWifiP C:\WINDOWS\system32\DRIVERS\nwifi.sys
18:09:44.0123 1752 NativeWifiP - ok
18:09:44.0170 1752 [ 71E3C0100AA19D11373CCEB2F51A6008 ] NcaSvc C:\WINDOWS\System32\ncasvc.dll
18:09:44.0170 1752 NcaSvc - ok
18:09:44.0185 1752 [ 51DF09CAB2CAC64FEE3E371D9028ED01 ] NcbService C:\WINDOWS\System32\ncbservice.dll
18:09:44.0201 1752 NcbService - ok
18:09:44.0201 1752 [ 2586C4C167499210DCBF3ECFD8CCE210 ] NcdAutoSetup C:\WINDOWS\System32\NcdAutoSetup.dll
18:09:44.0201 1752 NcdAutoSetup - ok
18:09:44.0232 1752 [ AD9086052A5E5153AF43FE74138A4B27 ] NDIS C:\WINDOWS\system32\drivers\ndis.sys
18:09:44.0248 1752 NDIS - ok
18:09:44.0264 1752 [ C6BB12BC35D1637CA17AE16D3A4725EB ] NdisCap C:\WINDOWS\system32\DRIVERS\ndiscap.sys
18:09:44.0264 1752 NdisCap - ok
18:09:44.0279 1752 [ 9F1DA20E943BE7AA4ED5F3E1EBA78B37 ] NdisImPlatform C:\WINDOWS\system32\DRIVERS\NdisImPlatform.sys
18:09:44.0279 1752 NdisImPlatform - ok
18:09:44.0295 1752 [ 9423421E735BD5394351E0C47C76BB92 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
18:09:44.0295 1752 NdisTapi - ok
18:09:44.0310 1752 [ B832B35055BA2B7B4181861FF94D8E59 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
18:09:44.0310 1752 Ndisuio - ok
18:09:44.0326 1752 [ 1F58E48EF75F34C35D8E93A0DC535CFE ] NdisVirtualBus C:\WINDOWS\System32\drivers\NdisVirtualBus.sys
18:09:44.0326 1752 NdisVirtualBus - ok
18:09:44.0342 1752 [ DEC29080202D4F9F17F55E18BCFCC41A ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
18:09:44.0342 1752 NdisWan - ok
18:09:44.0342 1752 [ DEC29080202D4F9F17F55E18BCFCC41A ] NdisWanLegacy C:\WINDOWS\system32\DRIVERS\ndiswan.sys
18:09:44.0342 1752 NdisWanLegacy - ok
18:09:44.0373 1752 [ A5BD69A8812FA79D1A487691DD3FB244 ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
18:09:44.0373 1752 NDProxy - ok
18:09:44.0388 1752 [ 5A072F0B90C29C5233D78BE33EF5ED78 ] Ndu C:\WINDOWS\system32\drivers\Ndu.sys
18:09:44.0388 1752 Ndu - ok
18:09:44.0404 1752 [ A83D67D347A684F10B7D3019C8A6380C ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
18:09:44.0404 1752 NetBIOS - ok
18:09:44.0420 1752 [ 0217532E19A748F0E5D569307363D5FD ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
18:09:44.0420 1752 NetBT - ok
18:09:44.0435 1752 [ F6F209DDB94959BA104FC8FC87C53759 ] Netlogon C:\WINDOWS\system32\lsass.exe
18:09:44.0435 1752 Netlogon - ok
18:09:44.0467 1752 [ B7AD851A21FEBA3BA214972627614207 ] Netman C:\WINDOWS\System32\netman.dll
18:09:44.0467 1752 Netman - ok
18:09:44.0482 1752 [ F0F0A372C2EF6358399C4936F91B6131 ] netprofm C:\WINDOWS\System32\netprofmsvc.dll
18:09:44.0498 1752 netprofm - ok
18:09:44.0529 1752 [ 1092B3190E69E0C5ECBCE90F171DE047 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
18:09:44.0560 1752 NetTcpPortSharing - ok
18:09:44.0592 1752 [ 70414DB660BFBB7BD58FCE8EA4364E1B ] netvsc C:\WINDOWS\system32\DRIVERS\netvsc63.sys
18:09:44.0592 1752 netvsc - ok
18:09:44.0607 1752 [ 3A280F3B3C7A46E29C404ACD46ECBF5E ] NlaSvc C:\WINDOWS\System32\nlasvc.dll
18:09:44.0623 1752 NlaSvc - ok
18:09:44.0639 1752 [ 8F44A2F57C9F1A19AC9C6288C10FB351 ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
18:09:44.0639 1752 Npfs - ok
18:09:44.0654 1752 [ CBDB4F0871C88DF930FC0E8588CA67FC ] npsvctrig C:\WINDOWS\System32\drivers\npsvctrig.sys
18:09:44.0654 1752 npsvctrig - ok
18:09:44.0670 1752 [ 6E2271ED0C3E95B8E29F3752B91B9E84 ] nsi C:\WINDOWS\system32\nsisvc.dll
18:09:44.0670 1752 nsi - ok
18:09:44.0685 1752 [ E490B459978CB87779E84C761D22B827 ] nsiproxy C:\WINDOWS\system32\drivers\nsiproxy.sys
18:09:44.0685 1752 nsiproxy - ok
18:09:44.0732 1752 [ 4412D565C0278C401575E11072C7DCE3 ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
18:09:44.0764 1752 Ntfs - ok
18:09:44.0779 1752 [ EF1B290FC9F0E47CC0B537292BEE5904 ] Null C:\WINDOWS\system32\drivers\Null.sys
18:09:44.0779 1752 Null - ok
18:09:44.0795 1752 [ 554964B900AE2954B8B589B6287034AC ] NVHDA C:\WINDOWS\system32\drivers\nvhda64v.sys
18:09:44.0795 1752 NVHDA - ok
18:09:44.0967 1752 [ F554291C0A11F5B713B54C5886D4AA31 ] nvlddmkm C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys
18:09:45.0138 1752 nvlddmkm - ok
18:09:45.0201 1752 [ 1C7C6D7481CABD4EF38A81F5B68F02E8 ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
18:09:45.0217 1752 NvNetworkService - ok
18:09:45.0232 1752 [ BC6B5942AFF25EBAF62DE43C3807EDF8 ] nvraid C:\WINDOWS\system32\drivers\nvraid.sys
18:09:45.0248 1752 nvraid - ok
