PC-HELP.CZ

PC je spomalené a načítání stránek katastrofa

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:55:30, on 17.7.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16447)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe
C:\Program Files\Firefox 4\firefox.exe
C:\Program Files\Firefox 4\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_265.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_265.exe
D:\utility\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=111881 ... e6ba780b98
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Roman\AppData\Roaming\Complitly\Complitly.dll
O2 - BHO: C:\Program Files\2YourFace\bho.dll - {1185823F-F22F-4027-80E5-4F68ACD5DE5E} - C:\Program Files\2YourFace\bho.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Fairy - {27CF82B1-E1D2-4f9b-976E-62095A52BA4A} - C:\Program Files\Search Fairy\SearchFairy.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Expresso Helper - {A6629839-6636-4998-95D6-2B0F52141861} - C:\Program Files\Expresso\Extension32.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [P17RunE] RunDll32 P17RunE.dll,RunDLLEntry
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: Search Fairy - {81727BE7-50E7-48ed-A547-F0274756E2DD} - C:\Program Files\Search Fairy\SearchFairy.dll
O9 - Extra 'Tools' menuitem: Search Fairy options - {81727BE7-50E7-48ed-A547-F0274756E2DD} - C:\Program Files\Search Fairy\SearchFairy.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - VIA Technologies, Inc. - C:\Windows\system32\viakaraokesrv.exe

--
End of file - 8632 bytes

Odinstaluj:
Ask Toolbar

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod



Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

Tady je ten log .

Malwarebytes Anti-Malware 1.62.0.1300
http://www.malwarebytes.org

Verze databáze: v2012.07.18.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Roman :: ROMAN-PC [administrátor]

18.7.2012 18:24:33
mbam-log-2012-07-18 (18-30-47).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 219024
Uplynulý čas: 5 minut, 33 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 3
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileHunter (Heuristics.Shuriken) -> Žádná instrukce nebyla provedena.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chrome.exe (Security.Hijack) -> Žádná instrukce nebyla provedena.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\firefox.exe (Security.Hijack) -> Žádná instrukce nebyla provedena.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\Users\Roman\AppData\Roaming\SuperPump\uninstall.exe (Heuristics.Shuriken) -> Žádná instrukce nebyla provedena.

(konec)

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit
Můžeš sem pak vložit nový log z MbAM.

Stáhni si TDSSKiller

Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

MbAM / log

Malwarebytes Anti-Malware 1.62.0.1300
http://www.malwarebytes.org

Verze databáze: v2012.07.18.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Roman :: ROMAN-PC [administrátor]

19.7.2012 17:49:09
mbam-log-2012-07-19 (17-49-09).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 219344
Uplynulý čas: 5 minut, 47 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 3
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileHunter (Heuristics.Shuriken) -> Umístnění do karantény a smazání se zdařilo.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chrome.exe (Security.Hijack) -> Umístnění do karantény a smazání se zdařilo.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\firefox.exe (Security.Hijack) -> Umístnění do karantény a smazání se zdařilo.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\Users\Roman\AppData\Roaming\SuperPump\uninstall.exe (Heuristics.Shuriken) -> Umístnění do karantény a smazání se zdařilo.

(konec)

kontrolní log

Malwarebytes Anti-Malware 1.62.0.1300
http://www.malwarebytes.org

Verze databáze: v2012.07.18.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Roman :: ROMAN-PC [administrátor]

19.7.2012 17:57:38
mbam-log-2012-07-19 (17-57-38).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 219345
Uplynulý čas: 4 minut, 16 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

*****************************************************************************************************************************************************************

