Prosím o kontrolu logu Vyřešeno

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

unlimited
Level 1.5
Level 1.5
Příspěvky: 149
Registrován: říjen 11
Pohlaví: Muž
Stav:
Offline

Prosím o kontrolu logu

Příspěvekod unlimited » 02 črc 2012 15:40

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:32:07, on 2.7.2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Ask.com\Updater\Updater.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hanys\Favorites\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredibar.com/mb128?a=6R8xv3EAA0&i=26
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: (no name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll
O2 - BHO: Web Assistant Helper - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll
O2 - BHO: Incredibar.com Helper Object - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: DealPly - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files (x86)\DealPly\DealPlyIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Incredibar Toolbar - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\hanys\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [Clownfish] "C:\Program Files (x86)\Clownfish\Clownfish.exe"
O4 - HKCU\..\Run: [SpyEmergency] C:\Program Files\NETGATE\Spy Emergency\SpyEmergency.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spy Emergency Engine Service (SpyEmrgSrv) - NETGATE Technologies s.r.o. - C:\Program Files\NETGATE\Spy Emergency\SpyEmergencySrv.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Web Assistant Updater - Unknown owner - C:\Program Files\Web Assistant\ExtensionUpdaterService.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11211 bytes

Reklama
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu

Příspěvekod jaro3 » 02 črc 2012 20:02

Odinstaluj:
Ask.com\GenericAskToolbar
Babylon toolbar helper
Incredibar Toolbar
NETGATE\Spy Emergency (pokud nemáš placený)


Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: (no name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Incredibar Toolbar - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\hanys\AppData\Local\Google\Update\GoogleUpdate.exe" /c


Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

unlimited
Level 1.5
Level 1.5
Příspěvky: 149
Registrován: říjen 11
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu

Příspěvekod unlimited » 02 črc 2012 20:26

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Verze databáze: v2012.07.02.03

Windows 7 x64 NTFS
Internet Explorer 8.0.7600.16385
hanys :: HANYS-PC [administrátor]

2.7.2012 20:23:29
mbam-log-2012-07-02 (20-23-29).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 223164
Uplynulý čas: 1 minut, 54 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)




Snad jsem to udělal správně...

Uživatelský avatar
Žbeky
Moderátor
Guru Level 13
Guru Level 13
Příspěvky: 22288
Registrován: květen 08
Bydliště: Vsetín - Pardubice
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu

Příspěvekod Žbeky » 02 črc 2012 21:04

Problémy?
V SZ řeším jen záležitosti týkající se fóra. Na prosby a žádosti o technickou podporu nereaguji. Díky za pochopení.

HiJackThis + návod - HW Monitor - Jak označit příspěvek za vyřešený - Pravidla fóra

unlimited
Level 1.5
Level 1.5
Příspěvky: 149
Registrován: říjen 11
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu

Příspěvekod unlimited » 02 črc 2012 21:16

Žádné, jen když otevři novou kartu je tam pořád ta stránka http://mystart.incredibar.com/?loc=CH_NT

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu

Příspěvekod jaro3 » 02 črc 2012 21:54

fix:)

Kód: Vybrat vše

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredibar.com/mb128?a=6R8xv3EAA0&i=26


Stáhni si TDSSKiller

Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller.2.2.7.1._(datum)_log.txt , vlož sem prosím celý obsah logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

unlimited
Level 1.5
Level 1.5
Příspěvky: 149
Registrován: říjen 11
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu

