PC-HELP.CZ

Dobrý den,
prosím o pomoc hned s 3 věcmi.

1. PC mi při nabíhání systému v polovině stavu "zamrzne" a cca 30 sec čeká na něco na pozadí. MS Essential mezi tím není aktivní, PC je nechráněn a téměř nic nejde provádět (a to ani spustit rozšířeného správce souborů). Po spuštění "něčeho" na pozadí se pak systém rozjede v pohodě.

2. Kouknu-li se do Prohlížeče událostí, najdu tam tyto hlášky:
a.) Při čekání na odezvu transakce služby IPBusEnum bylo dosaženo časového limitu (30000 ms). ID události 7011
b.) Při čekání na odezvu transakce služby AudioEndpointBuilder bylo dosaženo časového limitu (30000 ms). ID události 7011
c.) Při čekání na odezvu transakce služby TrkWks bylo dosaženo časového limitu (30000 ms). ID události 7011
d.) Služba Klient služby Sledování distribuovaných odkazů neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas. ID události 7000
e.) U služby zařazování tisku došlo k chybě sdílení tiskárny HP LaserJet 1160 s názvem sdíleného prostředku HP LaserJet 1160. Chyba 2114. Ostatní uživatelé v síti nemohou tiskárnu použít. Název protokolu - Microsoft-Windows-PrintService/Správce. ID události 315.
f.) Relaci Homegroup Log se nepodařilo spustit, protože došlo k následující chybě: 0xC0000035. Název protokolu - Microsoft-Windows-Kernel-EventTracing/Admin. ID události 2.

3. Kontrola logu:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Milos at 2014-02-16 16:55:23
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 43 GB (37%) free of 114 GB
Total RAM: 16332 MB (80% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:55:24, on 16.2.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16518)
Boot mode: Normal

Running processes:
D:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
C:\Users\Milos\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\GIGABYTE\GHOST\Tilt.exe
C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
C:\Program Files (x86)\GIGABYTE\GHOST\GHOSTOPEN.exe
D:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
D:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\PowerControlHelp.exe
D:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
D:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
D:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\PROGRA~2\Raptr\raptr.exe
C:\PROGRA~2\Raptr\raptr_im.exe
D:\Program Files (x86)\Mozilla Firefox\firefox.exe
D:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
D:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files\trend micro\Milos.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: RoboForm BHO - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files (x86)\Java\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files (x86)\Java\bin\jp2ssv.dll
O3 - Toolbar: &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Tilt] C:\Program Files (x86)\GIGABYTE\GHOST\Tilt.exe
O4 - HKLM\..\Run: [Nástroj WD Drive Unlocker] C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
O4 - HKLM\..\Run: [WD Quick View] C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
O4 - HKLM\..\Run: [ghost] C:\Program Files (x86)\GIGABYTE\GHOST\ghostopen.exe
O4 - HKLM\..\Run: [PMBVolumeWatcher] D:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OfficeSyncProcess] "D:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
O4 - HKCU\..\Run: [GrooveMonitor] D:\Program Files (x86)\Microsoft Office\Office14\GROOVEMN.EXE
O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Raptr] C:\PROGRA~2\Raptr\raptrstub.exe --startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = Milos\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://D:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Vyplnit formulář - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: Vyplnit formulář - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Uložit - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: Uložit formuláře - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Přizpůsobit - {320AF880-6646-11D3-ABEE-C5DBF3571F4E} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: Přizpůsobit Menu - {320AF880-6646-11D3-ABEE-C5DBF3571F4E} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Show Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: RF Nástrojová lišta - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
O23 - Service: ASUS HM Com Service (asHmComSvc) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
O23 - Service: ASUS System Control Service (AsSysCtrlService) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
O23 - Service: AsusFanControlService - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsusFanControlService\1.02.05\AsusFanControlService.exe
O23 - Service: @%systemroot%\system32\CISVC.EXE,-1 (CISVC) - Unknown owner - C:\Windows\system32\CISVC.EXE (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PMBDeviceInfoProvider - Sony Corporation - D:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - D:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WD Backup (WDBackup) - Western Digital Technologies, Inc. - C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
O23 - Service: WD Drive Manager (WDDriveService) - Western Digital Technologies, Inc. - C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13946 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\svchost.exe -k apphost
"C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe"
"C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe"
"C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe"
"C:\Program Files (x86)\ASUS\AsusFanControlService\1.02.05\AsusFanControlService.exe"
C:\Windows\system32\CISVC.EXE
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
"D:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Logitech\Gaming Software\LWEMon.exe" /noui
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
C:\Windows\explorer.exe /factory,{ceff45ee-c862-41de-aee2-a022c81eda92} -Embedding
"D:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
"D:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe"
"C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
"C:\Users\Milos\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
HydraDM64.exe -h:131202 "Maximalizovat na celou plochu" "Maximalizovat k rohům okna" "Obnovit pracovní plochu"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\GIGABYTE\GHOST\Tilt.exe"
"C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe"
"C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe"
"C:\Program Files (x86)\GIGABYTE\GHOST\GHOSTOPEN.exe"
"D:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
taskeng.exe {207E43F8-DDF4-4877-AA66-5E6C92CF5186}
"D:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\PowerControlHelp.exe"
"D:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe" -open
"D:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe"
"D:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe" -hide
"D:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe" -hide
C:\Windows\system32\svchost.exe -k iissvcs
"C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe"
"C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe"
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
{D5D7539E-B4A3-4BA5-B2C6-D41FAB03319E}
{4AFDB6D0-2DED-453D-888E-2966EF232D8A}
"C:\PROGRA~2\Raptr\raptr.exe" --log_to_file --from_stub --startup
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
raptr_im.exe
"C:\Program Files (x86)\Raptr\raptr_ep64.exe"
"E:\TeamSpeak 3 Client\ts3client_win64.exe"
"C:\Windows\system32\mmc.exe" "C:\Windows\system32\compmgmt.msc" /s
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\system32\svchost.exe -k SDRSVC
"D:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "http://forum.viry.cz/viewtopic.php?f=5&t=130610"
"D:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=2320.284e4900.896760870 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll" -greomni "D:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "D:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "D:\Program Files (x86)\Mozilla Firefox\browser" 260915DCF3A62DA7 2320 "\\.\pipe\gecko-crash-server-pipe.2320" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe" --proxy-stub-channel=Flash7772.52A3C768.634 --host-broker-channel=Flash7772.52A3C768.4813 --host-pid=7772 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe" --channel=1916.0044F40C.959434425 --proxy-stub-channel=Flash7772.52A3C768.634 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll" --host-npapi-version=27 --type=renderer
"D:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=2320.26589600.1660995480 "C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll" -greomni "D:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "D:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "D:\Program Files (x86)\Mozilla Firefox\browser" 260915DCF3A62DA7 2320 "\\.\pipe\gecko-crash-server-pipe.2320" plugin
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe7_ Global\UsGthrCtrlFltPipeMssGthrPipe7 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 532 536 544 65536 540
"E:\Install\RSIT\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{724d43a9-0d85-11d4-9908-00400523e39a}]
RoboForm Toolbar Helper - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2013-09-15 24462040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{724d43a9-0d85-11d4-9908-00400523e39a}]
RoboForm Toolbar Helper - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2013-09-15 18534104]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - D:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - D:\Program Files (x86)\Java\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - D:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - D:\Program Files (x86)\Java\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{724d43a0-0d85-11d4-9908-00400523e39a} - &RoboForm Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2013-09-15 24462040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{724d43a0-0d85-11d4-9908-00400523e39a} - &RoboForm Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2013-09-15 18534104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2010-06-14 190536]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2424-07-27 7205592]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 1266912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OfficeSyncProcess"=D:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [2013-04-22 720064]
"GrooveMonitor"=D:\Program Files (x86)\Microsoft Office\Office14\GROOVEMN.EXE [2013-03-06 945856]
""= []
"HydraVisionDesktopManager"=C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [2013-11-22 389120]
"DAEMON Tools Lite"=D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"Raptr"=C:\PROGRA~2\Raptr\raptrstub.exe [2014-01-08 55360]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-08-10 291648]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-11-29 284440]
"Adobe Reader Speed Launcher"=D:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2013-12-18 40312]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
""= []
"Tilt"=C:\Program Files (x86)\GIGABYTE\GHOST\Tilt.exe [2011-04-20 729088]
"Nástroj WD Drive Unlocker"=C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [2012-06-13 1688008]
"(default)"= []
"WD Quick View"=C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [2013-08-14 5537136]
"ghost"=C:\Program Files (x86)\GIGABYTE\GHOST\ghostopen.exe [2010-02-08 192000]
"PMBVolumeWatcher"=D:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [2013-04-24 740888]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-01-31 767200]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

