PC-HELP.CZ

viz viewtopic.php?f=41&t=92471&p=694358#p694358

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:25:57, on 6.9.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe
C:\Windows\PLFSetI.exe
C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
G:\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx? ... 5r4702s46o
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.emachines.com/rdr.aspx? ... 5r4702s46o
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.8.0.14\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\19.8.0.14\IPS\IPSBHO.DLL
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Sabina\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.8.0.14\coIEPlg.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ7M\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [Google Update] "C:\Users\Sabina\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer Group - C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8870 bytes

Odinstaluj McAfee

Fixni:
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
- Pokud používáš Firefox, klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Chrome, nic dalšího nevybírej a dej Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(ZATÍM SÁM NIC NEMAŽ!).
Vlož sem pak obsah toho logu.

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.62.0.1300
www.malwarebytes.org

Verze databáze: v2012.09.06.11

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Sabina :: JABLICKOVA-PC [administrátor]

Ochrana: Povolena

6.9.2012 21:47:34
mbam-log-2012-09-06 (21-47-34).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 214083
Uplynulý čas: 8 minut, 34 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

12:04:51.0711 3248 TDSS rootkit removing tool 2.8.8.0 Aug 24 2012 13:27:48
12:04:51.0743 3248 ============================================================
12:04:51.0743 3248 Current date / time: 2012/09/07 12:04:51.0743
12:04:51.0743 3248 SystemInfo:
12:04:51.0743 3248
12:04:51.0743 3248 OS Version: 6.1.7601 ServicePack: 1.0
12:04:51.0743 3248 Product type: Workstation
12:04:51.0743 3248 ComputerName: JABLICKOVA-PC
12:04:51.0743 3248 UserName: Sabina
12:04:51.0743 3248 Windows directory: C:\Windows
12:04:51.0743 3248 System windows directory: C:\Windows
12:04:51.0743 3248 Running under WOW64
12:04:51.0743 3248 Processor architecture: Intel x64
12:04:51.0743 3248 Number of processors: 1
12:04:51.0743 3248 Page size: 0x1000
12:04:51.0743 3248 Boot type: Normal boot
12:04:51.0743 3248 ============================================================
12:04:53.0958 3248 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
12:04:53.0974 3248 Drive \Device\Harddisk1\DR4 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
12:04:53.0989 3248 ============================================================
12:04:53.0989 3248 \Device\Harddisk0\DR0:
12:04:53.0989 3248 MBR partitions:
12:04:53.0989 3248 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1C00800, BlocksNum 0x32000
12:04:53.0989 3248 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1C32800, BlocksNum 0x38753000
12:04:53.0989 3248 \Device\Harddisk1\DR4:
12:04:53.0989 3248 MBR partitions:
12:04:53.0989 3248 \Device\Harddisk1\DR4\Partition1: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x74705982
12:04:53.0989 3248 ============================================================
12:04:54.0020 3248 C: <-> \Device\Harddisk0\DR0\Partition2
12:04:54.0020 3248 G: <-> \Device\Harddisk1\DR4\Partition1
12:04:54.0020 3248 ============================================================
12:04:54.0020 3248 Initialize success
12:04:54.0020 3248 ============================================================
12:05:20.0650 4396 ============================================================
12:05:20.0650 4396 Scan started
12:05:20.0650 4396 Mode: Manual;
12:05:20.0650 4396 ============================================================
12:05:21.0149 4396 ================ Scan system memory ========================
12:05:21.0149 4396 System memory - ok
12:05:21.0149 4396 ================ Scan services =============================
12:05:21.0383 4396 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
12:05:21.0398 4396 1394ohci - ok
12:05:21.0476 4396 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
12:05:21.0492 4396 ACPI - ok
12:05:21.0554 4396 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
12:05:21.0554 4396 AcpiPmi - ok
12:05:21.0757 4396 [ B2B64AF436FACCFA854DD397027C5360 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
12:05:21.0757 4396 AdobeFlashPlayerUpdateSvc - ok
12:05:21.0866 4396 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
12:05:21.0882 4396 adp94xx - ok
12:05:21.0944 4396 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
12:05:21.0960 4396 adpahci - ok
12:05:21.0991 4396 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
12:05:22.0007 4396 adpu320 - ok
12:05:22.0054 4396 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
12:05:22.0054 4396 AeLookupSvc - ok
12:05:22.0163 4396 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
12:05:22.0178 4396 AFD - ok
12:05:22.0241 4396 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
12:05:22.0256 4396 agp440 - ok
12:05:22.0288 4396 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
12:05:22.0303 4396 ALG - ok
12:05:22.0366 4396 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
12:05:22.0366 4396 aliide - ok
12:05:22.0428 4396 [ 671D9DCA48DA807780D8409C18ED0AE0 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
12:05:22.0444 4396 AMD External Events Utility - ok
12:05:22.0475 4396 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
12:05:22.0475 4396 amdide - ok
12:05:22.0553 4396 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
12:05:22.0568 4396 AmdK8 - ok
12:05:22.0880 4396 [ D3E6B2E1394D93FE9DB0BA24814B0D8F ] amdkmdag C:\Windows\system32\DRIVERS\atipmdag.sys
12:05:23.0036 4396 amdkmdag - ok
12:05:23.0068 4396 [ CC4D915D786D3DA973B2EA9B95D59A29 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
12:05:23.0068 4396 amdkmdap - ok
12:05:23.0146 4396 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
12:05:23.0146 4396 AmdPPM - ok
12:05:23.0224 4396 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
12:05:23.0239 4396 amdsata - ok
12:05:23.0286 4396 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
12:05:23.0302 4396 amdsbs - ok
12:05:23.0333 4396 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
12:05:23.0333 4396 amdxata - ok
12:05:23.0395 4396 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
12:05:23.0395 4396 AppID - ok
12:05:23.0426 4396 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
12:05:23.0442 4396 AppIDSvc - ok
12:05:23.0504 4396 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
12:05:23.0520 4396 Appinfo - ok
12:05:23.0598 4396 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
12:05:23.0598 4396 arc - ok
12:05:23.0614 4396 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
12:05:23.0629 4396 arcsas - ok
12:05:23.0676 4396 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
12:05:23.0676 4396 AsyncMac - ok
12:05:23.0707 4396 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
12:05:23.0707 4396 atapi - ok
12:05:23.0863 4396 [ E642491F64E58CD5BC8FB8B347DCF65F ] athr C:\Windows\system32\DRIVERS\athrx.sys
12:05:23.0941 4396 athr - ok
12:05:24.0004 4396 [ C07A040D6B5A42DD41EE386CF90974C8 ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie.sys
12:05:24.0004 4396 AtiPcie - ok
12:05:24.0113 4396 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
12:05:24.0144 4396 AudioEndpointBuilder - ok
12:05:24.0160 4396 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
12:05:24.0175 4396 AudioSrv - ok
12:05:24.0253 4396 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
12:05:24.0253 4396 AxInstSV - ok
12:05:24.0331 4396 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
12:05:24.0331 4396 b06bdrv - ok
12:05:24.0425 4396 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
12:05:24.0440 4396 b57nd60a - ok
12:05:24.0518 4396 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
12:05:24.0518 4396 BDESVC - ok
12:05:24.0550 4396 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
12:05:24.0550 4396 Beep - ok
12:05:24.0659 4396 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
12:05:24.0690 4396 BFE - ok
12:05:24.0924 4396 [ A45BE4E091636F6C86D6E4FC945D5A26 ] BHDrvx64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20120905.001\BHDrvx64.sys
12:05:24.0971 4396 BHDrvx64 - ok
12:05:25.0033 4396 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
12:05:25.0064 4396 BITS - ok
12:05:25.0127 4396 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
12:05:25.0127 4396 blbdrive - ok
12:05:25.0174 4396 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
12:05:25.0189 4396 bowser - ok
12:05:25.0236 4396 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
12:05:25.0236 4396 BrFiltLo - ok
12:05:25.0252 4396 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
12:05:25.0252 4396 BrFiltUp - ok
12:05:25.0298 4396 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
12:05:25.0298 4396 Browser - ok
12:05:25.0314 4396 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
12:05:25.0314 4396 Brserid - ok
12:05:25.0330 4396 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
12:05:25.0330 4396 BrSerWdm - ok
12:05:25.0345 4396 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
12:05:25.0345 4396 BrUsbMdm - ok
12:05:25.0361 4396 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
12:05:25.0361 4396 BrUsbSer - ok
12:05:25.0376 4396 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
12:05:25.0376 4396 BTHMODEM - ok
12:05:25.0408 4396 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
12:05:25.0423 4396 bthserv - ok
12:05:25.0517 4396 [ 2C6FFCCA37B002AAB3C7C31A6D780A76 ] ccSet_NIS C:\Windows\system32\drivers\NISx64\1308000.00E\ccSetx64.sys
12:05:25.0517 4396 ccSet_NIS - ok
12:05:25.0564 4396 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
12:05:25.0579 4396 cdfs - ok
12:05:25.0642 4396 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\drivers\cdrom.sys
12:05:25.0657 4396 cdrom - ok
12:05:25.0720 4396 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
12:05:25.0720 4396 CertPropSvc - ok
12:05:25.0782 4396 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
12:05:25.0782 4396 circlass - ok
12:05:25.0829 4396 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
12:05:25.0844 4396 CLFS - ok
12:05:25.0938 4396 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:05:25.0938 4396 clr_optimization_v2.0.50727_32 - ok
12:05:26.0016 4396 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
12:05:26.0016 4396 clr_optimization_v2.0.50727_64 - ok
12:05:26.0110 4396 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
12:05:26.0125 4396 clr_optimization_v4.0.30319_32 - ok
12:05:26.0172 4396 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
12:05:26.0172 4396 clr_optimization_v4.0.30319_64 - ok
12:05:26.0250 4396 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
12:05:26.0250 4396 CmBatt - ok
12:05:26.0312 4396 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
12:05:26.0312 4396 cmdide - ok
12:05:26.0344 4396 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
12:05:26.0359 4396 CNG - ok
12:05:26.0390 4396 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
12:05:26.0390 4396 Compbatt - ok
12:05:26.0422 4396 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
12:05:26.0422 4396 CompositeBus - ok
12:05:26.0453 4396 COMSysApp - ok
12:05:26.0484 4396 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
12:05:26.0484 4396 crcdisk - ok
12:05:26.0546 4396 [ 4F5414602E2544A4554D95517948B705 ] CryptSvc C:\Windows\system32\cryptsvc.dll
12:05:26.0546 4396 CryptSvc - ok
12:05:26.0609 4396 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
12:05:26.0624 4396 DcomLaunch - ok
12:05:26.0687 4396 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
12:05:26.0687 4396 defragsvc - ok
12:05:26.0734 4396 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
12:05:26.0734 4396 DfsC - ok
12:05:26.0812 4396 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
12:05:26.0827 4396 Dhcp - ok
12:05:26.0874 4396 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
12:05:26.0874 4396 discache - ok
12:05:26.0936 4396 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
12:05:26.0952 4396 Disk - ok
12:05:26.0999 4396 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
12:05:26.0999 4396 Dnscache - ok
12:05:27.0046 4396 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
12:05:27.0061 4396 dot3svc - ok
12:05:27.0092 4396 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
12:05:27.0108 4396 DPS - ok
12:05:27.0170 4396 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
12:05:27.0170 4396 drmkaud - ok
12:05:27.0295 4396 [ 1FCA854CEDFC2CCD0C22E46EA4EA18F1 ] DsiWMIService C:\Program Files (x86)\Launch Manager\dsiwmis.exe
12:05:27.0295 4396 DsiWMIService - ok
12:05:27.0342 4396 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
12:05:27.0389 4396 DXGKrnl - ok
12:05:27.0420 4396 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
12:05:27.0420 4396 EapHost - ok
12:05:27.0545 4396 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
12:05:27.0654 4396 ebdrv - ok
12:05:27.0748 4396 [ 4353FF94D47A0A9D52B89ECCF0CDB013 ] eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
12:05:27.0763 4396 eeCtrl - ok
12:05:27.0794 4396 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
12:05:27.0794 4396 EFS - ok
12:05:27.0904 4396 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
12:05:27.0935 4396 ehRecvr - ok
12:05:27.0966 4396 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
12:05:27.0966 4396 ehSched - ok
12:05:28.0028 4396 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
12:05:28.0044 4396 elxstor - ok
12:05:28.0184 4396 [ 3EA2C4F68A782839D97B3C83595575B6 ] ePowerSvc C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe
12:05:28.0216 4396 ePowerSvc - ok
12:05:28.0309 4396 [ C5BCCB378D0A896304A3E71BE7215983 ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
12:05:28.0309 4396 EraserUtilRebootDrv - ok
12:05:28.0340 4396 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
12:05:28.0356 4396 ErrDev - ok
12:05:28.0450 4396 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
12:05:28.0465 4396 EventSystem - ok
12:05:28.0512 4396 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
12:05:28.0512 4396 exfat - ok
12:05:28.0559 4396 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
12:05:28.0559 4396 fastfat - ok
12:05:28.0652 4396 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
12:05:28.0684 4396 Fax - ok
12:05:28.0730 4396 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
12:05:28.0730 4396 fdc - ok
12:05:28.0793 4396 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
12:05:28.0808 4396 fdPHost - ok
12:05:28.0840 4396 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
12:05:28.0840 4396 FDResPub - ok
12:05:28.0855 4396 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
12:05:28.0855 4396 FileInfo - ok
12:05:28.0886 4396 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
12:05:28.0886 4396 Filetrace - ok
12:05:28.0964 4396 [ BB0667B0171B632B97EA759515476F07 ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
12:05:28.0996 4396 FLEXnet Licensing Service - ok
12:05:29.0027 4396 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
12:05:29.0027 4396 flpydisk - ok
12:05:29.0105 4396 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
12:05:29.0105 4396 FltMgr - ok
12:05:29.0183 4396 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
12:05:29.0230 4396 FontCache - ok
12:05:29.0292 4396 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
12:05:29.0292 4396 FontCache3.0.0.0 - ok
12:05:29.0323 4396 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
12:05:29.0339 4396 FsDepends - ok
12:05:29.0370 4396 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
12:05:29.0370 4396 Fs_Rec - ok
12:05:29.0464 4396 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
12:05:29.0464 4396 fvevol - ok
12:05:29.0510 4396 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
12:05:29.0510 4396 gagp30kx - ok
12:05:29.0651 4396 [ C403C5DB49A0F9AAF4F2128EDC0106D8 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
12:05:29.0666 4396 GamesAppService - ok
12:05:29.0744 4396 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
12:05:29.0776 4396 gpsvc - ok
12:05:29.0869 4396 [ 0191DEE9B9EB7902AF2CF4F67301095D ] GREGService C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe
12:05:29.0869 4396 GREGService - ok
12:05:29.0947 4396 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
12:05:29.0947 4396 gupdate - ok
12:05:29.0978 4396 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
12:05:29.0978 4396 gupdatem - ok
12:05:30.0010 4396 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
12:05:30.0010 4396 hcw85cir - ok
12:05:30.0088 4396 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
12:05:30.0103 4396 HdAudAddService - ok
12:05:30.0166 4396 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
12:05:30.0166 4396 HDAudBus - ok
12:05:30.0197 4396 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
12:05:30.0197 4396 HidBatt - ok
12:05:30.0228 4396 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
12:05:30.0244 4396 HidBth - ok
12:05:30.0259 4396 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
12:05:30.0259 4396 HidIr - ok
12:05:30.0290 4396 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
12:05:30.0290 4396 hidserv - ok
12:05:30.0368 4396 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
12:05:30.0368 4396 HidUsb - ok
12:05:30.0415 4396 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
12:05:30.0415 4396 hkmsvc - ok
12:05:30.0462 4396 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
12:05:30.0478 4396 HomeGroupListener - ok
12:05:30.0524 4396 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
12:05:30.0524 4396 HomeGroupProvider - ok
12:05:30.0602 4396 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
12:05:30.0602 4396 HpSAMD - ok
12:05:30.0665 4396 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
12:05:30.0696 4396 HTTP - ok
12:05:30.0743 4396 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
12:05:30.0758 4396 hwpolicy - ok
12:05:30.0883 4396 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
12:05:30.0883 4396 i8042prt - ok
12:05:30.0977 4396 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
12:05:30.0977 4396 iaStorV - ok
12:05:31.0055 4396 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
12:05:31.0086 4396 idsvc - ok
12:05:31.0226 4396 [ A48928D4CCA6F8B731989DB08CF2C0AB ] IDSVia64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20120906.008\IDSvia64.sys
12:05:31.0226 4396 IDSVia64 - ok
12:05:31.0304 4396 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
12:05:31.0304 4396 iirsp - ok
12:05:31.0429 4396 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
12:05:31.0460 4396 IKEEXT - ok
12:05:31.0601 4396 [ 235362D403D9D677514649D88DB31914 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
12:05:31.0679 4396 IntcAzAudAddService - ok
12:05:31.0726 4396 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
12:05:31.0726 4396 intelide - ok
12:05:31.0772 4396 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
12:05:31.0772 4396 intelppm - ok
12:05:31.0819 4396 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
12:05:31.0819 4396 IPBusEnum - ok
12:05:31.0866 4396 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
12:05:31.0882 4396 IpFilterDriver - ok
12:05:31.0913 4396 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
12:05:31.0928 4396 iphlpsvc - ok
12:05:31.0960 4396 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
12:05:31.0960 4396 IPMIDRV - ok
12:05:32.0006 4396 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
12:05:32.0006 4396 IPNAT - ok
12:05:32.0053 4396 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
12:05:32.0053 4396 IRENUM - ok
12:05:32.0084 4396 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
12:05:32.0100 4396 isapnp - ok
12:05:32.0147 4396 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
12:05:32.0147 4396 iScsiPrt - ok
12:05:32.0240 4396 [ 37E053A2CF8F0082B689ED74106E0CEC ] k57nd60a C:\Windows\system32\DRIVERS\k57nd60a.sys
12:05:32.0240 4396 k57nd60a - ok
12:05:32.0318 4396 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
12:05:32.0318 4396 kbdclass - ok
12:05:32.0396 4396 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
12:05:32.0396 4396 kbdhid - ok
12:05:32.0428 4396 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
12:05:32.0428 4396 KeyIso - ok
12:05:32.0443 4396 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
12:05:32.0459 4396 KSecDD - ok
12:05:32.0506 4396 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
12:05:32.0521 4396 KSecPkg - ok
12:05:32.0584 4396 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
12:05:32.0584 4396 ksthunk - ok
12:05:32.0646 4396 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
12:05:32.0646 4396 KtmRm - ok
12:05:32.0740 4396 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
12:05:32.0740 4396 LanmanServer - ok
12:05:32.0818 4396 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
12:05:32.0833 4396 LanmanWorkstation - ok
12:05:32.0896 4396 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
12:05:32.0896 4396 lltdio - ok
12:05:32.0942 4396 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
12:05:32.0958 4396 lltdsvc - ok
12:05:32.0989 4396 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
12:05:32.0989 4396 lmhosts - ok
12:05:33.0083 4396 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
12:05:33.0083 4396 LSI_FC - ok
12:05:33.0098 4396 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
12:05:33.0114 4396 LSI_SAS - ok
12:05:33.0130 4396 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
12:05:33.0130 4396 LSI_SAS2 - ok
12:05:33.0145 4396 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
12:05:33.0145 4396 LSI_SCSI - ok
12:05:33.0208 4396 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
12:05:33.0208 4396 luafv - ok
12:05:33.0301 4396 [ DC8490812A3B72811AE534F423B4C206 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
12:05:33.0301 4396 MBAMProtector - ok
12:05:33.0395 4396 [ 43683E970F008C93C9429EF428147A54 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
12:05:33.0410 4396 MBAMService - ok
12:05:33.0442 4396 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
12:05:33.0457 4396 Mcx2Svc - ok