Příspěvekod unlimited » 02 črc 2012 22:15

22:11:49.0138 2052 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
22:11:49.0140 2052 cdfs - ok
22:11:49.0168 2052 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
22:11:49.0170 2052 cdrom - ok
22:11:49.0186 2052 CertPropSvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll
22:11:49.0188 2052 CertPropSvc - ok
22:11:49.0210 2052 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
22:11:49.0212 2052 circlass - ok
22:11:49.0236 2052 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
22:11:49.0240 2052 CLFS - ok
22:11:49.0283 2052 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:11:49.0285 2052 clr_optimization_v2.0.50727_32 - ok
22:11:49.0339 2052 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
22:11:49.0344 2052 clr_optimization_v2.0.50727_64 - ok
22:11:49.0429 2052 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
22:11:49.0432 2052 clr_optimization_v4.0.30319_32 - ok
22:11:49.0484 2052 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
22:11:49.0501 2052 clr_optimization_v4.0.30319_64 - ok
22:11:49.0526 2052 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
22:11:49.0528 2052 CmBatt - ok
22:11:49.0539 2052 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
22:11:49.0541 2052 cmdide - ok
22:11:49.0572 2052 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys
22:11:49.0578 2052 CNG - ok
22:11:49.0596 2052 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
22:11:49.0598 2052 Compbatt - ok
22:11:49.0617 2052 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
22:11:49.0618 2052 CompositeBus - ok
22:11:49.0623 2052 COMSysApp - ok
22:11:49.0643 2052 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
22:11:49.0644 2052 crcdisk - ok
22:11:49.0678 2052 CryptSvc (8c57411b66282c01533cb776f98ad384) C:\Windows\system32\cryptsvc.dll
22:11:49.0681 2052 CryptSvc - ok
22:11:49.0711 2052 CSC (4a6173c2279b498cd8f57cae504564cb) C:\Windows\system32\drivers\csc.sys
22:11:49.0717 2052 CSC - ok
22:11:49.0760 2052 CscService (873fbf927c06e5cee04dec617502f8fd) C:\Windows\System32\cscsvc.dll
22:11:49.0769 2052 CscService - ok
22:11:49.0817 2052 DcomLaunch (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll
22:11:49.0825 2052 DcomLaunch - ok
22:11:49.0843 2052 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
22:11:49.0846 2052 defragsvc - ok
22:11:49.0886 2052 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys
22:11:49.0888 2052 DfsC - ok
22:11:49.0910 2052 Dhcp (ce3b9562d997f69b330d181a8875960f) C:\Windows\system32\dhcpcore.dll
22:11:49.0914 2052 Dhcp - ok
22:11:49.0927 2052 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
22:11:49.0928 2052 discache - ok
22:11:49.0947 2052 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
22:11:49.0948 2052 Disk - ok
22:11:49.0967 2052 Dnscache (676108c4e3aa6f6b34633748bd0bebd9) C:\Windows\System32\dnsrslvr.dll
22:11:49.0970 2052 Dnscache - ok
22:11:49.0975 2052 dot3svc (14452acdb09b70964c8c21bf80a13acb) C:\Windows\System32\dot3svc.dll
22:11:49.0991 2052 dot3svc - ok
22:11:50.0006 2052 DPS (8c2ba6bea949ee6e68385f5692bafb94) C:\Windows\system32\dps.dll
22:11:50.0006 2052 DPS - ok
22:11:50.0034 2052 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
22:11:50.0036 2052 drmkaud - ok
22:11:50.0084 2052 DXGKrnl (7cb7d2b73813ce05c7bc0f5f95d27cec) C:\Windows\System32\drivers\dxgkrnl.sys
22:11:50.0093 2052 DXGKrnl - ok
22:11:50.0113 2052 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
22:11:50.0115 2052 EapHost - ok
22:11:50.0248 2052 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
22:11:50.0300 2052 ebdrv - ok
22:11:50.0389 2052 EFS (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\System32\lsass.exe
22:11:50.0393 2052 EFS - ok
22:11:50.0473 2052 ehRecvr (b91d81b3b54a54ccafc03733dbc2e29e) C:\Windows\ehome\ehRecvr.exe
22:11:50.0482 2052 ehRecvr - ok
22:11:50.0505 2052 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
22:11:50.0507 2052 ehSched - ok
22:11:50.0564 2052 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
22:11:50.0572 2052 elxstor - ok
22:11:50.0584 2052 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
22:11:50.0585 2052 ErrDev - ok
22:11:50.0621 2052 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
22:11:50.0627 2052 EventSystem - ok
22:11:50.0654 2052 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
22:11:50.0657 2052 exfat - ok
22:11:50.0744 2052 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
22:11:50.0749 2052 fastfat - ok
22:11:50.0805 2052 Fax (d607b2f1bee3992aa6c2c92c0a2f0855) C:\Windows\system32\fxssvc.exe
22:11:50.0814 2052 Fax - ok
22:11:50.0832 2052 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
22:11:50.0833 2052 fdc - ok
22:11:50.0850 2052 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
22:11:50.0852 2052 fdPHost - ok
22:11:50.0861 2052 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
22:11:50.0863 2052 FDResPub - ok
22:11:50.0879 2052 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
22:11:50.0881 2052 FileInfo - ok
22:11:50.0894 2052 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
22:11:50.0896 2052 Filetrace - ok
22:11:50.0910 2052 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
22:11:50.0912 2052 flpydisk - ok
22:11:50.0934 2052 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
22:11:50.0939 2052 FltMgr - ok
22:11:50.0995 2052 FontCache (8ac4cb4ea61e41009fae9ae7b2b5da3a) C:\Windows\system32\FntCache.dll
22:11:51.0017 2052 FontCache - ok
22:11:51.0068 2052 FontCache3.0.0.0 (8d89e3131c27fdd6932189cb785e1b7a) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
22:11:51.0068 2052 FontCache3.0.0.0 - ok
22:11:51.0088 2052 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
22:11:51.0088 2052 FsDepends - ok
22:11:51.0098 2052 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
22:11:51.0098 2052 Fs_Rec - ok
22:11:51.0122 2052 fvevol (b8b2a6e1558f8f5de5ce431c5b2c7b09) C:\Windows\system32\DRIVERS\fvevol.sys
22:11:51.0124 2052 fvevol - ok
22:11:51.0137 2052 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
22:11:51.0138 2052 gagp30kx - ok
22:11:51.0175 2052 gpsvc (fe5ab4525bc2ec68b9119a6e5d40128b) C:\Windows\System32\gpsvc.dll
22:11:51.0183 2052 gpsvc - ok
22:11:51.0280 2052 gupdate (506708142bc63daba64f2d3ad1dcd5bf) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
22:11:51.0283 2052 gupdate - ok
22:11:51.0295 2052 gupdatem (506708142bc63daba64f2d3ad1dcd5bf) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
22:11:51.0297 2052 gupdatem - ok
22:11:51.0333 2052 hamachi (1e6438d4ea6e1174a3b3b1edc4de660b) C:\Windows\system32\DRIVERS\hamachi.sys
22:11:51.0334 2052 hamachi - ok
22:11:51.0458 2052 Hamachi2Svc (d483dbaef409e8ab7477c28615fcd853) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
22:11:51.0471 2052 Hamachi2Svc - ok
22:11:51.0530 2052 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
22:11:51.0532 2052 hcw85cir - ok
22:11:51.0557 2052 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
22:11:51.0561 2052 HdAudAddService - ok
22:11:51.0577 2052 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
22:11:51.0580 2052 HDAudBus - ok
22:11:51.0584 2052 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
22:11:51.0585 2052 HidBatt - ok
22:11:51.0598 2052 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
22:11:51.0599 2052 HidBth - ok
22:11:51.0612 2052 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
22:11:51.0613 2052 HidIr - ok
22:11:51.0628 2052 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
22:11:51.0630 2052 hidserv - ok
22:11:51.0652 2052 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
22:11:51.0653 2052 HidUsb - ok
22:11:51.0663 2052 hkmsvc (efa58ede58dd74388ffd04cb32681518) C:\Windows\system32\kmsvc.dll
22:11:51.0665 2052 hkmsvc - ok
22:11:51.0680 2052 HomeGroupListener (046b2673767ca626e2cfb7fdf735e9e8) C:\Windows\system32\ListSvc.dll
22:11:51.0683 2052 HomeGroupListener - ok
22:11:51.0709 2052 HomeGroupProvider (06a7422224d9865a5613710a089987df) C:\Windows\system32\provsvc.dll
22:11:51.0712 2052 HomeGroupProvider - ok
22:11:51.0743 2052 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
22:11:51.0745 2052 HpSAMD - ok
22:11:51.0782 2052 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
22:11:51.0789 2052 HTTP - ok
22:11:51.0830 2052 HWiNFO32 (868af15e84ef5b4b1564a965770e1c76) C:\Program Files (x86)\HWiNFO32\HWiNFO64A.SYS
22:11:51.0831 2052 HWiNFO32 - ok
22:11:51.0846 2052 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
22:11:51.0848 2052 hwpolicy - ok
22:11:51.0873 2052 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
22:11:51.0877 2052 i8042prt - ok
22:11:51.0918 2052 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys
22:11:51.0927 2052 iaStorV - ok
22:11:52.0016 2052 idsvc (2f2be70d3e02b6fa877921ab9516d43c) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
22:11:52.0033 2052 idsvc - ok
22:11:52.0040 2052 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
22:11:52.0042 2052 iirsp - ok
22:11:52.0090 2052 IKEEXT (c5b4683680df085b57bc53e5ef34861f) C:\Windows\System32\ikeext.dll
22:11:52.0098 2052 IKEEXT - ok
22:11:52.0124 2052 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
22:11:52.0125 2052 intelide - ok
22:11:52.0135 2052 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
22:11:52.0136 2052 intelppm - ok
22:11:52.0141 2052 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
22:11:52.0141 2052 IPBusEnum - ok
22:11:52.0156 2052 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
22:11:52.0156 2052 IpFilterDriver - ok
22:11:52.0188 2052 iphlpsvc (f8e058d17363ec580e4b7232778b6cb5) C:\Windows\System32\iphlpsvc.dll
22:11:52.0203 2052 iphlpsvc - ok
22:11:52.0222 2052 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
22:11:52.0224 2052 IPMIDRV - ok
22:11:52.0237 2052 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
22:11:52.0239 2052 IPNAT - ok
22:11:52.0252 2052 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
22:11:52.0252 2052 IRENUM - ok
22:11:52.0263 2052 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
22:11:52.0265 2052 isapnp - ok
22:11:52.0284 2052 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
22:11:52.0286 2052 iScsiPrt - ok
22:11:52.0313 2052 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
22:11:52.0315 2052 kbdclass - ok
22:11:52.0334 2052 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
22:11:52.0335 2052 kbdhid - ok
22:11:52.0345 2052 KeyIso (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe
22:11:52.0346 2052 KeyIso - ok
22:11:52.0355 2052 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys
22:11:52.0357 2052 KSecDD - ok
22:11:52.0372 2052 KSecPkg (bbe1bf6d9b661c354d4857d5fadb943b) C:\Windows\system32\Drivers\ksecpkg.sys
22:11:52.0374 2052 KSecPkg - ok
22:11:52.0387 2052 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
22:11:52.0388 2052 ksthunk - ok
22:11:52.0417 2052 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
22:11:52.0422 2052 KtmRm - ok
22:11:52.0454 2052 LanmanServer (c926920b8978de6acfe9e15c709e9b57) C:\Windows\system32\srvsvc.dll
22:11:52.0458 2052 LanmanServer - ok
22:11:52.0474 2052 LanmanWorkstation (27026eac8818e8a6c00a1cad2f11d29a) C:\Windows\System32\wkssvc.dll
22:11:52.0477 2052 LanmanWorkstation - ok
22:11:52.0497 2052 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
22:11:52.0498 2052 lltdio - ok
22:11:52.0527 2052 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
22:11:52.0530 2052 lltdsvc - ok
22:11:52.0543 2052 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
22:11:52.0544 2052 lmhosts - ok
22:11:52.0570 2052 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
22:11:52.0572 2052 LSI_FC - ok
22:11:52.0587 2052 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
22:11:52.0589 2052 LSI_SAS - ok
22:11:52.0598 2052 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
22:11:52.0599 2052 LSI_SAS2 - ok
22:11:52.0617 2052 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
22:11:52.0619 2052 LSI_SCSI - ok
22:11:52.0633 2052 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
22:11:52.0635 2052 luafv - ok
22:11:52.0711 2052 McComponentHostService (22a7776c5d8eb5930edf9c8dd0884259) C:\Program Files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe
22:11:52.0717 2052 McComponentHostService - ok
22:11:52.0762 2052 Mcx2Svc (f84c8f1000bc11e3b7b23cbd3baff111) C:\Windows\system32\Mcx2Svc.dll
22:11:52.0768 2052 Mcx2Svc - ok
22:11:52.0808 2052 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
22:11:52.0811 2052 megasas - ok
22:11:52.0840 2052 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
22:11:52.0847 2052 MegaSR - ok
22:11:52.0960 2052 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
22:11:52.0985 2052 MMCSS - ok
22:11:53.0077 2052 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
22:11:53.0079 2052 Modem - ok
22:11:53.0100 2052 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
22:11:53.0102 2052 monitor - ok
22:11:53.0113 2052 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
22:11:53.0115 2052 mouclass - ok
22:11:53.0138 2052 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
22:11:53.0139 2052 mouhid - ok
22:11:53.0157 2052 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
22:11:53.0159 2052 mountmgr - ok
22:11:53.0176 2052 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
22:11:53.0178 2052 mpio - ok
22:11:53.0197 2052 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
22:11:53.0198 2052 mpsdrv - ok
22:11:53.0240 2052 MpsSvc (aecab449567d1846dad63ece49e893e3) C:\Windows\system32\mpssvc.dll
22:11:53.0240 2052 MpsSvc - ok
22:11:53.0272 2052 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
22:11:53.0272 2052 MRxDAV - ok
22:11:53.0287 2052 mrxsmb (cfdcd8ca87c2a657debc150ac35b5e08) C:\Windows\system32\DRIVERS\mrxsmb.sys
22:11:53.0287 2052 mrxsmb - ok
22:11:53.0325 2052 mrxsmb10 (1bee517b220b7f024f411aec1571dd5a) C:\Windows\system32\DRIVERS\mrxsmb10.sys
22:11:53.0329 2052 mrxsmb10 - ok
22:11:53.0343 2052 mrxsmb20 (6b2d5fef385828b6e485c1c90afb8195) C:\Windows\system32\DRIVERS\mrxsmb20.sys
22:11:53.0346 2052 mrxsmb20 - ok
22:11:53.0352 2052 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
22:11:53.0353 2052 msahci - ok
22:11:53.0372 2052 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
22:11:53.0374 2052 msdsm - ok
22:11:53.0390 2052 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
22:11:53.0393 2052 MSDTC - ok
22:11:53.0409 2052 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
22:11:53.0409 2052 Msfs - ok
22:11:53.0422 2052 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
22:11:53.0423 2052 mshidkmdf - ok
22:11:53.0435 2052 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
22:11:53.0436 2052 msisadrv - ok
22:11:53.0463 2052 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
22:11:53.0467 2052 MSiSCSI - ok
22:11:53.0470 2052 msiserver - ok
22:11:53.0493 2052 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
22:11:53.0493 2052 MSKSSRV - ok
22:11:53.0516 2052 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
22:11:53.0517 2052 MSPCLOCK - ok
22:11:53.0526 2052 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
22:11:53.0528 2052 MSPQM - ok
22:11:53.0549 2052 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
22:11:53.0553 2052 MsRPC - ok
22:11:53.0563 2052 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
22:11:53.0564 2052 mssmbios - ok
22:11:53.0572 2052 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
22:11:53.0573 2052 MSTEE - ok
22:11:53.0586 2052 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
22:11:53.0587 2052 MTConfig - ok
22:11:53.0598 2052 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
22:11:53.0599 2052 Mup - ok
22:11:53.0675 2052 napagent (4987e079a4530fa737a128be54b63b12) C:\Windows\system32\qagentRT.dll
22:11:53.0685 2052 napagent - ok
22:11:53.0719 2052 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
22:11:53.0725 2052 NativeWifiP - ok
22:11:53.0782 2052 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
22:11:53.0794 2052 NDIS - ok
22:11:53.0813 2052 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
22:11:53.0814 2052 NdisCap - ok
22:11:53.0834 2052 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
22:11:53.0835 2052 NdisTapi - ok
22:11:53.0850 2052 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
22:11:53.0851 2052 Ndisuio - ok
22:11:53.0866 2052 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
22:11:53.0868 2052 NdisWan - ok
22:11:53.0880 2052 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
22:11:53.0881 2052 NDProxy - ok
22:11:53.0890 2052 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
22:11:53.0892 2052 NetBIOS - ok
22:11:53.0908 2052 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
22:11:53.0911 2052 NetBT - ok
22:11:53.0918 2052 Netlogon (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe
22:11:53.0919 2052 Netlogon - ok
22:11:53.0957 2052 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
22:11:53.0962 2052 Netman - ok
22:11:54.0051 2052 NetMsmqActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:11:54.0055 2052 NetMsmqActivator - ok
22:11:54.0063 2052 NetPipeActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:11:54.0067 2052 NetPipeActivator - ok
22:11:54.0102 2052 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
22:11:54.0109 2052 netprofm - ok
22:11:54.0113 2052 NetTcpActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:11:54.0115 2052 NetTcpActivator - ok
22:11:54.0121 2052 NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:11:54.0122 2052 NetTcpPortSharing - ok
22:11:54.0167 2052 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
22:11:54.0169 2052 nfrd960 - ok
22:11:54.0204 2052 NlaSvc (d9a0ce66046d6efa0c61baa885cba0a8) C:\Windows\System32\nlasvc.dll
22:11:54.0209 2052 NlaSvc - ok
22:11:54.0226 2052 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
22:11:54.0227 2052 Npfs - ok
22:11:54.0249 2052 npggsvc - ok
22:11:54.0260 2052 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
22:11:54.0263 2052 nsi - ok
22:11:54.0276 2052 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
22:11:54.0277 2052 nsiproxy - ok
22:11:54.0355 2052 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys
22:11:54.0370 2052 Ntfs - ok
22:11:54.0460 2052 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
22:11:54.0462 2052 Null - ok
22:11:54.0523 2052 NVHDA (8d4aac74b571fc356560e5b308955e93) C:\Windows\system32\drivers\nvhda64v.sys
22:11:54.0528 2052 NVHDA - ok
22:11:55.0122 2052 nvlddmkm (0eb204639119370f5f8f2871fbf4e14b) C:\Windows\system32\DRIVERS\nvlddmkm.sys
22:11:55.0337 2052 nvlddmkm - ok
22:11:55.0391 2052 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys
22:11:55.0391 2052 nvraid - ok
22:11:55.0406 2052 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys
22:11:55.0406 2052 nvstor - ok
22:11:55.0453 2052 nvsvc (32ff8ee6dcee5c0cb91ff892fb1ca364) C:\Windows\system32\nvvsvc.exe
22:11:55.0476 2052 nvsvc - ok
22:11:55.0621 2052 nvUpdatusService (bd012dc22c78be1071bc21eb125d782f) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
22:11:55.0636 2052 nvUpdatusService - ok
22:11:55.0696 2052 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
22:11:55.0697 2052 nv_agp - ok
22:11:55.0711 2052 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
22:11:55.0712 2052 ohci1394 - ok
22:11:55.0738 2052 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
22:11:55.0742 2052 p2pimsvc - ok
22:11:55.0770 2052 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
22:11:55.0775 2052 p2psvc - ok
22:11:55.0799 2052 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
22:11:55.0801 2052 Parport - ok
22:11:55.0813 2052 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
22:11:55.0815 2052 partmgr - ok
22:11:55.0832 2052 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
22:11:55.0835 2052 PcaSvc - ok
22:11:55.0849 2052 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
22:11:55.0851 2052 pci - ok
22:11:55.0855 2052 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
22:11:55.0856 2052 pciide - ok
22:11:55.0877 2052 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
22:11:55.0880 2052 pcmcia - ok
22:11:55.0897 2052 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
22:11:55.0899 2052 pcw - ok
22:11:55.0933 2052 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
22:11:55.0939 2052 PEAUTH - ok
22:11:55.0996 2052 PeerDistSvc (b9b0a4299dd2d76a4243f75fd54dc680) C:\Windows\system32\peerdistsvc.dll
22:11:56.0022 2052 PeerDistSvc - ok
22:11:56.0078 2052 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
22:11:56.0080 2052 PerfHost - ok
