PC-HELP.CZ

Zdravím chtěl bych vás poprosit o kontrolu HJT logu mého PC ... z důvodu podezření na keylogger a celkově preventivní prohlídky předem děkuji za pomoc.
Řekl bych že tam něco bude jelikož sem měl problém ten log vůbec udělat.

Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
C:\Program Files (x86)\HJT\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=;ftp=;https=;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [ASUS AiChargerPlus Execute] C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [MSIAfterburner] "C:\Program Files (x86)\MSI Afterburner\MSIAfterburnerWrapper.exe" /s
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\CALLER\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AODService - Unknown owner - C:\Program Files (x86)\AMD\OverDrive\AODAssist.exe
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe
O23 - Service: ASDiskUnlocker - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\Disk Unlocker\ASPFSVS64.exe
O23 - Service: ASUS HM Com Service (asHmComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe
O23 - Service: ASUS System Control Service (AsSysCtrlService) - Unknown owner - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8140 bytes

Odinstaluj:
Bing Toolbar

Fixni:

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
- Pokud používáš Firefox, klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Chrome, nic dalšího nevybírej a dej Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

LOG z TDSS KILLERA:


19:58:03.0955 5108 TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
19:58:04.0033 5108 ============================================================
19:58:04.0033 5108 Current date / time: 2012/10/06 19:58:04.0033
19:58:04.0033 5108 SystemInfo:
19:58:04.0033 5108
19:58:04.0033 5108 OS Version: 6.1.7601 ServicePack: 1.0
19:58:04.0033 5108 Product type: Workstation
19:58:04.0033 5108 ComputerName: CALLER-PC
19:58:04.0033 5108 UserName: CALLER
19:58:04.0033 5108 Windows directory: C:\Windows
19:58:04.0033 5108 System windows directory: C:\Windows
19:58:04.0033 5108 Running under WOW64
19:58:04.0033 5108 Processor architecture: Intel x64
19:58:04.0033 5108 Number of processors: 6
19:58:04.0033 5108 Page size: 0x1000
19:58:04.0033 5108 Boot type: Normal boot
19:58:04.0033 5108 ============================================================
19:58:04.0595 5108 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:58:04.0611 5108 ============================================================
19:58:04.0611 5108 \Device\Harddisk0\DR0:
19:58:04.0611 5108 MBR partitions:
19:58:04.0611 5108 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
19:58:04.0611 5108 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x125EE57E
19:58:04.0642 5108 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x12620DBD, BlocksNum 0x620E4C04
19:58:04.0642 5108 ============================================================
19:58:04.0689 5108 C: <-> \Device\Harddisk0\DR0\Partition2
19:58:04.0735 5108 D: <-> \Device\Harddisk0\DR0\Partition3
19:58:04.0735 5108 ============================================================
19:58:04.0735 5108 Initialize success
19:58:04.0735 5108 ============================================================
19:58:06.0233 2592 ============================================================
19:58:06.0233 2592 Scan started
19:58:06.0233 2592 Mode: Manual;
19:58:06.0233 2592 ============================================================
19:58:06.0420 2592 ================ Scan system memory ========================
19:58:06.0420 2592 System memory - ok
19:58:06.0420 2592 ================ Scan services =============================
19:58:06.0529 2592 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
19:58:06.0529 2592 1394ohci - ok
19:58:06.0545 2592 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
19:58:06.0561 2592 ACPI - ok
19:58:06.0561 2592 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
19:58:06.0561 2592 AcpiPmi - ok
19:58:06.0654 2592 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
19:58:06.0670 2592 AdobeARMservice - ok
19:58:06.0685 2592 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
19:58:06.0685 2592 adp94xx - ok
19:58:06.0701 2592 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
19:58:06.0701 2592 adpahci - ok
19:58:06.0717 2592 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
19:58:06.0717 2592 adpu320 - ok
19:58:06.0732 2592 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
19:58:06.0748 2592 AeLookupSvc - ok
19:58:06.0779 2592 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
19:58:06.0795 2592 AFD - ok
19:58:06.0795 2592 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
19:58:06.0795 2592 agp440 - ok
19:58:06.0826 2592 [ 8B6625D53C18774F0102F690E285B5E8 ] AiChargerPlus C:\Windows\system32\DRIVERS\AiChargerPlus.sys
19:58:06.0826 2592 AiChargerPlus - ok
19:58:06.0841 2592 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
19:58:06.0841 2592 ALG - ok
19:58:06.0857 2592 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
19:58:06.0857 2592 aliide - ok
19:58:06.0951 2592 ALSysIO - ok
19:58:06.0982 2592 [ B3B263B419FC9E7B1D41E61FDAE45BD9 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
19:58:06.0997 2592 AMD External Events Utility - ok
19:58:07.0044 2592 AMD FUEL Service - ok
19:58:07.0060 2592 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
19:58:07.0060 2592 amdide - ok
19:58:07.0075 2592 [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64 C:\Windows\system32\DRIVERS\amdiox64.sys
19:58:07.0091 2592 amdiox64 - ok
19:58:07.0122 2592 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
19:58:07.0122 2592 AmdK8 - ok
19:58:07.0278 2592 [ 9A6E9363F7A5E5A06629D9DDC76EE6B5 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
19:58:07.0419 2592 amdkmdag - ok
19:58:07.0434 2592 [ 957A4C13E1981B1701E600EF1E823C68 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
19:58:07.0434 2592 amdkmdap - ok
19:58:07.0465 2592 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
19:58:07.0465 2592 AmdPPM - ok
19:58:07.0465 2592 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
19:58:07.0481 2592 amdsata - ok
19:58:07.0481 2592 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
19:58:07.0481 2592 amdsbs - ok
19:58:07.0481 2592 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
19:58:07.0497 2592 amdxata - ok
19:58:07.0497 2592 [ 2FBB00A7616106B95104574C6CD640C2 ] amd_sata C:\Windows\system32\DRIVERS\amd_sata.sys
19:58:07.0497 2592 amd_sata - ok
19:58:07.0497 2592 [ 87D0D7645CB0D53220649BD5FE15D93E ] amd_xata C:\Windows\system32\DRIVERS\amd_xata.sys
19:58:07.0512 2592 amd_xata - ok
19:58:07.0528 2592 [ 5B25D1A753CC3A3EDB909BB759AC1098 ] AODDriver4.1 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
19:58:07.0528 2592 AODDriver4.1 - ok
19:58:07.0559 2592 [ 7F46BEE50E6FDB6473FBE172466A9EAD ] AODDriver4.2.0 C:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver2.sys
19:58:07.0559 2592 AODDriver4.2.0 - ok
19:58:07.0590 2592 [ DCADAD156815B8D6F935377806A2CF95 ] AODService C:\Program Files (x86)\AMD\OverDrive\AODAssist.exe
19:58:07.0590 2592 AODService - ok
19:58:07.0606 2592 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
19:58:07.0606 2592 AppID - ok
19:58:07.0621 2592 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
19:58:07.0621 2592 AppIDSvc - ok
19:58:07.0637 2592 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
19:58:07.0637 2592 Appinfo - ok
19:58:07.0684 2592 [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt C:\Windows\System32\appmgmts.dll
19:58:07.0684 2592 AppMgmt - ok
19:58:07.0684 2592 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
19:58:07.0684 2592 arc - ok
19:58:07.0699 2592 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
19:58:07.0699 2592 arcsas - ok
19:58:07.0746 2592 [ 6E3F4538B33BC19259E99BE1826286A3 ] asComSvc C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe
19:58:07.0746 2592 asComSvc - ok
19:58:07.0777 2592 [ C6C1FBA3B599F2BFEAB467DC9E66AA5E ] ASDiskUnlocker C:\Program Files (x86)\ASUS\Disk Unlocker\ASPFSVS64.exe
19:58:07.0777 2592 ASDiskUnlocker - ok
19:58:07.0793 2592 [ 2921131F9A111FD6C6D2C5E1E5B6B75C ] ASFLTDrv.sys C:\Program Files (x86)\ASUS\Disk Unlocker\ASFLTDrv64.sys
19:58:07.0793 2592 ASFLTDrv.sys - ok
19:58:07.0840 2592 [ A63173897EA1A73A75D0E65036DE5B15 ] asHmComSvc C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe
19:58:07.0840 2592 asHmComSvc - ok
19:58:07.0902 2592 [ FEF9DD9EA587F8886ADE43C1BEFBDAFE ] AsIO C:\Windows\syswow64\drivers\AsIO.sys
19:58:07.0902 2592 AsIO - ok
19:58:07.0918 2592 [ 6D9C024AA8F24065A6DBEAB1F431D854 ] asmthub3 C:\Windows\system32\DRIVERS\asmthub3.sys
19:58:07.0918 2592 asmthub3 - ok
19:58:07.0933 2592 [ ECAD22F15D8F17CC04F24E9A6FB00F2F ] asmtxhci C:\Windows\system32\DRIVERS\asmtxhci.sys
19:58:07.0933 2592 asmtxhci - ok
19:58:08.0058 2592 [ 108FB6DDB69E537A2EA53F425363FAE5 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
19:58:08.0058 2592 aspnet_state - ok
19:58:08.0074 2592 [ 5C31DFB196CB3A488A041881634D86D2 ] AsSysCtrlService C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
19:58:08.0089 2592 AsSysCtrlService - ok
19:58:08.0105 2592 [ 1392B92179B07B672720763D9B1028A5 ] AsUpIO C:\Windows\syswow64\drivers\AsUpIO.sys
19:58:08.0105 2592 AsUpIO - ok
19:58:08.0121 2592 [ A5E4CDB420540095D1293C874B5F89AA ] ASUSFILTER C:\Windows\syswow64\drivers\ASUSFILTER.sys
19:58:08.0121 2592 ASUSFILTER - ok
19:58:08.0152 2592 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
19:58:08.0152 2592 AsyncMac - ok
19:58:08.0152 2592 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
19:58:08.0152 2592 atapi - ok
19:58:08.0183 2592 [ B0790FF0E25B7A2674296052F2162C1A ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
19:58:08.0183 2592 AtiHDAudioService - ok
19:58:08.0230 2592 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
19:58:08.0230 2592 AudioEndpointBuilder - ok
19:58:08.0230 2592 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
19:58:08.0245 2592 AudioSrv - ok
19:58:08.0292 2592 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
19:58:08.0292 2592 AxInstSV - ok
19:58:08.0308 2592 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
19:58:08.0323 2592 b06bdrv - ok
19:58:08.0339 2592 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
19:58:08.0339 2592 b57nd60a - ok
19:58:08.0386 2592 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
19:58:08.0386 2592 BDESVC - ok
19:58:08.0401 2592 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
19:58:08.0401 2592 Beep - ok
19:58:08.0464 2592 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
19:58:08.0479 2592 BFE - ok
19:58:08.0495 2592 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
19:58:08.0495 2592 BITS - ok
19:58:08.0511 2592 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
19:58:08.0511 2592 blbdrive - ok
19:58:08.0589 2592 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
19:58:08.0589 2592 bowser - ok
19:58:08.0589 2592 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
19:58:08.0589 2592 BrFiltLo - ok
19:58:08.0589 2592 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
19:58:08.0589 2592 BrFiltUp - ok
19:58:08.0604 2592 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
19:58:08.0604 2592 Browser - ok
19:58:08.0620 2592 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
19:58:08.0635 2592 Brserid - ok
19:58:08.0635 2592 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
19:58:08.0635 2592 BrSerWdm - ok
19:58:08.0651 2592 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
19:58:08.0651 2592 BrUsbMdm - ok
19:58:08.0651 2592 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
19:58:08.0651 2592 BrUsbSer - ok
19:58:08.0651 2592 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
19:58:08.0651 2592 BTHMODEM - ok
19:58:08.0667 2592 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
19:58:08.0667 2592 bthserv - ok
19:58:08.0682 2592 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
19:58:08.0682 2592 cdfs - ok
19:58:08.0682 2592 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
19:58:08.0682 2592 cdrom - ok
19:58:08.0713 2592 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
19:58:08.0713 2592 CertPropSvc - ok
19:58:08.0713 2592 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
19:58:08.0713 2592 circlass - ok
19:58:08.0745 2592 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
19:58:08.0745 2592 CLFS - ok
19:58:08.0807 2592 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:58:08.0807 2592 clr_optimization_v2.0.50727_32 - ok
19:58:08.0823 2592 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
19:58:08.0823 2592 clr_optimization_v2.0.50727_64 - ok
19:58:08.0885 2592 [ 6D7C8A951AF6AD6835C029B3CB88D333 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:58:08.0885 2592 clr_optimization_v4.0.30319_32 - ok
19:58:08.0901 2592 [ 86329C35FF23CFEF0FB6C0023BA06BCE ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
19:58:08.0901 2592 clr_optimization_v4.0.30319_64 - ok
19:58:08.0901 2592 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
19:58:08.0901 2592 CmBatt - ok
19:58:08.0916 2592 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
19:58:08.0916 2592 cmdide - ok
19:58:08.0947 2592 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
19:58:08.0947 2592 CNG - ok
19:58:08.0947 2592 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
19:58:08.0947 2592 Compbatt - ok
19:58:08.0963 2592 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
19:58:08.0963 2592 CompositeBus - ok
19:58:08.0963 2592 COMSysApp - ok
19:58:08.0979 2592 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
19:58:08.0979 2592 crcdisk - ok
19:58:08.0994 2592 [ 4F5414602E2544A4554D95517948B705 ] CryptSvc C:\Windows\system32\cryptsvc.dll
19:58:09.0010 2592 CryptSvc - ok
19:58:09.0041 2592 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC C:\Windows\system32\drivers\csc.sys
19:58:09.0041 2592 CSC - ok
19:58:09.0072 2592 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService C:\Windows\System32\cscsvc.dll
19:58:09.0072 2592 CscService - ok