12:05:33.0488 4396 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
12:05:33.0488 4396 megasas - ok
12:05:33.0535 4396 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
12:05:33.0535 4396 MegaSR - ok
12:05:33.0613 4396 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
12:05:33.0613 4396 MMCSS - ok
12:05:33.0644 4396 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
12:05:33.0644 4396 Modem - ok
12:05:33.0707 4396 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
12:05:33.0707 4396 monitor - ok
12:05:33.0785 4396 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\drivers\mouclass.sys
12:05:33.0800 4396 mouclass - ok
12:05:33.0878 4396 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
12:05:33.0894 4396 mouhid - ok
12:05:33.0941 4396 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
12:05:33.0941 4396 mountmgr - ok
12:05:33.0972 4396 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
12:05:33.0988 4396 mpio - ok
12:05:34.0019 4396 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
12:05:34.0019 4396 mpsdrv - ok
12:05:34.0050 4396 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
12:05:34.0066 4396 MpsSvc - ok
12:05:34.0112 4396 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
12:05:34.0112 4396 MRxDAV - ok
12:05:34.0159 4396 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
12:05:34.0159 4396 mrxsmb - ok
12:05:34.0190 4396 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
12:05:34.0206 4396 mrxsmb10 - ok
12:05:34.0237 4396 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
12:05:34.0237 4396 mrxsmb20 - ok
12:05:34.0284 4396 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
12:05:34.0284 4396 msahci - ok
12:05:34.0315 4396 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
12:05:34.0315 4396 msdsm - ok
12:05:34.0362 4396 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
12:05:34.0378 4396 MSDTC - ok
12:05:34.0440 4396 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
12:05:34.0440 4396 Msfs - ok
12:05:34.0471 4396 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
12:05:34.0471 4396 mshidkmdf - ok
12:05:34.0518 4396 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
12:05:34.0518 4396 msisadrv - ok
12:05:34.0549 4396 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
12:05:34.0565 4396 MSiSCSI - ok
12:05:34.0565 4396 msiserver - ok
12:05:34.0596 4396 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
12:05:34.0596 4396 MSKSSRV - ok
12:05:34.0627 4396 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
12:05:34.0627 4396 MSPCLOCK - ok
12:05:34.0627 4396 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
12:05:34.0643 4396 MSPQM - ok
12:05:34.0674 4396 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
12:05:34.0674 4396 MsRPC - ok
12:05:34.0721 4396 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
12:05:34.0721 4396 mssmbios - ok
12:05:34.0736 4396 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
12:05:34.0736 4396 MSTEE - ok
12:05:34.0752 4396 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
12:05:34.0752 4396 MTConfig - ok
12:05:34.0768 4396 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
12:05:34.0768 4396 Mup - ok
12:05:34.0799 4396 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
12:05:34.0814 4396 napagent - ok
12:05:34.0877 4396 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
12:05:34.0892 4396 NativeWifiP - ok
12:05:35.0002 4396 [ 149A9AD81BB327E892FA1ACB77722442 ] NAVENG C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20120906.018\ENG64.SYS
12:05:35.0017 4396 NAVENG - ok
12:05:35.0095 4396 [ 4AF8750E71B549FEC5F6D1D01398CA69 ] NAVEX15 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20120906.018\EX64.SYS
12:05:35.0158 4396 NAVEX15 - ok
12:05:35.0236 4396 [ 79B47FD40D9A817E932F9D26FAC0A81C ] NDIS C:\Windows\system32\drivers\ndis.sys
12:05:35.0282 4396 NDIS - ok
12:05:35.0345 4396 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
12:05:35.0345 4396 NdisCap - ok
12:05:35.0423 4396 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
12:05:35.0423 4396 NdisTapi - ok
12:05:35.0485 4396 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
12:05:35.0501 4396 Ndisuio - ok
12:05:35.0548 4396 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
12:05:35.0548 4396 NdisWan - ok
12:05:35.0610 4396 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
12:05:35.0610 4396 NDProxy - ok
12:05:35.0672 4396 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
12:05:35.0672 4396 NetBIOS - ok
12:05:35.0719 4396 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
12:05:35.0735 4396 NetBT - ok
12:05:35.0750 4396 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
12:05:35.0766 4396 Netlogon - ok
12:05:35.0844 4396 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
12:05:35.0860 4396 Netman - ok
12:05:35.0891 4396 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
12:05:35.0891 4396 netprofm - ok
12:05:35.0938 4396 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
12:05:35.0938 4396 NetTcpPortSharing - ok
12:05:35.0984 4396 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
12:05:35.0984 4396 nfrd960 - ok
12:05:36.0109 4396 [ F2840DBFE9322F35557219AE82CC4597 ] NIS C:\Program Files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe
12:05:36.0109 4396 NIS - ok
12:05:36.0203 4396 [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc C:\Windows\System32\nlasvc.dll
12:05:36.0203 4396 NlaSvc - ok
12:05:36.0250 4396 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
12:05:36.0250 4396 Npfs - ok
12:05:36.0281 4396 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
12:05:36.0296 4396 nsi - ok
12:05:36.0328 4396 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
12:05:36.0328 4396 nsiproxy - ok
12:05:36.0421 4396 [ A2F74975097F52A00745F9637451FDD8 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
12:05:36.0468 4396 Ntfs - ok
12:05:36.0499 4396 [ EE3BA1024594D5D09E314F206B94069E ] NTIDrvr C:\Windows\system32\drivers\NTIDrvr.sys
12:05:36.0515 4396 NTIDrvr - ok
12:05:36.0546 4396 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
12:05:36.0546 4396 Null - ok
12:05:36.0577 4396 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
12:05:36.0577 4396 nvraid - ok
12:05:36.0624 4396 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
12:05:36.0624 4396 nvstor - ok
12:05:36.0671 4396 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
12:05:36.0671 4396 nv_agp - ok
12:05:36.0718 4396 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
12:05:36.0733 4396 ohci1394 - ok
12:05:36.0780 4396 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
12:05:36.0796 4396 p2pimsvc - ok
12:05:36.0842 4396 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
12:05:36.0858 4396 p2psvc - ok
12:05:36.0905 4396 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
12:05:36.0905 4396 Parport - ok
12:05:36.0936 4396 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
12:05:36.0952 4396 partmgr - ok
12:05:36.0967 4396 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
12:05:36.0967 4396 PcaSvc - ok
12:05:37.0014 4396 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
12:05:37.0014 4396 pci - ok
12:05:37.0030 4396 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
12:05:37.0030 4396 pciide - ok
12:05:37.0076 4396 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
12:05:37.0076 4396 pcmcia - ok
12:05:37.0092 4396 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
12:05:37.0092 4396 pcw - ok
12:05:37.0123 4396 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
12:05:37.0139 4396 PEAUTH - ok
12:05:37.0264 4396 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
12:05:37.0264 4396 PerfHost - ok
12:05:37.0357 4396 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
12:05:37.0420 4396 pla - ok
12:05:37.0498 4396 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
12:05:37.0513 4396 PlugPlay - ok
12:05:37.0576 4396 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
12:05:37.0576 4396 PNRPAutoReg - ok
12:05:37.0654 4396 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
12:05:37.0669 4396 PNRPsvc - ok
12:05:37.0716 4396 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
12:05:37.0732 4396 PolicyAgent - ok
12:05:37.0763 4396 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
12:05:37.0763 4396 Power - ok
12:05:37.0810 4396 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
12:05:37.0825 4396 PptpMiniport - ok
12:05:37.0856 4396 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
12:05:37.0872 4396 Processor - ok
12:05:37.0934 4396 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
12:05:37.0950 4396 ProfSvc - ok
12:05:37.0981 4396 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
12:05:37.0981 4396 ProtectedStorage - ok
12:05:38.0059 4396 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
12:05:38.0059 4396 Psched - ok
12:05:38.0137 4396 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
12:05:38.0184 4396 ql2300 - ok
12:05:38.0215 4396 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
12:05:38.0231 4396 ql40xx - ok
12:05:38.0278 4396 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
12:05:38.0278 4396 QWAVE - ok
12:05:38.0309 4396 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
12:05:38.0324 4396 QWAVEdrv - ok
12:05:38.0324 4396 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
12:05:38.0324 4396 RasAcd - ok
12:05:38.0387 4396 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
12:05:38.0387 4396 RasAgileVpn - ok
12:05:38.0434 4396 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
12:05:38.0434 4396 RasAuto - ok
12:05:38.0480 4396 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
12:05:38.0480 4396 Rasl2tp - ok
12:05:38.0527 4396 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
12:05:38.0543 4396 RasMan - ok
12:05:38.0590 4396 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
12:05:38.0590 4396 RasPppoe - ok
12:05:38.0652 4396 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
12:05:38.0652 4396 RasSstp - ok
12:05:38.0699 4396 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
12:05:38.0714 4396 rdbss - ok
12:05:38.0746 4396 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
12:05:38.0746 4396 rdpbus - ok
12:05:38.0777 4396 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
12:05:38.0777 4396 RDPCDD - ok
12:05:38.0808 4396 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
12:05:38.0808 4396 RDPENCDD - ok
12:05:38.0839 4396 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
12:05:38.0839 4396 RDPREFMP - ok
12:05:38.0917 4396 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
12:05:38.0933 4396 RDPWD - ok
12:05:39.0011 4396 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
12:05:39.0011 4396 rdyboost - ok
12:05:39.0042 4396 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
12:05:39.0058 4396 RemoteAccess - ok
12:05:39.0104 4396 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
12:05:39.0120 4396 RemoteRegistry - ok
12:05:39.0182 4396 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
12:05:39.0198 4396 RpcEptMapper - ok
12:05:39.0245 4396 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
12:05:39.0276 4396 RpcLocator - ok
12:05:39.0385 4396 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
12:05:39.0401 4396 RpcSs - ok
12:05:39.0510 4396 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
12:05:39.0541 4396 rspndr - ok
12:05:39.0760 4396 [ 763AE0C6D9DF4C24B7E2C26036A8188A ] RSUSBSTOR C:\Windows\system32\Drivers\RtsUStor.sys
12:05:39.0760 4396 RSUSBSTOR - ok
12:05:39.0853 4396 [ D6D381B76056C668679723938F06F16C ] RTHDMIAzAudService C:\Windows\system32\drivers\RtHDMIVX.sys
12:05:39.0853 4396 RTHDMIAzAudService - ok
12:05:39.0884 4396 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
12:05:39.0900 4396 SamSs - ok
12:05:39.0931 4396 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
12:05:39.0947 4396 sbp2port - ok
12:05:39.0994 4396 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
12:05:39.0994 4396 SCardSvr - ok
12:05:40.0040 4396 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
12:05:40.0040 4396 scfilter - ok
12:05:40.0103 4396 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
12:05:40.0150 4396 Schedule - ok
12:05:40.0181 4396 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
12:05:40.0181 4396 SCPolicySvc - ok
12:05:40.0212 4396 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
12:05:40.0212 4396 SDRSVC - ok
12:05:40.0243 4396 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
12:05:40.0243 4396 secdrv - ok
12:05:40.0290 4396 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
12:05:40.0290 4396 seclogon - ok
12:05:40.0306 4396 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
12:05:40.0321 4396 SENS - ok
12:05:40.0368 4396 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
12:05:40.0368 4396 SensrSvc - ok
12:05:40.0399 4396 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
12:05:40.0399 4396 Serenum - ok
12:05:40.0430 4396 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
12:05:40.0446 4396 Serial - ok
12:05:40.0462 4396 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
12:05:40.0462 4396 sermouse - ok
12:05:40.0508 4396 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
12:05:40.0508 4396 SessionEnv - ok
12:05:40.0540 4396 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
12:05:40.0540 4396 sffdisk - ok
12:05:40.0571 4396 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
12:05:40.0571 4396 sffp_mmc - ok
12:05:40.0586 4396 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
12:05:40.0602 4396 sffp_sd - ok
12:05:40.0633 4396 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
12:05:40.0633 4396 sfloppy - ok
12:05:40.0727 4396 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
12:05:40.0727 4396 SharedAccess - ok
12:05:40.0789 4396 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
12:05:40.0805 4396 ShellHWDetection - ok
12:05:40.0820 4396 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
12:05:40.0820 4396 SiSRaid2 - ok
12:05:40.0852 4396 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
12:05:40.0852 4396 SiSRaid4 - ok
12:05:40.0883 4396 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
12:05:40.0883 4396 Smb - ok
12:05:40.0945 4396 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
12:05:40.0945 4396 SNMPTRAP - ok
12:05:40.0961 4396 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
12:05:40.0961 4396 spldr - ok
12:05:41.0008 4396 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
12:05:41.0023 4396 Spooler - ok
12:05:41.0164 4396 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
12:05:41.0257 4396 sppsvc - ok
12:05:41.0304 4396 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
12:05:41.0304 4396 sppuinotify - ok
12:05:41.0413 4396 [ 891793E00432FA055CF040605C260E49 ] SRTSP C:\Windows\System32\Drivers\NISx64\1308000.00E\SRTSP64.SYS
12:05:41.0460 4396 SRTSP - ok
12:05:41.0491 4396 [ 1CB7BB3B0561FB5ECFE37F7731E8BF3E ] SRTSPX C:\Windows\system32\drivers\NISx64\1308000.00E\SRTSPX64.SYS
12:05:41.0491 4396 SRTSPX - ok
12:05:41.0554 4396 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
12:05:41.0554 4396 srv - ok
12:05:41.0632 4396 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
12:05:41.0647 4396 srv2 - ok
12:05:41.0694 4396 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
12:05:41.0694 4396 srvnet - ok
12:05:41.0756 4396 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
12:05:41.0772 4396 SSDPSRV - ok
12:05:41.0803 4396 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
12:05:41.0803 4396 SstpSvc - ok
12:05:41.0850 4396 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
12:05:41.0850 4396 stexstor - ok
12:05:41.0944 4396 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
12:05:41.0959 4396 stisvc - ok
12:05:41.0990 4396 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
12:05:41.0990 4396 swenum - ok
12:05:42.0053 4396 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
12:05:42.0084 4396 swprv - ok
12:05:42.0162 4396 [ 8B2430762099598DA40686F754632EFD ] SymDS C:\Windows\system32\drivers\NISx64\1308000.00E\SYMDS64.SYS
12:05:42.0178 4396 SymDS - ok
12:05:42.0256 4396 [ 5CB7F2FD7E30A0F52F93574BFC3A8041 ] SymEFA C:\Windows\system32\drivers\NISx64\1308000.00E\SYMEFA64.SYS
12:05:42.0302 4396 SymEFA - ok
12:05:42.0380 4396 [ 898BB48C797483420DF523B2BBC1ECDB ] SymEvent C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
12:05:42.0380 4396 SymEvent - ok
12:05:42.0458 4396 [ 5013A76CAAA1D7CF1C55214B490B4E35 ] SymIRON C:\Windows\system32\drivers\NISx64\1308000.00E\Ironx64.SYS
12:05:42.0474 4396 SymIRON - ok
12:05:42.0552 4396 [ 3911BD0E68C010E5438A87706ABBE9AB ] SymNetS C:\Windows\System32\Drivers\NISx64\1308000.00E\SYMNETS.SYS
12:05:42.0568 4396 SymNetS - ok
12:05:42.0614 4396 [ 064A2530A4A7C7CEC1BE6A1945645BE4 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
12:05:42.0630 4396 SynTP - ok
12:05:42.0708 4396 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
12:05:42.0770 4396 SysMain - ok
12:05:42.0817 4396 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
12:05:42.0817 4396 TabletInputService - ok
12:05:42.0864 4396 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
12:05:42.0880 4396 TapiSrv - ok
12:05:42.0926 4396 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
12:05:42.0926 4396 TBS - ok
12:05:43.0020 4396 [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
12:05:43.0098 4396 Tcpip - ok
12:05:43.0207 4396 [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
12:05:43.0223 4396 TCPIP6 - ok
12:05:43.0254 4396 [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
12:05:43.0254 4396 tcpipreg - ok
12:05:43.0285 4396 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
12:05:43.0285 4396 TDPIPE - ok
12:05:43.0316 4396 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
12:05:43.0316 4396 TDTCP - ok
12:05:43.0394 4396 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
12:05:43.0410 4396 tdx - ok
12:05:43.0441 4396 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
12:05:43.0457 4396 TermDD - ok
12:05:43.0488 4396 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
12:05:43.0504 4396 TermService - ok
12:05:43.0550 4396 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
12:05:43.0550 4396 Themes - ok
12:05:43.0582 4396 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
12:05:43.0582 4396 THREADORDER - ok
12:05:43.0628 4396 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
12:05:43.0644 4396 TrkWks - ok
12:05:43.0722 4396 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
12:05:43.0722 4396 TrustedInstaller - ok
12:05:43.0784 4396 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
12:05:43.0800 4396 tssecsrv - ok
12:05:43.0878 4396 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
12:05:43.0878 4396 TsUsbFlt - ok
12:05:43.0956 4396 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
12:05:43.0956 4396 tunnel - ok
12:05:44.0003 4396 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
12:05:44.0003 4396 uagp35 - ok
12:05:44.0050 4396 [ A17D5E1A6DF4EAB0A480F2C490DE4C9D ] UBHelper C:\Windows\system32\drivers\UBHelper.sys
12:05:44.0050 4396 UBHelper - ok
12:05:44.0096 4396 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
12:05:44.0096 4396 udfs - ok
12:05:44.0159 4396 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
12:05:44.0174 4396 UI0Detect - ok
12:05:44.0206 4396 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
12:05:44.0221 4396 uliagpkx - ok
12:05:44.0299 4396 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
12:05:44.0299 4396 umbus - ok
12:05:44.0346 4396 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
12:05:44.0346 4396 UmPass - ok
12:05:44.0440 4396 [ F9EC9ACD504D823D9B9CA98A4F8D3CA2 ] Updater Service C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
12:05:44.0440 4396 Updater Service - ok
12:05:44.0486 4396 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
12:05:44.0502 4396 upnphost - ok
12:05:44.0549 4396 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
12:05:44.0549 4396 usbccgp - ok
12:05:44.0611 4396 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
12:05:44.0627 4396 usbcir - ok
12:05:44.0658 4396 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
12:05:44.0658 4396 usbehci - ok
12:05:44.0736 4396 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
12:05:44.0752 4396 usbhub - ok
12:05:44.0783 4396 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
12:05:44.0783 4396 usbohci - ok
12:05:44.0861 4396 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
12:05:44.0861 4396 usbprint - ok
12:05:44.0892 4396 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
12:05:44.0908 4396 usbscan - ok
12:05:44.0954 4396 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
12:05:44.0954 4396 USBSTOR - ok
12:05:44.0986 4396 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
12:05:44.0986 4396 usbuhci - ok
12:05:45.0079 4396 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
12:05:45.0095 4396 usbvideo - ok
12:05:45.0126 4396 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
12:05:45.0126 4396 UxSms - ok
12:05:45.0157 4396 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
12:05:45.0157 4396 VaultSvc - ok
12:05:45.0220 4396 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
12:05:45.0220 4396 vdrvroot - ok
12:05:45.0282 4396 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
12:05:45.0298 4396 vds - ok
12:05:45.0344 4396 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
12:05:45.0344 4396 vga - ok
12:05:45.0376 4396 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
12:05:45.0391 4396 VgaSave - ok
12:05:45.0438 4396 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
12:05:45.0438 4396 vhdmp - ok
12:05:45.0485 4396 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
12:05:45.0485 4396 viaide - ok
12:05:45.0516 4396 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
12:05:45.0516 4396 volmgr - ok
12:05:45.0563 4396 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
12:05:45.0563 4396 volmgrx - ok
12:05:45.0625 4396 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
12:05:45.0625 4396 volsnap - ok
12:05:45.0656 4396 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
12:05:45.0672 4396 vsmraid - ok
12:05:45.0750 4396 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
12:05:45.0812 4396 VSS - ok
12:05:45.0844 4396 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
12:05:45.0844 4396 vwifibus - ok
12:05:45.0890 4396 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
12:05:45.0906 4396 vwififlt - ok