C:\Users\Milos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Milos\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=D:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2459-05-11 00:51:37 ----A---- C:\Windows\system32\drivers\HECIx64.sys
2440-08-16 15:07:26 ----A---- C:\Windows\system32\MaxxSpeechAPO64.dll
2439-07-29 08:23:51 ----A---- C:\Windows\system32\RtkApi64.dll
2439-07-29 08:23:51 ----A---- C:\Windows\system32\MaxxAudioVnA64.dll
2424-07-27 13:38:08 ----A---- C:\Windows\system32\RtkAPO64.dll
2424-07-27 13:38:08 ----A---- C:\Windows\system32\RTCOM64.dll
2424-07-27 13:38:08 ----A---- C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2424-07-27 13:38:08 ----A---- C:\Windows\system32\MaxxAudioRealtek64.dll
2424-07-27 13:38:08 ----A---- C:\Windows\system32\MaxxAudioRealtek264.dll
2424-07-27 13:38:08 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2424-07-27 13:38:08 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2424-07-27 13:38:08 ----A---- C:\Windows\system32\MaxxAudioAPO5064.dll
2423-07-09 06:54:33 ----A---- C:\Windows\system32\WavesGUILib64.dll
2423-07-09 06:54:33 ----A---- C:\Windows\system32\RtPgEx64.dll
2423-07-09 06:54:33 ----A---- C:\Windows\system32\RtDataProc64.dll
2423-07-09 06:54:33 ----A---- C:\Windows\system32\RCoInstII64.dll
2423-07-09 06:54:33 ----A---- C:\Windows\system32\NAHIMICAPOlfx.dll
2423-07-09 06:54:33 ----A---- C:\Windows\system32\MaxxAudioVnN64.dll
2423-07-09 06:54:33 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2014-02-16 16:55:23 ----D---- C:\rsit
2014-02-16 16:55:23 ----D---- C:\Program Files\trend micro
2014-02-16 16:01:53 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-02-16 16:01:53 ----A---- C:\Windows\system32\mstscax.dll
2014-02-16 15:33:10 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-16 15:33:09 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-02-16 15:33:09 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-02-16 15:33:09 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-02-16 15:33:09 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-02-16 15:33:09 ----A---- C:\Windows\system32\wksprtPS.dll
2014-02-16 15:33:09 ----A---- C:\Windows\system32\wksprt.exe
2014-02-16 15:33:09 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-02-16 15:33:09 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-16 15:33:09 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-16 15:33:09 ----A---- C:\Windows\system32\tsgqec.dll
2014-02-16 15:33:09 ----A---- C:\Windows\system32\mstsc.exe
2014-02-16 15:33:09 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-02-16 15:33:09 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-02-16 15:33:08 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-02-16 15:33:08 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-02-16 15:31:14 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-02-16 15:31:14 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-02-13 07:55:47 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-02-13 07:55:47 ----A---- C:\Windows\system32\vbscript.dll
2014-02-13 07:55:30 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-02-13 07:55:30 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-02-13 07:55:30 ----A---- C:\Windows\system32\msrating.dll
2014-02-13 07:55:30 ----A---- C:\Windows\system32\ieui.dll
2014-02-13 07:55:30 ----A---- C:\Windows\system32\iernonce.dll
2014-02-13 07:55:30 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-02-13 07:55:30 ----A---- C:\Windows\system32\ie4uinit.exe
2014-02-13 07:55:29 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-02-13 07:55:29 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-02-13 07:55:29 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-02-13 07:55:29 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-02-13 07:55:29 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-02-13 07:55:29 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-02-13 07:55:29 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-02-13 07:55:29 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-02-13 07:55:29 ----A---- C:\Windows\system32\mshtml.dll
2014-02-13 07:55:29 ----A---- C:\Windows\system32\msfeeds.dll
2014-02-13 07:55:29 ----A---- C:\Windows\system32\jsproxy.dll
2014-02-13 07:55:29 ----A---- C:\Windows\system32\jscript9diag.dll
2014-02-13 07:55:29 ----A---- C:\Windows\system32\ieUnatt.exe
2014-02-13 07:55:29 ----A---- C:\Windows\system32\iesetup.dll
2014-02-13 07:55:29 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-02-13 07:55:29 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-02-13 07:55:28 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-02-13 07:55:28 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-02-13 07:55:28 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-02-13 07:55:28 ----A---- C:\Windows\system32\wininet.dll
2014-02-13 07:55:28 ----A---- C:\Windows\system32\urlmon.dll
2014-02-13 07:55:28 ----A---- C:\Windows\system32\iertutil.dll
2014-02-13 07:55:28 ----A---- C:\Windows\system32\ieapfltr.dll
2014-02-13 07:55:27 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-02-13 07:55:27 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-02-13 07:55:27 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-02-13 07:55:27 ----A---- C:\Windows\system32\ieframe.dll
2014-02-13 07:55:26 ----A---- C:\Windows\system32\jscript9.dll
2014-02-13 07:11:49 ----A---- C:\Windows\system32\msxml3.dll
2014-02-13 07:11:48 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-02-13 07:11:48 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-02-13 07:11:48 ----A---- C:\Windows\system32\msxml3r.dll
2014-02-13 07:11:47 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-02-13 07:11:46 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-02-13 07:11:46 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-02-13 07:11:46 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-02-13 07:11:46 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-02-13 07:11:46 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-02-13 07:11:46 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-02-13 07:11:46 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-02-13 07:11:46 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-02-13 07:11:46 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-02-13 07:11:46 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-02-13 07:11:46 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-02-13 07:11:46 ----A---- C:\Windows\system32\secproc_isv.dll
2014-02-13 07:11:46 ----A---- C:\Windows\system32\secproc.dll
2014-02-13 07:11:46 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-13 07:11:46 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-02-13 07:11:46 ----A---- C:\Windows\system32\RMActivate.exe
2014-02-13 07:11:46 ----A---- C:\Windows\system32\msdrm.dll
2014-02-13 07:11:43 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-02-13 07:11:43 ----A---- C:\Windows\system32\d3d10warp.dll
2014-02-13 07:11:43 ----A---- C:\Windows\system32\d2d1.dll
2014-02-13 07:11:42 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-02-03 20:52:38 ----D---- C:\Program Files (x86)\Microsoft Security Client
2014-02-03 19:01:50 ----D---- C:\Windows\Migration
2014-02-02 18:21:21 ----D---- C:\ProgramData\ATI
2014-02-02 18:21:21 ----D---- C:\Program Files (x86)\AMD AVT
2014-02-02 17:56:24 ----A---- C:\Windows\SYSWOW64\log.txt
2014-01-31 22:07:46 ----A---- C:\Windows\SYSWOW64\amdhcp32.dll
2014-01-31 22:07:46 ----A---- C:\Windows\system32\amdhcp64.dll
2014-01-31 22:07:44 ----A---- C:\Windows\SYSWOW64\atimpc32.dll
2014-01-31 22:07:44 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll
2014-01-31 22:07:44 ----A---- C:\Windows\system32\atimpc64.dll
2014-01-31 22:07:44 ----A---- C:\Windows\system32\amdpcom64.dll
2014-01-31 22:07:28 ----A---- C:\Windows\SYSWOW64\atiuxpag.dll
2014-01-31 22:07:26 ----A---- C:\Windows\system32\atiu9p64.dll
2014-01-31 22:07:10 ----A---- C:\Windows\SYSWOW64\atidxx32.dll
2014-01-31 22:06:38 ----A---- C:\Windows\system32\atiumd6a.dll
2014-01-31 22:06:34 ----A---- C:\Windows\system32\atiumd64.dll
2014-01-31 21:57:20 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2014-01-31 21:46:47 ----SHD---- C:\RECYCLER
2014-01-31 21:43:36 ----A---- C:\Windows\system32\clinfo.exe
2014-01-31 21:43:20 ----A---- C:\Windows\system32\OpenVideo64.dll
2014-01-31 21:43:14 ----A---- C:\Windows\SYSWOW64\OpenVideo.dll
2014-01-31 21:43:08 ----A---- C:\Windows\system32\OVDecode64.dll
2014-01-31 21:43:04 ----A---- C:\Windows\SYSWOW64\OVDecode.dll
2014-01-31 21:42:58 ----A---- C:\Windows\system32\amdocl64.dll
2014-01-31 21:40:34 ----A---- C:\Windows\SYSWOW64\amdocl.dll
2014-01-31 21:38:16 ----A---- C:\Windows\system32\OpenCL.dll
2014-01-31 21:38:12 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-01-31 21:26:40 ----A---- C:\Windows\system32\atiapfxx.exe
2014-01-31 21:26:30 ----A---- C:\Windows\system32\aticalrt64.dll
2014-01-31 21:26:28 ----A---- C:\Windows\SYSWOW64\aticalrt.dll
2014-01-31 21:26:20 ----A---- C:\Windows\system32\aticalcl64.dll
2014-01-31 21:26:18 ----A---- C:\Windows\SYSWOW64\aticalcl.dll
2014-01-31 21:26:04 ----A---- C:\Windows\system32\aticaldd64.dll
2014-01-31 21:24:36 ----A---- C:\Windows\system32\mantle64.dll
2014-01-31 21:24:16 ----A---- C:\Windows\SYSWOW64\mantle32.dll
2014-01-31 21:23:54 ----A---- C:\Windows\system32\amdmantle64.dll
2014-01-31 21:22:52 ----A---- C:\Windows\SYSWOW64\aticaldd.dll
2014-01-31 21:22:04 ----A---- C:\Windows\system32\atio6axx.dll
2014-01-31 21:10:46 ----A---- C:\Windows\SYSWOW64\amdmantle32.dll
2014-01-31 21:06:22 ----A---- C:\Windows\system32\atidemgy.dll
2014-01-31 21:06:12 ----A---- C:\Windows\system32\atimuixx.dll
2014-01-31 21:06:06 ----A---- C:\Windows\system32\atieclxx.exe
2014-01-31 21:05:12 ----A---- C:\Windows\system32\atiesrxx.exe
2014-01-31 21:03:34 ----A---- C:\Windows\system32\atitmm64.dll
2014-01-31 21:03:32 ----A---- C:\Windows\SYSWOW64\atioglxx.dll
2014-01-31 20:59:12 ----A---- C:\Windows\system32\mantleaxl64.dll
2014-01-31 20:59:02 ----A---- C:\Windows\SYSWOW64\mantleaxl32.dll
2014-01-31 20:48:04 ----A---- C:\Windows\system32\amdmmcl6.dll
2014-01-31 20:47:58 ----A---- C:\Windows\SYSWOW64\amdmmcl.dll
2014-01-31 20:37:06 ----A---- C:\Windows\system32\coinst_13.350.dll
2014-01-31 20:30:14 ----A---- C:\Windows\system32\atiadlxx.dll
2014-01-31 20:30:02 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll
2014-01-31 20:29:46 ----A---- C:\Windows\system32\atig6pxx.dll
2014-01-31 20:29:42 ----A---- C:\$tmplistf.txt
2014-01-31 20:29:42 ----A---- C:\$tmplistd.txt
2014-01-31 20:29:40 ----A---- C:\Windows\SYSWOW64\atiglpxx.dll
2014-01-31 20:29:40 ----A---- C:\Windows\system32\atiglpxx.dll
2014-01-31 20:29:36 ----A---- C:\Windows\system32\atig6txx.dll
2014-01-31 20:29:20 ----A---- C:\Windows\TempFileCleaner.cmd
2014-01-31 20:29:14 ----A---- C:\Windows\SYSWOW64\atigktxx.dll
2014-01-31 20:28:50 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2014-01-31 20:26:26 ----D---- C:\MyBootCD
2014-01-31 20:25:02 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2014-01-31 20:23:44 ----A---- C:\Windows\system32\amdave64.dll
2014-01-31 20:23:38 ----A---- C:\Windows\SYSWOW64\amdave32.dll
2014-01-31 20:23:34 ----D---- C:\ProgramData\Astroburn Lite
2014-01-31 20:23:26 ----A---- C:\Windows\system32\atisamu64.dll
2014-01-31 20:23:20 ----A---- C:\Windows\SYSWOW64\atisamu32.dll
2014-01-31 20:19:25 ----D---- C:\Users\Milos\AppData\Roaming\WinZip
2014-01-31 15:53:46 ----A---- C:\Windows\system32\kdbsdk64.dll
2014-01-31 15:49:02 ----A---- C:\Windows\SYSWOW64\kdbsdk32.dll
2014-01-27 20:44:08 ----D---- C:\Users\Milos\AppData\Roaming\ParetoLogic
2014-01-27 20:44:08 ----D---- C:\Users\Milos\AppData\Roaming\DriverCure
2014-01-27 20:43:54 ----D---- C:\ProgramData\ParetoLogic
2014-01-26 16:52:29 ----A---- C:\Windows\SYSWOW64\MSMPIDE.DLL
2014-01-26 16:52:29 ----A---- C:\Windows\system32\pdfcmnnt.dll
2014-01-26 16:40:42 ----D---- C:\ProgramData\WinZip
2014-01-26 16:40:41 ----D---- C:\Program Files\WinZip
2014-01-24 08:43:10 ----A---- C:\Windows\SYSWOW64\javaws.exe
2014-01-24 08:43:07 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-01-24 08:43:07 ----A---- C:\Windows\SYSWOW64\javaw.exe
2014-01-24 08:43:07 ----A---- C:\Windows\SYSWOW64\java.exe
2014-01-24 08:36:55 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2014-01-24 08:36:55 ----A---- C:\Windows\system32\drivers\usbport.sys
2014-01-24 08:36:55 ----A---- C:\Windows\system32\drivers\usbohci.sys
2014-01-24 08:36:55 ----A---- C:\Windows\system32\drivers\usbhub.sys
2014-01-24 08:36:55 ----A---- C:\Windows\system32\drivers\usbehci.sys
2014-01-24 08:36:55 ----A---- C:\Windows\system32\drivers\usbd.sys
2014-01-24 08:36:55 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2014-01-24 08:36:54 ----A---- C:\Windows\system32\win32k.sys
2014-01-24 08:36:53 ----A---- C:\Windows\system32\drivers\netio.sys
2014-01-24 07:19:36 ----D---- C:\Users\Milos\AppData\Roaming\DropboxMaster
2014-01-22 21:42:32 ----D---- C:\Users\Milos\AppData\Roaming\PDF Architect
2014-01-22 21:40:02 ----D---- C:\Users\Milos\AppData\Roaming\pdfforge

======List of files/folders modified in the last 1 months======

2014-02-16 16:55:23 ----RD---- C:\Program Files
2014-02-16 16:46:41 ----D---- C:\Windows\Temp
2014-02-16 16:34:32 ----D---- C:\Users\Milos\AppData\Roaming\Winamp
2014-02-16 16:21:30 ----D---- C:\Windows\system32\config
2014-02-16 16:14:19 ----D---- C:\Windows\System32
2014-02-16 16:14:19 ----D---- C:\Windows\inf
2014-02-16 16:14:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-02-16 16:09:06 ----D---- C:\Users\Milos\AppData\Roaming\Raptr
2014-02-16 16:08:34 ----D---- C:\Windows\SysWOW64
2014-02-16 16:08:34 ----D---- C:\Users\Milos\AppData\Roaming\Dropbox
2014-02-16 16:04:05 ----D---- C:\Windows
2014-02-16 16:03:24 ----SHD---- C:\System Volume Information
2014-02-16 16:01:43 ----D---- C:\Windows\winsxs
2014-02-16 16:01:43 ----D---- C:\Windows\system32\catroot
2014-02-16 15:48:33 ----SHD---- C:\Config.Msi
2014-02-16 15:48:03 ----D---- C:\Windows\SYSWOW64\wbem
2014-02-16 15:48:03 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-02-16 15:48:03 ----D---- C:\Windows\system32\wbem
2014-02-16 15:48:03 ----D---- C:\Windows\system32\DriverStore
2014-02-16 15:48:03 ----D---- C:\Windows\system32\drivers\en-US
2014-02-16 15:48:03 ----D---- C:\Windows\system32\drivers
2014-02-16 15:48:03 ----D---- C:\Windows\system32\cs-CZ
2014-02-16 15:37:38 ----D---- C:\Windows\system32\Tasks
2014-02-16 15:37:24 ----D---- C:\Windows\Tasks
2014-02-16 15:33:19 ----D---- C:\Windows\system32\MRT
2014-02-16 15:33:19 ----D---- C:\Windows\debug
2014-02-16 15:33:18 ----A---- C:\Windows\system32\MRT.exe
2014-02-16 15:33:12 ----D---- C:\Windows\system32\catroot2
2014-02-16 15:33:07 ----SHD---- C:\Windows\Installer
2014-02-16 15:33:05 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-02-15 23:40:47 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2014-02-15 22:12:34 ----D---- C:\ProgramData\Origin
2014-02-13 21:16:33 ----D---- C:\Windows\Microsoft.NET
2014-02-13 21:12:19 ----RSD---- C:\Windows\assembly
2014-02-13 20:13:28 ----D---- C:\Program Files\Internet Explorer
2014-02-13 20:13:28 ----D---- C:\Program Files (x86)\Internet Explorer
2014-02-13 07:58:58 ----D---- C:\ProgramData\Microsoft Help
2014-02-13 07:56:02 ----A---- C:\Windows\win.ini
2014-02-11 21:46:06 ----D---- C:\Windows\Prefetch
2014-02-05 21:23:05 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-02-03 20:52:39 ----D---- C:\Program Files\Microsoft Security Client
2014-02-03 20:52:38 ----D---- C:\Program Files (x86)
2014-02-03 20:27:37 ----D---- C:\Users\Milos\AppData\Roaming\GlarySoft
2014-02-03 19:01:50 ----SD---- C:\ProgramData\Microsoft
2014-02-03 08:07:28 ----D---- C:\Windows\SoftwareDistribution
2014-02-03 08:07:28 ----D---- C:\Users\Milos\AppData\Roaming\DAEMON Tools Lite
2014-02-02 18:21:47 ----D---- C:\Program Files (x86)\Raptr
2014-02-02 18:21:21 ----HD---- C:\ProgramData
2014-02-02 18:21:21 ----D---- C:\ProgramData\AMD
2014-02-02 18:21:12 ----D---- C:\Program Files\ATI Technologies
2014-02-02 18:17:30 ----D---- C:\Windows\SYSWOW64\en-US
2014-02-02 18:17:30 ----D---- C:\Windows\system32\en-US
2014-02-02 18:14:36 ----D---- C:\AMD
2014-01-31 22:07:28 ----A---- C:\Windows\system32\atiuxp64.dll
2014-01-31 22:07:24 ----A---- C:\Windows\SYSWOW64\atiu9pag.dll
2014-01-31 22:07:22 ----A---- C:\Windows\system32\aticfx64.dll
2014-01-31 22:07:20 ----A---- C:\Windows\SYSWOW64\aticfx32.dll
2014-01-31 22:07:14 ----A---- C:\Windows\system32\atidxx64.dll
2014-01-31 22:07:02 ----A---- C:\Windows\SYSWOW64\atiumdva.dll
2014-01-31 22:06:54 ----A---- C:\Windows\SYSWOW64\atiumdag.dll
2014-01-31 21:01:52 ----D---- C:\Temp
2014-01-30 19:32:30 ----D---- C:\Windows\rescache
2014-01-29 08:17:39 ----D---- C:\Windows\system32\wfp
2014-01-29 08:17:06 ----D---- C:\Windows\registration
2014-01-28 08:03:20 ----D---- C:\Windows\system32\CodeIntegrity
2014-01-28 08:02:45 ----SD---- C:\Users\Milos\AppData\Roaming\Microsoft
2014-01-26 20:53:28 ----D---- C:\Windows\PolicyDefinitions
2014-01-26 17:33:12 ----RSD---- C:\Windows\Fonts
2014-01-24 08:55:14 ----D---- C:\ProgramData\Oracle
2014-01-24 08:29:11 ----D---- C:\Windows\SYSWOW64\drivers
2014-01-24 08:29:11 ----D---- C:\Windows\system32\NDF
2014-01-24 08:29:11 ----D---- C:\Windows\pss
2014-01-24 08:29:11 ----D---- C:\Windows\AppCompat
2014-01-24 08:29:11 ----D---- C:\Program Files (x86)\Battlelog Web Plugins
2014-01-24 08:27:43 ----RHD---- C:\MSOCache
2014-01-24 08:27:43 ----D---- C:\Program Files (x86)\Common Files
2014-01-18 17:28:32 ----D---- C:\Users\Milos\AppData\Roaming\TeamViewer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-11-29 568600]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-08-10 19264]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 248240]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2012-08-22 15232]
R1 AsUpIO;AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [2010-08-03 14464]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-12-07 283064]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 134944]
R2 RtNdPt60;Realtek NDIS Protocol Driver; C:\Windows\system32\DRIVERS\RtNdPt60.sys [2011-06-15 32544]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-01-31 13929472]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-01-31 636928]
R3 ASUSFILTER;ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [2011-09-20 46152]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-12-19 94720]
R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2012-08-03 26136]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2423-07-09 3760344]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-08-10 357184]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-08-10 789824]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2014-01-14 99800]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2014-01-14 888536]
R3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2009-02-13 14464]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2010-04-27 26440]
R4 IOMap;IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [2012-10-26 23680]
S3 ASUSstpt;ASUS USB 3.0 Boost Storage Driver (Storage Driver); C:\Windows\system32\DRIVERS\ASUSstpt.sys [2011-09-15 24648]
S3 ASUSumsc;ASUS USB 3.0 Boost Storage Driver (WDM); C:\Windows\system32\DRIVERS\ASUSumsc.sys [2011-09-15 141896]
S3 BthAvrcp;Bluetooth AVRCP Profile; C:\Windows\system32\DRIVERS\BthAvrcp.sys [2009-08-13 29184]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 cpuz130;cpuz130; \??\D:\Temp\cpuz130\cpuz_x64.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2013-06-04 103448]
S3 dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-21 19968]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 DrvAgent64;DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [2013-12-23 21712]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.2); C:\Windows\system32\DRIVERS\RtTeam60.sys [2011-06-15 48416]
S3 RTVLANPT;Realtek Vlan Protocol Driver (NDIS 6.2); C:\Windows\system32\DRIVERS\RtVlan620.sys [2011-09-16 32360]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2013-06-04 203672]
S3 TEAM;Realtek Virtual Miniport Driver for Teaming (NDIS 6.2); C:\Windows\system32\DRIVERS\RtTeam60.sys [2011-06-15 48416]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]
S3 VLAN;Realtek Virtual Miniport Driver for VLAN (NDIS 6.2); C:\Windows\system32\DRIVERS\RtVLAN620.sys [2011-09-16 32360]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2010-04-27 43976]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-01-31 240128]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 asComSvc;ASUS Com Service; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [2012-06-01 920736]
R2 asHmComSvc;ASUS HM Com Service; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [2012-02-02 951936]
R2 AsSysCtrlService;ASUS System Control Service; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [2012-02-17 149120]
R2 AsusFanControlService;AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.02.05\AsusFanControlService.exe [2012-10-12 2005504]
R2 CISVC;@%systemroot%\system32\CISVC.EXE,-1; C:\Windows\system32\CISVC.EXE [2009-07-14 19456]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-11-29 13592]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 23808]
R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider; D:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [2013-04-24 483864]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-12-05 76888]
R2 TeamViewer9;TeamViewer 9; D:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2013-12-17 5341536]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2013-08-27 93072]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 WDBackup;WD Backup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [2013-11-02 1042808]
R2 WDDriveService;WD Drive Manager; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [2013-11-02 270704]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-02 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-05 257928]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-02 116648]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2011-05-27 160768]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-02-06 111616]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; D:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-11-17 119408]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-12-20 541760]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-08-29 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------


