Prosím o kontrolu logu - menší fps při hraní her Vyřešeno

[mEEEgy]

Ahoj, při hrách pocituju méně FPS než dřív.


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:39:30, on 16.8.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Razer\Copperhead\razerhid.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\Program Files\TO2SSM\McciTrayApp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Guard-ICQ\GuardICQ.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Xfire\Xfire.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Guard-ICQ\GuardICQ.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\LGAutorunService.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Razer\Copperhead\razerofa.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
C:\Program Files\Vodafone\Via The Phone\VodafoneConnectorService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\bin32\nSvcAppFlt.exe
C:\Program Files\bin32\nSvcIp.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\TeamViewer\Version7\TeamViewer.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\TeamViewer\Version7\tv_w32.exe
C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
C:\Program Files\Winamp\winamp.exe
C:\Documents and Settings\Admin\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Admin\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Admin\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Admin\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Admin\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
C:\Documents and Settings\Admin\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MI1933~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MI1933~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SimpleAdblock Class - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Common Files\Simple Adblock\SimpleAdblock.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [razer] C:\Program Files\Razer\Copperhead\razerhid.exe
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [TO2SSM_McciTrayApp] C:\Program Files\TO2SSM\McciTrayApp.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Guard.Mail.ru.gui] "C:\Program Files\Guard-ICQ\GuardICQ.exe" /gui
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O8 - Extra context menu item: Download with Mipony - file://C:\Program Files\MiPony\Browser\IEContext.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MI1933~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (file missing)
O9 - Extra button: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files\ICQ7M\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files\ICQ7M\ICQ.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\bin32\nSvcAppFlt.exe
O23 - Service: Guard.Mail.ru - Unknown owner - C:\Program Files\Guard-ICQ\GuardICQ.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LG SCSI Commander - Unknown owner - C:\WINDOWS\system32\LGAutorunService.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\bin32\nSvcIp.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
O23 - Service: Vodafone Connector Service (VodafoneConnectorService) - Vodafone Group - C:\Program Files\Vodafone\Via The Phone\VodafoneConnectorService.exe

--
End of file - 11769 bytes

Díky

[Reklama]

[memphisto]

fix:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

[mEEEgy]

Malwarebytes' Anti-Malware
www.malwarebytes.org

Verze databáze:

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

16.8.2012 23:19:01
mbam-log-2012-08-16 (23-19-01).txt

Typ: Rychlá kontrola
Kontrolované objekty: 161457
Uplynulý čas: 2 minut, 57 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

[jaro3]

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

[mEEEgy]

