PC-HELP.CZ

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:34:05, on 13.6.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\BrowserCompanion\BCHelper.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Users\Jan\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jan\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jan\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Jan\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jan\Downloads\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=112061 ... 6d04ef6b64
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
R3 - URLSearchHook: (no name) - {f999a48b-1950-4d81-9971-79018f807b4b} - (no file)
O1 - Hosts: 213,239,204,183 www.subdomain.sls.tera-europe.de
O1 - Hosts: subdomain.sls.tera-europe.de 213,239,204,183
O1 - Hosts: 213.239.204.183 tera-europe.com
O1 - Hosts: 159.253.18.161 account.tera-europe.com
O1 - Hosts: 213,239. 204,183 www.sls.tera-europe.de
O1 - Hosts: 213.239.204.183 www.tera-europe.com
O1 - Hosts: 213,239,204,183 sls.tera-europe.de
O1 - Hosts: 213,239,204,183 tera-europe.com
O1 - Hosts: 213.239.204.183 www.account.tera-europe.com
O2 - BHO: script helper for ie - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files (x86)\BrowserCompanion\jsloader.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: LinkAirBrowserHelper HistoryTriggerBHO - {21A88CB9-84D2-4020-A2D1-B25A21034884} - C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Update Timer - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files (x86)\BrowserCompanion\updatebhoWin32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll
O4 - HKLM\..\Run: [BCU] "C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [B2C_AGENT] C:\ProgramData\LGMOBILEAX\B2C_Client\B2CNotiAgent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Browser companion helper] C:\Program Files (x86)\BrowserCompanion\BCHelper.exe /T=3 /CHI=clbfjfbnelcflpgpklppgplejolacbej
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Advanced SystemCare 5] "C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
O4 - HKCU\..\Run: [4gameTray] C:\Program Files (x86)\4game\4game\4GameTray.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ7M\ICQ.exe" silent loginmode=4
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
O18 - Protocol: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll
O18 - Protocol: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll
O18 - Protocol: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: 4game - Innova Systems LLC - C:\Program Files (x86)\4game\4game\4GameService.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Unknown owner - C:\Windows\System32\appdrvrem01.exe (file missing)
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe
O23 - Service: ASDR - Unknown owner - C:\Windows\SysWOW64\ASDR.exe
O23 - Service: ASUS HM Com Service (asHmComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe
O23 - Service: ASUS System Control Service (AsSysCtrlService) - Unknown owner - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\Windows\ATKKBService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Folding@home-CPU-[1] - Unknown owner - C:\Folding@HomeCPU\1\Fah.exe
O23 - Service: Folding@home-CPU-[2] - Unknown owner - C:\Folding@HomeCPU\2\Fah.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HideMyIpSRV - Hide My IP - C:\Program Files (x86)\Hide My IP\HideMyIpSrv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14004 bytes

Problémy?

Odinstaluj:
Browser companion
Babylon Toolbar

Fixni:
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
- Pokud používáš Firefox, klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Chrome, nic dalšího nevybírej a dej Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(ZATÍM SÁM NIC NEMAŽ!).
Vlož sem pak obsah toho logu.

Nelze mi fixnout píše to error

Jinak problémy ... pc je pomalé zasekané, občas se mi sekne a vypne

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Verze databáze: v2012.06.14.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Jan :: JAN PC [administrátor]

14.6.2012 15:18:57
mbam-log-2012-06-14 (15-24-23).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 273142
Uplynulý čas: 4 minut, 5 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\Windows\KMSEmulator.exe (RiskWare.Tool.CK) -> Žádná instrukce nebyla provedena.

(konec)

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Můžeš sem pak vložit nový log z MbAM.

Stáhni si TDSSKiller

Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Mbam


Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Verze databáze: v2012.06.14.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Jan :: JAN PC [administrátor]

14.6.2012 15:31:08
mbam-log-2012-06-14 (15-31-08).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Pamet | Po spuštení | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 273095
Uplynulý cas: 55 sekund

Nalezené procesy v pameti: 0
(Žádné škodlivé položky nebyly zjišteny)

Nalezené moduly v pameti: 0
(Žádné škodlivé položky nebyly zjišteny)

Nalezené klíce v registru: 0
(Žádné škodlivé položky nebyly zjišteny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjišteny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjišteny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjišteny)

Nalezené soubory: 1
C:\Windows\KMSEmulator.exe (RiskWare.Tool.CK) -> Umístnení do karantény a smazání se zdarilo.

(konec)

