Prosím o kontrolu logu Vyřešeno

[shaleman]

Log tdss obsahuje 95427 znaků, limit je 60000. jak mám vložit? v C jsem ho nenašel, ani nikde uložený, jedná se tedy o kopii zprávy zkopírované do poznámkového bloku. Odkaz byl přímo na TDSS.exe, jen zabalený. Nebyla tedy žádná instalačka.

[Reklama]

[shaleman]

Log TDSS nešel vložit, přesahoval 60000znaků. Přiložený odkaz byl na stažení exe souboru, takže neproběhla instalačka. Na C ani jinde jsem nenašel, kam se log uložil, byl zkopíroval jsem ho tedy do poznámkového bloku a uložil. Jak ho vložím, nebo stačí nějaká část?

[jaro3]

Log z TDSSKilleru vlož do několika příspěků.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

[shaleman]

tdss 1:
19:23:33.0245 0x1254 TDSS rootkit removing tool 3.0.0.19 Nov 18 2013 09:27:50
19:23:36.0896 0x1254 ============================================================
19:23:36.0896 0x1254 Current date / time: 2013/12/27 19:23:36.0896
19:23:36.0896 0x1254 SystemInfo:
19:23:36.0896 0x1254
19:23:36.0896 0x1254 OS Version: 6.0.6002 ServicePack: 2.0
19:23:36.0896 0x1254 Product type: Workstation
19:23:36.0896 0x1254 ComputerName: SHALEMAN-PC
19:23:36.0896 0x1254 UserName: shaleman
19:23:36.0896 0x1254 Windows directory: C:\Windows
19:23:36.0896 0x1254 System windows directory: C:\Windows
19:23:36.0896 0x1254 Processor architecture: Intel x86
19:23:36.0896 0x1254 Number of processors: 2
19:23:36.0896 0x1254 Page size: 0x1000
19:23:36.0896 0x1254 Boot type: Normal boot
19:23:36.0896 0x1254 ============================================================
19:23:37.0083 0x1254 KLMD registered as C:\Windows\system32\drivers\56586499.sys
19:23:37.0364 0x1254 System UUID: {AF8C2206-C89D-B90E-81DD-0EF9FF6158A3}
19:23:38.0237 0x1254 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
19:23:38.0253 0x1254 ============================================================
19:23:38.0253 0x1254 \Device\Harddisk0\DR0:
19:23:38.0253 0x1254 MBR partitions:
19:23:38.0253 0x1254 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1771000, BlocksNum 0x12A17000
19:23:38.0269 0x1254 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x14188800, BlocksNum 0x112A5800
19:23:38.0269 0x1254 ============================================================
19:23:38.0331 0x1254 C: <-> \Device\Harddisk0\DR0\Partition1
19:23:38.0393 0x1254 D: <-> \Device\Harddisk0\DR0\Partition2
19:23:38.0393 0x1254 ============================================================
19:23:38.0393 0x1254 Initialize success
19:23:38.0393 0x1254 ============================================================
19:23:40.0328 0x1344 ============================================================
19:23:40.0328 0x1344 Scan started
19:23:40.0328 0x1344 Mode: Manual;
19:23:40.0328 0x1344 ============================================================
19:23:40.0328 0x1344 KSN ping started
19:23:42.0855 0x1344 KSN ping finished: true
19:23:43.0401 0x1344 ================ Scan system memory ========================
19:23:43.0401 0x1344 System memory - ok
19:23:43.0401 0x1344 ================ Scan services =============================
19:23:43.0807 0x1344 [ 82B296AE1892FE3DBEE00C9CF92F8AC7, 54B22BA63E1DA616B546992141B0C3117BA057283B8F60CB9BECE203661FEBF3 ] ACPI C:\Windows\system32\drivers\acpi.sys
19:23:43.0822 0x1344 ACPI - ok
19:23:43.0947 0x1344 [ ADDA5E1951B90D3D23C56D3CF0622ADC, E85E7BFD29F00ED34BF5BE8BD4DA93CBB14278E16809BB55406875F0DA88551E ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
19:23:43.0963 0x1344 AdobeARMservice - ok
19:23:44.0025 0x1344 [ 1BA1AB4141A92EB34DA99F1249CA2D4D, 43ADF35146E61E0DE58D2ACC2994538F6025135ECEB30073BEF05A804BB38107 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
19:23:44.0041 0x1344 AdobeFlashPlayerUpdateSvc - ok
19:23:44.0134 0x1344 [ 04F0FCAC69C7C71A3AC4EB97FAFC8303, FBBDD38574A1F66A5AA12B82E34FDE60B870180C4B7100C15757539DC869ED4B ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
19:23:44.0165 0x1344 adp94xx - ok