10:35:18.0187 0696 TDSS rootkit removing tool 2.8.6.0 Aug 13 2012 17:24:05
10:35:18.0484 0696 ============================================================
10:35:18.0484 0696 Current date / time: 2012/08/19 10:35:18.0484
10:35:18.0484 0696 SystemInfo:
10:35:18.0484 0696
10:35:18.0484 0696 OS Version: 5.1.2600 ServicePack: 3.0
10:35:18.0484 0696 Product type: Workstation
10:35:18.0484 0696 ComputerName: M3NH
10:35:18.0484 0696 UserName: Admin
10:35:18.0484 0696 Windows directory: C:\WINDOWS
10:35:18.0484 0696 System windows directory: C:\WINDOWS
10:35:18.0484 0696 Processor architecture: Intel x86
10:35:18.0484 0696 Number of processors: 2
10:35:18.0484 0696 Page size: 0x1000
10:35:18.0484 0696 Boot type: Normal boot
10:35:18.0484 0696 ============================================================
10:35:19.0703 0696 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
10:35:19.0750 0696 ============================================================
10:35:19.0750 0696 \Device\Harddisk0\DR0:
10:35:19.0750 0696 MBR partitions:
10:35:19.0750 0696 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A384C02
10:35:19.0750 0696 ============================================================
10:35:19.0781 0696 C: <-> \Device\Harddisk0\DR0\Partition1
10:35:19.0796 0696 ============================================================
10:35:19.0796 0696 Initialize success
10:35:19.0796 0696 ============================================================
10:35:22.0046 3100 ============================================================
10:35:22.0046 3100 Scan started
10:35:22.0046 3100 Mode: Manual;
10:35:22.0046 3100 ============================================================
10:35:23.0031 3100 ================ Scan services =============================
10:35:23.0125 3100 Abiosdsk - ok
10:35:23.0125 3100 abp480n5 - ok
10:35:23.0171 3100 [ 4fe34f1f3126b61fcc6b2043aa8112c9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
10:35:23.0171 3100 ACPI - ok
10:35:23.0203 3100 [ afdff022a01f0b11c776f0860c3b282f ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
10:35:23.0203 3100 ACPIEC - ok
10:35:23.0281 3100 [ c1eb9968ec89fba5f3a264e2e57923ab ] Adobe LM Service C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
10:35:23.0281 3100 Adobe LM Service - ok
10:35:23.0375 3100 [ a9d3b95e8466bd58eeb8a1154654e162 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
10:35:23.0375 3100 AdobeFlashPlayerUpdateSvc - ok
10:35:23.0375 3100 adpu160m - ok
10:35:23.0390 3100 [ 8bed39e3c35d6a489438b8141717a557 ] aec C:\WINDOWS\system32\drivers\aec.sys
10:35:23.0390 3100 aec - ok
10:35:23.0453 3100 [ 1e44bc1e83d8fd2305f8d452db109cf9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
10:35:23.0453 3100 AFD - ok
10:35:23.0453 3100 Aha154x - ok
10:35:23.0453 3100 aic78u2 - ok
10:35:23.0453 3100 aic78xx - ok
10:35:23.0500 3100 [ e0a6fa244b8624d78fe5ff6f56a33bae ] Alerter C:\WINDOWS\system32\alrsvc.dll
10:35:23.0515 3100 Alerter - ok
10:35:23.0546 3100 [ 88842de939a827577bf24243699ac80a ] ALG C:\WINDOWS\System32\alg.exe
10:35:23.0546 3100 ALG - ok
10:35:23.0546 3100 AliIde - ok
10:35:23.0593 3100 [ ad8fa28d8ed0d0a689a0559085ce0f18 ] AmdLLD C:\WINDOWS\system32\DRIVERS\AmdLLD.sys
10:35:23.0593 3100 AmdLLD - ok
10:35:23.0640 3100 [ 033448d435e65c4bd72e70521fd05c76 ] AmdPPM C:\WINDOWS\system32\DRIVERS\AmdPPM.sys
10:35:23.0640 3100 AmdPPM - ok
10:35:23.0671 3100 [ 868ae6fa93c29c8a105539f3e6d5a77f ] Amfilter C:\WINDOWS\system32\DRIVERS\Amfilter.sys
10:35:23.0687 3100 Amfilter - ok
10:35:23.0687 3100 amsint - ok
10:35:23.0703 3100 [ 37646d4559ad45c96225521b44c45d01 ] Amusbprt C:\WINDOWS\system32\DRIVERS\Amusbprt.sys
10:35:23.0703 3100 Amusbprt - ok
10:35:23.0703 3100 [ b5b8a80875c1dededa8b02765642c32f ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
10:35:23.0703 3100 Arp1394 - ok
10:35:23.0703 3100 asc - ok
10:35:23.0718 3100 asc3350p - ok
10:35:23.0718 3100 asc3550 - ok
10:35:23.0796 3100 [ 776acefa0ca9df0faa51a5fb2f435705 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
10:35:23.0796 3100 aspnet_state - ok
10:35:23.0812 3100 [ b153affac761e7f5fcfa822b9c4e97bc ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
10:35:23.0812 3100 AsyncMac - ok
10:35:23.0843 3100 [ 9f3a2f5aa6875c72bf062c712cfa2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
10:35:23.0843 3100 atapi - ok
10:35:23.0843 3100 Atdisk - ok
10:35:23.0906 3100 [ 192a651df943ee391dfd2e4a123f07f6 ] Ati HotKey Poller C:\WINDOWS\system32\Ati2evxx.exe
10:35:23.0906 3100 Ati HotKey Poller - ok
10:35:23.0968 3100 [ c9bf3114b6fdb46e01ca55d0336cde88 ] ATI Smart C:\WINDOWS\system32\ati2sgag.exe
10:35:23.0968 3100 ATI Smart - ok
10:35:24.0125 3100 [ 0a8b257db810be78ac9fd1860b4ba22b ] ati2mtag C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
10:35:24.0156 3100 ati2mtag - ok
10:35:24.0203 3100 [ 591a9eabb5ef5168e435c2f18b05dd76 ] AtiHdmiService C:\WINDOWS\system32\drivers\AtiHdmi.sys
10:35:24.0203 3100 AtiHdmiService - ok
10:35:24.0234 3100 [ f0d933b42cd0594048e4d5200ae9e417 ] atksgt C:\WINDOWS\system32\DRIVERS\atksgt.sys
10:35:24.0234 3100 atksgt - ok
10:35:24.0265 3100 [ 9916c1225104ba14794209cfa8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
10:35:24.0265 3100 Atmarpc - ok
10:35:24.0312 3100 [ de31b88962a8645dba5a37b993e7b0f1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
10:35:24.0312 3100 AudioSrv - ok
10:35:24.0328 3100 [ d9f724aa26c010a217c97606b160ed68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
10:35:24.0328 3100 audstub - ok
10:35:24.0375 3100 [ da1f27d85e0d1525f6621372e7b685e9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
10:35:24.0375 3100 Beep - ok
10:35:24.0406 3100 [ 19395d092fd85ddc2d9c7729cf5a2ac8 ] BITS C:\WINDOWS\system32\qmgr.dll
10:35:24.0531 3100 BITS - ok
10:35:24.0593 3100 [ 73686fe0b2e0469f89fd2075be724704 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
10:35:24.0625 3100 Bonjour Service - ok
10:35:24.0703 3100 [ 89e739bba5f636297ea5b5f811189e06 ] Browser C:\WINDOWS\System32\browser.dll
10:35:24.0750 3100 Browser - ok
10:35:24.0781 3100 [ 90a673fc8e12a79afbed2576f6a7aaf9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
10:35:24.0781 3100 cbidf2k - ok
10:35:24.0812 3100 [ fdc06e2ada8c468ebb161624e03976cf ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
10:35:24.0812 3100 CCDECODE - ok
10:35:24.0812 3100 cd20xrnt - ok
10:35:24.0890 3100 [ c1b486a7658353d33a10cc15211a873b ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
10:35:24.0890 3100 Cdaudio - ok
10:35:24.0937 3100 [ c885b02847f5d2fd45a24e219ed93b32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
10:35:24.0953 3100 Cdfs - ok
10:35:24.0984 3100 [ 1f4260cc5b42272d71f79e570a27a4fe ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
10:35:24.0984 3100 Cdrom - ok
10:35:25.0000 3100 Changer - ok
10:35:25.0000 3100 [ e390dc1d7c461d7d56ec53402f329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
10:35:25.0000 3100 CiSvc - ok
10:35:25.0000 3100 [ 064507a8dfa8c5c7e2ffddd3e6f424fa ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
10:35:25.0000 3100 ClipSrv - ok
10:35:25.0031 3100 [ d87acaed61e417bba546ced5e7e36d9c ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:35:25.0062 3100 clr_optimization_v2.0.50727_32 - ok
10:35:25.0093 3100 [ c5a75eb48e2344abdc162bda79e16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
10:35:25.0125 3100 clr_optimization_v4.0.30319_32 - ok
10:35:25.0125 3100 CmdIde - ok
10:35:25.0125 3100 COMSysApp - ok
10:35:25.0125 3100 Cpqarray - ok
10:35:25.0140 3100 [ f3ab0933cbd166d271992f411c27ccaf ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
10:35:25.0140 3100 CryptSvc - ok
10:35:25.0140 3100 dac2w2k - ok
10:35:25.0140 3100 dac960nt - ok
10:35:25.0218 3100 [ be27674d1cbc3214aec84b4336a38bbf ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
10:35:25.0218 3100 DcomLaunch - ok
10:35:25.0265 3100 [ 1ec27a51a2f9df052bc2b4c8376c8fea ] DgiVecp C:\WINDOWS\system32\Drivers\DgiVecp.sys
10:35:25.0265 3100 DgiVecp - ok
10:35:25.0265 3100 [ 8c9a53e285ac5e6704844d0459ec85be ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
10:35:25.0281 3100 Dhcp - ok
10:35:25.0281 3100 [ 044452051f3e02e7963599fc8f4f3e25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
10:35:25.0281 3100 Disk - ok
10:35:25.0296 3100 dmadmin - ok
10:35:25.0343 3100 [ db5fd2bf5b07dc54bfcb3664ff05bd7c ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
10:35:25.0359 3100 dmboot - ok
10:35:25.0359 3100 [ fff1720af51171f32f1ead5cf71f2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
10:35:25.0359 3100 dmio - ok
10:35:25.0390 3100 [ e9317282a63ca4d188c0df5e09c6ac5f ] dmload C:\WINDOWS\system32\drivers\dmload.sys
10:35:25.0390 3100 dmload - ok
10:35:25.0390 3100 [ 2bfefe9e865655a76982f050450b9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
10:35:25.0406 3100 dmserver - ok
10:35:25.0421 3100 [ 8a208dfcf89792a484e76c40e5f50b45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
10:35:25.0437 3100 DMusic - ok
10:35:25.0468 3100 [ dfaa406bf19f4ee806a6f8d4342137f7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
10:35:25.0468 3100 Dnscache - ok
10:35:25.0500 3100 [ 4a3e2bd20157a0946751229e92eb8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
10:35:25.0500 3100 Dot3svc - ok
10:35:25.0500 3100 dpti2o - ok
10:35:25.0515 3100 [ 8f5fcff8e8848afac920905fbd9d33c8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
10:35:25.0515 3100 drmkaud - ok
10:35:25.0546 3100 [ 651554e483712b708ede864d0ca1aa73 ] DrvAgent32 C:\WINDOWS\system32\Drivers\DrvAgent32.sys
10:35:25.0546 3100 DrvAgent32 - ok
10:35:25.0578 3100 [ fb38473835476a6fb272215a1d972af9 ] dtsoftbus01 C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys
10:35:25.0593 3100 dtsoftbus01 - ok
10:35:25.0593 3100 dwshd - ok
10:35:25.0593 3100 EagleNT - ok
10:35:25.0625 3100 [ 0887d9c2be8d940778cad1e3b85f2a41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
10:35:25.0625 3100 EapHost - ok
10:35:25.0640 3100 [ 16ebd8bf1d5090923694cc972c7ce1b4 ] ENTECH C:\WINDOWS\system32\DRIVERS\ENTECH.sys
10:35:25.0640 3100 ENTECH - ok
10:35:25.0671 3100 [ a2a4912798f2be706abadd3d30800d16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
10:35:25.0671 3100 ERSvc - ok
10:35:25.0703 3100 [ 3f3126a8f73e92f8eb369d54977d9e15 ] ESLvnic1 C:\WINDOWS\system32\DRIVERS\ESLvnic.sys
10:35:25.0703 3100 ESLvnic1 - ok
10:35:25.0750 3100 [ 9ef697af07bb8dd82c3b02ca953a95b7 ] Eventlog C:\WINDOWS\system32\services.exe
10:35:25.0750 3100 Eventlog - ok
10:35:25.0796 3100 [ a371f11ef07653591c8de26afb13ce7f ] EventSystem C:\WINDOWS\system32\es.dll
10:35:25.0796 3100 EventSystem - ok
10:35:25.0843 3100 [ 38d332a6d56af32635675f132548343e ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
10:35:25.0843 3100 Fastfat - ok
10:35:25.0890 3100 [ ee9a2b9ea968a792a053c9d1a86bf870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
10:35:25.0906 3100 FastUserSwitchingCompatibility - ok
10:35:25.0937 3100 [ 92cdd60b6730b9f50f6a1a0c1f8cdc81 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys
10:35:25.0937 3100 Fdc - ok
10:35:25.0968 3100 [ ac366695a0796560aa37215ad5762aaf ] Fips C:\WINDOWS\system32\drivers\Fips.sys
10:35:25.0968 3100 Fips - ok
10:35:26.0031 3100 [ 227846995afeefa70d328bf5334a86a5 ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
10:35:26.0046 3100 FLEXnet Licensing Service - ok
10:35:26.0046 3100 [ 9d27e7b80bfcdf1cdd9b555862d5e7f0 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys
10:35:26.0046 3100 Flpydisk - ok
10:35:26.0093 3100 [ b2cf4b0786f8212cb92ed2b50c6db6b0 ] FltMgr C:\WINDOWS\system32\DRIVERS\fltMgr.sys
10:35:26.0093 3100 FltMgr - ok
10:35:26.0171 3100 [ 8ba7c024070f2b7fdd98ed8a4ba41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
10:35:26.0171 3100 FontCache3.0.0.0 - ok
10:35:26.0187 3100 [ 283195c5301eadbcf56dee637573ed12 ] ForceWare Intelligent Application Manager (IAM) C:\Program Files\bin32\nSvcAppFlt.exe
10:35:26.0187 3100 ForceWare Intelligent Application Manager (IAM) - ok
10:35:26.0203 3100 [ 790a4ca68f44be35967b3df61f3e4675 ] FsUsbExDisk C:\WINDOWS\system32\FsUsbExDisk.SYS
10:35:26.0218 3100 FsUsbExDisk - ok
10:35:26.0234 3100 [ 3e1e2bd4f39b0e2b7dc4f4d2bcc2779a ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
10:35:26.0234 3100 Fs_Rec - ok
10:35:26.0234 3100 [ 4e664d8541db4a66b73a24257e322e1f ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
10:35:26.0234 3100 Ftdisk - ok
10:35:26.0312 3100 GGSAFERDriver - ok
10:35:26.0328 3100 [ 0a02c63c8b144bd8c86b103dee7c86a2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
10:35:26.0328 3100 Gpc - ok
10:35:26.0406 3100 [ e859ca020ed61899f3c74a8d0032d05c ] Guard.Mail.ru C:\Program Files\Guard-ICQ\GuardICQ.exe
10:35:26.0437 3100 Guard.Mail.ru - ok
10:35:26.0468 3100 [ 833051c6c6c42117191935f734cfbd97 ] hamachi C:\WINDOWS\system32\DRIVERS\hamachi.sys
10:35:26.0468 3100 hamachi - ok
10:35:26.0546 3100 [ f31d7f8a7699575dbb3b3a3ab4aa6216 ] Hamachi2Svc C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
10:35:26.0562 3100 Hamachi2Svc - ok
10:35:26.0609 3100 [ 573c7d0a32852b48f3058cfd8026f511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
10:35:26.0609 3100 HDAudBus - ok
10:35:26.0671 3100 [ fcfe31fb75f8a6295b6b0af87a626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
10:35:26.0687 3100 helpsvc - ok
10:35:26.0687 3100 [ 00e25ee90166b3e1be6e74aebf858306 ] HidServ C:\WINDOWS\System32\hidserv.dll
10:35:26.0687 3100 HidServ - ok
10:35:26.0718 3100 [ ccf82c5ec8a7326c3066de870c06daf1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
10:35:26.0718 3100 hidusb - ok
10:35:26.0750 3100 [ 7a6b320928f86bc851530d63c82965d9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
10:35:26.0750 3100 hkmsvc - ok
10:35:26.0765 3100 hpn - ok
10:35:26.0796 3100 [ f80a415ef82cd06ffaf0d971528ead38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
10:35:26.0796 3100 HTTP - ok
10:35:26.0828 3100 [ 58fe2f2da3bc5573f4a35b3760d3125f ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
10:35:26.0828 3100 HTTPFilter - ok
10:35:26.0843 3100 i2omgmt - ok
10:35:26.0843 3100 i2omp - ok
10:35:26.0843 3100 [ c528e27945367191e7bae364930b6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
10:35:26.0843 3100 i8042prt - ok
10:35:26.0921 3100 [ 6f95324909b502e2651442c1548ab12f ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
10:35:26.0937 3100 IDriverT - ok
10:35:26.0984 3100 [ c01ac32dc5c03076cfb852cb5da5229c ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
10:35:27.0000 3100 idsvc - ok
10:35:27.0015 3100 [ 083a052659f5310dd8b6a6cb05edcf8e ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
10:35:27.0015 3100 Imapi - ok
10:35:27.0015 3100 [ f7b93aafad33b2320954c17e26c8d361 ] ImapiService C:\WINDOWS\system32\imapi.exe
10:35:27.0031 3100 ImapiService - ok
10:35:27.0031 3100 ini910u - ok
10:35:27.0140 3100 [ 19afbb8427ce65042599555e578170df ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
10:35:27.0156 3100 IntcAzAudAddService - ok
10:35:27.0171 3100 IntelIde - ok
10:35:27.0171 3100 [ 3bb22519a194418d5fec05d800a19ad0 ] Ip6Fw C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
10:35:27.0171 3100 Ip6Fw - ok
10:35:27.0203 3100 [ 731f22ba402ee4b62748adaf6363c182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
10:35:27.0203 3100 IpFilterDriver - ok
10:35:27.0203 3100 [ b87ab476dcf76e72010632b5550955f5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
10:35:27.0203 3100 IpInIp - ok
10:35:27.0203 3100 [ cc748ea12c6effde940ee98098bf96bb ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
10:35:27.0203 3100 IpNat - ok
10:35:27.0218 3100 [ 23c74d75e36e7158768dd63d92789a91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
10:35:27.0218 3100 IPSec - ok
10:35:27.0234 3100 [ c93c9ff7b04d772627a3646d89f7bf89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
10:35:27.0234 3100 IRENUM - ok
10:35:27.0250 3100 [ cc9f8a2d60aed1a51a3ac34c59b987ae ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
10:35:27.0250 3100 isapnp - ok
10:35:27.0343 3100 [ 0a5709543986843d37a92290b7838340 ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
10:35:27.0343 3100 JavaQuickStarterService - ok
10:35:27.0343 3100 [ 1b6162fe7f66b1a71a4b70f941c4aa9b ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
10:35:27.0343 3100 Kbdclass - ok
10:35:27.0375 3100 [ 86c8f23616c6c6e5b2776901c17b945b ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
10:35:27.0375 3100 kbdhid - ok
10:35:27.0390 3100 [ 692bcf44383d056aed41b045a323d378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
10:35:27.0390 3100 kmixer - ok
10:35:27.0437 3100 [ b467646c54cc746128904e1654c750c1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
10:35:27.0437 3100 KSecDD - ok
10:35:27.0468 3100 [ 3428e8f86f8add36b42fb23542c7b3e4 ] LanmanServer C:\WINDOWS\System32\srvsvc.dll
10:35:27.0468 3100 LanmanServer - ok
10:35:27.0500 3100 [ 936c1d110232d23b621cb0196e4f80f0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
10:35:27.0500 3100 lanmanworkstation - ok
10:35:27.0500 3100 lbrtfdc - ok
10:35:27.0546 3100 [ d116aa2a29d463aa07acf47c65949112 ] LG SCSI Commander C:\WINDOWS\system32\LGAutorunService.exe
10:35:27.0562 3100 LG SCSI Commander - ok
10:35:27.0578 3100 [ f8a7212d0864ef5e9185fb95e6623f4d ] lirsgt C:\WINDOWS\system32\DRIVERS\lirsgt.sys
10:35:27.0578 3100 lirsgt - ok
10:35:27.0609 3100 [ 0ab159f536e3e8f7f07113702a07cca5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
10:35:27.0609 3100 LmHosts - ok
10:35:27.0656 3100 [ 4f74184920b2d6e33024409b4c5c57c1 ] McciCMService C:\Program Files\Common Files\Motive\McciCMService.exe
10:35:27.0656 3100 McciCMService - ok
10:35:27.0671 3100 [ 221cd1c815b8a6b79389c3f5d1018de8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
10:35:27.0687 3100 Messenger - ok
10:35:27.0718 3100 [ 123271bd5237ab991dc5c21fdf8835eb ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
10:35:27.0718 3100 Microsoft Office Groove Audit Service - ok
10:35:27.0750 3100 Microsoft SharePoint Workspace Audit Service - ok
10:35:27.0765 3100 [ 4ae068242760a1fb6e1a44bf4e16afa6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
10:35:27.0765 3100 mnmdd - ok
10:35:27.0812 3100 [ 9a57d046f88f4b69751b11fd40088a61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
10:35:27.0812 3100 mnmsrvc - ok
10:35:27.0843 3100 [ 44032b0c6d9954d3fd26438330b99ee7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
10:35:27.0843 3100 Modem - ok
10:35:27.0859 3100 [ 4cb582831dbde63ce43b45d771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
10:35:27.0859 3100 Mouclass - ok
10:35:27.0875 3100 [ bb269eba740737ab749b214d568b6812 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
10:35:27.0875 3100 mouhid - ok
10:35:27.0875 3100 [ a80b9a0bad1b73637dbcbba7df72d3fd ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
10:35:27.0875 3100 MountMgr - ok
10:35:27.0921 3100 [ d0ac7ac40fff21056b1a3401361958ca ] MouseCap C:\WINDOWS\system32\Drivers\MouseCap.sys
10:35:27.0921 3100 MouseCap - ok
10:35:27.0968 3100 [ 15d5398eed42c2504bb3d4fc875c15d1 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
10:35:27.0968 3100 MozillaMaintenance - ok
10:35:27.0968 3100 mraid35x - ok
10:35:28.0000 3100 [ 9bd4dcb5412921864a7aacdedfbd1923 ] MREMP50 C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS
10:35:28.0000 3100 MREMP50 - ok
10:35:28.0000 3100 MREMP50a64 - ok
10:35:28.0000 3100 MREMPR5 - ok
10:35:28.0000 3100 MRENDIS5 - ok
10:35:28.0015 3100 [ 07c02c892e8e1a72d6bf35004f0e9c5e ] MRESP50 C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS
10:35:28.0015 3100 MRESP50 - ok
10:35:28.0015 3100 MRESP50a64 - ok
10:35:28.0046 3100 [ 11d42bb6206f33fbb3ba0288d3ef81bd ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
10:35:28.0046 3100 MRxDAV - ok
10:35:28.0093 3100 [ 7d304a5eb4344ebeeab53a2fe3ffb9f0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
10:35:28.0093 3100 MRxSmb - ok
10:35:28.0125 3100 [ 6db4d1521caba9a5ffab54ade0ae867d ] MSDTC C:\WINDOWS\system32\msdtc.exe
10:35:28.0125 3100 MSDTC - ok
10:35:28.0125 3100 [ c941ea2454ba8350021d774daf0f1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
10:35:28.0125 3100 Msfs - ok
10:35:28.0125 3100 MSIServer - ok
10:35:28.0140 3100 [ d1575e71568f4d9e14ca56b7b0453bf1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
10:35:28.0140 3100 MSKSSRV - ok
10:35:28.0156 3100 [ 325bb26842fc7ccc1fcce2c457317f3e ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
10:35:28.0156 3100 MSPCLOCK - ok
10:35:28.0156 3100 [ bad59648ba099da4a17680b39730cb3d ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
10:35:28.0156 3100 MSPQM - ok
10:35:28.0187 3100 [ af5f4f3f14a8ea2c26de30f7a1e17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
10:35:28.0187 3100 mssmbios - ok
