PC-HELP.CZ

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:15:48, on 20.2.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16518)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Seznam.cz\bin\postak.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\top\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\bin\core.4.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [RTHDVCPL] "C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe" -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files\Seznam.cz\bin\postak.exe" -s
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: linkscanner - (no CLSID) - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Služba Acronis Scheduler2 (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Plán2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 7 (AdvancedSystemCareService7) - IObit - C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe
O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 6787 bytes

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

===================================================

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

====================================================

Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2014.02.21.08

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16518
top :: TOP-PC [administrátor]

21.2.2014 17:06:34
MBAM-log-2014-02-21 (17-17-08).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 233704
Uplynulý čas: 10 minut,

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 1
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AutoUpdate.exe (Security.Hijack) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 3
C:\Users\top\AppData\Local\Slick Savings (PUP.Optional.Spigot.A) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo\bitstreams (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 15
C:\Users\top\AppData\Local\Slick Savings\coupons.crx (PUP.Optional.Spigot.A) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo\diablo130302.cl (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo\diakgcn121016.cl (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo\libcurl-4.dll (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo\libeay32.dll (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo\libidn-11.dll (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo\librtmp.dll (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo\libssh2.dll (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo\mncowkgo.exe (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo\phatk121016.cl (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo\poclbm130302.cl (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo\scrypt130511.cl (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo\ssleay32.dll (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo\zlib1.dll (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mncowkgo\bitstreams\fpgaminer_top_fixed7_197MHz.ncd (Trojan.Agent.BCM) -> Nebyla provedena žádná instrukce.

(konec)

# AdwCleaner v3.019 - Report created 21/02/2014 at 17:23:38
# Updated 17/02/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (32 bits)
# Username : top - TOP-PC
# Running from : D:\stahovani\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files\Common Files\Spigot
Folder Deleted : C:\Users\top\AppData\Local\Slick Savings
File Deleted : C:\Users\top\AppData\Roaming\Mozilla\Firefox\Profiles\9tbqhjlw.default\user.js
File Deleted : C:\Windows\System32\Tasks\LaunchApp

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{245825BE-826F-4538-9BDB-BCFF5F499C71}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{245825BE-826F-4538-9BDB-BCFF5F499C71}
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyPC Backup_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyPC Backup_RASMANCS
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@VideoDownloadConverter_ScriptHelper.com/Plugin
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3719959C-1CCD-4FA7-8EBB-7D9DED86FCCB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{37923200-6887-4B44-95D4-CAE8F83ECFEE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A86782D8-7B41-452F-A217-1854F72DBA54}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D6F0AC3-0C2E-4E07-8FDA-11268AB51211}
Key Deleted : HKCU\Software\AppDataLow\Software\Search Settings
Key Deleted : HKLM\Software\Trymedia Systems

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v

[ File : C:\Users\top\AppData\Roaming\Mozilla\Firefox\Profiles\9tbqhjlw.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [4915 octets] - [29/09/2013 08:42:20]
AdwCleaner[R1].txt - [4860 octets] - [29/09/2013 08:45:20]
AdwCleaner[R2].txt - [2174 octets] - [29/09/2013 10:11:45]
AdwCleaner[R3].txt - [2914 octets] - [21/02/2014 17:22:20]
AdwCleaner[S0].txt - [2267 octets] - [29/09/2013 10:12:33]
AdwCleaner[S1].txt - [2924 octets] - [21/02/2014 17:23:38]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2984 octets] ##########

Znovu spusť MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

====================================================

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

====================================================

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2014.02.22.03

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16518
top :: TOP-PC [administrátor]

22.2.2014 17:43:59
mbam-log-2014-02-22 (17-43-59).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 231872
Uplynulý čas: 8 minut, 40 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 2
C:\Windows\inf\mncowkgo (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\inf\mncowkgo\bitstreams (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.

Nalezené soubory: 15
C:\Users\top\Local Settings\Temporary Internet Files\Content.IE5\BRR77ML2\crack-avira-premier-2014[1].exe (Backdoor.MSIL.PGen) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\inf\mncowkgo\diablo130302.cl (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\inf\mncowkgo\diakgcn121016.cl (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\inf\mncowkgo\libcurl-4.dll (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\inf\mncowkgo\libeay32.dll (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\inf\mncowkgo\libidn-11.dll (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\inf\mncowkgo\librtmp.dll (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\inf\mncowkgo\libssh2.dll (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\inf\mncowkgo\mncowkgo.exe (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\inf\mncowkgo\phatk121016.cl (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\inf\mncowkgo\poclbm130302.cl (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\inf\mncowkgo\scrypt130511.cl (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\inf\mncowkgo\ssleay32.dll (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\inf\mncowkgo\zlib1.dll (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.
C:\Windows\inf\mncowkgo\bitstreams\fpgaminer_top_fixed7_197MHz.ncd (Trojan.Agent.BCM) -> Přesun do karantény a smazání se zdařilo.

(konec)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Ultimate x86
Ran by top on so 22.02.2014 at 17:58:48,06
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 22.02.2014 at 18:01:14,57
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

RogueKiller V8.8.8 [Feb 19 2014] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spuštěno v : Normální režim
Uživatel : top [Práva správce]
Mód : Kontrola -- Datum : 02/22/2014 18:12:18
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 5 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> NALEZENO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 2 ¤¤¤
[V2][ROGUE ST] 4520 : wscript.exe - C:\Users\top\AppData\Local\Temp\launchie.vbs //B -> NALEZENO
[V2][SUSP PATH] FGRun : C:\Users\top\AppData\Roaming\pack.exe [x] -> NALEZENO

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ SCSI) SAMSUNG HD403LJ SCSI Disk Device +++++
--- User ---
[MBR] 3386252126c5783ede434e9a1cb1c659
[BSP] 50c3ee920d1adb40d8b65f928e1a3bb9 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 70001 Mo
1 - [XXXXXX] EXTEN (0x05) [VISIBLE] Offset (sectors): 144263637 | Size: 311110 Mo
User = LL1 ... OK!
Error reading LL2 MBR! ([0x1] Nesprávná funkce. )

Dokončeno : << RKreport[0]_S_02222014_181218.txt >>

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "

- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání- Finished "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

====================================================

Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

====================================================

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

====================================================

RogueKiller V8.8.8 [Feb 19 2014] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spuštěno v : Normální režim
Uživatel : top [Práva správce]
Mód : Odebrat -- Datum : 02/22/2014 23:25:45
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 5 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZÁNO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 2 ¤¤¤
[V2][ROGUE ST] 4520 : wscript.exe - C:\Users\top\AppData\Local\Temp\launchie.vbs //B -> VYMAZÁNO
[V2][SUSP PATH] FGRun : C:\Users\top\AppData\Roaming\pack.exe [x] -> VYMAZÁNO

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ SCSI) SAMSUNG HD403LJ SCSI Disk Device +++++
--- User ---
[MBR] 3386252126c5783ede434e9a1cb1c659
[BSP] 50c3ee920d1adb40d8b65f928e1a3bb9 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 70001 Mo
1 - [XXXXXX] EXTEN (0x05) [VISIBLE] Offset (sectors): 144263637 | Size: 311110 Mo
User = LL1 ... OK!
Error reading LL2 MBR! ([0x1] Nesprávná funkce. )

Dokončeno : << RKreport[0]_D_02222014_232545.txt >>
RKreport[0]_S_02222014_232404.txt