TDSSKiller + obsah logu

18:08:12.0642 5860 TDSS rootkit removing tool 2.7.46.0 Jul 16 2012 22:10:11
18:08:14.0670 5860 ============================================================
18:08:14.0670 5860 Current date / time: 2012/07/19 18:08:14.0670
18:08:14.0670 5860 SystemInfo:
18:08:14.0670 5860
18:08:14.0670 5860 OS Version: 6.1.7601 ServicePack: 1.0
18:08:14.0670 5860 Product type: Workstation
18:08:14.0670 5860 ComputerName: ROMAN-PC
18:08:14.0670 5860 UserName: Roman
18:08:14.0670 5860 Windows directory: C:\Windows
18:08:14.0670 5860 System windows directory: C:\Windows
18:08:14.0670 5860 Processor architecture: Intel x86
18:08:14.0670 5860 Number of processors: 2
18:08:14.0670 5860 Page size: 0x1000
18:08:14.0670 5860 Boot type: Normal boot
18:08:14.0670 5860 ============================================================
18:08:16.0105 5860 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
18:08:16.0137 5860 Drive \Device\Harddisk1\DR1 - Size: 0x3BC000000 (14.94 Gb), SectorSize: 0x200, Cylinders: 0x79D, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
18:08:16.0324 5860 ============================================================
18:08:16.0324 5860 \Device\Harddisk0\DR0:
18:08:16.0324 5860 MBR partitions:
18:08:16.0324 5860 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x57E52EA
18:08:16.0339 5860 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x57E5368, BlocksNum 0xD233759
18:08:16.0339 5860 \Device\Harddisk1\DR1:
18:08:16.0339 5860 MBR partitions:
18:08:16.0339 5860 \Device\Harddisk1\DR1\Partition0: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x1DDFFC1
18:08:16.0339 5860 ============================================================
18:08:16.0371 5860 C: <-> \Device\Harddisk0\DR0\Partition0
18:08:16.0511 5860 D: <-> \Device\Harddisk0\DR0\Partition1
18:08:16.0511 5860 ============================================================
18:08:16.0511 5860 Initialize success
18:08:16.0511 5860 ============================================================
18:08:21.0565 4712 ============================================================
18:08:21.0565 4712 Scan started
18:08:21.0565 4712 Mode: Manual;
18:08:21.0565 4712 ============================================================
18:08:22.0252 4712 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys
18:08:22.0252 4712 1394ohci - ok
18:08:22.0283 4712 ACPI (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys
18:08:22.0283 4712 ACPI - ok
18:08:22.0330 4712 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys
18:08:22.0330 4712 AcpiPmi - ok
18:08:22.0423 4712 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
18:08:22.0439 4712 AdobeARMservice - ok
18:08:22.0486 4712 AdobeFlashPlayerUpdateSvc (5e1a953c6472e7bb644892a4d0df5e72) C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
18:08:22.0501 4712 AdobeFlashPlayerUpdateSvc - ok
18:08:22.0548 4712 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\drivers\adp94xx.sys
18:08:22.0548 4712 adp94xx - ok
18:08:22.0579 4712 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\drivers\adpahci.sys
18:08:22.0579 4712 adpahci - ok
18:08:22.0626 4712 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\drivers\adpu320.sys
18:08:22.0626 4712 adpu320 - ok
18:08:22.0673 4712 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\Windows\System32\aelupsvc.dll
18:08:22.0689 4712 AeLookupSvc - ok
18:08:22.0751 4712 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys
18:08:22.0767 4712 AFD - ok
18:08:22.0782 4712 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys
18:08:22.0782 4712 agp440 - ok
18:08:22.0829 4712 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\drivers\djsvs.sys
18:08:22.0829 4712 aic78xx - ok
18:08:22.0845 4712 ALG (18a54e132947cd98fea9accc57f98f13) C:\Windows\System32\alg.exe
18:08:22.0845 4712 ALG - ok
18:08:22.0876 4712 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys
18:08:22.0876 4712 aliide - ok
18:08:22.0891 4712 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys
18:08:22.0891 4712 amdagp - ok
18:08:22.0907 4712 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys
18:08:22.0907 4712 amdide - ok
18:08:22.0923 4712 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\drivers\amdk8.sys
18:08:22.0923 4712 AmdK8 - ok
18:08:22.0954 4712 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
18:08:22.0954 4712 AmdPPM - ok
18:08:23.0016 4712 amdsata (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys
18:08:23.0016 4712 amdsata - ok
18:08:23.0047 4712 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\drivers\amdsbs.sys
18:08:23.0047 4712 amdsbs - ok
18:08:23.0094 4712 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys
18:08:23.0094 4712 amdxata - ok
18:08:23.0110 4712 AppID (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys
18:08:23.0110 4712 AppID - ok
18:08:23.0110 4712 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\Windows\System32\appidsvc.dll
18:08:23.0110 4712 AppIDSvc - ok
18:08:23.0125 4712 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\Windows\System32\appinfo.dll
18:08:23.0125 4712 Appinfo - ok
18:08:23.0188 4712 AppMgmt (a45d184df6a8803da13a0b329517a64a) C:\Windows\System32\appmgmts.dll
18:08:23.0188 4712 AppMgmt - ok
18:08:23.0203 4712 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\drivers\arc.sys
18:08:23.0203 4712 arc - ok
18:08:23.0219 4712 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\drivers\arcsas.sys
18:08:23.0219 4712 arcsas - ok
18:08:23.0281 4712 AsIO (2b4e66fac6503494a2c6f32bb6ab3826) C:\Windows\system32\drivers\AsIO.sys
18:08:23.0281 4712 AsIO - ok
18:08:23.0297 4712 aswFsBlk (054df24c92b55427e0757cfff160e4f2) C:\Windows\system32\drivers\aswFsBlk.sys
18:08:23.0297 4712 aswFsBlk - ok
18:08:23.0328 4712 aswFW (9b88d53227e0bc1ce62a981b2fcd67c8) C:\Windows\system32\drivers\aswFW.sys
18:08:23.0344 4712 aswFW - ok
18:08:23.0391 4712 aswMonFlt (258143605e77e4008f1758481d6a977d) C:\Windows\system32\drivers\aswMonFlt.sys
18:08:23.0391 4712 aswMonFlt - ok
18:08:23.0406 4712 aswNdis (7b948e3657bea62e437bc46ca6ef6012) C:\Windows\system32\DRIVERS\aswNdis.sys
18:08:23.0406 4712 aswNdis - ok
18:08:23.0422 4712 aswNdis2 (2d26aaee48a48e64129b4ae1d0ab3a3b) C:\Windows\system32\drivers\aswNdis2.sys
18:08:23.0422 4712 aswNdis2 - ok
18:08:23.0469 4712 aswRdr (352d5a48ebab35a7693b048679304831) C:\Windows\system32\drivers\aswRdr.sys
18:08:23.0469 4712 aswRdr - ok
18:08:23.0500 4712 aswSnx (8d34d2b24297e27d93e847319abfdec4) C:\Windows\system32\drivers\aswSnx.sys
18:08:23.0515 4712 aswSnx - ok
18:08:23.0531 4712 aswSP (010012597333da1f46c3243f33f8409e) C:\Windows\system32\drivers\aswSP.sys
18:08:23.0547 4712 aswSP - ok
18:08:23.0593 4712 aswTdi (f9f84364416658e9786235904d448d37) C:\Windows\system32\drivers\aswTdi.sys
18:08:23.0593 4712 aswTdi - ok
18:08:23.0609 4712 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
18:08:23.0609 4712 AsyncMac - ok
18:08:23.0625 4712 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys
18:08:23.0625 4712 atapi - ok
18:08:23.0671 4712 ATE_PROCMON - ok
18:08:23.0749 4712 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll
18:08:23.0749 4712 AudioEndpointBuilder - ok
18:08:23.0765 4712 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll
18:08:23.0781 4712 Audiosrv - ok
18:08:23.0827 4712 avast! Antivirus (996e6d052438e8d8dfd501f31560b2e0) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
18:08:23.0827 4712 avast! Antivirus - ok
18:08:23.0859 4712 avast! Firewall (63d43ba2ea495a9f1c1740a513c7e00b) C:\Program Files\AVAST Software\Avast\afwServ.exe
18:08:23.0874 4712 avast! Firewall - ok
18:08:23.0905 4712 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\Windows\System32\AxInstSV.dll
18:08:23.0905 4712 AxInstSV - ok
18:08:23.0952 4712 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\drivers\bxvbdx.sys
18:08:23.0952 4712 b06bdrv - ok
18:08:23.0983 4712 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
18:08:23.0983 4712 b57nd60x - ok
18:08:23.0999 4712 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\Windows\System32\bdesvc.dll
18:08:23.0999 4712 BDESVC - ok
18:08:24.0015 4712 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
18:08:24.0015 4712 Beep - ok
18:08:24.0233 4712 BFE (1e2bac209d184bb851e1a187d8a29136) C:\Windows\System32\bfe.dll
18:08:24.0233 4712 BFE - ok
18:08:24.0295 4712 BITS (e585445d5021971fae10393f0f1c3961) C:\Windows\System32\qmgr.dll
18:08:24.0311 4712 BITS - ok
18:08:24.0311 4712 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
18:08:24.0311 4712 blbdrive - ok
18:08:24.0342 4712 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys
18:08:24.0342 4712 bowser - ok
18:08:24.0358 4712 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\BrFiltLo.sys
18:08:24.0358 4712 BrFiltLo - ok
18:08:24.0358 4712 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\BrFiltUp.sys
18:08:24.0358 4712 BrFiltUp - ok
18:08:24.0373 4712 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\Windows\System32\browser.dll
18:08:24.0373 4712 Browser - ok
18:08:24.0405 4712 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
18:08:24.0405 4712 Brserid - ok
18:08:24.0451 4712 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
18:08:24.0451 4712 BrSerWdm - ok
18:08:24.0467 4712 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
18:08:24.0467 4712 BrUsbMdm - ok
18:08:24.0483 4712 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
18:08:24.0483 4712 BrUsbSer - ok
18:08:24.0498 4712 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\drivers\bthmodem.sys
18:08:24.0498 4712 BTHMODEM - ok
18:08:24.0529 4712 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\Windows\system32\bthserv.dll
18:08:24.0545 4712 bthserv - ok
18:08:24.0561 4712 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
18:08:24.0561 4712 cdfs - ok
18:08:24.0576 4712 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\DRIVERS\cdrom.sys
18:08:24.0576 4712 cdrom - ok
18:08:24.0592 4712 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll
18:08:24.0592 4712 CertPropSvc - ok
18:08:24.0607 4712 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\drivers\circlass.sys
18:08:24.0607 4712 circlass - ok
18:08:24.0623 4712 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
18:08:24.0623 4712 CLFS - ok