a nakonec ještě jeden dotaz:
Je normální mít spuštěné 2x
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
???

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

# AdwCleaner v3.019 - Report created 18/02/2014 at 21:48:31
# Updated 17/02/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Milos - MILOS-PC
# Running from : D:\Users\Milos\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASMANCS
Key Deleted : HKLM\Software\caphyon

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v25.0.1 (cs)

[ File : C:\Users\Milos\AppData\Roaming\Mozilla\Firefox\Profiles\s1amq8tc.default-1354039466817\prefs.js ]


[ File : C:\Users\Ivanka\AppData\Roaming\Mozilla\Firefox\Profiles\j8qnks6y.default\prefs.js ]


-\\ Google Chrome v32.0.1700.107

[ File : C:\Users\Milos\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R2].txt - [1735 octets] - [16/02/2014 17:50:48]
AdwCleaner[R3].txt - [1795 octets] - [16/02/2014 18:02:32]
AdwCleaner[R4].txt - [1491 octets] - [18/02/2014 21:47:40]
AdwCleaner[S1].txt - [1845 octets] - [16/02/2014 18:07:00]
AdwCleaner[S2].txt - [1422 octets] - [18/02/2014 21:48:31]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1482 octets] ##########

Co to ostatní?

+
Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2014.02.17.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16518
Milos :: MILOS-PC [administrátor]

19.2.2014 20:36:51
mbam-log-2014-02-19 (20-36-51).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 310601
Uplynulý čas: 2 minut, 10 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Home Premium x64
Ran by Milos on st 19.02.2014 at 20:41:09,94
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\AboutURLs\\Tabs



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{c1d89ae7-449d-4929-b24b-fded04adbe06}



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on st 19.02.2014 at 20:44:10,78
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.
-pokud bude mít log více než 60.000 znaků , rozděl ho a vlož do více příspěvků

RogueKiller V8.8.8 _x64_ [Feb 19 2014] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Milos [Práva správce]
Mód : Kontrola -- Datum : 02/20/2014 20:43:42
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 6 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> NALEZENO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 1 ¤¤¤
[V2][SUSP PATH] com.flash.WidgetBrowser : C:\Users\Milos\AppData\Roaming\com.flash.WidgetBrowser\bfgminer.vbs [x] -> NALEZENO

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Corsair Force GT +++++
--- User ---
[MBR] 7b188c803c4e345ef2604c47395de6d5
[BSP] 7ae8a6f67efea01a3daba88bb7c87168 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 114371 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ IDE) WDC WD20EARX-00PASB0 +++++
--- User ---
[MBR] a83dbfeb0608c405668a9b0cdb991b94
[BSP] 2e52001a7717db68ac556401dfc8db91 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1003122 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2054395904 | Size: 904604 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive2: (\\.\PHYSICALDRIVE2 @ IDE) SAMSUNG HD753LJ +++++
--- User ---
[MBR] 9447ff11259162d8346e6aa88d129c5f
[BSP] 9217f0087288776d809649f2583df326 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 715402 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive3: (\\.\PHYSICALDRIVE3 @ IDE) WDC WD2500JS-60NCB1 +++++
--- User ---
[MBR] dcf1e7f329c0859f9b4ef6590589b241
[BSP] 7821b5939a97f872b6ea512c97d5632d : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 238473 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive4: (\\.\PHYSICALDRIVE4 @ USB) WD My Book 1130 USB Device +++++
--- User ---
[MBR] 78ba3c87da77bc8fad64a57764f894c4
[BSP] 407e1a59a079c5ad6f818ef18da7eb06 : Empty MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 953836 Mo
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Po?adavek není podporován. )

