Prosím o kontrolu logu.. Pomalu najíždi do metra Vyřešeno

[Orcus]

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "

- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání- Finished "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

====================================================

Stáhni si TDSSKiller

Na svojí plochu. Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Pokud se log nevejde do jedné zprávy, rozděl jej na více částí.

[Reklama]

[AngelikaB]

RogueKiller V8.8.15 _x64_ [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 8 (6.2.9200 ) 64 bits version
Spuštěno v : Normální režim
Uživatel : ASUS [Práva správce]
Mód : Odebrat -- Datum : 04/07/2014 14:36:14
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤
[Address] EAT @explorer.exe (BiChangeApplicationStateForPackageName) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B5AB80)
[Address] EAT @explorer.exe (BiChangeSessionState) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B753D8)
[Address] EAT @explorer.exe (BiNotifyNewSession) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B76F0C)
[Address] EAT @explorer.exe (BiPtActivateWorkItem) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCBCE0)
[Address] EAT @explorer.exe (BiPtAssociateActivationProxy) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B7A7EC)
[Address] EAT @explorer.exe (BiPtAssociateApplicationExtensionClass) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCBBD0)
[Address] EAT @explorer.exe (BiPtCreateEventForPackageName) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCBAC0)
[Address] EAT @explorer.exe (BiPtDeleteEvent) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCBA50)
[Address] EAT @explorer.exe (BiPtDisassociateWorkItem) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCB9B0)
[Address] EAT @explorer.exe (BiPtEnumerateBrokeredEvents) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B76A70)
[Address] EAT @explorer.exe (BiPtEnumerateWorkItemsForPackageName) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCB8C0)
[Address] EAT @explorer.exe (BiPtFreeMemory) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B55FE0)
[Address] EAT @explorer.exe (BiPtQueryBrokeredEvent) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B55DF0)
[Address] EAT @explorer.exe (BiPtQuerySystemStateBroadcastChannels) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B76A0C)
[Address] EAT @explorer.exe (BiPtQueryWorkItem) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCB804)
[Address] EAT @explorer.exe (BiPtSignalEvent) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCB738)
[Address] EAT @explorer.exe (BiPtSignalMultipleEvents) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCB660)
[Address] EAT @explorer.exe (BiResetActiveSessionForPackage) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCB57C)
[Address] EAT @explorer.exe (BiSetActiveSessionForPackage) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCB4E0)
[Address] EAT @explorer.exe (BiUpdateLockScreenApplications) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCB430)
[Address] EAT @explorer.exe (DllCanUnloadNow) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B51340)
[Address] EAT @explorer.exe (DllGetActivationFactory) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B52F60)
[Address] EAT @explorer.exe (DllGetClassObject) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B52110)
[Address] EAT @explorer.exe (PsmBlockAppStateChangeCompletion) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCBDD4)
[Address] EAT @explorer.exe (PsmIsProcessInApplication) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B67D60)
[Address] EAT @explorer.exe (PsmQueryApplicationInformation) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B573F0)
[Address] EAT @explorer.exe (PsmQueryApplicationList) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B52770)
[Address] EAT @explorer.exe (PsmQueryCurrentAppState) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCBD70)
[Address] EAT @explorer.exe (PsmQueryProcessList) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B524F0)
[Address] EAT @explorer.exe (PsmRegisterAppStateChangeNotification) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B5CF00)
[Address] EAT @explorer.exe (PsmRegisterApplicationNotification) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B571E0)
[Address] EAT @explorer.exe (PsmSetApplicationState) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B5A870)
[Address] EAT @explorer.exe (PsmShutdownApplication) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCBEC0)
[Address] EAT @explorer.exe (PsmUnblockAppStateChangeCompletion) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCBE0C)
[Address] EAT @explorer.exe (PsmUnregisterAppStateChangeNotification) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66B60A68)
[Address] EAT @explorer.exe (PsmWaitForAppResume) : UIAnimation.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0x66BCBE5C)
[Address] EAT @explorer.exe (DllCanUnloadNow) : SYNCENG.dll -> HOOKED (C:\Windows\System32\qmgrprxy.dll @ 0x69207AB0)
[Address] EAT @explorer.exe (DllGetClassObject) : SYNCENG.dll -> HOOKED (C:\Windows\System32\qmgrprxy.dll @ 0x69207A68)
[Address] EAT @explorer.exe (DllRegisterServer) : SYNCENG.dll -> HOOKED (C:\Windows\System32\qmgrprxy.dll @ 0x69207B00)
[Address] EAT @explorer.exe (DllUnregisterServer) : SYNCENG.dll -> HOOKED (C:\Windows\System32\qmgrprxy.dll @ 0x69207B34)

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) TOSHIBA MQ01ABD075 +++++
--- User ---
[MBR] 895a614674165d7061e853838f0847bc
[BSP] dcb18d0c23a25d65eaced314145dabaf : Empty MBR Code
Partition table:
0 - [XXXXXX] UNKNOWN (0x00) [VISIBLE] Offset (sectors): 1 | Size: 2097152 MB
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_D_04072014_143614.txt >>
RKreport[0]_S_04072014_143532.txt

[AngelikaB]

14:40:21.0114 8580 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
14:40:21.0114 8580 UEFI system
14:40:22.0866 8580 ============================================================
14:40:22.0866 8580 Current date / time: 2014/04/07 14:40:22.0866
14:40:22.0866 8580 SystemInfo:
14:40:22.0866 8580
14:40:22.0866 8580 OS Version: 6.2.9200 ServicePack: 0.0
14:40:22.0866 8580 Product type: Workstation
14:40:22.0866 8580 ComputerName: PEŤÁSEK
14:40:22.0866 8580 UserName: ASUS
14:40:22.0866 8580 Windows directory: C:\Windows
14:40:22.0866 8580 System windows directory: C:\Windows
14:40:22.0866 8580 Running under WOW64
14:40:22.0866 8580 Processor architecture: Intel x64
14:40:22.0866 8580 Number of processors: 4
14:40:22.0866 8580 Page size: 0x1000
14:40:22.0866 8580 Boot type: Normal boot
14:40:22.0866 8580 ============================================================
14:40:24.0108 8580 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:40:24.0120 8580 ============================================================
14:40:24.0120 8580 \Device\Harddisk0\DR0:
14:40:24.0120 8580 GPT partitions:
14:40:24.0120 8580 \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {CDCE5612-9283-4DEA-998F-D3D00DCCD9F1}, Name: EFI system partition, StartLBA 0x800, BlocksNum 0x96000
14:40:24.0120 8580 \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {82077DCF-FAD7-412C-87E8-4355F272CF5B}, Name: Basic data partition, StartLBA 0x96800, BlocksNum 0x1C2000
14:40:24.0120 8580 \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {C0818AD8-EF59-499E-8058-AE0A31AE2080}, Name: Microsoft reserved partition, StartLBA 0x258800, BlocksNum 0x40000
14:40:24.0120 8580 \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {ABF36AB8-8A09-440F-B8D2-FC87FAB84966}, Name: Basic data partition, StartLBA 0x298800, BlocksNum 0x22EE8000
14:40:24.0120 8580 \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {A412EB59-533C-4264-AC76-D260D22608BD}, Name: Basic data partition, StartLBA 0x23180800, BlocksNum 0x31BC0800
14:40:24.0121 8580 \Device\Harddisk0\DR0\Partition6: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {D9F4CAC9-F448-4D97-8CB6-4E13BD8C97E5}, Name: Basic data partition, StartLBA 0x54D41000, BlocksNum 0x2805000
14:40:24.0121 8580 MBR partitions:
14:40:24.0121 8580 ============================================================
14:40:24.0141 8580 C: <-> \Device\Harddisk0\DR0\Partition4
14:40:24.0203 8580 D: <-> \Device\Harddisk0\DR0\Partition5
14:40:24.0203 8580 ============================================================
14:40:24.0203 8580 Initialize success
14:40:24.0203 8580 ============================================================
14:40:35.0143 5684 ============================================================
14:40:35.0143 5684 Scan started
14:40:35.0143 5684 Mode: Manual; SigCheck; TDLFS;
14:40:35.0143 5684 ============================================================
14:40:36.0347 5684 ================ Scan system memory ========================
14:40:36.0347 5684 System memory - ok
14:40:36.0347 5684 ================ Scan services =============================
14:40:36.0487 5684 [ E890C46E4754F0DF51BAFCC8D2E07498 ] 1394ohci C:\Windows\System32\drivers\1394ohci.sys
14:40:36.0537 5684 1394ohci - ok
14:40:36.0541 5684 [ 4F18D4C7EA14F11A7211F60D553C03DB ] 3ware C:\Windows\system32\drivers\3ware.sys
14:40:36.0552 5684 3ware - ok
14:40:36.0579 5684 [ 975AABEB243B800C23626D6B652C5A9C ] ACPI C:\Windows\system32\drivers\ACPI.sys
14:40:36.0594 5684 ACPI - ok
14:40:36.0598 5684 [ DC968C37822117E576B933F34A2D130C ] acpiex C:\Windows\system32\Drivers\acpiex.sys
14:40:36.0607 5684 acpiex - ok
14:40:36.0618 5684 [ 0CA9F7C3A78227C21A0A7854E245CFB2 ] acpipagr C:\Windows\System32\drivers\acpipagr.sys
14:40:36.0636 5684 acpipagr - ok