23:31:39.0049 5224 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
23:31:47.0112 5224 ============================================================
23:31:47.0112 5224 Current date / time: 2014/02/22 23:31:47.0112
23:31:47.0112 5224 SystemInfo:
23:31:47.0112 5224
23:31:47.0112 5224 OS Version: 6.1.7601 ServicePack: 1.0
23:31:47.0112 5224 Product type: Workstation
23:31:47.0112 5224 ComputerName: TOP-PC
23:31:47.0112 5224 UserName: top
23:31:47.0112 5224 Windows directory: C:\Windows
23:31:47.0112 5224 System windows directory: C:\Windows
23:31:47.0112 5224 Processor architecture: Intel x86
23:31:47.0112 5224 Number of processors: 2
23:31:47.0112 5224 Page size: 0x1000
23:31:47.0112 5224 Boot type: Normal boot
23:31:47.0112 5224 ============================================================
23:31:48.0112 5224 Drive \Device\Harddisk0\DR0 - Size: 0x5D2710DE00 (372.61 Gb), SectorSize: 0x200, Cylinders: 0xBE01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
23:31:48.0127 5224 ============================================================
23:31:48.0127 5224 \Device\Harddisk0\DR0:
23:31:48.0127 5224 MBR partitions:
23:31:48.0127 5224 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x88B8F9D
23:31:48.0143 5224 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x8994A14, BlocksNum 0x21948CBD
23:31:48.0159 5224 ============================================================
23:31:48.0190 5224 C: <-> \Device\Harddisk0\DR0\Partition1
23:31:48.0237 5224 D: <-> \Device\Harddisk0\DR0\Partition2
23:31:48.0237 5224 ============================================================
23:31:48.0237 5224 Initialize success
23:31:48.0237 5224 ============================================================
23:31:51.0315 2432 ============================================================
23:31:51.0315 2432 Scan started
23:31:51.0315 2432 Mode: Manual;
23:31:51.0315 2432 ============================================================
23:31:52.0159 2432 ================ Scan system memory ========================
23:31:52.0159 2432 System memory - ok
23:31:52.0159 2432 ================ Scan services =============================
23:31:52.0299 2432 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
23:31:52.0299 2432 1394ohci - ok
23:31:52.0315 2432 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys
23:31:52.0331 2432 ACPI - ok
23:31:52.0331 2432 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
23:31:52.0331 2432 AcpiPmi - ok
23:31:52.0424 2432 [ F6A4BC03DD6EF8A5794A865DEDE28B23 ] AcrSch2Svc C:\Program Files\Common Files\Acronis\Plán2\schedul2.exe
23:31:52.0440 2432 AcrSch2Svc - ok
23:31:52.0471 2432 [ B362181ED3771DC03B4141927C80F801 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
23:31:52.0471 2432 AdobeARMservice - ok
23:31:52.0534 2432 [ F7AB315A4D400CA876381D1E188A2E20 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
23:31:52.0534 2432 AdobeFlashPlayerUpdateSvc - ok
23:31:52.0581 2432 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
23:31:52.0596 2432 adp94xx - ok
23:31:52.0627 2432 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
23:31:52.0643 2432 adpahci - ok
23:31:52.0659 2432 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
23:31:52.0659 2432 adpu320 - ok
23:31:52.0690 2432 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
23:31:52.0706 2432 AeLookupSvc - ok
23:31:52.0737 2432 [ EF1AFA9752E468013584585666A3B119 ] afcdp C:\Windows\system32\DRIVERS\afcdp.sys
23:31:52.0737 2432 afcdp - ok
23:31:52.0815 2432 [ B8C03E224E49E0F9726CDDEF872237EB ] afcdpsrv C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
23:31:52.0831 2432 afcdpsrv - ok
23:31:52.0862 2432 [ F81BB7E487EDCEAB630A7EE66CF23913 ] AFD C:\Windows\system32\drivers\afd.sys
23:31:52.0862 2432 AFD - ok
23:31:52.0893 2432 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys
23:31:52.0893 2432 agp440 - ok
23:31:52.0924 2432 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
23:31:52.0924 2432 aic78xx - ok
23:31:52.0940 2432 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
23:31:52.0940 2432 ALG - ok
23:31:52.0956 2432 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys
23:31:52.0956 2432 aliide - ok
23:31:52.0971 2432 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys
23:31:52.0971 2432 amdagp - ok
23:31:53.0002 2432 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys
23:31:53.0002 2432 amdide - ok
23:31:53.0018 2432 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
23:31:53.0018 2432 AmdK8 - ok
23:31:53.0034 2432 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
23:31:53.0034 2432 AmdPPM - ok
23:31:53.0049 2432 [ D320BF87125326F996D4904FE24300FC ] amdsata C:\Windows\system32\drivers\amdsata.sys
23:31:53.0049 2432 amdsata - ok
23:31:53.0065 2432 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
23:31:53.0081 2432 amdsbs - ok
23:31:53.0081 2432 [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata C:\Windows\system32\drivers\amdxata.sys
23:31:53.0081 2432 amdxata - ok
23:31:53.0112 2432 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys
23:31:53.0112 2432 AppID - ok
23:31:53.0127 2432 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
23:31:53.0143 2432 AppIDSvc - ok
23:31:53.0143 2432 [ EACFDF31921F51C097629F1F3C9129B4 ] Appinfo C:\Windows\System32\appinfo.dll
23:31:53.0159 2432 Appinfo - ok
23:31:53.0174 2432 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
23:31:53.0174 2432 AppMgmt - ok
23:31:53.0190 2432 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
23:31:53.0190 2432 arc - ok
23:31:53.0206 2432 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
23:31:53.0206 2432 arcsas - ok
23:31:53.0424 2432 [ 9D768C43FEF254DD50B1DBF8AD5C4C0B ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
23:31:53.0424 2432 aspnet_state - ok
23:31:53.0612 2432 [ 0EEFB7741B46099FE1AA124F57BEEE41 ] aswKbd C:\Windows\system32\drivers\aswKbd.sys
23:31:53.0612 2432 aswKbd - ok
23:31:53.0659 2432 [ 61953E5E1FFAEAF246A610BEE2554879 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
23:31:53.0659 2432 aswMonFlt - ok
23:31:53.0706 2432 [ E3A9DB9A256311128382D54F40981CFD ] aswNdisFlt C:\Windows\system32\DRIVERS\aswNdisFlt.sys
23:31:53.0706 2432 aswNdisFlt - ok
23:31:53.0737 2432 [ 2206985EF126AB90F3D7F1A020589DC9 ] aswRdr C:\Windows\system32\drivers\aswRdr2.sys
23:31:53.0737 2432 aswRdr - ok
23:31:53.0768 2432 [ F385467DF95D0A73775CB3B076B8B969 ] aswRvrt C:\Windows\system32\drivers\aswRvrt.sys
23:31:53.0768 2432 aswRvrt - ok
23:31:53.0799 2432 [ 8CD8710457FCC1CDE88CBFA3AA119B92 ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
23:31:53.0815 2432 aswSnx - ok
23:31:53.0846 2432 [ C1F95C9481F46B96E23A276639C55AC9 ] aswSP C:\Windows\system32\drivers\aswSP.sys
23:31:53.0846 2432 aswSP - ok
23:31:53.0877 2432 [ BFE2A154BC197656ACA0FF917564406D ] aswStm C:\Windows\system32\drivers\aswStm.sys
23:31:53.0877 2432 aswStm - ok
23:31:53.0893 2432 [ 1B0662514A68C3A42E60D240C5ABEF28 ] aswVmm C:\Windows\system32\drivers\aswVmm.sys
23:31:53.0909 2432 aswVmm - ok
23:31:53.0924 2432 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
23:31:53.0924 2432 AsyncMac - ok
23:31:53.0956 2432 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys
23:31:53.0956 2432 atapi - ok
23:31:54.0002 2432 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
23:31:54.0002 2432 AudioEndpointBuilder - ok
23:31:54.0018 2432 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll
23:31:54.0018 2432 Audiosrv - ok
23:31:54.0112 2432 [ CC42F104172B4A62793083D380867317 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
23:31:54.0112 2432 avast! Antivirus - ok
23:31:54.0127 2432 [ 3B5DA02DEA6910A709F19180746FF0CE ] avast! Firewall C:\Program Files\AVAST Software\Avast\afwServ.exe
23:31:54.0127 2432 avast! Firewall - ok
23:31:54.0159 2432 [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV C:\Windows\System32\AxInstSV.dll
23:31:54.0159 2432 AxInstSV - ok
23:31:54.0174 2432 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
23:31:54.0174 2432 b06bdrv - ok