12:05:45.0922 4396 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
12:05:45.0937 4396 vwifimp - ok
12:05:45.0968 4396 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
12:05:45.0984 4396 W32Time - ok
12:05:46.0015 4396 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
12:05:46.0015 4396 WacomPen - ok
12:05:46.0093 4396 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
12:05:46.0093 4396 WANARP - ok
12:05:46.0124 4396 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
12:05:46.0124 4396 Wanarpv6 - ok
12:05:46.0234 4396 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
12:05:46.0280 4396 WatAdminSvc - ok
12:05:46.0374 4396 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
12:05:46.0421 4396 wbengine - ok
12:05:46.0483 4396 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
12:05:46.0483 4396 WbioSrvc - ok
12:05:46.0530 4396 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
12:05:46.0546 4396 wcncsvc - ok
12:05:46.0577 4396 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
12:05:46.0577 4396 WcsPlugInService - ok
12:05:46.0639 4396 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
12:05:46.0639 4396 Wd - ok
12:05:46.0686 4396 [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
12:05:46.0702 4396 Wdf01000 - ok
12:05:46.0733 4396 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
12:05:46.0748 4396 WdiServiceHost - ok
12:05:46.0748 4396 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
12:05:46.0764 4396 WdiSystemHost - ok
12:05:46.0795 4396 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
12:05:46.0795 4396 WebClient - ok
12:05:46.0811 4396 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
12:05:46.0826 4396 Wecsvc - ok
12:05:46.0842 4396 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
12:05:46.0842 4396 wercplsupport - ok
12:05:46.0873 4396 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
12:05:46.0873 4396 WerSvc - ok
12:05:47.0014 4396 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
12:05:47.0014 4396 WfpLwf - ok
12:05:47.0060 4396 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
12:05:47.0076 4396 WIMMount - ok
12:05:47.0107 4396 WinDefend - ok
12:05:47.0138 4396 WinHttpAutoProxySvc - ok
12:05:47.0201 4396 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
12:05:47.0216 4396 Winmgmt - ok
12:05:47.0326 4396 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
12:05:47.0388 4396 WinRM - ok
12:05:47.0513 4396 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
12:05:47.0513 4396 WinUsb - ok
12:05:47.0606 4396 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
12:05:47.0638 4396 Wlansvc - ok
12:05:47.0684 4396 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
12:05:47.0700 4396 WmiAcpi - ok
12:05:47.0747 4396 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
12:05:47.0762 4396 wmiApSrv - ok
12:05:47.0794 4396 WMPNetworkSvc - ok
12:05:47.0840 4396 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
12:05:47.0840 4396 WPCSvc - ok
12:05:47.0887 4396 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
12:05:47.0887 4396 WPDBusEnum - ok
12:05:47.0934 4396 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
12:05:47.0934 4396 ws2ifsl - ok
12:05:47.0981 4396 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
12:05:47.0981 4396 wscsvc - ok
12:05:48.0012 4396 WSearch - ok
12:05:48.0121 4396 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
12:05:48.0215 4396 wuauserv - ok
12:05:48.0246 4396 [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
12:05:48.0246 4396 WudfPf - ok
12:05:48.0308 4396 [ CF8D590BE3373029D57AF80914190682 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
12:05:48.0324 4396 WUDFRd - ok
12:05:48.0355 4396 [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
12:05:48.0371 4396 wudfsvc - ok
12:05:48.0402 4396 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
12:05:48.0418 4396 WwanSvc - ok
12:05:48.0480 4396 ================ Scan global ===============================
12:05:48.0542 4396 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
12:05:48.0589 4396 [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
12:05:48.0620 4396 [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
12:05:48.0667 4396 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
12:05:48.0714 4396 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
12:05:48.0730 4396 [Global] - ok
12:05:48.0730 4396 ================ Scan MBR ==================================
12:05:48.0745 4396 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
12:05:49.0151 4396 \Device\Harddisk0\DR0 - ok
12:05:49.0166 4396 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR4
12:05:49.0229 4396 \Device\Harddisk1\DR4 - ok
12:05:49.0244 4396 ================ Scan VBR ==================================
12:05:49.0244 4396 [ 9364AC65669FD25E53DC2D0132D60E39 ] \Device\Harddisk0\DR0\Partition1
12:05:49.0244 4396 \Device\Harddisk0\DR0\Partition1 - ok
12:05:49.0260 4396 [ D48FA0D9381273E058D16171B910B505 ] \Device\Harddisk0\DR0\Partition2
12:05:49.0260 4396 \Device\Harddisk0\DR0\Partition2 - ok
12:05:49.0276 4396 [ 205B1B8A2DBDC5F2BB4FDA3C066FB668 ] \Device\Harddisk1\DR4\Partition1
12:05:49.0276 4396 \Device\Harddisk1\DR4\Partition1 - ok
12:05:49.0276 4396 ============================================================
12:05:49.0276 4396 Scan finished
12:05:49.0276 4396 ============================================================
12:05:49.0291 3496 Detected object count: 0
12:05:49.0291 3496 Actual detected object count: 0
12:06:20.0975 3112 Deinitialize success

