PC-HELP.CZ

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:41:04, on 17.11.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\SYSTEM32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
d:\Program Files\Microsoft Security Client\MsMpEng.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\System32\cisvc.exe
D:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
D:\Program Files\Java\jre7\bin\jqs.exe
D:\Program Files\Acer\Acer Updater\UpdaterService.exe
D:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
D:\WINDOWS\system32\PnkBstrA.exe
D:\WINDOWS\System32\tcpsvcs.exe
D:\WINDOWS\System32\snmp.exe
d:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
D:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
D:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
D:\WINDOWS\System32\wbem\wmiapsrv.exe
D:\WINDOWS\system32\igfxtray.exe
D:\WINDOWS\system32\igfxsrvc.exe
D:\WINDOWS\system32\hkcmd.exe
D:\WINDOWS\system32\igfxpers.exe
D:\WINDOWS\RTHDCPL.EXE
D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
D:\Program Files\Microsoft Security Client\msseces.exe
D:\Program Files\Common Files\Java\Java Update\jusched.exe
D:\Documents and Settings\Tom\Local Settings\Temp\Trojan.exe
D:\WINDOWS\system32\ctfmon.exe
D:\DOCUME~1\Tom\LOCALS~1\Temp\RtkBtMnt.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Mozilla Firefox\plugin-container.exe
D:\WINDOWS\SYSTEM32\cidaemon.exe
D:\WINDOWS\SYSTEM32\cidaemon.exe
D:\Documents and Settings\Tom\Plocha\hijackthis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - D:\Program Files\Yontoo\YontooIEClient.dll
O4 - HKLM\..\Run: [IgfxTray] D:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] D:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] D:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "D:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "D:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [MSC] "d:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "D:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] D:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [5cd8f17f4086744065eb0992a09e05a2] "D:\Documents and Settings\Tom\Local Settings\Temp\Trojan.exe" ..
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "D:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Google Update] "D:\Documents and Settings\Tom\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [5cd8f17f4086744065eb0992a09e05a2] "D:\Documents and Settings\Tom\Local Settings\Temp\Trojan.exe" ..
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: 5cd8f17f4086744065eb0992a09e05a2.exe
O4 - Startup: GameRanger.lnk.disabled
O4 - Startup: hamachi.lnk = D:\Program Files\Hamachi\hamachi.exe
O8 - Extra context menu item: Stahnou vse FlashGet3 - D:\Documents and Settings\Tom\Data aplikací\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: Stahnout FlashGet3 - D:\Documents and Settings\Tom\Data aplikací\FlashGetBHO\GetUrl.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{83A68639-7F7D-43BD-B877-9AE794E5C267}: NameServer = 10.0.0.138,10.0.0.1
O18 - Protocol: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: FileZilla Server FTP server (FileZilla Server) - Unknown owner - D:\xampp\FileZillaFTP\FileZilla server.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - D:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Live Updater Service - Acer Incorporated - D:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - D:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - D:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NMIndexingService - Unknown owner - D:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - D:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - D:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: wampapache - Apache Software Foundation - D:\wamp\bin\apache\apache2.2.22\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - D:\wamp\bin\mysql\mysql5.5.24\bin\mysqld.exe

--
End of file - 8842 bytes


Prosim o pomoc nevim si stym rady.

Fixni:
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
- Pokud používáš Firefox, klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
- Pokud používáš Chrome, nic dalšího nevybírej a dej Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(ZATÍM SÁM NIC NEMAŽ!).
Vlož sem pak obsah toho logu.

Ja už jsem to přeinstaloval ale to stejny mam na PC nějaký problémy a vir Trojan a nevim jak se ho mam zbavit.

Třeba začni tím, že budeš postupovat dle rad

Tady je ten log

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.65.1.1000
www.malwarebytes.org

Verze databáze: v2012.11.29.08

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Jakub :: JAKUB-PC [administrátor]

Ochrana: Povolena

29.11.2012 17:47:40
mbam-log-2012-11-29 (17-51-22).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 211499
Uplynulý čas: 3 minut, 22 sekund

Nalezené procesy v paměti: 1
C:\Users\Jakub\AppData\Local\Temp\Trojan.exe (Trojan.Agent.WSG) -> 2240 -> Žádná instrukce nebyla provedena.

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|5cd8f17f4086744065eb0992a09e05a2 (Trojan.Agent.WSG) -> Data: "C:\Users\Jakub\AppData\Local\Temp\Trojan.exe" .. -> Žádná instrukce nebyla provedena.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\Users\Jakub\AppData\Local\Temp\Trojan.exe (Trojan.Agent.WSG) -> Žádná instrukce nebyla provedena.

(konec)

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit
Můžeš sem pak vložit nový log z MbAM.

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

MBAM LOG :

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.65.1.1000
www.malwarebytes.org

Verze databáze: v2012.12.02.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Jakub :: JAKUB-PC [administrátor]

Ochrana: Povolena

3.12.2012 14:38:33
mbam-log-2012-12-03 (14-38-33).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 211713
Uplynulý čas: 5 minut, 2 sekund

Nalezené procesy v paměti: 1
C:\Users\Jakub\AppData\Local\Temp\Trojan.exe (Trojan.Agent.WSG) -> 2708 -> Bude smazán při restartu.

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|5cd8f17f4086744065eb0992a09e05a2 (Trojan.Agent.WSG) -> Data: "C:\Users\Jakub\AppData\Local\Temp\Trojan.exe" .. -> Umístnění do karantény a smazání se zdařilo.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\Users\Jakub\AppData\Local\Temp\Trojan.exe (Trojan.Agent.WSG) -> Bude smazán při restartu.

(konec)

TDSSKILLER LOG :

http://uloz.to/xCcHmRS/tdsskiller-2-8-15-0-03-12-2012-15-03-54-log-txt
Nešlo my to vložit do odpovědi

Rozděl to na víc příspěvků

LOG COMBOFIXU :