23:31:54.0206 2432 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
23:31:54.0206 2432 b57nd60x - ok
23:31:54.0237 2432 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
23:31:54.0237 2432 BDESVC - ok
23:31:54.0237 2432 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
23:31:54.0237 2432 Beep - ok
23:31:54.0268 2432 [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE C:\Windows\System32\bfe.dll
23:31:54.0268 2432 BFE - ok
23:31:54.0299 2432 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll
23:31:54.0315 2432 BITS - ok
23:31:54.0331 2432 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
23:31:54.0331 2432 blbdrive - ok
23:31:54.0362 2432 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
23:31:54.0362 2432 bowser - ok
23:31:54.0362 2432 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
23:31:54.0362 2432 BrFiltLo - ok
23:31:54.0377 2432 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
23:31:54.0377 2432 BrFiltUp - ok
23:31:54.0409 2432 [ 77361D72A04F18809D0EFB6CCEB74D4B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
23:31:54.0409 2432 BridgeMP - ok
23:31:54.0424 2432 [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser C:\Windows\System32\browser.dll
23:31:54.0440 2432 Browser - ok
23:31:54.0456 2432 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
23:31:54.0456 2432 Brserid - ok
23:31:54.0471 2432 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
23:31:54.0471 2432 BrSerWdm - ok
23:31:54.0487 2432 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
23:31:54.0487 2432 BrUsbMdm - ok
23:31:54.0502 2432 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
23:31:54.0502 2432 BrUsbSer - ok
23:31:54.0502 2432 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
23:31:54.0502 2432 BTHMODEM - ok
23:31:54.0518 2432 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
23:31:54.0518 2432 bthserv - ok
23:31:54.0518 2432 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
23:31:54.0518 2432 cdfs - ok
23:31:54.0549 2432 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
23:31:54.0549 2432 cdrom - ok
23:31:54.0581 2432 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll
23:31:54.0581 2432 CertPropSvc - ok
23:31:54.0596 2432 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
23:31:54.0596 2432 circlass - ok
23:31:54.0627 2432 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
23:31:54.0627 2432 CLFS - ok
23:31:54.0674 2432 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:31:54.0674 2432 clr_optimization_v2.0.50727_32 - ok
23:31:54.0690 2432 [ E87213F37A13E2B54391E40934F071D0 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
23:31:54.0690 2432 clr_optimization_v4.0.30319_32 - ok
23:31:54.0706 2432 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
23:31:54.0706 2432 CmBatt - ok
23:31:54.0721 2432 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys
23:31:54.0721 2432 cmdide - ok
23:31:54.0752 2432 [ 85449EEBE8F8EBD6481EFBF0F352B4EB ] CNG C:\Windows\system32\Drivers\cng.sys
23:31:54.0752 2432 CNG - ok
23:31:54.0784 2432 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
23:31:54.0784 2432 Compbatt - ok
23:31:54.0799 2432 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
23:31:54.0799 2432 CompositeBus - ok
23:31:54.0799 2432 COMSysApp - ok
23:31:54.0815 2432 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
23:31:54.0815 2432 crcdisk - ok
23:31:54.0846 2432 [ 7CA1BECEA5DE2643ADDAD32670E7A4C9 ] CryptSvc C:\Windows\system32\cryptsvc.dll
23:31:54.0846 2432 CryptSvc - ok
23:31:54.0877 2432 [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC C:\Windows\system32\drivers\csc.sys
23:31:54.0893 2432 CSC - ok
23:31:54.0924 2432 [ 15F93B37F6801943360D9EB42485D5D3 ] CscService C:\Windows\System32\cscsvc.dll
23:31:54.0940 2432 CscService - ok
23:31:54.0971 2432 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32\rpcss.dll
23:31:54.0987 2432 DcomLaunch - ok
23:31:55.0034 2432 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
23:31:55.0034 2432 defragsvc - ok
23:31:55.0065 2432 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
23:31:55.0081 2432 DfsC - ok
23:31:55.0096 2432 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll
23:31:55.0096 2432 Dhcp - ok
23:31:55.0112 2432 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
23:31:55.0112 2432 discache - ok
23:31:55.0127 2432 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
23:31:55.0127 2432 Disk - ok
23:31:55.0159 2432 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
23:31:55.0159 2432 Dnscache - ok
23:31:55.0174 2432 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll
23:31:55.0174 2432 dot3svc - ok
23:31:55.0206 2432 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll
23:31:55.0206 2432 DPS - ok
23:31:55.0221 2432 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
23:31:55.0237 2432 drmkaud - ok
23:31:55.0268 2432 [ 687AF6BB383885FF6A64071B189A7F3E ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
23:31:55.0268 2432 dtsoftbus01 - ok
23:31:55.0315 2432 [ 71BC35067CABC02C9453AEAA42B2E43E ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
23:31:55.0315 2432 DXGKrnl - ok
23:31:55.0346 2432 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
23:31:55.0362 2432 EapHost - ok
23:31:55.0440 2432 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
23:31:55.0456 2432 ebdrv - ok
23:31:55.0487 2432 [ 803B370865D907EA21DC0C2B6A8936B5 ] EFS C:\Windows\System32\lsass.exe
23:31:55.0487 2432 EFS - ok
23:31:55.0518 2432 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
23:31:55.0534 2432 ehRecvr - ok
23:31:55.0565 2432 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
23:31:55.0565 2432 ehSched - ok
23:31:55.0612 2432 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
23:31:55.0627 2432 elxstor - ok
23:31:55.0659 2432 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys
23:31:55.0659 2432 ErrDev - ok
23:31:55.0706 2432 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
23:31:55.0706 2432 EventSystem - ok
23:31:55.0737 2432 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
23:31:55.0737 2432 exfat - ok
23:31:55.0752 2432 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
23:31:55.0752 2432 fastfat - ok
23:31:55.0784 2432 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe
23:31:55.0784 2432 Fax - ok
23:31:55.0799 2432 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
23:31:55.0799 2432 fdc - ok
23:31:55.0831 2432 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
23:31:55.0831 2432 fdPHost - ok
23:31:55.0846 2432 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
23:31:55.0846 2432 FDResPub - ok
23:31:55.0862 2432 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
23:31:55.0862 2432 FileInfo - ok
23:31:55.0877 2432 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
23:31:55.0877 2432 Filetrace - ok
23:31:55.0893 2432 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
23:31:55.0893 2432 flpydisk - ok
23:31:55.0924 2432 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
23:31:55.0924 2432 FltMgr - ok
23:31:55.0971 2432 [ E12C4928B32ACE04610259647F072635 ] FontCache C:\Windows\system32\FntCache.dll
23:31:55.0971 2432 FontCache - ok
23:31:56.0034 2432 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
23:31:56.0034 2432 FontCache3.0.0.0 - ok
23:31:56.0049 2432 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
23:31:56.0065 2432 FsDepends - ok
23:31:56.0096 2432 [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
23:31:56.0096 2432 Fs_Rec - ok
23:31:56.0127 2432 [ E306A24D9694C724FA2491278BF50FDB ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
23:31:56.0127 2432 fvevol - ok
23:31:56.0159 2432 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
23:31:56.0159 2432 gagp30kx - ok
23:31:56.0190 2432 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll
23:31:56.0206 2432 gpsvc - ok
23:31:56.0299 2432 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
23:31:56.0299 2432 gupdate - ok
23:31:56.0299 2432 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