TDSSKiller


15:33:07.0965 6404 TDSS rootkit removing tool 2.7.39.0 Jun 14 2012 08:11:46
15:33:08.0246 6404 ============================================================
15:33:08.0246 6404 Current date / time: 2012/06/14 15:33:08.0246
15:33:08.0246 6404 SystemInfo:
15:33:08.0246 6404
15:33:08.0246 6404 OS Version: 6.1.7601 ServicePack: 1.0
15:33:08.0246 6404 Product type: Workstation
15:33:08.0246 6404 ComputerName: JAN PC
15:33:08.0246 6404 UserName: Jan
15:33:08.0246 6404 Windows directory: C:\Windows
15:33:08.0246 6404 System windows directory: C:\Windows
15:33:08.0246 6404 Running under WOW64
15:33:08.0246 6404 Processor architecture: Intel x64
15:33:08.0246 6404 Number of processors: 2
15:33:08.0246 6404 Page size: 0x1000
15:33:08.0246 6404 Boot type: Normal boot
15:33:08.0246 6404 ============================================================
15:33:09.0166 6404 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
15:33:09.0166 6404 ============================================================
15:33:09.0166 6404 \Device\Harddisk0\DR0:
15:33:09.0166 6404 MBR partitions:
15:33:09.0166 6404 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
15:33:09.0166 6404 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3A353000
15:33:09.0166 6404 ============================================================
15:33:09.0182 6404 C: <-> \Device\Harddisk0\DR0\Partition1
15:33:09.0182 6404 ============================================================
15:33:09.0182 6404 Initialize success
15:33:09.0182 6404 ============================================================
15:33:12.0239 4620 ============================================================
15:33:12.0239 4620 Scan started
15:33:12.0239 4620 Mode: Manual;
15:33:12.0239 4620 ============================================================
15:33:13.0238 4620 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
15:33:13.0238 4620 1394ohci - ok
15:33:13.0347 4620 4game (008bd0d672383068e8981d44199e9354) C:\Program Files (x86)\4game\4game\4GameService.exe
15:33:13.0363 4620 4game - ok
15:33:13.0394 4620 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
15:33:13.0394 4620 ACPI - ok
15:33:13.0425 4620 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
15:33:13.0425 4620 AcpiPmi - ok
15:33:13.0597 4620 AdobeFlashPlayerUpdateSvc (76d5a3d2a50402a0b9b6ed13c4371e79) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
15:33:13.0597 4620 AdobeFlashPlayerUpdateSvc - ok
15:33:13.0628 4620 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
15:33:13.0643 4620 adp94xx - ok
15:33:13.0675 4620 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
15:33:13.0675 4620 adpahci - ok
15:33:13.0706 4620 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
15:33:13.0706 4620 adpu320 - ok
15:33:13.0799 4620 AdvancedSystemCareService5 (e410da575ff48d976b41670c6d262a82) C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
15:33:13.0799 4620 AdvancedSystemCareService5 - ok
15:33:13.0831 4620 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
15:33:13.0846 4620 AeLookupSvc - ok
15:33:13.0893 4620 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys
15:33:13.0893 4620 AFD - ok
15:33:13.0940 4620 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
15:33:13.0940 4620 agp440 - ok
15:33:13.0971 4620 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
15:33:13.0971 4620 ALG - ok
15:33:13.0987 4620 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
15:33:13.0987 4620 aliide - ok
15:33:14.0002 4620 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
15:33:14.0002 4620 amdide - ok
15:33:14.0033 4620 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
15:33:14.0049 4620 AmdK8 - ok
15:33:14.0065 4620 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
15:33:14.0065 4620 AmdPPM - ok
15:33:14.0096 4620 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
15:33:14.0111 4620 amdsata - ok
15:33:14.0127 4620 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
15:33:14.0127 4620 amdsbs - ok
15:33:14.0158 4620 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
15:33:14.0158 4620 amdxata - ok
15:33:14.0205 4620 Andbus (48cd7e6520d47d62eab0e6ce3ec30c65) C:\Windows\system32\DRIVERS\lgandbus64.sys
15:33:14.0205 4620 Andbus - ok
15:33:14.0236 4620 AndDiag (08cbacc00d15dcdbbaae1a7c8f231c61) C:\Windows\system32\DRIVERS\lganddiag64.sys
15:33:14.0236 4620 AndDiag - ok
15:33:14.0267 4620 AndGps (cea9a4cd6b3a83428ce8501240833668) C:\Windows\system32\DRIVERS\lgandgps64.sys
15:33:14.0267 4620 AndGps - ok
15:33:14.0283 4620 ANDModem (e2b5663e547fa5e756b253efa8ec8286) C:\Windows\system32\DRIVERS\lgandmodem64.sys
15:33:14.0283 4620 ANDModem - ok
15:33:14.0392 4620 appdrv01 (4aa6d71bed980042d079e428f7668b44) C:\Windows\system32\Drivers\appdrv01.sys
15:33:14.0439 4620 appdrv01 - ok
15:33:14.0595 4620 appdrvrem01 - ok
15:33:14.0657 4620 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
15:33:14.0657 4620 AppID - ok
15:33:14.0689 4620 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
15:33:14.0689 4620 AppIDSvc - ok
15:33:14.0720 4620 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
15:33:14.0720 4620 Appinfo - ok
15:33:14.0767 4620 AppMgmt (4aba3e75a76195a3e38ed2766c962899) C:\Windows\System32\appmgmts.dll
15:33:14.0782 4620 AppMgmt - ok
15:33:14.0829 4620 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
15:33:14.0829 4620 arc - ok
15:33:14.0845 4620 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
15:33:14.0845 4620 arcsas - ok
15:33:14.0969 4620 asComSvc (fb03a917c1294d3e6d671f24722e1ba3) C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe
15:33:14.0985 4620 asComSvc - ok
15:33:15.0079 4620 ASDR (4b720cc508b4fb999a7bf0e6d84f73e1) C:\Windows\SysWOW64\ASDR.exe
15:33:15.0079 4620 ASDR - ok
15:33:15.0125 4620 asHmComSvc (a63173897ea1a73a75d0e65036de5b15) C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe
15:33:15.0125 4620 asHmComSvc - ok
15:33:15.0157 4620 AsIO (fef9dd9ea587f8886ade43c1befbdafe) C:\Windows\syswow64\drivers\AsIO.sys
15:33:15.0157 4620 AsIO - ok
15:33:15.0328 4620 aspnet_state (9217d874131ae6ff8f642f124f00a555) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
15:33:15.0328 4620 aspnet_state - ok
15:33:15.0344 4620 AsSysCtrlService (5c31dfb196cb3a488a041881634d86d2) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
15:33:15.0359 4620 AsSysCtrlService - ok
15:33:15.0406 4620 AsUpIO (1392b92179b07b672720763d9b1028a5) C:\Windows\syswow64\drivers\AsUpIO.sys
15:33:15.0406 4620 AsUpIO - ok
15:33:15.0484 4620 asusgsb (e1dc1a4aad0c676ebefd499e20427b49) C:\Windows\system32\drivers\asusgsb.sys
15:33:15.0484 4620 asusgsb - ok
15:33:15.0500 4620 asuskbnt (f84679e8bbb2c722d5e1ff1437104c28) C:\Windows\system32\drivers\atkkbnt.sys
15:33:15.0500 4620 asuskbnt - ok
15:33:15.0547 4620 aswFsBlk (afaa42c47cb137ed9b43a8f19896612b) C:\Windows\system32\drivers\aswFsBlk.sys
15:33:15.0547 4620 aswFsBlk - ok
15:33:15.0593 4620 aswMonFlt (8395c339792bc0ecdbb52093f1138a9b) C:\Windows\system32\drivers\aswMonFlt.sys
15:33:15.0593 4620 aswMonFlt - ok
15:33:15.0609 4620 aswRdr (b5d91c4df68b6027caaf33212bd2c72e) C:\Windows\system32\drivers\aswRdr.sys
15:33:15.0609 4620 aswRdr - ok
15:33:15.0640 4620 aswSnx (0afdfaae7b89116001bac782ac45e78c) C:\Windows\system32\drivers\aswSnx.sys
15:33:15.0656 4620 aswSnx - ok
15:33:15.0671 4620 aswSP (211565897755b1e0e99fbe6a8b501744) C:\Windows\system32\drivers\aswSP.sys
15:33:15.0671 4620 aswSP - ok
15:33:15.0703 4620 aswTdi (b9bce4564c5fce143a113e9a1bace7b1) C:\Windows\system32\drivers\aswTdi.sys
15:33:15.0703 4620 aswTdi - ok
15:33:15.0749 4620 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
15:33:15.0749 4620 AsyncMac - ok
15:33:15.0781 4620 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
15:33:15.0781 4620 atapi - ok
15:33:15.0827 4620 ATKKeyboardService (9d0cb86f7254bc17409611f444f87ded) C:\Windows\ATKKBService.exe
15:33:15.0827 4620 ATKKeyboardService - ok
15:33:15.0890 4620 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
15:33:15.0890 4620 AudioEndpointBuilder - ok
15:33:15.0905 4620 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
15:33:15.0905 4620 AudioSrv - ok
15:33:15.0999 4620 avast! Antivirus (519ba1dcd20e7c1182dc2dbc0b8b5030) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
15:33:15.0999 4620 avast! Antivirus - ok
15:33:16.0061 4620 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
15:33:16.0061 4620 AxInstSV - ok
15:33:16.0108 4620 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
15:33:16.0124 4620 b06bdrv - ok
15:33:16.0155 4620 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
15:33:16.0171 4620 b57nd60a - ok
15:33:16.0264 4620 BCUService (328e794278cc30ca7c06e346a18b1abc) C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe
15:33:16.0264 4620 BCUService - ok
15:33:16.0295 4620 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
15:33:16.0295 4620 BDESVC - ok
15:33:16.0311 4620 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
15:33:16.0311 4620 Beep - ok
15:33:16.0373 4620 BFE (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
15:33:16.0389 4620 BFE - ok
15:33:16.0436 4620 BITS (1ea7969e3271cbc59e1730697dc74682) C:\Windows\system32\qmgr.dll
15:33:16.0451 4620 BITS - ok
15:33:16.0514 4620 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
15:33:16.0514 4620 blbdrive - ok
15:33:16.0545 4620 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
15:33:16.0545 4620 bowser - ok
15:33:16.0561 4620 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
15:33:16.0561 4620 BrFiltLo - ok
15:33:16.0592 4620 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
15:33:16.0592 4620 BrFiltUp - ok
15:33:16.0623 4620 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
15:33:16.0623 4620 BridgeMP - ok
15:33:16.0670 4620 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
15:33:16.0670 4620 Browser - ok
15:33:16.0701 4620 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
15:33:16.0701 4620 Brserid - ok
15:33:16.0732 4620 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
15:33:16.0732 4620 BrSerWdm - ok
15:33:16.0748 4620 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
15:33:16.0748 4620 BrUsbMdm - ok
15:33:16.0763 4620 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
15:33:16.0763 4620 BrUsbSer - ok
15:33:16.0779 4620 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
15:33:16.0779 4620 BTHMODEM - ok
15:33:16.0810 4620 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
15:33:16.0810 4620 bthserv - ok
15:33:16.0826 4620 catchme - ok
15:33:16.0841 4620 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
15:33:16.0841 4620 cdfs - ok
15:33:16.0904 4620 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys
15:33:16.0904 4620 cdrom - ok
15:33:16.0935 4620 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
15:33:16.0935 4620 CertPropSvc - ok
15:33:16.0966 4620 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
15:33:16.0966 4620 circlass - ok
15:33:16.0997 4620 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
15:33:16.0997 4620 CLFS - ok
15:33:17.0075 4620 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:33:17.0075 4620 clr_optimization_v2.0.50727_32 - ok
15:33:17.0138 4620 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
15:33:17.0138 4620 clr_optimization_v2.0.50727_64 - ok
15:33:17.0231 4620 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:33:17.0231 4620 clr_optimization_v4.0.30319_32 - ok
15:33:17.0294 4620 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