14:40:36.0639 5684 [ 8EB8DA03B142D3DD1EB9ED8107A76C43 ] AcpiPmi C:\Windows\System32\drivers\acpipmi.sys
14:40:36.0662 5684 AcpiPmi - ok
14:40:36.0665 5684 [ CBCE725C5D86ABA7D2604E22951AA9B8 ] acpitime C:\Windows\System32\drivers\acpitime.sys
14:40:36.0680 5684 acpitime - ok
14:40:36.0770 5684 [ 9D96B0D5855FD1B98023B3EEC9F06786 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
14:40:36.0780 5684 AdobeFlashPlayerUpdateSvc - ok
14:40:36.0798 5684 [ 93C6388592B99925C1D1576E465BC80F ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
14:40:36.0814 5684 adp94xx - ok
14:40:36.0838 5684 [ D27763E0247292654E7F7D16444C7C72 ] adpahci C:\Windows\system32\drivers\adpahci.sys
14:40:36.0852 5684 adpahci - ok
14:40:36.0857 5684 [ 67B90070FF48F794AF19F9FCF0080D75 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
14:40:36.0868 5684 adpu320 - ok
14:40:36.0902 5684 [ 974AE60BF5B90E31412D93596C968E5B ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
14:40:36.0923 5684 AeLookupSvc - ok
14:40:36.0949 5684 [ 7C0E0EDF18D6CC565D7BFBB451709FA5 ] AFD C:\Windows\system32\drivers\afd.sys
14:40:36.0964 5684 AFD - ok
14:40:37.0000 5684 [ 98022774D9930ECBB292E70DB7601DF6 ] AgereSoftModem C:\Windows\system32\DRIVERS\agrsm64.sys
14:40:37.0045 5684 AgereSoftModem - ok
14:40:37.0063 5684 [ 01590377A5AB19E792528C628A2A68F9 ] agp440 C:\Windows\system32\drivers\agp440.sys
14:40:37.0073 5684 agp440 - ok
14:40:37.0090 5684 [ 16F6F6B7903B913AB41AB848C8BB5658 ] AiCharger C:\Windows\system32\DRIVERS\AiCharger.sys
14:40:37.0103 5684 AiCharger - ok
14:40:37.0130 5684 [ D1BE8E6E5B3AF23A4393AF1BF867977A ] ALG C:\Windows\System32\alg.exe
14:40:37.0156 5684 ALG - ok
14:40:37.0191 5684 [ 025E8C755BE293E50854D26D1BBE5133 ] AllUserInstallAgent C:\Windows\system32\AUInstallAgent.dll
14:40:37.0221 5684 AllUserInstallAgent - ok
14:40:37.0231 5684 [ 5A81054B824004B1ECC04F0034A1CDF9 ] AmdK8 C:\Windows\System32\drivers\amdk8.sys
14:40:37.0274 5684 AmdK8 - ok
14:40:37.0291 5684 [ B849D453E644FAB9BC8EF6DC8CA9C4C6 ] AmdPPM C:\Windows\System32\drivers\amdppm.sys
14:40:37.0318 5684 AmdPPM - ok
14:40:37.0321 5684 [ 35A0EB5AECB0FA3C41A2FB514A562304 ] amdsata C:\Windows\system32\drivers\amdsata.sys
14:40:37.0330 5684 amdsata - ok
14:40:37.0350 5684 [ 00452671904F5EE94B50BF0219C97164 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
14:40:37.0361 5684 amdsbs - ok
14:40:37.0365 5684 [ EA3FFE53E92E59C87E3ECA9BEB20D9B7 ] amdxata C:\Windows\system32\drivers\amdxata.sys
14:40:37.0374 5684 amdxata - ok
14:40:37.0378 5684 [ 83B3682CE922FB0F415734B26D9D6233 ] AppID C:\Windows\system32\drivers\appid.sys
14:40:37.0403 5684 AppID - ok
14:40:37.0431 5684 [ CE2BEAD7F31816FF0AC490D048C969F9 ] AppIDSvc C:\Windows\System32\appidsvc.dll
14:40:37.0458 5684 AppIDSvc - ok
14:40:37.0488 5684 [ 4F750B7EFCB6520AE01E01D082D7D476 ] Appinfo C:\Windows\System32\appinfo.dll
14:40:37.0523 5684 Appinfo - ok
14:40:37.0532 5684 [ E933401B392387F4BE34DE8BAF1722A7 ] arc C:\Windows\system32\drivers\arc.sys
14:40:37.0542 5684 arc - ok
14:40:37.0558 5684 [ 07CA323EF2E8247A568AB0F3662AD644 ] arcsas C:\Windows\system32\drivers\arcsas.sys
14:40:37.0568 5684 arcsas - ok
14:40:37.0639 5684 [ E40AF754F43E3B44E2D6DE829267AD52 ] ASLDRService C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
14:40:37.0646 5684 ASLDRService - ok
14:40:37.0672 5684 [ 4C016FD76ED5C05E84CA8CAB77993961 ] ASMMAP64 C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys
14:40:37.0677 5684 ASMMAP64 - ok
14:40:37.0694 5684 [ 6A122B4F0E5293CACFA8A5F2CBA9B356 ] ASUS InstantOn C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
14:40:37.0704 5684 ASUS InstantOn - ok
14:40:37.0756 5684 [ AAE374280DDC307061A43ED9FAD1AD57 ] Asus WebStorage Windows Service C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
14:40:37.0759 5684 Asus WebStorage Windows Service ( UnsignedFile.Multi.Generic ) - warning
14:40:37.0759 5684 Asus WebStorage Windows Service - detected UnsignedFile.Multi.Generic (1)
14:40:37.0778 5684 [ 74DBAEC35366C4EE7670428808715A6A ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
14:40:37.0799 5684 AsyncMac - ok
14:40:37.0824 5684 [ A721FF570C2387E383BDDEA9632863C9 ] atapi C:\Windows\system32\drivers\atapi.sys
14:40:37.0833 5684 atapi - ok
14:40:37.0866 5684 [ 1E71A166547A110CD66EA44326DB4552 ] AthBTPort C:\Windows\system32\DRIVERS\btath_flt.sys
14:40:37.0873 5684 AthBTPort - ok
14:40:37.0924 5684 [ FD4D06946EA00B28D09624E345D46374 ] AtherosSvc C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
14:40:37.0932 5684 AtherosSvc - ok
14:40:38.0016 5684 [ A34167BD20D771B8E68F2C41CC85168C ] athr C:\Windows\system32\DRIVERS\athw8x.sys
14:40:38.0087 5684 athr - ok
14:40:38.0112 5684 [ DBC598E47E7A382E60E2A4745D41FEF9 ] ATKGFNEXSrv C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
14:40:38.0118 5684 ATKGFNEXSrv - ok
14:40:38.0147 5684 [ 41CEAFFCF3550785E59E3EC9BEE8D97A ] ATKWMIACPIIO C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys
14:40:38.0153 5684 ATKWMIACPIIO - ok
14:40:38.0177 5684 [ 74D09AC81A7BD9E5361B3F623F78608A ] ATP C:\Windows\System32\drivers\AsusTP.sys
14:40:38.0183 5684 ATP - ok
14:40:38.0220 5684 [ BCD7A47EF587DC00DD61D12D9C2D1E44 ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
14:40:38.0305 5684 AudioEndpointBuilder - ok
14:40:38.0339 5684 [ 599B3F685A263A114FFAF3BE29C49C75 ] Audiosrv C:\Windows\System32\Audiosrv.dll
14:40:38.0373 5684 Audiosrv - ok
14:40:38.0397 5684 [ 89491EF71D5EA011127832C588002853 ] AxInstSV C:\Windows\System32\AxInstSV.dll
14:40:38.0434 5684 AxInstSV - ok
14:40:38.0465 5684 [ 87AB5BB072A3F128541D5B815F82FFDD ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
14:40:38.0482 5684 b06bdrv - ok
14:40:38.0491 5684 [ 81703BC5D68DEDBB086C2368FBE7B334 ] BasicDisplay C:\Windows\System32\drivers\BasicDisplay.sys
14:40:38.0500 5684 BasicDisplay - ok
14:40:38.0504 5684 [ 5EC68164E14D25675C98BBB5F09E8606 ] BasicRender C:\Windows\System32\drivers\BasicRender.sys
14:40:38.0513 5684 BasicRender - ok
14:40:38.0534 5684 [ 89143A7BA7850F5C7E61B43BB44B6418 ] BDESVC C:\Windows\System32\bdesvc.dll
14:40:38.0567 5684 BDESVC - ok
14:40:38.0579 5684 [ 9E7AEA59776D904607985AFFE7E5E183 ] Beep C:\Windows\system32\drivers\Beep.sys
14:40:38.0610 5684 Beep - ok
14:40:38.0654 5684 [ 53AA55632B94622F2DC3695E86EF9363 ] BFE C:\Windows\System32\bfe.dll
14:40:38.0698 5684 BFE - ok
14:40:38.0728 5684 [ D598C44A7072D3108D8D8102EC5E07F7 ] BITS C:\Windows\System32\qmgr.dll
14:40:38.0781 5684 BITS - ok
14:40:38.0803 5684 [ B17AC10B47C7FCB44D22A1F06415840E ] bowser C:\Windows\system32\DRIVERS\bowser.sys
14:40:38.0826 5684 bowser - ok
14:40:38.0859 5684 [ 038FA1B55531E7020DB705B42FCCE373 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
14:40:38.0886 5684 BrokerInfrastructure - ok
14:40:38.0916 5684 [ 310068BDA80B1D55C36580FD8A873FAF ] Browser C:\Windows\System32\browser.dll
14:40:38.0928 5684 Browser - ok
14:40:38.0960 5684 [ 5ED7B1EE371751CF2ACAE89E7FC566FA ] BTATH_A2DP C:\Windows\system32\drivers\btath_a2dp.sys
14:40:38.0969 5684 BTATH_A2DP - ok
14:40:38.0973 5684 [ 31BDF24D1C9213A0E891568FE643C79C ] btath_avdt C:\Windows\system32\drivers\btath_avdt.sys
14:40:38.0981 5684 btath_avdt - ok
14:40:39.0004 5684 [ C6978F7EBA6F37D626482AC6B9390630 ] BTATH_BUS C:\Windows\System32\drivers\btath_bus.sys
14:40:39.0009 5684 BTATH_BUS - ok
14:40:39.0014 5684 [ 4AF7C20F94DAC343C01ED671C82DCB99 ] BTATH_HCRP C:\Windows\System32\drivers\btath_hcrp.sys
14:40:39.0022 5684 BTATH_HCRP - ok
14:40:39.0034 5684 [ 785C38070043BEEE9E9D591DE4067244 ] BTATH_LWFLT C:\Windows\system32\DRIVERS\btath_lwflt.sys
14:40:39.0039 5684 BTATH_LWFLT - ok
14:40:39.0046 5684 [ 31EC5FC3FC5CB273F2709AAF4AD88ED4 ] BTATH_RCP C:\Windows\System32\drivers\btath_rcp.sys
14:40:39.0053 5684 BTATH_RCP - ok
14:40:39.0077 5684 [ 0D70E980F91FDBF3DB55922CECCE4616 ] BtFilter C:\Windows\system32\DRIVERS\btfilter.sys
14:40:39.0090 5684 BtFilter - ok
14:40:39.0111 5684 [ 6695200F455E251F0BCC9CE4D0978D59 ] BthAvrcpTg C:\Windows\System32\drivers\BthAvrcpTg.sys
14:40:39.0143 5684 BthAvrcpTg - ok
14:40:39.0171 5684 [ A8B20D852B07AE19A13B5D47EC4E4C3B ] BthEnum C:\Windows\System32\drivers\BthEnum.sys
14:40:39.0202 5684 BthEnum - ok
14:40:39.0225 5684 [ 616EB8748C988AEE98D93DA141C3D3B4 ] BthHFEnum C:\Windows\System32\drivers\bthhfenum.sys
14:40:39.0242 5684 BthHFEnum - ok
14:40:39.0246 5684 [ DCB4EBD928A6FB368BE6CAE522412DE1 ] bthhfhid C:\Windows\System32\drivers\BthHFHid.sys
14:40:39.0261 5684 bthhfhid - ok
14:40:39.0288 5684 [ 42201C346F0B8C458E1E9CDE04D68A2C ] BthLEEnum C:\Windows\system32\DRIVERS\BthLEEnum.sys
14:40:39.0321 5684 BthLEEnum - ok
14:40:39.0349 5684 [ EB4CBCB3288233CD964716D0A5E1CFC5 ] BTHMODEM C:\Windows\System32\drivers\bthmodem.sys
14:40:39.0393 5684 BTHMODEM - ok
14:40:39.0426 5684 [ 091BB978E9504D0AD14586929431A957 ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
14:40:39.0459 5684 BthPan - ok
14:40:39.0501 5684 [ 13795CAA34239D97A7211E7F9D96E012 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
14:40:39.0519 5684 BTHPORT - ok
14:40:39.0548 5684 [ A4387C3D271959313E2577DB7BE8BA7A ] bthserv C:\Windows\system32\bthserv.dll
14:40:39.0567 5684 bthserv - ok
14:40:39.0597 5684 [ 1F715957F5236D30B6020A19A4271F6A ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
14:40:39.0620 5684 BTHUSB - ok
14:40:39.0641 5684 [ 990B1BABE6E81FB18E65A87EBEFB1772 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
14:40:39.0662 5684 cdfs - ok
14:40:39.0684 5684 [ 339BFF85D788268752DA8C9644B188EE ] cdrom C:\Windows\System32\drivers\cdrom.sys
14:40:39.0695 5684 cdrom - ok
14:40:39.0718 5684 [ BAF8F0F55BC300E5F882E521F054E345 ] CertPropSvc C:\Windows\System32\certprop.dll