ComboFix 12-12-02.01 - Jakub 03.12.2012 15:22:23.1.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.5118.3771 [GMT 1:00]
Spuštěný z: c:\users\Jakub\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}
SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Jakub\AppData\Roaming\Jakublog.dat
c:\users\Jakub\AppData\Roaming\updater\updat.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-11-03 do 2012-12-03 )))))))))))))))))))))))))))))))
.
.
2012-12-03 14:30 . 2012-12-03 14:30 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-12-02 20:28 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{467B1002-9FB1-42BD-960C-7074AD0E5D45}\mpengine.dll
2012-12-01 13:08 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-11-28 21:04 . 2012-11-28 21:04 -------- d-----w- c:\users\Jakub\AppData\Roaming\Malwarebytes
2012-11-28 21:03 . 2012-11-28 21:03 -------- d-----w- c:\programdata\Malwarebytes
2012-11-28 21:03 . 2012-11-28 21:04 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-11-28 21:03 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-11-28 11:51 . 2012-11-28 11:49 972264 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6428F476-C022-40E5-A892-6245AC950CBB}\gapaengine.dll
2012-11-26 18:35 . 2012-11-26 18:35 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-11-22 21:18 . 2012-11-22 21:18 -------- d-----w- c:\users\Jakub\AppData\Roaming\Theta
2012-11-22 20:55 . 2012-11-22 20:55 189248 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-11-22 20:55 . 2012-11-22 20:55 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2012-11-22 20:55 . 2012-11-22 20:55 -------- d-----w- c:\program files (x86)\Ubisoft
2012-11-22 20:53 . 2007-05-16 15:45 4496232 ----a-w- c:\windows\system32\d3dx9_34.dll
2012-11-22 09:34 . 2012-11-22 09:34 5885632 ----a-w- c:\program files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
2012-11-21 19:32 . 2005-05-26 14:34 3767504 ----a-w- c:\windows\system32\d3dx9_26.dll
2012-11-21 19:32 . 2005-05-26 14:34 2297552 ----a-w- c:\windows\SysWow64\d3dx9_26.dll
2012-11-21 19:32 . 2005-03-18 16:19 3823312 ----a-w- c:\windows\system32\d3dx9_25.dll
2012-11-21 18:04 . 2012-11-21 18:05 -------- d-----w- c:\users\Jakub\AppData\Roaming\GameRanger
2012-11-21 18:02 . 2012-11-21 19:28 -------- d-----w- c:\program files (x86)\Microsoft Games
2012-11-19 21:24 . 2012-11-19 21:24 -------- d-----w- c:\users\Jakub\AppData\Local\Nero
2012-11-19 21:21 . 2012-11-19 21:22 -------- d-----w- c:\users\Jakub\AppData\Roaming\Nero
2012-11-19 21:15 . 2012-11-19 21:18 -------- d-----w- c:\program files (x86)\Common Files\Nero
2012-11-19 21:15 . 2012-11-19 21:21 -------- d-----w- c:\program files (x86)\Nero
2012-11-19 21:15 . 2012-11-19 21:21 -------- d-----w- c:\programdata\Nero
2012-11-19 20:00 . 2012-11-19 20:00 3123272 ----a-r- c:\windows\SysWow64\pbsvc.exe
2012-11-18 18:37 . 2012-11-18 18:37 119808 ----a-r- c:\users\Jakub\AppData\Roaming\Microsoft\Installer\{CCF298AF-9CE1-4B26-B251-486E98A34789}\icons.exe
2012-11-18 18:37 . 2012-11-18 18:37 -------- d-----w- c:\users\Jakub\AppData\Local\Apps
2012-11-17 18:40 . 2003-02-02 19:06 153088 ----a-w- c:\windows\SysWow64\UNRAR3.dll
2012-11-17 18:40 . 2002-03-06 00:00 75264 ----a-w- c:\windows\SysWow64\unacev2.dll
2012-11-17 18:40 . 2012-11-17 18:40 -------- d-----w- c:\program files (x86)\Trojan Remover
2012-11-17 18:40 . 2012-11-17 18:40 -------- d-----w- c:\users\Jakub\AppData\Roaming\Simply Super Software
2012-11-17 18:40 . 2012-11-17 18:40 -------- d-----w- c:\programdata\Simply Super Software
2012-11-14 16:47 . 2012-11-14 16:46 241664 ----a-w- c:\users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5cd8f17f4086744065eb0992a09e05a2.exe
2012-11-12 21:27 . 2012-11-12 21:27 -------- d-----w- c:\program files (x86)\Microsoft.NET
2012-11-12 16:26 . 2012-11-12 18:05 -------- d-----w- c:\users\Jakub\AppData\Roaming\Hamachi
2012-11-12 16:25 . 2012-11-12 16:25 33344 ----a-w- c:\windows\system32\drivers\hamachi.sys
2012-11-12 16:25 . 2012-11-12 16:26 -------- d-----w- c:\program files (x86)\Hamachi
2012-11-09 19:52 . 2012-11-22 18:52 -------- d-----w- c:\program files\FlatOut2
2012-11-07 21:45 . 2012-11-07 21:45 -------- d-----w- c:\program files (x86)\WinToFlash Suggestor
2012-11-07 20:37 . 2012-11-07 21:22 -------- d-----w- c:\program files (x86)\nLite
2012-11-05 20:50 . 2012-12-03 14:28 -------- d-sh--r- c:\users\Jakub\AppData\Roaming\updater
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-11-20 13:15 . 2012-09-26 15:44 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-11-20 13:15 . 2012-09-26 15:44 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-11-01 18:10 . 2012-11-01 18:11 10752 ----a-w- c:\windows\system32\E_GCINST.DLL
2012-11-01 18:10 . 2012-11-01 18:11 83968 ----a-w- c:\windows\system32\E_ID4BHJE.DLL
2012-11-01 18:10 . 2012-11-01 18:11 120320 ----a-w- c:\windows\system32\E_ILMHJE.DLL
2012-10-14 09:29 . 2012-10-14 09:29 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2012-10-14 09:29 . 2012-09-26 14:54 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-10-02 15:57 . 2012-09-28 09:52 1008640 ----a-w- c:\windows\system32\user32.dll
2012-10-02 15:57 . 2012-09-28 09:51 833024 ----a-w- c:\windows\SysWow64\user32.dll
2012-10-01 10:56 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2012-10-01 10:56 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2012-09-29 20:01 . 2012-09-29 20:01 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-09-29 19:45 . 2012-09-29 19:13 25640 ----a-w- c:\windows\gdrv.sys
2012-09-26 15:36 . 2012-09-26 15:36 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2012-09-26 15:36 . 2012-10-01 10:46 289768 ----a-w- c:\windows\system32\javaws.exe
2012-09-26 15:36 . 2012-10-01 10:46 189416 ----a-w- c:\windows\system32\javaw.exe
2012-09-26 15:36 . 2012-10-01 10:46 188904 ----a-w- c:\windows\system32\java.exe
2012-09-26 15:36 . 2012-09-26 15:13 916456 ----a-w- c:\windows\system32\deployJava1.dll
2012-09-26 15:36 . 2012-09-26 15:13 1034216 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-09-26 14:53 . 2012-09-26 14:54 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-09-18 22:58 . 2012-09-26 14:53 9308616 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{32998CC2-6D4B-4BE0-AF6F-9664A2309DF1}\mpengine.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[7] 2010-11-20 . FE70103391A64039A921DBFFF9C7AB1B . 1008128 . . [6.1.7601.17514] .. c:\windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll
[7] 2009-07-14 . 72D7B3EA16946E8F0CF7458150031CC6 . 1008640 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll
[-] 2012-10-02 . 2C353B6CE0C8D03225CAA2AF33B68D79 . 1008640 . . [6.1.7601.17514] .. c:\windows\system32\user32.dll
.
[-] 2012-10-02 . 861C4346F9281DC0380DE72C8D55D6BE . 833024 . . [6.1.7601.17514] .. c:\windows\SysWOW64\user32.dll
[7] 2010-11-20 . 5E0DB2D8B2750543CD2EBB9EA8E6CDD3 . 833024 . . [6.1.7601.17514] .. c:\windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[7] 2009-07-14 . E8B0FFC209E504CB7E79FC24E6C085F0 . 833024 . . [6.1.7600.16385] .. c:\windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{03fee850-0101-4e9e-b6d4-6fc74d3db360}"= "c:\program files (x86)\RealoreStudios\tbReal.dll" [2009-11-09 2331672]
.
[HKEY_CLASSES_ROOT\clsid\{03fee850-0101-4e9e-b6d4-6fc74d3db360}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{03fee850-0101-4e9e-b6d4-6fc74d3db360}]
2009-11-09 16:38 2331672 ----a-w- c:\program files (x86)\RealoreStudios\tbReal.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{95D51DBC-F523-11E1-8039-6ED66188709B}]
2012-10-02 17:22 71680 ----a-w- c:\program files (x86)\Probit Software\Easy Discount Pro\EasyDiscountProIE.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{FC36B0BD-27F0-4cdd-8AB1-50651EFC3EFD}]
2012-05-25 15:38 281424 ----a-w- c:\program files (x86)\WinToFlash Suggestor\WinToFlashSuggestor.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{03fee850-0101-4e9e-b6d4-6fc74d3db360}"= "c:\program files (x86)\RealoreStudios\tbReal.dll" [2009-11-09 2331672]
.
[HKEY_CLASSES_ROOT\clsid\{03fee850-0101-4e9e-b6d4-6fc74d3db360}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PCSpeedUp"="c:\program files (x86)\Zrychleni Pocitace\PCSUNotifier.exe" [2012-07-03 188680]
"DAEMON Tools Pro Agent"="c:\program files (x86)\DAEMON Tools Pro\DTAgent.exe" [2012-04-26 3111744]
"EPLTarget\P0000000000000000"="c:\windows\system32\spool\DRIVERS\x64\3\E_IATIHJE.EXE" [2012-11-01 283232]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"TrojanScanner"="c:\program files (x86)\Trojan Remover\Trjscan.exe" [2012-04-12 1239312]
.
c:\users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
5cd8f17f4086744065eb0992a09e05a2.exe [2012-11-14 241664]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-11-22 3290304]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
R3 cpuz135;cpuz135;c:\program files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys [2012-08-11 24368]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 20992]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;WatAdminSvc; [x]
R3 X6va011;X6va011;c:\windows\SysWOW64\Drivers\X6va011 [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-09-29 283200]
S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 203264]
S2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE [2012-11-01 151648]
S2 Guard.Mail.ru;Guard.Mail.ru;c:\program files (x86)\Guard-ICQ\GuardICQ.exe [2012-10-20 1564368]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-29 676936]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2012-07-13 769432]
S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
S2 PCSUService;PC Speed Up Service;c:\program files (x86)\Zrychleni Pocitace\PCSUService.exe [2012-07-03 291080]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-29 25928]
S3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-12-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-26 13:15]
.
2012-11-29 c:\windows\Tasks\PC SpeedUp Service Deactivator.job
- c:\program files (x86)\Zrychleni Pocitace\PCSUSD.exe [2012-09-29 08:32]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-09-12 1289704]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://start.icq.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: {{781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - c:\program files (x86)\ICQ7M\ICQ.exe
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\3oq2obfy.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_result ... r=1.5.3&q=
FF - ExtSQL: 2012-10-21 01:25; {800b5000-a755-47e1-992b-48a1c1357f07}; c:\users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\3oq2obfy.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
user_pref('extensions.dealply.partner', 'prob');
user_pref('extensions.dealply.channel', 'prob11');
user_pref('extensions.dealply.installId', 'v24300214892560224488092012101110540528');
user_pref('extensions.dealply.installIdSource', 'inst');
user_pref('extensions.dealply.sampleGroup', '8');
pref('extensions.shownSelectionUI',true);
pref('extensions.autoDisableScopes',0);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-DrivUpdater - c:\users\Jakub\AppData\Roaming\updater\updat.exe
WebBrowser-{03FEE850-0101-4E9E-B6D4-6FC74D3DB360} - (no file)
AddRemove-BattlEye - c:\program files\Bohemia Interactive\ArmA 2\BattlEye\UnInstallBE.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-{1AA94747-3BF6-4237-9E1A-7B3067738FE1} - c:\program files (x86)\InstallShield Installation Information\{1AA94747-3BF6-4237-9E1A-7B3067738FE1}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va011]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va011"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-12-03 15:41:39
ComboFix-quarantined-files.txt 2012-12-03 14:41
.
Před spuštěním: Volných bajtů: 110 471 417 856
Po spuštění: Volných bajtů: 113 130 192 896
.
- - End Of File - - 675F203F4AC2BAFD9167F6632AFCEA62

TDSSKILLER LOG 1 :