18:09:45.0264 1752 [ 1F43ABFFAC3D6CA356851D517392966E ] nvstor C:\WINDOWS\system32\drivers\nvstor.sys
18:09:45.0264 1752 nvstor - ok
18:09:45.0513 1752 [ 7A03646D5330A790A9D47D9F9C38758D ] NvStreamSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
18:09:45.0592 1752 NvStreamSvc - ok
18:09:45.0623 1752 [ 4E769C9006553699E874518BAFBEA2C3 ] NvStUSB C:\WINDOWS\System32\drivers\nvstusb.sys
18:09:45.0623 1752 NvStUSB - ok
18:09:45.0654 1752 [ 8E99BF264C1F20934A67E91BC9F4FB20 ] nvsvc C:\WINDOWS\system32\nvvsvc.exe
18:09:45.0670 1752 nvsvc - ok
18:09:45.0670 1752 [ 09216A70CC364D0974F606F6F2109210 ] nvvad_WaveExtensible C:\WINDOWS\system32\drivers\nvvad64v.sys
18:09:45.0670 1752 nvvad_WaveExtensible - ok
18:09:45.0685 1752 [ 6934A936A7369DFE37B7DBA93F5E5E49 ] nv_agp C:\WINDOWS\system32\drivers\nv_agp.sys
18:09:45.0685 1752 nv_agp - ok
18:09:45.0717 1752 [ 3B510F20806B94E389784ED09DBD2111 ] p2pimsvc C:\WINDOWS\system32\pnrpsvc.dll
18:09:45.0717 1752 p2pimsvc - ok
18:09:45.0764 1752 [ 2A57A937BC5B1B2D6AFE6A8C5925F50B ] p2psvc C:\WINDOWS\system32\p2psvc.dll
18:09:45.0779 1752 p2psvc - ok
18:09:45.0795 1752 [ 764B1121867B2D9B31C491668AC72B2B ] Parport C:\WINDOWS\System32\drivers\parport.sys
18:09:45.0795 1752 Parport - ok
18:09:45.0810 1752 [ EF0C1749C9A8CEE9A457473D433CC00F ] partmgr C:\WINDOWS\system32\drivers\partmgr.sys
18:09:45.0810 1752 partmgr - ok
18:09:45.0826 1752 [ 9A5309EF92F39346CFD5A4C2C3D1BFAD ] PcaSvc C:\WINDOWS\System32\pcasvc.dll
18:09:45.0842 1752 PcaSvc - ok
18:09:45.0857 1752 [ C0D3F3BC1C84B4BA746D9847314C1164 ] pci C:\WINDOWS\system32\drivers\pci.sys
18:09:45.0857 1752 pci - ok
18:09:45.0857 1752 [ 346E38FCC6859A727DD28AFAD1F0AFF4 ] pciide C:\WINDOWS\system32\drivers\pciide.sys
18:09:45.0857 1752 pciide - ok
18:09:45.0873 1752 [ 4D3BDCC1C7B40C9D7B6AD990E6DEC397 ] pcmcia C:\WINDOWS\system32\drivers\pcmcia.sys
18:09:45.0888 1752 pcmcia - ok
18:09:45.0904 1752 [ AF7CE12C4F3DC8CB2B07685C916BBCFE ] pcouffin C:\WINDOWS\System32\Drivers\pcouffin.sys
18:09:45.0904 1752 pcouffin - ok
18:09:45.0920 1752 [ BF28771D1436C88BE1D297D3098B0F7D ] pcw C:\WINDOWS\system32\drivers\pcw.sys
18:09:45.0920 1752 pcw - ok
18:09:45.0935 1752 [ B9D968D8E2B0F9C6301CEB39CFC9B9E4 ] pdc C:\WINDOWS\system32\drivers\pdc.sys
18:09:45.0935 1752 pdc - ok
18:09:45.0967 1752 [ BA50CC0BD19004AAB88BE37338B6FA0D ] PEAUTH C:\WINDOWS\system32\drivers\peauth.sys
18:09:45.0982 1752 PEAUTH - ok
18:09:46.0045 1752 [ 8E3C640FFF5A963F570233AE99C0FFF3 ] PerfHost C:\WINDOWS\SysWow64\perfhost.exe
18:09:46.0060 1752 PerfHost - ok
18:09:46.0107 1752 [ 928061178CD9856CA6B67FFFCE6BA766 ] pla C:\WINDOWS\system32\pla.dll
18:09:46.0139 1752 pla - ok
18:09:46.0170 1752 [ 752A457320A946E03C3AA86C3ACD735E ] PlugPlay C:\WINDOWS\system32\umpnpmgr.dll
18:09:46.0185 1752 PlugPlay - ok
18:09:46.0201 1752 [ 045EB4F260606A03BE340D09DEAF3BA4 ] PNRPAutoReg C:\WINDOWS\system32\pnrpauto.dll
18:09:46.0201 1752 PNRPAutoReg - ok
18:09:46.0232 1752 [ 3B510F20806B94E389784ED09DBD2111 ] PNRPsvc C:\WINDOWS\system32\pnrpsvc.dll
18:09:46.0232 1752 PNRPsvc - ok
18:09:46.0264 1752 [ C16097D77A232A288D65F299E2E01105 ] PolicyAgent C:\WINDOWS\System32\ipsecsvc.dll
18:09:46.0264 1752 PolicyAgent - ok
18:09:46.0279 1752 [ 00E08B30E7F7C13ECE2CDF4F46A77311 ] Power C:\WINDOWS\system32\umpo.dll
18:09:46.0295 1752 Power - ok
18:09:46.0357 1752 [ B7DB57A000D46D4DE75BC0C563E58072 ] PrintNotify C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll
18:09:46.0389 1752 PrintNotify - ok
18:09:46.0404 1752 [ ECD373F9571C745894367CC2635EA44F ] Processor C:\WINDOWS\System32\drivers\processr.sys
18:09:46.0404 1752 Processor - ok
18:09:46.0435 1752 [ 8513A1E7AE4B9DC82C4B4F432C648A58 ] ProfSvc C:\WINDOWS\system32\profsvc.dll
18:09:46.0435 1752 ProfSvc - ok
18:09:46.0467 1752 [ 8528BB05E4D4E25945F78B00B2555FB7 ] Psched C:\WINDOWS\system32\DRIVERS\pacer.sys
18:09:46.0467 1752 Psched - ok
18:09:46.0482 1752 [ AF90BB44C99D6820BE52C9BBAA523283 ] QWAVE C:\WINDOWS\system32\qwave.dll
18:09:46.0482 1752 QWAVE - ok
18:09:46.0498 1752 [ 3FB466684609A4329858CF2EBD62E0FD ] QWAVEdrv C:\WINDOWS\system32\drivers\qwavedrv.sys
18:09:46.0498 1752 QWAVEdrv - ok
18:09:46.0513 1752 [ 2C56F0EE27E4EF70CA4B4983D3638905 ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
18:09:46.0513 1752 RasAcd - ok
18:09:46.0545 1752 [ 5F061AC45266841A2860C1858ED863B8 ] RasAuto C:\WINDOWS\System32\rasauto.dll
18:09:46.0545 1752 RasAuto - ok
