PC-HELP.CZ

Velka zatez procesoru zasekavani PC
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:10:30, on 20.10.2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\pdfconverter.com\FreePDF Creator\itFPCPrnDisp.exe
C:\Program Files\PDF24\pdf24.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Twonky\TwonkyServer\twonkytray.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {EEE6C35D-6118-11DC-9C72-001320C79847} - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.29.1\bh\BabylonToolbar.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.29.1\BabylonToolbarTlbr.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Free PDF Print Dispatcher] C:\Program Files\pdfconverter.com\FreePDF Creator\itFPCPrnDisp.exe
O4 - HKLM\..\Run: [PDFPrint] C:\Program Files\PDF24\pdf24.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Prdelka\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6\ICQ.exe" silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - Global Startup: MediaManager Server.lnk = C:\Program Files\Twonky\TwonkyServer\twonkytray.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: TwonkyProxy - Unknown owner - C:\Program Files\Twonky\TwonkyServer\twonkyproxy.exe
O23 - Service: TwonkyServer - PacketVideo - C:\Program Files\Twonky\TwonkyServer\twonkystarter.exe
O23 - Service: TwonkyWebDav - Unknown owner - C:\Program Files\Twonky\TwonkyServer\twonkywebdav.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 9328 bytes

Odinstaluj:
BabylonToolbar
ICQToolBar
DAEMON Tools Toolbar
SweetIM Toolbar

Fixni:



Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

===================================================

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.65.1.1000
www.malwarebytes.org

Verze databáze: v2012.10.20.07

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Prdelka :: PRDELKA-PC [administrátor]

Ochrana: Povolena

20.10.2012 18:26:36
mbam-log-2012-10-20 (18-38-51).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 194227
Uplynulý čas: 11 minut, 40 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 2
C:\Users\Prdelka\Downloads\GotClip_Setup (1).exe (PUP.Adbundler) -> Žádná instrukce nebyla provedena.
C:\Users\Prdelka\Downloads\GotClip_Setup.exe (PUP.Adbundler) -> Žádná instrukce nebyla provedena.

(konec)

Znovu spusť MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je označen pro odstranění, stačí restartovat počítač.