15:03:54.0840 2480 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
15:03:55.0042 2480 ============================================================
15:03:55.0042 2480 Current date / time: 2012/12/03 15:03:55.0042
15:03:55.0042 2480 SystemInfo:
15:03:55.0042 2480
15:03:55.0042 2480 OS Version: 6.1.7601 ServicePack: 1.0
15:03:55.0042 2480 Product type: Workstation
15:03:55.0042 2480 ComputerName: JAKUB-PC
15:03:55.0042 2480 UserName: Jakub
15:03:55.0042 2480 Windows directory: C:\Windows
15:03:55.0042 2480 System windows directory: C:\Windows
15:03:55.0042 2480 Running under WOW64
15:03:55.0042 2480 Processor architecture: Intel x64
15:03:55.0042 2480 Number of processors: 2
15:03:55.0042 2480 Page size: 0x1000
15:03:55.0042 2480 Boot type: Normal boot
15:03:55.0042 2480 ============================================================
15:03:56.0556 2480 Drive \Device\Harddisk0\DR0 - Size: 0x4A85C4DE00 (298.09 Gb), SectorSize: 0x200, Cylinders: 0xA181, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000040
15:03:56.0556 2480 ============================================================
15:03:56.0556 2480 \Device\Harddisk0\DR0:
15:03:56.0556 2480 MBR partitions:
15:03:56.0556 2480 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
15:03:56.0556 2480 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x253FB000
15:03:56.0556 2480 ============================================================
15:03:56.0571 2480 C: <-> \Device\Harddisk0\DR0\Partition2
15:03:56.0587 2480 Z: <-> \Device\Harddisk0\DR0\Partition1
15:03:56.0587 2480 ============================================================
15:03:56.0587 2480 Initialize success
15:03:56.0587 2480 ============================================================
15:03:59.0738 3300 ============================================================
15:03:59.0738 3300 Scan started
15:03:59.0738 3300 Mode: Manual;
15:03:59.0738 3300 ============================================================
15:04:00.0331 3300 ================ Scan system memory ========================
15:04:00.0331 3300 System memory - ok
15:04:00.0331 3300 ================ Scan services =============================
15:04:00.0424 3300 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
15:04:00.0424 3300 1394ohci - ok
15:04:00.0487 3300 [ B33CF4DE909A5B30F526D82053A63C8E ] ABBYY.Licensing.FineReader.Sprint.9.0 C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
15:04:00.0502 3300 ABBYY.Licensing.FineReader.Sprint.9.0 - ok
15:04:00.0534 3300 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
15:04:00.0534 3300 ACPI - ok
15:04:00.0549 3300 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
15:04:00.0549 3300 AcpiPmi - ok
15:04:00.0612 3300 [ B1EA9681502EE57F87DB71D726288A5B ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
15:04:00.0627 3300 AdobeARMservice - ok
15:04:00.0705 3300 [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
15:04:00.0705 3300 AdobeFlashPlayerUpdateSvc - ok
15:04:00.0752 3300 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
15:04:00.0752 3300 adp94xx - ok
15:04:00.0783 3300 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
15:04:00.0783 3300 adpahci - ok
15:04:00.0799 3300 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
15:04:00.0799 3300 adpu320 - ok
15:04:00.0830 3300 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
15:04:00.0830 3300 AeLookupSvc - ok
15:04:00.0877 3300 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
15:04:00.0877 3300 AFD - ok
15:04:00.0892 3300 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
15:04:00.0908 3300 agp440 - ok
15:04:00.0908 3300 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
15:04:00.0908 3300 ALG - ok
15:04:00.0924 3300 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
15:04:00.0924 3300 aliide - ok
15:04:00.0955 3300 [ D696F317BD465A602566F8E1DCCE15F7 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
15:04:00.0970 3300 AMD External Events Utility - ok
15:04:00.0986 3300 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
15:04:00.0986 3300 amdide - ok
15:04:01.0002 3300 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
15:04:01.0002 3300 AmdK8 - ok
15:04:01.0002 3300 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
15:04:01.0002 3300 AmdPPM - ok
15:04:01.0033 3300 [ 6EC6D772EAE38DC17C14AED9B178D24B ] amdsata C:\Windows\system32\drivers\amdsata.sys
15:04:01.0033 3300 amdsata - ok
15:04:01.0048 3300 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
15:04:01.0048 3300 amdsbs - ok
15:04:01.0064 3300 [ 1142A21DB581A84EA5597B03A26EBAA0 ] amdxata C:\Windows\system32\drivers\amdxata.sys
15:04:01.0064 3300 amdxata - ok
15:04:01.0095 3300 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
15:04:01.0095 3300 AppID - ok
15:04:01.0111 3300 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
15:04:01.0111 3300 AppIDSvc - ok
15:04:01.0142 3300 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
15:04:01.0142 3300 Appinfo - ok
15:04:01.0173 3300 [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt C:\Windows\System32\appmgmts.dll
15:04:01.0173 3300 AppMgmt - ok
15:04:01.0204 3300 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
15:04:01.0204 3300 arc - ok
15:04:01.0220 3300 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
15:04:01.0220 3300 arcsas - ok
15:04:01.0298 3300 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
15:04:01.0298 3300 aspnet_state - ok
15:04:01.0329 3300 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
15:04:01.0329 3300 AsyncMac - ok
15:04:01.0360 3300 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
15:04:01.0360 3300 atapi - ok
15:04:01.0501 3300 [ 52BD95CAA9CAE8977FE043E9AD6D2D0E ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys
15:04:01.0626 3300 atikmdag - ok
15:04:01.0657 3300 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
15:04:01.0672 3300 AudioEndpointBuilder - ok
15:04:01.0688 3300 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
15:04:01.0688 3300 AudioSrv - ok
15:04:01.0719 3300 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
15:04:01.0719 3300 AxInstSV - ok
15:04:01.0750 3300 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
15:04:01.0766 3300 b06bdrv - ok
15:04:01.0782 3300 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
15:04:01.0782 3300 b57nd60a - ok
15:04:01.0813 3300 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
15:04:01.0813 3300 BDESVC - ok
15:04:01.0828 3300 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
15:04:01.0828 3300 Beep - ok
15:04:01.0875 3300 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
15:04:01.0891 3300 BFE - ok
15:04:01.0922 3300 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
15:04:01.0953 3300 BITS - ok
15:04:01.0969 3300 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
15:04:01.0969 3300 blbdrive - ok
15:04:01.0984 3300 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
15:04:01.0984 3300 bowser - ok
15:04:02.0000 3300 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
15:04:02.0000 3300 BrFiltLo - ok
15:04:02.0000 3300 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
15:04:02.0000 3300 BrFiltUp - ok
15:04:02.0031 3300 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
15:04:02.0031 3300 Browser - ok
15:04:02.0062 3300 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
15:04:02.0062 3300 Brserid - ok
15:04:02.0062 3300 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
15:04:02.0062 3300 BrSerWdm - ok
15:04:02.0078 3300 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
15:04:02.0078 3300 BrUsbMdm - ok
15:04:02.0078 3300 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
15:04:02.0078 3300 BrUsbSer - ok
15:04:02.0094 3300 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
15:04:02.0094 3300 BTHMODEM - ok
15:04:02.0109 3300 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
15:04:02.0109 3300 bthserv - ok
15:04:02.0125 3300 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
15:04:02.0125 3300 cdfs - ok
15:04:02.0156 3300 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
15:04:02.0156 3300 cdrom - ok
15:04:02.0172 3300 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
15:04:02.0172 3300 CertPropSvc - ok
15:04:02.0187 3300 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
15:04:02.0187 3300 circlass - ok
15:04:02.0203 3300 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
15:04:02.0218 3300 CLFS - ok
15:04:02.0250 3300 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:04:02.0250 3300 clr_optimization_v2.0.50727_32 - ok
15:04:02.0281 3300 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
15:04:02.0281 3300 clr_optimization_v2.0.50727_64 - ok
15:04:02.0343 3300 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:04:02.0374 3300 clr_optimization_v4.0.30319_32 - ok
15:04:02.0406 3300 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
15:04:02.0452 3300 clr_optimization_v4.0.30319_64 - ok
15:04:02.0468 3300 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
15:04:02.0468 3300 CmBatt - ok
15:04:02.0499 3300 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
15:04:02.0499 3300 cmdide - ok
15:04:02.0530 3300 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
15:04:02.0530 3300 CNG - ok
15:04:02.0546 3300 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
15:04:02.0546 3300 Compbatt - ok
15:04:02.0562 3300 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
15:04:02.0562 3300 CompositeBus - ok
15:04:02.0577 3300 COMSysApp - ok
15:04:02.0624 3300 [ D0C2CAA17C7B6D2200E1B5AA9D07135E ] cpuz135 C:\Program Files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys
15:04:02.0624 3300 cpuz135 - ok
15:04:02.0640 3300 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
15:04:02.0640 3300 crcdisk - ok
15:04:02.0671 3300 [ 4F5414602E2544A4554D95517948B705 ] CryptSvc C:\Windows\system32\cryptsvc.dll
15:04:02.0671 3300 CryptSvc - ok
15:04:02.0702 3300 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC C:\Windows\system32\drivers\csc.sys
15:04:02.0702 3300 CSC - ok
15:04:02.0733 3300 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService C:\Windows\System32\cscsvc.dll
15:04:02.0749 3300 CscService - ok
15:04:02.0780 3300 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
15:04:02.0796 3300 DcomLaunch - ok
15:04:02.0811 3300 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
15:04:02.0827 3300 defragsvc - ok
15:04:02.0858 3300 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
15:04:02.0858 3300 DfsC - ok
15:04:02.0874 3300 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
15:04:02.0889 3300 Dhcp - ok
15:04:02.0905 3300 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
15:04:02.0905 3300 discache - ok
15:04:02.0920 3300 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
15:04:02.0936 3300 Disk - ok
15:04:02.0952 3300 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
15:04:02.0952 3300 Dnscache - ok
15:04:02.0983 3300 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
15:04:02.0983 3300 dot3svc - ok
15:04:03.0014 3300 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
15:04:03.0014 3300 DPS - ok
15:04:03.0030 3300 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
15:04:03.0045 3300 drmkaud - ok
15:04:03.0061 3300 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
15:04:03.0061 3300 dtsoftbus01 - ok
15:04:03.0092 3300 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
15:04:03.0108 3300 DXGKrnl - ok
15:04:03.0108 3300 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
15:04:03.0108 3300 EapHost - ok
15:04:03.0201 3300 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
15:04:03.0295 3300 ebdrv - ok
15:04:03.0310 3300 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
15:04:03.0310 3300 EFS - ok
15:04:03.0342 3300 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
15:04:03.0357 3300 ehRecvr - ok
