PC-HELP.CZ

Dobrý den, zdá se mi že je PC nějaké zpomalené, chrome často zamrzá. Prosím o kontrolu. Avast i MBAM bez nálezu. Díky.
HJT LOG

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 21:01:11, on 13.7.2014
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16555)

FIREFOX: 28.0 (cs)
Boot mode: Normal

Running processes:
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Ondra\AppData\Local\FluxSoftware\Flux\flux.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\DFX\DFX.exe
C:\Windows\system\Cm106eye.exe
C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp32.exe
C:\Program Files (x86)\DFX\Universal\Apps\dfxItunesSong.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Ondra\Desktop\Programy\HijackThis.exe
C:\Windows\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [DFX] C:\Program Files (x86)\DFX\DFX.exe -startup
O4 - HKCU\..\Run: [f.lux] "C:\Users\Ondra\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_13_0_0_214_Plugin.exe -update plugin
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8479 bytes

Platform: Windows 7 co si doinstalovat SP1?



Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

Tož aktualizace W7 bych si doinstalovat mohl, no...
MBAM přidám později.

# AdwCleaner v3.215 - Report created 14/07/2014 at 13:19:11
# Updated 09/07/2014 by Xplode
# Operating System : Windows 7 Ultimate (64 bits)
# Username : Ondra - ONDRA-PC
# Running from : C:\Users\Ondra\Desktop\adwcleaner_3.215.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Found : C:\ProgramData\NCH Software

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\BI
Key Found : HKCU\Software\Conduit
Key Found : [x64] HKCU\Software\BI
Key Found : [x64] HKCU\Software\Conduit
Key Found : HKLM\Software\Conduit
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\bi_client_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\bi_client_RASMANCS

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16555


-\\ Google Chrome v35.0.1916.114

[ File : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1197 octets] - [14/07/2014 13:19:11]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1257 octets] ##########

Jo doinstaluj , co nejdřív.

A Malwarebytes' Anti-Malware?

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

MBAM
Ostatní postnu za chvíli.

Malwarebytes Anti-Malware
http://www.malwarebytes.org

Datum skenování: 14.7.2014
Čas skenování: 13:25:36
Protokol:
Správce: Ano

Verze: 2.00.2.1012
Databáze malwaru: v2014.07.14.03
Databáze rootkitů: v2014.07.09.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Self-protection: Vypnuto

OS: Windows 7
CPU: x64
Souborový systém: NTFS
Uživatel: Ondra

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 329392
Uplynulý čas: 17 min, 0 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristics: Zapnuto
PUP: Varovat
PUM: Zapnuto

Procesy: 0
(No malicious items detected)

Moduly: 0
(No malicious items detected)

Klíče registru: 0
(No malicious items detected)

Hodnoty registru: 0
(No malicious items detected)

Data registru: 0
(No malicious items detected)

Složky: 0
(No malicious items detected)

Soubory: 0
(No malicious items detected)

Fyzické sektory: 0
(No malicious items detected)


(end)

# AdwCleaner v3.215 - Report created 14/07/2014 at 19:24:47
# Updated 09/07/2014 by Xplode
# Operating System : Windows 7 Ultimate (64 bits)
# Username : Ondra - ONDRA-PC
# Running from : C:\Users\Ondra\Desktop\adwcleaner_3.215.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\NCH Software

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\bi_client_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\bi_client_RASMANCS
Key Deleted : HKCU\Software\BI
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKLM\Software\Conduit

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16555


-\\ Google Chrome v35.0.1916.114

[ File : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1345 octets] - [14/07/2014 13:19:11]
AdwCleaner[R1].txt - [1405 octets] - [14/07/2014 19:22:47]
AdwCleaner[S0].txt - [1269 octets] - [14/07/2014 19:24:47]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1329 octets] ##########

Ten JRT nejde, něco proběhne a ukončí se, antivir vyplý.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Mohu se zeptat na průběžný stav? Dle logů to dle mého úsudku vypadá OK

RogueKiller V9.2.3.0 (x64) [Jul 11 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 7 (6.1.7600 ) 64 bits version
Spuštěno v : Normální režim
Uživatel : Ondra [Práva správce]
Mód : Kontrola -- Datum : 07/14/2014 21:38:07