ComboFix 12-09-06.04 - Sabina 07.09.2012 12:17:33.1.1 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.2811.1657 [GMT 2:00]
Spuštěný z: c:\users\Sabina\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\windows\SysWow64\DEBUG.log
c:\windows\SysWow64\FlashPlayerInstaller.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-08-07 do 2012-09-07 )))))))))))))))))))))))))))))))
.
.
2012-09-06 21:11 . 2012-09-06 21:11 -------- d-----w- c:\users\Sabina\AppData\Local\ATI
2012-09-06 19:45 . 2012-09-06 19:45 -------- d-----w- c:\users\Sabina\AppData\Roaming\Malwarebytes
2012-09-06 19:44 . 2012-09-06 19:44 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-09-06 19:44 . 2012-09-06 19:44 -------- d-----w- c:\programdata\Malwarebytes
2012-09-06 19:44 . 2012-07-03 11:46 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-06 16:18 . 2012-09-06 16:18 -------- d-----w- c:\users\Sabina\AppData\Roaming\Flood Light Games
2012-09-06 16:18 . 2012-09-06 16:18 -------- d-----w- c:\programdata\Flood Light Games
2012-09-06 16:17 . 2012-09-06 16:17 -------- d-----w- c:\program files (x86)\Agatha Christie Dead Man's Folly
2012-09-06 09:31 . 2012-09-06 09:31 -------- d-----w- c:\programdata\boost_interprocess
2012-09-06 09:12 . 2012-09-06 09:12 -------- d-----w- c:\program files (x86)\Cisco
2012-09-06 09:11 . 2012-09-06 09:10 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2012-09-06 09:11 . 2012-09-06 09:11 -------- d-----w- c:\program files\Broadcom
2012-09-06 09:07 . 2012-09-06 09:07 -------- d-----w- c:\program files (x86)\Atheros
2012-09-06 09:07 . 2010-05-11 16:11 2229608 ----a-w- c:\windows\system32\athrx.sys
2012-09-06 09:06 . 2012-09-06 09:07 -------- d-----w- c:\programdata\Atheros
2012-09-06 09:06 . 2012-09-06 09:06 -------- d-----w- c:\users\Sabina\AppData\Roaming\InstallShield
2012-09-05 16:27 . 2012-09-06 13:32 -------- d-----w- c:\programdata\Big Fish Games
2012-09-05 16:24 . 2012-09-06 13:32 -------- d-----w- C:\BigFishGamesCache
2012-09-05 16:12 . 2012-09-05 16:12 -------- d-----w- c:\users\Sabina\AppData\Roaming\Floodlight Games
2012-09-05 16:12 . 2012-09-05 16:12 -------- d-----w- c:\programdata\Floodlight Games
2012-09-05 16:09 . 2012-09-05 16:09 -------- d-----w- c:\program files (x86)\WildGames
2012-09-05 15:46 . 2012-09-05 16:09 -------- d-----w- c:\program files (x86)\WildTangent Games
2012-09-05 06:14 . 2012-09-05 06:14 -------- d-----w- c:\programdata\Wild Tangent
2012-09-04 15:48 . 2012-09-04 15:48 -------- d-----w- c:\users\Sabina\AppData\Roaming\FloodLightGames
2012-09-04 15:48 . 2012-09-04 15:48 -------- d-----w- c:\programdata\FloodLightGames
2012-08-28 13:28 . 2012-08-28 13:28 -------- d-----w- c:\programdata\McAfee
2012-08-27 21:50 . 2012-08-27 21:50 -------- d-----w- c:\program files (x86)\VisiPics
2012-08-27 21:23 . 2012-08-27 21:23 -------- d-----w- c:\program files\CCleaner
2012-08-27 21:09 . 2012-08-27 21:09 -------- d-----w- C:\RecoveryBin
2012-08-27 21:06 . 2012-08-27 21:06 -------- d-----w- c:\windows\Downloaded Installations
2012-08-27 21:05 . 2012-08-27 21:19 -------- d-----w- c:\program files (x86)\Executive Software
2012-08-27 21:04 . 2012-08-27 21:06 -------- d-----w- c:\users\Sabina\AppData\Local\FileTypeAssistant
2012-08-27 20:58 . 2012-08-27 20:58 -------- d-----w- c:\programdata\Uniblue
2012-08-27 20:54 . 2012-08-27 20:54 -------- d-----w- c:\program files (x86)\File Type Assistant
2012-08-27 20:52 . 2012-08-28 00:02 -------- d-----w- c:\program files (x86)\PC Speed Up
2012-08-27 20:52 . 2012-08-27 20:52 -------- d-----w- c:\program files (x86)\Free Offers from Freeze.com
2012-08-27 15:41 . 2009-08-24 08:15 761152 ----a-w- c:\windows\SysWow64\msvcr100.dll
2012-08-27 15:41 . 2007-11-06 22:19 655872 ----a-w- c:\windows\SysWow64\msvcr90.dll
2012-08-27 15:41 . 2004-01-11 21:00 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll
2012-08-27 15:40 . 2012-08-28 00:01 -------- d-----w- c:\program files (x86)\Miranda IM KP v5.0.9.16
2012-08-27 15:36 . 2012-08-27 15:37 -------- d-----w- c:\users\Sabina\AppData\Roaming\PhotoFiltre Studio X
2012-08-27 14:47 . 2012-09-07 10:04 -------- d-----w- c:\users\Sabina\AppData\Roaming\ICQ
2012-08-27 14:47 . 2012-08-27 14:49 -------- d-----w- c:\program files (x86)\ICQ7M
2012-08-27 14:41 . 2012-08-27 16:04 -------- d-----w- c:\users\Sabina\AppData\Roaming\QIP
2012-08-27 14:38 . 2012-08-27 14:38 -------- d-----w- c:\users\Sabina\AppData\Roaming\Miranda
2012-08-27 14:37 . 2012-08-27 15:42 -------- d-----w- c:\program files (x86)\Miranda IM
2012-08-27 11:44 . 2012-08-27 17:50 -------- d-----w- c:\users\Sabina\AppData\Local\Facebook
2012-08-27 10:40 . 2012-08-28 08:26 -------- d-----w- c:\program files\Symantec
2012-08-27 10:39 . 2012-08-28 16:58 -------- d-----w- c:\windows\system32\drivers\NISx64
2012-08-27 10:39 . 2012-08-27 10:39 -------- d-----w- c:\program files (x86)\Norton Internet Security
2012-08-27 10:36 . 2012-08-27 10:36 -------- d-----w- c:\program files (x86)\NortonInstaller
2012-08-27 10:22 . 2012-08-27 10:22 -------- d-----w- c:\program files (x86)\LG Electronics
2012-08-27 10:22 . 2001-09-05 03:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2012-08-27 10:22 . 2001-09-05 03:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll
2012-08-27 10:22 . 2001-09-05 03:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2012-08-27 10:22 . 2001-09-05 03:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2012-08-27 10:22 . 2002-07-25 15:07 614532 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe
2012-08-27 10:19 . 2012-08-01 22:58 9309624 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{68F725B0-2A73-4AEB-B739-E185A5597C1B}\mpengine.dll
2012-08-25 16:54 . 2012-05-05 08:36 503808 ----a-w- c:\windows\system32\srcore.dll
2012-08-25 16:54 . 2012-05-05 07:46 43008 ----a-w- c:\windows\SysWow64\srclient.dll
2012-08-25 16:54 . 2012-02-11 06:43 751104 ----a-w- c:\windows\system32\win32spl.dll
2012-08-25 16:54 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe
2012-08-25 16:54 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe
2012-08-25 16:54 . 2012-02-11 05:43 492032 ----a-w- c:\windows\SysWow64\win32spl.dll
2012-08-25 16:54 . 2012-07-04 22:16 73216 ----a-w- c:\windows\system32\netapi32.dll
2012-08-25 16:54 . 2012-07-04 22:13 59392 ----a-w- c:\windows\system32\browcli.dll
2012-08-25 16:54 . 2012-07-04 22:13 136704 ----a-w- c:\windows\system32\browser.dll
2012-08-25 16:54 . 2012-07-04 21:14 41984 ----a-w- c:\windows\SysWow64\browcli.dll
2012-08-25 16:54 . 2012-07-18 18:15 3148800 ----a-w- c:\windows\system32\win32k.sys
2012-08-25 16:54 . 2012-05-14 05:26 956928 ----a-w- c:\windows\system32\localspl.dll
2012-08-22 16:40 . 2012-08-22 16:40 -------- d-----w- c:\program files (x86)\VS Revo Group
2012-08-22 16:32 . 2012-08-22 16:32 -------- d-----w- c:\programdata\AVAST Software
2012-08-22 16:32 . 2012-08-22 16:32 -------- d-----w- c:\program files\AVAST Software
2012-08-18 09:07 . 2012-08-19 16:17 -------- d-----w- C:\048a3a01ef8ff53a2e1f43e058
2012-08-14 10:08 . 2012-08-14 10:08 -------- d-----w- c:\users\jablickova\AppData\Local\ElevatedDiagnostics
2012-08-13 19:35 . 2012-08-25 17:33 -------- d-----w- c:\program files (x86)\rajce
2012-08-13 19:14 . 2012-08-25 17:33 -------- d-----w- c:\users\Sabina\AppData\Roaming\Jpeg Resampler
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-28 13:28 . 2012-05-07 11:06 73416 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-08-28 13:28 . 2012-05-07 11:06 696520 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-08-28 08:25 . 2012-04-28 02:35 175736 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2012-08-27 10:06 . 2012-05-20 14:17 62134624 ----a-w- c:\windows\system32\MRT.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ICQ"="c:\program files (x86)\ICQ7M\ICQ.exe" [2012-08-27 127040]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-06-22 968272]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-04-21 98304]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-07-03 462920]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-28 135664]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-28 250568]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-28 135664]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2010-06-17 246376]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-04-29 1255736]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1308000.00E\SYMDS64.SYS [2011-07-25 451192]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1308000.00E\SYMEFA64.SYS [2012-05-22 1129120]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20120905.001\BHDrvx64.sys [2012-08-31 1385120]
S1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\NISx64\1308000.00E\ccSetx64.sys [2012-06-07 167072]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20120906.008\IDSvia64.sys [2012-09-01 513184]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1308000.00E\Ironx64.SYS [2012-04-18 190072]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1308000.00E\SYMNETS.SYS [2012-04-18 405624]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-04-20 202752]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-06-22 321104]
S2 ePowerSvc;Acer ePower Service;c:\program files\eMachines\eMachines Power Management\ePowerSvc.exe [2010-06-11 868896]
S2 GREGService;GREGService;c:\program files (x86)\eMachines\Registration\GREGsvc.exe [2010-01-08 23584]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-07-03 655944]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe [2012-06-16 138272]
S2 Updater Service;Updater Service;c:\program files\eMachines\eMachines Updater\UpdaterService.exe [2010-01-28 243232]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2010-04-21 6406144]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-04-20 188928]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-08-27 138912]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2010-05-14 384040]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-07-03 24904]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2012-09-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-07 13:28]
.
2012-09-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-28 03:24]
.
2012-09-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-28 03:24]
.
2012-09-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1156782259-1607028684-1919980262-1001Core.job
- c:\users\Sabina\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-30 11:12]
.
2012-09-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1156782259-1607028684-1919980262-1001UA.job
- c:\users\Sabina\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-30 11:12]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-06-22 10920552]
"PLFSetI"="c:\windows\PLFSetI.exe" [2010-06-10 206208]
"Acer ePower Management"="c:\program files\eMachines\eMachines Power Management\ePowerTray.exe" [2010-06-11 861216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: {{781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - c:\program files (x86)\ICQ7M\ICQ.exe
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\19.8.0.14\diMaster.dll\" /prefetch:1"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-09-07 12:48:08 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-09-07 10:48
.
Před spuštěním: Volných bajtů: 429 342 384 128
Po spuštění: Volných bajtů: 429 198 856 192
.
- - End Of File - - B3523BAC7E4509B2E80368E05CA54866