22:11:56.0182 2052 pla (557e9a86f65f0de18c9b6751dfe9d3f1) C:\Windows\system32\pla.dll
22:11:56.0208 2052 pla - ok
22:11:56.0239 2052 PlugPlay (23157d583244400e1d7fbaee2e4b31b7) C:\Windows\system32\umpnpmgr.dll
22:11:56.0245 2052 PlugPlay - ok
22:11:56.0255 2052 PnkBstrA - ok
22:11:56.0265 2052 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
22:11:56.0267 2052 PNRPAutoReg - ok
22:11:56.0286 2052 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
22:11:56.0289 2052 PNRPsvc - ok
22:11:56.0322 2052 PolicyAgent (166eb40d1f5b47e615de3d0fffe5f243) C:\Windows\System32\ipsecsvc.dll
22:11:56.0327 2052 PolicyAgent - ok
22:11:56.0347 2052 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
22:11:56.0350 2052 Power - ok
22:11:56.0384 2052 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
22:11:56.0387 2052 PptpMiniport - ok
22:11:56.0403 2052 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
22:11:56.0405 2052 Processor - ok
22:11:56.0443 2052 ProfSvc (f381975e1f4346de875cb07339ce8d3a) C:\Windows\system32\profsvc.dll
22:11:56.0447 2052 ProfSvc - ok
22:11:56.0461 2052 ProtectedStorage (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe
22:11:56.0461 2052 ProtectedStorage - ok
22:11:56.0476 2052 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
22:11:56.0492 2052 Psched - ok
22:11:56.0583 2052 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
22:11:56.0610 2052 ql2300 - ok
22:11:56.0714 2052 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
22:11:56.0718 2052 ql40xx - ok
22:11:56.0746 2052 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
22:11:56.0754 2052 QWAVE - ok
22:11:56.0770 2052 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
22:11:56.0772 2052 QWAVEdrv - ok
22:11:56.0781 2052 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
22:11:56.0783 2052 RasAcd - ok
22:11:56.0805 2052 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
22:11:56.0807 2052 RasAgileVpn - ok
22:11:56.0819 2052 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
22:11:56.0822 2052 RasAuto - ok
22:11:56.0834 2052 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
22:11:56.0835 2052 Rasl2tp - ok
22:11:56.0859 2052 RasMan (47394ed3d16d053f5906efe5ab51cc83) C:\Windows\System32\rasmans.dll
22:11:56.0864 2052 RasMan - ok
22:11:56.0876 2052 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
22:11:56.0877 2052 RasPppoe - ok
22:11:56.0885 2052 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
22:11:56.0887 2052 RasSstp - ok
22:11:56.0908 2052 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
22:11:56.0912 2052 rdbss - ok
22:11:56.0925 2052 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
22:11:56.0927 2052 rdpbus - ok
22:11:56.0937 2052 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
22:11:56.0938 2052 RDPCDD - ok
22:11:56.0962 2052 RDPDR (9706b84dbabfc4b4ca46c5a82b14dfa3) C:\Windows\system32\drivers\rdpdr.sys
22:11:56.0964 2052 RDPDR - ok
22:11:56.0988 2052 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
22:11:56.0989 2052 RDPENCDD - ok
22:11:56.0996 2052 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
22:11:56.0997 2052 RDPREFMP - ok
22:11:57.0021 2052 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
22:11:57.0024 2052 RDPWD - ok
22:11:57.0044 2052 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
22:11:57.0047 2052 rdyboost - ok
22:11:57.0071 2052 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
22:11:57.0074 2052 RemoteAccess - ok
22:11:57.0090 2052 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
22:11:57.0094 2052 RemoteRegistry - ok
22:11:57.0109 2052 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
22:11:57.0111 2052 RpcEptMapper - ok
22:11:57.0129 2052 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
22:11:57.0131 2052 RpcLocator - ok
22:11:57.0157 2052 RpcSs (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll
22:11:57.0161 2052 RpcSs - ok
22:11:57.0169 2052 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
22:11:57.0171 2052 rspndr - ok
22:11:57.0212 2052 RTL8167 (baefee35d27a5440d35092ce10267bec) C:\Windows\system32\DRIVERS\Rt64win7.sys
22:11:57.0215 2052 RTL8167 - ok
22:11:57.0225 2052 s3cap (88af6e02ab19df7fd07ecdf9c91e9af6) C:\Windows\system32\DRIVERS\vms3cap.sys
22:11:57.0226 2052 s3cap - ok
22:11:57.0240 2052 SamSs (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe
22:11:57.0241 2052 SamSs - ok
22:11:57.0256 2052 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
22:11:57.0258 2052 sbp2port - ok
22:11:57.0281 2052 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
22:11:57.0284 2052 SCardSvr - ok
22:11:57.0330 2052 SCDEmu (6ce6f98ea3d07a9c2ce3cd0a5a86352d) C:\Windows\system32\drivers\SCDEmu.sys
22:11:57.0332 2052 SCDEmu - ok
22:11:57.0347 2052 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
22:11:57.0348 2052 scfilter - ok
22:11:57.0406 2052 Schedule (ec56b171f85c7e855e7b0588ac503eea) C:\Windows\system32\schedsvc.dll
22:11:57.0431 2052 Schedule - ok
22:11:57.0454 2052 SCPolicySvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll
22:11:57.0455 2052 SCPolicySvc - ok
22:11:57.0471 2052 SDRSVC (765a27c3279ce11d14cb9e4f5869fca5) C:\Windows\System32\SDRSVC.dll
22:11:57.0474 2052 SDRSVC - ok
22:11:57.0500 2052 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
22:11:57.0500 2052 secdrv - ok
22:11:57.0520 2052 seclogon (463b386ebc70f98da5dff85f7e654346) C:\Windows\system32\seclogon.dll
22:11:57.0520 2052 seclogon - ok
22:11:57.0533 2052 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
22:11:57.0535 2052 SENS - ok
22:11:57.0546 2052 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
22:11:57.0548 2052 SensrSvc - ok
22:11:57.0558 2052 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
22:11:57.0559 2052 Serenum - ok
22:11:57.0574 2052 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
22:11:57.0576 2052 Serial - ok
22:11:57.0599 2052 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
22:11:57.0600 2052 sermouse - ok
22:11:57.0622 2052 SessionEnv (c3bc61ce47ff6f4e88ab8a3b429a36af) C:\Windows\system32\sessenv.dll
22:11:57.0625 2052 SessionEnv - ok
22:11:57.0637 2052 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
22:11:57.0638 2052 sffdisk - ok
22:11:57.0642 2052 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
22:11:57.0643 2052 sffp_mmc - ok
22:11:57.0650 2052 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
22:11:57.0651 2052 sffp_sd - ok
22:11:57.0663 2052 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
22:11:57.0664 2052 sfloppy - ok
22:11:57.0690 2052 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
22:11:57.0694 2052 SharedAccess - ok
22:11:57.0720 2052 ShellHWDetection (0298ac45d0efffb2db4baa7dd186e7bf) C:\Windows\System32\shsvcs.dll
22:11:57.0725 2052 ShellHWDetection - ok
22:11:57.0743 2052 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
22:11:57.0744 2052 SiSRaid2 - ok
22:11:57.0757 2052 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
22:11:57.0758 2052 SiSRaid4 - ok
22:11:58.0007 2052 Skype C2C Service (2a99850c2a6edd6c6602e822c716edaf) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
22:11:58.0043 2052 Skype C2C Service - ok
22:11:58.0170 2052 SkypeUpdate (c70aebd3608ed9fcea2a1bae83567ffc) C:\Program Files (x86)\Skype\Updater\Updater.exe
22:11:58.0173 2052 SkypeUpdate - ok
22:11:58.0286 2052 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
22:11:58.0289 2052 Smb - ok
22:11:58.0324 2052 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
22:11:58.0327 2052 SNMPTRAP - ok
22:11:58.0341 2052 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
22:11:58.0342 2052 spldr - ok
22:11:58.0375 2052 Spooler (89e8550c5862999fcf482ea562b0e98e) C:\Windows\System32\spoolsv.exe
22:11:58.0384 2052 Spooler - ok
22:11:58.0542 2052 sppsvc (913d843498553a1bc8f8dbad6358e49f) C:\Windows\system32\sppsvc.exe
22:11:58.0638 2052 sppsvc - ok
22:11:58.0728 2052 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
22:11:58.0734 2052 sppuinotify - ok
22:11:58.0823 2052 sptd (a15860e920b02c9a7ce8f3a6c2ff1e3a) C:\Windows\System32\Drivers\sptd.sys
22:11:58.0835 2052 sptd - ok
22:11:58.0851 2052 SpyEmrg - ok
22:11:58.0858 2052 SpyEmrgGuard - ok
22:11:58.0890 2052 srv (ec8f67289105bf270498095f14963464) C:\Windows\system32\DRIVERS\srv.sys
22:11:58.0895 2052 srv - ok
22:11:58.0922 2052 srv2 (f773d2ed090b7baa1c1a034f3ca476c8) C:\Windows\system32\DRIVERS\srv2.sys
22:11:58.0926 2052 srv2 - ok
22:11:58.0938 2052 srvnet (26e84d3649019c3244622e654dfcd75b) C:\Windows\system32\DRIVERS\srvnet.sys
22:11:58.0940 2052 srvnet - ok
22:11:58.0967 2052 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
22:11:58.0970 2052 SSDPSRV - ok
22:11:58.0979 2052 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
22:11:58.0982 2052 SstpSvc - ok
22:11:59.0021 2052 Steam Client Service - ok
22:11:59.0108 2052 Stereo Service (fc0a58529a02b1eed55ddc58696b7908) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
22:11:59.0114 2052 Stereo Service - ok
22:11:59.0157 2052 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
22:11:59.0160 2052 stexstor - ok
22:11:59.0220 2052 stisvc (52d0e33b681bd0f33fdc08812fee4f7d) C:\Windows\System32\wiaservc.dll
22:11:59.0233 2052 stisvc - ok
22:11:59.0260 2052 storflt (ffd7a6f15b14234b5b0e5d49e7961895) C:\Windows\system32\DRIVERS\vmstorfl.sys
22:11:59.0262 2052 storflt - ok
22:11:59.0283 2052 storvsc (8fccbefc5c440b3c23454656e551b09a) C:\Windows\system32\DRIVERS\storvsc.sys
22:11:59.0285 2052 storvsc - ok
22:11:59.0299 2052 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
22:11:59.0301 2052 swenum - ok
22:11:59.0336 2052 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
22:11:59.0345 2052 swprv - ok
22:11:59.0419 2052 SysMain (3c1284516a62078fb68f768de4f1a7be) C:\Windows\system32\sysmain.dll
22:11:59.0452 2052 SysMain - ok
22:11:59.0524 2052 TabletInputService (238935c3cf2854886dc7cbb2a0e2cc66) C:\Windows\System32\TabSvc.dll
22:11:59.0528 2052 TabletInputService - ok
22:11:59.0546 2052 TapiSrv (884264ac597b690c5707c89723bb8e7b) C:\Windows\System32\tapisrv.dll
22:11:59.0551 2052 TapiSrv - ok
22:11:59.0565 2052 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
22:11:59.0567 2052 TBS - ok
22:11:59.0657 2052 Tcpip (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\drivers\tcpip.sys
22:11:59.0688 2052 Tcpip - ok
22:11:59.0824 2052 TCPIP6 (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\DRIVERS\tcpip.sys
22:11:59.0833 2052 TCPIP6 - ok
22:11:59.0887 2052 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
22:11:59.0888 2052 tcpipreg - ok
22:11:59.0903 2052 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
22:11:59.0904 2052 TDPIPE - ok
22:11:59.0919 2052 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
22:11:59.0920 2052 TDTCP - ok
22:11:59.0943 2052 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
22:11:59.0945 2052 tdx - ok
22:12:00.0139 2052 TeamViewer7 (a4d2ce94b028ef1e437cf4ac3d8ff26c) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
22:12:00.0158 2052 TeamViewer7 - ok
22:12:00.0208 2052 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
22:12:00.0209 2052 TermDD - ok
22:12:00.0255 2052 TermService (0f05ec2887bfe197ad82a13287d2f404) C:\Windows\System32\termsrv.dll
22:12:00.0263 2052 TermService - ok
22:12:00.0273 2052 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
22:12:00.0275 2052 Themes - ok
22:12:00.0298 2052 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
22:12:00.0300 2052 THREADORDER - ok
22:12:00.0310 2052 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
22:12:00.0313 2052 TrkWks - ok
22:12:00.0351 2052 TrustedInstaller (840f7fb849f5887a49ba18c13b2da920) C:\Windows\servicing\TrustedInstaller.exe
22:12:00.0354 2052 TrustedInstaller - ok
22:12:00.0364 2052 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
22:12:00.0365 2052 tssecsrv - ok
22:12:00.0393 2052 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
22:12:00.0395 2052 tunnel - ok
22:12:00.0411 2052 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
22:12:00.0412 2052 uagp35 - ok
22:12:00.0438 2052 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
22:12:00.0442 2052 udfs - ok
22:12:00.0462 2052 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
22:12:00.0465 2052 UI0Detect - ok
22:12:00.0484 2052 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
22:12:00.0486 2052 uliagpkx - ok
22:12:00.0522 2052 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
22:12:00.0523 2052 umbus - ok
22:12:00.0538 2052 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
22:12:00.0539 2052 UmPass - ok
22:12:00.0556 2052 UmRdpService (af0ac98ee5077eb844413eb54287fde3) C:\Windows\System32\umrdp.dll
22:12:00.0559 2052 UmRdpService - ok
22:12:00.0585 2052 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
22:12:00.0590 2052 upnphost - ok
22:12:00.0607 2052 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys
22:12:00.0609 2052 usbccgp - ok
22:12:00.0623 2052 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
22:12:00.0625 2052 usbcir - ok
22:12:00.0644 2052 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys
22:12:00.0646 2052 usbehci - ok
22:12:00.0666 2052 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys
22:12:00.0670 2052 usbhub - ok
22:12:00.0684 2052 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys
22:12:00.0686 2052 usbohci - ok
22:12:00.0698 2052 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
22:12:00.0699 2052 usbprint - ok
22:12:00.0709 2052 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS
22:12:00.0710 2052 USBSTOR - ok
22:12:00.0719 2052 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys
22:12:00.0720 2052 usbuhci - ok
22:12:00.0725 2052 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
22:12:00.0735 2052 UxSms - ok
22:12:00.0745 2052 VaultSvc (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe
22:12:00.0745 2052 VaultSvc - ok
22:12:00.0755 2052 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
22:12:00.0765 2052 vdrvroot - ok
22:12:00.0797 2052 vds (44d73e0bbc1d3c8981304ba15135c2f2) C:\Windows\System32\vds.exe
22:12:00.0804 2052 vds - ok
22:12:00.0815 2052 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
22:12:00.0816 2052 vga - ok
22:12:00.0831 2052 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
22:12:00.0832 2052 VgaSave - ok
22:12:00.0857 2052 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
22:12:00.0860 2052 vhdmp - ok
22:12:00.0877 2052 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
22:12:00.0878 2052 viaide - ok
22:12:00.0935 2052 vmbus (1501699d7eda984abc4155a7da5738d1) C:\Windows\system32\DRIVERS\vmbus.sys
22:12:00.0940 2052 vmbus - ok
22:12:00.0961 2052 VMBusHID (ae10c35761889e65a6f7176937c5592c) C:\Windows\system32\DRIVERS\VMBusHID.sys
22:12:00.0964 2052 VMBusHID - ok
22:12:00.0982 2052 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
22:12:00.0984 2052 volmgr - ok
22:12:01.0012 2052 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
22:12:01.0018 2052 volmgrx - ok
22:12:01.0036 2052 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
22:12:01.0040 2052 volsnap - ok
22:12:01.0073 2052 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
22:12:01.0076 2052 vsmraid - ok
22:12:01.0158 2052 VSS (787898bf9fb6d7bd87a36e2d95c899ba) C:\Windows\system32\vssvc.exe
22:12:01.0192 2052 VSS - ok
22:12:01.0290 2052 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
22:12:01.0292 2052 vwifibus - ok
22:12:01.0334 2052 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
22:12:01.0341 2052 W32Time - ok
22:12:01.0350 2052 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
22:12:01.0353 2052 WacomPen - ok
22:12:01.0380 2052 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
22:12:01.0382 2052 WANARP - ok
22:12:01.0387 2052 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
22:12:01.0388 2052 Wanarpv6 - ok
22:12:01.0462 2052 wbengine (5ab1bb85bd8b5089cc5d64200dedae68) C:\Windows\system32\wbengine.exe
22:12:01.0500 2052 wbengine - ok
22:12:01.0574 2052 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
22:12:01.0578 2052 WbioSrvc - ok
22:12:01.0600 2052 wcncsvc (8321c2ca3b62b61b293cda3451984468) C:\Windows\System32\wcncsvc.dll
22:12:01.0605 2052 wcncsvc - ok
22:12:01.0626 2052 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
22:12:01.0629 2052 WcsPlugInService - ok
22:12:01.0637 2052 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
22:12:01.0638 2052 Wd - ok
22:12:01.0672 2052 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
22:12:01.0678 2052 Wdf01000 - ok
22:12:01.0695 2052 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
22:12:01.0698 2052 WdiServiceHost - ok
22:12:01.0701 2052 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
22:12:01.0703 2052 WdiSystemHost - ok
22:12:01.0778 2052 Web Assistant Updater (f53ca9d2a8e69281af8e6009b14326a3) C:\Program Files\Web Assistant\ExtensionUpdaterService.exe
22:12:01.0781 2052 Web Assistant Updater - ok
22:12:01.0808 2052 WebClient (8a438cbb8c032a0c798b0c642ffbe572) C:\Windows\System32\webclnt.dll
22:12:01.0824 2052 WebClient - ok
22:12:01.0839 2052 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
22:12:01.0855 2052 Wecsvc - ok
22:12:01.0876 2052 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
22:12:01.0879 2052 wercplsupport - ok
22:12:01.0902 2052 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
22:12:01.0905 2052 WerSvc - ok
22:12:01.0943 2052 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
22:12:01.0945 2052 WfpLwf - ok
22:12:01.0950 2052 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
22:12:01.0952 2052 WIMMount - ok
22:12:01.0970 2052 WinDefend - ok
22:12:01.0982 2052 WinHttpAutoProxySvc - ok
22:12:02.0043 2052 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
22:12:02.0049 2052 Winmgmt - ok
22:12:02.0194 2052 WinRM (41fbb751936b387f9179e7f03a74fe29) C:\Windows\system32\WsmSvc.dll
22:12:02.0233 2052 WinRM - ok
22:12:02.0333 2052 WinUSB (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUSB.sys
22:12:02.0334 2052 WinUSB - ok
22:12:02.0383 2052 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
22:12:02.0394 2052 Wlansvc - ok
22:12:02.0623 2052 wlidsvc (98f138897ef4246381d197cb81846d62) c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
22:12:02.0637 2052 wlidsvc - ok
22:12:02.0697 2052 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
22:12:02.0699 2052 WmiAcpi - ok
22:12:02.0723 2052 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
22:12:02.0725 2052 wmiApSrv - ok
22:12:02.0752 2052 WMPNetworkSvc - ok
22:12:02.0833 2052 WMZuneComm (83b6ca03c846fcd47f9883d77d1eb27b) C:\Program Files\Zune\WMZuneComm.exe
22:12:02.0837 2052 WMZuneComm - ok
22:12:02.0853 2052 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
22:12:02.0853 2052 WPCSvc - ok
22:12:02.0873 2052 WPDBusEnum (2e57ddf2880a7e52e76f41c7e96d327b) C:\Windows\system32\wpdbusenum.dll
22:12:02.0873 2052 WPDBusEnum - ok
22:12:02.0883 2052 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
22:12:02.0893 2052 ws2ifsl - ok
22:12:02.0903 2052 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
22:12:02.0903 2052 wscsvc - ok
22:12:02.0915 2052 WSearch - ok
22:12:03.0020 2052 wuauserv (38340204a2d0228f1e87740fc5e554a7) C:\Windows\system32\wuaueng.dll
22:12:03.0061 2052 wuauserv - ok
22:12:03.0109 2052 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
22:12:03.0111 2052 WudfPf - ok
22:12:03.0139 2052 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
22:12:03.0142 2052 WUDFRd - ok
22:12:03.0155 2052 wudfsvc (b551d6637aa0e132c18ac6e504f7b79b) C:\Windows\System32\WUDFSvc.dll
22:12:03.0157 2052 wudfsvc - ok
22:12:03.0178 2052 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
22:12:03.0183 2052 WwanSvc - ok
22:12:03.0243 2052 X6va008 - ok
22:12:03.0770 2052 ZuneNetworkSvc (67b787c34fb2888d01b130ae007042d8) C:\Program Files\Zune\ZuneNss.exe
22:12:03.0910 2052 ZuneNetworkSvc - ok
22:12:03.0941 2052 ZuneWlanCfgSvc (4d89fc1c20cf655739efac5da81a67bc) C:\Program Files\Zune\ZuneWlanCfgSvc.exe
22:12:03.0956 2052 ZuneWlanCfgSvc - ok
22:12:03.0987 2052 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
22:12:04.0149 2052 \Device\Harddisk0\DR0 - ok
22:12:04.0154 2052 Boot (0x1200) (23cf4f1720c70141f75c6524abafc7c6) \Device\Harddisk0\DR0\Partition0
22:12:04.0155 2052 \Device\Harddisk0\DR0\Partition0 - ok
22:12:04.0156 2052 ============================================================
22:12:04.0156 2052 Scan finished
22:12:04.0156 2052 ============================================================
22:12:04.0166 6556 Detected object count: 0
22:12:04.0166 6556 Actual detected object count: 0
22:12:07.0499 8560 Deinitialize success

