PC-HELP.CZ

prosím o kontrolu logu, Pc je veľmi spomalený, log je po prečistení CCleanerom, Malwarebytes Anti-Malware nenašiel žiadnu hrozbu. Ďakujem pekne.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:14:22, on 31.1.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.zoznam.sk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favorites
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [Advanced SystemCare 5] "C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
O4 - HKUS\S-1-5-19\..\Run: [ctfmon.exe] ctfmon.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [ctfmon.exe] ctfmon.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 4989046224
O17 - HKLM\System\CCS\Services\Tcpip\..\{A2D53DD9-2144-4A88-9054-9FCD2811C7BF}: NameServer = 188.120.1.2,188.120.0.122
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

--
End of file - 5955 bytes

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verzia databázy: v2014.01.31.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Win xp :: WIN [administrátor]

31.1.2014 18:34:47
mbam-log-2014-01-31 (18-34-47).txt

Typ kontroly: Rýchla kontrola
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 194149
Uplynutý čas: 11 min, 6 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 0
(Škodlivé položky neboli zistené)

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 0
(Škodlivé položky neboli zistené)

(koniec)

# AdwCleaner v2.304 - Logfile created 01/31/2014 at 18:32:55
# Updated 03/07/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Win xp - WIN
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Win xp\Desktop\Údržba PC\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\Documents and Settings\Win xp\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Folder Found : C:\Documents and Settings\Win xp\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Folder Found : C:\Documents and Settings\Win xp\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Folder Found : C:\Documents and Settings\Win xp\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda

***** [Registry] *****

Key Found : HKCU\Software\Google\Chrome\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Key Found : HKCU\Software\Google\Chrome\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Key Found : HKCU\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Key Found : HKCU\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Key Found : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

-\\ Google Chrome v32.0.1700.102

File : C:\Documents and Settings\Win xp\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R6].txt - [376 octets] - [06/10/2013 11:34:50]
AdwCleaner[R7].txt - [901 octets] - [13/12/2013 10:47:09]
AdwCleaner[R8].txt - [1290 octets] - [27/12/2013 20:10:33]
AdwCleaner[R9].txt - [2452 octets] - [31/01/2014 18:32:55]
AdwCleaner[S4].txt - [960 octets] - [13/12/2013 11:40:21]
AdwCleaner[S5].txt - [1356 octets] - [27/12/2013 20:11:17]

########## EOF - C:\AdwCleaner[R9].txt - [2631 octets] ##########

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Vymazat-Clean“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.


Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

# AdwCleaner v2.304 - Logfile created 01/31/2014 at 20:09:47
# Updated 03/07/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Win xp - WIN
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Win xp\Desktop\Údržba PC\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Deleted on reboot : C:\Documents and Settings\Win xp\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Deleted on reboot : C:\Documents and Settings\Win xp\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Deleted on reboot : C:\Documents and Settings\Win xp\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Deleted on reboot : C:\Documents and Settings\Win xp\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda

***** [Registry] *****

Key Deleted : HKCU\Software\Google\Chrome\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Key Deleted : HKCU\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

-\\ Google Chrome v32.0.1700.102

File : C:\Documents and Settings\Win xp\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R10].txt - [2762 octets] - [31/01/2014 20:09:13]
AdwCleaner[R6].txt - [376 octets] - [06/10/2013 11:34:50]
AdwCleaner[R7].txt - [901 octets] - [13/12/2013 10:47:09]
AdwCleaner[R8].txt - [1290 octets] - [27/12/2013 20:10:33]
AdwCleaner[R9].txt - [2700 octets] - [31/01/2014 18:32:55]
AdwCleaner[S4].txt - [960 octets] - [13/12/2013 11:40:21]
AdwCleaner[S5].txt - [1356 octets] - [27/12/2013 20:11:17]
AdwCleaner[S6].txt - [341 octets] - [31/01/2014 20:09:42]
AdwCleaner[S7].txt - [2445 octets] - [31/01/2014 20:09:47]

########## EOF - C:\AdwCleaner[S7].txt - [2505 octets] ##########

Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Microsoft Windows XP x86
Ran by Win xp on pi 31.01.2014 at 20:22:28,76
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{6BA4BBC5-3A34-465E-A7AD-CA216AD72022}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Documents and Settings\All Users\application data\ytd video downloader"
Successfully deleted: [Folder] "C:\Documents and Settings\Win xp\Local Settings\Application Data\cre"
Successfully deleted: [Folder] "C:\Program Files\eusing free registry cleaner"
Successfully deleted: [Folder] "C:\Documents and Settings\All Users\start menu\programs\ytd video downloader"
Successfully deleted: [Folder] "C:\Documents and Settings\Win xp\start menu\programs\free registry cleaner"





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on pi 31.01.2014 at 20:34:33,33
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

RogueKiller V8.8.4 [Jan 27 2014] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operačný systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spustené v : Normálny režim
Užívateľ : Win xp [Práva Správcu]
Režim : Kontrola -- Dátum : 01/31/2014 20:51:39
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy : 0 ¤¤¤

¤¤¤ Záznamy Registrov : 5 ¤¤¤
[DNS][PUM] HKLM\[...]\CCSet\[...]\{A2D53DD9-2144-4A88-9054-9FCD2811C7BF} : NameServer (188.120.1.2,188.120.0.122 [(Unknown Country?) (XX) - SLOVAKIA (SK)]) -> NÁJDENÉ
[DNS][PUM] HKLM\[...]\CS001\[...]\{A2D53DD9-2144-4A88-9054-9FCD2811C7BF} : NameServer (188.120.1.2,188.120.0.122 [(Unknown Country?) (XX) - SLOVAKIA (SK)]) -> NÁJDENÉ
[DNS][PUM] HKLM\[...]\CS003\[...]\{A2D53DD9-2144-4A88-9054-9FCD2811C7BF} : NameServer (188.120.1.2,188.120.0.122 [(Unknown Country?) (XX) - SLOVAKIA (SK)]) -> NÁJDENÉ
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> NÁJDENÉ
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> NÁJDENÉ

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spustenie položky : 0 ¤¤¤

¤¤¤ webové prehliadače : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤

¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤

¤¤¤ Vonkajšie Hives: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) WDC WD800JB-00JJC0 +++++
--- User ---
[MBR] 347f6dc56a1efda265e1e37327f857af
[BSP] 11dfc3ad9e7f756a1aa57e93d232392d : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 39997 Mo
1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 81915435 | Size: 36310 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončené : << RKreport[0]_S_01312014_205139.txt >>

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "
- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání- Finished "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

RogueKiller V8.8.4 [Jan 27 2014] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operačný systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spustené v : Normálny režim
Užívateľ : Win xp [Práva Správcu]
Režim : Oprava DNS -- Dátum : 01/31/2014 22:56:57
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy : 0 ¤¤¤

¤¤¤ Záznamy Registrov : 0 ¤¤¤

¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤

¤¤¤ Vonkajšie Hives: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

Dokončené : << RKreport[0]_DN_01312014_225657.txt >>
RKreport[0]_D_01312014_225645.txt;RKreport[0]_H_01312014_225655.txt;RKreport[0]_S_01312014_205139.txt
RKreport[0]_S_01312014_225419.txt