15:33:17.0294 4620 clr_optimization_v4.0.30319_64 - ok
15:33:17.0325 4620 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
15:33:17.0325 4620 CmBatt - ok
15:33:17.0356 4620 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
15:33:17.0356 4620 cmdide - ok
15:33:17.0403 4620 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
15:33:17.0419 4620 CNG - ok
15:33:17.0434 4620 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
15:33:17.0434 4620 Compbatt - ok
15:33:17.0465 4620 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
15:33:17.0465 4620 CompositeBus - ok
15:33:17.0481 4620 COMSysApp - ok
15:33:17.0512 4620 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
15:33:17.0512 4620 crcdisk - ok
15:33:17.0559 4620 CryptSvc (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
15:33:17.0559 4620 CryptSvc - ok
15:33:17.0590 4620 CSC (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys
15:33:17.0606 4620 CSC - ok
15:33:17.0637 4620 CscService (3ab183ab4d2c79dcf459cd2c1266b043) C:\Windows\System32\cscsvc.dll
15:33:17.0637 4620 CscService - ok
15:33:17.0684 4620 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
15:33:17.0699 4620 DcomLaunch - ok
15:33:17.0731 4620 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
15:33:17.0731 4620 defragsvc - ok
15:33:17.0809 4620 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
15:33:17.0809 4620 DfsC - ok
15:33:17.0871 4620 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
15:33:17.0871 4620 Dhcp - ok
15:33:17.0902 4620 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
15:33:17.0902 4620 discache - ok
15:33:17.0933 4620 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
15:33:17.0933 4620 Disk - ok
15:33:17.0980 4620 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
15:33:17.0980 4620 Dnscache - ok
15:33:18.0027 4620 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
15:33:18.0027 4620 dot3svc - ok
15:33:18.0058 4620 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
15:33:18.0058 4620 DPS - ok
15:33:18.0089 4620 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
15:33:18.0089 4620 drmkaud - ok
15:33:18.0355 4620 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
15:33:18.0370 4620 DXGKrnl - ok
15:33:18.0401 4620 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
15:33:18.0401 4620 EapHost - ok
15:33:18.0511 4620 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
15:33:18.0557 4620 ebdrv - ok
15:33:18.0667 4620 EFS (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
15:33:18.0667 4620 EFS - ok
15:33:18.0745 4620 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
15:33:18.0745 4620 ehRecvr - ok
15:33:18.0776 4620 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
15:33:18.0776 4620 ehSched - ok
15:33:18.0838 4620 EIO64 (343ada10d948db29251f2d9c809af204) C:\Windows\system32\DRIVERS\EIO64.sys
15:33:18.0838 4620 EIO64 - ok
15:33:18.0885 4620 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
15:33:18.0901 4620 elxstor - ok
15:33:18.0916 4620 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
15:33:18.0932 4620 ErrDev - ok
15:33:18.0994 4620 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
15:33:18.0994 4620 EventSystem - ok
15:33:19.0010 4620 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
15:33:19.0025 4620 exfat - ok
15:33:19.0041 4620 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
15:33:19.0041 4620 fastfat - ok
15:33:19.0103 4620 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
15:33:19.0103 4620 Fax - ok
15:33:19.0135 4620 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
15:33:19.0135 4620 fdc - ok
15:33:19.0181 4620 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
15:33:19.0181 4620 fdPHost - ok
15:33:19.0197 4620 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
15:33:19.0213 4620 FDResPub - ok
15:33:19.0244 4620 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
15:33:19.0244 4620 FileInfo - ok
15:33:19.0259 4620 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
15:33:19.0275 4620 Filetrace - ok
15:33:19.0275 4620 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
15:33:19.0275 4620 flpydisk - ok
15:33:19.0322 4620 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
15:33:19.0322 4620 FltMgr - ok
15:33:19.0384 4620 Folding@home-CPU-[1] - ok
15:33:19.0447 4620 Folding@home-CPU-[2] - ok
15:33:19.0509 4620 FontCache (b4447f606bb19fd8ad0bafb59b90f5d9) C:\Windows\system32\FntCache.dll
15:33:19.0525 4620 FontCache - ok
15:33:19.0665 4620 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:33:19.0665 4620 FontCache3.0.0.0 - ok
15:33:19.0712 4620 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
15:33:19.0712 4620 FsDepends - ok
15:33:19.0743 4620 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
15:33:19.0743 4620 Fs_Rec - ok
15:33:19.0774 4620 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
15:33:19.0790 4620 fvevol - ok
15:33:19.0821 4620 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
15:33:19.0821 4620 gagp30kx - ok
15:33:19.0915 4620 GGSAFERDriver - ok
15:33:19.0977 4620 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
15:33:19.0977 4620 gpsvc - ok
15:33:20.0086 4620 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:33:20.0086 4620 gupdate - ok
15:33:20.0102 4620 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:33:20.0102 4620 gupdatem - ok
15:33:20.0117 4620 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
15:33:20.0133 4620 hcw85cir - ok
15:33:20.0180 4620 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
15:33:20.0180 4620 HdAudAddService - ok
15:33:20.0227 4620 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
15:33:20.0227 4620 HDAudBus - ok
15:33:20.0242 4620 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
15:33:20.0242 4620 HidBatt - ok
15:33:20.0258 4620 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
15:33:20.0258 4620 HidBth - ok
15:33:20.0398 4620 HideMyIpSRV (1fde827f2b511d41b6fb99fd1bcfa659) C:\Program Files (x86)\Hide My IP\HideMyIpSrv.exe
15:33:20.0414 4620 HideMyIpSRV - ok
15:33:20.0523 4620 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
15:33:20.0523 4620 HidIr - ok
15:33:20.0554 4620 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\System32\hidserv.dll
15:33:20.0554 4620 hidserv - ok
15:33:20.0617 4620 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
15:33:20.0617 4620 HidUsb - ok
15:33:20.0663 4620 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
15:33:20.0663 4620 hkmsvc - ok
15:33:20.0695 4620 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
15:33:20.0695 4620 HomeGroupListener - ok
15:33:20.0726 4620 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
15:33:20.0726 4620 HomeGroupProvider - ok
15:33:20.0757 4620 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
15:33:20.0757 4620 HpSAMD - ok
15:33:20.0804 4620 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
15:33:20.0804 4620 HTTP - ok
15:33:20.0851 4620 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
15:33:20.0851 4620 hwpolicy - ok
15:33:20.0866 4620 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
15:33:20.0866 4620 i8042prt - ok
15:33:20.0897 4620 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
15:33:20.0897 4620 iaStorV - ok
15:33:21.0007 4620 IDriverT (1cf03c69b49acb70c722df92755c0c8c) C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
15:33:21.0007 4620 IDriverT - ok
15:33:21.0163 4620 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
15:33:21.0163 4620 idsvc - ok
15:33:21.0272 4620 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
15:33:21.0272 4620 iirsp - ok
15:33:21.0319 4620 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
15:33:21.0334 4620 IKEEXT - ok
15:33:21.0412 4620 IntcAzAudAddService (589b94a9b73a0e819ff873743a480834) C:\Windows\system32\drivers\RTKVHD64.sys
15:33:21.0443 4620 IntcAzAudAddService - ok
15:33:21.0568 4620 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
15:33:21.0568 4620 intelide - ok
15:33:21.0615 4620 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
15:33:21.0615 4620 intelppm - ok
15:33:21.0709 4620 IOMap (a01c412699b6f21645b2885c2bae4454) C:\Windows\system32\drivers\IOMap64.sys
15:33:21.0709 4620 IOMap - ok
15:33:21.0740 4620 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
15:33:21.0740 4620 IPBusEnum - ok
15:33:21.0787 4620 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:33:21.0787 4620 IpFilterDriver - ok
15:33:21.0833 4620 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
15:33:21.0833 4620 iphlpsvc - ok
15:33:21.0865 4620 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
15:33:21.0865 4620 IPMIDRV - ok
15:33:21.0896 4620 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
15:33:21.0896 4620 IPNAT - ok
15:33:21.0927 4620 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
15:33:21.0927 4620 IRENUM - ok
15:33:21.0943 4620 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
15:33:21.0943 4620 isapnp - ok
15:33:21.0974 4620 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
15:33:21.0974 4620 iScsiPrt - ok
15:33:22.0005 4620 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
15:33:22.0005 4620 kbdclass - ok
15:33:22.0052 4620 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
15:33:22.0052 4620 kbdhid - ok
15:33:22.0083 4620 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
15:33:22.0083 4620 KeyIso - ok
15:33:22.0099 4620 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
15:33:22.0114 4620 KSecDD - ok
15:33:22.0130 4620 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
15:33:22.0130 4620 KSecPkg - ok
15:33:22.0161 4620 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
15:33:22.0161 4620 ksthunk - ok
15:33:22.0208 4620 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
15:33:22.0208 4620 KtmRm - ok
15:33:22.0270 4620 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\System32\srvsvc.dll
15:33:22.0270 4620 LanmanServer - ok
15:33:22.0301 4620 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
15:33:22.0317 4620 LanmanWorkstation - ok
15:33:22.0348 4620 LgBttPort (174803f2eea3b22165dfe0e5a1f20685) C:\Windows\system32\DRIVERS\lgbtpt64.sys
15:33:22.0348 4620 LgBttPort - ok
15:33:22.0395 4620 lgbusenum (565f93bb7c0361e61b3daea670c354d6) C:\Windows\system32\DRIVERS\lgbtbs64.sys
15:33:22.0395 4620 lgbusenum - ok
15:33:22.0426 4620 LGVMODEM (abf477857b7ced873362ec92c6ce10a7) C:\Windows\system32\DRIVERS\lgvmdm64.sys
15:33:22.0426 4620 LGVMODEM - ok
15:33:22.0473 4620 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
15:33:22.0473 4620 lltdio - ok
15:33:22.0504 4620 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
15:33:22.0504 4620 lltdsvc - ok
15:33:22.0535 4620 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
15:33:22.0535 4620 lmhosts - ok
15:33:22.0613 4620 LMS (7f32d4c47a50e7223491e8fb9359907d) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
15:33:22.0613 4620 LMS - ok
15:33:22.0660 4620 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
15:33:22.0676 4620 LSI_FC - ok
15:33:22.0691 4620 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
15:33:22.0691 4620 LSI_SAS - ok
15:33:22.0707 4620 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
15:33:22.0707 4620 LSI_SAS2 - ok
15:33:22.0738 4620 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
15:33:22.0738 4620 LSI_SCSI - ok
15:33:22.0754 4620 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
15:33:22.0754 4620 luafv - ok