10:35:28.0250 3100 MSSQL$SONY_MEDIAMGR - ok
10:35:28.0281 3100 [ cb7524c21727404bd3140dca32deb7de ] MSSQLServerADHelper C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe
10:35:28.0281 3100 MSSQLServerADHelper - ok
10:35:28.0296 3100 [ d5059366b361f0e1124753447af08aa2 ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
10:35:28.0296 3100 MSTEE - ok
10:35:28.0328 3100 [ d48659bb24c48345d926ecb45c1ebdf5 ] MTsensor C:\WINDOWS\system32\DRIVERS\ASACPI.sys
10:35:28.0328 3100 MTsensor - ok
10:35:28.0343 3100 [ de6a75f5c270e756c5508d94b6cf68f5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
10:35:28.0343 3100 Mup - ok
10:35:28.0359 3100 [ ac31b352ce5e92704056d409834beb74 ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
10:35:28.0359 3100 NABTSFEC - ok
10:35:28.0375 3100 [ 6ea362e9db03d44f6b996f4d8be237e9 ] napagent C:\WINDOWS\System32\qagentrt.dll
10:35:28.0390 3100 napagent - ok
10:35:28.0406 3100 [ 1df7f42665c94b825322fae71721130d ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
10:35:28.0406 3100 NDIS - ok
10:35:28.0406 3100 [ abd7629cf2796250f315c1dd0b6cf7a0 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
10:35:28.0406 3100 NdisIP - ok
10:35:28.0437 3100 [ 0109c4f3850dfbab279542515386ae22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
10:35:28.0437 3100 NdisTapi - ok
10:35:28.0453 3100 [ f927a4434c5028758a842943ef1a3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
10:35:28.0453 3100 Ndisuio - ok
10:35:28.0453 3100 [ edc1531a49c80614b2cfda43ca8659ab ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
10:35:28.0468 3100 NdisWan - ok
10:35:28.0515 3100 [ 9282bd12dfb069d3889eb3fcc1000a9b ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
10:35:28.0515 3100 NDProxy - ok
10:35:28.0515 3100 [ 5d81cf9a2f1a3a756b66cf684911cdf0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
10:35:28.0515 3100 NetBIOS - ok
10:35:28.0562 3100 [ 74b2b2f5bea5e9a3dc021d685551bd3d ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
10:35:28.0562 3100 NetBT - ok
10:35:28.0593 3100 [ 933de774986ec85e48210c44ab431de6 ] NetDDE C:\WINDOWS\system32\netdde.exe
10:35:28.0593 3100 NetDDE - ok
10:35:28.0593 3100 [ 933de774986ec85e48210c44ab431de6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
10:35:28.0609 3100 NetDDEdsdm - ok
10:35:28.0625 3100 [ ed0a176354487ceed65b80a7148ab739 ] Netlogon C:\WINDOWS\system32\lsass.exe
10:35:28.0625 3100 Netlogon - ok
10:35:28.0640 3100 [ 72e1e9e2977be08bdeedb6d8fd9d4d40 ] Netman C:\WINDOWS\System32\netman.dll
10:35:28.0640 3100 Netman - ok
10:35:28.0671 3100 [ d22cd77d4f0d63d1169bb35911bff12d ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:35:28.0671 3100 NetTcpPortSharing - ok
10:35:28.0703 3100 [ e9e47cfb2d461fa0fc75b7a74c6383ea ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
10:35:28.0703 3100 NIC1394 - ok
10:35:28.0750 3100 [ 39ee7c3bfbc64ba87cc8cf67386e814c ] Nla C:\WINDOWS\System32\mswsock.dll
10:35:28.0750 3100 Nla - ok
10:35:28.0812 3100 [ 193fa51dddd0bffded1c340f0434999a ] NMIndexingService C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
10:35:28.0812 3100 NMIndexingService - ok
10:35:28.0828 3100 [ b9730495e0cf674680121e34bd95a73b ] npf C:\WINDOWS\system32\drivers\npf.sys
10:35:28.0828 3100 npf - ok
10:35:28.0859 3100 [ 3182d64ae053d6fb034f44b6def8034a ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
10:35:28.0859 3100 Npfs - ok
10:35:28.0906 3100 [ 3c7bd1ec817d300a8826d49c406d5894 ] nSvcIp C:\Program Files\bin32\nSvcIp.exe
10:35:28.0906 3100 nSvcIp - ok
10:35:28.0921 3100 [ 78a08dd6a8d65e697c18e1db01c5cdca ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
10:35:28.0937 3100 Ntfs - ok
10:35:28.0937 3100 [ ed0a176354487ceed65b80a7148ab739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
10:35:28.0937 3100 NtLmSsp - ok
10:35:28.0953 3100 [ 023dd70573d644f3d9c8b1258a7bfd08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
10:35:28.0968 3100 NtmsSvc - ok
10:35:28.0984 3100 [ 73c1e1f395918bc2c6dd67af7591a3ad ] Null C:\WINDOWS\system32\drivers\Null.sys
10:35:28.0984 3100 Null - ok
10:35:29.0031 3100 [ 45ba510db13a0496db1cd16826519e03 ] NVENETFD C:\WINDOWS\system32\DRIVERS\NVENETFD.sys
10:35:29.0031 3100 NVENETFD - ok
10:35:29.0078 3100 [ 0ba72d1d0b83e1e5500c5dc4c7bafc32 ] NVHDA C:\WINDOWS\system32\drivers\nvhda32.sys
10:35:29.0078 3100 NVHDA - ok
10:35:29.0093 3100 [ 57cbdb934fb1afb7e03b413d151a6152 ] nvnetbus C:\WINDOWS\system32\DRIVERS\nvnetbus.sys
10:35:29.0093 3100 nvnetbus - ok
10:35:29.0093 3100 [ c44ee36dd84fa95eb81d79c374756003 ] nvsmu C:\WINDOWS\system32\DRIVERS\nvsmu.sys
10:35:29.0093 3100 nvsmu - ok
10:35:29.0125 3100 [ b305f3fad35083837ef46a0bbce2fc57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
10:35:29.0125 3100 NwlnkFlt - ok
10:35:29.0140 3100 [ c99b3415198d1aab7227f2c88fd664b9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
10:35:29.0140 3100 NwlnkFwd - ok
10:35:29.0234 3100 [ 785f487a64950f3cb8e9f16253ba3b7b ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
10:35:29.0250 3100 odserv - ok
10:35:29.0250 3100 [ ca33832df41afb202ee7aeb05145922f ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
10:35:29.0250 3100 ohci1394 - ok
10:35:29.0265 3100 [ 9d10f99a6712e28f8acd5641e3a7ea6b ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
10:35:29.0265 3100 ose - ok
10:35:29.0406 3100 [ 358a9cca612c68eb2f07ddad4ce1d8d7 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
10:35:29.0484 3100 osppsvc - ok
10:35:29.0500 3100 [ 46f8db73b4a53e543f8e371dc7c75bae ] Parport C:\WINDOWS\system32\drivers\Parport.sys
10:35:29.0500 3100 Parport - ok
10:35:29.0515 3100 [ beb3ba25197665d82ec7065b724171c6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
10:35:29.0531 3100 PartMgr - ok
10:35:29.0546 3100 [ 1fae19d0457176318bba4a8795656ebc ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
10:35:29.0546 3100 ParVdm - ok
10:35:29.0562 3100 [ 175cc28dcf819f78caa3fbd44ad9e52a ] pccsmcfd C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
10:35:29.0562 3100 pccsmcfd - ok
10:35:29.0562 3100 [ 6ce351d149cb4befc702951e471e1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
10:35:29.0578 3100 PCI - ok
10:35:29.0578 3100 PCIDump - ok
10:35:29.0578 3100 [ 2da4ec85e0ea7a45c6b2a05820492d5a ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
10:35:29.0578 3100 PCIIde - ok
10:35:29.0593 3100 [ 4fc31e6c19a5ce5198b1abff94cae758 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
10:35:29.0609 3100 Pcmcia - ok
10:35:29.0625 3100 [ 5b6c11de7e839c05248ced8825470fef ] pcouffin C:\WINDOWS\system32\Drivers\pcouffin.sys
10:35:29.0625 3100 pcouffin - ok
10:35:29.0625 3100 PDCOMP - ok
10:35:29.0625 3100 PDFRAME - ok
10:35:29.0625 3100 PDRELI - ok
10:35:29.0625 3100 PDRFRAME - ok
10:35:29.0640 3100 perc2 - ok
10:35:29.0640 3100 perc2hib - ok
10:35:29.0671 3100 [ 9ef697af07bb8dd82c3b02ca953a95b7 ] PlugPlay C:\WINDOWS\system32\services.exe
10:35:29.0671 3100 PlugPlay - ok
10:35:29.0718 3100 [ 205e1b699fd3f2f9b036eea2ec30c620 ] PnkBstrA C:\WINDOWS\system32\PnkBstrA.exe
10:35:29.0718 3100 PnkBstrA - ok
10:35:29.0718 3100 [ ed0a176354487ceed65b80a7148ab739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
10:35:29.0718 3100 PolicyAgent - ok
10:35:29.0765 3100 [ efeec01b1d3cf84f16ddd24d9d9d8f99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
10:35:29.0765 3100 PptpMiniport - ok
10:35:29.0796 3100 [ 7eb15dce4ec3a0220bd796a15c18186e ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys
10:35:29.0796 3100 Processor - ok
10:35:29.0812 3100 [ ed0a176354487ceed65b80a7148ab739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
10:35:29.0812 3100 ProtectedStorage - ok
10:35:29.0812 3100 [ 09298ec810b07e5d582cb3a3f9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
10:35:29.0828 3100 PSched - ok
10:35:29.0828 3100 [ 80d317bd1c3dbc5d4fe7b1678c60cadd ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
10:35:29.0828 3100 Ptilink - ok
10:35:29.0843 3100 [ e42e3433dbb4cffe8fdd91eab29aea8e ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
10:35:29.0843 3100 PxHelp20 - ok
10:35:29.0859 3100 ql1080 - ok
10:35:29.0859 3100 Ql10wnt - ok
10:35:29.0859 3100 ql12160 - ok
10:35:29.0859 3100 ql1240 - ok
10:35:29.0859 3100 ql1280 - ok
10:35:29.0906 3100 [ fe0d99d6f31e4fad8159f690d68ded9c ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
10:35:29.0906 3100 RasAcd - ok
10:35:29.0921 3100 [ 2b5e44ea009f2f374b980e1e9a70635d ] RasAuto C:\WINDOWS\System32\rasauto.dll
10:35:29.0921 3100 RasAuto - ok
10:35:29.0968 3100 [ 11b4a627bc9614b885c4969bfa5ff8a6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
10:35:29.0968 3100 Rasl2tp - ok
10:35:30.0000 3100 [ d57554c664b64604bd1ee13ea2c07e77 ] RasMan C:\WINDOWS\System32\rasmans.dll
10:35:30.0000 3100 RasMan - ok
10:35:30.0000 3100 [ 5bc962f2654137c9909c3d4603587dee ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
10:35:30.0000 3100 RasPppoe - ok
10:35:30.0000 3100 [ fdbb1d60066fcfbb7452fd8f9829b242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
10:35:30.0000 3100 Raspti - ok
10:35:30.0015 3100 [ a1e70b8354d52aeb3cb49568c7c0a2ff ] Razerlow C:\WINDOWS\system32\Drivers\Razerlow.sys
10:35:30.0015 3100 Razerlow - ok
10:35:30.0046 3100 [ 7ad224ad1a1437fe28d89cf22b17780a ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
10:35:30.0046 3100 Rdbss - ok
10:35:30.0062 3100 [ 4912d5b403614ce99c28420f75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
10:35:30.0062 3100 RDPCDD - ok
10:35:30.0093 3100 [ 43af5212bd8fb5ba6eed9754358bd8f7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
10:35:30.0093 3100 RDPWD - ok
10:35:30.0109 3100 [ c0d9d9711cb74ee9bc66353d8cbdab0e ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
10:35:30.0125 3100 RDSessMgr - ok
10:35:30.0156 3100 [ 611bfd220305be3a85ae876ea47d4aa5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
10:35:30.0156 3100 redbook - ok
10:35:30.0187 3100 [ 127c26b5371651043450e52542099aba ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
10:35:30.0203 3100 RemoteAccess - ok
10:35:30.0312 3100 [ 06a49b7bdc36cfbf97dd90804f833369 ] RichVideo C:\Program Files\CyberLink\Shared Files\RichVideo.exe
10:35:30.0312 3100 RichVideo - ok
10:35:30.0343 3100 [ 718b3bdc0bc3c2f7d065a53d26202af9 ] RpcLocator C:\WINDOWS\system32\locator.exe
10:35:30.0343 3100 RpcLocator - ok
10:35:30.0375 3100 [ be27674d1cbc3214aec84b4336a38bbf ] RpcSs C:\WINDOWS\System32\rpcss.dll
10:35:30.0375 3100 RpcSs - ok
10:35:30.0421 3100 [ 09ab2e71e58b078038e3bfdba7ffc984 ] RSVP C:\WINDOWS\system32\rsvp.exe
10:35:30.0421 3100 RSVP - ok
10:35:30.0453 3100 [ ed0a176354487ceed65b80a7148ab739 ] SamSs C:\WINDOWS\system32\lsass.exe
10:35:30.0453 3100 SamSs - ok
10:35:30.0468 3100 [ 410046e401eb11e1e6749e9deea41d4a ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
10:35:30.0468 3100 SCardSvr - ok
10:35:30.0515 3100 [ 3ff232a7731621b8902d81d42418c93c ] Schedule C:\WINDOWS\system32\schedsvc.dll
10:35:30.0515 3100 Schedule - ok
10:35:30.0546 3100 [ 90a3935d05b494a5a39d37e71f09a677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
10:35:30.0546 3100 Secdrv - ok
10:35:30.0546 3100 [ 477e2c3cc5e4a0d635bcb0ea8dcac3c6 ] seclogon C:\WINDOWS\System32\seclogon.dll
10:35:30.0546 3100 seclogon - ok
10:35:30.0562 3100 [ a530b75c10c23c9ab28fdb6ce719e21f ] SENS C:\WINDOWS\system32\sens.dll
10:35:30.0562 3100 SENS - ok
10:35:30.0578 3100 [ 0f29512ccd6bead730039fb4bd2c85ce ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
10:35:30.0578 3100 serenum - ok
10:35:30.0578 3100 [ b842729337c9b921615c40d3c1a1af96 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
10:35:30.0593 3100 Serial - ok
10:35:30.0640 3100 [ 9d38320bb32230349379df5ddbbf7fce ] ServiceLayer C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
10:35:30.0640 3100 ServiceLayer - ok
10:35:30.0671 3100 [ 8e6b8c671615d126fdc553d1e2de5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
10:35:30.0687 3100 Sfloppy - ok
10:35:30.0718 3100 [ f58faca9621d2db01bd0927d9a0a208e ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
10:35:30.0718 3100 SharedAccess - ok
10:35:30.0750 3100 [ ee9a2b9ea968a792a053c9d1a86bf870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
10:35:30.0750 3100 ShellHWDetection - ok
10:35:30.0750 3100 Simbad - ok
10:35:30.0781 3100 [ 1ffc44d6787ec1ea9a2b1440a90fa5c1 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
10:35:30.0781 3100 SLIP - ok
10:35:30.0781 3100 Sparrow - ok
10:35:30.0828 3100 [ ab8b92451ecb048a4d1de7c3ffcb4a9f ] splitter C:\WINDOWS\system32\drivers\splitter.sys
10:35:30.0828 3100 splitter - ok
10:35:30.0859 3100 [ 60784f891563fb1b767f70117fc2428f ] Spooler C:\WINDOWS\system32\spoolsv.exe
10:35:30.0859 3100 Spooler - ok
10:35:30.0875 3100 SQLAgent$SONY_MEDIAMGR - ok
10:35:30.0921 3100 [ 94610c8653635e4459316a0050d55ce7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
10:35:30.0921 3100 sr - ok
10:35:30.0937 3100 [ 35b91147124f64ac8081a2edb9ea4dee ] srservice C:\WINDOWS\system32\srsvc.dll
10:35:30.0953 3100 srservice - ok
10:35:30.0968 3100 [ 47ddfc2f003f7f9f0592c6874962a2e7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
10:35:30.0968 3100 Srv - ok
10:35:31.0000 3100 [ becd5271dc4e3b7c3d035f790fcbc1e5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
10:35:31.0000 3100 SSDPSRV - ok
10:35:31.0015 3100 [ eaa66218cd39f5bb1b4853a78c67c787 ] ss_bbus C:\WINDOWS\system32\DRIVERS\ss_bbus.sys
10:35:31.0015 3100 ss_bbus - ok
10:35:31.0046 3100 [ 91765f99914ed8693d8bc76524f21581 ] ss_bmdfl C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys
10:35:31.0046 3100 ss_bmdfl - ok
10:35:31.0062 3100 [ 840e7b738b03c10ee91d9b7d3d6eff15 ] ss_bmdm C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys
10:35:31.0062 3100 ss_bmdm - ok
10:35:31.0078 3100 [ ed78dfad8efcdfbc89500492c4d14645 ] STI Simulator C:\WINDOWS\System32\PAStiSvc.exe
10:35:31.0078 3100 STI Simulator - ok
10:35:31.0093 3100 [ c1cdd9275f6a115bb0ae1d55d8d27ba6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
10:35:31.0093 3100 stisvc - ok
10:35:31.0109 3100 [ a9f9fd0212e572b84edb9eb661f6bc04 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
10:35:31.0125 3100 streamip - ok
10:35:31.0140 3100 [ 3941d127aef12e93addf6fe6ee027e0f ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
10:35:31.0140 3100 swenum - ok
10:35:31.0140 3100 [ 8ce882bcc6cf8a62f2b2323d95cb3d01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
10:35:31.0156 3100 swmidi - ok
10:35:31.0156 3100 SwPrv - ok
10:35:31.0156 3100 symc810 - ok
10:35:31.0156 3100 symc8xx - ok
10:35:31.0156 3100 sym_hi - ok
10:35:31.0171 3100 sym_u3 - ok
10:35:31.0203 3100 [ 8b83f3ed0f1688b4958f77cd6d2bf290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
10:35:31.0203 3100 sysaudio - ok
10:35:31.0234 3100 [ ce06f01b88ace199a1bf460cac29c110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
10:35:31.0234 3100 SysmonLog - ok
10:35:31.0250 3100 [ c2546cd7a398476f9df5614b2ae160e8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
10:35:31.0250 3100 TapiSrv - ok
10:35:31.0281 3100 [ 9aefa14bd6b182d61e3119fa5f436d3d ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
10:35:31.0296 3100 Tcpip - ok
10:35:31.0312 3100 tcpip helper - ok
10:35:31.0328 3100 [ 6471a66807f5e104e4885f5b67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
10:35:31.0328 3100 TDPIPE - ok
10:35:31.0343 3100 [ c56b6d0402371cf3700eb322ef3aaf61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
10:35:31.0343 3100 TDTCP - ok
10:35:31.0453 3100 [ 2bbb318ea9f34fdc508cea4aab98d770 ] TeamViewer7 C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
10:35:31.0468 3100 TeamViewer7 - ok
10:35:31.0500 3100 [ 88155247177638048422893737429d9e ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
10:35:31.0500 3100 TermDD - ok
10:35:31.0515 3100 [ a75dd6fc3dbee4fff5ebc9f2c28bb66e ] TermService C:\WINDOWS\System32\termsrv.dll
10:35:31.0515 3100 TermService - ok
10:35:31.0531 3100 [ ee9a2b9ea968a792a053c9d1a86bf870 ] Themes C:\WINDOWS\System32\shsvcs.dll
10:35:31.0531 3100 Themes - ok
10:35:31.0625 3100 [ 9c8c9d187d9a8960f89c38a2ec1a36a9 ] tizekdrv C:\Documents and Settings\Admin\Data aplikací\TZAC\tizek32.sys
10:35:31.0640 3100 tizekdrv - ok
10:35:31.0656 3100 [ fcb15953b866ab20516e42e38036083f ] tizeqdrv C:\Documents and Settings\Admin\Data aplikací\TZAC2\tizeq32.sys
10:35:31.0656 3100 tizeqdrv - ok
10:35:31.0671 3100 TosIde - ok
10:35:31.0687 3100 [ 38853304ccb938d30e0c4cde8d2c2a8a ] TrkWks C:\WINDOWS\system32\trkwks.dll
10:35:31.0687 3100 TrkWks - ok
10:35:31.0796 3100 [ 75e62cd25866c73c25544a22aa749ee8 ] TuneUp.UtilitiesSvc C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
10:35:31.0812 3100 TuneUp.UtilitiesSvc - ok
10:35:31.0843 3100 [ f2107c9d85ec0df116939ccce06ae697 ] TuneUpUtilitiesDrv C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys
10:35:31.0843 3100 TuneUpUtilitiesDrv - ok
10:35:31.0843 3100 [ 5787b80c2e3c5e2f56c2a233d91fa2c9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
10:35:31.0859 3100 Udfs - ok
10:35:31.0859 3100 ultra - ok
10:35:31.0890 3100 [ 402ddc88356b1bac0ee3dd1580c76a31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
10:35:31.0890 3100 Update - ok
10:35:31.0937 3100 [ 651bd90dcee5b7bdc74a2eb7c9266f9e ] upnphost C:\WINDOWS\System32\upnphost.dll
10:35:31.0937 3100 upnphost - ok
10:35:31.0953 3100 [ 20a0f6a11959e92908717d09e87d670d ] UPS C:\WINDOWS\System32\ups.exe
10:35:31.0953 3100 UPS - ok
10:35:31.0968 3100 [ 9419faac6552a51542dbba02971c841c ] usbbus C:\WINDOWS\system32\DRIVERS\lgusbbus.sys
10:35:31.0968 3100 usbbus - ok
10:35:31.0984 3100 [ 173f317ce0db8e21322e71b7e60a27e8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
10:35:31.0984 3100 usbccgp - ok
10:35:32.0000 3100 [ c0a466fa4ffec464320e159bc1bbdc0c ] UsbDiag C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys
10:35:32.0000 3100 UsbDiag - ok
10:35:32.0031 3100 [ 65dcf09d0e37d4c6b11b5b0b76d470a7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
10:35:32.0031 3100 usbehci - ok
10:35:32.0031 3100 [ 1ab3cdde553b6e064d2e754efe20285c ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
10:35:32.0031 3100 usbhub - ok
10:35:32.0078 3100 [ f74a54774a9b0afeb3c40adec68aa600 ] USBModem C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys
10:35:32.0078 3100 USBModem - ok
10:35:32.0078 3100 [ 0daecce65366ea32b162f85f07c6753b ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys
10:35:32.0078 3100 usbohci - ok
10:35:32.0109 3100 [ a717c8721046828520c9edf31288fc00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
10:35:32.0109 3100 usbprint - ok
10:35:32.0125 3100 [ a0b8cf9deb1184fbdd20784a58fa75d4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
10:35:32.0125 3100 usbscan - ok
10:35:32.0156 3100 [ a32426d9b14a089eaa1d922e0c5801a9 ] usbstor C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
10:35:32.0156 3100 usbstor - ok
10:35:32.0203 3100 [ ce114242d08480b4df08243f052a66a6 ] UxTuneUp C:\WINDOWS\System32\uxtuneup.dll
10:35:32.0203 3100 UxTuneUp - ok
10:35:32.0234 3100 [ 0d3a8fafceacd8b7625cd549757a7df1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
10:35:32.0234 3100 VgaSave - ok
10:35:32.0234 3100 ViaIde - ok
10:35:32.0312 3100 [ f964c55954bca660c785bc1816ca4f95 ] VodafoneConnectorService C:\Program Files\Vodafone\Via The Phone\VodafoneConnectorService.exe
10:35:32.0328 3100 VodafoneConnectorService - ok
10:35:32.0328 3100 [ 28a4b296b47782173c346e376cb374d1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
10:35:32.0343 3100 VolSnap - ok
10:35:32.0375 3100 [ d6ba1a63d9e00933f1cd2a885573afb2 ] VSS C:\WINDOWS\System32\vssvc.exe
10:35:32.0375 3100 VSS - ok
10:35:32.0421 3100 [ fa4e1cdba256787f2149f4aad07bc91f ] W32Time C:\WINDOWS\system32\w32time.dll
10:35:32.0421 3100 W32Time - ok
10:35:32.0437 3100 [ e20b95baedb550f32dd489265c1da1f6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
10:35:32.0437 3100 Wanarp - ok
10:35:32.0437 3100 WDICA - ok
10:35:32.0437 3100 [ 6768acf64b18196494413695f0c3a00f ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
10:35:32.0437 3100 wdmaud - ok
10:35:32.0468 3100 [ 47ae51048a82dfa1cd6b51d369f7e169 ] WebClient C:\WINDOWS\System32\webclnt.dll
10:35:32.0468 3100 WebClient - ok
10:35:32.0531 3100 [ e488332126e3b1182d2b8a0c35408ec6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
10:35:32.0531 3100 winmgmt - ok
10:35:32.0609 3100 [ 5144ae67d60ec653f97ddf3feed29e77 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
10:35:32.0640 3100 wlidsvc - ok
10:35:32.0671 3100 [ c51b4a5c05a5475708e3c81c7765b71d ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
10:35:32.0671 3100 WmdmPmSN - ok
10:35:32.0703 3100 [ c42584fd66ce9e17403aebca199f7bdb ] WmiAcpi C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
10:35:32.0703 3100 WmiAcpi - ok