18:09:46.0576 1752 [ BF3B17016764F20F9D28CF1A8DC210C0 ] RasMan C:\WINDOWS\System32\rasmans.dll
18:09:46.0576 1752 RasMan - ok
18:09:46.0592 1752 [ 5247F308C4103CDC4FE12AE1D235800A ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
18:09:46.0592 1752 RasPppoe - ok
18:09:46.0607 1752 [ B939A2A0F9D6C6C186721E268EB6FA93 ] rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
18:09:46.0607 1752 rdbss - ok
18:09:46.0623 1752 [ 6B21EBF892CD8CACB71669B35AB5DE32 ] rdpbus C:\WINDOWS\System32\drivers\rdpbus.sys
18:09:46.0623 1752 rdpbus - ok
18:09:46.0623 1752 [ 680C1DAE268B6FB67FA21B389A8B79EF ] RDPDR C:\WINDOWS\system32\drivers\rdpdr.sys
18:09:46.0639 1752 RDPDR - ok
18:09:46.0639 1752 [ 858776908AF838E3790F3261B799CDA6 ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
18:09:46.0639 1752 RdpVideoMiniport - ok
18:09:46.0654 1752 [ 847C6A08912C3515807049C93E526D65 ] rdyboost C:\WINDOWS\system32\drivers\rdyboost.sys
18:09:46.0654 1752 rdyboost - ok
18:09:46.0701 1752 [ 036746D54347FD2D0385668E2A4064E4 ] ReFS C:\WINDOWS\system32\drivers\ReFS.sys
18:09:46.0717 1752 ReFS - ok
18:09:46.0748 1752 [ BFFB40FBE6D2C3469F8D06EE5E4934AB ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
18:09:46.0764 1752 RemoteAccess - ok
18:09:46.0810 1752 [ 4DCCABE03D06955ED61BABBD8EF9F30F ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
18:09:46.0826 1752 RemoteRegistry - ok
18:09:46.0842 1752 [ D894CBD7DA753C881EE8D5E33B583225 ] RpcEptMapper C:\WINDOWS\System32\RpcEpMap.dll
18:09:46.0842 1752 RpcEptMapper - ok
18:09:46.0873 1752 [ 5CAE8F47B31D5CFC322B5B898C19E0FE ] RpcLocator C:\WINDOWS\system32\locator.exe
18:09:46.0873 1752 RpcLocator - ok
18:09:46.0888 1752 [ 3FD5AE42EC87C6F532A931F96BE731DD ] RpcSs C:\WINDOWS\system32\rpcss.dll
18:09:46.0904 1752 RpcSs - ok
18:09:46.0920 1752 [ 2D05A5508F4685412F2B89E8C2189ABC ] rspndr C:\WINDOWS\system32\DRIVERS\rspndr.sys
18:09:46.0920 1752 rspndr - ok
18:09:46.0951 1752 [ 19764658C1468C2C0CEF133D28414A6B ] RTL8168 C:\WINDOWS\system32\DRIVERS\Rt630x64.sys
18:09:46.0951 1752 RTL8168 - ok
18:09:46.0967 1752 [ 1A063730F221B2746FF00457AE17E4F0 ] s3cap C:\WINDOWS\System32\drivers\vms3cap.sys
18:09:46.0967 1752 s3cap - ok
18:09:47.0014 1752 [ F6F209DDB94959BA104FC8FC87C53759 ] SamSs C:\WINDOWS\system32\lsass.exe
18:09:47.0014 1752 SamSs - ok
18:09:47.0060 1752 [ C624A1B32211C3166EDB3F4AB02A30B7 ] sbp2port C:\WINDOWS\system32\drivers\sbp2port.sys
18:09:47.0060 1752 sbp2port - ok
18:09:47.0076 1752 [ 47C497FA4DDEA908633CAA60CEBE6805 ] SCardSvr C:\WINDOWS\System32\SCardSvr.dll
18:09:47.0107 1752 SCardSvr - ok
18:09:47.0123 1752 [ E76C4E98302AE39CC6FA5D20FC8B5438 ] ScDeviceEnum C:\WINDOWS\System32\ScDeviceEnum.dll
18:09:47.0123 1752 ScDeviceEnum - ok
18:09:47.0138 1752 [ ABD0237B15DBD2B4695F4B7D734A58F7 ] scfilter C:\WINDOWS\system32\DRIVERS\scfilter.sys
18:09:47.0138 1752 scfilter - ok
18:09:47.0170 1752 [ 888A30EAB651502352C18745367FD179 ] Schedule C:\WINDOWS\system32\schedsvc.dll
18:09:47.0201 1752 Schedule - ok
18:09:47.0232 1752 [ AB285CE3431FF3D2ACE669245874C1C7 ] SCPolicySvc C:\WINDOWS\System32\certprop.dll
18:09:47.0232 1752 SCPolicySvc - ok
18:09:47.0248 1752 [ 2F9A3380B8C0380E5608E29C7AA66899 ] sdbus C:\WINDOWS\System32\drivers\sdbus.sys
18:09:47.0248 1752 sdbus - ok
18:09:47.0263 1752 [ 4EAF4DCF9DBD9A56952A58F56D61C005 ] sdstor C:\WINDOWS\System32\drivers\sdstor.sys
18:09:47.0263 1752 sdstor - ok
18:09:47.0279 1752 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\WINDOWS\system32\drivers\secdrv.sys
18:09:47.0279 1752 secdrv - ok
18:09:47.0295 1752 [ C49009F897BA4F2F4F31043663AA1485 ] seclogon C:\WINDOWS\system32\seclogon.dll
18:09:47.0295 1752 seclogon - ok
18:09:47.0295 1752 [ A88882E64BDC1D8E8D6E727B71CCCC53 ] SENS C:\WINDOWS\System32\sens.dll
18:09:47.0310 1752 SENS - ok
18:09:47.0326 1752 [ E66A7C8CE7ED22DED6DF1CA479FB4790 ] SensrSvc C:\WINDOWS\system32\sensrsvc.dll
18:09:47.0326 1752 SensrSvc - ok
18:09:47.0342 1752 [ DB2FF24CE0BDD15FE75870AFE312BA89 ] SerCx C:\WINDOWS\system32\drivers\SerCx.sys
18:09:47.0342 1752 SerCx - ok
18:09:47.0357 1752 [ 0044B31F93946D5D41982314381FE431 ] SerCx2 C:\WINDOWS\system32\drivers\SerCx2.sys
18:09:47.0357 1752 SerCx2 - ok
18:09:47.0373 1752 [ 3CD600C089C1251BEEB4CD4CD5164F9E ] Serenum C:\WINDOWS\System32\drivers\serenum.sys
18:09:47.0373 1752 Serenum - ok
18:09:47.0388 1752 [ D864381BC9C725FAB01D94C060660166 ] Serial C:\WINDOWS\System32\drivers\serial.sys