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upus.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu

ComboFix 12-09-06.04 - Sabina 07.09.2012 17:38:43.2.1 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.2811.1463 [GMT 2:00]
Spuštěný z: c:\users\Sabina\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Sabina\Desktop\CFScript.txt
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1156782259-1607028684-1919980262-1001Core.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1156782259-1607028684-1919980262-1001UA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Google\Update
c:\program files (x86)\Google\Update\1.3.21.115\GoogleCrashHandler.exe
c:\program files (x86)\Google\Update\1.3.21.115\GoogleCrashHandler64.exe
c:\program files (x86)\Google\Update\1.3.21.115\GoogleUpdate.exe
c:\program files (x86)\Google\Update\1.3.21.115\GoogleUpdateBroker.exe
c:\program files (x86)\Google\Update\1.3.21.115\GoogleUpdateHelper.msi
c:\program files (x86)\Google\Update\1.3.21.115\GoogleUpdateOnDemand.exe
c:\program files (x86)\Google\Update\1.3.21.115\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\1.3.21.115\goopdate.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_am.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_ar.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_bg.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_bn.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_ca.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_cs.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_da.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_de.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_el.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_en-GB.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_en.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_es-419.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_es.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_et.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_fa.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_fi.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_fil.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_fr.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_gu.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_hi.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_hr.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_hu.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_id.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_is.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_it.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_iw.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_ja.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_kn.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_ko.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_lt.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_lv.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_ml.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_mr.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_ms.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_nl.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_no.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_pl.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_pt-BR.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_pt-PT.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_ro.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_ru.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_sk.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_sl.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_sr.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_sv.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_sw.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_ta.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_te.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_th.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_tr.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_uk.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_ur.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_vi.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_zh-CN.dll
c:\program files (x86)\Google\Update\1.3.21.115\goopdateres_zh-TW.dll
c:\program files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll
c:\program files (x86)\Google\Update\1.3.21.115\psmachine.dll
c:\program files (x86)\Google\Update\1.3.21.115\psuser.dll
c:\program files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.21.115\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\Download\{74AF07D8-FB8F-4D51-8AC7-927721D56EBB}\0.0.0.0\GoogleEarth-Win-Bundle-6.2.2.6613.exe
c:\program files (x86)\Google\Update\Download\{BEAB8371-6864-4039-B7D3-6E05FC931C79}\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\Download\{F69EABDD-A4BB-4555-BE7E-1EA5F59BBA24}\7.4.3203.136\GoogleToolbarInstaller_updater_signed.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files\AVAST Software
c:\program files\AVAST Software\Avast\1029\aswClnTg.htm
c:\program files\AVAST Software\Avast\1029\aswClnTg.txt
c:\program files\AVAST Software\Avast\1029\aswInfTg.htm
c:\program files\AVAST Software\Avast\1029\aswInfTg.txt
c:\program files\AVAST Software\Avast\1029\Avast5_1029.chm
c:\program files\AVAST Software\Avast\aswSidebar.gadget
c:\program files\AVAST Software\Avast\defs\12082200\acshort.map
c:\program files\AVAST Software\Avast\defs\12082200\certs.map
c:\program files\AVAST Software\Avast\defs\12082200\db_as.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_dex.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_dex.map
c:\program files\AVAST Software\Avast\defs\12082200\db_dyna.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_dyna.map
c:\program files\AVAST Software\Avast\defs\12082200\db_el.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_elf.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_elf.map
c:\program files\AVAST Software\Avast\defs\12082200\db_elfa.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_elfa.map
c:\program files\AVAST Software\Avast\defs\12082200\db_evope.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_java.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_java.map
c:\program files\AVAST Software\Avast\defs\12082200\db_js.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_js.map
c:\program files\AVAST Software\Avast\defs\12082200\db_mx4.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_mx4.map
c:\program files\AVAST Software\Avast\defs\12082200\db_mx95.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_mx95.map
c:\program files\AVAST Software\Avast\defs\12082200\db_o7.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_o7.map
c:\program files\AVAST Software\Avast\defs\12082200\db_ob2.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_pe2.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_pe3.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_swf.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_swf.map
c:\program files\AVAST Software\Avast\defs\12082200\db_tx.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_u.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_w6.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_w6.map
c:\program files\AVAST Software\Avast\defs\12082200\db_wh2.dat
c:\program files\AVAST Software\Avast\defs\12082200\db_xtn.map
c:\program files\AVAST Software\Avast\defs\12082200\dllcc.dat
c:\program files\AVAST Software\Avast\defs\12082200\l_idx.map
c:\program files\AVAST Software\Avast\defs\12082200\l_nmp.map
c:\program files\AVAST Software\Avast\defs\12082200\list_d.txt
c:\program files\AVAST Software\Avast\defs\12082200\list_i.txt
c:\program files\AVAST Software\Avast\defs\12082200\lshe3.map
c:\program files\AVAST Software\Avast\defs\12082200\s_idx.map
c:\program files\AVAST Software\Avast\defs\12082200\s_nmp.map
c:\program files\AVAST Software\Avast\defs\12082200\sc_dst.dat
c:\program files\AVAST Software\Avast\defs\12082200\sc_src.dat
c:\program files\AVAST Software\Avast\defs\12082200\Sf.bin
c:\program files\AVAST Software\Avast\defs\12082200\Sf1.bin
c:\program files\AVAST Software\Avast\defs\12082200\sl_idx.map
c:\program files\AVAST Software\Avast\defs\12082200\sl_nmp.map
c:\program files\AVAST Software\Avast\defs\12082200\whitelist.db
c:\program files\AVAST Software\Avast\flash\amcharts_key.txt
c:\program files\AVAST Software\Avast\flash\amline.swf
c:\program files\AVAST Software\Avast\flash\ammap\ammap.swf
c:\program files\AVAST Software\Avast\flash\ammap\ammap_key.txt
c:\program files\AVAST Software\Avast\flash\ammap\ammap_settings_summary.xml
c:\program files\AVAST Software\Avast\flash\ammap\ammap_settings_tracert.xml
c:\program files\AVAST Software\Avast\flash\ammap\empty_map.xml
c:\program files\AVAST Software\Avast\flash\ammap\icons\arrow.swf
c:\program files\AVAST Software\Avast\flash\ammap\icons\bubble.swf
c:\program files\AVAST Software\Avast\flash\ammap\icons\cross.swf
c:\program files\AVAST Software\Avast\flash\ammap\icons\flag.swf
c:\program files\AVAST Software\Avast\flash\ammap\icons\pin.swf
c:\program files\AVAST Software\Avast\flash\ammap\icons\zoom_out.swf
c:\program files\AVAST Software\Avast\flash\ammap\maps\world.swf
c:\program files\AVAST Software\Avast\License\EULA_Avast_Free.txt
c:\program files\AVAST Software\Avast\Setup\servers.def
c:\program files\AVAST Software\Avast\Setup\servers.def.lkg
c:\program files\AVAST Software\Avast\Setup\setiface.ovr
c:\program files\AVAST Software\Avast\Setup\settings.ori
c:\program files\AVAST Software\Avast\Setup\setup.log
c:\program files\AVAST Software\Avast\Setup\setup.ovr
c:\program files\AVAST Software\Avast\Setup\summary.txt
c:\program files\AVAST Software\Avast\WebRep\FF\content\about.xul
c:\program files\AVAST Software\Avast\WebRep\FF\content\overlay.xul
c:\program files\AVAST Software\Avast\WebRep\FF\install.rdf
c:\program files\AVAST Software\Avast\WebRep\FF\locale\ar-SA\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\be-BY\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\bg-BG\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\ca-ES\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\cs-CZ\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\da-DK\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\de-DE\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\el-GR\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\en-GB\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\en-US\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\es-ES\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\et-EE\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\fi-FI\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\fr-FR\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\he-IL\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\hr-HR\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\hu-HU\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\id-ID\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\it-IT\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\ja-JP\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\ko-KR\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\nb-NO\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\nl-NL\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\pl-PL\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\pt-BR\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\pt-PT\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\ro-RO\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\ru-RU\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\sk-SK\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\sl-SI\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\sv-SE\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\th-TH\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\tr-TR\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\uk-UA\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\ur-PK\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\vi-VN\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\zh-CN\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\locale\zh-TW\wrc.dtd
c:\program files\AVAST Software\Avast\WebRep\FF\skin\avast_logo.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\background-body.jpg
c:\program files\AVAST Software\Avast\WebRep\FF\skin\background-sitecorrect.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\close.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 16x16px\green1-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 16x16px\green2-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 16x16px\green3-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 16x16px\grey0-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 16x16px\grey3-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 16x16px\orange1-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 16x16px\orange2-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 16x16px\orange3-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 16x16px\red1-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 16x16px\red2-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 16x16px\red3-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 16x16px\yellow1-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 16x16px\yellow2-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 16x16px\yellow3-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 24x24px\green1-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 24x24px\green2-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 24x24px\green3-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 24x24px\grey0-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 24x24px\grey3-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 24x24px\orange1-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 24x24px\orange2-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 24x24px\orange3-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 24x24px\red1-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 24x24px\red2-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 24x24px\red3-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 24x24px\yellow1-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 24x24px\yellow2-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\ico 24x24px\yellow3-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\close.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\green1.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\green2.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\green3.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\grey.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\check-priority.jp
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\check-priority.jpg
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\orange1.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\orange2.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\orange3.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\red1.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\red2.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\red3.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\shop-icon-big.jp
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\shop-icon-big.jpg
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\shop-icon-small.jp
c:\program files\AVAST Software\Avast\WebRep\FF\skin\icons\shop-icon-small.jpg
c:\program files\AVAST Software\Avast\WebRep\FF\skin\logo.jpg
c:\program files\AVAST Software\Avast\WebRep\FF\skin\overlay.css
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\background-body.jpg
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\background-body.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\background-header.jpg
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\background-right-bottom.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\background-right-top.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\background-right.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\bg-window.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\Button-1.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\button-middle.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\close-hover.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\close.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\corner-left-bottom.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\corner-left-top.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\corner-right-bottom.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\corner-right-top.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\corporate-small-disable.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\corporate-small-selected.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\corporate.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\drugs-small-disable.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\drugs-small-selected.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\drugs.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\gambling-small-disable.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\gambling-small-selected.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\gambling.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\green-1.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\green-2.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\green-3.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\green-hover.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\green-selected.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\green.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\green1-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\green1-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\green1-small.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\green2-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\green2-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\green2-small.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\green3-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\green3-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\green3-small.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\grey-0.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\grey-3.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\grey-small.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\grey0-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\grey0-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\grey3-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\grey3-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\horizontal-line-white.jpg
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\horizontal-line.jpg