19:23:44.0197 0x1344 [ 60505E0041F7751BDBB80F88BF45C2CE, 1DE16042B8ABD7B643189E836DE273832EE743FD66AFBB641E8049C4E0CD04D8 ] adpahci C:\Windows\system32\drivers\adpahci.sys
19:23:44.0212 0x1344 adpahci - ok
19:23:44.0243 0x1344 [ 8A42779B02AEC986EAB64ECFC98F8BD7, B89938EFF4E81FA44197D2D839EBD3340DDE01FBC79605049C088621784C1B91 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
19:23:44.0259 0x1344 adpu160m - ok
19:23:44.0290 0x1344 [ 241C9E37F8CE45EF51C3DE27515CA4E5, 1A03E93DD8C1F3640C96124A14A3D0F4E349B06CCA2118CE40B8AE201A4030A7 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
19:23:44.0290 0x1344 adpu320 - ok
19:23:44.0353 0x1344 [ 609A6F49B6AF0F25837F8A0EDDDB0745, C10C6A3A99636FD4688555B9A74397C3D45165A8A30D7B37089876548F02ECDF ] ADSMService C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
19:23:44.0368 0x1344 ADSMService - ok
19:23:44.0399 0x1344 [ 9D1FDA9E086BA64E3C93C9DE32461BCF, 200FD0BFC811EC8993AF9FC78F58823ECC717063F438B627FBCDD6BD7790CAA8 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
19:23:44.0399 0x1344 AeLookupSvc - ok
19:23:44.0477 0x1344 [ 3911B972B55FEA0478476B2E777B29FA, 62545B90C7DD3F73777E62CD8264E611A4D71B6956CABFD2D820D25F41F471FD ] AFD C:\Windows\system32\drivers\afd.sys
19:23:44.0493 0x1344 AFD - ok
19:23:44.0602 0x1344 [ AC8AB164BF5B79318D3B7CE1F0198FFD, 43EBF69B35B420616C2FE1C4625490F4EEEB1B1909FD500325A7C435FEA7EC4D ] AffinegyService C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe
19:23:44.0633 0x1344 AffinegyService - ok
19:23:44.0680 0x1344 [ 13F9E33747E6B41A3FF305C37DB0D360, 066DD6060B1CF93F85BBAAA52848C801128CD294E8B7EACD912E0EF219DBFBC2 ] agp440 C:\Windows\system32\drivers\agp440.sys
19:23:44.0696 0x1344 agp440 - ok
19:23:44.0727 0x1344 [ AE1FDF7BF7BB6C6A70F67699D880592A, B831BF156FC49287A19FC149383D437B1034EA6F42CE9D761EB90ABD0F8D96B1 ] aic78xx C:\Windows\system32\drivers\djsvs.sys
19:23:44.0743 0x1344 aic78xx - ok
19:23:44.0774 0x1344 [ A1545B731579895D8CC44FC0481C1192, 6B0EE833BA39C142D625A03586CCD8F6C9C3136C603CE5DF5BAC1AA3423E3E7F ] ALG C:\Windows\System32\alg.exe
19:23:44.0774 0x1344 ALG - ok
19:23:44.0805 0x1344 [ 9EAEF5FC9B8E351AFA7E78A6FAE91F91, 0EADB6AE21FEDAB55D41F41B638198B556CC2BE2EE57F6C8B40EB044A318319F ] aliide C:\Windows\system32\drivers\aliide.sys
19:23:44.0805 0x1344 aliide - ok
19:23:44.0852 0x1344 [ C47344BC706E5F0B9DCE369516661578, 689C9CDAF6F38227F1C34359CAEB3C7798F318EDFD4B7FE532FBE3C8E4EE3DC8 ] amdagp C:\Windows\system32\drivers\amdagp.sys
19:23:44.0867 0x1344 amdagp - ok
19:23:44.0883 0x1344 [ 9B78A39A4C173FDBC1321E0DD659B34C, 2CA66EB68AD7A317D91C13B8CFD4E8CA985926A610D19595B613F5553B145C7B ] amdide C:\Windows\system32\drivers\amdide.sys
19:23:44.0883 0x1344 amdide - ok
19:23:44.0914 0x1344 [ 18F29B49AD23ECEE3D2A826C725C8D48, 0FA08882301D218E367E63E1966B6406220EE94BAE7E7DAD6E55EB70BF6FED7F ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
19:23:44.0914 0x1344 AmdK7 - ok
19:23:44.0961 0x1344 [ 93AE7F7DD54AB986A6F1A1B37BE7442D, ECE0ABA2DECEED94AC678240A4B604F04022F0740F2295CBD07D25F5917E878A ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
19:23:44.0961 0x1344 AmdK8 - ok
19:23:45.0023 0x1344 [ AD8FA28D8ED0D0A689A0559085CE0F18, 75A35973D0CAED504147FC4A78F6EFA755E74EC4A169689F279150769196744A ] AmdLLD C:\Windows\system32\DRIVERS\AmdLLD.sys
19:23:45.0023 0x1344 AmdLLD - ok
19:23:45.0070 0x1344 [ C6D704C7F0434DC791AAC37CAC4B6E14, 35CF7D1895F97637E0C678A39F3049B871BCA9526D379C7793ED33B87D2EAC4C ] Appinfo C:\Windows\System32\appinfo.dll
19:23:45.0070 0x1344 Appinfo - ok
19:23:45.0101 0x1344 [ 5D2888182FB46632511ACEE92FDAD522, 2E53231ACAF9B2FB7993DBC1CD15C06D7B0CCE0D08DAFF7B0CC13A2040028A75 ] arc C:\Windows\system32\drivers\arc.sys
19:23:45.0117 0x1344 arc - ok
19:23:45.0133 0x1344 [ 5E2A321BD7C8B3624E41FDEC3E244945, 9D47FF6C823868F2267FEFAB5851D3CD2BC3F619A2D6EFF803EA22DB0509C450 ] arcsas C:\Windows\system32\drivers\arcsas.sys
19:23:45.0133 0x1344 arcsas - ok