18:09:47.0388 1752 Serial - ok
18:09:47.0404 1752 [ 0BD2B65DCE756FDE95A2E5CCCBF7705D ] sermouse C:\WINDOWS\System32\drivers\sermouse.sys
18:09:47.0404 1752 sermouse - ok
18:09:47.0420 1752 [ 441E6FF1F34D7A942946DB42A15FB519 ] SessionEnv C:\WINDOWS\system32\sessenv.dll
18:09:47.0420 1752 SessionEnv - ok
18:09:47.0435 1752 [ 472B7A5AC181C050888DB454663DD764 ] sfloppy C:\WINDOWS\System32\drivers\sfloppy.sys
18:09:47.0435 1752 sfloppy - ok
18:09:47.0467 1752 [ F4414F57DF2CECB8FC969AA43A6B0D50 ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
18:09:47.0467 1752 SharedAccess - ok
18:09:47.0498 1752 [ 0D190D8B4B20446BE6299AC734DFADF1 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
18:09:47.0513 1752 ShellHWDetection - ok
18:09:47.0529 1752 [ 2F518D13DD6F3053837FE606F1A2EA1F ] SiSRaid2 C:\WINDOWS\system32\drivers\SiSRaid2.sys
18:09:47.0529 1752 SiSRaid2 - ok
18:09:47.0545 1752 [ 1AC9A200A9C49C4508F04AAFFCA34A3F ] SiSRaid4 C:\WINDOWS\system32\drivers\sisraid4.sys
18:09:47.0545 1752 SiSRaid4 - ok
18:09:47.0576 1752 [ 587ACA15210D1B01FBF272E07A08F91A ] smphost C:\WINDOWS\System32\smphost.dll
18:09:47.0576 1752 smphost - ok
18:09:47.0607 1752 [ 49EEB92DE930B8566EF615D600781DB4 ] SNMPTRAP C:\WINDOWS\System32\snmptrap.exe
18:09:47.0607 1752 SNMPTRAP - ok
18:09:47.0638 1752 [ F6EBE514D13ECE7EDC23440039CDF9AB ] spaceport C:\WINDOWS\system32\drivers\spaceport.sys
18:09:47.0638 1752 spaceport - ok
18:09:47.0670 1752 [ F337BE11071818FC3F5DC2940B6BDE34 ] SpbCx C:\WINDOWS\system32\drivers\SpbCx.sys
18:09:47.0670 1752 SpbCx - ok
18:09:47.0701 1752 [ FE0CB40F36D3FCDD3A1B312EF72C38D5 ] Spooler C:\WINDOWS\System32\spoolsv.exe
18:09:47.0732 1752 Spooler - ok
18:09:47.0842 1752 [ E6DEC72A2A23FAA53EB9FEC3C7E29D66 ] sppsvc C:\WINDOWS\system32\sppsvc.exe
18:09:47.0935 1752 sppsvc - ok
18:09:47.0951 1752 [ 2B78788A1485F9B99A578A299DF42C02 ] srv C:\WINDOWS\system32\DRIVERS\srv.sys
18:09:47.0967 1752 srv - ok
18:09:47.0998 1752 [ C1AE59C0B0817236EC083A91C396005A ] srv2 C:\WINDOWS\system32\DRIVERS\srv2.sys
18:09:47.0998 1752 srv2 - ok
18:09:48.0013 1752 [ 77195C32175FC63D6054EBA5A066D727 ] srvnet C:\WINDOWS\system32\DRIVERS\srvnet.sys
18:09:48.0013 1752 srvnet - ok
18:09:48.0060 1752 [ BB9ED3EDD8E85008215A7250D325A72E ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
18:09:48.0076 1752 SSDPSRV - ok
18:09:48.0092 1752 [ 3911418AFDE10EA6823B7799E4815524 ] SstpSvc C:\WINDOWS\system32\sstpsvc.dll
18:09:48.0107 1752 SstpSvc - ok
18:09:48.0201 1752 [ 49D9C17FDDFAC66F27FA735E94923216 ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
18:09:48.0201 1752 Stereo Service - ok
18:09:48.0232 1752 [ 366DEA74BBA65B362BCCFC6FC2ADFD8B ] stexstor C:\WINDOWS\system32\drivers\stexstor.sys
18:09:48.0232 1752 stexstor - ok
18:09:48.0279 1752 [ D638904FE86A5FE542A1BA13A9D68E5C ] stisvc C:\WINDOWS\System32\wiaservc.dll
18:09:48.0295 1752 stisvc - ok
18:09:48.0310 1752 [ 0ED2E318ABB68C1A35A8B8038BDB4C90 ] storahci C:\WINDOWS\system32\drivers\storahci.sys
18:09:48.0326 1752 storahci - ok
18:09:48.0342 1752 [ 7A08CEE1535F5A448215634C5EA74E50 ] storflt C:\WINDOWS\system32\DRIVERS\vmstorfl.sys
18:09:48.0342 1752 storflt - ok
18:09:48.0357 1752 [ 6B06E2D11E604BE2B1A406C4CB3B90DE ] stornvme C:\WINDOWS\system32\drivers\stornvme.sys
18:09:48.0373 1752 stornvme - ok
18:09:48.0373 1752 [ 3118058E3D07021A55324A943C6D722B ] StorSvc C:\WINDOWS\system32\storsvc.dll
18:09:48.0388 1752 StorSvc - ok
18:09:48.0388 1752 [ 548759755BC73DAD663250239D7E0B9F ] storvsc C:\WINDOWS\system32\drivers\storvsc.sys
18:09:48.0388 1752 storvsc - ok
18:09:48.0404 1752 [ D8E1AE075AB3E8AD56F69C44AA978596 ] svsvc C:\WINDOWS\system32\svsvc.dll
18:09:48.0404 1752 svsvc - ok
18:09:48.0420 1752 [ 84E0F5D41C138C5CC975137A2A98F6D3 ] swenum C:\WINDOWS\System32\drivers\swenum.sys
18:09:48.0420 1752 swenum - ok
18:09:48.0435 1752 [ A5DC2E63F5E5D3C0B843307374998479 ] swprv C:\WINDOWS\System32\swprv.dll
18:09:48.0451 1752 swprv - ok
18:09:48.0467 1752 [ E45DA7CBBA34510C8B9473AD7D4FFD0B ] SysMain C:\WINDOWS\system32\sysmain.dll
18:09:48.0482 1752 SysMain - ok
18:09:48.0498 1752 [ 373382005ACB27CB16ED16722FBE946A ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll
18:09:48.0498 1752 SystemEventsBroker - ok
18:09:48.0513 1752 [ BA6DD39266A5E15515C8C14DA2DA3E5C ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
18:09:48.0529 1752 TabletInputService - ok