15:33:22.0785 4620 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
15:33:22.0785 4620 Mcx2Svc - ok
15:33:22.0816 4620 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
15:33:22.0816 4620 megasas - ok
15:33:22.0832 4620 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
15:33:22.0832 4620 MegaSR - ok
15:33:22.0879 4620 MEIx64 (a6518dcc42f7a6e999bb3bea8fd87567) C:\Windows\system32\DRIVERS\HECIx64.sys
15:33:22.0879 4620 MEIx64 - ok
15:33:22.0910 4620 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
15:33:22.0925 4620 MMCSS - ok
15:33:22.0941 4620 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
15:33:22.0941 4620 Modem - ok
15:33:23.0003 4620 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
15:33:23.0003 4620 monitor - ok
15:33:23.0050 4620 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
15:33:23.0050 4620 mouclass - ok
15:33:23.0081 4620 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
15:33:23.0081 4620 mouhid - ok
15:33:23.0128 4620 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
15:33:23.0128 4620 mountmgr - ok
15:33:23.0159 4620 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
15:33:23.0159 4620 mpio - ok
15:33:23.0175 4620 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
15:33:23.0175 4620 mpsdrv - ok
15:33:23.0222 4620 MpsSvc (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
15:33:23.0222 4620 MpsSvc - ok
15:33:23.0269 4620 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
15:33:23.0269 4620 MRxDAV - ok
15:33:23.0300 4620 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
15:33:23.0300 4620 mrxsmb - ok
15:33:23.0393 4620 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:33:23.0393 4620 mrxsmb10 - ok
15:33:23.0425 4620 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:33:23.0425 4620 mrxsmb20 - ok
15:33:23.0471 4620 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
15:33:23.0471 4620 msahci - ok
15:33:23.0487 4620 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
15:33:23.0503 4620 msdsm - ok
15:33:23.0534 4620 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
15:33:23.0534 4620 MSDTC - ok
15:33:23.0565 4620 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
15:33:23.0565 4620 Msfs - ok
15:33:23.0612 4620 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
15:33:23.0612 4620 mshidkmdf - ok
15:33:23.0627 4620 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
15:33:23.0627 4620 msisadrv - ok
15:33:23.0659 4620 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
15:33:23.0659 4620 MSiSCSI - ok
15:33:23.0659 4620 msiserver - ok
15:33:23.0705 4620 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
15:33:23.0705 4620 MSKSSRV - ok
15:33:23.0721 4620 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
15:33:23.0721 4620 MSPCLOCK - ok
15:33:23.0737 4620 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
15:33:23.0737 4620 MSPQM - ok
15:33:23.0783 4620 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
15:33:23.0783 4620 MsRPC - ok
15:33:23.0815 4620 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
15:33:23.0815 4620 mssmbios - ok
15:33:23.0830 4620 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
15:33:23.0830 4620 MSTEE - ok
15:33:23.0861 4620 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
15:33:23.0861 4620 MTConfig - ok
15:33:23.0893 4620 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
15:33:23.0893 4620 Mup - ok
15:33:23.0924 4620 napagent (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
15:33:23.0924 4620 napagent - ok
15:33:23.0971 4620 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
15:33:23.0971 4620 NativeWifiP - ok
15:33:24.0033 4620 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
15:33:24.0033 4620 NDIS - ok
15:33:24.0095 4620 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
15:33:24.0095 4620 NdisCap - ok
15:33:24.0127 4620 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
15:33:24.0127 4620 NdisTapi - ok
15:33:24.0173 4620 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
15:33:24.0173 4620 Ndisuio - ok
15:33:24.0205 4620 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
15:33:24.0205 4620 NdisWan - ok
15:33:24.0267 4620 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
15:33:24.0267 4620 NDProxy - ok
15:33:24.0314 4620 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
15:33:24.0314 4620 NetBIOS - ok
15:33:24.0345 4620 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
15:33:24.0345 4620 NetBT - ok
15:33:24.0376 4620 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
15:33:24.0376 4620 Netlogon - ok
15:33:24.0423 4620 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
15:33:24.0423 4620 Netman - ok
15:33:24.0579 4620 NetMsmqActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:33:24.0579 4620 NetMsmqActivator - ok
15:33:24.0595 4620 NetPipeActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:33:24.0595 4620 NetPipeActivator - ok
15:33:24.0641 4620 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
15:33:24.0657 4620 netprofm - ok
15:33:24.0657 4620 NetTcpActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:33:24.0657 4620 NetTcpActivator - ok
15:33:24.0657 4620 NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:33:24.0657 4620 NetTcpPortSharing - ok
15:33:24.0766 4620 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
15:33:24.0782 4620 nfrd960 - ok
15:33:24.0829 4620 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
15:33:24.0829 4620 NlaSvc - ok
15:33:24.0860 4620 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
15:33:24.0860 4620 Npfs - ok
15:33:24.0875 4620 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
15:33:24.0875 4620 nsi - ok
15:33:24.0891 4620 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
15:33:24.0891 4620 nsiproxy - ok
15:33:24.0953 4620 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
15:33:24.0985 4620 Ntfs - ok
15:33:25.0109 4620 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
15:33:25.0109 4620 Null - ok
15:33:25.0156 4620 NVHDA (8d4aac74b571fc356560e5b308955e93) C:\Windows\system32\drivers\nvhda64v.sys
15:33:25.0156 4620 NVHDA - ok
15:33:25.0468 4620 nvlddmkm (0eb204639119370f5f8f2871fbf4e14b) C:\Windows\system32\DRIVERS\nvlddmkm.sys
15:33:25.0671 4620 nvlddmkm - ok
15:33:25.0827 4620 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
15:33:25.0827 4620 nvraid - ok
15:33:25.0843 4620 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
15:33:25.0843 4620 nvstor - ok
15:33:25.0921 4620 NVSvc (32ff8ee6dcee5c0cb91ff892fb1ca364) C:\Windows\system32\nvvsvc.exe
15:33:25.0921 4620 NVSvc - ok
15:33:26.0077 4620 nvUpdatusService (bd012dc22c78be1071bc21eb125d782f) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
15:33:26.0092 4620 nvUpdatusService - ok
15:33:26.0217 4620 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
15:33:26.0217 4620 nv_agp - ok
15:33:26.0233 4620 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
15:33:26.0233 4620 ohci1394 - ok
15:33:26.0326 4620 ose64 (4965b005492cba7719e82b71e3245495) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
15:33:26.0326 4620 ose64 - ok
15:33:26.0482 4620 osppsvc (61bffb5f57ad12f83ab64b7181829b34) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
15:33:26.0513 4620 osppsvc - ok
15:33:26.0638 4620 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
15:33:26.0638 4620 p2pimsvc - ok
15:33:26.0669 4620 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
15:33:26.0669 4620 p2psvc - ok
15:33:26.0747 4620 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
15:33:26.0747 4620 Parport - ok
15:33:26.0779 4620 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
15:33:26.0779 4620 partmgr - ok
15:33:26.0794 4620 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
15:33:26.0810 4620 PcaSvc - ok
15:33:26.0841 4620 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
15:33:26.0857 4620 pci - ok
15:33:26.0872 4620 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
15:33:26.0872 4620 pciide - ok
15:33:26.0903 4620 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
15:33:26.0903 4620 pcmcia - ok
15:33:26.0919 4620 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
15:33:26.0919 4620 pcw - ok
15:33:26.0950 4620 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
15:33:26.0966 4620 PEAUTH - ok
15:33:27.0013 4620 PeerDistSvc (b9b0a4299dd2d76a4243f75fd54dc680) C:\Windows\system32\peerdistsvc.dll
15:33:27.0044 4620 PeerDistSvc - ok
15:33:27.0137 4620 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
15:33:27.0137 4620 PerfHost - ok
15:33:27.0247 4620 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
15:33:27.0262 4620 pla - ok
15:33:27.0325 4620 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
15:33:27.0325 4620 PlugPlay - ok
15:33:27.0356 4620 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
15:33:27.0356 4620 PNRPAutoReg - ok
15:33:27.0387 4620 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
15:33:27.0403 4620 PNRPsvc - ok
15:33:27.0418 4620 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
15:33:27.0418 4620 PolicyAgent - ok
15:33:27.0449 4620 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
15:33:27.0449 4620 Power - ok
15:33:27.0543 4620 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
15:33:27.0543 4620 PptpMiniport - ok
15:33:27.0559 4620 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
15:33:27.0559 4620 Processor - ok
15:33:27.0590 4620 ProfSvc (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
15:33:27.0590 4620 ProfSvc - ok
15:33:27.0621 4620 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
15:33:27.0637 4620 ProtectedStorage - ok
15:33:27.0668 4620 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
15:33:27.0668 4620 Psched - ok
15:33:27.0715 4620 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
15:33:27.0746 4620 ql2300 - ok
15:33:27.0855 4620 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
15:33:27.0855 4620 ql40xx - ok
15:33:27.0902 4620 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
15:33:27.0902 4620 QWAVE - ok
15:33:27.0917 4620 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
15:33:27.0917 4620 QWAVEdrv - ok
15:33:27.0933 4620 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
15:33:27.0933 4620 RasAcd - ok
15:33:28.0011 4620 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
15:33:28.0011 4620 RasAgileVpn - ok
15:33:28.0042 4620 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
15:33:28.0042 4620 RasAuto - ok
15:33:28.0073 4620 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
15:33:28.0073 4620 Rasl2tp - ok
15:33:28.0105 4620 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
15:33:28.0120 4620 RasMan - ok
15:33:28.0136 4620 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
15:33:28.0136 4620 RasPppoe - ok
15:33:28.0167 4620 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
15:33:28.0183 4620 RasSstp - ok
15:33:28.0198 4620 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
15:33:28.0214 4620 rdbss - ok
15:33:28.0229 4620 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
15:33:28.0229 4620 rdpbus - ok
15:33:28.0245 4620 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
15:33:28.0245 4620 RDPCDD - ok
15:33:28.0276 4620 RDPDR (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys
15:33:28.0276 4620 RDPDR - ok
15:33:28.0323 4620 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
15:33:28.0323 4620 RDPENCDD - ok
15:33:28.0339 4620 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