21:09:41.0208 4452 TDSS rootkit removing tool 2.8.13.0 Oct 12 2012 17:26:47
21:09:41.0973 4452 ============================================================
21:09:41.0973 4452 Current date / time: 2012/10/20 21:09:41.0973
21:09:41.0973 4452 SystemInfo:
21:09:41.0973 4452
21:09:41.0973 4452 OS Version: 6.0.6002 ServicePack: 2.0
21:09:41.0973 4452 Product type: Workstation
21:09:41.0973 4452 ComputerName: PRDELKA-PC
21:09:41.0973 4452 UserName: Prdelka
21:09:41.0973 4452 Windows directory: C:\Windows
21:09:41.0973 4452 System windows directory: C:\Windows
21:09:41.0973 4452 Processor architecture: Intel x86
21:09:41.0973 4452 Number of processors: 1
21:09:41.0973 4452 Page size: 0x1000
21:09:41.0973 4452 Boot type: Normal boot
21:09:41.0973 4452 ============================================================
21:09:43.0907 4452 Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3C91, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000050
21:09:43.0907 4452 ============================================================
21:09:43.0907 4452 \Device\Harddisk0\DR0:
21:09:43.0907 4452 MBR partitions:
21:09:43.0907 4452 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xCDC67C1
21:09:43.0907 4452 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xCDC6800, BlocksNum 0xEB1000
21:09:43.0907 4452 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xDC79800, BlocksNum 0x31A800
21:09:43.0907 4452 ============================================================
21:09:43.0923 4452 C: <-> \Device\Harddisk0\DR0\Partition1
21:09:44.0048 4452 E: <-> \Device\Harddisk0\DR0\Partition3
21:09:44.0157 4452 F: <-> \Device\Harddisk0\DR0\Partition2
21:09:44.0157 4452 ============================================================
21:09:44.0157 4452 Initialize success
21:09:44.0157 4452 ============================================================
21:09:49.0445 5448 ============================================================
21:09:49.0445 5448 Scan started
21:09:49.0445 5448 Mode: Manual;
21:09:49.0445 5448 ============================================================
21:09:51.0567 5448 ================ Scan system memory ========================
21:09:51.0567 5448 System memory - ok
21:09:51.0567 5448 ================ Scan services =============================
21:09:51.0832 5448 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys
21:09:51.0832 5448 ACPI - ok
21:09:51.0926 5448 [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
21:09:51.0926 5448 AdobeFlashPlayerUpdateSvc - ok
21:09:52.0004 5448 [ 2EDC5BBAC6C651ECE337BDE8ED97C9FB ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
21:09:52.0035 5448 adp94xx - ok
21:09:52.0066 5448 [ B84088CA3CDCA97DA44A984C6CE1CCAD ] adpahci C:\Windows\system32\drivers\adpahci.sys
21:09:52.0066 5448 adpahci - ok
21:09:52.0097 5448 [ 7880C67BCCC27C86FD05AA2AFB5EA469 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
21:09:52.0097 5448 adpu160m - ok
21:09:52.0113 5448 [ 9AE713F8E30EFC2ABCCD84904333DF4D ] adpu320 C:\Windows\system32\drivers\adpu320.sys
21:09:52.0113 5448 adpu320 - ok
21:09:52.0191 5448 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
21:09:52.0191 5448 AeLookupSvc - ok
21:09:52.0253 5448 [ 3911B972B55FEA0478476B2E777B29FA ] AFD C:\Windows\system32\drivers\afd.sys
21:09:52.0269 5448 AFD - ok
21:09:52.0300 5448 [ EF23439CDD587F64C2C1B8825CEAD7D8 ] agp440 C:\Windows\system32\drivers\agp440.sys
21:09:52.0300 5448 agp440 - ok
21:09:52.0347 5448 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
21:09:52.0347 5448 aic78xx - ok
21:09:52.0394 5448 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
21:09:52.0394 5448 ALG - ok
21:09:52.0456 5448 [ 90395B64600EBB4552E26E178C94B2E4 ] aliide C:\Windows\system32\drivers\aliide.sys
21:09:52.0456 5448 aliide - ok
21:09:52.0472 5448 [ 2B13E304C9DFDFA5EB582F6A149FA2C7 ] amdagp C:\Windows\system32\drivers\amdagp.sys
21:09:52.0472 5448 amdagp - ok
21:09:52.0503 5448 [ 0577DF1D323FE75A739C787893D300EA ] amdide C:\Windows\system32\drivers\amdide.sys
21:09:52.0503 5448 amdide - ok
21:09:52.0503 5448 [ DC487885BCEF9F28EECE6FAC0E5DDFC5 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
21:09:52.0518 5448 AmdK7 - ok
21:09:52.0534 5448 [ 0CA0071DA4315B00FC1328CA86B425DA ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
21:09:52.0534 5448 AmdK8 - ok
21:09:52.0581 5448 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
21:09:52.0581 5448 Appinfo - ok
21:09:52.0628 5448 [ 5F673180268BB1FDB69C99B6619FE379 ] arc C:\Windows\system32\drivers\arc.sys
21:09:52.0628 5448 arc - ok
21:09:52.0674 5448 [ 957F7540B5E7F602E44648C7DE5A1C05 ] arcsas C:\Windows\system32\drivers\arcsas.sys
21:09:52.0674 5448 arcsas - ok
21:09:52.0721 5448 [ F5DC168BF77572D51BE28BA261B30CB4 ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
21:09:52.0721 5448 aswFsBlk - ok
21:09:52.0784 5448 [ 31E0D16EB06D09A248AFF20C76F9091B ] aswKbd C:\Windows\system32\drivers\aswKbd.sys
21:09:52.0784 5448 aswKbd - ok
21:09:52.0830 5448 [ F76E51561562AC4105DBBE53FC99BC10 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
21:09:52.0830 5448 aswMonFlt - ok
21:09:52.0877 5448 [ B7D5E4486BA658ED08624D8084ABB830 ] aswRdr C:\Windows\system32\drivers\aswRdr.sys
21:09:52.0877 5448 aswRdr - ok
21:09:52.0924 5448 [ 30E45AF8B4D83176CA850FC9699E860B ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
21:09:52.0955 5448 aswSnx - ok
21:09:53.0002 5448 [ F04BDBCB965C05C51F4A7DE7B62063D6 ] aswSP C:\Windows\system32\drivers\aswSP.sys
21:09:53.0018 5448 aswSP - ok
21:09:53.0096 5448 [ DFE9152ABFA89BB8CFDC057409B2D4DA ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
21:09:53.0096 5448 aswTdi - ok
21:09:53.0174 5448 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
21:09:53.0174 5448 AsyncMac - ok
21:09:53.0205 5448 [ 1F05B78AB91C9075565A9D8A4B880BC4 ] atapi C:\Windows\system32\drivers\atapi.sys
21:09:53.0205 5448 atapi - ok
21:09:53.0252 5448 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:09:53.0252 5448 AudioEndpointBuilder - ok
21:09:53.0298 5448 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll
21:09:53.0298 5448 Audiosrv - ok
21:09:53.0439 5448 [ EA2D28BBE98256654397CD1F6EAEBDD8 ] Autodesk Licensing Service C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
21:09:53.0439 5448 Autodesk Licensing Service - ok
21:09:53.0486 5448 [ 04AC21E821F259845BD7367CEE057290 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
21:09:53.0486 5448 avast! Antivirus - ok
21:09:53.0532 5448 [ 59629EDD214C35A01E2527AC3B8A7FB3 ] Axtmvflt C:\Windows\system32\DRIVERS\Axtmvflt.sys
21:09:53.0532 5448 Axtmvflt - ok
21:09:53.0548 5448 [ 37E23B1756ECA768656097F72C0B458D ] Axtmvmdm C:\Windows\system32\DRIVERS\Axtmvmdm.sys
21:09:53.0564 5448 Axtmvmdm - ok
21:09:53.0595 5448 [ 2C7170BE24EACC0B432EB1832FEE0DDC ] Axtmvprt C:\Windows\system32\Drivers\Axtmvprt.sys
21:09:53.0595 5448 Axtmvprt - ok
21:09:53.0673 5448 [ 8E287EB3A52FD30C999482C576F4A61B ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
21:09:53.0673 5448 b57nd60x - ok
21:09:53.0751 5448 [ 8C7CDA904C8990B6309ED109ADD3E97B ] BCM43XV C:\Windows\system32\DRIVERS\bcmwl6.sys
21:09:53.0782 5448 BCM43XV - ok
21:09:53.0829 5448 [ 8C7CDA904C8990B6309ED109ADD3E97B ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl6.sys
21:09:53.0844 5448 BCM43XX - ok
21:09:53.0907 5448 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
21:09:53.0907 5448 Beep - ok
21:09:53.0969 5448 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll
21:09:53.0969 5448 BFE - ok
21:09:54.0047 5448 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\System32\qmgr.dll
21:09:54.0047 5448 BITS - ok
21:09:54.0063 5448 blbdrive - ok
21:09:54.0125 5448 [ 35F376253F687BDE63976CCB3F2108CA ] bowser C:\Windows\system32\DRIVERS\bowser.sys
21:09:54.0125 5448 bowser - ok
21:09:54.0188 5448 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
21:09:54.0188 5448 BrFiltLo - ok
21:09:54.0203 5448 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
21:09:54.0203 5448 BrFiltUp - ok
21:09:54.0250 5448 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
21:09:54.0266 5448 Browser - ok
