PC-HELP.CZ

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:33:41, on 28.9.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\Windows\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Users\X\Desktop\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
R3 - URLSearchHook: (no name) - {33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A} - (no file)
R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - (no file)
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [BCU] "C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM\..\Run: [DIT] Dit.exe
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [UpdateMyDrivers] C:\Program Files\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe /ot /as /ss
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: centrumcztoolbar - {61A97628-7C82-4315-957A-C74C2CDD85DF} - (no file)
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\system32\nlssrv32.exe
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe

--
End of file - 8033 bytes

Problémy?

Odinstaluj Conduit a uTorrent toolbar

Fixni:
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
- Pokud používáš Firefox, klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Chrome, nic dalšího nevybírej a dej Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(ZATÍM SÁM NIC NEMAŽ!).
Vlož sem pak obsah toho logu.

Problémy ani tak ne, jen takovej pocit, že systém trochu ztratil na svižnosti. Tak proto...

Toolbar sem přehlídl, díky.

ATF Cleaner - pročištěno (jinak čas od času pustím CCleaner, je v nich nějakej zásaní rozdíl?)

Malwarebytes' Anti-Malware - projeto bez nálezu

Log:

Malwarebytes Anti-Malware 1.65.0.1400
http://www.malwarebytes.org

Verze databáze: v2012.09.28.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 8.0.7601.17514
X :: X-PC [administrátor]

28.9.2012 20:36:41
mbam-log-2012-09-28 (20-36-41).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 213746
Uplynulý čas: 3 minut, 51 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

Každej cleaner se chová trochu jinak a dá se říct, že CC je mín důkladnej.

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Po použití ComboFix sem obnovoval systém. Smázlo mi to složku C:\X\

Ale stejně je pryč, naštěstí tam nebylo nic tak důležitýho...

TDSSKiller:

09:27:07.0519 4196 TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
09:27:07.0707 4196 ============================================================
09:27:07.0707 4196 Current date / time: 2012/09/29 09:27:07.0707
09:27:07.0707 4196 SystemInfo:
09:27:07.0707 4196
09:27:07.0707 4196 OS Version: 6.1.7601 ServicePack: 1.0
09:27:07.0707 4196 Product type: Workstation
09:27:07.0707 4196 ComputerName: X-PC
09:27:07.0707 4196 UserName: X
09:27:07.0707 4196 Windows directory: C:\Windows
09:27:07.0707 4196 System windows directory: C:\Windows
09:27:07.0707 4196 Processor architecture: Intel x86
09:27:07.0707 4196 Number of processors: 2
09:27:07.0707 4196 Page size: 0x1000
09:27:07.0707 4196 Boot type: Normal boot
09:27:07.0707 4196 ============================================================
09:27:09.0657 4196 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
09:27:09.0657 4196 ============================================================
09:27:09.0657 4196 \Device\Harddisk0\DR0:
09:27:09.0657 4196 MBR partitions:
09:27:09.0657 4196 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A3848C1
09:27:09.0657 4196 ============================================================
09:27:09.0657 4196 C: <-> \Device\Harddisk0\DR0\Partition1
09:27:09.0657 4196 ============================================================
09:27:09.0657 4196 Initialize success
09:27:09.0657 4196 ============================================================
09:27:11.0841 1384 Deinitialize success