19:23:45.0179 0x1344 [ 4385E371C25C94C804E9D3152BD9E1F7, 285CD1D03E73461348DDDF68755A81E23458C3150CFBE5911CC63A956FAC0EAD ] AsDsm C:\Windows\system32\drivers\AsDsm.sys
19:23:45.0179 0x1344 AsDsm - ok
19:23:45.0257 0x1344 [ 5A055A4777CBBC8845DD598CB2EEBF69, AF58FF2D58DA807869531A645ED4AD078FC411554EE18366949D27FF0C28829D ] ASLDRService C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
19:23:45.0257 0x1344 ASLDRService - ok
19:23:45.0289 0x1344 [ 7B4D08D2017AC06689D422E06C43F0AA, 42BACCEA0FCEB60B79F78098163147A8DD1DED24CB2F0DBB93EDC07DAB66135C ] ASMMAP C:\Program Files\ATKGFNEX\ASMMAP.sys
19:23:45.0304 0x1344 ASMMAP - ok
19:23:45.0429 0x1344 [ 2FE0D5DB69014980A970D3BF9A85D2B1, 3837F176B0CB7FEA2689D90B50B62F660FE579A5EB1E47C827DFA95596B72D1E ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
19:23:45.0429 0x1344 aspnet_state - ok
19:23:45.0476 0x1344 [ 53B202ABEE6455406254444303E87BE1, 4C91CA8DD345FEDD74A6AF2C07580717703F979B7DE2532B1D00B9F6896DDE70 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
19:23:45.0476 0x1344 AsyncMac - ok
19:23:45.0491 0x1344 [ 1F05B78AB91C9075565A9D8A4B880BC4, 737BE9F9376DAB0CCDFED93EA6D67F0C432367EA63CD772A453485BE769AF3BD ] atapi C:\Windows\system32\drivers\atapi.sys
19:23:45.0507 0x1344 atapi - ok
19:23:45.0647 0x1344 [ 2846F5EE802889D500FCF5CC48B28381, E8646DD914CE4255BF4AA45249CB15C00D3001349F95783D29DF62CE91FC9CC3 ] athr C:\Windows\system32\DRIVERS\athr.sys
19:23:45.0694 0x1344 athr - ok
19:23:45.0772 0x1344 [ 7C157574A181B19B9DCF5F339E25337E, 7CA78363CD420BFE4BFE9A38683CA9E31023AC573D9092666CDAEE6AF4998B60 ] ATKGFNEXSrv C:\Program Files\ATKGFNEX\GFNEXSrv.exe
19:23:45.0772 0x1344 ATKGFNEXSrv - ok
19:23:45.0850 0x1344 [ 68E2A1A0407A66CF50DA0300852424AB, 5FFDAE4E477C90A855081B5120582810471F67D3E9C343779A7AFB8D684D16F8 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
19:23:45.0866 0x1344 AudioEndpointBuilder - ok
19:23:45.0913 0x1344 [ 68E2A1A0407A66CF50DA0300852424AB, 5FFDAE4E477C90A855081B5120582810471F67D3E9C343779A7AFB8D684D16F8 ] Audiosrv C:\Windows\System32\Audiosrv.dll
19:23:45.0928 0x1344 Audiosrv - ok
19:23:46.0521 0x1344 [ AB673BA95E8FA446E9C00AA7A34B96DA, 6CDFAEAD9BB8396D6F4BE2A409470760CBF4391CE1AFB3FF8DFA3277BBA7D957 ] AVGIDSAgent C:\Program Files\AVG\AVG2012\avgidsagent.exe
19:23:46.0739 0x1344 AVGIDSAgent - ok
19:23:46.0802 0x1344 [ EF67527CC2AD77D22AB1405C6470407E, 4A5908EA0CBBBC11DBEC900BFFC96B27F8FDC36B8237E0C37B0F92D68A5B6793 ] AVGIDSDriver C:\Windows\system32\DRIVERS\avgidsdriverx.sys
19:23:46.0817 0x1344 AVGIDSDriver - ok
19:23:46.0849 0x1344 [ 61A7E0B02F82CFF3DB2445BBE50B3589, 11F0AB6754346BCC5E755DB4421E3D8514292552B52C50D74CE874A685073C03 ] AVGIDSFilter C:\Windows\system32\DRIVERS\avgidsfilterx.sys
19:23:46.0849 0x1344 AVGIDSFilter - ok
19:23:46.0880 0x1344 [ D63D83659EEDF60B3A3E620281A888E5, 25516B505832F8BF3DE5FD7DE8E6C2C1F2C0FBB622501503AF64584AB5ED936E ] AVGIDSHX C:\Windows\system32\DRIVERS\avgidshx.sys
19:23:46.0880 0x1344 AVGIDSHX - ok
19:23:46.0895 0x1344 [ BAF975B72062F53D327788E99D64197E, EF3E31A2D1E5A62E8CB13BC20C513DEA2D8E90A426E53712C3B85E8CABE850D3 ] AVGIDSShim C:\Windows\system32\DRIVERS\avgidsshimx.sys
19:23:46.0911 0x1344 AVGIDSShim - ok
19:23:46.0973 0x1344 [ 6671345A6E2669AF1966BAF68EC5620F, 30D24160252532E7CBF8030D4A905D0ED7A7CE83DF183287ED53C3476C801D11 ] Avgldx86 C:\Windows\system32\DRIVERS\avgldx86.sys
19:23:46.0989 0x1344 Avgldx86 - ok
19:23:47.0020 0x1344 [ CCDD61545AAEA265977E4B1EFDC74E8C, A41CBDADC80DAD0D4F22E04A6F158C35E6C47A5A8B71CAB8B51F6CEF92607722 ] Avgmfx86 C:\Windows\system32\DRIVERS\avgmfx86.sys
19:23:47.0020 0x1344 Avgmfx86 - ok
19:23:47.0036 0x1344 [ 1FD90B28D2C3100BF4500199C8AD6358, 514FB89932B1636D2FE893ABABB24FF6D0C4E494AF4DD3810CA09E15D4270538 ] Avgrkx86 C:\Windows\system32\DRIVERS\avgrkx86.sys
19:23:47.0051 0x1344 Avgrkx86 - ok
19:23:47.0114 0x1344 [ 1647C720358DCC98ACF51E597C461C4D, 701432883A0652A27587D1DA6A29E1F03778A05F95161F260B9CA90F6453AAB2 ] Avgtdix C:\Windows\system32\DRIVERS\avgtdix.sys
19:23:47.0129 0x1344 Avgtdix - ok