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 11 ¤¤¤
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FairplayKD -> NALEZENO
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\FairplayKD -> NALEZENO
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\FairplayKD -> NALEZENO
[PUM.DesktopIcons] (X64) HKEY_USERS\S-1-5-21-2385782278-2715505607-1076999485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NALEZENO
[PUM.DesktopIcons] (X86) HKEY_USERS\S-1-5-21-2385782278-2715505607-1076999485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NALEZENO
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NALEZENO
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NALEZENO
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NALEZENO
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NALEZENO
[PUM.DesktopIcons] (X64) HKEY_USERS\S-1-5-21-2385782278-2715505607-1076999485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NALEZENO
[PUM.DesktopIcons] (X86) HKEY_USERS\S-1-5-21-2385782278-2715505607-1076999485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 193 (Driver: NAHRÁNO) ¤¤¤
[Filter(Kernel.Filter)] \Driver\atapi @ Unknown : \Driver\Disk @ \Device\Harddisk2\DR2 (\SystemRoot\System32\Drivers\Fs_Rec.sys)
[Filter(Kernel.Filter)] \Driver\atapi @ Unknown : \Driver\Disk @ \Device\Harddisk1\DR1 (\SystemRoot\System32\Drivers\Fs_Rec.sys)
[Filter(Kernel.Filter)] \Driver\atapi @ Unknown : \Driver\Disk @ \Device\Harddisk0\DR0 (\SystemRoot\System32\Drivers\Fs_Rec.sys)
[EAT:Addr] (explorer.exe) ehSSO.dll - ADVANCEDSETUPDIALOG : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999730c
[EAT:Addr] (explorer.exe) ehSSO.dll - AbortPrinter : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999d220
[EAT:Addr] (explorer.exe) ehSSO.dll - AddFormA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9997384
[EAT:Addr] (explorer.exe) ehSSO.dll - AddFormW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999f2e0
[EAT:Addr] (explorer.exe) ehSSO.dll - AddJobA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9999648
[EAT:Addr] (explorer.exe) ehSSO.dll - AddJobW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a4fa0
[EAT:Addr] (explorer.exe) ehSSO.dll - AddMonitorA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9997824
[EAT:Addr] (explorer.exe) ehSSO.dll - AddMonitorW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a55e4
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPortA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9997590
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPortExA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9997c50
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPortExW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a0728
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPortW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a7aa8
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPrintProcessorA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9996700
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPrintProcessorW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a3f98
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPrintProvidorA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9997a7c
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPrintProvidorW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a0300
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPrinterA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9995bf8
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPrinterConnection2A : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99959b8
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPrinterConnection2W : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b80b8
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPrinterConnectionA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9995cf8
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPrinterConnectionW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b77c4
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPrinterDriverA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99963cc
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPrinterDriverExA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99961b4
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPrinterDriverExW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a2d00
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPrinterDriverW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999c840
[EAT:Addr] (explorer.exe) ehSSO.dll - AddPrinterW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a29a8
[EAT:Addr] (explorer.exe) ehSSO.dll - AdvancedDocumentPropertiesA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999a828
[EAT:Addr] (explorer.exe) ehSSO.dll - AdvancedDocumentPropertiesW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999f1a0
[EAT:Addr] (explorer.exe) ehSSO.dll - AdvancedSetupDialog : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999730c
[EAT:Addr] (explorer.exe) ehSSO.dll - ClosePrinter : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99af798
[EAT:Addr] (explorer.exe) ehSSO.dll - CloseSpoolFileHandle : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999e000
[EAT:Addr] (explorer.exe) ehSSO.dll - CommitSpoolData : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999dee4
[EAT:Addr] (explorer.exe) ehSSO.dll - ConfigurePortA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999762c
[EAT:Addr] (explorer.exe) ehSSO.dll - ConfigurePortW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a7d84
[EAT:Addr] (explorer.exe) ehSSO.dll - ConnectToPrinterDlg : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a157c
[EAT:Addr] (explorer.exe) ehSSO.dll - ConvertAnsiDevModeToUnicodeDevmode : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9995794
[EAT:Addr] (explorer.exe) ehSSO.dll - ConvertUnicodeDevModeToAnsiDevmode : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9998748
[EAT:Addr] (explorer.exe) ehSSO.dll - CorePrinterDriverInstalledA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b8da8
[EAT:Addr] (explorer.exe) ehSSO.dll - CorePrinterDriverInstalledW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b940c
[EAT:Addr] (explorer.exe) ehSSO.dll - CreatePrintAsyncNotifyChannel : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b84ac
[EAT:Addr] (explorer.exe) ehSSO.dll - CreatePrinterIC : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a002c
[EAT:Addr] (explorer.exe) ehSSO.dll - DEVICECAPABILITIES : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999acf8
[EAT:Addr] (explorer.exe) ehSSO.dll - DEVICEMODE : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99970e4
[EAT:Addr] (explorer.exe) ehSSO.dll - DeleteFormA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999743c
[EAT:Addr] (explorer.exe) ehSSO.dll - DeleteFormW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999f3f0
[EAT:Addr] (explorer.exe) ehSSO.dll - DeleteMonitorA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99978e8
[EAT:Addr] (explorer.exe) ehSSO.dll - DeleteMonitorW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a56bc
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePortA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99976c8
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePortW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a806c
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrintProcessorA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99979a8
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrintProcessorW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a5758
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrintProvidorA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9997b90
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrintProvidorW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a57f4
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinter : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a2c14
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinterConnectionA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9995d44
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinterConnectionW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b7ef0
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinterDataA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99968cc
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinterDataExA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9996938
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinterDataExW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999e59c
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinterDataW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999e4e8
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinterDriverA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99964bc
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinterDriverExA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99963e0
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinterDriverExW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a3e48
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinterDriverPackageA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b90c0
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinterDriverPackageW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b9670
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinterDriverW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a3efc
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinterIC : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a01c4
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinterKeyA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99969d8
[EAT:Addr] (explorer.exe) ehSSO.dll - DeletePrinterKeyW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999e66c
[EAT:Addr] (explorer.exe) ehSSO.dll - DevQueryPrint : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a07e8
[EAT:Addr] (explorer.exe) ehSSO.dll - DevQueryPrintEx : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a0888
[EAT:Addr] (explorer.exe) ehSSO.dll - DeviceCapabilities : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999acf8
[EAT:Addr] (explorer.exe) ehSSO.dll - DeviceCapabilitiesA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999acf8
[EAT:Addr] (explorer.exe) ehSSO.dll - DeviceCapabilitiesW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a776c
[EAT:Addr] (explorer.exe) ehSSO.dll - DeviceMode : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99970e4
[EAT:Addr] (explorer.exe) ehSSO.dll - DevicePropertySheets : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a908c
[EAT:Addr] (explorer.exe) ehSSO.dll - DocumentEvent : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a8358
[EAT:Addr] (explorer.exe) ehSSO.dll - DocumentPropertiesA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999a39c
[EAT:Addr] (explorer.exe) ehSSO.dll - DocumentPropertiesW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a7584
[EAT:Addr] (explorer.exe) ehSSO.dll - DocumentPropertySheets : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a93c8
[EAT:Addr] (explorer.exe) ehSSO.dll - EXTDEVICEMODE : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999a4f0
[EAT:Addr] (explorer.exe) ehSSO.dll - EndDocPrinter : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999d65c
[EAT:Addr] (explorer.exe) ehSSO.dll - EndPagePrinter : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999d138
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumFormsA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999aa4c
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumFormsW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999f7b4
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumJobsA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9998a58
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumJobsW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a2794
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumMonitorsA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999abfc
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumMonitorsW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999fa98
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPortsA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999ab00
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPortsW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999f980
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPrintProcessorDatatypesA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9999540
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPrintProcessorDatatypesW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999ca24
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPrintProcessorsA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999936c
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPrintProcessorsW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a4060
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPrinterDataA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9999e94
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPrinterDataExA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999a00c
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPrinterDataExW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999e250
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPrinterDataW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999e0b4
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPrinterDriversA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9998cc0
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPrinterDriversW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a3414
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPrinterKeyA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999a1bc
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPrinterKeyW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999e3d0
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPrintersA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9998824
[EAT:Addr] (explorer.exe) ehSSO.dll - EnumPrintersW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999b94c
[EAT:Addr] (explorer.exe) ehSSO.dll - ExtDeviceMode : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999a4f0
[EAT:Addr] (explorer.exe) ehSSO.dll - FindClosePrinterChangeNotification : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99ade34
[EAT:Addr] (explorer.exe) ehSSO.dll - FindFirstPrinterChangeNotification : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99ad920
[EAT:Addr] (explorer.exe) ehSSO.dll - FindNextPrinterChangeNotification : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99ad950
[EAT:Addr] (explorer.exe) ehSSO.dll - FlushPrinter : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999d020
[EAT:Addr] (explorer.exe) ehSSO.dll - FreePrinterNotifyInfo : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99ad61c
[EAT:Addr] (explorer.exe) ehSSO.dll - GetCorePrinterDriversA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b8b40
[EAT:Addr] (explorer.exe) ehSSO.dll - GetCorePrinterDriversW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b92a4
[EAT:Addr] (explorer.exe) ehSSO.dll - GetDefaultPrinterA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999b204
[EAT:Addr] (explorer.exe) ehSSO.dll - GetDefaultPrinterW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99ae324
[EAT:Addr] (explorer.exe) ehSSO.dll - GetFormA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999a97c
[EAT:Addr] (explorer.exe) ehSSO.dll - GetFormW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999f4d4
[EAT:Addr] (explorer.exe) ehSSO.dll - GetJobA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9998980
[EAT:Addr] (explorer.exe) ehSSO.dll - GetJobW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a2594
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrintExecutionData : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a1f1c
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrintProcessorDirectoryA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9999474
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrintProcessorDirectoryW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a4164
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrinterA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9998b94
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrinterDataA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99996a8
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrinterDataExA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9999a68
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrinterDataExW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999dcac
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrinterDataW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999dadc
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrinterDriver2A : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99959b8
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrinterDriver2W : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a3a64
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrinterDriverA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9998ecc
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrinterDriverDirectoryA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99991d8
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrinterDriverDirectoryW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a3cfc
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrinterDriverPackagePathA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b8e9c
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrinterDriverPackagePathW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b952c
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrinterDriverW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a3a2c
[EAT:Addr] (explorer.exe) ehSSO.dll - GetPrinterW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999c3ec
[EAT:Addr] (explorer.exe) ehSSO.dll - GetSpoolFileHandle : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999de1c
[EAT:Addr] (explorer.exe) ehSSO.dll - InstallPrinterDriverFromPackageA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b87ec
[EAT:Addr] (explorer.exe) ehSSO.dll - InstallPrinterDriverFromPackageW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b91a4
[EAT:Addr] (explorer.exe) ehSSO.dll - IsValidDevmodeA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9997f00
[EAT:Addr] (explorer.exe) ehSSO.dll - IsValidDevmodeW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a1d6c
[EAT:Addr] (explorer.exe) ehSSO.dll - OpenPrinter2A : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99959b8
[EAT:Addr] (explorer.exe) ehSSO.dll - OpenPrinter2W : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99af464
[EAT:Addr] (explorer.exe) ehSSO.dll - OpenPrinterA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99958b8
[EAT:Addr] (explorer.exe) ehSSO.dll - OpenPrinterW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99aee1c
[EAT:Addr] (explorer.exe) ehSSO.dll - PerfClose : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99ba3cc
[EAT:Addr] (explorer.exe) ehSSO.dll - PerfCollect : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99ba268
[EAT:Addr] (explorer.exe) ehSSO.dll - PerfOpen : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99ba120
[EAT:Addr] (explorer.exe) ehSSO.dll - PlayGdiScriptOnPrinterIC : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a0164
[EAT:Addr] (explorer.exe) ehSSO.dll - PrinterMessageBoxA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9997764
[EAT:Addr] (explorer.exe) ehSSO.dll - PrinterMessageBoxW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a02f4
[EAT:Addr] (explorer.exe) ehSSO.dll - PrinterProperties : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a7178
[EAT:Addr] (explorer.exe) ehSSO.dll - QueryColorProfile : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a0f0c
[EAT:Addr] (explorer.exe) ehSSO.dll - QueryRemoteFonts : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a0238
[EAT:Addr] (explorer.exe) ehSSO.dll - QuerySpoolMode : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a1030
[EAT:Addr] (explorer.exe) ehSSO.dll - ReadPrinter : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999d394
[EAT:Addr] (explorer.exe) ehSSO.dll - RegisterForPrintAsyncNotifications : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b81f4
[EAT:Addr] (explorer.exe) ehSSO.dll - ReportJobProcessingProgress : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b8754
[EAT:Addr] (explorer.exe) ehSSO.dll - ResetPrinterA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99959d4
[EAT:Addr] (explorer.exe) ehSSO.dll - ResetPrinterW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a23d8
[EAT:Addr] (explorer.exe) ehSSO.dll - ScheduleJob : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a5294
[EAT:Addr] (explorer.exe) ehSSO.dll - SeekPrinter : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999cf38
[EAT:Addr] (explorer.exe) ehSSO.dll - SetDefaultPrinterA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9997f1c
[EAT:Addr] (explorer.exe) ehSSO.dll - SetDefaultPrinterW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99ae854
[EAT:Addr] (explorer.exe) ehSSO.dll - SetFormA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999749c
[EAT:Addr] (explorer.exe) ehSSO.dll - SetFormW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999f694
[EAT:Addr] (explorer.exe) ehSSO.dll - SetJobA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9995aa8
[EAT:Addr] (explorer.exe) ehSSO.dll - SetJobW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999bac0
[EAT:Addr] (explorer.exe) ehSSO.dll - SetPortA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9997e0c
[EAT:Addr] (explorer.exe) ehSSO.dll - SetPortW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a11ac
[EAT:Addr] (explorer.exe) ehSSO.dll - SetPrinterA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9995d90
[EAT:Addr] (explorer.exe) ehSSO.dll - SetPrinterDataA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9996a44
[EAT:Addr] (explorer.exe) ehSSO.dll - SetPrinterDataExA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9996b20
[EAT:Addr] (explorer.exe) ehSSO.dll - SetPrinterDataExW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999e814
[EAT:Addr] (explorer.exe) ehSSO.dll - SetPrinterDataW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999e720
[EAT:Addr] (explorer.exe) ehSSO.dll - SetPrinterW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999bd50
[EAT:Addr] (explorer.exe) ehSSO.dll - SplDriverUnloadComplete : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999e92c
[EAT:Addr] (explorer.exe) ehSSO.dll - SpoolerDevQueryPrintW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a6b20
[EAT:Addr] (explorer.exe) ehSSO.dll - SpoolerPrinterEvent : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a6e70
[EAT:Addr] (explorer.exe) ehSSO.dll - StartDocDlgA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef999b044
[EAT:Addr] (explorer.exe) ehSSO.dll - StartDocDlgW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a5878
[EAT:Addr] (explorer.exe) ehSSO.dll - StartDocPrinterA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef9996820
[EAT:Addr] (explorer.exe) ehSSO.dll - StartDocPrinterW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a426c
[EAT:Addr] (explorer.exe) ehSSO.dll - StartPagePrinter : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a4910
[EAT:Addr] (explorer.exe) ehSSO.dll - UnRegisterForPrintAsyncNotifications : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b82e0
[EAT:Addr] (explorer.exe) ehSSO.dll - UploadPrinterDriverPackageA : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b898c
[EAT:Addr] (explorer.exe) ehSSO.dll - UploadPrinterDriverPackageW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99b975c
[EAT:Addr] (explorer.exe) ehSSO.dll - WaitForPrinterChange : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99adcac
[EAT:Addr] (explorer.exe) ehSSO.dll - WritePrinter : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a4f84
[EAT:Addr] (explorer.exe) ehSSO.dll - XcvDataW : C:\Windows\system32\WINSPOOL.DRV @ 0x7fef99a1254