19:58:09.0088 2592 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
19:58:09.0088 2592 DcomLaunch - ok
19:58:09.0119 2592 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
19:58:09.0119 2592 defragsvc - ok
19:58:09.0135 2592 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
19:58:09.0150 2592 DfsC - ok
19:58:09.0166 2592 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
19:58:09.0166 2592 Dhcp - ok
19:58:09.0181 2592 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
19:58:09.0181 2592 discache - ok
19:58:09.0181 2592 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
19:58:09.0181 2592 Disk - ok
19:58:09.0213 2592 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
19:58:09.0228 2592 Dnscache - ok
19:58:09.0244 2592 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
19:58:09.0259 2592 dot3svc - ok
19:58:09.0259 2592 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
19:58:09.0259 2592 DPS - ok
19:58:09.0291 2592 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
19:58:09.0291 2592 drmkaud - ok
19:58:09.0322 2592 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
19:58:09.0322 2592 dtsoftbus01 - ok
19:58:09.0337 2592 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
19:58:09.0353 2592 DXGKrnl - ok
19:58:09.0353 2592 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
19:58:09.0353 2592 EapHost - ok
19:58:09.0431 2592 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
19:58:09.0478 2592 ebdrv - ok
19:58:09.0493 2592 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
19:58:09.0493 2592 EFS - ok
19:58:09.0603 2592 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
19:58:09.0603 2592 ehRecvr - ok
19:58:09.0618 2592 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
19:58:09.0618 2592 ehSched - ok
19:58:09.0634 2592 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
19:58:09.0649 2592 elxstor - ok
19:58:09.0665 2592 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
19:58:09.0665 2592 ErrDev - ok
19:58:09.0681 2592 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
19:58:09.0681 2592 EventSystem - ok
19:58:09.0696 2592 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
19:58:09.0696 2592 exfat - ok
19:58:09.0712 2592 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
19:58:09.0727 2592 fastfat - ok
19:58:09.0759 2592 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
19:58:09.0774 2592 Fax - ok
19:58:09.0774 2592 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
19:58:09.0774 2592 fdc - ok
19:58:09.0790 2592 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
19:58:09.0790 2592 fdPHost - ok
19:58:09.0790 2592 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
19:58:09.0790 2592 FDResPub - ok
19:58:09.0790 2592 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
19:58:09.0805 2592 FileInfo - ok
19:58:09.0805 2592 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
19:58:09.0805 2592 Filetrace - ok
19:58:09.0805 2592 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
19:58:09.0805 2592 flpydisk - ok
19:58:09.0837 2592 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
19:58:09.0837 2592 FltMgr - ok
19:58:09.0868 2592 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
19:58:09.0883 2592 FontCache - ok
19:58:09.0899 2592 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:58:09.0899 2592 FontCache3.0.0.0 - ok
19:58:09.0915 2592 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
19:58:09.0915 2592 FsDepends - ok
19:58:09.0915 2592 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
19:58:09.0930 2592 Fs_Rec - ok
19:58:09.0930 2592 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
19:58:09.0930 2592 fvevol - ok
19:58:09.0946 2592 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
19:58:09.0946 2592 gagp30kx - ok
19:58:09.0977 2592 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
19:58:09.0977 2592 gpsvc - ok
19:58:09.0993 2592 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
19:58:09.0993 2592 hcw85cir - ok
19:58:10.0024 2592 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
19:58:10.0024 2592 HdAudAddService - ok
19:58:10.0039 2592 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
19:58:10.0039 2592 HDAudBus - ok
19:58:10.0039 2592 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
19:58:10.0039 2592 HidBatt - ok
19:58:10.0055 2592 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
19:58:10.0055 2592 HidBth - ok
19:58:10.0055 2592 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
19:58:10.0055 2592 HidIr - ok
19:58:10.0055 2592 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
19:58:10.0055 2592 hidserv - ok
19:58:10.0071 2592 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
19:58:10.0071 2592 HidUsb - ok
19:58:10.0086 2592 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
19:58:10.0086 2592 hkmsvc - ok
19:58:10.0102 2592 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
19:58:10.0102 2592 HomeGroupListener - ok
19:58:10.0117 2592 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
19:58:10.0117 2592 HomeGroupProvider - ok
19:58:10.0133 2592 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
19:58:10.0133 2592 HpSAMD - ok
19:58:10.0164 2592 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
19:58:10.0164 2592 HTTP - ok
19:58:10.0180 2592 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
19:58:10.0180 2592 hwpolicy - ok
19:58:10.0211 2592 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
19:58:10.0211 2592 i8042prt - ok
19:58:10.0227 2592 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
19:58:10.0227 2592 iaStorV - ok
19:58:10.0258 2592 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
19:58:10.0258 2592 idsvc - ok
19:58:10.0258 2592 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
19:58:10.0273 2592 iirsp - ok
19:58:10.0305 2592 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
19:58:10.0305 2592 IKEEXT - ok
19:58:10.0367 2592 [ 589B94A9B73A0E819FF873743A480834 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
19:58:10.0414 2592 IntcAzAudAddService - ok
19:58:10.0429 2592 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
19:58:10.0429 2592 intelide - ok
19:58:10.0429 2592 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
19:58:10.0429 2592 intelppm - ok
19:58:10.0445 2592 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
19:58:10.0445 2592 IPBusEnum - ok
19:58:10.0461 2592 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:58:10.0461 2592 IpFilterDriver - ok
19:58:10.0476 2592 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
19:58:10.0492 2592 iphlpsvc - ok
19:58:10.0492 2592 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
19:58:10.0492 2592 IPMIDRV - ok
19:58:10.0507 2592 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
19:58:10.0507 2592 IPNAT - ok
19:58:10.0523 2592 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
19:58:10.0523 2592 IRENUM - ok
19:58:10.0539 2592 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
19:58:10.0539 2592 isapnp - ok
19:58:10.0539 2592 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
19:58:10.0539 2592 iScsiPrt - ok
19:58:10.0570 2592 [ 79A55E8907F34AB569029505418C35EF ] JRAID C:\Windows\system32\DRIVERS\jraid.sys
19:58:10.0570 2592 JRAID - ok
19:58:10.0585 2592 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
19:58:10.0585 2592 kbdclass - ok
19:58:10.0585 2592 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
19:58:10.0585 2592 kbdhid - ok
19:58:10.0601 2592 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
19:58:10.0601 2592 KeyIso - ok
19:58:10.0617 2592 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
19:58:10.0632 2592 KSecDD - ok
19:58:10.0632 2592 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
19:58:10.0632 2592 KSecPkg - ok
19:58:10.0648 2592 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
19:58:10.0648 2592 ksthunk - ok
19:58:10.0679 2592 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
19:58:10.0679 2592 KtmRm - ok
19:58:10.0679 2592 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
19:58:10.0679 2592 LanmanServer - ok
19:58:10.0710 2592 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:58:10.0710 2592 LanmanWorkstation - ok
19:58:10.0710 2592 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
19:58:10.0710 2592 lltdio - ok
19:58:10.0726 2592 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
19:58:10.0726 2592 lltdsvc - ok
19:58:10.0741 2592 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
19:58:10.0741 2592 lmhosts - ok
19:58:10.0741 2592 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
19:58:10.0757 2592 LSI_FC - ok
19:58:10.0757 2592 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
19:58:10.0757 2592 LSI_SAS - ok
19:58:10.0773 2592 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
19:58:10.0773 2592 LSI_SAS2 - ok
19:58:10.0773 2592 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
19:58:10.0773 2592 LSI_SCSI - ok
19:58:10.0788 2592 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
19:58:10.0788 2592 luafv - ok
19:58:10.0819 2592 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
19:58:10.0819 2592 Mcx2Svc - ok
19:58:10.0835 2592 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
19:58:10.0835 2592 megasas - ok
19:58:10.0835 2592 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
19:58:10.0835 2592 MegaSR - ok
19:58:10.0944 2592 Microsoft SharePoint Workspace Audit Service - ok
19:58:10.0960 2592 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
19:58:10.0960 2592 MMCSS - ok
19:58:10.0975 2592 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
19:58:10.0975 2592 Modem - ok
19:58:10.0991 2592 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
19:58:10.0991 2592 monitor - ok
19:58:10.0991 2592 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
19:58:10.0991 2592 mouclass - ok
19:58:11.0007 2592 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
19:58:11.0007 2592 mouhid - ok
19:58:11.0038 2592 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
19:58:11.0038 2592 mountmgr - ok
19:58:11.0085 2592 [ 05BF204EC0E82CC4A054DB189C8A3D84 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
19:58:11.0085 2592 MpFilter - ok
19:58:11.0100 2592 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
19:58:11.0116 2592 mpio - ok
19:58:11.0116 2592 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
19:58:11.0116 2592 mpsdrv - ok
19:58:11.0147 2592 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
19:58:11.0163 2592 MpsSvc - ok
19:58:11.0163 2592 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
19:58:11.0178 2592 MRxDAV - ok
19:58:11.0178 2592 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
19:58:11.0178 2592 mrxsmb - ok
19:58:11.0194 2592 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:58:11.0209 2592 mrxsmb10 - ok
19:58:11.0209 2592 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:58:11.0209 2592 mrxsmb20 - ok
19:58:11.0225 2592 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
19:58:11.0225 2592 msahci - ok
19:58:11.0241 2592 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
19:58:11.0241 2592 msdsm - ok
19:58:11.0272 2592 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
19:58:11.0272 2592 MSDTC - ok
19:58:11.0287 2592 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
19:58:11.0287 2592 Msfs - ok
19:58:11.0287 2592 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
19:58:11.0303 2592 mshidkmdf - ok
19:58:11.0303 2592 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
19:58:11.0303 2592 msisadrv - ok
19:58:11.0334 2592 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
19:58:11.0334 2592 MSiSCSI - ok
19:58:11.0334 2592 msiserver - ok
19:58:11.0350 2592 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
19:58:11.0365 2592 MSKSSRV - ok
19:58:11.0443 2592 [ CC8E4F72F21340A4D3A3D4DB50313EF5 ] MsMpSvc C:\Program Files\Microsoft Security Client\MsMpEng.exe
19:58:11.0443 2592 MsMpSvc - ok
19:58:11.0459 2592 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
19:58:11.0459 2592 MSPCLOCK - ok
19:58:11.0475 2592 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
19:58:11.0475 2592 MSPQM - ok
19:58:11.0490 2592 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
19:58:11.0490 2592 MsRPC - ok
19:58:11.0490 2592 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
19:58:11.0506 2592 mssmbios - ok
19:58:11.0506 2592 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
19:58:11.0506 2592 MSTEE - ok
19:58:11.0521 2592 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
19:58:11.0521 2592 MTConfig - ok
19:58:11.0521 2592 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
19:58:11.0521 2592 Mup - ok
19:58:11.0537 2592 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
19:58:11.0553 2592 napagent - ok
19:58:11.0568 2592 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
19:58:11.0568 2592 NativeWifiP - ok
19:58:11.0599 2592 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
19:58:11.0615 2592 NDIS - ok
19:58:11.0631 2592 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
19:58:11.0631 2592 NdisCap - ok
19:58:11.0646 2592 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
19:58:11.0646 2592 NdisTapi - ok
19:58:11.0662 2592 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
19:58:11.0662 2592 Ndisuio - ok
19:58:11.0693 2592 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
19:58:11.0693 2592 NdisWan - ok
19:58:11.0724 2592 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
19:58:11.0724 2592 NDProxy - ok
19:58:11.0724 2592 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
19:58:11.0724 2592 NetBIOS - ok
19:58:11.0740 2592 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
19:58:11.0740 2592 NetBT - ok
19:58:11.0755 2592 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
19:58:11.0755 2592 Netlogon - ok
19:58:11.0771 2592 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
19:58:11.0771 2592 Netman - ok
19:58:11.0802 2592 [ E8B9164DA7701C1E595647C3A3AFA766 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:58:11.0802 2592 NetMsmqActivator - ok