22:59:35.0118 2644 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
22:59:37.0131 2644 ============================================================
22:59:37.0131 2644 Current date / time: 2014/01/31 22:59:37.0131
22:59:37.0131 2644 SystemInfo:
22:59:37.0131 2644
22:59:37.0131 2644 OS Version: 5.1.2600 ServicePack: 3.0
22:59:37.0131 2644 Product type: Workstation
22:59:37.0131 2644 ComputerName: WIN
22:59:37.0131 2644 UserName: Win xp
22:59:37.0131 2644 Windows directory: C:\WINDOWS
22:59:37.0131 2644 System windows directory: C:\WINDOWS
22:59:37.0131 2644 Processor architecture: Intel x86
22:59:37.0131 2644 Number of processors: 1
22:59:37.0131 2644 Page size: 0x1000
22:59:37.0131 2644 Boot type: Normal boot
22:59:37.0131 2644 ============================================================
22:59:38.0463 2644 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
22:59:38.0473 2644 ============================================================
22:59:38.0473 2644 \Device\Harddisk0\DR0:
22:59:38.0473 2644 MBR partitions:
22:59:38.0473 2644 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x4E1EDEC
22:59:38.0483 2644 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x4E1EE6A, BlocksNum 0x46EB796
22:59:38.0483 2644 ============================================================
22:59:38.0513 2644 C: <-> \Device\Harddisk0\DR0\Partition1
22:59:38.0563 2644 D: <-> \Device\Harddisk0\DR0\Partition2
22:59:38.0563 2644 ============================================================
22:59:38.0563 2644 Initialize success
22:59:38.0563 2644 ============================================================
22:59:40.0285 3220 ============================================================
22:59:40.0285 3220 Scan started
22:59:40.0285 3220 Mode: Manual;
22:59:40.0285 3220 ============================================================
22:59:41.0076 3220 ================ Scan system memory ========================
22:59:41.0076 3220 System memory - ok
22:59:41.0086 3220 ================ Scan services =============================
22:59:41.0277 3220 Abiosdsk - ok
22:59:41.0297 3220 abp480n5 - ok
22:59:41.0367 3220 [ 8FD99680A539792A30E97944FDAECF17 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
22:59:41.0387 3220 ACPI - ok
22:59:41.0437 3220 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
22:59:41.0437 3220 ACPIEC - ok
22:59:41.0527 3220 [ 476BB014F3F68C0C15EDDD5B444DA8FF ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
22:59:41.0547 3220 AdobeFlashPlayerUpdateSvc - ok
22:59:41.0587 3220 adpu160m - ok
22:59:41.0717 3220 [ E410DA575FF48D976B41670C6D262A82 ] AdvancedSystemCareService5 C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
22:59:41.0747 3220 AdvancedSystemCareService5 - ok
22:59:41.0807 3220 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
22:59:41.0817 3220 aec - ok
22:59:41.0888 3220 [ F6B7B1ECD7B41736BDB6FF4B092BCB79 ] AFD C:\WINDOWS\System32\drivers\afd.sys
22:59:41.0888 3220 AFD - ok
22:59:41.0918 3220 Aha154x - ok
22:59:41.0958 3220 aic78u2 - ok
22:59:41.0988 3220 aic78xx - ok
22:59:42.0038 3220 [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter C:\WINDOWS\system32\alrsvc.dll
22:59:42.0038 3220 Alerter - ok
22:59:42.0078 3220 [ 8C515081584A38AA007909CD02020B3D ] ALG C:\WINDOWS\System32\alg.exe
22:59:42.0088 3220 ALG - ok
22:59:42.0128 3220 AliIde - ok
22:59:42.0168 3220 [ 8FCE268CDBDD83B23419D1F35F42C7B1 ] AmdK7 C:\WINDOWS\system32\DRIVERS\amdk7.sys
22:59:42.0178 3220 AmdK7 - ok
22:59:42.0208 3220 amsint - ok
22:59:42.0248 3220 [ D8849F77C0B66226335A59D26CB4EDC6 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
22:59:42.0268 3220 AppMgmt - ok
22:59:42.0298 3220 asc - ok
22:59:42.0328 3220 asc3350p - ok
22:59:42.0348 3220 asc3550 - ok
22:59:42.0438 3220 [ 5B01AF89D16D562825C4DB4530F20CBB ] Aspi32 C:\WINDOWS\system32\drivers\Aspi32.sys
22:59:42.0448 3220 Aspi32 - ok
22:59:42.0508 3220 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
22:59:42.0528 3220 aspnet_state - ok
22:59:42.0579 3220 [ 4AF5F360BA1E8794D32B366E45A64A0A ] aswFsBlk C:\WINDOWS\system32\drivers\aswFsBlk.sys
22:59:42.0579 3220 aswFsBlk - ok
22:59:42.0619 3220 [ 1F7094D4268D46F718C51286DC189791 ] aswMonFlt C:\WINDOWS\system32\drivers\aswMonFlt.sys
22:59:42.0619 3220 aswMonFlt - ok
22:59:42.0679 3220 [ 7B43265F92257A21CBFD88E7A651044C ] AswRdr C:\WINDOWS\system32\drivers\AswRdr.sys
22:59:42.0679 3220 AswRdr - ok
22:59:42.0709 3220 [ B680134BA1813B78B47FDD1DFF223CA5 ] aswRvrt C:\WINDOWS\system32\drivers\aswRvrt.sys
22:59:42.0709 3220 aswRvrt - ok
22:59:42.0789 3220 [ CCD565A8A72AF7D45F9A242013870926 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
22:59:42.0819 3220 aswSnx - ok
22:59:42.0889 3220 [ 937300BC7C4CDF7576BCCE44E19BBB9D ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
22:59:42.0909 3220 aswSP - ok
22:59:43.0169 3220 [ 1F71F170D90E42EFDE9633D81D5E12DC ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys
22:59:43.0169 3220 aswTdi - ok
22:59:43.0209 3220 [ 8CFAA2B965773A653F48F1207A9CB9C4 ] aswVmm C:\WINDOWS\system32\drivers\aswVmm.sys
22:59:43.0219 3220 aswVmm - ok
22:59:43.0259 3220 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
22:59:43.0270 3220 AsyncMac - ok
22:59:43.0310 3220 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
22:59:43.0310 3220 atapi - ok
22:59:43.0340 3220 Atdisk - ok
22:59:43.0380 3220 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
22:59:43.0380 3220 Atmarpc - ok
22:59:43.0430 3220 [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
22:59:43.0440 3220 AudioSrv - ok
22:59:43.0470 3220 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
22:59:43.0470 3220 audstub - ok
22:59:43.0550 3220 [ 28D6701C710AD7BA3CB95E75F8F1A9AA ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
22:59:43.0550 3220 avast! Antivirus - ok
22:59:43.0610 3220 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
22:59:43.0610 3220 Beep - ok
22:59:43.0680 3220 [ 574738F61FCA2935F5265DC4E5691314 ] BITS C:\WINDOWS\system32\qmgr.dll
22:59:43.0710 3220 BITS - ok
22:59:43.0750 3220 [ FC6D1D80588D371F0321E15A75B2F8F2 ] Browser C:\WINDOWS\System32\browser.dll
22:59:43.0760 3220 Browser - ok
22:59:43.0790 3220 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
22:59:43.0800 3220 cbidf2k - ok
22:59:43.0840 3220 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
22:59:43.0840 3220 CCDECODE - ok
22:59:43.0870 3220 cd20xrnt - ok
22:59:43.0910 3220 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
22:59:43.0920 3220 Cdaudio - ok
22:59:43.0971 3220 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
22:59:43.0981 3220 Cdfs - ok
22:59:44.0031 3220 [ 4B0A100EAF5C49EF3CCA8C641431EACC ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
22:59:44.0031 3220 Cdrom - ok
22:59:44.0061 3220 Changer - ok
22:59:44.0111 3220 [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc C:\WINDOWS\system32\cisvc.exe
22:59:44.0111 3220 CiSvc - ok
22:59:44.0141 3220 [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
22:59:44.0151 3220 ClipSrv - ok
22:59:44.0191 3220 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:59:44.0251 3220 clr_optimization_v2.0.50727_32 - ok
22:59:44.0331 3220 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
22:59:44.0341 3220 clr_optimization_v4.0.30319_32 - ok
22:59:44.0371 3220 CmdIde - ok
22:59:44.0401 3220 COMSysApp - ok
22:59:44.0471 3220 Cpqarray - ok
22:59:44.0501 3220 [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
22:59:44.0511 3220 CryptSvc - ok
22:59:44.0541 3220 dac2w2k - ok
22:59:44.0571 3220 dac960nt - ok
22:59:44.0631 3220 [ 9222562D44021B988B9F9F62207FB6F2 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
22:59:44.0662 3220 DcomLaunch - ok
22:59:44.0722 3220 [ C51DE19619D50CBD03708647ACA10E70 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
22:59:44.0732 3220 Dhcp - ok
22:59:44.0762 3220 [ 47B6AAEC570F2C11D8BAD80A064D8ED1 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
22:59:44.0762 3220 Disk - ok
22:59:44.0792 3220 dmadmin - ok
22:59:44.0872 3220 [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
22:59:44.0902 3220 dmboot - ok
22:59:44.0962 3220 [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio C:\WINDOWS\system32\drivers\dmio.sys
22:59:44.0972 3220 dmio - ok
22:59:45.0022 3220 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
22:59:45.0022 3220 dmload - ok
22:59:45.0072 3220 [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver C:\WINDOWS\System32\dmserver.dll
22:59:45.0082 3220 dmserver - ok
22:59:45.0132 3220 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
22:59:45.0142 3220 DMusic - ok
22:59:45.0192 3220 [ D977659AE4D8ECE5286D99D1ED34614D ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
22:59:45.0192 3220 Dnscache - ok
22:59:45.0242 3220 [ B4109C8C3D54C83246997A777724F318 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
22:59:45.0252 3220 Dot3svc - ok
22:59:45.0282 3220 dpti2o - ok
22:59:45.0322 3220 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
22:59:45.0322 3220 drmkaud - ok
22:59:45.0363 3220 [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost C:\WINDOWS\System32\eapsvc.dll
22:59:45.0373 3220 EapHost - ok
22:59:45.0453 3220 [ C519E15665CD89A91AD383FCE3CB556A ] Eventlog C:\WINDOWS\system32\services.exe
22:59:45.0463 3220 Eventlog - ok
22:59:45.0503 3220 [ F17F6226BDC0CD5F0BEF0DAF84D29BEC ] EventSystem C:\WINDOWS\system32\es.dll
22:59:45.0523 3220 EventSystem - ok
22:59:45.0573 3220 [ 4D893323DAE445E34A4C9038B0551BC9 ] exFat C:\WINDOWS\system32\drivers\exFat.sys
22:59:45.0583 3220 exFat - ok
22:59:45.0613 3220 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
22:59:45.0623 3220 Fastfat - ok
22:59:45.0663 3220 [ 888CD7B39C37E13A2419BECFAAF0A28C ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
22:59:45.0683 3220 FastUserSwitchingCompatibility - ok
22:59:45.0743 3220 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
22:59:45.0743 3220 Fdc - ok
22:59:45.0783 3220 [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
22:59:45.0793 3220 Fips - ok
22:59:45.0833 3220 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
22:59:45.0833 3220 Flpydisk - ok
22:59:45.0883 3220 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\DRIVERS\fltMgr.sys
22:59:45.0893 3220 FltMgr - ok
22:59:45.0933 3220 [ 30D42943A54704EF13E2562911DBFCEA ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
22:59:45.0933 3220 Fs_Rec - ok
22:59:45.0973 3220 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
22:59:45.0983 3220 Ftdisk - ok
22:59:46.0044 3220 [ 065639773D8B03F33577F6CDAEA21063 ] gameenum C:\WINDOWS\system32\DRIVERS\gameenum.sys