18:08:24.0732 4712 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:08:24.0732 4712 clr_optimization_v2.0.50727_32 - ok
18:08:24.0795 4712 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:08:24.0810 4712 clr_optimization_v4.0.30319_32 - ok
18:08:24.0826 4712 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\drivers\CmBatt.sys
18:08:24.0826 4712 CmBatt - ok
18:08:24.0841 4712 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys
18:08:24.0841 4712 cmdide - ok
18:08:24.0888 4712 CNG (247b4ce2dab1160cd422d532d5241e1f) C:\Windows\system32\Drivers\cng.sys
18:08:24.0888 4712 CNG - ok
18:08:24.0935 4712 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\drivers\compbatt.sys
18:08:24.0935 4712 Compbatt - ok
18:08:24.0951 4712 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\DRIVERS\CompositeBus.sys
18:08:24.0951 4712 CompositeBus - ok
18:08:24.0966 4712 COMSysApp - ok
18:08:24.0982 4712 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\drivers\crcdisk.sys
18:08:24.0982 4712 crcdisk - ok
18:08:25.0013 4712 CryptSvc (06e771aa596b8761107ab57e99f128d7) C:\Windows\system32\cryptsvc.dll
18:08:25.0013 4712 CryptSvc - ok
18:08:25.0044 4712 CSC (3c2177a897b4ca2788c6fb0c3fd81d4b) C:\Windows\system32\drivers\csc.sys
18:08:25.0044 4712 CSC - ok
18:08:25.0091 4712 CscService (15f93b37f6801943360d9eb42485d5d3) C:\Windows\System32\cscsvc.dll
18:08:25.0091 4712 CscService - ok
18:08:25.0153 4712 ctsfm2k (8db84de3aab34a8b4c2f644eff41cd76) C:\Windows\system32\DRIVERS\ctsfm2k.sys
18:08:25.0153 4712 ctsfm2k - ok
18:08:25.0216 4712 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll
18:08:25.0216 4712 DcomLaunch - ok
18:08:25.0263 4712 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\Windows\System32\defragsvc.dll
18:08:25.0263 4712 defragsvc - ok
18:08:25.0278 4712 DfsC (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys
18:08:25.0278 4712 DfsC - ok
18:08:25.0341 4712 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\Windows\system32\dhcpcore.dll
18:08:25.0356 4712 Dhcp - ok
18:08:25.0387 4712 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
18:08:25.0387 4712 discache - ok
18:08:25.0403 4712 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\drivers\disk.sys
18:08:25.0403 4712 Disk - ok
18:08:25.0434 4712 dmvsc (2a958ef85db1b61ffca65044fa4bce9e) C:\Windows\system32\drivers\dmvsc.sys
18:08:25.0434 4712 dmvsc - ok
18:08:25.0465 4712 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\Windows\System32\dnsrslvr.dll
18:08:25.0465 4712 Dnscache - ok
18:08:25.0497 4712 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\Windows\System32\dot3svc.dll
18:08:25.0497 4712 dot3svc - ok
18:08:25.0543 4712 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\Windows\system32\dps.dll
18:08:25.0543 4712 DPS - ok
18:08:25.0590 4712 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
18:08:25.0590 4712 drmkaud - ok
18:08:25.0637 4712 dtsoftbus01 (687af6bb383885ff6a64071b189a7f3e) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
18:08:25.0637 4712 dtsoftbus01 - ok
18:08:25.0731 4712 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys
18:08:25.0746 4712 DXGKrnl - ok
18:08:25.0777 4712 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\Windows\System32\eapsvc.dll
18:08:25.0777 4712 EapHost - ok
18:08:26.0027 4712 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\drivers\evbdx.sys
18:08:26.0043 4712 ebdrv - ok
18:08:26.0152 4712 EFS (81951f51e318aecc2d68559e47485cc4) C:\Windows\System32\lsass.exe
18:08:26.0167 4712 EFS - ok
18:08:26.0230 4712 ehRecvr (a8c362018efc87beb013ee28f29c0863) C:\Windows\ehome\ehRecvr.exe
18:08:26.0292 4712 ehRecvr - ok
18:08:26.0308 4712 ehSched (d389bff34f80caede417bf9d1507996a) C:\Windows\ehome\ehsched.exe
18:08:26.0323 4712 ehSched - ok
18:08:26.0386 4712 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\drivers\elxstor.sys
18:08:26.0401 4712 elxstor - ok
18:08:26.0417 4712 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys
18:08:26.0417 4712 ErrDev - ok
18:08:26.0448 4712 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\Windows\system32\es.dll
18:08:26.0464 4712 EventSystem - ok
18:08:26.0479 4712 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
18:08:26.0479 4712 exfat - ok
18:08:26.0542 4712 Expresso Updater (59b20fe9c71c256f46ae9b5a51393ee3) C:\Program Files\Expresso\ExtensionUpdaterService.exe
18:08:26.0557 4712 Expresso Updater - ok
18:08:26.0573 4712 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
18:08:26.0589 4712 fastfat - ok
18:08:26.0682 4712 Fax (967ea5b213e9984cbe270205df37755b) C:\Windows\system32\fxssvc.exe
18:08:26.0698 4712 Fax - ok
18:08:26.0713 4712 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
18:08:26.0713 4712 fdc - ok
18:08:26.0729 4712 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\Windows\system32\fdPHost.dll
18:08:26.0729 4712 fdPHost - ok
18:08:26.0729 4712 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\Windows\system32\fdrespub.dll
18:08:26.0729 4712 FDResPub - ok
18:08:26.0745 4712 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
18:08:26.0760 4712 FileInfo - ok
18:08:26.0760 4712 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
18:08:26.0760 4712 Filetrace - ok
18:08:26.0776 4712 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
18:08:26.0776 4712 flpydisk - ok
18:08:26.0791 4712 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
18:08:26.0791 4712 FltMgr - ok
18:08:26.0854 4712 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\Windows\system32\FntCache.dll
18:08:26.0869 4712 FontCache - ok
18:08:26.0947 4712 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
18:08:26.0947 4712 FontCache3.0.0.0 - ok
18:08:27.0025 4712 ForceWare Intelligent Application Manager (IAM) (f33425dbd8cdf00c1f318ba0edc8d048) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
18:08:27.0041 4712 ForceWare Intelligent Application Manager (IAM) - ok
18:08:27.0135 4712 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
18:08:27.0135 4712 FsDepends - ok
18:08:27.0181 4712 Fs_Rec (7dae5ebcc80e45d3253f4923dc424d05) C:\Windows\system32\drivers\Fs_Rec.sys
18:08:27.0181 4712 Fs_Rec - ok
18:08:27.0213 4712 fvevol (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys
18:08:27.0213 4712 fvevol - ok
18:08:27.0244 4712 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\drivers\gagp30kx.sys
18:08:27.0244 4712 gagp30kx - ok
18:08:27.0337 4712 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\Windows\System32\gpsvc.dll
18:08:27.0337 4712 gpsvc - ok
18:08:27.0415 4712 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
18:08:27.0431 4712 gupdate - ok
18:08:27.0431 4712 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
18:08:27.0447 4712 gupdatem - ok
18:08:27.0478 4712 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
18:08:27.0478 4712 hcw85cir - ok
18:08:27.0509 4712 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\Windows\system32\drivers\HdAudio.sys
18:08:27.0525 4712 HdAudAddService - ok
18:08:27.0525 4712 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\DRIVERS\HDAudBus.sys
18:08:27.0540 4712 HDAudBus - ok
18:08:27.0571 4712 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\drivers\HidBatt.sys
18:08:27.0571 4712 HidBatt - ok
18:08:27.0587 4712 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\drivers\hidbth.sys
18:08:27.0603 4712 HidBth - ok
18:08:27.0634 4712 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\drivers\hidir.sys
18:08:27.0634 4712 HidIr - ok
18:08:27.0649 4712 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\Windows\system32\hidserv.dll
18:08:27.0665 4712 hidserv - ok
18:08:27.0681 4712 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\DRIVERS\hidusb.sys
18:08:27.0681 4712 HidUsb - ok
18:08:27.0712 4712 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\Windows\system32\kmsvc.dll
18:08:27.0712 4712 hkmsvc - ok
18:08:27.0743 4712 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\Windows\system32\ListSvc.dll
18:08:27.0743 4712 HomeGroupListener - ok
18:08:27.0805 4712 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\Windows\system32\provsvc.dll
18:08:27.0821 4712 HomeGroupProvider - ok
18:08:27.0837 4712 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys
18:08:27.0837 4712 HpSAMD - ok
18:08:27.0899 4712 HTTP (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys
18:08:27.0899 4712 HTTP - ok
18:08:27.0930 4712 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys
18:08:27.0930 4712 hwpolicy - ok
18:08:27.0946 4712 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys
18:08:27.0946 4712 i8042prt - ok
18:08:28.0008 4712 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys
18:08:28.0024 4712 iaStorV - ok
18:08:28.0164 4712 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
18:08:28.0180 4712 idsvc - ok
18:08:28.0289 4712 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\drivers\iirsp.sys
18:08:28.0289 4712 iirsp - ok
18:08:28.0351 4712 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\Windows\System32\ikeext.dll
18:08:28.0367 4712 IKEEXT - ok
18:08:28.0398 4712 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys
18:08:28.0398 4712 intelide - ok
18:08:28.0414 4712 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\drivers\intelppm.sys
18:08:28.0414 4712 intelppm - ok
18:08:28.0461 4712 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\Windows\system32\ipbusenum.dll
18:08:28.0461 4712 IPBusEnum - ok
18:08:28.0492 4712 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:08:28.0492 4712 IpFilterDriver - ok
18:08:28.0570 4712 iphlpsvc (4d65a07b795d6674312f879d09aa7663) C:\Windows\System32\iphlpsvc.dll
18:08:28.0585 4712 iphlpsvc - ok
18:08:28.0601 4712 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys
18:08:28.0601 4712 IPMIDRV - ok
18:08:28.0648 4712 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
18:08:28.0648 4712 IPNAT - ok
18:08:28.0679 4712 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
18:08:28.0679 4712 IRENUM - ok
18:08:28.0695 4712 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys
18:08:28.0695 4712 isapnp - ok
18:08:28.0757 4712 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys
18:08:28.0757 4712 iScsiPrt - ok
18:08:28.0804 4712 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