19:58:11.0802 2592 [ E8B9164DA7701C1E595647C3A3AFA766 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:58:11.0802 2592 NetPipeActivator - ok
19:58:11.0818 2592 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
19:58:11.0818 2592 netprofm - ok
19:58:11.0833 2592 [ E8B9164DA7701C1E595647C3A3AFA766 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:58:11.0833 2592 NetTcpActivator - ok
19:58:11.0833 2592 [ E8B9164DA7701C1E595647C3A3AFA766 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:58:11.0833 2592 NetTcpPortSharing - ok
19:58:11.0849 2592 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
19:58:11.0849 2592 nfrd960 - ok
19:58:11.0896 2592 [ 5FF89F20317309D28AC1EDEB0CD1BA72 ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys
19:58:11.0911 2592 NisDrv - ok
19:58:11.0927 2592 [ 79E80B10FE8F6662E0C9162A68C43444 ] NisSrv C:\Program Files\Microsoft Security Client\NisSrv.exe
19:58:11.0943 2592 NisSrv - ok
19:58:11.0943 2592 [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc C:\Windows\System32\nlasvc.dll
19:58:11.0943 2592 NlaSvc - ok
19:58:11.0943 2592 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
19:58:11.0943 2592 Npfs - ok
19:58:11.0958 2592 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
19:58:11.0974 2592 nsi - ok
19:58:11.0974 2592 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
19:58:11.0974 2592 nsiproxy - ok
19:58:12.0021 2592 [ A2F74975097F52A00745F9637451FDD8 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
19:58:12.0036 2592 Ntfs - ok
19:58:12.0052 2592 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
19:58:12.0052 2592 Null - ok
19:58:12.0099 2592 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
19:58:12.0099 2592 nvraid - ok
19:58:12.0114 2592 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
19:58:12.0114 2592 nvstor - ok
19:58:12.0145 2592 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
19:58:12.0145 2592 nv_agp - ok
19:58:12.0161 2592 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
19:58:12.0177 2592 ohci1394 - ok
19:58:12.0223 2592 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:58:12.0223 2592 ose - ok
19:58:12.0317 2592 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
19:58:12.0395 2592 osppsvc - ok
19:58:12.0411 2592 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
19:58:12.0426 2592 p2pimsvc - ok
19:58:12.0442 2592 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
19:58:12.0442 2592 p2psvc - ok
19:58:12.0457 2592 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
19:58:12.0457 2592 Parport - ok
19:58:12.0473 2592 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
19:58:12.0473 2592 partmgr - ok
19:58:12.0489 2592 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
19:58:12.0489 2592 PcaSvc - ok
19:58:12.0489 2592 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
19:58:12.0489 2592 pci - ok
19:58:12.0489 2592 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
19:58:12.0489 2592 pciide - ok
19:58:12.0504 2592 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
19:58:12.0504 2592 pcmcia - ok
19:58:12.0504 2592 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
19:58:12.0520 2592 pcw - ok
19:58:12.0535 2592 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
19:58:12.0535 2592 PEAUTH - ok
19:58:12.0582 2592 [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
19:58:12.0598 2592 PeerDistSvc - ok
19:58:12.0645 2592 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
19:58:12.0645 2592 PerfHost - ok
19:58:12.0691 2592 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
19:58:12.0723 2592 pla - ok
19:58:12.0754 2592 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
19:58:12.0754 2592 PlugPlay - ok
19:58:12.0769 2592 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
19:58:12.0769 2592 PNRPAutoReg - ok
19:58:12.0769 2592 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
19:58:12.0769 2592 PNRPsvc - ok
19:58:12.0785 2592 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
19:58:12.0801 2592 PolicyAgent - ok
19:58:12.0816 2592 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
19:58:12.0816 2592 Power - ok
19:58:12.0847 2592 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
19:58:12.0847 2592 PptpMiniport - ok
19:58:12.0847 2592 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
19:58:12.0847 2592 Processor - ok
19:58:12.0879 2592 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
19:58:12.0879 2592 ProfSvc - ok
19:58:12.0894 2592 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
19:58:12.0894 2592 ProtectedStorage - ok
19:58:12.0925 2592 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
19:58:12.0925 2592 Psched - ok
19:58:12.0941 2592 [ 41AD0FCF47275A9BC70FA1B56BFD3E23 ] pwdrvio C:\Windows\system32\pwdrvio.sys
19:58:12.0957 2592 pwdrvio - ok
19:58:12.0988 2592 [ 19CF17076F2524AF6746B528584AA3C9 ] pwdspio C:\Windows\system32\pwdspio.sys
19:58:12.0988 2592 pwdspio - ok
19:58:13.0035 2592 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
19:58:13.0050 2592 ql2300 - ok
19:58:13.0050 2592 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
19:58:13.0066 2592 ql40xx - ok
19:58:13.0066 2592 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
19:58:13.0066 2592 QWAVE - ok
19:58:13.0066 2592 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
19:58:13.0066 2592 QWAVEdrv - ok
19:58:13.0081 2592 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
19:58:13.0081 2592 RasAcd - ok
19:58:13.0097 2592 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
19:58:13.0097 2592 RasAgileVpn - ok
19:58:13.0097 2592 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
19:58:13.0097 2592 RasAuto - ok
19:58:13.0097 2592 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
19:58:13.0113 2592 Rasl2tp - ok
19:58:13.0113 2592 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
19:58:13.0128 2592 RasMan - ok
19:58:13.0144 2592 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
19:58:13.0144 2592 RasPppoe - ok
19:58:13.0144 2592 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
19:58:13.0144 2592 RasSstp - ok
19:58:13.0159 2592 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
19:58:13.0159 2592 rdbss - ok
19:58:13.0159 2592 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
19:58:13.0159 2592 rdpbus - ok
19:58:13.0175 2592 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
19:58:13.0175 2592 RDPCDD - ok
19:58:13.0191 2592 [ 1B6163C503398B23FF8B939C67747683 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
19:58:13.0206 2592 RDPDR - ok
19:58:13.0206 2592 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
19:58:13.0222 2592 RDPENCDD - ok
19:58:13.0222 2592 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
19:58:13.0222 2592 RDPREFMP - ok
19:58:13.0237 2592 [ 70CBA1A0C98600A2AA1863479B35CB90 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
19:58:13.0253 2592 RdpVideoMiniport - ok
19:58:13.0269 2592 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
19:58:13.0269 2592 RDPWD - ok
19:58:13.0300 2592 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
19:58:13.0300 2592 rdyboost - ok
19:58:13.0300 2592 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
19:58:13.0300 2592 RemoteAccess - ok
19:58:13.0300 2592 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
19:58:13.0300 2592 RemoteRegistry - ok
19:58:13.0315 2592 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
19:58:13.0315 2592 RpcEptMapper - ok
19:58:13.0331 2592 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
19:58:13.0331 2592 RpcLocator - ok
19:58:13.0347 2592 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
19:58:13.0347 2592 RpcSs - ok
19:58:13.0362 2592 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
19:58:13.0362 2592 rspndr - ok
19:58:13.0409 2592 [ 9140DB0911DE035FED0A9A77A2D156EA ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
19:58:13.0409 2592 RTL8167 - ok
19:58:13.0440 2592 [ E60C0A09F997826C7627B244195AB581 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
19:58:13.0440 2592 s3cap - ok
19:58:13.0456 2592 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
19:58:13.0456 2592 SamSs - ok
19:58:13.0456 2592 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
19:58:13.0471 2592 sbp2port - ok
19:58:13.0487 2592 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
19:58:13.0487 2592 SCardSvr - ok
19:58:13.0503 2592 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
19:58:13.0503 2592 scfilter - ok
19:58:13.0534 2592 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
19:58:13.0549 2592 Schedule - ok
19:58:13.0581 2592 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
19:58:13.0581 2592 SCPolicySvc - ok
19:58:13.0612 2592 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
19:58:13.0612 2592 SDRSVC - ok
19:58:13.0627 2592 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
19:58:13.0627 2592 secdrv - ok
19:58:13.0627 2592 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
19:58:13.0643 2592 seclogon - ok
19:58:13.0643 2592 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
19:58:13.0659 2592 SENS - ok
19:58:13.0659 2592 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
19:58:13.0659 2592 SensrSvc - ok
19:58:13.0674 2592 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
19:58:13.0690 2592 Serenum - ok
19:58:13.0690 2592 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
19:58:13.0690 2592 Serial - ok
19:58:13.0705 2592 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
19:58:13.0705 2592 sermouse - ok
19:58:13.0721 2592 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
19:58:13.0721 2592 SessionEnv - ok
19:58:13.0737 2592 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
19:58:13.0737 2592 sffdisk - ok
19:58:13.0752 2592 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
19:58:13.0752 2592 sffp_mmc - ok
19:58:13.0752 2592 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
19:58:13.0752 2592 sffp_sd - ok
19:58:13.0768 2592 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
19:58:13.0768 2592 sfloppy - ok
19:58:13.0783 2592 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
19:58:13.0799 2592 SharedAccess - ok
19:58:13.0815 2592 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
19:58:13.0830 2592 ShellHWDetection - ok
19:58:13.0830 2592 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
19:58:13.0830 2592 SiSRaid2 - ok
19:58:13.0846 2592 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
19:58:13.0846 2592 SiSRaid4 - ok
19:58:13.0893 2592 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
19:58:13.0893 2592 SkypeUpdate - ok
19:58:13.0908 2592 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
19:58:13.0908 2592 Smb - ok
19:58:13.0924 2592 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
19:58:13.0924 2592 SNMPTRAP - ok
19:58:13.0939 2592 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
19:58:13.0939 2592 spldr - ok
19:58:13.0971 2592 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
19:58:13.0971 2592 Spooler - ok
19:58:14.0017 2592 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
19:58:14.0080 2592 sppsvc - ok
19:58:14.0080 2592 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
19:58:14.0080 2592 sppuinotify - ok
19:58:14.0142 2592 [ EAD5300C93946B0250A309E2BF2BE4CF ] SQLWriter C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
19:58:14.0142 2592 SQLWriter - ok
19:58:14.0173 2592 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
19:58:14.0173 2592 srv - ok
19:58:14.0205 2592 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
19:58:14.0205 2592 srv2 - ok
19:58:14.0220 2592 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
19:58:14.0220 2592 srvnet - ok
19:58:14.0220 2592 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
19:58:14.0220 2592 SSDPSRV - ok
19:58:14.0236 2592 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
19:58:14.0236 2592 SstpSvc - ok
19:58:14.0251 2592 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
19:58:14.0251 2592 stexstor - ok
19:58:14.0251 2592 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
19:58:14.0251 2592 stisvc - ok
19:58:14.0267 2592 [ 7785DC213270D2FC066538DAF94087E7 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
19:58:14.0267 2592 storflt - ok
19:58:14.0298 2592 [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc C:\Windows\system32\drivers\storvsc.sys
19:58:14.0298 2592 storvsc - ok
19:58:14.0298 2592 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
19:58:14.0314 2592 swenum - ok
19:58:14.0329 2592 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
19:58:14.0329 2592 swprv - ok
19:58:14.0329 2592 Synth3dVsc - ok
19:58:14.0376 2592 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
19:58:14.0407 2592 SysMain - ok
19:58:14.0439 2592 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:58:14.0454 2592 TabletInputService - ok
19:58:14.0454 2592 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
19:58:14.0470 2592 TapiSrv - ok
19:58:14.0470 2592 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
19:58:14.0470 2592 TBS - ok
19:58:14.0517 2592 [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] Tcpip C:\Windows\system32\drivers\tcpip.sys
19:58:14.0548 2592 Tcpip - ok
19:58:14.0595 2592 [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
19:58:14.0610 2592 TCPIP6 - ok
19:58:14.0641 2592 [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
19:58:14.0641 2592 tcpipreg - ok
19:58:14.0657 2592 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
19:58:14.0657 2592 TDPIPE - ok
19:58:14.0688 2592 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
19:58:14.0688 2592 TDTCP - ok
19:58:14.0704 2592 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
19:58:14.0704 2592 tdx - ok
19:58:14.0704 2592 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
19:58:14.0719 2592 TermDD - ok
19:58:14.0719 2592 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
19:58:14.0719 2592 TermService - ok
19:58:14.0766 2592 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
19:58:14.0766 2592 Themes - ok