09:27:16.0271 4348 TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
09:27:16.0365 4348 ============================================================
09:27:16.0365 4348 Current date / time: 2012/09/29 09:27:16.0365
09:27:16.0365 4348 SystemInfo:
09:27:16.0365 4348
09:27:16.0365 4348 OS Version: 6.1.7601 ServicePack: 1.0
09:27:16.0365 4348 Product type: Workstation
09:27:16.0365 4348 ComputerName: X-PC
09:27:16.0365 4348 UserName: X
09:27:16.0365 4348 Windows directory: C:\Windows
09:27:16.0365 4348 System windows directory: C:\Windows
09:27:16.0365 4348 Processor architecture: Intel x86
09:27:16.0365 4348 Number of processors: 2
09:27:16.0365 4348 Page size: 0x1000
09:27:16.0365 4348 Boot type: Normal boot
09:27:16.0365 4348 ============================================================
09:27:17.0238 4348 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
09:27:17.0238 4348 ============================================================
09:27:17.0238 4348 \Device\Harddisk0\DR0:
09:27:17.0238 4348 MBR partitions:
09:27:17.0238 4348 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A3848C1
09:27:17.0238 4348 ============================================================
09:27:17.0238 4348 C: <-> \Device\Harddisk0\DR0\Partition1
09:27:17.0238 4348 ============================================================
09:27:17.0238 4348 Initialize success
09:27:17.0238 4348 ============================================================
09:27:18.0907 3116 ============================================================
09:27:18.0907 3116 Scan started
09:27:18.0907 3116 Mode: Manual;
09:27:18.0907 3116 ============================================================
09:27:19.0703 3116 ================ Scan system memory ========================
09:27:19.0703 3116 System memory - ok
09:27:19.0703 3116 ================ Scan services =============================
09:27:19.0843 3116 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
09:27:19.0843 3116 1394ohci - ok
09:27:19.0890 3116 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys
09:27:19.0890 3116 ACPI - ok
09:27:19.0937 3116 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
09:27:19.0937 3116 AcpiPmi - ok
09:27:19.0968 3116 adfs - ok
09:27:20.0077 3116 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
09:27:20.0093 3116 AdobeARMservice - ok
09:27:20.0140 3116 [ 459AC130C6AB892B1CD5D7544626EFC5 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
09:27:20.0140 3116 AdobeFlashPlayerUpdateSvc - ok
09:27:20.0171 3116 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
09:27:20.0171 3116 adp94xx - ok
09:27:20.0171 3116 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
09:27:20.0187 3116 adpahci - ok
09:27:20.0187 3116 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
09:27:20.0187 3116 adpu320 - ok
09:27:20.0218 3116 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
09:27:20.0218 3116 AeLookupSvc - ok
09:27:20.0280 3116 [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD C:\Windows\system32\drivers\afd.sys
09:27:20.0280 3116 AFD - ok
09:27:20.0311 3116 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys
09:27:20.0327 3116 agp440 - ok
09:27:20.0327 3116 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
09:27:20.0343 3116 aic78xx - ok
09:27:20.0405 3116 [ 7997B6F02CBDA0E31FA18CC85871B938 ] ALCXWDM C:\Windows\system32\drivers\RTKVAC.SYS
09:27:20.0467 3116 ALCXWDM - ok
09:27:20.0483 3116 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
09:27:20.0483 3116 ALG - ok
09:27:20.0499 3116 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys
09:27:20.0499 3116 aliide - ok
09:27:20.0545 3116 [ 4B9298FD6707980AB8E3A8F0E642EC9A ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
09:27:20.0545 3116 AMD External Events Utility - ok
09:27:20.0577 3116 AMD FUEL Service - ok
09:27:20.0592 3116 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys
09:27:20.0592 3116 amdagp - ok
09:27:20.0608 3116 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys
09:27:20.0608 3116 amdide - ok
09:27:20.0623 3116 [ FF258424F0B2EF25EB98F04EE386E6E3 ] amdiox86 C:\Windows\system32\DRIVERS\amdiox86.sys
09:27:20.0623 3116 amdiox86 - ok
09:27:20.0639 3116 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
09:27:20.0639 3116 AmdK8 - ok
09:27:20.0826 3116 [ 5C297F25A4A09D14BFE2CAB5DE2F1457 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
09:27:20.0967 3116 amdkmdag - ok
09:27:20.0982 3116 [ FF2E35D9BD35F36A0126A0CA7556E43D ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
09:27:20.0982 3116 amdkmdap - ok
09:27:21.0029 3116 [ AD8FA28D8ED0D0A689A0559085CE0F18 ] AmdLLD C:\Windows\system32\DRIVERS\AmdLLD.sys
09:27:21.0029 3116 AmdLLD - ok
09:27:21.0045 3116 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
09:27:21.0045 3116 AmdPPM - ok
09:27:21.0091 3116 [ D320BF87125326F996D4904FE24300FC ] amdsata C:\Windows\system32\drivers\amdsata.sys
09:27:21.0091 3116 amdsata - ok
09:27:21.0107 3116 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
09:27:21.0107 3116 amdsbs - ok
09:27:21.0123 3116 [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata C:\Windows\system32\drivers\amdxata.sys
09:27:21.0123 3116 amdxata - ok
09:27:21.0169 3116 [ D716473C4F66C1173D3CA4E679F68743 ] Amfilter C:\Windows\system32\DRIVERS\Amfilter.sys
09:27:21.0169 3116 Amfilter - ok
09:27:21.0216 3116 [ 0E264A9ACB592F3FD91E742983DB6A96 ] Amusbprt C:\Windows\system32\DRIVERS\Amusbprt.sys
09:27:21.0216 3116 Amusbprt - ok
09:27:21.0263 3116 [ 40C15CE1B832B78CC2A2F61807058763 ] AODDriver4.1 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys
09:27:21.0263 3116 AODDriver4.1 - ok
09:27:21.0357 3116 [ D1AF38FBAC0DC7E6D796B0ED01707EE0 ] AppHostSvc C:\Windows\system32\inetsrv\apphostsvc.dll
09:27:21.0357 3116 AppHostSvc - ok
09:27:21.0403 3116 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys
09:27:21.0403 3116 AppID - ok
09:27:21.0435 3116 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
09:27:21.0435 3116 AppIDSvc - ok
09:27:21.0481 3116 [ FB1959012294D6AD43E5304DF65E3C26 ] Appinfo C:\Windows\System32\appinfo.dll
09:27:21.0481 3116 Appinfo - ok
09:27:21.0513 3116 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
09:27:21.0528 3116 AppMgmt - ok
09:27:21.0544 3116 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
09:27:21.0544 3116 arc - ok
09:27:21.0559 3116 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
09:27:21.0559 3116 arcsas - ok
09:27:21.0591 3116 [ 2B4E66FAC6503494A2C6F32BB6AB3826 ] AsIO C:\Windows\system32\drivers\AsIO.sys
09:27:21.0591 3116 AsIO - ok
09:27:21.0715 3116 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
09:27:21.0731 3116 aspnet_state - ok
09:27:21.0762 3116 [ F5DC168BF77572D51BE28BA261B30CB4 ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
09:27:21.0762 3116 aswFsBlk - ok
09:27:21.0762 3116 [ F76E51561562AC4105DBBE53FC99BC10 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
09:27:21.0762 3116 aswMonFlt - ok
09:27:21.0825 3116 [ 924819669AFD0EDF5C067193D371FAB0 ] aswRdr C:\Windows\System32\Drivers\aswrdr2.sys
09:27:21.0825 3116 aswRdr - ok
09:27:21.0887 3116 [ 30E45AF8B4D83176CA850FC9699E860B ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
09:27:21.0887 3116 aswSnx - ok
09:27:21.0903 3116 [ F04BDBCB965C05C51F4A7DE7B62063D6 ] aswSP C:\Windows\system32\drivers\aswSP.sys
09:27:21.0903 3116 aswSP - ok
09:27:21.0934 3116 [ DFE9152ABFA89BB8CFDC057409B2D4DA ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
09:27:21.0934 3116 aswTdi - ok
09:27:21.0949 3116 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
09:27:21.0949 3116 AsyncMac - ok
09:27:22.0012 3116 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys
09:27:22.0012 3116 atapi - ok
09:27:22.0027 3116 [ 434192D027A6A11E32E1C74C7C43E1ED ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW73.sys
09:27:22.0027 3116 AtiHDAudioService - ok
09:27:22.0059 3116 [ 8DF873D0587596C1D35A9CECECC61DA1 ] AtiHdmiService C:\Windows\system32\drivers\AtiHdmi.sys
09:27:22.0059 3116 AtiHdmiService - ok
09:27:22.0183 3116 [ 5C297F25A4A09D14BFE2CAB5DE2F1457 ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys
09:27:22.0215 3116 atikmdag - ok
09:27:22.0277 3116 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
09:27:22.0277 3116 AudioEndpointBuilder - ok
09:27:22.0293 3116 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll
09:27:22.0293 3116 Audiosrv - ok
09:27:22.0371 3116 [ 8DCE8988E2FBCBB731D5769A247DFEC0 ] Autodesk Licensing Service C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
09:27:22.0371 3116 Autodesk Licensing Service - ok
09:27:22.0433 3116 [ 04AC21E821F259845BD7367CEE057290 ] avast! Antivirus C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
09:27:22.0433 3116 avast! Antivirus - ok
09:27:22.0480 3116 [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV C:\Windows\System32\AxInstSV.dll
09:27:22.0480 3116 AxInstSV - ok
09:27:22.0511 3116 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
09:27:22.0511 3116 b06bdrv - ok
09:27:22.0542 3116 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
09:27:22.0542 3116 b57nd60x - ok
09:27:22.0636 3116 [ FD217CCD94D414A2687150EDFDAFA4C0 ] BCUService C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
09:27:22.0636 3116 BCUService - ok
09:27:22.0651 3116 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
09:27:22.0651 3116 BDESVC - ok
09:27:22.0651 3116 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
09:27:22.0667 3116 Beep - ok
09:27:22.0714 3116 [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE C:\Windows\System32\bfe.dll
09:27:22.0729 3116 BFE - ok
09:27:22.0761 3116 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll
09:27:22.0776 3116 BITS - ok
09:27:22.0792 3116 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
09:27:22.0792 3116 blbdrive - ok
09:27:22.0823 3116 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
09:27:22.0823 3116 bowser - ok
09:27:22.0839 3116 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
09:27:22.0839 3116 BrFiltLo - ok
09:27:22.0854 3116 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
09:27:22.0854 3116 BrFiltUp - ok