18:09:48.0545 1752 [ 3C23BE0DAD748BAE77E87F18F34EBA0E ] tap0901 C:\WINDOWS\system32\DRIVERS\tap0901.sys
18:09:48.0545 1752 tap0901 - ok
18:09:48.0576 1752 [ B08740047145B9BCE15BF75CA0F9718A ] tap0901t C:\WINDOWS\system32\DRIVERS\tap0901t.sys
18:09:48.0576 1752 tap0901t - ok
18:09:48.0592 1752 [ B517410F157693043DACA21B19B258A6 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
18:09:48.0607 1752 TapiSrv - ok
18:09:48.0670 1752 [ 6617F44D2432C529B2249A0498B6B40A ] Tcpip C:\WINDOWS\system32\drivers\tcpip.sys
18:09:48.0732 1752 Tcpip - ok
18:09:48.0779 1752 [ 6617F44D2432C529B2249A0498B6B40A ] TCPIP6 C:\WINDOWS\system32\DRIVERS\tcpip.sys
18:09:48.0795 1752 TCPIP6 - ok
18:09:48.0826 1752 [ 33A7D83EEB15431773A6E186CFAABA21 ] tcpipreg C:\WINDOWS\system32\drivers\tcpipreg.sys
18:09:48.0826 1752 tcpipreg - ok
18:09:48.0842 1752 [ FFF28F9F6823EB1756C60F1649560BBF ] tdx C:\WINDOWS\system32\DRIVERS\tdx.sys
18:09:48.0842 1752 tdx - ok
18:09:48.0857 1752 [ 232D185D2337F141311D0CF1983E1431 ] terminpt C:\WINDOWS\System32\drivers\terminpt.sys
18:09:48.0857 1752 terminpt - ok
18:09:48.0888 1752 [ 2C77831737491F4D684D315B95C62883 ] TermService C:\WINDOWS\System32\termsrv.dll
18:09:48.0904 1752 TermService - ok
18:09:48.0904 1752 [ 05FBE1F7C13E87AF7A414CDF288B1F62 ] Themes C:\WINDOWS\system32\themeservice.dll
18:09:48.0920 1752 Themes - ok
18:09:48.0951 1752 [ FD788C2D96EA91469A3C1D13E80D7473 ] THREADORDER C:\WINDOWS\system32\mmcss.dll
18:09:48.0951 1752 THREADORDER - ok
18:09:48.0967 1752 [ 347A3E49CE18402305B8119A6EC7CFEB ] TimeBroker C:\WINDOWS\System32\TimeBrokerServer.dll
18:09:48.0982 1752 TimeBroker - ok
18:09:48.0998 1752 [ 82F909359600D3603FE852DB7F135626 ] TPM C:\WINDOWS\system32\drivers\tpm.sys
18:09:48.0998 1752 TPM - ok
18:09:49.0013 1752 [ C97E14BB6A196B0554D6EB67D8818175 ] TrkWks C:\WINDOWS\System32\trkwks.dll
18:09:49.0029 1752 TrkWks - ok
18:09:49.0060 1752 [ DA56FFA46030E6FEB215E3D5DAA65B11 ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe
18:09:49.0060 1752 TrustedInstaller - ok
18:09:49.0076 1752 [ BF8F54CA37E9C9D6582C31C5761F8C93 ] TsUsbFlt C:\WINDOWS\system32\drivers\tsusbflt.sys
18:09:49.0076 1752 TsUsbFlt - ok
18:09:49.0092 1752 [ E0088068DCE2EE82897027DDB8E05254 ] TsUsbGD C:\WINDOWS\System32\drivers\TsUsbGD.sys
18:09:49.0092 1752 TsUsbGD - ok
18:09:49.0123 1752 [ C8E0E78B5D284C2FF59BDFFDAF997242 ] tunnel C:\WINDOWS\system32\DRIVERS\tunnel.sys
18:09:49.0123 1752 tunnel - ok
18:09:49.0170 1752 [ 97D6177C2DCCDA2BA25F053B3C75D74E ] TunngleService C:\Program Files (x86)\Tunngle\TnglCtrl.exe
18:09:49.0185 1752 TunngleService - ok
18:09:49.0201 1752 [ F6EEAD052943B5A3104C1405BB856C54 ] uagp35 C:\WINDOWS\system32\drivers\uagp35.sys
18:09:49.0217 1752 uagp35 - ok
18:09:49.0232 1752 [ FE6067B1FD4E63650C667B33D080565B ] UASPStor C:\WINDOWS\System32\drivers\uaspstor.sys
18:09:49.0232 1752 UASPStor - ok
18:09:49.0264 1752 [ 5D1B430EA11064C56E7C8F84B90DEB6A ] UCX01000 C:\WINDOWS\System32\drivers\ucx01000.sys
18:09:49.0264 1752 UCX01000 - ok
18:09:49.0279 1752 [ 1EC649F112896FAE33250F0B97AC5D0B ] udfs C:\WINDOWS\system32\DRIVERS\udfs.sys
18:09:49.0279 1752 udfs - ok
18:09:49.0295 1752 [ 9578691F297E1B1F519970FE6D47CB21 ] UEFI C:\WINDOWS\System32\drivers\UEFI.sys
18:09:49.0295 1752 UEFI - ok
18:09:49.0326 1752 [ 320878AFECDBBD61BBE98624A6CAAC08 ] UI0Detect C:\WINDOWS\system32\UI0Detect.exe
18:09:49.0342 1752 UI0Detect - ok
18:09:49.0357 1752 [ 5EAB5117DDB24FC4D39E6FFFCF1837B9 ] uliagpkx C:\WINDOWS\system32\drivers\uliagpkx.sys
18:09:49.0357 1752 uliagpkx - ok
18:09:49.0357 1752 [ DA34C39A18E60E7C3FA0630566408034 ] umbus C:\WINDOWS\System32\drivers\umbus.sys
18:09:49.0357 1752 umbus - ok
18:09:49.0373 1752 [ AE8294875E5446E359B1E8035D40C05E ] UmPass C:\WINDOWS\System32\drivers\umpass.sys
18:09:49.0388 1752 UmPass - ok
18:09:49.0404 1752 [ E3DDF7D43E05784FAA5E042605EEE528 ] UmRdpService C:\WINDOWS\System32\umrdp.dll
18:09:49.0404 1752 UmRdpService - ok
18:09:49.0435 1752 [ 4A2FFDAC45F317E17DF642C7160EB633 ] upnphost C:\WINDOWS\System32\upnphost.dll
18:09:49.0435 1752 upnphost - ok
18:09:49.0467 1752 [ 433ECDE01A52691FA7ACA51C10C09B70 ] usbccgp C:\WINDOWS\System32\drivers\usbccgp.sys
18:09:49.0467 1752 usbccgp - ok
18:09:49.0482 1752 [ B3D6457D841A0CAEF4C52D88621715F2 ] usbcir C:\WINDOWS\System32\drivers\usbcir.sys
18:09:49.0482 1752 usbcir - ok
18:09:49.0514 1752 [ 5477D6E27C7D266EF8C152B9A25ADE5E ] usbehci C:\WINDOWS\System32\drivers\usbehci.sys