22:59:46.0044 3220 gameenum - ok
22:59:46.0104 3220 [ 035EAF9A18B84F9560984BCF41F52E99 ] gfiark C:\WINDOWS\system32\drivers\gfiark.sys
22:59:46.0104 3220 gfiark - ok
22:59:46.0154 3220 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
22:59:46.0164 3220 Gpc - ok
22:59:46.0244 3220 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
22:59:46.0254 3220 gupdate - ok
22:59:46.0284 3220 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
22:59:46.0284 3220 gupdatem - ok
22:59:46.0344 3220 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
22:59:46.0354 3220 helpsvc - ok
22:59:46.0404 3220 [ DEB04DA35CC871B6D309B77E1443C796 ] HidServ C:\WINDOWS\System32\hidserv.dll
22:59:46.0404 3220 HidServ - ok
22:59:46.0454 3220 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
22:59:46.0454 3220 hidusb - ok
22:59:46.0514 3220 [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
22:59:46.0524 3220 hkmsvc - ok
22:59:46.0554 3220 hpn - ok
22:59:46.0654 3220 [ ED377B3C83FDEA8D906109A085D219BA ] hpqcxs08 C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
22:59:46.0674 3220 hpqcxs08 - ok
22:59:46.0724 3220 [ EE4C7A4CF2316701FFDE90F404520265 ] hpqddsvc C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll
22:59:46.0724 3220 hpqddsvc - ok
22:59:46.0785 3220 [ D03D10F7DED688FECF50F8FBF1EA9B8A ] HPZid412 C:\WINDOWS\system32\DRIVERS\HPZid412.sys
22:59:46.0795 3220 HPZid412 - ok
22:59:46.0845 3220 [ 89F41658929393487B6B7D13C8528CE3 ] HPZipr12 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
22:59:46.0845 3220 HPZipr12 - ok
22:59:46.0885 3220 [ ABCB05CCDBF03000354B9553820E39F8 ] HPZius12 C:\WINDOWS\system32\DRIVERS\HPZius12.sys
22:59:46.0885 3220 HPZius12 - ok
22:59:46.0945 3220 [ 937031C085718C1C04A9C0864625EC6B ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
22:59:46.0965 3220 HTTP - ok
22:59:47.0025 3220 [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
22:59:47.0035 3220 HTTPFilter - ok
22:59:47.0065 3220 i2omgmt - ok
22:59:47.0085 3220 i2omp - ok
22:59:47.0135 3220 [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
22:59:47.0135 3220 i8042prt - ok
22:59:47.0235 3220 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
22:59:47.0235 3220 IDriverT - ok
22:59:47.0275 3220 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
22:59:47.0275 3220 Imapi - ok
22:59:47.0315 3220 [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService C:\WINDOWS\system32\imapi.exe
22:59:47.0345 3220 ImapiService - ok
22:59:47.0385 3220 ini910u - ok
22:59:47.0425 3220 IntelIde - ok
22:59:47.0466 3220 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
22:59:47.0466 3220 Ip6Fw - ok
22:59:47.0516 3220 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
22:59:47.0526 3220 IpFilterDriver - ok
22:59:47.0566 3220 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
22:59:47.0576 3220 IpInIp - ok
22:59:47.0626 3220 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
22:59:47.0626 3220 IpNat - ok
22:59:47.0666 3220 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
22:59:47.0676 3220 IPSec - ok
22:59:47.0716 3220 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
22:59:47.0716 3220 IRENUM - ok
22:59:47.0776 3220 [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
22:59:47.0776 3220 isapnp - ok
22:59:47.0926 3220 [ 9ECF00E19736054E019C532AED8228FC ] JavaQuickStarterService C:\Program Files\Java\jre7\bin\jqs.exe
22:59:47.0926 3220 JavaQuickStarterService - ok
22:59:47.0976 3220 [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
22:59:47.0976 3220 Kbdclass - ok
22:59:48.0026 3220 [ 9EF487A186DEA361AA06913A75B3FA99 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
22:59:48.0026 3220 kbdhid - ok
22:59:48.0096 3220 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
22:59:48.0106 3220 kmixer - ok
22:59:48.0147 3220 [ C6EBF1D6AD71DF30DB49B8D3287E1368 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
22:59:48.0157 3220 KSecDD - ok
22:59:48.0197 3220 [ 3695B8D03745B2F8022B161238347A9D ] LanmanServer C:\WINDOWS\System32\srvsvc.dll
22:59:48.0207 3220 LanmanServer - ok
22:59:48.0267 3220 [ 3B9324D60DD321BAB7BF6F77931D3FD1 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
22:59:48.0277 3220 lanmanworkstation - ok
22:59:48.0307 3220 lbrtfdc - ok
22:59:48.0387 3220 [ A7DB739AE99A796D91580147E919CC59 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
22:59:48.0387 3220 LmHosts - ok
22:59:48.0447 3220 [ C5EFBD05A5195402121711A6EBBB271F ] LVUSBSta C:\WINDOWS\system32\drivers\lvusbsta.sys
22:59:48.0447 3220 LVUSBSta - ok
22:59:48.0487 3220 [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger C:\WINDOWS\System32\msgsvc.dll
22:59:48.0487 3220 Messenger - ok
22:59:48.0547 3220 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
22:59:48.0547 3220 mnmdd - ok
22:59:48.0587 3220 [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
22:59:48.0607 3220 mnmsrvc - ok
22:59:48.0647 3220 [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
22:59:48.0647 3220 Modem - ok
22:59:48.0677 3220 [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
22:59:48.0687 3220 Mouclass - ok
22:59:48.0717 3220 [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
22:59:48.0717 3220 mouhid - ok
22:59:48.0747 3220 [ 1A1FAA5102466F418494E94FF9B0B091 ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
22:59:48.0757 3220 MountMgr - ok
22:59:48.0787 3220 mraid35x - ok
22:59:48.0828 3220 [ 4FEFD389D71126EE581B9F9CB2918BE4 ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
22:59:48.0838 3220 MRxDAV - ok
22:59:48.0908 3220 [ FB2FCCC70F7174C7BF64F48E96D3ADF4 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
22:59:48.0928 3220 MRxSmb - ok
22:59:48.0958 3220 [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC C:\WINDOWS\system32\msdtc.exe
22:59:48.0968 3220 MSDTC - ok
22:59:49.0008 3220 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
22:59:49.0008 3220 Msfs - ok
22:59:49.0038 3220 MSIServer - ok
22:59:49.0088 3220 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
22:59:49.0088 3220 MSKSSRV - ok
22:59:49.0118 3220 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
22:59:49.0118 3220 MSPCLOCK - ok
22:59:49.0168 3220 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
22:59:49.0168 3220 MSPQM - ok
22:59:49.0218 3220 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
22:59:49.0218 3220 mssmbios - ok
22:59:49.0258 3220 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
22:59:49.0258 3220 MSTEE - ok
22:59:49.0288 3220 [ CA3E22598F411199ADC2DFEE76CD0AE0 ] ms_mpu401 C:\WINDOWS\system32\drivers\msmpu401.sys
22:59:49.0298 3220 ms_mpu401 - ok
22:59:49.0338 3220 [ F7B1AD991491F02AF6DA70B00B8BF114 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
22:59:49.0338 3220 Mup - ok
22:59:49.0378 3220 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
22:59:49.0388 3220 NABTSFEC - ok
22:59:49.0448 3220 [ 0102140028FAD045756796E1C685D695 ] napagent C:\WINDOWS\System32\qagentrt.dll
22:59:49.0478 3220 napagent - ok
22:59:49.0518 3220 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
22:59:49.0529 3220 NDIS - ok
22:59:49.0569 3220 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
22:59:49.0569 3220 NdisIP - ok
22:59:49.0609 3220 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
22:59:49.0609 3220 NdisTapi - ok
22:59:49.0659 3220 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
22:59:49.0659 3220 Ndisuio - ok
22:59:49.0709 3220 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
22:59:49.0709 3220 NdisWan - ok
22:59:49.0759 3220 [ 2F597BB467E05B1FE3830EABD821B8E0 ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
22:59:49.0759 3220 NDProxy - ok
22:59:49.0809 3220 [ 949941E4DE88DF1FAF49A4B3CFFB756F ] Net Driver HPZ12 C:\WINDOWS\system32\HPZinw12.dll
22:59:49.0819 3220 Net Driver HPZ12 - ok
22:59:49.0849 3220 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
22:59:49.0849 3220 NetBIOS - ok
22:59:49.0899 3220 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
22:59:49.0909 3220 NetBT - ok
22:59:49.0949 3220 [ B857BA82860D7FF85AE29B095645563B ] NetDDE C:\WINDOWS\system32\netdde.exe
22:59:49.0959 3220 NetDDE - ok
22:59:49.0989 3220 [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
22:59:49.0999 3220 NetDDEdsdm - ok
22:59:50.0049 3220 [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon C:\WINDOWS\system32\lsass.exe
22:59:50.0059 3220 Netlogon - ok
22:59:50.0099 3220 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman C:\WINDOWS\System32\netman.dll
22:59:50.0119 3220 Netman - ok
22:59:50.0169 3220 [ 290C1A30DEFC723BBE10910AC2D6F6D0 ] Nla C:\WINDOWS\System32\mswsock.dll
22:59:50.0199 3220 Nla - ok
22:59:50.0260 3220 [ A00877C05933FBA8AFB3390DD72D4679 ] nmwcd C:\WINDOWS\system32\drivers\ccdcmb.sys
22:59:50.0260 3220 nmwcd - ok
22:59:50.0300 3220 [ 9FF15F18E4E8758AC57BDB910D0238B3 ] nmwcdc C:\WINDOWS\system32\drivers\ccdcmbo.sys
22:59:50.0300 3220 nmwcdc - ok
22:59:50.0350 3220 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
22:59:50.0350 3220 Npfs - ok
22:59:50.0410 3220 [ 4C51D5275AE8A16999EDFE7E647D00DE ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
22:59:50.0430 3220 Ntfs - ok
22:59:50.0460 3220 [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
22:59:50.0470 3220 NtLmSsp - ok
22:59:50.0530 3220 [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
22:59:50.0550 3220 NtmsSvc - ok
22:59:50.0600 3220 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
22:59:50.0600 3220 Null - ok
22:59:50.0730 3220 [ 2B298519EDBFCF451D43E0F1E8F1006D ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
22:59:50.0770 3220 nv - ok
22:59:50.0830 3220 [ 26712CF8BE48BC767854927435C0B6A9 ] NVSvc C:\WINDOWS\system32\nvsvc32.exe
22:59:50.0840 3220 NVSvc - ok
22:59:50.0880 3220 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
22:59:50.0880 3220 NwlnkFlt - ok
22:59:50.0931 3220 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
22:59:50.0931 3220 NwlnkFwd - ok
22:59:50.0981 3220 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
22:59:50.0981 3220 Parport - ok
22:59:51.0011 3220 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
22:59:51.0021 3220 PartMgr - ok
22:59:51.0081 3220 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
22:59:51.0081 3220 ParVdm - ok
22:59:51.0131 3220 [ F451DCACBAA67F3307305EBD4A39EA07 ] pccsmcfd C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
22:59:51.0131 3220 pccsmcfd - ok
22:59:51.0171 3220 [ A219903CCF74233761D92BEF471A07B1 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
22:59:51.0171 3220 PCI - ok