09:27:22.0901 3116 [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser C:\Windows\System32\browser.dll
09:27:22.0901 3116 Browser - ok
09:27:22.0917 3116 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
09:27:22.0932 3116 Brserid - ok
09:27:22.0932 3116 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
09:27:22.0948 3116 BrSerWdm - ok
09:27:22.0963 3116 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
09:27:22.0963 3116 BrUsbMdm - ok
09:27:22.0979 3116 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
09:27:22.0979 3116 BrUsbSer - ok
09:27:23.0041 3116 [ DB99076533FFB38CBEC8AC88E4535850 ] BthAvrcp C:\Windows\system32\DRIVERS\BthAvrcp.sys
09:27:23.0041 3116 BthAvrcp - ok
09:27:23.0088 3116 [ 2865A5C8E98C70C605F417908CEBB3A4 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
09:27:23.0088 3116 BthEnum - ok
09:27:23.0104 3116 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
09:27:23.0104 3116 BTHMODEM - ok
09:27:23.0135 3116 [ AD1872E5829E8A2C3B5B4B641C3EAB0E ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
09:27:23.0135 3116 BthPan - ok
09:27:23.0182 3116 [ 1153DE2E4F5941E10C399CB5592F78A1 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
09:27:23.0182 3116 BTHPORT - ok
09:27:23.0213 3116 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
09:27:23.0213 3116 bthserv - ok
09:27:23.0229 3116 [ C81E9413A25A439F436B1D4B6A0CF9E9 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
09:27:23.0229 3116 BTHUSB - ok
09:27:23.0244 3116 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
09:27:23.0244 3116 cdfs - ok
09:27:23.0291 3116 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\drivers\cdrom.sys
09:27:23.0291 3116 cdrom - ok
09:27:23.0338 3116 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll
09:27:23.0338 3116 CertPropSvc - ok
09:27:23.0353 3116 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
09:27:23.0353 3116 circlass - ok
09:27:23.0369 3116 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
09:27:23.0369 3116 CLFS - ok
09:27:23.0416 3116 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
09:27:23.0416 3116 clr_optimization_v2.0.50727_32 - ok
09:27:23.0463 3116 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
09:27:23.0478 3116 clr_optimization_v4.0.30319_32 - ok
09:27:23.0494 3116 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
09:27:23.0509 3116 CmBatt - ok
09:27:23.0509 3116 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys
09:27:23.0509 3116 cmdide - ok
09:27:23.0556 3116 [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG C:\Windows\system32\Drivers\cng.sys
09:27:23.0556 3116 CNG - ok
09:27:23.0572 3116 COMMONFX - ok
09:27:23.0572 3116 COMMONFX.SYS - ok
09:27:23.0587 3116 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
09:27:23.0587 3116 Compbatt - ok
09:27:23.0650 3116 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
09:27:23.0650 3116 CompositeBus - ok
09:27:23.0650 3116 COMSysApp - ok
09:27:23.0665 3116 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
09:27:23.0665 3116 crcdisk - ok
09:27:23.0712 3116 [ 06E771AA596B8761107AB57E99F128D7 ] CryptSvc C:\Windows\system32\cryptsvc.dll
09:27:23.0728 3116 CryptSvc - ok
09:27:23.0759 3116 [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC C:\Windows\system32\drivers\csc.sys
09:27:23.0775 3116 CSC - ok
09:27:23.0821 3116 [ 15F93B37F6801943360D9EB42485D5D3 ] CscService C:\Windows\System32\cscsvc.dll
09:27:23.0821 3116 CscService - ok
09:27:23.0821 3116 ctac32k - ok
09:27:23.0837 3116 ctaud2k - ok
09:27:23.0837 3116 CTAUDFX - ok
09:27:23.0837 3116 CTAUDFX.SYS - ok
09:27:23.0884 3116 [ B4F6B60FEED3EB5F85BE85E8FA4C0CC1 ] ctgame C:\Windows\system32\DRIVERS\ctgame.sys
09:27:23.0884 3116 ctgame - ok
09:27:23.0899 3116 ctprxy2k - ok
09:27:23.0899 3116 CTSBLFX - ok
09:27:23.0899 3116 CTSBLFX.SYS - ok
09:27:23.0915 3116 ctsfm2k - ok
09:27:23.0931 3116 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32\rpcss.dll
09:27:23.0931 3116 DcomLaunch - ok
09:27:23.0962 3116 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
09:27:23.0962 3116 defragsvc - ok
09:27:23.0993 3116 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
09:27:24.0009 3116 DfsC - ok
09:27:24.0040 3116 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll
09:27:24.0040 3116 Dhcp - ok
09:27:24.0055 3116 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
09:27:24.0055 3116 discache - ok
09:27:24.0087 3116 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
09:27:24.0087 3116 Disk - ok
09:27:24.0133 3116 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
09:27:24.0133 3116 Dnscache - ok
09:27:24.0180 3116 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll
09:27:24.0180 3116 dot3svc - ok
09:27:24.0227 3116 [ B5E479EB83707DD698F66953E922042C ] Dot4 C:\Windows\system32\DRIVERS\Dot4.sys
09:27:24.0227 3116 Dot4 - ok
09:27:24.0289 3116 [ CAEFD09B6A6249C53A67D55A9A9FCABF ] Dot4Print C:\Windows\system32\drivers\Dot4Prt.sys
09:27:24.0289 3116 Dot4Print - ok
09:27:24.0305 3116 [ CF491FF38D62143203C065260567E2F7 ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
09:27:24.0305 3116 dot4usb - ok
09:27:24.0352 3116 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll
09:27:24.0352 3116 DPS - ok
09:27:24.0383 3116 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
09:27:24.0383 3116 drmkaud - ok
09:27:24.0430 3116 [ 23F5D28378A160352BA8F817BD8C71CB ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
09:27:24.0430 3116 DXGKrnl - ok
09:27:24.0445 3116 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
09:27:24.0445 3116 EapHost - ok
09:27:24.0492 3116 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
09:27:24.0539 3116 ebdrv - ok
09:27:24.0586 3116 [ 81951F51E318AECC2D68559E47485CC4 ] EFS C:\Windows\System32\lsass.exe
09:27:24.0586 3116 EFS - ok
09:27:24.0633 3116 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
09:27:24.0633 3116 ehRecvr - ok
09:27:24.0648 3116 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
09:27:24.0648 3116 ehSched - ok
09:27:24.0679 3116 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
09:27:24.0679 3116 elxstor - ok
09:27:24.0679 3116 emupia - ok
09:27:24.0726 3116 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys
09:27:24.0726 3116 ErrDev - ok
09:27:24.0757 3116 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
09:27:24.0757 3116 EventSystem - ok
09:27:24.0773 3116 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
09:27:24.0773 3116 exfat - ok
09:27:24.0789 3116 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
09:27:24.0789 3116 fastfat - ok
09:27:24.0835 3116 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe
09:27:24.0851 3116 Fax - ok
09:27:24.0867 3116 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
09:27:24.0867 3116 fdc - ok
09:27:24.0882 3116 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
09:27:24.0882 3116 fdPHost - ok
09:27:24.0898 3116 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
09:27:24.0898 3116 FDResPub - ok
09:27:24.0913 3116 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
09:27:24.0913 3116 FileInfo - ok
09:27:24.0929 3116 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
09:27:24.0929 3116 Filetrace - ok
09:27:24.0991 3116 [ 1F63900E2EB00101B9ACA2B7A870704E ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
09:27:24.0991 3116 FLEXnet Licensing Service - ok
09:27:25.0007 3116 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
09:27:25.0007 3116 flpydisk - ok
09:27:25.0023 3116 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
09:27:25.0038 3116 FltMgr - ok
09:27:25.0085 3116 [ B3A5EC6B6B6673DB7E87C2BCDBDDC074 ] FontCache C:\Windows\system32\FntCache.dll
09:27:25.0085 3116 FontCache - ok
09:27:25.0132 3116 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
09:27:25.0132 3116 FontCache3.0.0.0 - ok
09:27:25.0194 3116 [ C96C52D0D80666AF585516FFA97B7C00 ] ForceWare Intelligent Application Manager (IAM) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
09:27:25.0194 3116 ForceWare Intelligent Application Manager (IAM) - ok
09:27:25.0210 3116 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
09:27:25.0210 3116 FsDepends - ok
09:27:25.0241 3116 [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
09:27:25.0241 3116 Fs_Rec - ok
09:27:25.0288 3116 [ 8A73E79089B282100B9393B644CB853B ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
09:27:25.0288 3116 fvevol - ok
09:27:25.0319 3116 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
09:27:25.0319 3116 gagp30kx - ok
09:27:25.0366 3116 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll
09:27:25.0366 3116 gpsvc - ok
09:27:25.0444 3116 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
09:27:25.0444 3116 gupdate - ok
09:27:25.0444 3116 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
09:27:25.0444 3116 gupdatem - ok
09:27:25.0444 3116 ha10kx2k - ok
09:27:25.0459 3116 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
09:27:25.0459 3116 hcw85cir - ok
09:27:25.0506 3116 [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
09:27:25.0506 3116 HdAudAddService - ok
09:27:25.0522 3116 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
09:27:25.0522 3116 HDAudBus - ok
09:27:25.0537 3116 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
09:27:25.0553 3116 HidBatt - ok
09:27:25.0553 3116 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
09:27:25.0553 3116 HidBth - ok
09:27:25.0569 3116 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
09:27:25.0569 3116 HidIr - ok
09:27:25.0584 3116 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
09:27:25.0584 3116 hidserv - ok
09:27:25.0631 3116 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
09:27:25.0631 3116 HidUsb - ok
09:27:25.0678 3116 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll
09:27:25.0693 3116 hkmsvc - ok
09:27:25.0725 3116 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
09:27:25.0740 3116 HomeGroupListener - ok
09:27:25.0771 3116 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
09:27:25.0787 3116 HomeGroupProvider - ok
09:27:25.0787 3116 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