unlimited
Level 1.5
Level 1.5
Příspěvky: 149
Registrován: říjen 11
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu

Příspěvekod unlimited » 02 črc 2012 22:15

22:11:49.0138 2052 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
22:11:49.0140 2052 cdfs - ok
22:11:49.0168 2052 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
22:11:49.0170 2052 cdrom - ok
22:11:49.0186 2052 CertPropSvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll
22:11:49.0188 2052 CertPropSvc - ok
22:11:49.0210 2052 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
22:11:49.0212 2052 circlass - ok
22:11:49.0236 2052 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
22:11:49.0240 2052 CLFS - ok
22:11:49.0283 2052 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:11:49.0285 2052 clr_optimization_v2.0.50727_32 - ok
22:11:49.0339 2052 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
22:11:49.0344 2052 clr_optimization_v2.0.50727_64 - ok
22:11:49.0429 2052 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
22:11:49.0432 2052 clr_optimization_v4.0.30319_32 - ok
22:11:49.0484 2052 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
22:11:49.0501 2052 clr_optimization_v4.0.30319_64 - ok
22:11:49.0526 2052 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
22:11:49.0528 2052 CmBatt - ok
22:11:49.0539 2052 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
22:11:49.0541 2052 cmdide - ok
22:11:49.0572 2052 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys
22:11:49.0578 2052 CNG - ok
22:11:49.0596 2052 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
22:11:49.0598 2052 Compbatt - ok
22:11:49.0617 2052 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
22:11:49.0618 2052 CompositeBus - ok
22:11:49.0623 2052 COMSysApp - ok
22:11:49.0643 2052 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
22:11:49.0644 2052 crcdisk - ok
22:11:49.0678 2052 CryptSvc (8c57411b66282c01533cb776f98ad384) C:\Windows\system32\cryptsvc.dll
22:11:49.0681 2052 CryptSvc - ok
22:11:49.0711 2052 CSC (4a6173c2279b498cd8f57cae504564cb) C:\Windows\system32\drivers\csc.sys
22:11:49.0717 2052 CSC - ok
22:11:49.0760 2052 CscService (873fbf927c06e5cee04dec617502f8fd) C:\Windows\System32\cscsvc.dll
22:11:49.0769 2052 CscService - ok
22:11:49.0817 2052 DcomLaunch (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll
22:11:49.0825 2052 DcomLaunch - ok
22:11:49.0843 2052 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
22:11:49.0846 2052 defragsvc - ok
22:11:49.0886 2052 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys
22:11:49.0888 2052 DfsC - ok
22:11:49.0910 2052 Dhcp (ce3b9562d997f69b330d181a8875960f) C:\Windows\system32\dhcpcore.dll
22:11:49.0914 2052 Dhcp - ok
22:11:49.0927 2052 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
22:11:49.0928 2052 discache - ok
22:11:49.0947 2052 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
22:11:49.0948 2052 Disk - ok
22:11:49.0967 2052 Dnscache (676108c4e3aa6f6b34633748bd0bebd9) C:\Windows\System32\dnsrslvr.dll
22:11:49.0970 2052 Dnscache - ok
22:11:49.0975 2052 dot3svc (14452acdb09b70964c8c21bf80a13acb) C:\Windows\System32\dot3svc.dll
22:11:49.0991 2052 dot3svc - ok
22:11:50.0006 2052 DPS (8c2ba6bea949ee6e68385f5692bafb94) C:\Windows\system32\dps.dll
22:11:50.0006 2052 DPS - ok
22:11:50.0034 2052 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
22:11:50.0036 2052 drmkaud - ok
22:11:50.0084 2052 DXGKrnl (7cb7d2b73813ce05c7bc0f5f95d27cec) C:\Windows\System32\drivers\dxgkrnl.sys
22:11:50.0093 2052 DXGKrnl - ok
22:11:50.0113 2052 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
22:11:50.0115 2052 EapHost - ok
22:11:50.0248 2052 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
22:11:50.0300 2052 ebdrv - ok
22:11:50.0389 2052 EFS (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\System32\lsass.exe
22:11:50.0393 2052 EFS - ok
22:11:50.0473 2052 ehRecvr (b91d81b3b54a54ccafc03733dbc2e29e) C:\Windows\ehome\ehRecvr.exe
22:11:50.0482 2052 ehRecvr - ok
22:11:50.0505 2052 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
22:11:50.0507 2052 ehSched - ok
22:11:50.0564 2052 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
22:11:50.0572 2052 elxstor - ok
22:11:50.0584 2052 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
22:11:50.0585 2052 ErrDev - ok
22:11:50.0621 2052 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
22:11:50.0627 2052 EventSystem - ok
22:11:50.0654 2052 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
22:11:50.0657 2052 exfat - ok
22:11:50.0744 2052 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
22:11:50.0749 2052 fastfat - ok
22:11:50.0805 2052 Fax (d607b2f1bee3992aa6c2c92c0a2f0855) C:\Windows\system32\fxssvc.exe
22:11:50.0814 2052 Fax - ok
22:11:50.0832 2052 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
22:11:50.0833 2052 fdc - ok
22:11:50.0850 2052 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
22:11:50.0852 2052 fdPHost - ok
22:11:50.0861 2052 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
22:11:50.0863 2052 FDResPub - ok
22:11:50.0879 2052 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
22:11:50.0881 2052 FileInfo - ok
22:11:50.0894 2052 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
22:11:50.0896 2052 Filetrace - ok
22:11:50.0910 2052 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
22:11:50.0912 2052 flpydisk - ok
22:11:50.0934 2052 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
22:11:50.0939 2052 FltMgr - ok
22:11:50.0995 2052 FontCache (8ac4cb4ea61e41009fae9ae7b2b5da3a) C:\Windows\system32\FntCache.dll
22:11:51.0017 2052 FontCache - ok
22:11:51.0068 2052 FontCache3.0.0.0 (8d89e3131c27fdd6932189cb785e1b7a) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
22:11:51.0068 2052 FontCache3.0.0.0 - ok
22:11:51.0088 2052 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
22:11:51.0088 2052 FsDepends - ok
22:11:51.0098 2052 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
22:11:51.0098 2052 Fs_Rec - ok
22:11:51.0122 2052 fvevol (b8b2a6e1558f8f5de5ce431c5b2c7b09) C:\Windows\system32\DRIVERS\fvevol.sys
22:11:51.0124 2052 fvevol - ok
22:11:51.0137 2052 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
22:11:51.0138 2052 gagp30kx - ok
22:11:51.0175 2052 gpsvc (fe5ab4525bc2ec68b9119a6e5d40128b) C:\Windows\System32\gpsvc.dll
22:11:51.0183 2052 gpsvc - ok
22:11:51.0280 2052 gupdate (506708142bc63daba64f2d3ad1dcd5bf) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
22:11:51.0283 2052 gupdate - ok
22:11:51.0295 2052 gupdatem (506708142bc63daba64f2d3ad1dcd5bf) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
22:11:51.0297 2052 gupdatem - ok
22:11:51.0333 2052 hamachi (1e6438d4ea6e1174a3b3b1edc4de660b) C:\Windows\system32\DRIVERS\hamachi.sys
22:11:51.0334 2052 hamachi - ok
22:11:51.0458 2052 Hamachi2Svc (d483dbaef409e8ab7477c28615fcd853) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
22:11:51.0471 2052 Hamachi2Svc - ok
22:11:51.0530 2052 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
22:11:51.0532 2052 hcw85cir - ok
22:11:51.0557 2052 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
22:11:51.0561 2052 HdAudAddService - ok
22:11:51.0577 2052 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
22:11:51.0580 2052 HDAudBus - ok
22:11:51.0584 2052 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
22:11:51.0585 2052 HidBatt - ok
22:11:51.0598 2052 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
22:11:51.0599 2052 HidBth - ok
22:11:51.0612 2052 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
22:11:51.0613 2052 HidIr - ok
22:11:51.0628 2052 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
22:11:51.0630 2052 hidserv - ok
22:11:51.0652 2052 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
22:11:51.0653 2052 HidUsb - ok
22:11:51.0663 2052 hkmsvc (efa58ede58dd74388ffd04cb32681518) C:\Windows\system32\kmsvc.dll
22:11:51.0665 2052 hkmsvc - ok
22:11:51.0680 2052 HomeGroupListener (046b2673767ca626e2cfb7fdf735e9e8) C:\Windows\system32\ListSvc.dll
22:11:51.0683 2052 HomeGroupListener - ok
22:11:51.0709 2052 HomeGroupProvider (06a7422224d9865a5613710a089987df) C:\Windows\system32\provsvc.dll
22:11:51.0712 2052 HomeGroupProvider - ok
22:11:51.0743 2052 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
22:11:51.0745 2052 HpSAMD - ok
22:11:51.0782 2052 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
22:11:51.0789 2052 HTTP - ok
22:11:51.0830 2052 HWiNFO32 (868af15e84ef5b4b1564a965770e1c76) C:\Program Files (x86)\HWiNFO32\HWiNFO64A.SYS
22:11:51.0831 2052 HWiNFO32 - ok
22:11:51.0846 2052 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
22:11:51.0848 2052 hwpolicy - ok
22:11:51.0873 2052 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
22:11:51.0877 2052 i8042prt - ok
22:11:51.0918 2052 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys
22:11:51.0927 2052 iaStorV - ok
22:11:52.0016 2052 idsvc (2f2be70d3e02b6fa877921ab9516d43c) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
22:11:52.0033 2052 idsvc - ok
22:11:52.0040 2052 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
22:11:52.0042 2052 iirsp - ok
22:11:52.0090 2052 IKEEXT (c5b4683680df085b57bc53e5ef34861f) C:\Windows\System32\ikeext.dll
22:11:52.0098 2052 IKEEXT - ok
22:11:52.0124 2052 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
22:11:52.0125 2052 intelide - ok
22:11:52.0135 2052 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
22:11:52.0136 2052 intelppm - ok
22:11:52.0141 2052 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
22:11:52.0141 2052 IPBusEnum - ok
22:11:52.0156 2052 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
22:11:52.0156 2052 IpFilterDriver - ok
22:11:52.0188 2052 iphlpsvc (f8e058d17363ec580e4b7232778b6cb5) C:\Windows\System32\iphlpsvc.dll
22:11:52.0203 2052 iphlpsvc - ok
22:11:52.0222 2052 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
22:11:52.0224 2052 IPMIDRV - ok
22:11:52.0237 2052 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
22:11:52.0239 2052 IPNAT - ok
22:11:52.0252 2052 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
22:11:52.0252 2052 IRENUM - ok
22:11:52.0263 2052 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
22:11:52.0265 2052 isapnp - ok
22:11:52.0284 2052 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
22:11:52.0286 2052 iScsiPrt - ok
22:11:52.0313 2052 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
22:11:52.0315 2052 kbdclass - ok
22:11:52.0334 2052 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
22:11:52.0335 2052 kbdhid - ok
22:11:52.0345 2052 KeyIso (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe
22:11:52.0346 2052 KeyIso - ok
22:11:52.0355 2052 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys
22:11:52.0357 2052 KSecDD - ok
22:11:52.0372 2052 KSecPkg (bbe1bf6d9b661c354d4857d5fadb943b) C:\Windows\system32\Drivers\ksecpkg.sys
22:11:52.0374 2052 KSecPkg - ok
22:11:52.0387 2052 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
22:11:52.0388 2052 ksthunk - ok
22:11:52.0417 2052 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
22:11:52.0422 2052 KtmRm - ok
22:11:52.0454 2052 LanmanServer (c926920b8978de6acfe9e15c709e9b57) C:\Windows\system32\srvsvc.dll
22:11:52.0458 2052 LanmanServer - ok
22:11:52.0474 2052 LanmanWorkstation (27026eac8818e8a6c00a1cad2f11d29a) C:\Windows\System32\wkssvc.dll
22:11:52.0477 2052 LanmanWorkstation - ok
22:11:52.0497 2052 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
22:11:52.0498 2052 lltdio - ok
22:11:52.0527 2052 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
22:11:52.0530 2052 lltdsvc - ok
22:11:52.0543 2052 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
22:11:52.0544 2052 lmhosts - ok
22:11:52.0570 2052 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
22:11:52.0572 2052 LSI_FC - ok
22:11:52.0587 2052 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
22:11:52.0589 2052 LSI_SAS - ok
22:11:52.0598 2052 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
22:11:52.0599 2052 LSI_SAS2 - ok
22:11:52.0617 2052 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
22:11:52.0619 2052 LSI_SCSI - ok
22:11:52.0633 2052 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
22:11:52.0635 2052 luafv - ok
22:11:52.0711 2052 McComponentHostService (22a7776c5d8eb5930edf9c8dd0884259) C:\Program Files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe
22:11:52.0717 2052 McComponentHostService - ok
22:11:52.0762 2052 Mcx2Svc (f84c8f1000bc11e3b7b23cbd3baff111) C:\Windows\system32\Mcx2Svc.dll
22:11:52.0768 2052 Mcx2Svc - ok
22:11:52.0808 2052 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
22:11:52.0811 2052 megasas - ok
22:11:52.0840 2052 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
22:11:52.0847 2052 MegaSR - ok
22:11:52.0960 2052 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
22:11:52.0985 2052 MMCSS - ok
22:11:53.0077 2052 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
22:11:53.0079 2052 Modem - ok
22:11:53.0100 2052 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
22:11:53.0102 2052 monitor - ok
22:11:53.0113 2052 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
22:11:53.0115 2052 mouclass - ok
22:11:53.0138 2052 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
22:11:53.0139 2052 mouhid - ok
22:11:53.0157 2052 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
22:11:53.0159 2052 mountmgr - ok
22:11:53.0176 2052 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
22:11:53.0178 2052 mpio - ok
22:11:53.0197 2052 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
22:11:53.0198 2052 mpsdrv - ok
22:11:53.0240 2052 MpsSvc (aecab449567d1846dad63ece49e893e3) C:\Windows\system32\mpssvc.dll
22:11:53.0240 2052 MpsSvc - ok
22:11:53.0272 2052 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