[AngelikaB]

2 strana
14:40:39.0732 5684 CertPropSvc - ok
14:40:39.0736 5684 [ F64B7D1A37CC1D5F421D5359EEC81E2E ] circlass C:\Windows\System32\drivers\circlass.sys
14:40:39.0754 5684 circlass - ok
14:40:39.0766 5684 [ 9905168708DB68849B879B5548F68AB3 ] CLFS C:\Windows\system32\drivers\CLFS.sys
14:40:39.0780 5684 CLFS - ok
14:40:39.0790 5684 [ 2DC8538A2260647484A6C921CA837313 ] CmBatt C:\Windows\System32\drivers\CmBatt.sys
14:40:39.0806 5684 CmBatt - ok
14:40:39.0828 5684 [ E708BFF0473EC6B271EA46B65B16CA56 ] CNG C:\Windows\system32\Drivers\cng.sys
14:40:39.0846 5684 CNG - ok
14:40:39.0851 5684 [ 0E5B1E9E7122EDAAF1F6CE047965CA92 ] CompositeBus C:\Windows\System32\drivers\CompositeBus.sys
14:40:39.0880 5684 CompositeBus - ok
14:40:39.0883 5684 COMSysApp - ok
14:40:39.0887 5684 [ D9CB0782AF819548072AA45B70F8B22D ] condrv C:\Windows\system32\drivers\condrv.sys
14:40:39.0905 5684 condrv - ok
14:40:39.0968 5684 [ 815F3180B5117E42E422188E9CCC89C6 ] cphs C:\Windows\SysWow64\IntelCpHeciSvc.exe
14:40:39.0978 5684 cphs - ok
14:40:40.0008 5684 [ 5CE2742F063731EC10C1B2EE386A2C08 ] CryptSvc C:\Windows\system32\cryptsvc.dll
14:40:40.0052 5684 CryptSvc - ok
14:40:40.0071 5684 [ FAEF4C245BE832DB41B15DAAC336AFB7 ] dam C:\Windows\system32\drivers\dam.sys
14:40:40.0080 5684 dam - ok
14:40:40.0124 5684 [ 1EC6E533C954BDDF2A37E7851A7E58FD ] DcomLaunch C:\Windows\system32\rpcss.dll
14:40:40.0159 5684 DcomLaunch - ok
14:40:40.0184 5684 [ C8650D1F61149AA546BDBC99172EBBC1 ] defragsvc C:\Windows\System32\defragsvc.dll
14:40:40.0203 5684 defragsvc - ok
14:40:40.0222 5684 [ 5EAEF67AE2AF4D2DC664B649DB7B2E16 ] DeviceAssociationService C:\Windows\system32\das.dll
14:40:40.0250 5684 DeviceAssociationService - ok
14:40:40.0266 5684 [ 799BE46D45D486704CE0F37CA5385262 ] DeviceInstall C:\Windows\system32\umpnpmgr.dll
14:40:40.0290 5684 DeviceInstall - ok
14:40:40.0320 5684 [ 431141C6859990824D17F71C30A78728 ] Dfsc C:\Windows\system32\Drivers\dfsc.sys
14:40:40.0329 5684 Dfsc - ok
14:40:40.0352 5684 [ 9E0E72222264745ADEB0E5AC680B0ED6 ] Dhcp C:\Windows\system32\dhcpcore.dll
14:40:40.0381 5684 Dhcp - ok
14:40:40.0396 5684 [ 3C736FAE17BA6F91BA37594AAB139CD0 ] discache C:\Windows\system32\drivers\discache.sys
14:40:40.0410 5684 discache - ok
14:40:40.0439 5684 [ AE3786294CC246A5403783E1B86A0168 ] disk C:\Windows\system32\drivers\disk.sys
14:40:40.0448 5684 disk - ok
14:40:40.0451 5684 [ 82A7C72593793FE1EADA7A305BD1567A ] dmvsc C:\Windows\System32\drivers\dmvsc.sys
14:40:40.0476 5684 dmvsc - ok
14:40:40.0499 5684 [ 066B9710B36AB550E01EEFCA52155968 ] Dnscache C:\Windows\System32\dnsrslvr.dll
14:40:40.0529 5684 Dnscache - ok
14:40:40.0545 5684 [ 9949AD2ABA168A618D46C799D6CC898C ] dot3svc C:\Windows\System32\dot3svc.dll
14:40:40.0567 5684 dot3svc - ok
14:40:40.0572 5684 [ 109FC3F80BF4F4DC5A071058074F13C1 ] DPS C:\Windows\system32\dps.dll
14:40:40.0588 5684 DPS - ok
14:40:40.0612 5684 [ 9C7C183F937951AE17C5B8B3259CF3FF ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
14:40:40.0627 5684 drmkaud - ok
14:40:40.0669 5684 [ F87F4AAAF6664906248D11D5E579A53B ] DsmSvc C:\Windows\System32\DeviceSetupManager.dll
14:40:40.0703 5684 DsmSvc - ok
14:40:40.0727 5684 [ 33F90B202E9DD9B7D489EB59310FDC34 ] dtsoftbus01 C:\Windows\System32\drivers\dtsoftbus01.sys
14:40:40.0737 5684 dtsoftbus01 - ok
14:40:40.0796 5684 [ E6AF4DF1817953D73C519B17CF849756 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
14:40:40.0826 5684 DXGKrnl - ok
14:40:40.0845 5684 [ 651FBD69A9713D623D456A240F96179C ] e1iexpress C:\Windows\system32\DRIVERS\e1i63x64.sys
14:40:40.0865 5684 e1iexpress - ok
14:40:40.0895 5684 [ FE96AA1A36E76588C80DF1040286DDE1 ] eamonm C:\Windows\system32\DRIVERS\eamonm.sys
14:40:40.0903 5684 eamonm - ok
14:40:40.0927 5684 [ 58BA473DD88F5FC1932282BA683AA03E ] Eaphost C:\Windows\System32\eapsvc.dll
14:40:40.0949 5684 Eaphost - ok
14:40:41.0010 5684 [ 5AB97B3282D7D6114949D1EB5C8598E4 ] ebdrv C:\Windows\system32\drivers\evbda.sys
14:40:41.0067 5684 ebdrv - ok
14:40:41.0099 5684 [ FD4BC52A6978A50A81B01E2C74D8737E ] edevmon C:\Windows\system32\DRIVERS\edevmon.sys
14:40:41.0108 5684 edevmon - ok
14:40:41.0134 5684 [ F702AB6181513303AB0FC8D59E52708B ] EFS C:\Windows\System32\lsass.exe
14:40:41.0144 5684 EFS - ok
14:40:41.0162 5684 [ 807BA90D47F8885C09E1D6AFBB706E18 ] ehdrv C:\Windows\system32\DRIVERS\ehdrv.sys
14:40:41.0170 5684 ehdrv - ok
14:40:41.0191 5684 [ 66D60BD9A4C05616ABECA2A901475098 ] EhStorClass C:\Windows\system32\drivers\EhStorClass.sys
14:40:41.0201 5684 EhStorClass - ok
14:40:41.0214 5684 [ A61D0F543024E458C0FE32352E1978E2 ] EhStorTcgDrv C:\Windows\system32\drivers\EhStorTcgDrv.sys
14:40:41.0224 5684 EhStorTcgDrv - ok
14:40:41.0332 5684 [ 4CB575D97653FA91FFB02DA3105EB084 ] ekrn C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
14:40:41.0354 5684 ekrn - ok
14:40:41.0367 5684 [ FEE856E92AFCC61DA146F186E291FFD7 ] epfwwfpr C:\Windows\system32\DRIVERS\epfwwfpr.sys
14:40:41.0375 5684 epfwwfpr - ok
14:40:41.0383 5684 [ D790D058D67582DB9C84C2D33695FE6B ] ErrDev C:\Windows\System32\drivers\errdev.sys
14:40:41.0391 5684 ErrDev - ok
14:40:41.0426 5684 [ F9E01C2D9F8BC049E04CF5DC24A5F638 ] EventSystem C:\Windows\system32\es.dll
14:40:41.0457 5684 EventSystem - ok
14:40:41.0478 5684 [ 7A4D6FEB8C52B3FE855E4DCDF9107E03 ] exfat C:\Windows\system32\drivers\exfat.sys
14:40:41.0506 5684 exfat - ok
14:40:41.0541 5684 [ 60996602A7111FD2D086E803F33E4282 ] fastfat C:\Windows\system32\drivers\fastfat.sys
14:40:41.0553 5684 fastfat - ok
14:40:41.0581 5684 [ F0E7F8382ED5E138B0DFA4CB5058BCFE ] Fax C:\Windows\system32\fxssvc.exe
14:40:41.0613 5684 Fax - ok
14:40:41.0626 5684 [ 73B2D11DF0B6E03A0CB0323218ACB3E4 ] fdc C:\Windows\System32\drivers\fdc.sys
14:40:41.0635 5684 fdc - ok
14:40:41.0652 5684 [ 0828E3E7BD77C89149EAD3232BFD38DB ] fdPHost C:\Windows\system32\fdPHost.dll
14:40:41.0681 5684 fdPHost - ok
14:40:41.0712 5684 [ 872506AAB591E8908DF4461475AF92DF ] FDResPub C:\Windows\system32\fdrespub.dll
14:40:41.0727 5684 FDResPub - ok
14:40:41.0740 5684 [ 0588950D93A426F97C7AAADB1A9B0458 ] fhsvc C:\Windows\system32\fhsvc.dll
14:40:41.0781 5684 fhsvc - ok
14:40:41.0802 5684 [ 88A9EBACD1058ABB237A6B4E96E7F397 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
14:40:41.0812 5684 FileInfo - ok
14:40:41.0815 5684 [ 9E4EE3A0B00FF7D5F42A4AF9744CBA02 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
14:40:41.0842 5684 Filetrace - ok
14:40:41.0861 5684 [ B1D4C168FF7B8579E3745888658FFB1D ] flpydisk C:\Windows\System32\drivers\flpydisk.sys
14:40:41.0881 5684 flpydisk - ok
14:40:41.0924 5684 [ B33EC133AE4E6C1881D2302D93D2467D ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
14:40:41.0938 5684 FltMgr - ok
14:40:41.0974 5684 [ 0BCDC0FF11B984162B0CF0FF6E9E0146 ] FontCache C:\Windows\system32\FntCache.dll
14:40:42.0043 5684 FontCache - ok
14:40:42.0108 5684 [ 0B56259F5611787222A04A8F254E51D4 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
14:40:42.0116 5684 FontCache3.0.0.0 - ok
14:40:42.0137 5684 [ A5F7873A39E4E9FAAAE59B7E9E36B705 ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
14:40:42.0146 5684 FsDepends - ok
14:40:42.0165 5684 [ A6DD7D491F587F4BC13FB972977DC8E8 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
14:40:42.0173 5684 Fs_Rec - ok
14:40:42.0200 5684 [ C1646A95EAC515F60CDB2A7A8A013C1E ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
14:40:42.0216 5684 fvevol - ok
14:40:42.0236 5684 [ A969D92973DFA895E7776B4BFE36DBB2 ] FxPPM C:\Windows\System32\drivers\fxppm.sys
14:40:42.0262 5684 FxPPM - ok
14:40:42.0266 5684 [ 52BC441E07A827EBAB70CDC7EAEDB28D ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
14:40:42.0275 5684 gagp30kx - ok
14:40:42.0348 5684 [ C403C5DB49A0F9AAF4F2128EDC0106D8 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
14:40:42.0356 5684 GamesAppService - ok
14:40:42.0370 5684 [ 721F8EEF5E9747F32670DEFF7FB92541 ] gencounter C:\Windows\System32\drivers\vmgencounter.sys
14:40:42.0393 5684 gencounter - ok
14:40:42.0423 5684 [ FC2B8B06BDBD3B6457F5A3DA9AD2410E ] GPIOClx0101 C:\Windows\system32\Drivers\msgpioclx.sys
14:40:42.0433 5684 GPIOClx0101 - ok
14:40:42.0480 5684 [ 5358678C6370F2ADC5291849F6503262 ] gpsvc C:\Windows\System32\gpsvc.dll
14:40:42.0533 5684 gpsvc - ok
14:40:42.0556 5684 [ 4373CB2FFCF35EAAA853DB2FE45A40DC ] Hamachi C:\Windows\system32\DRIVERS\Hamdrv.sys
14:40:42.0563 5684 Hamachi - ok
14:40:42.0594 5684 [ 630555943E5A3FE21010CE91EC7FC84F ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
14:40:42.0626 5684 HdAudAddService - ok
14:40:42.0648 5684 [ 7D87B5B6C7188D553E11B59DC7F0B111 ] HDAudBus C:\Windows\System32\drivers\HDAudBus.sys
14:40:42.0679 5684 HDAudBus - ok
14:40:42.0690 5684 [ 3F76BBA53D65E85A7F53E7A71082082C ] HidBatt C:\Windows\System32\drivers\HidBatt.sys
14:40:42.0705 5684 HidBatt - ok
14:40:42.0723 5684 [ 085F150D002B7F0153D3C06DDF33A143 ] HidBth C:\Windows\System32\drivers\hidbth.sys
14:40:42.0754 5684 HidBth - ok
14:40:42.0805 5684 [ CC4A07E51D89575CAB6F4EB590D87CD4 ] hidi2c C:\Windows\System32\drivers\hidi2c.sys
14:40:42.0837 5684 hidi2c - ok
14:40:42.0840 5684 [ DC96F7DACB777CDEAEF9958A50BFDA06 ] HidIr C:\Windows\System32\drivers\hidir.sys
14:40:42.0858 5684 HidIr - ok
14:40:42.0889 5684 [ FAC37D7B3D6354A5A5E19A45B50B4008 ] hidserv C:\Windows\system32\hidserv.dll
14:40:42.0909 5684 hidserv - ok
14:40:42.0941 5684 [ 894D982CEAB8CD45A56AE2C9988E86C0 ] HIDSwitch C:\Windows\System32\drivers\AsHIDSwitch64.sys
14:40:42.0947 5684 HIDSwitch - ok
14:40:42.0967 5684 [ 012C354B4AB48E9A7A657DF39E3A2073 ] HidUsb C:\Windows\System32\drivers\hidusb.sys
14:40:42.0997 5684 HidUsb - ok
14:40:43.0024 5684 [ 43F884B61A24377567CD0FEB35236334 ] hkmsvc C:\Windows\system32\kmsvc.dll
14:40:43.0052 5684 hkmsvc - ok
14:40:43.0066 5684 [ 33DFC14DFDCCFA7AA10E392F6A8EC1CF ] HomeGroupListener C:\Windows\system32\ListSvc.dll
14:40:43.0084 5684 HomeGroupListener - ok
14:40:43.0116 5684 [ E0D9F6FE18FA7F53ADD29AF719CE2B7E ] HomeGroupProvider C:\Windows\system32\provsvc.dll
14:40:43.0142 5684 HomeGroupProvider - ok
14:40:43.0166 5684 [ 64DB7A8D97CA53DCCF93D0A1E08342CF ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
14:40:43.0175 5684 HpSAMD - ok
14:40:43.0216 5684 [ F4A91D985EB9D1D2717D538F3424603C ] HTTP C:\Windows\system32\drivers\HTTP.sys
14:40:43.0257 5684 HTTP - ok
14:40:43.0269 5684 [ 2A98301068801700906C06649860FE94 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
14:40:43.0278 5684 hwpolicy - ok
14:40:43.0296 5684 [ DC76901D82097C9E297F20C287CB9A27 ] hyperkbd C:\Windows\System32\drivers\hyperkbd.sys
14:40:43.0316 5684 hyperkbd - ok
14:40:43.0327 5684 [ 716413AB3CA12DE0A7222D28C1C9352C ] HyperVideo C:\Windows\system32\DRIVERS\HyperVideo.sys
14:40:43.0353 5684 HyperVideo - ok
14:40:43.0369 5684 [ C9E9CBF73AFFBFE3E801EFB516787BA3 ] i8042prt C:\Windows\System32\drivers\i8042prt.sys
14:40:43.0379 5684 i8042prt - ok
14:40:43.0403 5684 [ 6C91E425ACE29594BD574DE38AC9B76D ] iaStorA C:\Windows\system32\drivers\iaStorA.sys
14:40:43.0417 5684 iaStorA - ok
14:40:43.0430 5684 [ 5E394EBD26FD68AA9300332C46BEDD62 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
14:40:43.0445 5684 iaStorV - ok
14:40:43.0482 5684 [ 83FF82FE209E7997067B375DAD6CF23D ] ICCS C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
14:40:43.0489 5684 ICCS - ok
14:40:43.0562 5684 [ ACD1812E8A531E1CEA09BA3991371E48 ] IconMan_R C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
14:40:43.0596 5684 IconMan_R - ok
14:40:43.0697 5684 [ 348214F96642FD4FEF630DE021BA3540 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
14:40:43.0759 5684 igfx - ok
14:40:43.0783 5684 [ 24847A06B84339FEEDE5CABF3D27D320 ] iirsp C:\Windows\system32\drivers\iirsp.sys
14:40:43.0792 5684 iirsp - ok
14:40:43.0827 5684 [ E455C83E029121270BED73CDAC381F37 ] IKEEXT C:\Windows\System32\ikeext.dll
14:40:43.0869 5684 IKEEXT - ok
14:40:43.0951 5684 [ 6C7970A8E0546A4D9466E0045C7DB199 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
14:40:43.0996 5684 IntcAzAudAddService - ok
14:40:44.0020 5684 [ F5495B38BFB9149925F54F65AB40EFBF ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys
14:40:44.0061 5684 IntcDAud - ok
14:40:44.0098 5684 [ C99F8E90DE4B8F0C7FE15BB1CBCD29DC ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
14:40:44.0111 5684 Intel(R) Capability Licensing Service Interface - ok
14:40:44.0158 5684 [ 9656F8E29F6C3161A3E99BCD3A472FF9 ] Intel(R) ME Service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
14:40:44.0165 5684 Intel(R) ME Service - ok
14:40:44.0184 5684 [ 4F37726CF764CA18A8A84F85EF3A7F24 ] intelide C:\Windows\system32\drivers\intelide.sys
14:40:44.0192 5684 intelide - ok
14:40:44.0214 5684 [ E15CDF68DD73423F15D4AC404793AF0D ] intelppm C:\Windows\System32\drivers\intelppm.sys
14:40:44.0237 5684 intelppm - ok
14:40:44.0240 5684 [ 8FCA66234A0933D796BB780B7953BAB9 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:40:44.0257 5684 IpFilterDriver - ok
14:40:44.0289 5684 [ C217B8D2E58C57A319B16125C3D4B69C ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
14:40:44.0345 5684 iphlpsvc - ok
14:40:44.0356 5684 [ 6E98A046A12AA113F8898AA5D612BD6E ] IPMIDRV C:\Windows\System32\drivers\IPMIDrv.sys
14:40:44.0391 5684 IPMIDRV - ok
14:40:44.0407 5684 [ 3969B9C218DD3FAA9F4ED2FFC3651C02 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
14:40:44.0419 5684 IPNAT - ok
14:40:44.0430 5684 [ 25CD7C4BB2863FFC2B0B311F0AEBF77C ] IRENUM C:\Windows\system32\drivers\irenum.sys
14:40:44.0447 5684 IRENUM - ok
14:40:44.0450 5684 [ D940C5BB9DC92E588533C19ABCC3D2C2 ] isapnp C:\Windows\system32\drivers\isapnp.sys
14:40:44.0459 5684 isapnp - ok
14:40:44.0487 5684 [ E6530FD4F61B40F338BF4355A21B9A09 ] iScsiPrt C:\Windows\System32\drivers\msiscsi.sys
14:40:44.0499 5684 iScsiPrt - ok
14:40:44.0534 5684 [ 78ABBE558F57144047F10A0F50FE4B2F ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
14:40:44.0541 5684 jhi_service - ok
14:40:44.0549 5684 [ 8FBD94B69D6423E20ABCD59D86368B21 ] kbdclass C:\Windows\System32\drivers\kbdclass.sys
14:40:44.0558 5684 kbdclass - ok
14:40:44.0582 5684 [ E88C932ABDF8185A62C8F2FC7B051FB6 ] kbdhid C:\Windows\System32\drivers\kbdhid.sys
14:40:44.0591 5684 kbdhid - ok
14:40:44.0609 5684 [ A8080BEBCDB7A16495CE1205921DCAC5 ] kbfiltr C:\Windows\System32\drivers\kbfiltr.sys
14:40:44.0615 5684 kbfiltr - ok
14:40:44.0625 5684 [ FB6C185092E18011EF49989425C2AA87 ] kdnic C:\Windows\system32\DRIVERS\kdnic.sys
14:40:44.0660 5684 kdnic - ok
14:40:44.0668 5684 [ F702AB6181513303AB0FC8D59E52708B ] KeyIso C:\Windows\system32\lsass.exe
14:40:44.0678 5684 KeyIso - ok
14:40:44.0706 5684 [ DFA480F6DED551464F3A5B959F437800 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
14:40:44.0716 5684 KSecDD - ok
14:40:44.0720 5684 [ 127FB0AAD232BAAD2C9BBACD374F4FC5 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
14:40:44.0732 5684 KSecPkg - ok
14:40:44.0735 5684 [ 81492FEEBF2F26455B00EE8DBAE8A1B0 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
14:40:44.0755 5684 ksthunk - ok
14:40:44.0783 5684 [ 5825DBACEDC3812B5CF8D40B997BF210 ] KtmRm C:\Windows\system32\msdtckrm.dll
14:40:44.0797 5684 KtmRm - ok
14:40:44.0826 5684 [ 256EE31588257E8A555DBFAA13F1908E ] LanmanServer C:\Windows\system32\srvsvc.dll
14:40:44.0846 5684 LanmanServer - ok
14:40:44.0889 5684 [ 16650912BE5A94B40E0B3B4C39652B56 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