09:27:25.0787 3116 HpSAMD - ok
09:27:25.0849 3116 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys
09:27:25.0849 3116 HTTP - ok
09:27:25.0896 3116 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
09:27:25.0896 3116 hwpolicy - ok
09:27:25.0912 3116 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
09:27:25.0927 3116 i8042prt - ok
09:27:25.0974 3116 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
09:27:25.0974 3116 iaStorV - ok
09:27:26.0068 3116 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
09:27:26.0068 3116 IDriverT - ok
09:27:26.0130 3116 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
09:27:26.0146 3116 idsvc - ok
09:27:26.0161 3116 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
09:27:26.0161 3116 iirsp - ok
09:27:26.0193 3116 [ FC9735B66850CF8AEBBC1E207ECB2AD8 ] IISADMIN C:\Windows\system32\inetsrv\inetinfo.exe
09:27:26.0193 3116 IISADMIN - ok
09:27:26.0239 3116 [ F95622F161474511B8D80D6B093AA610 ] IKEEXT C:\Windows\System32\ikeext.dll
09:27:26.0239 3116 IKEEXT - ok
09:27:26.0255 3116 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys
09:27:26.0255 3116 intelide - ok
09:27:26.0286 3116 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
09:27:26.0286 3116 intelppm - ok
09:27:26.0317 3116 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
09:27:26.0317 3116 IPBusEnum - ok
09:27:26.0333 3116 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
09:27:26.0333 3116 IpFilterDriver - ok
09:27:26.0380 3116 [ 4D65A07B795D6674312F879D09AA7663 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
09:27:26.0395 3116 iphlpsvc - ok
09:27:26.0442 3116 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
09:27:26.0442 3116 IPMIDRV - ok
09:27:26.0442 3116 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
09:27:26.0458 3116 IPNAT - ok
09:27:26.0473 3116 [ 9F7E491FB0BA0F9E370163834FC1FE31 ] irda C:\Windows\system32\DRIVERS\irda.sys
09:27:26.0473 3116 irda - ok
09:27:26.0489 3116 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
09:27:26.0489 3116 IRENUM - ok
09:27:26.0489 3116 [ 4220D2F03D5C4226D0A1AA4B84025E45 ] Irmon C:\Windows\System32\irmon.dll
09:27:26.0505 3116 Irmon - ok
09:27:26.0536 3116 [ 5896B5FF6332AB2BE1582523E9656A67 ] irsir C:\Windows\system32\DRIVERS\irsir.sys
09:27:26.0536 3116 irsir - ok
09:27:26.0536 3116 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys
09:27:26.0536 3116 isapnp - ok
09:27:26.0583 3116 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
09:27:26.0583 3116 iScsiPrt - ok
09:27:26.0645 3116 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
09:27:26.0645 3116 kbdclass - ok
09:27:26.0676 3116 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
09:27:26.0676 3116 kbdhid - ok
09:27:26.0676 3116 [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso C:\Windows\system32\lsass.exe
09:27:26.0692 3116 KeyIso - ok
09:27:26.0723 3116 [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
09:27:26.0723 3116 KSecDD - ok
09:27:26.0739 3116 [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
09:27:26.0739 3116 KSecPkg - ok
09:27:26.0770 3116 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
09:27:26.0770 3116 KtmRm - ok
09:27:26.0785 3116 kxwdmdrv - ok
09:27:26.0801 3116 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\system32\srvsvc.dll
09:27:26.0817 3116 LanmanServer - ok
09:27:26.0863 3116 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
09:27:26.0863 3116 LanmanWorkstation - ok
09:27:26.0879 3116 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
09:27:26.0879 3116 lltdio - ok
09:27:26.0895 3116 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
09:27:26.0895 3116 lltdsvc - ok
09:27:26.0910 3116 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
09:27:26.0926 3116 lmhosts - ok
09:27:26.0941 3116 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
09:27:26.0941 3116 LSI_FC - ok
09:27:26.0957 3116 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
09:27:26.0957 3116 LSI_SAS - ok
09:27:26.0973 3116 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
09:27:26.0973 3116 LSI_SAS2 - ok
09:27:26.0988 3116 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
09:27:26.0988 3116 LSI_SCSI - ok
09:27:27.0004 3116 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
09:27:27.0004 3116 luafv - ok
09:27:27.0082 3116 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
09:27:27.0097 3116 Mcx2Svc - ok
09:27:27.0097 3116 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
09:27:27.0097 3116 megasas - ok
09:27:27.0113 3116 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
09:27:27.0113 3116 MegaSR - ok
09:27:27.0175 3116 Microsoft SharePoint Workspace Audit Service - ok
09:27:27.0207 3116 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
09:27:27.0207 3116 MMCSS - ok
09:27:27.0222 3116 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
09:27:27.0222 3116 Modem - ok
09:27:27.0253 3116 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
09:27:27.0253 3116 monitor - ok
09:27:27.0269 3116 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
09:27:27.0285 3116 mouclass - ok
09:27:27.0300 3116 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
09:27:27.0300 3116 mouhid - ok
09:27:27.0347 3116 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
09:27:27.0347 3116 mountmgr - ok
09:27:27.0409 3116 [ 46297FA8E30A6007F14118FC2B942FBC ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
09:27:27.0409 3116 MozillaMaintenance - ok
09:27:27.0441 3116 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys
09:27:27.0456 3116 mpio - ok
09:27:27.0456 3116 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
09:27:27.0456 3116 mpsdrv - ok
09:27:27.0503 3116 [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc C:\Windows\system32\mpssvc.dll
09:27:27.0519 3116 MpsSvc - ok
09:27:27.0550 3116 [ A5888C609EFCC07B060DD823FA3D474A ] MQAC C:\Windows\system32\drivers\mqac.sys
09:27:27.0565 3116 MQAC - ok
09:27:27.0597 3116 [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
09:27:27.0612 3116 MRxDAV - ok
09:27:27.0659 3116 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
09:27:27.0659 3116 mrxsmb - ok
09:27:27.0690 3116 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
09:27:27.0690 3116 mrxsmb10 - ok
09:27:27.0737 3116 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
09:27:27.0737 3116 mrxsmb20 - ok
09:27:27.0784 3116 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys
09:27:27.0784 3116 msahci - ok
09:27:27.0784 3116 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys
09:27:27.0784 3116 msdsm - ok
09:27:27.0799 3116 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
09:27:27.0815 3116 MSDTC - ok
09:27:27.0831 3116 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
09:27:27.0831 3116 Msfs - ok
09:27:27.0831 3116 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
09:27:27.0831 3116 mshidkmdf - ok
09:27:27.0877 3116 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
09:27:27.0877 3116 msisadrv - ok
09:27:27.0909 3116 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
09:27:27.0909 3116 MSiSCSI - ok
09:27:27.0909 3116 msiserver - ok
09:27:27.0924 3116 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
09:27:27.0940 3116 MSKSSRV - ok
09:27:27.0955 3116 [ E582B9E88EF4980C3B76276620FE667B ] MSMQ C:\Windows\system32\mqsvc.exe
09:27:27.0955 3116 MSMQ - ok
09:27:28.0002 3116 [ 9CCED9B5AD63BECE2F8BC75A5E04CDAB ] MSMQTriggers C:\Windows\system32\mqtgsvc.exe
09:27:28.0002 3116 MSMQTriggers - ok
09:27:28.0018 3116 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
09:27:28.0018 3116 MSPCLOCK - ok
09:27:28.0033 3116 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
09:27:28.0033 3116 MSPQM - ok
09:27:28.0033 3116 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
09:27:28.0049 3116 MsRPC - ok
09:27:28.0049 3116 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
09:27:28.0065 3116 mssmbios - ok
09:27:28.0065 3116 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
09:27:28.0065 3116 MSTEE - ok
09:27:28.0080 3116 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
09:27:28.0080 3116 MTConfig - ok
09:27:28.0111 3116 [ CBE71C122434805CB73FFB6619F60598 ] MTsensor C:\Windows\system32\DRIVERS\ASACPI.sys
09:27:28.0127 3116 MTsensor - ok
09:27:28.0127 3116 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
09:27:28.0127 3116 Mup - ok
09:27:28.0174 3116 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll
09:27:28.0189 3116 napagent - ok
09:27:28.0221 3116 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
09:27:28.0221 3116 NativeWifiP - ok
09:27:28.0283 3116 [ 8C9C922D71F1CD4DEF73F186416B7896 ] NDIS C:\Windows\system32\drivers\ndis.sys
09:27:28.0283 3116 NDIS - ok
09:27:28.0299 3116 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
09:27:28.0299 3116 NdisCap - ok
09:27:28.0314 3116 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
09:27:28.0314 3116 NdisTapi - ok
09:27:28.0361 3116 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
09:27:28.0361 3116 Ndisuio - ok
09:27:28.0392 3116 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
09:27:28.0392 3116 NdisWan - ok
09:27:28.0439 3116 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
09:27:28.0439 3116 NDProxy - ok
09:27:28.0486 3116 [ 510C138564486FF926A3F773205C63D1 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
09:27:28.0486 3116 Net Driver HPZ12 - ok
09:27:28.0501 3116 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
09:27:28.0501 3116 NetBIOS - ok
09:27:28.0548 3116 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
09:27:28.0548 3116 NetBT - ok
09:27:28.0564 3116 [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon C:\Windows\system32\lsass.exe
09:27:28.0564 3116 Netlogon - ok
09:27:28.0595 3116 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
09:27:28.0595 3116 Netman - ok
09:27:28.0673 3116 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
09:27:28.0673 3116 NetMsmqActivator - ok
09:27:28.0673 3116 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
09:27:28.0673 3116 NetPipeActivator - ok