15:04:03.0373 3300 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
15:04:03.0373 3300 ehSched - ok
15:04:03.0388 3300 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
15:04:03.0404 3300 elxstor - ok
15:04:03.0451 3300 [ 194E8100D57FC13BEF88129BAAD07E46 ] EPSON_PM_RPCV4_04 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
15:04:03.0451 3300 EPSON_PM_RPCV4_04 - ok
15:04:03.0466 3300 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
15:04:03.0466 3300 ErrDev - ok
15:04:03.0498 3300 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
15:04:03.0498 3300 EventSystem - ok
15:04:03.0513 3300 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
15:04:03.0513 3300 exfat - ok
15:04:03.0529 3300 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
15:04:03.0529 3300 fastfat - ok
15:04:03.0560 3300 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
15:04:03.0576 3300 Fax - ok
15:04:03.0591 3300 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
15:04:03.0591 3300 fdc - ok
15:04:03.0622 3300 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
15:04:03.0622 3300 fdPHost - ok
15:04:03.0622 3300 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
15:04:03.0638 3300 FDResPub - ok
15:04:03.0638 3300 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
15:04:03.0638 3300 FileInfo - ok
15:04:03.0654 3300 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
15:04:03.0654 3300 Filetrace - ok
15:04:03.0669 3300 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
15:04:03.0669 3300 flpydisk - ok
15:04:03.0700 3300 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
15:04:03.0700 3300 FltMgr - ok
15:04:03.0747 3300 [ B4447F606BB19FD8AD0BAFB59B90F5D9 ] FontCache C:\Windows\system32\FntCache.dll
15:04:03.0763 3300 FontCache - ok
15:04:03.0810 3300 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:04:03.0810 3300 FontCache3.0.0.0 - ok
15:04:03.0825 3300 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
15:04:03.0825 3300 FsDepends - ok
15:04:03.0856 3300 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
15:04:03.0856 3300 Fs_Rec - ok
15:04:03.0888 3300 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
15:04:03.0888 3300 fvevol - ok
15:04:03.0903 3300 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
15:04:03.0903 3300 gagp30kx - ok
15:04:03.0934 3300 [ 7907E14F9BCF3A4689C9A74A1A873CB6 ] gdrv C:\Windows\gdrv.sys
15:04:03.0950 3300 gdrv - ok
15:04:03.0966 3300 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
15:04:03.0981 3300 gpsvc - ok
15:04:04.0044 3300 [ E859CA020ED61899F3C74A8D0032D05C ] Guard.Mail.ru C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
15:04:04.0075 3300 Guard.Mail.ru - ok
15:04:04.0106 3300 [ F8F0851D336C3B88DBD7232B6348E09A ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
15:04:04.0106 3300 hamachi - ok
15:04:04.0122 3300 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
15:04:04.0137 3300 hcw85cir - ok
15:04:04.0153 3300 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
15:04:04.0168 3300 HdAudAddService - ok
15:04:04.0200 3300 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
15:04:04.0200 3300 HDAudBus - ok
15:04:04.0200 3300 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
15:04:04.0200 3300 HidBatt - ok
15:04:04.0215 3300 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
15:04:04.0215 3300 HidBth - ok
15:04:04.0231 3300 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
15:04:04.0231 3300 HidIr - ok
15:04:04.0246 3300 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
15:04:04.0246 3300 hidserv - ok
15:04:04.0293 3300 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
15:04:04.0324 3300 HidUsb - ok
15:04:04.0340 3300 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
15:04:04.0340 3300 hkmsvc - ok
15:04:04.0371 3300 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
15:04:04.0371 3300 HomeGroupListener - ok
15:04:04.0418 3300 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
15:04:04.0434 3300 HomeGroupProvider - ok
15:04:04.0449 3300 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
15:04:04.0465 3300 HpSAMD - ok
15:04:04.0496 3300 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
15:04:04.0512 3300 HTTP - ok
15:04:04.0527 3300 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
15:04:04.0527 3300 hwpolicy - ok
15:04:04.0543 3300 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
15:04:04.0543 3300 i8042prt - ok
15:04:04.0558 3300 [ 3DF4395A7CF8B7A72A5F4606366B8C2D ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
15:04:04.0574 3300 iaStorV - ok
15:04:04.0605 3300 [ 9AC1E19D77BA038F24E2FAB5D95F70D3 ] ICQ Service C:\PROGRA~2\ICQ6TO~1\ICQSER~1.EXE
15:04:04.0605 3300 ICQ Service - ok
15:04:04.0668 3300 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
15:04:04.0714 3300 IDriverT - ok
15:04:04.0777 3300 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
15:04:04.0792 3300 idsvc - ok
15:04:04.0824 3300 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
15:04:04.0824 3300 iirsp - ok
15:04:04.0855 3300 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
15:04:04.0870 3300 IKEEXT - ok
15:04:04.0870 3300 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
15:04:04.0870 3300 intelide - ok
15:04:04.0902 3300 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
15:04:04.0902 3300 intelppm - ok
15:04:04.0933 3300 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
15:04:04.0933 3300 IPBusEnum - ok
15:04:04.0948 3300 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:04:04.0948 3300 IpFilterDriver - ok
15:04:04.0995 3300 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
15:04:05.0011 3300 iphlpsvc - ok
15:04:05.0026 3300 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
15:04:05.0026 3300 IPMIDRV - ok
15:04:05.0058 3300 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
15:04:05.0058 3300 IPNAT - ok
15:04:05.0073 3300 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
15:04:05.0073 3300 IRENUM - ok
15:04:05.0089 3300 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
15:04:05.0089 3300 isapnp - ok
15:04:05.0104 3300 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
15:04:05.0104 3300 iScsiPrt - ok
15:04:05.0120 3300 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
15:04:05.0120 3300 kbdclass - ok
15:04:05.0151 3300 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
15:04:05.0167 3300 kbdhid - ok
15:04:05.0182 3300 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
15:04:05.0182 3300 KeyIso - ok
15:04:05.0198 3300 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
15:04:05.0198 3300 KSecDD - ok
15:04:05.0214 3300 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
15:04:05.0214 3300 KSecPkg - ok
15:04:05.0229 3300 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
15:04:05.0229 3300 ksthunk - ok
15:04:05.0260 3300 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
15:04:05.0276 3300 KtmRm - ok
15:04:05.0292 3300 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
15:04:05.0292 3300 LanmanServer - ok
15:04:05.0323 3300 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
15:04:05.0323 3300 LanmanWorkstation - ok
15:04:05.0338 3300 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
15:04:05.0338 3300 lltdio - ok
15:04:05.0370 3300 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
15:04:05.0370 3300 lltdsvc - ok
15:04:05.0385 3300 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
15:04:05.0385 3300 lmhosts - ok
15:04:05.0416 3300 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
15:04:05.0416 3300 LSI_FC - ok
15:04:05.0432 3300 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
15:04:05.0432 3300 LSI_SAS - ok
15:04:05.0432 3300 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
15:04:05.0448 3300 LSI_SAS2 - ok
15:04:05.0463 3300 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
15:04:05.0463 3300 LSI_SCSI - ok
15:04:05.0479 3300 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
15:04:05.0479 3300 luafv - ok
15:04:05.0510 3300 [ A8FE8F2783B2929B56F5370A89356CE9 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
15:04:05.0510 3300 MBAMProtector - ok
15:04:05.0557 3300 [ 85B16A92B117A5A800032ECD904B86DB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
15:04:05.0572 3300 MBAMScheduler - ok
15:04:05.0588 3300 [ 20E2469DB709FC675E655CEAA11BE312 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
15:04:05.0604 3300 MBAMService - ok
15:04:05.0635 3300 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
15:04:05.0635 3300 Mcx2Svc - ok
15:04:05.0650 3300 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
15:04:05.0650 3300 megasas - ok
15:04:05.0666 3300 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
15:04:05.0666 3300 MegaSR - ok
15:04:05.0697 3300 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
15:04:05.0697 3300 MMCSS - ok
15:04:05.0713 3300 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
15:04:05.0713 3300 Modem - ok
15:04:05.0728 3300 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
15:04:05.0728 3300 monitor - ok
15:04:05.0744 3300 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
15:04:05.0744 3300 mouclass - ok
15:04:05.0760 3300 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
15:04:05.0775 3300 mouhid - ok
15:04:05.0791 3300 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
15:04:05.0791 3300 mountmgr - ok
15:04:05.0822 3300 [ 8BE15F71DE6FF33FC56DCDE7B2B9EFE8 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
15:04:05.0822 3300 MozillaMaintenance - ok
15:04:05.0838 3300 [ 05BF204EC0E82CC4A054DB189C8A3D84 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
15:04:05.0853 3300 MpFilter - ok
15:04:05.0869 3300 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
15:04:05.0869 3300 mpio - ok
15:04:05.0869 3300 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
15:04:05.0869 3300 mpsdrv - ok
15:04:05.0916 3300 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
15:04:05.0931 3300 MpsSvc - ok
15:04:05.0962 3300 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
15:04:05.0962 3300 MRxDAV - ok
15:04:05.0978 3300 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
15:04:05.0994 3300 mrxsmb - ok
15:04:06.0009 3300 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:04:06.0009 3300 mrxsmb10 - ok
15:04:06.0040 3300 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:04:06.0040 3300 mrxsmb20 - ok
15:04:06.0040 3300 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
15:04:06.0040 3300 msahci - ok
15:04:06.0072 3300 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
15:04:06.0072 3300 msdsm - ok
15:04:06.0087 3300 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
15:04:06.0103 3300 MSDTC - ok
15:04:06.0134 3300 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
15:04:06.0134 3300 Msfs - ok
15:04:06.0150 3300 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
15:04:06.0150 3300 mshidkmdf - ok
15:04:06.0165 3300 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
15:04:06.0165 3300 msisadrv - ok
15:04:06.0212 3300 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
15:04:06.0212 3300 MSiSCSI - ok
15:04:06.0212 3300 msiserver - ok
15:04:06.0228 3300 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
15:04:06.0243 3300 MSKSSRV - ok
15:04:06.0274 3300 [ CC8E4F72F21340A4D3A3D4DB50313EF5 ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe
15:04:06.0274 3300 MsMpSvc - ok
15:04:06.0290 3300 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
15:04:06.0290 3300 MSPCLOCK - ok
15:04:06.0290 3300 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
15:04:06.0290 3300 MSPQM - ok
15:04:06.0321 3300 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
15:04:06.0337 3300 MsRPC - ok
15:04:06.0352 3300 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
15:04:06.0352 3300 mssmbios - ok