18:09:49.0514 1752 usbehci - ok
18:09:49.0529 1752 [ DF56C2C04EFA328D7A66B69007130266 ] usbhub C:\WINDOWS\System32\drivers\usbhub.sys
18:09:49.0529 1752 usbhub - ok
18:09:49.0560 1752 [ C0E33820326199CE3CFD3B9F27F81D99 ] USBHUB3 C:\WINDOWS\System32\drivers\UsbHub3.sys
18:09:49.0560 1752 USBHUB3 - ok
18:09:49.0576 1752 [ 3019097FB6C985EF24C058090FF3BDBD ] usbohci C:\WINDOWS\System32\drivers\usbohci.sys
18:09:49.0576 1752 usbohci - ok
18:09:49.0592 1752 [ 4D655E3B684BE9B0F7FFD8A2935C348C ] usbprint C:\WINDOWS\System32\drivers\usbprint.sys
18:09:49.0592 1752 usbprint - ok
18:09:49.0592 1752 [ B1230E9813B5C7E762DF27756AA23917 ] USBSTOR C:\WINDOWS\System32\drivers\USBSTOR.SYS
18:09:49.0607 1752 USBSTOR - ok
18:09:49.0607 1752 [ BA4FA655E0FC577DB7436FC963932CE4 ] usbuhci C:\WINDOWS\System32\drivers\usbuhci.sys
18:09:49.0607 1752 usbuhci - ok
18:09:49.0654 1752 [ 3B44CB989757428208CCFCC028C13110 ] USBXHCI C:\WINDOWS\System32\drivers\USBXHCI.SYS
18:09:49.0654 1752 USBXHCI - ok
18:09:49.0670 1752 [ F6F209DDB94959BA104FC8FC87C53759 ] VaultSvc C:\WINDOWS\system32\lsass.exe
18:09:49.0670 1752 VaultSvc - ok
18:09:49.0701 1752 [ 3EEBF3C348C3DEB4CF6F10F2E6E222CD ] VClone C:\WINDOWS\System32\drivers\VClone.sys
18:09:49.0701 1752 VClone - ok
18:09:49.0717 1752 [ FEB26E3B8345A7E8D62F945C4AE86562 ] vdrvroot C:\WINDOWS\system32\drivers\vdrvroot.sys
18:09:49.0717 1752 vdrvroot - ok
18:09:49.0763 1752 [ CFBAD6B48EDFAA0828A52646B7C4C08D ] vds C:\WINDOWS\System32\vds.exe
18:09:49.0810 1752 vds - ok
18:09:49.0842 1752 [ A026EDEAA5EECAE0B08E2748B616D4BD ] VerifierExt C:\WINDOWS\system32\drivers\VerifierExt.sys
18:09:49.0842 1752 VerifierExt - ok
18:09:49.0873 1752 [ 041D3EF364E624DBB2703A64A5AADF89 ] vhdmp C:\WINDOWS\System32\drivers\vhdmp.sys
18:09:49.0888 1752 vhdmp - ok
18:09:49.0951 1752 [ E066AA9C9866C2001372486A6841108C ] VIAHdAudAddService C:\WINDOWS\system32\drivers\viahduaa.sys
18:09:49.0998 1752 VIAHdAudAddService - ok
18:09:50.0014 1752 [ 06D38968028E9AB19DE9B618C7B6D199 ] viaide C:\WINDOWS\system32\drivers\viaide.sys
18:09:50.0014 1752 viaide - ok
18:09:50.0029 1752 [ 1236737C7993FB462610E1A0AA92C40B ] VIAKaraokeService C:\Windows\system32\viakaraokesrv.exe
18:09:50.0029 1752 VIAKaraokeService - ok
18:09:50.0045 1752 [ C6305BDFC4F7CE51F72BB072C03D4ACE ] vmbus C:\WINDOWS\system32\drivers\vmbus.sys
18:09:50.0045 1752 vmbus - ok
18:09:50.0060 1752 [ DA40BEA0A863CE768C940CA9723BF81F ] VMBusHID C:\WINDOWS\System32\drivers\VMBusHID.sys
18:09:50.0060 1752 VMBusHID - ok
18:09:50.0092 1752 [ 9067880BBB1C18703DBFF27D731D7ECA ] vmicguestinterface C:\WINDOWS\System32\ICSvc.dll
18:09:50.0092 1752 vmicguestinterface - ok
18:09:50.0123 1752 [ 9067880BBB1C18703DBFF27D731D7ECA ] vmicheartbeat C:\WINDOWS\System32\ICSvc.dll
18:09:50.0123 1752 vmicheartbeat - ok
18:09:50.0138 1752 [ 9067880BBB1C18703DBFF27D731D7ECA ] vmickvpexchange C:\WINDOWS\System32\ICSvc.dll
18:09:50.0138 1752 vmickvpexchange - ok
18:09:50.0154 1752 [ 9067880BBB1C18703DBFF27D731D7ECA ] vmicrdv C:\WINDOWS\System32\ICSvc.dll
18:09:50.0154 1752 vmicrdv - ok
18:09:50.0170 1752 [ 9067880BBB1C18703DBFF27D731D7ECA ] vmicshutdown C:\WINDOWS\System32\ICSvc.dll
18:09:50.0170 1752 vmicshutdown - ok
18:09:50.0185 1752 [ 9067880BBB1C18703DBFF27D731D7ECA ] vmictimesync C:\WINDOWS\System32\ICSvc.dll
18:09:50.0185 1752 vmictimesync - ok
18:09:50.0185 1752 [ 9067880BBB1C18703DBFF27D731D7ECA ] vmicvss C:\WINDOWS\System32\ICSvc.dll
18:09:50.0201 1752 vmicvss - ok
18:09:50.0201 1752 [ 55D7D963DE85162F1C49721E502F9744 ] volmgr C:\WINDOWS\system32\drivers\volmgr.sys
18:09:50.0201 1752 volmgr - ok
18:09:50.0217 1752 [ CCB9E901F7254BF96D28EB1B0E5329B7 ] volmgrx C:\WINDOWS\system32\drivers\volmgrx.sys
18:09:50.0217 1752 volmgrx - ok
18:09:50.0248 1752 [ 9F9CE33B50611A1C61A46B8911E0B30B ] volsnap C:\WINDOWS\system32\drivers\volsnap.sys
18:09:50.0263 1752 volsnap - ok
18:09:50.0279 1752 [ 01355C98B5C3ED1EC446743CDA848FCE ] vpci C:\WINDOWS\System32\drivers\vpci.sys
18:09:50.0279 1752 vpci - ok
18:09:50.0295 1752 [ 4539F45F9F4C9757A86A56C949421E07 ] vsmraid C:\WINDOWS\system32\drivers\vsmraid.sys
18:09:50.0295 1752 vsmraid - ok
18:09:50.0342 1752 [ D51D7EF1EA5ED2BB01E9D07E6E0533BC ] VSS C:\WINDOWS\system32\vssvc.exe
18:09:50.0389 1752 VSS - ok
18:09:50.0404 1752 [ 0849B7260F26FE05EA56DED0672E2F4B ] VSTXRAID C:\WINDOWS\system32\drivers\vstxraid.sys
18:09:50.0404 1752 VSTXRAID - ok