19:23:47.0192 0x1344 [ 15ACA2AD17ACECA4814F249783E63AD3, AB8E74A5B8FC2FD04BA2B495610A8BE76408E9362A447D7069D5AAB8F3512F33 ] avgtp C:\Windows\system32\drivers\avgtpx86.sys
19:23:47.0192 0x1344 avgtp - ok
19:23:47.0239 0x1344 [ EA1145DEBCD508FD25BD1E95C4346929, E6D9C84C61DBD69726E4B5BB081B53330E9F7662374D539CF25D8EE3539B9885 ] avgwd C:\Program Files\AVG\AVG2012\avgwdsvc.exe
19:23:47.0254 0x1344 avgwd - ok
19:23:47.0301 0x1344 [ 67E506B75BD5326A3EC7B70BD014DFB6, 3B07243970CAB4E93A858BEA6E31F56AD0157C42D624F3FEB469E68EEEF65669 ] Beep C:\Windows\system32\drivers\Beep.sys
19:23:47.0317 0x1344 Beep - ok
19:23:47.0395 0x1344 [ C789AF0F724FDA5852FB9A7D3A432381, 4B0F7A3A8F2D45E49630D24F2630B8014BCDB793B9C6E83FD2B2863A54F62BF5 ] BFE C:\Windows\System32\bfe.dll
19:23:47.0410 0x1344 BFE - ok
19:23:47.0551 0x1344 [ 93952506C6D67330367F7E7934B6A02F, 1D9A6B10B9489C1A32F730E22CC399BFF0796E3FCB3BA52BE45ED487CAC59EBD ] BITS C:\Windows\System32\qmgr.dll
19:23:47.0707 0x1344 BITS - ok
19:23:47.0753 0x1344 [ D4DF28447741FD3D953526E33A617397, E7239BA432090F8AC7DF453DB876507CD4419ECA964D289408A1B2B353618693 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
19:23:47.0753 0x1344 blbdrive - ok
19:23:47.0785 0x1344 [ 35F376253F687BDE63976CCB3F2108CA, C5EF6301D7BC067050038DB75D961681D1CBE418285AD60167C1334B0B54DFE9 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
19:23:47.0800 0x1344 bowser - ok
19:23:47.0847 0x1344 [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
19:23:47.0847 0x1344 BrFiltLo - ok
19:23:47.0878 0x1344 [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
19:23:47.0878 0x1344 BrFiltUp - ok
19:23:47.0941 0x1344 [ A3629A0C4226F9E9C72FAAEEBC3AD33C, FB4D2738B64AADA52B95A6CF7ED4CDBFE4DD4BEBCAF1AE9CE64317F97DB38DDF ] Browser C:\Windows\System32\browser.dll
19:23:47.0956 0x1344 Browser - ok
19:23:47.0987 0x1344 [ B304E75CFF293029EDDF094246747113, CB6B219B186C3511A0DE3CDE7F7B8966A9E32D808A952CA8C5B42B3A3A17BFB0 ] Brserid C:\Windows\system32\drivers\brserid.sys
19:23:48.0003 0x1344 Brserid - ok
19:23:48.0019 0x1344 [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
19:23:48.0019 0x1344 BrSerWdm - ok
19:23:48.0065 0x1344 [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
19:23:48.0065 0x1344 BrUsbMdm - ok
19:23:48.0097 0x1344 [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
19:23:48.0112 0x1344 BrUsbSer - ok
19:23:48.0143 0x1344 [ 6D39C954799B63BA866910234CF7D726, 1D807C3410C01C76E5810D626F23C1CCED3C9C5A65F39267B770C494C8D64114 ] BthEnum C:\Windows\system32\DRIVERS\BthEnum.sys
19:23:48.0143 0x1344 BthEnum - ok
19:23:48.0175 0x1344 [ AD07C1EC6665B8B35741AB91200C6B68, DCE1305A30D6713222A01C1F1D03ED0ADABE23C742CE1E82BB142531B82A3FF7 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
19:23:48.0190 0x1344 BTHMODEM - ok
19:23:48.0221 0x1344 [ 5904EFA25F829BF84EA6FB045134A1D8, 66E4160CC404744576BA6E9DD606B533F42B3D4A3E2FDD457DAA016CC72A81CC ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
19:23:48.0237 0x1344 BthPan - ok
19:23:48.0299 0x1344 [ 611FF3F2F095C8D4A6D4CFD9DCC09793, 2F27A1287ABCDB9C316EB720D1855100666240959CF969D5B2679C9ABCBD6050 ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys
19:23:48.0331 0x1344 BTHPORT - ok
19:23:48.0409 0x1344 [ A4C8377FA4A994E07075107DBE2E3DCE, C3CDAA7B83D130100044341C23897CC6C257FA075A8D08B8551F4A28AE8CE6C4 ] BthServ C:\Windows\System32\bthserv.dll
19:23:48.0424 0x1344 BthServ - ok
19:23:48.0455 0x1344 [ D330803EAB2A15CAEC7F011F1D4CB30E, 240FFF317C90AD8966DA9666F2748F98CEC3CB99C486F399D1C68FE0E393EE68 ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys
19:23:48.0471 0x1344 BTHUSB - ok
19:23:48.0518 0x1344 [ 463483285B2D2D345443AAEE7B9391E7, C8ED91313938375B0F8D89AC2023B53A84FF1D37010C2061E4515AAC7746898E ] btwaudio C:\Windows\system32\drivers\btwaudio.sys
19:23:48.0533 0x1344 btwaudio - ok
19:23:48.0580 0x1344 [ 4F82B6173EF8637CB26CF4E73B90F172, DB9084861261B64D901B14EFF57AB38FBE1130BAF8DC166122E8004400B80FC1 ] btwavdt C:\Windows\system32\drivers\btwavdt.sys