21:09:54.0281 5448 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
21:09:54.0281 5448 Brserid - ok
21:09:54.0312 5448 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
21:09:54.0312 5448 BrSerWdm - ok
21:09:54.0328 5448 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
21:09:54.0344 5448 BrUsbMdm - ok
21:09:54.0359 5448 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
21:09:54.0359 5448 BrUsbSer - ok
21:09:54.0390 5448 [ A820438255F37AB8BAA2BD59753A8D81 ] BthEnum C:\Windows\system32\DRIVERS\BthEnum.sys
21:09:54.0406 5448 BthEnum - ok
21:09:54.0453 5448 [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
21:09:54.0453 5448 BTHMODEM - ok
21:09:54.0484 5448 [ B8C3D9DDF85FD197C3E5F849FEF71144 ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
21:09:54.0484 5448 BthPan - ok
21:09:54.0531 5448 [ 4A74BBB2B6761789F42A6613479BDB1D ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys
21:09:54.0531 5448 BTHPORT - ok
21:09:54.0562 5448 [ A4C8377FA4A994E07075107DBE2E3DCE ] BthServ C:\Windows\System32\bthserv.dll
21:09:54.0562 5448 BthServ - ok
21:09:54.0593 5448 [ 1A407F9B707A06F55AA150F9AA072B09 ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys
21:09:54.0593 5448 BTHUSB - ok
21:09:54.0640 5448 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
21:09:54.0640 5448 cdfs - ok
21:09:54.0687 5448 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
21:09:54.0687 5448 cdrom - ok
21:09:54.0734 5448 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll
21:09:54.0734 5448 CertPropSvc - ok
21:09:54.0780 5448 [ DA8E0AFC7BAA226C538EF53AC2F90897 ] circlass C:\Windows\system32\drivers\circlass.sys
21:09:54.0780 5448 circlass - ok
21:09:54.0827 5448 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys
21:09:54.0827 5448 CLFS - ok
21:09:54.0936 5448 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:09:54.0936 5448 clr_optimization_v2.0.50727_32 - ok
21:09:55.0077 5448 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:09:55.0077 5448 clr_optimization_v4.0.30319_32 - ok
21:09:55.0139 5448 [ 99AFC3795B58CC478FBBBCDC658FCB56 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
21:09:55.0139 5448 CmBatt - ok
21:09:55.0155 5448 [ 45201046C776FFDAF3FC8A0029C581C8 ] cmdide C:\Windows\system32\drivers\cmdide.sys
21:09:55.0170 5448 cmdide - ok
21:09:55.0233 5448 [ B6E7991E3D6146C04C85CD31AF22A381 ] CnxtHdAudService C:\Windows\system32\drivers\CHDRT32.sys
21:09:55.0248 5448 CnxtHdAudService - ok
21:09:55.0404 5448 [ D8774ACE03B46C9B01A49818055F9AD4 ] Com4Qlb C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
21:09:55.0404 5448 Com4Qlb - ok
21:09:55.0482 5448 [ 6AFEF0B60FA25DE07C0968983EE4F60A ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
21:09:55.0482 5448 Compbatt - ok
21:09:55.0498 5448 COMSysApp - ok
21:09:55.0560 5448 [ 2A213AE086BBEC5E937553C7D9A2B22C ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
21:09:55.0560 5448 crcdisk - ok
21:09:55.0576 5448 [ 22A7F883508176489F559EE745B5BF5D ] Crusoe C:\Windows\system32\drivers\crusoe.sys
21:09:55.0576 5448 Crusoe - ok
21:09:55.0638 5448 [ F1E8C34892336D33EDDCDFE44E474F64 ] CryptSvc C:\Windows\system32\cryptsvc.dll
21:09:55.0638 5448 CryptSvc - ok
21:09:55.0716 5448 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll
21:09:55.0748 5448 DcomLaunch - ok
21:09:55.0810 5448 [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC C:\Windows\system32\Drivers\dfsc.sys
21:09:55.0810 5448 DfsC - ok
21:09:55.0919 5448 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe
21:09:55.0982 5448 DFSR - ok
21:09:56.0028 5448 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll
21:09:56.0044 5448 Dhcp - ok
21:09:56.0075 5448 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys
21:09:56.0075 5448 disk - ok
21:09:56.0169 5448 [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache C:\Windows\System32\dnsrslvr.dll
21:09:56.0169 5448 Dnscache - ok
21:09:56.0200 5448 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll
21:09:56.0216 5448 dot3svc - ok
21:09:56.0262 5448 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
21:09:56.0262 5448 DPS - ok
21:09:56.0340 5448 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
21:09:56.0340 5448 drmkaud - ok
21:09:56.0418 5448 [ C68AC676B0EF30CFBB1080ADCE49EB1F ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
21:09:56.0434 5448 DXGKrnl - ok
21:09:56.0496 5448 [ 5C940A174DFB2C42B9F6BA6EDC2BAA0B ] E100B C:\Windows\system32\DRIVERS\e100b325.sys
21:09:56.0496 5448 E100B - ok
21:09:56.0559 5448 [ F88FB26547FD2CE6D0A5AF2985892C48 ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
21:09:56.0559 5448 E1G60 - ok
21:09:56.0652 5448 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
21:09:56.0652 5448 EapHost - ok
21:09:56.0684 5448 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys
21:09:56.0684 5448 Ecache - ok
21:09:56.0730 5448 [ E8F3F21A71720C84BCF423B80028359F ] elxstor C:\Windows\system32\drivers\elxstor.sys
21:09:56.0730 5448 elxstor - ok
21:09:56.0793 5448 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
21:09:56.0808 5448 EMDMgmt - ok
21:09:56.0871 5448 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll
21:09:56.0886 5448 EventSystem - ok
21:09:56.0933 5448 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys
21:09:56.0933 5448 exfat - ok
21:09:56.0980 5448 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys
21:09:56.0980 5448 fastfat - ok
21:09:57.0042 5448 [ 63BDADA84951B9C03E641800E176898A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
21:09:57.0042 5448 fdc - ok
21:09:57.0105 5448 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
21:09:57.0105 5448 fdPHost - ok
21:09:57.0167 5448 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
21:09:57.0167 5448 FDResPub - ok
21:09:57.0198 5448 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
21:09:57.0198 5448 FileInfo - ok
21:09:57.0230 5448 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
21:09:57.0245 5448 Filetrace - ok
21:09:57.0261 5448 [ 6603957EFF5EC62D25075EA8AC27DE68 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
21:09:57.0261 5448 flpydisk - ok
21:09:57.0292 5448 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
21:09:57.0308 5448 FltMgr - ok
21:09:57.0386 5448 [ 452FEAAB2A8DBB42ED751754CB2594F5 ] FontCache C:\Windows\system32\FntCache.dll
21:09:57.0417 5448 FontCache - ok
21:09:57.0510 5448 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
21:09:57.0510 5448 FontCache3.0.0.0 - ok
21:09:57.0542 5448 [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
21:09:57.0557 5448 Fs_Rec - ok
21:09:57.0588 5448 [ 4E1CD0A45C50A8882616CAE5BF82F3C5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
21:09:57.0588 5448 gagp30kx - ok
21:09:57.0635 5448 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll
21:09:57.0651 5448 gpsvc - ok
21:09:57.0698 5448 [ DE15777902A5D9121857D155873A1D1B ] HBtnKey C:\Windows\system32\DRIVERS\cpqbttn.sys
21:09:57.0698 5448 HBtnKey - ok
21:09:57.0776 5448 [ 07EEE11D6E2B78122E17DB3878B4C687 ] HdAudAddService C:\Windows\system32\drivers\CHDART.sys
21:09:57.0791 5448 HdAudAddService - ok
21:09:57.0838 5448 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
21:09:57.0854 5448 HDAudBus - ok
21:09:57.0885 5448 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
21:09:57.0885 5448 HidBth - ok
21:09:57.0916 5448 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys
21:09:57.0916 5448 HidIr - ok
21:09:57.0963 5448 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\system32\hidserv.dll
21:09:57.0963 5448 hidserv - ok
21:09:58.0010 5448 [ CCA4B519B17E23A00B826C55716809CC ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
21:09:58.0010 5448 HidUsb - ok
21:09:58.0072 5448 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
21:09:58.0072 5448 hkmsvc - ok
21:09:58.0197 5448 [ A19B0BB5A7EB6DF2DD4A0711D36955EE ] HP Health Check Service c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
21:09:58.0212 5448 HP Health Check Service - ok
21:09:58.0259 5448 [ DF353B401001246853763C4B7AAA6F50 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