09:27:28.0689 3116 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
09:27:28.0689 3116 netprofm - ok
09:27:28.0704 3116 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
09:27:28.0704 3116 NetTcpActivator - ok
09:27:28.0704 3116 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
09:27:28.0704 3116 NetTcpPortSharing - ok
09:27:28.0720 3116 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
09:27:28.0720 3116 nfrd960 - ok
09:27:28.0767 3116 [ 912084381D30D8B89EC4E293053F4710 ] NlaSvc C:\Windows\System32\nlasvc.dll
09:27:28.0767 3116 NlaSvc - ok
09:27:28.0829 3116 [ B1EF4686961986DFFB7FE8F18E6FCB5B ] nlsX86cc C:\Windows\system32\nlssrv32.exe
09:27:28.0829 3116 nlsX86cc - ok
09:27:28.0891 3116 [ 7AEA4DF1CA68FD45DD4BBE1F0243CE7F ] NMSAccess C:\Program Files\CDBurnerXP\NMSAccessU.exe
09:27:28.0891 3116 NMSAccess - ok
09:27:28.0907 3116 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
09:27:28.0907 3116 Npfs - ok
09:27:28.0907 3116 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
09:27:28.0923 3116 nsi - ok
09:27:28.0923 3116 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
09:27:28.0923 3116 nsiproxy - ok
09:27:28.0969 3116 [ B6C48D01147EC020DE7F1856734127F8 ] nSvcIp C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
09:27:28.0969 3116 nSvcIp - ok
09:27:29.0032 3116 [ 81189C3D7763838E55C397759D49007A ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
09:27:29.0032 3116 Ntfs - ok
09:27:29.0047 3116 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
09:27:29.0047 3116 Null - ok
09:27:29.0094 3116 [ B5E37E31C053BC9950455A257526514B ] NVENETFD C:\Windows\system32\DRIVERS\nvm62x32.sys
09:27:29.0094 3116 NVENETFD - ok
09:27:29.0125 3116 [ 5BF9C11586F4764446407F509F1BECA8 ] NVNET C:\Windows\system32\DRIVERS\nvmf6232.sys
09:27:29.0125 3116 NVNET - ok
09:27:29.0141 3116 [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid C:\Windows\system32\drivers\nvraid.sys
09:27:29.0141 3116 nvraid - ok
09:27:29.0188 3116 [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor C:\Windows\system32\drivers\nvstor.sys
09:27:29.0188 3116 nvstor - ok
09:27:29.0203 3116 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
09:27:29.0203 3116 nv_agp - ok
09:27:29.0250 3116 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
09:27:29.0250 3116 ohci1394 - ok
09:27:29.0313 3116 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
09:27:29.0313 3116 ose - ok
09:27:29.0437 3116 [ 358A9CCA612C68EB2F07DDAD4CE1D8D7 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
09:27:29.0500 3116 osppsvc - ok
09:27:29.0500 3116 ossrv - ok
09:27:29.0515 3116 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
09:27:29.0531 3116 p2pimsvc - ok
09:27:29.0547 3116 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
09:27:29.0547 3116 p2psvc - ok
09:27:29.0562 3116 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
09:27:29.0562 3116 Parport - ok
09:27:29.0609 3116 [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr C:\Windows\system32\drivers\partmgr.sys
09:27:29.0609 3116 partmgr - ok
09:27:29.0625 3116 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
09:27:29.0625 3116 Parvdm - ok
09:27:29.0640 3116 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
09:27:29.0640 3116 PcaSvc - ok
09:27:29.0687 3116 [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd C:\Windows\system32\DRIVERS\pccsmcfd.sys
09:27:29.0687 3116 pccsmcfd - ok
09:27:29.0734 3116 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys
09:27:29.0734 3116 pci - ok
09:27:29.0749 3116 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys
09:27:29.0749 3116 pciide - ok
09:27:29.0765 3116 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
09:27:29.0781 3116 pcmcia - ok
09:27:29.0781 3116 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
09:27:29.0781 3116 pcw - ok
09:27:29.0812 3116 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
09:27:29.0827 3116 PEAUTH - ok
09:27:29.0859 3116 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
09:27:29.0859 3116 PeerDistSvc - ok
09:27:29.0952 3116 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll
09:27:29.0983 3116 pla - ok
09:27:30.0046 3116 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay C:\Windows\system32\umpnpmgr.dll
09:27:30.0046 3116 PlugPlay - ok
09:27:30.0108 3116 [ 37E5E8FFBAD35605DAEEC3224EA0E465 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
09:27:30.0108 3116 Pml Driver HPZ12 - ok
09:27:30.0155 3116 [ 831883B107684301F48ACE752C963984 ] PnkBstrA C:\Windows\system32\PnkBstrA.exe
09:27:30.0171 3116 PnkBstrA - ok
09:27:30.0186 3116 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
09:27:30.0186 3116 PNRPAutoReg - ok
09:27:30.0202 3116 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
09:27:30.0202 3116 PNRPsvc - ok
09:27:30.0233 3116 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
09:27:30.0233 3116 PolicyAgent - ok
09:27:30.0280 3116 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll
09:27:30.0280 3116 Power - ok
09:27:30.0295 3116 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
09:27:30.0295 3116 PptpMiniport - ok
09:27:30.0311 3116 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
09:27:30.0311 3116 Processor - ok
09:27:30.0358 3116 [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc C:\Windows\system32\profsvc.dll
09:27:30.0373 3116 ProfSvc - ok
09:27:30.0389 3116 [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe
09:27:30.0389 3116 ProtectedStorage - ok
09:27:30.0420 3116 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
09:27:30.0420 3116 Psched - ok
09:27:30.0451 3116 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
09:27:30.0467 3116 ql2300 - ok
09:27:30.0483 3116 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
09:27:30.0483 3116 ql40xx - ok
09:27:30.0498 3116 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
09:27:30.0498 3116 QWAVE - ok
09:27:30.0514 3116 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
09:27:30.0514 3116 QWAVEdrv - ok
09:27:30.0529 3116 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
09:27:30.0529 3116 RasAcd - ok
09:27:30.0561 3116 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
09:27:30.0561 3116 RasAgileVpn - ok
09:27:30.0561 3116 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
09:27:30.0576 3116 RasAuto - ok
09:27:30.0592 3116 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
09:27:30.0592 3116 Rasl2tp - ok
09:27:30.0639 3116 [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan C:\Windows\System32\rasmans.dll
09:27:30.0639 3116 RasMan - ok
09:27:30.0654 3116 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
09:27:30.0654 3116 RasPppoe - ok
09:27:30.0670 3116 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
09:27:30.0670 3116 RasSstp - ok
09:27:30.0717 3116 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
09:27:30.0717 3116 rdbss - ok
09:27:30.0732 3116 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
09:27:30.0732 3116 rdpbus - ok
09:27:30.0763 3116 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
09:27:30.0763 3116 RDPCDD - ok
09:27:30.0810 3116 [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
09:27:30.0810 3116 RDPDR - ok
09:27:30.0826 3116 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
09:27:30.0826 3116 RDPENCDD - ok
09:27:30.0841 3116 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
09:27:30.0841 3116 RDPREFMP - ok
09:27:30.0919 3116 [ 68A0387F58E226DEEE23D9715955572A ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
09:27:30.0919 3116 RdpVideoMiniport - ok
09:27:30.0966 3116 [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
09:27:30.0966 3116 RDPWD - ok
09:27:31.0013 3116 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
09:27:31.0013 3116 rdyboost - ok
09:27:31.0044 3116 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
09:27:31.0044 3116 RemoteAccess - ok
09:27:31.0044 3116 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
09:27:31.0060 3116 RemoteRegistry - ok
09:27:31.0091 3116 [ CB928D9E6DAF51879DD6BA8D02F01321 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
09:27:31.0091 3116 RFCOMM - ok
09:27:31.0138 3116 [ 906DCFC5EBF4EC0433F8D4FFFB0BA334 ] RMCAST C:\Windows\system32\DRIVERS\RMCAST.sys
09:27:31.0138 3116 RMCAST - ok
09:27:31.0153 3116 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
09:27:31.0153 3116 RpcEptMapper - ok
09:27:31.0169 3116 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
09:27:31.0185 3116 RpcLocator - ok
09:27:31.0185 3116 [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs C:\Windows\system32\rpcss.dll
09:27:31.0200 3116 RpcSs - ok
09:27:31.0200 3116 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
09:27:31.0200 3116 rspndr - ok
09:27:31.0247 3116 [ 7FA7F2E249A5DCBB7970630E15E1F482 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
09:27:31.0247 3116 s3cap - ok
09:27:31.0263 3116 [ 81951F51E318AECC2D68559E47485CC4 ] SamSs C:\Windows\system32\lsass.exe
09:27:31.0263 3116 SamSs - ok
09:27:31.0325 3116 [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
09:27:31.0325 3116 sbp2port - ok
09:27:31.0341 3116 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
09:27:31.0341 3116 SCardSvr - ok
09:27:31.0403 3116 [ 16B1ABE7F3E35F21DAC57592B6C5D464 ] SCDEmu C:\Windows\system32\drivers\SCDEmu.sys