19:58:14.0797 2592 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
19:58:14.0797 2592 THREADORDER - ok
19:58:14.0813 2592 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
19:58:14.0813 2592 TrkWks - ok
19:58:14.0844 2592 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:58:14.0844 2592 TrustedInstaller - ok
19:58:14.0860 2592 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
19:58:14.0860 2592 tssecsrv - ok
19:58:14.0875 2592 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
19:58:14.0875 2592 TsUsbFlt - ok
19:58:14.0891 2592 tsusbhub - ok
19:58:14.0922 2592 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
19:58:14.0922 2592 tunnel - ok
19:58:14.0938 2592 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
19:58:14.0938 2592 uagp35 - ok
19:58:14.0953 2592 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
19:58:14.0953 2592 udfs - ok
19:58:14.0953 2592 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
19:58:14.0969 2592 UI0Detect - ok
19:58:14.0985 2592 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
19:58:14.0985 2592 uliagpkx - ok
19:58:15.0000 2592 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
19:58:15.0000 2592 umbus - ok
19:58:15.0016 2592 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
19:58:15.0016 2592 UmPass - ok
19:58:15.0031 2592 [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService C:\Windows\System32\umrdp.dll
19:58:15.0031 2592 UmRdpService - ok
19:58:15.0063 2592 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
19:58:15.0063 2592 upnphost - ok
19:58:15.0078 2592 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
19:58:15.0078 2592 usbccgp - ok
19:58:15.0094 2592 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
19:58:15.0094 2592 usbcir - ok
19:58:15.0109 2592 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
19:58:15.0109 2592 usbehci - ok
19:58:15.0125 2592 [ 573D192E268F0C5B486B7E96F661E538 ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys
19:58:15.0125 2592 usbfilter - ok
19:58:15.0141 2592 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
19:58:15.0141 2592 usbhub - ok
19:58:15.0141 2592 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
19:58:15.0141 2592 usbohci - ok
19:58:15.0156 2592 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
19:58:15.0156 2592 usbprint - ok
19:58:15.0156 2592 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:58:15.0156 2592 USBSTOR - ok
19:58:15.0172 2592 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
19:58:15.0172 2592 usbuhci - ok
19:58:15.0187 2592 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
19:58:15.0187 2592 UxSms - ok
19:58:15.0187 2592 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
19:58:15.0187 2592 VaultSvc - ok
19:58:15.0203 2592 [ 1D3D716E05CAA17122DE65D0DBA4F6D7 ] VDiskBus C:\Windows\system32\DRIVERS\VDiskBus64.sys
19:58:15.0203 2592 VDiskBus - ok
19:58:15.0219 2592 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
19:58:15.0219 2592 vdrvroot - ok
19:58:15.0234 2592 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
19:58:15.0250 2592 vds - ok
19:58:15.0265 2592 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
19:58:15.0265 2592 vga - ok
19:58:15.0281 2592 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
19:58:15.0281 2592 VgaSave - ok
19:58:15.0281 2592 VGPU - ok
19:58:15.0297 2592 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
19:58:15.0297 2592 vhdmp - ok
19:58:15.0312 2592 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
19:58:15.0312 2592 viaide - ok
19:58:15.0312 2592 [ 86EA3E79AE350FEA5331A1303054005F ] vmbus C:\Windows\system32\drivers\vmbus.sys
19:58:15.0328 2592 vmbus - ok
19:58:15.0328 2592 [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
19:58:15.0328 2592 VMBusHID - ok
19:58:15.0343 2592 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
19:58:15.0343 2592 volmgr - ok
19:58:15.0375 2592 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
19:58:15.0375 2592 volmgrx - ok
19:58:15.0375 2592 [ DF8126BD41180351A093A3AD2FC8903B ] volsnap C:\Windows\system32\drivers\volsnap.sys
19:58:15.0375 2592 volsnap - ok
19:58:15.0390 2592 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
19:58:15.0390 2592 vsmraid - ok
19:58:15.0406 2592 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
19:58:15.0437 2592 VSS - ok
19:58:15.0437 2592 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
19:58:15.0437 2592 vwifibus - ok
19:58:15.0453 2592 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
19:58:15.0453 2592 W32Time - ok
19:58:15.0468 2592 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
19:58:15.0468 2592 WacomPen - ok
19:58:15.0468 2592 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
19:58:15.0484 2592 WANARP - ok
19:58:15.0484 2592 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
19:58:15.0484 2592 Wanarpv6 - ok
19:58:15.0499 2592 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
19:58:15.0531 2592 wbengine - ok
19:58:15.0531 2592 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
19:58:15.0531 2592 WbioSrvc - ok
19:58:15.0546 2592 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
19:58:15.0546 2592 wcncsvc - ok
19:58:15.0546 2592 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
19:58:15.0546 2592 WcsPlugInService - ok
19:58:15.0562 2592 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
19:58:15.0562 2592 Wd - ok
19:58:15.0577 2592 [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
19:58:15.0577 2592 Wdf01000 - ok
19:58:15.0577 2592 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
19:58:15.0593 2592 WdiServiceHost - ok
19:58:15.0593 2592 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
19:58:15.0593 2592 WdiSystemHost - ok
19:58:15.0609 2592 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
19:58:15.0609 2592 WebClient - ok
19:58:15.0609 2592 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
19:58:15.0624 2592 Wecsvc - ok
19:58:15.0624 2592 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
19:58:15.0624 2592 wercplsupport - ok
19:58:15.0624 2592 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
19:58:15.0624 2592 WerSvc - ok
19:58:15.0671 2592 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
19:58:15.0671 2592 WfpLwf - ok
19:58:15.0671 2592 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
19:58:15.0671 2592 WIMMount - ok
19:58:15.0687 2592 WinDefend - ok
19:58:15.0702 2592 WinHttpAutoProxySvc - ok
19:58:15.0749 2592 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
19:58:15.0749 2592 Winmgmt - ok
19:58:15.0796 2592 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
19:58:15.0827 2592 WinRM - ok
19:58:15.0874 2592 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
19:58:15.0874 2592 WinUsb - ok
19:58:15.0889 2592 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
19:58:15.0889 2592 Wlansvc - ok
19:58:15.0921 2592 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
19:58:15.0921 2592 WmiAcpi - ok
19:58:15.0952 2592 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
19:58:15.0952 2592 wmiApSrv - ok
19:58:15.0967 2592 WMPNetworkSvc - ok
19:58:15.0967 2592 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
19:58:15.0967 2592 WPCSvc - ok
19:58:15.0983 2592 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
19:58:15.0983 2592 WPDBusEnum - ok
19:58:15.0983 2592 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
19:58:15.0983 2592 ws2ifsl - ok
19:58:15.0983 2592 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
19:58:15.0983 2592 wscsvc - ok
19:58:15.0999 2592 WSearch - ok
19:58:16.0045 2592 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
19:58:16.0077 2592 wuauserv - ok
19:58:16.0108 2592 [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
19:58:16.0108 2592 WudfPf - ok
19:58:16.0123 2592 [ CF8D590BE3373029D57AF80914190682 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
19:58:16.0139 2592 WUDFRd - ok
19:58:16.0139 2592 [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
19:58:16.0139 2592 wudfsvc - ok
19:58:16.0155 2592 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
19:58:16.0155 2592 WwanSvc - ok
19:58:16.0170 2592 ================ Scan global ===============================
19:58:16.0186 2592 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
19:58:16.0217 2592 [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
19:58:16.0217 2592 [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
19:58:16.0233 2592 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
19:58:16.0248 2592 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
19:58:16.0248 2592 [Global] - ok
19:58:16.0248 2592 ================ Scan MBR ==================================
19:58:16.0264 2592 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
19:58:16.0545 2592 \Device\Harddisk0\DR0 - ok
19:58:16.0545 2592 ================ Scan VBR ==================================
19:58:16.0545 2592 [ A7539E86E8A8722E8B31C01A5EA5E978 ] \Device\Harddisk0\DR0\Partition1
19:58:16.0545 2592 \Device\Harddisk0\DR0\Partition1 - ok
19:58:16.0545 2592 [ 9957A47A3C470E47CE6BB034360EBDC5 ] \Device\Harddisk0\DR0\Partition2
19:58:16.0545 2592 \Device\Harddisk0\DR0\Partition2 - ok
19:58:16.0560 2592 [ A97A5CA5F4752790BD6984F23C5BB014 ] \Device\Harddisk0\DR0\Partition3
19:58:16.0560 2592 \Device\Harddisk0\DR0\Partition3 - ok
19:58:16.0560 2592 ============================================================
19:58:16.0560 2592 Scan finished
19:58:16.0560 2592 ============================================================
19:58:16.0560 2564 Detected object count: 0
19:58:16.0560 2564 Actual detected object count: 0
19:58:23.0783 1444 Deinitialize success