21:09:58.0259 5448 HpCISSs - ok
21:09:58.0322 5448 [ CFB73EFDF77D7D18242B9B12CDC72A8F ] HpqKbFiltr C:\Windows\system32\DRIVERS\HpqKbFiltr.sys
21:09:58.0337 5448 HpqKbFiltr - ok
21:09:58.0400 5448 [ 04C1DCBB226C6AE647B794833CE3CEB6 ] hpqwmiex C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
21:09:58.0400 5448 hpqwmiex - ok
21:09:58.0478 5448 [ 46D67209550973257601A533E2AC5785 ] HSFHWAZL C:\Windows\system32\DRIVERS\VSTAZL3.SYS
21:09:58.0478 5448 HSFHWAZL - ok
21:09:58.0556 5448 [ 0D7A055A840C3099C37D576573A42CD5 ] HSF_DPV C:\Windows\system32\DRIVERS\HSX_DPV.sys
21:09:58.0587 5448 HSF_DPV - ok
21:09:58.0618 5448 [ BCC074692882C056B0E1AC97F3331A02 ] HSXHWAZL C:\Windows\system32\DRIVERS\HSXHWAZL.sys
21:09:58.0634 5448 HSXHWAZL - ok
21:09:58.0712 5448 [ 0EEECA26C8D4BDE2A4664DB058A81937 ] HTTP C:\Windows\system32\drivers\HTTP.sys
21:09:58.0727 5448 HTTP - ok
21:09:58.0774 5448 [ 324C2152FF2C61ABAE92D09F3CCA4D63 ] i2omp C:\Windows\system32\drivers\i2omp.sys
21:09:58.0790 5448 i2omp - ok
21:09:58.0868 5448 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
21:09:58.0868 5448 i8042prt - ok
21:09:58.0977 5448 [ BBACE0293B73BF8C7CB591F2D06F26FA ] ialm C:\Windows\system32\DRIVERS\igdkmd32.sys
21:09:59.0070 5448 ialm - ok
21:09:59.0102 5448 [ C957BF4B5D80B46C5017BF0101E6C906 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
21:09:59.0117 5448 iaStorV - ok
21:09:59.0242 5448 [ 6F95324909B502E2651442C1548AB12F ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
21:09:59.0258 5448 IDriverT - ok
21:09:59.0336 5448 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
21:09:59.0367 5448 idsvc - ok
21:09:59.0445 5448 [ BBACE0293B73BF8C7CB591F2D06F26FA ] igfx C:\Windows\system32\DRIVERS\igdkmd32.sys
21:09:59.0460 5448 igfx - ok
21:09:59.0523 5448 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
21:09:59.0523 5448 iirsp - ok
21:09:59.0585 5448 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll
21:09:59.0616 5448 IKEEXT - ok
21:09:59.0663 5448 [ 97469037714070E45194ED318D636401 ] intelide C:\Windows\system32\drivers\intelide.sys
21:09:59.0679 5448 intelide - ok
21:09:59.0726 5448 [ 224191001E78C89DFA78924C3EA595FF ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
21:09:59.0726 5448 intelppm - ok
21:09:59.0788 5448 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
21:09:59.0788 5448 IPBusEnum - ok
21:09:59.0819 5448 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:09:59.0819 5448 IpFilterDriver - ok
21:09:59.0882 5448 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
21:09:59.0897 5448 iphlpsvc - ok
21:09:59.0897 5448 IpInIp - ok
21:09:59.0960 5448 [ 40F34F8ABA2A015D780E4B09138B6C17 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
21:09:59.0960 5448 IPMIDRV - ok
21:09:59.0991 5448 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
21:09:59.0991 5448 IPNAT - ok
21:10:00.0022 5448 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
21:10:00.0022 5448 IRENUM - ok
21:10:00.0038 5448 [ 350FCA7E73CF65BCEF43FAE1E4E91293 ] isapnp C:\Windows\system32\drivers\isapnp.sys
21:10:00.0038 5448 isapnp - ok
21:10:00.0069 5448 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
21:10:00.0084 5448 iScsiPrt - ok
21:10:00.0100 5448 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
21:10:00.0100 5448 iteatapi - ok
21:10:00.0131 5448 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
21:10:00.0131 5448 iteraid - ok
21:10:00.0209 5448 [ 213822072085B5BBAD9AF30AB577D817 ] IviRegMgr C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
21:10:00.0225 5448 IviRegMgr - ok
21:10:00.0272 5448 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
21:10:00.0287 5448 kbdclass - ok
21:10:00.0318 5448 [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
21:10:00.0318 5448 kbdhid - ok
21:10:00.0365 5448 [ A3E186B4B935905B829219502557314E ] KeyIso C:\Windows\system32\lsass.exe
21:10:00.0381 5448 KeyIso - ok
21:10:00.0443 5448 [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
21:10:00.0459 5448 KSecDD - ok
21:10:00.0552 5448 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
21:10:00.0568 5448 KtmRm - ok
21:10:00.0630 5448 [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer C:\Windows\system32\srvsvc.dll
21:10:00.0646 5448 LanmanServer - ok
21:10:00.0724 5448 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:10:00.0724 5448 LanmanWorkstation - ok
21:10:00.0786 5448 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
21:10:00.0802 5448 lltdio - ok
21:10:00.0818 5448 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
21:10:00.0833 5448 lltdsvc - ok
21:10:00.0880 5448 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
21:10:00.0896 5448 lmhosts - ok
21:10:00.0958 5448 [ A2262FB9F28935E862B4DB46438C80D2 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
21:10:00.0958 5448 LSI_FC - ok
21:10:00.0974 5448 [ 30D73327D390F72A62F32C103DAF1D6D ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
21:10:00.0974 5448 LSI_SAS - ok
21:10:01.0005 5448 [ E1E36FEFD45849A95F1AB81DE0159FE3 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
21:10:01.0020 5448 LSI_SCSI - ok
21:10:01.0067 5448 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
21:10:01.0067 5448 luafv - ok
21:10:01.0130 5448 [ 500D089CE760D83DA2B6CBA681AA9949 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
21:10:01.0130 5448 MBAMProtector - ok
21:10:01.0176 5448 [ 85B16A92B117A5A800032ECD904B86DB ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
21:10:01.0192 5448 MBAMScheduler - ok
21:10:01.0254 5448 [ 20E2469DB709FC675E655CEAA11BE312 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
21:10:01.0270 5448 MBAMService - ok
21:10:01.0317 5448 [ 4F74184920B2D6E33024409B4C5C57C1 ] McciCMService C:\Program Files\Common Files\Motive\McciCMService.exe
21:10:01.0332 5448 McciCMService - ok
21:10:01.0426 5448 [ 11F714F85530A2BD134074DC30E99FCA ] MDM C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
21:10:01.0442 5448 MDM - ok
21:10:01.0457 5448 [ 0CEA2D0D3FA284B85ED5B68365114F76 ] mdmxsdk C:\Windows\system32\DRIVERS\mdmxsdk.sys
21:10:01.0457 5448 mdmxsdk - ok
21:10:01.0520 5448 [ D153B14FC6598EAE8422A2037553ADCE ] megasas C:\Windows\system32\drivers\megasas.sys
21:10:01.0520 5448 megasas - ok
21:10:01.0629 5448 [ FAFE367D032ED82E9332B4C741A20216 ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
21:10:01.0629 5448 Microsoft Office Groove Audit Service - ok
21:10:01.0691 5448 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
21:10:01.0691 5448 MMCSS - ok
21:10:01.0707 5448 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
21:10:01.0722 5448 Modem - ok
21:10:01.0785 5448 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
21:10:01.0785 5448 monitor - ok
21:10:01.0847 5448 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
21:10:01.0847 5448 mouclass - ok
21:10:01.0878 5448 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
21:10:01.0878 5448 mouhid - ok
21:10:01.0925 5448 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
21:10:01.0925 5448 MountMgr - ok
21:10:01.0988 5448 [ 583A41F26278D9E0EA548163D6139397 ] mpio C:\Windows\system32\drivers\mpio.sys
21:10:02.0003 5448 mpio - ok
21:10:02.0019 5448 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
21:10:02.0019 5448 mpsdrv - ok
21:10:02.0081 5448 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll
21:10:02.0097 5448 MpsSvc - ok
21:10:02.0144 5448 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
21:10:02.0144 5448 Mraid35x - ok
21:10:02.0175 5448 [ 9BD4DCB5412921864A7AACDEDFBD1923 ] MREMP50 C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS
21:10:02.0175 5448 MREMP50 - ok
21:10:02.0190 5448 MREMP50a64 - ok
21:10:02.0206 5448 MREMPR5 - ok
21:10:02.0222 5448 MRENDIS5 - ok
21:10:02.0253 5448 [ 07C02C892E8E1A72D6BF35004F0E9C5E ] MRESP50 C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS
21:10:02.0253 5448 MRESP50 - ok
21:10:02.0268 5448 MRESP50a64 - ok
21:10:02.0284 5448 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
21:10:02.0284 5448 MRxDAV - ok
21:10:02.0346 5448 [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