09:27:31.0403 3116 SCDEmu - ok
09:27:31.0434 3116 [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
09:27:31.0434 3116 scfilter - ok
09:27:31.0481 3116 [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule C:\Windows\system32\schedsvc.dll
09:27:31.0497 3116 Schedule - ok
09:27:31.0528 3116 [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc C:\Windows\System32\certprop.dll
09:27:31.0528 3116 SCPolicySvc - ok
09:27:31.0559 3116 [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC C:\Windows\System32\SDRSVC.dll
09:27:31.0559 3116 SDRSVC - ok
09:27:31.0590 3116 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
09:27:31.0590 3116 secdrv - ok
09:27:31.0606 3116 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
09:27:31.0621 3116 seclogon - ok
09:27:31.0637 3116 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll
09:27:31.0653 3116 SENS - ok
09:27:31.0668 3116 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
09:27:31.0668 3116 SensrSvc - ok
09:27:31.0699 3116 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
09:27:31.0699 3116 Serenum - ok
09:27:31.0715 3116 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
09:27:31.0715 3116 Serial - ok
09:27:31.0762 3116 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
09:27:31.0762 3116 sermouse - ok
09:27:31.0855 3116 [ F31E9531AF225CA25350D5E87E999B31 ] ServiceLayer C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
09:27:31.0871 3116 ServiceLayer - ok
09:27:31.0918 3116 [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv C:\Windows\system32\sessenv.dll
09:27:31.0918 3116 SessionEnv - ok
09:27:31.0949 3116 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
09:27:31.0949 3116 sffdisk - ok
09:27:31.0965 3116 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
09:27:31.0965 3116 sffp_mmc - ok
09:27:31.0980 3116 [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
09:27:31.0980 3116 sffp_sd - ok
09:27:32.0011 3116 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
09:27:32.0011 3116 sfloppy - ok
09:27:32.0043 3116 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
09:27:32.0043 3116 SharedAccess - ok
09:27:32.0089 3116 [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
09:27:32.0089 3116 ShellHWDetection - ok
09:27:32.0136 3116 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\drivers\sisagp.sys
09:27:32.0136 3116 sisagp - ok
09:27:32.0167 3116 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
09:27:32.0167 3116 SiSRaid2 - ok
09:27:32.0183 3116 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
09:27:32.0183 3116 SiSRaid4 - ok
09:27:32.0199 3116 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
09:27:32.0199 3116 Smb - ok
09:27:32.0230 3116 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
09:27:32.0245 3116 SNMPTRAP - ok
09:27:32.0245 3116 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
09:27:32.0245 3116 spldr - ok
09:27:32.0277 3116 [ 9AEA093B8F9C37CF45538382CABA2475 ] Spooler C:\Windows\System32\spoolsv.exe
09:27:32.0292 3116 Spooler - ok
09:27:32.0370 3116 [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc C:\Windows\system32\sppsvc.exe
09:27:32.0417 3116 sppsvc - ok
09:27:32.0464 3116 [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify C:\Windows\system32\sppuinotify.dll
09:27:32.0464 3116 sppuinotify - ok
09:27:32.0511 3116 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv C:\Windows\system32\DRIVERS\srv.sys
09:27:32.0511 3116 srv - ok
09:27:32.0526 3116 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
09:27:32.0542 3116 srv2 - ok
09:27:32.0542 3116 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
09:27:32.0542 3116 srvnet - ok
09:27:32.0557 3116 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
09:27:32.0557 3116 SSDPSRV - ok
09:27:32.0573 3116 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
09:27:32.0589 3116 SstpSvc - ok
09:27:32.0635 3116 [ F92254B0BCFCD10CAAC7BCCC7CB7F467 ] StarOpen C:\Windows\system32\drivers\StarOpen.sys
09:27:32.0635 3116 StarOpen - ok
09:27:32.0651 3116 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
09:27:32.0651 3116 stexstor - ok
09:27:32.0698 3116 [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc C:\Windows\System32\wiaservc.dll
09:27:32.0713 3116 StiSvc - ok
09:27:32.0760 3116 [ 472AF0311073DCECEAA8FA18BA2BDF89 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
09:27:32.0760 3116 storflt - ok
09:27:32.0776 3116 [ DCAFFD62259E0BDB433DD67B5BB37619 ] storvsc C:\Windows\system32\drivers\storvsc.sys
09:27:32.0776 3116 storvsc - ok
09:27:32.0807 3116 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\drivers\swenum.sys
09:27:32.0807 3116 swenum - ok
09:27:32.0932 3116 [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
09:27:32.0932 3116 SwitchBoard - ok
09:27:32.0963 3116 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
09:27:32.0963 3116 swprv - ok
09:27:32.0979 3116 Synth3dVsc - ok
09:27:33.0025 3116 [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain C:\Windows\system32\sysmain.dll
09:27:33.0041 3116 SysMain - ok
09:27:33.0088 3116 [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll
09:27:33.0088 3116 TabletInputService - ok
09:27:33.0135 3116 [ 613BF4820361543956909043A265C6AC ] TapiSrv C:\Windows\System32\tapisrv.dll
09:27:33.0135 3116 TapiSrv - ok
09:27:33.0150 3116 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
09:27:33.0150 3116 TBS - ok
09:27:33.0213 3116 [ A5EBB8F648000E88B7D9390B514976BF ] Tcpip C:\Windows\system32\drivers\tcpip.sys
09:27:33.0228 3116 Tcpip - ok
09:27:33.0259 3116 [ A5EBB8F648000E88B7D9390B514976BF ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
09:27:33.0275 3116 TCPIP6 - ok
09:27:33.0322 3116 [ CCA24162E055C3714CE5A88B100C64ED ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
09:27:33.0322 3116 tcpipreg - ok
09:27:33.0369 3116 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
09:27:33.0369 3116 TDPIPE - ok
09:27:33.0400 3116 [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
09:27:33.0400 3116 TDTCP - ok
09:27:33.0447 3116 [ B459575348C20E8121D6039DA063C704 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
09:27:33.0447 3116 tdx - ok
09:27:33.0462 3116 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD C:\Windows\system32\drivers\termdd.sys
09:27:33.0462 3116 TermDD - ok
09:27:33.0509 3116 [ 382C804C92811BE57829D8E550A900E2 ] TermService C:\Windows\System32\termsrv.dll
09:27:33.0509 3116 TermService - ok
09:27:33.0525 3116 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
09:27:33.0525 3116 Themes - ok
09:27:33.0540 3116 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
09:27:33.0540 3116 THREADORDER - ok
09:27:33.0556 3116 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
09:27:33.0571 3116 TrkWks - ok
09:27:33.0618 3116 [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
09:27:33.0634 3116 TrustedInstaller - ok
09:27:33.0665 3116 [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
09:27:33.0665 3116 tssecsrv - ok
09:27:33.0712 3116 [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
09:27:33.0712 3116 TsUsbFlt - ok
09:27:33.0712 3116 tsusbhub - ok
09:27:33.0759 3116 [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
09:27:33.0759 3116 tunnel - ok
09:27:33.0774 3116 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
09:27:33.0774 3116 uagp35 - ok
09:27:33.0821 3116 [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs C:\Windows\system32\DRIVERS\udfs.sys
09:27:33.0821 3116 udfs - ok
09:27:33.0852 3116 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
09:27:33.0852 3116 UI0Detect - ok
09:27:33.0868 3116 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
09:27:33.0868 3116 uliagpkx - ok
09:27:33.0883 3116 [ D295BED4B898F0FD999FCFA9B32B071B ] umbus C:\Windows\system32\drivers\umbus.sys
09:27:33.0883 3116 umbus - ok
09:27:33.0899 3116 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
09:27:33.0899 3116 UmPass - ok
09:27:33.0946 3116 [ 409994A8EACEEE4E328749C0353527A0 ] UmRdpService C:\Windows\System32\umrdp.dll
09:27:33.0961 3116 UmRdpService - ok
09:27:33.0961 3116 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
09:27:33.0977 3116 upnphost - ok
09:27:34.0008 3116 [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
09:27:34.0008 3116 usbccgp - ok
09:27:34.0055 3116 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\drivers\usbcir.sys
09:27:34.0055 3116 usbcir - ok
09:27:34.0086 3116 [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
09:27:34.0086 3116 usbehci - ok
09:27:34.0102 3116 [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
09:27:34.0102 3116 usbhub - ok
09:27:34.0149 3116 [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
09:27:34.0149 3116 usbohci - ok
09:27:34.0164 3116 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
09:27:34.0180 3116 usbprint - ok
09:27:34.0195 3116 [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
09:27:34.0195 3116 usbscan - ok
09:27:34.0258 3116 [ 31181DE6190B39FC8007DFFD1A48FFD6 ] usbser C:\Windows\system32\drivers\usbser.sys
09:27:34.0258 3116 usbser - ok
09:27:34.0305 3116 [ F991AB9CC6B908DB552166768176896A ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
09:27:34.0305 3116 USBSTOR - ok
09:27:34.0336 3116 [ 68DF884CF41CDADA664BEB01DAF67E3D ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