Malware bytes

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.65.0.1400
www.malwarebytes.org

Verze databáze: v2012.10.06.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
CALLER :: CALLER-PC [administrátor]

Ochrana: Povolena

6.10.2012 20:06:42
mbam-log-2012-10-06 (20-14-23).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 197709
Uplynulý čas: 1 minut, 52 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\ProgramData\OPG\OPG.02 (PUP.Ardamax) -> Žádná instrukce nebyla provedena.

(konec)

Znovu spusť MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je označen pro odstranění, stačí restartovat počítač.

Je nutné abych sem znovu dával ten Log z MbAM? dal sem pak ještě úplnou kontrolu všechny nálezy sem smazal a pak ještě jednou rychlou a nic už nenašlo boužel log nemám ale kdyžtak udělám nový.. na ten combofix jdu za chvíly.

Teď už to nech tak, čti ale co píšem

(zatím nic nemaž!).

aha ... sem si trochu nevšiml ... toto je z combo fixu

ComboFix 12-10-04.02 - CALLER 06.10.2012 23:20:12.1.6 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4041.2675 [GMT 2:00]
Spuštěný z: c:\users\CALLER\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}
SP: Microsoft Security Essentials *Disabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\CALLER\AppData\Roaming\Microsoft\Windows\Templates\1028.msi
c:\users\CALLER\AppData\Roaming\Microsoft\Windows\Templates\1031.msi
c:\users\CALLER\AppData\Roaming\Microsoft\Windows\Templates\1033.msi
c:\users\CALLER\AppData\Roaming\Microsoft\Windows\Templates\1036.msi
c:\users\CALLER\AppData\Roaming\Microsoft\Windows\Templates\1041.msi
c:\users\CALLER\AppData\Roaming\Microsoft\Windows\Templates\2052.msi
c:\windows\SysWow64\d2d1debug1.dll
c:\windows\SysWow64\local.txt
D:\install.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-09-06 do 2012-10-06 )))))))))))))))))))))))))))))))
.
.
2012-10-06 21:24 . 2012-10-06 21:24 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-10-06 18:10 . 2012-08-29 22:27 9308616 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{126FD6A5-4D12-445C-A16D-11CF3238D585}\mpengine.dll
2012-10-06 18:04 . 2012-10-06 18:04 -------- d-----w- c:\programdata\Malwarebytes
2012-10-06 18:04 . 2012-10-06 18:04 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-10-06 18:04 . 2012-09-07 15:04 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-10-06 06:42 . 2012-10-06 06:42 73136 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-10-06 06:42 . 2012-10-06 06:42 696240 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-10-06 06:42 . 2012-10-06 06:42 -------- d-----w- c:\windows\system32\Macromed
2012-10-05 14:46 . 2012-10-05 14:46 -------- d-----w- c:\windows\system32\oodag
2012-10-05 14:28 . 2012-10-05 14:28 -------- d-----w- c:\program files (x86)\HJT
2012-10-05 13:38 . 2012-10-05 13:44 -------- d-----w- c:\program files\Guild Wars 2
2012-10-05 12:43 . 2012-09-30 16:15 972192 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{561B74DF-259E-4BD8-870E-C1DCB102DE77}\gapaengine.dll
2012-10-05 12:37 . 2012-08-29 22:27 9308616 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-10-04 20:26 . 2004-03-08 22:00 124688 ----a-w- c:\windows\SysWow64\MSWINSCK.OCX
2012-10-04 20:26 . 2004-03-08 22:00 212240 ----a-w- c:\windows\SysWow64\RICHTX32.OCX
2012-10-04 20:26 . 2004-02-22 22:00 119808 ----a-w- c:\windows\SysWow64\MSSTDFMT.DLL
2012-10-04 20:26 . 2003-07-06 12:07 372736 ----a-w- c:\windows\SysWow64\IJL_11.DLL
2012-10-04 16:26 . 2012-10-04 20:20 -------- d-----w- c:\programdata\OPG
2012-10-03 19:50 . 2012-10-06 18:35 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2012-10-03 18:54 . 2012-10-03 18:54 1066368 ----a-w- c:\programdata\Microsoft\WDExpress\11.0\1033\ResourceCache.dll
2012-10-03 18:54 . 2012-10-03 18:54 -------- d-----w- c:\program files (x86)\NuGet
2012-10-03 18:50 . 2012-10-03 18:50 -------- d-----w- c:\program files (x86)\Common Files\Merge Modules
2012-10-03 18:46 . 2012-10-03 18:46 -------- d-----w- c:\windows\symbols
2012-10-03 18:43 . 2012-10-03 18:43 -------- d-----w- c:\program files (x86)\Common Files\Microsoft
2012-10-03 18:43 . 2012-10-03 18:43 -------- d-----w- c:\program files (x86)\Windows Kits
2012-10-03 18:42 . 2012-10-03 18:42 -------- d-----w- c:\program files (x86)\Microsoft Help Viewer
2012-10-03 18:42 . 2012-10-03 18:42 -------- d-----w- c:\program files (x86)\Microsoft SDKs
2012-10-03 18:41 . 2012-10-03 18:41 -------- d-----w- c:\windows\SysWow64\1033
2012-10-03 18:41 . 2012-10-03 18:41 -------- d-----w- c:\windows\system32\1033
2012-10-03 18:41 . 2012-10-03 18:53 -------- d-----w- c:\program files (x86)\Microsoft SQL Server
2012-10-03 18:41 . 2012-10-03 18:53 -------- d-----w- c:\program files\Microsoft SQL Server
2012-10-03 18:41 . 2012-10-03 18:41 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2012-10-03 18:41 . 2012-10-03 18:42 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 11.0
2012-10-03 18:34 . 2012-10-03 18:54 -------- d-----w- c:\programdata\Package Cache
2012-10-03 18:34 . 2012-10-03 18:34 -------- d-----w- c:\programdata\regid.1991-06.com.microsoft
2012-10-03 16:21 . 2012-10-03 16:21 -------- d-----w- c:\programdata\HideIPEasy
2012-10-03 16:21 . 2012-10-03 16:21 -------- d-----w- c:\program files (x86)\HideIPEasy
2012-10-03 13:49 . 2012-08-21 21:01 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-10-02 15:26 . 2008-07-12 06:18 467984 ----a-w- c:\windows\SysWow64\d3dx10_39.dll
2012-10-02 15:26 . 2008-07-12 06:18 1493528 ----a-w- c:\windows\SysWow64\D3DCompiler_39.dll
2012-10-02 15:26 . 2008-07-12 06:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
2012-10-02 13:53 . 2012-10-06 21:18 -------- d-----w- c:\programdata\PMB Files
2012-10-02 13:53 . 2012-10-02 13:53 -------- d-----w- c:\program files (x86)\Pando Networks
2012-10-01 14:57 . 2012-10-01 14:58 -------- d-----w- c:\program files\eclipse
2012-10-01 14:50 . 2012-10-01 14:50 916456 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-01 14:50 . 2012-10-01 14:50 289768 ----a-w- c:\windows\system32\javaws.exe
2012-10-01 14:50 . 2012-10-01 14:50 1034216 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-01 14:50 . 2012-10-01 14:50 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2012-10-01 14:50 . 2012-10-01 14:50 189416 ----a-w- c:\windows\system32\javaw.exe
2012-10-01 14:50 . 2012-10-01 14:50 188904 ----a-w- c:\windows\system32\java.exe
2012-10-01 14:48 . 2012-10-01 14:50 -------- d-----w- c:\program files\Java
2012-09-30 19:04 . 2012-09-30 19:04 -------- d-----w- c:\program files\LockHunter
2012-09-30 18:22 . 2012-09-30 18:22 -------- d-----w- c:\programdata\RELOADED
2012-09-30 17:11 . 2012-09-30 17:12 -------- d-----w- c:\programdata\Battle.net
2012-09-30 16:26 . 2012-09-30 16:26 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2012-09-30 16:25 . 2012-09-30 16:25 -------- d-----w- c:\program files\Defraggler
2012-09-30 16:19 . 2012-09-30 16:19 -------- d-----w- c:\program files (x86)\FileHippo.com
2012-09-30 16:16 . 2012-09-30 16:15 972192 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2012-09-30 16:10 . 2012-10-02 17:02 -------- d-----w- c:\program files (x86)\Common Files\Blizzard Entertainment
2012-09-30 16:10 . 2012-09-30 18:00 -------- d-----w- c:\programdata\Blizzard Entertainment
2012-09-28 08:36 . 2012-09-28 08:36 -------- d-----w- c:\program files (x86)\Microsoft Synchronization Services
2012-09-28 08:36 . 2012-10-03 18:41 -------- d-----w- c:\program files (x86)\Microsoft SQL Server Compact Edition
2012-09-28 08:36 . 2012-09-28 08:36 -------- d-----w- c:\windows\PCHEALTH
2012-09-28 08:36 . 2012-09-28 08:36 -------- d-----w- c:\program files (x86)\Microsoft Sync Framework
2012-09-28 08:35 . 2012-09-28 08:35 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2012-09-28 08:34 . 2012-09-28 08:34 -------- d-----w- c:\program files\Microsoft Office
2012-09-28 08:34 . 2012-09-28 08:34 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2012-09-28 08:34 . 2012-09-28 08:38 -------- d-----w- c:\programdata\Microsoft Help
2012-09-28 08:34 . 2012-09-28 08:34 -------- d-----r- C:\MSOCache
2012-09-28 08:13 . 2008-10-15 04:22 519000 ----a-w- c:\windows\system32\d3dx10_40.dll
2012-09-28 08:13 . 2008-10-15 04:22 452440 ----a-w- c:\windows\SysWow64\d3dx10_40.dll
2012-09-28 08:13 . 2008-10-15 04:22 2605920 ----a-w- c:\windows\system32\D3DCompiler_40.dll
2012-09-28 08:13 . 2008-10-15 04:22 2036576 ----a-w- c:\windows\SysWow64\D3DCompiler_40.dll
2012-09-28 08:13 . 2008-10-15 04:22 5631312 ----a-w- c:\windows\system32\D3DX9_40.dll
2012-09-28 08:13 . 2008-10-15 04:22 4379984 ----a-w- c:\windows\SysWow64\D3DX9_40.dll
2012-09-26 20:01 . 2012-09-26 20:04 -------- d-----w- c:\program files\Core Temp
2012-09-25 20:05 . 2012-09-25 20:05 -------- d-----w- c:\program files\GIMP 2
2012-09-25 19:59 . 2012-09-25 19:59 -------- d-----w- c:\programdata\Sony
2012-09-25 19:56 . 2012-09-25 19:56 -------- d-----w- c:\program files\Sony
2012-09-25 19:56 . 2012-09-25 19:56 -------- d-----w- c:\program files (x86)\Sony
2012-09-25 19:34 . 2012-09-25 19:34 -------- d-----w- c:\program files (x86)\Prime95
2012-09-25 19:29 . 2012-09-25 19:29 -------- d-----w- c:\windows\system32\temp
2012-09-25 19:29 . 2012-09-25 19:29 -------- d-----w- c:\programdata\PassMark
2012-09-25 19:29 . 2012-09-25 19:29 -------- d-----w- c:\program files\BurnInTest
2012-09-24 13:59 . 2012-09-24 13:59 -------- d-----w- c:\program files (x86)\Geeks3D
2012-09-24 13:16 . 2012-10-06 17:42 -------- d-----w- c:\program files (x86)\Microsoft
2012-09-24 13:06 . 2012-09-24 17:43 -------- d-----w- C:\Fraps
2012-09-24 13:05 . 2012-09-24 13:05 -------- d-----w- c:\program files (x86)\uTorrent
2012-09-24 12:18 . 2012-10-06 17:52 -------- d-----w- c:\program files (x86)\MSI Afterburner
2012-09-24 12:17 . 2012-09-24 12:17 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-09-24 12:14 . 2012-10-05 14:27 -------- d-----w- c:\windows\system32\appmgmt
2012-09-23 19:27 . 2012-09-23 19:27 -------- d-----w- c:\program files\CCleaner
2012-09-23 18:22 . 2012-09-23 18:22 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-09-23 18:22 . 2012-09-23 18:22 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2012-09-23 18:22 . 2012-09-23 18:33 -------- d-----w- c:\programdata\DAEMON Tools Lite
2012-09-23 13:59 . 2012-09-28 06:31 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2012-09-23 13:59 . 2012-09-28 06:31 -------- d-----w- c:\program files\Microsoft Security Client
2012-09-23 10:27 . 2012-09-23 10:27 -------- d-----w- C:\ATI
2012-09-23 10:23 . 2012-09-23 10:27 -------- d-----w- c:\programdata\DriverGenius
2012-09-23 10:23 . 2012-09-23 10:23 86016 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-09-23 10:23 . 2012-09-23 10:23 262144 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-09-23 10:23 . 2012-09-23 10:23 -------- d-----w- c:\program files (x86)\Driver-Soft
2012-09-23 10:22 . 2012-09-23 10:22 -------- d-----w- c:\windows\SysWow64\Futuremark
2012-09-23 10:22 . 2004-10-25 18:02 21664 ----a-w- c:\windows\SysWow64\drivers\Entech.sys
2012-09-23 10:22 . 2004-06-22 13:44 5632 ----a-w- c:\windows\SysWow64\drivers\Entech64.sys
2012-09-23 10:22 . 2001-11-19 17:05 3972 ----a-w- c:\windows\SysWow64\drivers\PciBus.sys
2012-09-23 10:22 . 2012-09-23 10:22 -------- d-----w- c:\program files (x86)\Futuremark
2012-09-23 08:20 . 2012-08-22 18:12 1913200 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-09-23 08:20 . 2012-08-22 18:12 376688 ----a-w- c:\windows\system32\drivers\netio.sys
2012-09-23 08:20 . 2012-08-22 18:12 288624 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-09-23 08:20 . 2012-08-22 18:12 950128 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-09-23 08:20 . 2012-07-04 20:26 41472 ----a-w- c:\windows\system32\drivers\RNDISMP.sys
2012-09-23 08:20 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll
2012-09-23 08:20 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2012-09-23 08:18 . 2012-09-23 08:19 -------- d-----w- c:\program files (x86)\CrystalDiskInfo
2012-09-23 01:51 . 2012-09-22 19:53 -------- d-----w- c:\program files\CPUID
2012-09-23 01:45 . 2012-09-23 01:45 -------- d-----w- c:\programdata\ATI
2012-09-23 01:40 . 2012-09-23 01:40 0 ----a-w- c:\windows\ativpsrm.bin
2012-09-23 01:33 . 2012-10-06 19:07 -------- d-----w- c:\windows\Panther
2012-09-23 01:30 . 2012-09-23 01:30 -------- d-----w- c:\program files (x86)\AMD APP
2012-09-23 01:30 . 2012-09-23 01:30 -------- d-----w- c:\program files\Common Files\ATI Technologies
2012-09-23 01:30 . 2012-09-23 01:30 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2012-09-23 01:30 . 2012-09-23 01:30 -------- d-----w- c:\programdata\AMD
2012-09-23 01:30 . 2010-02-18 07:18 46136 ----a-w- c:\windows\system32\drivers\amdiox64.sys
2012-09-23 01:30 . 2012-09-23 01:30 -------- d-----w- c:\program files (x86)\ATI Technologies
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-22 21:44 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2012-09-22 21:44 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2012-09-22 20:10 . 2012-09-22 20:10 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-09-22 20:10 . 2012-09-22 20:10 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2012-08-30 20:03 . 2012-08-30 20:03 228768 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2012-08-30 20:03 . 2012-03-20 18:44 128456 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2012-08-30 13:18 . 2012-08-30 13:18 71680 ----a-w- c:\windows\system32\frapsv64.dll
2012-08-30 13:18 . 2012-08-30 13:18 65536 ----a-w- c:\windows\SysWow64\frapsvid.dll
2012-07-28 04:09 . 2012-07-28 04:09 5538984 ----a-w- c:\windows\SysWow64\atiumdag.dll
2012-07-28 04:07 . 2012-07-28 04:07 10278912 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2012-07-28 03:43 . 2012-07-28 03:43 70144 ----a-w- c:\windows\system32\coinst_8.982.dll
2012-07-28 03:19 . 2012-07-28 03:19 24935424 ----a-w- c:\windows\system32\atio6axx.dll
2012-07-28 02:50 . 2012-07-28 02:50 20546560 ----a-w- c:\windows\SysWow64\atioglxx.dll
2012-07-28 02:15 . 2012-07-28 02:15 163840 ----a-w- c:\windows\system32\atiapfxx.exe