Dokončeno : << RKreport[0]_S_02202014_204342.txt >>

20:49:57.0870 3852 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
20:49:59.0882 3852 ============================================================
20:49:59.0882 3852 Current date / time: 2014/02/20 20:49:59.0882
20:49:59.0882 3852 SystemInfo:
20:49:59.0882 3852
20:49:59.0882 3852 OS Version: 6.1.7601 ServicePack: 1.0
20:49:59.0882 3852 Product type: Workstation
20:49:59.0882 3852 ComputerName: MILOS-PC
20:49:59.0882 3852 UserName: Milos
20:49:59.0882 3852 Windows directory: C:\Windows
20:49:59.0882 3852 System windows directory: C:\Windows
20:49:59.0882 3852 Running under WOW64
20:49:59.0882 3852 Processor architecture: Intel x64
20:49:59.0882 3852 Number of processors: 4
20:49:59.0882 3852 Page size: 0x1000
20:49:59.0882 3852 Boot type: Normal boot
20:49:59.0882 3852 ============================================================
20:50:00.0132 3852 Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3901, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:50:00.0553 3852 Drive \Device\Harddisk1\DR1 - Size: 0x1D1C1116000 (1863.02 Gb), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:50:00.0553 3852 Drive \Device\Harddisk2\DR2 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x162DD1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0x10, Type 'K0', Flags 0x00000040
20:50:00.0553 3852 Drive \Device\Harddisk3\DR3 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:50:01.0130 3852 Drive \Device\Harddisk4\DR4 - Size: 0xE8DED00000 (931.48 Gb), SectorSize: 0x200, Cylinders: 0x1DAFD, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
20:50:01.0130 3852 ============================================================
20:50:01.0130 3852 \Device\Harddisk0\DR0:
20:50:01.0130 3852 MBR partitions:
20:50:01.0130 3852 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
20:50:01.0130 3852 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xDF61800
20:50:01.0130 3852 \Device\Harddisk1\DR1:
20:50:01.0130 3852 MBR partitions:
20:50:01.0130 3852 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x7A739000
20:50:01.0130 3852 \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x7A739800, BlocksNum 0x6E6CE000
20:50:01.0130 3852 \Device\Harddisk2\DR2:
20:50:01.0130 3852 MBR partitions:
20:50:01.0130 3852 \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x57545000
20:50:01.0130 3852 \Device\Harddisk3\DR3:
20:50:01.0130 3852 MBR partitions:
20:50:01.0130 3852 \Device\Harddisk3\DR3\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1D1C4927
20:50:01.0130 3852 \Device\Harddisk4\DR4:
20:50:01.0130 3852 MBR partitions:
20:50:01.0130 3852 \Device\Harddisk4\DR4\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x746F6000
20:50:01.0130 3852 ============================================================
20:50:01.0130 3852 C: <-> \Device\Harddisk0\DR0\Partition2
20:50:01.0161 3852 D: <-> \Device\Harddisk1\DR1\Partition1
20:50:01.0208 3852 E: <-> \Device\Harddisk1\DR1\Partition2
20:50:01.0208 3852 I: <-> \Device\Harddisk4\DR4\Partition1
20:50:01.0224 3852 F: <-> \Device\Harddisk2\DR2\Partition1
20:50:01.0224 3852 G: <-> \Device\Harddisk3\DR3\Partition1
20:50:01.0224 3852 ============================================================
20:50:01.0224 3852 Initialize success
20:50:01.0224 3852 ============================================================
20:50:03.0735 6056 ============================================================
20:50:03.0735 6056 Scan started
20:50:03.0735 6056 Mode: Manual;
20:50:03.0735 6056 ============================================================
20:50:03.0813 6056 ================ Scan system memory ========================
20:50:03.0813 6056 System memory - ok
20:50:03.0813 6056 ================ Scan services =============================
20:50:03.0844 6056 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
20:50:03.0844 6056 1394ohci - ok
20:50:03.0844 6056 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
20:50:03.0860 6056 ACPI - ok
20:50:03.0860 6056 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
20:50:03.0860 6056 AcpiPmi - ok
20:50:03.0860 6056 [ B362181ED3771DC03B4141927C80F801 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
20:50:03.0860 6056 AdobeARMservice - ok
20:50:03.0876 6056 [ C8C6C0D659734FDBF63F6F421A5416BC ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
20:50:03.0876 6056 AdobeFlashPlayerUpdateSvc - ok
20:50:03.0876 6056 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
20:50:03.0891 6056 adp94xx - ok
20:50:03.0891 6056 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
20:50:03.0891 6056 adpahci - ok
20:50:03.0891 6056 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
20:50:03.0891 6056 adpu320 - ok
20:50:03.0891 6056 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
20:50:03.0891 6056 AeLookupSvc - ok
20:50:03.0907 6056 [ 79059559E89D06E8B80CE2944BE20228 ] AFD C:\Windows\system32\drivers\afd.sys
20:50:03.0907 6056 AFD - ok
20:50:03.0907 6056 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
20:50:03.0907 6056 agp440 - ok
20:50:03.0954 6056 [ 64D59ADC91CD63C43C3820383EDB82E3 ] AIDA64Driver D:\Program Files (x86)\FinalWire\AIDA64 Extreme\kerneld.x64
20:50:03.0954 6056 AIDA64Driver - ok
20:50:03.0969 6056 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
20:50:03.0969 6056 ALG - ok
20:50:03.0969 6056 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
20:50:03.0969 6056 aliide - ok
20:50:03.0969 6056 [ 09F1332EA1955D4C5CEBFA82499C7361 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
20:50:03.0969 6056 AMD External Events Utility - ok
20:50:03.0969 6056 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
20:50:03.0969 6056 amdide - ok
20:50:03.0969 6056 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
20:50:03.0969 6056 AmdK8 - ok
20:50:04.0063 6056 [ 755D08758837EB5E54875C17531D0FEE ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
20:50:04.0094 6056 amdkmdag - ok
20:50:04.0110 6056 [ E72EEF6B0FF8872538FF4A37AB112206 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
20:50:04.0110 6056 amdkmdap - ok
20:50:04.0110 6056 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
20:50:04.0110 6056 AmdPPM - ok
20:50:04.0110 6056 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
20:50:04.0110 6056 amdsata - ok
20:50:04.0110 6056 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
20:50:04.0125 6056 amdsbs - ok
20:50:04.0125 6056 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
20:50:04.0125 6056 amdxata - ok
20:50:04.0125 6056 [ 59D01FA91962C9C1E9B4022B2D3B46DB ] AppHostSvc C:\Windows\system32\inetsrv\apphostsvc.dll
20:50:04.0125 6056 AppHostSvc - ok
20:50:04.0125 6056 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
20:50:04.0125 6056 AppID - ok
20:50:04.0125 6056 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
20:50:04.0125 6056 AppIDSvc - ok
20:50:04.0125 6056 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll
20:50:04.0125 6056 Appinfo - ok
20:50:04.0125 6056 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
20:50:04.0125 6056 arc - ok
20:50:04.0141 6056 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
20:50:04.0141 6056 arcsas - ok
20:50:04.0141 6056 [ 31E2470E61D5A390405BA41C279D8446 ] asComSvc C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
20:50:04.0141 6056 asComSvc - ok
20:50:04.0156 6056 [ 0466B91EE5767A769E9F8EDB8EF94DDB ] asHmComSvc C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
20:50:04.0156 6056 asHmComSvc - ok
20:50:04.0156 6056 [ 798DE15F187C1F013095BBBEB6FB6197 ] AsIO C:\Windows\syswow64\drivers\AsIO.sys
20:50:04.0156 6056 AsIO - ok
20:50:04.0172 6056 [ 9A262EDD17F8473B91B333D6B031A901 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
20:50:04.0172 6056 aspnet_state - ok
20:50:04.0172 6056 [ AD8947D621FDCA48F1F39F4624B60AA1 ] AsSysCtrlService C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
20:50:04.0172 6056 AsSysCtrlService - ok
20:50:04.0172 6056 [ 1392B92179B07B672720763D9B1028A5 ] AsUpIO C:\Windows\syswow64\drivers\AsUpIO.sys
20:50:04.0172 6056 AsUpIO - ok
20:50:04.0188 6056 [ D0B202843B8ADE504EB304DC1E889A3C ] AsusFanControlService C:\Program Files (x86)\ASUS\AsusFanControlService\1.02.05\AsusFanControlService.exe
20:50:04.0188 6056 AsusFanControlService - ok
20:50:04.0188 6056 [ A5E4CDB420540095D1293C874B5F89AA ] ASUSFILTER C:\Windows\syswow64\drivers\ASUSFILTER.sys
20:50:04.0188 6056 ASUSFILTER - ok
20:50:04.0203 6056 [ 7882BB401553008C3D17251D98474412 ] ASUSstpt C:\Windows\system32\DRIVERS\ASUSstpt.sys
20:50:04.0203 6056 ASUSstpt - ok
20:50:04.0203 6056 [ 23041D6FADF1287457E12CDBE2466554 ] ASUSumsc C:\Windows\system32\DRIVERS\ASUSumsc.sys
20:50:04.0203 6056 ASUSumsc - ok
20:50:04.0203 6056 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
20:50:04.0203 6056 AsyncMac - ok
20:50:04.0203 6056 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
20:50:04.0203 6056 atapi - ok
20:50:04.0203 6056 [ C22D4905DDDF73EB0349D3B0604234A2 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
20:50:04.0203 6056 AtiHDAudioService - ok
20:50:04.0219 6056 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
20:50:04.0219 6056 AudioEndpointBuilder - ok
20:50:04.0219 6056 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
20:50:04.0219 6056 AudioSrv - ok
20:50:04.0219 6056 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
20:50:04.0219 6056 AxInstSV - ok
20:50:04.0234 6056 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
20:50:04.0234 6056 b06bdrv - ok
20:50:04.0234 6056 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
20:50:04.0234 6056 b57nd60a - ok
20:50:04.0234 6056 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
20:50:04.0234 6056 BDESVC - ok
20:50:04.0234 6056 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
20:50:04.0234 6056 Beep - ok
20:50:04.0250 6056 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
20:50:04.0250 6056 BFE - ok
20:50:04.0266 6056 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\system32\qmgr.dll
20:50:04.0266 6056 BITS - ok
20:50:04.0266 6056 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
20:50:04.0266 6056 blbdrive - ok
20:50:04.0266 6056 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
20:50:04.0266 6056 bowser - ok
20:50:04.0266 6056 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
20:50:04.0266 6056 BrFiltLo - ok
20:50:04.0266 6056 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
20:50:04.0266 6056 BrFiltUp - ok
20:50:04.0281 6056 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
20:50:04.0281 6056 BridgeMP - ok
20:50:04.0281 6056 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
20:50:04.0281 6056 Browser - ok
20:50:04.0281 6056 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
20:50:04.0281 6056 Brserid - ok
20:50:04.0281 6056 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
20:50:04.0281 6056 BrSerWdm - ok
20:50:04.0281 6056 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
20:50:04.0281 6056 BrUsbMdm - ok
20:50:04.0281 6056 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
20:50:04.0281 6056 BrUsbSer - ok
20:50:04.0297 6056 [ 832B121E4532919CC49F2438F1DCAA21 ] BthAvrcp C:\Windows\system32\DRIVERS\BthAvrcp.sys
20:50:04.0297 6056 BthAvrcp - ok
20:50:04.0297 6056 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
20:50:04.0297 6056 BthEnum - ok
20:50:04.0297 6056 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
20:50:04.0297 6056 BTHMODEM - ok
20:50:04.0297 6056 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
20:50:04.0297 6056 BthPan - ok
20:50:04.0297 6056 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
20:50:04.0297 6056 BTHPORT - ok
20:50:04.0312 6056 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
20:50:04.0312 6056 bthserv - ok
20:50:04.0312 6056 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
20:50:04.0312 6056 BTHUSB - ok
20:50:04.0312 6056 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
20:50:04.0312 6056 cdfs - ok
20:50:04.0312 6056 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
20:50:04.0312 6056 cdrom - ok
20:50:04.0312 6056 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
20:50:04.0312 6056 CertPropSvc - ok
20:50:04.0312 6056 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
20:50:04.0312 6056 circlass - ok
20:50:04.0328 6056 [ FF60401F1C659CA2ED4BAE85D3FD14DA ] CISVC C:\Windows\system32\CISVC.EXE
20:50:04.0328 6056 CISVC - ok
20:50:04.0328 6056 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
20:50:04.0328 6056 CLFS - ok
20:50:04.0328 6056 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:50:04.0328 6056 clr_optimization_v2.0.50727_32 - ok
20:50:04.0328 6056 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
20:50:04.0328 6056 clr_optimization_v2.0.50727_64 - ok
20:50:04.0344 6056 [ E87213F37A13E2B54391E40934F071D0 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:50:04.0344 6056 clr_optimization_v4.0.30319_32 - ok
20:50:04.0344 6056 [ 4AEDAB50F83580D0B4D6CF78191F92AA ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
20:50:04.0344 6056 clr_optimization_v4.0.30319_64 - ok
20:50:04.0344 6056 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
20:50:04.0344 6056 CmBatt - ok
20:50:04.0344 6056 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
20:50:04.0344 6056 cmdide - ok
20:50:04.0359 6056 [ EBF28856F69CF094A902F884CF989706 ] CNG C:\Windows\system32\Drivers\cng.sys
20:50:04.0359 6056 CNG - ok
20:50:04.0359 6056 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
20:50:04.0359 6056 Compbatt - ok
20:50:04.0359 6056 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
20:50:04.0359 6056 CompositeBus - ok
20:50:04.0359 6056 COMSysApp - ok
20:50:04.0515 6056 cpuz130 - ok
20:50:04.0515 6056 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
20:50:04.0515 6056 crcdisk - ok
20:50:04.0531 6056 [ 6B400F211BEE880A37A1ED0368776BF4 ] CryptSvc C:\Windows\system32\cryptsvc.dll
20:50:04.0531 6056 CryptSvc - ok
20:50:04.0531 6056 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
20:50:04.0531 6056 DcomLaunch - ok
20:50:04.0531 6056 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
20:50:04.0531 6056 defragsvc - ok
20:50:04.0546 6056 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
20:50:04.0546 6056 DfsC - ok
20:50:04.0546 6056 [ 0B3F6C8F93C5C25977EA5A8B2E656357 ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys
20:50:04.0546 6056 dg_ssudbus - ok
20:50:04.0546 6056 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
20:50:04.0546 6056 Dhcp - ok
20:50:04.0546 6056 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
20:50:04.0546 6056 discache - ok
20:50:04.0546 6056 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
20:50:04.0546 6056 Disk - ok
20:50:04.0562 6056 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
20:50:04.0562 6056 Dnscache - ok
20:50:04.0562 6056 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
20:50:04.0562 6056 dot3svc - ok
20:50:04.0562 6056 [ B42ED0320C6E41102FDE0005154849BB ] dot4 C:\Windows\system32\DRIVERS\Dot4.sys
20:50:04.0562 6056 dot4 - ok
20:50:04.0562 6056 [ E9F5969233C5D89F3C35E3A66A52A361 ] Dot4Print C:\Windows\system32\DRIVERS\Dot4Prt.sys
20:50:04.0562 6056 Dot4Print - ok
20:50:04.0562 6056 [ FD05A02B0370BC3000F402E543CA5814 ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
20:50:04.0562 6056 dot4usb - ok
20:50:04.0578 6056 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
20:50:04.0578 6056 DPS - ok
20:50:04.0578 6056 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
20:50:04.0578 6056 drmkaud - ok
20:50:04.0593 6056 [ 1ED08A6264C5C92099D6D1DAE5E8F530 ] DrvAgent64 C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS
20:50:04.0593 6056 DrvAgent64 - ok
20:50:04.0593 6056 [ 6A0E850DDCB136AA3D2FB7234382DF12 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
20:50:04.0593 6056 dtsoftbus01 - ok
20:50:04.0609 6056 [ 88612F1CE3BF42256913BF6E61C70D52 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
20:50:04.0609 6056 DXGKrnl - ok
20:50:04.0609 6056 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
20:50:04.0609 6056 EapHost - ok
20:50:04.0640 6056 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
20:50:04.0640 6056 ebdrv - ok
20:50:04.0640 6056 [ 4D71227301DD8D09097B9E4CC6527E5A ] EFS C:\Windows\System32\lsass.exe
20:50:04.0640 6056 EFS - ok
20:50:04.0656 6056 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
20:50:04.0656 6056 ehRecvr - ok
20:50:04.0656 6056 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
20:50:04.0656 6056 ehSched - ok
20:50:04.0656 6056 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
20:50:04.0656 6056 elxstor - ok
20:50:04.0671 6056 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
20:50:04.0671 6056 ErrDev - ok
20:50:04.0671 6056 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
20:50:04.0671 6056 EventSystem - ok
20:50:04.0671 6056 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
20:50:04.0671 6056 exfat - ok
20:50:04.0671 6056 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
20:50:04.0671 6056 fastfat - ok
20:50:04.0687 6056 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
20:50:04.0687 6056 Fax - ok
20:50:04.0687 6056 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
20:50:04.0687 6056 fdc - ok
20:50:04.0687 6056 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
20:50:04.0687 6056 fdPHost - ok
20:50:04.0687 6056 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
20:50:04.0687 6056 FDResPub - ok
20:50:04.0702 6056 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
20:50:04.0702 6056 FileInfo - ok
20:50:04.0702 6056 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