23:31:56.0315 2432 gupdatem - ok
23:31:56.0346 2432 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
23:31:56.0346 2432 gusvc - ok
23:31:56.0362 2432 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
23:31:56.0362 2432 hcw85cir - ok
23:31:56.0393 2432 [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
23:31:56.0393 2432 HdAudAddService - ok
23:31:56.0409 2432 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
23:31:56.0409 2432 HDAudBus - ok
23:31:56.0424 2432 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
23:31:56.0424 2432 HidBatt - ok
23:31:56.0440 2432 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
23:31:56.0440 2432 HidBth - ok
23:31:56.0456 2432 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
23:31:56.0456 2432 HidIr - ok
23:31:56.0471 2432 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\System32\hidserv.dll
23:31:56.0471 2432 hidserv - ok
23:31:56.0502 2432 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\drivers\hidusb.sys
23:31:56.0502 2432 HidUsb - ok
23:31:56.0534 2432 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll
23:31:56.0549 2432 hkmsvc - ok
23:31:56.0581 2432 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
23:31:56.0596 2432 HomeGroupListener - ok
23:31:56.0627 2432 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
23:31:56.0627 2432 HomeGroupProvider - ok
23:31:56.0659 2432 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
23:31:56.0659 2432 HpSAMD - ok
23:31:56.0690 2432 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys
23:31:56.0690 2432 HTTP - ok
23:31:56.0721 2432 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
23:31:56.0721 2432 hwpolicy - ok
23:31:56.0752 2432 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
23:31:56.0752 2432 i8042prt - ok
23:31:56.0784 2432 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
23:31:56.0784 2432 iaStorV - ok
23:31:56.0831 2432 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
23:31:56.0846 2432 idsvc - ok
23:31:56.0862 2432 IEEtwCollectorService - ok
23:31:56.0877 2432 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
23:31:56.0877 2432 iirsp - ok
23:31:56.0924 2432 [ B9C54120F46392100478F58F374E5709 ] IKEEXT C:\Windows\System32\ikeext.dll
23:31:56.0940 2432 IKEEXT - ok
23:31:57.0065 2432 [ A70DF7DCC695105FEEC80F9FAEEE6380 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
23:31:57.0112 2432 IntcAzAudAddService - ok
23:31:57.0143 2432 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys
23:31:57.0143 2432 intelide - ok
23:31:57.0159 2432 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
23:31:57.0159 2432 intelppm - ok
23:31:57.0174 2432 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
23:31:57.0190 2432 IPBusEnum - ok
23:31:57.0190 2432 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
23:31:57.0190 2432 IpFilterDriver - ok
23:31:57.0221 2432 [ 58F67245D041FBE7AF88F4EAF79DF0FA ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
23:31:57.0221 2432 iphlpsvc - ok
23:31:57.0252 2432 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
23:31:57.0252 2432 IPMIDRV - ok
23:31:57.0268 2432 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
23:31:57.0268 2432 IPNAT - ok
23:31:57.0299 2432 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
23:31:57.0299 2432 IRENUM - ok
23:31:57.0315 2432 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys
23:31:57.0315 2432 isapnp - ok
23:31:57.0331 2432 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
23:31:57.0346 2432 iScsiPrt - ok
23:31:57.0346 2432 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
23:31:57.0362 2432 kbdclass - ok
23:31:57.0377 2432 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
23:31:57.0377 2432 kbdhid - ok
23:31:57.0393 2432 [ 803B370865D907EA21DC0C2B6A8936B5 ] KeyIso C:\Windows\system32\lsass.exe
23:31:57.0393 2432 KeyIso - ok
23:31:57.0424 2432 [ F286830298323272260332D6ABC905C1 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
23:31:57.0424 2432 KSecDD - ok
23:31:57.0440 2432 [ D7C760D57B1656DD748B9E4AB6CB5A51 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
23:31:57.0456 2432 KSecPkg - ok
23:31:57.0471 2432 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
23:31:57.0487 2432 KtmRm - ok
23:31:57.0502 2432 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\System32\srvsvc.dll
23:31:57.0502 2432 LanmanServer - ok
23:31:57.0518 2432 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
23:31:57.0534 2432 LanmanWorkstation - ok
23:31:57.0674 2432 [ 935E2093CEED8198C820B7F60BB63167 ] LiveUpdateSvc C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
23:31:57.0706 2432 LiveUpdateSvc - ok
23:31:57.0721 2432 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
23:31:57.0737 2432 lltdio - ok
23:31:57.0768 2432 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
23:31:57.0768 2432 lltdsvc - ok
23:31:57.0784 2432 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
23:31:57.0784 2432 lmhosts - ok
23:31:57.0799 2432 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
23:31:57.0815 2432 LSI_FC - ok
23:31:57.0831 2432 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
23:31:57.0831 2432 LSI_SAS - ok
23:31:57.0846 2432 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
23:31:57.0846 2432 LSI_SAS2 - ok
23:31:57.0877 2432 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
23:31:57.0877 2432 LSI_SCSI - ok
23:31:57.0893 2432 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
23:31:57.0893 2432 luafv - ok
23:31:57.0909 2432 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
23:31:57.0924 2432 Mcx2Svc - ok
23:31:57.0924 2432 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
23:31:57.0924 2432 megasas - ok
23:31:57.0940 2432 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
23:31:57.0956 2432 MegaSR - ok
23:31:58.0018 2432 Microsoft SharePoint Workspace Audit Service - ok
23:31:58.0049 2432 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
23:31:58.0065 2432 MMCSS - ok
23:31:58.0081 2432 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
23:31:58.0081 2432 Modem - ok
23:31:58.0096 2432 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
23:31:58.0096 2432 monitor - ok
23:31:58.0112 2432 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
23:31:58.0112 2432 mouclass - ok
23:31:58.0127 2432 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
23:31:58.0127 2432 mouhid - ok
23:31:58.0159 2432 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
23:31:58.0159 2432 mountmgr - ok
23:31:58.0174 2432 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys
23:31:58.0174 2432 mpio - ok
23:31:58.0190 2432 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
23:31:58.0190 2432 mpsdrv - ok
23:31:58.0221 2432 [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc C:\Windows\system32\mpssvc.dll
23:31:58.0237 2432 MpsSvc - ok
23:31:58.0268 2432 [ 21F4B24ACFC79A483515BD986DD9043F ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
23:31:58.0268 2432 MRxDAV - ok
23:31:58.0284 2432 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
23:31:58.0284 2432 mrxsmb - ok
23:31:58.0299 2432 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
23:31:58.0315 2432 mrxsmb10 - ok
23:31:58.0315 2432 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
23:31:58.0315 2432 mrxsmb20 - ok
23:31:58.0346 2432 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys
23:31:58.0346 2432 msahci - ok
23:31:58.0362 2432 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys
23:31:58.0377 2432 msdsm - ok
23:31:58.0393 2432 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
23:31:58.0393 2432 MSDTC - ok
23:31:58.0409 2432 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
23:31:58.0409 2432 Msfs - ok
23:31:58.0424 2432 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
23:31:58.0424 2432 mshidkmdf - ok
23:31:58.0440 2432 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
23:31:58.0440 2432 msisadrv - ok
23:31:58.0471 2432 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
23:31:58.0471 2432 MSiSCSI - ok