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\icon_incorrect.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\illegal-small-disable.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\illegal-small-selected.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\illegal.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\it-small-disable.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\it-small-selected.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\it.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\kenny.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\limet-hover.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\limet-selected.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\limet.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\line-dark-horizontal.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\line-light-horizontal.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\logo.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\news-small-disable.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\news-small-selected.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\news.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\orange-hover.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\orange-selected.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\orange.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\pornography-small-disable.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\pornography-small-selected.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\pornography.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red-1-108.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red-1.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red-2.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red-3.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red-hover.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red-selected.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red1-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red1-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red1-small.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red2-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red2-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red2-small.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red3-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red3-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\red3-small.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\shopping-small-disable.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\shopping-small-selected.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\shopping.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\social-small-disable.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\social-small-selected.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\social.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\vertical-line.jpg
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\violence-small-disable.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\violence-small-selected.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\violence.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\Warning.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\window-wrc.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\yellow-1.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\yellow-2.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\yellow-3.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\yellow-hover.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\yellow-selected.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\yellow.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\yellow1-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\yellow1-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\yellow1-small.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\yellow2-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\yellow2-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\yellow2-small.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\yellow3-16.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\yellow3-24.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\png\yellow3-small.png
c:\program files\AVAST Software\Avast\WebRep\FF\skin\wrc ico 16x16px a 24x24px.zip
c:\program files\AVAST Software\Avast\WebRep\Chrome\AswWebRepChrome.crx
c:\program files\AVAST Software\Avast\WebRep\Opera\wrc.oex
c:\program files\AVAST Software\Avast\WebRep\Safari\wrc.safariextz
c:\programdata\AVAST Software
c:\programdata\AVAST Software\Avast\aswResp.dat
c:\programdata\AVAST Software\Avast\db1cb464709fadc73-56d1093c.dat
c:\programdata\AVAST Software\Avast\db1cd24e7bff522c9-3ecf961d.dat
c:\programdata\AVAST Software\Avast\db1cd24e7c0e7ef25-74cf1328.dat
c:\programdata\AVAST Software\Avast\FileInfo2.db
c:\programdata\AVAST Software\Avast\HtmlData\Blocked.htm
c:\programdata\AVAST Software\Avast\HtmlData\image001.png
c:\programdata\AVAST Software\Avast\chest\index.xml
c:\programdata\AVAST Software\Avast\Log.db
c:\programdata\AVAST Software\Avast\log\AshWebSv.ws
c:\programdata\AVAST Software\Avast\log\AshWebSv.ws.ori
c:\programdata\AVAST Software\Avast\log\aswAr.log
c:\programdata\AVAST Software\Avast\log\aswAr1.log
c:\programdata\AVAST Software\Avast\log\EventLog.log
c:\programdata\AVAST Software\Avast\log\HtmlRemoteContent.log
c:\programdata\AVAST Software\Avast\log\Chest.log
c:\programdata\AVAST Software\Avast\log\Logging.log
c:\programdata\AVAST Software\Avast\log\Mail.log
c:\programdata\AVAST Software\Avast\log\nshield.log
c:\programdata\AVAST Software\Avast\log\Resident.log
c:\programdata\AVAST Software\Avast\log\selfdef.log
c:\programdata\AVAST Software\Avast\log\Setup.log
c:\programdata\AVAST Software\Avast\log\usntr.log
c:\programdata\AVAST Software\Avast\report\BehaviorShield.txt
c:\programdata\AVAST Software\Avast\report\EmailShield.txt
c:\programdata\AVAST Software\Avast\report\FileSystemShield.txt
c:\programdata\AVAST Software\Avast\report\IMShield.txt
c:\programdata\AVAST Software\Avast\report\NetworkShield.txt
c:\programdata\AVAST Software\Avast\report\P2PShield.txt
c:\programdata\AVAST Software\Avast\report\ScriptShield.txt
c:\programdata\AVAST Software\Avast\report\WebShield.txt
c:\programdata\AVAST Software\Avast\snx_gconfig.xml
c:\programdata\AVAST Software\Avast\snx_lconfig.xml
c:\programdata\AVAST Software\Avast\sounds\fw_question.wav
c:\programdata\AVAST Software\Avast\sounds\scan_completed.wav
c:\programdata\AVAST Software\Avast\sounds\threat_detected.wav
c:\programdata\AVAST Software\Avast\sounds\virus_db_updated.wav
c:\programdata\AVAST Software\Avast\URL.db
c:\programdata\AVAST Software\Avast\URL.db30544
c:\programdata\McAfee
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1156782259-1607028684-1919980262-1001Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1156782259-1607028684-1919980262-1001UA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdate
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-08-07 do 2012-09-07 )))))))))))))))))))))))))))))))
.
.
2012-09-07 15:50 . 2012-09-07 15:50 -------- d-----w- c:\users\jablickova\AppData\Local\temp
2012-09-07 15:50 . 2012-09-07 15:50 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-09-06 21:11 . 2012-09-06 21:11 -------- d-----w- c:\users\Sabina\AppData\Local\ATI
2012-09-06 19:45 . 2012-09-06 19:45 -------- d-----w- c:\users\Sabina\AppData\Roaming\Malwarebytes
2012-09-06 19:44 . 2012-09-06 19:44 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-09-06 19:44 . 2012-09-06 19:44 -------- d-----w- c:\programdata\Malwarebytes
2012-09-06 19:44 . 2012-07-03 11:46 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-06 16:18 . 2012-09-06 16:18 -------- d-----w- c:\users\Sabina\AppData\Roaming\Flood Light Games
2012-09-06 16:18 . 2012-09-06 16:18 -------- d-----w- c:\programdata\Flood Light Games
2012-09-06 16:17 . 2012-09-06 16:17 -------- d-----w- c:\program files (x86)\Agatha Christie Dead Man's Folly
2012-09-06 09:31 . 2012-09-06 09:31 -------- d-----w- c:\programdata\boost_interprocess
2012-09-06 09:12 . 2012-09-06 09:12 -------- d-----w- c:\program files (x86)\Cisco
2012-09-06 09:11 . 2012-09-06 09:10 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2012-09-06 09:11 . 2012-09-06 09:11 -------- d-----w- c:\program files\Broadcom
2012-09-06 09:07 . 2012-09-06 09:07 -------- d-----w- c:\program files (x86)\Atheros
2012-09-06 09:07 . 2010-05-11 16:11 2229608 ----a-w- c:\windows\system32\athrx.sys
2012-09-06 09:06 . 2012-09-06 09:07 -------- d-----w- c:\programdata\Atheros
2012-09-06 09:06 . 2012-09-06 09:06 -------- d-----w- c:\users\Sabina\AppData\Roaming\InstallShield
2012-09-05 16:27 . 2012-09-06 13:32 -------- d-----w- c:\programdata\Big Fish Games
2012-09-05 16:24 . 2012-09-06 13:32 -------- d-----w- C:\BigFishGamesCache
2012-09-05 16:12 . 2012-09-05 16:12 -------- d-----w- c:\users\Sabina\AppData\Roaming\Floodlight Games
2012-09-05 16:12 . 2012-09-05 16:12 -------- d-----w- c:\programdata\Floodlight Games
2012-09-05 16:09 . 2012-09-05 16:09 -------- d-----w- c:\program files (x86)\WildGames
2012-09-05 15:46 . 2012-09-05 16:09 -------- d-----w- c:\program files (x86)\WildTangent Games
2012-09-05 06:14 . 2012-09-05 06:14 -------- d-----w- c:\programdata\Wild Tangent
2012-09-04 15:48 . 2012-09-04 15:48 -------- d-----w- c:\users\Sabina\AppData\Roaming\FloodLightGames
2012-09-04 15:48 . 2012-09-04 15:48 -------- d-----w- c:\programdata\FloodLightGames
2012-08-27 21:50 . 2012-08-27 21:50 -------- d-----w- c:\program files (x86)\VisiPics
2012-08-27 21:23 . 2012-08-27 21:23 -------- d-----w- c:\program files\CCleaner
2012-08-27 21:09 . 2012-08-27 21:09 -------- d-----w- C:\RecoveryBin
2012-08-27 21:06 . 2012-08-27 21:06 -------- d-----w- c:\windows\Downloaded Installations
2012-08-27 21:05 . 2012-08-27 21:19 -------- d-----w- c:\program files (x86)\Executive Software
2012-08-27 21:04 . 2012-08-27 21:06 -------- d-----w- c:\users\Sabina\AppData\Local\FileTypeAssistant
2012-08-27 20:58 . 2012-08-27 20:58 -------- d-----w- c:\programdata\Uniblue
2012-08-27 20:54 . 2012-08-27 20:54 -------- d-----w- c:\program files (x86)\File Type Assistant
2012-08-27 20:52 . 2012-08-28 00:02 -------- d-----w- c:\program files (x86)\PC Speed Up
2012-08-27 20:52 . 2012-08-27 20:52 -------- d-----w- c:\program files (x86)\Free Offers from Freeze.com
2012-08-27 15:41 . 2009-08-24 08:15 761152 ----a-w- c:\windows\SysWow64\msvcr100.dll
2012-08-27 15:41 . 2007-11-06 22:19 655872 ----a-w- c:\windows\SysWow64\msvcr90.dll
2012-08-27 15:41 . 2004-01-11 21:00 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll
2012-08-27 15:40 . 2012-08-28 00:01 -------- d-----w- c:\program files (x86)\Miranda IM KP v5.0.9.16
2012-08-27 15:36 . 2012-08-27 15:37 -------- d-----w- c:\users\Sabina\AppData\Roaming\PhotoFiltre Studio X
2012-08-27 14:47 . 2012-09-07 15:53 -------- d-----w- c:\users\Sabina\AppData\Roaming\ICQ
2012-08-27 14:47 . 2012-08-27 14:49 -------- d-----w- c:\program files (x86)\ICQ7M
2012-08-27 14:41 . 2012-08-27 16:04 -------- d-----w- c:\users\Sabina\AppData\Roaming\QIP
2012-08-27 14:38 . 2012-08-27 14:38 -------- d-----w- c:\users\Sabina\AppData\Roaming\Miranda
2012-08-27 14:37 . 2012-08-27 15:42 -------- d-----w- c:\program files (x86)\Miranda IM
2012-08-27 11:44 . 2012-08-27 17:50 -------- d-----w- c:\users\Sabina\AppData\Local\Facebook
2012-08-27 10:40 . 2012-08-28 08:26 -------- d-----w- c:\program files\Symantec
2012-08-27 10:39 . 2012-08-28 16:58 -------- d-----w- c:\windows\system32\drivers\NISx64
2012-08-27 10:39 . 2012-08-27 10:39 -------- d-----w- c:\program files (x86)\Norton Internet Security
2012-08-27 10:36 . 2012-08-27 10:36 -------- d-----w- c:\program files (x86)\NortonInstaller
2012-08-27 10:22 . 2012-08-27 10:22 -------- d-----w- c:\program files (x86)\LG Electronics
2012-08-27 10:22 . 2001-09-05 03:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2012-08-27 10:22 . 2001-09-05 03:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll
2012-08-27 10:22 . 2001-09-05 03:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2012-08-27 10:22 . 2001-09-05 03:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2012-08-27 10:22 . 2002-07-25 15:07 614532 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe
2012-08-27 10:19 . 2012-08-01 22:58 9309624 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{68F725B0-2A73-4AEB-B739-E185A5597C1B}\mpengine.dll
2012-08-25 16:54 . 2012-05-05 08:36 503808 ----a-w- c:\windows\system32\srcore.dll
2012-08-25 16:54 . 2012-05-05 07:46 43008 ----a-w- c:\windows\SysWow64\srclient.dll
2012-08-25 16:54 . 2012-02-11 06:43 751104 ----a-w- c:\windows\system32\win32spl.dll
2012-08-25 16:54 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe
2012-08-25 16:54 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe
2012-08-25 16:54 . 2012-02-11 05:43 492032 ----a-w- c:\windows\SysWow64\win32spl.dll
2012-08-25 16:54 . 2012-07-04 22:16 73216 ----a-w- c:\windows\system32\netapi32.dll
2012-08-25 16:54 . 2012-07-04 22:13 59392 ----a-w- c:\windows\system32\browcli.dll
2012-08-25 16:54 . 2012-07-04 22:13 136704 ----a-w- c:\windows\system32\browser.dll
2012-08-25 16:54 . 2012-07-04 21:14 41984 ----a-w- c:\windows\SysWow64\browcli.dll
2012-08-25 16:54 . 2012-07-18 18:15 3148800 ----a-w- c:\windows\system32\win32k.sys
2012-08-25 16:54 . 2012-05-14 05:26 956928 ----a-w- c:\windows\system32\localspl.dll
2012-08-22 16:40 . 2012-08-22 16:40 -------- d-----w- c:\program files (x86)\VS Revo Group
2012-08-18 09:07 . 2012-08-19 16:17 -------- d-----w- C:\048a3a01ef8ff53a2e1f43e058
2012-08-14 10:08 . 2012-08-14 10:08 -------- d-----w- c:\users\jablickova\AppData\Local\ElevatedDiagnostics
2012-08-13 19:35 . 2012-08-25 17:33 -------- d-----w- c:\program files (x86)\rajce
2012-08-13 19:14 . 2012-08-25 17:33 -------- d-----w- c:\users\Sabina\AppData\Roaming\Jpeg Resampler
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-28 13:28 . 2012-05-07 11:06 73416 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-08-28 13:28 . 2012-05-07 11:06 696520 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-08-28 08:25 . 2012-04-28 02:35 175736 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2012-08-27 10:06 . 2012-05-20 14:17 62134624 ----a-w- c:\windows\system32\MRT.exe
.
.
(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of C:\048a3a01ef8ff53a2e1f43e058 ----
.
2012-08-18 09:07 . 2012-08-18 09:07 788 ---ha-w- c:\048a3a01ef8ff53a2e1f43e058\$shtdwn$.req
2012-08-03 02:35 . 2012-08-03 02:35 4287370 ----a-w- c:\048a3a01ef8ff53a2e1f43e058\mrt.exe._p
.
.
((((((((((((((((((((((((((((( SnapShot@2012-09-07_10.31.53 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-07-15 01:00 . 2012-09-07 10:33 46570 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-09-07 10:33 50292 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2012-05-02 05:33 . 2012-09-07 10:33 11780 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1156782259-1607028684-1919980262-1001_UserData.bin
- 2012-09-07 10:30 . 2012-09-07 10:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-09-07 15:52 . 2012-09-07 15:52 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-09-07 10:30 . 2012-09-07 10:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-09-07 15:52 . 2012-09-07 15:52 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-04-28 10:31 . 2012-09-07 15:49 289602 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2009-07-14 05:01 . 2012-09-07 15:51 278972 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 05:01 . 2012-09-07 10:29 278972 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 02:36 . 2012-09-07 15:51 1969976 c:\windows\system32\perfh009.dat
+ 2010-08-28 01:12 . 2012-09-07 15:51 4453902 c:\windows\system32\perfh005.dat
+ 2009-07-14 02:36 . 2012-09-07 15:51 1399982 c:\windows\system32\perfc009.dat
+ 2010-08-28 01:12 . 2012-09-07 15:51 1453802 c:\windows\system32\perfc005.dat
+ 2012-05-20 19:03 . 2012-09-07 15:51 4012918 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1156782259-1607028684-1919980262-1001-12288.dat
- 2012-05-20 19:03 . 2012-09-07 10:29 4012918 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1156782259-1607028684-1919980262-1001-12288.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ICQ"="c:\program files (x86)\ICQ7M\ICQ.exe" [2012-08-27 127040]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-06-22 968272]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-04-21 98304]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-07-03 462920]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-28 250568]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2010-06-17 246376]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-04-29 1255736]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1308000.00E\SYMDS64.SYS [2011-07-25 451192]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1308000.00E\SYMEFA64.SYS [2012-05-22 1129120]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20120905.001\BHDrvx64.sys [2012-08-31 1385120]
S1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\NISx64\1308000.00E\ccSetx64.sys [2012-06-07 167072]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20120906.008\IDSvia64.sys [2012-09-01 513184]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1308000.00E\Ironx64.SYS [2012-04-18 190072]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1308000.00E\SYMNETS.SYS [2012-04-18 405624]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-04-20 202752]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-06-22 321104]
S2 ePowerSvc;Acer ePower Service;c:\program files\eMachines\eMachines Power Management\ePowerSvc.exe [2010-06-11 868896]
S2 GREGService;GREGService;c:\program files (x86)\eMachines\Registration\GREGsvc.exe [2010-01-08 23584]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-07-03 655944]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe [2012-06-16 138272]
S2 Updater Service;Updater Service;c:\program files\eMachines\eMachines Updater\UpdaterService.exe [2010-01-28 243232]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2010-04-21 6406144]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-04-20 188928]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-08-27 138912]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2010-05-14 384040]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-07-03 24904]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-09-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-07 13:28]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-06-22 10920552]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"PLFSetI"="c:\windows\PLFSetI.exe" [2010-06-10 206208]
"Acer ePower Management"="c:\program files\eMachines\eMachines Power Management\ePowerTray.exe" [2010-06-11 861216]
"combofix"="c:\combofix\CF31277.3XE" [2010-11-20 345088]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: {{781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - c:\program files (x86)\ICQ7M\ICQ.exe
TCP: DhcpNameServer = 82.100.29.65 212.24.128.8
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\19.8.0.14\diMaster.dll\" /prefetch:1"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Celkový čas: 2012-09-07 17:58:48 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-09-07 15:58
ComboFix2.txt 2012-09-07 10:48
.
Před spuštěním: Volných bajtů: 428 312 862 720
Po spuštění: Volných bajtů: 428 080 316 416
.
- - End Of File - - 9501F4075B628F615D558C869A46CC20