20:50:04.0702 6056 Filetrace - ok
20:50:04.0702 6056 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
20:50:04.0702 6056 flpydisk - ok
20:50:04.0702 6056 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
20:50:04.0702 6056 FltMgr - ok
20:50:04.0718 6056 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
20:50:04.0718 6056 FontCache - ok
20:50:04.0718 6056 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
20:50:04.0718 6056 FontCache3.0.0.0 - ok
20:50:04.0718 6056 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
20:50:04.0718 6056 FsDepends - ok
20:50:04.0718 6056 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
20:50:04.0718 6056 Fs_Rec - ok
20:50:04.0718 6056 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
20:50:04.0718 6056 fvevol - ok
20:50:04.0734 6056 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
20:50:04.0734 6056 gagp30kx - ok
20:50:04.0734 6056 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
20:50:04.0734 6056 gpsvc - ok
20:50:04.0734 6056 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
20:50:04.0734 6056 gupdate - ok
20:50:04.0749 6056 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
20:50:04.0749 6056 gupdatem - ok
20:50:04.0749 6056 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
20:50:04.0749 6056 hcw85cir - ok
20:50:04.0749 6056 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
20:50:04.0749 6056 HdAudAddService - ok
20:50:04.0749 6056 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
20:50:04.0749 6056 HDAudBus - ok
20:50:04.0749 6056 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
20:50:04.0749 6056 HidBatt - ok
20:50:04.0749 6056 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
20:50:04.0749 6056 HidBth - ok
20:50:04.0765 6056 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
20:50:04.0765 6056 HidIr - ok
20:50:04.0765 6056 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll
20:50:04.0765 6056 hidserv - ok
20:50:04.0765 6056 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
20:50:04.0765 6056 HidUsb - ok
20:50:04.0765 6056 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
20:50:04.0765 6056 hkmsvc - ok
20:50:04.0765 6056 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
20:50:04.0765 6056 HomeGroupListener - ok
20:50:04.0780 6056 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
20:50:04.0780 6056 HomeGroupProvider - ok
20:50:04.0780 6056 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
20:50:04.0780 6056 HpSAMD - ok
20:50:04.0780 6056 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
20:50:04.0780 6056 HTTP - ok
20:50:04.0796 6056 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
20:50:04.0796 6056 hwpolicy - ok
20:50:04.0796 6056 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
20:50:04.0796 6056 i8042prt - ok
20:50:04.0796 6056 [ C224331A54571C8C9162F7714400BBBD ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
20:50:04.0796 6056 iaStor - ok
20:50:04.0796 6056 [ 7D4B9A48430ED57ACA6373B71D5904CA ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
20:50:04.0796 6056 IAStorDataMgrSvc - ok
20:50:04.0812 6056 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
20:50:04.0812 6056 iaStorV - ok
20:50:04.0812 6056 [ 90D95B25F8413F937A2E155F196D892C ] ICCS C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
20:50:04.0812 6056 ICCS - ok
20:50:04.0812 6056 [ C1010ADD3DDAE1196ED21057AF7B2AAE ] ICCWDT C:\Windows\system32\DRIVERS\ICCWDT.sys
20:50:04.0812 6056 ICCWDT - ok
20:50:04.0827 6056 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
20:50:04.0827 6056 idsvc - ok
20:50:04.0827 6056 IEEtwCollectorService - ok
20:50:04.0827 6056 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
20:50:04.0827 6056 iirsp - ok
20:50:04.0827 6056 [ 344789398EC3EE5A4E00C52B31847946 ] IKEEXT C:\Windows\System32\ikeext.dll
20:50:04.0843 6056 IKEEXT - ok
20:50:04.0858 6056 [ 7A3585C4000C8340AE6B7FA08F9EF50F ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
20:50:04.0874 6056 IntcAzAudAddService - ok
20:50:04.0874 6056 [ C99F8E90DE4B8F0C7FE15BB1CBCD29DC ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
20:50:04.0874 6056 Intel(R) Capability Licensing Service Interface - ok
20:50:04.0874 6056 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
20:50:04.0874 6056 intelide - ok
20:50:04.0890 6056 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
20:50:04.0890 6056 intelppm - ok
20:50:04.0890 6056 [ A01C412699B6F21645B2885C2BAE4454 ] IOMap C:\Windows\system32\drivers\IOMap64.sys
20:50:04.0890 6056 IOMap - ok
20:50:04.0890 6056 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
20:50:04.0890 6056 IPBusEnum - ok
20:50:04.0890 6056 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:50:04.0890 6056 IpFilterDriver - ok
20:50:04.0890 6056 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
20:50:04.0905 6056 iphlpsvc - ok
20:50:04.0905 6056 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
20:50:04.0905 6056 IPMIDRV - ok
20:50:04.0905 6056 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
20:50:04.0905 6056 IPNAT - ok
20:50:04.0905 6056 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
20:50:04.0905 6056 IRENUM - ok
20:50:04.0905 6056 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
20:50:04.0905 6056 isapnp - ok
20:50:04.0905 6056 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
20:50:04.0905 6056 iScsiPrt - ok
20:50:04.0921 6056 [ D596D915CF091DA1F8CE4BD38BB5D509 ] iusb3hcs C:\Windows\system32\DRIVERS\iusb3hcs.sys
20:50:04.0921 6056 iusb3hcs - ok
20:50:04.0921 6056 [ 023896E23B61543A15A230EED996D911 ] iusb3hub C:\Windows\system32\DRIVERS\iusb3hub.sys
20:50:04.0921 6056 iusb3hub - ok
20:50:04.0921 6056 [ 7FAEC13F1ADD619F4B5B2D2CBF841E8E ] iusb3xhc C:\Windows\system32\DRIVERS\iusb3xhc.sys
20:50:04.0921 6056 iusb3xhc - ok
20:50:04.0936 6056 [ 78ABBE558F57144047F10A0F50FE4B2F ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
20:50:04.0936 6056 jhi_service - ok
20:50:04.0936 6056 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
20:50:04.0936 6056 kbdclass - ok
20:50:04.0936 6056 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
20:50:04.0936 6056 kbdhid - ok
20:50:04.0936 6056 [ 4D71227301DD8D09097B9E4CC6527E5A ] KeyIso C:\Windows\system32\lsass.exe
20:50:04.0936 6056 KeyIso - ok
20:50:04.0936 6056 [ 8F489706472F7E9A06BAAA198703FA64 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
20:50:04.0936 6056 KSecDD - ok
20:50:04.0936 6056 [ 868A2CAAB12EFC7A021682BCA0EEC54C ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
20:50:04.0936 6056 KSecPkg - ok
20:50:04.0952 6056 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
20:50:04.0952 6056 ksthunk - ok
20:50:04.0952 6056 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
20:50:04.0952 6056 KtmRm - ok
20:50:04.0952 6056 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll
20:50:04.0952 6056 LanmanServer - ok
20:50:04.0952 6056 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
20:50:04.0952 6056 LanmanWorkstation - ok
20:50:04.0968 6056 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
20:50:04.0968 6056 lltdio - ok
20:50:04.0968 6056 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
20:50:04.0968 6056 lltdsvc - ok
20:50:04.0968 6056 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
20:50:04.0968 6056 lmhosts - ok
20:50:04.0968 6056 [ 2C24DC448DBE8DB9BE1441B824C57E79 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
20:50:04.0968 6056 LMS - ok
20:50:04.0983 6056 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
20:50:04.0983 6056 LSI_FC - ok
20:50:04.0983 6056 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
20:50:04.0983 6056 LSI_SAS - ok
20:50:04.0983 6056 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
20:50:04.0983 6056 LSI_SAS2 - ok
20:50:04.0983 6056 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
20:50:04.0983 6056 LSI_SCSI - ok
20:50:04.0983 6056 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
20:50:04.0983 6056 luafv - ok
20:50:04.0983 6056 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
20:50:04.0983 6056 Mcx2Svc - ok
20:50:04.0999 6056 [ 7CF1B716372B89568AE4C0FE769F5869 ] MDM C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
20:50:04.0999 6056 MDM - ok
20:50:04.0999 6056 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
20:50:04.0999 6056 megasas - ok
20:50:04.0999 6056 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
20:50:04.0999 6056 MegaSR - ok
20:50:04.0999 6056 [ CFBDB416E1DC172327C099DB122FE15D ] MEIx64 C:\Windows\system32\DRIVERS\TeeDriverx64.sys
20:50:04.0999 6056 MEIx64 - ok
20:50:05.0046 6056 Microsoft SharePoint Workspace Audit Service - ok
20:50:05.0046 6056 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
20:50:05.0046 6056 MMCSS - ok
20:50:05.0046 6056 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
20:50:05.0046 6056 Modem - ok
20:50:05.0046 6056 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
20:50:05.0046 6056 monitor - ok
20:50:05.0046 6056 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
20:50:05.0046 6056 mouclass - ok
20:50:05.0046 6056 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
20:50:05.0046 6056 mouhid - ok
20:50:05.0046 6056 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
20:50:05.0046 6056 mountmgr - ok
20:50:05.0061 6056 [ 5E0686615A80A6279B2314E13CD23F6E ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
20:50:05.0061 6056 MozillaMaintenance - ok
20:50:05.0061 6056 [ C6B88D62F20AC646C6BD5C032EC2FAF9 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
20:50:05.0061 6056 MpFilter - ok
20:50:05.0061 6056 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
20:50:05.0061 6056 mpio - ok
20:50:05.0061 6056 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
20:50:05.0061 6056 mpsdrv - ok
20:50:05.0077 6056 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
20:50:05.0077 6056 MpsSvc - ok
20:50:05.0077 6056 [ 1A4F75E63C9FB84B85DFFC6B63FD5404 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
20:50:05.0077 6056 MRxDAV - ok
20:50:05.0077 6056 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
20:50:05.0077 6056 mrxsmb - ok
20:50:05.0092 6056 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:50:05.0092 6056 mrxsmb10 - ok
20:50:05.0092 6056 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:50:05.0092 6056 mrxsmb20 - ok
20:50:05.0092 6056 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
20:50:05.0092 6056 msahci - ok
20:50:05.0092 6056 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
20:50:05.0092 6056 msdsm - ok
20:50:05.0108 6056 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
20:50:05.0108 6056 MSDTC - ok
20:50:05.0108 6056 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
20:50:05.0108 6056 Msfs - ok
20:50:05.0108 6056 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
20:50:05.0108 6056 mshidkmdf - ok
20:50:05.0108 6056 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
20:50:05.0108 6056 msisadrv - ok
20:50:05.0108 6056 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
20:50:05.0108 6056 MSiSCSI - ok
20:50:05.0108 6056 msiserver - ok
20:50:05.0108 6056 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
20:50:05.0108 6056 MSKSSRV - ok
20:50:05.0124 6056 [ 7675E15D1B2180745E4DA4D26AAD7385 ] MsMpSvc C:\Program Files\Microsoft Security Client\MsMpEng.exe
20:50:05.0124 6056 MsMpSvc - ok
20:50:05.0124 6056 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
20:50:05.0124 6056 MSPCLOCK - ok
20:50:05.0124 6056 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
20:50:05.0124 6056 MSPQM - ok
20:50:05.0124 6056 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
20:50:05.0124 6056 MsRPC - ok
20:50:05.0124 6056 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
20:50:05.0124 6056 mssmbios - ok
20:50:05.0139 6056 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
20:50:05.0139 6056 MSTEE - ok
20:50:05.0139 6056 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
20:50:05.0139 6056 MTConfig - ok
20:50:05.0139 6056 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
20:50:05.0139 6056 Mup - ok
20:50:05.0139 6056 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
20:50:05.0139 6056 napagent - ok
20:50:05.0155 6056 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
20:50:05.0155 6056 NativeWifiP - ok
20:50:05.0155 6056 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
20:50:05.0155 6056 NDIS - ok
20:50:05.0155 6056 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
20:50:05.0155 6056 NdisCap - ok
20:50:05.0170 6056 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
20:50:05.0170 6056 NdisTapi - ok
20:50:05.0170 6056 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
20:50:05.0170 6056 Ndisuio - ok
20:50:05.0170 6056 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
20:50:05.0170 6056 NdisWan - ok
20:50:05.0170 6056 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
20:50:05.0170 6056 NDProxy - ok
20:50:05.0170 6056 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
20:50:05.0170 6056 NetBIOS - ok
20:50:05.0170 6056 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
20:50:05.0170 6056 NetBT - ok
20:50:05.0186 6056 [ 4D71227301DD8D09097B9E4CC6527E5A ] Netlogon C:\Windows\system32\lsass.exe
20:50:05.0186 6056 Netlogon - ok
20:50:05.0186 6056 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
20:50:05.0186 6056 Netman - ok
20:50:05.0186 6056 [ 21318671BCAD3ACF16638F98D4D00973 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:50:05.0186 6056 NetMsmqActivator - ok
20:50:05.0186 6056 [ 21318671BCAD3ACF16638F98D4D00973 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:50:05.0202 6056 NetPipeActivator - ok
20:50:05.0202 6056 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
20:50:05.0202 6056 netprofm - ok
20:50:05.0202 6056 [ 21318671BCAD3ACF16638F98D4D00973 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:50:05.0202 6056 NetTcpActivator - ok
20:50:05.0202 6056 [ 21318671BCAD3ACF16638F98D4D00973 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:50:05.0202 6056 NetTcpPortSharing - ok
20:50:05.0202 6056 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
20:50:05.0202 6056 nfrd960 - ok
20:50:05.0217 6056 [ ACE8C64C57E4A711473C8BC10ADF692B ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys
20:50:05.0217 6056 NisDrv - ok
20:50:05.0217 6056 [ 6247E8B31ED0A9D6BC5A26276E49BEB3 ] NisSrv C:\Program Files\Microsoft Security Client\NisSrv.exe
20:50:05.0217 6056 NisSrv - ok
20:50:05.0217 6056 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
20:50:05.0217 6056 NlaSvc - ok
20:50:05.0217 6056 [ 1381E95D4E0F94F22DD484B5F8C1D61D ] nmwcd C:\Windows\system32\drivers\ccdcmbx64.sys
20:50:05.0217 6056 nmwcd - ok
20:50:05.0233 6056 [ 205510CDB7B6084BF31760B5D06F9242 ] nmwcdc C:\Windows\system32\drivers\ccdcmbox64.sys
20:50:05.0233 6056 nmwcdc - ok
20:50:05.0233 6056 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
20:50:05.0233 6056 Npfs - ok
20:50:05.0233 6056 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
20:50:05.0233 6056 nsi - ok
20:50:05.0233 6056 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
20:50:05.0233 6056 nsiproxy - ok
20:50:05.0248 6056 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
20:50:05.0248 6056 Ntfs - ok
20:50:05.0248 6056 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
20:50:05.0248 6056 Null - ok
20:50:05.0248 6056 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
20:50:05.0248 6056 nvraid - ok
20:50:05.0264 6056 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
20:50:05.0264 6056 nvstor - ok
20:50:05.0264 6056 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
20:50:05.0264 6056 nv_agp - ok
20:50:05.0264 6056 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
20:50:05.0264 6056 ohci1394 - ok
20:50:05.0264 6056 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
20:50:05.0264 6056 ose - ok
20:50:05.0295 6056 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
20:50:05.0311 6056 osppsvc - ok
20:50:05.0311 6056 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
20:50:05.0311 6056 p2pimsvc - ok
20:50:05.0326 6056 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
20:50:05.0326 6056 p2psvc - ok
20:50:05.0326 6056 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys
20:50:05.0326 6056 Parport - ok
20:50:05.0326 6056 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
20:50:05.0326 6056 partmgr - ok
20:50:05.0326 6056 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
20:50:05.0326 6056 PcaSvc - ok
20:50:05.0342 6056 [ 3FDE033DFB0D07F8B7D5C9A3044AA121 ] pccsmcfd C:\Windows\system32\DRIVERS\pccsmcfdx64.sys
20:50:05.0342 6056 pccsmcfd - ok
20:50:05.0342 6056 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
20:50:05.0342 6056 pci - ok
20:50:05.0342 6056 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
20:50:05.0342 6056 pciide - ok
20:50:05.0342 6056 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
20:50:05.0342 6056 pcmcia - ok
20:50:05.0342 6056 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
20:50:05.0342 6056 pcw - ok
20:50:05.0358 6056 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
20:50:05.0358 6056 PEAUTH - ok
20:50:05.0373 6056 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
20:50:05.0373 6056 PerfHost - ok
20:50:05.0389 6056 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
20:50:05.0389 6056 pla - ok
20:50:05.0389 6056 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
20:50:05.0389 6056 PlugPlay - ok
20:50:05.0451 6056 [ 7C725A94A89E3C1EA7D492D5E79698A2 ] PMBDeviceInfoProvider D:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
20:50:05.0451 6056 PMBDeviceInfoProvider - ok