[mEEEgy]

10:35:32.0734 3100 [ 23f6f03272f7e5679f1f050aed5acee6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
10:35:32.0734 3100 WmiApSrv - ok
10:35:32.0796 3100 [ 3739866d20abd42f26a7b85f9e2560af ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
10:35:32.0796 3100 WMPNetworkSvc - ok
10:35:32.0843 3100 [ dcf3e3edf5109ee8bc02fe6e1f045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
10:35:32.0859 3100 WPFFontCache_v0400 - ok
10:35:32.0890 3100 [ 6abe6e225adb5a751622a9cc3bc19ce8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
10:35:32.0890 3100 WS2IFSL - ok
10:35:32.0921 3100 [ 4c86d5faf78194995af9cc1075f65dd3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
10:35:32.0921 3100 wscsvc - ok
10:35:32.0937 3100 [ 233cdd1c06942115802eb7ce6669e099 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
10:35:32.0937 3100 WSTCODEC - ok
10:35:32.0953 3100 [ c1364564800ee9784192145324a23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
10:35:32.0968 3100 wuauserv - ok
10:35:32.0968 3100 [ f15feafffbb3644ccc80c5da584e6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
10:35:32.0968 3100 WudfPf - ok
10:35:32.0984 3100 [ 28b524262bce6de1f7ef9f510ba3985b ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
10:35:32.0984 3100 WudfRd - ok
10:35:33.0000 3100 [ 05231c04253c5bc30b26cbaae680ed89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
10:35:33.0000 3100 WudfSvc - ok
10:35:33.0031 3100 [ a27d4ba7264c0bf52f32d10405bea1d4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
10:35:33.0093 3100 WZCSVC - ok
10:35:33.0109 3100 [ eaa4bb9edb3fb10cf8979fe65e63658f ] xmlprov C:\WINDOWS\System32\xmlprov.dll
10:35:33.0125 3100 xmlprov - ok
10:35:33.0125 3100 ================ Scan global ===============================
10:35:33.0156 3100 (f36278e42c8c5df03ce17dac8231c91c) C:\WINDOWS\system32\basesrv.dll
10:35:33.0203 3100 (f3fa14a297bc687d0b51289d034033c9) C:\WINDOWS\system32\winsrv.dll
10:35:33.0203 3100 (f3fa14a297bc687d0b51289d034033c9) C:\WINDOWS\system32\winsrv.dll
10:35:33.0218 3100 (9ef697af07bb8dd82c3b02ca953a95b7) C:\WINDOWS\system32\services.exe
10:35:33.0218 3100 [Global] - ok
10:35:33.0218 3100 ================ Scan MBR ==================================
10:35:33.0234 3100 MBR (0x1B8) (413fc2a0c716421b3158746d63736515) \Device\Harddisk0\DR0
10:35:33.0656 3100 \Device\Harddisk0\DR0 - ok
10:35:33.0671 3100 ================ Scan VBR ==================================
10:35:33.0671 3100 Boot (0x1200) (f37788769a346ec874901cc22871f988) \Device\Harddisk0\DR0\Partition1
10:35:33.0671 3100 \Device\Harddisk0\DR0\Partition1 - ok
10:35:33.0671 3100 ============================================================
10:35:33.0671 3100 Scan finished
10:35:33.0671 3100 ============================================================
10:35:33.0671 0308 Detected object count: 0
10:35:33.0671 0308 Actual detected object count: 0
10:35:42.0671 0820 ============================================================
10:35:42.0671 0820 Scan started
10:35:42.0671 0820 Mode: Manual;
10:35:42.0671 0820 ============================================================
10:35:42.0859 0820 ================ Scan services =============================
10:35:42.0937 0820 Abiosdsk - ok
10:35:42.0937 0820 abp480n5 - ok
10:35:42.0937 0820 [ 4fe34f1f3126b61fcc6b2043aa8112c9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
10:35:42.0937 0820 ACPI - ok
10:35:42.0984 0820 [ afdff022a01f0b11c776f0860c3b282f ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
10:35:42.0984 0820 ACPIEC - ok
10:35:43.0031 0820 [ c1eb9968ec89fba5f3a264e2e57923ab ] Adobe LM Service C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
10:35:43.0031 0820 Adobe LM Service - ok
10:35:43.0109 0820 [ a9d3b95e8466bd58eeb8a1154654e162 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
10:35:43.0109 0820 AdobeFlashPlayerUpdateSvc - ok
10:35:43.0125 0820 adpu160m - ok
10:35:43.0140 0820 [ 8bed39e3c35d6a489438b8141717a557 ] aec C:\WINDOWS\system32\drivers\aec.sys
10:35:43.0140 0820 aec - ok
10:35:43.0187 0820 [ 1e44bc1e83d8fd2305f8d452db109cf9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
10:35:43.0187 0820 AFD - ok
10:35:43.0187 0820 Aha154x - ok
10:35:43.0187 0820 aic78u2 - ok
10:35:43.0203 0820 aic78xx - ok
10:35:43.0234 0820 [ e0a6fa244b8624d78fe5ff6f56a33bae ] Alerter C:\WINDOWS\system32\alrsvc.dll
10:35:43.0234 0820 Alerter - ok
10:35:43.0250 0820 [ 88842de939a827577bf24243699ac80a ] ALG C:\WINDOWS\System32\alg.exe
10:35:43.0250 0820 ALG - ok
10:35:43.0250 0820 AliIde - ok
10:35:43.0281 0820 [ ad8fa28d8ed0d0a689a0559085ce0f18 ] AmdLLD C:\WINDOWS\system32\DRIVERS\AmdLLD.sys
10:35:43.0281 0820 AmdLLD - ok
10:35:43.0328 0820 [ 033448d435e65c4bd72e70521fd05c76 ] AmdPPM C:\WINDOWS\system32\DRIVERS\AmdPPM.sys
10:35:43.0328 0820 AmdPPM - ok
10:35:43.0375 0820 [ 868ae6fa93c29c8a105539f3e6d5a77f ] Amfilter C:\WINDOWS\system32\DRIVERS\Amfilter.sys
10:35:43.0375 0820 Amfilter - ok
10:35:43.0375 0820 amsint - ok
10:35:43.0390 0820 [ 37646d4559ad45c96225521b44c45d01 ] Amusbprt C:\WINDOWS\system32\DRIVERS\Amusbprt.sys
10:35:43.0390 0820 Amusbprt - ok
10:35:43.0390 0820 [ b5b8a80875c1dededa8b02765642c32f ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
10:35:43.0390 0820 Arp1394 - ok
10:35:43.0390 0820 asc - ok
10:35:43.0406 0820 asc3350p - ok
10:35:43.0406 0820 asc3550 - ok
10:35:43.0484 0820 [ 776acefa0ca9df0faa51a5fb2f435705 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
10:35:43.0484 0820 aspnet_state - ok
10:35:43.0500 0820 [ b153affac761e7f5fcfa822b9c4e97bc ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
10:35:43.0500 0820 AsyncMac - ok
10:35:43.0531 0820 [ 9f3a2f5aa6875c72bf062c712cfa2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
10:35:43.0531 0820 atapi - ok
10:35:43.0531 0820 Atdisk - ok
10:35:43.0593 0820 [ 192a651df943ee391dfd2e4a123f07f6 ] Ati HotKey Poller C:\WINDOWS\system32\Ati2evxx.exe
10:35:43.0593 0820 Ati HotKey Poller - ok
10:35:43.0656 0820 [ c9bf3114b6fdb46e01ca55d0336cde88 ] ATI Smart C:\WINDOWS\system32\ati2sgag.exe
10:35:43.0656 0820 ATI Smart - ok
10:35:43.0812 0820 [ 0a8b257db810be78ac9fd1860b4ba22b ] ati2mtag C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
10:35:43.0843 0820 ati2mtag - ok
10:35:43.0890 0820 [ 591a9eabb5ef5168e435c2f18b05dd76 ] AtiHdmiService C:\WINDOWS\system32\drivers\AtiHdmi.sys
10:35:43.0890 0820 AtiHdmiService - ok
10:35:43.0906 0820 [ f0d933b42cd0594048e4d5200ae9e417 ] atksgt C:\WINDOWS\system32\DRIVERS\atksgt.sys
10:35:43.0906 0820 atksgt - ok
10:35:43.0937 0820 [ 9916c1225104ba14794209cfa8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
10:35:43.0937 0820 Atmarpc - ok
10:35:43.0984 0820 [ de31b88962a8645dba5a37b993e7b0f1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
10:35:43.0984 0820 AudioSrv - ok
10:35:44.0015 0820 [ d9f724aa26c010a217c97606b160ed68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
10:35:44.0015 0820 audstub - ok
10:35:44.0046 0820 [ da1f27d85e0d1525f6621372e7b685e9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
10:35:44.0046 0820 Beep - ok
10:35:44.0078 0820 [ 19395d092fd85ddc2d9c7729cf5a2ac8 ] BITS C:\WINDOWS\system32\qmgr.dll
10:35:44.0093 0820 BITS - ok
10:35:44.0125 0820 [ 73686fe0b2e0469f89fd2075be724704 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
10:35:44.0125 0820 Bonjour Service - ok
10:35:44.0171 0820 [ 89e739bba5f636297ea5b5f811189e06 ] Browser C:\WINDOWS\System32\browser.dll
10:35:44.0171 0820 Browser - ok
10:35:44.0187 0820 [ 90a673fc8e12a79afbed2576f6a7aaf9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
10:35:44.0187 0820 cbidf2k - ok
10:35:44.0218 0820 [ fdc06e2ada8c468ebb161624e03976cf ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
10:35:44.0218 0820 CCDECODE - ok
10:35:44.0218 0820 cd20xrnt - ok
10:35:44.0234 0820 [ c1b486a7658353d33a10cc15211a873b ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
10:35:44.0234 0820 Cdaudio - ok
10:35:44.0281 0820 [ c885b02847f5d2fd45a24e219ed93b32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
10:35:44.0281 0820 Cdfs - ok
10:35:44.0312 0820 [ 1f4260cc5b42272d71f79e570a27a4fe ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
10:35:44.0328 0820 Cdrom - ok
10:35:44.0328 0820 Changer - ok
10:35:44.0328 0820 [ e390dc1d7c461d7d56ec53402f329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
10:35:44.0328 0820 CiSvc - ok
10:35:44.0328 0820 [ 064507a8dfa8c5c7e2ffddd3e6f424fa ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
10:35:44.0328 0820 ClipSrv - ok
10:35:44.0437 0820 [ d87acaed61e417bba546ced5e7e36d9c ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:35:44.0437 0820 clr_optimization_v2.0.50727_32 - ok
10:35:44.0468 0820 [ c5a75eb48e2344abdc162bda79e16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
10:35:44.0468 0820 clr_optimization_v4.0.30319_32 - ok
10:35:44.0468 0820 CmdIde - ok
10:35:44.0484 0820 COMSysApp - ok
10:35:44.0484 0820 Cpqarray - ok
10:35:44.0484 0820 [ f3ab0933cbd166d271992f411c27ccaf ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
10:35:44.0484 0820 CryptSvc - ok
10:35:44.0484 0820 dac2w2k - ok
10:35:44.0500 0820 dac960nt - ok
10:35:44.0546 0820 [ be27674d1cbc3214aec84b4336a38bbf ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
10:35:44.0546 0820 DcomLaunch - ok
10:35:44.0562 0820 [ 1ec27a51a2f9df052bc2b4c8376c8fea ] DgiVecp C:\WINDOWS\system32\Drivers\DgiVecp.sys
10:35:44.0562 0820 DgiVecp - ok
10:35:44.0593 0820 [ 8c9a53e285ac5e6704844d0459ec85be ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
10:35:44.0593 0820 Dhcp - ok
10:35:44.0593 0820 [ 044452051f3e02e7963599fc8f4f3e25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
10:35:44.0593 0820 Disk - ok
10:35:44.0593 0820 dmadmin - ok
10:35:44.0656 0820 [ db5fd2bf5b07dc54bfcb3664ff05bd7c ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
10:35:44.0656 0820 dmboot - ok
10:35:44.0671 0820 [ fff1720af51171f32f1ead5cf71f2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
10:35:44.0671 0820 dmio - ok
10:35:44.0687 0820 [ e9317282a63ca4d188c0df5e09c6ac5f ] dmload C:\WINDOWS\system32\drivers\dmload.sys
10:35:44.0687 0820 dmload - ok
10:35:44.0687 0820 [ 2bfefe9e865655a76982f050450b9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
10:35:44.0703 0820 dmserver - ok
10:35:44.0734 0820 [ 8a208dfcf89792a484e76c40e5f50b45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
10:35:44.0734 0820 DMusic - ok
10:35:44.0750 0820 [ dfaa406bf19f4ee806a6f8d4342137f7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
10:35:44.0750 0820 Dnscache - ok
10:35:44.0765 0820 [ 4a3e2bd20157a0946751229e92eb8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
10:35:44.0765 0820 Dot3svc - ok
10:35:44.0765 0820 dpti2o - ok
10:35:44.0781 0820 [ 8f5fcff8e8848afac920905fbd9d33c8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
10:35:44.0781 0820 drmkaud - ok
10:35:44.0796 0820 [ 651554e483712b708ede864d0ca1aa73 ] DrvAgent32 C:\WINDOWS\system32\Drivers\DrvAgent32.sys
10:35:44.0796 0820 DrvAgent32 - ok
10:35:44.0828 0820 [ fb38473835476a6fb272215a1d972af9 ] dtsoftbus01 C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys
10:35:44.0828 0820 dtsoftbus01 - ok
10:35:44.0828 0820 dwshd - ok
10:35:44.0828 0820 EagleNT - ok
10:35:44.0843 0820 [ 0887d9c2be8d940778cad1e3b85f2a41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
10:35:44.0859 0820 EapHost - ok
10:35:44.0859 0820 [ 16ebd8bf1d5090923694cc972c7ce1b4 ] ENTECH C:\WINDOWS\system32\DRIVERS\ENTECH.sys
10:35:44.0859 0820 ENTECH - ok
10:35:44.0890 0820 [ a2a4912798f2be706abadd3d30800d16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
10:35:44.0890 0820 ERSvc - ok
10:35:44.0937 0820 [ 3f3126a8f73e92f8eb369d54977d9e15 ] ESLvnic1 C:\WINDOWS\system32\DRIVERS\ESLvnic.sys
10:35:44.0937 0820 ESLvnic1 - ok
10:35:44.0968 0820 [ 9ef697af07bb8dd82c3b02ca953a95b7 ] Eventlog C:\WINDOWS\system32\services.exe
10:35:44.0968 0820 Eventlog - ok
10:35:45.0015 0820 [ a371f11ef07653591c8de26afb13ce7f ] EventSystem C:\WINDOWS\system32\es.dll
10:35:45.0015 0820 EventSystem - ok
10:35:45.0062 0820 [ 38d332a6d56af32635675f132548343e ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
10:35:45.0062 0820 Fastfat - ok
10:35:45.0109 0820 [ ee9a2b9ea968a792a053c9d1a86bf870 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
10:35:45.0109 0820 FastUserSwitchingCompatibility - ok
10:35:45.0109 0820 [ 92cdd60b6730b9f50f6a1a0c1f8cdc81 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys
10:35:45.0109 0820 Fdc - ok
10:35:45.0125 0820 [ ac366695a0796560aa37215ad5762aaf ] Fips C:\WINDOWS\system32\drivers\Fips.sys
10:35:45.0125 0820 Fips - ok
10:35:45.0187 0820 [ 227846995afeefa70d328bf5334a86a5 ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
10:35:45.0187 0820 FLEXnet Licensing Service - ok
10:35:45.0187 0820 [ 9d27e7b80bfcdf1cdd9b555862d5e7f0 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys
10:35:45.0187 0820 Flpydisk - ok
10:35:45.0234 0820 [ b2cf4b0786f8212cb92ed2b50c6db6b0 ] FltMgr C:\WINDOWS\system32\DRIVERS\fltMgr.sys
10:35:45.0234 0820 FltMgr - ok
10:35:45.0312 0820 [ 8ba7c024070f2b7fdd98ed8a4ba41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
10:35:45.0312 0820 FontCache3.0.0.0 - ok
10:35:45.0328 0820 [ 283195c5301eadbcf56dee637573ed12 ] ForceWare Intelligent Application Manager (IAM) C:\Program Files\bin32\nSvcAppFlt.exe
10:35:45.0328 0820 ForceWare Intelligent Application Manager (IAM) - ok
10:35:45.0390 0820 [ 790a4ca68f44be35967b3df61f3e4675 ] FsUsbExDisk C:\WINDOWS\system32\FsUsbExDisk.SYS
10:35:45.0390 0820 FsUsbExDisk - ok
10:35:45.0390 0820 [ 3e1e2bd4f39b0e2b7dc4f4d2bcc2779a ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
10:35:45.0390 0820 Fs_Rec - ok
10:35:45.0390 0820 [ 4e664d8541db4a66b73a24257e322e1f ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
10:35:45.0390 0820 Ftdisk - ok
10:35:45.0453 0820 GGSAFERDriver - ok
10:35:45.0484 0820 [ 0a02c63c8b144bd8c86b103dee7c86a2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
10:35:45.0484 0820 Gpc - ok
10:35:45.0546 0820 [ e859ca020ed61899f3c74a8d0032d05c ] Guard.Mail.ru C:\Program Files\Guard-ICQ\GuardICQ.exe
10:35:45.0562 0820 Guard.Mail.ru - ok
10:35:45.0593 0820 [ 833051c6c6c42117191935f734cfbd97 ] hamachi C:\WINDOWS\system32\DRIVERS\hamachi.sys
10:35:45.0593 0820 hamachi - ok
10:35:45.0640 0820 [ f31d7f8a7699575dbb3b3a3ab4aa6216 ] Hamachi2Svc C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
10:35:45.0640 0820 Hamachi2Svc - ok
10:35:45.0687 0820 [ 573c7d0a32852b48f3058cfd8026f511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
10:35:45.0687 0820 HDAudBus - ok
10:35:45.0765 0820 [ fcfe31fb75f8a6295b6b0af87a626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
10:35:45.0765 0820 helpsvc - ok
10:35:45.0765 0820 [ 00e25ee90166b3e1be6e74aebf858306 ] HidServ C:\WINDOWS\System32\hidserv.dll
10:35:45.0765 0820 HidServ - ok
10:35:45.0796 0820 [ ccf82c5ec8a7326c3066de870c06daf1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
10:35:45.0796 0820 hidusb - ok
10:35:45.0843 0820 [ 7a6b320928f86bc851530d63c82965d9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
10:35:45.0843 0820 hkmsvc - ok
10:35:45.0843 0820 hpn - ok
10:35:45.0875 0820 [ f80a415ef82cd06ffaf0d971528ead38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
10:35:45.0875 0820 HTTP - ok
10:35:45.0906 0820 [ 58fe2f2da3bc5573f4a35b3760d3125f ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
10:35:45.0906 0820 HTTPFilter - ok
10:35:45.0921 0820 i2omgmt - ok
10:35:45.0921 0820 i2omp - ok
10:35:45.0937 0820 [ c528e27945367191e7bae364930b6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
10:35:45.0953 0820 i8042prt - ok
10:35:46.0046 0820 [ 6f95324909b502e2651442c1548ab12f ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
10:35:46.0046 0820 IDriverT - ok
10:35:46.0109 0820 [ c01ac32dc5c03076cfb852cb5da5229c ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
10:35:46.0109 0820 idsvc - ok
10:35:46.0156 0820 [ 083a052659f5310dd8b6a6cb05edcf8e ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
10:35:46.0156 0820 Imapi - ok
10:35:46.0156 0820 [ f7b93aafad33b2320954c17e26c8d361 ] ImapiService C:\WINDOWS\system32\imapi.exe
10:35:46.0156 0820 ImapiService - ok
10:35:46.0156 0820 ini910u - ok
10:35:46.0281 0820 [ 19afbb8427ce65042599555e578170df ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
10:35:46.0312 0820 IntcAzAudAddService - ok
10:35:46.0312 0820 IntelIde - ok
10:35:46.0312 0820 [ 3bb22519a194418d5fec05d800a19ad0 ] Ip6Fw C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
10:35:46.0312 0820 Ip6Fw - ok
10:35:46.0343 0820 [ 731f22ba402ee4b62748adaf6363c182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
10:35:46.0343 0820 IpFilterDriver - ok
10:35:46.0343 0820 [ b87ab476dcf76e72010632b5550955f5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
10:35:46.0343 0820 IpInIp - ok
10:35:46.0343 0820 [ cc748ea12c6effde940ee98098bf96bb ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
10:35:46.0343 0820 IpNat - ok
10:35:46.0343 0820 [ 23c74d75e36e7158768dd63d92789a91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
10:35:46.0343 0820 IPSec - ok
10:35:46.0359 0820 [ c93c9ff7b04d772627a3646d89f7bf89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
10:35:46.0359 0820 IRENUM - ok
10:35:46.0375 0820 [ cc9f8a2d60aed1a51a3ac34c59b987ae ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
10:35:46.0375 0820 isapnp - ok
10:35:46.0468 0820 [ 0a5709543986843d37a92290b7838340 ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
10:35:46.0468 0820 JavaQuickStarterService - ok
10:35:46.0515 0820 [ 1b6162fe7f66b1a71a4b70f941c4aa9b ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
10:35:46.0515 0820 Kbdclass - ok
10:35:46.0531 0820 [ 86c8f23616c6c6e5b2776901c17b945b ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
10:35:46.0531 0820 kbdhid - ok
10:35:46.0562 0820 [ 692bcf44383d056aed41b045a323d378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
10:35:46.0562 0820 kmixer - ok
10:35:46.0578 0820 [ b467646c54cc746128904e1654c750c1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
10:35:46.0578 0820 KSecDD - ok
10:35:46.0593 0820 [ 3428e8f86f8add36b42fb23542c7b3e4 ] LanmanServer C:\WINDOWS\System32\srvsvc.dll
10:35:46.0593 0820 LanmanServer - ok
10:35:46.0625 0820 [ 936c1d110232d23b621cb0196e4f80f0 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
10:35:46.0625 0820 lanmanworkstation - ok
10:35:46.0640 0820 lbrtfdc - ok
10:35:46.0656 0820 [ d116aa2a29d463aa07acf47c65949112 ] LG SCSI Commander C:\WINDOWS\system32\LGAutorunService.exe
10:35:46.0656 0820 LG SCSI Commander - ok
10:35:46.0687 0820 [ f8a7212d0864ef5e9185fb95e6623f4d ] lirsgt C:\WINDOWS\system32\DRIVERS\lirsgt.sys
10:35:46.0687 0820 lirsgt - ok
10:35:46.0734 0820 [ 0ab159f536e3e8f7f07113702a07cca5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
10:35:46.0734 0820 LmHosts - ok
10:35:46.0781 0820 [ 4f74184920b2d6e33024409b4c5c57c1 ] McciCMService C:\Program Files\Common Files\Motive\McciCMService.exe
10:35:46.0781 0820 McciCMService - ok
10:35:46.0812 0820 [ 221cd1c815b8a6b79389c3f5d1018de8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
10:35:46.0812 0820 Messenger - ok
10:35:46.0890 0820 [ 123271bd5237ab991dc5c21fdf8835eb ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
10:35:46.0890 0820 Microsoft Office Groove Audit Service - ok
10:35:46.0921 0820 Microsoft SharePoint Workspace Audit Service - ok
10:35:46.0984 0820 [ 4ae068242760a1fb6e1a44bf4e16afa6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
10:35:46.0984 0820 mnmdd - ok
10:35:47.0031 0820 [ 9a57d046f88f4b69751b11fd40088a61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
10:35:47.0031 0820 mnmsrvc - ok
10:35:47.0046 0820 [ 44032b0c6d9954d3fd26438330b99ee7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
10:35:47.0046 0820 Modem - ok
10:35:47.0078 0820 [ 4cb582831dbde63ce43b45d771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
10:35:47.0078 0820 Mouclass - ok
10:35:47.0078 0820 [ bb269eba740737ab749b214d568b6812 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
10:35:47.0078 0820 mouhid - ok
10:35:47.0093 0820 [ a80b9a0bad1b73637dbcbba7df72d3fd ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
10:35:47.0093 0820 MountMgr - ok
10:35:47.0125 0820 [ d0ac7ac40fff21056b1a3401361958ca ] MouseCap C:\WINDOWS\system32\Drivers\MouseCap.sys
10:35:47.0125 0820 MouseCap - ok
10:35:47.0140 0820 [ 15d5398eed42c2504bb3d4fc875c15d1 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
10:35:47.0140 0820 MozillaMaintenance - ok
10:35:47.0140 0820 mraid35x - ok
10:35:47.0171 0820 [ 9bd4dcb5412921864a7aacdedfbd1923 ] MREMP50 C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS
10:35:47.0171 0820 MREMP50 - ok
10:35:47.0187 0820 MREMP50a64 - ok
10:35:47.0187 0820 MREMPR5 - ok
10:35:47.0187 0820 MRENDIS5 - ok
10:35:47.0203 0820 [ 07c02c892e8e1a72d6bf35004f0e9c5e ] MRESP50 C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS
10:35:47.0203 0820 MRESP50 - ok
10:35:47.0203 0820 MRESP50a64 - ok
10:35:47.0203 0820 [ 11d42bb6206f33fbb3ba0288d3ef81bd ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
10:35:47.0203 0820 MRxDAV - ok
10:35:47.0218 0820 [ 7d304a5eb4344ebeeab53a2fe3ffb9f0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
10:35:47.0218 0820 MRxSmb - ok
10:35:47.0234 0820 [ 6db4d1521caba9a5ffab54ade0ae867d ] MSDTC C:\WINDOWS\system32\msdtc.exe
10:35:47.0234 0820 MSDTC - ok
10:35:47.0265 0820 [ c941ea2454ba8350021d774daf0f1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
10:35:47.0265 0820 Msfs - ok
10:35:47.0265 0820 MSIServer - ok
10:35:47.0296 0820 [ d1575e71568f4d9e14ca56b7b0453bf1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
10:35:47.0296 0820 MSKSSRV - ok
10:35:47.0312 0820 [ 325bb26842fc7ccc1fcce2c457317f3e ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
10:35:47.0312 0820 MSPCLOCK - ok
10:35:47.0328 0820 [ bad59648ba099da4a17680b39730cb3d ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
10:35:47.0328 0820 MSPQM - ok
10:35:47.0343 0820 [ af5f4f3f14a8ea2c26de30f7a1e17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
10:35:47.0343 0820 mssmbios - ok
10:35:47.0453 0820 MSSQL$SONY_MEDIAMGR - ok
10:35:47.0484 0820 [ cb7524c21727404bd3140dca32deb7de ] MSSQLServerADHelper C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe
10:35:47.0484 0820 MSSQLServerADHelper - ok
10:35:47.0500 0820 [ d5059366b361f0e1124753447af08aa2 ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
10:35:47.0500 0820 MSTEE - ok
10:35:47.0531 0820 [ d48659bb24c48345d926ecb45c1ebdf5 ] MTsensor C:\WINDOWS\system32\DRIVERS\ASACPI.sys
10:35:47.0531 0820 MTsensor - ok
10:35:47.0546 0820 [ de6a75f5c270e756c5508d94b6cf68f5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
10:35:47.0562 0820 Mup - ok
10:35:47.0562 0820 [ ac31b352ce5e92704056d409834beb74 ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