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

Stáhni si MiniToolBox
a spusť ho.
V okně zaškrtni čtverečky:
Report IE Proxy Settings
Report FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
Potom klikni na GO , po chvíli skenu se objeví log s názvem „Result“ , zkopíruj sem celý jeho obsah.

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-09-08 12:34:33
-----------------------------
12:34:33.712 OS Version: Windows x64 6.1.7601 Service Pack 1
12:34:33.712 Number of processors: 1 586 0x603
12:34:33.712 ComputerName: JABLICKOVA-PC UserName: Sabina
12:34:52.837 Initialize success
12:35:06.095 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
12:35:06.095 Disk 0 Vendor: WDC_WD5000BEVT-22A0RT0 01.01A01 Size: 476940MB BusType: 11
12:35:06.111 Disk 0 MBR read successfully
12:35:06.111 Disk 0 MBR scan
12:35:06.127 Disk 0 Windows 7 default MBR code
12:35:06.127 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 14336 MB offset 2048
12:35:06.142 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 29362176
12:35:06.158 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 462502 MB offset 29566976
12:35:06.173 Disk 0 scanning C:\Windows\system32\drivers
12:35:12.601 Service scanning
12:35:45.610 Modules scanning
12:35:45.626 Disk 0 trace - called modules:
12:35:45.657 ntoskrnl.exe CLASSPNP.SYS disk.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys
12:35:45.673 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80030dc060]
12:35:46.203 3 CLASSPNP.SYS[fffff88001b6b43f] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa800308a060]
12:35:46.203 Scan finished successfully
12:36:03.597 Disk 0 MBR has been saved successfully to "C:\Users\Sabina\Desktop\MBR.dat"
12:36:03.597 The log file has been saved successfully to "C:\Users\Sabina\Desktop\aswMBR.txt"

MiniToolBox by Farbar Version: 23-07-2012
Ran by Sabina (administrator) on 08-09-2012 at 12:37:34
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.
========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================

Broadcom NetLink (TM) Gigabit Ethernet = Připojení k místní síti (Connected)
Microsoft Virtual WiFi Miniport Adapter = Bezdrátové připojení k síti 2 (Connected)
Atheros AR5B93 Wireless Network Adapter = Bezdrátové připojení k síti (Media disconnected)


# ----------------------------------
# Konfigurace protokolu IPv4
# ----------------------------------
pushd interface ipv4

reset
set global


popd
# Konec konfigurace protokolu IPv4



Konfigurace protokolu IP syst‚mu Windows

N zev hostitele . . . . . . . . . : jablickova-PC
Prim rnˇ pýˇpona DNS. . . . . . . :
Typ uzlu . . . . . . . . . . . . : hybridnˇ
Povoleno smŘrov nˇ IP . . . . . . : Ne
WINS Proxy povoleno . . . . . . . : Ne

Adapt‚r bezdr tov‚ sˇtŘ LAN Bezdr tov‚ pýipojenˇ k sˇti:

Stav m‚dia . . . . . . . . . . . : odpojeno
Pýˇpona DNS podle pýipojenˇ . . . :
Popis . . . . . . . . . . . . . . : Atheros AR5B93 Wireless Network Adapter
Fyzick  Adresa. . . . . . . . . . : 70-F1-A1-CE-10-2C
Protokol DHCP povolen . . . . . . : Ano
Automatick  konfigurace povolena : Ano

Adapt‚r sˇtŘ Ethernet Pýipojenˇ k mˇstnˇ sˇti:

Pýˇpona DNS podle pýipojenˇ . . . :
Popis . . . . . . . . . . . . . . : Broadcom NetLink (TM) Gigabit Ethernet
Fyzick  Adresa. . . . . . . . . . : 88-AE-1D-84-4A-26
Protokol DHCP povolen . . . . . . : Ano
Automatick  konfigurace povolena : Ano
Mˇstnˇ IPv6 adresa v r mci propojenˇ . . . : fe80::4fd:f747:f980:88df%10(Preferovan‚)
Adresa IPv4 . . . . . . . . . . . : 192.168.0.199(Preferovan‚)
Maska podsˇtŘ . . . . . . . . . . : 255.255.255.0
Zap…jźeno . . . . . . . . . . . . : 8. z ýˇ 2012 12:30:35
Z p…jźka vyprçˇ . . . . . . . . . : 11. z ýˇ 2012 12:32:06
Věchozˇ br na . . . . . . . . . . : 192.168.0.1
Server DHCP . . . . . . . . . . . : 192.168.0.1
IAID DHCPv6 . . . . . . . . . . : 193506845
DUID klienta DHCPv6. . . . . . . : 00-01-00-01-14-0A-0F-50-88-AE-1D-84-4A-26
Servery DNS . . . . . . . . . . . : 82.100.29.65
212.24.128.8
Rozhranˇ NetBios nad protokolem TCP/IP. . . . . . . . : Povoleno

Adapt‚r pro tunelov‚ pýipojenˇ isatap.{7C1CCC02-742B-47E1-BA2C-296CD7214858}:

Stav m‚dia . . . . . . . . . . . : odpojeno
Pýˇpona DNS podle pýipojenˇ . . . :
Popis . . . . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Fyzick  Adresa. . . . . . . . . . : 00-00-00-00-00-00-00-E0
Protokol DHCP povolen . . . . . . : Ne
Automatick  konfigurace povolena : Ano

Adapt‚r pro tunelov‚ pýipojenˇ Teredo Tunneling Pseudo-Interface:

Pýˇpona DNS podle pýipojenˇ . . . :
Popis . . . . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Fyzick  Adresa. . . . . . . . . . : 00-00-00-00-00-00-00-E0
Protokol DHCP povolen . . . . . . : Ne
Automatick  konfigurace povolena : Ano
IPv6 adresa. . . . . . . . . . . : 2001:0:5ef5:79fd:2063:a38:3f57:ff38(Preferovan‚)
Mˇstnˇ IPv6 adresa v r mci propojenˇ . . . : fe80::2063:a38:3f57:ff38%12(Preferovan‚)
Věchozˇ br na . . . . . . . . . . : ::
NetBIOS nad TCP/IP. . . . . . . . : zak z no
Server: kerb-02.comanet.cz
Address: 82.100.29.65

Nazev: google.com
Addresses: 2a00:1450:400d:802::1008
173.194.39.132
173.194.39.133
173.194.39.134
173.194.39.135
173.194.39.136
173.194.39.137
173.194.39.142
173.194.39.128
173.194.39.129
173.194.39.130
173.194.39.131


Pýˇkaz PING na google.com [173.194.39.131] - 32 bajt… dat:
OdpovŘÔ od 173.194.39.131: bajty=32 źas=19ms TTL=52
OdpovŘÔ od 173.194.39.131: bajty=32 źas=20ms TTL=52

Statistika ping pro 173.194.39.131:
Pakety: Odeslan‚ = 2, Pýijat‚ = 2, Ztracen‚ = 0 (ztr ta 0%),
Pýibli§n  doba do pýijetˇ odezvy v milisekund ch:
Minimum = 19ms, Maximum = 20ms, Pr…mŘr = 19ms
Server: kerb-02.comanet.cz
Address: 82.100.29.65

Nazev: yahoo.com
Addresses: 98.138.253.109
98.139.183.24
72.30.38.140


Pýˇkaz PING na yahoo.com [72.30.38.140] - 32 bajt… dat:
OdpovŘÔ od 72.30.38.140: bajty=32 źas=1120ms TTL=46
OdpovŘÔ od 72.30.38.140: bajty=32 źas=1019ms TTL=46

Statistika ping pro 72.30.38.140:
Pakety: Odeslan‚ = 2, Pýijat‚ = 2, Ztracen‚ = 0 (ztr ta 0%),
Pýibli§n  doba do pýijetˇ odezvy v milisekund ch:
Minimum = 1019ms, Maximum = 1120ms, Pr…mŘr = 1069ms
Server: kerb-02.comanet.cz
Address: 82.100.29.65

Nazev: bleepingcomputer.com
Address: 208.43.87.2


Pýˇkaz PING na bleepingcomputer.com [208.43.87.2] - 32 bajt… dat:
OdpovŘÔ od 208.43.87.2: Cˇlově hostitel nenˇ dostupně.
OdpovŘÔ od 208.43.87.2: Cˇlově hostitel nenˇ dostupně.

Statistika ping pro 208.43.87.2:
Pakety: Odeslan‚ = 2, Pýijat‚ = 2, Ztracen‚ = 0 (ztr ta 0%),

Pýˇkaz PING na 127.0.0.1 - 32 bajt… dat:
OdpovŘÔ od 127.0.0.1: bajty=32 źas=8ms TTL=128
OdpovŘÔ od 127.0.0.1: bajty=32 źas=4ms TTL=128

Statistika ping pro 127.0.0.1:
Pakety: Odeslan‚ = 2, Pýijat‚ = 2, Ztracen‚ = 0 (ztr ta 0%),
Pýibli§n  doba do pýijetˇ odezvy v milisekund ch:
Minimum = 4ms, Maximum = 8ms, Pr…mŘr = 6ms
===========================================================================
Seznam rozhranˇ
11...70 f1 a1 ce 10 2c ......Atheros AR5B93 Wireless Network Adapter
10...88 ae 1d 84 4a 26 ......Broadcom NetLink (TM) Gigabit Ethernet
1...........................Software Loopback Interface 1
14...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
12...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 SmŘrovacˇ tabulka
===========================================================================
Aktivnˇ smŘrov nˇ:
Cˇl v sˇti Sˇśov  maska Br na Rozhranˇ Metrika
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.199 20
127.0.0.0 255.0.0.0 Propojen‚ 127.0.0.1 306
127.0.0.1 255.255.255.255 Propojen‚ 127.0.0.1 306
127.255.255.255 255.255.255.255 Propojen‚ 127.0.0.1 306
192.168.0.0 255.255.255.0 Propojen‚ 192.168.0.199 276
192.168.0.199 255.255.255.255 Propojen‚ 192.168.0.199 276
192.168.0.255 255.255.255.255 Propojen‚ 192.168.0.199 276
224.0.0.0 240.0.0.0 Propojen‚ 127.0.0.1 306
224.0.0.0 240.0.0.0 Propojen‚ 192.168.0.199 276
255.255.255.255 255.255.255.255 Propojen‚ 127.0.0.1 306
255.255.255.255 255.255.255.255 Propojen‚ 192.168.0.199 276
===========================================================================
Trval‚ trasy:
¦ dn‚

IPv6 SmŘrovacˇ tabulka
===========================================================================
Aktivnˇ smŘrov nˇ:
Rozhranˇ Metrika Cˇl v sˇti Br na
12 58 ::/0 Propojen‚
1 306 ::1/128 Propojen‚
12 58 2001::/32 Propojen‚
12 306 2001:0:5ef5:79fd:2063:a38:3f57:ff38/128
Propojen‚
10 276 fe80::/64 Propojen‚
12 306 fe80::/64 Propojen‚
10 276 fe80::4fd:f747:f980:88df/128
Propojen‚
12 306 fe80::2063:a38:3f57:ff38/128
Propojen‚
1 306 ff00::/8 Propojen‚
12 306 ff00::/8 Propojen‚
10 276 ff00::/8 Propojen‚
===========================================================================
Trval‚ trasy:
¦ dn‚
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (09/08/2012 00:29:13 PM) (Source: VSS) (User: )
Description: Chyba služby Stínová kopie svazků: Při dotazu na rozhraní IVssWriterCallback došlo k neočekávané chybě. hr = 0x800706ba, Server RPC není k dispozici.
.
To je často způsobeno nesprávným nastavením zabezpečení v modulu pro zápis nebo žadateli.


Operace:
Událost PrepareForSnapshot

Kontext:
Kontext spuštění: Writer
ID třídy modulu pro zápis: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Název modulu pro zápis: Registry Writer
ID instance modulu pro zápis: {958e5426-493c-49d1-be15-0960c16e242f}

Error: (09/08/2012 00:29:13 PM) (Source: VSS) (User: )
Description: Chyba služby Stínová kopie svazků: Při dotazu na rozhraní IVssWriterCallback došlo k neočekávané chybě. hr = 0x800706ba, Server RPC není k dispozici.
.
To je často způsobeno nesprávným nastavením zabezpečení v modulu pro zápis nebo žadateli.