19:23:48.0596 0x1344 btwavdt - ok
19:23:48.0674 0x1344 [ B78D1ACA1BBD0077848D9F87C8207AB1, A71C904885F39C3C02220ECDF50B1CAE10DD532FD7621C4DF4B44AD79F42ABC9 ] btwdins C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
19:23:48.0689 0x1344 btwdins - ok
19:23:48.0721 0x1344 [ ECB98391C756A7B9CFBAE89D9D1235E1, 0A639D2187BDCD64320A7FB72627ED8AF2AF7CC8AAEF6E0991BDEF28BA080442 ] btwl2cap C:\Windows\system32\DRIVERS\btwl2cap.sys
19:23:48.0736 0x1344 btwl2cap - ok
19:23:48.0767 0x1344 [ F771034F5B59A4A5054A2FA6F4E9F28B, D1AE8B30AF35196416AFAEFBE34D632CEC44511E5FC8E60285499AFDCAB62765 ] btwrchid C:\Windows\system32\DRIVERS\btwrchid.sys
19:23:48.0767 0x1344 btwrchid - ok
19:23:48.0814 0x1344 [ 7ADD03E75BEB9E6DD102C3081D29840A, 0CA14A77CE990B5AA32C0725C22CA190ECBC73B75064DD959CABAD79B8846F1D ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
19:23:48.0830 0x1344 cdfs - ok
19:23:48.0877 0x1344 [ 6B4BFFB9BECD728097024276430DB314, 4451EFEAD37B05C8A3CB610B6D72E73B55D3D1E1CC1B17405598C1EDAA93C2D5 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
19:23:48.0892 0x1344 cdrom - ok
19:23:48.0923 0x1344 [ 312EC3E37A0A1F2006534913E37B4423, 81B8F462336791D162DAFA8092C1F437638DA3022CA24A2458B9FE183FC18C5D ] CertPropSvc C:\Windows\System32\certprop.dll
19:23:48.0939 0x1344 CertPropSvc - ok
19:23:48.0986 0x1344 [ E5D4133F37219DBCFE102BC61072589D, 74C7F8C53D9C71CE3C8B33BC0331948571318402B0A8E1AC4552360504092A46 ] circlass C:\Windows\system32\drivers\circlass.sys
19:23:48.0986 0x1344 circlass - ok
19:23:49.0079 0x1344 [ D7659D3B5B92C31E84E53C1431F35132, 6BFE644AD9890A8CEEDCC4B97ADD564AD57202FBC5D21599469E0C4B31BB27C6 ] CLFS C:\Windows\system32\CLFS.sys
19:23:49.0111 0x1344 CLFS - ok
19:23:49.0173 0x1344 [ 8EE772032E2FE80A924F3B8DD5082194, B743DF91563A22CC15D9B44105804B5866A29D3DFC156DBE88DFAFEF903B94C0 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:23:49.0189 0x1344 clr_optimization_v2.0.50727_32 - ok
19:23:49.0251 0x1344 [ 6D7C8A951AF6AD6835C029B3CB88D333, 66F3D79887B2449B4C6912D1A258D1A96056888F51A8AA24FEDF37942AD5BDBB ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:23:49.0267 0x1344 clr_optimization_v4.0.30319_32 - ok
19:23:49.0329 0x1344 [ 99AFC3795B58CC478FBBBCDC658FCB56, 0D1B27C42A058C5D56A0157B5ECA9A054254F6B9C8015D0321021A7EFCE10CE2 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
19:23:49.0329 0x1344 CmBatt - ok
19:23:49.0360 0x1344 [ 0CA25E686A4928484E9FDABD168AB629, C2CB2333CAB40CDF93219870E66700F957188C86A1B1A004BC4652953091E5C5 ] cmdide C:\Windows\system32\drivers\cmdide.sys
19:23:49.0360 0x1344 cmdide - ok
19:23:49.0391 0x1344 [ 6AFEF0B60FA25DE07C0968983EE4F60A, E4037EF9EDE57A1039AB814EBCE9A8B12C9A084E7FAC6296212ACF2394DD37B6 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
19:23:49.0391 0x1344 Compbatt - ok
19:23:49.0407 0x1344 COMSysApp - ok
19:23:49.0438 0x1344 [ 741E9DFF4F42D2D8477D0FC1DC0DF871, 06EA43D771E3455F943AB624CC00C2259FE5E561164908630755E933EF44A522 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
19:23:49.0454 0x1344 crcdisk - ok
19:23:49.0485 0x1344 [ 1F07BECDCA750766A96CDA811BA86410, F4E36F0003184BCB36D59B23AC903421AD8C0A1FD2D6315E06375235ABC9A0AD ] Crusoe C:\Windows\system32\drivers\crusoe.sys
19:23:49.0501 0x1344 Crusoe - ok
19:23:49.0547 0x1344 [ 684C130BBC6DB681BAD4920A4C944AA5, DDE434B206984808351C98500824A33E6740B4326C455066027F8D549D4C3B92 ] CryptSvc C:\Windows\system32\cryptsvc.dll
19:23:49.0563 0x1344 CryptSvc - ok
19:23:49.0657 0x1344 [ 3B5B4D53FEC14F7476CA29A20CC31AC9, EC02A412DA5FDE2C759A4A2C5904579E1CE7C4999CE87145812F354FC8F5E183 ] DcomLaunch C:\Windows\system32\rpcss.dll
19:23:49.0813 0x1344 DcomLaunch - ok
19:23:49.0859 0x1344 [ 622C41A07CA7E6DD91770F50D532CB6C, 2A9040949CB45F9970FDE930278F30D2F08E957290CB3D4DC4F2CA94F3D444D2 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
19:23:49.0875 0x1344 DfsC - ok
19:23:50.0047 0x1344 [ 2CC3DCFB533A1035B13DCAB6160AB38B, C88C91F662ADE248EEE3B568E70C2BC2D5075B7D9B7D3C63E83D011C5F7812B0 ] DFSR C:\Windows\system32\DFSR.exe