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: WDC WD800AAJS-00PSA0 ATA Device +++++
--- User ---
[MBR] e1b01a431071eeb6014bbf377814ab97
[BSP] bc8e068dee913bfdcef73b8cb24af4bd : Linux|Legit.Unknown MBR Code
Partition table:
0 - [ACTIVE] LINUX (0x83) [VISIBLE] Offset (sectors): 2048 | Size: 67178 MB
1 - [XXXXXX] EXTEN (0x5) [VISIBLE] Offset (sectors): 137584638 | Size: 4092 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: MAXTOR STM3320820AS ATA Device +++++
--- User ---
[MBR] 1775f96cacdf1114993eeffb415cbab6
[BSP] b28993a94dd2449c5511283f1aaa9861 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 63 | Size: 305242 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive2: ST3250410AS ATA Device +++++
--- User ---
[MBR] 8d36627e57b6080d1994cc3dab8e055a
[BSP] 22c7a2f974ad674f813fccd04978ac5e : Windows Vista/7/8 MBR Code
Partition table:
0 - [XXXXXX] EXTEN-LBA (0xf) [VISIBLE] Offset (sectors): 16066 | Size: 238464 MB
User = LL1 ... OK
User = LL2 ... OK

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Pak klikni na "Prohledat " ,po jeho skončení:


- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)

- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.
-pokud bude mít log více než 60.000 znaků , rozděl ho a vlož do více příspěvků

RogueKiller V9.2.3.0 (x64) [Jul 11 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 7 (6.1.7600 ) 64 bits version
Spuštěno v : Normální režim
Uživatel : Ondra [Práva správce]
Mód : Odebrat -- Datum : 07/19/2014 10:12:20

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 13 ¤¤¤
[Suspicious.Path] (X64) HKEY_USERS\S-1-5-21-2385782278-2715505607-1076999485-1000\Software\Microsoft\Windows\CurrentVersion\Run | HotSwap! Applet : "C:\Users\Ondra\Desktop\Programy\HotSwap! 5.0.0.0\64bit\HotSwap!.EXE" [x] -> VYMAZÁNO
[Suspicious.Path] (X86) HKEY_USERS\S-1-5-21-2385782278-2715505607-1076999485-1000\Software\Microsoft\Windows\CurrentVersion\Run | HotSwap! Applet : "C:\Users\Ondra\Desktop\Programy\HotSwap! 5.0.0.0\64bit\HotSwap!.EXE" -> ERROR [2]
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FairplayKD -> VYMAZÁNO
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\FairplayKD -> VYMAZÁNO
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\FairplayKD -> VYMAZÁNO
[PUM.DesktopIcons] (X64) HKEY_USERS\S-1-5-21-2385782278-2715505607-1076999485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NAHRAZENO (0)
[PUM.DesktopIcons] (X86) HKEY_USERS\S-1-5-21-2385782278-2715505607-1076999485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NAHRAZENO (0)
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NAHRAZENO (0)
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NAHRAZENO (0)
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NAHRAZENO (0)
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NAHRAZENO (0)
[PUM.DesktopIcons] (X64) HKEY_USERS\S-1-5-21-2385782278-2715505607-1076999485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NAHRAZENO (0)
[PUM.DesktopIcons] (X86) HKEY_USERS\S-1-5-21-2385782278-2715505607-1076999485-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 3 (Driver: NAHRÁNO) ¤¤¤
[Filter(Kernel.Filter)] \Driver\atapi @ Unknown : \Driver\Disk @ \Device\Harddisk2\DR2 (\SystemRoot\System32\drivers\rdyboost.sys)
[Filter(Kernel.Filter)] \Driver\atapi @ Unknown : \Driver\Disk @ \Device\Harddisk1\DR1 (\SystemRoot\System32\drivers\rdyboost.sys)
[Filter(Kernel.Filter)] \Driver\atapi @ Unknown : \Driver\Disk @ \Device\Harddisk0\DR0 (\SystemRoot\System32\drivers\rdyboost.sys)

¤¤¤ Webové prohlížeče : 8 ¤¤¤
[IE:Addon] System : avast! Online Security [{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}] -> VYMAZÁNO
[CHROME:Addon] Default : Google Docs [aohghmighlieiainnegkcijnfilokake] -> VYMAZÁNO
[CHROME:Addon] Default : Google Drive [apdfllckaahabafndbhieahigkjlhalf] -> ERROR [2]
[CHROME:Addon] Default : YouTube [blpcfgokakmgnkcojhhkbfbldkacnbeo] -> ERROR [2]
[CHROME:Addon] Default : Google Search [coobgpohoikkiipiblmjeljniedjpjpf] -> ERROR [2]
[CHROME:Addon] Default : AdBlock [gighmmpiobklfepjocnamgkkbiglidom] -> ERROR [2]
[CHROME:Addon] Default : Google Wallet [nmmhkkegccagdldgiimedpiccmgmieda] -> ERROR [2]
[CHROME:Addon] Default : Gmail [pjkljhegncpnkpknbcohdijeoejaedia] -> ERROR [2]

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: WDC WD800AAJS-00PSA0 ATA Device +++++
--- User ---
[MBR] e1b01a431071eeb6014bbf377814ab97
[BSP] bc8e068dee913bfdcef73b8cb24af4bd : Linux|Legit.Unknown MBR Code
Partition table:
0 - [ACTIVE] LINUX (0x83) [VISIBLE] Offset (sectors): 2048 | Size: 67178 MB
1 - [XXXXXX] EXTEN (0x5) [VISIBLE] Offset (sectors): 137584638 | Size: 4092 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: MAXTOR STM3320820AS ATA Device +++++
--- User ---
[MBR] 1775f96cacdf1114993eeffb415cbab6
[BSP] b28993a94dd2449c5511283f1aaa9861 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 63 | Size: 305242 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive2: ST3250410AS ATA Device +++++
--- User ---
[MBR] 8d36627e57b6080d1994cc3dab8e055a
[BSP] 22c7a2f974ad674f813fccd04978ac5e : Windows Vista/7/8 MBR Code
Partition table:
0 - [XXXXXX] EXTEN-LBA (0xf) [VISIBLE] Offset (sectors): 16066 | Size: 238464 MB
User = LL1 ... OK
User = LL2 ... OK


============================================
RKreport_SCN_07142014_213807.log - RKreport_SCN_07192014_100940.log