15:33:28.0339 4620 RDPREFMP - ok
15:33:28.0385 4620 RdpVideoMiniport (70cba1a0c98600a2aa1863479b35cb90) C:\Windows\system32\drivers\rdpvideominiport.sys
15:33:28.0385 4620 RdpVideoMiniport - ok
15:33:28.0417 4620 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
15:33:28.0432 4620 RDPWD - ok
15:33:28.0463 4620 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
15:33:28.0463 4620 rdyboost - ok
15:33:28.0510 4620 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
15:33:28.0510 4620 RemoteAccess - ok
15:33:28.0541 4620 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
15:33:28.0557 4620 RemoteRegistry - ok
15:33:28.0573 4620 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
15:33:28.0573 4620 RpcEptMapper - ok
15:33:28.0588 4620 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
15:33:28.0588 4620 RpcLocator - ok
15:33:28.0635 4620 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\System32\rpcss.dll
15:33:28.0635 4620 RpcSs - ok
15:33:28.0666 4620 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
15:33:28.0666 4620 rspndr - ok
15:33:28.0729 4620 RTL8167 (ee082e06a82ff630351d1e0ebbd3d8d0) C:\Windows\system32\DRIVERS\Rt64win7.sys
15:33:28.0744 4620 RTL8167 - ok
15:33:28.0775 4620 s3cap (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys
15:33:28.0775 4620 s3cap - ok
15:33:28.0807 4620 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
15:33:28.0807 4620 SamSs - ok
15:33:28.0822 4620 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
15:33:28.0822 4620 sbp2port - ok
15:33:28.0853 4620 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
15:33:28.0869 4620 SCardSvr - ok
15:33:28.0885 4620 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
15:33:28.0885 4620 scfilter - ok
15:33:28.0947 4620 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
15:33:28.0963 4620 Schedule - ok
15:33:28.0994 4620 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
15:33:28.0994 4620 SCPolicySvc - ok
15:33:29.0041 4620 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
15:33:29.0041 4620 SDRSVC - ok
15:33:29.0150 4620 SeaPort (331e7bde228914574fc9ae6cd520dafa) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
15:33:29.0150 4620 SeaPort - ok
15:33:29.0243 4620 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
15:33:29.0243 4620 secdrv - ok
15:33:29.0275 4620 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
15:33:29.0275 4620 seclogon - ok
15:33:29.0321 4620 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\system32\sens.dll
15:33:29.0321 4620 SENS - ok
15:33:29.0337 4620 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
15:33:29.0337 4620 SensrSvc - ok
15:33:29.0384 4620 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
15:33:29.0384 4620 Serenum - ok
15:33:29.0399 4620 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
15:33:29.0399 4620 Serial - ok
15:33:29.0431 4620 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
15:33:29.0431 4620 sermouse - ok
15:33:29.0477 4620 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
15:33:29.0477 4620 SessionEnv - ok
15:33:29.0509 4620 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
15:33:29.0509 4620 sffdisk - ok
15:33:29.0524 4620 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
15:33:29.0540 4620 sffp_mmc - ok
15:33:29.0540 4620 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
15:33:29.0540 4620 sffp_sd - ok
15:33:29.0571 4620 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
15:33:29.0587 4620 sfloppy - ok
15:33:29.0633 4620 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
15:33:29.0633 4620 SharedAccess - ok
15:33:29.0665 4620 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
15:33:29.0665 4620 ShellHWDetection - ok
15:33:29.0696 4620 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
15:33:29.0696 4620 SiSRaid2 - ok
15:33:29.0727 4620 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
15:33:29.0727 4620 SiSRaid4 - ok
15:33:29.0789 4620 SmartDefragDriver (dd0443bc6cc78a19fd399817f8c51401) C:\Windows\system32\Drivers\SmartDefragDriver.sys
15:33:29.0805 4620 SmartDefragDriver - ok
15:33:29.0836 4620 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
15:33:29.0836 4620 Smb - ok
15:33:29.0883 4620 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
15:33:29.0883 4620 SNMPTRAP - ok
15:33:29.0899 4620 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
15:33:29.0914 4620 spldr - ok
15:33:29.0945 4620 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
15:33:29.0961 4620 Spooler - ok
15:33:30.0070 4620 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
15:33:30.0117 4620 sppsvc - ok
15:33:30.0226 4620 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
15:33:30.0226 4620 sppuinotify - ok
15:33:30.0320 4620 sptd (602884696850c86434530790b110e8eb) C:\Windows\system32\Drivers\sptd.sys
15:33:30.0320 4620 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 602884696850c86434530790b110e8eb
15:33:30.0335 4620 sptd ( LockedFile.Multi.Generic ) - warning
15:33:30.0335 4620 sptd - detected LockedFile.Multi.Generic (1)
15:33:30.0382 4620 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
15:33:30.0382 4620 srv - ok
15:33:30.0413 4620 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
15:33:30.0413 4620 srv2 - ok
15:33:30.0445 4620 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
15:33:30.0445 4620 srvnet - ok
15:33:30.0491 4620 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
15:33:30.0491 4620 SSDPSRV - ok
15:33:30.0507 4620 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
15:33:30.0507 4620 SstpSvc - ok
15:33:30.0585 4620 Steam Client Service - ok
15:33:30.0694 4620 Stereo Service (fc0a58529a02b1eed55ddc58696b7908) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
15:33:30.0694 4620 Stereo Service - ok
15:33:30.0741 4620 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
15:33:30.0741 4620 stexstor - ok
15:33:30.0788 4620 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
15:33:30.0788 4620 stisvc - ok
15:33:30.0835 4620 storflt (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys
15:33:30.0835 4620 storflt - ok
15:33:30.0850 4620 storvsc (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys
15:33:30.0850 4620 storvsc - ok
15:33:30.0866 4620 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
15:33:30.0881 4620 swenum - ok
15:33:30.0991 4620 SwitchBoard (f577910a133a592234ebaad3f3afa258) C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
15:33:30.0991 4620 SwitchBoard - ok
15:33:31.0037 4620 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
15:33:31.0053 4620 swprv - ok
15:33:31.0069 4620 Synth3dVsc - ok
15:33:31.0131 4620 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
15:33:31.0162 4620 SysMain - ok
15:33:31.0271 4620 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
15:33:31.0271 4620 TabletInputService - ok
15:33:31.0303 4620 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
15:33:31.0303 4620 TapiSrv - ok
15:33:31.0334 4620 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
15:33:31.0349 4620 TBS - ok
15:33:31.0427 4620 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
15:33:31.0474 4620 Tcpip - ok
15:33:31.0583 4620 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
15:33:31.0599 4620 TCPIP6 - ok
15:33:31.0661 4620 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
15:33:31.0661 4620 tcpipreg - ok
15:33:31.0724 4620 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
15:33:31.0724 4620 TDPIPE - ok
15:33:31.0739 4620 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
15:33:31.0739 4620 TDTCP - ok
15:33:31.0771 4620 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
15:33:31.0771 4620 tdx - ok
15:33:31.0817 4620 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
15:33:31.0817 4620 TermDD - ok
15:33:31.0864 4620 TermService (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
15:33:31.0864 4620 TermService - ok
15:33:31.0895 4620 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
15:33:31.0895 4620 Themes - ok
15:33:31.0927 4620 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
15:33:31.0942 4620 THREADORDER - ok
15:33:31.0958 4620 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
15:33:31.0958 4620 TrkWks - ok
15:33:32.0036 4620 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
15:33:32.0036 4620 TrustedInstaller - ok
15:33:32.0067 4620 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
15:33:32.0067 4620 tssecsrv - ok
15:33:32.0098 4620 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
15:33:32.0098 4620 TsUsbFlt - ok
15:33:32.0098 4620 tsusbhub - ok
15:33:32.0161 4620 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
15:33:32.0161 4620 tunnel - ok
15:33:32.0192 4620 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
15:33:32.0192 4620 uagp35 - ok
15:33:32.0223 4620 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
15:33:32.0223 4620 udfs - ok
15:33:32.0254 4620 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
15:33:32.0254 4620 UI0Detect - ok
15:33:32.0285 4620 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
15:33:32.0285 4620 uliagpkx - ok
15:33:32.0332 4620 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
15:33:32.0332 4620 umbus - ok
15:33:32.0348 4620 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
15:33:32.0348 4620 UmPass - ok
15:33:32.0379 4620 UmRdpService (a293dcd756d04d8492a750d03b9a297c) C:\Windows\System32\umrdp.dll
15:33:32.0379 4620 UmRdpService - ok
15:33:32.0519 4620 UNS (2c16648a12999ae69a9ebf41974b0ba2) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
15:33:32.0535 4620 UNS - ok
15:33:32.0660 4620 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
15:33:32.0660 4620 upnphost - ok
15:33:32.0722 4620 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
15:33:32.0722 4620 usbccgp - ok
15:33:32.0753 4620 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
15:33:32.0753 4620 usbcir - ok
15:33:32.0769 4620 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys
15:33:32.0785 4620 usbehci - ok
15:33:32.0816 4620 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
15:33:32.0816 4620 usbhub - ok
15:33:32.0847 4620 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
15:33:32.0847 4620 usbohci - ok
15:33:32.0909 4620 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
15:33:32.0909 4620 usbprint - ok
15:33:32.0956 4620 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
15:33:32.0956 4620 usbscan - ok
15:33:32.0987 4620 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:33:32.0987 4620 USBSTOR - ok
15:33:33.0003 4620 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
15:33:33.0003 4620 usbuhci - ok
15:33:33.0034 4620 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
15:33:33.0034 4620 UxSms - ok
15:33:33.0065 4620 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
15:33:33.0081 4620 VaultSvc - ok
15:33:33.0112 4620 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
15:33:33.0112 4620 vdrvroot - ok
15:33:33.0159 4620 vds (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
15:33:33.0159 4620 vds - ok
15:33:33.0190 4620 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
15:33:33.0190 4620 vga - ok
15:33:33.0206 4620 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
15:33:33.0206 4620 VgaSave - ok
15:33:33.0237 4620 VGPU - ok
15:33:33.0268 4620 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
15:33:33.0268 4620 vhdmp - ok
15:33:33.0284 4620 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys

15:33:33.0284 4620 viaide - ok
15:33:33.0331 4620 Video3D (fc7eb58f50967eb910eb4aa2e1dae263) C:\Windows\system32\Drivers\Video3D64.sys
15:33:33.0331 4620 Video3D - ok
15:33:33.0362 4620 vmbus (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys
15:33:33.0362 4620 vmbus - ok
15:33:33.0377 4620 VMBusHID (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys
15:33:33.0377 4620 VMBusHID - ok
15:33:33.0393 4620 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
15:33:33.0393 4620 volmgr - ok
15:33:33.0440 4620 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
15:33:33.0440 4620 volmgrx - ok
15:33:33.0471 4620 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
15:33:33.0471 4620 volsnap - ok
15:33:33.0518 4620 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
15:33:33.0518 4620 vsmraid - ok
15:33:33.0596 4620 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
15:33:33.0611 4620 VSS - ok
15:33:33.0721 4620 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
15:33:33.0721 4620 vwifibus - ok
15:33:33.0783 4620 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
15:33:33.0783 4620 W32Time - ok
15:33:33.0814 4620 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
15:33:33.0830 4620 WacomPen - ok
15:33:33.0877 4620 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
15:33:33.0877 4620 WANARP - ok
15:33:33.0877 4620 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
15:33:33.0892 4620 Wanarpv6 - ok
15:33:33.0939 4620 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
15:33:33.0970 4620 WatAdminSvc - ok
15:33:34.0048 4620 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
15:33:34.0079 4620 wbengine - ok
15:33:34.0189 4620 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
15:33:34.0204 4620 WbioSrvc - ok
15:33:34.0220 4620 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
15:33:34.0235 4620 wcncsvc - ok
15:33:34.0267 4620 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
15:33:34.0267 4620 WcsPlugInService - ok
15:33:34.0329 4620 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
15:33:34.0329 4620 Wd - ok
15:33:34.0360 4620 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
15:33:34.0376 4620 Wdf01000 - ok
15:33:34.0391 4620 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
15:33:34.0391 4620 WdiServiceHost - ok
15:33:34.0407 4620 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
15:33:34.0407 4620 WdiSystemHost - ok
15:33:34.0438 4620 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
15:33:34.0438 4620 WebClient - ok
15:33:34.0469 4620 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
15:33:34.0485 4620 Wecsvc - ok
15:33:34.0501 4620 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
15:33:34.0516 4620 wercplsupport - ok
15:33:34.0547 4620 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
15:33:34.0547 4620 WerSvc - ok
15:33:34.0641 4620 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
15:33:34.0641 4620 WfpLwf - ok
15:33:34.0657 4620 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
15:33:34.0657 4620 WIMMount - ok
15:33:34.0672 4620 WinHttpAutoProxySvc - ok
15:33:34.0735 4620 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
15:33:34.0735 4620 Winmgmt - ok
15:33:34.0813 4620 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
15:33:34.0859 4620 WinRM - ok
15:33:35.0015 4620 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
15:33:35.0015 4620 WinUsb - ok
15:33:35.0062 4620 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
15:33:35.0078 4620 Wlansvc - ok
15:33:35.0234 4620 wlidsvc (98f138897ef4246381d197cb81846d62) c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
15:33:35.0234 4620 wlidsvc - ok
15:33:35.0374 4620 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
15:33:35.0374 4620 WmiAcpi - ok
15:33:35.0452 4620 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
15:33:35.0452 4620 wmiApSrv - ok
15:33:35.0530 4620 WMPNetworkSvc - ok
15:33:35.0561 4620 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
15:33:35.0561 4620 WPCSvc - ok
15:33:35.0593 4620 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
15:33:35.0593 4620 WPDBusEnum - ok
15:33:35.0624 4620 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
15:33:35.0624 4620 ws2ifsl - ok
15:33:35.0655 4620 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\system32\wscsvc.dll
15:33:35.0655 4620 wscsvc - ok
15:33:35.0655 4620 WSearch - ok
15:33:35.0749 4620 wuauserv (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
15:33:35.0780 4620 wuauserv - ok
15:33:35.0905 4620 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
15:33:35.0905 4620 WudfPf - ok
15:33:35.0920 4620 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
15:33:35.0936 4620 WUDFRd - ok
15:33:35.0967 4620 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
15:33:35.0967 4620 wudfsvc - ok
15:33:35.0998 4620 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
15:33:36.0014 4620 WwanSvc - ok
15:33:36.0045 4620 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
15:33:36.0326 4620 \Device\Harddisk0\DR0 - ok
15:33:36.0326 4620 Boot (0x1200) (9ec7f42d1a7a0b4849c56348a8674338) \Device\Harddisk0\DR0\Partition0
15:33:36.0326 4620 \Device\Harddisk0\DR0\Partition0 - ok
15:33:36.0341 4620 Boot (0x1200) (f4e0a51f9cc527a90f6d81393bd1fed7) \Device\Harddisk0\DR0\Partition1
15:33:36.0357 4620 \Device\Harddisk0\DR0\Partition1 - ok
15:33:36.0357 4620 ============================================================
15:33:36.0357 4620 Scan finished
15:33:36.0357 4620 ============================================================
15:33:36.0357 2528 Detected object count: 1
15:33:36.0357 2528 Actual detected object count: 1
15:33:46.0481 2528 sptd ( LockedFile.Multi.Generic ) - skipped by user
15:33:46.0481 2528 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
15:33:52.0394 4760 Deinitialize success