2012-07-28 02:15 . 2012-07-28 02:15 931328 ----a-w- c:\windows\SysWow64\aticfx32.dll
2012-07-28 02:13 . 2012-07-28 02:13 1100288 ----a-w- c:\windows\system32\aticfx64.dll
2012-07-28 02:10 . 2012-07-28 02:10 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
2012-07-28 02:10 . 2012-07-28 02:10 534528 ----a-w- c:\windows\system32\atieclxx.exe
2012-07-28 02:09 . 2012-07-28 02:09 239616 ----a-w- c:\windows\system32\atiesrxx.exe
2012-07-28 02:08 . 2012-07-28 02:08 120320 ----a-w- c:\windows\system32\atitmm64.dll
2012-07-28 02:08 . 2012-07-28 02:08 21504 ----a-w- c:\windows\system32\atimuixx.dll
2012-07-28 02:07 . 2012-07-28 02:07 59392 ----a-w- c:\windows\system32\atiedu64.dll
2012-07-28 02:07 . 2012-07-28 02:07 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2012-07-28 02:07 . 2012-07-28 02:07 6430208 ----a-w- c:\windows\SysWow64\atidxx32.dll
2012-07-28 01:51 . 2012-07-28 01:51 7052288 ----a-w- c:\windows\system32\atidxx64.dll
2012-07-28 01:41 . 2012-07-28 01:41 4266496 ----a-w- c:\windows\system32\atiumd6a.dll
2012-07-28 01:35 . 2012-07-28 01:35 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2012-07-28 01:35 . 2012-07-28 01:35 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2012-07-28 01:35 . 2012-07-28 01:35 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2012-07-28 01:35 . 2012-07-28 01:35 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
2012-07-28 01:34 . 2012-07-28 01:34 16034304 ----a-w- c:\windows\system32\aticaldd64.dll
2012-07-28 01:32 . 2012-07-28 01:32 4751872 ----a-w- c:\windows\SysWow64\atiumdva.dll
2012-07-28 01:30 . 2012-07-28 01:30 13605888 ----a-w- c:\windows\SysWow64\aticaldd.dll
2012-07-28 01:25 . 2012-07-28 01:25 6676480 ----a-w- c:\windows\system32\atiumd64.dll
2012-07-28 01:15 . 2012-07-28 01:15 540160 ----a-w- c:\windows\system32\atiadlxx.dll
2012-07-28 01:15 . 2012-07-28 01:15 368640 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2012-07-28 01:15 . 2012-07-28 01:15 17920 ----a-w- c:\windows\system32\atig6pxx.dll
2012-07-28 01:15 . 2012-07-28 01:15 14848 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2012-07-28 01:15 . 2012-07-28 01:15 14848 ----a-w- c:\windows\system32\atiglpxx.dll
2012-07-28 01:15 . 2012-07-28 01:15 41984 ----a-w- c:\windows\system32\atig6txx.dll
2012-07-28 01:14 . 2012-07-28 01:14 33280 ----a-w- c:\windows\SysWow64\atigktxx.dll
2012-07-28 01:14 . 2012-07-28 01:14 368640 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2012-07-28 01:13 . 2012-07-28 01:13 129536 ----a-w- c:\windows\system32\atiuxp64.dll
2012-07-28 01:13 . 2012-07-28 01:13 109568 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2012-07-28 01:13 . 2012-07-28 01:13 103936 ----a-w- c:\windows\system32\atiu9p64.dll
2012-07-28 01:13 . 2012-07-28 01:13 83456 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2012-07-28 01:12 . 2012-07-28 01:12 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2012-07-28 01:08 . 2012-07-28 01:08 56320 ----a-w- c:\windows\system32\atimpc64.dll
2012-07-28 01:08 . 2012-07-28 01:08 56320 ----a-w- c:\windows\system32\amdpcom64.dll
2012-07-28 01:08 . 2012-07-28 01:08 56832 ----a-w- c:\windows\SysWow64\atimpc32.dll
2012-07-28 01:08 . 2012-07-28 01:08 56832 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2012-07-27 20:47 . 2012-07-27 20:47 187392 ----a-w- c:\windows\system32\clinfo.exe
2012-07-27 20:47 . 2012-07-27 20:47 75776 ----a-w- c:\windows\system32\OpenVideo64.dll
2012-07-27 20:47 . 2012-07-27 20:47 65024 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2012-07-27 20:47 . 2012-07-27 20:47 63488 ----a-w- c:\windows\system32\OVDecode64.dll
2012-07-27 20:47 . 2012-07-27 20:47 56320 ----a-w- c:\windows\SysWow64\OVDecode.dll
2012-07-27 20:46 . 2012-07-27 20:46 16464896 ----a-w- c:\windows\system32\amdocl64.dll
2012-07-27 20:46 . 2012-07-27 20:46 13013504 ----a-w- c:\windows\SysWow64\amdocl.dll
2012-07-27 20:44 . 2012-07-27 20:44 54784 ----a-w- c:\windows\system32\OpenCL.dll
2012-07-27 20:44 . 2012-07-27 20:44 50176 ----a-w- c:\windows\SysWow64\OpenCL.dll
2012-07-26 17:08 . 2012-07-26 17:08 862664 ----a-w- c:\windows\SysWow64\msvcr110.dll
2012-07-26 17:08 . 2012-07-26 17:08 837072 ----a-w- c:\windows\SysWow64\vcamp110d.dll
2012-07-26 17:08 . 2012-07-26 17:08 82888 ----a-w- c:\windows\SysWow64\mfcm110u.dll
2012-07-26 17:08 . 2012-07-26 17:08 82888 ----a-w- c:\windows\SysWow64\mfcm110.dll
2012-07-26 17:08 . 2012-07-26 17:08 8234952 ----a-w- c:\windows\SysWow64\mfc110ud.dll
2012-07-26 17:08 . 2012-07-26 17:08 821200 ----a-w- c:\windows\SysWow64\msvcp110d.dll
2012-07-26 17:08 . 2012-07-26 17:08 8164296 ----a-w- c:\windows\SysWow64\mfc110d.dll
2012-07-26 17:08 . 2012-07-26 17:08 74704 ----a-w- c:\windows\SysWow64\mfc110fra.dll
2012-07-26 17:08 . 2012-07-26 17:08 74704 ----a-w- c:\windows\SysWow64\mfc110deu.dll
2012-07-26 17:08 . 2012-07-26 17:08 73680 ----a-w- c:\windows\SysWow64\mfc110esn.dll
2012-07-26 17:08 . 2012-07-26 17:08 729560 ----a-w- c:\windows\SysWow64\vccorlib110d.dll
2012-07-26 17:08 . 2012-07-26 17:08 72656 ----a-w- c:\windows\SysWow64\mfc110ita.dll
2012-07-26 17:08 . 2012-07-26 17:08 70608 ----a-w- c:\windows\SysWow64\mfc110rus.dll
2012-07-26 17:08 . 2012-07-26 17:08 64976 ----a-w- c:\windows\SysWow64\mfc110enu.dll
2012-07-26 17:08 . 2012-07-26 17:08 53712 ----a-w- c:\windows\SysWow64\mfc110jpn.dll
2012-07-26 17:08 . 2012-07-26 17:08 534480 ----a-w- c:\windows\SysWow64\msvcp110.dll
2012-07-26 17:08 . 2012-07-26 17:08 53200 ----a-w- c:\windows\SysWow64\mfc110kor.dll
2012-07-26 17:08 . 2012-07-26 17:08 46032 ----a-w- c:\windows\SysWow64\mfc110cht.dll
2012-07-26 17:08 . 2012-07-26 17:08 46032 ----a-w- c:\windows\SysWow64\mfc110chs.dll
2012-07-26 17:08 . 2012-07-26 17:08 4446152 ----a-w- c:\windows\SysWow64\mfc110u.dll
2012-07-26 17:08 . 2012-07-26 17:08 4411848 ----a-w- c:\windows\SysWow64\mfc110.dll
2012-07-26 17:08 . 2012-07-26 17:08 320976 ----a-w- c:\windows\SysWow64\vcamp110.dll
2012-07-26 17:08 . 2012-07-26 17:08 251864 ----a-w- c:\windows\SysWow64\vccorlib110.dll
2012-07-26 17:08 . 2012-07-26 17:08 1678792 ----a-w- c:\windows\SysWow64\msvcr110d.dll
2012-07-26 17:08 . 2012-07-26 17:08 153536 ----a-w- c:\windows\SysWow64\atl110.dll
2012-07-26 17:08 . 2012-07-26 17:08 144848 ----a-w- c:\windows\SysWow64\vcomp110d.dll
2012-07-26 17:08 . 2012-07-26 17:08 115656 ----a-w- c:\windows\SysWow64\vcomp110.dll
2012-07-26 17:08 . 2012-07-26 17:08 111560 ----a-w- c:\windows\SysWow64\mfcm110d.dll
2012-07-26 17:08 . 2012-07-26 17:08 110544 ----a-w- c:\windows\SysWow64\mfcm110ud.dll
2012-07-26 13:22 . 2012-07-26 13:22 997336 ----a-w- c:\windows\system32\vccorlib110d.dll
2012-07-26 13:22 . 2012-07-26 13:22 90056 ----a-w- c:\windows\system32\mfcm110u.dll
2012-07-26 13:22 . 2012-07-26 13:22 90056 ----a-w- c:\windows\system32\mfcm110.dll
2012-07-26 13:22 . 2012-07-26 13:22 828872 ----a-w- c:\windows\system32\msvcr110.dll
2012-07-26 13:22 . 2012-07-26 13:22 74704 ----a-w- c:\windows\system32\mfc110fra.dll
2012-07-26 13:22 . 2012-07-26 13:22 74704 ----a-w- c:\windows\system32\mfc110deu.dll
2012-07-26 13:22 . 2012-07-26 13:22 73680 ----a-w- c:\windows\system32\mfc110esn.dll
2012-07-26 13:22 . 2012-07-26 13:22 72656 ----a-w- c:\windows\system32\mfc110ita.dll
2012-07-26 13:22 . 2012-07-26 13:22 70608 ----a-w- c:\windows\system32\mfc110rus.dll
2012-07-26 13:22 . 2012-07-26 13:22 661448 ----a-w- c:\windows\system32\msvcp110.dll
2012-07-26 13:22 . 2012-07-26 13:22 64976 ----a-w- c:\windows\system32\mfc110enu.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-08-28 3671904]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-07-13 17418928]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-09-07 43608]
"ASUS AiChargerPlus Execute"="c:\program files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe" [2010-11-08 465536]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-08-06 642216]
"MSIAfterburner"="c:\program files (x86)\MSI Afterburner\MSIAfterburnerWrapper.exe" [2010-06-07 44344]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 AODService;AODService;c:\program files (x86)\AMD\OverDrive\AODAssist.exe [2012-06-25 136648]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-08 123856]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-07 676936]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 ALSysIO;ALSysIO;c:\users\CALLER\AppData\Local\Temp\ALSysIO64.sys [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-07 25928]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys [2010-08-16 19936]
R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys [2010-08-16 13280]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 20992]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
S0 AiChargerPlus;ASUS Charger Plus Driver;c:\windows\system32\DRIVERS\AiChargerPlus.sys [2010-11-08 14464]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys [2011-03-04 78976]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys [2011-03-04 38528]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-09-23 283200]
S1 VDiskBus;ASUS Disk Unlocker;c:\windows\system32\DRIVERS\VDiskBus64.sys [2010-09-21 43136]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-07-28 239616]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-08-06 361984]
S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888]
S2 AODDriver4.2.0;AODDriver4.2.0;c:\program files (x86)\AMD\OverDrive\amd64\AODDriver2.sys [2012-06-25 57512]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe [2011-06-13 922240]
S2 ASDiskUnlocker;ASDiskUnlocker;c:\program files (x86)\ASUS\Disk Unlocker\ASPFSVS64.exe [2010-12-02 258688]
S2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [2010-12-02 915584]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [2010-10-21 586880]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2012-07-28 10278912]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2012-07-28 368640]
S3 ASFLTDrv.sys;ASFLTDrv.sys;c:\program files (x86)\ASUS\Disk Unlocker\ASFLTDrv64.sys [2010-09-16 16512]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys [2011-09-14 129000]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys [2011-09-14 394216]
S3 ASUSFILTER;ASUSFILTER;SysWow64\drivers\ASUSFILTER.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-05-14 96896]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-08-23 565352]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2010-12-16 47232]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - ASFLTDRV.SYS
.
Obsah adresáře 'Naplánované úlohy'
.
2012-10-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1545386300-3591238296-2276514508-1000Core.job
- c:\users\CALLER\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-23 01:18]
.
2012-10-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1545386300-3591238296-2276514508-1000UA.job
- c:\users\CALLER\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-23 01:18]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-19 11613288]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-09-12 1289704]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyServer = http=;ftp=;https=;
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~3\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~3\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.1.254 10.0.0.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-Driver Genius - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_278_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_278_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_278_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_278_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_278.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_278.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_278.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_278.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG15.00.00.01PROFESSIONAL"="9165A702C04FEC7FF384699AC2C0292F5D608A9B81DE3E8B32789075B772FAAB1717E969EEDCB32C7842286093EC4220A0F4CC0890841CE3602B9FC37D0BF0AC3FC01D6F61B3DDF4CA1F6FEBFB12B4B5E5347602247DC66C3445E8143DC6CCF68A8676992CB8D8367C8A89786E74D58FEEFD8C1AB28D1DAABE3349670A05199479804C802687731F1FE968D1258BDEA0FE22BA7275A7E17797D244D640D63E6394B91D4F696F63B14C96A2D99A816D31DEE8CCC0E9F4BAFDD777020DFD818E1665B2854755F0BF451F5DED0610B682DDDC8A354EFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74C5D575E7D6A3B9808A6171C11EC38DE3D9DB7CE019D40AA5CA2D97226D213B555C63CB6D2C69D18216C1CD68ABB25858EB7EC97606B978046E1334E9BA6750F7DDF528C5B92DEB881B11BE5CA7B098C15C23443283B8EB923D1CAC124B18BBF41F89BA4044B8824FBB343DF1D13373F7A80E51E9BDF8213EE92216F1E07E53E520B537199A21D6C7EC9AB9B956721E6834D9689B38FEFAE5F1E676287CCB0257FD0E5C63F5098450911A0D91CE02CF383C30ECDBC834B534231030AB12E8B3426C879DB6B916588B26921B8EC6DB376E645C814D7797AEB74CE8DBAC3D98ACEBC35E0CD6925E53223F5E04016FB04A4AAF7786978B2D9886ABCD3AA3681357E4B20291DD7CDEEE3189F4758FC8261D8E0C38043E875B6592B06D8F5D7DB096E6C518FAD2AD34963E214704FD8F87F103258F9F5458BD5375178519C4925F4EDD1DA8649A584B2176940AAD5365C8A6DD523B0BCFE41ED9C0EA5A600021B5E71C08E369AE5AC5B8D245BFA80F32D1FB51CDBA635DA6928A9A2E2F6E9C97F9B120F82F6B3D9A2E878A1DB17CA45EFCE53667B8EE2EF5AA59E674D1304BF9AF8892A93D807443C73AA817DEB12342DA1D3ABBE532BAC6BF965C7BF01DE54B5B63893E01E6E3CD4091FF842999599F190EAF4A50F5851FC2906C25F7A6C4F2089A25ECC3DA52BCDA9F0536D72FBA74F896B62F7931AF2EDB0B1EB0F6C06C82D9871327EDFCDD18A4C62EC06FD4EDFD86D52A43C6481FA27003AE8FBF7E52F32006ECB61E56BC1F0D7D7B5D9777A1DA794BA82C1BB86258F7717F61374ABC40BD00C7CA461E561EE2A5A34F7CF52085948E8D61884818115F0616485E85A9E150E5BA6BA180AEBF1949681B5A90AA38DC4C08E14DF33F52B355A15CA16D927B2AF17455C0508F06FDB5D4AA95C3CC0E73E4EAD51A23B3B468564FE9DE9759A4DA299E18357F4D1DEB8A3D13174E48713D93EC82B55A25EDF138530F98C5C8C4DC5E21E6FF0C8463B5882EA6B30E6753B32628B4233513FF58569C4245622E1A0ED97AE24E85F59035C3700BE0307D810D4AF337C2F98140A775FF1A1D4BDD4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-10-06 23:26:10
ComboFix-quarantined-files.txt 2012-10-06 21:26
.
Před spuštěním: Volných bajtů: 106 422 730 752
Po spuštění: Volných bajtů: 106 036 240 384
.
- - End Of File - - C9D7A51BE2253CAFC21D4D6D479C4391