20:50:05.0451 6056 PnkBstrA - ok
20:50:05.0467 6056 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
20:50:05.0467 6056 PNRPAutoReg - ok
20:50:05.0467 6056 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
20:50:05.0467 6056 PNRPsvc - ok
20:50:05.0467 6056 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
20:50:05.0467 6056 PolicyAgent - ok
20:50:05.0482 6056 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
20:50:05.0482 6056 Power - ok
20:50:05.0482 6056 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
20:50:05.0482 6056 PptpMiniport - ok
20:50:05.0482 6056 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys
20:50:05.0482 6056 Processor - ok
20:50:05.0482 6056 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
20:50:05.0482 6056 ProfSvc - ok
20:50:05.0482 6056 [ 4D71227301DD8D09097B9E4CC6527E5A ] ProtectedStorage C:\Windows\system32\lsass.exe
20:50:05.0482 6056 ProtectedStorage - ok
20:50:05.0498 6056 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
20:50:05.0498 6056 Psched - ok
20:50:05.0498 6056 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
20:50:05.0514 6056 ql2300 - ok
20:50:05.0514 6056 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
20:50:05.0514 6056 ql40xx - ok
20:50:05.0514 6056 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
20:50:05.0514 6056 QWAVE - ok
20:50:05.0514 6056 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
20:50:05.0514 6056 QWAVEdrv - ok
20:50:05.0514 6056 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
20:50:05.0514 6056 RasAcd - ok
20:50:05.0529 6056 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
20:50:05.0529 6056 RasAgileVpn - ok
20:50:05.0529 6056 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
20:50:05.0529 6056 RasAuto - ok
20:50:05.0529 6056 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
20:50:05.0529 6056 Rasl2tp - ok
20:50:05.0529 6056 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
20:50:05.0529 6056 RasMan - ok
20:50:05.0545 6056 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
20:50:05.0545 6056 RasPppoe - ok
20:50:05.0545 6056 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
20:50:05.0545 6056 RasSstp - ok
20:50:05.0545 6056 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
20:50:05.0545 6056 rdbss - ok
20:50:05.0545 6056 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
20:50:05.0545 6056 rdpbus - ok
20:50:05.0545 6056 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
20:50:05.0545 6056 RDPCDD - ok
20:50:05.0545 6056 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
20:50:05.0545 6056 RDPENCDD - ok
20:50:05.0560 6056 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
20:50:05.0560 6056 RDPREFMP - ok
20:50:05.0560 6056 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
20:50:05.0560 6056 RDPWD - ok
20:50:05.0560 6056 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
20:50:05.0560 6056 rdyboost - ok
20:50:05.0560 6056 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
20:50:05.0560 6056 RemoteAccess - ok
20:50:05.0576 6056 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
20:50:05.0576 6056 RemoteRegistry - ok
20:50:05.0576 6056 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
20:50:05.0576 6056 RFCOMM - ok
20:50:05.0576 6056 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
20:50:05.0576 6056 RpcEptMapper - ok
20:50:05.0576 6056 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
20:50:05.0576 6056 RpcLocator - ok
20:50:05.0592 6056 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
20:50:05.0592 6056 RpcSs - ok
20:50:05.0592 6056 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
20:50:05.0592 6056 rspndr - ok
20:50:05.0592 6056 [ AC4CA62572CA516945AB92D6C9F501F4 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
20:50:05.0607 6056 RTL8167 - ok
20:50:05.0607 6056 [ E16B7C030A05EF649B18FAB0A93D871F ] RtNdPt60 C:\Windows\system32\DRIVERS\RtNdPt60.sys
20:50:05.0607 6056 RtNdPt60 - ok
20:50:05.0607 6056 [ 1DE78F5008120CD79B34C12394DCD493 ] RTTEAMPT C:\Windows\system32\DRIVERS\RtTeam60.sys
20:50:05.0607 6056 RTTEAMPT - ok
20:50:05.0607 6056 [ ED0624ED83121E1BC141F49B1316CAA0 ] RTVLANPT C:\Windows\system32\DRIVERS\RtVlan620.sys
20:50:05.0607 6056 RTVLANPT - ok
20:50:05.0607 6056 [ 4D71227301DD8D09097B9E4CC6527E5A ] SamSs C:\Windows\system32\lsass.exe
20:50:05.0607 6056 SamSs - ok
20:50:05.0607 6056 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
20:50:05.0607 6056 sbp2port - ok
20:50:05.0607 6056 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
20:50:05.0623 6056 SCardSvr - ok
20:50:05.0623 6056 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
20:50:05.0623 6056 scfilter - ok
20:50:05.0623 6056 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
20:50:05.0623 6056 Schedule - ok
20:50:05.0638 6056 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
20:50:05.0638 6056 SCPolicySvc - ok
20:50:05.0638 6056 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
20:50:05.0638 6056 SDRSVC - ok
20:50:05.0638 6056 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
20:50:05.0638 6056 secdrv - ok
20:50:05.0638 6056 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
20:50:05.0638 6056 seclogon - ok
20:50:05.0638 6056 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\system32\sens.dll
20:50:05.0638 6056 SENS - ok
20:50:05.0654 6056 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
20:50:05.0654 6056 SensrSvc - ok
20:50:05.0654 6056 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
20:50:05.0654 6056 Serenum - ok
20:50:05.0654 6056 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
20:50:05.0654 6056 Serial - ok
20:50:05.0654 6056 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys
20:50:05.0654 6056 sermouse - ok
20:50:05.0654 6056 [ 78F7BB9F4924BE164294C59B8C3FC096 ] ServiceLayer C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
20:50:05.0670 6056 ServiceLayer - ok
20:50:05.0670 6056 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
20:50:05.0670 6056 SessionEnv - ok
20:50:05.0670 6056 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
20:50:05.0670 6056 sffdisk - ok
20:50:05.0670 6056 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
20:50:05.0670 6056 sffp_mmc - ok
20:50:05.0670 6056 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
20:50:05.0670 6056 sffp_sd - ok
20:50:05.0670 6056 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
20:50:05.0670 6056 sfloppy - ok
20:50:05.0685 6056 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
20:50:05.0685 6056 SharedAccess - ok
20:50:05.0685 6056 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
20:50:05.0685 6056 ShellHWDetection - ok
20:50:05.0685 6056 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
20:50:05.0685 6056 SiSRaid2 - ok
20:50:05.0685 6056 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
20:50:05.0685 6056 SiSRaid4 - ok
20:50:05.0701 6056 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
20:50:05.0701 6056 Smb - ok
20:50:05.0701 6056 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
20:50:05.0701 6056 SNMPTRAP - ok
20:50:05.0701 6056 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
20:50:05.0701 6056 spldr - ok
20:50:05.0701 6056 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
20:50:05.0716 6056 Spooler - ok
20:50:05.0748 6056 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
20:50:05.0748 6056 sppsvc - ok
20:50:05.0748 6056 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
20:50:05.0748 6056 sppuinotify - ok
20:50:05.0763 6056 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
20:50:05.0763 6056 srv - ok
20:50:05.0763 6056 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
20:50:05.0763 6056 srv2 - ok
20:50:05.0763 6056 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
20:50:05.0763 6056 srvnet - ok
20:50:05.0779 6056 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
20:50:05.0779 6056 SSDPSRV - ok
20:50:05.0779 6056 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
20:50:05.0779 6056 SstpSvc - ok
20:50:05.0779 6056 [ EA8F41484CCC5BA6A1455C2AD3D1BE3C ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys
20:50:05.0779 6056 ssudmdm - ok
20:50:05.0779 6056 Steam Client Service - ok
20:50:05.0779 6056 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys
20:50:05.0779 6056 stexstor - ok
20:50:05.0794 6056 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
20:50:05.0794 6056 stisvc - ok
20:50:05.0794 6056 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
20:50:05.0794 6056 swenum - ok
20:50:05.0794 6056 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
20:50:05.0794 6056 swprv - ok
20:50:05.0810 6056 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
20:50:05.0826 6056 SysMain - ok
20:50:05.0826 6056 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
20:50:05.0826 6056 TabletInputService - ok
20:50:05.0826 6056 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
20:50:05.0826 6056 TapiSrv - ok
20:50:05.0841 6056 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
20:50:05.0841 6056 TBS - ok
20:50:05.0841 6056 [ 40AF23633D197905F03AB5628C558C51 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
20:50:05.0857 6056 Tcpip - ok
20:50:05.0872 6056 [ 40AF23633D197905F03AB5628C558C51 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
20:50:05.0872 6056 TCPIP6 - ok
20:50:05.0872 6056 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
20:50:05.0872 6056 tcpipreg - ok
20:50:05.0872 6056 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
20:50:05.0872 6056 TDPIPE - ok
20:50:05.0872 6056 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
20:50:05.0872 6056 TDTCP - ok
20:50:05.0888 6056 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
20:50:05.0888 6056 tdx - ok
20:50:05.0888 6056 [ 1DE78F5008120CD79B34C12394DCD493 ] TEAM C:\Windows\system32\DRIVERS\RtTeam60.sys
20:50:05.0888 6056 TEAM - ok
20:50:05.0966 6056 [ DF4A7E1E2BA788E28747F1EF49692ED6 ] TeamViewer9 D:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
20:50:05.0982 6056 TeamViewer9 - ok
20:50:05.0997 6056 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
20:50:05.0997 6056 TermDD - ok
20:50:05.0997 6056 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
20:50:05.0997 6056 TermService - ok
20:50:05.0997 6056 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
20:50:06.0013 6056 Themes - ok
20:50:06.0013 6056 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
20:50:06.0013 6056 THREADORDER - ok
20:50:06.0013 6056 [ E4FAD21646088D79F8889B6531396ACF ] TomTomHOMEService C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
20:50:06.0013 6056 TomTomHOMEService - ok
20:50:06.0013 6056 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
20:50:06.0013 6056 TrkWks - ok
20:50:06.0013 6056 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
20:50:06.0013 6056 TrustedInstaller - ok
20:50:06.0028 6056 [ 4CE278FC9671BA81A138D70823FCAA09 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
20:50:06.0028 6056 tssecsrv - ok
20:50:06.0028 6056 [ E9981ECE8D894CEF7038FD1D040EB426 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
20:50:06.0028 6056 TsUsbFlt - ok
20:50:06.0028 6056 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
20:50:06.0028 6056 TsUsbGD - ok
20:50:06.0028 6056 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
20:50:06.0028 6056 tunnel - ok
20:50:06.0028 6056 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
20:50:06.0028 6056 uagp35 - ok
20:50:06.0028 6056 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
20:50:06.0044 6056 udfs - ok
20:50:06.0044 6056 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
20:50:06.0044 6056 UI0Detect - ok
20:50:06.0044 6056 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
20:50:06.0044 6056 uliagpkx - ok
20:50:06.0044 6056 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
20:50:06.0044 6056 umbus - ok
20:50:06.0044 6056 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
20:50:06.0044 6056 UmPass - ok
20:50:06.0060 6056 [ E1A119AD21F5AFE22EB516C549306D3D ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
20:50:06.0060 6056 UNS - ok
20:50:06.0060 6056 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
20:50:06.0060 6056 upnphost - ok
20:50:06.0060 6056 [ 311C90F0767A63000AC35DD0A7078A30 ] upperdev C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys
20:50:06.0060 6056 upperdev - ok
20:50:06.0060 6056 [ DCA68B0943D6FA415F0C56C92158A83A ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
20:50:06.0060 6056 usbccgp - ok
20:50:06.0060 6056 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31 ] usbcir C:\Windows\system32\drivers\usbcir.sys
20:50:06.0075 6056 usbcir - ok
20:50:06.0075 6056 [ 18A85013A3E0F7E1755365D287443965 ] usbehci C:\Windows\system32\drivers\usbehci.sys
20:50:06.0075 6056 usbehci - ok
20:50:06.0075 6056 [ 8D1196CFBB223621F2C67D45710F25BA ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
20:50:06.0075 6056 usbhub - ok
20:50:06.0075 6056 [ 765A92D428A8DB88B960DA5A8D6089DC ] usbohci C:\Windows\system32\drivers\usbohci.sys
20:50:06.0075 6056 usbohci - ok
20:50:06.0075 6056 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\drivers\usbprint.sys
20:50:06.0075 6056 usbprint - ok
20:50:06.0075 6056 [ B57B4F0BEC4270A281B9F8537EB2FA04 ] usbser C:\Windows\system32\drivers\usbser.sys
20:50:06.0075 6056 usbser - ok
20:50:06.0091 6056 [ C03DA998E412D69D18DD11D835229AF0 ] UsbserFilt C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys
20:50:06.0091 6056 UsbserFilt - ok
20:50:06.0091 6056 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:50:06.0091 6056 USBSTOR - ok
20:50:06.0091 6056 [ DD253AFC3BC6CBA412342DE60C3647F3 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
20:50:06.0091 6056 usbuhci - ok
20:50:06.0091 6056 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
20:50:06.0091 6056 UxSms - ok
20:50:06.0091 6056 [ 4D71227301DD8D09097B9E4CC6527E5A ] VaultSvc C:\Windows\system32\lsass.exe
20:50:06.0091 6056 VaultSvc - ok
20:50:06.0091 6056 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
20:50:06.0091 6056 vdrvroot - ok
20:50:06.0106 6056 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
20:50:06.0106 6056 vds - ok
20:50:06.0106 6056 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
20:50:06.0106 6056 vga - ok
20:50:06.0106 6056 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
20:50:06.0106 6056 VgaSave - ok
20:50:06.0106 6056 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
20:50:06.0106 6056 vhdmp - ok
20:50:06.0106 6056 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
20:50:06.0106 6056 viaide - ok
20:50:06.0106 6056 [ ED0624ED83121E1BC141F49B1316CAA0 ] VLAN C:\Windows\system32\DRIVERS\RtVLAN620.sys
20:50:06.0106 6056 VLAN - ok
20:50:06.0122 6056 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
20:50:06.0122 6056 volmgr - ok
20:50:06.0122 6056 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
20:50:06.0122 6056 volmgrx - ok
20:50:06.0122 6056 [ DF8126BD41180351A093A3AD2FC8903B ] volsnap C:\Windows\system32\drivers\volsnap.sys
20:50:06.0122 6056 volsnap - ok
20:50:06.0122 6056 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
20:50:06.0122 6056 vsmraid - ok
20:50:06.0138 6056 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
20:50:06.0153 6056 VSS - ok
20:50:06.0153 6056 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
20:50:06.0153 6056 vwifibus - ok
20:50:06.0153 6056 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
20:50:06.0153 6056 W32Time - ok
20:50:06.0169 6056 [ B32009DB1972E7F2C227499289C4384A ] W3SVC C:\Windows\system32\inetsrv\iisw3adm.dll
20:50:06.0169 6056 W3SVC - ok
20:50:06.0169 6056 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys
20:50:06.0169 6056 WacomPen - ok
20:50:06.0169 6056 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
20:50:06.0169 6056 WANARP - ok
20:50:06.0169 6056 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
20:50:06.0169 6056 Wanarpv6 - ok
20:50:06.0169 6056 [ B32009DB1972E7F2C227499289C4384A ] WAS C:\Windows\system32\inetsrv\iisw3adm.dll
20:50:06.0169 6056 WAS - ok
20:50:06.0184 6056 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
20:50:06.0184 6056 WatAdminSvc - ok
20:50:06.0200 6056 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
20:50:06.0216 6056 wbengine - ok
20:50:06.0216 6056 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
20:50:06.0216 6056 WbioSrvc - ok
20:50:06.0216 6056 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
20:50:06.0216 6056 wcncsvc - ok
20:50:06.0216 6056 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
20:50:06.0216 6056 WcsPlugInService - ok
20:50:06.0216 6056 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys
20:50:06.0231 6056 Wd - ok
20:50:06.0231 6056 [ 3A164E4C3F453230B6F6C3BD319D83C1 ] WDBackup C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
20:50:06.0231 6056 WDBackup - ok
20:50:06.0231 6056 [ A3D04EBF5227886029B4532F20D026F7 ] WDC_SAM C:\Windows\system32\DRIVERS\wdcsam64.sys
20:50:06.0231 6056 WDC_SAM - ok
20:50:06.0247 6056 [ AFA293DAE84019BB65E17F926E9F5185 ] WDDriveService C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
20:50:06.0247 6056 WDDriveService - ok
20:50:06.0247 6056 [ E2C933EDBC389386EBE6D2BA953F43D8 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
20:50:06.0247 6056 Wdf01000 - ok
20:50:06.0247 6056 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
20:50:06.0247 6056 WdiServiceHost - ok
20:50:06.0262 6056 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
20:50:06.0262 6056 WdiSystemHost - ok
20:50:06.0262 6056 [ 0EB0E5D22B1760F2DBCE632F2DD7A54D ] WebClient C:\Windows\System32\webclnt.dll
20:50:06.0262 6056 WebClient - ok
20:50:06.0262 6056 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
20:50:06.0262 6056 Wecsvc - ok
20:50:06.0262 6056 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
20:50:06.0262 6056 wercplsupport - ok
20:50:06.0278 6056 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
20:50:06.0278 6056 WerSvc - ok
20:50:06.0278 6056 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
20:50:06.0278 6056 WfpLwf - ok
20:50:06.0278 6056 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
20:50:06.0278 6056 WIMMount - ok
20:50:06.0278 6056 WinDefend - ok
20:50:06.0278 6056 WinHttpAutoProxySvc - ok
20:50:06.0294 6056 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
20:50:06.0294 6056 Winmgmt - ok
20:50:06.0309 6056 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
20:50:06.0309 6056 WinRM - ok
20:50:06.0309 6056 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
20:50:06.0309 6056 WinUsb - ok
20:50:06.0325 6056 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
20:50:06.0325 6056 Wlansvc - ok
20:50:06.0325 6056 [ 680A7846370000D20D7E74917D5B7936 ] WmBEnum C:\Windows\system32\drivers\WmBEnum.sys
20:50:06.0325 6056 WmBEnum - ok
20:50:06.0325 6056 [ 14C35BA8189C6F65D839163AA285E954 ] WmFilter C:\Windows\system32\drivers\WmFilter.sys
20:50:06.0325 6056 WmFilter - ok
20:50:06.0340 6056 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
20:50:06.0340 6056 WmiAcpi - ok
20:50:06.0340 6056 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
20:50:06.0340 6056 wmiApSrv - ok
20:50:06.0340 6056 WMPNetworkSvc - ok
20:50:06.0340 6056 [ 8488DD91A3EE54A8E29F02AD7BB8201E ] WmVirHid C:\Windows\system32\drivers\WmVirHid.sys
20:50:06.0340 6056 WmVirHid - ok
20:50:06.0340 6056 [ 14802B3A30AA849C97CB968CCC813BF3 ] WmXlCore C:\Windows\system32\drivers\WmXlCore.sys
20:50:06.0340 6056 WmXlCore - ok
20:50:06.0340 6056 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
20:50:06.0340 6056 WPCSvc - ok
20:50:06.0356 6056 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
20:50:06.0356 6056 WPDBusEnum - ok
20:50:06.0356 6056 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
20:50:06.0356 6056 ws2ifsl - ok
20:50:06.0356 6056 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\system32\wscsvc.dll
20:50:06.0356 6056 wscsvc - ok
20:50:06.0356 6056 WSearch - ok
20:50:06.0372 6056 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
20:50:06.0387 6056 wuauserv - ok
20:50:06.0387 6056 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
20:50:06.0387 6056 WudfPf - ok
20:50:06.0387 6056 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
20:50:06.0387 6056 WUDFRd - ok
20:50:06.0387 6056 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
20:50:06.0387 6056 wudfsvc - ok
20:50:06.0387 6056 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\Windows\System32\wwansvc.dll
20:50:06.0403 6056 WwanSvc - ok
20:50:06.0403 6056 ================ Scan global ===============================
20:50:06.0403 6056 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
20:50:06.0403 6056 [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll
20:50:06.0403 6056 [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll
20:50:06.0403 6056 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
20:50:06.0418 6056 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
20:50:06.0418 6056 [Global] - ok
20:50:06.0418 6056 ================ Scan MBR ==================================
20:50:06.0418 6056 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
20:50:06.0465 6056 \Device\Harddisk0\DR0 - ok
20:50:06.0465 6056 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
20:50:06.0465 6056 \Device\Harddisk1\DR1 - ok
20:50:06.0465 6056 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk2\DR2
20:50:06.0465 6056 \Device\Harddisk2\DR2 - ok
20:50:06.0481 6056 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk3\DR3
20:50:06.0481 6056 \Device\Harddisk3\DR3 - ok
20:50:08.0400 6056 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk4\DR4
20:50:08.0400 6056 \Device\Harddisk4\DR4 - ok
20:50:08.0400 6056 ================ Scan VBR ==================================
20:50:08.0415 6056 [ E5FD4A5E32EECFFDC3173D7C64ADF2EA ] \Device\Harddisk0\DR0\Partition1
20:50:08.0415 6056 \Device\Harddisk0\DR0\Partition1 - ok
20:50:08.0415 6056 [ 65926AD60B032631A45412C9BB7D71B6 ] \Device\Harddisk0\DR0\Partition2
20:50:08.0415 6056 \Device\Harddisk0\DR0\Partition2 - ok
20:50:08.0415 6056 [ 39056BE09B4603912F0FC060D7D977A0 ] \Device\Harddisk1\DR1\Partition1
20:50:08.0415 6056 \Device\Harddisk1\DR1\Partition1 - ok
20:50:08.0415 6056 [ 7F58D3980A8594425132B70E91EB1A56 ] \Device\Harddisk1\DR1\Partition2
20:50:08.0415 6056 \Device\Harddisk1\DR1\Partition2 - ok
20:50:08.0415 6056 [ 834BF5DC07569C2CFDCAA51AB5E6EAA9 ] \Device\Harddisk2\DR2\Partition1
20:50:08.0415 6056 \Device\Harddisk2\DR2\Partition1 - ok
20:50:08.0415 6056 [ D8653493567AEFD6D87CD9BEC7361C2D ] \Device\Harddisk3\DR3\Partition1
20:50:08.0415 6056 \Device\Harddisk3\DR3\Partition1 - ok
20:50:08.0415 6056 [ 44A9D481523D76DE09D9EC9F072073C5 ] \Device\Harddisk4\DR4\Partition1
20:50:08.0415 6056 \Device\Harddisk4\DR4\Partition1 - ok
20:50:08.0415 6056 ============================================================
20:50:08.0415 6056 Scan finished
20:50:08.0415 6056 ============================================================
20:50:08.0431 6524 Detected object count: 0
20:50:08.0431 6524 Actual detected object count: 0