09:27:34.0336 3116 usbuhci - ok
09:27:34.0351 3116 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
09:27:34.0351 3116 UxSms - ok
09:27:34.0367 3116 [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc C:\Windows\system32\lsass.exe
09:27:34.0367 3116 VaultSvc - ok
09:27:34.0383 3116 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
09:27:34.0383 3116 vdrvroot - ok
09:27:34.0414 3116 [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds C:\Windows\System32\vds.exe
09:27:34.0429 3116 vds - ok
09:27:34.0445 3116 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
09:27:34.0445 3116 vga - ok
09:27:34.0461 3116 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
09:27:34.0461 3116 VgaSave - ok
09:27:34.0461 3116 VGPU - ok
09:27:34.0492 3116 [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
09:27:34.0492 3116 vhdmp - ok
09:27:34.0507 3116 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\drivers\viaagp.sys
09:27:34.0507 3116 viaagp - ok
09:27:34.0523 3116 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
09:27:34.0523 3116 ViaC7 - ok
09:27:34.0570 3116 [ DC56A867A2D92E1C51CB6D3F9C540548 ] VIAHdAudAddService C:\Windows\system32\drivers\viahduaa.sys
09:27:34.0585 3116 VIAHdAudAddService - ok
09:27:34.0617 3116 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\drivers\viaide.sys
09:27:34.0617 3116 viaide - ok
09:27:34.0663 3116 [ C2F2911156FDC7817C52829C86DA494E ] vmbus C:\Windows\system32\drivers\vmbus.sys
09:27:34.0663 3116 vmbus - ok
09:27:34.0710 3116 [ D4D77455211E204F370D08F4963063CE ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
09:27:34.0710 3116 VMBusHID - ok
09:27:34.0726 3116 [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr C:\Windows\system32\drivers\volmgr.sys
09:27:34.0726 3116 volmgr - ok
09:27:34.0741 3116 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
09:27:34.0757 3116 volmgrx - ok
09:27:34.0788 3116 [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap C:\Windows\system32\drivers\volsnap.sys
09:27:34.0804 3116 volsnap - ok
09:27:34.0819 3116 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
09:27:34.0819 3116 vsmraid - ok
09:27:34.0866 3116 [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS C:\Windows\system32\vssvc.exe
09:27:34.0882 3116 VSS - ok
09:27:34.0897 3116 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
09:27:34.0897 3116 vwifibus - ok
09:27:34.0913 3116 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
09:27:34.0913 3116 W32Time - ok
09:27:34.0991 3116 [ 57C8C20BFA5BEF6BD851EBAC67A8CED0 ] W3SVC C:\Windows\system32\inetsrv\iisw3adm.dll
09:27:35.0007 3116 W3SVC - ok
09:27:35.0022 3116 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
09:27:35.0022 3116 WacomPen - ok
09:27:35.0038 3116 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
09:27:35.0038 3116 WANARP - ok
09:27:35.0038 3116 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
09:27:35.0038 3116 Wanarpv6 - ok
09:27:35.0069 3116 [ 57C8C20BFA5BEF6BD851EBAC67A8CED0 ] WAS C:\Windows\system32\inetsrv\iisw3adm.dll
09:27:35.0069 3116 WAS - ok
09:27:35.0116 3116 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
09:27:35.0116 3116 Suspicious file (NoAccess): C:\Windows\system32\Wat\WatAdminSvc.exe. md5: 353A04C273EC58475D8633E75CCD5604
09:27:35.0116 3116 WatAdminSvc ( LockedFile.Multi.Generic ) - warning
09:27:35.0116 3116 WatAdminSvc - detected LockedFile.Multi.Generic (1)
09:27:35.0147 3116 [ 691E3285E53DCA558E1A84667F13E15A ] wbengine C:\Windows\system32\wbengine.exe
09:27:35.0178 3116 wbengine - ok
09:27:35.0178 3116 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
09:27:35.0194 3116 WbioSrvc - ok
09:27:35.0241 3116 [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc C:\Windows\System32\wcncsvc.dll
09:27:35.0241 3116 wcncsvc - ok
09:27:35.0256 3116 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
09:27:35.0256 3116 WcsPlugInService - ok
09:27:35.0272 3116 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
09:27:35.0272 3116 Wd - ok
09:27:35.0287 3116 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
09:27:35.0287 3116 Wdf01000 - ok
09:27:35.0303 3116 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
09:27:35.0319 3116 WdiServiceHost - ok
09:27:35.0319 3116 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
09:27:35.0319 3116 WdiSystemHost - ok
09:27:35.0334 3116 [ A9D880F97530D5B8FEE278923349929D ] WebClient C:\Windows\System32\webclnt.dll
09:27:35.0334 3116 WebClient - ok
09:27:35.0350 3116 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
09:27:35.0350 3116 Wecsvc - ok
09:27:35.0365 3116 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
09:27:35.0365 3116 wercplsupport - ok
09:27:35.0397 3116 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
09:27:35.0412 3116 WerSvc - ok
09:27:35.0443 3116 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
09:27:35.0443 3116 WfpLwf - ok
09:27:35.0459 3116 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
09:27:35.0459 3116 WIMMount - ok
09:27:35.0490 3116 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
09:27:35.0506 3116 WinDefend - ok
09:27:35.0506 3116 WinHttpAutoProxySvc - ok
09:27:35.0553 3116 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
09:27:35.0553 3116 Winmgmt - ok
09:27:35.0599 3116 [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM C:\Windows\system32\WsmSvc.dll
09:27:35.0615 3116 WinRM - ok
09:27:35.0677 3116 [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
09:27:35.0693 3116 WinUsb - ok
09:27:35.0709 3116 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
09:27:35.0724 3116 Wlansvc - ok
09:27:35.0818 3116 [ 5144AE67D60EC653F97DDF3FEED29E77 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
09:27:35.0849 3116 wlidsvc - ok
09:27:35.0896 3116 [ 5D410936831F7FB58EFF941EAC3F6D3D ] WmBEnum C:\Windows\system32\drivers\WmBEnum.sys
09:27:35.0896 3116 WmBEnum - ok
09:27:35.0911 3116 [ 7A13CFDE92956CA61A0927D766C5AD4F ] WmFilter C:\Windows\system32\drivers\WmFilter.sys
09:27:35.0911 3116 WmFilter - ok
09:27:35.0958 3116 [ 1F596392149CAC51F7C095AF7D533934 ] WmHidLo C:\Windows\system32\drivers\WmHidLo.sys
09:27:35.0958 3116 WmHidLo - ok
09:27:35.0989 3116 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
09:27:35.0989 3116 WmiAcpi - ok
09:27:36.0005 3116 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
09:27:36.0005 3116 wmiApSrv - ok
09:27:36.0036 3116 [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
09:27:36.0052 3116 WMPNetworkSvc - ok
09:27:36.0067 3116 [ 6F04646BC690F8BBFC344BE32A60796D ] WmVirHid C:\Windows\system32\drivers\WmVirHid.sys
09:27:36.0067 3116 WmVirHid - ok
09:27:36.0083 3116 [ 1D6CA43D562333F4DFB40BCEF2453F3A ] WmXlCore C:\Windows\system32\drivers\WmXlCore.sys
09:27:36.0083 3116 WmXlCore - ok
09:27:36.0099 3116 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
09:27:36.0099 3116 WPCSvc - ok
09:27:36.0145 3116 [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
09:27:36.0145 3116 WPDBusEnum - ok
09:27:36.0161 3116 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
09:27:36.0161 3116 ws2ifsl - ok
09:27:36.0177 3116 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\System32\wscsvc.dll
09:27:36.0177 3116 wscsvc - ok
09:27:36.0255 3116 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
09:27:36.0286 3116 wuauserv - ok
09:27:36.0301 3116 [ E714A1C0354636837E20CCBF00888EE7 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
09:27:36.0301 3116 WudfPf - ok
09:27:36.0333 3116 [ 1023EE888C9B47178C5293ED5336AB69 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
09:27:36.0333 3116 WUDFRd - ok
09:27:36.0348 3116 [ 8D1E1E529A2C9E9B6A85B55A345F7629 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
09:27:36.0364 3116 wudfsvc - ok
09:27:36.0379 3116 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll
09:27:36.0379 3116 WwanSvc - ok
09:27:36.0395 3116 ================ Scan global ===============================
09:27:36.0442 3116 [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll
09:27:36.0489 3116 [ 183B4188D5D91B271613EC3EFD1B3CEF ] C:\Windows\system32\winsrv.dll
09:27:36.0489 3116 [ 183B4188D5D91B271613EC3EFD1B3CEF ] C:\Windows\system32\winsrv.dll
09:27:36.0520 3116 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
09:27:36.0535 3116 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
09:27:36.0551 3116 [Global] - ok
09:27:36.0551 3116 ================ Scan MBR ==================================
09:27:36.0551 3116 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
09:27:36.0879 3116 \Device\Harddisk0\DR0 - ok
09:27:36.0879 3116 ================ Scan VBR ==================================
09:27:36.0879 3116 [ 103F5E873AE071975FA688FCFB3CC45E ] \Device\Harddisk0\DR0\Partition1
09:27:36.0879 3116 \Device\Harddisk0\DR0\Partition1 - ok
09:27:36.0879 3116 ============================================================
09:27:36.0879 3116 Scan finished
09:27:36.0879 3116 ============================================================
09:27:36.0894 3164 Detected object count: 1
09:27:36.0894 3164 Actual detected object count: 1
09:27:52.0260 3164 WatAdminSvc ( LockedFile.Multi.Generic ) - skipped by user
09:27:52.0260 3164 WatAdminSvc ( LockedFile.Multi.Generic ) - User select action: Skip
09:27:57.0705 4368 Deinitialize success