22:11:53.0272 2052 MRxDAV - ok
22:11:53.0287 2052 mrxsmb (cfdcd8ca87c2a657debc150ac35b5e08) C:\Windows\system32\DRIVERS\mrxsmb.sys
22:11:53.0287 2052 mrxsmb - ok
22:11:53.0325 2052 mrxsmb10 (1bee517b220b7f024f411aec1571dd5a) C:\Windows\system32\DRIVERS\mrxsmb10.sys
22:11:53.0329 2052 mrxsmb10 - ok
22:11:53.0343 2052 mrxsmb20 (6b2d5fef385828b6e485c1c90afb8195) C:\Windows\system32\DRIVERS\mrxsmb20.sys
22:11:53.0346 2052 mrxsmb20 - ok
22:11:53.0352 2052 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
22:11:53.0353 2052 msahci - ok
22:11:53.0372 2052 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
22:11:53.0374 2052 msdsm - ok
22:11:53.0390 2052 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
22:11:53.0393 2052 MSDTC - ok
22:11:53.0409 2052 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
22:11:53.0409 2052 Msfs - ok
22:11:53.0422 2052 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
22:11:53.0423 2052 mshidkmdf - ok
22:11:53.0435 2052 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
22:11:53.0436 2052 msisadrv - ok
22:11:53.0463 2052 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
22:11:53.0467 2052 MSiSCSI - ok
22:11:53.0470 2052 msiserver - ok
22:11:53.0493 2052 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
22:11:53.0493 2052 MSKSSRV - ok
22:11:53.0516 2052 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
22:11:53.0517 2052 MSPCLOCK - ok
22:11:53.0526 2052 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
22:11:53.0528 2052 MSPQM - ok
22:11:53.0549 2052 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
22:11:53.0553 2052 MsRPC - ok
22:11:53.0563 2052 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
22:11:53.0564 2052 mssmbios - ok
22:11:53.0572 2052 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
22:11:53.0573 2052 MSTEE - ok
22:11:53.0586 2052 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
22:11:53.0587 2052 MTConfig - ok
22:11:53.0598 2052 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
22:11:53.0599 2052 Mup - ok
22:11:53.0675 2052 napagent (4987e079a4530fa737a128be54b63b12) C:\Windows\system32\qagentRT.dll
22:11:53.0685 2052 napagent - ok
22:11:53.0719 2052 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
22:11:53.0725 2052 NativeWifiP - ok
22:11:53.0782 2052 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
22:11:53.0794 2052 NDIS - ok
22:11:53.0813 2052 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
22:11:53.0814 2052 NdisCap - ok
22:11:53.0834 2052 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
22:11:53.0835 2052 NdisTapi - ok
22:11:53.0850 2052 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
22:11:53.0851 2052 Ndisuio - ok
22:11:53.0866 2052 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
22:11:53.0868 2052 NdisWan - ok
22:11:53.0880 2052 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
22:11:53.0881 2052 NDProxy - ok
22:11:53.0890 2052 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
22:11:53.0892 2052 NetBIOS - ok
22:11:53.0908 2052 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
22:11:53.0911 2052 NetBT - ok
22:11:53.0918 2052 Netlogon (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe
22:11:53.0919 2052 Netlogon - ok
22:11:53.0957 2052 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
22:11:53.0962 2052 Netman - ok
22:11:54.0051 2052 NetMsmqActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:11:54.0055 2052 NetMsmqActivator - ok
22:11:54.0063 2052 NetPipeActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:11:54.0067 2052 NetPipeActivator - ok
22:11:54.0102 2052 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
22:11:54.0109 2052 netprofm - ok
22:11:54.0113 2052 NetTcpActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:11:54.0115 2052 NetTcpActivator - ok
22:11:54.0121 2052 NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:11:54.0122 2052 NetTcpPortSharing - ok
22:11:54.0167 2052 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
22:11:54.0169 2052 nfrd960 - ok
22:11:54.0204 2052 NlaSvc (d9a0ce66046d6efa0c61baa885cba0a8) C:\Windows\System32\nlasvc.dll
22:11:54.0209 2052 NlaSvc - ok
22:11:54.0226 2052 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
22:11:54.0227 2052 Npfs - ok
22:11:54.0249 2052 npggsvc - ok
22:11:54.0260 2052 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
22:11:54.0263 2052 nsi - ok
22:11:54.0276 2052 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
22:11:54.0277 2052 nsiproxy - ok
22:11:54.0355 2052 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys
22:11:54.0370 2052 Ntfs - ok
22:11:54.0460 2052 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
22:11:54.0462 2052 Null - ok
22:11:54.0523 2052 NVHDA (8d4aac74b571fc356560e5b308955e93) C:\Windows\system32\drivers\nvhda64v.sys
22:11:54.0528 2052 NVHDA - ok
22:11:55.0122 2052 nvlddmkm (0eb204639119370f5f8f2871fbf4e14b) C:\Windows\system32\DRIVERS\nvlddmkm.sys
22:11:55.0337 2052 nvlddmkm - ok
22:11:55.0391 2052 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys
22:11:55.0391 2052 nvraid - ok
22:11:55.0406 2052 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys
22:11:55.0406 2052 nvstor - ok
22:11:55.0453 2052 nvsvc (32ff8ee6dcee5c0cb91ff892fb1ca364) C:\Windows\system32\nvvsvc.exe
22:11:55.0476 2052 nvsvc - ok
22:11:55.0621 2052 nvUpdatusService (bd012dc22c78be1071bc21eb125d782f) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
22:11:55.0636 2052 nvUpdatusService - ok
22:11:55.0696 2052 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
22:11:55.0697 2052 nv_agp - ok
22:11:55.0711 2052 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
22:11:55.0712 2052 ohci1394 - ok
22:11:55.0738 2052 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
22:11:55.0742 2052 p2pimsvc - ok
22:11:55.0770 2052 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
22:11:55.0775 2052 p2psvc - ok
22:11:55.0799 2052 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
22:11:55.0801 2052 Parport - ok
22:11:55.0813 2052 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
22:11:55.0815 2052 partmgr - ok
22:11:55.0832 2052 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
22:11:55.0835 2052 PcaSvc - ok
22:11:55.0849 2052 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
22:11:55.0851 2052 pci - ok
22:11:55.0855 2052 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
22:11:55.0856 2052 pciide - ok
22:11:55.0877 2052 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
22:11:55.0880 2052 pcmcia - ok
22:11:55.0897 2052 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
22:11:55.0899 2052 pcw - ok
22:11:55.0933 2052 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
22:11:55.0939 2052 PEAUTH - ok
22:11:55.0996 2052 PeerDistSvc (b9b0a4299dd2d76a4243f75fd54dc680) C:\Windows\system32\peerdistsvc.dll
22:11:56.0022 2052 PeerDistSvc - ok
22:11:56.0078 2052 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
22:11:56.0080 2052 PerfHost - ok
22:11:56.0182 2052 pla (557e9a86f65f0de18c9b6751dfe9d3f1) C:\Windows\system32\pla.dll
22:11:56.0208 2052 pla - ok
22:11:56.0239 2052 PlugPlay (23157d583244400e1d7fbaee2e4b31b7) C:\Windows\system32\umpnpmgr.dll
22:11:56.0245 2052 PlugPlay - ok
22:11:56.0255 2052 PnkBstrA - ok
22:11:56.0265 2052 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
22:11:56.0267 2052 PNRPAutoReg - ok
22:11:56.0286 2052 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
22:11:56.0289 2052 PNRPsvc - ok
22:11:56.0322 2052 PolicyAgent (166eb40d1f5b47e615de3d0fffe5f243) C:\Windows\System32\ipsecsvc.dll
22:11:56.0327 2052 PolicyAgent - ok
22:11:56.0347 2052 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
22:11:56.0350 2052 Power - ok
22:11:56.0384 2052 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
22:11:56.0387 2052 PptpMiniport - ok
22:11:56.0403 2052 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
22:11:56.0405 2052 Processor - ok
22:11:56.0443 2052 ProfSvc (f381975e1f4346de875cb07339ce8d3a) C:\Windows\system32\profsvc.dll
22:11:56.0447 2052 ProfSvc - ok
22:11:56.0461 2052 ProtectedStorage (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe
22:11:56.0461 2052 ProtectedStorage - ok
22:11:56.0476 2052 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
22:11:56.0492 2052 Psched - ok
22:11:56.0583 2052 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
22:11:56.0610 2052 ql2300 - ok
22:11:56.0714 2052 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
22:11:56.0718 2052 ql40xx - ok
22:11:56.0746 2052 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
22:11:56.0754 2052 QWAVE - ok
22:11:56.0770 2052 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
22:11:56.0772 2052 QWAVEdrv - ok
22:11:56.0781 2052 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
22:11:56.0783 2052 RasAcd - ok
22:11:56.0805 2052 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
22:11:56.0807 2052 RasAgileVpn - ok
22:11:56.0819 2052 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
22:11:56.0822 2052 RasAuto - ok
22:11:56.0834 2052 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
22:11:56.0835 2052 Rasl2tp - ok
22:11:56.0859 2052 RasMan (47394ed3d16d053f5906efe5ab51cc83) C:\Windows\System32\rasmans.dll
22:11:56.0864 2052 RasMan - ok
22:11:56.0876 2052 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
22:11:56.0877 2052 RasPppoe - ok
22:11:56.0885 2052 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
22:11:56.0887 2052 RasSstp - ok
22:11:56.0908 2052 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
22:11:56.0912 2052 rdbss - ok
22:11:56.0925 2052 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
22:11:56.0927 2052 rdpbus - ok
22:11:56.0937 2052 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
22:11:56.0938 2052 RDPCDD - ok
22:11:56.0962 2052 RDPDR (9706b84dbabfc4b4ca46c5a82b14dfa3) C:\Windows\system32\drivers\rdpdr.sys
22:11:56.0964 2052 RDPDR - ok
22:11:56.0988 2052 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
22:11:56.0989 2052 RDPENCDD - ok
22:11:56.0996 2052 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
22:11:56.0997 2052 RDPREFMP - ok
22:11:57.0021 2052 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
22:11:57.0024 2052 RDPWD - ok
22:11:57.0044 2052 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
22:11:57.0047 2052 rdyboost - ok
22:11:57.0071 2052 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
22:11:57.0074 2052 RemoteAccess - ok
22:11:57.0090 2052 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
22:11:57.0094 2052 RemoteRegistry - ok
22:11:57.0109 2052 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
22:11:57.0111 2052 RpcEptMapper - ok
22:11:57.0129 2052 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
22:11:57.0131 2052 RpcLocator - ok
22:11:57.0157 2052 RpcSs (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll
22:11:57.0161 2052 RpcSs - ok
22:11:57.0169 2052 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
22:11:57.0171 2052 rspndr - ok
22:11:57.0212 2052 RTL8167 (baefee35d27a5440d35092ce10267bec) C:\Windows\system32\DRIVERS\Rt64win7.sys
22:11:57.0215 2052 RTL8167 - ok
22:11:57.0225 2052 s3cap (88af6e02ab19df7fd07ecdf9c91e9af6) C:\Windows\system32\DRIVERS\vms3cap.sys
22:11:57.0226 2052 s3cap - ok
22:11:57.0240 2052 SamSs (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe
22:11:57.0241 2052 SamSs - ok
22:11:57.0256 2052 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
22:11:57.0258 2052 sbp2port - ok
22:11:57.0281 2052 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
22:11:57.0284 2052 SCardSvr - ok
22:11:57.0330 2052 SCDEmu (6ce6f98ea3d07a9c2ce3cd0a5a86352d) C:\Windows\system32\drivers\SCDEmu.sys
22:11:57.0332 2052 SCDEmu - ok
22:11:57.0347 2052 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
22:11:57.0348 2052 scfilter - ok
22:11:57.0406 2052 Schedule (ec56b171f85c7e855e7b0588ac503eea) C:\Windows\system32\schedsvc.dll
22:11:57.0431 2052 Schedule - ok
22:11:57.0454 2052 SCPolicySvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll
22:11:57.0455 2052 SCPolicySvc - ok
22:11:57.0471 2052 SDRSVC (765a27c3279ce11d14cb9e4f5869fca5) C:\Windows\System32\SDRSVC.dll
22:11:57.0474 2052 SDRSVC - ok
22:11:57.0500 2052 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
22:11:57.0500 2052 secdrv - ok
22:11:57.0520 2052 seclogon (463b386ebc70f98da5dff85f7e654346) C:\Windows\system32\seclogon.dll
22:11:57.0520 2052 seclogon - ok
22:11:57.0533 2052 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
22:11:57.0535 2052 SENS - ok
22:11:57.0546 2052 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
22:11:57.0548 2052 SensrSvc - ok
22:11:57.0558 2052 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
22:11:57.0559 2052 Serenum - ok
22:11:57.0574 2052 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
22:11:57.0576 2052 Serial - ok
22:11:57.0599 2052 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
22:11:57.0600 2052 sermouse - ok
22:11:57.0622 2052 SessionEnv (c3bc61ce47ff6f4e88ab8a3b429a36af) C:\Windows\system32\sessenv.dll
22:11:57.0625 2052 SessionEnv - ok
22:11:57.0637 2052 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
22:11:57.0638 2052 sffdisk - ok
22:11:57.0642 2052 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
22:11:57.0643 2052 sffp_mmc - ok
22:11:57.0650 2052 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
22:11:57.0651 2052 sffp_sd - ok
22:11:57.0663 2052 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
22:11:57.0664 2052 sfloppy - ok
22:11:57.0690 2052 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
22:11:57.0694 2052 SharedAccess - ok
22:11:57.0720 2052 ShellHWDetection (0298ac45d0efffb2db4baa7dd186e7bf) C:\Windows\System32\shsvcs.dll
22:11:57.0725 2052 ShellHWDetection - ok
22:11:57.0743 2052 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