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "

- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání- Finished "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

====================================================

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je označen pro odstranění, stačí restartovat počítač.

Pokud budou problémy , spusť v nouz. režimu.

RogueKiller V8.8.8 _x64_ [Feb 19 2014] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Milos [Práva správce]
Mód : Kontrola -- Datum : 02/21/2014 07:48:24
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 6 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> NALEZENO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 1 ¤¤¤
[V2][SUSP PATH] com.flash.WidgetBrowser : C:\Users\Milos\AppData\Roaming\com.flash.WidgetBrowser\bfgminer.vbs [x] -> NALEZENO

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Corsair Force GT +++++
--- User ---
[MBR] 7b188c803c4e345ef2604c47395de6d5
[BSP] 7ae8a6f67efea01a3daba88bb7c87168 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 114371 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ IDE) WDC WD20EARX-00PASB0 +++++
--- User ---
[MBR] a83dbfeb0608c405668a9b0cdb991b94
[BSP] 2e52001a7717db68ac556401dfc8db91 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1003122 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2054395904 | Size: 904604 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive2: (\\.\PHYSICALDRIVE2 @ IDE) SAMSUNG HD753LJ +++++
--- User ---
[MBR] 9447ff11259162d8346e6aa88d129c5f
[BSP] 9217f0087288776d809649f2583df326 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 715402 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive3: (\\.\PHYSICALDRIVE3 @ IDE) WDC WD2500JS-60NCB1 +++++
--- User ---
[MBR] dcf1e7f329c0859f9b4ef6590589b241
[BSP] 7821b5939a97f872b6ea512c97d5632d : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 238473 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive4: (\\.\PHYSICALDRIVE4 @ USB) WD My Book 1130 USB Device +++++
--- User ---
[MBR] 78ba3c87da77bc8fad64a57764f894c4
[BSP] 407e1a59a079c5ad6f818ef18da7eb06 : Empty MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 953836 Mo
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Po?adavek není podporován. )

Dokončeno : << RKreport[0]_S_02212014_074824.txt >>
RKreport[0]_S_02212014_074719.txt