10:35:47.0562 0820 NABTSFEC - ok
10:35:47.0593 0820 [ 6ea362e9db03d44f6b996f4d8be237e9 ] napagent C:\WINDOWS\System32\qagentrt.dll
10:35:47.0593 0820 napagent - ok
10:35:47.0625 0820 [ 1df7f42665c94b825322fae71721130d ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
10:35:47.0625 0820 NDIS - ok
10:35:47.0656 0820 [ abd7629cf2796250f315c1dd0b6cf7a0 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
10:35:47.0656 0820 NdisIP - ok
10:35:47.0656 0820 [ 0109c4f3850dfbab279542515386ae22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
10:35:47.0656 0820 NdisTapi - ok
10:35:47.0687 0820 [ f927a4434c5028758a842943ef1a3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
10:35:47.0687 0820 Ndisuio - ok
10:35:47.0687 0820 [ edc1531a49c80614b2cfda43ca8659ab ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
10:35:47.0687 0820 NdisWan - ok
10:35:47.0734 0820 [ 9282bd12dfb069d3889eb3fcc1000a9b ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
10:35:47.0734 0820 NDProxy - ok
10:35:47.0750 0820 [ 5d81cf9a2f1a3a756b66cf684911cdf0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
10:35:47.0750 0820 NetBIOS - ok
10:35:47.0750 0820 [ 74b2b2f5bea5e9a3dc021d685551bd3d ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
10:35:47.0750 0820 NetBT - ok
10:35:47.0781 0820 [ 933de774986ec85e48210c44ab431de6 ] NetDDE C:\WINDOWS\system32\netdde.exe
10:35:47.0781 0820 NetDDE - ok
10:35:47.0781 0820 [ 933de774986ec85e48210c44ab431de6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
10:35:47.0781 0820 NetDDEdsdm - ok
10:35:47.0796 0820 [ ed0a176354487ceed65b80a7148ab739 ] Netlogon C:\WINDOWS\system32\lsass.exe
10:35:47.0796 0820 Netlogon - ok
10:35:47.0812 0820 [ 72e1e9e2977be08bdeedb6d8fd9d4d40 ] Netman C:\WINDOWS\System32\netman.dll
10:35:47.0812 0820 Netman - ok
10:35:47.0843 0820 [ d22cd77d4f0d63d1169bb35911bff12d ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:35:47.0843 0820 NetTcpPortSharing - ok
10:35:47.0875 0820 [ e9e47cfb2d461fa0fc75b7a74c6383ea ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
10:35:47.0875 0820 NIC1394 - ok
10:35:47.0921 0820 [ 39ee7c3bfbc64ba87cc8cf67386e814c ] Nla C:\WINDOWS\System32\mswsock.dll
10:35:47.0921 0820 Nla - ok
10:35:47.0968 0820 [ 193fa51dddd0bffded1c340f0434999a ] NMIndexingService C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
10:35:47.0968 0820 NMIndexingService - ok
10:35:48.0000 0820 [ b9730495e0cf674680121e34bd95a73b ] npf C:\WINDOWS\system32\drivers\npf.sys
10:35:48.0000 0820 npf - ok
10:35:48.0015 0820 [ 3182d64ae053d6fb034f44b6def8034a ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
10:35:48.0015 0820 Npfs - ok
10:35:48.0078 0820 [ 3c7bd1ec817d300a8826d49c406d5894 ] nSvcIp C:\Program Files\bin32\nSvcIp.exe
10:35:48.0078 0820 nSvcIp - ok
10:35:48.0093 0820 [ 78a08dd6a8d65e697c18e1db01c5cdca ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
10:35:48.0093 0820 Ntfs - ok
10:35:48.0109 0820 [ ed0a176354487ceed65b80a7148ab739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
10:35:48.0109 0820 NtLmSsp - ok
10:35:48.0125 0820 [ 023dd70573d644f3d9c8b1258a7bfd08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
10:35:48.0140 0820 NtmsSvc - ok
10:35:48.0156 0820 [ 73c1e1f395918bc2c6dd67af7591a3ad ] Null C:\WINDOWS\system32\drivers\Null.sys
10:35:48.0156 0820 Null - ok
10:35:48.0203 0820 [ 45ba510db13a0496db1cd16826519e03 ] NVENETFD C:\WINDOWS\system32\DRIVERS\NVENETFD.sys
10:35:48.0203 0820 NVENETFD - ok
10:35:48.0234 0820 [ 0ba72d1d0b83e1e5500c5dc4c7bafc32 ] NVHDA C:\WINDOWS\system32\drivers\nvhda32.sys
10:35:48.0234 0820 NVHDA - ok
10:35:48.0250 0820 [ 57cbdb934fb1afb7e03b413d151a6152 ] nvnetbus C:\WINDOWS\system32\DRIVERS\nvnetbus.sys
10:35:48.0250 0820 nvnetbus - ok
10:35:48.0250 0820 [ c44ee36dd84fa95eb81d79c374756003 ] nvsmu C:\WINDOWS\system32\DRIVERS\nvsmu.sys
10:35:48.0250 0820 nvsmu - ok
10:35:48.0281 0820 [ b305f3fad35083837ef46a0bbce2fc57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
10:35:48.0281 0820 NwlnkFlt - ok
10:35:48.0281 0820 [ c99b3415198d1aab7227f2c88fd664b9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
10:35:48.0281 0820 NwlnkFwd - ok
10:35:48.0390 0820 [ 785f487a64950f3cb8e9f16253ba3b7b ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
10:35:48.0390 0820 odserv - ok
10:35:48.0390 0820 [ ca33832df41afb202ee7aeb05145922f ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
10:35:48.0390 0820 ohci1394 - ok
10:35:48.0421 0820 [ 9d10f99a6712e28f8acd5641e3a7ea6b ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
10:35:48.0421 0820 ose - ok
10:35:48.0562 0820 [ 358a9cca612c68eb2f07ddad4ce1d8d7 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
10:35:48.0578 0820 osppsvc - ok
10:35:48.0593 0820 [ 46f8db73b4a53e543f8e371dc7c75bae ] Parport C:\WINDOWS\system32\drivers\Parport.sys
10:35:48.0593 0820 Parport - ok
10:35:48.0625 0820 [ beb3ba25197665d82ec7065b724171c6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
10:35:48.0625 0820 PartMgr - ok
10:35:48.0640 0820 [ 1fae19d0457176318bba4a8795656ebc ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
10:35:48.0640 0820 ParVdm - ok
10:35:48.0656 0820 [ 175cc28dcf819f78caa3fbd44ad9e52a ] pccsmcfd C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
10:35:48.0656 0820 pccsmcfd - ok
10:35:48.0671 0820 [ 6ce351d149cb4befc702951e471e1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
10:35:48.0671 0820 PCI - ok
10:35:48.0671 0820 PCIDump - ok
10:35:48.0687 0820 [ 2da4ec85e0ea7a45c6b2a05820492d5a ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
10:35:48.0687 0820 PCIIde - ok
10:35:48.0703 0820 [ 4fc31e6c19a5ce5198b1abff94cae758 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
10:35:48.0703 0820 Pcmcia - ok
10:35:48.0718 0820 [ 5b6c11de7e839c05248ced8825470fef ] pcouffin C:\WINDOWS\system32\Drivers\pcouffin.sys
10:35:48.0718 0820 pcouffin - ok
10:35:48.0734 0820 PDCOMP - ok
10:35:48.0734 0820 PDFRAME - ok
10:35:48.0734 0820 PDRELI - ok
10:35:48.0734 0820 PDRFRAME - ok
10:35:48.0734 0820 perc2 - ok
10:35:48.0750 0820 perc2hib - ok
10:35:48.0781 0820 [ 9ef697af07bb8dd82c3b02ca953a95b7 ] PlugPlay C:\WINDOWS\system32\services.exe
10:35:48.0781 0820 PlugPlay - ok
10:35:48.0828 0820 [ 205e1b699fd3f2f9b036eea2ec30c620 ] PnkBstrA C:\WINDOWS\system32\PnkBstrA.exe
10:35:48.0828 0820 PnkBstrA - ok
10:35:48.0843 0820 [ ed0a176354487ceed65b80a7148ab739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
10:35:48.0843 0820 PolicyAgent - ok
10:35:48.0843 0820 [ efeec01b1d3cf84f16ddd24d9d9d8f99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
10:35:48.0843 0820 PptpMiniport - ok
10:35:48.0859 0820 [ 7eb15dce4ec3a0220bd796a15c18186e ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys
10:35:48.0859 0820 Processor - ok
10:35:48.0859 0820 [ ed0a176354487ceed65b80a7148ab739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
10:35:48.0859 0820 ProtectedStorage - ok
10:35:48.0859 0820 [ 09298ec810b07e5d582cb3a3f9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
10:35:48.0859 0820 PSched - ok
10:35:48.0859 0820 [ 80d317bd1c3dbc5d4fe7b1678c60cadd ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
10:35:48.0875 0820 Ptilink - ok
10:35:48.0890 0820 [ e42e3433dbb4cffe8fdd91eab29aea8e ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
10:35:48.0890 0820 PxHelp20 - ok
10:35:48.0890 0820 ql1080 - ok
10:35:48.0890 0820 Ql10wnt - ok
10:35:48.0890 0820 ql12160 - ok
10:35:48.0890 0820 ql1240 - ok
10:35:48.0906 0820 ql1280 - ok
10:35:48.0921 0820 [ fe0d99d6f31e4fad8159f690d68ded9c ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
10:35:48.0937 0820 RasAcd - ok
10:35:48.0953 0820 [ 2b5e44ea009f2f374b980e1e9a70635d ] RasAuto C:\WINDOWS\System32\rasauto.dll
10:35:48.0953 0820 RasAuto - ok
10:35:48.0953 0820 [ 11b4a627bc9614b885c4969bfa5ff8a6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
10:35:48.0953 0820 Rasl2tp - ok
10:35:48.0968 0820 [ d57554c664b64604bd1ee13ea2c07e77 ] RasMan C:\WINDOWS\System32\rasmans.dll
10:35:48.0968 0820 RasMan - ok
10:35:48.0968 0820 [ 5bc962f2654137c9909c3d4603587dee ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
10:35:48.0968 0820 RasPppoe - ok
10:35:48.0968 0820 [ fdbb1d60066fcfbb7452fd8f9829b242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
10:35:48.0968 0820 Raspti - ok
10:35:48.0984 0820 [ a1e70b8354d52aeb3cb49568c7c0a2ff ] Razerlow C:\WINDOWS\system32\Drivers\Razerlow.sys
10:35:48.0984 0820 Razerlow - ok
10:35:49.0015 0820 [ 7ad224ad1a1437fe28d89cf22b17780a ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
10:35:49.0015 0820 Rdbss - ok
10:35:49.0015 0820 [ 4912d5b403614ce99c28420f75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
10:35:49.0015 0820 RDPCDD - ok
10:35:49.0046 0820 [ 43af5212bd8fb5ba6eed9754358bd8f7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
10:35:49.0046 0820 RDPWD - ok
10:35:49.0078 0820 [ c0d9d9711cb74ee9bc66353d8cbdab0e ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
10:35:49.0078 0820 RDSessMgr - ok
10:35:49.0109 0820 [ 611bfd220305be3a85ae876ea47d4aa5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
10:35:49.0109 0820 redbook - ok
10:35:49.0140 0820 [ 127c26b5371651043450e52542099aba ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
10:35:49.0140 0820 RemoteAccess - ok
10:35:49.0203 0820 [ 06a49b7bdc36cfbf97dd90804f833369 ] RichVideo C:\Program Files\CyberLink\Shared Files\RichVideo.exe
10:35:49.0218 0820 RichVideo - ok
10:35:49.0234 0820 [ 718b3bdc0bc3c2f7d065a53d26202af9 ] RpcLocator C:\WINDOWS\system32\locator.exe
10:35:49.0234 0820 RpcLocator - ok
10:35:49.0265 0820 [ be27674d1cbc3214aec84b4336a38bbf ] RpcSs C:\WINDOWS\System32\rpcss.dll
10:35:49.0265 0820 RpcSs - ok
10:35:49.0312 0820 [ 09ab2e71e58b078038e3bfdba7ffc984 ] RSVP C:\WINDOWS\system32\rsvp.exe
10:35:49.0312 0820 RSVP - ok
10:35:49.0328 0820 [ ed0a176354487ceed65b80a7148ab739 ] SamSs C:\WINDOWS\system32\lsass.exe
10:35:49.0328 0820 SamSs - ok
10:35:49.0343 0820 [ 410046e401eb11e1e6749e9deea41d4a ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
10:35:49.0359 0820 SCardSvr - ok
10:35:49.0390 0820 [ 3ff232a7731621b8902d81d42418c93c ] Schedule C:\WINDOWS\system32\schedsvc.dll
10:35:49.0390 0820 Schedule - ok
10:35:49.0421 0820 [ 90a3935d05b494a5a39d37e71f09a677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
10:35:49.0421 0820 Secdrv - ok
10:35:49.0421 0820 [ 477e2c3cc5e4a0d635bcb0ea8dcac3c6 ] seclogon C:\WINDOWS\System32\seclogon.dll
10:35:49.0421 0820 seclogon - ok
10:35:49.0421 0820 [ a530b75c10c23c9ab28fdb6ce719e21f ] SENS C:\WINDOWS\system32\sens.dll
10:35:49.0421 0820 SENS - ok
10:35:49.0453 0820 [ 0f29512ccd6bead730039fb4bd2c85ce ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
10:35:49.0453 0820 serenum - ok
10:35:49.0453 0820 [ b842729337c9b921615c40d3c1a1af96 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
10:35:49.0453 0820 Serial - ok
10:35:49.0515 0820 [ 9d38320bb32230349379df5ddbbf7fce ] ServiceLayer C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
10:35:49.0515 0820 ServiceLayer - ok
10:35:49.0546 0820 [ 8e6b8c671615d126fdc553d1e2de5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
10:35:49.0546 0820 Sfloppy - ok
10:35:49.0578 0820 [ f58faca9621d2db01bd0927d9a0a208e ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
10:35:49.0578 0820 SharedAccess - ok
10:35:49.0609 0820 [ ee9a2b9ea968a792a053c9d1a86bf870 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
10:35:49.0609 0820 ShellHWDetection - ok
10:35:49.0609 0820 Simbad - ok
10:35:49.0640 0820 [ 1ffc44d6787ec1ea9a2b1440a90fa5c1 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
10:35:49.0640 0820 SLIP - ok
10:35:49.0656 0820 Sparrow - ok
10:35:49.0671 0820 [ ab8b92451ecb048a4d1de7c3ffcb4a9f ] splitter C:\WINDOWS\system32\drivers\splitter.sys
10:35:49.0671 0820 splitter - ok
10:35:49.0718 0820 [ 60784f891563fb1b767f70117fc2428f ] Spooler C:\WINDOWS\system32\spoolsv.exe
10:35:49.0718 0820 Spooler - ok
10:35:49.0718 0820 SQLAgent$SONY_MEDIAMGR - ok
10:35:49.0765 0820 [ 94610c8653635e4459316a0050d55ce7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
10:35:49.0765 0820 sr - ok
10:35:49.0781 0820 [ 35b91147124f64ac8081a2edb9ea4dee ] srservice C:\WINDOWS\system32\srsvc.dll
10:35:49.0781 0820 srservice - ok
10:35:49.0812 0820 [ 47ddfc2f003f7f9f0592c6874962a2e7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
10:35:49.0812 0820 Srv - ok
10:35:49.0828 0820 [ becd5271dc4e3b7c3d035f790fcbc1e5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
10:35:49.0828 0820 SSDPSRV - ok
10:35:49.0843 0820 [ eaa66218cd39f5bb1b4853a78c67c787 ] ss_bbus C:\WINDOWS\system32\DRIVERS\ss_bbus.sys
10:35:49.0859 0820 ss_bbus - ok
10:35:49.0875 0820 [ 91765f99914ed8693d8bc76524f21581 ] ss_bmdfl C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys
10:35:49.0875 0820 ss_bmdfl - ok
10:35:49.0890 0820 [ 840e7b738b03c10ee91d9b7d3d6eff15 ] ss_bmdm C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys
10:35:49.0890 0820 ss_bmdm - ok
10:35:49.0906 0820 [ ed78dfad8efcdfbc89500492c4d14645 ] STI Simulator C:\WINDOWS\System32\PAStiSvc.exe
10:35:49.0906 0820 STI Simulator - ok
10:35:49.0921 0820 [ c1cdd9275f6a115bb0ae1d55d8d27ba6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
10:35:49.0921 0820 stisvc - ok
10:35:49.0937 0820 [ a9f9fd0212e572b84edb9eb661f6bc04 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
10:35:49.0937 0820 streamip - ok
10:35:49.0953 0820 [ 3941d127aef12e93addf6fe6ee027e0f ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
10:35:49.0953 0820 swenum - ok
10:35:49.0968 0820 [ 8ce882bcc6cf8a62f2b2323d95cb3d01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
10:35:49.0968 0820 swmidi - ok
10:35:49.0968 0820 SwPrv - ok
10:35:49.0968 0820 symc810 - ok
10:35:49.0984 0820 symc8xx - ok
10:35:49.0984 0820 sym_hi - ok
10:35:49.0984 0820 sym_u3 - ok
10:35:50.0000 0820 [ 8b83f3ed0f1688b4958f77cd6d2bf290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
10:35:50.0000 0820 sysaudio - ok
10:35:50.0031 0820 [ ce06f01b88ace199a1bf460cac29c110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
10:35:50.0031 0820 SysmonLog - ok
10:35:50.0046 0820 [ c2546cd7a398476f9df5614b2ae160e8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
10:35:50.0046 0820 TapiSrv - ok
10:35:50.0078 0820 [ 9aefa14bd6b182d61e3119fa5f436d3d ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
10:35:50.0078 0820 Tcpip - ok
10:35:50.0109 0820 tcpip helper - ok
10:35:50.0125 0820 [ 6471a66807f5e104e4885f5b67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
10:35:50.0125 0820 TDPIPE - ok
10:35:50.0140 0820 [ c56b6d0402371cf3700eb322ef3aaf61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
10:35:50.0140 0820 TDTCP - ok
10:35:50.0250 0820 [ 2bbb318ea9f34fdc508cea4aab98d770 ] TeamViewer7 C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
10:35:50.0265 0820 TeamViewer7 - ok
10:35:50.0312 0820 [ 88155247177638048422893737429d9e ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
10:35:50.0312 0820 TermDD - ok
10:35:50.0328 0820 [ a75dd6fc3dbee4fff5ebc9f2c28bb66e ] TermService C:\WINDOWS\System32\termsrv.dll
10:35:50.0328 0820 TermService - ok
10:35:50.0359 0820 [ ee9a2b9ea968a792a053c9d1a86bf870 ] Themes C:\WINDOWS\System32\shsvcs.dll
10:35:50.0359 0820 Themes - ok
10:35:50.0453 0820 [ 9c8c9d187d9a8960f89c38a2ec1a36a9 ] tizekdrv C:\Documents and Settings\Admin\Data aplikací\TZAC\tizek32.sys
10:35:50.0453 0820 tizekdrv - ok
10:35:50.0484 0820 [ fcb15953b866ab20516e42e38036083f ] tizeqdrv C:\Documents and Settings\Admin\Data aplikací\TZAC2\tizeq32.sys
10:35:50.0484 0820 tizeqdrv - ok
10:35:50.0484 0820 TosIde - ok
10:35:50.0515 0820 [ 38853304ccb938d30e0c4cde8d2c2a8a ] TrkWks C:\WINDOWS\system32\trkwks.dll
10:35:50.0515 0820 TrkWks - ok
10:35:50.0609 0820 [ 75e62cd25866c73c25544a22aa749ee8 ] TuneUp.UtilitiesSvc C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
10:35:50.0625 0820 TuneUp.UtilitiesSvc - ok
10:35:50.0656 0820 [ f2107c9d85ec0df116939ccce06ae697 ] TuneUpUtilitiesDrv C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys
10:35:50.0656 0820 TuneUpUtilitiesDrv - ok
10:35:50.0671 0820 [ 5787b80c2e3c5e2f56c2a233d91fa2c9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
10:35:50.0671 0820 Udfs - ok
10:35:50.0671 0820 ultra - ok
10:35:50.0703 0820 [ 402ddc88356b1bac0ee3dd1580c76a31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
10:35:50.0703 0820 Update - ok
10:35:50.0734 0820 [ 651bd90dcee5b7bdc74a2eb7c9266f9e ] upnphost C:\WINDOWS\System32\upnphost.dll
10:35:50.0734 0820 upnphost - ok
10:35:50.0734 0820 [ 20a0f6a11959e92908717d09e87d670d ] UPS C:\WINDOWS\System32\ups.exe
10:35:50.0734 0820 UPS - ok
10:35:50.0765 0820 [ 9419faac6552a51542dbba02971c841c ] usbbus C:\WINDOWS\system32\DRIVERS\lgusbbus.sys
10:35:50.0765 0820 usbbus - ok
10:35:50.0781 0820 [ 173f317ce0db8e21322e71b7e60a27e8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
10:35:50.0781 0820 usbccgp - ok
10:35:50.0796 0820 [ c0a466fa4ffec464320e159bc1bbdc0c ] UsbDiag C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys
10:35:50.0796 0820 UsbDiag - ok
10:35:50.0812 0820 [ 65dcf09d0e37d4c6b11b5b0b76d470a7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
10:35:50.0812 0820 usbehci - ok
10:35:50.0828 0820 [ 1ab3cdde553b6e064d2e754efe20285c ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
10:35:50.0828 0820 usbhub - ok
10:35:50.0859 0820 [ f74a54774a9b0afeb3c40adec68aa600 ] USBModem C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys
10:35:50.0859 0820 USBModem - ok
10:35:50.0875 0820 [ 0daecce65366ea32b162f85f07c6753b ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys
10:35:50.0875 0820 usbohci - ok
10:35:50.0890 0820 [ a717c8721046828520c9edf31288fc00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
10:35:50.0890 0820 usbprint - ok
10:35:50.0906 0820 [ a0b8cf9deb1184fbdd20784a58fa75d4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
10:35:50.0906 0820 usbscan - ok
10:35:50.0937 0820 [ a32426d9b14a089eaa1d922e0c5801a9 ] usbstor C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
10:35:50.0937 0820 usbstor - ok
10:35:50.0984 0820 [ ce114242d08480b4df08243f052a66a6 ] UxTuneUp C:\WINDOWS\System32\uxtuneup.dll
10:35:50.0984 0820 UxTuneUp - ok
10:35:50.0984 0820 [ 0d3a8fafceacd8b7625cd549757a7df1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
10:35:50.0984 0820 VgaSave - ok
10:35:50.0984 0820 ViaIde - ok
10:35:51.0062 0820 [ f964c55954bca660c785bc1816ca4f95 ] VodafoneConnectorService C:\Program Files\Vodafone\Via The Phone\VodafoneConnectorService.exe
10:35:51.0062 0820 VodafoneConnectorService - ok
10:35:51.0078 0820 [ 28a4b296b47782173c346e376cb374d1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
10:35:51.0078 0820 VolSnap - ok
10:35:51.0109 0820 [ d6ba1a63d9e00933f1cd2a885573afb2 ] VSS C:\WINDOWS\System32\vssvc.exe
10:35:51.0109 0820 VSS - ok
10:35:51.0156 0820 [ fa4e1cdba256787f2149f4aad07bc91f ] W32Time C:\WINDOWS\system32\w32time.dll
10:35:51.0156 0820 W32Time - ok
10:35:51.0156 0820 [ e20b95baedb550f32dd489265c1da1f6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
10:35:51.0156 0820 Wanarp - ok
10:35:51.0171 0820 WDICA - ok
10:35:51.0171 0820 [ 6768acf64b18196494413695f0c3a00f ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
10:35:51.0171 0820 wdmaud - ok
10:35:51.0203 0820 [ 47ae51048a82dfa1cd6b51d369f7e169 ] WebClient C:\WINDOWS\System32\webclnt.dll
10:35:51.0203 0820 WebClient - ok
10:35:51.0265 0820 [ e488332126e3b1182d2b8a0c35408ec6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
10:35:51.0265 0820 winmgmt - ok
10:35:51.0343 0820 [ 5144ae67d60ec653f97ddf3feed29e77 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
10:35:51.0343 0820 wlidsvc - ok
10:35:51.0375 0820 [ c51b4a5c05a5475708e3c81c7765b71d ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
10:35:51.0390 0820 WmdmPmSN - ok
10:35:51.0406 0820 [ c42584fd66ce9e17403aebca199f7bdb ] WmiAcpi C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
10:35:51.0406 0820 WmiAcpi - ok
10:35:51.0421 0820 [ 23f6f03272f7e5679f1f050aed5acee6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
10:35:51.0421 0820 WmiApSrv - ok
10:35:51.0484 0820 [ 3739866d20abd42f26a7b85f9e2560af ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
10:35:51.0500 0820 WMPNetworkSvc - ok
10:35:51.0546 0820 [ dcf3e3edf5109ee8bc02fe6e1f045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
10:35:51.0546 0820 WPFFontCache_v0400 - ok
10:35:51.0578 0820 [ 6abe6e225adb5a751622a9cc3bc19ce8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
10:35:51.0578 0820 WS2IFSL - ok
10:35:51.0609 0820 [ 4c86d5faf78194995af9cc1075f65dd3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
10:35:51.0609 0820 wscsvc - ok
10:35:51.0625 0820 [ 233cdd1c06942115802eb7ce6669e099 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
10:35:51.0625 0820 WSTCODEC - ok
10:35:51.0640 0820 [ c1364564800ee9784192145324a23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
10:35:51.0640 0820 wuauserv - ok
10:35:51.0656 0820 [ f15feafffbb3644ccc80c5da584e6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
10:35:51.0656 0820 WudfPf - ok
10:35:51.0671 0820 [ 28b524262bce6de1f7ef9f510ba3985b ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
10:35:51.0671 0820 WudfRd - ok
10:35:51.0671 0820 [ 05231c04253c5bc30b26cbaae680ed89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
10:35:51.0671 0820 WudfSvc - ok
10:35:51.0703 0820 [ a27d4ba7264c0bf52f32d10405bea1d4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
10:35:51.0718 0820 WZCSVC - ok
10:35:51.0734 0820 [ eaa4bb9edb3fb10cf8979fe65e63658f ] xmlprov C:\WINDOWS\System32\xmlprov.dll
10:35:51.0734 0820 xmlprov - ok
10:35:51.0750 0820 ================ Scan global ===============================
10:35:51.0781 0820 (f36278e42c8c5df03ce17dac8231c91c) C:\WINDOWS\system32\basesrv.dll
10:35:51.0828 0820 (f3fa14a297bc687d0b51289d034033c9) C:\WINDOWS\system32\winsrv.dll
10:35:51.0843 0820 (f3fa14a297bc687d0b51289d034033c9) C:\WINDOWS\system32\winsrv.dll
10:35:51.0843 0820 (9ef697af07bb8dd82c3b02ca953a95b7) C:\WINDOWS\system32\services.exe
10:35:51.0843 0820 [Global] - ok
10:35:51.0843 0820 ================ Scan MBR ==================================
10:35:51.0875 0820 MBR (0x1B8) (413fc2a0c716421b3158746d63736515) \Device\Harddisk0\DR0
10:35:52.0015 0820 \Device\Harddisk0\DR0 - ok
10:35:52.0015 0820 ================ Scan VBR ==================================
10:35:52.0015 0820 Boot (0x1200) (f37788769a346ec874901cc22871f988) \Device\Harddisk0\DR0\Partition1
10:35:52.0015 0820 \Device\Harddisk0\DR0\Partition1 - ok
10:35:52.0015 0820 ============================================================
10:35:52.0015 0820 Scan finished
10:35:52.0015 0820 ============================================================
10:35:52.0015 1280 Detected object count: 0
10:35:52.0015 1280 Actual detected object count: 0
10:35:54.0640 1468 Deinitialize success