22:59:51.0201 3220 PCIDump - ok
22:59:51.0241 3220 [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
22:59:51.0241 3220 PCIIde - ok
22:59:51.0281 3220 [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
22:59:51.0281 3220 Pcmcia - ok
22:59:51.0311 3220 PDCOMP - ok
22:59:51.0341 3220 PDFRAME - ok
22:59:51.0371 3220 PDRELI - ok
22:59:51.0401 3220 PDRFRAME - ok
22:59:51.0431 3220 perc2 - ok
22:59:51.0461 3220 perc2hib - ok
22:59:51.0561 3220 [ C519E15665CD89A91AD383FCE3CB556A ] PlugPlay C:\WINDOWS\system32\services.exe
22:59:51.0571 3220 PlugPlay - ok
22:59:51.0612 3220 [ 2F4CA141A609CAF5C98F6E4760EF1B9B ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.dll
22:59:51.0622 3220 Pml Driver HPZ12 - ok
22:59:51.0652 3220 [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
22:59:51.0652 3220 PolicyAgent - ok
22:59:51.0712 3220 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
22:59:51.0712 3220 PptpMiniport - ok
22:59:51.0752 3220 [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
22:59:51.0762 3220 ProtectedStorage - ok
22:59:51.0802 3220 [ D8E11D311785F89F1D70A28B0E879127 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
22:59:51.0802 3220 PSched - ok
22:59:51.0842 3220 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
22:59:51.0842 3220 Ptilink - ok
22:59:51.0942 3220 [ 9A155D31B8E52F41B258282092CC93A7 ] QCMerced C:\WINDOWS\system32\DRIVERS\LVCM.sys
22:59:51.0992 3220 QCMerced - ok
22:59:52.0032 3220 ql1080 - ok
22:59:52.0062 3220 Ql10wnt - ok
22:59:52.0092 3220 ql12160 - ok
22:59:52.0122 3220 ql1240 - ok
22:59:52.0152 3220 ql1280 - ok
22:59:52.0192 3220 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
22:59:52.0192 3220 RasAcd - ok
22:59:52.0262 3220 [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto C:\WINDOWS\System32\rasauto.dll
22:59:52.0272 3220 RasAuto - ok
22:59:52.0313 3220 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
22:59:52.0313 3220 Rasl2tp - ok
22:59:52.0363 3220 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan C:\WINDOWS\System32\rasmans.dll
22:59:52.0373 3220 RasMan - ok
22:59:52.0413 3220 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
22:59:52.0423 3220 RasPppoe - ok
22:59:52.0463 3220 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
22:59:52.0463 3220 Raspti - ok
22:59:52.0523 3220 [ 77050C6615F6EB5402F832B27FD695E0 ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
22:59:52.0533 3220 Rdbss - ok
22:59:52.0573 3220 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
22:59:52.0573 3220 RDPCDD - ok
22:59:52.0643 3220 [ 47EA20320E3D6FDC7B7BB22B2B881CA6 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
22:59:52.0653 3220 rdpdr - ok
22:59:52.0713 3220 [ C7D9BC54354B8C706ABF172D48313F1B ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
22:59:52.0713 3220 RDPWD - ok
22:59:52.0763 3220 [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
22:59:52.0773 3220 RDSessMgr - ok
22:59:52.0823 3220 [ F828DD7E1419B6653894A8F97A0094C5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
22:59:52.0823 3220 redbook - ok
22:59:52.0873 3220 [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
22:59:52.0883 3220 RemoteAccess - ok
22:59:52.0933 3220 [ 5B19B557B0C188210A56A6B699D90B8F ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
22:59:52.0943 3220 RemoteRegistry - ok
22:59:52.0993 3220 [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator C:\WINDOWS\system32\locator.exe
22:59:52.0993 3220 RpcLocator - ok
22:59:53.0064 3220 [ 9222562D44021B988B9F9F62207FB6F2 ] RpcSs C:\WINDOWS\system32\rpcss.dll
22:59:53.0084 3220 RpcSs - ok
22:59:53.0144 3220 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP C:\WINDOWS\system32\rsvp.exe
22:59:53.0164 3220 RSVP - ok
22:59:53.0214 3220 [ 8BE348F9AEEB4DA0005B7F500F46F6AD ] rtl8139 C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
22:59:53.0214 3220 rtl8139 - ok
22:59:53.0254 3220 [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs C:\WINDOWS\system32\lsass.exe
22:59:53.0264 3220 SamSs - ok
22:59:53.0324 3220 [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
22:59:53.0334 3220 SCardSvr - ok
22:59:53.0384 3220 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule C:\WINDOWS\system32\schedsvc.dll
22:59:53.0404 3220 Schedule - ok
22:59:53.0444 3220 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
22:59:53.0444 3220 Secdrv - ok
22:59:53.0484 3220 [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon C:\WINDOWS\System32\seclogon.dll
22:59:53.0484 3220 seclogon - ok
22:59:53.0544 3220 [ E5B56569A9F79B70314FEDE6C953641E ] seehcri C:\WINDOWS\system32\DRIVERS\seehcri.sys
22:59:53.0544 3220 seehcri - ok
22:59:53.0594 3220 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS C:\WINDOWS\system32\sens.dll
22:59:53.0604 3220 SENS - ok
22:59:53.0644 3220 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
22:59:53.0644 3220 serenum - ok
22:59:53.0684 3220 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
22:59:53.0695 3220 Serial - ok
22:59:53.0785 3220 [ 78F7BB9F4924BE164294C59B8C3FC096 ] ServiceLayer C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
22:59:53.0815 3220 ServiceLayer - ok
22:59:53.0915 3220 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
22:59:53.0915 3220 Sfloppy - ok
22:59:53.0965 3220 [ 4F10A2FA76B5BD54CD68AFA94E8ADB39 ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
22:59:53.0985 3220 SharedAccess - ok
22:59:54.0025 3220 [ 888CD7B39C37E13A2419BECFAAF0A28C ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
22:59:54.0035 3220 ShellHWDetection - ok
22:59:54.0075 3220 [ F459DD5EE69D4B68CB6767C9731B5FAF ] Si3112 C:\WINDOWS\system32\drivers\Si3112.sys
22:59:54.0085 3220 Si3112 - ok
22:59:54.0115 3220 Simbad - ok
22:59:54.0205 3220 [ 7523647F439C182AAF8353704A7E50F1 ] SiS7012 C:\WINDOWS\system32\drivers\sis7012.sys
22:59:54.0225 3220 SiS7012 - ok
22:59:54.0255 3220 [ 61CA562DEF09A782D26B3E7EDEC5369A ] sisagp C:\WINDOWS\system32\DRIVERS\SISAGPX.sys
22:59:54.0265 3220 sisagp - ok
22:59:54.0315 3220 [ FA629D021C96B4157229E3708807DB2E ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
22:59:54.0345 3220 SkypeUpdate - ok
22:59:54.0385 3220 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
22:59:54.0385 3220 SLIP - ok
22:59:54.0426 3220 Sparrow - ok
22:59:54.0476 3220 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
22:59:54.0476 3220 splitter - ok
22:59:54.0546 3220 [ 258DD5D4283FD9F9A7166BE9AE45CE73 ] Spooler C:\WINDOWS\system32\spoolsv.exe
22:59:54.0556 3220 Spooler - ok
22:59:54.0586 3220 sptd - ok
22:59:54.0636 3220 [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] Sr C:\WINDOWS\system32\DRIVERS\sr.sys
22:59:54.0646 3220 Sr - ok
22:59:54.0676 3220 [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice C:\WINDOWS\system32\srsvc.dll
22:59:54.0696 3220 srservice - ok
22:59:54.0766 3220 [ 9B390283569EA58D43D2586032B892F5 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
22:59:54.0776 3220 Srv - ok
22:59:54.0826 3220 [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
22:59:54.0836 3220 SSDPSRV - ok
22:59:54.0876 3220 [ E57B778208C783D8DEBAB320C16A1B82 ] StarOpen C:\WINDOWS\system32\drivers\StarOpen.sys
22:59:54.0876 3220 StarOpen - ok
22:59:54.0946 3220 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc C:\WINDOWS\system32\wiaservc.dll
22:59:54.0966 3220 stisvc - ok
22:59:55.0016 3220 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
22:59:55.0016 3220 streamip - ok
22:59:55.0056 3220 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
22:59:55.0066 3220 swenum - ok
22:59:55.0107 3220 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
22:59:55.0107 3220 swmidi - ok
22:59:55.0137 3220 SwPrv - ok
22:59:55.0177 3220 symc810 - ok
22:59:55.0207 3220 symc8xx - ok
22:59:55.0237 3220 sym_hi - ok
22:59:55.0267 3220 sym_u3 - ok
22:59:55.0307 3220 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
22:59:55.0307 3220 sysaudio - ok
22:59:55.0357 3220 [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
22:59:55.0377 3220 SysmonLog - ok
22:59:55.0417 3220 [ FD90A16CEB10D4FDAA00AAF39B8FF58F ] taphss C:\WINDOWS\system32\DRIVERS\taphss.sys
22:59:55.0427 3220 taphss - ok
22:59:55.0477 3220 [ E2B32B10ACC5D97623275AAFB67E5F03 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
22:59:55.0497 3220 TapiSrv - ok
22:59:55.0567 3220 [ 474D3DCCB57DEFCD917311EEC47204B9 ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
22:59:55.0577 3220 Tcpip - ok
22:59:55.0627 3220 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
22:59:55.0627 3220 TDPIPE - ok
22:59:55.0667 3220 [ C0578456F29E5F26285F81B7B71FE57D ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
22:59:55.0677 3220 TDTCP - ok
22:59:55.0707 3220 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
22:59:55.0707 3220 TermDD - ok
22:59:55.0767 3220 [ 5128852A18AE46C387F87BF27DA4C9DD ] TermService C:\WINDOWS\System32\termsrv.dll
22:59:55.0788 3220 TermService - ok
22:59:55.0838 3220 [ 888CD7B39C37E13A2419BECFAAF0A28C ] Themes C:\WINDOWS\System32\shsvcs.dll
22:59:55.0848 3220 Themes - ok
22:59:55.0898 3220 [ DB7205804759FF62C34E3EFD8A4CC76A ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
22:59:55.0908 3220 TlntSvr - ok
22:59:55.0948 3220 TosIde - ok
22:59:55.0988 3220 [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks C:\WINDOWS\system32\trkwks.dll
22:59:55.0998 3220 TrkWks - ok
22:59:56.0068 3220 [ 233FCD3443CFBBAA27E7E463DCCBC528 ] TuneUp.Defrag C:\WINDOWS\System32\TuneUpDefragService.exe
22:59:56.0098 3220 TuneUp.Defrag - ok
22:59:56.0148 3220 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
22:59:56.0158 3220 Udfs - ok
22:59:56.0198 3220 ultra - ok
22:59:56.0258 3220 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
22:59:56.0268 3220 Update - ok
22:59:56.0318 3220 [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost C:\WINDOWS\System32\upnphost.dll
22:59:56.0338 3220 upnphost - ok
22:59:56.0388 3220 [ 8721F55D8BC9F89E3A63CEBDF5EF4FA3 ] upperdev C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
22:59:56.0398 3220 upperdev - ok
22:59:56.0438 3220 [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS C:\WINDOWS\System32\ups.exe
22:59:56.0448 3220 UPS - ok
22:59:56.0519 3220 [ 65898A183FBF1D1F7759D5CCB364DCD4 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys
22:59:56.0519 3220 usbaudio - ok
22:59:56.0579 3220 [ 1B611611C28D2DF25BC057D79C6F13FC ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
22:59:56.0589 3220 usbccgp - ok
22:59:56.0619 3220 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
22:59:56.0629 3220 usbhub - ok