ComboFix 14-02-20.01 - Milos 21.02.2014 7:52.5.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.16332.13957 [GMT 1:00]
Spuštěný z: d:\users\Milos\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-01-21 do 2014-02-21 )))))))))))))))))))))))))))))))
.
.
2459-05-10 23:51 . 2459-05-10 23:51 64624 ----a-w- c:\windows\system32\drivers\HECIx64.sys
2440-08-16 14:07 . 2440-08-16 14:07 1286400 ----a-w- c:\windows\system32\MaxxSpeechAPO64.dll
2439-07-29 07:23 . 2439-07-29 07:23 27644160 ----a-w- c:\windows\system32\MaxxAudioVnA64.dll
2439-07-29 07:23 . 2439-07-29 07:23 1021656 ----a-w- c:\windows\system32\RtkApi64.dll
2424-07-27 12:38 . 2424-07-27 12:38 912184 ----a-w- c:\windows\system32\NAHIMICAPOSettingsIPC.dll
2424-07-27 12:38 . 2424-07-27 12:38 41974272 ----a-w- c:\windows\system32\RCoRes64.dat
2424-07-27 12:38 . 2424-07-27 12:38 2588888 ----a-w- c:\windows\system32\RtkAPO64.dll
2424-07-27 12:38 . 2424-07-27 12:38 2036992 ----a-w- c:\windows\system32\MaxxAudioEQ64.dll
2424-07-27 12:38 . 2424-07-27 12:38 1922304 ----a-w- c:\windows\system32\MaxxAudioRealtek264.dll
2424-07-27 12:38 . 2424-07-27 12:38 14153984 ----a-w- c:\windows\system32\MaxxAudioRealtek64.dll
2424-07-27 12:38 . 2424-07-27 12:38 1345280 ----a-w- c:\windows\system32\MaxxAudioAPO5064.dll
2424-07-27 12:38 . 2424-07-27 12:38 1286872 ----a-w- c:\windows\system32\RTCOM64.dll
2424-07-27 12:38 . 2424-07-27 12:38 1013504 ----a-w- c:\windows\system32\MaxxAudioAPOShell64.dll
2423-07-09 05:54 . 2423-07-09 05:54 618200 ----a-w- c:\windows\system32\RtDataProc64.dll
2423-07-09 05:54 . 2423-07-09 05:54 5753112 ----a-w- c:\windows\system32\NAHIMICAPOlfx.dll
2423-07-09 05:54 . 2423-07-09 05:54 3899648 ----a-w- c:\windows\system32\MaxxAudioVnN64.dll
2423-07-09 05:54 . 2423-07-09 05:54 3760344 ----a-w- c:\windows\system32\drivers\RTKVHD64.sys
2423-07-09 05:54 . 2423-07-09 05:54 2810072 ----a-w- c:\windows\system32\RtPgEx64.dll
2423-07-09 05:54 . 2423-07-09 05:54 2103040 ----a-w- c:\windows\system32\WavesGUILib64.dll
2423-07-09 05:54 . 2423-07-09 05:54 154840 ----a-w- c:\windows\system32\RCoInstII64.dll
2014-02-21 06:55 . 2014-02-21 06:55 -------- d-----w- c:\users\Milos\AppData\Local\temp
2014-02-21 06:16 . 2014-02-06 00:01 10536864 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A344A9AD-873F-42B8-9EE8-D3735C3051CC}\mpengine.dll
2014-02-20 06:12 . 2014-02-20 06:12 1031560 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{00362B04-326C-4145-A65B-A3BD593FEA0D}\gapaengine.dll
2014-02-20 06:12 . 2014-02-18 22:06 965000 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2014-02-20 06:12 . 2014-02-06 00:01 10536864 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-02-19 19:41 . 2014-02-19 19:41 -------- d-----w- c:\windows\ERUNT
2014-02-18 22:05 . 2014-02-19 07:04 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2014-02-18 22:05 . 2014-02-19 07:04 -------- d-----w- c:\program files\Microsoft Security Client
2014-02-18 20:49 . 2014-02-18 20:49 -------- d-----w- c:\users\Milos\AppData\Local\ATI
2014-02-16 15:55 . 2014-02-17 06:14 -------- d-----w- c:\program files\trend micro
2014-02-16 15:01 . 2013-11-26 23:29 5693440 ----a-w- c:\windows\SysWow64\mstscax.dll
2014-02-16 15:01 . 2013-11-26 22:49 6573056 ----a-w- c:\windows\system32\mstscax.dll
2014-02-16 14:31 . 2013-09-25 02:23 1030144 ----a-w- c:\windows\system32\TSWorkspace.dll
2014-02-16 14:31 . 2013-09-25 01:57 792576 ----a-w- c:\windows\SysWow64\TSWorkspace.dll
2014-02-13 06:11 . 2013-12-06 02:30 1882112 ----a-w- c:\windows\system32\msxml3.dll
2014-02-03 19:46 . 2013-12-16 00:54 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{22E4258C-0810-4F12-9CDA-11436A6512FD}\mpengine.dll
2014-02-03 18:01 . 2014-02-03 18:01 -------- d-----w- c:\windows\Migration
2014-02-02 17:21 . 2014-02-02 17:21 -------- d-----w- c:\programdata\ATI
2014-02-02 17:21 . 2014-02-02 17:21 -------- d-----w- c:\program files (x86)\AMD AVT
2014-01-31 21:07 . 2014-01-31 21:07 127872 ----a-w- c:\windows\system32\amdhcp64.dll
2014-01-31 21:07 . 2014-01-31 21:07 117560 ----a-w- c:\windows\SysWow64\amdhcp32.dll
2014-01-31 21:07 . 2014-01-31 21:07 78432 ----a-w- c:\windows\system32\atimpc64.dll
2014-01-31 21:07 . 2014-01-31 21:07 78432 ----a-w- c:\windows\system32\amdpcom64.dll
2014-01-31 21:07 . 2014-01-31 21:07 71704 ----a-w- c:\windows\SysWow64\atimpc32.dll
2014-01-31 21:07 . 2014-01-31 21:07 71704 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2014-01-31 21:07 . 2014-01-31 21:07 126336 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2014-01-31 21:07 . 2014-01-31 21:07 116024 ----a-w- c:\windows\system32\atiu9p64.dll
2014-01-31 21:07 . 2014-01-31 21:07 8760320 ----a-w- c:\windows\SysWow64\atidxx32.dll
2014-01-31 21:06 . 2014-01-31 21:06 10899624 ----a-w- c:\windows\system32\atiumd6a.dll
2014-01-31 21:06 . 2014-01-31 21:06 7892000 ----a-w- c:\windows\system32\atiumd64.dll
2014-01-31 20:57 . 2014-01-31 20:57 13929472 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2014-01-31 20:43 . 2014-01-31 20:43 230912 ----a-w- c:\windows\system32\clinfo.exe
2014-01-31 20:43 . 2014-01-31 20:43 98816 ----a-w- c:\windows\system32\OpenVideo64.dll
2014-01-31 20:43 . 2014-01-31 20:43 83456 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2014-01-31 20:43 . 2014-01-31 20:43 86528 ----a-w- c:\windows\system32\OVDecode64.dll
2014-01-31 20:43 . 2014-01-31 20:43 73216 ----a-w- c:\windows\SysWow64\OVDecode.dll
2014-01-31 20:42 . 2014-01-31 20:42 28424704 ----a-w- c:\windows\system32\amdocl64.dll
2014-01-31 20:40 . 2014-01-31 20:40 23903232 ----a-w- c:\windows\SysWow64\amdocl.dll
2014-01-31 20:38 . 2014-01-31 20:38 65024 ----a-w- c:\windows\system32\OpenCL.dll
2014-01-31 20:38 . 2014-01-31 20:38 58880 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-01-31 20:26 . 2014-01-31 20:26 368640 ----a-w- c:\windows\system32\atiapfxx.exe
2014-01-31 20:26 . 2014-01-31 20:26 62464 ----a-w- c:\windows\system32\aticalrt64.dll
2014-01-31 20:26 . 2014-01-31 20:26 52224 ----a-w- c:\windows\SysWow64\aticalrt.dll
2014-01-31 20:26 . 2014-01-31 20:26 55808 ----a-w- c:\windows\system32\aticalcl64.dll
2014-01-31 20:26 . 2014-01-31 20:26 49152 ----a-w- c:\windows\SysWow64\aticalcl.dll
2014-01-31 20:26 . 2014-01-31 20:26 15716352 ----a-w- c:\windows\system32\aticaldd64.dll
2014-01-31 20:24 . 2014-01-31 20:24 126464 ----a-w- c:\windows\system32\mantle64.dll
2014-01-31 20:24 . 2014-01-31 20:24 113152 ----a-w- c:\windows\SysWow64\mantle32.dll
2014-01-31 20:23 . 2014-01-31 20:23 5350400 ----a-w- c:\windows\system32\amdmantle64.dll
2014-01-31 20:22 . 2014-01-31 20:22 14302208 ----a-w- c:\windows\SysWow64\aticaldd.dll
2014-01-31 20:22 . 2014-01-31 20:22 27152384 ----a-w- c:\windows\system32\atio6axx.dll
2014-01-31 20:10 . 2014-01-31 20:10 4286976 ----a-w- c:\windows\SysWow64\amdmantle32.dll
2014-01-31 20:06 . 2014-01-31 20:06 442368 ----a-w- c:\windows\system32\atidemgy.dll
2014-01-31 20:06 . 2014-01-31 20:06 31232 ----a-w- c:\windows\system32\atimuixx.dll
2014-01-31 20:06 . 2014-01-31 20:06 586240 ----a-w- c:\windows\system32\atieclxx.exe
2014-01-31 20:05 . 2014-01-31 20:05 240128 ----a-w- c:\windows\system32\atiesrxx.exe
2014-01-31 20:03 . 2014-01-31 20:03 190976 ----a-w- c:\windows\system32\atitmm64.dll
2014-01-31 20:03 . 2014-01-31 20:03 22834688 ----a-w- c:\windows\SysWow64\atioglxx.dll
2014-01-31 19:59 . 2014-01-31 19:59 81920 ----a-w- c:\windows\system32\mantleaxl64.dll
2014-01-31 19:59 . 2014-01-31 19:59 79360 ----a-w- c:\windows\SysWow64\mantleaxl32.dll
2014-01-31 19:48 . 2014-01-31 19:48 44544 ----a-w- c:\windows\system32\amdmmcl6.dll
2014-01-31 19:47 . 2014-01-31 19:47 35840 ----a-w- c:\windows\SysWow64\amdmmcl.dll
2014-01-31 19:37 . 2014-01-31 19:37 806912 ----a-w- c:\windows\system32\coinst_13.350.dll
2014-01-31 19:30 . 2014-01-31 19:30 1148416 ----a-w- c:\windows\system32\atiadlxx.dll
2014-01-31 19:30 . 2014-01-31 19:30 828416 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2014-01-31 19:29 . 2014-01-31 19:29 75264 ----a-w- c:\windows\system32\atig6pxx.dll
2014-01-31 19:29 . 2014-01-31 19:29 69632 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2014-01-31 19:29 . 2014-01-31 19:29 69632 ----a-w- c:\windows\system32\atiglpxx.dll
2014-01-31 19:29 . 2014-01-31 19:29 146432 ----a-w- c:\windows\system32\atig6txx.dll
2014-01-31 19:29 . 2012-10-29 16:30 27159 ----a-w- c:\windows\TempFileCleaner.cmd
2014-01-31 19:29 . 2014-01-31 19:29 133120 ----a-w- c:\windows\SysWow64\atigktxx.dll
2014-01-31 19:28 . 2014-01-31 19:28 636928 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2014-01-31 19:25 . 2014-01-31 19:25 43520 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2014-01-31 19:23 . 2014-01-31 19:23 95744 ----a-w- c:\windows\system32\amdave64.dll
2014-01-31 19:23 . 2014-01-31 19:23 90112 ----a-w- c:\windows\SysWow64\amdave32.dll
2014-01-31 19:23 . 2014-02-03 19:32 -------- d-----w- c:\programdata\Astroburn Lite
2014-01-31 19:23 . 2014-01-31 19:23 89088 ----a-w- c:\windows\system32\atisamu64.dll
2014-01-31 19:23 . 2014-01-31 19:23 80896 ----a-w- c:\windows\SysWow64\atisamu32.dll
2014-01-31 19:19 . 2014-01-31 19:19 -------- d-----w- c:\users\Milos\AppData\Roaming\WinZip
2014-01-31 14:53 . 2014-01-31 14:53 51200 ----a-w- c:\windows\system32\kdbsdk64.dll
2014-01-31 14:49 . 2014-01-31 14:49 38912 ----a-w- c:\windows\SysWow64\kdbsdk32.dll
2014-01-26 15:52 . 2005-03-11 23:07 87040 ----a-w- c:\windows\system32\pdfcmnnt.dll
2014-01-26 15:52 . 2004-03-08 23:00 662288 ----a-w- c:\windows\SysWow64\MSCOMCT2.OCX
2014-01-26 15:52 . 1998-07-05 23:00 23552 ----a-w- c:\windows\SysWow64\MSMPIDE.DLL
2014-01-26 15:52 . 1998-06-23 23:00 137000 ----a-w- c:\windows\SysWow64\MSMAPI32.OCX
2014-01-26 15:40 . 2014-02-20 19:45 -------- d-----w- c:\users\Milos\AppData\Local\WinZip
2014-01-26 15:40 . 2014-01-26 15:40 -------- d-----w- c:\programdata\WinZip
2014-01-26 15:40 . 2014-01-26 15:40 -------- d-----w- c:\program files\WinZip
2014-01-24 07:43 . 2013-12-18 20:09 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-01-24 07:36 . 2013-11-27 01:41 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2014-01-24 07:36 . 2013-11-27 01:41 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2014-01-24 07:36 . 2013-11-27 01:41 53248 ----a-w- c:\windows\system32\drivers\usbehci.sys
2014-01-24 07:36 . 2013-11-27 01:41 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2014-01-24 07:36 . 2013-11-27 01:41 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2014-01-24 07:36 . 2013-11-27 01:41 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2014-01-24 07:36 . 2013-11-27 01:41 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2014-01-24 07:36 . 2013-11-26 10:32 3156480 ----a-w- c:\windows\system32\win32k.sys
2014-01-24 07:36 . 2013-11-26 11:40 376768 ----a-w- c:\windows\system32\drivers\netio.sys
2014-01-24 06:19 . 2014-01-24 07:34 -------- d-----w- c:\users\Milos\AppData\Roaming\DropboxMaster
2014-01-22 21:07 . 2014-01-22 21:07 -------- d-----w- c:\program files (x86)\Common Files\PDF Architect
2014-01-22 20:42 . 2014-01-22 21:10 -------- d-----w- c:\users\Milos\AppData\Roaming\PDF Architect
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-21 06:23 . 2012-08-29 20:14 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-21 06:23 . 2012-08-29 20:14 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-02-20 20:21 . 2012-12-14 19:01 214392 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2014-02-20 20:03 . 2012-12-14 19:01 214392 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2014-02-16 16:25 . 2013-01-05 20:43 290184 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2014-02-16 14:33 . 2012-08-29 18:56 88567024 ----a-w- c:\windows\system32\MRT.exe
2014-01-31 21:07 . 2013-11-22 16:26 143304 ----a-w- c:\windows\system32\atiuxp64.dll
2014-01-31 21:07 . 2013-12-06 22:02 98496 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2014-01-31 21:07 . 2013-11-22 16:26 1328328 ----a-w- c:\windows\system32\aticfx64.dll
2014-01-31 21:07 . 2013-11-22 16:26 1106360 ----a-w- c:\windows\SysWow64\aticfx32.dll
2014-01-31 21:07 . 2013-11-22 16:26 10171456 ----a-w- c:\windows\system32\atidxx64.dll
2014-01-31 21:07 . 2013-12-06 21:59 10145128 ----a-w- c:\windows\SysWow64\atiumdva.dll
2014-01-31 21:06 . 2013-12-06 21:58 6716264 ----a-w- c:\windows\SysWow64\atiumdag.dll
2014-01-16 08:59 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe
2014-01-14 20:48 . 2014-01-14 20:48 888536 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2014-01-14 20:48 . 2014-01-14 20:48 73800 ----a-w- c:\windows\system32\RtNicProp64.dll
2014-01-14 20:48 . 2012-08-29 21:46 107552 ----a-w- c:\windows\system32\RTNUninst64.dll
2014-01-14 20:48 . 2014-01-14 20:48 99800 ----a-w- c:\windows\system32\drivers\TeeDriverx64.sys
2014-01-14 20:48 . 2014-01-14 20:48 1795952 ----a-w- c:\windows\system32\WdfCoInstaller01011.dll
2013-12-28 19:24 . 2012-08-29 19:05 4684384 ----a-w- c:\windows\PE_Rom.dll
2013-12-23 14:38 . 2013-12-23 14:38 21712 ----a-w- c:\windows\SysWow64\drivers\DrvAgent64.SYS
2013-12-19 16:45 . 2013-12-19 16:45 94720 ----a-w- c:\windows\system32\drivers\AtihdW76.sys
2013-12-19 16:44 . 2013-12-19 16:44 110080 ----a-w- c:\windows\system32\DelayAPO.dll
2013-12-07 17:14 . 2013-12-07 17:14 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-12-05 19:36 . 2012-12-14 19:01 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-11-23 18:26 . 2013-12-12 19:21 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-12 19:21 465920 ----a-w- c:\windows\system32\WMPhoto.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\Milos\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\Milos\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\Milos\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OfficeSyncProcess"="d:\program files (x86)\Microsoft Office\Office14\MSOSYNC.EXE" [2013-04-22 720064]
"GrooveMonitor"="d:\program files (x86)\Microsoft Office\Office14\GROOVEMN.EXE" [2013-03-06 945856]
"HydraVisionDesktopManager"="c:\program files (x86)\ATI Technologies\HydraVision\HydraDM.exe" [2013-11-22 389120]
"DAEMON Tools Lite"="d:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-10-28 3675352]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-08-10 291648]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-11-29 284440]
"Adobe Reader Speed Launcher"="d:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2013-12-18 40312]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"Tilt"="c:\program files (x86)\GIGABYTE\GHOST\Tilt.exe" [2011-04-20 729088]
"Nástroj WD Drive Unlocker"="c:\program files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe" [2012-06-13 1688008]
"WD Quick View"="c:\program files (x86)\Western Digital\WD Quick View\WDDMStatus.exe" [2013-08-14 5537136]
"ghost"="c:\program files (x86)\GIGABYTE\GHOST\ghostopen.exe" [2010-02-08 192000]
"PMBVolumeWatcher"="d:\program files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe" [2013-04-24 740888]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2014-01-31 767200]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-disabled]
"CHotkey"=mHotkey.exe
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 AIDA64Driver;FinalWire AIDA64 Kernel Driver;d:\program files (x86)\FinalWire\AIDA64 Extreme\kerneld.x64;d:\program files (x86)\FinalWire\AIDA64 Extreme\kerneld.x64 [x]
R3 ASUSstpt;ASUS USB 3.0 Boost Storage Driver (Storage Driver);c:\windows\system32\DRIVERS\ASUSstpt.sys;c:\windows\SYSNATIVE\DRIVERS\ASUSstpt.sys [x]
R3 ASUSumsc;ASUS USB 3.0 Boost Storage Driver (WDM);c:\windows\system32\DRIVERS\ASUSumsc.sys;c:\windows\SYSNATIVE\DRIVERS\ASUSumsc.sys [x]
R3 BthAvrcp;Bluetooth AVRCP Profile;c:\windows\system32\DRIVERS\BthAvrcp.sys;c:\windows\SYSNATIVE\DRIVERS\BthAvrcp.sys [x]
R3 cpuz130;cpuz130;d:\temp\cpuz130\cpuz_x64.sys;d:\temp\cpuz130\cpuz_x64.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [x]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.2);c:\windows\system32\DRIVERS\RtTeam60.sys;c:\windows\SYSNATIVE\DRIVERS\RtTeam60.sys [x]
R3 RTVLANPT;Realtek Vlan Protocol Driver (NDIS 6.2);c:\windows\system32\DRIVERS\RtVlan620.sys;c:\windows\SYSNATIVE\DRIVERS\RtVlan620.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 TEAM;Realtek Virtual Miniport Driver for Teaming (NDIS 6.2);c:\windows\system32\DRIVERS\RtTeam60.sys;c:\windows\SYSNATIVE\DRIVERS\RtTeam60.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 VLAN;Realtek Virtual Miniport Driver for VLAN (NDIS 6.2);c:\windows\system32\DRIVERS\RtVLAN620.sys;c:\windows\SYSNATIVE\DRIVERS\RtVLAN620.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys;SysWow64\drivers\AsUpIO.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe;c:\program files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [x]
S2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe;c:\program files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [x]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [x]
S2 AsusFanControlService;AsusFanControlService;c:\program files (x86)\ASUS\AsusFanControlService\1.02.05\AsusFanControlService.exe;c:\program files (x86)\ASUS\AsusFanControlService\1.02.05\AsusFanControlService.exe [x]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;d:\program files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe;d:\program files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [x]
S2 RtNdPt60;Realtek NDIS Protocol Driver;c:\windows\system32\DRIVERS\RtNdPt60.sys;c:\windows\SYSNATIVE\DRIVERS\RtNdPt60.sys [x]
S2 TeamViewer9;TeamViewer 9;d:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;d:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 WDBackup;WD Backup;c:\program files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe;c:\program files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [x]
S2 WDDriveService;WD Drive Manager;c:\program files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe;c:\program files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [x]
S3 ASUSFILTER;ASUSFILTER;SysWow64\drivers\ASUSFILTER.sys;SysWow64\drivers\ASUSFILTER.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT);c:\windows\system32\DRIVERS\ICCWDT.sys;c:\windows\SYSNATIVE\DRIVERS\ICCWDT.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
S4 IOMap;IOMap;c:\windows\system32\drivers\IOMap64.sys;c:\windows\SYSNATIVE\drivers\IOMap64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-04 06:32 1211720 ----a-w- c:\program files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-02-21 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-29 06:23]
.
2014-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-02 17:47]
.
2014-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-02 17:47]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 164016 ----a-w- c:\users\Milos\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 164016 ----a-w- c:\users\Milos\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 164016 ----a-w- c:\users\Milos\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 164016 ----a-w- c:\users\Milos\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 190536]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2424-07-27 7205592]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-10-23 1266912]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
uDefault_Search_URL = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
mSearch Bar = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - d:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - d:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Milos\AppData\Roaming\Mozilla\Firefox\Profiles\s1amq8tc.default-1354039466817\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://www.google.cz/#hl=cs&source=hp&q=
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AIDA64Driver]
"ImagePath"="\??\d:\program files (x86)\FinalWire\AIDA64 Extreme\kerneld.x64"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1547765992-1640624829-2362379350-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\e:\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"qgif4.dll"=multi:"2011-10-10T17:42\00gif\00\00"
"qico4.dll"=multi:"2011-10-10T17:42\00ico\00\00"
"qjpeg4.dll"=multi:"2011-10-10T17:42\00jpeg\00jpg\00\00"
.
[HKEY_USERS\S-1-5-21-1547765992-1640624829-2362379350-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QTextCodecFactoryInterface:\e:\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"2011-10-10T17:42\00GB18030\00GBK\00GB2312\00CP936\00MS936\00windows-936\00MIB: 114\00MIB: 113\00MIB: 2025\00\00"
"qkrcodecs4.dll"=multi:"2011-10-10T17:42\00EUC-KR\00cp949\00MIB: 38\00MIB: -949\00\00"
"qtwcodecs4.dll"=multi:"2011-10-10T17:42\00Big5\00Big5-HKSCS\00Big5-ETen\00CP950\00MIB: 2026\00MIB: 2101\00\00"
.
[HKEY_USERS\S-1-5-21-1547765992-1640624829-2362379350-1000\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\e:\b*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T17:42\00\00"
"qjpcodecs4.dll"=multi:"40602\000\00Windows msvc release full-config\002011-10-10T17:42\00\00"
"qjpcodecsd4.dll"=multi:"40703\001\00Windows msvc debug full-config QT_NO_DRAGANDDROP\002011-10-10T17:42\00\00"
"qkrcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T17:42\00\00"
"qtwcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T17:42\00\00"
.
[HKEY_USERS\S-1-5-21-1547765992-1640624829-2362379350-1000\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\e:\b*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"Microsoft.VC80.CRT.manifest"=multi:"0\001\00unknown\002011-10-10T17:42\00\00"
"msvcr80.dll"=multi:"0\001\00unknown\002011-10-10T17:42\00\00"
"qgif4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T17:42\00\00"
"qico4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T17:42\00\00"
"qjpeg4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T17:42\00\00"
.
Celkový čas: 2014-02-21 07:56:03
ComboFix-quarantined-files.txt 2014-02-21 06:56
.
Před spuštěním: Volných bajtů: 48 097 067 008
Po spuštění: Volných bajtů: 47 638 708 224
.
- - End Of File - - 9E2E4487A95CEB2A4A9793C62A3AD52F