18:08:28.0804 4712 kbdclass - ok
18:08:28.0819 4712 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\DRIVERS\kbdhid.sys
18:08:28.0819 4712 kbdhid - ok
18:08:28.0851 4712 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
18:08:28.0866 4712 KeyIso - ok
18:08:28.0897 4712 KSecDD (b7895b4182c0d16f6efadeb8081e8d36) C:\Windows\system32\Drivers\ksecdd.sys
18:08:28.0897 4712 KSecDD - ok
18:08:28.0929 4712 KSecPkg (d30159ac9237519fbc62c6ec247d2d46) C:\Windows\system32\Drivers\ksecpkg.sys
18:08:28.0944 4712 KSecPkg - ok
18:08:29.0022 4712 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\Windows\system32\msdtckrm.dll
18:08:29.0038 4712 KtmRm - ok
18:08:29.0069 4712 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\Windows\system32\srvsvc.dll
18:08:29.0069 4712 LanmanServer - ok
18:08:29.0100 4712 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\Windows\System32\wkssvc.dll
18:08:29.0116 4712 LanmanWorkstation - ok
18:08:29.0116 4712 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
18:08:29.0116 4712 lltdio - ok
18:08:29.0147 4712 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\Windows\System32\lltdsvc.dll
18:08:29.0163 4712 lltdsvc - ok
18:08:29.0178 4712 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\Windows\System32\lmhsvc.dll
18:08:29.0178 4712 lmhosts - ok
18:08:29.0209 4712 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\drivers\lsi_fc.sys
18:08:29.0209 4712 LSI_FC - ok
18:08:29.0272 4712 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\drivers\lsi_sas.sys
18:08:29.0272 4712 LSI_SAS - ok
18:08:29.0303 4712 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\drivers\lsi_sas2.sys
18:08:29.0303 4712 LSI_SAS2 - ok
18:08:29.0350 4712 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\drivers\lsi_scsi.sys
18:08:29.0350 4712 LSI_SCSI - ok
18:08:29.0365 4712 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
18:08:29.0365 4712 luafv - ok
18:08:29.0397 4712 MarvinBus (a3e700d78eec390f1208098cdca5c6b6) C:\Windows\system32\DRIVERS\MarvinBus.sys
18:08:29.0397 4712 MarvinBus - ok
18:08:29.0490 4712 McComponentHostService (f453d1e6d881e8f8717e20ccd4199e85) C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
18:08:29.0490 4712 McComponentHostService - ok
18:08:29.0521 4712 Mcx2Svc (bfb9ee8ee977efe85d1a3105abef6dd1) C:\Windows\system32\Mcx2Svc.dll
18:08:29.0521 4712 Mcx2Svc - ok
18:08:29.0537 4712 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\drivers\megasas.sys
18:08:29.0537 4712 megasas - ok
18:08:29.0568 4712 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\drivers\MegaSR.sys
18:08:29.0568 4712 MegaSR - ok
18:08:29.0568 4712 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll
18:08:29.0584 4712 MMCSS - ok
18:08:29.0584 4712 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
18:08:29.0599 4712 Modem - ok
18:08:29.0615 4712 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
18:08:29.0615 4712 monitor - ok
18:08:29.0631 4712 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
18:08:29.0631 4712 mouclass - ok
18:08:29.0646 4712 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
18:08:29.0646 4712 mouhid - ok
18:08:29.0662 4712 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys
18:08:29.0662 4712 mountmgr - ok
18:08:29.0693 4712 MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
18:08:29.0709 4712 MozillaMaintenance - ok
18:08:29.0724 4712 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys
18:08:29.0724 4712 mpio - ok
18:08:29.0740 4712 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
18:08:29.0740 4712 mpsdrv - ok
18:08:29.0802 4712 MpsSvc (9835584e999d25004e1ee8e5f3e3b881) C:\Windows\system32\mpssvc.dll
18:08:29.0802 4712 MpsSvc - ok
18:08:29.0833 4712 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys
18:08:29.0833 4712 MRxDAV - ok
18:08:29.0880 4712 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys
18:08:29.0896 4712 mrxsmb - ok
18:08:29.0911 4712 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:08:29.0927 4712 mrxsmb10 - ok
18:08:29.0958 4712 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:08:29.0958 4712 mrxsmb20 - ok
18:08:30.0005 4712 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys
18:08:30.0005 4712 msahci - ok
18:08:30.0021 4712 msdsm (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys
18:08:30.0036 4712 msdsm - ok
18:08:30.0036 4712 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\Windows\System32\msdtc.exe
18:08:30.0052 4712 MSDTC - ok
18:08:30.0083 4712 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
18:08:30.0083 4712 Msfs - ok
18:08:30.0083 4712 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
18:08:30.0099 4712 mshidkmdf - ok
18:08:30.0099 4712 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys
18:08:30.0099 4712 msisadrv - ok
18:08:30.0130 4712 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\Windows\system32\iscsiexe.dll
18:08:30.0130 4712 MSiSCSI - ok
18:08:30.0130 4712 msiserver - ok
18:08:30.0177 4712 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
18:08:30.0177 4712 MSKSSRV - ok
18:08:30.0177 4712 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
18:08:30.0177 4712 MSPCLOCK - ok
18:08:30.0192 4712 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
18:08:30.0192 4712 MSPQM - ok
18:08:30.0208 4712 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
18:08:30.0208 4712 MsRPC - ok
18:08:30.0255 4712 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys
18:08:30.0255 4712 mssmbios - ok
18:08:30.0270 4712 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
18:08:30.0270 4712 MSTEE - ok
18:08:30.0286 4712 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\drivers\MTConfig.sys
18:08:30.0286 4712 MTConfig - ok
18:08:30.0301 4712 MTsensor (cbe71c122434805cb73ffb6619f60598) C:\Windows\system32\DRIVERS\ASACPI.sys
18:08:30.0301 4712 MTsensor - ok
18:08:30.0317 4712 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
18:08:30.0317 4712 Mup - ok
18:08:30.0395 4712 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\Windows\system32\qagentRT.dll
18:08:30.0411 4712 napagent - ok
18:08:30.0426 4712 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
18:08:30.0442 4712 NativeWifiP - ok
18:08:30.0520 4712 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys
18:08:30.0520 4712 NDIS - ok
18:08:30.0535 4712 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
18:08:30.0535 4712 NdisCap - ok
18:08:30.0535 4712 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
18:08:30.0535 4712 NdisTapi - ok
18:08:30.0551 4712 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys
18:08:30.0551 4712 Ndisuio - ok
18:08:30.0567 4712 NdisWan (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys
18:08:30.0567 4712 NdisWan - ok
18:08:30.0582 4712 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys
18:08:30.0582 4712 NDProxy - ok
18:08:30.0723 4712 Nero BackItUp Scheduler 4.0 (c7f5c284b6f46fcaf6910ea4e644700b) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
18:08:30.0754 4712 Nero BackItUp Scheduler 4.0 - ok
18:08:30.0785 4712 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
18:08:30.0785 4712 NetBIOS - ok
18:08:30.0801 4712 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
18:08:30.0801 4712 NetBT - ok
18:08:30.0832 4712 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
18:08:30.0832 4712 Netlogon - ok
18:08:30.0863 4712 Netman (7cccfca7510684768da22092d1fa4db2) C:\Windows\System32\netman.dll
18:08:30.0879 4712 Netman - ok
18:08:30.0894 4712 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\Windows\System32\netprofm.dll
18:08:30.0910 4712 netprofm - ok
18:08:30.0988 4712 NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:08:31.0003 4712 NetTcpPortSharing - ok
18:08:31.0019 4712 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\drivers\nfrd960.sys
18:08:31.0019 4712 nfrd960 - ok
18:08:31.0050 4712 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\Windows\System32\nlasvc.dll
18:08:31.0050 4712 NlaSvc - ok
18:08:31.0066 4712 NMIndexingService - ok
18:08:31.0066 4712 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
18:08:31.0066 4712 Npfs - ok
18:08:31.0097 4712 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\Windows\system32\nsisvc.dll
18:08:31.0113 4712 nsi - ok
18:08:31.0113 4712 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
18:08:31.0113 4712 nsiproxy - ok
18:08:31.0175 4712 nSvcIp (84a1a494791da6ac7292d82f97e40bec) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
18:08:31.0175 4712 nSvcIp - ok
18:08:31.0300 4712 Ntfs (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys
18:08:31.0315 4712 Ntfs - ok
18:08:31.0440 4712 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
18:08:31.0440 4712 Null - ok
18:08:31.0487 4712 NVENETFD (b5e37e31c053bc9950455a257526514b) C:\Windows\system32\DRIVERS\nvm62x32.sys
18:08:31.0487 4712 NVENETFD - ok
18:08:32.0127 4712 nvlddmkm (e891b3979f0cf2740c1b073f834221fe) C:\Windows\system32\DRIVERS\nvlddmkm.sys
18:08:32.0173 4712 nvlddmkm - ok
18:08:32.0283 4712 NVNET (1de923088878b495cd4219e47ba34eb8) C:\Windows\system32\DRIVERS\nvmf6232.sys
18:08:32.0283 4712 NVNET - ok
18:08:32.0345 4712 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys
18:08:32.0345 4712 nvraid - ok
18:08:32.0376 4712 nvsmu (be9039422a5ce976c03c5e2cf20106be) C:\Windows\system32\DRIVERS\nvsmu.sys
18:08:32.0392 4712 nvsmu - ok
18:08:32.0407 4712 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys
18:08:32.0423 4712 nvstor - ok
18:08:32.0517 4712 nvsvc (ae2de8e165dcb93a66b21748e6f913df) C:\Windows\system32\nvvsvc.exe
18:08:32.0532 4712 nvsvc - ok
18:08:32.0766 4712 nvUpdatusService (c78581c14699c46fe0f0817416383134) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
18:08:32.0782 4712 nvUpdatusService - ok
18:08:32.0844 4712 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys
18:08:32.0844 4712 nv_agp - ok
18:08:32.0891 4712 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys
18:08:32.0891 4712 ohci1394 - ok
18:08:32.0907 4712 ossrv (103a9b117a7d9903111955cdafe65ac6) C:\Windows\system32\DRIVERS\ctoss2k.sys
18:08:32.0907 4712 ossrv - ok
18:08:33.0016 4712 P17 (2f09b7b4a9fb1f998bd9ecfc468a80a2) C:\Windows\system32\drivers\P17.sys
18:08:33.0016 4712 P17 - ok