[mEEEgy]

ComboFix 12-08-18.03 - Admin 19.08.2012 10:44:43.9.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2046.1370 [GMT 2:00]
Spuštěný z: c:\documents and settings\Admin\Plocha\ComboFix.exe
FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\avgfwdx.dll
c:\windows\system32\Cache
c:\windows\system32\Cache\272512937d9e61a4.fb
c:\windows\system32\Cache\287204568329e189.fb
c:\windows\system32\Cache\28bc8f716fd76a47.fb
c:\windows\system32\Cache\2c53092c95605355.fb
c:\windows\system32\Cache\31a0997e9a5b5eb3.fb
c:\windows\system32\Cache\32c84fe32bb74d60.fb
c:\windows\system32\Cache\3917078cb68ec657.fb
c:\windows\system32\Cache\590ba23ce359fd0c.fb
c:\windows\system32\Cache\5da4da52715a6882.fb
c:\windows\system32\Cache\610289e025a3ee9a.fb
c:\windows\system32\Cache\651c5d3cdbfb8bd1.fb
c:\windows\system32\Cache\6c59ac5e7e7a3ad0.fb
c:\windows\system32\Cache\6d03dad1035885d3.fb
c:\windows\system32\Cache\a8556537add6dfc5.fb
c:\windows\system32\Cache\ad10a52aff5e038d.fb
c:\windows\system32\Cache\c1fa887b03019701.fb
c:\windows\system32\Cache\c4d28dca2e7648be.fb
c:\windows\system32\Cache\d201ef9910cd39de.fb
c:\windows\system32\Cache\d2e94710a5708128.fb
c:\windows\system32\Cache\d79b9dfe81484ec4.fb
c:\windows\system32\Cache\f998975c9cc711ee.fb
c:\windows\system32\URTTemp
c:\windows\system32\URTTemp\regtlib.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-07-19 do 2012-08-19 )))))))))))))))))))))))))))))))
.
.
2012-08-02 18:20 . 2012-08-02 18:20 -------- d-----w- c:\documents and settings\Admin\Data aplikací\ICQ Search
2012-08-02 18:19 . 2012-08-02 18:19 -------- d-----w- c:\program files\ICQ6Toolbar
2012-08-02 18:19 . 2012-08-02 18:19 -------- d-----w- c:\documents and settings\LocalService\Data aplikací\{DCD48218-E972-4d0c-9E5F-43462BC13E3B}
2012-08-02 18:19 . 2012-08-02 18:19 -------- d-----w- c:\program files\Guard-ICQ
2012-08-02 18:18 . 2012-08-02 18:20 -------- d-----w- c:\program files\ICQ7M
2012-07-27 20:51 . 2012-07-27 20:51 184248 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-15 14:44 . 2012-03-31 07:38 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-08-15 14:44 . 2011-05-29 07:15 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-06 13:58 . 2008-04-14 12:00 78336 ----a-w- c:\windows\system32\browser.dll
2012-07-04 14:05 . 2009-06-18 09:01 139784 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-07-03 18:22 . 2008-04-14 12:00 1866112 ----a-w- c:\windows\system32\win32k.sys
2012-07-02 17:38 . 2008-04-14 12:00 916992 ----a-w- c:\windows\system32\wininet.dll
2012-07-02 17:38 . 2008-04-14 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-07-02 17:38 . 2008-04-14 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-07-02 12:05 . 2008-04-14 12:00 385024 ----a-w- c:\windows\system32\html.iec
2012-06-12 21:11 . 2011-08-10 09:55 7190 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2012-06-06 06:49 . 2012-06-06 06:49 1070152 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2012-06-05 15:49 . 2008-04-14 12:00 1372672 ----a-w- c:\windows\system32\msxml6.dll
2012-06-05 15:49 . 2008-04-14 12:00 1172480 ----a-w- c:\windows\system32\msxml3.dll
2012-06-04 16:13 . 2012-05-22 13:32 139448 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-06-04 16:12 . 2012-05-22 13:31 282472 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-06-04 16:12 . 2009-07-09 15:28 282472 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-06-04 04:32 . 2008-04-14 12:00 152576 ----a-w- c:\windows\system32\schannel.dll
2012-06-03 18:19 . 2010-12-03 22:26 282472 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-06-02 13:19 . 2008-10-16 12:07 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 13:19 . 2008-10-16 12:08 22552 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 13:19 . 2009-06-18 09:03 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 13:19 . 2009-06-18 09:03 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 13:19 . 2009-06-18 09:03 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-02 13:19 . 2009-06-18 09:03 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 13:19 . 2009-06-18 09:03 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 13:19 . 2008-10-16 12:09 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 13:19 . 2008-10-16 12:07 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 13:19 . 2008-10-16 12:07 18456 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 13:19 . 2008-04-14 12:00 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 13:19 . 2009-06-18 09:03 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 13:19 . 2009-06-18 09:03 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 13:19 . 2011-05-27 09:02 17648 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-06-02 13:18 . 2011-08-17 11:31 214256 ----a-w- c:\windows\system32\muweb.dll
2012-06-02 13:18 . 2011-05-27 09:02 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-05-31 13:22 . 2008-04-14 12:00 602112 ----a-w- c:\windows\system32\crypt32.dll
2012-05-22 14:01 . 2012-05-22 13:31 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-05-22 13:32 . 2009-07-10 19:47 22328 ----a-w- c:\documents and settings\Admin\Data aplikací\PnkBstrK.sys
2012-05-22 13:04 . 2009-07-19 15:48 674600 ----a-w- c:\windows\system32\pbsvc.exe
2012-07-08 11:32 . 2012-06-15 19:23 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2008-01-22 152872]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2008-05-16 16862720]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2007-03-14 71216]
"razer"="c:\program files\Razer\Copperhead\razerhid.exe" [2005-10-08 155648]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2007-02-10 200704]
"TO2SSM_McciTrayApp"="c:\program files\TO2SSM\McciTrayApp.exe" [2008-08-15 1473536]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-09-08 98304]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"Guard.Mail.ru.gui"="c:\program files\Guard-ICQ\GuardICQ.exe" [2012-08-02 1564368]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Admin\Nabídka Start\Programy\Po spuštění\
Xfire.lnk - c:\program files\Xfire\Xfire.exe [2012-5-3 3553176]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
"Steam"="c:\program files\Steam\steam.exe" -silent
"RGSC"=c:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
"ICQ"="c:\program files\ICQ7M\ICQ.exe" silent loginmode=4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Xfire\\Xfire.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\DsNET Corp\\aTube Catcher 2.0\\yct.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Rockstar Games\\Rockstar Games Social Club\\RGSCLauncher.exe"=
"c:\\Documents and Settings\\Admin\\Local Settings\\Data aplikací\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"c:\\Program Files\\Veetle\\Player\\VeetleNet.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\terraria\\TerrariaServer.exe"=
"c:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE"=
"c:\\Program Files\\Garena Plus\\room\\garena_room.exe"=
"c:\\Program Files\\TeamViewer\\Version7\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version7\\TeamViewer_Service.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto IV\\LaunchGTAIV.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto IV\\GTAIV.exe"=
"c:\\Program Files\\ICQ7M\\ICQ.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"57104:TCP"= 57104:TCP:Pando Media Booster
"57104:UDP"= 57104:UDP:Pando Media Booster
"58692:TCP"= 58692:TCP:Pando Media Booster
"58692:UDP"= 58692:UDP:Pando Media Booster
"8396:TCP"= 8396:TCP:League of Legends Launcher
"8396:UDP"= 8396:UDP:League of Legends Launcher
"6925:TCP"= 6925:TCP:League of Legends Launcher
"6925:UDP"= 6925:UDP:League of Legends Launcher
"6984:TCP"= 6984:TCP:League of Legends Launcher
"6984:UDP"= 6984:UDP:League of Legends Launcher
"6936:TCP"= 6936:TCP:League of Legends Launcher
"6936:UDP"= 6936:UDP:League of Legends Launcher
"56730:TCP"= 56730:TCP:Pando Media Booster
"56730:UDP"= 56730:UDP:Pando Media Booster
"57294:TCP"= 57294:TCP:Pando Media Booster
"57294:UDP"= 57294:UDP:Pando Media Booster
"56101:TCP"= 56101:TCP:Pando Media Booster
"56101:UDP"= 56101:UDP:Pando Media Booster
"57783:TCP"= 57783:TCP:Pando Media Booster
"57783:UDP"= 57783:UDP:Pando Media Booster
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [21.2.2012 17:21 239168]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [27.6.2012 12:29 1385896]
R2 LG SCSI Commander;LG SCSI Commander;c:\windows\system32\LGAutorunService.exe [21.11.2009 13:52 139264]
R2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [16.11.2009 18:33 50704]
R2 TeamViewer7;TeamViewer 7;c:\program files\TeamViewer\Version7\TeamViewer_Service.exe [16.7.2012 16:31 2673064]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [23.11.2010 18:13 1483072]
R2 VodafoneConnectorService;Vodafone Connector Service;c:\program files\Vodafone\Via The Phone\VodafoneConnectorService.exe [26.1.2009 10:16 233472]
R3 MouseCap;MouseCapture Driver;c:\windows\system32\drivers\MouseCap.sys [8.8.2005 15:44 6640]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [18.6.2009 11:17 38176]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [9.1.2010 21:37 4640000]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [7.10.2010 13:34 10064]
S2 Guard.Mail.ru;Guard.Mail.ru;c:\program files\Guard-ICQ\GuardICQ.exe [2.8.2012 20:19 1564368]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [31.3.2012 9:38 250056]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [31.7.2011 19:23 23456]
S3 ESLvnic1;ESLvnic Virtual Network 32 Bit;c:\windows\system32\drivers\ESLvnic.sys [12.3.2011 14:55 24504]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [24.2.2010 12:27 36608]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\Garena Plus\Room\safedrv.sys --> c:\program files\Garena Plus\Room\safedrv.sys [?]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [12.6.2011 11:15 31125880]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [15.6.2012 21:23 113120]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [30.7.2009 17:12 47360]
S3 Razerlow;Razer Copperhead Driver;c:\windows\system32\drivers\Razerlow.sys [24.7.2009 19:19 19020]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [24.2.2010 12:27 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [24.2.2010 12:27 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [24.2.2010 12:27 121856]
S3 tcpip helper;tcpip helper;\??\c:\program files\Garena Plus\x86\tcpiphlp.sys --> c:\program files\Garena Plus\x86\tcpiphlp.sys [?]
S3 tizekdrv;tizekdrv;c:\documents and settings\Admin\Data aplikací\TZAC\tizek32.sys [26.2.2012 21:28 190976]
S3 tizeqdrv;tizeqdrv;c:\documents and settings\Admin\Data aplikací\TZAC2\tizeq32.sys [5.5.2012 18:52 118456]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2012-08-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-31 14:44]
.
2012-08-19 c:\windows\Tasks\AutoKMS.job
- c:\windows\AutoKMS\AutoKMS.exe [2012-05-19 10:27]
.
.
------- Doplňkový sken -------
.
uInternet Connection Wizard,ShellNext = iexplore
IE: Download with Mipony - file://c:\program files\MiPony\Browser\IEContext.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MI1933~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MI1933~1\Office14\ONBttnIE.dll/105
IE: {{781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - c:\program files\ICQ7M\ICQ.exe
LSP: %SYSTEMROOT%\system32\nvLsp.dll
TCP: DhcpNameServer = 10.0.0.138 10.0.0.138
FF - ProfilePath - c:\documents and settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\1eseq1t5.default\
FF - prefs.js: keyword.URL -
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: keyword.URL -
FF - prefs.js: browser.startup.homepage - hxxp://start.icq.com/
pref('extensions.shownSelectionUI',true);
pref('extensions.autoDisableScopes',0);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-08-19 10:49
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-682003330-117609710-1801674531-1004\Software\SecuROM\License information*]
"datasecu"=hex:e6,25,3c,37,60,2e,9f,4c,6d,ef,dc,94,c4,d9,34,37,de,b3,06,55,cb,
37,b6,fa,47,f4,e7,0e,45,64,71,04,60,62,81,af,e7,8f,23,cc,d2,a9,89,f2,2c,c8,\
"rkeysecu"=hex:ea,51,8b,3d,f9,7e,2e,15,6d,6e,c3,6c,67,c5,28,38
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(784)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
- - - - - - - > 'lsass.exe'(840)
c:\windows\system32\nvLsp.dll
.
Celkový čas: 2012-08-19 10:51:17
ComboFix-quarantined-files.txt 2012-08-19 08:51
.
Před spuštěním: Volných bajtů: 230 714 662 912
Po spuštění: Volných bajtů: 231 041 073 152
.
- - End Of File - - 1A73AD240E80EB72479F74D4262111E9