22:11:57.0744 2052 SiSRaid2 - ok
22:11:57.0757 2052 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
22:11:57.0758 2052 SiSRaid4 - ok
22:11:58.0007 2052 Skype C2C Service (2a99850c2a6edd6c6602e822c716edaf) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
22:11:58.0043 2052 Skype C2C Service - ok
22:11:58.0170 2052 SkypeUpdate (c70aebd3608ed9fcea2a1bae83567ffc) C:\Program Files (x86)\Skype\Updater\Updater.exe
22:11:58.0173 2052 SkypeUpdate - ok
22:11:58.0286 2052 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
22:11:58.0289 2052 Smb - ok
22:11:58.0324 2052 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
22:11:58.0327 2052 SNMPTRAP - ok
22:11:58.0341 2052 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
22:11:58.0342 2052 spldr - ok
22:11:58.0375 2052 Spooler (89e8550c5862999fcf482ea562b0e98e) C:\Windows\System32\spoolsv.exe
22:11:58.0384 2052 Spooler - ok
22:11:58.0542 2052 sppsvc (913d843498553a1bc8f8dbad6358e49f) C:\Windows\system32\sppsvc.exe
22:11:58.0638 2052 sppsvc - ok
22:11:58.0728 2052 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
22:11:58.0734 2052 sppuinotify - ok
22:11:58.0823 2052 sptd (a15860e920b02c9a7ce8f3a6c2ff1e3a) C:\Windows\System32\Drivers\sptd.sys
22:11:58.0835 2052 sptd - ok
22:11:58.0851 2052 SpyEmrg - ok
22:11:58.0858 2052 SpyEmrgGuard - ok
22:11:58.0890 2052 srv (ec8f67289105bf270498095f14963464) C:\Windows\system32\DRIVERS\srv.sys
22:11:58.0895 2052 srv - ok
22:11:58.0922 2052 srv2 (f773d2ed090b7baa1c1a034f3ca476c8) C:\Windows\system32\DRIVERS\srv2.sys
22:11:58.0926 2052 srv2 - ok
22:11:58.0938 2052 srvnet (26e84d3649019c3244622e654dfcd75b) C:\Windows\system32\DRIVERS\srvnet.sys
22:11:58.0940 2052 srvnet - ok
22:11:58.0967 2052 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
22:11:58.0970 2052 SSDPSRV - ok
22:11:58.0979 2052 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
22:11:58.0982 2052 SstpSvc - ok
22:11:59.0021 2052 Steam Client Service - ok
22:11:59.0108 2052 Stereo Service (fc0a58529a02b1eed55ddc58696b7908) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
22:11:59.0114 2052 Stereo Service - ok
22:11:59.0157 2052 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
22:11:59.0160 2052 stexstor - ok
22:11:59.0220 2052 stisvc (52d0e33b681bd0f33fdc08812fee4f7d) C:\Windows\System32\wiaservc.dll
22:11:59.0233 2052 stisvc - ok
22:11:59.0260 2052 storflt (ffd7a6f15b14234b5b0e5d49e7961895) C:\Windows\system32\DRIVERS\vmstorfl.sys
22:11:59.0262 2052 storflt - ok
22:11:59.0283 2052 storvsc (8fccbefc5c440b3c23454656e551b09a) C:\Windows\system32\DRIVERS\storvsc.sys
22:11:59.0285 2052 storvsc - ok
22:11:59.0299 2052 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
22:11:59.0301 2052 swenum - ok
22:11:59.0336 2052 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
22:11:59.0345 2052 swprv - ok
22:11:59.0419 2052 SysMain (3c1284516a62078fb68f768de4f1a7be) C:\Windows\system32\sysmain.dll
22:11:59.0452 2052 SysMain - ok
22:11:59.0524 2052 TabletInputService (238935c3cf2854886dc7cbb2a0e2cc66) C:\Windows\System32\TabSvc.dll
22:11:59.0528 2052 TabletInputService - ok
22:11:59.0546 2052 TapiSrv (884264ac597b690c5707c89723bb8e7b) C:\Windows\System32\tapisrv.dll
22:11:59.0551 2052 TapiSrv - ok
22:11:59.0565 2052 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
22:11:59.0567 2052 TBS - ok
22:11:59.0657 2052 Tcpip (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\drivers\tcpip.sys
22:11:59.0688 2052 Tcpip - ok
22:11:59.0824 2052 TCPIP6 (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\DRIVERS\tcpip.sys
22:11:59.0833 2052 TCPIP6 - ok
22:11:59.0887 2052 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
22:11:59.0888 2052 tcpipreg - ok
22:11:59.0903 2052 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
22:11:59.0904 2052 TDPIPE - ok
22:11:59.0919 2052 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
22:11:59.0920 2052 TDTCP - ok
22:11:59.0943 2052 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
22:11:59.0945 2052 tdx - ok
22:12:00.0139 2052 TeamViewer7 (a4d2ce94b028ef1e437cf4ac3d8ff26c) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
22:12:00.0158 2052 TeamViewer7 - ok
22:12:00.0208 2052 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
22:12:00.0209 2052 TermDD - ok
22:12:00.0255 2052 TermService (0f05ec2887bfe197ad82a13287d2f404) C:\Windows\System32\termsrv.dll
22:12:00.0263 2052 TermService - ok
22:12:00.0273 2052 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
22:12:00.0275 2052 Themes - ok
22:12:00.0298 2052 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
22:12:00.0300 2052 THREADORDER - ok
22:12:00.0310 2052 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
22:12:00.0313 2052 TrkWks - ok
22:12:00.0351 2052 TrustedInstaller (840f7fb849f5887a49ba18c13b2da920) C:\Windows\servicing\TrustedInstaller.exe
22:12:00.0354 2052 TrustedInstaller - ok
22:12:00.0364 2052 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
22:12:00.0365 2052 tssecsrv - ok
22:12:00.0393 2052 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
22:12:00.0395 2052 tunnel - ok
22:12:00.0411 2052 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
22:12:00.0412 2052 uagp35 - ok
22:12:00.0438 2052 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
22:12:00.0442 2052 udfs - ok
22:12:00.0462 2052 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
22:12:00.0465 2052 UI0Detect - ok
22:12:00.0484 2052 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
22:12:00.0486 2052 uliagpkx - ok
22:12:00.0522 2052 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
22:12:00.0523 2052 umbus - ok
22:12:00.0538 2052 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
22:12:00.0539 2052 UmPass - ok
22:12:00.0556 2052 UmRdpService (af0ac98ee5077eb844413eb54287fde3) C:\Windows\System32\umrdp.dll
22:12:00.0559 2052 UmRdpService - ok
22:12:00.0585 2052 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
22:12:00.0590 2052 upnphost - ok
22:12:00.0607 2052 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys
22:12:00.0609 2052 usbccgp - ok
22:12:00.0623 2052 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
22:12:00.0625 2052 usbcir - ok
22:12:00.0644 2052 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys
22:12:00.0646 2052 usbehci - ok
22:12:00.0666 2052 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys
22:12:00.0670 2052 usbhub - ok
22:12:00.0684 2052 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys
22:12:00.0686 2052 usbohci - ok
22:12:00.0698 2052 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
22:12:00.0699 2052 usbprint - ok
22:12:00.0709 2052 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS
22:12:00.0710 2052 USBSTOR - ok
22:12:00.0719 2052 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys
22:12:00.0720 2052 usbuhci - ok
22:12:00.0725 2052 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
22:12:00.0735 2052 UxSms - ok
22:12:00.0745 2052 VaultSvc (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe
22:12:00.0745 2052 VaultSvc - ok
22:12:00.0755 2052 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
22:12:00.0765 2052 vdrvroot - ok
22:12:00.0797 2052 vds (44d73e0bbc1d3c8981304ba15135c2f2) C:\Windows\System32\vds.exe
22:12:00.0804 2052 vds - ok
22:12:00.0815 2052 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
22:12:00.0816 2052 vga - ok
22:12:00.0831 2052 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
22:12:00.0832 2052 VgaSave - ok
22:12:00.0857 2052 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
22:12:00.0860 2052 vhdmp - ok
22:12:00.0877 2052 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
22:12:00.0878 2052 viaide - ok
22:12:00.0935 2052 vmbus (1501699d7eda984abc4155a7da5738d1) C:\Windows\system32\DRIVERS\vmbus.sys
22:12:00.0940 2052 vmbus - ok
22:12:00.0961 2052 VMBusHID (ae10c35761889e65a6f7176937c5592c) C:\Windows\system32\DRIVERS\VMBusHID.sys
22:12:00.0964 2052 VMBusHID - ok
22:12:00.0982 2052 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
22:12:00.0984 2052 volmgr - ok
22:12:01.0012 2052 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
22:12:01.0018 2052 volmgrx - ok
22:12:01.0036 2052 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
22:12:01.0040 2052 volsnap - ok
22:12:01.0073 2052 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
22:12:01.0076 2052 vsmraid - ok
22:12:01.0158 2052 VSS (787898bf9fb6d7bd87a36e2d95c899ba) C:\Windows\system32\vssvc.exe
22:12:01.0192 2052 VSS - ok
22:12:01.0290 2052 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
22:12:01.0292 2052 vwifibus - ok
22:12:01.0334 2052 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
22:12:01.0341 2052 W32Time - ok
22:12:01.0350 2052 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
22:12:01.0353 2052 WacomPen - ok
22:12:01.0380 2052 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
22:12:01.0382 2052 WANARP - ok
22:12:01.0387 2052 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
22:12:01.0388 2052 Wanarpv6 - ok
22:12:01.0462 2052 wbengine (5ab1bb85bd8b5089cc5d64200dedae68) C:\Windows\system32\wbengine.exe
22:12:01.0500 2052 wbengine - ok
22:12:01.0574 2052 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
22:12:01.0578 2052 WbioSrvc - ok
22:12:01.0600 2052 wcncsvc (8321c2ca3b62b61b293cda3451984468) C:\Windows\System32\wcncsvc.dll
22:12:01.0605 2052 wcncsvc - ok
22:12:01.0626 2052 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
22:12:01.0629 2052 WcsPlugInService - ok
22:12:01.0637 2052 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
22:12:01.0638 2052 Wd - ok
22:12:01.0672 2052 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
22:12:01.0678 2052 Wdf01000 - ok
22:12:01.0695 2052 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
22:12:01.0698 2052 WdiServiceHost - ok
22:12:01.0701 2052 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
22:12:01.0703 2052 WdiSystemHost - ok
22:12:01.0778 2052 Web Assistant Updater (f53ca9d2a8e69281af8e6009b14326a3) C:\Program Files\Web Assistant\ExtensionUpdaterService.exe
22:12:01.0781 2052 Web Assistant Updater - ok
22:12:01.0808 2052 WebClient (8a438cbb8c032a0c798b0c642ffbe572) C:\Windows\System32\webclnt.dll
22:12:01.0824 2052 WebClient - ok
22:12:01.0839 2052 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
22:12:01.0855 2052 Wecsvc - ok
22:12:01.0876 2052 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
22:12:01.0879 2052 wercplsupport - ok
22:12:01.0902 2052 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
22:12:01.0905 2052 WerSvc - ok
22:12:01.0943 2052 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
22:12:01.0945 2052 WfpLwf - ok
22:12:01.0950 2052 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
22:12:01.0952 2052 WIMMount - ok
22:12:01.0970 2052 WinDefend - ok
22:12:01.0982 2052 WinHttpAutoProxySvc - ok
22:12:02.0043 2052 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
22:12:02.0049 2052 Winmgmt - ok
22:12:02.0194 2052 WinRM (41fbb751936b387f9179e7f03a74fe29) C:\Windows\system32\WsmSvc.dll
22:12:02.0233 2052 WinRM - ok
22:12:02.0333 2052 WinUSB (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUSB.sys
22:12:02.0334 2052 WinUSB - ok
22:12:02.0383 2052 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
22:12:02.0394 2052 Wlansvc - ok
22:12:02.0623 2052 wlidsvc (98f138897ef4246381d197cb81846d62) c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
22:12:02.0637 2052 wlidsvc - ok
22:12:02.0697 2052 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
22:12:02.0699 2052 WmiAcpi - ok
22:12:02.0723 2052 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
22:12:02.0725 2052 wmiApSrv - ok
22:12:02.0752 2052 WMPNetworkSvc - ok
22:12:02.0833 2052 WMZuneComm (83b6ca03c846fcd47f9883d77d1eb27b) C:\Program Files\Zune\WMZuneComm.exe
22:12:02.0837 2052 WMZuneComm - ok
22:12:02.0853 2052 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
22:12:02.0853 2052 WPCSvc - ok
22:12:02.0873 2052 WPDBusEnum (2e57ddf2880a7e52e76f41c7e96d327b) C:\Windows\system32\wpdbusenum.dll
22:12:02.0873 2052 WPDBusEnum - ok
22:12:02.0883 2052 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
22:12:02.0893 2052 ws2ifsl - ok
22:12:02.0903 2052 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
22:12:02.0903 2052 wscsvc - ok
22:12:02.0915 2052 WSearch - ok
22:12:03.0020 2052 wuauserv (38340204a2d0228f1e87740fc5e554a7) C:\Windows\system32\wuaueng.dll
22:12:03.0061 2052 wuauserv - ok
22:12:03.0109 2052 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
22:12:03.0111 2052 WudfPf - ok
22:12:03.0139 2052 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
22:12:03.0142 2052 WUDFRd - ok
22:12:03.0155 2052 wudfsvc (b551d6637aa0e132c18ac6e504f7b79b) C:\Windows\System32\WUDFSvc.dll
22:12:03.0157 2052 wudfsvc - ok
22:12:03.0178 2052 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
22:12:03.0183 2052 WwanSvc - ok
22:12:03.0243 2052 X6va008 - ok
22:12:03.0770 2052 ZuneNetworkSvc (67b787c34fb2888d01b130ae007042d8) C:\Program Files\Zune\ZuneNss.exe
22:12:03.0910 2052 ZuneNetworkSvc - ok
22:12:03.0941 2052 ZuneWlanCfgSvc (4d89fc1c20cf655739efac5da81a67bc) C:\Program Files\Zune\ZuneWlanCfgSvc.exe
22:12:03.0956 2052 ZuneWlanCfgSvc - ok
22:12:03.0987 2052 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
22:12:04.0149 2052 \Device\Harddisk0\DR0 - ok
22:12:04.0154 2052 Boot (0x1200) (23cf4f1720c70141f75c6524abafc7c6) \Device\Harddisk0\DR0\Partition0
22:12:04.0155 2052 \Device\Harddisk0\DR0\Partition0 - ok
22:12:04.0156 2052 ============================================================
22:12:04.0156 2052 Scan finished
22:12:04.0156 2052 ============================================================
22:12:04.0166 6556 Detected object count: 0
22:12:04.0166 6556 Actual detected object count: 0
22:12:07.0499 8560 Deinitialize success