>>>pokračování<<<

>>>>pokračování<<<<

18:08:33.0047 4712 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll
18:08:33.0063 4712 p2pimsvc - ok
18:08:33.0109 4712 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\Windows\system32\p2psvc.dll
18:08:33.0125 4712 p2psvc - ok
18:08:33.0172 4712 PAC7302 (ad66bc56dd6a030174c03395b3dc0720) C:\Windows\system32\DRIVERS\PAC7302.SYS
18:08:33.0187 4712 PAC7302 - ok
18:08:33.0203 4712 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\drivers\parport.sys
18:08:33.0203 4712 Parport - ok
18:08:33.0234 4712 partmgr (3f34a1b4c5f6475f320c275e63afce9b) C:\Windows\system32\drivers\partmgr.sys
18:08:33.0234 4712 partmgr - ok
18:08:33.0250 4712 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\drivers\parvdm.sys
18:08:33.0250 4712 Parvdm - ok
18:08:33.0265 4712 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\Windows\System32\pcasvc.dll
18:08:33.0265 4712 PcaSvc - ok
18:08:33.0312 4712 pci (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys
18:08:33.0312 4712 pci - ok
18:08:33.0312 4712 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys
18:08:33.0312 4712 pciide - ok
18:08:33.0343 4712 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\drivers\pcmcia.sys
18:08:33.0343 4712 pcmcia - ok
18:08:33.0375 4712 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\Windows\system32\Drivers\pcouffin.sys
18:08:33.0375 4712 pcouffin - ok
18:08:33.0375 4712 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
18:08:33.0375 4712 pcw - ok
18:08:33.0421 4712 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
18:08:33.0421 4712 PEAUTH - ok
18:08:33.0499 4712 PeerDistSvc (af4d64d2a57b9772cf3801950b8058a6) C:\Windows\system32\peerdistsvc.dll
18:08:33.0499 4712 PeerDistSvc - ok
18:08:33.0593 4712 pla (414bba67a3ded1d28437eb66aeb8a720) C:\Windows\system32\pla.dll
18:08:33.0609 4712 pla - ok
18:08:33.0733 4712 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\Windows\system32\umpnpmgr.dll
18:08:33.0749 4712 PlugPlay - ok
18:08:33.0780 4712 PnkBstrA (3a2e85f7d90d15460c337ce80c2e3b29) C:\Windows\system32\PnkBstrA.exe
18:08:33.0796 4712 PnkBstrA - ok
18:08:33.0811 4712 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\Windows\system32\pnrpauto.dll
18:08:33.0811 4712 PNRPAutoReg - ok
18:08:33.0858 4712 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll
18:08:33.0858 4712 PNRPsvc - ok
18:08:33.0952 4712 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\Windows\System32\ipsecsvc.dll
18:08:33.0952 4712 PolicyAgent - ok
18:08:33.0999 4712 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\Windows\system32\umpo.dll
18:08:33.0999 4712 Power - ok
18:08:34.0061 4712 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
18:08:34.0061 4712 PptpMiniport - ok
18:08:34.0108 4712 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\drivers\processr.sys
18:08:34.0108 4712 Processor - ok
18:08:34.0170 4712 ProfSvc (cadefac453040e370a1bdff3973be00d) C:\Windows\system32\profsvc.dll
18:08:34.0186 4712 ProfSvc - ok
18:08:34.0201 4712 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
18:08:34.0201 4712 ProtectedStorage - ok
18:08:34.0217 4712 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
18:08:34.0217 4712 Psched - ok
18:08:34.0311 4712 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\drivers\ql2300.sys
18:08:34.0311 4712 ql2300 - ok
18:08:34.0389 4712 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\drivers\ql40xx.sys
18:08:34.0389 4712 ql40xx - ok
18:08:34.0435 4712 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\Windows\system32\qwave.dll
18:08:34.0451 4712 QWAVE - ok
18:08:34.0467 4712 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
18:08:34.0467 4712 QWAVEdrv - ok
18:08:34.0482 4712 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
18:08:34.0482 4712 RasAcd - ok
18:08:34.0498 4712 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
18:08:34.0498 4712 RasAgileVpn - ok
18:08:34.0513 4712 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\Windows\System32\rasauto.dll
18:08:34.0529 4712 RasAuto - ok
18:08:34.0529 4712 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
18:08:34.0545 4712 Rasl2tp - ok
18:08:34.0591 4712 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\Windows\System32\rasmans.dll
18:08:34.0591 4712 RasMan - ok
18:08:34.0638 4712 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
18:08:34.0638 4712 RasPppoe - ok
18:08:34.0654 4712 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
18:08:34.0654 4712 RasSstp - ok
18:08:34.0669 4712 rdbss (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys
18:08:34.0685 4712 rdbss - ok
18:08:34.0716 4712 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
18:08:34.0732 4712 rdpbus - ok
18:08:34.0732 4712 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys
18:08:34.0732 4712 RDPCDD - ok
18:08:34.0779 4712 RDPDR (b973fcfc50dc1434e1970a146f7e3885) C:\Windows\system32\drivers\rdpdr.sys
18:08:34.0779 4712 RDPDR - ok
18:08:34.0794 4712 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
18:08:34.0794 4712 RDPENCDD - ok
18:08:34.0810 4712 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
18:08:34.0810 4712 RDPREFMP - ok
18:08:34.0841 4712 RdpVideoMiniport (68a0387f58e226deee23d9715955572a) C:\Windows\system32\drivers\rdpvideominiport.sys
18:08:34.0841 4712 RdpVideoMiniport - ok
18:08:34.0872 4712 RDPWD (f031683e6d1fea157abb2ff260b51e61) C:\Windows\system32\drivers\RDPWD.sys
18:08:34.0872 4712 RDPWD - ok
18:08:34.0935 4712 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys
18:08:34.0950 4712 rdyboost - ok
18:08:35.0013 4712 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\Windows\System32\mprdim.dll
18:08:35.0028 4712 RemoteAccess - ok
18:08:35.0075 4712 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\Windows\system32\regsvc.dll
18:08:35.0091 4712 RemoteRegistry - ok
18:08:35.0122 4712 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\Windows\System32\RpcEpMap.dll
18:08:35.0122 4712 RpcEptMapper - ok
18:08:35.0153 4712 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\Windows\system32\locator.exe
18:08:35.0153 4712 RpcLocator - ok
18:08:35.0184 4712 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll
18:08:35.0200 4712 RpcSs - ok
18:08:35.0215 4712 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
18:08:35.0215 4712 rspndr - ok
18:08:35.0231 4712 s3cap (7fa7f2e249a5dcbb7970630e15e1f482) C:\Windows\system32\drivers\vms3cap.sys
18:08:35.0231 4712 s3cap - ok
18:08:35.0262 4712 SamSs (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
18:08:35.0262 4712 SamSs - ok
18:08:35.0278 4712 sbp2port (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys
18:08:35.0278 4712 sbp2port - ok
18:08:35.0325 4712 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\Windows\System32\SCardSvr.dll
18:08:35.0325 4712 SCardSvr - ok
18:08:35.0356 4712 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys
18:08:35.0356 4712 scfilter - ok
18:08:35.0418 4712 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\Windows\system32\schedsvc.dll
18:08:35.0434 4712 Schedule - ok
18:08:35.0465 4712 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll
18:08:35.0465 4712 SCPolicySvc - ok
18:08:35.0481 4712 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\Windows\System32\SDRSVC.dll
18:08:35.0481 4712 SDRSVC - ok
18:08:35.0512 4712 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
18:08:35.0512 4712 secdrv - ok
18:08:35.0527 4712 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\Windows\system32\seclogon.dll
18:08:35.0527 4712 seclogon - ok
18:08:35.0543 4712 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\Windows\System32\sens.dll
18:08:35.0543 4712 SENS - ok
18:08:35.0574 4712 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\Windows\system32\sensrsvc.dll
18:08:35.0574 4712 SensrSvc - ok
18:08:35.0590 4712 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
18:08:35.0590 4712 Serenum - ok
18:08:35.0605 4712 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
18:08:35.0605 4712 Serial - ok
18:08:35.0652 4712 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\drivers\sermouse.sys
18:08:35.0652 4712 sermouse - ok
18:08:35.0683 4712 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\Windows\system32\sessenv.dll
18:08:35.0699 4712 SessionEnv - ok
18:08:35.0730 4712 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys
18:08:35.0730 4712 sffdisk - ok
18:08:35.0730 4712 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys
18:08:35.0730 4712 sffp_mmc - ok
18:08:35.0746 4712 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\drivers\sffp_sd.sys
18:08:35.0746 4712 sffp_sd - ok
18:08:35.0746 4712 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\drivers\sfloppy.sys
18:08:35.0746 4712 sfloppy - ok
18:08:35.0793 4712 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\Windows\System32\ipnathlp.dll
18:08:35.0793 4712 SharedAccess - ok
18:08:35.0886 4712 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\Windows\System32\shsvcs.dll
18:08:35.0902 4712 ShellHWDetection - ok
18:08:35.0902 4712 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys
18:08:35.0902 4712 sisagp - ok
18:08:35.0949 4712 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\drivers\SiSRaid2.sys
18:08:35.0949 4712 SiSRaid2 - ok
18:08:35.0980 4712 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\drivers\sisraid4.sys
18:08:35.0980 4712 SiSRaid4 - ok
18:08:36.0073 4712 SkypeUpdate (ea396139541706b4b433641d62ea53ce) C:\Program Files\Skype\Updater\Updater.exe
18:08:36.0089 4712 SkypeUpdate - ok
18:08:36.0105 4712 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
18:08:36.0105 4712 Smb - ok
18:08:36.0120 4712 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\Windows\System32\snmptrap.exe
18:08:36.0136 4712 SNMPTRAP - ok
18:08:36.0136 4712 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
18:08:36.0136 4712 spldr - ok
18:08:36.0167 4712 Spooler (866a43013535dc8587c258e43579c764) C:\Windows\System32\spoolsv.exe
18:08:36.0167 4712 Spooler - ok
18:08:36.0354 4712 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\Windows\system32\sppsvc.exe
18:08:36.0370 4712 sppsvc - ok
18:08:36.0463 4712 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\Windows\system32\sppuinotify.dll
18:08:36.0479 4712 sppuinotify - ok
18:08:36.0557 4712 sptd (ab5c8f6e63674dbad9c1e449e8fd77ce) C:\Windows\System32\Drivers\sptd.sys
18:08:36.0573 4712 sptd - ok
18:08:36.0619 4712 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys
18:08:36.0619 4712 srv - ok
18:08:36.0635 4712 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys
18:08:36.0651 4712 srv2 - ok
18:08:36.0697 4712 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys
18:08:36.0697 4712 srvnet - ok
18:08:36.0760 4712 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\Windows\System32\ssdpsrv.dll
18:08:36.0775 4712 SSDPSRV - ok
18:08:36.0775 4712 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\Windows\system32\sstpsvc.dll
18:08:36.0791 4712 SstpSvc - ok
18:08:36.0822 4712 Steam Client Service - ok
18:08:36.0900 4712 Stereo Service (fc0a58529a02b1eed55ddc58696b7908) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
18:08:36.0916 4712 Stereo Service - ok
18:08:36.0947 4712 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\drivers\stexstor.sys
18:08:36.0947 4712 stexstor - ok
18:08:36.0994 4712 StiSvc (e1fb3706030fb4578a0d72c2fc3689e4) C:\Windows\System32\wiaservc.dll
18:08:37.0009 4712 StiSvc - ok
18:08:37.0041 4712 storflt (472af0311073dceceaa8fa18ba2bdf89) C:\Windows\system32\drivers\vmstorfl.sys
18:08:37.0041 4712 storflt - ok
18:08:37.0041 4712 storvsc (dcaffd62259e0bdb433dd67b5bb37619) C:\Windows\system32\drivers\storvsc.sys
18:08:37.0041 4712 storvsc - ok
18:08:37.0056 4712 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys
18:08:37.0056 4712 swenum - ok
18:08:37.0134 4712 SwitchBoard (f577910a133a592234ebaad3f3afa258) C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
18:08:37.0150 4712 SwitchBoard - ok
18:08:37.0197 4712 swprv (a28bd92df340e57b024ba433165d34d7) C:\Windows\System32\swprv.dll
18:08:37.0228 4712 swprv - ok
18:08:37.0243 4712 Synth3dVsc (f2ad8960812fd111e20e84659ef19d43) C:\Windows\system32\drivers\synth3dvsc.sys
18:08:37.0243 4712 Synth3dVsc - ok
18:08:37.0321 4712 SysMain (36650d618ca34c9d357dfd3d89b2c56f) C:\Windows\system32\sysmain.dll
18:08:37.0337 4712 SysMain - ok
18:08:37.0353 4712 TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\Windows\System32\TabSvc.dll
18:08:37.0353 4712 TabletInputService - ok
18:08:37.0399 4712 TapiSrv (613bf4820361543956909043a265c6ac) C:\Windows\System32\tapisrv.dll
18:08:37.0415 4712 TapiSrv - ok
18:08:37.0446 4712 TBS (b799d9fdb26111737f58288d8dc172d9) C:\Windows\System32\tbssvc.dll
18:08:37.0462 4712 TBS - ok
18:08:37.0602 4712 Tcpip (7fa2e0f8b072bd04b77b421480b6cc22) C:\Windows\system32\drivers\tcpip.sys
18:08:37.0618 4712 Tcpip - ok
18:08:37.0789 4712 TCPIP6 (7fa2e0f8b072bd04b77b421480b6cc22) C:\Windows\system32\DRIVERS\tcpip.sys
18:08:37.0789 4712 TCPIP6 - ok
18:08:37.0867 4712 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\Windows\system32\drivers\tcpipreg.sys
18:08:37.0867 4712 tcpipreg - ok