19:23:50.0171 0x1344 DFSR - ok
19:23:50.0327 0x1344 [ 9028559C132146FB75EB7ACF384B086A, 35159D86706441ED94895B4629411B4445FCB4526AFD1F7036EE647931B7A94D ] Dhcp C:\Windows\System32\dhcpcsvc.dll
19:23:50.0374 0x1344 Dhcp - ok
19:23:50.0405 0x1344 [ 5D4AEFC3386920236A548271F8F1AF6A, 11B74D6800EC6F7AAEFB0B6A9F2E8376C7C3B8DB677F03AC3743CB004CA96B08 ] disk C:\Windows\system32\drivers\disk.sys
19:23:50.0421 0x1344 disk - ok
19:23:50.0468 0x1344 [ 57D762F6F5974AF0DA2BE88A3349BAAA, D9E7DC8F9FB7837F88BBB95B52147AA80E688FB9762EEA99B8046D9C6AD48F3C ] Dnscache C:\Windows\System32\dnsrslvr.dll
19:23:50.0499 0x1344 Dnscache - ok
19:23:50.0561 0x1344 [ 324FD74686B1EF5E7C19A8AF49E748F6, DC6EB4304555B60DD17E04D20DFE4E279718E4041A9310DE29E678834BB22C5B ] dot3svc C:\Windows\System32\dot3svc.dll
19:23:50.0624 0x1344 dot3svc - ok
19:23:50.0686 0x1344 [ A622E888F8AA2F6B49E9BC466F0E5DEF, 3DED7F22A29AD2F8C927DFA0FD87FDE5ED0BDCAC7260BD9F71D8EA34328C772A ] DPS C:\Windows\system32\dps.dll
19:23:50.0733 0x1344 DPS - ok
19:23:50.0780 0x1344 [ 97FEF831AB90BEE128C9AF390E243F80, A7F4118603E2D5DDDB117EF7C058684EA5B37690EFAB2BEBA570EEF9C36281BE ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
19:23:50.0795 0x1344 drmkaud - ok
19:23:50.0873 0x1344 [ 687AF6BB383885FF6A64071B189A7F3E, 1C751B8DD27F63E88D0223A8434CED7589AC00EC6275938C59D1B954F0354F78 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
19:23:50.0905 0x1344 dtsoftbus01 - ok
19:23:51.0061 0x1344 [ 988670D8343EF9835FB3659DB71B2EFA, 5F5370FDD08C4BFF0828341952E98E95F722CB779EEC08C9DD6212C4DF3CD33B ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
19:23:51.0092 0x1344 DXGKrnl - ok
19:23:51.0170 0x1344 [ 5425F74AC0C1DBD96A1E04F17D63F94C, AD133CEDCDEA75420C75A91BB4CF7152475D46ED7B7703E3BAE5F9946D610292 ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
19:23:51.0185 0x1344 E1G60 - ok
19:23:51.0201 0x1344 EagleXNt - ok
19:23:51.0232 0x1344 [ C0B95E40D85CD807D614E264248A45B9, 30421DAF1722A225222268CB8BA4FE60CB76C6FD0C9157B0F53FC1368F806A4E ] EapHost C:\Windows\System32\eapsvc.dll
19:23:51.0279 0x1344 EapHost - ok
19:23:51.0341 0x1344 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371, F3E9CF5D8E9124CB06F08454C5F0E510DE19A92780151FB2F8A58A0905D59B8F ] Ecache C:\Windows\system32\drivers\ecache.sys
19:23:51.0357 0x1344 Ecache - ok
19:23:51.0466 0x1344 [ 9BE3744D295A7701EB425332014F0797, 1A139EE9232581E466591C5EBEF41E4BF1F82D99C1959F1C68C879B240E9F46D ] ehRecvr C:\Windows\ehome\ehRecvr.exe
19:23:51.0482 0x1344 ehRecvr - ok
19:23:51.0513 0x1344 [ AD1870C8E5D6DD340C829E6074BF3C3F, 064D07106A1BBE80294F1913354832F2B67D22274BB4D36C81D2D83C96FE0B88 ] ehSched C:\Windows\ehome\ehsched.exe
19:23:51.0529 0x1344 ehSched - ok
19:23:51.0544 0x1344 [ C27C4EE8926E74AA72EFCAB24C5242C3, F1EBF78CCE9BA76AFD0478BC66B67CA44DEAF3C380369BFCE91BD8F678C8608A ] ehstart C:\Windows\ehome\ehstart.dll
19:23:51.0560 0x1344 ehstart - ok
19:23:51.0622 0x1344 [ 23B62471681A124889978F6295B3F4C6, A90C521F06125B86A26EA625B0E7F811AF7D328E1313165E7AD4A83596A23819 ] elxstor C:\Windows\system32\drivers\elxstor.sys
19:23:51.0653 0x1344 elxstor - ok
19:23:51.0747 0x1344 [ 4E6B23DFC917EA39306B529B773950F4, C4BA77632B4BD46C4C1797F7F57399DB506D3EB6E5A0A36C269A793DAA3445C2 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
19:23:51.0841 0x1344 EMDMgmt - ok
19:23:51.0919 0x1344 [ 3DB974F3935483555D7148663F726C61, C288CFC04213B0340ABEC752C0A7B308B29122B5F51E68387BA1D9E9D7166FDD ] ErrDev C:\Windows\system32\drivers\errdev.sys
19:23:51.0934 0x1344 ErrDev - ok
19:23:51.0997 0x1344 [ 67058C46504BC12D821F38CF99B7B28F, E8D19F305F78BCA1DA8425315F2C77A377CD51E3CC54323DC2FF355120EA097D ] EventSystem C:\Windows\system32\es.dll
19:23:52.0059 0x1344 EventSystem - ok
19:23:52.0168 0x1344 [ 22B408651F9123527BCEE54B4F6C5CAE, 31AF9649333A9496A9224001266D1B68CE2A31B9FB182A755D127FC5492AA6B2 ] exfat C:\Windows\system32\drivers\exfat.sys