10:15:18.0662 0x0ea4 TDSS rootkit removing tool 3.0.0.40 Jul 10 2014 12:37:58
10:15:21.0467 0x0ea4 ============================================================
10:15:21.0467 0x0ea4 Current date / time: 2014/07/19 10:15:21.0467
10:15:21.0467 0x0ea4 SystemInfo:
10:15:21.0468 0x0ea4
10:15:21.0468 0x0ea4 OS Version: 6.1.7600 ServicePack: 0.0
10:15:21.0468 0x0ea4 Product type: Workstation
10:15:21.0468 0x0ea4 ComputerName: ONDRA-PC
10:15:21.0468 0x0ea4 UserName: Ondra
10:15:21.0468 0x0ea4 Windows directory: C:\Windows
10:15:21.0468 0x0ea4 System windows directory: C:\Windows
10:15:21.0468 0x0ea4 Running under WOW64
10:15:21.0468 0x0ea4 Processor architecture: Intel x64
10:15:21.0468 0x0ea4 Number of processors: 4
10:15:21.0468 0x0ea4 Page size: 0x1000
10:15:21.0468 0x0ea4 Boot type: Normal boot
10:15:21.0468 0x0ea4 ============================================================
10:15:28.0058 0x0ea4 KLMD registered as C:\Windows\system32\drivers\16788208.sys
10:15:29.0011 0x0ea4 System UUID: {239481F4-3D80-CC9E-D723-153B46C582E3}
10:15:30.0222 0x0ea4 Drive \Device\Harddisk0\DR0 - Size: 0x11668BFC00 ( 69.60 Gb ), SectorSize: 0x200, Cylinders: 0x237E, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
10:15:30.0231 0x0ea4 Drive \Device\Harddisk1\DR1 - Size: 0x4A85C4DE00 ( 298.09 Gb ), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
10:15:30.0254 0x0ea4 Drive \Device\Harddisk2\DR2 - Size: 0x3A38A25E00 ( 232.88 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
10:15:30.0435 0x0ea4 ============================================================
10:15:30.0435 0x0ea4 \Device\Harddisk0\DR0:
10:15:30.0448 0x0ea4 MBR partitions:
10:15:30.0448 0x0ea4 \Device\Harddisk1\DR1:
10:15:30.0465 0x0ea4 MBR partitions:
10:15:30.0465 0x0ea4 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x2542D682
10:15:30.0465 0x0ea4 \Device\Harddisk2\DR2:
10:15:30.0471 0x0ea4 MBR partitions:
10:15:30.0476 0x0ea4 \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x3F01, BlocksNum 0x1D1C0680
10:15:30.0476 0x0ea4 ============================================================
10:15:30.0530 0x0ea4 C: <-> \Device\Harddisk1\DR1\Partition1
10:15:30.0556 0x0ea4 E: <-> \Device\Harddisk2\DR2\Partition1
10:15:30.0557 0x0ea4 ============================================================
10:15:30.0557 0x0ea4 Initialize success
10:15:30.0557 0x0ea4 ============================================================
10:15:38.0196 0x0730 ============================================================
10:15:38.0196 0x0730 Scan started
10:15:38.0196 0x0730 Mode: Manual;
10:15:38.0196 0x0730 ============================================================
10:15:38.0196 0x0730 KSN ping started
10:15:41.0211 0x0730 KSN ping finished: true
10:15:43.0550 0x0730 ================ Scan system memory ========================
10:15:43.0550 0x0730 System memory - ok
10:15:43.0551 0x0730 ================ Scan services =============================
10:15:44.0667 0x0730 [ 1B00662092F9F9568B995902F0CC40D5, D345014CF146FA57B2682C189D5E7F27D4C78F321F2723D912D623E777C2BB70 ] 1394ohci C:\Windows\system32\DRIVERS\1394ohci.sys
10:15:44.0671 0x0730 1394ohci - ok
10:15:44.0714 0x0730 [ 6F11E88748CDEFD2F76AA215F97DDFE5, BD0B3561EDCDE5EFD89372793CFD09DF879709BF469542F4A049705CBA9FD060 ] ACPI C:\Windows\system32\DRIVERS\ACPI.sys
10:15:44.0719 0x0730 ACPI - ok
10:15:44.0782 0x0730 [ 63B05A0420CE4BF0E4AF6DCC7CADA254, 56BCC219D6B886FD42B7D335B4A7BBA3C9BC148220CBD99F8583FB505DAE63BF ] AcpiPmi C:\Windows\system32\DRIVERS\acpipmi.sys
10:15:44.0783 0x0730 AcpiPmi - ok
10:15:44.0903 0x0730 [ B362181ED3771DC03B4141927C80F801, 69514E5177A0AEA89C27C2234712F9F82E8D8F99E1FD4273898C9324C6FF7472 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
10:15:44.0904 0x0730 AdobeARMservice - ok
10:15:44.0950 0x0730 [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
10:15:44.0959 0x0730 adp94xx - ok
10:15:45.0002 0x0730 [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
10:15:45.0008 0x0730 adpahci - ok
10:15:45.0042 0x0730 [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
10:15:45.0045 0x0730 adpu320 - ok
10:15:45.0106 0x0730 [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
10:15:45.0107 0x0730 AeLookupSvc - ok
10:15:45.0182 0x0730 [ DB9D6C6B2CD95A9CA414D045B627422E, A4A0B2ACBFE311C20EF9F06A49DBE02CE90433C2364B292F6E8F78F6C274DF88 ] AFD C:\Windows\system32\drivers\afd.sys
10:15:45.0190 0x0730 AFD - ok
10:15:45.0253 0x0730 [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\DRIVERS\agp440.sys
10:15:45.0254 0x0730 agp440 - ok
10:15:45.0271 0x0730 [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe
10:15:45.0273 0x0730 ALG - ok
10:15:45.0315 0x0730 [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\DRIVERS\aliide.sys
10:15:45.0316 0x0730 aliide - ok
10:15:45.0355 0x0730 [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\DRIVERS\amdide.sys
10:15:45.0355 0x0730 amdide - ok
10:15:45.0388 0x0730 [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
10:15:45.0390 0x0730 AmdK8 - ok
10:15:45.0403 0x0730 [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
10:15:45.0404 0x0730 AmdPPM - ok
10:15:45.0431 0x0730 [ EC7EBAB00A4D8448BAB68D1E49B4BEB9, 786B30C86FA7FEC6BA2569FF818044AA0F7C134693304ED0FF7BD0541F9A755F ] amdsata C:\Windows\system32\DRIVERS\amdsata.sys
10:15:45.0433 0x0730 amdsata - ok
10:15:45.0467 0x0730 [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
10:15:45.0470 0x0730 amdsbs - ok
10:15:45.0488 0x0730 [ DB27766102C7BF7E95140A2AA81D042E, 489F812B596EA06E53D891CD05047AA17CDF752854BBD553BA65D10799AF78DF ] amdxata C:\Windows\system32\DRIVERS\amdxata.sys
10:15:45.0489 0x0730 amdxata - ok
10:15:45.0498 0x0730 androidusb - ok
10:15:45.0528 0x0730 [ 42FD751B27FA0E9C69BB39F39E409594, DE349CAA570957868CA1CB0BE0FAF551CD4D44FD53EBC4391B9C1C7B9CF295D2 ] AppID C:\Windows\system32\drivers\appid.sys
10:15:45.0529 0x0730 AppID - ok
10:15:45.0549 0x0730 [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc C:\Windows\System32\appidsvc.dll
10:15:45.0550 0x0730 AppIDSvc - ok
10:15:45.0582 0x0730 [ D065BE66822847B7F127D1F90158376E, 20F911F390FF23C2C42361A449C4344DB59F1DC21EDD1E7EBC4E80914DEF7824 ] Appinfo C:\Windows\System32\appinfo.dll
10:15:45.0583 0x0730 Appinfo - ok
10:15:45.0617 0x0730 [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt C:\Windows\System32\appmgmts.dll
10:15:45.0621 0x0730 AppMgmt - ok
10:15:45.0659 0x0730 [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\DRIVERS\arc.sys
10:15:45.0661 0x0730 arc - ok
10:15:45.0680 0x0730 [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
10:15:45.0682 0x0730 arcsas - ok
10:15:45.0764 0x0730 [ 9217D874131AE6FF8F642F124F00A555, BE2923D5AA7748FDAAED73AF567D015517B36F1C739C6E5637DD15112EFDF495 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
10:15:45.0765 0x0730 aspnet_state - ok
10:15:45.0808 0x0730 [ 1EC6777695564CA7EB3ADB36C78322E5, EFED305AF749BF496E15E85F5A76ABF8F802649901CAF088CD2514F7C95F639B ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
10:15:45.0809 0x0730 aswFsBlk - ok
10:15:45.0850 0x0730 [ FAF7B0B0C44A2FBD6FBC54E3E0F38545, 585EB3144824A5117AEDA79F642B5F3BC2907588FA23E58784C2AABADF40291D ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
10:15:45.0852 0x0730 aswMonFlt - ok
10:15:45.0866 0x0730 [ 679712B7A353EE665B9301592164A172, CA3C918106A355BAFD0833BB493DF2CCBC2D0F90CA7EBF5E27CC088C7170B0E0 ] aswRdr C:\Windows\system32\drivers\aswRdr2.sys