ComboFix


ComboFix 12-06-14.01 - Jan 14.06.2012 15:57:52.2.2 - x64 MINIMAL
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.5102.4422 [GMT 2:00]
Running from: c:\users\Jan\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Outdated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Outdated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Jan\AppData\Local\assembly\tmp
.
.
((((((((((((((((((((((((( Files Created from 2012-05-14 to 2012-06-14 )))))))))))))))))))))))))))))))
.
.
2012-06-14 14:03 . 2012-06-14 14:03 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-06-14 14:03 . 2012-06-14 14:03 -------- d-----w- c:\users\Wohin\AppData\Local\temp
2012-06-14 14:03 . 2012-06-14 14:03 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-06-14 14:03 . 2012-06-14 14:03 -------- d-----w- c:\users\Administrator\AppData\Local\temp
2012-06-14 13:37 . 2012-06-14 13:37 -------- d-----w- c:\users\Jan\AppData\Local\Adobe
2012-06-11 18:36 . 2012-06-11 18:36 -------- d-----w- c:\users\Wohin\AppData\Local\FlatOut Ultimate Carnage
2012-06-09 23:21 . 2012-01-19 06:23 339320 ----a-w- c:\windows\SysWow64\HMIPCore.dll
2012-06-09 23:21 . 2012-06-09 23:21 -------- d-----w- c:\program files (x86)\Hide My IP
2012-06-08 15:58 . 2012-06-09 13:05 -------- d-----w- c:\users\Jan\AppData\Roaming\.minecraft
2012-06-05 18:10 . 2012-06-05 18:15 -------- d-----w- c:\programdata\HP Photo Creations
2012-06-05 18:10 . 2012-06-05 18:10 -------- d-----w- c:\program files (x86)\HP Photo Creations
2012-06-05 18:09 . 2012-06-05 18:09 -------- d-----w- c:\program files\HP
2012-06-04 16:59 . 2012-06-04 16:59 -------- d-----w- c:\users\Jan\AppData\Roaming\ML
2012-06-04 16:52 . 2012-06-04 16:52 -------- d-----w- c:\users\Jan\AppData\Local\LG Electronics
2012-06-04 16:47 . 2012-06-04 16:54 2984 ----a-w- C:\user.js
2012-06-04 16:47 . 2012-06-14 13:10 -------- d-----w- c:\program files (x86)\BrowserCompanion
2012-06-04 16:47 . 2012-06-04 16:47 -------- d-----w- c:\users\Jan\AppData\Roaming\Babylon
2012-06-04 16:47 . 2012-06-04 16:47 -------- d-----w- c:\programdata\Babylon
2012-06-02 13:41 . 2012-06-02 13:41 -------- d-----w- c:\users\Jan\AppData\Roaming\LolClient2
2012-05-29 16:26 . 2012-05-29 16:26 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-05-29 16:26 . 2012-05-29 16:26 419488 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-05-28 17:55 . 2012-06-03 09:52 -------- d-----w- c:\users\Jan\AppData\Roaming\ICQ
2012-05-28 17:55 . 2012-05-28 17:55 -------- d-----w- c:\program files (x86)\ICQ7M
2012-05-21 11:31 . 2012-05-21 11:31 -------- d-----w- c:\program files\EA Sports
2012-05-17 13:45 . 2012-05-17 13:45 -------- d-----w- c:\users\Jan\AppData\Roaming\Leadertech
2012-05-17 13:43 . 2012-06-13 21:19 -------- d-----w- c:\program files (x86)\EA Sports
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-23 15:12 . 2012-02-02 20:08 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2012-04-23 15:12 . 2012-02-02 20:08 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-04-23 15:12 . 2012-02-02 20:08 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2012-04-23 15:12 . 2012-02-02 20:08 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-04-21 09:50 . 2012-04-21 09:50 1119680 ----a-w- c:\windows\PE_Rom.dll
2012-04-04 16:47 . 2012-05-09 20:12 772504 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-04-04 16:47 . 2012-05-09 20:12 687504 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-04-04 13:56 . 2012-03-26 18:51 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-03-31 10:43 . 2012-03-25 20:30 2829 ----a-w- c:\windows\War3Unin.pif
2012-03-31 10:43 . 2012-03-25 20:30 139264 ----a-w- c:\windows\War3Unin.exe
2012-03-20 01:51 . 2012-04-01 21:11 8669240 ------w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{890A5335-6FC7-4E72-8667-9E4F7D8BFD80}\mpengine.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2012-05-20 880496]
"Steam"="c:\program files (x86)\Steam\Steam.exe" [2012-03-23 1242448]
"PlayNC Launcher"="" [BU]
"4gameTray"="c:\program files (x86)\4game\4game\4GameTray.exe" [2012-03-05 813408]
"ICQ"="c:\program files (x86)\ICQ7M\ICQ.exe" [2012-05-28 127040]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BCU"="c:\program files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe" [2010-03-05 411864]
"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-07-22 402432]
"B2C_AGENT"="c:\programdata\LGMOBILEAX\B2C_Client\B2CNotiAgent.exe" [2012-03-28 404568]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
R1 appdrv01;Application Driver (01);c:\windows\system32\Drivers\appdrv01.sys [x]
R1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys [x]
R1 aswSnx;aswSnx; [x]
R1 aswSP;aswSP; [x]
R1 EIO64;EIO Driver;c:\windows\system32\DRIVERS\EIO64.sys [x]
R2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files (x86)\IObit\Advanced SystemCare 5\ASCService.exe [2011-12-29 497496]
R2 appdrvrem01;Application Driver Auto Removal Service (01);c:\windows\System32\appdrvrem01.exe svc [x]
R2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [2010-11-03 918144]
R2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [2010-12-02 915584]
R2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [2010-10-21 586880]
R2 aswFsBlk;aswFsBlk; [x]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
R2 BCUService;Browser Configuration Utility Service;c:\program files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe [2010-03-05 235752]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 136176]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-03-01 2348352]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-02-29 382272]
R2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-21 2656280]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-29 257696]
R3 Andbus;LGE Android Platform Composite USB Device;c:\windows\system32\DRIVERS\lgandbus64.sys [x]
R3 AndDiag;LGE Android Platform USB Serial Port;c:\windows\system32\DRIVERS\lganddiag64.sys [x]
R3 AndGps;LGE Android Platform USB GPS NMEA Port;c:\windows\system32\DRIVERS\lgandgps64.sys [x]
R3 ANDModem;LGE Android Platform USB Modem;c:\windows\system32\DRIVERS\lgandmodem64.sys [x]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files (x86)\Garena Plus\Room\safedrv.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 136176]
R3 HideMyIpSRV;HideMyIpSRV;c:\program files (x86)\Hide My IP\HideMyIpSrv.exe [2012-01-19 3337216]
R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\DRIVERS\lgbtpt64.sys [x]
R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\DRIVERS\lgvmdm64.sys [x]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [x]
S3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\DRIVERS\lgbtbs64.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-06-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-29 16:26]
.
2012-06-14 c:\windows\Tasks\AutoKMS.job
- c:\windows\AutoKMS.exe [2012-02-14 16:31]
.
2012-06-14 c:\windows\Tasks\AutoKMSDaily.job
- c:\windows\AutoKMS.exe [2012-02-14 16:31]
.
2012-06-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 21:32]
.
2012-06-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 21:32]
.
2012-06-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2163336548-1697645886-630390420-1000Core.job
- c:\users\Jan\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-29 17:40]
.
2012-06-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2163336548-1697645886-630390420-1000UA.job
- c:\users\Jan\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-29 17:40]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-01-05 17:19 132584 ----a-w- c:\program files\Alwil Software\Avast5\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-19 11613288]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: {{781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - c:\program files (x86)\ICQ7M\ICQ.exe
LSP: c:\windows\system32\HMIPCore.dll
TCP: DhcpNameServer = 10.0.0.138
CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\shell32.dll
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKCU-Run-LG LinkAir - (no file)
WebBrowser-{F999A48B-1950-4D81-9971-79018F807B4B} - (no file)
AddRemove-Champions Online - c:\program files (x86)\Cryptic Studios\Uninstall Champions Online.exe
AddRemove-{55D65D27-C0CD-4375-9021-F3D3D024ED90}_is1 - c:\program files (x86)\Minecraft PC Gamer Demo\unins000.exe
AddRemove-NCsoft-Aion - c:\program files (x86)\ncsoft\launcher\NCLauncher.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-2163336548-1697645886-630390420-1000\Software\SecuROM\License information*]
"datasecu"=hex:2e,ad,b9,1c,bf,e6,ff,82,03,d0,f7,46,9c,d0,09,4e,3a,c2,c5,9d,79,
9b,e3,5f,95,10,02,a4,15,30,0e,24,22,30,aa,05,5e,98,ed,a9,b5,f9,56,1c,b6,81,\
"rkeysecu"=hex:89,b3,f1,75,e3,98,aa,53,6d,cf,cb,e2,28,a3,80,6f
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-06-14 16:05:15
ComboFix-quarantined-files.txt 2012-06-14 14:05
.
Pre-Run: Volných bajtu: 232 414 527 488
Post-Run: Volných bajtu: 232 529 870 848
.
- - End Of File - - 9F3C35FE7D7886F295748A3A1C6870F2