Keylogger tam máš a to Ardamax , podívej se v přidat/odebrat programy , je-li tam , pokud ano , odinstaluj.

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

Anti-keylogger™
10.3.1 download informatik
Stáhni si Antikeylogger z některého odkazu.
http://www.anti-keyloggers.com/download/antikey.zip
http://www.anti-keyloggers.com/download/ak_help.zip
http://www.anti-keyloggers.com/download ... aSheet.pdf

ComboFix ...


ComboFix 12-10-04.02 - CALLER 07.10.2012 12:05:37.2.6 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.4041.2729 [GMT 2:00]
Spuštěný z: c:\users\CALLER\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\CALLER\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}
SP: Microsoft Security Essentials *Disabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\program files (x86)\Skype\Updater\Updater.exe"
"c:\users\CALLER\AppData\Local\Google\Update\GoogleUpdate.exe"
"c:\windows\ativpsrm.bin"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1545386300-3591238296-2276514508-1000Core.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1545386300-3591238296-2276514508-1000UA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Skype\Updater\Updater.dll
c:\program files (x86)\Skype\Updater\Updater.exe
c:\programdata\Spybot - Search & Destroy
c:\programdata\Spybot - Search & Destroy\Logs\Fixes.121003-2213.txt
c:\programdata\Spybot - Search & Destroy\Logs\Fixes.121005-1506.txt
c:\programdata\Spybot - Search & Destroy\Logs\Checks.121003-2155.log
c:\programdata\Spybot - Search & Destroy\Logs\Checks.121003-2206.txt
c:\programdata\Spybot - Search & Destroy\Logs\Checks.121005-1452.log
c:\programdata\Spybot - Search & Destroy\Logs\Checks.121005-1500.txt
c:\programdata\Spybot - Search & Destroy\Logs\Checks.121006-1655.log
c:\programdata\Spybot - Search & Destroy\Logs\Checks.121006-1704.txt
c:\programdata\Spybot - Search & Destroy\Recovery\Overview.ini
c:\programdata\Spybot - Search & Destroy\Recovery\WiIQfraud.zip
c:\users\CALLER\AppData\Local\Google\Update
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\GoogleCrashHandler.exe
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\GoogleCrashHandler64.exe
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\GoogleUpdate.exe
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\GoogleUpdateBroker.exe
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\GoogleUpdateHelper.msi
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\GoogleUpdateOnDemand.exe
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\GoogleUpdateSetup.exe
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdate.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_am.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_ar.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_bg.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_bn.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_ca.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_cs.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_da.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_de.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_el.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_en-GB.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_en.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_es-419.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_es.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_et.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_fa.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_fi.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_fil.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_fr.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_gu.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_hi.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_hr.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_hu.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_id.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_is.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_it.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_iw.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_ja.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_kn.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_ko.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_lt.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_lv.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_ml.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_mr.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_ms.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_nl.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_no.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_pl.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_pt-BR.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_pt-PT.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_ro.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_ru.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_sk.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_sl.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_sr.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_sv.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_sw.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_ta.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_te.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_th.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_tr.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_uk.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_ur.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_vi.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_zh-CN.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\goopdateres_zh-TW.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\psmachine.dll
c:\users\CALLER\AppData\Local\Google\Update\1.3.21.123\psuser.dll
c:\users\CALLER\AppData\Local\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.21.125\GoogleUpdateB6998767.exe
c:\users\CALLER\AppData\Local\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\22.0.1229.79\22.0.1229.79_21.0.1180.89_chrome_updater.exe
c:\users\CALLER\AppData\Local\Google\Update\GoogleUpdate.exe
c:\windows\ativpsrm.bin
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1545386300-3591238296-2276514508-1000Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1545386300-3591238296-2276514508-1000UA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SkypeUpdate
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-09-07 do 2012-10-07 )))))))))))))))))))))))))))))))
.
.
2012-10-07 10:10 . 2012-10-07 10:10 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-10-07 07:06 . 2012-08-29 22:27 9308616 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{68CB05FE-EEA5-49F6-8480-0328B8C7294B}\mpengine.dll
2012-10-06 18:04 . 2012-10-06 18:04 -------- d-----w- c:\programdata\Malwarebytes
2012-10-06 18:04 . 2012-10-06 18:04 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-10-06 18:04 . 2012-09-07 15:04 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-10-06 06:42 . 2012-10-06 06:42 73136 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-10-06 06:42 . 2012-10-06 06:42 696240 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-10-06 06:42 . 2012-10-06 06:42 -------- d-----w- c:\windows\system32\Macromed
2012-10-05 14:46 . 2012-10-05 14:46 -------- d-----w- c:\windows\system32\oodag
2012-10-05 14:28 . 2012-10-05 14:28 -------- d-----w- c:\program files (x86)\HJT
2012-10-05 13:38 . 2012-10-05 13:44 -------- d-----w- c:\program files\Guild Wars 2
2012-10-05 12:43 . 2012-09-30 16:15 972192 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{561B74DF-259E-4BD8-870E-C1DCB102DE77}\gapaengine.dll
2012-10-05 12:37 . 2012-08-29 22:27 9308616 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-10-04 20:26 . 2004-03-08 22:00 124688 ----a-w- c:\windows\SysWow64\MSWINSCK.OCX
2012-10-04 20:26 . 2004-03-08 22:00 212240 ----a-w- c:\windows\SysWow64\RICHTX32.OCX
2012-10-04 20:26 . 2004-02-22 22:00 119808 ----a-w- c:\windows\SysWow64\MSSTDFMT.DLL
2012-10-04 20:26 . 2003-07-06 12:07 372736 ----a-w- c:\windows\SysWow64\IJL_11.DLL
2012-10-04 16:26 . 2012-10-04 20:20 -------- d-----w- c:\programdata\OPG
2012-10-03 18:54 . 2012-10-03 18:54 1066368 ----a-w- c:\programdata\Microsoft\WDExpress\11.0\1033\ResourceCache.dll
2012-10-03 18:54 . 2012-10-03 18:54 -------- d-----w- c:\program files (x86)\NuGet
2012-10-03 18:50 . 2012-10-03 18:50 -------- d-----w- c:\program files (x86)\Common Files\Merge Modules
2012-10-03 18:46 . 2012-10-03 18:46 -------- d-----w- c:\windows\symbols
2012-10-03 18:43 . 2012-10-03 18:43 -------- d-----w- c:\program files (x86)\Common Files\Microsoft
2012-10-03 18:43 . 2012-10-03 18:43 -------- d-----w- c:\program files (x86)\Windows Kits
2012-10-03 18:42 . 2012-10-03 18:42 -------- d-----w- c:\program files (x86)\Microsoft Help Viewer
2012-10-03 18:42 . 2012-10-03 18:42 -------- d-----w- c:\program files (x86)\Microsoft SDKs
2012-10-03 18:41 . 2012-10-03 18:41 -------- d-----w- c:\windows\SysWow64\1033
2012-10-03 18:41 . 2012-10-03 18:41 -------- d-----w- c:\windows\system32\1033
2012-10-03 18:41 . 2012-10-03 18:53 -------- d-----w- c:\program files (x86)\Microsoft SQL Server
2012-10-03 18:41 . 2012-10-03 18:53 -------- d-----w- c:\program files\Microsoft SQL Server
2012-10-03 18:41 . 2012-10-03 18:41 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2012-10-03 18:41 . 2012-10-03 18:42 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 11.0
2012-10-03 18:34 . 2012-10-03 18:54 -------- d-----w- c:\programdata\Package Cache
2012-10-03 18:34 . 2012-10-03 18:34 -------- d-----w- c:\programdata\regid.1991-06.com.microsoft
2012-10-03 16:21 . 2012-10-03 16:21 -------- d-----w- c:\programdata\HideIPEasy
2012-10-03 16:21 . 2012-10-03 16:21 -------- d-----w- c:\program files (x86)\HideIPEasy
2012-10-03 13:49 . 2012-08-21 21:01 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-10-02 15:26 . 2008-07-12 06:18 467984 ----a-w- c:\windows\SysWow64\d3dx10_39.dll
2012-10-02 15:26 . 2008-07-12 06:18 1493528 ----a-w- c:\windows\SysWow64\D3DCompiler_39.dll
2012-10-02 15:26 . 2008-07-12 06:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
2012-10-02 13:53 . 2012-10-07 10:02 -------- d-----w- c:\programdata\PMB Files
2012-10-02 13:53 . 2012-10-02 13:53 -------- d-----w- c:\program files (x86)\Pando Networks
2012-10-01 14:57 . 2012-10-01 14:58 -------- d-----w- c:\program files\eclipse
2012-10-01 14:50 . 2012-10-01 14:50 916456 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-01 14:50 . 2012-10-01 14:50 289768 ----a-w- c:\windows\system32\javaws.exe
2012-10-01 14:50 . 2012-10-01 14:50 1034216 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-01 14:50 . 2012-10-01 14:50 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2012-10-01 14:50 . 2012-10-01 14:50 189416 ----a-w- c:\windows\system32\javaw.exe
2012-10-01 14:50 . 2012-10-01 14:50 188904 ----a-w- c:\windows\system32\java.exe
2012-10-01 14:48 . 2012-10-01 14:50 -------- d-----w- c:\program files\Java
2012-09-30 19:04 . 2012-09-30 19:04 -------- d-----w- c:\program files\LockHunter
2012-09-30 18:22 . 2012-09-30 18:22 -------- d-----w- c:\programdata\RELOADED
2012-09-30 17:11 . 2012-09-30 17:12 -------- d-----w- c:\programdata\Battle.net
2012-09-30 16:26 . 2012-09-30 16:26 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2012-09-30 16:25 . 2012-09-30 16:25 -------- d-----w- c:\program files\Defraggler
2012-09-30 16:19 . 2012-09-30 16:19 -------- d-----w- c:\program files (x86)\FileHippo.com
2012-09-30 16:16 . 2012-09-30 16:15 972192 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2012-09-30 16:10 . 2012-10-02 17:02 -------- d-----w- c:\program files (x86)\Common Files\Blizzard Entertainment
2012-09-30 16:10 . 2012-09-30 18:00 -------- d-----w- c:\programdata\Blizzard Entertainment
2012-09-28 08:36 . 2012-09-28 08:36 -------- d-----w- c:\program files (x86)\Microsoft Synchronization Services
2012-09-28 08:36 . 2012-10-03 18:41 -------- d-----w- c:\program files (x86)\Microsoft SQL Server Compact Edition
2012-09-28 08:36 . 2012-09-28 08:36 -------- d-----w- c:\windows\PCHEALTH
2012-09-28 08:36 . 2012-09-28 08:36 -------- d-----w- c:\program files (x86)\Microsoft Sync Framework
2012-09-28 08:35 . 2012-09-28 08:35 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2012-09-28 08:34 . 2012-09-28 08:34 -------- d-----w- c:\program files\Microsoft Office
2012-09-28 08:34 . 2012-09-28 08:34 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2012-09-28 08:34 . 2012-09-28 08:38 -------- d-----w- c:\programdata\Microsoft Help
2012-09-28 08:34 . 2012-09-28 08:34 -------- d-----r- C:\MSOCache
2012-09-28 08:13 . 2008-10-15 04:22 519000 ----a-w- c:\windows\system32\d3dx10_40.dll
2012-09-28 08:13 . 2008-10-15 04:22 452440 ----a-w- c:\windows\SysWow64\d3dx10_40.dll
2012-09-28 08:13 . 2008-10-15 04:22 2605920 ----a-w- c:\windows\system32\D3DCompiler_40.dll
2012-09-28 08:13 . 2008-10-15 04:22 2036576 ----a-w- c:\windows\SysWow64\D3DCompiler_40.dll
2012-09-28 08:13 . 2008-10-15 04:22 5631312 ----a-w- c:\windows\system32\D3DX9_40.dll
2012-09-28 08:13 . 2008-10-15 04:22 4379984 ----a-w- c:\windows\SysWow64\D3DX9_40.dll
2012-09-26 20:01 . 2012-09-26 20:04 -------- d-----w- c:\program files\Core Temp
2012-09-25 20:05 . 2012-09-25 20:05 -------- d-----w- c:\program files\GIMP 2
2012-09-25 19:59 . 2012-09-25 19:59 -------- d-----w- c:\programdata\Sony
2012-09-25 19:56 . 2012-09-25 19:56 -------- d-----w- c:\program files\Sony
2012-09-25 19:56 . 2012-09-25 19:56 -------- d-----w- c:\program files (x86)\Sony
2012-09-25 19:34 . 2012-09-25 19:34 -------- d-----w- c:\program files (x86)\Prime95
2012-09-25 19:29 . 2012-09-25 19:29 -------- d-----w- c:\windows\system32\temp
2012-09-25 19:29 . 2012-09-25 19:29 -------- d-----w- c:\programdata\PassMark
2012-09-25 19:29 . 2012-09-25 19:29 -------- d-----w- c:\program files\BurnInTest
2012-09-24 13:59 . 2012-09-24 13:59 -------- d-----w- c:\program files (x86)\Geeks3D
2012-09-24 13:16 . 2012-10-06 17:42 -------- d-----w- c:\program files (x86)\Microsoft
2012-09-24 13:06 . 2012-09-24 17:43 -------- d-----w- C:\Fraps
2012-09-24 13:05 . 2012-09-24 13:05 -------- d-----w- c:\program files (x86)\uTorrent
2012-09-24 12:18 . 2012-10-06 17:52 -------- d-----w- c:\program files (x86)\MSI Afterburner
2012-09-24 12:17 . 2012-09-24 12:17 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-09-24 12:14 . 2012-10-05 14:27 -------- d-----w- c:\windows\system32\appmgmt
2012-09-23 19:27 . 2012-09-23 19:27 -------- d-----w- c:\program files\CCleaner
2012-09-23 18:22 . 2012-09-23 18:22 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-09-23 18:22 . 2012-09-23 18:22 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2012-09-23 18:22 . 2012-09-23 18:33 -------- d-----w- c:\programdata\DAEMON Tools Lite
2012-09-23 13:59 . 2012-09-28 06:31 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2012-09-23 13:59 . 2012-09-28 06:31 -------- d-----w- c:\program files\Microsoft Security Client
2012-09-23 10:27 . 2012-09-23 10:27 -------- d-----w- C:\ATI
2012-09-23 10:23 . 2012-09-23 10:27 -------- d-----w- c:\programdata\DriverGenius
2012-09-23 10:23 . 2012-09-23 10:23 86016 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-09-23 10:23 . 2012-09-23 10:23 262144 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-09-23 10:23 . 2012-09-23 10:23 -------- d-----w- c:\program files (x86)\Driver-Soft
2012-09-23 10:22 . 2012-09-23 10:22 -------- d-----w- c:\windows\SysWow64\Futuremark
2012-09-23 10:22 . 2004-10-25 18:02 21664 ----a-w- c:\windows\SysWow64\drivers\Entech.sys
2012-09-23 10:22 . 2004-06-22 13:44 5632 ----a-w- c:\windows\SysWow64\drivers\Entech64.sys
2012-09-23 10:22 . 2001-11-19 17:05 3972 ----a-w- c:\windows\SysWow64\drivers\PciBus.sys
2012-09-23 10:22 . 2012-09-23 10:22 -------- d-----w- c:\program files (x86)\Futuremark
2012-09-23 08:20 . 2012-08-22 18:12 1913200 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-09-23 08:20 . 2012-08-22 18:12 376688 ----a-w- c:\windows\system32\drivers\netio.sys
2012-09-23 08:20 . 2012-08-22 18:12 288624 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-09-23 08:20 . 2012-08-22 18:12 950128 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-09-23 08:20 . 2012-07-04 20:26 41472 ----a-w- c:\windows\system32\drivers\RNDISMP.sys
2012-09-23 08:20 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll
2012-09-23 08:20 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2012-09-23 08:18 . 2012-09-23 08:19 -------- d-----w- c:\program files (x86)\CrystalDiskInfo
2012-09-23 01:51 . 2012-09-22 19:53 -------- d-----w- c:\program files\CPUID
2012-09-23 01:45 . 2012-09-23 01:45 -------- d-----w- c:\programdata\ATI
2012-09-23 01:33 . 2012-10-06 19:07 -------- d-----w- c:\windows\Panther
2012-09-23 01:30 . 2012-09-23 01:30 -------- d-----w- c:\program files (x86)\AMD APP