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu

Příspěvekod jaro3 » 02 črc 2012 22:30

Odinstaluj:
McAfee Security Scan

Pak udělej ten Combofix.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

unlimited
Level 1.5
Level 1.5
Příspěvky: 149
Registrován: říjen 11
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu

Příspěvekod unlimited » 02 črc 2012 22:45

No udělal jsem teďka ten combofix, trvalo to cca 20 minut, a podívám se tu a je tu odinstaluj:.... tak to mě naštve toto, ale jsem rád že mi pomáháte, takže tu je log z toho jak mám nainstalováno McAfee, mám udělat log taky po tom co ho mít nebudu ?

ComboFix 12-07-02.01 - hanys 02.07.2012 22:21:49.1.2 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.3071.1997 [GMT 2:00]
Spuštěný z: c:\users\hanys\Favorites\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\DealPly
c:\program files (x86)\DealPly\DealPly.crx
c:\program files (x86)\DealPly\DealPlyIE.dll
c:\program files (x86)\DealPly\DealPlyUpdate.exe
c:\program files (x86)\DealPly\DealPlyUpdate.log
c:\program files (x86)\DealPly\DealPlyUpdateRun.exe
c:\program files (x86)\DealPly\icon.ico
c:\program files (x86)\DealPly\uninst.exe
c:\program files\Web Assistant\ExTEnsion32.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-06-02 do 2012-07-02 )))))))))))))))))))))))))))))))
.
.
2012-07-02 20:38 . 2012-07-02 20:38 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-07-02 18:22 . 2012-07-02 18:22 -------- d-----w- c:\users\hanys\AppData\Roaming\Malwarebytes
2012-07-02 18:22 . 2012-07-02 18:22 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-07-02 18:22 . 2012-07-02 18:22 -------- d-----w- c:\programdata\Malwarebytes
2012-07-02 18:22 . 2012-04-04 13:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-07-01 10:38 . 2012-07-01 10:38 -------- d-----w- c:\program files (x86)\Rebellion
2012-06-29 20:25 . 2012-06-29 20:25 -------- d-----w- c:\program files (x86)\Perion
2012-06-29 20:09 . 2012-07-02 20:38 -------- d-----w- c:\program files\Web Assistant
2012-06-29 20:07 . 2012-07-02 12:55 -------- d-----w- c:\programdata\Tarma Installer
2012-06-26 11:18 . 2012-06-29 10:00 -------- d-----w- c:\users\hanys\AppData\Roaming\.techniclauncher
2012-06-24 13:49 . 2012-06-24 13:49 -------- d-----w- c:\users\hanys\AppData\Roaming\PunkBuster
2012-06-22 22:17 . 2012-06-22 22:18 -------- d-----w- c:\users\hanys\AppData\Local\Facebook
2012-06-21 19:59 . 2012-06-21 19:59 -------- d-----w- c:\program files (x86)\Graffiti Studio 2.0
2012-06-19 21:07 . 2012-06-20 10:35 -------- d-----w- c:\users\hanys\AppData\Roaming\Zoner
2012-06-19 21:07 . 2012-06-19 21:07 -------- d-----w- c:\programdata\Zoner
2012-06-19 21:07 . 2012-06-19 21:07 -------- d-----w- c:\users\hanys\AppData\Local\Zoner
2012-06-19 14:38 . 2012-07-01 12:04 -------- d-----w- c:\users\hanys\AppData\Local\SKIDROW
2012-06-19 14:22 . 2012-06-19 14:38 -------- d-----w- c:\program files (x86)\Mafia II Digital Deluxe
2012-06-17 07:40 . 2012-06-17 07:40 -------- d-----w- c:\program files (x86)\Common Files\Java
2012-06-17 07:40 . 2012-06-17 07:40 -------- d-----w- c:\program files (x86)\Oracle
2012-06-17 07:39 . 2012-05-04 17:29 772504 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-06-17 07:39 . 2012-06-17 07:39 -------- d-----w- c:\program files (x86)\Java
2012-06-17 01:34 . 2012-06-17 01:34 -------- d-----w- c:\users\hanys\AppData\Roaming\Ubisoft
2012-06-15 17:29 . 2012-06-24 14:22 -------- d-----w- c:\programdata\Ubisoft
2012-06-15 17:18 . 2012-06-24 13:37 -------- d-----w- c:\program files (x86)\Ubisoft
2012-06-13 15:36 . 2012-06-13 15:36 -------- d-----w- c:\program files\THQ
2012-06-11 13:00 . 2012-06-11 13:00 -------- d-----w- C:\Firefox
2012-06-11 12:59 . 2012-06-11 12:59 -------- d-----w- c:\program files (x86)\VirtualDJ
2012-06-08 12:24 . 2012-06-08 12:24 -------- d-----w- c:\programdata\Sony
2012-06-08 12:24 . 2012-06-08 12:24 -------- d-----w- c:\users\hanys\AppData\Roaming\Publish Providers
2012-06-08 12:18 . 2012-06-08 12:23 -------- d-----w- c:\users\hanys\AppData\Local\Sony
2012-06-08 12:18 . 2012-06-08 12:23 -------- d-----w- c:\program files (x86)\Sony
2012-06-08 12:17 . 2012-06-08 12:17 -------- d-----w- c:\windows\system32\appmgmt
2012-06-08 11:16 . 2012-06-08 11:16 -------- d-----w- c:\program files\Movie Maker
2012-06-04 16:54 . 2012-06-04 16:54 -------- d-----w- c:\program files (x86)\Lavalys
2012-06-03 13:08 . 2012-06-03 13:08 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-24 13:49 . 2012-04-28 09:20 189248 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-06-24 13:49 . 2012-04-28 09:20 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2012-06-23 21:05 . 2012-04-21 16:20 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-06-23 21:05 . 2012-04-21 16:20 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-05-05 21:49 . 2012-04-30 16:00 234768 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2012-05-04 17:29 . 2012-04-21 18:53 687504 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-05-01 16:36 . 2012-05-01 16:36 560184 ----a-w- c:\windows\system32\drivers\sptd.sys
2012-04-30 16:19 . 2012-04-28 09:20 270240 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2012-04-25 15:40 . 2012-04-25 15:40 348160 ----a-w- c:\windows\SysWow64\Msvcr71.dll
2012-04-25 15:40 . 2012-04-25 15:40 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-04-25 15:40 . 2012-04-25 15:40 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2012-04-25 15:37 . 2012-04-25 15:37 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2012-04-18 01:03 . 2012-04-21 15:42 8917360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{04074BD4-32B0-4D6C-AA34-B938B6524429}\mpengine.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2012-04-21 1242448]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-06-05 17344176]
"RGSC"="c:\program files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe" [2008-11-14 305064]
"Clownfish"="c:\program files (x86)\Clownfish\Clownfish.exe" [2012-04-09 1089272]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2010-04-12 180224]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe [2011-6-17 272528]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-30 116648]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-06-05 160944]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-23 250056]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-30 116648]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe [2011-06-17 237008]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [x]
R3 WMZuneComm;Zune Windows Mobile Connectivity Service;c:\program files\Zune\WMZuneComm.exe [2011-08-05 306400]
R3 X6va008;X6va008;c:\windows\SysWOW64\Drivers\X6va008 [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\program files (x86)\HWiNFO32\HWiNFO64A.SYS [2012-02-07 30592]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-03-01 2348352]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-06-19 3048136]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-02-29 382272]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-03-19 2666880]
S2 Web Assistant Updater;Web Assistant Updater;c:\program files\Web Assistant\ExtensionUpdaterService.exe [2012-06-06 185856]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2012-01-17 188224]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2012-07-02 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-21 21:05]
.
2012-06-30 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3413740525-1839657784-3978621073-1001Core.job
- c:\users\hanys\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-06-22 22:17]
.
2012-07-02 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3413740525-1839657784-3978621073-1001UA.job
- c:\users\hanys\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-06-22 22:17]
.
2012-07-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-30 15:49]
.
2012-07-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-30 15:49]
.
2012-07-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3413740525-1839657784-3978621073-1001Core.job
- c:\users\hanys\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-21 16:24]
.
2012-07-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3413740525-1839657784-3978621073-1001UA.job
- c:\users\hanys\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-21 16:24]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
2012-06-06 07:14 201728 ----a-w- c:\program files\Web Assistant\Extension64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Zune Launcher"="c:\program files\Zune\ZuneLauncher.exe" [2011-08-05 163552]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.10.1 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - c:\program files (x86)\DealPly\DealPlyIE.dll
BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files (x86)\Ask.com\GenericAskToolbar.dll
Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files (x86)\Ask.com\GenericAskToolbar.dll
Wow6432Node-HKCU-Run-SpyEmergency - c:\program files\NETGATE\Spy Emergency\SpyEmergency.exe
Wow6432Node-HKLM-Run-ApnUpdater - c:\program files (x86)\Ask.com\Updater\Updater.exe
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
AddRemove-1ClickDownload - c:\program files (x86)\1ClickDownload\uninst.exe
AddRemove-BabylonToolbar - c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\uninstall.exe
AddRemove-DealPly - c:\program files (x86)\DealPly\uninst.exe
AddRemove-{E00EA780-9C24-47BA-B9C8-210316D1C461}_is1 - c:\program files (x86)\Auto Mouse Clicker v3.4\unins000.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va008]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va008"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3413740525-1839657784-3978621073-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\c:\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"qgif4.dll"=multi:"2011-10-10T16:42\00gif\00\00"
"qico4.dll"=multi:"2011-10-10T16:42\00ico\00\00"
"qjpeg4.dll"=multi:"2011-10-10T16:42\00jpeg\00jpg\00\00"
.
[HKEY_USERS\S-1-5-21-3413740525-1839657784-3978621073-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QTextCodecFactoryInterface:\c:\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"2011-10-10T16:42\00GB18030\00GBK\00GB2312\00CP936\00MS936\00windows-936\00MIB: 114\00MIB: 113\00MIB: 2025\00\00"
"qkrcodecs4.dll"=multi:"2011-10-10T16:42\00EUC-KR\00cp949\00MIB: 38\00MIB: -949\00\00"
"qtwcodecs4.dll"=multi:"2011-10-10T16:42\00Big5\00Big5-HKSCS\00Big5-ETen\00CP950\00MIB: 2026\00MIB: 2101\00\00"
.
[HKEY_USERS\S-1-5-21-3413740525-1839657784-3978621073-1001\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\c:\b*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qjpcodecs4.dll"=multi:"40602\000\00Windows msvc release full-config\002011-10-10T16:42\00\00"
"qjpcodecsd4.dll"=multi:"40703\001\00Windows msvc debug full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qkrcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qtwcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
.
[HKEY_USERS\S-1-5-21-3413740525-1839657784-3978621073-1001\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\c:\b*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"Microsoft.VC80.CRT.manifest"=multi:"0\001\00unknown\002011-10-10T16:42\00\00"
"msvcr80.dll"=multi:"0\001\00unknown\002011-10-10T16:42\00\00"
"qgif4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qico4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qjpeg4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\SysWOW64\PnkBstrA.exe
c:\windows\SysWOW64\DllHost.exe
.
**************************************************************************
.
Celkový čas: 2012-07-02 22:43:37 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-07-02 20:43
.
Před spuštěním: Volných bajtů: 688 378 912 768
Po spuštění: Volných bajtů: 687 863 984 128
.
- - End Of File - - 352F3D586A930D2C0F20BF676AE030CA

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu

Příspěvekod jaro3 » 03 črc 2012 10:34

Odinstaluj ten McAfee.