19:23:52.0184 0x1344 exfat - ok
19:23:52.0262 0x1344 [ 1E9B9A70D332103C52995E957DC09EF8, 7E709D545D4025A2E9F3489CF2A231040904CB53E3E4EEAC15A22468FAB2A5B3 ] fastfat C:\Windows\system32\drivers\fastfat.sys
19:23:52.0277 0x1344 fastfat - ok
19:23:52.0355 0x1344 [ AFE1E8B9782A0DD7FB46BBD88E43F89A, B4CBE1DC3430F2F3485F49007C71293D5B86E9C405741EA00A67B00A38BE1F8D ] fdc C:\Windows\system32\DRIVERS\fdc.sys
19:23:52.0371 0x1344 fdc - ok
19:23:52.0449 0x1344 [ 6629B5F0E98151F4AFDD87567EA32BA3, 8CC02D5E0639CDF74B2F85DB56D6199E1858F1A58465ED1D8B25C968E986132C ] fdPHost C:\Windows\system32\fdPHost.dll
19:23:52.0496 0x1344 fdPHost - ok
19:23:52.0511 0x1344 [ 89ED56DCE8E47AF40892778A5BD31FD2, 924360875796C3DDDDA8097FDF53F6846B227F7413766F00AEDD981EFD691BF9 ] FDResPub C:\Windows\system32\fdrespub.dll
19:23:52.0574 0x1344 FDResPub - ok
19:23:52.0605 0x1344 [ A8C0139A884861E3AAE9CFE73B208A9F, 3B021D148A2989AAA46AE58E5FED8A2DCA25E9212C2FA7F922880EF5A077E49B ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
19:23:52.0621 0x1344 FileInfo - ok
19:23:52.0652 0x1344 [ 0AE429A696AECBC5970E3CF2C62635AE, 1ECC315C099D17835788B68F0DE00EC98DC5AEE8F329D739E0DB90A898F22244 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
19:23:52.0667 0x1344 Filetrace - ok
19:23:52.0745 0x1344 [ 85B7CF99D532820495D68D747FDA9EBD, 682D35D219D1AFBE51CF0AB03F2D3E15C940F5AF291C1A611A19F4D279143F3C ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
19:23:52.0745 0x1344 flpydisk - ok
19:23:52.0792 0x1344 [ 01334F9EA68E6877C4EF05D3EA8ABB05, 82F8AA6AD2B5077898773D4A5814819EAF0E872FFD95894E06FEDAB6EE92CF99 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
19:23:52.0808 0x1344 FltMgr - ok
19:23:52.0948 0x1344 [ 2AFA3A46986AE935DAECEBC7E66314CF, 747FAF9B7F8291B83EE44B91E5708395E749DC87BD42CC3BF2CD41209C298F4D ] FontCache C:\Windows\system32\FntCache.dll
19:23:53.0026 0x1344 FontCache - ok
19:23:53.0104 0x1344 [ C7FBDD1ED42F82BFA35167A5C9803EA3, 372FF71070D5ECE17342466A690737A0622E93C98DBED8172C49B0854F0012B7 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
19:23:53.0120 0x1344 FontCache3.0.0.0 - ok
19:23:53.0167 0x1344 [ 17829180DEEBF703EC7F445AC3ABEA99, 1CFC959CAA046C7E76CA25D96267D1355F8C46AD1C17FBE044184D40F41374E4 ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
19:23:53.0182 0x1344 fssfltr - ok
19:23:53.0260 0x1344 [ F6717211C1EC2CDDAA81B97B0727C2E9, C1FD5A389167A826C002E28339BFCF7DC8851652647016D0DCF8585EB0B8FB28 ] fsssvc C:\Program Files\Windows Live\Family Safety\fsssvc.exe
19:23:53.0291 0x1344 fsssvc - ok
19:23:53.0323 0x1344 [ B972A66758577E0BFD1DE0F91AAA27B5, E934034F3F740A83D4E7ABCD2C581845AC2945B0BCCAACF65CC3F99A1DBDE455 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
19:23:53.0338 0x1344 Fs_Rec - ok
19:23:53.0369 0x1344 [ 34582A6E6573D54A07ECE5FE24A126B5, 5F45DC38F8015AD90616EAD3B57820CCD284938A96B2C4E1FF5FC7BDEE8A848D ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
19:23:53.0385 0x1344 gagp30kx - ok
19:23:53.0416 0x1344 [ 93CA4D9A0433BE0EDD0B9F2F26D5E54C, ACD6BBB639CAF092809927F84F5693B7BA11080684A4993029D713ACF67D4C79 ] ggflt C:\Windows\system32\DRIVERS\ggflt.sys
19:23:53.0432 0x1344 ggflt - ok
19:23:53.0447 0x1344 [ 17E678AAB82CCDFB80E7614504933895, 43935C8C5C30DA415957B789DC9FA10721C240C603DC8733D9B791A2F58BE1BD ] ggsemc C:\Windows\system32\DRIVERS\ggsemc.sys
19:23:53.0463 0x1344 ggsemc - ok
19:23:53.0541 0x1344 [ 9F5F2F0FB0A7F5AA9F16B9A7B6DAD89F, 6D2B301E77839FFF1C74425B37D02C3F3837CE50E856C21AE4CF7ABABB04ADDC ] GoogleDesktopManager-051210-111108 C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
19:23:53.0541 0x1344 GoogleDesktopManager-051210-111108 - ok
19:23:53.0603 0x1344 [ CD5D0AEEE35DFD4E986A5AA1500A6E66, DCED5126837292593F1C1B35DF18E3B631D6C0C6D0742B77C7B7742C55A7825F ] gpsvc C:\Windows\System32\gpsvc.dll
19:23:53.0681 0x1344 gpsvc - ok
19:23:53.0759 0x1344 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
19:23:53.0759 0x1344 gupdate - ok