18:09:50.0420 1752 [ BE970C369E43B509C1EDA2B8FA7CECB0 ] vwifibus C:\WINDOWS\System32\drivers\vwifibus.sys
18:09:50.0420 1752 vwifibus - ok
18:09:50.0467 1752 [ 7599E582CA3A6AAA95A18FFE1172D339 ] W32Time C:\WINDOWS\system32\w32time.dll
18:09:50.0467 1752 W32Time - ok
18:09:50.0482 1752 [ 0910AB9ED404C1434E2D0376C2AD5D8B ] WacomPen C:\WINDOWS\System32\drivers\wacompen.sys
18:09:50.0482 1752 WacomPen - ok
18:09:50.0529 1752 [ 92BF4B3EBD6F163B94B7A20C65E7B698 ] wbengine C:\WINDOWS\system32\wbengine.exe
18:09:50.0576 1752 wbengine - ok
18:09:50.0607 1752 [ 58F28103889817C93E5B5AFABC87E709 ] WbioSrvc C:\WINDOWS\System32\wbiosrvc.dll
18:09:50.0623 1752 WbioSrvc - ok
18:09:50.0639 1752 [ 772365894F14652D376B2E5030179DC9 ] Wcmsvc C:\WINDOWS\System32\wcmsvc.dll
18:09:50.0639 1752 Wcmsvc - ok
18:09:50.0670 1752 [ D2726823DF7E19F213F4805A9D6D145F ] wcncsvc C:\WINDOWS\System32\wcncsvc.dll
18:09:50.0670 1752 wcncsvc - ok
18:09:50.0701 1752 [ 846C02A8B48CBD921A3D6AB521AA0DC4 ] WcsPlugInService C:\WINDOWS\System32\WcsPlugInService.dll
18:09:50.0701 1752 WcsPlugInService - ok
18:09:50.0701 1752 [ 694B28DE12AD47031FFB4B052662131A ] WdBoot C:\WINDOWS\system32\drivers\WdBoot.sys
18:09:50.0717 1752 WdBoot - ok
18:09:50.0732 1752 [ CB6C63FF8342B467E2EF76E98D5B934D ] Wdf01000 C:\WINDOWS\system32\drivers\Wdf01000.sys
18:09:50.0732 1752 Wdf01000 - ok
18:09:50.0748 1752 [ 0B99529A3BECC3528D865DDECB62503B ] WdFilter C:\WINDOWS\system32\drivers\WdFilter.sys
18:09:50.0763 1752 WdFilter - ok
18:09:50.0779 1752 [ 40C67D1A4891120874767F6E6604D6C5 ] WdiServiceHost C:\WINDOWS\system32\wdi.dll
18:09:50.0779 1752 WdiServiceHost - ok
18:09:50.0779 1752 [ 40C67D1A4891120874767F6E6604D6C5 ] WdiSystemHost C:\WINDOWS\system32\wdi.dll
18:09:50.0795 1752 WdiSystemHost - ok
18:09:50.0795 1752 [ 282E7D46310338FF4A6B7680440EB0DA ] WdNisDrv C:\WINDOWS\system32\Drivers\WdNisDrv.sys
18:09:50.0810 1752 WdNisDrv - ok
18:09:50.0826 1752 WdNisSvc - ok
18:09:50.0857 1752 [ 6588A957873326361AB1CAC4E76F8394 ] WebClient C:\WINDOWS\System32\webclnt.dll
18:09:50.0857 1752 WebClient - ok
18:09:50.0873 1752 [ 3274312F263882B51B964329FAF49734 ] Wecsvc C:\WINDOWS\system32\wecsvc.dll
18:09:50.0873 1752 Wecsvc - ok
18:09:50.0889 1752 [ 7CDD84E0023A0C5C230B06A7965EC65E ] WEPHOSTSVC C:\WINDOWS\system32\wephostsvc.dll
18:09:50.0889 1752 WEPHOSTSVC - ok
18:09:50.0904 1752 [ AA1315B87D9B2E39584165318A59F15D ] wercplsupport C:\WINDOWS\System32\wercplsupport.dll
18:09:50.0904 1752 wercplsupport - ok
18:09:50.0904 1752 [ 22B4C24AB921BFF7827FFBCA1F4E1BB3 ] WerSvc C:\WINDOWS\System32\WerSvc.dll
18:09:50.0920 1752 WerSvc - ok
18:09:50.0935 1752 [ 2E3E82D7B1076B90F4E228A8EF17B261 ] WFPLWFS C:\WINDOWS\system32\DRIVERS\wfplwfs.sys
18:09:50.0935 1752 WFPLWFS - ok
18:09:50.0951 1752 [ E06AFE2F94BA7CFA2FE4FD2A449E60E2 ] WiaRpc C:\WINDOWS\System32\wiarpc.dll
18:09:50.0951 1752 WiaRpc - ok
18:09:50.0967 1752 [ 867BCC69ED9C31C501465EB0E8BA9DFA ] WIMMount C:\WINDOWS\system32\drivers\wimmount.sys
18:09:50.0967 1752 WIMMount - ok
18:09:50.0967 1752 WinDefend - ok
18:09:50.0998 1752 [ DD079EC8F44DCA3A176B345C6ADEFB66 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll
18:09:50.0998 1752 WinHttpAutoProxySvc - ok
18:09:51.0029 1752 [ 9DB490F3E823C5C3C070644B96CB9D59 ] Winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
18:09:51.0029 1752 Winmgmt - ok
18:09:51.0107 1752 [ 690C3FC5C9DBD6B9AEDF8341EC720E41 ] WinRM C:\WINDOWS\system32\WsmSvc.dll
18:09:51.0154 1752 WinRM - ok
18:09:51.0185 1752 [ 9378B4E7E4E3EAE2F05823CFFF2C6EF4 ] WlanSvc C:\WINDOWS\System32\wlansvc.dll
18:09:51.0232 1752 WlanSvc - ok
18:09:51.0263 1752 [ C2838466CCC44FAEF2C3D4C1E5971ECB ] wlidsvc C:\WINDOWS\system32\wlidsvc.dll
18:09:51.0310 1752 wlidsvc - ok
18:09:51.0342 1752 [ 2834D9D3B4F554A39C72F00EA3F0E128 ] WmiAcpi C:\WINDOWS\System32\drivers\wmiacpi.sys
18:09:51.0342 1752 WmiAcpi - ok
18:09:51.0373 1752 [ 7AFAC828F52D62F304A911EC32F42EEE ] wmiApSrv C:\WINDOWS\system32\wbem\WmiApSrv.exe
18:09:51.0388 1752 wmiApSrv - ok
18:09:51.0388 1752 WMPNetworkSvc - ok
18:09:51.0451 1752 [ E178371E493BF17EB90FE71ABA8BE643 ] workfolderssvc C:\WINDOWS\system32\workfolderssvc.dll
18:09:51.0482 1752 workfolderssvc - ok
18:09:51.0498 1752 [ E746BCDBA2E02CF6B8D6B26FB167FBE0 ] wpcfltr C:\WINDOWS\system32\DRIVERS\wpcfltr.sys
18:09:51.0498 1752 wpcfltr - ok
18:09:51.0513 1752 [ 4E6A0F60DA7EF050D3D26417CD4D24E9 ] WPCSvc C:\WINDOWS\System32\wpcsvc.dll