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::
KillAll::
File::
c:\program files (x86)\Skype\Updater\Updater.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe
c:\windows\SysWOW64\Drivers\X6va008
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3413740525-1839657784-3978621073-1001UA.job
c:\users\hanys\AppData\Local\Facebook\Update\FacebookUpdate.exe
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3413740525-1839657784-3978621073-1001Core.job
c:\users\hanys\AppData\Local\Google\Update\GoogleUpdate.exe


Folder::
c:\program files (x86)\McAfee Security Scan

Driver::
SkypeUpdate
gupdatem
McComponentHostService
X6va008

Registry::
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va008]

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

unlimited
Level 1.5
Level 1.5
Příspěvky: 149
Registrován: říjen 11
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu

Příspěvekod unlimited » 03 črc 2012 11:18

Log z ComboFixu při odinstalovaném McAfee a použitém scriptu, za chvíli dodám log z HijackThis


omboFix 12-07-02.01 - hanys 03.07.2012 10:53:05.3.2 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.3071.1953 [GMT 2:00]
Spuštěný z: c:\users\hanys\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\hanys\Desktop\CFScript.txt
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\program files (x86)\Google\Update\GoogleUpdate.exe"
"c:\program files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe"
"c:\program files (x86)\Skype\Updater\Updater.exe"
"c:\users\hanys\AppData\Local\Facebook\Update\FacebookUpdate.exe"
"c:\users\hanys\AppData\Local\Google\Update\GoogleUpdate.exe"
"c:\windows\SysWOW64\Drivers\X6va008"
"c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3413740525-1839657784-3978621073-1001UA.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3413740525-1839657784-3978621073-1001Core.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Skype\Updater\Updater.exe
c:\users\hanys\AppData\Local\Facebook\Update\FacebookUpdate.exe
c:\users\hanys\AppData\Local\Google\Update\GoogleUpdate.exe
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3413740525-1839657784-3978621073-1001UA.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3413740525-1839657784-3978621073-1001Core.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_X6VA008
-------\Service_gupdatem
-------\Service_SkypeUpdate
-------\Service_X6va008
-------\Service_gupdate
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-06-03 do 2012-07-03 )))))))))))))))))))))))))))))))
.
.
2012-07-03 09:09 . 2012-07-03 09:09 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-07-03 09:09 . 2012-07-03 09:09 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-07-03 06:02 . 2012-07-03 06:02 -------- d-----w- c:\windows\cs
2012-07-03 05:55 . 2012-07-03 05:55 -------- d-----w- c:\program files (x86)\Microsoft SQL Server Compact Edition
2012-07-03 05:49 . 2012-07-03 08:45 -------- d-----w- c:\users\hanys\AppData\Roaming\Seznam.cz
2012-07-03 05:48 . 2012-03-08 16:40 48488 ----a-w- c:\windows\system32\drivers\fssfltr.sys
2012-07-03 05:48 . 2012-07-03 06:03 -------- d-----w- c:\program files (x86)\Windows Live
2012-07-03 05:48 . 2012-07-03 05:48 -------- dc----w- c:\windows\system32\DRVSTORE
2012-07-03 05:47 . 2012-07-03 05:48 -------- d-----w- c:\program files\Windows Live
2012-07-03 05:46 . 2012-07-03 05:46 -------- d-----w- c:\program files (x86)\Microsoft
2012-07-03 05:45 . 2012-07-03 05:45 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-07-03 05:45 . 2010-08-11 04:35 1164800 ----a-w- c:\windows\SysWow64\UIRibbonRes.dll
2012-07-03 05:45 . 2010-08-11 05:19 3860992 ----a-w- c:\windows\system32\UIRibbon.dll
2012-07-03 05:45 . 2010-08-11 05:13 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2012-07-03 05:45 . 2010-08-11 04:44 2983424 ----a-w- c:\windows\SysWow64\UIRibbon.dll
2012-07-03 05:44 . 2010-05-23 10:15 1619456 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2012-07-03 05:44 . 2010-05-23 10:11 196608 ----a-w- c:\windows\SysWow64\mfreadwrite.dll
2012-07-03 05:44 . 2010-05-23 08:37 1888256 ----a-w- c:\windows\system32\WMVDECOD.DLL
2012-07-03 05:44 . 2010-05-23 08:35 257024 ----a-w- c:\windows\system32\mfreadwrite.dll
2012-07-03 05:44 . 2010-05-23 08:35 206848 ----a-w- c:\windows\system32\mfps.dll
2012-07-03 05:44 . 2010-05-23 10:11 3181568 ----a-w- c:\windows\SysWow64\mf.dll
2012-07-03 05:44 . 2010-05-23 08:35 4068864 ----a-w- c:\windows\system32\mf.dll
2012-07-03 05:43 . 2012-07-03 06:19 -------- d-----w- c:\users\hanys\AppData\Local\Windows Live
2012-07-03 05:43 . 2012-07-03 05:43 -------- d-----w- c:\program files (x86)\Common Files\Windows Live
2012-07-02 20:16 . 2012-07-02 20:16 -------- d-----w- c:\users\hanys\AppData\Local\CrashDumps
2012-07-02 18:22 . 2012-07-02 18:22 -------- d-----w- c:\users\hanys\AppData\Roaming\Malwarebytes
2012-07-02 18:22 . 2012-07-02 18:22 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-07-02 18:22 . 2012-07-02 18:22 -------- d-----w- c:\programdata\Malwarebytes
2012-07-02 18:22 . 2012-04-04 13:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-07-01 10:38 . 2012-07-01 10:38 -------- d-----w- c:\program files (x86)\Rebellion
2012-06-29 20:25 . 2012-06-29 20:25 -------- d-----w- c:\program files (x86)\Perion
2012-06-29 20:09 . 2012-07-02 20:38 -------- d-----w- c:\program files\Web Assistant
2012-06-29 20:07 . 2012-07-02 12:55 -------- d-----w- c:\programdata\Tarma Installer
2012-06-26 11:18 . 2012-06-29 10:00 -------- d-----w- c:\users\hanys\AppData\Roaming\.techniclauncher
2012-06-24 13:49 . 2012-06-24 13:49 -------- d-----w- c:\users\hanys\AppData\Roaming\PunkBuster
2012-06-22 22:17 . 2012-06-22 22:18 -------- d-----w- c:\users\hanys\AppData\Local\Facebook
2012-06-21 19:59 . 2012-06-21 19:59 -------- d-----w- c:\program files (x86)\Graffiti Studio 2.0
2012-06-19 21:07 . 2012-06-20 10:35 -------- d-----w- c:\users\hanys\AppData\Roaming\Zoner
2012-06-19 21:07 . 2012-06-19 21:07 -------- d-----w- c:\programdata\Zoner
2012-06-19 21:07 . 2012-06-19 21:07 -------- d-----w- c:\users\hanys\AppData\Local\Zoner
2012-06-19 14:38 . 2012-07-01 12:04 -------- d-----w- c:\users\hanys\AppData\Local\SKIDROW
2012-06-19 14:22 . 2012-06-19 14:38 -------- d-----w- c:\program files (x86)\Mafia II Digital Deluxe
2012-06-17 07:40 . 2012-06-17 07:40 -------- d-----w- c:\program files (x86)\Common Files\Java
2012-06-17 07:40 . 2012-06-17 07:40 -------- d-----w- c:\program files (x86)\Oracle
2012-06-17 07:39 . 2012-05-04 17:29 772504 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-06-17 07:39 . 2012-06-17 07:39 -------- d-----w- c:\program files (x86)\Java
2012-06-17 01:34 . 2012-06-17 01:34 -------- d-----w- c:\users\hanys\AppData\Roaming\Ubisoft
2012-06-15 17:29 . 2012-06-24 14:22 -------- d-----w- c:\programdata\Ubisoft
2012-06-15 17:18 . 2012-06-24 13:37 -------- d-----w- c:\program files (x86)\Ubisoft
2012-06-13 15:36 . 2012-06-13 15:36 -------- d-----w- c:\program files\THQ
2012-06-11 13:00 . 2012-06-11 13:00 -------- d-----w- C:\Firefox
2012-06-11 12:59 . 2012-06-11 12:59 -------- d-----w- c:\program files (x86)\VirtualDJ
2012-06-08 12:24 . 2012-06-08 12:24 -------- d-----w- c:\programdata\Sony
2012-06-08 12:24 . 2012-06-08 12:24 -------- d-----w- c:\users\hanys\AppData\Roaming\Publish Providers
2012-06-08 12:18 . 2012-06-08 12:23 -------- d-----w- c:\users\hanys\AppData\Local\Sony
2012-06-08 12:18 . 2012-06-08 12:23 -------- d-----w- c:\program files (x86)\Sony
2012-06-08 12:17 . 2012-06-08 12:17 -------- d-----w- c:\windows\system32\appmgmt
2012-06-08 11:16 . 2012-06-08 11:16 -------- d-----w- c:\program files\Movie Maker
2012-06-04 16:54 . 2012-06-04 16:54 -------- d-----w- c:\program files (x86)\Lavalys
2012-06-03 13:08 . 2012-06-03 13:08 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-03 05:47 . 2011-03-28 16:36 19736 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2012-06-24 13:49 . 2012-04-28 09:20 189248 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-06-24 13:49 . 2012-04-28 09:20 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2012-06-23 21:05 . 2012-04-21 16:20 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-06-23 21:05 . 2012-04-21 16:20 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-05-05 21:49 . 2012-04-30 16:00 234768 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2012-05-04 17:29 . 2012-04-21 18:53 687504 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-05-01 16:36 . 2012-05-01 16:36 560184 ----a-w- c:\windows\system32\drivers\sptd.sys
2012-04-30 16:19 . 2012-04-28 09:20 270240 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2012-04-25 15:40 . 2012-04-25 15:40 348160 ----a-w- c:\windows\SysWow64\Msvcr71.dll
2012-04-25 15:40 . 2012-04-25 15:40 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-04-25 15:40 . 2012-04-25 15:40 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2012-04-25 15:37 . 2012-04-25 15:37 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2012-04-18 01:03 . 2012-04-21 15:42 8917360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{04074BD4-32B0-4D6C-AA34-B938B6524429}\mpengine.dll
.
.
((((((((((((((((((((((((((((( SnapShot_2012-07-03_08.44.44 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-04-22 07:45 . 2012-07-03 08:46 29632 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-07-03 08:46 26092 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2012-04-21 15:25 . 2012-07-03 08:44 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2012-04-21 15:25 . 2012-07-03 09:10 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2012-04-21 15:25 . 2012-07-03 08:44 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2012-04-21 15:25 . 2012-07-03 09:10 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2012-04-21 15:25 . 2012-07-03 09:10 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2012-04-21 15:25 . 2012-07-03 08:44 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2012-04-21 15:25 . 2012-07-03 08:44 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2012-04-21 15:25 . 2012-07-03 09:10 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2012-04-21 15:25 . 2012-07-03 09:10 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2012-04-21 15:25 . 2012-07-03 08:44 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-04-21 15:25 . 2012-07-03 08:46 8826 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3413740525-1839657784-3978621073-1001_UserData.bin
+ 2012-07-03 09:10 . 2012-07-03 09:10 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-07-03 08:44 . 2012-07-03 08:44 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-07-03 09:10 . 2012-07-03 09:10 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-07-03 08:44 . 2012-07-03 08:44 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-07-14 02:36 . 2012-07-03 08:24 651450 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2012-07-03 08:49 651450 c:\windows\system32\perfh009.dat
- 2009-07-26 18:41 . 2012-07-03 08:24 665706 c:\windows\system32\perfh005.dat
+ 2009-07-26 18:41 . 2012-07-03 08:49 665706 c:\windows\system32\perfh005.dat
+ 2009-07-14 02:36 . 2012-07-03 08:49 120382 c:\windows\system32\perfc009.dat
- 2009-07-14 02:36 . 2012-07-03 08:24 120382 c:\windows\system32\perfc009.dat
- 2009-07-26 18:41 . 2012-07-03 08:24 139402 c:\windows\system32\perfc005.dat
+ 2009-07-26 18:41 . 2012-07-03 08:49 139402 c:\windows\system32\perfc005.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
c:\program files (x86)\Ask.com\GenericAskToolbar.dll [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [BU]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2012-04-21 1242448]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-06-05 17344176]
"RGSC"="c:\program files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe" [2008-11-14 305064]
"Clownfish"="c:\program files (x86)\Clownfish\Clownfish.exe" [2012-04-09 1089272]
"cz.seznam.software.autoupdate"="c:\users\hanys\AppData\Roaming\Seznam.cz\szninstall.exe" [2012-03-16 879728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2010-04-12 180224]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-23 250056]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-04-01 183560]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [x]
R3 WMZuneComm;Zune Windows Mobile Connectivity Service;c:\program files\Zune\WMZuneComm.exe [2011-08-05 306400]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\program files (x86)\HWiNFO32\HWiNFO64A.SYS [2012-02-07 30592]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-03-01 2348352]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-06-19 3048136]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-02-29 382272]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-03-19 2666880]
S2 Web Assistant Updater;Web Assistant Updater;c:\program files\Web Assistant\ExtensionUpdaterService.exe [2012-06-06 185856]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2012-01-17 188224]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-07-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-21 21:05]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Zune Launcher"="c:\program files\Zune\ZuneLauncher.exe" [2011-08-05 163552]
"combofix"="c:\combofix\CF8136.3XE" [2009-07-14 344576]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3413740525-1839657784-3978621073-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-3413740525-1839657784-3978621073-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-3413740525-1839657784-3978621073-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\c:\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"qgif4.dll"=multi:"2011-10-10T16:42\00gif\00\00"
"qico4.dll"=multi:"2011-10-10T16:42\00ico\00\00"
"qjpeg4.dll"=multi:"2011-10-10T16:42\00jpeg\00jpg\00\00"
.
[HKEY_USERS\S-1-5-21-3413740525-1839657784-3978621073-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QTextCodecFactoryInterface:\c:\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"2011-10-10T16:42\00GB18030\00GBK\00GB2312\00CP936\00MS936\00windows-936\00MIB: 114\00MIB: 113\00MIB: 2025\00\00"
"qkrcodecs4.dll"=multi:"2011-10-10T16:42\00EUC-KR\00cp949\00MIB: 38\00MIB: -949\00\00"
"qtwcodecs4.dll"=multi:"2011-10-10T16:42\00Big5\00Big5-HKSCS\00Big5-ETen\00CP950\00MIB: 2026\00MIB: 2101\00\00"
.
[HKEY_USERS\S-1-5-21-3413740525-1839657784-3978621073-1001\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\c:\b*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]
"qcncodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qjpcodecs4.dll"=multi:"40602\000\00Windows msvc release full-config\002011-10-10T16:42\00\00"
"qjpcodecsd4.dll"=multi:"40703\001\00Windows msvc debug full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qkrcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qtwcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
.
[HKEY_USERS\S-1-5-21-3413740525-1839657784-3978621073-1001\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\c:\b*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]
"Microsoft.VC80.CRT.manifest"=multi:"0\001\00unknown\002011-10-10T16:42\00\00"
"msvcr80.dll"=multi:"0\001\00unknown\002011-10-10T16:42\00\00"
"qgif4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qico4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
"qjpeg4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\windows\SysWOW64\DllHost.exe
.
**************************************************************************
.
Celkový čas: 2012-07-03 11:13:59 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-07-03 09:13
ComboFix2.txt 2012-07-03 08:47
ComboFix3.txt 2012-07-02 20:43
.
Před spuštěním: Volných bajtů: 685 602 635 776
Po spuštění: Volných bajtů: 685 408 874 496
.
- - End Of File - - CE8EC61733B5589FF79E0BCEF2E84AF7


Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 89 hostů