[AngelikaB]

3 strana
14:40:44.0915 5684 LanmanWorkstation - ok
14:40:44.0930 5684 [ CEEFD29FC551F289810B0B9381B321DC ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
14:40:44.0942 5684 lltdio - ok
14:40:44.0974 5684 [ BCF53485E0A94722CDE3C4A93CD8EB8C ] lltdsvc C:\Windows\System32\lltdsvc.dll
14:40:45.0002 5684 lltdsvc - ok
14:40:45.0018 5684 [ 5A2F7F1CBC2E631A497DAD16164E06D2 ] lmhosts C:\Windows\System32\lmhsvc.dll
14:40:45.0054 5684 lmhosts - ok
14:40:45.0081 5684 [ 2C24DC448DBE8DB9BE1441B824C57E79 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
14:40:45.0089 5684 LMS - ok
14:40:45.0119 5684 [ 022CDD12161B063D7852B1075BF3FFF2 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
14:40:45.0128 5684 LSI_SAS - ok
14:40:45.0133 5684 [ 07AD59D669B996F29F91817F0ECFA34F ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
14:40:45.0142 5684 LSI_SAS2 - ok
14:40:45.0146 5684 [ 216FB796AA4E252ACCE93B1BCB80B5EC ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
14:40:45.0156 5684 LSI_SCSI - ok
14:40:45.0170 5684 [ 5E80530AF37102488EE980B4A92AF99F ] LSI_SSS C:\Windows\system32\drivers\lsi_sss.sys
14:40:45.0179 5684 LSI_SSS - ok
14:40:45.0244 5684 [ A57BA284F5996FFD32DCDBC41A4657DB ] LSM C:\Windows\System32\lsm.dll
14:40:45.0331 5684 LSM - ok
14:40:45.0354 5684 [ 2BDC5D711FA61307CE6190D47C956368 ] luafv C:\Windows\system32\drivers\luafv.sys
14:40:45.0369 5684 luafv - ok
14:40:45.0402 5684 [ FD5465B876D55534117963FAAA4B9DFC ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
14:40:45.0408 5684 MBAMProtector - ok
14:40:45.0502 5684 [ 0E08BDD7326E657D59DB40BAD23D8169 ] MBAMScheduler C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
14:40:45.0538 5684 MBAMScheduler - ok
14:40:45.0584 5684 [ A8E7F3DB083EB0839DFC1C763CDD2594 ] MBAMService C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
14:40:45.0600 5684 MBAMService - ok
14:40:45.0648 5684 [ 6140163BFE9D8F2DFDBA088ED5521C13 ] MBAMSwissArmy C:\Windows\system32\drivers\MBAMSwissArmy.sys
14:40:45.0655 5684 MBAMSwissArmy - ok
14:40:45.0679 5684 [ 3FFFB7F54CD7A792099C10402FCF8F56 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
14:40:45.0685 5684 MBAMWebAccessControl - ok
14:40:45.0707 5684 [ 9B0D829C3BE4E7472DB9DD2B79908E3C ] megasas C:\Windows\system32\drivers\megasas.sys
14:40:45.0715 5684 megasas - ok
14:40:45.0725 5684 [ ECC3F54C7AFC318271C4F0B4606D8DB0 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
14:40:45.0738 5684 MegaSR - ok
14:40:45.0762 5684 [ 772A1DEEDFDBC244183B5C805D1B7D85 ] MEIx64 C:\Windows\System32\drivers\HECIx64.sys
14:40:45.0767 5684 MEIx64 - ok
14:40:45.0831 5684 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
14:40:45.0838 5684 Microsoft Office Groove Audit Service - ok
14:40:45.0863 5684 [ EEE908BE7143FCA48CF0CB87214E2AB8 ] MMCSS C:\Windows\system32\mmcss.dll
14:40:45.0884 5684 MMCSS - ok
14:40:45.0901 5684 [ 780098AD5DA8A4822E2563984C85EF7B ] Modem C:\Windows\system32\drivers\modem.sys
14:40:45.0924 5684 Modem - ok
14:40:45.0947 5684 [ EA8EAD3F5B762F889CC7F3966625B48B ] monitor C:\Windows\System32\drivers\monitor.sys
14:40:45.0971 5684 monitor - ok
14:40:45.0988 5684 [ 618446B98C79776654340CE27C73485E ] mouclass C:\Windows\System32\drivers\mouclass.sys
14:40:45.0996 5684 mouclass - ok
14:40:46.0017 5684 [ C0ADEBED913295803B579ED288936CBB ] mouhid C:\Windows\System32\drivers\mouhid.sys
14:40:46.0038 5684 mouhid - ok
14:40:46.0042 5684 [ 89D263DBF08119CE16273991C120D6DD ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
14:40:46.0052 5684 mountmgr - ok
14:40:46.0086 5684 [ AEE4E9CC59CDEB55B1ECB0E596E796BE ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
14:40:46.0094 5684 MozillaMaintenance - ok
14:40:46.0120 5684 [ 4CCBBD4944777CA100B9A6C2F149A46F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
14:40:46.0156 5684 mpsdrv - ok
14:40:46.0181 5684 [ 9DE3341BD4E14BC5FADFCAD3019F2D0D ] MpsSvc C:\Windows\system32\mpssvc.dll
14:40:46.0231 5684 MpsSvc - ok
14:40:46.0265 5684 [ 3D70147F55F1EC84EB9139ED7FFE48BC ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
14:40:46.0285 5684 MRxDAV - ok
14:40:46.0322 5684 [ 93179D48066918323628CB016D8C94DC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
14:40:46.0366 5684 mrxsmb - ok
14:40:46.0393 5684 [ 06D5F2FA3C61E8EA91648EA8E9F99FD3 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:40:46.0404 5684 mrxsmb10 - ok
14:40:46.0427 5684 [ 5C7DD2E5759FFCCD2C7341C1B90F2B26 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:40:46.0454 5684 mrxsmb20 - ok
14:40:46.0478 5684 [ 98487487D6B3797CA927E9D7B030AE13 ] MsBridge C:\Windows\system32\DRIVERS\bridge.sys
14:40:46.0504 5684 MsBridge - ok
14:40:46.0524 5684 [ 4A07458EB4F17573BD39F22029A991C1 ] MSDTC C:\Windows\System32\msdtc.exe
14:40:46.0549 5684 MSDTC - ok
14:40:46.0570 5684 [ 3886F1F2A4D2900ABAA7E4486BEEE6A2 ] Msfs C:\Windows\system32\drivers\Msfs.sys
14:40:46.0588 5684 Msfs - ok
14:40:46.0600 5684 [ C32A7A39B960A42BA9D4FBE47213CA03 ] msgpiowin32 C:\Windows\System32\drivers\msgpiowin32.sys
14:40:46.0609 5684 msgpiowin32 - ok
14:40:46.0624 5684 [ D3857A767B91A061B408CCAB02DA4F40 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
14:40:46.0649 5684 mshidkmdf - ok
14:40:46.0667 5684 [ 839B48910FB1E887635C48F3EC11A05E ] mshidumdf C:\Windows\System32\drivers\mshidumdf.sys
14:40:46.0689 5684 mshidumdf - ok
14:40:46.0715 5684 [ 55C0DB741E3AB7463242B185B1C2997C ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
14:40:46.0723 5684 msisadrv - ok
14:40:46.0741 5684 [ 216C6B035A4BA5560E1255BD8E5BB89F ] MSiSCSI C:\Windows\system32\iscsiexe.dll
14:40:46.0758 5684 MSiSCSI - ok
14:40:46.0762 5684 msiserver - ok
14:40:46.0774 5684 [ 509809566E49F4411055864EA8D437CD ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
14:40:46.0790 5684 MSKSSRV - ok
14:40:46.0794 5684 [ 63145201D6458E4958E572E7D6FC2604 ] MsLldp C:\Windows\system32\DRIVERS\mslldp.sys
14:40:46.0812 5684 MsLldp - ok
14:40:46.0815 5684 [ 99D526E803DB6D7FF290FD98B6204641 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
14:40:46.0832 5684 MSPCLOCK - ok
14:40:46.0835 5684 [ 06FA77C3E2A491ADCD704C5E73006269 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
14:40:46.0856 5684 MSPQM - ok
14:40:46.0886 5684 [ E134EC4DE11CF78CB01432D180710D84 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
14:40:46.0901 5684 MsRPC - ok
14:40:46.0907 5684 [ B5AECF12F09DEE97C9FCAA5BA016CE1E ] mssmbios C:\Windows\System32\drivers\mssmbios.sys
14:40:46.0916 5684 mssmbios - ok
14:40:46.0926 5684 [ 72D66A05E0F99F2528F6C6204FD22AA1 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
14:40:46.0951 5684 MSTEE - ok
14:40:46.0954 5684 [ 8AAAE399FC255FA105D4158CBA289001 ] MTConfig C:\Windows\System32\drivers\MTConfig.sys
14:40:46.0974 5684 MTConfig - ok
14:40:46.0979 5684 [ 3BCB702F3E6CC622DCAFCAA45D7CDE0A ] Mup C:\Windows\system32\Drivers\mup.sys
14:40:46.0988 5684 Mup - ok
14:40:46.0992 5684 [ 3A1E095277BBD406CEA8EA6B76950664 ] mvumis C:\Windows\system32\drivers\mvumis.sys
14:40:47.0001 5684 mvumis - ok
14:40:47.0051 5684 [ 4B18840511D720BA118D3017E8165875 ] napagent C:\Windows\system32\qagentRT.dll
14:40:47.0085 5684 napagent - ok
14:40:47.0105 5684 [ 43D7388A90A4C6EA346A4D6FF0377479 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
14:40:47.0118 5684 NativeWifiP - ok
14:40:47.0137 5684 [ 6A0C3996DA7DAE6D6939676D786EEEC4 ] NcaSvc C:\Windows\System32\ncasvc.dll
14:40:47.0149 5684 NcaSvc - ok
14:40:47.0165 5684 [ C982FE4CC91DECE2259F494FCEB4030F ] NcdAutoSetup C:\Windows\System32\NcdAutoSetup.dll
14:40:47.0192 5684 NcdAutoSetup - ok
14:40:47.0240 5684 [ A10E176F3B2BF83EDE7B5C4658C93B66 ] NDIS C:\Windows\system32\drivers\ndis.sys
14:40:47.0264 5684 NDIS - ok
14:40:47.0287 5684 [ 39C8A1D9D46F5E83A016BCAB72455284 ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
14:40:47.0312 5684 NdisCap - ok
14:40:47.0316 5684 [ 762941932B7E4C588E48A577BA9D6440 ] NdisImPlatform C:\Windows\system32\DRIVERS\NdisImPlatform.sys
14:40:47.0336 5684 NdisImPlatform - ok
14:40:47.0339 5684 [ 7A6F8A6D0E01432EBA294EF29CDD0FA7 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
14:40:47.0376 5684 NdisTapi - ok
14:40:47.0379 5684 [ 79AB68BB3FFF974AD4F41FA559F4EC67 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
14:40:47.0400 5684 Ndisuio - ok
14:40:47.0404 5684 [ 62C7DBF4F9301F76CF87D4B9D8F57BF8 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
14:40:47.0442 5684 NdisWan - ok
14:40:47.0446 5684 [ 62C7DBF4F9301F76CF87D4B9D8F57BF8 ] NDISWANLEGACY C:\Windows\system32\DRIVERS\ndiswan.sys
14:40:47.0458 5684 NDISWANLEGACY - ok
14:40:47.0487 5684 [ 3730942D7DB2F8BB5F84542B7FF6F650 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
14:40:47.0496 5684 NDProxy - ok
14:40:47.0507 5684 [ D3F60A4345FCA9C1BE68AD7D0D6DE770 ] Ndu C:\Windows\system32\drivers\Ndu.sys
14:40:47.0517 5684 Ndu - ok
14:40:47.0521 5684 [ 7C203A76394F9AE68F69EEE5F9612C4A ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
14:40:47.0533 5684 NetBIOS - ok
14:40:47.0538 5684 [ 7CEC25C682D319D484630B3952C31A11 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
14:40:47.0550 5684 NetBT - ok
14:40:47.0568 5684 [ F702AB6181513303AB0FC8D59E52708B ] Netlogon C:\Windows\system32\lsass.exe
14:40:47.0578 5684 Netlogon - ok
14:40:47.0608 5684 [ 89519D29CBEC2121CA65CC29C4D345E0 ] Netman C:\Windows\System32\netman.dll
14:40:47.0632 5684 Netman - ok
14:40:47.0663 5684 [ 79FA9393C67EBBF92A56923592CF7A7C ] netprofm C:\Windows\System32\netprofmsvc.dll
14:40:47.0701 5684 netprofm - ok
14:40:47.0745 5684 [ 5243CFC2E7161C91C2B355240035B9E4 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:40:47.0771 5684 NetTcpPortSharing - ok
14:40:47.0914 5684 [ 57B9C04D673F236D41FAB03842C8640B ] NETwNs64 C:\Windows\system32\DRIVERS\NETwNs64.sys
14:40:48.0003 5684 NETwNs64 - ok
14:40:48.0008 5684 [ 12DD2800E4EEA37DC9AE256AD62423B4 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
14:40:48.0017 5684 nfrd960 - ok
14:40:48.0040 5684 [ 80ABCD4C2DE9FD832477303AE0CA3BE5 ] NlaSvc C:\Windows\System32\nlasvc.dll
14:40:48.0074 5684 NlaSvc - ok
14:40:48.0094 5684 [ 17E19A742FB30C002F8B43575451DBE1 ] Npfs C:\Windows\system32\drivers\Npfs.sys
14:40:48.0110 5684 Npfs - ok
14:40:48.0128 5684 [ 8ED299C30792544264E558BEA79F0947 ] npsvctrig C:\Windows\System32\drivers\npsvctrig.sys
14:40:48.0142 5684 npsvctrig - ok
14:40:48.0151 5684 [ 832B5FDF0B5577713FD7F2465FCD0ACE ] nsi C:\Windows\system32\nsisvc.dll
14:40:48.0170 5684 nsi - ok
14:40:48.0173 5684 [ 689B3B1E95C70ABF7AFF29F9406EF1E0 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
14:40:48.0183 5684 nsiproxy - ok
14:40:48.0232 5684 [ 7BE3EDFFA3216F989A6BDCB14795DD08 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
14:40:48.0269 5684 Ntfs - ok
14:40:48.0277 5684 [ 4163ADE07DB51843AE31F65B94F5398D ] Null C:\Windows\system32\drivers\Null.sys
14:40:48.0286 5684 Null - ok
14:40:48.0531 5684 [ 757ACE4D4C9FF0571F86AA5D586B45E8 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
14:40:48.0678 5684 nvlddmkm - ok
14:40:48.0792 5684 [ D2FE0376285A783693469422678E878B ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
14:40:48.0816 5684 NvNetworkService - ok
14:40:48.0843 5684 [ 445422B928D2FE322BB6B956EA77DC7B ] nvpciflt C:\Windows\system32\DRIVERS\nvpciflt.sys
14:40:48.0849 5684 nvpciflt - ok
14:40:48.0869 5684 [ D6D34118263412D3AAA8348A9572B7F2 ] nvraid C:\Windows\system32\drivers\nvraid.sys
14:40:48.0879 5684 nvraid - ok
14:40:48.0883 5684 [ 27AFC428D1D32ABD04A86763A4EDDEA9 ] nvstor C:\Windows\system32\drivers\nvstor.sys
14:40:48.0894 5684 nvstor - ok
14:40:49.0200 5684 [ 4F0E2990DB12849D428DE7B0AC5D92B9 ] NvStreamSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
14:40:49.0433 5684 NvStreamSvc - ok
14:40:49.0470 5684 [ 1C7CC708AC4A02A3BE8915539780534A ] nvsvc C:\Windows\system32\nvvsvc.exe
14:40:49.0488 5684 nvsvc - ok
14:40:49.0512 5684 [ 939C0FAE9CC0CDD69E6508BDE4C11FE5 ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
14:40:49.0518 5684 nvvad_WaveExtensible - ok
14:40:49.0531 5684 [ 051CFB5107BAAE510419BDC41F8C4036 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
14:40:49.0540 5684 nv_agp - ok
14:40:49.0608 5684 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
14:40:49.0619 5684 odserv - ok
14:40:49.0634 5684 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:40:49.0642 5684 ose - ok
14:40:49.0680 5684 [ AB76700D764A342D7475FB8F47CAB18C ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
14:40:49.0710 5684 p2pimsvc - ok
14:40:49.0725 5684 [ 4319FD931DCD796435ECB5DB4A04FBA5 ] p2psvc C:\Windows\system32\p2psvc.dll
14:40:49.0740 5684 p2psvc - ok
14:40:49.0760 5684 [ 4563DAF8C6A740AD7F501E219BD10766 ] Parport C:\Windows\System32\drivers\parport.sys
14:40:49.0785 5684 Parport - ok
14:40:49.0805 5684 [ D6ACCF9F2EEEEA711C14EFD976E573F3 ] partmgr C:\Windows\system32\drivers\partmgr.sys
14:40:49.0814 5684 partmgr - ok
14:40:49.0839 5684 [ 4811D9EC53649105A5A8BEA661B0F936 ] PcaSvc C:\Windows\System32\pcasvc.dll
14:40:49.0873 5684 PcaSvc - ok
14:40:49.0885 5684 [ 4A003E8F718C1E6A2050CA98CD53E3E2 ] pci C:\Windows\system32\drivers\pci.sys
14:40:49.0897 5684 pci - ok
14:40:49.0912 5684 [ F9908D274D458220F91E89B54D78D837 ] pciide C:\Windows\system32\drivers\pciide.sys
14:40:49.0920 5684 pciide - ok
14:40:49.0928 5684 [ 84D19CB6102627932DCB5DFDF89FE269 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
14:40:49.0940 5684 pcmcia - ok
14:40:49.0950 5684 [ CEBBAD5391C2644560C55628A40BFD27 ] pcw C:\Windows\system32\drivers\pcw.sys
14:40:49.0959 5684 pcw - ok
14:40:49.0988 5684 [ 0698DEDEAD6A00AD0D468C687D830FBF ] pdc C:\Windows\system32\drivers\pdc.sys
14:40:49.0997 5684 pdc - ok
14:40:50.0024 5684 [ 61FE70659CD43E07F94DA4DC31DEC493 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
14:40:50.0040 5684 PEAUTH - ok
14:40:50.0111 5684 [ EB88FA19F0EA05DD04BE9C5FFEEFFE1A ] PerfHost C:\Windows\SysWow64\perfhost.exe
14:40:50.0130 5684 PerfHost - ok
14:40:50.0186 5684 [ 6E84BFF58F7643499277F29DFA2F8C8D ] pla C:\Windows\system32\pla.dll
14:40:50.0227 5684 pla - ok
14:40:50.0244 5684 [ 799BE46D45D486704CE0F37CA5385262 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
14:40:50.0255 5684 PlugPlay - ok
14:40:50.0268 5684 [ 8E2414E818C26C4A9C70CB2B8567F04F ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
14:40:50.0277 5684 PNRPAutoReg - ok
14:40:50.0291 5684 [ AB76700D764A342D7475FB8F47CAB18C ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
14:40:50.0304 5684 PNRPsvc - ok
14:40:50.0331 5684 [ 0108C8E5176D590F242701EF5A62CC26 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
14:40:50.0349 5684 PolicyAgent - ok
14:40:50.0367 5684 [ F1E067F56373F11EA4B785CAE823740A ] Power C:\Windows\system32\umpo.dll
14:40:50.0384 5684 Power - ok
14:40:50.0410 5684 [ 362D47E5B4D67270DE4B8606036F4ADD ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
14:40:50.0422 5684 PptpMiniport - ok
14:40:50.0514 5684 [ 9D59831262CAD44E709D695FC9D5E7AB ] PrintNotify C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll
14:40:50.0599 5684 PrintNotify - ok
14:40:50.0625 5684 [ DD979EB6A7212F60E4AFBE96EDC7AE6D ] Processor C:\Windows\System32\drivers\processr.sys
14:40:50.0643 5684 Processor - ok
14:40:50.0664 5684 [ 429E8502AD2227CF88F8840FC5BD590D ] ProfSvc C:\Windows\system32\profsvc.dll
14:40:50.0690 5684 ProfSvc - ok
14:40:50.0703 5684 [ EB8034147D4820CD31BFCB11A2A652DF ] Psched C:\Windows\system32\DRIVERS\pacer.sys
14:40:50.0716 5684 Psched - ok
14:40:50.0730 5684 [ 0AFBF333B6F87A2F598EAB379AF100B8 ] QWAVE C:\Windows\system32\qwave.dll
14:40:50.0753 5684 QWAVE - ok
14:40:50.0757 5684 [ 13D47BB0CCA2FC51BD15F8E85C6A078E ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
14:40:50.0776 5684 QWAVEdrv - ok
14:40:50.0792 5684 [ 873C60F8178100557740A832FCE10B5F ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
14:40:50.0819 5684 RasAcd - ok
14:40:50.0846 5684 [ 69B93F623B130976243ECA3D84CC99CA ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
14:40:50.0875 5684 RasAgileVpn - ok
14:40:50.0897 5684 [ 005F6E54C4A2DA4EBF68FB0392CE8BB0 ] RasAuto C:\Windows\System32\rasauto.dll
14:40:50.0918 5684 RasAuto - ok
14:40:50.0930 5684 [ A14D625C5AEE5FFE0F47D1A1D419FAAE ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
14:40:50.0960 5684 Rasl2tp - ok
14:40:50.0981 5684 [ C923C785A2DE0B396AD6D13ACAFF2DE9 ] RasMan C:\Windows\System32\rasmans.dll
14:40:50.0998 5684 RasMan - ok
14:40:51.0002 5684 [ 00695B9C2DB6111064499C529E90C042 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
14:40:51.0029 5684 RasPppoe - ok
14:40:51.0032 5684 [ A7F24D8CD1956B0A1FDCB86CC5114DE4 ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
14:40:51.0044 5684 RasSstp - ok
14:40:51.0070 5684 [ CA03D642ACE58E1BA54E4B383F91CD69 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
14:40:51.0083 5684 rdbss - ok
14:40:51.0106 5684 [ CA7DF5EC95D8DE0DD24BE7FF97369F68 ] rdpbus C:\Windows\System32\drivers\rdpbus.sys
14:40:51.0145 5684 rdpbus - ok
14:40:51.0158 5684 [ B2A3AD74FF2E2FFA73AF2567108231B3 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
14:40:51.0199 5684 RDPDR - ok
14:40:51.0230 5684 [ 57F4787E4602A3FCA719C0A33137C6DA ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
14:40:51.0239 5684 RdpVideoMiniport - ok
14:40:51.0243 5684 [ B3CB0721E81E30419CE7D837EF4EA151 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
14:40:51.0265 5684 RDPWD - ok
14:40:51.0282 5684 [ 62C1F8A0685FE07E998AA296C4F697C4 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
14:40:51.0293 5684 rdyboost - ok
14:40:51.0325 5684 [ 3663CCF243EE0C04E9F6F91ED1737273 ] RemoteAccess C:\Windows\System32\mprdim.dll
14:40:51.0355 5684 RemoteAccess - ok
14:40:51.0375 5684 [ E80DD61E52EDFFF9DA1ED7260A68855B ] RemoteRegistry C:\Windows\system32\regsvc.dll
14:40:51.0403 5684 RemoteRegistry - ok
14:40:51.0432 5684 [ CCBFCABDFE2BC22F0645CEAADDB36004 ] RFCOMM C:\Windows\System32\drivers\rfcomm.sys
14:40:51.0450 5684 RFCOMM - ok
14:40:51.0470 5684 [ 73F2E030B5C24E4E41401B5F0D59E6FD ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
14:40:51.0491 5684 RpcEptMapper - ok
14:40:51.0506 5684 [ 10B21284B3D964AB3DC45490E57D422E ] RpcLocator C:\Windows\system32\locator.exe
14:40:51.0516 5684 RpcLocator - ok
14:40:51.0579 5684 [ 1EC6E533C954BDDF2A37E7851A7E58FD ] RpcSs C:\Windows\system32\rpcss.dll
14:40:51.0596 5684 RpcSs - ok
14:40:51.0623 5684 [ C648C1FC380D17CB1D6CEEBA168CB15F ] RSBASTOR C:\Windows\system32\DRIVERS\RtsBaStor.sys
14:40:51.0632 5684 RSBASTOR - ok
14:40:51.0661 5684 [ E04E770DD198B9399640717145E79EBF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
14:40:51.0674 5684 rspndr - ok
14:40:51.0713 5684 [ D9C5260772FDA64AB729C0B4822F11E3 ] RTL8168 C:\Windows\system32\DRIVERS\Rt630x64.sys
14:40:51.0728 5684 RTL8168 - ok
14:40:51.0749 5684 [ 752EC7DCD2F96871A3857EEE6AFE965A ] s3cap C:\Windows\System32\drivers\vms3cap.sys
14:40:51.0766 5684 s3cap - ok
14:40:51.0790 5684 [ F702AB6181513303AB0FC8D59E52708B ] SamSs C:\Windows\system32\lsass.exe
14:40:51.0801 5684 SamSs - ok
14:40:51.0843 5684 [ 9C7B28CE0D136DB226E24DB3BC817F92 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
14:40:51.0853 5684 sbp2port - ok
14:40:51.0880 5684 [ 14316954FCE79C9DE5A0AFF9D42C83AA ] SCardSvr C:\Windows\System32\SCardSvr.dll
14:40:51.0905 5684 SCardSvr - ok
14:40:51.0917 5684 [ 5D7733A12756B267FCA021672B26BC9E ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
14:40:51.0928 5684 scfilter - ok
14:40:51.0970 5684 [ ED40ED9A65F3E79A8C43DD50C5FDADBF ] Schedule C:\Windows\system32\schedsvc.dll
14:40:52.0024 5684 Schedule - ok
14:40:52.0040 5684 [ BAF8F0F55BC300E5F882E521F054E345 ] SCPolicySvc C:\Windows\System32\certprop.dll
14:40:52.0053 5684 SCPolicySvc - ok
14:40:52.0083 5684 [ F58B030A0664385C707B8C1C63682041 ] sdbus C:\Windows\System32\drivers\sdbus.sys
14:40:52.0094 5684 sdbus - ok
14:40:52.0124 5684 [ 92968277ED491E4B3DDA361E3952361E ] SDRSVC C:\Windows\System32\SDRSVC.dll
14:40:52.0151 5684 SDRSVC - ok
14:40:52.0171 5684 [ BB107AA9980B0DA4E19A3A90C3BD4460 ] sdstor C:\Windows\System32\drivers\sdstor.sys
14:40:52.0180 5684 sdstor - ok
14:40:52.0194 5684 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
14:40:52.0219 5684 secdrv - ok
14:40:52.0249 5684 [ CD282626738B6BC92B6E7CD0AAE95B63 ] seclogon C:\Windows\system32\seclogon.dll
14:40:52.0270 5684 seclogon - ok
14:40:52.0281 5684 [ 9C51620998F0763039DFA6BF68E475ED ] SENS C:\Windows\System32\sens.dll
14:40:52.0307 5684 SENS - ok
14:40:52.0311 5684 [ 0D50B4B860DAB65241628D04CD33ACAE ] SensrSvc C:\Windows\system32\sensrsvc.dll
14:40:52.0326 5684 SensrSvc - ok
14:40:52.0339 5684 [ 87C46B239A7EEF30FDFDD5E9BD46130C ] SerCx C:\Windows\system32\drivers\SerCx.sys
14:40:52.0348 5684 SerCx - ok
14:40:52.0363 5684 [ 7A1F9347C85FD55E39B8A76B3A25C5AD ] Serenum C:\Windows\System32\drivers\serenum.sys
14:40:52.0383 5684 Serenum - ok
14:40:52.0386 5684 [ F640A0A218BBF857F1D04A15D7D939F6 ] Serial C:\Windows\System32\drivers\serial.sys
14:40:52.0396 5684 Serial - ok
14:40:52.0399 5684 [ F1A5F56B2620B862CC28FF96A0A6DAAB ] sermouse C:\Windows\System32\drivers\sermouse.sys
14:40:52.0407 5684 sermouse - ok
14:40:52.0448 5684 [ CB60A60340788C8D6DE2A269D28086AB ] SessionEnv C:\Windows\system32\sessenv.dll
14:40:52.0461 5684 SessionEnv - ok
14:40:52.0464 5684 [ 7EE65419B29302C795714FF8073969A1 ] sfloppy C:\Windows\System32\drivers\sfloppy.sys
14:40:52.0474 5684 sfloppy - ok
14:40:52.0509 5684 [ 090AE16F79C8EAD04E6031F863DA85F3 ] SharedAccess C:\Windows\System32\ipnathlp.dll
14:40:52.0526 5684 SharedAccess - ok
14:40:52.0567 5684 [ A77F3ABE13FCC698511E5DEC7ACEBD5F ] ShellHWDetection C:\Windows\System32\shsvcs.dll
14:40:52.0621 5684 ShellHWDetection - ok
14:40:52.0655 5684 [ 2560721D6F16D5B611C36A3A9D28C1B2 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
14:40:52.0664 5684 SiSRaid2 - ok
14:40:52.0667 5684 [ 3AA8FDE1DBF65BB8B88B053529554A0D ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
14:40:52.0677 5684 SiSRaid4 - ok
14:40:52.0710 5684 [ 50D9949020E02B847CD48F1243FCB895 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
14:40:52.0721 5684 SkypeUpdate - ok
14:40:52.0744 5684 [ E660156A4588A84305CB772FD2C0DB21 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
14:40:52.0772 5684 SNMPTRAP - ok
14:40:52.0827 5684 [ 9110193D93960E38B8692E4519C75D72 ] spaceport C:\Windows\system32\drivers\spaceport.sys
14:40:52.0839 5684 spaceport - ok
14:40:52.0861 5684 [ 3D8679C8DF52EB26EB7583A4E0A29202 ] SpbCx C:\Windows\system32\drivers\SpbCx.sys
14:40:52.0886 5684 SpbCx - ok
14:40:52.0925 5684 [ 3F215BF2D4D8D6756298B25B579772C2 ] Spooler C:\Windows\System32\spoolsv.exe
14:40:52.0943 5684 Spooler - ok
14:40:53.0054 5684 [ 061A977C920FBE4BF71FF47C966DDDCA ] sppsvc C:\Windows\system32\sppsvc.exe
14:40:53.0105 5684 sppsvc - ok
14:40:53.0121 5684 [ 0F1FCD575A03ABDE13FCA9D0ADE4DDA6 ] srv C:\Windows\system32\DRIVERS\srv.sys
14:40:53.0148 5684 srv - ok
14:40:53.0178 5684 [ 56218A571ECF8D55E0CDFF8DF2546CF1 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
14:40:53.0212 5684 srv2 - ok
14:40:53.0235 5684 [ 14FC338B80CFF7E04215133B568D15C4 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
14:40:53.0245 5684 srvnet - ok
14:40:53.0274 5684 [ 7A20882D76D4A78240A5AC9F2C2EBA21 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
14:40:53.0297 5684 SSDPSRV - ok
14:40:53.0301 5684 [ D233B16999A8E626F6004BD7814C57EC ] SstpSvc C:\Windows\system32\sstpsvc.dll
14:40:53.0314 5684 SstpSvc - ok
14:40:53.0373 5684 [ 2F3B5A3567FFB343D8867C3D34C687F1 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
14:40:53.0665 5684 Steam Client Service - ok
14:40:53.0708 5684 [ 4E85355B94CFCB67C135F6521A4895A7 ] stexstor C:\Windows\system32\drivers\stexstor.sys
14:40:53.0718 5684 stexstor - ok
14:40:53.0748 5684 [ BAC8A721736AECC55A4F71523AEAB65F ] stisvc C:\Windows\System32\wiaservc.dll
14:40:53.0802 5684 stisvc - ok
14:40:53.0826 5684 [ B240874B2CA0CD02E8CD11E140B14C57 ] storahci C:\Windows\system32\drivers\storahci.sys
14:40:53.0837 5684 storahci - ok
14:40:53.0861 5684 [ F74DBC95A57B1EE866D3732EB5F79BE2 ] storflt C:\Windows\system32\DRIVERS\vmstorfl.sys
14:40:53.0871 5684 storflt - ok
14:40:53.0885 5684 [ 5337E138B49ED1F44CCBA4073BC35C20 ] StorSvc C:\Windows\system32\storsvc.dll
14:40:53.0912 5684 StorSvc - ok
14:40:53.0925 5684 [ 543CD3CC0E05B8D8815E0D4F040B6F59 ] storvsc C:\Windows\system32\drivers\storvsc.sys
14:40:53.0934 5684 storvsc - ok
14:40:53.0941 5684 [ 8BC1C1ED6EF9C985A3FAA6A72F41679A ] svsvc C:\Windows\system32\svsvc.dll
14:40:53.0965 5684 svsvc - ok
14:40:53.0975 5684 [ 4AFD66AAE74FFB5986BC240744DC5FC9 ] swenum C:\Windows\System32\drivers\swenum.sys
14:40:53.0984 5684 swenum - ok
14:40:54.0001 5684 [ 502F9488540051F3E6C39889ECFA76BB ] swprv C:\Windows\System32\swprv.dll
14:40:54.0022 5684 swprv - ok
14:40:54.0063 5684 [ A06CB9269D29EE3D0F3F5630ABB660B8 ] SysMain C:\Windows\system32\sysmain.dll
14:40:54.0083 5684 SysMain - ok
14:40:54.0116 5684 [ 6FB88606C4A71E1BFAF97D63A676C673 ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
14:40:54.0149 5684 SystemEventsBroker - ok
14:40:54.0171 5684 [ A6C06C45C44AD06C70AF8899AEC15BDC ] TabletInputService C:\Windows\System32\TabSvc.dll
14:40:54.0183 5684 TabletInputService - ok
14:40:54.0201 5684 [ 88B7721AB551C4325036B25A34A2BF7B ] TapiSrv C:\Windows\System32\tapisrv.dll
14:40:54.0227 5684 TapiSrv - ok
14:40:54.0346 5684 [ B23882881EFD9404B62993906BC38709 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
14:40:54.0390 5684 Tcpip - ok
14:40:54.0446 5684 [ B23882881EFD9404B62993906BC38709 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
14:40:54.0488 5684 TCPIP6 - ok
14:40:54.0508 5684 [ 8F2A13A5DF99D72FDDE87F502A66F989 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
14:40:54.0519 5684 tcpipreg - ok
14:40:54.0525 5684 [ 73DC722CE5DF26D7638CE2446F2655C7 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
14:40:54.0535 5684 tdx - ok
14:40:54.0549 5684 [ F7C8AB5D8AFFAA318D6A21093D139BF4 ] terminpt C:\Windows\System32\drivers\terminpt.sys
14:40:54.0558 5684 terminpt - ok
14:40:54.0597 5684 [ 541EE228D0DEF392F7B2DFD885DD021B ] TermService C:\Windows\System32\termsrv.dll
14:40:54.0639 5684 TermService - ok
14:40:54.0643 5684 [ 519A6F672FFF56B7D8EE8C730CEC8ECD ] Themes C:\Windows\system32\themeservice.dll
14:40:54.0666 5684 Themes - ok
14:40:54.0697 5684 [ EEE908BE7143FCA48CF0CB87214E2AB8 ] THREADORDER C:\Windows\system32\mmcss.dll
14:40:54.0706 5684 THREADORDER - ok
14:40:54.0737 5684 [ 4515B9E4140F04FB3907692DF89FCA87 ] TimeBroker C:\Windows\System32\TimeBrokerServer.dll
14:40:54.0757 5684 TimeBroker - ok
14:40:54.0785 5684 [ E94F7A7B48C7638D1F3F8089344C97B7 ] TPM C:\Windows\system32\drivers\tpm.sys
14:40:54.0795 5684 TPM - ok
14:40:54.0821 5684 [ 8C8CF3041B27E7657ADD0EE17F6DBFCA ] TrkWks C:\Windows\System32\trkwks.dll
14:40:54.0842 5684 TrkWks - ok
14:40:54.0883 5684 [ 8ABBB5CE0C62E0A6D28F32F44B7F865C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
14:40:54.0914 5684 TrustedInstaller - ok
14:40:54.0935 5684 [ 4E7C5FB10A50435523DE0CAA37DE2BD3 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
14:40:54.0960 5684 TsUsbFlt - ok
14:40:54.0963 5684 [ 16D684A820872EE54F6370703AC0B513 ] TsUsbGD C:\Windows\System32\drivers\TsUsbGD.sys
14:40:54.0971 5684 TsUsbGD - ok
14:40:54.0993 5684 [ 78C9EE193AC2B4CBDBC48B620314D740 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
14:40:55.0013 5684 tunnel - ok
14:40:55.0017 5684 [ 6D4F67CA56ACA2085DFA2CD89EAFBC1A ] uagp35 C:\Windows\system32\drivers\uagp35.sys
14:40:55.0025 5684 uagp35 - ok
14:40:55.0040 5684 [ 6FD6D03B7752C78712E5CFF29A305026 ] UASPStor C:\Windows\System32\drivers\uaspstor.sys
14:40:55.0050 5684 UASPStor - ok
14:40:55.0070 5684 [ 061BA3EE0D2BE17944990544008CF190 ] UCX01000 C:\Windows\System32\drivers\ucx01000.sys
14:40:55.0081 5684 UCX01000 - ok
14:40:55.0107 5684 [ 25C50F4EDF70D0A831E0566BD181CCF2 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
14:40:55.0133 5684 udfs - ok
14:40:55.0159 5684 [ FB3475FEA1CCB0DAEA1EBE44D0E3BB7D ] UI0Detect C:\Windows\system32\UI0Detect.exe
14:40:55.0189 5684 UI0Detect - ok
14:40:55.0216 5684 [ 07FEBCDF24FABA0D47B635D85A0FFB7A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
14:40:55.0225 5684 uliagpkx - ok
14:40:55.0237 5684 [ 02CEB3FE6152668A7BA420B93B664860 ] umbus C:\Windows\System32\drivers\umbus.sys
14:40:55.0246 5684 umbus - ok
14:40:55.0249 5684 [ 991EE6B5FC41EAEF99C8AF5B92F2CA09 ] UmPass C:\Windows\System32\drivers\umpass.sys
14:40:55.0273 5684 UmPass - ok
14:40:55.0303 5684 [ 43FEFB040A0CC30F795FBF544169594D ] UmRdpService C:\Windows\System32\umrdp.dll
14:40:55.0333 5684 UmRdpService - ok
14:40:55.0389 5684 [ E1A119AD21F5AFE22EB516C549306D3D ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
14:40:55.0400 5684 UNS - ok
14:40:55.0427 5684 [ 14D22C411854AA2560AFC94CD2D5E61F ] upnphost C:\Windows\System32\upnphost.dll
14:40:55.0445 5684 upnphost - ok
14:40:55.0476 5684 [ C976C4306F9AE133D6BBD47FDFC3BF92 ] usbccgp C:\Windows\System32\drivers\usbccgp.sys
14:40:55.0493 5684 usbccgp - ok
14:40:55.0527 5684 [ 427B6DB8C05A5A977E8C3525370A2595 ] usbcir C:\Windows\System32\drivers\usbcir.sys
14:40:55.0562 5684 usbcir - ok
14:40:55.0591 5684 [ B24FDEB1B18496F1B463782235AA3AF1 ] usbehci C:\Windows\System32\drivers\usbehci.sys
14:40:55.0601 5684 usbehci - ok
14:40:55.0625 5684 [ F8C2A832DF9403F5EA8080CBDBDA95FB ] usbhub C:\Windows\System32\drivers\usbhub.sys
14:40:55.0643 5684 usbhub - ok
14:40:55.0675 5684 [ E5F7328B1D29BCE791862CD3C0DD382A ] USBHUB3 C:\Windows\System32\drivers\UsbHub3.sys
14:40:55.0690 5684 USBHUB3 - ok
14:40:55.0708 5684 [ 325F6179009B5A7F6118951A5BA422AB ] usbohci C:\Windows\System32\drivers\usbohci.sys
14:40:55.0738 5684 usbohci - ok
14:40:55.0764 5684 [ 9FDBA6982582A6F2354144980F641E7B ] usbprint C:\Windows\System32\drivers\usbprint.sys
14:40:55.0799 5684 usbprint - ok
14:40:55.0812 5684 [ BFC7FE4AAEB61317A921871B4085EF4B ] USBSTOR C:\Windows\System32\drivers\USBSTOR.SYS