15:04:06.0368 3300 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
15:04:06.0368 3300 MSTEE - ok
15:04:06.0384 3300 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
15:04:06.0384 3300 MTConfig - ok
15:04:06.0399 3300 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
15:04:06.0399 3300 Mup - ok
15:04:06.0415 3300 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
15:04:06.0430 3300 napagent - ok
15:04:06.0446 3300 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
15:04:06.0462 3300 NativeWifiP - ok
15:04:06.0555 3300 [ E0E4A1F81A7D69C595A8A9DDAD084C19 ] NAUpdate C:\Program Files (x86)\Nero\Update\NASvc.exe
15:04:06.0571 3300 NAUpdate - ok
15:04:06.0618 3300 [ 79B47FD40D9A817E932F9D26FAC0A81C ] NDIS C:\Windows\system32\drivers\ndis.sys
15:04:06.0633 3300 NDIS - ok
15:04:06.0649 3300 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
15:04:06.0649 3300 NdisCap - ok
15:04:06.0680 3300 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
15:04:06.0680 3300 NdisTapi - ok
15:04:06.0711 3300 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
15:04:06.0711 3300 Ndisuio - ok
15:04:06.0742 3300 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
15:04:06.0742 3300 NdisWan - ok
15:04:06.0758 3300 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
15:04:06.0758 3300 NDProxy - ok
15:04:06.0820 3300 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
15:04:06.0820 3300 NetBIOS - ok
15:04:06.0836 3300 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
15:04:06.0836 3300 NetBT - ok
15:04:06.0852 3300 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
15:04:06.0852 3300 Netlogon - ok
15:04:06.0883 3300 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
15:04:06.0898 3300 Netman - ok
15:04:06.0930 3300 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:04:06.0961 3300 NetMsmqActivator - ok
15:04:06.0961 3300 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:04:06.0961 3300 NetPipeActivator - ok
15:04:06.0976 3300 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
15:04:06.0976 3300 netprofm - ok
15:04:06.0992 3300 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:04:06.0992 3300 NetTcpActivator - ok
15:04:06.0992 3300 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:04:06.0992 3300 NetTcpPortSharing - ok
15:04:07.0008 3300 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
15:04:07.0023 3300 nfrd960 - ok
15:04:07.0054 3300 [ 5FF89F20317309D28AC1EDEB0CD1BA72 ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys
15:04:07.0054 3300 NisDrv - ok
15:04:07.0086 3300 [ 79E80B10FE8F6662E0C9162A68C43444 ] NisSrv c:\Program Files\Microsoft Security Client\NisSrv.exe
15:04:07.0101 3300 NisSrv - ok
15:04:07.0117 3300 [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc C:\Windows\System32\nlasvc.dll
15:04:07.0117 3300 NlaSvc - ok
15:04:07.0132 3300 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
15:04:07.0132 3300 Npfs - ok
15:04:07.0148 3300 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
15:04:07.0164 3300 nsi - ok
15:04:07.0164 3300 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
15:04:07.0179 3300 nsiproxy - ok
15:04:07.0226 3300 [ 05D78AA5CB5F3F5C31160BDB955D0B7C ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
15:04:07.0257 3300 Ntfs - ok
15:04:07.0273 3300 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
15:04:07.0273 3300 Null - ok
15:04:07.0304 3300 [ 5D9FD91F3D38DC9DA01E3CB5FA89CD48 ] nvraid C:\Windows\system32\drivers\nvraid.sys
15:04:07.0304 3300 nvraid - ok
15:04:07.0335 3300 [ F7CD50FE7139F07E77DA8AC8033D1832 ] nvstor C:\Windows\system32\drivers\nvstor.sys
15:04:07.0335 3300 nvstor - ok
15:04:07.0366 3300 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
15:04:07.0366 3300 nv_agp - ok
15:04:07.0382 3300 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
15:04:07.0382 3300 ohci1394 - ok
15:04:07.0413 3300 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
15:04:07.0413 3300 p2pimsvc - ok
15:04:07.0444 3300 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
15:04:07.0444 3300 p2psvc - ok
15:04:07.0476 3300 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
15:04:07.0476 3300 Parport - ok
15:04:07.0491 3300 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
15:04:07.0491 3300 partmgr - ok
15:04:07.0507 3300 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
15:04:07.0507 3300 PcaSvc - ok
15:04:07.0538 3300 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
15:04:07.0538 3300 pci - ok
15:04:07.0538 3300 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
15:04:07.0538 3300 pciide - ok
15:04:07.0569 3300 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
15:04:07.0569 3300 pcmcia - ok
15:04:07.0632 3300 [ 6216B93437E5A7E37534B6D1878381B8 ] PCSUService C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe
15:04:07.0725 3300 PCSUService - ok
15:04:07.0741 3300 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
15:04:07.0741 3300 pcw - ok
15:04:07.0772 3300 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
15:04:07.0788 3300 PEAUTH - ok
15:04:07.0834 3300 [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
15:04:07.0881 3300 PeerDistSvc - ok
15:04:07.0944 3300 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
15:04:07.0944 3300 PerfHost - ok
15:04:08.0006 3300 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
15:04:08.0037 3300 pla - ok
15:04:08.0068 3300 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
15:04:08.0084 3300 PlugPlay - ok
15:04:08.0100 3300 PnkBstrA - ok
15:04:08.0131 3300 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
15:04:08.0131 3300 PNRPAutoReg - ok
15:04:08.0146 3300 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
15:04:08.0146 3300 PNRPsvc - ok
15:04:08.0162 3300 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
15:04:08.0178 3300 PolicyAgent - ok
15:04:08.0193 3300 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
15:04:08.0209 3300 Power - ok
15:04:08.0240 3300 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
15:04:08.0240 3300 PptpMiniport - ok
15:04:08.0256 3300 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
15:04:08.0256 3300 Processor - ok
15:04:08.0271 3300 [ 5C78838B4D166D1A27DB3A8A820C799A ] ProfSvc C:\Windows\system32\profsvc.dll
15:04:08.0271 3300 ProfSvc - ok
15:04:08.0287 3300 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
15:04:08.0287 3300 ProtectedStorage - ok
15:04:08.0318 3300 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
15:04:08.0318 3300 Psched - ok
15:04:08.0380 3300 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
15:04:08.0412 3300 ql2300 - ok
15:04:08.0427 3300 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
15:04:08.0427 3300 ql40xx - ok
15:04:08.0443 3300 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
15:04:08.0443 3300 QWAVE - ok
15:04:08.0458 3300 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
15:04:08.0458 3300 QWAVEdrv - ok
15:04:08.0474 3300 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
15:04:08.0490 3300 RasAcd - ok
15:04:08.0505 3300 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
15:04:08.0505 3300 RasAgileVpn - ok
15:04:08.0521 3300 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
15:04:08.0521 3300 RasAuto - ok
15:04:08.0536 3300 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
15:04:08.0536 3300 Rasl2tp - ok
15:04:08.0552 3300 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
15:04:08.0568 3300 RasMan - ok
15:04:08.0583 3300 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
15:04:08.0583 3300 RasPppoe - ok
15:04:08.0583 3300 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
15:04:08.0583 3300 RasSstp - ok
15:04:08.0614 3300 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
15:04:08.0614 3300 rdbss - ok
15:04:08.0630 3300 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
15:04:08.0630 3300 rdpbus - ok
15:04:08.0646 3300 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
15:04:08.0646 3300 RDPCDD - ok
15:04:08.0677 3300 [ 1B6163C503398B23FF8B939C67747683 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
15:04:08.0677 3300 RDPDR - ok
15:04:08.0692 3300 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
15:04:08.0692 3300 RDPENCDD - ok
15:04:08.0708 3300 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
15:04:08.0708 3300 RDPREFMP - ok
15:04:08.0739 3300 [ 70CBA1A0C98600A2AA1863479B35CB90 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
15:04:08.0739 3300 RdpVideoMiniport - ok
15:04:08.0770 3300 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
15:04:08.0770 3300 RDPWD - ok
15:04:08.0802 3300 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
15:04:08.0802 3300 rdyboost - ok
15:04:08.0833 3300 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
15:04:08.0833 3300 RemoteAccess - ok
15:04:08.0848 3300 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
15:04:08.0848 3300 RemoteRegistry - ok
15:04:08.0864 3300 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
15:04:08.0864 3300 RpcEptMapper - ok
15:04:08.0895 3300 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
15:04:08.0895 3300 RpcLocator - ok
15:04:08.0911 3300 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
15:04:08.0926 3300 RpcSs - ok
15:04:08.0942 3300 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
15:04:08.0942 3300 rspndr - ok
15:04:08.0989 3300 [ EE082E06A82FF630351D1E0EBBD3D8D0 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
15:04:08.0989 3300 RTL8167 - ok
15:04:09.0004 3300 [ E60C0A09F997826C7627B244195AB581 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
15:04:09.0004 3300 s3cap - ok
15:04:09.0020 3300 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
15:04:09.0020 3300 SamSs - ok
15:04:09.0036 3300 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
15:04:09.0036 3300 sbp2port - ok
15:04:09.0067 3300 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
15:04:09.0067 3300 SCardSvr - ok
15:04:09.0082 3300 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
15:04:09.0082 3300 scfilter - ok
15:04:09.0129 3300 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
15:04:09.0145 3300 Schedule - ok
15:04:09.0176 3300 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
15:04:09.0176 3300 SCPolicySvc - ok
15:04:09.0207 3300 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
15:04:09.0207 3300 SDRSVC - ok
15:04:09.0223 3300 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
15:04:09.0223 3300 secdrv - ok
15:04:09.0238 3300 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
15:04:09.0238 3300 seclogon - ok
15:04:09.0254 3300 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
15:04:09.0254 3300 SENS - ok
15:04:09.0270 3300 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
15:04:09.0270 3300 SensrSvc - ok
15:04:09.0270 3300 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
15:04:09.0270 3300 Serenum - ok
15:04:09.0285 3300 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
15:04:09.0285 3300 Serial - ok
15:04:09.0332 3300 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
15:04:09.0332 3300 sermouse - ok
15:04:09.0394 3300 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
15:04:09.0410 3300 SessionEnv - ok
15:04:09.0441 3300 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
15:04:09.0488 3300 sffdisk - ok
15:04:09.0535 3300 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
15:04:09.0535 3300 sffp_mmc - ok
15:04:09.0550 3300 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
15:04:09.0550 3300 sffp_sd - ok
15:04:09.0566 3300 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
15:04:09.0566 3300 sfloppy - ok
15:04:09.0613 3300 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
15:04:09.0628 3300 SharedAccess - ok
15:04:09.0660 3300 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
15:04:09.0660 3300 ShellHWDetection - ok