10:15:45.0868 0x0730 aswRdr - ok
10:15:45.0890 0x0730 [ C04F7B373881009D7994D9BF55D24AB4, 5DEEA804F4F9862024F40A204E88DBCFFBDD2DC87CA86145E3FB649CFCCDC624 ] aswRvrt C:\Windows\system32\drivers\aswRvrt.sys
10:15:45.0892 0x0730 aswRvrt - ok
10:15:45.0935 0x0730 [ 3E07C93A2CB67840E4CD56C00959A402, 8C16C54D6670200C5EDD55DF6590C822051D48D1CEDFBDB1F25FF49785AED164 ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
10:15:45.0952 0x0730 aswSnx - ok
10:15:46.0105 0x0730 [ 79ADA401A6E2054F110E7FBDFAC71942, 0E551FB9E5FE598900036E872E16EB407F7F63FD7A8A0AFAB5094D9DFA75CFCF ] aswSP C:\Windows\system32\drivers\aswSP.sys
10:15:46.0112 0x0730 aswSP - ok
10:15:46.0141 0x0730 [ 81C42096CE90B45C03DCFF017A8A49C7, D5A92CC663858F1217FDCA3906D58B0F6F2A7D1F1ADE820E1DACAD78380ADEF6 ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
10:15:46.0143 0x0730 aswTdi - ok
10:15:46.0162 0x0730 [ 59787B95DD9CA44CB139D96863438587, C36E1A812931BBEACE38BF1E621C950439144979E31961C016AD1AE323579058 ] aswVmm C:\Windows\system32\drivers\aswVmm.sys
10:15:46.0165 0x0730 aswVmm - ok
10:15:46.0201 0x0730 [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
10:15:46.0202 0x0730 AsyncMac - ok
10:15:46.0222 0x0730 [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\DRIVERS\atapi.sys
10:15:46.0223 0x0730 atapi - ok
10:15:46.0408 0x0730 [ EA0AF9B866DF07E8FE6C2342585788B0, BE8E799C1ED36B9DC6BEAB40E8B460464C01014DEC021760FB19626C77550792 ] athur C:\Windows\system32\DRIVERS\athurx.sys
10:15:46.0439 0x0730 athur - ok
10:15:46.0520 0x0730 [ C07A040D6B5A42DD41EE386CF90974C8, 8D47815F99C79B795504C3172B5FBBDBA6AFACC004B17AA3954A06BE713FACAE ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie.sys
10:15:46.0521 0x0730 AtiPcie - ok
10:15:46.0566 0x0730 [ 07721A77180EDD4D39CCB865BF63C7FD, 9E8117E747C86154F98F2686D805A981029CC5D11AFB115A529429C9A4579BE5 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
10:15:46.0617 0x0730 AudioEndpointBuilder - ok
10:15:46.0635 0x0730 [ 07721A77180EDD4D39CCB865BF63C7FD, 9E8117E747C86154F98F2686D805A981029CC5D11AFB115A529429C9A4579BE5 ] AudioSrv C:\Windows\System32\Audiosrv.dll
10:15:46.0646 0x0730 AudioSrv - ok
10:15:46.0728 0x0730 [ 7A189530FD0CFD415DBE41123F8A6A59, C5A90C6D47CEAEFEA1E9F2EBA89B79DC72790EA87650B699EB8B69692CF3430B ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
10:15:46.0730 0x0730 avast! Antivirus - ok
10:15:46.0767 0x0730 [ B20B5FA5CA050E9926E4D1DB81501B32, 91B9038349BA07E32DE809E6798167EE44087809EB1174B84EC16580040F1BE0 ] AxInstSV C:\Windows\System32\AxInstSV.dll
10:15:46.0770 0x0730 AxInstSV - ok
10:15:46.0824 0x0730 [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
10:15:46.0831 0x0730 b06bdrv - ok
10:15:46.0869 0x0730 [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
10:15:46.0874 0x0730 b57nd60a - ok
10:15:46.0916 0x0730 [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll
10:15:46.0918 0x0730 BDESVC - ok
10:15:46.0955 0x0730 [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys
10:15:46.0956 0x0730 Beep - ok
10:15:47.0006 0x0730 [ 4992C609A6315671463E30F6512BC022, 3020034556EAC25CD90F41D3BFFDD0BB2C3D1C5BAC4359F4B71B84A9FC404495 ] BFE C:\Windows\System32\bfe.dll
10:15:47.0022 0x0730 BFE - ok
10:15:47.0063 0x0730 [ 7F0C323FE3DA28AA4AA1BDA3F575707F, 7FF09CBC16A9E5F357A76FF79A3F0DD047957D474031F51A6BB4916C7911F005 ] BITS C:\Windows\System32\qmgr.dll
10:15:47.0122 0x0730 BITS - ok
10:15:47.0155 0x0730 [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
10:15:47.0156 0x0730 blbdrive - ok
10:15:47.0197 0x0730 [ 19D20159708E152267E53B66677A4995, 6401FA5C3EFF26BED075FEC68F868CD8D0598FDB45EA9381810615F7252F7A9A ] bowser C:\Windows\system32\DRIVERS\bowser.sys
10:15:47.0199 0x0730 bowser - ok
10:15:47.0216 0x0730 [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
10:15:47.0216 0x0730 BrFiltLo - ok
10:15:47.0222 0x0730 [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
10:15:47.0223 0x0730 BrFiltUp - ok
10:15:47.0252 0x0730 [ 6B054C67AAA87843504E8E3C09102009, 284AA58625FBDBFECB851A35407331B40BAEC141F2DCEDB9F15733BAB22F5C81 ] Browser C:\Windows\System32\browser.dll
10:15:47.0254 0x0730 Browser - ok
10:15:47.0288 0x0730 [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys
10:15:47.0293 0x0730 Brserid - ok
10:15:47.0380 0x0730 [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
10:15:47.0381 0x0730 BrSerWdm - ok
10:15:47.0405 0x0730 [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
10:15:47.0406 0x0730 BrUsbMdm - ok
10:15:47.0418 0x0730 [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
10:15:47.0419 0x0730 BrUsbSer - ok
10:15:47.0446 0x0730 [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
10:15:47.0447 0x0730 BTHMODEM - ok
10:15:47.0523 0x0730 [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll
10:15:47.0525 0x0730 bthserv - ok
10:15:47.0556 0x0730 [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
10:15:47.0558 0x0730 cdfs - ok
10:15:47.0595 0x0730 [ 83D2D75E1EFB81B3450C18131443F7DB, F2C686C980D818E797818E75B808E1E0B51B2045840A4BFC32D860B7DB4DFA22 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
10:15:47.0598 0x0730 cdrom - ok
10:15:47.0632 0x0730 [ 312E2F82AF11E79906898AC3E3D58A1F, F6CB7D8B204B94F749D5DBEFD552150AAB16A34D629F87F73823A7504465F106 ] CertPropSvc C:\Windows\System32\certprop.dll
10:15:47.0634 0x0730 CertPropSvc - ok
10:15:47.0699 0x0730 [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
10:15:47.0700 0x0730 circlass - ok
10:15:47.0729 0x0730 [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS C:\Windows\system32\CLFS.sys
10:15:47.0736 0x0730 CLFS - ok
10:15:47.0783 0x0730 [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:15:47.0784 0x0730 clr_optimization_v2.0.50727_32 - ok
10:15:47.0981 0x0730 [ D1CEEA2B47CB998321C579651CE3E4F8, 654013B8FD229A50017B08DEC6CA19C7DDA8CE0771260E057A92625201D539B1 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
10:15:47.0983 0x0730 clr_optimization_v2.0.50727_64 - ok
10:15:48.0277 0x0730 [ C5A75EB48E2344ABDC162BDA79E16841, 6070A8AAFD38FBC6A68A2B10C20117612354DF21B4492D90CA522BFB6870D726 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
10:15:48.0279 0x0730 clr_optimization_v4.0.30319_32 - ok
10:15:48.0335 0x0730 [ C6F9AF94DCD58122A4D7E89DB6BED29D, CB0E5AE60EC76323585FB86D89E8DB7ADB5EDF6EA3D0B27E9ECE75B8CAA8BFDE ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
10:15:48.0338 0x0730 clr_optimization_v4.0.30319_64 - ok
10:15:48.0369 0x0730 [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
10:15:48.0370 0x0730 CmBatt - ok
10:15:48.0381 0x0730 [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\DRIVERS\cmdide.sys
10:15:48.0382 0x0730 cmdide - ok
10:15:48.0425 0x0730 [ CA7720B73446FDDEC5C69519C1174C98, F24796765587CC1D653A04783B1659564F42E600DA3AFA3DED724592B291D033 ] CNG C:\Windows\system32\Drivers\cng.sys
10:15:48.0432 0x0730 CNG - ok
10:15:48.0461 0x0730 [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
10:15:48.0462 0x0730 Compbatt - ok
10:15:48.0506 0x0730 [ F26B3A86F6FA87CA360B879581AB4123, 723904362614FE47F6CC0EA0656BA1B47EA32D73BAFB61688A5E5CAE4340B1BF ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
10:15:48.0507 0x0730 CompositeBus - ok
10:15:48.0522 0x0730 COMSysApp - ok
10:15:48.0754 0x0730 cpuz136 - ok
10:15:48.0802 0x0730 [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
10:15:48.0803 0x0730 crcdisk - ok
10:15:48.0873 0x0730 [ BAF19B633933A9FB4883D27D66C39E9A, 2D8ABB5161736CCCADA67B3E6A8D70B0B5E1E3FE6084561891F394DA191B3439 ] CryptSvc C:\Windows\system32\cryptsvc.dll