22:59:56.0659 3220 [ C5E11CD822ADF0019A5A862D9C4E2222 ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys
22:59:56.0669 3220 usbohci - ok
22:59:56.0729 3220 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
22:59:56.0729 3220 usbprint - ok
22:59:56.0779 3220 [ F8EDE2B6928970DCE3D5614C27D9E7F6 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
22:59:56.0779 3220 usbscan - ok
22:59:56.0819 3220 [ 84C44D720655A8AA475E57A9E764D675 ] usbser C:\WINDOWS\system32\drivers\usbser.sys
22:59:56.0829 3220 usbser - ok
22:59:56.0879 3220 [ 4E66C71D8D010BFB0DF1042D25E9CB0F ] UsbserFilt C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
22:59:56.0879 3220 UsbserFilt - ok
22:59:56.0919 3220 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
22:59:56.0919 3220 USBSTOR - ok
22:59:56.0979 3220 [ 25895CC7C3F101419A9ED1BF65A8BD62 ] UxTuneUp C:\WINDOWS\System32\uxtuneup.dll
22:59:56.0989 3220 UxTuneUp - ok
22:59:57.0029 3220 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
22:59:57.0039 3220 VgaSave - ok
22:59:57.0069 3220 ViaIde - ok
22:59:57.0119 3220 [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
22:59:57.0129 3220 VolSnap - ok
22:59:57.0180 3220 [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS C:\WINDOWS\System32\vssvc.exe
22:59:57.0220 3220 VSS - ok
22:59:57.0270 3220 [ 9F8A0D0CBB2FA265A754516128C00E22 ] W32Time C:\WINDOWS\system32\w32time.dll
22:59:57.0290 3220 W32Time - ok
22:59:57.0350 3220 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
22:59:57.0350 3220 Wanarp - ok
22:59:57.0420 3220 [ D918617B46457B9AC28027722E30F647 ] Wdf01000 C:\WINDOWS\system32\Drivers\wdf01000.sys
22:59:57.0430 3220 Wdf01000 - ok
22:59:57.0470 3220 WDICA - ok
22:59:57.0520 3220 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
22:59:57.0520 3220 wdmaud - ok
22:59:57.0580 3220 [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient C:\WINDOWS\System32\webclnt.dll
22:59:57.0590 3220 WebClient - ok
22:59:57.0680 3220 [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
22:59:57.0690 3220 winmgmt - ok
22:59:57.0780 3220 [ 18F347402DA544A780949B8FDF83351B ] WinRM C:\WINDOWS\system32\WsmSvc.dll
22:59:57.0830 3220 WinRM - ok
22:59:57.0921 3220 [ 051B1BDECD6DEE18C771B5D5EC7F044D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
22:59:57.0931 3220 WmdmPmSN - ok
22:59:58.0011 3220 [ C8A6C82F90B055149925DC7526B2D78C ] Wmi C:\WINDOWS\System32\advapi32.dll
22:59:58.0031 3220 Wmi - ok
22:59:58.0101 3220 [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
22:59:58.0111 3220 WmiApSrv - ok
22:59:58.0211 3220 [ 6BAB4DC65515A098505F8B3D01FB6FE5 ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
22:59:58.0241 3220 WMPNetworkSvc - ok
22:59:58.0311 3220 [ C60DC16D4E406810FAD54B98DC92D5EC ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys
22:59:58.0311 3220 WpdUsb - ok
22:59:58.0391 3220 [ 15673BD0B86150CB8E27766059C72A9B ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
22:59:58.0421 3220 WPFFontCache_v0400 - ok
22:59:58.0481 3220 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
22:59:58.0481 3220 WSTCODEC - ok
22:59:58.0551 3220 [ FC1E3B06AE8D160B686C5D04B5E85371 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
22:59:58.0562 3220 wuauserv - ok
22:59:58.0602 3220 [ EAA6324F51214D2F6718977EC9CE0DEF ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
22:59:58.0612 3220 WudfPf - ok
22:59:58.0652 3220 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
22:59:58.0662 3220 WudfRd - ok
22:59:58.0702 3220 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
22:59:58.0712 3220 WudfSvc - ok
22:59:58.0772 3220 [ 349B8D2BB755E8C3B0E3E82A87663E55 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
22:59:58.0812 3220 WZCSVC - ok
22:59:58.0872 3220 [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
22:59:58.0882 3220 xmlprov - ok
22:59:58.0922 3220 ================ Scan global ===============================
22:59:58.0972 3220 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
22:59:59.0032 3220 [ A6430B97C05DA8A4BA70E8280B2E6287 ] C:\WINDOWS\system32\winsrv.dll
22:59:59.0082 3220 [ A6430B97C05DA8A4BA70E8280B2E6287 ] C:\WINDOWS\system32\winsrv.dll
22:59:59.0132 3220 [ C519E15665CD89A91AD383FCE3CB556A ] C:\WINDOWS\system32\services.exe
22:59:59.0142 3220 [Global] - ok
22:59:59.0152 3220 ================ Scan MBR ==================================
22:59:59.0172 3220 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0
22:59:59.0333 3220 \Device\Harddisk0\DR0 - ok
22:59:59.0343 3220 ================ Scan VBR ==================================
22:59:59.0363 3220 [ 3313F0E8BF2F5478A2987EFA8061A9DE ] \Device\Harddisk0\DR0\Partition1
22:59:59.0363 3220 \Device\Harddisk0\DR0\Partition1 - ok
22:59:59.0403 3220 [ 6EA611026023BEB48481EE39D16FA5C2 ] \Device\Harddisk0\DR0\Partition2
22:59:59.0403 3220 \Device\Harddisk0\DR0\Partition2 - ok
22:59:59.0423 3220 ============================================================
22:59:59.0423 3220 Scan finished
22:59:59.0423 3220 ============================================================
22:59:59.0463 3484 Detected object count: 0
22:59:59.0463 3484 Actual detected object count: 0
23:02:16.0940 1904 ============================================================
23:02:16.0940 1904 Scan started
23:02:16.0940 1904 Mode: Manual;
23:02:16.0940 1904 ============================================================
23:02:17.0391 1904 ================ Scan system memory ========================
23:02:17.0391 1904 System memory - ok
23:02:17.0401 1904 ================ Scan services =============================
23:02:17.0571 1904 Abiosdsk - ok
23:02:17.0601 1904 abp480n5 - ok
23:02:17.0672 1904 [ 8FD99680A539792A30E97944FDAECF17 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
23:02:17.0682 1904 ACPI - ok
23:02:17.0752 1904 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
23:02:17.0752 1904 ACPIEC - ok
23:02:17.0842 1904 [ 476BB014F3F68C0C15EDDD5B444DA8FF ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
23:02:17.0862 1904 AdobeFlashPlayerUpdateSvc - ok
23:02:17.0882 1904 adpu160m - ok
23:02:18.0042 1904 [ E410DA575FF48D976B41670C6D262A82 ] AdvancedSystemCareService5 C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
23:02:18.0072 1904 AdvancedSystemCareService5 - ok
23:02:18.0122 1904 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
23:02:18.0132 1904 aec - ok
23:02:18.0192 1904 [ F6B7B1ECD7B41736BDB6FF4B092BCB79 ] AFD C:\WINDOWS\System32\drivers\afd.sys
23:02:18.0192 1904 AFD - ok
23:02:18.0222 1904 Aha154x - ok
23:02:18.0272 1904 aic78u2 - ok
23:02:18.0302 1904 aic78xx - ok
23:02:18.0342 1904 [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter C:\WINDOWS\system32\alrsvc.dll
23:02:18.0342 1904 Alerter - ok
23:02:18.0393 1904 [ 8C515081584A38AA007909CD02020B3D ] ALG C:\WINDOWS\System32\alg.exe
23:02:18.0393 1904 ALG - ok
23:02:18.0423 1904 AliIde - ok
23:02:18.0473 1904 [ 8FCE268CDBDD83B23419D1F35F42C7B1 ] AmdK7 C:\WINDOWS\system32\DRIVERS\amdk7.sys
23:02:18.0473 1904 AmdK7 - ok
23:02:18.0523 1904 amsint - ok
23:02:18.0573 1904 [ D8849F77C0B66226335A59D26CB4EDC6 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
23:02:18.0593 1904 AppMgmt - ok
23:02:18.0623 1904 asc - ok
23:02:18.0653 1904 asc3350p - ok
23:02:18.0683 1904 asc3550 - ok
23:02:18.0773 1904 [ 5B01AF89D16D562825C4DB4530F20CBB ] Aspi32 C:\WINDOWS\system32\drivers\Aspi32.sys
23:02:18.0773 1904 Aspi32 - ok
23:02:18.0833 1904 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
23:02:18.0843 1904 aspnet_state - ok
23:02:18.0873 1904 [ 4AF5F360BA1E8794D32B366E45A64A0A ] aswFsBlk C:\WINDOWS\system32\drivers\aswFsBlk.sys
23:02:18.0883 1904 aswFsBlk - ok
23:02:18.0913 1904 [ 1F7094D4268D46F718C51286DC189791 ] aswMonFlt C:\WINDOWS\system32\drivers\aswMonFlt.sys
23:02:18.0923 1904 aswMonFlt - ok
23:02:18.0973 1904 [ 7B43265F92257A21CBFD88E7A651044C ] AswRdr C:\WINDOWS\system32\drivers\AswRdr.sys
23:02:18.0973 1904 AswRdr - ok
23:02:19.0033 1904 [ B680134BA1813B78B47FDD1DFF223CA5 ] aswRvrt C:\WINDOWS\system32\drivers\aswRvrt.sys
23:02:19.0033 1904 aswRvrt - ok
23:02:19.0104 1904 [ CCD565A8A72AF7D45F9A242013870926 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
23:02:19.0134 1904 aswSnx - ok
23:02:19.0194 1904 [ 937300BC7C4CDF7576BCCE44E19BBB9D ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
23:02:19.0214 1904 aswSP - ok
23:02:19.0264 1904 [ 1F71F170D90E42EFDE9633D81D5E12DC ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys
23:02:19.0264 1904 aswTdi - ok
23:02:19.0304 1904 [ 8CFAA2B965773A653F48F1207A9CB9C4 ] aswVmm C:\WINDOWS\system32\drivers\aswVmm.sys
23:02:19.0304 1904 aswVmm - ok
23:02:19.0354 1904 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
23:02:19.0354 1904 AsyncMac - ok
23:02:19.0394 1904 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
23:02:19.0404 1904 atapi - ok
23:02:19.0434 1904 Atdisk - ok
23:02:19.0484 1904 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
23:02:19.0494 1904 Atmarpc - ok
23:02:19.0544 1904 [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
23:02:19.0544 1904 AudioSrv - ok
23:02:19.0584 1904 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
23:02:19.0584 1904 audstub - ok
23:02:19.0664 1904 [ 28D6701C710AD7BA3CB95E75F8F1A9AA ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
23:02:19.0664 1904 avast! Antivirus - ok
23:02:19.0724 1904 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
23:02:19.0734 1904 Beep - ok
23:02:19.0805 1904 [ 574738F61FCA2935F5265DC4E5691314 ] BITS C:\WINDOWS\system32\qmgr.dll
23:02:19.0825 1904 BITS - ok
23:02:19.0875 1904 [ FC6D1D80588D371F0321E15A75B2F8F2 ] Browser C:\WINDOWS\System32\browser.dll
23:02:19.0885 1904 Browser - ok
23:02:19.0915 1904 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
23:02:19.0915 1904 cbidf2k - ok
23:02:19.0975 1904 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
23:02:19.0975 1904 CCDECODE - ok
23:02:20.0005 1904 cd20xrnt - ok
23:02:20.0055 1904 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
23:02:20.0055 1904 Cdaudio - ok
23:02:20.0115 1904 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
23:02:20.0115 1904 Cdfs - ok
23:02:20.0155 1904 [ 4B0A100EAF5C49EF3CCA8C641431EACC ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
23:02:20.0165 1904 Cdrom - ok
23:02:20.0195 1904 Changer - ok
23:02:20.0225 1904 [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc C:\WINDOWS\system32\cisvc.exe
23:02:20.0225 1904 CiSvc - ok
23:02:20.0265 1904 [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
23:02:20.0265 1904 ClipSrv - ok