18:08:37.0899 4712 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\Windows\system32\drivers\tdpipe.sys
18:08:37.0899 4712 TDPIPE - ok
18:08:37.0914 4712 TDTCP (2c2c5afe7ee4f620d69c23c0617651a8) C:\Windows\system32\drivers\tdtcp.sys
18:08:37.0914 4712 TDTCP - ok
18:08:37.0945 4712 tdx (b459575348c20e8121d6039da063c704) C:\Windows\system32\DRIVERS\tdx.sys
18:08:37.0945 4712 tdx - ok
18:08:38.0164 4712 TeamViewer7 (74fc70ae64a7b7dabec9697ce0a1f4fa) C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
18:08:38.0242 4712 TeamViewer7 - ok
18:08:38.0289 4712 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\Windows\system32\DRIVERS\termdd.sys
18:08:38.0289 4712 TermDD - ok
18:08:38.0351 4712 terminpt (052306fd76793d5d5ab5d9891fd1adbb) C:\Windows\system32\drivers\terminpt.sys
18:08:38.0351 4712 terminpt - ok
18:08:38.0413 4712 TermService (382c804c92811be57829d8e550a900e2) C:\Windows\System32\termsrv.dll
18:08:38.0429 4712 TermService - ok
18:08:38.0445 4712 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\Windows\system32\themeservice.dll
18:08:38.0445 4712 Themes - ok
18:08:38.0476 4712 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll
18:08:38.0476 4712 THREADORDER - ok
18:08:38.0491 4712 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\Windows\System32\trkwks.dll
18:08:38.0491 4712 TrkWks - ok
18:08:38.0569 4712 TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\Windows\servicing\TrustedInstaller.exe
18:08:38.0585 4712 TrustedInstaller - ok
18:08:38.0601 4712 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\Windows\system32\DRIVERS\tssecsrv.sys
18:08:38.0601 4712 tssecsrv - ok
18:08:38.0616 4712 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\Windows\system32\drivers\tsusbflt.sys
18:08:38.0616 4712 TsUsbFlt - ok
18:08:38.0663 4712 TsUsbGD (01246f0baad7b68ec0f472aa41e33282) C:\Windows\system32\drivers\TsUsbGD.sys
18:08:38.0663 4712 TsUsbGD - ok
18:08:38.0694 4712 tsusbhub (045acb987c650d8186c6b4a692223860) C:\Windows\system32\drivers\tsusbhub.sys
18:08:38.0694 4712 tsusbhub - ok
18:08:38.0835 4712 TuneUp.UtilitiesSvc (118edc3e712ff83ce25612081a69075d) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
18:08:38.0881 4712 TuneUp.UtilitiesSvc - ok
18:08:38.0897 4712 TuneUpUtilitiesDrv (f2107c9d85ec0df116939ccce06ae697) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys
18:08:38.0897 4712 TuneUpUtilitiesDrv - ok
18:08:39.0006 4712 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\Windows\system32\DRIVERS\tunnel.sys
18:08:39.0006 4712 tunnel - ok
18:08:39.0022 4712 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\drivers\uagp35.sys
18:08:39.0022 4712 uagp35 - ok
18:08:39.0037 4712 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\Windows\system32\DRIVERS\udfs.sys
18:08:39.0037 4712 udfs - ok
18:08:39.0069 4712 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\Windows\system32\UI0Detect.exe
18:08:39.0084 4712 UI0Detect - ok
18:08:39.0084 4712 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\drivers\uliagpkx.sys
18:08:39.0100 4712 uliagpkx - ok
18:08:39.0100 4712 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\Windows\system32\DRIVERS\umbus.sys
18:08:39.0115 4712 umbus - ok
18:08:39.0131 4712 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\drivers\umpass.sys
18:08:39.0131 4712 UmPass - ok
18:08:39.0162 4712 UmRdpService (409994a8eaceee4e328749c0353527a0) C:\Windows\System32\umrdp.dll
18:08:39.0162 4712 UmRdpService - ok
18:08:39.0193 4712 upnphost (833fbb672460efce8011d262175fad33) C:\Windows\System32\upnphost.dll
18:08:39.0193 4712 upnphost - ok
18:08:39.0225 4712 usbaudio (1d9f2bd026e8e2d45033a4df3f16b78c) C:\Windows\system32\drivers\usbaudio.sys
18:08:39.0240 4712 usbaudio - ok
18:08:39.0271 4712 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\Windows\system32\DRIVERS\usbccgp.sys
18:08:39.0271 4712 usbccgp - ok
18:08:39.0318 4712 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\drivers\usbcir.sys
18:08:39.0318 4712 usbcir - ok
18:08:39.0334 4712 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\Windows\system32\DRIVERS\usbehci.sys
18:08:39.0334 4712 usbehci - ok
18:08:39.0365 4712 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\Windows\system32\DRIVERS\usbhub.sys
18:08:39.0365 4712 usbhub - ok
18:08:39.0412 4712 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\Windows\system32\DRIVERS\usbohci.sys
18:08:39.0412 4712 usbohci - ok
18:08:39.0427 4712 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
18:08:39.0427 4712 usbprint - ok
18:08:39.0459 4712 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys
18:08:39.0459 4712 usbscan - ok
18:08:39.0474 4712 USBSTOR (f991ab9cc6b908db552166768176896a) C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:08:39.0474 4712 USBSTOR - ok
18:08:39.0490 4712 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\Windows\system32\drivers\usbuhci.sys
18:08:39.0490 4712 usbuhci - ok
18:08:39.0505 4712 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\Windows\System32\uxsms.dll
18:08:39.0505 4712 UxSms - ok
18:08:39.0537 4712 UxTuneUp (24f51fba322f06a3e336c301025d6d12) C:\Windows\System32\uxtuneup.dll
18:08:39.0537 4712 UxTuneUp - ok
18:08:39.0568 4712 VaultSvc (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
18:08:39.0568 4712 VaultSvc - ok
18:08:39.0568 4712 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\drivers\vdrvroot.sys
18:08:39.0568 4712 vdrvroot - ok
18:08:39.0615 4712 vds (c3cd30495687c2a2f66a65ca6fd89be9) C:\Windows\System32\vds.exe
18:08:39.0630 4712 vds - ok
18:08:39.0646 4712 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
18:08:39.0646 4712 vga - ok
18:08:39.0661 4712 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
18:08:39.0661 4712 VgaSave - ok
18:08:39.0661 4712 VGPU - ok
18:08:39.0693 4712 vhdmp (5461686cca2fda57b024547733ab42e3) C:\Windows\system32\drivers\vhdmp.sys
18:08:39.0693 4712 vhdmp - ok
18:08:39.0739 4712 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\drivers\viaagp.sys
18:08:39.0739 4712 viaagp - ok
18:08:39.0755 4712 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\drivers\viac7.sys
18:08:39.0755 4712 ViaC7 - ok
18:08:39.0895 4712 VIAHdAudAddService (c9eb429f3136d9b6fb186736612cc43c) C:\Windows\system32\drivers\viahduaa.sys
18:08:39.0895 4712 VIAHdAudAddService - ok
18:08:40.0020 4712 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\drivers\viaide.sys
18:08:40.0036 4712 viaide - ok
18:08:40.0067 4712 VIAKaraokeService (b9fafb1a036913b493f1e9d0c6324d2d) C:\Windows\system32\viakaraokesrv.exe
18:08:40.0083 4712 VIAKaraokeService - ok
18:08:40.0114 4712 vmbus (c2f2911156fdc7817c52829c86da494e) C:\Windows\system32\drivers\vmbus.sys
18:08:40.0129 4712 vmbus - ok
18:08:40.0145 4712 VMBusHID (d4d77455211e204f370d08f4963063ce) C:\Windows\system32\drivers\VMBusHID.sys
18:08:40.0145 4712 VMBusHID - ok
18:08:40.0161 4712 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\Windows\system32\drivers\volmgr.sys
18:08:40.0161 4712 volmgr - ok
18:08:40.0176 4712 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
18:08:40.0192 4712 volmgrx - ok
18:08:40.0207 4712 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\Windows\system32\drivers\volsnap.sys
18:08:40.0207 4712 volsnap - ok
18:08:40.0254 4712 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\drivers\vsmraid.sys
18:08:40.0254 4712 vsmraid - ok
18:08:40.0363 4712 VSS (209a3b1901b83aeb8527ed211cce9e4c) C:\Windows\system32\vssvc.exe
18:08:40.0379 4712 VSS - ok
18:08:40.0395 4712 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys
18:08:40.0395 4712 vwifibus - ok
18:08:40.0426 4712 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\Windows\system32\w32time.dll
18:08:40.0441 4712 W32Time - ok
18:08:40.0457 4712 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\drivers\wacompen.sys
18:08:40.0457 4712 WacomPen - ok
18:08:40.0473 4712 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
18:08:40.0473 4712 WANARP - ok
18:08:40.0473 4712 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
18:08:40.0473 4712 Wanarpv6 - ok
18:08:40.0597 4712 WatAdminSvc (353a04c273ec58475d8633e75ccd5604) C:\Windows\system32\Wat\WatAdminSvc.exe
18:08:40.0644 4712 WatAdminSvc - ok
18:08:40.0769 4712 wbengine (691e3285e53dca558e1a84667f13e15a) C:\Windows\system32\wbengine.exe
18:08:40.0785 4712 wbengine - ok
18:08:40.0800 4712 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\Windows\System32\wbiosrvc.dll
18:08:40.0800 4712 WbioSrvc - ok
18:08:40.0816 4712 wcncsvc (34eee0dfaadb4f691d6d5308a51315dc) C:\Windows\System32\wcncsvc.dll
18:08:40.0816 4712 wcncsvc - ok
18:08:40.0863 4712 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\Windows\System32\WcsPlugInService.dll
18:08:40.0863 4712 WcsPlugInService - ok
18:08:40.0909 4712 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\drivers\wd.sys
18:08:40.0909 4712 Wd - ok
18:08:40.0956 4712 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
18:08:40.0972 4712 Wdf01000 - ok
18:08:41.0003 4712 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll
18:08:41.0019 4712 WdiServiceHost - ok
18:08:41.0019 4712 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll
18:08:41.0019 4712 WdiSystemHost - ok
18:08:41.0050 4712 WebClient (a9d880f97530d5b8fee278923349929d) C:\Windows\System32\webclnt.dll
18:08:41.0050 4712 WebClient - ok
18:08:41.0112 4712 Wecsvc (760f0afe937a77cff27153206534f275) C:\Windows\system32\wecsvc.dll
18:08:41.0128 4712 Wecsvc - ok
18:08:41.0143 4712 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\Windows\System32\wercplsupport.dll
18:08:41.0159 4712 wercplsupport - ok
18:08:41.0190 4712 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\Windows\System32\WerSvc.dll
18:08:41.0190 4712 WerSvc - ok
18:08:41.0221 4712 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
18:08:41.0221 4712 WfpLwf - ok
18:08:41.0237 4712 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
18:08:41.0237 4712 WIMMount - ok
18:08:41.0331 4712 WinDefend (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll
18:08:41.0393 4712 WinDefend - ok
18:08:41.0393 4712 WinHttpAutoProxySvc - ok
18:08:41.0455 4712 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\Windows\system32\wbem\WMIsvc.dll
18:08:41.0471 4712 Winmgmt - ok
18:08:41.0565 4712 WinRM (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\Windows\system32\WsmSvc.dll
18:08:41.0580 4712 WinRM - ok
18:08:41.0658 4712 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\Windows\System32\wlansvc.dll
18:08:41.0674 4712 Wlansvc - ok
18:08:41.0861 4712 wlidsvc (fb01d4ae207b9efdbabfc55dc95c7e31) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
18:08:41.0923 4712 wlidsvc - ok
18:08:42.0048 4712 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\DRIVERS\wmiacpi.sys
18:08:42.0048 4712 WmiAcpi - ok
18:08:42.0079 4712 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\Windows\system32\wbem\WmiApSrv.exe
18:08:42.0095 4712 wmiApSrv - ok
18:08:42.0235 4712 WMPNetworkSvc (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe
18:08:42.0282 4712 WMPNetworkSvc - ok
18:08:42.0345 4712 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\Windows\System32\wpcsvc.dll
18:08:42.0360 4712 WPCSvc - ok
18:08:42.0376 4712 WPDBusEnum (aa53356d60af47eacc85bc617a4f3f66) C:\Windows\system32\wpdbusenum.dll
18:08:42.0376 4712 WPDBusEnum - ok
18:08:42.0423 4712 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
18:08:42.0423 4712 ws2ifsl - ok
18:08:42.0454 4712 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\Windows\System32\wscsvc.dll
18:08:42.0454 4712 wscsvc - ok
18:08:42.0469 4712 WSearch - ok
18:08:42.0594 4712 wuauserv (fc3ec24fce372c89423e015a2ac1a31e) C:\Windows\system32\wuaueng.dll
18:08:42.0625 4712 wuauserv - ok
18:08:42.0672 4712 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\Windows\system32\drivers\WudfPf.sys
18:08:42.0672 4712 WudfPf - ok
18:08:42.0688 4712 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\Windows\system32\DRIVERS\WUDFRd.sys
18:08:42.0688 4712 WUDFRd - ok
18:08:42.0735 4712 wudfsvc (8d1e1e529a2c9e9b6a85b55a345f7629) C:\Windows\System32\WUDFSvc.dll
18:08:42.0735 4712 wudfsvc - ok
18:08:42.0766 4712 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\Windows\System32\wwansvc.dll
18:08:42.0781 4712 WwanSvc - ok
18:08:42.0828 4712 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
18:08:43.0312 4712 \Device\Harddisk0\DR0 - ok
18:08:43.0312 4712 MBR (0x1B8) (739b36f7a373fc81121d831231b6d311) \Device\Harddisk1\DR1
18:08:45.0340 4712 \Device\Harddisk1\DR1 - ok
18:08:45.0340 4712 Boot (0x1200) (f3e73f6adbfba521d2c4e94861ef24e0) \Device\Harddisk0\DR0\Partition0
18:08:45.0340 4712 \Device\Harddisk0\DR0\Partition0 - ok
18:08:45.0355 4712 Boot (0x1200) (cdd3471735bc81e7ea7df801f1f0453e) \Device\Harddisk0\DR0\Partition1
18:08:45.0355 4712 \Device\Harddisk0\DR0\Partition1 - ok
18:08:45.0371 4712 Boot (0x1200) (72ae73f08c840e486fef3bfc7fe80674) \Device\Harddisk1\DR1\Partition0
18:08:45.0371 4712 \Device\Harddisk1\DR1\Partition0 - ok
18:08:45.0371 4712 ============================================================
18:08:45.0371 4712 Scan finished
18:08:45.0371 4712 ============================================================
18:08:45.0371 1864 Detected object count: 0
18:08:45.0371 1864 Actual detected object count: 0