10:15:48.0877 0x0730 CryptSvc - ok
10:15:48.0924 0x0730 [ 4A6173C2279B498CD8F57CAE504564CB, FF3CD404FD91EDE38C21780362CE892BFBBC2526B146BEBD139C7413EB29A216 ] CSC C:\Windows\system32\drivers\csc.sys
10:15:48.0932 0x0730 CSC - ok
10:15:49.0094 0x0730 [ 873FBF927C06E5CEE04DEC617502F8FD, 8B452ED5D003337E66634EEC3D5C9FBA4D05FF5AE776239F3B769FAA505E729C ] CscService C:\Windows\System32\cscsvc.dll
10:15:49.0172 0x0730 CscService - ok
10:15:49.0212 0x0730 CV2K1 - ok
10:15:49.0316 0x0730 [ 7266972E86890E2B30C0C322E906B027, BFA30E85F5BD3AA933913BD7C6D2B5993DB7AFB0C98349B61A6BEF0BDC8A3680 ] DcomLaunch C:\Windows\system32\rpcss.dll
10:15:49.0326 0x0730 DcomLaunch - ok
10:15:49.0387 0x0730 [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll
10:15:49.0395 0x0730 defragsvc - ok
10:15:49.0418 0x0730 [ 3F1DC527070ACB87E40AFE46EF6DA749, 5CB9CB94854AF06BEA02AF3E0562B8ECF72B2B23ED657A3F5E17CD3552F3EF84 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
10:15:49.0421 0x0730 DfsC - ok
10:15:49.0451 0x0730 [ 51D50A9A72C18E4629891BF381D123BA, 3C9156F4430A677ACF8F79A648E8FAA668F4A8B58E202B4898CE95396F5A5820 ] DFX11_1 C:\Windows\system32\drivers\dfx11_1x64.sys
10:15:49.0452 0x0730 DFX11_1 - ok
10:15:49.0476 0x0730 [ CE3B9562D997F69B330D181A8875960F, 6FEE6622859198C5C13545867EF7CFE8EDC991360E976F792313DAA9C82CC5C8 ] Dhcp C:\Windows\system32\dhcpcore.dll
10:15:49.0484 0x0730 Dhcp - ok
10:15:49.0501 0x0730 [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys
10:15:49.0502 0x0730 discache - ok
10:15:49.0528 0x0730 [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk C:\Windows\system32\DRIVERS\disk.sys
10:15:49.0530 0x0730 Disk - ok
10:15:49.0572 0x0730 [ 85CF424C74A1D5EC33533E1DBFF9920A, 882D5FA0D5EC053D76A0C46A6047A621D607651693CF94E5506219EECCC8D079 ] Dnscache C:\Windows\System32\dnsrslvr.dll
10:15:49.0576 0x0730 Dnscache - ok
10:15:49.0608 0x0730 [ 14452ACDB09B70964C8C21BF80A13ACB, DA0AAAC04626EFF4256D7095FF1DDA1F1B17676E26990C418BDF5090476F2AB4 ] dot3svc C:\Windows\System32\dot3svc.dll
10:15:49.0653 0x0730 dot3svc - ok
10:15:49.0722 0x0730 [ B42ED0320C6E41102FDE0005154849BB, 4DB872E23AD049C3C9FDC0759FC58BFA60DA91B18BC82B611BFA300D26DDFC7A ] Dot4 C:\Windows\system32\DRIVERS\Dot4.sys
10:15:49.0725 0x0730 Dot4 - ok
10:15:49.0757 0x0730 [ 85135AD27E79B689335C08167D917CDE, B023ABF4CC71862AE107B27D3CD698517074A97FA76A8AE18058ACF39AC1E786 ] Dot4Print C:\Windows\system32\DRIVERS\Dot4Prt.sys
10:15:49.0757 0x0730 Dot4Print - ok
10:15:49.0812 0x0730 [ FD05A02B0370BC3000F402E543CA5814, 089B1113E640F495F470E8F57060B89546270481B309DC8ED3C3D13A849076A3 ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
10:15:49.0813 0x0730 dot4usb - ok
10:15:49.0865 0x0730 [ 8C2BA6BEA949EE6E68385F5692BAFB94, 1047F473DCE0FB56BEA5C1B7929752C1FBAB5983C8202ABB4EEA48FCD60A353A ] DPS C:\Windows\system32\dps.dll
10:15:49.0869 0x0730 DPS - ok
10:15:49.0895 0x0730 [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
10:15:49.0896 0x0730 drmkaud - ok
10:15:49.0932 0x0730 [ 6A0E850DDCB136AA3D2FB7234382DF12, C01863E95F45E1B74AC65C9CD12C8DC769299218255B3C94E3EBF58C4D79FEF3 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
10:15:49.0936 0x0730 dtsoftbus01 - ok
10:15:50.0009 0x0730 [ 1633B9ABF52784A1331476397A48CBEF, 697780697C4C55FCCF5FB65C93FB37B3F5A43BF0C59FDBB9EF822D0E993E47BD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
10:15:50.0025 0x0730 DXGKrnl - ok
10:15:50.0061 0x0730 [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll
10:15:50.0064 0x0730 EapHost - ok
10:15:50.0396 0x0730 [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
10:15:50.0449 0x0730 ebdrv - ok
10:15:50.0525 0x0730 [ 156F6159457D0AA7E59B62681B56EB90, 27B855BF79490E4CC58D38A920C077A56785494BFFF0B448A898486009B24937 ] EFS C:\Windows\System32\lsass.exe
10:15:50.0527 0x0730 EFS - ok
10:15:50.0621 0x0730 [ 47C071994C3F649F23D9CD075AC9304A, B7AA2DD6AD14F18A19620F5FB79D50C630D3750E72DD67BF8D105CC4F5CE1D46 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
10:15:50.0632 0x0730 ehRecvr - ok
10:15:50.0652 0x0730 [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe
10:15:50.0655 0x0730 ehSched - ok
10:15:50.0702 0x0730 [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
10:15:50.0711 0x0730 elxstor - ok
10:15:50.0731 0x0730 [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\DRIVERS\errdev.sys
10:15:50.0731 0x0730 ErrDev - ok
10:15:50.0776 0x0730 [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll
10:15:50.0785 0x0730 EventSystem - ok
10:15:50.0819 0x0730 [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys
10:15:50.0822 0x0730 exfat - ok
10:15:50.0849 0x0730 [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys
10:15:50.0853 0x0730 fastfat - ok
10:15:50.0906 0x0730 [ D607B2F1BEE3992AA6C2C92C0A2F0855, E22301C8F01DBF0A38A85165959BB070647C996CB1BCD50FDFE3DDDCA427DF2A ] Fax C:\Windows\system32\fxssvc.exe
10:15:50.0918 0x0730 Fax - ok
10:15:50.0931 0x0730 [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\DRIVERS\fdc.sys
10:15:50.0932 0x0730 fdc - ok
10:15:50.0959 0x0730 [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll
10:15:50.0961 0x0730 fdPHost - ok
10:15:50.0976 0x0730 [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll
10:15:50.0978 0x0730 FDResPub - ok
10:15:51.0019 0x0730 [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
10:15:51.0020 0x0730 FileInfo - ok
10:15:51.0033 0x0730 [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
10:15:51.0034 0x0730 Filetrace - ok
10:15:51.0053 0x0730 [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
10:15:51.0054 0x0730 flpydisk - ok
10:15:51.0093 0x0730 [ F7866AF72ABBAF84B1FA5AA195378C59, 9D522044FE9C18FB3EC327E675737C01F2A8231DDE900421D3A431596946A7F8 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
10:15:51.0098 0x0730 FltMgr - ok
10:15:51.0202 0x0730 [ CB5E4B9C319E3C6BB363EB7E58A4A051, C9DCF2C2A6AFE0A0F3E23A265843D0C423C08B2E54702C5B389CF293D9A6BAC5 ] FontCache C:\Windows\system32\FntCache.dll
10:15:51.0246 0x0730 FontCache - ok
10:15:51.0297 0x0730 [ 8D89E3131C27FDD6932189CB785E1B7A, AC7DA4C5E6D2E41D1A1DE146E46F034FAF0FB11AD801F070F2D5CD08166E9EB7 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
10:15:51.0299 0x0730 FontCache3.0.0.0 - ok
10:15:51.0310 0x0730 [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
10:15:51.0312 0x0730 FsDepends - ok
10:15:51.0357 0x0730 [ D3E3F93D67821A2DB2B3D9FAC2DC2064, 727FAA7E15A20ED3A37668D294ABDE6EAF1C87C34EE283C99EE3303E85001404 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
10:15:51.0358 0x0730 Fs_Rec - ok
10:15:51.0404 0x0730 [ 1F44F8559E61A8306ECC67BB1E168B7C, 5B7CDD4EDF128B48817145357BB36E2107F0D081C26004B44BFF7C63AD29D99B ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
10:15:51.0408 0x0730 fvevol - ok
10:15:51.0436 0x0730 [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
10:15:51.0438 0x0730 gagp30kx - ok
10:15:51.0502 0x0730 [ FE5AB4525BC2EC68B9119A6E5D40128B, 088DE37982CEE78A0C1181389A3BFF1E352DF504074B3E8F3EA244DB271BF216 ] gpsvc C:\Windows\System32\gpsvc.dll
10:15:51.0537 0x0730 gpsvc - ok
10:15:51.0639 0x0730 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
10:15:51.0641 0x0730 gupdate - ok
10:15:51.0646 0x0730 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
10:15:51.0648 0x0730 gupdatem - ok
10:15:51.0673 0x0730 [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