23:02:20.0305 1904 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:02:20.0315 1904 clr_optimization_v2.0.50727_32 - ok
23:02:20.0395 1904 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
23:02:20.0405 1904 clr_optimization_v4.0.30319_32 - ok
23:02:20.0436 1904 CmdIde - ok
23:02:20.0466 1904 COMSysApp - ok
23:02:20.0516 1904 Cpqarray - ok
23:02:20.0566 1904 [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
23:02:20.0566 1904 CryptSvc - ok
23:02:20.0596 1904 dac2w2k - ok
23:02:20.0626 1904 dac960nt - ok
23:02:20.0696 1904 [ 9222562D44021B988B9F9F62207FB6F2 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
23:02:20.0736 1904 DcomLaunch - ok
23:02:20.0816 1904 [ C51DE19619D50CBD03708647ACA10E70 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
23:02:20.0816 1904 Dhcp - ok
23:02:20.0856 1904 [ 47B6AAEC570F2C11D8BAD80A064D8ED1 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
23:02:20.0856 1904 Disk - ok
23:02:20.0886 1904 dmadmin - ok
23:02:20.0956 1904 [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
23:02:20.0986 1904 dmboot - ok
23:02:21.0046 1904 [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio C:\WINDOWS\system32\drivers\dmio.sys
23:02:21.0046 1904 dmio - ok
23:02:21.0106 1904 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
23:02:21.0106 1904 dmload - ok
23:02:21.0157 1904 [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver C:\WINDOWS\System32\dmserver.dll
23:02:21.0157 1904 dmserver - ok
23:02:21.0217 1904 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
23:02:21.0217 1904 DMusic - ok
23:02:21.0277 1904 [ D977659AE4D8ECE5286D99D1ED34614D ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
23:02:21.0287 1904 Dnscache - ok
23:02:21.0337 1904 [ B4109C8C3D54C83246997A777724F318 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
23:02:21.0357 1904 Dot3svc - ok
23:02:21.0387 1904 dpti2o - ok
23:02:21.0437 1904 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
23:02:21.0437 1904 drmkaud - ok
23:02:21.0477 1904 [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost C:\WINDOWS\System32\eapsvc.dll
23:02:21.0487 1904 EapHost - ok
23:02:21.0567 1904 [ C519E15665CD89A91AD383FCE3CB556A ] Eventlog C:\WINDOWS\system32\services.exe
23:02:21.0587 1904 Eventlog - ok
23:02:21.0637 1904 [ F17F6226BDC0CD5F0BEF0DAF84D29BEC ] EventSystem C:\WINDOWS\system32\es.dll
23:02:21.0657 1904 EventSystem - ok
23:02:21.0697 1904 [ 4D893323DAE445E34A4C9038B0551BC9 ] exFat C:\WINDOWS\system32\drivers\exFat.sys
23:02:21.0707 1904 exFat - ok
23:02:21.0747 1904 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
23:02:21.0747 1904 Fastfat - ok
23:02:21.0807 1904 [ 888CD7B39C37E13A2419BECFAAF0A28C ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
23:02:21.0838 1904 FastUserSwitchingCompatibility - ok
23:02:21.0878 1904 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
23:02:21.0888 1904 Fdc - ok
23:02:21.0918 1904 [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
23:02:21.0928 1904 Fips - ok
23:02:21.0968 1904 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
23:02:21.0968 1904 Flpydisk - ok
23:02:22.0018 1904 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\DRIVERS\fltMgr.sys
23:02:22.0028 1904 FltMgr - ok
23:02:22.0068 1904 [ 30D42943A54704EF13E2562911DBFCEA ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
23:02:22.0068 1904 Fs_Rec - ok
23:02:22.0108 1904 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
23:02:22.0108 1904 Ftdisk - ok
23:02:22.0148 1904 [ 065639773D8B03F33577F6CDAEA21063 ] gameenum C:\WINDOWS\system32\DRIVERS\gameenum.sys
23:02:22.0148 1904 gameenum - ok
23:02:22.0198 1904 [ 035EAF9A18B84F9560984BCF41F52E99 ] gfiark C:\WINDOWS\system32\drivers\gfiark.sys
23:02:22.0208 1904 gfiark - ok
23:02:22.0258 1904 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
23:02:22.0268 1904 Gpc - ok
23:02:22.0348 1904 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
23:02:22.0348 1904 gupdate - ok
23:02:22.0378 1904 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
23:02:22.0388 1904 gupdatem - ok
23:02:22.0448 1904 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
23:02:22.0448 1904 helpsvc - ok
23:02:22.0498 1904 [ DEB04DA35CC871B6D309B77E1443C796 ] HidServ C:\WINDOWS\System32\hidserv.dll
23:02:22.0498 1904 HidServ - ok
23:02:22.0549 1904 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
23:02:22.0549 1904 hidusb - ok
23:02:22.0609 1904 [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
23:02:22.0609 1904 hkmsvc - ok
23:02:22.0639 1904 hpn - ok
23:02:22.0749 1904 [ ED377B3C83FDEA8D906109A085D219BA ] hpqcxs08 C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
23:02:22.0749 1904 hpqcxs08 - ok
23:02:22.0799 1904 [ EE4C7A4CF2316701FFDE90F404520265 ] hpqddsvc C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll
23:02:22.0809 1904 hpqddsvc - ok
23:02:22.0859 1904 [ D03D10F7DED688FECF50F8FBF1EA9B8A ] HPZid412 C:\WINDOWS\system32\DRIVERS\HPZid412.sys
23:02:22.0869 1904 HPZid412 - ok
23:02:22.0919 1904 [ 89F41658929393487B6B7D13C8528CE3 ] HPZipr12 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
23:02:22.0919 1904 HPZipr12 - ok
23:02:22.0959 1904 [ ABCB05CCDBF03000354B9553820E39F8 ] HPZius12 C:\WINDOWS\system32\DRIVERS\HPZius12.sys
23:02:22.0969 1904 HPZius12 - ok
23:02:23.0029 1904 [ 937031C085718C1C04A9C0864625EC6B ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
23:02:23.0049 1904 HTTP - ok
23:02:23.0089 1904 [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
23:02:23.0099 1904 HTTPFilter - ok
23:02:23.0139 1904 i2omgmt - ok
23:02:23.0169 1904 i2omp - ok
23:02:23.0209 1904 [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
23:02:23.0220 1904 i8042prt - ok
23:02:23.0300 1904 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
23:02:23.0310 1904 IDriverT - ok
23:02:23.0340 1904 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
23:02:23.0350 1904 Imapi - ok
23:02:23.0410 1904 [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService C:\WINDOWS\system32\imapi.exe
23:02:23.0430 1904 ImapiService - ok
23:02:23.0470 1904 ini910u - ok
23:02:23.0520 1904 IntelIde - ok
23:02:23.0560 1904 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
23:02:23.0570 1904 Ip6Fw - ok
23:02:23.0610 1904 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
23:02:23.0620 1904 IpFilterDriver - ok
23:02:23.0670 1904 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
23:02:23.0670 1904 IpInIp - ok
23:02:23.0720 1904 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
23:02:23.0730 1904 IpNat - ok
23:02:23.0760 1904 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
23:02:23.0760 1904 IPSec - ok
23:02:23.0810 1904 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
23:02:23.0810 1904 IRENUM - ok
23:02:23.0870 1904 [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
23:02:23.0890 1904 isapnp - ok
23:02:24.0031 1904 [ 9ECF00E19736054E019C532AED8228FC ] JavaQuickStarterService C:\Program Files\Java\jre7\bin\jqs.exe
23:02:24.0041 1904 JavaQuickStarterService - ok
23:02:24.0091 1904 [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
23:02:24.0091 1904 Kbdclass - ok
23:02:24.0141 1904 [ 9EF487A186DEA361AA06913A75B3FA99 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
23:02:24.0151 1904 kbdhid - ok
23:02:24.0211 1904 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
23:02:24.0231 1904 kmixer - ok
23:02:24.0281 1904 [ C6EBF1D6AD71DF30DB49B8D3287E1368 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
23:02:24.0291 1904 KSecDD - ok
23:02:24.0351 1904 [ 3695B8D03745B2F8022B161238347A9D ] LanmanServer C:\WINDOWS\System32\srvsvc.dll
23:02:24.0361 1904 LanmanServer - ok
23:02:24.0421 1904 [ 3B9324D60DD321BAB7BF6F77931D3FD1 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
23:02:24.0431 1904 lanmanworkstation - ok
23:02:24.0461 1904 lbrtfdc - ok
23:02:24.0531 1904 [ A7DB739AE99A796D91580147E919CC59 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
23:02:24.0531 1904 LmHosts - ok
23:02:24.0591 1904 [ C5EFBD05A5195402121711A6EBBB271F ] LVUSBSta C:\WINDOWS\system32\drivers\lvusbsta.sys
23:02:24.0591 1904 LVUSBSta - ok
23:02:24.0632 1904 [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger C:\WINDOWS\System32\msgsvc.dll
23:02:24.0632 1904 Messenger - ok
23:02:24.0702 1904 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
23:02:24.0702 1904 mnmdd - ok
23:02:24.0762 1904 [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
23:02:24.0762 1904 mnmsrvc - ok
23:02:24.0802 1904 [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
23:02:24.0812 1904 Modem - ok
23:02:24.0852 1904 [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
23:02:24.0852 1904 Mouclass - ok
23:02:24.0892 1904 [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
23:02:24.0892 1904 mouhid - ok
23:02:24.0932 1904 [ 1A1FAA5102466F418494E94FF9B0B091 ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
23:02:24.0942 1904 MountMgr - ok
23:02:24.0962 1904 mraid35x - ok
23:02:25.0012 1904 [ 4FEFD389D71126EE581B9F9CB2918BE4 ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
23:02:25.0032 1904 MRxDAV - ok
23:02:25.0132 1904 [ FB2FCCC70F7174C7BF64F48E96D3ADF4 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
23:02:25.0152 1904 MRxSmb - ok
23:02:25.0212 1904 [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC C:\WINDOWS\system32\msdtc.exe
23:02:25.0222 1904 MSDTC - ok
23:02:25.0262 1904 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
23:02:25.0262 1904 Msfs - ok
23:02:25.0292 1904 MSIServer - ok
23:02:25.0333 1904 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
23:02:25.0343 1904 MSKSSRV - ok
23:02:25.0383 1904 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
23:02:25.0383 1904 MSPCLOCK - ok
23:02:25.0423 1904 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
23:02:25.0423 1904 MSPQM - ok
23:02:25.0473 1904 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
23:02:25.0483 1904 mssmbios - ok
23:02:25.0523 1904 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
23:02:25.0523 1904 MSTEE - ok
23:02:25.0563 1904 [ CA3E22598F411199ADC2DFEE76CD0AE0 ] ms_mpu401 C:\WINDOWS\system32\drivers\msmpu401.sys
23:02:25.0563 1904 ms_mpu401 - ok
23:02:25.0603 1904 [ F7B1AD991491F02AF6DA70B00B8BF114 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
23:02:25.0613 1904 Mup - ok
23:02:25.0653 1904 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
23:02:25.0663 1904 NABTSFEC - ok
23:02:25.0723 1904 [ 0102140028FAD045756796E1C685D695 ] napagent C:\WINDOWS\System32\qagentrt.dll
23:02:25.0743 1904 napagent - ok
23:02:25.0783 1904 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
23:02:25.0783 1904 NDIS - ok
23:02:25.0823 1904 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
23:02:25.0823 1904 NdisIP - ok
23:02:25.0863 1904 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
23:02:25.0863 1904 NdisTapi - ok
23:02:25.0903 1904 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
23:02:25.0903 1904 Ndisuio - ok
23:02:25.0953 1904 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
23:02:25.0953 1904 NdisWan - ok
23:02:26.0014 1904 [ 2F597BB467E05B1FE3830EABD821B8E0 ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
23:02:26.0024 1904 NDProxy - ok
23:02:26.0074 1904 [ 949941E4DE88DF1FAF49A4B3CFFB756F ] Net Driver HPZ12 C:\WINDOWS\system32\HPZinw12.dll
23:02:26.0074 1904 Net Driver HPZ12 - ok
23:02:26.0104 1904 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
23:02:26.0114 1904 NetBIOS - ok
23:02:26.0154 1904 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
23:02:26.0184 1904 NetBT - ok
23:02:26.0224 1904 [ B857BA82860D7FF85AE29B095645563B ] NetDDE C:\WINDOWS\system32\netdde.exe
23:02:26.0244 1904 NetDDE - ok
23:02:26.0274 1904 [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
23:02:26.0274 1904 NetDDEdsdm - ok
23:02:26.0334 1904 [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon C:\WINDOWS\system32\lsass.exe
23:02:26.0334 1904 Netlogon - ok
23:02:26.0374 1904 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman C:\WINDOWS\System32\netman.dll
23:02:26.0404 1904 Netman - ok
23:02:26.0454 1904 [ 290C1A30DEFC723BBE10910AC2D6F6D0 ] Nla C:\WINDOWS\System32\mswsock.dll
23:02:26.0474 1904 Nla - ok
23:02:26.0544 1904 [ A00877C05933FBA8AFB3390DD72D4679 ] nmwcd C:\WINDOWS\system32\drivers\ccdcmb.sys
23:02:26.0544 1904 nmwcd - ok
23:02:26.0594 1904 [ 9FF15F18E4E8758AC57BDB910D0238B3 ] nmwcdc C:\WINDOWS\system32\drivers\ccdcmbo.sys
23:02:26.0594 1904 nmwcdc - ok
23:02:26.0654 1904 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
23:02:26.0654 1904 Npfs - ok
23:02:26.0715 1904 [ 4C51D5275AE8A16999EDFE7E647D00DE ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
23:02:26.0735 1904 Ntfs - ok
23:02:26.0775 1904 [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
23:02:26.0785 1904 NtLmSsp - ok
23:02:26.0845 1904 [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
23:02:26.0875 1904 NtmsSvc - ok
23:02:26.0915 1904 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
23:02:26.0925 1904 Null - ok
23:02:27.0035 1904 [ 2B298519EDBFCF451D43E0F1E8F1006D ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
23:02:27.0115 1904 nv - ok
23:02:27.0185 1904 [ 26712CF8BE48BC767854927435C0B6A9 ] NVSvc C:\WINDOWS\system32\nvsvc32.exe
23:02:27.0195 1904 NVSvc - ok
23:02:27.0235 1904 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
23:02:27.0235 1904 NwlnkFlt - ok
23:02:27.0275 1904 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
23:02:27.0285 1904 NwlnkFwd - ok
23:02:27.0345 1904 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
23:02:27.0345 1904 Parport - ok
23:02:27.0375 1904 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
23:02:27.0375 1904 PartMgr - ok
23:02:27.0436 1904 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
23:02:27.0436 1904 ParVdm - ok
23:02:27.0496 1904 [ F451DCACBAA67F3307305EBD4A39EA07 ] pccsmcfd C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
23:02:27.0496 1904 pccsmcfd - ok
23:02:27.0526 1904 [ A219903CCF74233761D92BEF471A07B1 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
23:02:27.0536 1904 PCI - ok
23:02:27.0576 1904 PCIDump - ok
23:02:27.0606 1904 [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
23:02:27.0606 1904 PCIIde - ok
23:02:27.0646 1904 [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
23:02:27.0656 1904 Pcmcia - ok
23:02:27.0686 1904 PDCOMP - ok
23:02:27.0716 1904 PDFRAME - ok
23:02:27.0746 1904 PDRELI - ok
23:02:27.0776 1904 PDRFRAME - ok
23:02:27.0816 1904 perc2 - ok
23:02:27.0846 1904 perc2hib - ok
23:02:27.0946 1904 [ C519E15665CD89A91AD383FCE3CB556A ] PlugPlay C:\WINDOWS\system32\services.exe
23:02:27.0946 1904 PlugPlay - ok
23:02:27.0996 1904 [ 2F4CA141A609CAF5C98F6E4760EF1B9B ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.dll
23:02:27.0996 1904 Pml Driver HPZ12 - ok
23:02:28.0056 1904 [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