TDSSKILLER LOG 2 :

15:04:09.0691 3300 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
15:04:09.0691 3300 SiSRaid2 - ok
15:04:09.0706 3300 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
15:04:09.0706 3300 SiSRaid4 - ok
15:04:09.0847 3300 [ 3740B83AEC21D981065D7E819BD7E878 ] Skype C2C Service C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
15:04:09.0925 3300 Skype C2C Service - ok
15:04:09.0956 3300 [ A4FAB5F7818A69DA6E740943CB8F7CA9 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
15:04:09.0956 3300 SkypeUpdate - ok
15:04:09.0972 3300 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
15:04:09.0972 3300 Smb - ok
15:04:10.0018 3300 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
15:04:10.0018 3300 SNMPTRAP - ok
15:04:10.0018 3300 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
15:04:10.0018 3300 spldr - ok
15:04:10.0050 3300 [ B96C17B5DC1424D56EEA3A99E97428CD ] Spooler C:\Windows\System32\spoolsv.exe
15:04:10.0065 3300 Spooler - ok
15:04:10.0159 3300 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
15:04:10.0237 3300 sppsvc - ok
15:04:10.0252 3300 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
15:04:10.0268 3300 sppuinotify - ok
15:04:10.0299 3300 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
15:04:10.0299 3300 srv - ok
15:04:10.0315 3300 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
15:04:10.0330 3300 srv2 - ok
15:04:10.0346 3300 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
15:04:10.0346 3300 srvnet - ok
15:04:10.0362 3300 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
15:04:10.0377 3300 SSDPSRV - ok
15:04:10.0377 3300 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
15:04:10.0393 3300 SstpSvc - ok
15:04:10.0424 3300 Steam Client Service - ok
15:04:10.0440 3300 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
15:04:10.0440 3300 stexstor - ok
15:04:10.0486 3300 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
15:04:10.0502 3300 stisvc - ok
15:04:10.0518 3300 [ 7785DC213270D2FC066538DAF94087E7 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
15:04:10.0518 3300 storflt - ok
15:04:10.0533 3300 [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc C:\Windows\system32\drivers\storvsc.sys
15:04:10.0533 3300 storvsc - ok
15:04:10.0533 3300 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
15:04:10.0533 3300 swenum - ok
15:04:10.0596 3300 [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
15:04:10.0611 3300 SwitchBoard - ok
15:04:10.0627 3300 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
15:04:10.0658 3300 swprv - ok
15:04:10.0674 3300 Synth3dVsc - ok
15:04:10.0720 3300 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
15:04:10.0783 3300 SysMain - ok
15:04:10.0814 3300 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
15:04:10.0814 3300 TabletInputService - ok
15:04:10.0845 3300 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
15:04:10.0845 3300 TapiSrv - ok
15:04:10.0861 3300 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
15:04:10.0861 3300 TBS - ok
15:04:10.0923 3300 [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
15:04:10.0970 3300 Tcpip - ok
15:04:11.0017 3300 [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
15:04:11.0032 3300 TCPIP6 - ok
15:04:11.0048 3300 [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
15:04:11.0064 3300 tcpipreg - ok
15:04:11.0079 3300 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
15:04:11.0079 3300 TDPIPE - ok
15:04:11.0095 3300 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
15:04:11.0095 3300 TDTCP - ok
15:04:11.0126 3300 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
15:04:11.0142 3300 tdx - ok
15:04:11.0157 3300 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
15:04:11.0157 3300 TermDD - ok
15:04:11.0173 3300 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
15:04:11.0188 3300 TermService - ok
15:04:11.0204 3300 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
15:04:11.0204 3300 Themes - ok
15:04:11.0235 3300 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
15:04:11.0235 3300 THREADORDER - ok
15:04:11.0266 3300 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
15:04:11.0266 3300 TrkWks - ok
15:04:11.0298 3300 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
15:04:11.0313 3300 TrustedInstaller - ok
15:04:11.0329 3300 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
15:04:11.0329 3300 tssecsrv - ok
15:04:11.0360 3300 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
15:04:11.0360 3300 TsUsbFlt - ok
15:04:11.0360 3300 tsusbhub - ok
15:04:11.0391 3300 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
15:04:11.0391 3300 tunnel - ok
15:04:11.0407 3300 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
15:04:11.0407 3300 uagp35 - ok
15:04:11.0438 3300 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
15:04:11.0438 3300 udfs - ok
15:04:11.0454 3300 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
15:04:11.0469 3300 UI0Detect - ok
15:04:11.0485 3300 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
15:04:11.0485 3300 uliagpkx - ok
15:04:11.0516 3300 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
15:04:11.0532 3300 umbus - ok
15:04:11.0532 3300 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
15:04:11.0532 3300 UmPass - ok
15:04:11.0563 3300 [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService C:\Windows\System32\umrdp.dll
15:04:11.0563 3300 UmRdpService - ok
15:04:11.0578 3300 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
15:04:11.0594 3300 upnphost - ok
15:04:11.0610 3300 [ 481DFF26B4DCA8F4CBAC1F7DCE1D6829 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
15:04:11.0625 3300 usbccgp - ok
15:04:11.0641 3300 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
15:04:11.0641 3300 usbcir - ok
15:04:11.0656 3300 [ 74EE782B1D9C241EFE425565854C661C ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
15:04:11.0656 3300 usbehci - ok
15:04:11.0672 3300 [ DC96BD9CCB8403251BCF25047573558E ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
15:04:11.0672 3300 usbhub - ok
15:04:11.0688 3300 [ 58E546BBAF87664FC57E0F6081E4F609 ] usbohci C:\Windows\system32\drivers\usbohci.sys
15:04:11.0688 3300 usbohci - ok
15:04:11.0719 3300 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
15:04:11.0719 3300 usbprint - ok
15:04:11.0750 3300 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
15:04:11.0750 3300 usbscan - ok
15:04:11.0766 3300 [ D76510CFA0FC09023077F22C2F979D86 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:04:11.0781 3300 USBSTOR - ok
15:04:11.0797 3300 [ 81FB2216D3A60D1284455D511797DB3D ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
15:04:11.0797 3300 usbuhci - ok
15:04:11.0812 3300 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
15:04:11.0812 3300 UxSms - ok
15:04:11.0828 3300 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
15:04:11.0828 3300 VaultSvc - ok
15:04:11.0844 3300 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
15:04:11.0844 3300 vdrvroot - ok
15:04:11.0875 3300 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
15:04:11.0875 3300 vds - ok
15:04:11.0906 3300 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
15:04:11.0906 3300 vga - ok
15:04:11.0922 3300 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
15:04:11.0922 3300 VgaSave - ok
15:04:11.0937 3300 VGPU - ok
15:04:11.0953 3300 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
15:04:11.0953 3300 vhdmp - ok
15:04:11.0968 3300 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
15:04:11.0968 3300 viaide - ok
15:04:11.0984 3300 [ 86EA3E79AE350FEA5331A1303054005F ] vmbus C:\Windows\system32\drivers\vmbus.sys
15:04:11.0984 3300 vmbus - ok
15:04:12.0000 3300 [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
15:04:12.0000 3300 VMBusHID - ok
15:04:12.0015 3300 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
15:04:12.0015 3300 volmgr - ok
15:04:12.0046 3300 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
15:04:12.0062 3300 volmgrx - ok
15:04:12.0078 3300 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
15:04:12.0078 3300 volsnap - ok
15:04:12.0109 3300 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
15:04:12.0109 3300 vsmraid - ok
15:04:12.0171 3300 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
15:04:12.0218 3300 VSS - ok
15:04:12.0234 3300 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
15:04:12.0234 3300 vwifibus - ok
15:04:12.0265 3300 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
15:04:12.0265 3300 W32Time - ok
15:04:12.0296 3300 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
15:04:12.0296 3300 WacomPen - ok
15:04:12.0327 3300 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
15:04:12.0327 3300 WANARP - ok
15:04:12.0327 3300 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
15:04:12.0327 3300 Wanarpv6 - ok
15:04:12.0390 3300 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
15:04:12.0436 3300 wbengine - ok
15:04:12.0452 3300 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
15:04:12.0468 3300 WbioSrvc - ok
15:04:12.0499 3300 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
15:04:12.0499 3300 wcncsvc - ok
15:04:12.0514 3300 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
15:04:12.0514 3300 WcsPlugInService - ok
15:04:12.0514 3300 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
15:04:12.0530 3300 Wd - ok
15:04:12.0546 3300 [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
15:04:12.0561 3300 Wdf01000 - ok
15:04:12.0577 3300 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
15:04:12.0577 3300 WdiServiceHost - ok
15:04:12.0577 3300 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
15:04:12.0592 3300 WdiSystemHost - ok
15:04:12.0608 3300 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
15:04:12.0608 3300 WebClient - ok
15:04:12.0639 3300 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
15:04:12.0639 3300 Wecsvc - ok
15:04:12.0655 3300 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
15:04:12.0655 3300 wercplsupport - ok
15:04:12.0686 3300 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
15:04:12.0686 3300 WerSvc - ok
15:04:12.0717 3300 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
15:04:12.0717 3300 WfpLwf - ok
15:04:12.0733 3300 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
15:04:12.0733 3300 WIMMount - ok
15:04:12.0733 3300 WinDefend - ok
15:04:12.0748 3300 WinHttpAutoProxySvc - ok
15:04:12.0795 3300 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
15:04:12.0795 3300 Winmgmt - ok
15:04:12.0858 3300 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
15:04:12.0904 3300 WinRM - ok
15:04:12.0936 3300 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
15:04:12.0936 3300 WinUsb - ok
15:04:12.0951 3300 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
15:04:12.0982 3300 Wlansvc - ok
15:04:12.0998 3300 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
15:04:12.0998 3300 WmiAcpi - ok
15:04:13.0029 3300 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
15:04:13.0029 3300 wmiApSrv - ok
15:04:13.0060 3300 WMPNetworkSvc - ok
15:04:13.0060 3300 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
15:04:13.0076 3300 WPCSvc - ok
15:04:13.0092 3300 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
15:04:13.0092 3300 WPDBusEnum - ok
15:04:13.0107 3300 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
15:04:13.0107 3300 ws2ifsl - ok
15:04:13.0123 3300 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
15:04:13.0123 3300 wscsvc - ok
15:04:13.0123 3300 WSearch - ok
15:04:13.0201 3300 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
15:04:13.0248 3300 wuauserv - ok
15:04:13.0263 3300 [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
15:04:13.0263 3300 WudfPf - ok
15:04:13.0310 3300 [ CF8D590BE3373029D57AF80914190682 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
15:04:13.0310 3300 WUDFRd - ok
15:04:13.0326 3300 [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
15:04:13.0326 3300 wudfsvc - ok
15:04:13.0357 3300 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
15:04:13.0372 3300 WwanSvc - ok
15:04:13.0404 3300 X6va011 - ok
15:04:13.0419 3300 ================ Scan global ===============================
15:04:13.0435 3300 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
15:04:13.0466 3300 [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
15:04:13.0482 3300 [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
15:04:13.0497 3300 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