21:10:02.0346 5448 mrxsmb - ok
21:10:02.0362 5448 [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:10:02.0378 5448 mrxsmb10 - ok
21:10:02.0393 5448 [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:10:02.0393 5448 mrxsmb20 - ok
21:10:02.0440 5448 [ 5457DCFA7C0DA43522F4D9D4049C1472 ] msahci C:\Windows\system32\drivers\msahci.sys
21:10:02.0440 5448 msahci - ok
21:10:02.0502 5448 [ 3FC82A2AE4CC149165A94699183D3028 ] msdsm C:\Windows\system32\drivers\msdsm.sys
21:10:02.0502 5448 msdsm - ok
21:10:02.0565 5448 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
21:10:02.0565 5448 MSDTC - ok
21:10:02.0596 5448 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
21:10:02.0596 5448 Msfs - ok
21:10:02.0690 5448 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
21:10:02.0690 5448 msisadrv - ok
21:10:02.0752 5448 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
21:10:02.0768 5448 MSiSCSI - ok
21:10:02.0768 5448 msiserver - ok
21:10:02.0799 5448 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
21:10:02.0799 5448 MSKSSRV - ok
21:10:02.0830 5448 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
21:10:02.0830 5448 MSPCLOCK - ok
21:10:02.0861 5448 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
21:10:02.0861 5448 MSPQM - ok
21:10:02.0892 5448 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
21:10:02.0892 5448 MsRPC - ok
21:10:02.0924 5448 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
21:10:02.0924 5448 mssmbios - ok
21:10:02.0986 5448 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
21:10:02.0986 5448 MSTEE - ok
21:10:03.0017 5448 [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup C:\Windows\system32\Drivers\mup.sys
21:10:03.0033 5448 Mup - ok
21:10:03.0064 5448 [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent C:\Windows\system32\qagentRT.dll
21:10:03.0080 5448 napagent - ok
21:10:03.0111 5448 [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
21:10:03.0126 5448 NativeWifiP - ok
21:10:03.0173 5448 [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS C:\Windows\system32\drivers\ndis.sys
21:10:03.0189 5448 NDIS - ok
21:10:03.0236 5448 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
21:10:03.0236 5448 NdisTapi - ok
21:10:03.0267 5448 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
21:10:03.0267 5448 Ndisuio - ok
21:10:03.0298 5448 [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
21:10:03.0298 5448 NdisWan - ok
21:10:03.0314 5448 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
21:10:03.0329 5448 NDProxy - ok
21:10:03.0329 5448 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
21:10:03.0345 5448 NetBIOS - ok
21:10:03.0376 5448 [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
21:10:03.0376 5448 netbt - ok
21:10:03.0392 5448 [ A3E186B4B935905B829219502557314E ] Netlogon C:\Windows\system32\lsass.exe
21:10:03.0392 5448 Netlogon - ok
21:10:03.0485 5448 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
21:10:03.0501 5448 Netman - ok
21:10:03.0532 5448 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
21:10:03.0548 5448 netprofm - ok
21:10:03.0563 5448 [ D6C4E4A39A36029AC0813D476FBD0248 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
21:10:03.0579 5448 NetTcpPortSharing - ok
21:10:03.0641 5448 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
21:10:03.0641 5448 nfrd960 - ok
21:10:03.0672 5448 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
21:10:03.0672 5448 NlaSvc - ok
21:10:03.0719 5448 [ 4A8A2AA0706B659175169DECF198E9D7 ] nmwcd C:\Windows\system32\drivers\ccdcmb.sys
21:10:03.0719 5448 nmwcd - ok
21:10:03.0797 5448 [ FD3E61831095AC62E6840D986B5A2016 ] nmwcdc C:\Windows\system32\drivers\ccdcmbo.sys
21:10:03.0797 5448 nmwcdc - ok
21:10:03.0828 5448 [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs C:\Windows\system32\drivers\Npfs.sys
21:10:03.0844 5448 Npfs - ok
21:10:03.0891 5448 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
21:10:03.0906 5448 nsi - ok
21:10:03.0922 5448 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
21:10:03.0922 5448 nsiproxy - ok
21:10:03.0969 5448 [ 6A4A98CEE84CF9E99564510DDA4BAA47 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
21:10:04.0000 5448 Ntfs - ok
21:10:04.0016 5448 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
21:10:04.0031 5448 ntrigdigi - ok
21:10:04.0062 5448 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
21:10:04.0062 5448 Null - ok
21:10:04.0078 5448 [ E69E946F80C1C31C53003BFBF50CBB7C ] nvraid C:\Windows\system32\drivers\nvraid.sys
21:10:04.0078 5448 nvraid - ok
21:10:04.0109 5448 [ 9E0BA19A28C498A6D323D065DB76DFFC ] nvstor C:\Windows\system32\drivers\nvstor.sys
21:10:04.0109 5448 nvstor - ok
21:10:04.0172 5448 [ 07C186427EB8FCC3D8D7927187F260F7 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
21:10:04.0172 5448 nv_agp - ok
21:10:04.0187 5448 NwlnkFlt - ok
21:10:04.0203 5448 NwlnkFwd - ok
21:10:04.0296 5448 [ 84DE1DD996B48B05ACE31AD015FA108A ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
21:10:04.0312 5448 odserv - ok
21:10:04.0343 5448 [ BE32DA025A0BE1878F0EE8D6D9386CD5 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
21:10:04.0359 5448 ohci1394 - ok
21:10:04.0437 5448 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
21:10:04.0437 5448 ose - ok
21:10:04.0530 5448 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc C:\Windows\system32\p2psvc.dll
21:10:04.0562 5448 p2pimsvc - ok
21:10:04.0608 5448 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc C:\Windows\system32\p2psvc.dll
21:10:04.0624 5448 p2psvc - ok
21:10:04.0686 5448 [ 0FA9B5055484649D63C303FE404E5F4D ] Parport C:\Windows\system32\DRIVERS\parport.sys
21:10:04.0702 5448 Parport - ok
21:10:04.0749 5448 [ B9C2B89F08670E159F7181891E449CD9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
21:10:04.0749 5448 partmgr - ok
21:10:04.0780 5448 [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
21:10:04.0780 5448 Parvdm - ok
21:10:04.0842 5448 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
21:10:04.0842 5448 PcaSvc - ok
21:10:04.0920 5448 [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd C:\Windows\system32\DRIVERS\pccsmcfd.sys
21:10:04.0920 5448 pccsmcfd - ok
21:10:04.0952 5448 [ 941DC1D19E7E8620F40BBC206981EFDB ] pci C:\Windows\system32\drivers\pci.sys
21:10:04.0967 5448 pci - ok
21:10:04.0998 5448 [ 1636D43F10416AEB483BC6001097B26C ] pciide C:\Windows\system32\DRIVERS\pciide.sys
21:10:04.0998 5448 pciide - ok
21:10:05.0030 5448 [ 3BB2244F343B610C29C98035504C9B75 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
21:10:05.0030 5448 pcmcia - ok
21:10:05.0108 5448 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
21:10:05.0154 5448 PEAUTH - ok
21:10:05.0295 5448 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
21:10:05.0373 5448 pla - ok
21:10:05.0420 5448 [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
21:10:05.0420 5448 PlugPlay - ok
21:10:05.0466 5448 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
21:10:05.0576 5448 PNRPAutoReg - ok
21:10:05.0622 5448 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc C:\Windows\system32\p2psvc.dll
21:10:05.0622 5448 PNRPsvc - ok
21:10:05.0669 5448 [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
21:10:05.0685 5448 PolicyAgent - ok
21:10:05.0747 5448 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
21:10:05.0747 5448 PptpMiniport - ok
21:10:05.0825 5448 [ 0E3CEF5D28B40CF273281D620C50700A ] Processor C:\Windows\system32\drivers\processr.sys
21:10:05.0825 5448 Processor - ok
21:10:05.0872 5448 [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc C:\Windows\system32\profsvc.dll
21:10:05.0872 5448 ProfSvc - ok
21:10:05.0888 5448 [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe
21:10:05.0903 5448 ProtectedStorage - ok
21:10:05.0934 5448 [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched C:\Windows\system32\DRIVERS\pacer.sys
21:10:05.0934 5448 PSched - ok
21:10:05.0997 5448 [ FEFFCFDC528764A04C8ED63D5FA6E711 ] PxHelp20 C:\Windows\system32\Drivers\PxHelp20.sys
21:10:05.0997 5448 PxHelp20 - ok