23:02:28.0056 1904 PolicyAgent - ok
23:02:28.0107 1904 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
23:02:28.0107 1904 PptpMiniport - ok
23:02:28.0137 1904 [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
23:02:28.0147 1904 ProtectedStorage - ok
23:02:28.0187 1904 [ D8E11D311785F89F1D70A28B0E879127 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
23:02:28.0187 1904 PSched - ok
23:02:28.0227 1904 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
23:02:28.0237 1904 Ptilink - ok
23:02:28.0327 1904 [ 9A155D31B8E52F41B258282092CC93A7 ] QCMerced C:\WINDOWS\system32\DRIVERS\LVCM.sys
23:02:28.0397 1904 QCMerced - ok
23:02:28.0427 1904 ql1080 - ok
23:02:28.0457 1904 Ql10wnt - ok
23:02:28.0487 1904 ql12160 - ok
23:02:28.0517 1904 ql1240 - ok
23:02:28.0547 1904 ql1280 - ok
23:02:28.0577 1904 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
23:02:28.0577 1904 RasAcd - ok
23:02:28.0637 1904 [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto C:\WINDOWS\System32\rasauto.dll
23:02:28.0647 1904 RasAuto - ok
23:02:28.0677 1904 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
23:02:28.0687 1904 Rasl2tp - ok
23:02:28.0727 1904 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan C:\WINDOWS\System32\rasmans.dll
23:02:28.0747 1904 RasMan - ok
23:02:28.0788 1904 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
23:02:28.0788 1904 RasPppoe - ok
23:02:28.0828 1904 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
23:02:28.0828 1904 Raspti - ok
23:02:28.0898 1904 [ 77050C6615F6EB5402F832B27FD695E0 ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
23:02:28.0908 1904 Rdbss - ok
23:02:28.0968 1904 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
23:02:28.0968 1904 RDPCDD - ok
23:02:29.0038 1904 [ 47EA20320E3D6FDC7B7BB22B2B881CA6 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
23:02:29.0058 1904 rdpdr - ok
23:02:29.0128 1904 [ C7D9BC54354B8C706ABF172D48313F1B ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
23:02:29.0138 1904 RDPWD - ok
23:02:29.0188 1904 [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
23:02:29.0208 1904 RDSessMgr - ok
23:02:29.0258 1904 [ F828DD7E1419B6653894A8F97A0094C5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
23:02:29.0268 1904 redbook - ok
23:02:29.0318 1904 [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
23:02:29.0328 1904 RemoteAccess - ok
23:02:29.0378 1904 [ 5B19B557B0C188210A56A6B699D90B8F ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
23:02:29.0388 1904 RemoteRegistry - ok
23:02:29.0438 1904 [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator C:\WINDOWS\system32\locator.exe
23:02:29.0448 1904 RpcLocator - ok
23:02:29.0509 1904 [ 9222562D44021B988B9F9F62207FB6F2 ] RpcSs C:\WINDOWS\system32\rpcss.dll
23:02:29.0519 1904 RpcSs - ok
23:02:29.0579 1904 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP C:\WINDOWS\system32\rsvp.exe
23:02:29.0589 1904 RSVP - ok
23:02:29.0659 1904 [ 8BE348F9AEEB4DA0005B7F500F46F6AD ] rtl8139 C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
23:02:29.0659 1904 rtl8139 - ok
23:02:29.0699 1904 [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs C:\WINDOWS\system32\lsass.exe
23:02:29.0709 1904 SamSs - ok
23:02:29.0759 1904 [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
23:02:29.0769 1904 SCardSvr - ok
23:02:29.0819 1904 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule C:\WINDOWS\system32\schedsvc.dll
23:02:29.0839 1904 Schedule - ok
23:02:29.0889 1904 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
23:02:29.0889 1904 Secdrv - ok
23:02:29.0929 1904 [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon C:\WINDOWS\System32\seclogon.dll
23:02:29.0929 1904 seclogon - ok
23:02:29.0989 1904 [ E5B56569A9F79B70314FEDE6C953641E ] seehcri C:\WINDOWS\system32\DRIVERS\seehcri.sys
23:02:29.0989 1904 seehcri - ok
23:02:30.0029 1904 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS C:\WINDOWS\system32\sens.dll
23:02:30.0039 1904 SENS - ok
23:02:30.0079 1904 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
23:02:30.0079 1904 serenum - ok
23:02:30.0119 1904 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
23:02:30.0129 1904 Serial - ok
23:02:30.0240 1904 [ 78F7BB9F4924BE164294C59B8C3FC096 ] ServiceLayer C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
23:02:30.0270 1904 ServiceLayer - ok
23:02:30.0360 1904 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
23:02:30.0370 1904 Sfloppy - ok
23:02:30.0440 1904 [ 4F10A2FA76B5BD54CD68AFA94E8ADB39 ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
23:02:30.0460 1904 SharedAccess - ok
23:02:30.0490 1904 [ 888CD7B39C37E13A2419BECFAAF0A28C ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
23:02:30.0500 1904 ShellHWDetection - ok
23:02:30.0540 1904 [ F459DD5EE69D4B68CB6767C9731B5FAF ] Si3112 C:\WINDOWS\system32\drivers\Si3112.sys
23:02:30.0550 1904 Si3112 - ok
23:02:30.0580 1904 Simbad - ok
23:02:30.0680 1904 [ 7523647F439C182AAF8353704A7E50F1 ] SiS7012 C:\WINDOWS\system32\drivers\sis7012.sys
23:02:30.0710 1904 SiS7012 - ok
23:02:30.0750 1904 [ 61CA562DEF09A782D26B3E7EDEC5369A ] sisagp C:\WINDOWS\system32\DRIVERS\SISAGPX.sys
23:02:30.0760 1904 sisagp - ok
23:02:30.0810 1904 [ FA629D021C96B4157229E3708807DB2E ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
23:02:30.0820 1904 SkypeUpdate - ok
23:02:30.0881 1904 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
23:02:30.0881 1904 SLIP - ok
23:02:30.0941 1904 Sparrow - ok
23:02:30.0981 1904 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
23:02:30.0981 1904 splitter - ok
23:02:31.0041 1904 [ 258DD5D4283FD9F9A7166BE9AE45CE73 ] Spooler C:\WINDOWS\system32\spoolsv.exe
23:02:31.0051 1904 Spooler - ok
23:02:31.0081 1904 sptd - ok
23:02:31.0171 1904 [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] Sr C:\WINDOWS\system32\DRIVERS\sr.sys
23:02:31.0181 1904 Sr - ok
23:02:31.0211 1904 [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice C:\WINDOWS\system32\srsvc.dll
23:02:31.0241 1904 srservice - ok
23:02:31.0311 1904 [ 9B390283569EA58D43D2586032B892F5 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
23:02:31.0351 1904 Srv - ok
23:02:31.0401 1904 [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
23:02:31.0411 1904 SSDPSRV - ok
23:02:31.0451 1904 [ E57B778208C783D8DEBAB320C16A1B82 ] StarOpen C:\WINDOWS\system32\drivers\StarOpen.sys
23:02:31.0451 1904 StarOpen - ok
23:02:31.0521 1904 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc C:\WINDOWS\system32\wiaservc.dll
23:02:31.0551 1904 stisvc - ok
23:02:31.0582 1904 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
23:02:31.0582 1904 streamip - ok
23:02:31.0632 1904 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
23:02:31.0632 1904 swenum - ok
23:02:31.0672 1904 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
23:02:31.0682 1904 swmidi - ok
23:02:31.0712 1904 SwPrv - ok
23:02:31.0752 1904 symc810 - ok
23:02:31.0782 1904 symc8xx - ok
23:02:31.0812 1904 sym_hi - ok
23:02:31.0842 1904 sym_u3 - ok
23:02:31.0882 1904 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
23:02:31.0882 1904 sysaudio - ok
23:02:31.0942 1904 [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
23:02:31.0952 1904 SysmonLog - ok
23:02:31.0992 1904 [ FD90A16CEB10D4FDAA00AAF39B8FF58F ] taphss C:\WINDOWS\system32\DRIVERS\taphss.sys
23:02:32.0012 1904 taphss - ok
23:02:32.0062 1904 [ E2B32B10ACC5D97623275AAFB67E5F03 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
23:02:32.0082 1904 TapiSrv - ok
23:02:32.0152 1904 [ 474D3DCCB57DEFCD917311EEC47204B9 ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
23:02:32.0162 1904 Tcpip - ok
23:02:32.0212 1904 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
23:02:32.0212 1904 TDPIPE - ok
23:02:32.0252 1904 [ C0578456F29E5F26285F81B7B71FE57D ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
23:02:32.0273 1904 TDTCP - ok
23:02:32.0313 1904 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
23:02:32.0313 1904 TermDD - ok
23:02:32.0373 1904 [ 5128852A18AE46C387F87BF27DA4C9DD ] TermService C:\WINDOWS\System32\termsrv.dll
23:02:32.0393 1904 TermService - ok
23:02:32.0443 1904 [ 888CD7B39C37E13A2419BECFAAF0A28C ] Themes C:\WINDOWS\System32\shsvcs.dll
23:02:32.0453 1904 Themes - ok
23:02:32.0503 1904 [ DB7205804759FF62C34E3EFD8A4CC76A ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
23:02:32.0513 1904 TlntSvr - ok
23:02:32.0553 1904 TosIde - ok
23:02:32.0593 1904 [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks C:\WINDOWS\system32\trkwks.dll
23:02:32.0603 1904 TrkWks - ok
23:02:32.0683 1904 [ 233FCD3443CFBBAA27E7E463DCCBC528 ] TuneUp.Defrag C:\WINDOWS\System32\TuneUpDefragService.exe
23:02:32.0703 1904 TuneUp.Defrag - ok
23:02:32.0753 1904 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
23:02:32.0763 1904 Udfs - ok
23:02:32.0803 1904 ultra - ok
23:02:32.0863 1904 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
23:02:32.0893 1904 Update - ok
23:02:32.0943 1904 [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost C:\WINDOWS\System32\upnphost.dll
23:02:32.0964 1904 upnphost - ok
23:02:33.0024 1904 [ 8721F55D8BC9F89E3A63CEBDF5EF4FA3 ] upperdev C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
23:02:33.0034 1904 upperdev - ok
23:02:33.0074 1904 [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS C:\WINDOWS\System32\ups.exe
23:02:33.0084 1904 UPS - ok
23:02:33.0154 1904 [ 65898A183FBF1D1F7759D5CCB364DCD4 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys
23:02:33.0154 1904 usbaudio - ok
23:02:33.0214 1904 [ 1B611611C28D2DF25BC057D79C6F13FC ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
23:02:33.0224 1904 usbccgp - ok
23:02:33.0264 1904 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
23:02:33.0274 1904 usbhub - ok
23:02:33.0314 1904 [ C5E11CD822ADF0019A5A862D9C4E2222 ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys
23:02:33.0324 1904 usbohci - ok
23:02:33.0374 1904 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
23:02:33.0374 1904 usbprint - ok
23:02:33.0434 1904 [ F8EDE2B6928970DCE3D5614C27D9E7F6 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
23:02:33.0434 1904 usbscan - ok
23:02:33.0474 1904 [ 84C44D720655A8AA475E57A9E764D675 ] usbser C:\WINDOWS\system32\drivers\usbser.sys
23:02:33.0474 1904 usbser - ok
23:02:33.0524 1904 [ 4E66C71D8D010BFB0DF1042D25E9CB0F ] UsbserFilt C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
23:02:33.0544 1904 UsbserFilt - ok
23:02:33.0584 1904 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
23:02:33.0584 1904 USBSTOR - ok
23:02:33.0634 1904 [ 25895CC7C3F101419A9ED1BF65A8BD62 ] UxTuneUp C:\WINDOWS\System32\uxtuneup.dll
23:02:33.0644 1904 UxTuneUp - ok
23:02:33.0685 1904 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
23:02:33.0685 1904 VgaSave - ok
23:02:33.0715 1904 ViaIde - ok
23:02:33.0775 1904 [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
23:02:33.0775 1904 VolSnap - ok
23:02:33.0845 1904 [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS C:\WINDOWS\System32\vssvc.exe
23:02:33.0875 1904 VSS - ok
23:02:33.0925 1904 [ 9F8A0D0CBB2FA265A754516128C00E22 ] W32Time C:\WINDOWS\system32\w32time.dll
23:02:33.0945 1904 W32Time - ok
23:02:34.0005 1904 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
23:02:34.0005 1904 Wanarp - ok
23:02:34.0095 1904 [ D918617B46457B9AC28027722E30F647 ] Wdf01000 C:\WINDOWS\system32\Drivers\wdf01000.sys
23:02:34.0125 1904 Wdf01000 - ok
23:02:34.0145 1904 WDICA - ok
23:02:34.0195 1904 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
23:02:34.0195 1904 wdmaud - ok
23:02:34.0255 1904 [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient C:\WINDOWS\System32\webclnt.dll
23:02:34.0265 1904 WebClient - ok
23:02:34.0346 1904 [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
23:02:34.0356 1904 winmgmt - ok
23:02:34.0446 1904 [ 18F347402DA544A780949B8FDF83351B ] WinRM C:\WINDOWS\system32\WsmSvc.dll
23:02:34.0496 1904 WinRM - ok
23:02:34.0586 1904 [ 051B1BDECD6DEE18C771B5D5EC7F044D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
23:02:34.0606 1904 WmdmPmSN - ok
23:02:34.0686 1904 [ C8A6C82F90B055149925DC7526B2D78C ] Wmi C:\WINDOWS\System32\advapi32.dll
23:02:34.0706 1904 Wmi - ok
23:02:34.0776 1904 [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
23:02:34.0786 1904 WmiApSrv - ok
23:02:34.0886 1904 [ 6BAB4DC65515A098505F8B3D01FB6FE5 ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
23:02:34.0916 1904 WMPNetworkSvc - ok
23:02:34.0956 1904 [ C60DC16D4E406810FAD54B98DC92D5EC ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys
23:02:34.0966 1904 WpdUsb - ok
23:02:35.0047 1904 [ 15673BD0B86150CB8E27766059C72A9B ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
23:02:35.0077 1904 WPFFontCache_v0400 - ok
23:02:35.0157 1904 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
23:02:35.0167 1904 WSTCODEC - ok
23:02:35.0217 1904 [ FC1E3B06AE8D160B686C5D04B5E85371 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
23:02:35.0227 1904 wuauserv - ok
23:02:35.0287 1904 [ EAA6324F51214D2F6718977EC9CE0DEF ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
23:02:35.0287 1904 WudfPf - ok
23:02:35.0337 1904 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
23:02:35.0347 1904 WudfRd - ok
23:02:35.0397 1904 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
23:02:35.0407 1904 WudfSvc - ok
23:02:35.0487 1904 [ 349B8D2BB755E8C3B0E3E82A87663E55 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
23:02:35.0517 1904 WZCSVC - ok
23:02:35.0567 1904 [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
23:02:35.0587 1904 xmlprov - ok
23:02:35.0637 1904 ================ Scan global ===============================
23:02:35.0667 1904 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
23:02:35.0727 1904 [ A6430B97C05DA8A4BA70E8280B2E6287 ] C:\WINDOWS\system32\winsrv.dll
23:02:35.0788 1904 [ A6430B97C05DA8A4BA70E8280B2E6287 ] C:\WINDOWS\system32\winsrv.dll
23:02:35.0828 1904 [ C519E15665CD89A91AD383FCE3CB556A ] C:\WINDOWS\system32\services.exe
23:02:35.0838 1904 [Global] - ok
23:02:35.0858 1904 ================ Scan MBR ==================================
23:02:35.0888 1904 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0
23:02:36.0028 1904 \Device\Harddisk0\DR0 - ok
23:02:36.0048 1904 ================ Scan VBR ==================================
23:02:36.0058 1904 [ 3313F0E8BF2F5478A2987EFA8061A9DE ] \Device\Harddisk0\DR0\Partition1
23:02:36.0058 1904 \Device\Harddisk0\DR0\Partition1 - ok
23:02:36.0098 1904 [ 6EA611026023BEB48481EE39D16FA5C2 ] \Device\Harddisk0\DR0\Partition2
23:02:36.0098 1904 \Device\Harddisk0\DR0\Partition2 - ok
23:02:36.0108 1904 ============================================================
23:02:36.0108 1904 Scan finished
23:02:36.0108 1904 ============================================================
23:02:36.0158 0648 Detected object count: 0
23:02:36.0158 0648 Actual detected object count: 0