15:04:13.0528 3300 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
15:04:13.0528 3300 [Global] - ok
15:04:13.0528 3300 ================ Scan MBR ==================================
15:04:13.0544 3300 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
15:04:13.0965 3300 \Device\Harddisk0\DR0 - ok
15:04:13.0965 3300 ================ Scan VBR ==================================
15:04:13.0965 3300 [ 6ED081813A177FF8E84FA42D6F2E94BA ] \Device\Harddisk0\DR0\Partition1
15:04:13.0981 3300 \Device\Harddisk0\DR0\Partition1 - ok
15:04:13.0981 3300 [ 31021342EEE6CEBFE523A2DEFB81430C ] \Device\Harddisk0\DR0\Partition2
15:04:13.0996 3300 \Device\Harddisk0\DR0\Partition2 - ok
15:04:13.0996 3300 ============================================================
15:04:13.0996 3300 Scan finished
15:04:13.0996 3300 ============================================================
15:04:13.0996 3132 Detected object count: 0
15:04:13.0996 3132 Actual detected object count: 0
15:04:22.0109 2196 ============================================================
15:04:22.0109 2196 Scan started
15:04:22.0109 2196 Mode: Manual;
15:04:22.0109 2196 ============================================================
15:04:22.0655 2196 ================ Scan system memory ========================
15:04:22.0655 2196 System memory - ok
15:04:22.0655 2196 ================ Scan services =============================
15:04:22.0764 2196 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
15:04:22.0764 2196 1394ohci - ok
15:04:22.0826 2196 [ B33CF4DE909A5B30F526D82053A63C8E ] ABBYY.Licensing.FineReader.Sprint.9.0 C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
15:04:22.0842 2196 ABBYY.Licensing.FineReader.Sprint.9.0 - ok
15:04:22.0857 2196 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
15:04:22.0857 2196 ACPI - ok
15:04:22.0873 2196 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
15:04:22.0873 2196 AcpiPmi - ok
15:04:22.0920 2196 [ B1EA9681502EE57F87DB71D726288A5B ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
15:04:22.0920 2196 AdobeARMservice - ok
15:04:22.0982 2196 [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
15:04:22.0982 2196 AdobeFlashPlayerUpdateSvc - ok
15:04:23.0029 2196 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
15:04:23.0029 2196 adp94xx - ok
15:04:23.0045 2196 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
15:04:23.0045 2196 adpahci - ok
15:04:23.0060 2196 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
15:04:23.0060 2196 adpu320 - ok
15:04:23.0091 2196 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
15:04:23.0091 2196 AeLookupSvc - ok
15:04:23.0123 2196 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
15:04:23.0123 2196 AFD - ok
15:04:23.0154 2196 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
15:04:23.0154 2196 agp440 - ok
15:04:23.0154 2196 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
15:04:23.0154 2196 ALG - ok
15:04:23.0169 2196 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
15:04:23.0169 2196 aliide - ok
15:04:23.0185 2196 [ D696F317BD465A602566F8E1DCCE15F7 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
15:04:23.0201 2196 AMD External Events Utility - ok
15:04:23.0201 2196 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
15:04:23.0201 2196 amdide - ok
15:04:23.0216 2196 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
15:04:23.0216 2196 AmdK8 - ok
15:04:23.0232 2196 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
15:04:23.0232 2196 AmdPPM - ok
15:04:23.0247 2196 [ 6EC6D772EAE38DC17C14AED9B178D24B ] amdsata C:\Windows\system32\drivers\amdsata.sys
15:04:23.0247 2196 amdsata - ok
15:04:23.0263 2196 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
15:04:23.0263 2196 amdsbs - ok
15:04:23.0279 2196 [ 1142A21DB581A84EA5597B03A26EBAA0 ] amdxata C:\Windows\system32\drivers\amdxata.sys
15:04:23.0279 2196 amdxata - ok
15:04:23.0310 2196 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
15:04:23.0310 2196 AppID - ok
15:04:23.0325 2196 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
15:04:23.0325 2196 AppIDSvc - ok
15:04:23.0341 2196 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
15:04:23.0341 2196 Appinfo - ok
15:04:23.0372 2196 [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt C:\Windows\System32\appmgmts.dll
15:04:23.0372 2196 AppMgmt - ok
15:04:23.0388 2196 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
15:04:23.0388 2196 arc - ok
15:04:23.0403 2196 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
15:04:23.0403 2196 arcsas - ok
15:04:23.0481 2196 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
15:04:23.0481 2196 aspnet_state - ok
15:04:23.0513 2196 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
15:04:23.0513 2196 AsyncMac - ok
15:04:23.0528 2196 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
15:04:23.0528 2196 atapi - ok
15:04:23.0653 2196 [ 52BD95CAA9CAE8977FE043E9AD6D2D0E ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys
15:04:23.0700 2196 atikmdag - ok
15:04:23.0731 2196 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
15:04:23.0731 2196 AudioEndpointBuilder - ok
15:04:23.0762 2196 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
15:04:23.0778 2196 AudioSrv - ok
15:04:23.0793 2196 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
15:04:23.0793 2196 AxInstSV - ok
15:04:23.0809 2196 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
15:04:23.0809 2196 b06bdrv - ok
15:04:23.0825 2196 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
15:04:23.0825 2196 b57nd60a - ok
15:04:23.0840 2196 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
15:04:23.0840 2196 BDESVC - ok
15:04:23.0856 2196 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
15:04:23.0856 2196 Beep - ok
15:04:23.0887 2196 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
15:04:23.0903 2196 BFE - ok
15:04:23.0934 2196 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
15:04:23.0934 2196 BITS - ok
15:04:23.0949 2196 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
15:04:23.0949 2196 blbdrive - ok
15:04:23.0981 2196 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
15:04:23.0981 2196 bowser - ok
15:04:23.0981 2196 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
15:04:23.0981 2196 BrFiltLo - ok
15:04:23.0996 2196 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
15:04:23.0996 2196 BrFiltUp - ok
15:04:24.0027 2196 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
15:04:24.0027 2196 Browser - ok
15:04:24.0043 2196 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
15:04:24.0043 2196 Brserid - ok
15:04:24.0043 2196 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
15:04:24.0043 2196 BrSerWdm - ok
15:04:24.0059 2196 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
15:04:24.0059 2196 BrUsbMdm - ok
15:04:24.0059 2196 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
15:04:24.0059 2196 BrUsbSer - ok
15:04:24.0074 2196 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
15:04:24.0074 2196 BTHMODEM - ok
15:04:24.0090 2196 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
15:04:24.0090 2196 bthserv - ok
15:04:24.0090 2196 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
15:04:24.0105 2196 cdfs - ok
15:04:24.0121 2196 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
15:04:24.0121 2196 cdrom - ok
15:04:24.0137 2196 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
15:04:24.0137 2196 CertPropSvc - ok
15:04:24.0137 2196 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
15:04:24.0137 2196 circlass - ok
15:04:24.0152 2196 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
15:04:24.0152 2196 CLFS - ok
15:04:24.0199 2196 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:04:24.0199 2196 clr_optimization_v2.0.50727_32 - ok
15:04:24.0230 2196 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
15:04:24.0230 2196 clr_optimization_v2.0.50727_64 - ok
15:04:24.0293 2196 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:04:24.0293 2196 clr_optimization_v4.0.30319_32 - ok
15:04:24.0308 2196 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
15:04:24.0308 2196 clr_optimization_v4.0.30319_64 - ok
15:04:24.0324 2196 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
15:04:24.0324 2196 CmBatt - ok
15:04:24.0339 2196 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
15:04:24.0355 2196 cmdide - ok
15:04:24.0371 2196 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
15:04:24.0371 2196 CNG - ok
15:04:24.0386 2196 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
15:04:24.0386 2196 Compbatt - ok
15:04:24.0402 2196 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
15:04:24.0402 2196 CompositeBus - ok
15:04:24.0402 2196 COMSysApp - ok
15:04:24.0449 2196 [ D0C2CAA17C7B6D2200E1B5AA9D07135E ] cpuz135 C:\Program Files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys
15:04:24.0449 2196 cpuz135 - ok
15:04:24.0464 2196 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
15:04:24.0464 2196 crcdisk - ok
15:04:24.0495 2196 [ 4F5414602E2544A4554D95517948B705 ] CryptSvc C:\Windows\system32\cryptsvc.dll
15:04:24.0495 2196 CryptSvc - ok
15:04:24.0527 2196 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC C:\Windows\system32\drivers\csc.sys
15:04:24.0527 2196 CSC - ok
15:04:24.0542 2196 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService C:\Windows\System32\cscsvc.dll
15:04:24.0542 2196 CscService - ok
15:04:24.0573 2196 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
15:04:24.0573 2196 DcomLaunch - ok
15:04:24.0605 2196 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
15:04:24.0620 2196 defragsvc - ok
15:04:24.0636 2196 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
15:04:24.0636 2196 DfsC - ok
15:04:24.0651 2196 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
15:04:24.0651 2196 Dhcp - ok
15:04:24.0683 2196 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
15:04:24.0683 2196 discache - ok
15:04:24.0698 2196 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
15:04:24.0698 2196 Disk - ok
15:04:24.0714 2196 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
15:04:24.0714 2196 Dnscache - ok
15:04:24.0745 2196 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
15:04:24.0745 2196 dot3svc - ok
15:04:24.0807 2196 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
15:04:24.0807 2196 DPS - ok
15:04:24.0854 2196 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
15:04:24.0854 2196 drmkaud - ok
15:04:24.0948 2196 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
15:04:24.0948 2196 dtsoftbus01 - ok
15:04:24.0979 2196 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
15:04:24.0979 2196 DXGKrnl - ok
15:04:24.0995 2196 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
15:04:24.0995 2196 EapHost - ok
15:04:25.0073 2196 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
15:04:25.0104 2196 ebdrv - ok
15:04:25.0119 2196 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
15:04:25.0119 2196 EFS - ok
15:04:25.0151 2196 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
15:04:25.0151 2196 ehRecvr - ok
15:04:25.0151 2196 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
15:04:25.0166 2196 ehSched - ok
15:04:25.0182 2196 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
15:04:25.0182 2196 elxstor - ok
15:04:25.0229 2196 [ 194E8100D57FC13BEF88129BAAD07E46 ] EPSON_PM_RPCV4_04 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
15:04:25.0229 2196 EPSON_PM_RPCV4_04 - ok
15:04:25.0244 2196 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
15:04:25.0244 2196 ErrDev - ok
15:04:25.0275 2196 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
15:04:25.0275 2196 EventSystem - ok
15:04:25.0291 2196 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
15:04:25.0291 2196 exfat - ok
15:04:25.0307 2196 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
15:04:25.0307 2196 fastfat - ok
15:04:25.0338 2196 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
15:04:25.0338 2196 Fax - ok
15:04:25.0353 2196 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
15:04:25.0353 2196 fdc - ok
15:04:25.0369 2196 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
15:04:25.0369 2196 fdPHost - ok
15:04:25.0385 2196 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
15:04:25.0385 2196 FDResPub - ok
15:04:25.0400 2196 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
15:04:25.0400 2196 FileInfo - ok
15:04:25.0416 2196 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