2012-09-23 01:30 . 2012-09-23 01:30 -------- d-----w- c:\program files\Common Files\ATI Technologies
2012-09-23 01:30 . 2012-09-23 01:30 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2012-09-23 01:30 . 2012-09-23 01:30 -------- d-----w- c:\programdata\AMD
2012-09-23 01:30 . 2010-02-18 07:18 46136 ----a-w- c:\windows\system32\drivers\amdiox64.sys
2012-09-23 01:30 . 2012-09-23 01:30 -------- d-----w- c:\program files (x86)\ATI Technologies
2012-09-23 01:28 . 2012-09-18 22:58 9308616 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{24F1E96B-096B-4A66-B296-BDD766FF0ED9}\mpengine.dll
2012-09-23 01:28 . 2012-01-31 12:44 279656 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-22 21:44 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2012-09-22 21:44 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2012-09-22 20:10 . 2012-09-22 20:10 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-09-22 20:10 . 2012-09-22 20:10 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2012-08-30 20:03 . 2012-08-30 20:03 228768 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2012-08-30 20:03 . 2012-03-20 18:44 128456 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2012-08-30 13:18 . 2012-08-30 13:18 71680 ----a-w- c:\windows\system32\frapsv64.dll
2012-08-30 13:18 . 2012-08-30 13:18 65536 ----a-w- c:\windows\SysWow64\frapsvid.dll
2012-07-28 04:09 . 2012-07-28 04:09 5538984 ----a-w- c:\windows\SysWow64\atiumdag.dll
2012-07-28 04:07 . 2012-07-28 04:07 10278912 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2012-07-28 03:43 . 2012-07-28 03:43 70144 ----a-w- c:\windows\system32\coinst_8.982.dll
2012-07-28 03:19 . 2012-07-28 03:19 24935424 ----a-w- c:\windows\system32\atio6axx.dll
2012-07-28 02:50 . 2012-07-28 02:50 20546560 ----a-w- c:\windows\SysWow64\atioglxx.dll
2012-07-28 02:15 . 2012-07-28 02:15 163840 ----a-w- c:\windows\system32\atiapfxx.exe
2012-07-28 02:15 . 2012-07-28 02:15 931328 ----a-w- c:\windows\SysWow64\aticfx32.dll
2012-07-28 02:13 . 2012-07-28 02:13 1100288 ----a-w- c:\windows\system32\aticfx64.dll
2012-07-28 02:10 . 2012-07-28 02:10 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
2012-07-28 02:10 . 2012-07-28 02:10 534528 ----a-w- c:\windows\system32\atieclxx.exe
2012-07-28 02:09 . 2012-07-28 02:09 239616 ----a-w- c:\windows\system32\atiesrxx.exe
2012-07-28 02:08 . 2012-07-28 02:08 120320 ----a-w- c:\windows\system32\atitmm64.dll
2012-07-28 02:08 . 2012-07-28 02:08 21504 ----a-w- c:\windows\system32\atimuixx.dll
2012-07-28 02:07 . 2012-07-28 02:07 59392 ----a-w- c:\windows\system32\atiedu64.dll
2012-07-28 02:07 . 2012-07-28 02:07 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2012-07-28 02:07 . 2012-07-28 02:07 6430208 ----a-w- c:\windows\SysWow64\atidxx32.dll
2012-07-28 01:51 . 2012-07-28 01:51 7052288 ----a-w- c:\windows\system32\atidxx64.dll
2012-07-28 01:41 . 2012-07-28 01:41 4266496 ----a-w- c:\windows\system32\atiumd6a.dll
2012-07-28 01:35 . 2012-07-28 01:35 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2012-07-28 01:35 . 2012-07-28 01:35 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2012-07-28 01:35 . 2012-07-28 01:35 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2012-07-28 01:35 . 2012-07-28 01:35 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
2012-07-28 01:34 . 2012-07-28 01:34 16034304 ----a-w- c:\windows\system32\aticaldd64.dll
2012-07-28 01:32 . 2012-07-28 01:32 4751872 ----a-w- c:\windows\SysWow64\atiumdva.dll
2012-07-28 01:30 . 2012-07-28 01:30 13605888 ----a-w- c:\windows\SysWow64\aticaldd.dll
2012-07-28 01:25 . 2012-07-28 01:25 6676480 ----a-w- c:\windows\system32\atiumd64.dll
2012-07-28 01:15 . 2012-07-28 01:15 540160 ----a-w- c:\windows\system32\atiadlxx.dll
2012-07-28 01:15 . 2012-07-28 01:15 368640 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2012-07-28 01:15 . 2012-07-28 01:15 17920 ----a-w- c:\windows\system32\atig6pxx.dll
2012-07-28 01:15 . 2012-07-28 01:15 14848 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2012-07-28 01:15 . 2012-07-28 01:15 14848 ----a-w- c:\windows\system32\atiglpxx.dll
2012-07-28 01:15 . 2012-07-28 01:15 41984 ----a-w- c:\windows\system32\atig6txx.dll
2012-07-28 01:14 . 2012-07-28 01:14 33280 ----a-w- c:\windows\SysWow64\atigktxx.dll
2012-07-28 01:14 . 2012-07-28 01:14 368640 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2012-07-28 01:13 . 2012-07-28 01:13 129536 ----a-w- c:\windows\system32\atiuxp64.dll
2012-07-28 01:13 . 2012-07-28 01:13 109568 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2012-07-28 01:13 . 2012-07-28 01:13 103936 ----a-w- c:\windows\system32\atiu9p64.dll
2012-07-28 01:13 . 2012-07-28 01:13 83456 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2012-07-28 01:12 . 2012-07-28 01:12 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2012-07-28 01:08 . 2012-07-28 01:08 56320 ----a-w- c:\windows\system32\atimpc64.dll
2012-07-28 01:08 . 2012-07-28 01:08 56320 ----a-w- c:\windows\system32\amdpcom64.dll
2012-07-28 01:08 . 2012-07-28 01:08 56832 ----a-w- c:\windows\SysWow64\atimpc32.dll
2012-07-28 01:08 . 2012-07-28 01:08 56832 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2012-07-27 20:47 . 2012-07-27 20:47 187392 ----a-w- c:\windows\system32\clinfo.exe
2012-07-27 20:47 . 2012-07-27 20:47 75776 ----a-w- c:\windows\system32\OpenVideo64.dll
2012-07-27 20:47 . 2012-07-27 20:47 65024 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2012-07-27 20:47 . 2012-07-27 20:47 63488 ----a-w- c:\windows\system32\OVDecode64.dll
2012-07-27 20:47 . 2012-07-27 20:47 56320 ----a-w- c:\windows\SysWow64\OVDecode.dll
2012-07-27 20:46 . 2012-07-27 20:46 16464896 ----a-w- c:\windows\system32\amdocl64.dll
2012-07-27 20:46 . 2012-07-27 20:46 13013504 ----a-w- c:\windows\SysWow64\amdocl.dll
2012-07-27 20:44 . 2012-07-27 20:44 54784 ----a-w- c:\windows\system32\OpenCL.dll
2012-07-27 20:44 . 2012-07-27 20:44 50176 ----a-w- c:\windows\SysWow64\OpenCL.dll
2012-07-26 17:08 . 2012-07-26 17:08 862664 ----a-w- c:\windows\SysWow64\msvcr110.dll
2012-07-26 17:08 . 2012-07-26 17:08 837072 ----a-w- c:\windows\SysWow64\vcamp110d.dll
2012-07-26 17:08 . 2012-07-26 17:08 82888 ----a-w- c:\windows\SysWow64\mfcm110u.dll
2012-07-26 17:08 . 2012-07-26 17:08 82888 ----a-w- c:\windows\SysWow64\mfcm110.dll
2012-07-26 17:08 . 2012-07-26 17:08 8234952 ----a-w- c:\windows\SysWow64\mfc110ud.dll
2012-07-26 17:08 . 2012-07-26 17:08 821200 ----a-w- c:\windows\SysWow64\msvcp110d.dll
2012-07-26 17:08 . 2012-07-26 17:08 8164296 ----a-w- c:\windows\SysWow64\mfc110d.dll
2012-07-26 17:08 . 2012-07-26 17:08 74704 ----a-w- c:\windows\SysWow64\mfc110fra.dll
2012-07-26 17:08 . 2012-07-26 17:08 74704 ----a-w- c:\windows\SysWow64\mfc110deu.dll
2012-07-26 17:08 . 2012-07-26 17:08 73680 ----a-w- c:\windows\SysWow64\mfc110esn.dll
2012-07-26 17:08 . 2012-07-26 17:08 729560 ----a-w- c:\windows\SysWow64\vccorlib110d.dll
2012-07-26 17:08 . 2012-07-26 17:08 72656 ----a-w- c:\windows\SysWow64\mfc110ita.dll
2012-07-26 17:08 . 2012-07-26 17:08 70608 ----a-w- c:\windows\SysWow64\mfc110rus.dll
2012-07-26 17:08 . 2012-07-26 17:08 64976 ----a-w- c:\windows\SysWow64\mfc110enu.dll
2012-07-26 17:08 . 2012-07-26 17:08 53712 ----a-w- c:\windows\SysWow64\mfc110jpn.dll
2012-07-26 17:08 . 2012-07-26 17:08 534480 ----a-w- c:\windows\SysWow64\msvcp110.dll
2012-07-26 17:08 . 2012-07-26 17:08 53200 ----a-w- c:\windows\SysWow64\mfc110kor.dll
2012-07-26 17:08 . 2012-07-26 17:08 46032 ----a-w- c:\windows\SysWow64\mfc110cht.dll
2012-07-26 17:08 . 2012-07-26 17:08 46032 ----a-w- c:\windows\SysWow64\mfc110chs.dll
2012-07-26 17:08 . 2012-07-26 17:08 4446152 ----a-w- c:\windows\SysWow64\mfc110u.dll
2012-07-26 17:08 . 2012-07-26 17:08 4411848 ----a-w- c:\windows\SysWow64\mfc110.dll
2012-07-26 17:08 . 2012-07-26 17:08 320976 ----a-w- c:\windows\SysWow64\vcamp110.dll
2012-07-26 17:08 . 2012-07-26 17:08 251864 ----a-w- c:\windows\SysWow64\vccorlib110.dll
2012-07-26 17:08 . 2012-07-26 17:08 1678792 ----a-w- c:\windows\SysWow64\msvcr110d.dll
2012-07-26 17:08 . 2012-07-26 17:08 153536 ----a-w- c:\windows\SysWow64\atl110.dll
2012-07-26 17:08 . 2012-07-26 17:08 144848 ----a-w- c:\windows\SysWow64\vcomp110d.dll
2012-07-26 17:08 . 2012-07-26 17:08 115656 ----a-w- c:\windows\SysWow64\vcomp110.dll
2012-07-26 17:08 . 2012-07-26 17:08 111560 ----a-w- c:\windows\SysWow64\mfcm110d.dll
2012-07-26 17:08 . 2012-07-26 17:08 110544 ----a-w- c:\windows\SysWow64\mfcm110ud.dll
2012-07-26 13:22 . 2012-07-26 13:22 997336 ----a-w- c:\windows\system32\vccorlib110d.dll
2012-07-26 13:22 . 2012-07-26 13:22 90056 ----a-w- c:\windows\system32\mfcm110u.dll
2012-07-26 13:22 . 2012-07-26 13:22 90056 ----a-w- c:\windows\system32\mfcm110.dll
2012-07-26 13:22 . 2012-07-26 13:22 828872 ----a-w- c:\windows\system32\msvcr110.dll
2012-07-26 13:22 . 2012-07-26 13:22 74704 ----a-w- c:\windows\system32\mfc110fra.dll
2012-07-26 13:22 . 2012-07-26 13:22 74704 ----a-w- c:\windows\system32\mfc110deu.dll
2012-07-26 13:22 . 2012-07-26 13:22 73680 ----a-w- c:\windows\system32\mfc110esn.dll
2012-07-26 13:22 . 2012-07-26 13:22 72656 ----a-w- c:\windows\system32\mfc110ita.dll
2012-07-26 13:22 . 2012-07-26 13:22 70608 ----a-w- c:\windows\system32\mfc110rus.dll
2012-07-26 13:22 . 2012-07-26 13:22 661448 ----a-w- c:\windows\system32\msvcp110.dll
2012-07-26 13:22 . 2012-07-26 13:22 64976 ----a-w- c:\windows\system32\mfc110enu.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-08-28 3671904]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-07-13 17418928]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-09-07 43608]
"ASUS AiChargerPlus Execute"="c:\program files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe" [2010-11-08 465536]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-08-06 642216]
"MSIAfterburner"="c:\program files (x86)\MSI Afterburner\MSIAfterburnerWrapper.exe" [2010-06-07 44344]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 AODService;AODService;c:\program files (x86)\AMD\OverDrive\AODAssist.exe [2012-06-25 136648]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-08 123856]
R3 ALSysIO;ALSysIO;c:\users\CALLER\AppData\Local\Temp\ALSysIO64.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys [2010-08-16 19936]
R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys [2010-08-16 13280]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 20992]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
S0 AiChargerPlus;ASUS Charger Plus Driver;c:\windows\system32\DRIVERS\AiChargerPlus.sys [2010-11-08 14464]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys [2011-03-04 78976]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys [2011-03-04 38528]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-09-23 283200]
S1 VDiskBus;ASUS Disk Unlocker;c:\windows\system32\DRIVERS\VDiskBus64.sys [2010-09-21 43136]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-07-28 239616]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-08-06 361984]
S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888]
S2 AODDriver4.2.0;AODDriver4.2.0;c:\program files (x86)\AMD\OverDrive\amd64\AODDriver2.sys [2012-06-25 57512]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe [2011-06-13 922240]
S2 ASDiskUnlocker;ASDiskUnlocker;c:\program files (x86)\ASUS\Disk Unlocker\ASPFSVS64.exe [2010-12-02 258688]
S2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [2010-12-02 915584]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [2010-10-21 586880]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-07 676936]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2012-07-28 10278912]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2012-07-28 368640]
S3 ASFLTDrv.sys;ASFLTDrv.sys;c:\program files (x86)\ASUS\Disk Unlocker\ASFLTDrv64.sys [2010-09-16 16512]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys [2011-09-14 129000]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys [2011-09-14 394216]
S3 ASUSFILTER;ASUSFILTER;SysWow64\drivers\ASUSFILTER.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-05-14 96896]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-07 25928]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-08-23 565352]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2010-12-16 47232]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-19 11613288]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-09-12 1289704]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyServer = http=;ftp=;https=;
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~3\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~3\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.1.254 10.0.0.1
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_278_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_278_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG15.00.00.01PROFESSIONAL"="9165A702C04FEC7FF384699AC2C0292F5D608A9B81DE3E8B32789075B772FAAB1717E969EEDCB32C7842286093EC4220A0F4CC0890841CE3602B9FC37D0BF0AC3FC01D6F61B3DDF4CA1F6FEBFB12B4B5E5347602247DC66C3445E8143DC6CCF68A8676992CB8D8367C8A89786E74D58FEEFD8C1AB28D1DAABE3349670A05199479804C802687731F1FE968D1258BDEA0FE22BA7275A7E17797D244D640D63E6394B91D4F696F63B14C96A2D99A816D31DEE8CCC0E9F4BAFDD777020DFD818E1665B2854755F0BF451F5DED0610B682DDDC8A354EFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74C5D575E7D6A3B9808A6171C11EC38DE3D9DB7CE019D40AA5CA2D97226D213B555C63CB6D2C69D18216C1CD68ABB25858EB7EC97606B978046E1334E9BA6750F7DDF528C5B92DEB881B11BE5CA7B098C15C23443283B8EB923D1CAC124B18BBF41F89BA4044B8824FBB343DF1D13373F7A80E51E9BDF8213EE92216F1E07E53E520B537199A21D6C7EC9AB9B956721E6834D9689B38FEFAE5F1E676287CCB0257FD0E5C63F5098450911A0D91CE02CF383C30ECDBC834B534231030AB12E8B3426C879DB6B916588B26921B8EC6DB376E645C814D7797AEB74CE8DBAC3D98ACEBC35E0CD6925E53223F5E04016FB04A4AAF7786978B2D9886ABCD3AA3681357E4B20291DD7CDEEE3189F4758FC8261D8E0C38043E875B6592B06D8F5D7DB096E6C518FAD2AD34963E214704FD8F87F103258F9F5458BD5375178519C4925F4EDD1DA8649A584B2176940AAD5365C8A6DD523B0BCFE41ED9C0EA5A600021B5E71C08E369AE5AC5B8D245BFA80F32D1FB51CDBA635DA6928A9A2E2F6E9C97F9B120F82F6B3D9A2E878A1DB17CA45EFCE53667B8EE2EF5AA59E674D1304BF9AF8892A93D807443C73AA817DEB12342DA1D3ABBE532BAC6BF965C7BF01DE54B5B63893E01E6E3CD4091FF842999599F190EAF4A50F5851FC2906C25F7A6C4F2089A25ECC3DA52BCDA9F0536D72FBA74F896B62F7931AF2EDB0B1EB0F6C06C82D9871327EDFCDD18A4C62EC06FD4EDFD86D52A43C6481FA27003AE8FBF7E52F32006ECB61E56BC1F0D7D7B5D9777A1DA794BA82C1BB86258F7717F61374ABC40BD00C7CA461E561EE2A5A34F7CF52085948E8D61884818115F0616485E85A9E150E5BA6BA180AEBF1949681B5A90AA38DC4C08E14DF33F52B355A15CA16D927B2AF17455C0508F06FDB5D4AA95C3CC0E73E4EAD51A23B3B468564FE9DE9759A4DA299E18357F4D1DEB8A3D13174E48713D93EC82B55A25EDF138530F98C5C8C4DC5E21E6FF0C8463B5882EA6B30E6753B32628B4233513FF58569C4245622E1A0ED97AE24E85F59035C3700BE0307D810D4AF337C2F98140A775FF1A1D4BDD4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files (x86)\ASUS\AI Suite II\AsRoutineController.exe
c:\program files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe
c:\program files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
c:\program files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
c:\program files (x86)\ASUS\AI Suite II\AI Suite II.exe
c:\program files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
.
**************************************************************************
.
Celkový čas: 2012-10-07 12:14:21 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-10-07 10:14
ComboFix2.txt 2012-10-06 21:26
.
Před spuštěním: Volných bajtů: 105 784 205 312
Po spuštění: Volných bajtů: 105 454 559 232
.
- - End Of File - - D86A189468F31640935ED083201FA84F

Nový HJT

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:19:03, on 7.10.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Users\CALLER\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\CALLER\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\CALLER\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\CALLER\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\CALLER\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\CALLER\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\HJT\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=;ftp=;https=;
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [ASUS AiChargerPlus Execute] C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [MSIAfterburner] "C:\Program Files (x86)\MSI Afterburner\MSIAfterburnerWrapper.exe" /s
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AODService - Unknown owner - C:\Program Files (x86)\AMD\OverDrive\AODAssist.exe
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe
O23 - Service: ASDiskUnlocker - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\Disk Unlocker\ASPFSVS64.exe
O23 - Service: ASUS HM Com Service (asHmComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe
O23 - Service: ASUS System Control Service (AsSysCtrlService) - Unknown owner - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8189 bytes