[jaro3]

AVG Firewall , chtělo by to doinstalovat antivir s antispywarem!

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::

File::
c:\windows\Tasks\AutoKMS.job
c:\windows\AutoKMS\AutoKMS.exe

Folder::
c:\program files\ICQ6Toolbar

Driver::
tcpip helper

Firefox::
FF - prefs.js: browser.startup.homepage - hxxp://start.icq.com/
pref('extensions.shownSelectionUI',true);
pref('extensions.autoDisableScopes',0);

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[mEEEgy]

ComboFix 12-08-18.03 - Admin 19.08.2012 15:52:54.10.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2046.1447 [GMT 2:00]
Spuštěný z: c:\documents and settings\Admin\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Admin\Plocha\CFScript.txt
FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66}
.
FILE ::
"c:\windows\AutoKMS\AutoKMS.exe"
"c:\windows\Tasks\AutoKMS.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\ICQ6Toolbar
c:\program files\ICQ6Toolbar\config.xml
c:\program files\ICQ6Toolbar\Icons.bmp
c:\program files\ICQ6Toolbar\ICQ Service.exe
c:\program files\ICQ6Toolbar\icq6Toolbar.ico
c:\program files\ICQ6Toolbar\ICQToolBar.dll
c:\program files\ICQ6Toolbar\ICQUnToolbar.exe
c:\program files\ICQ6Toolbar\logo_small.gif
c:\program files\ICQ6Toolbar\ServiceStarter.exe
c:\program files\ICQ6Toolbar\short.wav
c:\program files\ICQ6Toolbar\Version.txt
c:\program files\ICQ6Toolbar\voucher.bmp
c:\program files\ICQ6Toolbar\voucher2.bmp
c:\windows\AutoKMS\AutoKMS.exe
c:\windows\Tasks\AutoKMS.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_tcpip helper
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-07-19 do 2012-08-19 )))))))))))))))))))))))))))))))
.
.
2012-08-02 18:20 . 2012-08-02 18:20 -------- d-----w- c:\documents and settings\Admin\Data aplikací\ICQ Search
2012-08-02 18:19 . 2012-08-02 18:19 -------- d-----w- c:\documents and settings\LocalService\Data aplikací\{DCD48218-E972-4d0c-9E5F-43462BC13E3B}
2012-08-02 18:19 . 2012-08-02 18:19 -------- d-----w- c:\program files\Guard-ICQ
2012-08-02 18:18 . 2012-08-02 18:20 -------- d-----w- c:\program files\ICQ7M
2012-07-27 20:51 . 2012-07-27 20:51 184248 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-15 14:44 . 2012-03-31 07:38 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-08-15 14:44 . 2011-05-29 07:15 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-06 13:58 . 2008-04-14 12:00 78336 ----a-w- c:\windows\system32\browser.dll
2012-07-04 14:05 . 2009-06-18 09:01 139784 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-07-03 18:22 . 2008-04-14 12:00 1866112 ----a-w- c:\windows\system32\win32k.sys
2012-07-02 17:38 . 2008-04-14 12:00 916992 ----a-w- c:\windows\system32\wininet.dll
2012-07-02 17:38 . 2008-04-14 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-07-02 17:38 . 2008-04-14 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-07-02 12:05 . 2008-04-14 12:00 385024 ----a-w- c:\windows\system32\html.iec
2012-06-12 21:11 . 2011-08-10 09:55 7190 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2012-06-06 06:49 . 2012-06-06 06:49 1070152 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2012-06-05 15:49 . 2008-04-14 12:00 1372672 ----a-w- c:\windows\system32\msxml6.dll
2012-06-05 15:49 . 2008-04-14 12:00 1172480 ----a-w- c:\windows\system32\msxml3.dll
2012-06-04 16:13 . 2012-05-22 13:32 139448 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-06-04 16:12 . 2012-05-22 13:31 282472 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-06-04 16:12 . 2009-07-09 15:28 282472 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-06-04 04:32 . 2008-04-14 12:00 152576 ----a-w- c:\windows\system32\schannel.dll
2012-06-03 18:19 . 2010-12-03 22:26 282472 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-06-02 13:19 . 2008-10-16 12:07 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 13:19 . 2008-10-16 12:08 22552 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 13:19 . 2009-06-18 09:03 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 13:19 . 2009-06-18 09:03 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 13:19 . 2009-06-18 09:03 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-02 13:19 . 2009-06-18 09:03 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 13:19 . 2009-06-18 09:03 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 13:19 . 2008-10-16 12:09 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 13:19 . 2008-10-16 12:07 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 13:19 . 2008-10-16 12:07 18456 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 13:19 . 2008-04-14 12:00 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 13:19 . 2009-06-18 09:03 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 13:19 . 2009-06-18 09:03 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 13:19 . 2011-05-27 09:02 17648 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-06-02 13:18 . 2011-08-17 11:31 214256 ----a-w- c:\windows\system32\muweb.dll
2012-06-02 13:18 . 2011-05-27 09:02 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-05-31 13:22 . 2008-04-14 12:00 602112 ----a-w- c:\windows\system32\crypt32.dll
2012-05-22 14:01 . 2012-05-22 13:31 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-05-22 13:32 . 2009-07-10 19:47 22328 ----a-w- c:\documents and settings\Admin\Data aplikací\PnkBstrK.sys
2012-05-22 13:04 . 2009-07-19 15:48 674600 ----a-w- c:\windows\system32\pbsvc.exe
2012-07-08 11:32 . 2012-06-15 19:23 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-08-19_08.49.43 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-08-19 14:01 . 2012-08-19 14:01 16384 c:\windows\temp\Perflib_Perfdata_900.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2008-01-22 152872]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2008-05-16 16862720]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2007-03-14 71216]
"razer"="c:\program files\Razer\Copperhead\razerhid.exe" [2005-10-08 155648]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2007-02-10 200704]
"TO2SSM_McciTrayApp"="c:\program files\TO2SSM\McciTrayApp.exe" [2008-08-15 1473536]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-09-08 98304]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"Guard.Mail.ru.gui"="c:\program files\Guard-ICQ\GuardICQ.exe" [2012-08-02 1564368]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Admin\Nabídka Start\Programy\Po spuštění\
Xfire.lnk - c:\program files\Xfire\Xfire.exe [2012-5-3 3553176]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
"Steam"="c:\program files\Steam\steam.exe" -silent
"RGSC"=c:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
"ICQ"="c:\program files\ICQ7M\ICQ.exe" silent loginmode=4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Xfire\\Xfire.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\DsNET Corp\\aTube Catcher 2.0\\yct.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Rockstar Games\\Rockstar Games Social Club\\RGSCLauncher.exe"=
"c:\\Documents and Settings\\Admin\\Local Settings\\Data aplikací\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"c:\\Program Files\\Veetle\\Player\\VeetleNet.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\terraria\\TerrariaServer.exe"=
"c:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE"=
"c:\\Program Files\\Garena Plus\\room\\garena_room.exe"=
"c:\\Program Files\\TeamViewer\\Version7\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version7\\TeamViewer_Service.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto IV\\LaunchGTAIV.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto IV\\GTAIV.exe"=
"c:\\Program Files\\ICQ7M\\ICQ.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"57104:TCP"= 57104:TCP:Pando Media Booster
"57104:UDP"= 57104:UDP:Pando Media Booster
"58692:TCP"= 58692:TCP:Pando Media Booster
"58692:UDP"= 58692:UDP:Pando Media Booster
"8396:TCP"= 8396:TCP:League of Legends Launcher
"8396:UDP"= 8396:UDP:League of Legends Launcher
"6925:TCP"= 6925:TCP:League of Legends Launcher
"6925:UDP"= 6925:UDP:League of Legends Launcher
"6984:TCP"= 6984:TCP:League of Legends Launcher
"6984:UDP"= 6984:UDP:League of Legends Launcher
"6936:TCP"= 6936:TCP:League of Legends Launcher
"6936:UDP"= 6936:UDP:League of Legends Launcher
"56730:TCP"= 56730:TCP:Pando Media Booster
"56730:UDP"= 56730:UDP:Pando Media Booster
"57294:TCP"= 57294:TCP:Pando Media Booster
"57294:UDP"= 57294:UDP:Pando Media Booster
"56101:TCP"= 56101:TCP:Pando Media Booster
"56101:UDP"= 56101:UDP:Pando Media Booster
"57783:TCP"= 57783:TCP:Pando Media Booster
"57783:UDP"= 57783:UDP:Pando Media Booster
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [21.2.2012 17:21 239168]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [27.6.2012 12:29 1385896]
R2 LG SCSI Commander;LG SCSI Commander;c:\windows\system32\LGAutorunService.exe [21.11.2009 13:52 139264]
R2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [16.11.2009 18:33 50704]
R2 TeamViewer7;TeamViewer 7;c:\program files\TeamViewer\Version7\TeamViewer_Service.exe [16.7.2012 16:31 2673064]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [23.11.2010 18:13 1483072]
R2 VodafoneConnectorService;Vodafone Connector Service;c:\program files\Vodafone\Via The Phone\VodafoneConnectorService.exe [26.1.2009 10:16 233472]
R3 MouseCap;MouseCapture Driver;c:\windows\system32\drivers\MouseCap.sys [8.8.2005 15:44 6640]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [18.6.2009 11:17 38176]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [7.10.2010 13:34 10064]
S2 Guard.Mail.ru;Guard.Mail.ru;c:\program files\Guard-ICQ\GuardICQ.exe [2.8.2012 20:19 1564368]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [31.3.2012 9:38 250056]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [31.7.2011 19:23 23456]
S3 ESLvnic1;ESLvnic Virtual Network 32 Bit;c:\windows\system32\drivers\ESLvnic.sys [12.3.2011 14:55 24504]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [24.2.2010 12:27 36608]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\Garena Plus\Room\safedrv.sys --> c:\program files\Garena Plus\Room\safedrv.sys [?]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [12.6.2011 11:15 31125880]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [15.6.2012 21:23 113120]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [9.1.2010 21:37 4640000]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [30.7.2009 17:12 47360]
S3 Razerlow;Razer Copperhead Driver;c:\windows\system32\drivers\Razerlow.sys [24.7.2009 19:19 19020]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [24.2.2010 12:27 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [24.2.2010 12:27 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [24.2.2010 12:27 121856]
S3 tizekdrv;tizekdrv;c:\documents and settings\Admin\Data aplikací\TZAC\tizek32.sys [26.2.2012 21:28 190976]
S3 tizeqdrv;tizeqdrv;c:\documents and settings\Admin\Data aplikací\TZAC2\tizeq32.sys [5.5.2012 18:52 118456]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2012-08-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-31 14:44]
.
.
------- Doplňkový sken -------
.
uInternet Connection Wizard,ShellNext = iexplore
IE: Download with Mipony - file://c:\program files\MiPony\Browser\IEContext.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MI1933~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MI1933~1\Office14\ONBttnIE.dll/105
IE: {{781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - c:\program files\ICQ7M\ICQ.exe
LSP: %SYSTEMROOT%\system32\nvLsp.dll
TCP: DhcpNameServer = 10.0.0.138 10.0.0.138
FF - ProfilePath - c:\documents and settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\1eseq1t5.default\
FF - prefs.js: keyword.URL -
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: keyword.URL -
FF - prefs.js: browser.startup.homepage - hxxp://start.icq.com/
pref('extensions.shownSelectionUI',true);
pref('extensions.autoDisableScopes',0);
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-08-19 16:01
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-682003330-117609710-1801674531-1004\Software\SecuROM\License information*]
"datasecu"=hex:e6,25,3c,37,60,2e,9f,4c,6d,ef,dc,94,c4,d9,34,37,de,b3,06,55,cb,
37,b6,fa,47,f4,e7,0e,45,64,71,04,60,62,81,af,e7,8f,23,cc,d2,a9,89,f2,2c,c8,\
"rkeysecu"=hex:ea,51,8b,3d,f9,7e,2e,15,6d,6e,c3,6c,67,c5,28,38
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(788)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
- - - - - - - > 'lsass.exe'(844)
c:\windows\system32\nvLsp.dll
.
- - - - - - - > 'explorer.exe'(1940)
c:\progra~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
c:\progra~1\MI1933~1\Office14\1029\GrooveIntlResource.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\RTHDCPL.EXE
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Motive\McciCMService.exe
c:\program files\Razer\Copperhead\razerofa.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\windows\System32\PAStiSvc.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\bin32\nSvcAppFlt.exe
c:\program files\bin32\nSvcIp.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\Common Files\Ahead\Lib\NMIndexingService.exe
c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Celkový čas: 2012-08-19 16:04:08 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-08-19 14:04
ComboFix2.txt 2012-08-19 08:51
.
Před spuštěním: Volných bajtů: 232 188 891 136
Po spuštění: Volných bajtů: 232 097 624 064
.
- - End Of File - - 075FE5872C6A79B116E76DC48C9D3E4D