21:10:06.0059 5448 [ CCDAC889326317792480C0A67156A1EC ] ql2300 C:\Windows\system32\drivers\ql2300.sys
21:10:06.0106 5448 ql2300 - ok
21:10:06.0137 5448 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
21:10:06.0137 5448 ql40xx - ok
21:10:06.0184 5448 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
21:10:06.0200 5448 QWAVE - ok
21:10:06.0262 5448 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
21:10:06.0262 5448 QWAVEdrv - ok
21:10:06.0387 5448 [ E642B131FB74CAF4BB8A014F31113142 ] R300 C:\Windows\system32\DRIVERS\atikmdag.sys
21:10:06.0449 5448 R300 - ok
21:10:06.0480 5448 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
21:10:06.0480 5448 RasAcd - ok
21:10:06.0496 5448 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
21:10:06.0512 5448 RasAuto - ok
21:10:06.0574 5448 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
21:10:06.0590 5448 Rasl2tp - ok
21:10:06.0621 5448 [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan C:\Windows\System32\rasmans.dll
21:10:06.0636 5448 RasMan - ok
21:10:06.0652 5448 [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
21:10:06.0652 5448 RasPppoe - ok
21:10:06.0683 5448 [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
21:10:06.0699 5448 RasSstp - ok
21:10:06.0730 5448 [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
21:10:06.0730 5448 rdbss - ok
21:10:06.0746 5448 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
21:10:06.0761 5448 RDPCDD - ok
21:10:06.0824 5448 [ E8BD98D46F2ED77132BA927FCCB47D8B ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
21:10:06.0839 5448 rdpdr - ok
21:10:06.0855 5448 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
21:10:06.0870 5448 RDPENCDD - ok
21:10:06.0933 5448 [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
21:10:06.0933 5448 RDPWD - ok
21:10:07.0011 5448 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
21:10:07.0011 5448 RemoteAccess - ok
21:10:07.0042 5448 [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry C:\Windows\system32\regsvc.dll
21:10:07.0042 5448 RemoteRegistry - ok
21:10:07.0073 5448 [ 7EC90C316177BA3F1BCE92005264B447 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
21:10:07.0073 5448 RFCOMM - ok
21:10:07.0136 5448 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
21:10:07.0136 5448 RpcLocator - ok
21:10:07.0167 5448 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs C:\Windows\system32\rpcss.dll
21:10:07.0182 5448 RpcSs - ok
21:10:07.0198 5448 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
21:10:07.0198 5448 rspndr - ok
21:10:07.0229 5448 [ A3E186B4B935905B829219502557314E ] SamSs C:\Windows\system32\lsass.exe
21:10:07.0229 5448 SamSs - ok
21:10:07.0292 5448 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
21:10:07.0292 5448 sbp2port - ok
21:10:07.0370 5448 [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr C:\Windows\System32\SCardSvr.dll
21:10:07.0370 5448 SCardSvr - ok
21:10:07.0416 5448 [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule C:\Windows\system32\schedsvc.dll
21:10:07.0432 5448 Schedule - ok
21:10:07.0463 5448 [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc C:\Windows\System32\certprop.dll
21:10:07.0463 5448 SCPolicySvc - ok
21:10:07.0510 5448 [ 4339A2585708C7D9B0C0CE5AAD3DD6FF ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
21:10:07.0510 5448 sdbus - ok
21:10:07.0557 5448 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
21:10:07.0588 5448 SDRSVC - ok
21:10:07.0604 5448 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
21:10:07.0619 5448 secdrv - ok
21:10:07.0635 5448 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
21:10:07.0650 5448 seclogon - ok
21:10:07.0713 5448 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\System32\sens.dll
21:10:07.0713 5448 SENS - ok
21:10:07.0775 5448 [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum C:\Windows\system32\drivers\serenum.sys
21:10:07.0775 5448 Serenum - ok
21:10:07.0806 5448 [ C70D69A918B178D3C3B06339B40C2E1B ] Serial C:\Windows\system32\drivers\serial.sys
21:10:07.0806 5448 Serial - ok
21:10:07.0853 5448 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
21:10:07.0853 5448 sermouse - ok
21:10:07.0962 5448 [ 8988D1F32F56B3CD3F0F6C39F8A91A98 ] ServiceLayer C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
21:10:07.0994 5448 ServiceLayer - ok
21:10:08.0056 5448 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
21:10:08.0056 5448 SessionEnv - ok
21:10:08.0087 5448 [ 51CF56AA8BCC241F134B420B8F850406 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
21:10:08.0087 5448 sffdisk - ok
21:10:08.0118 5448 [ 96DED8B20C734AC41641CE275250E55D ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
21:10:08.0118 5448 sffp_mmc - ok
21:10:08.0134 5448 [ 8B08CAB1267B2C377883FC9E56981F90 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
21:10:08.0150 5448 sffp_sd - ok
21:10:08.0181 5448 [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
21:10:08.0181 5448 sfloppy - ok
21:10:08.0259 5448 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
21:10:08.0259 5448 SharedAccess - ok
21:10:08.0321 5448 [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:10:08.0337 5448 ShellHWDetection - ok
21:10:08.0399 5448 [ D2A595D6EEBEEAF4334F8E50EFBC9931 ] sisagp C:\Windows\system32\drivers\sisagp.sys
21:10:08.0399 5448 sisagp - ok
21:10:08.0430 5448 [ CEDD6F4E7D84E9F98B34B3FE988373AA ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
21:10:08.0430 5448 SiSRaid2 - ok
21:10:08.0462 5448 [ DF843C528C4F69D12CE41CE462E973A7 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
21:10:08.0462 5448 SiSRaid4 - ok
21:10:08.0618 5448 [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc C:\Windows\system32\SLsvc.exe
21:10:08.0727 5448 slsvc - ok
21:10:08.0758 5448 [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify C:\Windows\system32\SLUINotify.dll
21:10:08.0758 5448 SLUINotify - ok
21:10:08.0774 5448 [ 7B75299A4D201D6A6533603D6914AB04 ] Smb C:\Windows\system32\DRIVERS\smb.sys
21:10:08.0789 5448 Smb - ok
21:10:08.0867 5448 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
21:10:08.0867 5448 SNMPTRAP - ok
21:10:08.0945 5448 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
21:10:08.0945 5448 spldr - ok
21:10:09.0008 5448 [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler C:\Windows\System32\spoolsv.exe
21:10:09.0023 5448 Spooler - ok
21:10:09.0101 5448 [ D15DA1BA189770D93EEA2D7E18F95AF9 ] sptd C:\Windows\system32\Drivers\sptd.sys
21:10:09.0101 5448 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: D15DA1BA189770D93EEA2D7E18F95AF9
21:10:09.0101 5448 sptd ( LockedFile.Multi.Generic ) - warning
21:10:09.0101 5448 sptd - detected LockedFile.Multi.Generic (1)
21:10:09.0179 5448 [ 9263C8898732E2B890F7E954E7729AB7 ] SQLWriter c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
21:10:09.0179 5448 SQLWriter - ok
21:10:09.0242 5448 [ 41987F9FC0E61ADF54F581E15029AD91 ] srv C:\Windows\system32\DRIVERS\srv.sys
21:10:09.0257 5448 srv - ok
21:10:09.0335 5448 [ FF33AFF99564B1AA534F58868CBE41EF ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
21:10:09.0335 5448 srv2 - ok
21:10:09.0351 5448 [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
21:10:09.0351 5448 srvnet - ok
21:10:09.0366 5448 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
21:10:09.0382 5448 SSDPSRV - ok
21:10:09.0429 5448 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
21:10:09.0429 5448 SstpSvc - ok
21:10:09.0476 5448 [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc C:\Windows\System32\wiaservc.dll
21:10:09.0476 5448 stisvc - ok
21:10:09.0569 5448 [ B254B1434208F280EDF3785613DCC41B ] stllssvr c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
21:10:09.0569 5448 stllssvr - ok
21:10:09.0632 5448 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
21:10:09.0632 5448 swenum - ok
21:10:09.0678 5448 [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv C:\Windows\System32\swprv.dll
21:10:09.0678 5448 swprv - ok
21:10:09.0756 5448 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
21:10:09.0756 5448 Symc8xx - ok
21:10:09.0788 5448 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
21:10:09.0788 5448 Sym_hi - ok
21:10:09.0819 5448 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
21:10:09.0819 5448 Sym_u3 - ok
21:10:09.0897 5448 [ F5D926807BD9BC0AF68F9376144DE425 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
21:10:09.0897 5448 SynTP - ok
21:10:09.0944 5448 [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain C:\Windows\system32\sysmain.dll
21:10:09.0975 5448 SysMain - ok
21:10:10.0037 5448 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:10:10.0037 5448 TabletInputService - ok
21:10:10.0084 5448 [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv C:\Windows\System32\tapisrv.dll
21:10:10.0084 5448 TapiSrv - ok
21:10:10.0146 5448 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
21:10:10.0162 5448 TBS - ok
21:10:10.0240 5448 [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
21:10:10.0287 5448 Tcpip - ok
21:10:10.0318 5448 [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
21:10:10.0334 5448 Tcpip6 - ok
21:10:10.0396 5448 [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
21:10:10.0396 5448 tcpipreg - ok
21:10:10.0427 5448 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
21:10:10.0427 5448 TDPIPE - ok
21:10:10.0458 5448 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
21:10:10.0458 5448 TDTCP - ok
21:10:10.0490 5448 [ 76B06EB8A01FC8624D699E7045303E54 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
21:10:10.0490 5448 tdx - ok
21:10:10.0521 5448 [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
21:10:10.0521 5448 TermDD - ok
21:10:10.0552 5448 [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService C:\Windows\System32\termsrv.dll
21:10:10.0583 5448 TermService - ok
21:10:10.0599 5448 [ C7230FBEE14437716701C15BE02C27B8 ] Themes C:\Windows\system32\shsvcs.dll
21:10:10.0614 5448 Themes - ok
21:10:10.0630 5448 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
21:10:10.0646 5448 THREADORDER - ok
21:10:10.0708 5448 [ 6D9AD3534A9CF7E4B86C6EAE8BC335F6 ] TPM C:\Windows\system32\drivers\tpm.sys
21:10:10.0708 5448 TPM - ok
21:10:10.0770 5448 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
21:10:10.0786 5448 TrkWks - ok