ComboFix / log

ComboFix 12-07-19.02 - Roman 19.07.2012 18:15:02.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.3327.2352 [GMT 2:00]
Spuštěný z: c:\users\Roman\Desktop\ComboFix\ComboFix.exe
AV: avast! Internet Security *Disabled/Outdated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
SP: avast! Internet Security *Disabled/Outdated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\program files\2YourFace\2YourFace.crx
c:\program files\Complitly
c:\program files\Complitly\FireFoxExtensionWithFF8Fix.exe
c:\program files\Complitly\FireFoxUninstaller.exe
c:\program files\Complitly\chrome\ComplitlyChrome.crx
c:\program files\Complitly\InstTracker.exe
c:\program files\Complitly\support@Complitly.com\defaults\preferences\predictad.js
c:\program files\Complitly\support@Complitly.com\chrome.manifest
c:\program files\Complitly\support@Complitly.com\chrome\content\appIcon.png
c:\program files\Complitly\support@Complitly.com\chrome\content\browserOverlay.xul
c:\program files\Complitly\support@Complitly.com\chrome\content\options.js
c:\program files\Complitly\support@Complitly.com\chrome\content\options.xul
c:\program files\Complitly\support@Complitly.com\chrome\content\utils.js
c:\program files\Complitly\support@Complitly.com\install.rdf
c:\program files\Complitly\System.Data.SQLite.dll
c:\program files\Complitly\unins000.dat
c:\program files\Complitly\unins000.exe
c:\program files\Expresso\ExTEnsion32.dll
c:\program files\Search Fairy\SeARchfairy.dll
c:\users\Roman\AppData\Roaming\inst.exe
c:\users\Roman\AppData\Roaming\vso_ts_preview.xml
c:\windows\7Loader.TAG
c:\windows\settings.reg
c:\windows\system32\c157d732.exe
D:\install.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-06-19 do 2012-07-19 )))))))))))))))))))))))))))))))
.
.
2012-07-19 16:19 . 2012-07-19 16:19 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-07-19 16:19 . 2012-07-19 16:19 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-07-18 19:57 . 2012-07-18 19:58 -------- d-----w- c:\program files\Anti-Trojan-55
2012-07-18 16:23 . 2012-07-18 16:23 -------- d-----w- c:\users\Roman\AppData\Roaming\Malwarebytes
2012-07-18 16:22 . 2012-07-18 16:22 -------- d-----w- c:\programdata\Malwarebytes
2012-07-18 16:22 . 2012-07-18 16:22 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-07-18 16:22 . 2012-07-03 11:46 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-07-18 03:53 . 2012-07-18 03:53 -------- d-----w- c:\users\Roman\AppData\Local\VS Revo Group
2012-07-17 08:43 . 2012-06-29 08:44 6891424 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F1F1F924-237C-417B-8DB6-DCD0FF4FE0C1}\mpengine.dll
2012-07-16 21:07 . 2012-07-16 21:06 476976 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-07-16 21:06 . 2012-07-16 21:06 -------- d-----w- c:\program files\Java
2012-07-15 09:35 . 2012-07-18 20:04 -------- dc----w- c:\windows\system32\DRVSTORE
2012-07-15 09:35 . 2012-07-15 09:35 101720 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2012-07-15 09:33 . 2012-07-15 09:33 -------- d-----w- c:\users\Roman\AppData\Local\Sunbelt Software
2012-07-15 09:31 . 2012-07-18 20:04 -------- d-----w- c:\programdata\Lavasoft
2012-07-14 11:03 . 2012-07-14 11:04 -------- d-----w- c:\users\Roman\AppData\Roaming\Nero
2012-07-14 10:42 . 2012-07-14 10:54 -------- d-----w- c:\program files\Nero
2012-07-14 10:42 . 2012-07-14 10:58 -------- d-----w- c:\program files\Common Files\Nero
2012-07-14 10:42 . 2012-07-14 10:50 -------- d-----w- c:\programdata\Nero
2012-07-14 09:38 . 2012-07-14 09:38 -------- d-----w- c:\users\Roman\AppData\Roaming\Sony
2012-07-14 08:31 . 2012-07-14 09:38 -------- d-----w- c:\users\Roman\AppData\Local\Sony
2012-07-13 14:32 . 2012-07-13 14:32 89944 ----a-w- c:\program files\Common Files\Windows Live\.cache\4e466c701cd610401\DSETUP.dll
2012-07-13 14:32 . 2012-07-13 14:32 537432 ----a-w- c:\program files\Common Files\Windows Live\.cache\4e466c701cd610401\DXSETUP.exe
2012-07-13 14:32 . 2012-07-13 14:32 1801048 ----a-w- c:\program files\Common Files\Windows Live\.cache\4e466c701cd610401\dsetup32.dll
2012-07-11 20:52 . 2012-06-12 02:40 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-07-10 05:25 . 2010-02-11 07:10 293376 ----a-w- c:\windows\system32\browserchoice.exe
2012-06-28 18:02 . 2012-05-04 17:32 191600 ----a-w- c:\windows\system32\ViaMicArrayAPO.dll
2012-06-28 18:02 . 2012-05-04 17:32 27760 ----a-w- c:\windows\system32\ViakaraokeSrv.exe
2012-06-28 18:02 . 2012-05-04 17:32 82544 ----a-w- c:\windows\system32\Dts2PropPageExt.dll
2012-06-28 18:02 . 2011-06-08 16:19 76288 ----a-w- c:\windows\system32\nQPropPageExt.dll
2012-06-28 18:02 . 2011-06-08 16:19 73728 ----a-w- c:\windows\system32\nQAPO.dll
2012-06-28 18:02 . 2012-05-04 17:32 86128 ----a-w- c:\windows\system32\ViaMicArrayPropPageExt.dll
2012-06-28 18:02 . 2012-05-04 17:32 106608 ----a-w- c:\windows\system32\ViaKaraokePropPageExt.dll
2012-06-28 18:02 . 2012-05-04 17:32 1021552 ----a-w- c:\windows\system32\ViaKaraokeApo.dll
2012-06-28 18:02 . 2012-05-04 17:32 218224 ----a-w- c:\windows\system32\Dts2APO.dll
2012-06-28 17:40 . 2012-06-28 17:40 -------- d-----w- c:\program files\Driver-Soft
2012-06-28 17:31 . 2012-07-17 19:06 -------- d-----w- c:\programdata\DriverGenius
2012-06-22 15:23 . 2012-06-22 15:23 138904 ----a-w- c:\users\Roman\AppData\Roaming\PnkBstrK.sys
2012-06-21 08:37 . 2012-06-21 08:37 3166792 ------w- c:\windows\system32\pbsvc.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-16 21:06 . 2012-03-16 17:09 472880 ----a-w- c:\windows\system32\deployJava1.dll
2012-07-11 18:48 . 2012-03-29 12:50 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-11 18:48 . 2012-03-14 21:23 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-06-29 12:15 . 2012-04-26 16:22 483952 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2012-06-24 18:31 . 2012-03-20 09:01 139848 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-06-24 18:31 . 2012-03-20 09:01 282696 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-06-24 18:31 . 2012-03-15 17:46 282696 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-06-22 17:58 . 2012-03-15 17:46 282696 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-06-22 15:22 . 2012-03-15 17:46 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-06-03 14:59 . 2012-06-03 14:59 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2012-06-03 14:59 . 2012-06-03 14:59 484176 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2012-06-02 22:19 . 2012-06-19 04:41 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 22:19 . 2012-06-19 04:41 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 22:19 . 2012-06-19 04:41 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 22:19 . 2012-06-19 04:41 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 22:19 . 2012-06-19 04:41 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 22:12 . 2012-06-19 04:41 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-06-02 22:12 . 2012-06-19 04:41 88576 ----a-w- c:\windows\system32\wudriver.dll
2012-06-02 13:19 . 2012-06-19 04:41 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-02 13:12 . 2012-06-19 04:41 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-06-02 04:40 . 2012-07-11 03:41 225280 ----a-w- c:\windows\system32\schannel.dll
2012-05-31 10:25 . 2012-03-14 21:12 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-05-04 17:32 . 2012-03-14 20:04 639088 ----a-w- c:\windows\system32\VIASysFx.dll
2012-05-04 17:32 . 2012-03-14 20:04 2330224 ----a-w- c:\windows\system32\VIAPropPageExt.dll
2012-05-04 17:32 . 2012-03-14 20:04 1832560 ----a-w- c:\windows\system32\drivers\viahduaa.sys
2012-05-01 04:44 . 2012-06-13 03:58 164352 ----a-w- c:\windows\system32\profsvc.dll
2012-04-28 14:25 . 2012-04-28 14:25 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-04-28 04:41 . 2012-06-13 03:58 919040 ----a-w- c:\windows\system32\rdpcorets.dll
2012-04-28 03:17 . 2012-06-13 03:58 183808 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-04-26 16:22 . 2012-04-26 16:22 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2012-04-26 04:45 . 2012-06-13 03:58 58880 ----a-w- c:\windows\system32\rdpwsx.dll
2012-04-26 04:45 . 2012-06-13 03:58 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-04-26 04:41 . 2012-06-13 03:58 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-04-24 04:36 . 2012-06-13 03:58 1158656 ----a-w- c:\windows\system32\crypt32.dll
2012-04-24 04:36 . 2012-06-13 03:58 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2012-04-24 04:36 . 2012-06-13 03:58 103936 ----a-w- c:\windows\system32\cryptnet.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552]
"CTSysVol"="c:\program files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe" [2005-10-31 57344]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"HDAudDeck"="c:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2012-05-11 3920496]
"P17RunE"="P17RunE.dll" [2008-03-28 14848]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware (cleanup)"="c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll" [2012-07-03 1085000]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Skype"="c:\program files\Skype\Phone\Skype.exe" /minimized /regrun
"Sidebar"=c:\program files\Windows Sidebar\sidebar.exe /autoRun
"Google Update"="c:\users\Roman\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"CompuCare Check for updates"=c:\users\Roman\AppData\Roaming\SuperPump\updater.exe
"PSwitch"=c:\program files\Proxy Switcher Standard\ProxySwitcher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"OPSE reminder"="c:\program files\ScanSoft\OmniPageSE2.0\EregEng\Ereg.exe" -r "c:\program files\ScanSoft\OmniPageSE2.0\EregEng\ereg.ini"
"OpwareSE2"="c:\program files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
"PAC7302_Monitor"=c:\windows\PixArt\PAC7302\Monitor.exe
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"NvCplDaemon"=RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
"ApnUpdater"="c:\program files\Ask.com\Updater\Updater.exe"
"SwitchBoard"=c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
.
R2 ATE_PROCMON;ATE_PROCMON;d:\utility\Anti.Trojan.Elite.5.4.1\instalace\Anti Trojan Elite\ATEPMon.sys [x]
R2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [x]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [x]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 Expresso Updater;Expresso Updater;c:\program files\Expresso\ExtensionUpdaterService.exe [x]
R4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
R4 TeamViewer7;TeamViewer 7;c:\program files\TeamViewer\Version7\TeamViewer_Service.exe [x]
S0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\aswNdis.sys [x]
S0 aswNdis2;avast! Firewall Core Firewall Service; [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 aswFW;avast! TDI Firewall driver; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [x]
S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe [x]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 46915145
*Deregistered* - 46915145
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2012-07-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-29 18:48]
.
2012-07-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-04-05 15:26]
.
2012-07-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-04-05 15:26]
.
2012-07-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2741153547-1710534885-1317902625-1000Core.job
- c:\users\Roman\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-14 23:09]
.
2012-07-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2741153547-1710534885-1317902625-1000UA.job
- c:\users\Roman\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-14 23:09]
.
.
------- Doplňkový sken -------
.
IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: {{81727BE7-50E7-48ed-A547-F0274756E2DD} - {27CF82B1-E1D2-4f9b-976E-62095A52BA4A} -
LSP: %SYSTEMROOT%\system32\nvLsp.dll
Trusted Zone: mojebanka.cz\*
Trusted Zone: mojebanka.cz\*
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\yrjk4hv0.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=109035&tt=100512_4_
FF - user.js: extensions.BabylonToolbar_i.babExt -
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.id - ac13633f00000000000090e6ba780b98
FF - user.js: extensions.BabylonToolbar_i.hardId - ac13633f00000000000090e6ba780b98
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15478
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1721:22
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - base
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-c157d732 - c:\windows\system32\c157d732.exe
AddRemove-{4FFBB818-B13C-11E0-931D-B2664824019B}_is1 - c:\program files\Complitly\unins000.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-07-19 18:21:25
ComboFix-quarantined-files.txt 2012-07-19 16:21
ComboFix2.txt 2011-12-19 10:31
.
Před spuštěním: Volných bajtů: 20 791 095 296
Po spuštění: Volných bajtů: 22 628 855 808
.
- - End Of File - - 279F20E28988D0C390BF33112D210803

Odinstaluj:
McAfee Security Scan
Anti-Trojan-55
Anti.Trojan.Elite.5.4.1
Babylon
McAfee Security Scan

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:



Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

Tady je log ( ten neřád Babylon na GogleChrome pořád je nelze odinstalovat )