15:04:25.0416 2196 Filetrace - ok
15:04:25.0416 2196 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
15:04:25.0416 2196 flpydisk - ok
15:04:25.0447 2196 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
15:04:25.0447 2196 FltMgr - ok
15:04:25.0478 2196 [ B4447F606BB19FD8AD0BAFB59B90F5D9 ] FontCache C:\Windows\system32\FntCache.dll
15:04:25.0494 2196 FontCache - ok
15:04:25.0525 2196 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:04:25.0525 2196 FontCache3.0.0.0 - ok
15:04:25.0541 2196 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
15:04:25.0541 2196 FsDepends - ok
15:04:25.0572 2196 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
15:04:25.0572 2196 Fs_Rec - ok
15:04:25.0603 2196 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
15:04:25.0603 2196 fvevol - ok
15:04:25.0619 2196 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
15:04:25.0619 2196 gagp30kx - ok
15:04:25.0634 2196 [ 7907E14F9BCF3A4689C9A74A1A873CB6 ] gdrv C:\Windows\gdrv.sys
15:04:25.0634 2196 gdrv - ok
15:04:25.0650 2196 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
15:04:25.0665 2196 gpsvc - ok
15:04:25.0712 2196 [ E859CA020ED61899F3C74A8D0032D05C ] Guard.Mail.ru C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
15:04:25.0712 2196 Guard.Mail.ru - ok
15:04:25.0743 2196 [ F8F0851D336C3B88DBD7232B6348E09A ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
15:04:25.0743 2196 hamachi - ok
15:04:25.0759 2196 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
15:04:25.0759 2196 hcw85cir - ok
15:04:25.0790 2196 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
15:04:25.0790 2196 HdAudAddService - ok
15:04:25.0806 2196 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
15:04:25.0806 2196 HDAudBus - ok
15:04:25.0806 2196 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
15:04:25.0806 2196 HidBatt - ok
15:04:25.0821 2196 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
15:04:25.0821 2196 HidBth - ok
15:04:25.0837 2196 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
15:04:25.0837 2196 HidIr - ok
15:04:25.0868 2196 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
15:04:25.0868 2196 hidserv - ok
15:04:25.0868 2196 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
15:04:25.0868 2196 HidUsb - ok
15:04:25.0899 2196 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
15:04:25.0899 2196 hkmsvc - ok
15:04:25.0931 2196 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
15:04:25.0931 2196 HomeGroupListener - ok
15:04:25.0946 2196 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
15:04:25.0946 2196 HomeGroupProvider - ok
15:04:25.0962 2196 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
15:04:25.0962 2196 HpSAMD - ok
15:04:25.0993 2196 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
15:04:25.0993 2196 HTTP - ok
15:04:26.0009 2196 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
15:04:26.0009 2196 hwpolicy - ok
15:04:26.0024 2196 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
15:04:26.0024 2196 i8042prt - ok
15:04:26.0040 2196 [ 3DF4395A7CF8B7A72A5F4606366B8C2D ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
15:04:26.0055 2196 iaStorV - ok
15:04:26.0071 2196 [ 9AC1E19D77BA038F24E2FAB5D95F70D3 ] ICQ Service C:\PROGRA~2\ICQ6TO~1\ICQSER~1.EXE
15:04:26.0071 2196 ICQ Service - ok
15:04:26.0133 2196 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
15:04:26.0133 2196 IDriverT - ok
15:04:26.0180 2196 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
15:04:26.0180 2196 idsvc - ok
15:04:26.0196 2196 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
15:04:26.0196 2196 iirsp - ok
15:04:26.0227 2196 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
15:04:26.0243 2196 IKEEXT - ok
15:04:26.0258 2196 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
15:04:26.0258 2196 intelide - ok
15:04:26.0258 2196 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
15:04:26.0258 2196 intelppm - ok
15:04:26.0274 2196 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
15:04:26.0274 2196 IPBusEnum - ok
15:04:26.0305 2196 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:04:26.0305 2196 IpFilterDriver - ok
15:04:26.0336 2196 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
15:04:26.0352 2196 iphlpsvc - ok
15:04:26.0352 2196 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
15:04:26.0367 2196 IPMIDRV - ok
15:04:26.0383 2196 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
15:04:26.0383 2196 IPNAT - ok
15:04:26.0383 2196 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
15:04:26.0399 2196 IRENUM - ok
15:04:26.0399 2196 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
15:04:26.0399 2196 isapnp - ok
15:04:26.0430 2196 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
15:04:26.0430 2196 iScsiPrt - ok
15:04:26.0445 2196 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
15:04:26.0445 2196 kbdclass - ok
15:04:26.0477 2196 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
15:04:26.0477 2196 kbdhid - ok
15:04:26.0492 2196 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
15:04:26.0492 2196 KeyIso - ok
15:04:26.0508 2196 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
15:04:26.0508 2196 KSecDD - ok
15:04:26.0523 2196 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
15:04:26.0523 2196 KSecPkg - ok
15:04:26.0539 2196 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
15:04:26.0539 2196 ksthunk - ok
15:04:26.0570 2196 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
15:04:26.0586 2196 KtmRm - ok
15:04:26.0601 2196 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
15:04:26.0601 2196 LanmanServer - ok
15:04:26.0617 2196 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
15:04:26.0617 2196 LanmanWorkstation - ok
15:04:26.0633 2196 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
15:04:26.0633 2196 lltdio - ok
15:04:26.0648 2196 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
15:04:26.0664 2196 lltdsvc - ok
15:04:26.0679 2196 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
15:04:26.0679 2196 lmhosts - ok
15:04:26.0695 2196 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
15:04:26.0695 2196 LSI_FC - ok
15:04:26.0695 2196 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
15:04:26.0695 2196 LSI_SAS - ok
15:04:26.0711 2196 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
15:04:26.0711 2196 LSI_SAS2 - ok
15:04:26.0742 2196 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
15:04:26.0742 2196 LSI_SCSI - ok
15:04:26.0742 2196 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
15:04:26.0742 2196 luafv - ok
15:04:26.0773 2196 [ A8FE8F2783B2929B56F5370A89356CE9 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
15:04:26.0773 2196 MBAMProtector - ok
15:04:26.0804 2196 [ 85B16A92B117A5A800032ECD904B86DB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
15:04:26.0804 2196 MBAMScheduler - ok
15:04:26.0835 2196 [ 20E2469DB709FC675E655CEAA11BE312 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
15:04:26.0835 2196 MBAMService - ok
15:04:26.0867 2196 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
15:04:26.0867 2196 Mcx2Svc - ok
15:04:26.0867 2196 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
15:04:26.0867 2196 megasas - ok
15:04:26.0898 2196 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
15:04:26.0898 2196 MegaSR - ok
15:04:26.0913 2196 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
15:04:26.0913 2196 MMCSS - ok
15:04:26.0929 2196 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
15:04:26.0929 2196 Modem - ok
15:04:26.0929 2196 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
15:04:26.0929 2196 monitor - ok
15:04:26.0945 2196 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
15:04:26.0945 2196 mouclass - ok
15:04:26.0960 2196 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
15:04:26.0960 2196 mouhid - ok
15:04:26.0991 2196 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
15:04:26.0991 2196 mountmgr - ok
15:04:27.0023 2196 [ 8BE15F71DE6FF33FC56DCDE7B2B9EFE8 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
15:04:27.0023 2196 MozillaMaintenance - ok
15:04:27.0038 2196 [ 05BF204EC0E82CC4A054DB189C8A3D84 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
15:04:27.0038 2196 MpFilter - ok
15:04:27.0054 2196 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
15:04:27.0054 2196 mpio - ok
15:04:27.0069 2196 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
15:04:27.0069 2196 mpsdrv - ok
15:04:27.0101 2196 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
15:04:27.0116 2196 MpsSvc - ok
15:04:27.0132 2196 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
15:04:27.0147 2196 MRxDAV - ok
15:04:27.0163 2196 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
15:04:27.0179 2196 mrxsmb - ok
15:04:27.0179 2196 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:04:27.0194 2196 mrxsmb10 - ok
15:04:27.0210 2196 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:04:27.0210 2196 mrxsmb20 - ok
15:04:27.0225 2196 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
15:04:27.0225 2196 msahci - ok
15:04:27.0257 2196 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
15:04:27.0257 2196 msdsm - ok
15:04:27.0272 2196 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
15:04:27.0272 2196 MSDTC - ok
15:04:27.0319 2196 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
15:04:27.0319 2196 Msfs - ok
15:04:27.0319 2196 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
15:04:27.0319 2196 mshidkmdf - ok
15:04:27.0335 2196 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
15:04:27.0335 2196 msisadrv - ok
15:04:27.0366 2196 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
15:04:27.0366 2196 MSiSCSI - ok
15:04:27.0366 2196 msiserver - ok
15:04:27.0381 2196 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
15:04:27.0381 2196 MSKSSRV - ok
15:04:27.0428 2196 [ CC8E4F72F21340A4D3A3D4DB50313EF5 ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe
15:04:27.0428 2196 MsMpSvc - ok
15:04:27.0428 2196 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
15:04:27.0428 2196 MSPCLOCK - ok
15:04:27.0444 2196 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
15:04:27.0444 2196 MSPQM - ok
15:04:27.0475 2196 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
15:04:27.0475 2196 MsRPC - ok
15:04:27.0491 2196 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
15:04:27.0491 2196 mssmbios - ok
15:04:27.0506 2196 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
15:04:27.0522 2196 MSTEE - ok
15:04:27.0522 2196 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
15:04:27.0522 2196 MTConfig - ok
15:04:27.0537 2196 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
15:04:27.0537 2196 Mup - ok
15:04:27.0553 2196 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
15:04:27.0553 2196 napagent - ok
15:04:27.0584 2196 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
15:04:27.0584 2196 NativeWifiP - ok
15:04:27.0662 2196 [ E0E4A1F81A7D69C595A8A9DDAD084C19 ] NAUpdate C:\Program Files (x86)\Nero\Update\NASvc.exe
15:04:27.0678 2196 NAUpdate - ok
15:04:27.0709 2196 [ 79B47FD40D9A817E932F9D26FAC0A81C ] NDIS C:\Windows\system32\drivers\ndis.sys
15:04:27.0725 2196 NDIS - ok
15:04:27.0725 2196 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
15:04:27.0725 2196 NdisCap - ok
15:04:27.0740 2196 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
15:04:27.0740 2196 NdisTapi - ok
15:04:27.0771 2196 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
15:04:27.0771 2196 Ndisuio - ok
15:04:27.0818 2196 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
15:04:27.0818 2196 NdisWan - ok
15:04:27.0834 2196 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
15:04:27.0834 2196 NDProxy - ok
15:04:27.0849 2196 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
15:04:27.0849 2196 NetBIOS - ok
15:04:27.0881 2196 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
15:04:27.0896 2196 NetBT - ok
15:04:27.0912 2196 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
15:04:27.0912 2196 Netlogon - ok
15:04:27.0943 2196 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
15:04:27.0943 2196 Netman - ok
15:04:27.0990 2196 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:04:27.0990 2196 NetMsmqActivator - ok
15:04:28.0005 2196 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:04:28.0005 2196 NetPipeActivator - ok
15:04:28.0037 2196 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
15:04:28.0037 2196 netprofm - ok