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu

ComboFix 12-06-14.01 - Jan 14.06.2012 21:59:38.3.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.5102.4018 [GMT 2:00]
Running from: c:\users\Jan\Desktop\ComboFix.exe
Command switches used :: c:\users\Jan\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Outdated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Outdated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
FILE ::
"c:\windows\AutoKMS.exe"
"c:\windows\Tasks\AutoKMS.job"
"c:\windows\Tasks\AutoKMSDaily.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2163336548-1697645886-630390420-1000Core.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2163336548-1697645886-630390420-1000UA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\BrowserCompanion
c:\program files (x86)\BrowserCompanion\BCHelper.exe
c:\program files (x86)\BrowserCompanion\blabbers-ch.crx
c:\program files (x86)\BrowserCompanion\logo.ico
c:\program files (x86)\Google\Update
c:\program files (x86)\Google\Update\1.3.21.111\GoogleCrashHandler.exe
c:\program files (x86)\Google\Update\1.3.21.111\GoogleCrashHandler64.exe
c:\program files (x86)\Google\Update\1.3.21.111\GoogleUpdate.exe
c:\program files (x86)\Google\Update\1.3.21.111\GoogleUpdateBroker.exe
c:\program files (x86)\Google\Update\1.3.21.111\GoogleUpdateHelper.msi
c:\program files (x86)\Google\Update\1.3.21.111\GoogleUpdateOnDemand.exe
c:\program files (x86)\Google\Update\1.3.21.111\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\1.3.21.111\goopdate.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_am.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_ar.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_bg.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_bn.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_ca.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_cs.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_da.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_de.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_el.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_en-GB.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_en.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_es-419.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_es.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_et.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_fa.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_fi.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_fil.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_fr.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_gu.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_hi.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_hr.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_hu.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_id.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_is.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_it.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_iw.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_ja.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_kn.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_ko.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_lt.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_lv.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_ml.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_mr.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_ms.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_nl.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_no.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_pl.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_pt-BR.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_pt-PT.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_ro.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_ru.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_sk.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_sl.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_sr.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_sv.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_sw.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_ta.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_te.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_th.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_tr.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_uk.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_ur.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_vi.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_zh-CN.dll
c:\program files (x86)\Google\Update\1.3.21.111\goopdateres_zh-TW.dll
c:\program files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
c:\program files (x86)\Google\Update\1.3.21.111\psmachine.dll
c:\program files (x86)\Google\Update\1.3.21.111\psuser.dll
c:\program files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.21.111\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\Download\{74AF07D8-FB8F-4D51-8AC7-927721D56EBB}\0.0.0.0\GoogleEarth-Win-Bundle-6.2.1.6014.exe
c:\program files (x86)\Google\Update\Download\{74AF07D8-FB8F-4D51-8AC7-927721D56EBB}\0.0.0.0\GoogleEarth-Win-Bundle-6.2.2.6613.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Google\Update\Install\{C424923C-D30E-4C00-A0CA-B3EC58EDB76C}\GoogleEarth-Win-Bundle-6.2.2.6613.exe
c:\programdata\Babylon
c:\users\Jan\AppData\Roaming\Babylon
c:\users\Jan\AppData\Roaming\Babylon\log_file.txt
c:\windows\AutoKMS.exe
c:\windows\Tasks\AutoKMS.job
c:\windows\Tasks\AutoKMSDaily.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2163336548-1697645886-630390420-1000Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2163336548-1697645886-630390420-1000UA.job
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Files Created from 2012-05-14 to 2012-06-14 )))))))))))))))))))))))))))))))
.
.
2012-06-14 20:06 . 2012-06-14 20:06 -------- d-----w- c:\users\Wohin\AppData\Local\temp
2012-06-14 20:06 . 2012-06-14 20:06 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-06-14 20:06 . 2012-06-14 20:06 -------- d-----w- c:\users\Public\AppData\Local\temp
2012-06-14 20:06 . 2012-06-14 20:06 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-06-14 20:06 . 2012-06-14 20:06 -------- d-----w- c:\users\Administrator\AppData\Local\temp
2012-06-14 15:05 . 2012-06-14 15:05 -------- d-----w- c:\users\Wohin\AppData\Local\Adobe
2012-06-14 14:34 . 2012-06-14 14:34 -------- d-----w- c:\users\Jan\AppData\Roaming\Flock
2012-06-14 14:34 . 2012-06-14 14:34 -------- d-----w- c:\users\Jan\AppData\Local\Flock
2012-06-14 14:33 . 2012-06-14 14:38 -------- d-----w- c:\program files (x86)\Flock
2012-06-14 14:10 . 2012-04-13 08:46 8917360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5EDF8007-5BBA-4BB1-A1CC-B6CE08EE0935}\mpengine.dll
2012-06-14 14:10 . 2012-06-14 14:10 78848 ----a-w- c:\windows\KMSEmulator.exe
2012-06-14 13:37 . 2012-06-14 13:37 -------- d-----w- c:\users\Jan\AppData\Local\Adobe
2012-06-11 18:36 . 2012-06-11 18:36 -------- d-----w- c:\users\Wohin\AppData\Local\FlatOut Ultimate Carnage
2012-06-09 23:21 . 2012-01-19 06:23 339320 ----a-w- c:\windows\SysWow64\HMIPCore.dll
2012-06-09 23:21 . 2012-06-09 23:21 -------- d-----w- c:\program files (x86)\Hide My IP
2012-06-08 15:58 . 2012-06-09 13:05 -------- d-----w- c:\users\Jan\AppData\Roaming\.minecraft
2012-06-05 18:10 . 2012-06-05 18:15 -------- d-----w- c:\programdata\HP Photo Creations
2012-06-05 18:10 . 2012-06-05 18:10 -------- d-----w- c:\program files (x86)\HP Photo Creations
2012-06-05 18:09 . 2012-06-05 18:09 -------- d-----w- c:\program files\HP
2012-06-04 16:59 . 2012-06-04 16:59 -------- d-----w- c:\users\Jan\AppData\Roaming\ML
2012-06-04 16:52 . 2012-06-04 16:52 -------- d-----w- c:\users\Jan\AppData\Local\LG Electronics
2012-06-04 16:47 . 2012-06-04 16:54 2984 ----a-w- C:\user.js
2012-06-02 13:41 . 2012-06-02 13:41 -------- d-----w- c:\users\Jan\AppData\Roaming\LolClient2
2012-05-29 16:26 . 2012-06-14 14:35 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-05-29 16:26 . 2012-06-14 14:35 419488 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-05-28 17:55 . 2012-06-03 09:52 -------- d-----w- c:\users\Jan\AppData\Roaming\ICQ
2012-05-28 17:55 . 2012-05-28 17:55 -------- d-----w- c:\program files (x86)\ICQ7M
2012-05-21 11:31 . 2012-05-21 11:31 -------- d-----w- c:\program files\EA Sports
2012-05-17 13:45 . 2012-05-17 13:45 -------- d-----w- c:\users\Jan\AppData\Roaming\Leadertech
2012-05-17 13:43 . 2012-06-13 21:19 -------- d-----w- c:\program files (x86)\EA Sports
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-23 15:12 . 2012-02-02 20:08 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2012-04-23 15:12 . 2012-02-02 20:08 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-04-23 15:12 . 2012-02-02 20:08 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2012-04-23 15:12 . 2012-02-02 20:08 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-04-21 09:50 . 2012-04-21 09:50 1119680 ----a-w- c:\windows\PE_Rom.dll
2012-04-04 16:47 . 2012-05-09 20:12 772504 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-04-04 16:47 . 2012-05-09 20:12 687504 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-04-04 13:56 . 2012-03-26 18:51 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-03-31 10:43 . 2012-03-25 20:30 2829 ----a-w- c:\windows\War3Unin.pif
2012-03-31 10:43 . 2012-03-25 20:30 139264 ----a-w- c:\windows\War3Unin.exe
.
.
((((((((((((((((((((((((((((( SnapShot@2012-06-14_14.03.58 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-14 04:54 . 2012-06-14 20:09 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2012-06-14 13:36 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-06-14 20:09 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-06-14 13:36 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-06-14 20:09 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-06-14 13:36 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2012-01-29 00:02 . 2012-06-14 13:53 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2012-01-29 00:02 . 2012-06-14 20:08 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2012-04-11 19:17 . 2012-06-14 20:08 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2012-04-11 19:17 . 2012-06-14 13:53 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-06-14 13:53 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-06-14 20:08 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-01-29 00:09 . 2012-06-14 14:10 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2012-01-29 00:09 . 2012-06-14 13:38 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2012-01-29 00:09 . 2012-06-14 13:38 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2012-01-29 00:09 . 2012-06-14 14:10 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2012-01-29 00:09 . 2012-06-14 13:38 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-01-29 00:09 . 2012-06-14 14:10 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-01-29 00:09 . 2012-06-14 19:13 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2012-01-29 00:09 . 2012-06-14 13:38 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2012-01-29 00:09 . 2012-06-14 13:38 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-01-29 00:09 . 2012-06-14 19:13 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2012-06-14 13:54 . 2012-06-14 13:54 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-06-14 20:08 . 2012-06-14 20:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-06-14 13:54 . 2012-06-14 13:54 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-06-14 20:08 . 2012-06-14 20:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-06-14 14:35 . 2012-06-14 14:35 351904 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_2_202_235_Plugin.exe
- 2012-05-29 16:26 . 2012-05-29 16:26 257696 c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
+ 2012-05-29 16:26 . 2012-06-14 14:35 257696 c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
- 2009-07-14 05:01 . 2012-06-14 13:34 468724 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2012-06-14 20:07 468724 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2012-03-23 22:39 . 2012-06-14 20:07 864320 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2163336548-1697645886-630390420-1000-8192.dat
- 2012-03-23 22:39 . 2012-06-14 13:34 864320 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2163336548-1697645886-630390420-1000-8192.dat
+ 2012-06-14 14:35 . 2012-06-14 14:35 8797856 c:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2012-05-20 880496]
"Steam"="c:\program files (x86)\Steam\Steam.exe" [2012-03-23 1242448]
"PlayNC Launcher"="" [BU]
"4gameTray"="c:\program files (x86)\4game\4game\4GameTray.exe" [2012-03-05 813408]
"ICQ"="c:\program files (x86)\ICQ7M\ICQ.exe" [2012-05-28 127040]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BCU"="c:\program files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe" [2010-03-05 411864]
"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-07-22 402432]
"B2C_AGENT"="c:\programdata\LGMOBILEAX\B2C_Client\B2CNotiAgent.exe" [2012-03-28 404568]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 appdrvrem01;Application Driver Auto Removal Service (01);c:\windows\System32\appdrvrem01.exe svc [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-03-01 2348352]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-14 257696]
R3 Andbus;LGE Android Platform Composite USB Device;c:\windows\system32\DRIVERS\lgandbus64.sys [x]
R3 AndDiag;LGE Android Platform USB Serial Port;c:\windows\system32\DRIVERS\lganddiag64.sys [x]
R3 AndGps;LGE Android Platform USB GPS NMEA Port;c:\windows\system32\DRIVERS\lgandgps64.sys [x]
R3 ANDModem;LGE Android Platform USB Modem;c:\windows\system32\DRIVERS\lgandmodem64.sys [x]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files (x86)\Garena Plus\Room\safedrv.sys [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 appdrv01;Application Driver (01);c:\windows\system32\Drivers\appdrv01.sys [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 EIO64;EIO Driver;c:\windows\system32\DRIVERS\EIO64.sys [x]
S2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files (x86)\IObit\Advanced SystemCare 5\ASCService.exe [2011-12-29 497496]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [2010-11-03 918144]
S2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [2010-12-02 915584]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [2010-10-21 586880]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 BCUService;Browser Configuration Utility Service;c:\program files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe [2010-03-05 235752]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-02-29 382272]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-21 2656280]
S3 HideMyIpSRV;HideMyIpSRV;c:\program files (x86)\Hide My IP\HideMyIpSrv.exe [2012-01-19 3337216]
S3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\DRIVERS\lgbtpt64.sys [x]
S3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\DRIVERS\lgbtbs64.sys [x]
S3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\DRIVERS\lgvmdm64.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S4 IOMap;IOMap;c:\windows\system32\drivers\IOMap64.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-06-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-29 14:35]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-01-05 17:19 132584 ----a-w- c:\program files\Alwil Software\Avast5\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-19 11613288]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"combofix"="c:\combofix\CF20786.3XE" [2010-11-20 345088]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: {{781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - c:\program files (x86)\ICQ7M\ICQ.exe
LSP: c:\windows\system32\HMIPCore.dll
TCP: DhcpNameServer = 10.0.0.138
CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\shell32.dll
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{F999A48B-1950-4D81-9971-79018F807B4B} - (no file)
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-2163336548-1697645886-630390420-1000\Software\SecuROM\License information*]
"datasecu"=hex:2e,ad,b9,1c,bf,e6,ff,82,03,d0,f7,46,9c,d0,09,4e,3a,c2,c5,9d,79,
9b,e3,5f,95,10,02,a4,15,30,0e,24,22,30,aa,05,5e,98,ed,a9,b5,f9,56,1c,b6,81,\
"rkeysecu"=hex:89,b3,f1,75,e3,98,aa,53,6d,cf,cb,e2,28,a3,80,6f
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Alwil Software\Avast5\setup\avast.setup
c:\program files (x86)\4game\4game\4GameService.exe
c:\program files (x86)\ASUS\AI Suite II\AsRoutineController.exe
c:\program files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
c:\program files (x86)\IObit\Game Booster 3\gbtray.exe
c:\windows\SysWOW64\ASDR.exe
c:\folding@homecpu\1\Fah.exe
c:\folding@homecpu\2\Fah.exe
c:\folding@homecpu\1\FahCore_a4.exe
c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\folding@homecpu\2\FahCore_a4.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Completion time: 2012-06-14 22:14:02 - machine was rebooted
ComboFix-quarantined-files.txt 2012-06-14 20:14
ComboFix2.txt 2012-06-14 14:05
ComboFix3.txt 2012-04-11 19:10
.
Pre-Run: Volných bajtu: 232 342 691 840
Post-Run: Volných bajtu: 232 287 502 336
.
- - End Of File - - 005C9DDFA883752C093F3BA50EB0D796

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.