ComboFix 12-07-20.02 - Roman 20.07.2012 21:46:52.2.2 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.3327.1959 [GMT 2:00]
Spuštěný z: c:\users\Roman\Desktop\ComboFix\ComboFix.exe
Použité ovládací přepínače :: c:\users\Roman\Desktop\CFScript.txt
AV: avast! Internet Security *Disabled/Outdated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
SP: avast! Internet Security *Disabled/Outdated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\program files\Ask.com\Updater\Updater.exe"
"c:\program files\Google\Update\GoogleUpdate.exe"
"c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe"
"c:\program files\Skype\Updater\Updater.exe"
"c:\users\Roman\AppData\Local\Google\Update\GoogleUpdate.exe"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2741153547-1710534885-1317902625-1000Core.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2741153547-1710534885-1317902625-1000UA.job"
"d:\utility\Anti.Trojan.Elite.5.4.1\instalace\Anti Trojan Elite\ATEPMon.sys"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Google\Update\GoogleUpdate.exe
c:\program files\Skype\Updater\Updater.exe
c:\users\Roman\AppData\Local\Google\Update\GoogleUpdate.exe
c:\users\Roman\AppData\Roaming\vso_ts_preview.xml
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2741153547-1710534885-1317902625-1000Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2741153547-1710534885-1317902625-1000UA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_ATE_PROCMON
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_SkypeUpdate
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-06-20 do 2012-07-20 )))))))))))))))))))))))))))))))
.
.
2012-07-20 19:51 . 2012-07-20 19:53 -------- d-----w- c:\users\Roman\AppData\Local\temp
2012-07-20 19:51 . 2012-07-20 19:51 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-07-20 19:51 . 2012-07-20 19:51 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-07-20 18:55 . 2012-07-20 19:38 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2012-07-20 18:55 . 2012-07-20 18:55 -------- d-----w- c:\program files\Spybot - Search & Destroy
2012-07-19 18:01 . 2012-07-19 18:01 -------- d-----w- c:\windows\cs
2012-07-18 16:23 . 2012-07-18 16:23 -------- d-----w- c:\users\Roman\AppData\Roaming\Malwarebytes
2012-07-18 16:22 . 2012-07-18 16:22 -------- d-----w- c:\programdata\Malwarebytes
2012-07-18 16:22 . 2012-07-18 16:22 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-07-18 16:22 . 2012-07-03 11:46 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-07-18 03:53 . 2012-07-18 03:53 -------- d-----w- c:\users\Roman\AppData\Local\VS Revo Group
2012-07-17 08:43 . 2012-06-29 08:44 6891424 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F1F1F924-237C-417B-8DB6-DCD0FF4FE0C1}\mpengine.dll
2012-07-16 21:07 . 2012-07-16 21:06 476976 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-07-16 21:06 . 2012-07-16 21:06 -------- d-----w- c:\program files\Java
2012-07-15 09:35 . 2012-07-18 20:04 -------- dc----w- c:\windows\system32\DRVSTORE
2012-07-15 09:35 . 2012-07-15 09:35 101720 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2012-07-15 09:33 . 2012-07-15 09:33 -------- d-----w- c:\users\Roman\AppData\Local\Sunbelt Software
2012-07-15 09:31 . 2012-07-18 20:04 -------- d-----w- c:\programdata\Lavasoft
2012-07-14 11:03 . 2012-07-14 11:04 -------- d-----w- c:\users\Roman\AppData\Roaming\Nero
2012-07-14 10:42 . 2012-07-14 10:54 -------- d-----w- c:\program files\Nero
2012-07-14 10:42 . 2012-07-14 10:58 -------- d-----w- c:\program files\Common Files\Nero
2012-07-14 10:42 . 2012-07-14 10:50 -------- d-----w- c:\programdata\Nero
2012-07-14 09:38 . 2012-07-14 09:38 -------- d-----w- c:\users\Roman\AppData\Roaming\Sony
2012-07-14 08:31 . 2012-07-14 09:38 -------- d-----w- c:\users\Roman\AppData\Local\Sony
2012-07-13 14:32 . 2012-07-13 14:32 89944 ----a-w- c:\program files\Common Files\Windows Live\.cache\4e466c701cd610401\DSETUP.dll
2012-07-13 14:32 . 2012-07-13 14:32 537432 ----a-w- c:\program files\Common Files\Windows Live\.cache\4e466c701cd610401\DXSETUP.exe
2012-07-13 14:32 . 2012-07-13 14:32 1801048 ----a-w- c:\program files\Common Files\Windows Live\.cache\4e466c701cd610401\dsetup32.dll
2012-07-11 20:52 . 2012-06-12 02:40 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-07-10 05:25 . 2010-02-11 07:10 293376 ----a-w- c:\windows\system32\browserchoice.exe
2012-06-28 18:02 . 2012-05-04 17:32 191600 ----a-w- c:\windows\system32\ViaMicArrayAPO.dll
2012-06-28 18:02 . 2012-05-04 17:32 27760 ----a-w- c:\windows\system32\ViakaraokeSrv.exe
2012-06-28 18:02 . 2012-05-04 17:32 82544 ----a-w- c:\windows\system32\Dts2PropPageExt.dll
2012-06-28 18:02 . 2011-06-08 16:19 76288 ----a-w- c:\windows\system32\nQPropPageExt.dll
2012-06-28 18:02 . 2011-06-08 16:19 73728 ----a-w- c:\windows\system32\nQAPO.dll
2012-06-28 18:02 . 2012-05-04 17:32 86128 ----a-w- c:\windows\system32\ViaMicArrayPropPageExt.dll
2012-06-28 18:02 . 2012-05-04 17:32 106608 ----a-w- c:\windows\system32\ViaKaraokePropPageExt.dll
2012-06-28 18:02 . 2012-05-04 17:32 1021552 ----a-w- c:\windows\system32\ViaKaraokeApo.dll
2012-06-28 18:02 . 2012-05-04 17:32 218224 ----a-w- c:\windows\system32\Dts2APO.dll
2012-06-28 17:40 . 2012-06-28 17:40 -------- d-----w- c:\program files\Driver-Soft
2012-06-28 17:31 . 2012-07-17 19:06 -------- d-----w- c:\programdata\DriverGenius
2012-06-22 15:23 . 2012-06-22 15:23 138904 ----a-w- c:\users\Roman\AppData\Roaming\PnkBstrK.sys
2012-06-21 08:37 . 2012-06-21 08:37 3166792 ------w- c:\windows\system32\pbsvc.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-16 21:06 . 2012-03-16 17:09 472880 ----a-w- c:\windows\system32\deployJava1.dll
2012-07-11 18:48 . 2012-03-29 12:50 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-11 18:48 . 2012-03-14 21:23 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-06-29 12:15 . 2012-04-26 16:22 483952 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2012-06-24 18:31 . 2012-03-20 09:01 139848 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-06-24 18:31 . 2012-03-20 09:01 282696 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-06-24 18:31 . 2012-03-15 17:46 282696 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-06-22 17:58 . 2012-03-15 17:46 282696 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-06-22 15:22 . 2012-03-15 17:46 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-06-03 14:59 . 2012-06-03 14:59 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2012-06-03 14:59 . 2012-06-03 14:59 484176 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2012-06-02 22:19 . 2012-06-19 04:41 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 22:19 . 2012-06-19 04:41 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 22:19 . 2012-06-19 04:41 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 22:19 . 2012-06-19 04:41 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 22:19 . 2012-06-19 04:41 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 22:12 . 2012-06-19 04:41 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-06-02 22:12 . 2012-06-19 04:41 88576 ----a-w- c:\windows\system32\wudriver.dll
2012-06-02 13:19 . 2012-06-19 04:41 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-02 13:12 . 2012-06-19 04:41 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-06-02 04:40 . 2012-07-11 03:41 225280 ----a-w- c:\windows\system32\schannel.dll
2012-05-31 10:25 . 2012-03-14 21:12 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-05-04 17:32 . 2012-03-14 20:04 639088 ----a-w- c:\windows\system32\VIASysFx.dll
2012-05-04 17:32 . 2012-03-14 20:04 2330224 ----a-w- c:\windows\system32\VIAPropPageExt.dll
2012-05-04 17:32 . 2012-03-14 20:04 1832560 ----a-w- c:\windows\system32\drivers\viahduaa.sys
2012-05-01 04:44 . 2012-06-13 03:58 164352 ----a-w- c:\windows\system32\profsvc.dll
2012-04-28 14:25 . 2012-04-28 14:25 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-04-28 04:41 . 2012-06-13 03:58 919040 ----a-w- c:\windows\system32\rdpcorets.dll
2012-04-28 03:17 . 2012-06-13 03:58 183808 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-04-26 16:22 . 2012-04-26 16:22 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2012-04-26 04:45 . 2012-06-13 03:58 58880 ----a-w- c:\windows\system32\rdpwsx.dll
2012-04-26 04:45 . 2012-06-13 03:58 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-04-26 04:41 . 2012-06-13 03:58 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-04-24 04:36 . 2012-06-13 03:58 1158656 ----a-w- c:\windows\system32\crypt32.dll
2012-04-24 04:36 . 2012-06-13 03:58 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2012-04-24 04:36 . 2012-06-13 03:58 103936 ----a-w- c:\windows\system32\cryptnet.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552]
"CTSysVol"="c:\program files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe" [2005-10-31 57344]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"HDAudDeck"="c:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2012-05-11 3920496]
"P17RunE"="P17RunE.dll" [2008-03-28 14848]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Skype"="c:\program files\Skype\Phone\Skype.exe" /minimized /regrun
"Sidebar"=c:\program files\Windows Sidebar\sidebar.exe /autoRun
"CompuCare Check for updates"=c:\users\Roman\AppData\Roaming\SuperPump\updater.exe
"PSwitch"=c:\program files\Proxy Switcher Standard\ProxySwitcher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"OPSE reminder"="c:\program files\ScanSoft\OmniPageSE2.0\EregEng\Ereg.exe" -r "c:\program files\ScanSoft\OmniPageSE2.0\EregEng\ereg.ini"
"OpwareSE2"="c:\program files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
"PAC7302_Monitor"=c:\windows\PixArt\PAC7302\Monitor.exe
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"NvCplDaemon"=RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
"SwitchBoard"=c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
.
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [x]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [x]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 Expresso Updater;Expresso Updater;c:\program files\Expresso\ExtensionUpdaterService.exe [x]
R4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
R4 TeamViewer7;TeamViewer 7;c:\program files\TeamViewer\Version7\TeamViewer_Service.exe [x]
S0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\aswNdis.sys [x]
S0 aswNdis2;avast! Firewall Core Firewall Service; [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 aswFW;avast! TDI Firewall driver; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [x]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [x]
S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe [x]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [x]
.
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2012-07-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-29 18:48]
.
.
------- Doplňkový sken -------
.
IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: {{81727BE7-50E7-48ed-A547-F0274756E2DD} - {27CF82B1-E1D2-4f9b-976E-62095A52BA4A} -
LSP: %SYSTEMROOT%\system32\nvLsp.dll
Trusted Zone: mojebanka.cz\*
Trusted Zone: mojebanka.cz\*
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\Roman\AppData\Roaming\Mozilla\Firefox\Profiles\yrjk4hv0.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
c:\program files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
c:\windows\system32\WUDFHost.exe
c:\windows\system32\conhost.exe
c:\windows\System32\rundll32.exe
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\sppsvc.exe
.
**************************************************************************
.
Celkový čas: 2012-07-20 21:55:36 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-07-20 19:55
ComboFix2.txt 2012-07-19 16:21
ComboFix3.txt 2011-12-19 10:31
.
Před spuštěním: Volných bajtů: 21 495 119 872
Po spuštění: Volných bajtů: 21 342 900 224
.
- - End Of File - - 0398C17653444F9FA2404EBB78706316

aswMBR log

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-07-20 22:03:15
-----------------------------
22:03:15.411 OS Version: Windows 6.1.7601 Service Pack 1
22:03:15.411 Number of processors: 2 586 0x602
22:03:15.411 ComputerName: ROMAN-PC UserName: Roman
22:03:16.191 Initialize success
22:03:16.316 AVAST engine defs: 11112801
22:03:21.713 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-3
22:03:21.713 Disk 0 Vendor: WDC_WD1600JS-00MHB0 02.01C03 Size: 152627MB BusType: 3
22:03:21.729 Disk 0 MBR read successfully
22:03:21.729 Disk 0 MBR scan
22:03:21.745 Disk 0 Windows 7 default MBR code
22:03:21.745 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 45002 MB offset 63
22:03:21.760 Disk 0 Partition - 00 0F Extended LBA 107622 MB offset 92164905
22:03:21.776 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 107622 MB offset 92164968
22:03:21.791 Disk 0 scanning sectors +312576705
22:03:21.838 Disk 0 scanning C:\Windows\system32\drivers
22:03:28.281 Service scanning
22:03:45.129 Modules scanning
22:03:51.790 Disk 0 trace - called modules:
22:03:51.806 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll >>UNKNOWN [0x857271e8]<<
22:03:51.806 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x86575030]
22:03:51.821 3 CLASSPNP.SYS[8c24e59e] -> nt!IofCallDriver -> [0x860ea918]
22:03:51.821 5 ACPI.sys[8bb363d4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-3[0x860c8030]
22:03:51.821 \Driver\atapi[0x860b8ef0] -> IRP_MJ_CREATE -> 0x857271e8
22:03:52.102 AVAST engine scan C:\Windows
22:03:54.021 AVAST engine scan C:\Windows\system32
22:05:41.817 AVAST engine scan C:\Windows\system32\drivers
22:05:49.742 AVAST engine scan C:\Users\Roman
22:08:20.266 AVAST engine scan C:\ProgramData
22:09:11.153 Scan finished successfully
22:10:02.789 Disk 0 MBR has been saved successfully to "C:\Users\Roman\Desktop\MBR.dat"
22:10:02.789 The log file has been saved successfully to "C:\Users\Roman\Desktop\aswMBR.txt"
22:11:28.929 Disk 0 MBR has been saved successfully to "C:\Users\Roman\Desktop\aswMBR log\MBR.dat"
22:11:28.929 The log file has been saved successfully to "C:\Users\Roman\Desktop\aswMBR log\aswMBR.txt"

Odinstaluj:
Spybot - Search & Destroy

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Tady je log ( ten neřád Babylon na GogleChrome pořád je nelze odinstalovat )

Combofix to neumí..Museli bychom použít OTL.