Operace:
Událost PrepareForSnapshot

Kontext:
Kontext spuštění: Writer
ID třídy modulu pro zápis: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Název modulu pro zápis: COM+ REGDB Writer
ID instance modulu pro zápis: {6d414cf1-fa45-4b44-bd5c-5c6d63eec8f8}

Error: (09/08/2012 00:29:13 PM) (Source: VSS) (User: )
Description: Chyba služby Stínová kopie svazků: Při dotazu na rozhraní IVssWriterCallback došlo k neočekávané chybě. hr = 0x800706ba, Server RPC není k dispozici.
.
To je často způsobeno nesprávným nastavením zabezpečení v modulu pro zápis nebo žadateli.

Error: (09/08/2012 00:29:13 PM) (Source: VSS) (User: )
Description: Chyba služby Stínová kopie svazků: Při dotazu na rozhraní IVssWriterCallback došlo k neočekávané chybě. hr = 0x800706ba, Server RPC není k dispozici.
.
To je často způsobeno nesprávným nastavením zabezpečení v modulu pro zápis nebo žadateli.

Error: (09/08/2012 00:29:13 PM) (Source: VSS) (User: )
Description: Chyba služby Stínová kopie svazků: Při dotazu na rozhraní IVssWriterCallback došlo k neočekávané chybě. hr = 0x800706ba, Server RPC není k dispozici.
.
To je často způsobeno nesprávným nastavením zabezpečení v modulu pro zápis nebo žadateli.

Error: (09/08/2012 00:29:13 PM) (Source: VSS) (User: )
Description: Chyba služby Stínová kopie svazků: Při dotazu na rozhraní IVssWriterCallback došlo k neočekávané chybě. hr = 0x800706ba, Server RPC není k dispozici.
.
To je často způsobeno nesprávným nastavením zabezpečení v modulu pro zápis nebo žadateli.


Operace:
Událost PrepareForSnapshot

Kontext:
Kontext spuštění: Writer
ID třídy modulu pro zápis: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Název modulu pro zápis: Shadow Copy Optimization Writer
ID instance modulu pro zápis: {107f88bd-8de8-41e5-85b8-42fb1cebc665}

Error: (09/08/2012 00:28:59 PM) (Source: System Restore) (User: )
Description: Vytvoření bodu obnovení se nezdařilo (Proces = C:\Windows\system32\wbem\wmiprvse.exe; Popis = ComboFix created restore point; Chyba = 0x800706be).

Error: (09/08/2012 00:21:29 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT AUTHORITY)NT AUTHORITY
Description: Uvolnění řetězců čítačů výkonu pro službu WmiApRpl (WmiApRpl) se nezdařilo. První hodnota DWORD v datové oblasti obsahuje kód chyby.

Error: (09/08/2012 00:21:29 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT AUTHORITY)NT AUTHORITY
Description: Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error: (09/08/2012 00:21:29 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT AUTHORITY)NT AUTHORITY
Description: Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.


System errors:
=============
Error: (09/07/2012 08:10:35 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (09/07/2012 05:52:31 PM) (Source: Service Control Manager) (User: )
Description: Služba Windows Defender byla ukončena s následující chybou:
%%126

Error: (09/07/2012 05:51:15 PM) (Source: Service Control Manager) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (09/07/2012 05:51:03 PM) (Source: Service Control Manager) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (09/07/2012 05:45:15 PM) (Source: Application Popup) (User: )
Description: Načtení \??\C:\ComboFix\catchme.sys bylo zablokováno kvůli nekompatibilitě s tímto systémem. Požádejte dodavatele softwaru
o kompatibilní verzi ovladače.

Error: (09/07/2012 05:45:14 PM) (Source: Application Popup) (User: )
Description: Načtení \??\C:\ComboFix\catchme.sys bylo zablokováno kvůli nekompatibilitě s tímto systémem. Požádejte dodavatele softwaru
o kompatibilní verzi ovladače.

Error: (09/07/2012 05:42:38 PM) (Source: Service Control Manager) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (09/07/2012 05:38:28 PM) (Source: Application Popup) (User: )
Description: Načtení \??\C:\ComboFix\catchme.sys bylo zablokováno kvůli nekompatibilitě s tímto systémem. Požádejte dodavatele softwaru
o kompatibilní verzi ovladače.

Error: (09/07/2012 05:38:28 PM) (Source: Application Popup) (User: )
Description: Načtení \??\C:\ComboFix\catchme.sys bylo zablokováno kvůli nekompatibilitě s tímto systémem. Požádejte dodavatele softwaru
o kompatibilní verzi ovladače.

Error: (09/07/2012 00:50:59 PM) (Source: Disk) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.


Microsoft Office Sessions:
=========================
Error: (09/08/2012 00:29:13 PM) (Source: VSS)(User: )
Description: 0x800706ba, Server RPC není k dispozici.


Operace:
Událost PrepareForSnapshot

Kontext:
Kontext spuštění: Writer
ID třídy modulu pro zápis: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Název modulu pro zápis: Registry Writer
ID instance modulu pro zápis: {958e5426-493c-49d1-be15-0960c16e242f}

Error: (09/08/2012 00:29:13 PM) (Source: VSS)(User: )
Description: 0x800706ba, Server RPC není k dispozici.


Operace:
Událost PrepareForSnapshot

Kontext:
Kontext spuštění: Writer
ID třídy modulu pro zápis: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Název modulu pro zápis: COM+ REGDB Writer
ID instance modulu pro zápis: {6d414cf1-fa45-4b44-bd5c-5c6d63eec8f8}

Error: (09/08/2012 00:29:13 PM) (Source: VSS)(User: )
Description: 0x800706ba, Server RPC není k dispozici.

Error: (09/08/2012 00:29:13 PM) (Source: VSS)(User: )
Description: 0x800706ba, Server RPC není k dispozici.

Error: (09/08/2012 00:29:13 PM) (Source: VSS)(User: )
Description: 0x800706ba, Server RPC není k dispozici.

Error: (09/08/2012 00:29:13 PM) (Source: VSS)(User: )
Description: 0x800706ba, Server RPC není k dispozici.


Operace:
Událost PrepareForSnapshot

Kontext:
Kontext spuštění: Writer
ID třídy modulu pro zápis: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Název modulu pro zápis: Shadow Copy Optimization Writer
ID instance modulu pro zápis: {107f88bd-8de8-41e5-85b8-42fb1cebc665}

Error: (09/08/2012 00:28:59 PM) (Source: System Restore)(User: )
Description: C:\Windows\system32\wbem\wmiprvse.exeComboFix created restore point0x800706be

Error: (09/08/2012 00:21:29 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT AUTHORITY)NT AUTHORITY
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (09/08/2012 00:21:29 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT AUTHORITY)NT AUTHORITY
Description: Performance1637070000000000000000000009030000

Error: (09/08/2012 00:21:29 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT AUTHORITY)NT AUTHORITY
Description: Performance1637070000000000000000000009030000


=========================== Installed Programs ============================

Acrobat.com (Version: 1.6.65)
Adobe AIR (Version: 1.5.0.7220)
Adobe Flash Player 11 ActiveX (Version: 11.4.402.265)
Adobe Reader 9.1 MUI (Version: 9.1.0)
Agatha Christie - 4:50 from Paddington (Version: 2.2.0.97)
Agatha Christie Dead Man's Folly
Asistent pro přihlášení ke službě Windows Live (Version: 5.000.818.5)
Atheros Client Installation Program (Version: 7.0)
ATI Catalyst Install Manager (Version: 3.0.765.0)
Bejeweled 2 Deluxe (Version: 2.2.0.95)
Broadcom 802.11 Network Adapter (Version: 5.100.249.2)
Build-a-lot 2 (Version: 2.2.0.95)
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center Core Implementation (Version: 2010.0421.657.10561)
Catalyst Control Center Graphics Full Existing (Version: 2010.0421.657.10561)
Catalyst Control Center Graphics Full New (Version: 2010.0421.657.10561)
Catalyst Control Center Graphics Light (Version: 2010.0421.657.10561)
Catalyst Control Center Graphics Previews Common (Version: 2010.0421.657.10561)
Catalyst Control Center InstallProxy (Version: 2010.0421.657.10561)
Catalyst Control Center Localization All (Version: 2010.0421.657.10561)
ccc-core-static (Version: 2010.0421.657.10561)
ccc-utility64 (Version: 2010.0421.657.10561)
CCC Help Czech (Version: 2010.0421.0656.10561)
CCC Help Danish (Version: 2010.0421.0656.10561)
CCC Help Dutch (Version: 2010.0421.0656.10561)
CCC Help English (Version: 2010.0421.0656.10561)
CCC Help Finnish (Version: 2010.0421.0656.10561)
CCC Help French (Version: 2010.0421.0656.10561)
CCC Help German (Version: 2010.0421.0656.10561)
CCC Help Greek (Version: 2010.0421.0656.10561)
CCC Help Hungarian (Version: 2010.0421.0656.10561)
CCC Help Chinese Standard (Version: 2010.0421.0656.10561)
CCC Help Chinese Traditional (Version: 2010.0421.0656.10561)
CCC Help Italian (Version: 2010.0421.0656.10561)
CCC Help Japanese (Version: 2010.0421.0656.10561)
CCC Help Korean (Version: 2010.0421.0656.10561)
CCC Help Norwegian (Version: 2010.0421.0656.10561)
CCC Help Polish (Version: 2010.0421.0656.10561)
CCC Help Portuguese (Version: 2010.0421.0656.10561)
CCC Help Russian (Version: 2010.0421.0656.10561)
CCC Help Spanish (Version: 2010.0421.0656.10561)
CCC Help Swedish (Version: 2010.0421.0656.10561)
CCC Help Thai (Version: 2010.0421.0656.10561)
CCC Help Turkish (Version: 2010.0421.0656.10561)
CCleaner (Version: 3.22)
Cisco EAP-FAST Module (Version: 2.2.14)
Cisco LEAP Module (Version: 1.0.19)
Cisco PEAP Module (Version: 1.1.6)
Diner Dash 2 Restaurant Rescue (Version: 2.2.0.95)
eMachines Games (Version: 1.0.1.3)
eMachines Power Management (Version: 5.00.3005)
eMachines Recovery Management (Version: 4.05.3013)
eMachines Registration (Version: 1.03.3003)
eMachines ScreenSaver (Version: 1.1.0806.2010)
eMachines Updater (Version: 1.02.3001)
Farm Frenzy (Version: 2.2.0.95)
FATE (Version: 2.2.0.95)
File Type Assistant
Final Drive Nitro (Version: 2.2.0.95)
Google Chrome (Version: 21.0.1180.89)
Google Update Helper (Version: 1.3.21.115)
Chuzzle Deluxe (Version: 2.2.0.95)
ICQ7M (Version: 7.
Identity Card (Version: 1.00.3003)
Insaniquarium Deluxe (Version: 2.2.0.95)
Jewel Quest Solitaire 2 (Version: 2.2.0.95)
John Deere Drive Green (Version: 2.2.0.95)
Jpeg Resampler Vs 6+
Junk Mail filter update (Version: 14.0.8089.726)
Launch Manager (Version: 4.0.12)
LG USB Modem driver
Malwarebytes Anti-Malware verze 1.62.0.1300 (Version: 1.62.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile CSY Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Office 2010 (Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.10411.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (Version: 9.0.30411)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
MSVCRT (Version: 14.0.1468.721)
Norton Internet Security (Version: 19.8.0.14)
Nástroj pro odesílání služby Windows Live (Version: 14.0.8014.1029)
NTI Media Maker 9 (Version: 9.0.2.8928)
OpenOffice.org 3.4.1 (Version: 3.41.9593)
Penguins! (Version: 2.2.0.95)
Plants vs. Zombies (Version: 2.2.0.95)
Polar Bowler (Version: 2.2.0.95)
Polar Golfer (Version: 2.2.0.95)
rajče průvodce verze 1.59.42.257
Realtek HDMI Audio Driver for ATI (Version: 6.0.1.6034)
Realtek High Definition Audio Driver (Version: 6.0.1.6141)
Realtek USB 2.0 Card Reader (Version: 6.1.7600.30122)
Revo Uninstaller 1.93 (Version: 1.93)
Synaptics Pointing Device Driver (Version: 14.0.19.0)
The KMPlayer (remove only)
Uc_heb a Hebrák 2.31
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update Installer for WildTangent Games App
Video Web Camera (Version: 5.1.7.2)
Virtual Villagers 4 - The Tree of Life (Version: 2.2.0.95)
VisiPics V1.30
Welcome Center (Version: 1.02.3004)
WildTangent Games (Version: 1.0.3.0)
WildTangent Games App (eMachines Games) (Version: 4.0.5.32)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Fotogalerie (Version: 14.0.8081.709)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Writer (Version: 14.0.8089.0726)
WinRAR 4.11 (64-bit) (Version: 4.11.0)
Zuma's Revenge (Version: 2.2.0.95)
Zuma Deluxe (Version: 2.2.0.95)

========================= Memory info: ===================================

Percentage of memory in use: 43%
Total physical RAM: 2810.9 MB
Available physical RAM: 1575.28 MB
Total Pagefile: 5619.99 MB
Available Pagefile: 4103.45 MB
Total Virtual: 4095.88 MB
Available Virtual: 3972.75 MB

========================= Partitions: =====================================

1 Drive c: (eMachines) (Fixed) (Total:451.66 GB) (Free:403.33 GB) NTFS
2 Drive d: (NEW) (CDROM) (Total:4.36 GB) (Free:0 GB) UDF

========================= Users: ========================================

U§ivatelsk‚ Łźty pro \\JABLICKOVA-PC

Administrator Guest jablickova
Sabina
Pýˇkaz byl ŁspŘçnŘ dokonźen.


**** End of log ****