21:10:10.0848 5448 [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:10:10.0864 5448 TrustedInstaller - ok
21:10:10.0895 5448 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
21:10:10.0895 5448 tssecsrv - ok
21:10:10.0942 5448 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
21:10:10.0942 5448 tunmp - ok
21:10:10.0989 5448 [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
21:10:11.0004 5448 tunnel - ok
21:10:11.0051 5448 TwonkyProxy - ok
21:10:11.0067 5448 TwonkyServer - ok
21:10:11.0082 5448 TwonkyWebDav - ok
21:10:11.0145 5448 [ C3ADE15414120033A36C0F293D4A4121 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
21:10:11.0145 5448 uagp35 - ok
21:10:11.0176 5448 [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
21:10:11.0192 5448 udfs - ok
21:10:11.0270 5448 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
21:10:11.0270 5448 UI0Detect - ok
21:10:11.0301 5448 [ 75E6890EBFCE0841D3291B02E7A8BDB0 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
21:10:11.0301 5448 uliagpkx - ok
21:10:11.0332 5448 [ 3CD4EA35A6221B85DCC25DAA46313F8D ] uliahci C:\Windows\system32\drivers\uliahci.sys
21:10:11.0348 5448 uliahci - ok
21:10:11.0348 5448 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
21:10:11.0363 5448 UlSata - ok
21:10:11.0394 5448 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
21:10:11.0394 5448 ulsata2 - ok
21:10:11.0426 5448 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
21:10:11.0426 5448 umbus - ok
21:10:11.0504 5448 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
21:10:11.0504 5448 upnphost - ok
21:10:11.0566 5448 [ 587E643A4E2FFD9A00F114B057CEB773 ] upperdev C:\Windows\system32\DRIVERS\usbser_lowerflt.sys
21:10:11.0566 5448 upperdev - ok
21:10:11.0628 5448 [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
21:10:11.0628 5448 usbccgp - ok
21:10:11.0691 5448 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
21:10:11.0691 5448 usbcir - ok
21:10:11.0738 5448 [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
21:10:11.0738 5448 usbehci - ok
21:10:11.0769 5448 [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
21:10:11.0769 5448 usbhub - ok
21:10:11.0816 5448 [ 38DBC7DD6CC5A72011F187425384388B ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
21:10:11.0816 5448 usbohci - ok
21:10:11.0862 5448 [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
21:10:11.0862 5448 usbprint - ok
21:10:11.0925 5448 [ D575246188F63DE0ACCF6EAC5FB59E6A ] usbser C:\Windows\system32\drivers\usbser.sys
21:10:11.0925 5448 usbser - ok
21:10:11.0956 5448 [ FCA6A196D47CB972A0E4ADC0DB9CD17C ] UsbserFilt C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys
21:10:11.0956 5448 UsbserFilt - ok
21:10:11.0972 5448 [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:10:11.0972 5448 USBSTOR - ok
21:10:12.0034 5448 [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
21:10:12.0034 5448 usbuhci - ok
21:10:12.0065 5448 [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms C:\Windows\System32\uxsms.dll
21:10:12.0065 5448 UxSms - ok
21:10:12.0096 5448 [ CD88D1B7776DC17A119049742EC07EB4 ] vds C:\Windows\System32\vds.exe
21:10:12.0128 5448 vds - ok
21:10:12.0206 5448 [ 7D92BE0028ECDEDEC74617009084B5EF ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
21:10:12.0206 5448 vga - ok
21:10:12.0268 5448 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
21:10:12.0268 5448 VgaSave - ok
21:10:12.0299 5448 [ 045D9961E591CF0674A920B6BA3BA5CB ] viaagp C:\Windows\system32\drivers\viaagp.sys
21:10:12.0299 5448 viaagp - ok
21:10:12.0315 5448 [ 56A4DE5F02F2E88182B0981119B4DD98 ] ViaC7 C:\Windows\system32\drivers\viac7.sys
21:10:12.0315 5448 ViaC7 - ok
21:10:12.0346 5448 [ FD2E3175FCADA350C7AB4521DCA187EC ] viaide C:\Windows\system32\drivers\viaide.sys
21:10:12.0346 5448 viaide - ok
21:10:12.0377 5448 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys
21:10:12.0393 5448 volmgr - ok
21:10:12.0424 5448 [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
21:10:12.0424 5448 volmgrx - ok
21:10:12.0471 5448 [ 147281C01FCB1DF9252DE2A10D5E7093 ] volsnap C:\Windows\system32\drivers\volsnap.sys
21:10:12.0471 5448 volsnap - ok
21:10:12.0549 5448 [ D984439746D42B30FC65A4C3546C6829 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
21:10:12.0549 5448 vsmraid - ok
21:10:12.0611 5448 [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS C:\Windows\system32\vssvc.exe
21:10:12.0658 5448 VSS - ok
21:10:12.0689 5448 [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time C:\Windows\system32\w32time.dll
21:10:12.0705 5448 W32Time - ok
21:10:12.0783 5448 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
21:10:12.0783 5448 WacomPen - ok
21:10:12.0830 5448 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
21:10:12.0830 5448 Wanarp - ok
21:10:12.0845 5448 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
21:10:12.0845 5448 Wanarpv6 - ok
21:10:12.0892 5448 [ A3CD60FD826381B49F03832590E069AF ] wcncsvc C:\Windows\System32\wcncsvc.dll
21:10:12.0908 5448 wcncsvc - ok
21:10:12.0954 5448 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:10:12.0970 5448 WcsPlugInService - ok
21:10:12.0986 5448 [ AFC5AD65B991C1E205CF25CFDBF7A6F4 ] Wd C:\Windows\system32\drivers\wd.sys
21:10:12.0986 5448 Wd - ok
21:10:13.0032 5448 [ B6F0A7AD6D4BD325FBCD8BAC96CD8D96 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
21:10:13.0048 5448 Wdf01000 - ok
21:10:13.0064 5448 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll
21:10:13.0079 5448 WdiServiceHost - ok
21:10:13.0095 5448 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll
21:10:13.0095 5448 WdiSystemHost - ok
21:10:13.0142 5448 [ 04C37D8107320312FBAE09926103D5E2 ] WebClient C:\Windows\System32\webclnt.dll
21:10:13.0157 5448 WebClient - ok
21:10:13.0173 5448 [ 905214925A88311FCE52F66153DE7610 ] Wecsvc C:\Windows\system32\wecsvc.dll
21:10:13.0188 5448 Wecsvc - ok
21:10:13.0220 5448 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll
21:10:13.0220 5448 wercplsupport - ok
21:10:13.0235 5448 [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc C:\Windows\System32\WerSvc.dll
21:10:13.0251 5448 WerSvc - ok
21:10:13.0313 5448 [ F9AD3A5E3FD7E0BDB18B8202B0FDD4E4 ] WimFltr C:\Windows\system32\DRIVERS\wimfltr.sys
21:10:13.0329 5448 WimFltr - ok
21:10:13.0391 5448 [ 3B4522D0E750BAC8FE7AE61622A57014 ] winachsf C:\Windows\system32\DRIVERS\HSX_CNXT.sys
21:10:13.0407 5448 winachsf - ok
21:10:13.0500 5448 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
21:10:13.0500 5448 WinDefend - ok
21:10:13.0516 5448 WinHttpAutoProxySvc - ok
21:10:13.0610 5448 [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
21:10:13.0625 5448 Winmgmt - ok
21:10:13.0656 5448 [ 01874D4689C212460FBABF0ECD7CB7F7 ] WinRM C:\Windows\system32\WsmSvc.dll
21:10:13.0688 5448 WinRM - ok
21:10:13.0781 5448 [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc C:\Windows\System32\wlansvc.dll
21:10:13.0812 5448 Wlansvc - ok
21:10:13.0875 5448 [ 2E7255D172DF0B8283CDFB7B433B864E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
21:10:13.0890 5448 WmiAcpi - ok
21:10:13.0922 5448 [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
21:10:13.0922 5448 wmiApSrv - ok
21:10:13.0984 5448 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
21:10:14.0031 5448 WMPNetworkSvc - ok
21:10:14.0062 5448 [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc C:\Windows\System32\wpcsvc.dll
21:10:14.0078 5448 WPCSvc - ok
21:10:14.0140 5448 [ 396D406292B0CD26E3504FFE82784702 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
21:10:14.0140 5448 WPDBusEnum - ok
21:10:14.0202 5448 [ 0CEC23084B51B8288099EB710224E955 ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys
21:10:14.0218 5448 WpdUsb - ok
21:10:14.0405 5448 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
21:10:14.0452 5448 WPFFontCache_v0400 - ok
21:10:14.0499 5448 [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
21:10:14.0499 5448 ws2ifsl - ok
21:10:14.0514 5448 [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc C:\Windows\System32\wscsvc.dll
21:10:14.0530 5448 wscsvc - ok
21:10:14.0546 5448 WSearch - ok
21:10:14.0639 5448 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
21:10:14.0702 5448 wuauserv - ok
21:10:14.0780 5448 [ AC13CB789D93412106B0FB6C7EB2BCB6 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
21:10:14.0780 5448 WUDFRd - ok
21:10:14.0795 5448 [ 575A4190D989F64732119E4114045A4F ] wudfsvc C:\Windows\System32\WUDFSvc.dll
21:10:14.0811 5448 wudfsvc - ok
21:10:14.0873 5448 [ 88AF537264F2B818DA15479CEEAF5D7C ] XAudio C:\Windows\system32\DRIVERS\xaudio.sys
21:10:14.0873 5448 XAudio - ok
21:10:14.0904 5448 [ 15A317674A08DF26BE65164D959E9203 ] XAudioService C:\Windows\system32\DRIVERS\xaudio.exe
21:10:14.0920 5448 XAudioService - ok
21:10:14.0951 5448 ================ Scan global ===============================
21:10:14.0998 5448 [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll
21:10:15.0060 5448 [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll
21:10:15.0107 5448 [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll
21:10:15.0138 5448 [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe
21:10:15.0170 5448 [Global] - ok
21:10:15.0170 5448 ================ Scan MBR ==================================
21:10:15.0170 5448 [ A7923A214EBA807C0B2D5B8104482614 ] \Device\Harddisk0\DR0
21:10:15.0981 5448 \Device\Harddisk0\DR0 - ok
21:10:15.0996 5448 ================ Scan VBR ==================================
21:10:15.0996 5448 [ C50A4DE079D40B6CC1EDF0761950ABAD ] \Device\Harddisk0\DR0\Partition1
21:10:15.0996 5448 \Device\Harddisk0\DR0\Partition1 - ok
21:10:16.0012 5448 [ 6B82944A9F2F296C20852C0FE05165DB ] \Device\Harddisk0\DR0\Partition2
21:10:16.0012 5448 \Device\Harddisk0\DR0\Partition2 - ok
21:10:16.0059 5448 [ D98CE2DD8C62EECE1DB4E33A777F2EB1 ] \Device\Harddisk0\DR0\Partition3
21:10:16.0059 5448 \Device\Harddisk0\DR0\Partition3 - ok
21:10:16.0074 5448 ============================================================
21:10:16.0074 5448 Scan finished
21:10:16.0074 5448 ============================================================
21:10:16.0090 3112 Detected object count: 1
21:10:16.0090 3112 Actual detected object count: 1
21:12:13.0433 3112 sptd ( LockedFile.Multi.Generic ) - skipped by user
21:12:13.0433 3112 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
21:12:17.0240 1572 Deinitialize success