23:31:58.0471 2432 msiserver - ok
23:31:58.0502 2432 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
23:31:58.0502 2432 MSKSSRV - ok
23:31:58.0518 2432 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
23:31:58.0518 2432 MSPCLOCK - ok
23:31:58.0534 2432 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
23:31:58.0534 2432 MSPQM - ok
23:31:58.0549 2432 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
23:31:58.0549 2432 MsRPC - ok
23:31:58.0565 2432 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
23:31:58.0565 2432 mssmbios - ok
23:31:58.0581 2432 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
23:31:58.0581 2432 MSTEE - ok
23:31:58.0596 2432 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
23:31:58.0596 2432 MTConfig - ok
23:31:58.0612 2432 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
23:31:58.0612 2432 Mup - ok
23:31:58.0674 2432 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll
23:31:58.0674 2432 napagent - ok
23:31:58.0706 2432 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
23:31:58.0706 2432 NativeWifiP - ok
23:31:58.0752 2432 [ 8C9C922D71F1CD4DEF73F186416B7896 ] NDIS C:\Windows\system32\drivers\ndis.sys
23:31:58.0752 2432 NDIS - ok
23:31:58.0768 2432 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
23:31:58.0768 2432 NdisCap - ok
23:31:58.0768 2432 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
23:31:58.0768 2432 NdisTapi - ok
23:31:58.0815 2432 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
23:31:58.0815 2432 Ndisuio - ok
23:31:58.0831 2432 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
23:31:58.0831 2432 NdisWan - ok
23:31:58.0846 2432 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
23:31:58.0846 2432 NDProxy - ok
23:31:58.0862 2432 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
23:31:58.0862 2432 NetBIOS - ok
23:31:58.0877 2432 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
23:31:58.0877 2432 NetBT - ok
23:31:58.0877 2432 [ 803B370865D907EA21DC0C2B6A8936B5 ] Netlogon C:\Windows\system32\lsass.exe
23:31:58.0877 2432 Netlogon - ok
23:31:58.0924 2432 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
23:31:58.0924 2432 Netman - ok
23:31:58.0971 2432 [ 21318671BCAD3ACF16638F98D4D00973 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
23:31:58.0987 2432 NetMsmqActivator - ok
23:31:58.0987 2432 [ 21318671BCAD3ACF16638F98D4D00973 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
23:31:59.0002 2432 NetPipeActivator - ok
23:31:59.0018 2432 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
23:31:59.0034 2432 netprofm - ok
23:31:59.0049 2432 [ 21318671BCAD3ACF16638F98D4D00973 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
23:31:59.0049 2432 NetTcpActivator - ok
23:31:59.0065 2432 [ 21318671BCAD3ACF16638F98D4D00973 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
23:31:59.0065 2432 NetTcpPortSharing - ok
23:31:59.0081 2432 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
23:31:59.0081 2432 nfrd960 - ok
23:31:59.0112 2432 [ 374071043F9E4231EE43BE2BB48DD36D ] NlaSvc C:\Windows\System32\nlasvc.dll
23:31:59.0127 2432 NlaSvc - ok
23:31:59.0127 2432 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
23:31:59.0127 2432 Npfs - ok
23:31:59.0159 2432 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
23:31:59.0159 2432 nsi - ok
23:31:59.0174 2432 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
23:31:59.0174 2432 nsiproxy - ok
23:31:59.0221 2432 [ 5E43D2B0EE64123D4880DFA6626DEFDE ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
23:31:59.0237 2432 Ntfs - ok
23:31:59.0252 2432 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
23:31:59.0252 2432 Null - ok
23:31:59.0456 2432 [ F8BE83F0C686533170F7537E94BF411A ] nv C:\Windows\system32\DRIVERS\nv4_mini.sys
23:31:59.0502 2432 nv - ok
23:31:59.0549 2432 [ B5E37E31C053BC9950455A257526514B ] NVENETFD C:\Windows\system32\DRIVERS\nvm62x32.sys
23:31:59.0549 2432 NVENETFD - ok
23:31:59.0581 2432 [ 9F8EE4948B7ADD9D12F778F61A2758A4 ] NVHDA C:\Windows\system32\drivers\nvhda32v.sys
23:31:59.0581 2432 NVHDA - ok
23:31:59.0862 2432 [ 054559C7155EAE6F4D8063174D3066B7 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
23:31:59.0924 2432 nvlddmkm - ok
23:32:00.0018 2432 [ 0219B05730635FCAB3A9925D3374C464 ] NVNET C:\Windows\system32\DRIVERS\nvmf6232.sys
23:32:00.0018 2432 NVNET - ok
23:32:00.0112 2432 [ D2FE0376285A783693469422678E878B ] NvNetworkService C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
23:32:00.0112 2432 NvNetworkService - ok
23:32:00.0143 2432 [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid C:\Windows\system32\drivers\nvraid.sys
23:32:00.0143 2432 nvraid - ok
23:32:00.0159 2432 [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor C:\Windows\system32\drivers\nvstor.sys
23:32:00.0159 2432 nvstor - ok
23:32:00.0596 2432 [ DA09A1DAEBD38226C0CB22BA8D967F63 ] NvStreamSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
23:32:00.0674 2432 NvStreamSvc - ok
23:32:00.0752 2432 [ A57002E448D6BFCE2111FAA7F47FC584 ] nvsvc C:\Windows\system32\nvvsvc.exe
23:32:00.0768 2432 nvsvc - ok
23:32:00.0799 2432 [ D230D757C084FB8D7BC4936E3D6334B8 ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad32v.sys
23:32:00.0799 2432 nvvad_WaveExtensible - ok
23:32:00.0831 2432 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
23:32:00.0846 2432 nv_agp - ok
23:32:00.0846 2432 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
23:32:00.0846 2432 ohci1394 - ok
23:32:00.0893 2432 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
23:32:00.0893 2432 ose - ok
23:32:01.0081 2432 [ 358A9CCA612C68EB2F07DDAD4CE1D8D7 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
23:32:01.0112 2432 osppsvc - ok
23:32:01.0159 2432 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
23:32:01.0159 2432 p2pimsvc - ok
23:32:01.0190 2432 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
23:32:01.0206 2432 p2psvc - ok
23:32:01.0221 2432 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
23:32:01.0221 2432 Parport - ok
23:32:01.0252 2432 [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr C:\Windows\system32\drivers\partmgr.sys
23:32:01.0252 2432 partmgr - ok
23:32:01.0268 2432 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
23:32:01.0268 2432 Parvdm - ok
23:32:01.0284 2432 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
23:32:01.0284 2432 PcaSvc - ok
23:32:01.0315 2432 [ F451DCACBAA67F3307305EBD4A39EA07 ] pccsmcfd C:\Windows\system32\DRIVERS\pccsmcfd.sys
23:32:01.0315 2432 pccsmcfd - ok
23:32:01.0331 2432 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys
23:32:01.0331 2432 pci - ok
23:32:01.0346 2432 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys
23:32:01.0346 2432 pciide - ok
23:32:01.0362 2432 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
23:32:01.0377 2432 pcmcia - ok
23:32:01.0377 2432 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
23:32:01.0377 2432 pcw - ok
23:32:01.0409 2432 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
23:32:01.0409 2432 PEAUTH - ok
23:32:01.0456 2432 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
23:32:01.0471 2432 PeerDistSvc - ok
23:32:01.0534 2432 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll
23:32:01.0565 2432 pla - ok
23:32:01.0581 2432 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay C:\Windows\system32\umpnpmgr.dll
23:32:01.0596 2432 PlugPlay - ok
23:32:01.0643 2432 [ 831883B107684301F48ACE752C963984 ] PnkBstrA C:\Windows\system32\PnkBstrA.exe
23:32:01.0643 2432 PnkBstrA - ok
23:32:01.0674 2432 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
23:32:01.0674 2432 PNRPAutoReg - ok
23:32:01.0690 2432 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
23:32:01.0706 2432 PNRPsvc - ok
23:32:01.0721 2432 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
23:32:01.0737 2432 PolicyAgent - ok
23:32:01.0768 2432 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll
23:32:01.0768 2432 Power - ok
23:32:01.0784 2432 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys

23:32:01.0784 2432 PptpMiniport - ok
23:32:01.0815 2432 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
23:32:01.0815 2432 Processor - ok
23:32:01.0831 2432 [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc C:\Windows\system32\profsvc.dll
23:32:01.0846 2432 ProfSvc - ok
23:32:01.0862 2432 [ 803B370865D907EA21DC0C2B6A8936B5 ] ProtectedStorage C:\Windows\system32\lsass.exe
23:32:01.0862 2432 ProtectedStorage - ok
23:32:01.0877 2432 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
23:32:01.0877 2432 Psched - ok
23:32:01.0909 2432 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
23:32:01.0924 2432 ql2300 - ok
23:32:01.0940 2432 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
23:32:01.0940 2432 ql40xx - ok
23:32:01.0971 2432 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
23:32:01.0971 2432 QWAVE - ok
23:32:02.0002 2432 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
23:32:02.0002 2432 QWAVEdrv - ok
23:32:02.0018 2432 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
23:32:02.0018 2432 RasAcd - ok
23:32:02.0034 2432 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
23:32:02.0034 2432 RasAgileVpn - ok
23:32:02.0049 2432 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
23:32:02.0065 2432 RasAuto - ok
23:32:02.0065 2432 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
23:32:02.0065 2432 Rasl2tp - ok
23:32:02.0112 2432 [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan C:\Windows\System32\rasmans.dll
23:32:02.0112 2432 RasMan - ok
23:32:02.0112 2432 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
23:32:02.0127 2432 RasPppoe - ok
23:32:02.0127 2432 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
23:32:02.0127 2432 RasSstp - ok
23:32:02.0143 2432 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
23:32:02.0143 2432 rdbss - ok
23:32:02.0159 2432 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
23:32:02.0159 2432 rdpbus - ok
23:32:02.0174 2432 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
23:32:02.0174 2432 RDPCDD - ok
23:32:02.0206 2432 [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
23:32:02.0206 2432 RDPDR - ok
23:32:02.0206 2432 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
23:32:02.0206 2432 RDPENCDD - ok
23:32:02.0221 2432 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
23:32:02.0221 2432 RDPREFMP - ok
23:32:02.0252 2432 [ 65375DF758CA1872AB7EBBBA457FD5E6 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
23:32:02.0252 2432 RdpVideoMiniport - ok
23:32:02.0284 2432 [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
23:32:02.0284 2432 RDPWD - ok
23:32:02.0315 2432 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
23:32:02.0331 2432 rdyboost - ok
23:32:02.0721 2432 [ 93190D810D947F4E49BEC75C1295006B ] ReimageRealTimeProtection C:\Program Files\Reimage\Reimage Repair\ReiGuard.exe
23:32:02.0752 2432 ReimageRealTimeProtection - ok
23:32:02.0784 2432 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
23:32:02.0799 2432 RemoteAccess - ok
23:32:02.0815 2432 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
23:32:02.0815 2432 RemoteRegistry - ok
23:32:02.0831 2432 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
23:32:02.0831 2432 RpcEptMapper - ok
23:32:02.0862 2432 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
23:32:02.0862 2432 RpcLocator - ok
23:32:02.0877 2432 [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs C:\Windows\system32\rpcss.dll
23:32:02.0877 2432 RpcSs - ok
23:32:02.0909 2432 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
23:32:02.0909 2432 rspndr - ok
23:32:02.0940 2432 [ 7FA7F2E249A5DCBB7970630E15E1F482 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
23:32:02.0940 2432 s3cap - ok
23:32:02.0956 2432 [ 803B370865D907EA21DC0C2B6A8936B5 ] SamSs C:\Windows\system32\lsass.exe
23:32:02.0956 2432 SamSs - ok
23:32:02.0987 2432 [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
23:32:02.0987 2432 sbp2port - ok
23:32:03.0018 2432 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
23:32:03.0018 2432 SCardSvr - ok
23:32:03.0049 2432 [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
23:32:03.0049 2432 scfilter - ok
23:32:03.0112 2432 [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule C:\Windows\system32\schedsvc.dll
23:32:03.0127 2432 Schedule - ok
23:32:03.0174 2432 [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc C:\Windows\System32\certprop.dll
23:32:03.0174 2432 SCPolicySvc - ok
23:32:03.0206 2432 [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC C:\Windows\System32\SDRSVC.dll
23:32:03.0221 2432 SDRSVC - ok
23:32:03.0237 2432 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
23:32:03.0237 2432 secdrv - ok
23:32:03.0252 2432 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
23:32:03.0268 2432 seclogon - ok
23:32:03.0268 2432 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\system32\sens.dll
23:32:03.0284 2432 SENS - ok
23:32:03.0299 2432 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
23:32:03.0315 2432 SensrSvc - ok
23:32:03.0315 2432 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
23:32:03.0331 2432 Serenum - ok
23:32:03.0346 2432 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
23:32:03.0346 2432 Serial - ok
23:32:03.0362 2432 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
23:32:03.0362 2432 sermouse - ok
23:32:03.0393 2432 [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv C:\Windows\system32\sessenv.dll
23:32:03.0409 2432 SessionEnv - ok
23:32:03.0424 2432 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
23:32:03.0424 2432 sffdisk - ok
23:32:03.0440 2432 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
23:32:03.0440 2432 sffp_mmc - ok
23:32:03.0456 2432 [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
23:32:03.0456 2432 sffp_sd - ok
23:32:03.0471 2432 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
23:32:03.0471 2432 sfloppy - ok
23:32:03.0518 2432 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
23:32:03.0518 2432 SharedAccess - ok
23:32:03.0581 2432 [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
23:32:03.0581 2432 ShellHWDetection - ok
23:32:03.0612 2432 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\drivers\sisagp.sys
23:32:03.0612 2432 sisagp - ok
23:32:03.0627 2432 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
23:32:03.0627 2432 SiSRaid2 - ok
23:32:03.0643 2432 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
23:32:03.0643 2432 SiSRaid4 - ok
23:32:03.0659 2432 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
23:32:03.0659 2432 Smb - ok
23:32:03.0706 2432 [ 5BCEB1B306878035DACBA6DD18366EDA ] snapman C:\Windows\system32\DRIVERS\snapman.sys
23:32:03.0706 2432 snapman - ok
23:32:03.0737 2432 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
23:32:03.0752 2432 SNMPTRAP - ok
23:32:03.0768 2432 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
23:32:03.0768 2432 spldr - ok
23:32:03.0815 2432 [ 9AEA093B8F9C37CF45538382CABA2475 ] Spooler C:\Windows\System32\spoolsv.exe
23:32:03.0831 2432 Spooler - ok
23:32:03.0940 2432 [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc C:\Windows\system32\sppsvc.exe