[AngelikaB]

4 strana
14:40:55.0822 5684 USBSTOR - ok
14:40:55.0836 5684 [ 1ABF657259DB57F7E5558E4DF1357C0C ] usbuhci C:\Windows\System32\drivers\usbuhci.sys
14:40:55.0859 5684 usbuhci - ok
14:40:55.0896 5684 [ 9EF7C01D3ACCBC243B5CB1A95865B2FF ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
14:40:55.0928 5684 usbvideo - ok
14:40:55.0964 5684 [ 8DC398D7B8E02C929A2096E74A170970 ] USBXHCI C:\Windows\System32\drivers\USBXHCI.SYS
14:40:55.0977 5684 USBXHCI - ok
14:40:56.0004 5684 [ 9AD9560606A3049CE492E3A06FB12716 ] usb_rndisx C:\Windows\system32\DRIVERS\usb8023x.sys
14:40:56.0019 5684 usb_rndisx - ok
14:40:56.0034 5684 [ F702AB6181513303AB0FC8D59E52708B ] VaultSvc C:\Windows\system32\lsass.exe
14:40:56.0044 5684 VaultSvc - ok
14:40:56.0059 5684 [ BACECBFF9C97F7627A60B0E0F1FE7EE8 ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
14:40:56.0068 5684 vdrvroot - ok
14:40:56.0107 5684 [ 1B4488988E5E7512E6C5CD1255E9E973 ] vds C:\Windows\System32\vds.exe
14:40:56.0148 5684 vds - ok
14:40:56.0151 5684 [ 74FA2D4368DE6F6CE14393EDF1F342BE ] VerifierExt C:\Windows\system32\drivers\VerifierExt.sys
14:40:56.0161 5684 VerifierExt - ok
14:40:56.0185 5684 [ 500BE6B2E49883720D0AE8BB859ED7A3 ] vhdmp C:\Windows\System32\drivers\vhdmp.sys
14:40:56.0201 5684 vhdmp - ok
14:40:56.0233 5684 [ F5B4A14B00E89250C50982AC762DDD1D ] viaide C:\Windows\system32\drivers\viaide.sys
14:40:56.0241 5684 viaide - ok
14:40:56.0246 5684 [ 78DB50F7329F6D1311658DABFFFC8BE0 ] vmbus C:\Windows\system32\drivers\vmbus.sys
14:40:56.0255 5684 vmbus - ok
14:40:56.0260 5684 [ ECFEE2F2BA3932C7880D1A8F67D68F91 ] VMBusHID C:\Windows\System32\drivers\VMBusHID.sys
14:40:56.0277 5684 VMBusHID - ok
14:40:56.0308 5684 [ B8FF4248103E6EA47B9D85C55673ABA3 ] vmicheartbeat C:\Windows\System32\ICSvc.dll
14:40:56.0321 5684 vmicheartbeat - ok
14:40:56.0326 5684 [ B8FF4248103E6EA47B9D85C55673ABA3 ] vmickvpexchange C:\Windows\System32\ICSvc.dll
14:40:56.0338 5684 vmickvpexchange - ok
14:40:56.0342 5684 [ B8FF4248103E6EA47B9D85C55673ABA3 ] vmicrdv C:\Windows\System32\ICSvc.dll
14:40:56.0354 5684 vmicrdv - ok
14:40:56.0358 5684 [ B8FF4248103E6EA47B9D85C55673ABA3 ] vmicshutdown C:\Windows\System32\ICSvc.dll
14:40:56.0370 5684 vmicshutdown - ok
14:40:56.0374 5684 [ B8FF4248103E6EA47B9D85C55673ABA3 ] vmictimesync C:\Windows\System32\ICSvc.dll
14:40:56.0385 5684 vmictimesync - ok
14:40:56.0390 5684 [ B8FF4248103E6EA47B9D85C55673ABA3 ] vmicvss C:\Windows\System32\ICSvc.dll
14:40:56.0402 5684 vmicvss - ok
14:40:56.0417 5684 [ CB60FAAED8B49B812EBBF77EB87D9B18 ] volmgr C:\Windows\system32\drivers\volmgr.sys
14:40:56.0426 5684 volmgr - ok
14:40:56.0444 5684 [ A74101DA9809251BCD0E5A26BAE0F824 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
14:40:56.0458 5684 volmgrx - ok
14:40:56.0473 5684 [ 78A5BBA3819FFFC62FFEC3E2220D102D ] volsnap C:\Windows\system32\drivers\volsnap.sys
14:40:56.0486 5684 volsnap - ok
14:40:56.0499 5684 [ A8DA1C1B52ECEA3726DEBED4FF1B700D ] vpci C:\Windows\System32\drivers\vpci.sys
14:40:56.0508 5684 vpci - ok
14:40:56.0512 5684 [ 38A60CD9C009C55C6D3B5586F8E6A353 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
14:40:56.0523 5684 vsmraid - ok
14:40:56.0610 5684 [ D0C69E44BC1E1D4AD290FD84104623D8 ] VSS C:\Windows\system32\vssvc.exe
14:40:56.0651 5684 VSS - ok
14:40:56.0676 5684 [ A0F6FE0FC2F647C22BBFD6BD4249DBCC ] VSTXRAID C:\Windows\system32\drivers\vstxraid.sys
14:40:56.0689 5684 VSTXRAID - ok
14:40:56.0698 5684 [ 62460A45435A26A334907E3F2EA45611 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
14:40:56.0707 5684 vwifibus - ok
14:40:56.0710 5684 [ 095E943D27025E4D588AF0A72CC2318F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
14:40:56.0720 5684 vwififlt - ok
14:40:56.0728 5684 [ 73FA1A41A97A5C34ADC03B3577FF1A86 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
14:40:56.0738 5684 vwifimp - ok
14:40:56.0762 5684 [ F690B6EEAA94576727B24376D7ED3601 ] W32Time C:\Windows\system32\w32time.dll
14:40:56.0789 5684 W32Time - ok
14:40:56.0821 5684 [ 6B806E893714019969E2B50D7EF6A4D9 ] WacomPen C:\Windows\System32\drivers\wacompen.sys
14:40:56.0830 5684 WacomPen - ok
14:40:56.0856 5684 [ 61F6972FF9AC9A8D0B4D62076DC30051 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
14:40:56.0865 5684 Wanarp - ok
14:40:56.0867 5684 [ 61F6972FF9AC9A8D0B4D62076DC30051 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
14:40:56.0877 5684 Wanarpv6 - ok
14:40:56.0941 5684 [ 42DF22F8C448E7CD219F6D63743505E2 ] wbengine C:\Windows\system32\wbengine.exe
14:40:56.0985 5684 wbengine - ok
14:40:56.0991 5684 [ 31D37B2F6069C631EF0557D322924812 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
14:40:57.0013 5684 WbioSrvc - ok
14:40:57.0044 5684 [ AF1349386D4C6786EF4E34FACEF15042 ] Wcmsvc C:\Windows\System32\wcmsvc.dll
14:40:57.0069 5684 Wcmsvc - ok
14:40:57.0102 5684 [ 5B5FEAB51172F5513C2CF7B39CFA6A01 ] wcncsvc C:\Windows\System32\wcncsvc.dll
14:40:57.0128 5684 wcncsvc - ok
14:40:57.0132 5684 [ E19556D414332E2BEBA1F368229006B4 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
14:40:57.0160 5684 WcsPlugInService - ok
14:40:57.0181 5684 [ B3A4D918DAB90505B6BC7B70632913CB ] Wd C:\Windows\system32\drivers\wd.sys
14:40:57.0189 5684 Wd - ok
14:40:57.0218 5684 [ 07D19A55CD27B330534D2DDEA60D5FC6 ] WdBoot C:\Windows\system32\drivers\WdBoot.sys
14:40:57.0227 5684 WdBoot - ok
14:40:57.0260 5684 [ E2C933EDBC389386EBE6D2BA953F43D8 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
14:40:57.0277 5684 Wdf01000 - ok
14:40:57.0302 5684 [ CEBD9CDAADA11FAECCA82E4C06BCDD8E ] WdFilter C:\Windows\system32\drivers\WdFilter.sys
14:40:57.0314 5684 WdFilter - ok
14:40:57.0335 5684 [ 240FC332484572227CD1DF82407F33E5 ] WdiServiceHost C:\Windows\system32\wdi.dll
14:40:57.0365 5684 WdiServiceHost - ok
14:40:57.0369 5684 [ 240FC332484572227CD1DF82407F33E5 ] WdiSystemHost C:\Windows\system32\wdi.dll
14:40:57.0385 5684 WdiSystemHost - ok
14:40:57.0408 5684 [ 9B1384CE8E681D2D77BB3524B8E86311 ] WebClient C:\Windows\System32\webclnt.dll
14:40:57.0444 5684 WebClient - ok
14:40:57.0474 5684 [ 35FD720943D4FCD75C3275BF062FF140 ] Wecsvc C:\Windows\system32\wecsvc.dll
14:40:57.0487 5684 Wecsvc - ok
14:40:57.0500 5684 [ 4D2612E3C462B68F499D840B1133263E ] wercplsupport C:\Windows\System32\wercplsupport.dll
14:40:57.0519 5684 wercplsupport - ok
14:40:57.0523 5684 [ 5F70EBFC1F75B487DE79501E3CCBDB54 ] WerSvc C:\Windows\System32\WerSvc.dll
14:40:57.0556 5684 WerSvc - ok
14:40:57.0583 5684 [ 44BB9C31E6242C4BD1CE7C2B440C2533 ] WFPLWFS C:\Windows\system32\DRIVERS\wfplwfs.sys
14:40:57.0592 5684 WFPLWFS - ok
14:40:57.0616 5684 [ 60E0C220593DA4F7C289CB909D2DBAE0 ] WiaRpc C:\Windows\System32\wiarpc.dll
14:40:57.0635 5684 WiaRpc - ok
14:40:57.0665 5684 [ A3C7624A42A3447EF5EDD1ED37FE4E60 ] WIMMount C:\Windows\system32\drivers\wimmount.sys
14:40:57.0674 5684 WIMMount - ok
14:40:57.0703 5684 WinDefend - ok
14:40:57.0738 5684 [ 7911470B6018059A880469A63B65700A ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
14:40:57.0769 5684 WinHttpAutoProxySvc - ok
14:40:57.0816 5684 [ 3D6B518B71C75C8FA4115A33615C107A ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
14:40:57.0828 5684 Winmgmt - ok
14:40:57.0897 5684 [ 8E212A627F33F6FC3B5F3BB47212F66E ] WinRM C:\Windows\system32\WsmSvc.dll
14:40:57.0979 5684 WinRM - ok
14:40:58.0022 5684 [ BB20956C424531003F7FA6CD36F11D5D ] WinUsb C:\Windows\system32\DRIVERS\WinUSB.sys
14:40:58.0048 5684 WinUsb - ok
14:40:58.0089 5684 [ 6351724B8FA0255C2DBD970297F00B93 ] WlanSvc C:\Windows\System32\wlansvc.dll
14:40:58.0125 5684 WlanSvc - ok
14:40:58.0165 5684 [ B330CE47FB74A6BE9A3FFFF4B3F64D9B ] wlidsvc C:\Windows\system32\wlidsvc.dll
14:40:58.0240 5684 wlidsvc - ok
14:40:58.0254 5684 [ E2A596CACFC6504306CDB7B593B90084 ] WmiAcpi C:\Windows\System32\drivers\wmiacpi.sys
14:40:58.0273 5684 WmiAcpi - ok
14:40:58.0307 5684 [ D113499052C5E541906B727779F0F959 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
14:40:58.0326 5684 wmiApSrv - ok
14:40:58.0356 5684 WMPNetworkSvc - ok
14:40:58.0434 5684 [ C6FF953D5D6F2EAE3B8883474D5076B3 ] wpcfltr C:\Windows\system32\DRIVERS\wpcfltr.sys
14:40:58.0505 5684 wpcfltr - ok
14:40:58.0528 5684 [ A6ED163169876BFD2437E872FE2F1509 ] WPCSvc C:\Windows\System32\wpcsvc.dll
14:40:58.0538 5684 WPCSvc - ok
14:40:58.0581 5684 [ 3013658A4D327854BEEC4A08D9655194 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
14:40:58.0610 5684 WPDBusEnum - ok
14:40:58.0621 5684 [ 0346CAFC181C91C6E2330332EB332ED6 ] WpdUpFltr C:\Windows\system32\drivers\WpdUpFltr.sys
14:40:58.0640 5684 WpdUpFltr - ok
14:40:58.0653 5684 [ BC8B5CB336E63BB25EAD1CE8EDD34B81 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
14:40:58.0674 5684 ws2ifsl - ok
14:40:58.0702 5684 [ 012CFE7F0F95266F554EE3B91EE2128A ] wscsvc C:\Windows\System32\wscsvc.dll
14:40:58.0723 5684 wscsvc - ok
14:40:58.0726 5684 WSearch - ok
14:40:58.0836 5684 [ D4D04839F3DFAF09D94BAB1016F7A297 ] WSService C:\Windows\System32\WSService.dll
14:40:58.0995 5684 WSService - ok
14:40:59.0076 5684 [ 311E5E1976E0BD9110A88B93158055D5 ] wuauserv C:\Windows\system32\wuaueng.dll
14:40:59.0168 5684 wuauserv - ok
14:40:59.0179 5684 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
14:40:59.0189 5684 WudfPf - ok
14:40:59.0205 5684 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\System32\drivers\WUDFRd.sys
14:40:59.0216 5684 WUDFRd - ok
14:40:59.0220 5684 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFSensorLP C:\Windows\system32\DRIVERS\WUDFRd.sys
14:40:59.0231 5684 WUDFSensorLP - ok
14:40:59.0258 5684 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
14:40:59.0285 5684 wudfsvc - ok
14:40:59.0289 5684 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFWpdFs C:\Windows\system32\DRIVERS\WUDFRd.sys
14:40:59.0301 5684 WUDFWpdFs - ok
14:40:59.0332 5684 [ 6D9E07436B6646EC8F7EFFD39B6BA288 ] WwanSvc C:\Windows\System32\wwansvc.dll
14:40:59.0372 5684 WwanSvc - ok
14:40:59.0424 5684 [ 86B8B1F5C1189D68B07666784BE882FE ] ZAtheros Bt and Wlan Coex Agent C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
14:40:59.0430 5684 ZAtheros Bt and Wlan Coex Agent ( UnsignedFile.Multi.Generic ) - warning
14:40:59.0430 5684 ZAtheros Bt and Wlan Coex Agent - detected UnsignedFile.Multi.Generic (1)
14:40:59.0445 5684 ================ Scan global ===============================
14:40:59.0483 5684 [ DDC1AFBF9DDF880CE9BD3896114D8DED ] C:\Windows\system32\basesrv.dll
14:40:59.0515 5684 [ E9343076AE704D20BB0D01F3AF3EFFEF ] C:\Windows\system32\winsrv.dll
14:40:59.0552 5684 [ BD7C6949984D19AAA609896B675E7357 ] C:\Windows\system32\sxssrv.dll
14:40:59.0580 5684 [ 8F226143046435C75C033B0C52E90FFE ] C:\Windows\system32\services.exe
14:40:59.0583 5684 [Global] - ok
14:40:59.0584 5684 ================ Scan MBR ==================================
14:40:59.0597 5684 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
14:40:59.0665 5684 \Device\Harddisk0\DR0 - ok
14:40:59.0665 5684 ================ Scan VBR ==================================
14:40:59.0695 5684 [ 1E8334247C263698AB0773B501D7504D ] \Device\Harddisk0\DR0\Partition1
14:40:59.0695 5684 \Device\Harddisk0\DR0\Partition1 - ok
14:40:59.0702 5684 [ 9072588086FA6968E41580B86693C658 ] \Device\Harddisk0\DR0\Partition2
14:40:59.0703 5684 \Device\Harddisk0\DR0\Partition2 - ok
14:40:59.0716 5684 [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition3
14:40:59.0716 5684 \Device\Harddisk0\DR0\Partition3 - ok
14:40:59.0732 5684 [ 44F8751A607E94A9201823AACA8FAFEE ] \Device\Harddisk0\DR0\Partition4
14:40:59.0733 5684 \Device\Harddisk0\DR0\Partition4 - ok
14:40:59.0758 5684 [ DB3FAD1329EB9C70554AA7B7B5D0F4B8 ] \Device\Harddisk0\DR0\Partition5
14:40:59.0759 5684 \Device\Harddisk0\DR0\Partition5 - ok
14:40:59.0787 5684 [ 9539196D29DBB1018A57F7CC0BC90D82 ] \Device\Harddisk0\DR0\Partition6
14:40:59.0788 5684 \Device\Harddisk0\DR0\Partition6 - ok
14:40:59.0789 5684 ============================================================
14:40:59.0789 5684 Scan finished
14:40:59.0789 5684 ============================================================
14:40:59.0800 7880 Detected object count: 2
14:40:59.0800 7880 Actual detected object count: 2
14:41:11.0425 7880 C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe - copied to quarantine
14:41:11.0466 7880 HKLM\SYSTEM\ControlSet001\services\Asus WebStorage Windows Service - will be deleted on reboot
14:41:11.0614 7880 C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe - will be deleted on reboot
14:41:11.0614 7880 Asus WebStorage Windows Service ( UnsignedFile.Multi.Generic ) - User select action: Delete
14:41:11.0638 7880 C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe - copied to quarantine
14:41:11.0685 7880 HKLM\SYSTEM\ControlSet001\services\ZAtheros Bt and Wlan Coex Agent - will be deleted on reboot
14:41:11.0688 7880 C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe - will be deleted on reboot
14:41:11.0688 7880 ZAtheros Bt and Wlan Coex Agent ( UnsignedFile.Multi.Generic ) - User select action: Delete

[jaro3]

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

[AngelikaB]