18:09:51.0513 1752 WPCSvc - ok
18:09:51.0529 1752 [ D27491CFCE452C154CECFA155AD0EBC8 ] WPDBusEnum C:\WINDOWS\system32\wpdbusenum.dll
18:09:51.0529 1752 WPDBusEnum - ok
18:09:51.0545 1752 [ 9F2904B55F6CECCD1A8D986B5CE2609A ] WpdUpFltr C:\WINDOWS\system32\drivers\WpdUpFltr.sys
18:09:51.0545 1752 WpdUpFltr - ok
18:09:51.0560 1752 [ AE072B0339D0A18E455DC21666CAD572 ] ws2ifsl C:\WINDOWS\system32\drivers\ws2ifsl.sys
18:09:51.0560 1752 ws2ifsl - ok
18:09:51.0576 1752 [ 5CFA46C4ACB2FD70572017052378DAE5 ] wscsvc C:\WINDOWS\System32\wscsvc.dll
18:09:51.0576 1752 wscsvc - ok
18:09:51.0592 1752 WSearch - ok
18:09:51.0638 1752 [ 3671C668670626DAB0D47B44F65F0489 ] WSService C:\WINDOWS\System32\WSService.dll
18:09:51.0685 1752 WSService - ok
18:09:51.0732 1752 [ 86D0BF4F792053A50D6EE43DFA5837A5 ] wuauserv C:\WINDOWS\system32\wuaueng.dll
18:09:51.0779 1752 wuauserv - ok
18:09:51.0795 1752 [ 2FEAE33E9B2B56104596E1BA444405A9 ] WudfPf C:\WINDOWS\system32\drivers\WudfPf.sys
18:09:51.0810 1752 WudfPf - ok
18:09:51.0826 1752 [ 19240C13F526125554B5370566F21A0A ] WUDFRd C:\WINDOWS\System32\drivers\WUDFRd.sys
18:09:51.0826 1752 WUDFRd - ok
18:09:51.0826 1752 [ 19240C13F526125554B5370566F21A0A ] WUDFSensorLP C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
18:09:51.0826 1752 WUDFSensorLP - ok
18:09:51.0842 1752 [ BB73CBC65AABC4EA0A5C6A1474A0A743 ] wudfsvc C:\WINDOWS\System32\WUDFSvc.dll
18:09:51.0857 1752 wudfsvc - ok
18:09:51.0888 1752 [ 19240C13F526125554B5370566F21A0A ] WUDFWpdFs C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
18:09:51.0888 1752 WUDFWpdFs - ok
18:09:51.0904 1752 [ 2FA9794CA36147756F3FDFD6CA29B46F ] WwanSvc C:\WINDOWS\System32\wwansvc.dll
18:09:51.0904 1752 WwanSvc - ok
18:09:51.0920 1752 ================ Scan global ===============================
18:09:51.0967 1752 [ C89780A6F58D113C28A96D85D1261DC5 ] C:\WINDOWS\system32\basesrv.dll
18:09:51.0998 1752 [ 599F1244C60E3D6C28A8DA7FBA7A2C13 ] C:\WINDOWS\system32\winsrv.dll
18:09:52.0013 1752 [ 9C1833ABD62876856836C5AE55C7CE86 ] C:\WINDOWS\system32\sxssrv.dll
18:09:52.0045 1752 [ B4B610BBCB002EC478C6FD80CF915697 ] C:\WINDOWS\system32\services.exe
18:09:52.0045 1752 [Global] - ok
18:09:52.0045 1752 ================ Scan MBR ==================================
18:09:52.0076 1752 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
18:09:52.0217 1752 \Device\Harddisk0\DR0 - ok
18:09:52.0217 1752 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
18:09:54.0263 1752 \Device\Harddisk1\DR1 - ok
18:09:54.0263 1752 ================ Scan VBR ==================================
18:09:54.0263 1752 [ 0BCE8CA2DADD616FB7076B486B19933A ] \Device\Harddisk0\DR0\Partition1
18:09:54.0263 1752 \Device\Harddisk0\DR0\Partition1 - ok
18:09:54.0279 1752 [ B79AF30A5EDFFF543E2E467877E50115 ] \Device\Harddisk0\DR0\Partition2
18:09:54.0279 1752 \Device\Harddisk0\DR0\Partition2 - ok
18:09:54.0279 1752 [ 0F0C92A98C1620B600FA415668D8CAC4 ] \Device\Harddisk1\DR1\Partition1
18:09:54.0279 1752 \Device\Harddisk1\DR1\Partition1 - ok
18:09:54.0279 1752 ============================================================
18:09:54.0279 1752 Scan finished
18:09:54.0279 1752 ============================================================
18:09:54.0295 4220 Detected object count: 0
18:09:54.0295 4220 Actual detected object count: 0
18:09:59.0116 1064 Deinitialize success


Když spustím aswMBR objeví se mi hláška "progra avast antirootkit přestal pracovat" a je konec.
Nevím co s tím.

Spusť aswMBR v nouzovém režimu.

V nouzovém režimu úplně to samé

OK, jedeme dál.

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je označen pro odstranění, stačí restartovat počítač.

Pokud budou problémy , spusť v nouz. režimu.

Bohužel bez úspěchu.
Když spustím combofix objeví se tato hláška "ComboFix is not meant to run in "Compatibility Mode".
The program shall now exit."

V nouzovém režimu se mi objeví že lze spustit jen v XP,Vista Win7 a 8 a ne ve Win 2000 což je divné když mám win 8.

Některé nástroje nejsou kompatibilní s win 8 a 8.1

Stáhni si FRST (by Farbar) a ulož si ho na plochu.

• Spusť program a klikni na tlačítko Ano
• Nastav program podle obrázku

• Klikni na tlačítko Scan a program začne skenovat počítač.
• Po chvíli skenování vyběhnou celkem dva logy v Poznámkovém bloku - FRST.txt a Addition.txt, které budou rovněž uloženy na ploše.
• Vlož sem pouze první z logů nazvaný FRST.txt.