23:32:03.0971 2432 sppsvc - ok
23:32:03.0987 2432 [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify C:\Windows\system32\sppuinotify.dll
23:32:03.0987 2432 sppuinotify - ok
23:32:04.0002 2432 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv C:\Windows\system32\DRIVERS\srv.sys
23:32:04.0002 2432 srv - ok
23:32:04.0018 2432 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
23:32:04.0034 2432 srv2 - ok
23:32:04.0049 2432 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
23:32:04.0049 2432 srvnet - ok
23:32:04.0065 2432 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
23:32:04.0081 2432 SSDPSRV - ok
23:32:04.0096 2432 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
23:32:04.0096 2432 SstpSvc - ok
23:32:04.0112 2432 Steam Client Service - ok
23:32:04.0159 2432 [ B5D2F4BF587FD60AF75B09EFC1AD0E0A ] Stereo Service C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
23:32:04.0159 2432 Stereo Service - ok
23:32:04.0190 2432 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
23:32:04.0190 2432 stexstor - ok
23:32:04.0206 2432 [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc C:\Windows\System32\wiaservc.dll
23:32:04.0221 2432 StiSvc - ok
23:32:04.0221 2432 [ 472AF0311073DCECEAA8FA18BA2BDF89 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
23:32:04.0221 2432 storflt - ok
23:32:04.0252 2432 [ DCAFFD62259E0BDB433DD67B5BB37619 ] storvsc C:\Windows\system32\drivers\storvsc.sys
23:32:04.0252 2432 storvsc - ok
23:32:04.0284 2432 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\drivers\swenum.sys
23:32:04.0284 2432 swenum - ok
23:32:04.0315 2432 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
23:32:04.0331 2432 swprv - ok
23:32:04.0346 2432 Synth3dVsc - ok
23:32:04.0409 2432 [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain C:\Windows\system32\sysmain.dll
23:32:04.0424 2432 SysMain - ok
23:32:04.0456 2432 [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll
23:32:04.0456 2432 TabletInputService - ok
23:32:04.0502 2432 [ 613BF4820361543956909043A265C6AC ] TapiSrv C:\Windows\System32\tapisrv.dll
23:32:04.0502 2432 TapiSrv - ok
23:32:04.0534 2432 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
23:32:04.0534 2432 TBS - ok
23:32:04.0581 2432 [ CA59F7C570AF70BC174F477CFE2D9EE3 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
23:32:04.0596 2432 Tcpip - ok
23:32:04.0612 2432 [ CA59F7C570AF70BC174F477CFE2D9EE3 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
23:32:04.0627 2432 TCPIP6 - ok
23:32:04.0659 2432 [ 3EEBD3BD93DA46A26E89893C7AB2FF3B ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
23:32:04.0659 2432 tcpipreg - ok
23:32:04.0674 2432 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
23:32:04.0690 2432 TDPIPE - ok
23:32:04.0721 2432 [ 8DE3E45000BA8C9EBB16737D3F83E216 ] tdrpman258 C:\Windows\system32\DRIVERS\tdrpm258.sys
23:32:04.0737 2432 tdrpman258 - ok
23:32:04.0737 2432 [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
23:32:04.0737 2432 TDTCP - ok
23:32:04.0768 2432 [ B459575348C20E8121D6039DA063C704 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
23:32:04.0768 2432 tdx - ok
23:32:04.0799 2432 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD C:\Windows\system32\drivers\termdd.sys
23:32:04.0799 2432 TermDD - ok
23:32:04.0831 2432 [ 382C804C92811BE57829D8E550A900E2 ] TermService C:\Windows\System32\termsrv.dll
23:32:04.0846 2432 TermService - ok
23:32:04.0862 2432 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
23:32:04.0862 2432 Themes - ok
23:32:04.0877 2432 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
23:32:04.0877 2432 THREADORDER - ok
23:32:04.0909 2432 [ 3E06987FEDBCDFBFF8E85EF8108565F9 ] timounter C:\Windows\system32\DRIVERS\timntr.sys
23:32:04.0909 2432 timounter - ok
23:32:04.0924 2432 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
23:32:04.0940 2432 TrkWks - ok
23:32:04.0971 2432 [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
23:32:04.0971 2432 TrustedInstaller - ok
23:32:05.0002 2432 [ B37B08F2E5EEB1A37E448E09BACE1101 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
23:32:05.0002 2432 tssecsrv - ok
23:32:05.0034 2432 [ C6A5FBD4977305E1FA23E02C042DB463 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
23:32:05.0049 2432 TsUsbFlt - ok
23:32:05.0049 2432 tsusbhub - ok
23:32:05.0096 2432 [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
23:32:05.0096 2432 tunnel - ok
23:32:05.0127 2432 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
23:32:05.0143 2432 uagp35 - ok
23:32:05.0174 2432 [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs C:\Windows\system32\DRIVERS\udfs.sys
23:32:05.0174 2432 udfs - ok
23:32:05.0221 2432 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
23:32:05.0221 2432 UI0Detect - ok
23:32:05.0252 2432 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
23:32:05.0252 2432 uliagpkx - ok
23:32:05.0268 2432 [ D295BED4B898F0FD999FCFA9B32B071B ] umbus C:\Windows\system32\drivers\umbus.sys
23:32:05.0268 2432 umbus - ok
23:32:05.0284 2432 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
23:32:05.0284 2432 UmPass - ok
23:32:05.0315 2432 [ 409994A8EACEEE4E328749C0353527A0 ] UmRdpService C:\Windows\System32\umrdp.dll
23:32:05.0331 2432 UmRdpService - ok
23:32:05.0362 2432 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
23:32:05.0362 2432 upnphost - ok
23:32:05.0393 2432 [ 0803FBA9FE829D61AE26EC0BCC910C46 ] usbccgp C:\Windows\system32\drivers\usbccgp.sys
23:32:05.0393 2432 usbccgp - ok
23:32:05.0424 2432 [ 2352AB5F9F8F097BF9D41D5A4718A041 ] usbcir C:\Windows\system32\drivers\usbcir.sys
23:32:05.0424 2432 usbcir - ok
23:32:05.0440 2432 [ D40855F89B69305140BBD7E9A3BA2DA6 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
23:32:05.0440 2432 usbehci - ok
23:32:05.0456 2432 [ EDF2DF71C4F1E13A6AC75F5224DE655A ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
23:32:05.0456 2432 usbhub - ok
23:32:05.0471 2432 [ 9828C8D14CC2676421778F0DE638CF97 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
23:32:05.0471 2432 usbohci - ok
23:32:05.0487 2432 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
23:32:05.0487 2432 usbprint - ok
23:32:05.0518 2432 [ 31181DE6190B39FC8007DFFD1A48FFD6 ] usbser C:\Windows\system32\drivers\usbser.sys
23:32:05.0518 2432 usbser - ok
23:32:05.0534 2432 [ F991AB9CC6B908DB552166768176896A ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
23:32:05.0549 2432 USBSTOR - ok
23:32:05.0549 2432 [ 800AABFD625EEFF899F7E5496BDE37AB ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
23:32:05.0549 2432 usbuhci - ok
23:32:05.0565 2432 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
23:32:05.0581 2432 UxSms - ok
23:32:05.0596 2432 [ 803B370865D907EA21DC0C2B6A8936B5 ] VaultSvc C:\Windows\system32\lsass.exe
23:32:05.0596 2432 VaultSvc - ok
23:32:05.0612 2432 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
23:32:05.0612 2432 vdrvroot - ok
23:32:05.0643 2432 [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds C:\Windows\System32\vds.exe
23:32:05.0659 2432 vds - ok
23:32:05.0674 2432 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
23:32:05.0674 2432 vga - ok