ComboFix 14-04-06.01 - ASUS . 04. 2014 15:30:40.1.4 - x64
Microsoft Windows 8 6.2.9200.0.1250.420.1029.18.6030.4662 [GMT 2:00]
Spuštěný z: c:\users\ASUS\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 7.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: ESET NOD32 Antivirus 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\SetStretch.exe
c:\programdata\SetStretch.VBS
c:\users\ASUS\AppData\Roaming\winlogon.exe.tmp
c:\windows\msvcr71.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-03-07 do 2014-04-07 )))))))))))))))))))))))))))))))
.
.
2014-04-07 13:35 . 2014-04-07 13:35 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-04-07 12:41 . 2014-04-07 12:41 208216 ----a-w- c:\windows\system32\drivers\05466382.sys
2014-04-07 12:41 . 2014-04-07 12:41 -------- d-----w- C:\TDSSKiller_Quarantine
2014-04-06 18:53 . 2014-04-06 18:53 -------- d-----w- c:\programdata\YTD Video Downloader
2014-04-06 18:53 . 2014-04-06 18:53 -------- d-----w- c:\program files (x86)\GreenTree Applications
2014-04-06 10:34 . 2014-04-06 10:34 -------- d-----w- c:\users\Public\CyberLink
2014-04-06 10:34 . 2014-04-06 10:34 -------- d-----w- c:\programdata\CyberLink
2014-04-06 08:13 . 2014-04-06 08:13 -------- d-----w- c:\windows\ERUNT
2014-04-06 06:19 . 2014-04-06 13:14 119512 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-04-06 06:19 . 2014-04-03 07:51 63192 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-04-06 06:19 . 2014-04-03 07:51 88280 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-04-06 06:19 . 2014-04-06 06:19 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-04-06 06:19 . 2014-04-03 07:50 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-04-05 14:40 . 2014-04-05 14:40 -------- d-----w- c:\program files (x86)\Castle Crashers
2014-04-05 11:42 . 2014-04-05 11:42 -------- d-----w- c:\program files (x86)\Trend Micro
2014-04-05 06:27 . 2014-04-05 06:27 -------- d-----w- c:\program files (x86)\IObit
2014-04-05 04:45 . 2014-04-06 06:19 -------- d-----w- c:\programdata\Malwarebytes
2014-04-04 17:37 . 2014-04-04 17:37 -------- d-----w- c:\program files (x86)\THQ
2014-04-04 14:06 . 2014-04-04 14:06 -------- d-----w- c:\windows\SysWow64\spool
2014-04-04 04:44 . 2014-04-04 04:44 -------- d-----w- c:\program files (x86)\FreeTime
2014-04-01 15:27 . 2014-04-01 15:27 -------- d-----w- c:\program files\Microsoft Silverlight
2014-04-01 15:27 . 2014-04-01 15:27 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2014-03-31 16:14 . 2014-03-31 16:14 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
2014-03-31 16:14 . 2014-03-31 16:17 -------- d-----w- c:\program files (x86)\Winamp
2014-03-31 15:50 . 2014-03-31 15:50 -------- d-----w- c:\programdata\Sony
2014-03-31 14:46 . 2014-04-04 14:06 -------- d-----w- c:\program files (x86)\Sony
2014-03-31 08:58 . 2014-03-31 08:58 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2014-03-31 08:33 . 2014-03-31 08:33 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2014-03-31 08:32 . 2014-03-31 08:33 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2014-03-31 08:32 . 2014-03-31 08:34 -------- d-----w- c:\programdata\DAEMON Tools Lite
2014-03-31 07:32 . 2014-03-31 07:32 -------- d-----w- c:\program files\ESET
2014-03-31 04:53 . 2014-03-06 20:43 10521840 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C2F856AC-95BE-459E-9D42-C88327A4B22C}\mpengine.dll
2014-03-30 16:39 . 2014-03-31 09:00 -------- d-----w- c:\program files (x86)\Microsoft Works
2014-03-30 16:36 . 2014-03-30 16:36 -------- d-----w- c:\program files\Microsoft Office
2014-03-30 16:36 . 2014-03-30 16:36 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2014-03-30 16:35 . 2014-03-31 13:43 -------- d-----w- c:\programdata\Microsoft Help
2014-03-30 16:35 . 2014-03-30 16:35 -------- d-----r- C:\MSOCache
2014-03-29 11:06 . 2014-04-06 06:30 -------- d-----w- C:\AdwCleaner
2014-03-29 10:05 . 2014-03-29 10:05 -------- d-----w- c:\programdata\LogMeIn
2014-03-29 08:10 . 2014-03-29 08:10 -------- d-----w- c:\program files (x86)\Bandicam
2014-03-29 08:10 . 2014-03-29 08:10 -------- d-----w- c:\program files (x86)\BandiMPEG1
2014-03-29 08:07 . 2014-03-29 08:07 312744 ----a-w- c:\windows\system32\javaws.exe
2014-03-29 08:07 . 2014-03-29 08:07 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2014-03-29 08:07 . 2014-03-29 08:07 189352 ----a-w- c:\windows\system32\javaw.exe
2014-03-29 08:07 . 2014-03-29 08:07 189352 ----a-w- c:\windows\system32\java.exe
2014-03-29 08:07 . 2014-03-29 08:07 -------- d-----w- c:\program files\Java
2014-03-29 08:05 . 2014-03-29 08:05 -------- d-----w- c:\program files (x86)\Microsoft
2014-03-29 06:54 . 2014-03-04 22:52 78304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-29 06:54 . 2014-03-04 22:52 694240 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-03-29 06:49 . 2014-03-29 06:54 -------- d-----r- c:\windows\BrowserChoice
2014-03-29 06:34 . 2014-03-29 06:35 -------- d-----w- c:\windows\system32\MRT
2014-03-29 06:06 . 2014-01-19 07:33 270496 ------w- c:\windows\system32\MpSigStub.exe
2014-03-28 20:59 . 2014-04-07 11:26 -------- d-----w- c:\program files (x86)\Opera
2014-03-28 20:38 . 2013-11-01 01:45 23350272 ----a-w- c:\program files\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2014-03-28 20:38 . 2013-11-01 01:16 22615040 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2014-03-28 18:49 . 2013-09-28 05:48 778752 ----a-w- c:\windows\system32\oleaut32.dll
2014-03-28 18:43 . 2013-07-24 23:07 13661696 ----a-w- c:\windows\system32\Windows.UI.Xaml.dll
2014-03-28 18:43 . 2013-07-24 23:10 10799104 ----a-w- c:\windows\SysWow64\Windows.UI.Xaml.dll
2014-03-28 18:43 . 2013-08-30 05:20 1173504 ----a-w- c:\windows\system32\UIAutomationCore.dll
2014-03-28 18:43 . 2013-08-29 23:48 914432 ----a-w- c:\windows\SysWow64\UIAutomationCore.dll
2014-03-28 18:42 . 2013-09-13 22:33 328192 ----a-w- c:\windows\system32\ubpm.dll
2014-03-28 18:42 . 2013-08-21 06:39 465240 ----a-w- c:\windows\system32\drivers\fvevol.sys
2014-03-28 18:42 . 2013-08-10 06:30 151896 ----a-w- c:\windows\system32\drivers\tpm.sys
2014-03-28 18:42 . 2013-08-10 05:21 817152 ----a-w- c:\windows\system32\kerberos.dll
2014-03-28 18:42 . 2013-09-13 22:36 247296 ----a-w- c:\windows\SysWow64\ubpm.dll
2014-03-28 18:42 . 2013-08-30 05:43 61784 ----a-w- c:\windows\system32\drivers\crashdmp.sys
2014-03-28 18:42 . 2013-08-10 03:58 656896 ----a-w- c:\windows\SysWow64\kerberos.dll
2014-03-28 18:37 . 2013-07-09 08:04 120144 ----a-w- c:\windows\system32\drivers\msgpioclx.sys
2014-03-28 18:32 . 2013-11-25 23:17 83968 ----a-w- c:\windows\system32\drivers\hidclass.sys
2014-03-28 18:32 . 2013-10-31 05:56 915968 ----a-w- c:\windows\system32\MPSSVC.dll
2014-03-28 18:32 . 2013-10-31 05:56 758784 ----a-w- c:\windows\system32\FirewallAPI.dll
2014-03-28 18:32 . 2013-10-31 04:01 550400 ----a-w- c:\windows\SysWow64\FirewallAPI.dll
2014-03-28 18:32 . 2013-10-28 05:50 588288 ----a-w- c:\windows\system32\SHCore.dll
2014-03-28 18:32 . 2013-10-28 04:05 452608 ----a-w- c:\windows\SysWow64\SHCore.dll
2014-03-28 18:32 . 2013-10-13 20:49 100696 ----a-w- c:\windows\system32\drivers\disk.sys
2014-03-28 18:32 . 2013-08-27 05:21 227840 ----a-w- c:\windows\system32\WebClnt.dll
2014-03-28 18:32 . 2013-08-27 05:19 104448 ----a-w- c:\windows\system32\davclnt.dll
2014-03-28 18:32 . 2013-08-26 22:29 199168 ----a-w- c:\windows\SysWow64\WebClnt.dll
2014-03-28 18:32 . 2013-08-26 22:28 86016 ----a-w- c:\windows\SysWow64\davclnt.dll
2014-03-28 18:32 . 2013-10-31 03:42 74752 ----a-w- c:\windows\system32\drivers\mpsdrv.sys
2014-03-28 18:17 . 2013-08-16 05:22 4917760 ----a-w- c:\windows\system32\sppsvc.exe
2014-03-28 18:16 . 2013-10-19 04:04 59392 ----a-w- c:\windows\SysWow64\imagehlp.dll
2014-03-28 18:16 . 2013-10-19 05:45 62976 ----a-w- c:\windows\system32\imagehlp.dll
2014-03-28 18:16 . 2013-07-04 02:13 541696 ----a-w- c:\windows\SysWow64\comctl32.dll
2014-03-28 18:16 . 2013-07-06 00:15 652288 ----a-w- c:\windows\system32\comctl32.dll
2014-03-28 18:16 . 2013-04-11 04:12 1029632 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Ink\journal.dll
2014-03-28 18:16 . 2013-04-11 04:12 1413632 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Ink\InkObj.dll
2014-03-28 18:16 . 2013-04-10 22:35 1617920 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2014-03-28 18:16 . 2013-04-10 22:35 2035200 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\InkObj.dll
2014-03-28 18:16 . 2013-04-10 22:35 1306112 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2014-03-28 18:16 . 2013-04-10 22:35 1272320 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2014-03-28 18:16 . 2013-04-10 22:35 1318912 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2014-03-28 18:14 . 2013-10-01 22:22 1022976 ----a-w- c:\windows\SysWow64\gdi32.dll
2014-03-28 18:14 . 2013-10-02 23:25 1300992 ----a-w- c:\windows\system32\gdi32.dll
2014-03-28 18:14 . 2013-12-09 00:45 523776 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-03-28 18:14 . 2013-12-08 23:59 600064 ----a-w- c:\windows\system32\vbscript.dll
2014-03-28 18:14 . 2013-06-22 05:45 785624 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2014-03-28 18:14 . 2013-06-22 05:45 54488 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2014-03-28 18:14 . 2013-07-01 22:14 25600 ----a-w- c:\windows\system32\drivers\usbprint.sys
2014-03-28 18:14 . 2013-06-29 03:08 32768 ----a-w- c:\windows\system32\drivers\hidparse.sys
2014-03-28 18:14 . 2013-07-05 22:02 99328 ----a-w- c:\windows\system32\drivers\usbcir.sys
2014-03-28 18:14 . 2013-07-05 22:01 210560 ----a-w- c:\windows\system32\drivers\usbvideo.sys
2014-03-28 18:13 . 2010-05-26 10:41 511328 ----a-w- c:\windows\system32\d3dx10_43.dll
2014-03-28 18:13 . 2010-05-26 10:41 470880 ----a-w- c:\windows\SysWow64\d3dx10_43.dll
2014-03-28 18:13 . 2010-05-26 10:41 1998168 ----a-w- c:\windows\SysWow64\D3DX9_43.dll
2014-03-28 18:13 . 2010-05-26 10:41 2401112 ----a-w- c:\windows\system32\D3DX9_43.dll
2014-03-28 18:13 . 2014-02-05 09:30 1179576 ----a-w- c:\windows\system32\nvspcap64.dll
2014-03-28 18:13 . 2014-02-05 09:31 1048152 ----a-w- c:\windows\SysWow64\nvspcap.dll
2014-03-28 18:12 . 2013-03-02 08:23 100864 ----a-w- c:\windows\SysWow64\SettingSyncInfo.dll
2014-03-28 18:12 . 2013-03-02 08:21 145408 ----a-w- c:\windows\SysWow64\powercfg.cpl
2014-03-28 18:12 . 2013-03-02 08:22 357888 ----a-w- c:\windows\SysWow64\netcfgx.dll
2014-03-28 18:12 . 2013-03-02 08:21 550912 ----a-w- c:\windows\SysWow64\drvstore.dll
2014-03-28 18:12 . 2013-03-02 08:24 4298240 ----a-w- c:\program files (x86)\Windows NT\Accessories\wordpad.exe
2014-03-28 18:12 . 2013-03-02 08:23 195072 ----a-w- c:\program files (x86)\Windows NT\Accessories\WordpadFilter.dll
2014-03-28 18:12 . 2013-03-02 08:23 893952 ----a-w- c:\windows\SysWow64\winmde.dll
2014-03-28 18:12 . 2013-03-02 08:23 504320 ----a-w- c:\windows\SysWow64\Windows.Security.Authentication.OnlineId.dll
2014-03-28 18:12 . 2013-03-02 08:23 601088 ----a-w- c:\windows\SysWow64\Windows.Globalization.dll
2014-03-28 18:12 . 2013-03-02 08:21 36352 ----a-w- c:\windows\SysWow64\DevDispItemProvider.dll
2014-03-28 18:10 . 2014-03-28 18:10 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2014-03-28 18:10 . 2013-10-01 23:37 1569280 ----a-w- c:\windows\SysWow64\crypt32.dll
2014-03-28 18:09 . 2014-03-28 18:09 -------- d-----w- c:\windows\SysWow64\NV
2014-03-28 18:09 . 2014-03-28 18:09 -------- d-----w- c:\windows\system32\NV
2014-03-28 18:09 . 2013-10-01 23:26 1890816 ----a-w- c:\windows\system32\crypt32.dll
2014-03-28 18:08 . 2013-05-23 22:25 694272 ----a-w- c:\windows\SysWow64\rpcrt4.dll
2014-03-28 18:08 . 2013-05-23 23:02 1314816 ----a-w- c:\windows\system32\rpcrt4.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-26 14:54 . 2012-07-26 08:13 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-02-26 18:57 . 2014-02-26 18:57 46136 ---ha-w- c:\windows\system32\drivers\Hamdrv.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-02-10 20922016]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2010-11-15 35736]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-15 932288]
"ASUSPRP"="c:\program files (x86)\ASUS\APRP\APRP.EXE" [2013-05-01 3187360]
"ASUSWebStorage"="c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe" [2012-12-19 3576784]
"RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2012-03-28 91432]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"596434DF-37F1-4474-A21E-1658551F56FD"="start" [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
"DisableCAD"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]
@=""
.
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S0 edevmon;edevmon;c:\windows\system32\DRIVERS\edevmon.sys;c:\windows\SYSNATIVE\DRIVERS\edevmon.sys [x]
S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\System32\drivers\dtsoftbus01.sys;c:\windows\SYSNATIVE\drivers\dtsoftbus01.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 ASUS InstantOn;ASUS InstantOn Service;c:\program files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe;c:\program files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [x]
S2 Asus WebStorage Windows Service;Asus WebStorage Windows Service;c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe;c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfpr.sys [x]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 ZAtheros Bt and Wlan Coex Agent;ZAtheros Bt and Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [x]
S3 AiCharger;ASUS Charger Driver;c:\windows\system32\DRIVERS\AiCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AiCharger.sys [x]
S3 AthBTPort;Qualcomm Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 ATP;ASUS Input Device;c:\windows\System32\drivers\AsusTP.sys;c:\windows\SYSNATIVE\drivers\AsusTP.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 btath_avdt;Qualcomm Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys;c:\windows\SYSNATIVE\drivers\btath_avdt.sys [x]
S3 BTATH_BUS;Qualcomm Atheros Bluetooth Bus;c:\windows\System32\drivers\btath_bus.sys;c:\windows\SYSNATIVE\drivers\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\System32\drivers\btath_hcrp.sys;c:\windows\SYSNATIVE\drivers\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\System32\drivers\btath_rcp.sys;c:\windows\SYSNATIVE\drivers\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 BthLEEnum;Ovladač úspory energie technologie Bluetooth;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
S3 HIDSwitch;ASUS Wireless Radio Control;c:\windows\System32\drivers\AsHIDSwitch64.sys;c:\windows\SYSNATIVE\drivers\AsHIDSwitch64.sys [x]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RSBASTOR;Realtek PCIE CardReader Driver - BA;c:\windows\system32\DRIVERS\RtsBaStor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsBaStor.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2014-04-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-28 19:05]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\!AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2012-09-27 07:15 1472512 ----a-w- c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\!AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2012-09-27 07:15 1472512 ----a-w- c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\!AsusWSShellExt_U]
@="{1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D}"
[HKEY_CLASSES_ROOT\CLSID\{1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D}]
2012-09-27 07:15 1472512 ----a-w- c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-12-13 172144]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-12-13 399984]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-05-30 13550152]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2013-05-20 1308232]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-02-05 2234144]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-02-05 1179576]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2013-09-12 5618456]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://asus13.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\sptf9zwg.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
SafeBoot-70574890.sys
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Celkový čas: 2014-04-07 15:37:33
ComboFix-quarantined-files.txt 2014-04-07 13:37
.
Před spuštěním: 221 453 471 744 bytes free
Po spuštění: 221 346 254 848 bytes free
.
- - End Of File - - EE803A2CB1C53B7D7B26C6DBAA3FF652

[jaro3]

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::

KillAll::
File::
c:\windows\system32\drivers\05466382.sys

Folder::
c:\program files (x86)\Skype\Updater
C:\TDSSKiller_Quarantine

Driver::
SkypeUpdate

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"DisableCAD"=-

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
c:\program files\Windows Journal\JNWDRV.dll
c:\windows\SysWow64\winmde.dll

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

Nebo na:
http://www.virscan.org/

Stáhni si z některého odkazu SystemLook
SystemLook (32-bit)
http://jpshortstuff.247fixes.com/SystemLook.exe

SystemLook (64-bit)
http://jpshortstuff.247fixes.com/SystemLook_x64.exe

a ulož si ho na plochu.

Poklepej na stažený SystemLook , zkopíruj do hlavního text. okna tento následující text:

Kód: Vybrat vše

:filefind
596434DF-37F1-4474-A21E-1658551F56FD.*
:dir
596434DF-37F1-4474-A21E-1658551F56FD


Klikni na Look ke startu skenu. Když program skončí objeví se v poznámkovém bloku zpráva skenu. Zkopíruj sem celý jeho obsah. Log se také nachází na ploše pod názvem SystemLook.txt.

[AngelikaB]