10:15:51.0674 0x0730 hcw85cir - ok
10:15:51.0710 0x0730 [ 6410F6F415B2A5A9037224C41DA8BF12, 5B8452BC49FDA2215281D27B22FA9BE46B0460F51C4DC70E58B687CFB541F3A5 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
10:15:51.0716 0x0730 HdAudAddService - ok
10:15:51.0736 0x0730 [ 0A49913402747A0B67DE940FB42CBDBB, 61A45DBDCEB4A2D5C3C28F6BC8C5ADC51D0240A7553DF44BCC4355FC06F72B83 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
10:15:51.0738 0x0730 HDAudBus - ok
10:15:51.0760 0x0730 [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
10:15:51.0761 0x0730 HidBatt - ok
10:15:51.0779 0x0730 [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
10:15:51.0781 0x0730 HidBth - ok
10:15:51.0797 0x0730 [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
10:15:51.0799 0x0730 HidIr - ok
10:15:51.0825 0x0730 [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\system32\hidserv.dll
10:15:51.0827 0x0730 hidserv - ok
10:15:51.0870 0x0730 [ B3BF6B5B50006DEF50B66306D99FCF6F, D39A1DEBE7C464922919826D15199ED25E263BF58633593DD412D78F98921417 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
10:15:51.0871 0x0730 HidUsb - ok
10:15:51.0893 0x0730 [ EFA58EDE58DD74388FFD04CB32681518, 76D81F9BC1A4D85A779B79DEC23B79F1568AA236CD49247414093CDC1FCC150F ] hkmsvc C:\Windows\system32\kmsvc.dll
10:15:51.0896 0x0730 hkmsvc - ok
10:15:51.0935 0x0730 [ 046B2673767CA626E2CFB7FDF735E9E8, 9C932DCC5DE9B1919AB38C01D76AD7BBAF491DE6D158662407974748BC0B4C6C ] HomeGroupListener C:\Windows\system32\ListSvc.dll
10:15:51.0947 0x0730 HomeGroupListener - ok
10:15:51.0967 0x0730 [ 06A7422224D9865A5613710A089987DF, EF604B4B6918D3FDC8E90ED9004E6E7340E0F399C214C65CCE3A7C8C576FA1C0 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
10:15:51.0973 0x0730 HomeGroupProvider - ok
10:15:52.0058 0x0730 [ 1DAE5C46D42B02A6D5862E1482EFB390, 90B14E0A8376AE51872D89C141E88AE144B742805F94B4F7948E295322C78B9D ] hpqcxs08 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll
10:15:52.0063 0x0730 hpqcxs08 - ok
10:15:52.0106 0x0730 [ 99E8EEF42FE2F4AF29B08C3355DD7685, D57BC2148653DA5596FB49F1086D165B11C9F6C644608202C08305D3C8499CFE ] hpqddsvc C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll
10:15:52.0108 0x0730 hpqddsvc - ok
10:15:52.0167 0x0730 [ 0886D440058F203EBA0E1825E4355914, BC49C4CEFE324A08C864A4BF4FEA9A70151FAB7CC30BDC28344F3FFD2F500070 ] HpSAMD C:\Windows\system32\DRIVERS\HpSAMD.sys
10:15:52.0169 0x0730 HpSAMD - ok
10:15:52.0253 0x0730 [ 7F57926169C1B8ABA9274EA7D4B70F18, A2BB01054737C6B0461381221D1C344951AC2BE9E5AE01E15A6871B31B62BE78 ] HPSLPSVC C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL
10:15:52.0271 0x0730 HPSLPSVC - ok
10:15:52.0322 0x0730 [ CEE049CAC4EFA7F4E1E4AD014414A5D4, 433AE2D845850F1D7A48275BBD87B3F0E7DD48F2282C727C4B777ECD92CC331D ] HTTP C:\Windows\system32\drivers\HTTP.sys
10:15:52.0335 0x0730 HTTP - ok
10:15:52.0344 0x0730 [ F17766A19145F111856378DF337A5D79, FC1633FB865A5324EBCBE5F97D297B899FABBDD965D862C2EFC743CD36F47E62 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
10:15:52.0345 0x0730 hwpolicy - ok
10:15:52.0380 0x0730 [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
10:15:52.0382 0x0730 i8042prt - ok
10:15:52.0410 0x0730 [ B75E45C564E944A2657167D197AB29DA, 622EA73F4D9CAE17628C18148FB241817A0AE6D80A74B099204ED27C1A750B24 ] iaStorV C:\Windows\system32\DRIVERS\iaStorV.sys
10:15:52.0417 0x0730 iaStorV - ok
10:15:52.0484 0x0730 [ 2F2BE70D3E02B6FA877921AB9516D43C, E04255EE4BD95FC1539EB1EB9F702B039F65993D31A4531DA487274543EF5226 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
10:15:52.0498 0x0730 idsvc - ok
10:15:52.0520 0x0730 [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
10:15:52.0521 0x0730 iirsp - ok
10:15:52.0631 0x0730 [ C5B4683680DF085B57BC53E5EF34861F, 9C06517DFCB3ED7BB1166F7EB6CCC8713E6B68283C75420C0EDC182094AA1B8F ] IKEEXT C:\Windows\System32\ikeext.dll
10:15:52.0665 0x0730 IKEEXT - ok
10:15:52.0806 0x0730 [ EB5FA493A4B6EA290200AE39EBA2FBC6, 1C2797058A52D87D0F4412F40D372BABB7E4E4146F6DA5F4FFB7C6BA026A1FAC ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
10:15:52.0855 0x0730 IntcAzAudAddService - ok
10:15:52.0889 0x0730 [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\DRIVERS\intelide.sys
10:15:52.0890 0x0730 intelide - ok
10:15:52.0949 0x0730 [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
10:15:52.0950 0x0730 intelppm - ok
10:15:52.0990 0x0730 [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll
10:15:52.0993 0x0730 IPBusEnum - ok
10:15:53.0013 0x0730 [ 722DD294DF62483CECAAE6E094B4D695, 41ABB42EF969EA8A84B546908EBBDC2411D964DE101CE6DD3D7ECF109085E0C0 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
10:15:53.0015 0x0730 IpFilterDriver - ok
10:15:53.0122 0x0730 [ F8E058D17363EC580E4B7232778B6CB5, 02352919F349C57930A0B032FBDC45327FB473D310DE7AC721F4694FDE7D21FB ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
10:15:53.0137 0x0730 iphlpsvc - ok
10:15:53.0158 0x0730 [ E2B4A4494DB7CB9B89B55CA268C337C5, C59BC4AA03D10647641EC7533F78BC7E2EA6FC48B8B2CF1A49B5148EF40A90FB ] IPMIDRV C:\Windows\system32\DRIVERS\IPMIDrv.sys
10:15:53.0160 0x0730 IPMIDRV - ok
10:15:53.0179 0x0730 [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys
10:15:53.0182 0x0730 IPNAT - ok
10:15:53.0302 0x0730 [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys
10:15:53.0302 0x0730 IRENUM - ok
10:15:53.0362 0x0730 [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\DRIVERS\isapnp.sys
10:15:53.0362 0x0730 isapnp - ok
10:15:53.0498 0x0730 [ FA4D2557DE56D45B0A346F93564BE6E1, 2827EC3582FF59FFD55BBD4A4F0DDFFEAD4F2537FA043B3A69904FE920B1619C ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
10:15:53.0502 0x0730 iScsiPrt - ok
10:15:53.0530 0x0730 [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
10:15:53.0532 0x0730 kbdclass - ok
10:15:53.0576 0x0730 [ 6DEF98F8541E1B5DCEB2C822A11F7323, F6EE4A7A6A7A1F243D32CA9241CA4816C92EB7BF2AADDD09234968C2CAAE6C0D ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
10:15:53.0577 0x0730 kbdhid - ok
10:15:53.0599 0x0730 [ 156F6159457D0AA7E59B62681B56EB90, 27B855BF79490E4CC58D38A920C077A56785494BFFF0B448A898486009B24937 ] KeyIso C:\Windows\system32\lsass.exe
10:15:53.0601 0x0730 KeyIso - ok
10:15:53.0647 0x0730 [ 4F4B5FDE429416877DE7143044582EB5, A28FFEA078DBD91F3CC28088810EEEB727107B3F0F48370B44D87DC8F8C55B99 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
10:15:53.0649 0x0730 KSecDD - ok
10:15:53.0714 0x0730 [ 6F40465A44ECDC1731BEFAFEC5BDD03C, 317334D414D0AF73CB4D9CA11EA80C641E786760B8800F2795D0CB38378DBB80 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
10:15:53.0717 0x0730 KSecPkg - ok
10:15:53.0728 0x0730 [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
10:15:53.0729 0x0730 ksthunk - ok
10:15:53.0827 0x0730 [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll
10:15:53.0852 0x0730 KtmRm - ok
10:15:53.0947 0x0730 [ 81F1D04D4D0E433099365127375FD501, C2A81B5A482C974E8108806486EC28CB2D81400D42639682FE7B7A9BDF14BA9B ] LanmanServer C:\Windows\system32\srvsvc.dll
10:15:53.0961 0x0730 LanmanServer - ok
10:15:53.0999 0x0730 [ 27026EAC8818E8A6C00A1CAD2F11D29A, A12858CCB3B2419D66C667A46B106DA7A7BA97FFFA9634BFAE95DDF193C430D5 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
10:15:54.0004 0x0730 LanmanWorkstation - ok
10:15:54.0074 0x0730 [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
10:15:54.0075 0x0730 lltdio - ok
10:15:54.0130 0x0730 [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll
10:15:54.0155 0x0730 lltdsvc - ok
10:15:54.0176 0x0730 [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll
10:15:54.0178 0x0730 lmhosts - ok
10:15:54.0245 0x0730 [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
10:15:54.0248 0x0730 LSI_FC - ok
10:15:54.0269 0x0730 [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
10:15:54.0271 0x0730 LSI_SAS - ok
10:15:54.0320 0x0730 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
10:15:54.0322 0x0730 LSI_SAS2 - ok
10:15:54.0361 0x0730 [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
10:15:54.0363 0x0730 LSI_SCSI - ok
10:15:54.0414 0x0730 [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys
10:15:54.0416 0x0730 luafv - ok
10:15:54.0529 0x0730 [ 092D6F6F9FF6AE6C3A3D36DD17CC9D96, 96B36DA84A329AEE3075B00AA3A94DD7EF0B7D445939C865B5D91A496E2910BC ] massfilter_hs C:\Windows\system32\DRIVERS\massfilter_hs.sys
10:15:54.0530 0x0730 massfilter_hs - ok
10:15:54.0579 0x0730 [ F84C8F1000BC11E3B7B23CBD3BAFF111, BB4C4FFE3F6C9E5C16C06F6F666F177B94E1CF878397BCC0BDAF6EB3341AAED8 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
10:15:54.0582 0x0730 Mcx2Svc - ok
10:15:54.0599 0x0730 [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
10:15:54.0600 0x0730 megasas - ok
10:15:54.0700 0x0730 [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
10:15:54.0706 0x0730 MegaSR - ok
10:15:54.0746 0x0730 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll
10:15:54.0748 0x0730 MMCSS - ok
10:15:54.0767 0x0730 [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys
10:15:54.0768 0x0730 Modem - ok
10:15:54.0815 0x0730 [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
10:15:54.0816 0x0730 monitor - ok
10:15:54.0861 0x0730 [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
10:15:54.0862 0x0730 mouclass - ok
10:15:54.0933 0x0730 [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
10:15:54.0934 0x0730 mouhid - ok
10:15:54.0963 0x0730 [ 791AF66C4D0E7C90A3646066386FB571, BF67643099494AEADDDC85E4D97AFF1017806A1DF554F9BE6C864FFECC9EAF42 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
10:15:54.0965 0x0730 mountmgr - ok
10:15:54.0988 0x0730 [ 609D1D87649ECC19796F4D76D4C15CEA, 5369F4C83FBAE9C4CFB9ACD36F07479E3F3FD784D79B82AE8D95B818B9F9CE00 ] mpio C:\Windows\system32\DRIVERS\mpio.sys
10:15:54.0991 0x0730 mpio - ok
10:15:55.0082 0x0730 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
10:15:55.0084 0x0730 mpsdrv - ok
10:15:55.0317 0x0730 [ AECAB449567D1846DAD63ECE49E893E3, 7A67A16A3E04574B7CAD097632ABA9B361BBEFDD6B36B7B8E3A1996EC529C2DC ] MpsSvc C:\Windows\system32\mpssvc.dll
10:15:55.0426 0x0730 MpsSvc - ok
10:15:55.0483 0x0730 [ 30524261BB51D96D6FCBAC20C810183C, 19598A9CD0EAAE4ACBF1069E721AB2853452F33FCFB3B5113F023A88A90BF42D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
10:15:55.0486 0x0730 MRxDAV - ok
10:15:55.0515 0x0730 [ 040D62A9D8AD28922632137ACDD984F2, D9457BDA88C2E3AA4E716C0657B77A4A3E212328CDABD5C18279B6440E1C1594 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
10:15:55.0518 0x0730 mrxsmb - ok
10:15:55.0591 0x0730 [ F0067552F8F9B33D7C59403AB808A3CB, 698B63528E1943BB4253BF7578DC128AA824C71BD04FF0521277E68B20656C02 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
10:15:55.0596 0x0730 mrxsmb10 - ok
10:15:55.0634 0x0730 [ 3C142D31DE9F2F193218A53FE2632051, 026B3A932A95D5160B64E470FC414F3D388D429317D5EAEA2D476F715C4CAE75 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
10:15:55.0636 0x0730 mrxsmb20 - ok
10:15:55.0651 0x0730 [ 5C37497276E3B3A5488B23A326A754B7, 9982FCDAFB963868EB93A4DEF811A3167488EB5246BAC3F4AE960506FDF63967 ] msahci C:\Windows\system32\DRIVERS\msahci.sys
10:15:55.0652 0x0730 msahci - ok
10:15:55.0678 0x0730 [ 8D27B597229AED79430FB9DB3BCBFBD0, 3D58E08B47E8AE419D405BF263929DFA6F2F5F0C2D79FD8D6F2CED6452F6F248 ] msdsm C:\Windows\system32\DRIVERS\msdsm.sys
10:15:55.0681 0x0730 msdsm - ok
10:15:55.0713 0x0730 [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe
10:15:55.0717 0x0730 MSDTC - ok
10:15:55.0752 0x0730 [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys
10:15:55.0753 0x0730 Msfs - ok
10:15:55.0770 0x0730 [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
10:15:55.0771 0x0730 mshidkmdf - ok
10:15:55.0784 0x0730 [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\DRIVERS\msisadrv.sys
10:15:55.0784 0x0730 msisadrv - ok
10:15:55.0811 0x0730 [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
10:15:55.0815 0x0730 MSiSCSI - ok
10:15:55.0819 0x0730 msiserver - ok
10:15:55.0863 0x0730 [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
10:15:55.0863 0x0730 MSKSSRV - ok
10:15:55.0886 0x0730 [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
10:15:55.0887 0x0730 MSPCLOCK - ok
10:15:55.0910 0x0730 [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
10:15:55.0911 0x0730 MSPQM - ok
10:15:55.0995 0x0730 [ 89CB141AA8616D8C6A4610FA26C60964, 76E72F6A0348EDC58A8E6F88C7F024B8B077670400BD5A833811DAFCF9F517CC ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
10:15:56.0001 0x0730 MsRPC - ok
10:15:56.0014 0x0730 [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
10:15:56.0015 0x0730 mssmbios - ok
10:15:56.0037 0x0730 [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
10:15:56.0038 0x0730 MSTEE - ok
10:15:56.0059 0x0730 [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
10:15:56.0060 0x0730 MTConfig - ok
10:15:56.0116 0x0730 [ 19B006B181E3875FD254F7B67ACF1E7C, 1D68D19522E71F16B8B50F8CCFBC9D884CF2DAC40CC409BD5A40A4D4223ABC61 ] MTsensor C:\Windows\system32\DRIVERS\ASACPI.sys
10:15:56.0116 0x0730 MTsensor - ok
10:15:56.0166 0x0730 [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\Windows\system32\Drivers\mup.sys
10:15:56.0167 0x0730 Mup - ok
10:15:56.0282 0x0730 [ 4987E079A4530FA737A128BE54B63B12, 27E51CC7D4D90DC4397575491DE7EFE15808709F097E2828E46AA73C771A47A4 ] napagent C:\Windows\system32\qagentRT.dll
10:15:56.0324 0x0730 napagent - ok
10:15:56.0449 0x0730 [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
10:15:56.0454 0x0730 NativeWifiP - ok
10:15:56.0583 0x0730 [ CAD515DBD07D082BB317D9928CE8962C, 7AFA6D6154AC68F9FCC37B7B3324F7A170AE91035805026445F24F6EB4FB7F2E ] NDIS C:\Windows\system32\drivers\ndis.sys
10:15:56.0599 0x0730 NDIS - ok
10:15:56.0611 0x0730 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
10:15:56.0612 0x0730 NdisCap - ok
10:15:56.0630 0x0730 [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
10:15:56.0631 0x0730 NdisTapi - ok
10:15:56.0660 0x0730 [ F105BA1E22BF1F2EE8F005D4305E4BEC, 723DA09E13D0F50634D9F114590B837D16F7B36AA0DA2AB8F8C2D9991624EA8F ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
10:15:56.0661 0x0730 Ndisuio - ok
10:15:56.0712 0x0730 [ 557DFAB9CA1FCB036AC77564C010DAD3, 8A21B342AFE5B498FB62EDDC81A3ADA9570677B7A382666090E0ABB1F85FEF29 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
10:15:56.0715 0x0730 NdisWan - ok
10:15:56.0737 0x0730 [ 659B74FB74B86228D6338D643CD3E3CF, 83D741B7A2A204A661A80C226212749F514800060D05E217FA6DC14D62F38F80 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
10:15:56.0738 0x0730 NDProxy - ok
10:15:56.0868 0x0730 [ D5AC41AE382738483FAFFBD7E373D49A, 68793D15566F387650E9C5010E1CA73BDE3EB4BA431EA0A1673004CAE08413B0 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
10:15:56.0870 0x0730 Net Driver HPZ12 - ok
10:15:56.0893 0x0730 [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
10:15:56.0894 0x0730 NetBIOS - ok