ComboFix:

ComboFix 12-09-27.03 - X 29.09.2012 9:32.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.2047.1239 [GMT 2:00]
Spuštěný z: c:\users\X\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\X\AppData\Roaming\Rewire.dll
c:\users\X\AppData\Roaming\REX Shared Library.dll
c:\windows\iun6002.exe
c:\windows\system32\tmp27EB.tmp
c:\windows\system32\tmp27EC.tmp
c:\windows\system32\tmp870A.tmp
c:\windows\system32\tmp871A.tmp
C:\x
c:\x\_moje mp3\Contest\X_vs_Neri.mp3
c:\x\_moje mp3\Contest\X_vs_O2.mp3
c:\x\_moje mp3\Contest\X_vs_SW_Crew.mp3
c:\x\_moje mp3\Harybka a Sráček Diss\Harybka a Sráček Diss.mp3
c:\x\_moje mp3\matex zkouška\matex zkouška.mp3
c:\x\_moje mp3\more\emeres beat.mp3
c:\x\_moje mp3\more\emeres beat.mp3.sfk
c:\x\_moje mp3\more\more acap.sfk
c:\x\_moje mp3\more\more acap.wav
c:\x\_moje mp3\more\more betaverze.wav
c:\x\_moje mp3\more\more neri acap.sfk
c:\x\_moje mp3\more\more neri acap.wav
c:\x\_moje mp3\more\more.doc
c:\x\_moje mp3\Packet\packet (master).wav
c:\x\_moje mp3\styl\rapitflybeats+ridindirty!!!.mp3
c:\x\_moje mp3\styl\styl zkouška.mp3
c:\x\_moje mp3\top mc\top mc mix acap render.wav
c:\x\_moje mp3\ty vždycky\ty vzdycky.mp3
c:\x\životopis michal krejčíř.rtf
c:\x\AlbumArtSmall.jpg
c:\x\bpm jeden z mnoha rmx\bpm (master).sfk
c:\x\bpm jeden z mnoha rmx\bpm (master).wav
c:\x\bpm jeden z mnoha rmx\bpm.sfk
c:\x\bpm jeden z mnoha rmx\bpm.trp
c:\x\bpm jeden z mnoha rmx\bpm.trs
c:\x\bpm jeden z mnoha rmx\bpm.wav
c:\x\bpm jeden z mnoha rmx\Jeden z mnoha acapelala.sfk
c:\x\bpm jeden z mnoha rmx\Jeden z mnoha acapelala.wav
c:\x\bpm jeden z mnoha rmx\tracks2.pdf
c:\x\desktop.ini
c:\x\Folder.jpg
c:\x\inzarát laguna.doc
c:\x\master.doc
c:\x\mastering atd.doc
c:\x\maturitní vysvědčení michal krejčíř.jpg
c:\x\pro-milacka.doc
c:\x\rapitflybeats\rapitflybeats+allbecauseofyoufreebeat.mp3
c:\x\rapitflybeats\rapitflybeats+attemptedescape!!!.mp3
c:\x\rapitflybeats\rapitflybeats+fedup!!!.mp3
c:\x\rapitflybeats\rapitflybeats+fuuckinghaters.mp3
c:\x\rapitflybeats\rapitflybeats+hardtosurvivewwwrapitflybeatsnet.mp3
c:\x\rapitflybeats\rapitflybeats+herewecome!!!.mp3
c:\x\rapitflybeats\rapitflybeats+inmotionfreedownload.mp3
c:\x\rapitflybeats\rapitflybeats+jumpoff!!!.mp3
c:\x\rapitflybeats\rapitflybeats+newcrackupclubbangerfree.mp3
c:\x\rapitflybeats\rapitflybeats+newdestinyfreedownload.mp3
c:\x\rapitflybeats\rapitflybeats+newidontgiveaffreedownload.mp3
c:\x\rapitflybeats\rapitflybeats+newkissmyassfreebeat.mp3
c:\x\rapitflybeats\rapitflybeats+newmoney.mp3
c:\x\rapitflybeats\rapitflybeats+newnevereverfreedownload.mp3
c:\x\rapitflybeats\rapitflybeats+newnodoubtwwwrapitflybeatsnet.mp3
c:\x\rapitflybeats\rapitflybeats+newpromisefreebeat.mp3
c:\x\rapitflybeats\rapitflybeats+newrunitbackfreebeat.mp3
c:\x\rapitflybeats\rapitflybeats+newshesgonefree.mp3
c:\x\rapitflybeats\rapitflybeats+newthugssymphonyfreebeat.mp3
c:\x\rapitflybeats\rapitflybeats+newtouchfreedlwwwrapitflybeatsnet.mp3
c:\x\rapitflybeats\rapitflybeats+outtacontrolwwwrapitflybeatsnet.mp3
c:\x\rapitflybeats\rapitflybeats+playinggames100freebeat.mp3
c:\x\rapitflybeats\rapitflybeats+ridindirty!!!.mp3
c:\x\rapitflybeats\rapitflybeats+ridindirty!!!.mp3.sfk
c:\x\rapitflybeats\rapitflybeats+secondguessfreedownload.mp3
c:\x\rapitflybeats\rapitflybeats+standup!!!.mp3
c:\x\rapitflybeats\rapitflybeats+stayfly.mp3
c:\x\rapitflybeats\rapitflybeats+stayfly.mp3.sfk
c:\x\rapitflybeats\rapitflybeats+stepupfreebeatwwwrapitflybeatsnet.mp3
c:\x\rapitflybeats\rapitflybeats+turnitupfreebeat.mp3
c:\x\rapitflybeats\rapitflybeats+whenalllightdiesfreedownload.mp3
c:\x\rapitflybeats\rapitflybeats+worldonmyshoulders.mp3
c:\x\RAPPRO\01emeres rekord's rmx.wav
c:\x\RAPPRO\breno_lejno_kup_si_pracku.mp3
c:\x\RAPPRO\disscarnevallpaka.mp3
c:\x\RAPPRO\disshnmasla - zabal.mp3
c:\x\RAPPRO\kandidát do PU-rmx beat by emeres II.wav
c:\x\RAPPRO\kandidát do PU-rmx beat by emeres.wav
c:\x\RAPPRO\královské regge.wav
c:\x\RAPPRO\mr.X new 05.mp3.sfk
c:\x\RAPPRO\mrdám tě -rmx beat by emeres .wav
c:\x\RAPPRO\neri kroky městem II.wav
c:\x\RAPPRO\NERI námrd II.wav
c:\x\RAPPRO\relaxing instrumental music - sad piano.mp3
c:\x\RAPPRO\relaxing instrumental music - sad piano.mp3.sfk
c:\x\RAPPRO\Rýmy do ulic.doc
c:\x\RAPPRO\shupli.ic.cz_m.t.city5_rappro.wmv
c:\x\renault.gif
c:\x\rotoped.xlsx
c:\x\Rýmy do ulic.doc
c:\x\stativ účtenka.jpg
c:\x\Thumbs.db
c:\x\trip 09.wmv
c:\x\výpis z účtu strana 1.jpg
c:\x\výpis z účtu strana 2.jpg
c:\x\zvukovka.doc
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-08-28 do 2012-09-29 )))))))))))))))))))))))))))))))
.
.
2012-09-29 07:39 . 2012-09-29 07:39 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-09-29 07:20 . 2012-09-29 07:20 8782 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\BUTTON.JS
2012-09-28 17:34 . 2012-09-28 17:34 -------- d-----w- c:\users\X\AppData\Roaming\Malwarebytes
2012-09-28 17:34 . 2012-09-28 17:34 -------- d-----w- c:\programdata\Malwarebytes
2012-09-28 17:34 . 2012-09-28 17:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-09-28 17:34 . 2012-09-07 15:04 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-24 13:57 . 2012-09-24 13:57 -------- d-----w- c:\programdata\McAfee
2012-09-23 06:02 . 2012-09-23 06:02 -------- d-----w- c:\users\X\AppData\Roaming\FastStone
2012-09-23 06:02 . 2012-09-23 06:02 -------- d-----w- c:\program files\FastStone Image Viewer
2012-09-15 10:56 . 2012-09-15 11:48 -------- d-----w- c:\program files\Rockstar Games
2012-09-15 10:56 . 2012-09-15 10:56 -------- d-----w- c:\programdata\Rockstar Games
2012-09-15 08:35 . 2003-07-28 12:55 44550 ----a-w- c:\windows\system32\drivers\USBARW.SYS
2012-09-15 08:35 . 2003-05-30 08:16 45056 ----a-w- c:\windows\system32\Storpg2k.dll
2012-09-15 07:55 . 2012-09-15 07:55 -------- d-----w- c:\users\X\AppData\Local\PackageAware
2012-09-15 07:38 . 2012-09-15 07:38 -------- d-----w- c:\programdata\DriverGenius
2012-09-15 07:29 . 2012-09-15 07:29 -------- d-----w- c:\users\X\AppData\Local\Innovative Solutions
2012-09-15 06:42 . 2012-07-06 19:23 393728 ----a-w- c:\windows\system32\drivers\bthport.sys
2012-09-15 06:37 . 2012-03-31 04:39 3968368 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-09-15 06:36 . 2012-02-11 05:43 492032 ----a-w- c:\windows\system32\win32spl.dll
2012-09-15 06:36 . 2012-02-11 05:37 317440 ----a-w- c:\windows\system32\spoolsv.exe
2012-09-15 06:36 . 2012-05-01 04:44 164352 ----a-w- c:\windows\system32\profsvc.dll
2012-09-15 06:36 . 2012-04-26 04:45 58880 ----a-w- c:\windows\system32\rdpwsx.dll
2012-09-15 06:36 . 2012-04-26 04:45 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-09-15 06:36 . 2012-04-26 04:41 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-09-15 06:34 . 2012-03-17 07:27 56176 ----a-w- c:\windows\system32\drivers\partmgr.sys
2012-09-15 06:34 . 2012-03-03 05:31 1077248 ----a-w- c:\windows\system32\DWrite.dll
2012-09-15 06:34 . 2012-05-14 04:33 769024 ----a-w- c:\windows\system32\localspl.dll
2012-09-15 06:29 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-09-15 06:29 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll
2012-09-15 06:29 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-09-15 06:29 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-09-15 06:29 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll
2012-09-15 06:29 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-09-15 06:29 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll
2012-09-15 06:28 . 2012-06-02 13:19 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-09-15 06:28 . 2012-06-02 13:12 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-09-15 03:09 . 2012-08-27 23:50 7022536 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{623AC30F-598A-401C-AC77-0718DEE9C351}\mpengine.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-29 07:20 . 2012-07-24 07:30 4194304 ----a-w- c:\windows\ServiceProfiles\NetworkService\msmqlog.bin
2012-08-28 18:24 . 2012-05-28 08:21 477168 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-08-28 18:24 . 2011-07-14 21:04 473072 ----a-w- c:\windows\system32\deployJava1.dll
2012-08-21 09:13 . 2011-06-14 06:48 729752 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-08-21 09:13 . 2010-07-17 07:38 355632 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-08-21 09:13 . 2010-07-17 07:37 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-08-21 09:13 . 2012-02-25 20:22 44784 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-08-21 09:13 . 2010-07-17 07:37 58680 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-08-21 09:13 . 2010-07-17 07:38 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-08-21 09:12 . 2010-07-17 07:37 41224 ----a-w- c:\windows\avastSS.scr
2012-08-21 09:12 . 2010-07-17 07:37 227648 ----a-w- c:\windows\system32\aswBoot.exe
2012-07-27 20:47 . 2012-07-27 20:47 159232 ----a-w- c:\windows\system32\clinfo.exe
2012-07-27 20:47 . 2012-07-27 20:47 65024 ----a-w- c:\windows\system32\OpenVideo.dll
2012-07-27 20:47 . 2012-07-27 20:47 56320 ----a-w- c:\windows\system32\OVDecode.dll
2012-07-27 20:46 . 2012-07-27 20:46 13013504 ----a-w- c:\windows\system32\amdocl.dll
2011-07-15 07:58 . 2011-07-15 07:58 63 ----a-w- c:\program files\dialogysclip.bat
2012-07-14 00:15 . 2011-05-18 11:16 136672 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2010-12-09 11:51 3911776 ----a-w- c:\program files\uTorrentBar\tbuTor.dll
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-08-21 09:12 121528 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\users\X\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\users\X\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\users\X\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2007-05-15 204800]
"SoundMan"="SOUNDMAN.EXE" [2009-04-14 604704]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-08-06 642216]
"HDAudDeck"="c:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2009-10-28 1701888]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 153672]
"MsmqIntCert"="mqrt.dll" [2010-11-20 152064]
"BCU"="c:\program files\DeviceVM\Browser Configuration Utility\BCU.exe" [2009-08-04 346320]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCU]
2009-08-04 16:31 346320 ----a-w- c:\program files\DeviceVM\Browser Configuration Utility\BCU.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Start WingMan Profiler]
2010-06-14 14:10 153672 ----a-w- c:\program files\Logitech\Gaming Software\LWEMon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2012-01-18 12:02 254696 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"BCU"="c:\program files\DeviceVM\Browser Configuration Utility\BCU.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
.
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
R3 BthAvrcp;Bluetooth AVRCP Profile;c:\windows\system32\DRIVERS\BthAvrcp.sys [x]
R3 COMMONFX.SYS;COMMONFX.SYS;c:\windows\System32\drivers\COMMONFX.SYS [x]
R3 COMMONFX;COMMONFX;c:\windows\system32\drivers\COMMONFX.SYS [x]
R3 CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\System32\drivers\CTAUDFX.SYS [x]
R3 CTAUDFX;CTAUDFX;c:\windows\system32\drivers\CTAUDFX.SYS [x]
R3 ctgame;Game Port;c:\windows\system32\DRIVERS\ctgame.sys [x]
R3 CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\System32\drivers\CTSBLFX.SYS [x]
R3 CTSBLFX;CTSBLFX;c:\windows\system32\drivers\CTSBLFX.SYS [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]
R3 kxwdmdrv;kX WDM Driver Service;c:\windows\system32\drivers\kx.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [x]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;WatAdminSvc;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 BCUService;Browser Configuration Utility Service;c:\program files\DeviceVM\Browser Configuration Utility\BCUService.exe [x]
S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\system32\nlssrv32.exe [x]
S3 amdiox86;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox86.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [x]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 03819747
*NewlyCreated* - 72715234
*Deregistered* - 03819747
*Deregistered* - 72715234
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc SensrSvc Mcx2Svc
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
.
Obsah adresáře 'Naplánované úlohy'
.
2012-09-29 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 07:42]
.
2012-09-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-04-05 08:50]
.
2012-09-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-04-05 08:50]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 94.74.192.252 94.74.192.244
FF - ProfilePath - c:\users\X\AppData\Roaming\Mozilla\Firefox\Profiles\fhp8rmd4.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.centrum.cz/index.php?tool ... m-1.0.0&q=
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
HKCU-Run-UpdateMyDrivers - c:\program files\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe
HKLM-Run-DIT - Dit.exe
AddRemove-Endurance Series by EnduRacers - v1 SP1 FULL - c:\program files\rFactor Nordschleife\ES_v1SP1FULL_Uninstal.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3101168283-1117917989-264359774-1000\Software\SecuROM\License information*]
"datasecu"=hex:aa,6e,37,61,02,9b,d2,30,c0,df,c4,47,8d,01,2e,fa,82,76,58,1c,45,
2d,ce,85,a4,7c,71,ea,0c,06,0e,d3,09,ee,99,7c,e4,78,20,14,a3,a4,4e,9b,3b,a7,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_USERS\S-1-5-21-3101168283-1117917989-264359774-1000_Classes\{057C7771-F320-4C2A-A2EA-747945FA82F2}*]
@Allowed: (Read) (RestrictedCode)
@=hex:a0,94,5a,8a,b2,38,cc,01
DUMPHIVE0.003 (REGF)
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-09-29 09:40:54
ComboFix-quarantined-files.txt 2012-09-29 07:40
.
Před spuštěním: Volných bajtů: 56 616 497 152
Po spuštění: Volných bajtů: 56 611 786 752
.
- - End Of File - - D57E559BEEE6019EF1C249F345AE62A8

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
c:\program files\dialogysclip.bat

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

Nebo na:
http://www.virscan.org/

Chceš tu složku vrátit??

Zde je link na výsledek Virustotal:

https://www.virustotal.com/file/0245c45 ... 349123320/

Tu smázlou složku řešit nebudem, s tím už bych si poradil sám...

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:



Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.