ComboFix 14-04-06.01 - ASUS . 04. 2014 15:10:44.2.4 - x64
Microsoft Windows 8 6.2.9200.0.1250.420.1029.18.6030.4302 [GMT 2:00]
Spuštěný z: c:\users\ASUS\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\ASUS\Desktop\CFScript.txt
AV: ESET NOD32 Antivirus 7.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: ESET NOD32 Antivirus 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
FILE ::
"c:\windows\system32\drivers\05466382.sys"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Skype\Updater\Updater.dll
c:\program files (x86)\Skype\Updater\Updater.exe
C:\TDSSKiller_Quarantine
c:\tdsskiller_quarantine\07.04.2014_14.40.22\susp0000\object.ini
c:\tdsskiller_quarantine\07.04.2014_14.40.22\susp0000\svc0000\object.ini
c:\tdsskiller_quarantine\07.04.2014_14.40.22\susp0000\svc0000\tsk0000.dta
c:\tdsskiller_quarantine\07.04.2014_14.40.22\susp0000\svc0000\tsk0000.ini
c:\tdsskiller_quarantine\07.04.2014_14.40.22\susp0001\object.ini
c:\tdsskiller_quarantine\07.04.2014_14.40.22\susp0001\svc0000\object.ini
c:\tdsskiller_quarantine\07.04.2014_14.40.22\susp0001\svc0000\tsk0000.dta
c:\tdsskiller_quarantine\07.04.2014_14.40.22\susp0001\svc0000\tsk0000.ini
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SkypeUpdate
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-03-08 do 2014-04-08 )))))))))))))))))))))))))))))))
.
.
2014-04-08 13:15 . 2014-04-08 13:15 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-04-06 18:53 . 2014-04-07 19:03 -------- d-----w- c:\programdata\YTD Video Downloader
2014-04-06 18:53 . 2014-04-06 18:53 -------- d-----w- c:\program files (x86)\GreenTree Applications
2014-04-06 10:34 . 2014-04-06 10:34 -------- d-----w- c:\users\Public\CyberLink
2014-04-06 10:34 . 2014-04-06 10:34 -------- d-----w- c:\programdata\CyberLink
2014-04-06 08:13 . 2014-04-06 08:13 -------- d-----w- c:\windows\ERUNT
2014-04-06 06:19 . 2014-04-06 13:14 119512 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-04-06 06:19 . 2014-04-03 07:51 63192 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-04-06 06:19 . 2014-04-03 07:51 88280 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-04-06 06:19 . 2014-04-06 06:19 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-04-06 06:19 . 2014-04-03 07:50 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-04-05 14:40 . 2014-04-05 14:40 -------- d-----w- c:\program files (x86)\Castle Crashers
2014-04-05 11:42 . 2014-04-05 11:42 -------- d-----w- c:\program files (x86)\Trend Micro
2014-04-05 06:27 . 2014-04-05 06:27 -------- d-----w- c:\program files (x86)\IObit
2014-04-05 04:45 . 2014-04-06 06:19 -------- d-----w- c:\programdata\Malwarebytes
2014-04-04 17:37 . 2014-04-04 17:37 -------- d-----w- c:\program files (x86)\THQ
2014-04-04 14:06 . 2014-04-04 14:06 -------- d-----w- c:\windows\SysWow64\spool
2014-04-04 04:44 . 2014-04-04 04:44 -------- d-----w- c:\program files (x86)\FreeTime
2014-04-01 15:27 . 2014-04-01 15:27 -------- d-----w- c:\program files\Microsoft Silverlight
2014-04-01 15:27 . 2014-04-01 15:27 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2014-03-31 16:14 . 2014-03-31 16:14 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
2014-03-31 16:14 . 2014-03-31 16:17 -------- d-----w- c:\program files (x86)\Winamp
2014-03-31 15:50 . 2014-03-31 15:50 -------- d-----w- c:\programdata\Sony
2014-03-31 14:46 . 2014-04-04 14:06 -------- d-----w- c:\program files (x86)\Sony
2014-03-31 08:58 . 2014-03-31 08:58 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2014-03-31 08:33 . 2014-03-31 08:33 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2014-03-31 08:32 . 2014-03-31 08:33 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2014-03-31 08:32 . 2014-03-31 08:34 -------- d-----w- c:\programdata\DAEMON Tools Lite
2014-03-31 07:32 . 2014-03-31 07:32 -------- d-----w- c:\program files\ESET
2014-03-31 04:53 . 2014-03-06 20:43 10521840 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C2F856AC-95BE-459E-9D42-C88327A4B22C}\mpengine.dll
2014-03-30 16:39 . 2014-03-31 09:00 -------- d-----w- c:\program files (x86)\Microsoft Works
2014-03-30 16:36 . 2014-03-30 16:36 -------- d-----w- c:\program files\Microsoft Office
2014-03-30 16:36 . 2014-03-30 16:36 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2014-03-30 16:35 . 2014-03-31 13:43 -------- d-----w- c:\programdata\Microsoft Help
2014-03-30 16:35 . 2014-03-30 16:35 -------- d-----r- C:\MSOCache
2014-03-29 11:06 . 2014-04-06 06:30 -------- d-----w- C:\AdwCleaner
2014-03-29 10:05 . 2014-03-29 10:05 -------- d-----w- c:\programdata\LogMeIn
2014-03-29 08:10 . 2014-03-29 08:10 -------- d-----w- c:\program files (x86)\Bandicam
2014-03-29 08:10 . 2014-03-29 08:10 -------- d-----w- c:\program files (x86)\BandiMPEG1
2014-03-29 08:07 . 2014-03-29 08:07 312744 ----a-w- c:\windows\system32\javaws.exe
2014-03-29 08:07 . 2014-03-29 08:07 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2014-03-29 08:07 . 2014-03-29 08:07 189352 ----a-w- c:\windows\system32\javaw.exe
2014-03-29 08:07 . 2014-03-29 08:07 189352 ----a-w- c:\windows\system32\java.exe
2014-03-29 08:07 . 2014-03-29 08:07 -------- d-----w- c:\program files\Java
2014-03-29 08:05 . 2014-03-29 08:05 -------- d-----w- c:\program files (x86)\Microsoft
2014-03-29 06:54 . 2014-03-04 22:52 78304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-29 06:54 . 2014-03-04 22:52 694240 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-03-29 06:49 . 2014-03-29 06:54 -------- d-----r- c:\windows\BrowserChoice
2014-03-29 06:34 . 2014-03-29 06:35 -------- d-----w- c:\windows\system32\MRT
2014-03-29 06:06 . 2014-01-19 07:33 270496 ------w- c:\windows\system32\MpSigStub.exe
2014-03-28 20:59 . 2014-04-07 11:26 -------- d-----w- c:\program files (x86)\Opera
2014-03-28 20:38 . 2013-11-01 01:45 23350272 ----a-w- c:\program files\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2014-03-28 20:38 . 2013-11-01 01:16 22615040 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2014-03-28 18:49 . 2013-09-28 05:48 778752 ----a-w- c:\windows\system32\oleaut32.dll
2014-03-28 18:43 . 2013-07-24 23:07 13661696 ----a-w- c:\windows\system32\Windows.UI.Xaml.dll
2014-03-28 18:43 . 2013-07-24 23:10 10799104 ----a-w- c:\windows\SysWow64\Windows.UI.Xaml.dll
2014-03-28 18:43 . 2013-08-30 05:20 1173504 ----a-w- c:\windows\system32\UIAutomationCore.dll
2014-03-28 18:43 . 2013-08-29 23:48 914432 ----a-w- c:\windows\SysWow64\UIAutomationCore.dll
2014-03-28 18:42 . 2013-09-13 22:33 328192 ----a-w- c:\windows\system32\ubpm.dll
2014-03-28 18:42 . 2013-08-21 06:39 465240 ----a-w- c:\windows\system32\drivers\fvevol.sys
2014-03-28 18:42 . 2013-08-10 06:30 151896 ----a-w- c:\windows\system32\drivers\tpm.sys
2014-03-28 18:42 . 2013-08-10 05:21 817152 ----a-w- c:\windows\system32\kerberos.dll
2014-03-28 18:42 . 2013-09-13 22:36 247296 ----a-w- c:\windows\SysWow64\ubpm.dll
2014-03-28 18:42 . 2013-08-30 05:43 61784 ----a-w- c:\windows\system32\drivers\crashdmp.sys
2014-03-28 18:42 . 2013-08-10 03:58 656896 ----a-w- c:\windows\SysWow64\kerberos.dll
2014-03-28 18:37 . 2013-07-09 08:04 120144 ----a-w- c:\windows\system32\drivers\msgpioclx.sys
2014-03-28 18:32 . 2013-11-25 23:17 83968 ----a-w- c:\windows\system32\drivers\hidclass.sys
2014-03-28 18:32 . 2013-10-31 05:56 915968 ----a-w- c:\windows\system32\MPSSVC.dll
2014-03-28 18:32 . 2013-10-31 05:56 758784 ----a-w- c:\windows\system32\FirewallAPI.dll
2014-03-28 18:32 . 2013-10-31 04:01 550400 ----a-w- c:\windows\SysWow64\FirewallAPI.dll
2014-03-28 18:32 . 2013-10-28 05:50 588288 ----a-w- c:\windows\system32\SHCore.dll
2014-03-28 18:32 . 2013-10-28 04:05 452608 ----a-w- c:\windows\SysWow64\SHCore.dll
2014-03-28 18:32 . 2013-10-13 20:49 100696 ----a-w- c:\windows\system32\drivers\disk.sys
2014-03-28 18:32 . 2013-08-27 05:21 227840 ----a-w- c:\windows\system32\WebClnt.dll
2014-03-28 18:32 . 2013-08-27 05:19 104448 ----a-w- c:\windows\system32\davclnt.dll
2014-03-28 18:32 . 2013-08-26 22:29 199168 ----a-w- c:\windows\SysWow64\WebClnt.dll
2014-03-28 18:32 . 2013-08-26 22:28 86016 ----a-w- c:\windows\SysWow64\davclnt.dll
2014-03-28 18:32 . 2013-10-31 03:42 74752 ----a-w- c:\windows\system32\drivers\mpsdrv.sys
2014-03-28 18:17 . 2013-08-16 05:22 4917760 ----a-w- c:\windows\system32\sppsvc.exe
2014-03-28 18:16 . 2013-10-19 04:04 59392 ----a-w- c:\windows\SysWow64\imagehlp.dll
2014-03-28 18:16 . 2013-10-19 05:45 62976 ----a-w- c:\windows\system32\imagehlp.dll
2014-03-28 18:16 . 2013-07-04 02:13 541696 ----a-w- c:\windows\SysWow64\comctl32.dll
2014-03-28 18:16 . 2013-07-06 00:15 652288 ----a-w- c:\windows\system32\comctl32.dll
2014-03-28 18:16 . 2013-04-11 04:12 1029632 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Ink\journal.dll
2014-03-28 18:16 . 2013-04-11 04:12 1413632 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Ink\InkObj.dll
2014-03-28 18:16 . 2013-04-10 22:35 1617920 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2014-03-28 18:16 . 2013-04-10 22:35 2035200 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\InkObj.dll
2014-03-28 18:16 . 2013-04-10 22:35 1306112 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2014-03-28 18:16 . 2013-04-10 22:35 1272320 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2014-03-28 18:16 . 2013-04-10 22:35 1318912 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2014-03-28 18:14 . 2013-10-01 22:22 1022976 ----a-w- c:\windows\SysWow64\gdi32.dll
2014-03-28 18:14 . 2013-10-02 23:25 1300992 ----a-w- c:\windows\system32\gdi32.dll
2014-03-28 18:14 . 2013-12-09 00:45 523776 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-03-28 18:14 . 2013-12-08 23:59 600064 ----a-w- c:\windows\system32\vbscript.dll
2014-03-28 18:14 . 2013-06-22 05:45 785624 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2014-03-28 18:14 . 2013-06-22 05:45 54488 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2014-03-28 18:14 . 2013-07-01 22:14 25600 ----a-w- c:\windows\system32\drivers\usbprint.sys
2014-03-28 18:14 . 2013-06-29 03:08 32768 ----a-w- c:\windows\system32\drivers\hidparse.sys
2014-03-28 18:14 . 2013-07-05 22:02 99328 ----a-w- c:\windows\system32\drivers\usbcir.sys
2014-03-28 18:14 . 2013-07-05 22:01 210560 ----a-w- c:\windows\system32\drivers\usbvideo.sys
2014-03-28 18:13 . 2010-05-26 10:41 511328 ----a-w- c:\windows\system32\d3dx10_43.dll
2014-03-28 18:13 . 2010-05-26 10:41 470880 ----a-w- c:\windows\SysWow64\d3dx10_43.dll
2014-03-28 18:13 . 2010-05-26 10:41 1998168 ----a-w- c:\windows\SysWow64\D3DX9_43.dll
2014-03-28 18:13 . 2010-05-26 10:41 2401112 ----a-w- c:\windows\system32\D3DX9_43.dll
2014-03-28 18:13 . 2014-02-05 09:30 1179576 ----a-w- c:\windows\system32\nvspcap64.dll
2014-03-28 18:13 . 2014-02-05 09:31 1048152 ----a-w- c:\windows\SysWow64\nvspcap.dll
2014-03-28 18:12 . 2013-03-02 08:23 100864 ----a-w- c:\windows\SysWow64\SettingSyncInfo.dll
2014-03-28 18:12 . 2013-03-02 08:21 145408 ----a-w- c:\windows\SysWow64\powercfg.cpl
2014-03-28 18:12 . 2013-03-02 08:22 357888 ----a-w- c:\windows\SysWow64\netcfgx.dll
2014-03-28 18:12 . 2013-03-02 08:21 550912 ----a-w- c:\windows\SysWow64\drvstore.dll
2014-03-28 18:12 . 2013-03-02 08:24 4298240 ----a-w- c:\program files (x86)\Windows NT\Accessories\wordpad.exe
2014-03-28 18:12 . 2013-03-02 08:23 195072 ----a-w- c:\program files (x86)\Windows NT\Accessories\WordpadFilter.dll
2014-03-28 18:12 . 2013-03-02 08:23 893952 ----a-w- c:\windows\SysWow64\winmde.dll
2014-03-28 18:12 . 2013-03-02 08:23 504320 ----a-w- c:\windows\SysWow64\Windows.Security.Authentication.OnlineId.dll
2014-03-28 18:12 . 2013-03-02 08:23 601088 ----a-w- c:\windows\SysWow64\Windows.Globalization.dll
2014-03-28 18:12 . 2013-03-02 08:21 36352 ----a-w- c:\windows\SysWow64\DevDispItemProvider.dll
2014-03-28 18:10 . 2014-03-28 18:10 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2014-03-28 18:10 . 2013-10-01 23:37 1569280 ----a-w- c:\windows\SysWow64\crypt32.dll
2014-03-28 18:09 . 2014-03-28 18:09 -------- d-----w- c:\windows\SysWow64\NV
2014-03-28 18:09 . 2014-03-28 18:09 -------- d-----w- c:\windows\system32\NV
2014-03-28 18:09 . 2013-10-01 23:26 1890816 ----a-w- c:\windows\system32\crypt32.dll
2014-03-28 18:08 . 2013-05-23 22:25 694272 ----a-w- c:\windows\SysWow64\rpcrt4.dll
2014-03-28 18:08 . 2013-05-23 23:02 1314816 ----a-w- c:\windows\system32\rpcrt4.dll
2014-03-28 18:08 . 2014-02-08 04:34 4036608 ----a-w- c:\windows\system32\win32k.sys
2014-03-28 18:05 . 2014-03-04 14:35 9690424 ----a-w- c:\windows\SysWow64\nvopencl.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-26 15:00 . 2014-03-26 15:00 50784 ----a-w- c:\programdata\Microsoft\windowsfiltering\Sqm\Manifest\Sqm3.bin
2014-03-26 15:00 . 2014-03-26 15:00 17536 ----a-w- c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2014-03-26 14:54 . 2012-07-26 08:13 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-02-26 18:57 . 2014-02-26 18:57 46136 ---ha-w- c:\windows\system32\drivers\Hamdrv.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-02-10 20922016]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2010-11-15 35736]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-15 932288]
"ASUSPRP"="c:\program files (x86)\ASUS\APRP\APRP.EXE" [2013-05-01 3187360]
"ASUSWebStorage"="c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe" [2012-12-19 3576784]
"RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2012-03-28 91432]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]
@=""
.
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S0 edevmon;edevmon;c:\windows\system32\DRIVERS\edevmon.sys;c:\windows\SYSNATIVE\DRIVERS\edevmon.sys [x]
S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\System32\drivers\dtsoftbus01.sys;c:\windows\SYSNATIVE\drivers\dtsoftbus01.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 ASUS InstantOn;ASUS InstantOn Service;c:\program files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe;c:\program files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfpr.sys [x]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 AiCharger;ASUS Charger Driver;c:\windows\system32\DRIVERS\AiCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AiCharger.sys [x]
S3 AthBTPort;Qualcomm Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 ATP;ASUS Input Device;c:\windows\System32\drivers\AsusTP.sys;c:\windows\SYSNATIVE\drivers\AsusTP.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 btath_avdt;Qualcomm Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys;c:\windows\SYSNATIVE\drivers\btath_avdt.sys [x]
S3 BTATH_BUS;Qualcomm Atheros Bluetooth Bus;c:\windows\System32\drivers\btath_bus.sys;c:\windows\SYSNATIVE\drivers\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\System32\drivers\btath_hcrp.sys;c:\windows\SYSNATIVE\drivers\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\System32\drivers\btath_rcp.sys;c:\windows\SYSNATIVE\drivers\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 BthLEEnum;Ovladač úspory energie technologie Bluetooth;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
S3 HIDSwitch;ASUS Wireless Radio Control;c:\windows\System32\drivers\AsHIDSwitch64.sys;c:\windows\SYSNATIVE\drivers\AsHIDSwitch64.sys [x]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RSBASTOR;Realtek PCIE CardReader Driver - BA;c:\windows\system32\DRIVERS\RtsBaStor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsBaStor.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2014-04-08 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-28 19:05]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\!AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2012-09-27 07:15 1472512 ----a-w- c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\!AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2012-09-27 07:15 1472512 ----a-w- c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\!AsusWSShellExt_U]
@="{1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D}"
[HKEY_CLASSES_ROOT\CLSID\{1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D}]
2012-09-27 07:15 1472512 ----a-w- c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-12-13 172144]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-12-13 399984]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-05-30 13550152]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2013-05-20 1308232]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-02-05 2234144]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-02-05 1179576]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2013-09-12 5618456]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://asus13.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\sptf9zwg.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
c:\program files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
c:\program files (x86)\ASUS\Splendid\ACMON.exe
c:\program files (x86)\ASUS\Splendid\ColorUService.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
c:\program files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
c:\program files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
c:\program files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Asus\AsusVibe\AsusVibe2.0.exe
.
**************************************************************************
.
Celkový čas: 2014-04-08 15:21:19 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-04-08 13:21
ComboFix2.txt 2014-04-07 13:37
.
Před spuštěním: 221 212 073 984 bytes free
Po spuštění: 221 022 081 024 bytes free
.
- - End Of File - - 5C9B3C40A2DB9F9C1F6B4B45B08B0D44

[AngelikaB]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:24:45, on 8. 4. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16843)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus13.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10825 bytes

[AngelikaB]

aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2014-04-08 15:26:00
-----------------------------
15:26:00.516 OS Version: Windows x64 6.2.9200
15:26:00.516 Number of processors: 4 586 0x3A09
15:26:00.516 ComputerName: PEŤÁSEK UserName: ASUS
15:26:00.519 Initialze error 1
15:26:02.688 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000003f
15:26:02.689 Disk 0 Vendor: TOSHIBA_MQ01ABD075 AX0R2J Size: 715404MB BusType: 11
15:26:02.737 Disk 0 MBR read successfully
15:26:02.738 Disk 0 MBR scan
15:26:02.740 Disk 0 unknown MBR code
15:26:02.742 Disk 0 Partition 1 00 EE GPT 2097151 MB offset 1
15:26:02.744 Disk 0 scanning C:\Windows\system32\drivers
15:26:02.745 Service scanning
15:26:03.684 Modules scanning
15:26:03.686 Disk 0 trace - called modules:
15:26:03.725 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys storport.sys hal.dll iaStorA.sys
15:26:03.728 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006bf0060]
15:26:03.731 3 CLASSPNP.SYS[fffff88000a43e0a] -> nt!IofCallDriver -> [0xfffffa80053b5be0]
15:26:03.733 5 ACPI.sys[fffff88001001a91] -> nt!IofCallDriver -> \Device\0000003f[0xfffffa80053df060]
15:26:03.738 Scan finished successfully
15:26:09.566 Disk 0 MBR has been saved successfully to "C:\Users\ASUS\Desktop\MBR.dat"
15:26:09.569 The log file has been saved successfully to "C:\Users\ASUS\Desktop\aswMBR.txt"