[mEEEgy]

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-08-19 16:05:54
-----------------------------
16:05:54.449 OS Version: Windows 5.1.2600 Service Pack 3
16:05:54.449 Number of processors: 2 586 0x203
16:05:54.449 ComputerName: M3NH UserName:
16:05:55.371 Initialize success
16:05:59.918 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-5
16:05:59.918 Disk 0 Vendor: ST3500410AS CC34 Size: 476940MB BusType: 3
16:05:59.933 Disk 0 MBR read successfully
16:05:59.949 Disk 0 MBR scan
16:05:59.949 Disk 0 Windows XP default MBR code
16:05:59.996 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 476937 MB offset 63
16:06:00.027 Disk 0 scanning sectors +976768065
16:06:00.152 Disk 0 scanning C:\WINDOWS\system32\drivers
16:06:06.340 Service scanning
16:06:18.247 Modules scanning
16:06:21.637 Disk 0 trace - called modules:
16:06:21.653 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
16:06:21.653 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8a660ab8]
16:06:21.653 3 CLASSPNP.SYS[ba108fd7] -> nt!IofCallDriver -> \Device\00000078[0x8a754490]
16:06:21.653 5 ACPI.sys[b9f7f620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-5[0x8a585940]
16:06:21.669 Scan finished successfully
16:06:28.950 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Admin\Plocha\MBR.dat"
16:06:28.950 The log file has been saved successfully to "C:\Documents and Settings\Admin\Plocha\aswMBR.txt"


Jestli mi prosímtě doporučíš nějaký antivir co žere málo paměti a je vhodný na hraní her, byl bych ti vděčný :)

[Žbeky]

Avast, Avira

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

KillAll::

Folder::
c:\documents and settings\Admin\Data aplikací\ICQ Search
c:\program files\Guard-ICQ

Firefox::
FF - ProfilePath - c:\documents and settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\1eseq1t5.default\
FF - prefs.js: keyword.URL -
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://start.icq.com/
pref('extensions.shownSelectionUI',true);
pref('extensions.autoDisableScopes',0);


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu

[mEEEgy]

ComboFix 12-08-18.03 - Admin 19.08.2012 21:35:23.11.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2046.1381 [GMT 2:00]
Spuštěný z: c:\documents and settings\Admin\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Admin\Plocha\CFScript.txt
FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-07-19 do 2012-08-19 )))))))))))))))))))))))))))))))
.
.
2012-08-02 18:20 . 2012-08-02 18:20 -------- d-----w- c:\documents and settings\Admin\Data aplikací\ICQ Search
2012-08-02 18:19 . 2012-08-02 18:19 -------- d-----w- c:\documents and settings\LocalService\Data aplikací\{DCD48218-E972-4d0c-9E5F-43462BC13E3B}
2012-07-27 20:51 . 2012-07-27 20:51 184248 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-15 14:44 . 2012-03-31 07:38 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-08-15 14:44 . 2011-05-29 07:15 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-06 13:58 . 2008-04-14 12:00 78336 ----a-w- c:\windows\system32\browser.dll
2012-07-04 14:05 . 2009-06-18 09:01 139784 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-07-03 18:22 . 2008-04-14 12:00 1866112 ----a-w- c:\windows\system32\win32k.sys
2012-07-02 17:38 . 2008-04-14 12:00 916992 ----a-w- c:\windows\system32\wininet.dll
2012-07-02 17:38 . 2008-04-14 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-07-02 17:38 . 2008-04-14 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-07-02 12:05 . 2008-04-14 12:00 385024 ----a-w- c:\windows\system32\html.iec
2012-06-12 21:11 . 2011-08-10 09:55 7190 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2012-06-06 06:49 . 2012-06-06 06:49 1070152 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2012-06-05 15:49 . 2008-04-14 12:00 1372672 ----a-w- c:\windows\system32\msxml6.dll
2012-06-05 15:49 . 2008-04-14 12:00 1172480 ----a-w- c:\windows\system32\msxml3.dll
2012-06-04 16:13 . 2012-05-22 13:32 139448 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-06-04 16:12 . 2012-05-22 13:31 282472 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-06-04 16:12 . 2009-07-09 15:28 282472 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-06-04 04:32 . 2008-04-14 12:00 152576 ----a-w- c:\windows\system32\schannel.dll
2012-06-03 18:19 . 2010-12-03 22:26 282472 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-06-02 13:19 . 2008-10-16 12:07 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 13:19 . 2008-10-16 12:08 22552 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 13:19 . 2009-06-18 09:03 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 13:19 . 2009-06-18 09:03 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 13:19 . 2009-06-18 09:03 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-02 13:19 . 2009-06-18 09:03 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 13:19 . 2009-06-18 09:03 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 13:19 . 2008-10-16 12:09 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 13:19 . 2008-10-16 12:07 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 13:19 . 2008-10-16 12:07 18456 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 13:19 . 2008-04-14 12:00 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 13:19 . 2009-06-18 09:03 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 13:19 . 2009-06-18 09:03 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 13:19 . 2011-05-27 09:02 17648 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-06-02 13:18 . 2011-08-17 11:31 214256 ----a-w- c:\windows\system32\muweb.dll
2012-06-02 13:18 . 2011-05-27 09:02 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-05-31 13:22 . 2008-04-14 12:00 602112 ----a-w- c:\windows\system32\crypt32.dll
2012-05-22 14:01 . 2012-05-22 13:31 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-05-22 13:32 . 2009-07-10 19:47 22328 ----a-w- c:\documents and settings\Admin\Data aplikací\PnkBstrK.sys
2012-05-22 13:04 . 2009-07-19 15:48 674600 ----a-w- c:\windows\system32\pbsvc.exe
2012-07-08 11:32 . 2012-06-15 19:23 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-08-19_08.49.43 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-08-19 19:42 . 2012-08-19 19:42 16384 c:\windows\temp\Perflib_Perfdata_fc.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2008-01-22 152872]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2008-05-16 16862720]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2007-03-14 71216]
"razer"="c:\program files\Razer\Copperhead\razerhid.exe" [2005-10-08 155648]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2007-02-10 200704]
"TO2SSM_McciTrayApp"="c:\program files\TO2SSM\McciTrayApp.exe" [2008-08-15 1473536]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-09-08 98304]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Admin\Nabídka Start\Programy\Po spuštění\
Xfire.lnk - c:\program files\Xfire\Xfire.exe [2012-5-3 3553176]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
"Steam"="c:\program files\Steam\steam.exe" -silent
"RGSC"=c:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
"ICQ"="c:\program files\ICQ7M\ICQ.exe" silent loginmode=4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Xfire\\Xfire.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\DsNET Corp\\aTube Catcher 2.0\\yct.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Documents and Settings\\Admin\\Local Settings\\Data aplikací\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"c:\\Program Files\\Veetle\\Player\\VeetleNet.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\terraria\\TerrariaServer.exe"=
"c:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE"=
"c:\\Program Files\\Garena Plus\\room\\garena_room.exe"=
"c:\\Program Files\\TeamViewer\\Version7\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version7\\TeamViewer_Service.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"57104:TCP"= 57104:TCP:Pando Media Booster
"57104:UDP"= 57104:UDP:Pando Media Booster
"58692:TCP"= 58692:TCP:Pando Media Booster
"58692:UDP"= 58692:UDP:Pando Media Booster
"8396:TCP"= 8396:TCP:League of Legends Launcher
"8396:UDP"= 8396:UDP:League of Legends Launcher
"6925:TCP"= 6925:TCP:League of Legends Launcher
"6925:UDP"= 6925:UDP:League of Legends Launcher
"6984:TCP"= 6984:TCP:League of Legends Launcher
"6984:UDP"= 6984:UDP:League of Legends Launcher
"6936:TCP"= 6936:TCP:League of Legends Launcher
"6936:UDP"= 6936:UDP:League of Legends Launcher
"56730:TCP"= 56730:TCP:Pando Media Booster
"56730:UDP"= 56730:UDP:Pando Media Booster
"57294:TCP"= 57294:TCP:Pando Media Booster
"57294:UDP"= 57294:UDP:Pando Media Booster
"56101:TCP"= 56101:TCP:Pando Media Booster
"56101:UDP"= 56101:UDP:Pando Media Booster
"57783:TCP"= 57783:TCP:Pando Media Booster
"57783:UDP"= 57783:UDP:Pando Media Booster
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [21.2.2012 17:21 239168]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [27.6.2012 12:29 1385896]
R2 LG SCSI Commander;LG SCSI Commander;c:\windows\system32\LGAutorunService.exe [21.11.2009 13:52 139264]
R2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [16.11.2009 18:33 50704]
R2 TeamViewer7;TeamViewer 7;c:\program files\TeamViewer\Version7\TeamViewer_Service.exe [16.7.2012 16:31 2673064]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [23.11.2010 18:13 1483072]
R2 VodafoneConnectorService;Vodafone Connector Service;c:\program files\Vodafone\Via The Phone\VodafoneConnectorService.exe [26.1.2009 10:16 233472]
R3 MouseCap;MouseCapture Driver;c:\windows\system32\drivers\MouseCap.sys [8.8.2005 15:44 6640]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [18.6.2009 11:17 38176]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [7.10.2010 13:34 10064]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [31.3.2012 9:38 250056]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [31.7.2011 19:23 23456]
S3 ESLvnic1;ESLvnic Virtual Network 32 Bit;c:\windows\system32\drivers\ESLvnic.sys [12.3.2011 14:55 24504]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [24.2.2010 12:27 36608]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\Garena Plus\Room\safedrv.sys --> c:\program files\Garena Plus\Room\safedrv.sys [?]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [12.6.2011 11:15 31125880]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [15.6.2012 21:23 113120]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [9.1.2010 21:37 4640000]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [30.7.2009 17:12 47360]
S3 Razerlow;Razer Copperhead Driver;c:\windows\system32\drivers\Razerlow.sys [24.7.2009 19:19 19020]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [24.2.2010 12:27 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [24.2.2010 12:27 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [24.2.2010 12:27 121856]
S3 tizekdrv;tizekdrv;c:\documents and settings\Admin\Data aplikací\TZAC\tizek32.sys [26.2.2012 21:28 190976]
S3 tizeqdrv;tizeqdrv;c:\documents and settings\Admin\Data aplikací\TZAC2\tizeq32.sys [5.5.2012 18:52 118456]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2012-08-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-31 14:44]
.
.
------- Doplňkový sken -------
.
uInternet Connection Wizard,ShellNext = iexplore
IE: Download with Mipony - file://c:\program files\MiPony\Browser\IEContext.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MI1933~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MI1933~1\Office14\ONBttnIE.dll/105
LSP: %SYSTEMROOT%\system32\nvLsp.dll
TCP: DhcpNameServer = 10.0.0.138 10.0.0.138
FF - ProfilePath - c:\documents and settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\1eseq1t5.default\
pref('extensions.shownSelectionUI',true);
pref('extensions.autoDisableScopes',0);
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-08-19 21:43
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-682003330-117609710-1801674531-1004\Software\SecuROM\License information*]
"datasecu"=hex:e6,25,3c,37,60,2e,9f,4c,6d,ef,dc,94,c4,d9,34,37,de,b3,06,55,cb,
37,b6,fa,47,f4,e7,0e,45,64,71,04,60,62,81,af,e7,8f,23,cc,d2,a9,89,f2,2c,c8,\
"rkeysecu"=hex:ea,51,8b,3d,f9,7e,2e,15,6d,6e,c3,6c,67,c5,28,38
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(792)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
- - - - - - - > 'lsass.exe'(848)
c:\windows\system32\nvLsp.dll
.
- - - - - - - > 'explorer.exe'(2184)
c:\progra~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
c:\progra~1\MI1933~1\Office14\1029\GrooveIntlResource.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\RTHDCPL.EXE
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Motive\McciCMService.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Razer\Copperhead\razerofa.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\windows\System32\PAStiSvc.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\bin32\nSvcAppFlt.exe
c:\program files\bin32\nSvcIp.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\TeamViewer\Version7\TeamViewer.exe
c:\program files\Common Files\Ahead\Lib\NMIndexingService.exe
c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
c:\windows\system32\wscntfy.exe
c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
c:\program files\TeamViewer\Version7\tv_w32.exe
.
**************************************************************************
.
Celkový čas: 2012-08-19 21:45:52 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-08-19 19:45
ComboFix2.txt 2012-08-19 14:04
ComboFix3.txt 2012-08-19 08:51
.
Před spuštěním: Volných bajtů: 292 253 962 240
Po spuštění: Volných bajtů: 292 233 781 248
.
- - End Of File - - 14BC2A14726362C2166452FF2210618A