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

ComboFix 14-02-01.01 - Win xp 01.02.2014 12:26:45.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1250.421.1033.18.511.255 [GMT 1:00]
Running from: c:\documents and settings\Win xp\Desktop\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\TEMP
c:\documents and settings\All Users\Application Data\TEMP\RAIDTest
c:\windows\system32\_000006_.tmp.dll
c:\windows\system32\_000007_.tmp.dll
c:\windows\system32\_000008_.tmp.dll
c:\windows\system32\_000009_.tmp.dll
c:\windows\system32\_000011_.tmp.dll
c:\windows\system32\MUI\041b\tourstart.exe
.
.
((((((((((((((((((((((((( Files Created from 2014-01-01 to 2014-02-01 )))))))))))))))))))))))))))))))
.
.
2014-01-31 19:21 . 2014-01-31 19:21 -------- d-----w- c:\windows\ERUNT
2014-01-31 10:48 . 2014-01-31 10:48 388096 ----a-r- c:\documents and settings\Win xp\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-27 20:21 . 2008-04-14 12:00 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
2013-11-13 02:59 . 2008-04-14 12:00 150528 ----a-w- c:\windows\system32\imagehlp.dll
2013-11-07 05:38 . 2010-08-16 08:43 591360 ----a-w- c:\windows\system32\rpcrt4.dll
2013-11-06 01:03 . 2010-08-26 12:52 7168 ----a-w- c:\windows\system32\xpsp4res.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2010-10-13 . 474D3DCCB57DEFCD917311EEC47204B9 . 361600 . . [5.1.2600.6009] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
.
.
c:\windows\System32\wscntfy.exe ... is missing !!
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 121968 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 5"="c:\program files\IObit\Advanced SystemCare 5\ASCTray.exe" [2011-12-29 620376]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="nwiz.exe" [2003-05-02 323584]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE -b -l [2001-2-13 83360]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoRecentDocsNetHood"= 1 (0x1)
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)
"NoResolveTrack"= 1 (0x1)
"NoRecentDocsNetHood"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ \0
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders schannel.dll, credssp.dll, digest.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ctfmon.exe"=c:\windows\system32\ctfmon.exe
"Microsoft Outlook"=c:\progra~1\MICROS~2\Office10\OUTLOOK.EXE Outlook:Inbox /recycle
"FTweakFCleaner"=c:\program files\FCleaner\FCleaner.exe -a
"Skype"="c:\program files\Skype\Phone\Skype.exe" /minimized /regrun
"NvMediaCenter"=RUNDLL32.EXE c:\windows\system32\NVMCTRAY.DLL,NvTaskbarInit
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"Advanced SystemCare 5"="c:\program files\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"HP Software Update"=c:\program files\HP\HP Software Update\HPWuSchd2.exe
"hpqSRMon"=c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\Common Files\\HP\\Digital Imaging\\bin\\hpqPhotoCrm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpsapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpse.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqsudi.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Google\\Chrome\\Application\\chrome.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Windows Remote Management
.
R0 aswRvrt;aswRvrt;c:\windows\system32\drivers\aswRvrt.sys [17.3.2013 19:13 49376]
R0 aswVmm;aswVmm;c:\windows\system32\drivers\aswVmm.sys [17.3.2013 19:13 175176]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [8.12.2012 13:22 770344]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [8.12.2012 13:22 369584]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [8.12.2012 13:22 29816]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [17.3.2013 19:13 66336]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [30.9.2013 15:22 27632]
R3 SiS7012;Service for AC'97 Sample Driver (WDM);c:\windows\system32\drivers\sis7012.sys [7.12.2012 8:59 820133]
S0 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?]
S2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files\IObit\Advanced SystemCare 5\ASCService.exe [27.8.2013 13:58 497496]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [24.1.2013 11:24 161384]
S3 gfiark;gfiark;c:\windows\system32\drivers\gfiark.sys [7.8.2013 13:29 41584]
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - 06796407
*Deregistered* - 06796407
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-01-29 13:14 1211672 ----a-w- c:\program files\Google\Chrome\Application\32.0.1700.102\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-01-31 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2008\OneClick.exe [2007-12-21 12:49]
.
2014-02-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-29 06:24]
.
2014-01-31 c:\windows\Tasks\ASC5_AutoUpdate.job
- c:\program files\IObit\Advanced SystemCare 5\AutoUpdate.exe [2013-08-27 15:19]
.
2014-02-01 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-12-08 08:58]
.
2014-02-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-04-03 07:17]
.
2014-02-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-04-03 07:17]
.
.
------- Supplementary Scan -------
.
uDefault_Search_URL = hxxp://www.google.com/
uStart Page = hxxp://www.zoznam.sk
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.1
.
- - - - ORPHANS REMOVED - - - -
.
SafeBoot-WudfPf
SafeBoot-WudfRd
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2014-02-01 12:36
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
Completion time: 2014-02-01 12:39:37
ComboFix-quarantined-files.txt 2014-02-01 11:39
.
Pre-Run: 18 818 596 864 bytes free
Post-Run: 18 827 730 944 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /noexecute=alwaysoff
.
- - End Of File - - 80C9D4400B32BEBD679DCC2557D3DC76
8F558EB6672622401DA993E1E865C861

Stáhni si z některého odkazu SystemLook
SystemLook (32-bit)
http://jpshortstuff.247fixes.com/SystemLook.exe

SystemLook (64-bit)
http://jpshortstuff.247fixes.com/SystemLook_x64.exe

a ulož si ho na plochu.

Poklepej na stažený SystemLook , zkopíruj do hlavního text. okna tento následující text:

Klikni na Look ke startu skenu. Když program skončí objeví se v poznámkovém bloku zpráva skenu. Zkopíruj sem celý jeho obsah. Log se také nachází na ploše pod názvem SystemLook.txt.