23:32:05.0690 2432 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
23:32:05.0690 2432 VgaSave - ok
23:32:05.0690 2432 VGPU - ok
23:32:05.0721 2432 [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
23:32:05.0721 2432 vhdmp - ok
23:32:05.0737 2432 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\drivers\viaagp.sys
23:32:05.0737 2432 viaagp - ok
23:32:05.0752 2432 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
23:32:05.0752 2432 ViaC7 - ok
23:32:05.0768 2432 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\drivers\viaide.sys
23:32:05.0784 2432 viaide - ok
23:32:05.0799 2432 [ C2F2911156FDC7817C52829C86DA494E ] vmbus C:\Windows\system32\drivers\vmbus.sys
23:32:05.0799 2432 vmbus - ok
23:32:05.0815 2432 [ D4D77455211E204F370D08F4963063CE ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
23:32:05.0815 2432 VMBusHID - ok
23:32:05.0815 2432 [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr C:\Windows\system32\drivers\volmgr.sys
23:32:05.0815 2432 volmgr - ok
23:32:05.0846 2432 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
23:32:05.0846 2432 volmgrx - ok
23:32:05.0846 2432 [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap C:\Windows\system32\drivers\volsnap.sys
23:32:05.0846 2432 volsnap - ok
23:32:05.0862 2432 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
23:32:05.0862 2432 vsmraid - ok
23:32:05.0909 2432 [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS C:\Windows\system32\vssvc.exe
23:32:05.0909 2432 VSS - ok
23:32:05.0924 2432 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
23:32:05.0924 2432 vwifibus - ok
23:32:05.0956 2432 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
23:32:05.0956 2432 W32Time - ok
23:32:05.0971 2432 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
23:32:05.0971 2432 WacomPen - ok
23:32:06.0002 2432 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
23:32:06.0002 2432 WANARP - ok
23:32:06.0002 2432 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
23:32:06.0002 2432 Wanarpv6 - ok
23:32:06.0049 2432 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
23:32:06.0065 2432 WatAdminSvc - ok
23:32:06.0112 2432 [ 691E3285E53DCA558E1A84667F13E15A ] wbengine C:\Windows\system32\wbengine.exe
23:32:06.0127 2432 wbengine - ok
23:32:06.0143 2432 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
23:32:06.0143 2432 WbioSrvc - ok
23:32:06.0174 2432 [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc C:\Windows\System32\wcncsvc.dll
23:32:06.0190 2432 wcncsvc - ok
23:32:06.0206 2432 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
23:32:06.0206 2432 WcsPlugInService - ok
23:32:06.0237 2432 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
23:32:06.0237 2432 Wd - ok
23:32:06.0268 2432 [ 25944D2CC49E0A6C581D02A74B7D6645 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
23:32:06.0268 2432 Wdf01000 - ok
23:32:06.0299 2432 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
23:32:06.0299 2432 WdiServiceHost - ok
23:32:06.0315 2432 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
23:32:06.0315 2432 WdiSystemHost - ok
23:32:06.0346 2432 [ 75E8EBD7040CE238684333F97014762A ] WebClient C:\Windows\System32\webclnt.dll
23:32:06.0346 2432 WebClient - ok
23:32:06.0362 2432 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
23:32:06.0377 2432 Wecsvc - ok
23:32:06.0393 2432 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
23:32:06.0393 2432 wercplsupport - ok
23:32:06.0424 2432 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
23:32:06.0440 2432 WerSvc - ok
23:32:06.0440 2432 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
23:32:06.0456 2432 WfpLwf - ok
23:32:06.0456 2432 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
23:32:06.0456 2432 WIMMount - ok
23:32:06.0518 2432 [ 082CF481F659FAE0DE51AD060881EB47 ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
23:32:06.0534 2432 WinDefend - ok
23:32:06.0549 2432 WinHttpAutoProxySvc - ok
23:32:06.0612 2432 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
23:32:06.0612 2432 Winmgmt - ok
23:32:06.0690 2432 [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM C:\Windows\system32\WsmSvc.dll
23:32:06.0721 2432 WinRM - ok
23:32:06.0768 2432 [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
23:32:06.0768 2432 WinUsb - ok
23:32:06.0799 2432 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
23:32:06.0815 2432 Wlansvc - ok
23:32:06.0846 2432 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
23:32:06.0846 2432 WmiAcpi - ok
23:32:06.0862 2432 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
23:32:06.0862 2432 wmiApSrv - ok
23:32:06.0971 2432 [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
23:32:06.0971 2432 WMPNetworkSvc - ok
23:32:07.0002 2432 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
23:32:07.0002 2432 WPCSvc - ok
23:32:07.0034 2432 [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
23:32:07.0049 2432 WPDBusEnum - ok
23:32:07.0049 2432 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
23:32:07.0049 2432 ws2ifsl - ok
23:32:07.0065 2432 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\system32\wscsvc.dll
23:32:07.0081 2432 wscsvc - ok
23:32:07.0081 2432 WSearch - ok
23:32:07.0159 2432 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
23:32:07.0174 2432 wuauserv - ok
23:32:07.0206 2432 [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
23:32:07.0206 2432 WudfPf - ok
23:32:07.0221 2432 [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
23:32:07.0221 2432 WUDFRd - ok
23:32:07.0252 2432 [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
23:32:07.0268 2432 wudfsvc - ok
23:32:07.0284 2432 [ 3C5E51C05BE9B56EAFF4E388C3AB25E4 ] WwanSvc C:\Windows\System32\wwansvc.dll
23:32:07.0299 2432 WwanSvc - ok
23:32:07.0299 2432 ================ Scan global ===============================
23:32:07.0346 2432 [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll
23:32:07.0377 2432 [ 51BB04243DF6196C06E125898127E397 ] C:\Windows\system32\winsrv.dll
23:32:07.0377 2432 [ 51BB04243DF6196C06E125898127E397 ] C:\Windows\system32\winsrv.dll
23:32:07.0424 2432 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
23:32:07.0440 2432 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
23:32:07.0456 2432 [Global] - ok
23:32:07.0456 2432 ================ Scan MBR ==================================
23:32:07.0456 2432 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
23:32:08.0002 2432 \Device\Harddisk0\DR0 - ok
23:32:08.0002 2432 ================ Scan VBR ==================================
23:32:08.0002 2432 [ 36820D8FAB3B8860A52886F8756ADD3A ] \Device\Harddisk0\DR0\Partition1
23:32:08.0002 2432 \Device\Harddisk0\DR0\Partition1 - ok
23:32:08.0018 2432 [ FFEBD21C7B98F1E0CD3D09B641180013 ] \Device\Harddisk0\DR0\Partition2
23:32:08.0034 2432 \Device\Harddisk0\DR0\Partition2 - ok
23:32:08.0034 2432 ============================================================
23:32:08.0034 2432 Scan finished
23:32:08.0034 2432 ============================================================
23:32:08.0034 1580 Detected object count: 0
23:32:08.0034 1580 Actual detected object count: 0
23:32:23.0034 1968 Deinitialize success