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.65.1.1000
www.malwarebytes.org

Verze databáze: v2012.10.20.07

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Prdelka :: PRDELKA-PC [administrátor]

Ochrana: Povolena

20.10.2012 20:46:06
mbam-log-2012-10-20 (20-46-06).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 193734
Uplynulý čas: 12 minut, 40 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

ComboFix 12-10-19.01 - Prdelka 20.10.2012 21:40:25.1.1 - x86
Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1250.420.1029.18.1015.176 [GMT 2:00]
Spuštěný z: c:\users\Prdelka\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Prdelka\Documents\~WRL0002.tmp
c:\windows\system32\URTTemp
c:\windows\system32\URTTemp\regtlib.exe
F:\Autorun.inf
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-09-20 do 2012-10-20 )))))))))))))))))))))))))))))))
.
.
2012-10-20 19:54 . 2012-10-20 19:54 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-10-20 19:07 . 2012-10-20 19:07 -------- d-----w- c:\users\Prdelka\AppData\Roaming\GHISLER
2012-10-20 16:28 . 2012-10-20 16:28 -------- d-----w- c:\users\Prdelka\AppData\Local\Adobe
2012-10-20 16:24 . 2012-10-20 16:24 -------- d-----w- c:\users\Prdelka\AppData\Roaming\Malwarebytes
2012-10-20 16:24 . 2012-10-20 16:24 -------- d-----w- c:\programdata\Malwarebytes
2012-10-20 16:24 . 2012-09-29 17:54 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-10-20 16:24 . 2012-10-20 16:24 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-10-20 13:08 . 2012-10-20 13:08 -------- d-----w- c:\program files\CCleaner
2012-10-20 12:06 . 2012-10-20 12:06 388096 ----a-r- c:\users\Prdelka\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-10-20 12:06 . 2012-10-20 12:06 -------- d-----w- c:\program files\Trend Micro
2012-10-19 15:17 . 2012-10-17 00:32 6918632 ------w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{DC5C7CBB-0E93-4F0B-8C20-66581CF82695}\mpengine.dll
2012-10-10 11:38 . 2012-06-02 00:02 985088 ----a-w- c:\windows\system32\crypt32.dll
2012-10-10 11:38 . 2012-06-02 00:02 133120 ----a-w- c:\windows\system32\cryptsvc.dll
2012-10-10 11:38 . 2012-06-02 00:02 98304 ----a-w- c:\windows\system32\cryptnet.dll
2012-10-10 11:37 . 2012-08-24 15:53 172544 ----a-w- c:\windows\system32\wintrust.dll
2012-10-10 11:37 . 2012-09-13 13:28 2048 ----a-w- c:\windows\system32\tzres.dll
2012-10-10 11:34 . 2012-08-29 11:27 3602816 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-10-10 11:34 . 2012-08-29 11:27 3550080 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-10-09 15:06 . 2012-10-09 15:08 -------- d-----w- c:\program files\PDF24
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-17 12:42 . 2012-08-17 05:32 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-17 12:42 . 2012-08-17 05:32 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-08-21 09:13 . 2012-05-12 09:26 729752 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-08-21 09:13 . 2008-04-27 17:53 355632 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-08-21 09:13 . 2008-04-22 16:56 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-08-21 09:13 . 2012-05-12 10:08 18544 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2012-08-21 09:13 . 2008-04-22 16:56 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-08-21 09:13 . 2008-04-22 16:56 58680 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-08-21 09:13 . 2008-04-27 17:53 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-08-21 09:12 . 2012-05-12 09:25 41224 ----a-w- c:\windows\avastSS.scr
2012-08-21 09:12 . 2008-04-22 16:56 227648 ----a-w- c:\windows\system32\aswBoot.exe
2012-08-17 05:02 . 2012-08-17 05:02 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-08-21 09:12 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-10 1233920]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-18 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-09-12 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-09-12 154136]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-09-12 129560]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-03-01 472776]
"WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-10 317128]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-10-09 75008]
"QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-05-07 159744]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-04 417792]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 1164584]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728]
"Free PDF Print Dispatcher"="c:\program files\pdfconverter.com\FreePDF Creator\itFPCPrnDisp.exe" [2010-01-15 25600]
"PDFPrint"="c:\program files\PDF24\pdf24.exe" [2012-09-06 162408]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
DVD Check.lnk - c:\program files\InterVideo\DVD Check\DVDCheck.exe [2008-2-27 192512]
MediaManager Server.lnk - c:\program files\Twonky\TwonkyServer\twonkytray.exe [2012-5-3 594760]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'
.
2012-10-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-17 12:42]
.
2012-10-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-252164599-3737035288-2202357405-1006Core.job
- c:\users\Prdelka\AppData\Local\Google\Update\GoogleUpdate.exe [2009-12-25 21:22]
.
2012-10-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-252164599-3737035288-2202357405-1006UA.job
- c:\users\Prdelka\AppData\Local\Google\Update\GoogleUpdate.exe [2009-12-25 21:22]
.
2012-10-18 c:\windows\Tasks\HPCeeScheduleForPrdelka.job
- c:\program files\hewlett-packard\sdp\ceement\HPCEE.exe [2007-11-08 13:46]
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-10-20 21:54
Windows 6.0.6002 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Celkový čas: 2012-10-20 21:59:00
ComboFix-quarantined-files.txt 2012-10-20 19:58
.
Před spuštěním: Volných bajtů: 20 088 270 848
Po spuštění: Volných bajtů: 19 914 039 296
.
- - End Of File - - E8E24C3C85E4DE6F04172E280C025705

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-10-21 12:15:45
-----------------------------
12:15:45.825 OS Version: Windows 6.0.6002 Service Pack 2
12:15:45.825 Number of processors: 1 586 0x1601
12:15:45.825 ComputerName: PRDELKA-PC UserName: Prdelka
12:16:41.408 Initialize success
12:16:43.140 AVAST engine defs: 12102001
12:19:50.230 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4
12:19:50.246 Disk 0 Vendor: FUJITSU_MHY2120BH 890B Size: 114473MB BusType: 3
12:19:50.277 Disk 0 MBR read successfully
12:19:50.277 Disk 0 MBR scan
12:19:50.277 Disk 0 unknown MBR code
12:19:50.277 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 105356 MB offset 63
12:19:50.324 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 7522 MB offset 215771136
12:19:50.386 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 1589 MB offset 231184384
12:19:50.386 Disk 0 scanning sectors +234438656
12:19:50.542 Disk 0 scanning C:\Windows\system32\drivers
12:20:10.651 Service scanning
12:20:34.394 Service sptd C:\Windows\System32\Drivers\sptd.sys **LOCKED** 32
12:20:43.395 Modules scanning
12:20:53.941 Disk 0 trace - called modules:
12:20:53.972 ntkrnlpa.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x850be1f8]<<
12:20:53.988 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x852f5550]
12:20:53.988 3 CLASSPNP.SYS[8719d8b3] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-4[0x8517d390]
12:20:54.003 \Driver\atapi[0x84771680] -> IRP_MJ_CREATE -> 0x850be1f8
12:20:54.799 AVAST engine scan C:\Windows
12:20:57.186 AVAST engine scan C:\Windows\system32
12:24:04.916 AVAST engine scan C:\Windows\system32\drivers
12:24:20.672 AVAST engine scan C:\Users\Prdelka
12:39:55.221 AVAST engine scan C:\ProgramData
12:42:13.874 Scan finished successfully
12:42:48.001 Disk 0 MBR has been saved successfully to "C:\Users\Prdelka\Desktop\MBR.dat"
12:42:48.017 The log file has been saved successfully to "C:\Users\Prdelka\Desktop\aswMBR.txt

Jak to vypadá s tím zasekáváním nyní?