19:23:53.0775 0x1344 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
19:23:53.0775 0x1344 gupdatem - ok
19:23:53.0822 0x1344 [ C1B577B2169900F4CF7190C39F085794, 73E104B96A48F4C80D8C37254ECB0891D15C0D2F0C251B57C168F90D60316447 ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
19:23:53.0822 0x1344 gusvc - ok
19:23:53.0884 0x1344 [ CB04C744BE0A61B1D648FAED182C3B59, 61DC0FF94325DAFCCB7B3980A48727EFBF1283FCF753EC16EF04C730525994C0 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
19:23:53.0915 0x1344 HdAudAddService - ok
19:23:53.0978 0x1344 [ 062452B7FFD68C8C042A6261FE8DFF4A, DD9873502456D3C058C6177AC223B28C71370E624FA0814C17EA3D93201F2B56 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
19:23:54.0009 0x1344 HDAudBus - ok
19:23:54.0025 0x1344 [ 1338520E78D90154ED6BE8F84DE5FCEB, 8531F1C5856983EBDA4C2B70162645ECE72FFFBA9FE7A28BCEDDF2169B7ECF9D ] HidBth C:\Windows\system32\drivers\hidbth.sys
19:23:54.0040 0x1344 HidBth - ok
19:23:54.0087 0x1344 [ FF3160C3A2445128C5A6D9B076DA519E, DC1A70C80CD55F33B3AD5A21E86AF7C3086D8CC2DC6148C058E74A871E0BAD4A ] HidIr C:\Windows\system32\drivers\hidir.sys
19:23:54.0103 0x1344 HidIr - ok
19:23:54.0134 0x1344 [ 84067081F3318162797385E11A8F0582, 11E32E3800CFCA37354388243F88D0239D622891BAC5483518A2BE5D1CA19015 ] hidserv C:\Windows\system32\hidserv.dll
19:23:54.0196 0x1344 hidserv - ok
19:23:54.0212 0x1344 [ CCA4B519B17E23A00B826C55716809CC, 91AD0758A6185B0FBBE383BDB1B457FFB850477AFF8DE040DE9527A97D28EF62 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
19:23:54.0227 0x1344 HidUsb - ok
19:23:54.0274 0x1344 [ D8AD255B37DA92434C26E4876DB7D418, C901EADDD93FC90C8F29F4B6DE808F8E4F486C877FC0AA27DA4ACDE17E28899D ] hkmsvc C:\Windows\system32\kmsvc.dll
19:23:54.0352 0x1344 hkmsvc - ok
19:23:54.0383 0x1344 [ 16EE7B23A009E00D835CDB79574A91A6, 964AFE7D2F7E48C7DE7FDAB48F57ADC4AD44A0B2A9A03071E0E8D334007E5572 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
19:23:54.0399 0x1344 HpCISSs - ok
19:23:54.0461 0x1344 [ F870AA3E254628EBEAFE754108D664DE, B0444E7D246AA1982094030ACB991690F6A7DD3FB07B1BB6A1BC0F3AA9718A70 ] HTTP C:\Windows\system32\drivers\HTTP.sys
19:23:54.0493 0x1344 HTTP - ok
19:23:54.0524 0x1344 [ C6B032D69650985468160FC9937CF5B4, 4D5A944C70037F35A9DBA4F49F174455FA80ED7EAEDAA143F0A2C0E05AE585D8 ] i2omp C:\Windows\system32\drivers\i2omp.sys
19:23:54.0539 0x1344 i2omp - ok
19:23:54.0586 0x1344 [ 22D56C8184586B7A1F6FA60BE5F5A2BD, D96A2962848C1F59B143BFEC22EC48BD1C5A75D0EBCFD7FB965E66B85FF7D8CA ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
19:23:54.0602 0x1344 i8042prt - ok
19:23:54.0649 0x1344 [ 8EF427C54497C5F8A7A645990E4278C7, 3890391A489DAAFE155345C2E16BE17DF1E3E23DEE73EE849A7F96132AE65417 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
19:23:54.0680 0x1344 iaStor - ok
19:23:54.0695 0x1344 [ 54155EA1B0DF185878E0FC9EC3AC3A14, 344A0793499261D2E4FF2FCCC70501329485F8E299EBC68953D07BA86F0D4729 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
19:23:54.0727 0x1344 iaStorV - ok
19:23:54.0820 0x1344 [ 98477B08E61945F974ED9FDC4CB6BDAB, C7E8F661F6FBF6AB493E950D2E70363496E155B1838CE7B490B981BD840B04FC ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
19:23:54.0867 0x1344 idsvc - ok
19:23:54.0898 0x1344 [ 2D077BF86E843F901D8DB709C95B49A5, 78FF558A881F307858F5C7C74A748B8B2562AF3CAC7EA8639945609001D790CE ] iirsp C:\Windows\system32\drivers\iirsp.sys
19:23:54.0914 0x1344 iirsp - ok
19:23:54.0976 0x1344 [ 4687EE0C0DD2CE5F7AAA9C2E33C1DC78, FA8EBED2778D9F7560ADC1B563954EEF98AAE651C0553F2803372B37B122AEB3 ] IKEEXT C:\Windows\System32\ikeext.dll
19:23:55.0054 0x1344 IKEEXT - ok
19:23:55.0226 0x1344 [ C3C499A704A2D7958D9D7E5A9DB60CE4, 095F7748FB7004A7DF3CE0689F9646303C5E2D69CD1DF23EA1EF6D3399773982 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
19:23:55.0351 0x1344 IntcAzAudAddService - ok
19:23:55.0382 0x1344 [ 83AA759F3189E6370C30DE5DC5590718, 7406FE41EA8FB80052517318CB72E2641E92E579FAFAF5E8DDDFF0BF8DAE773A ] intelide C:\Windows\system32\drivers\intelide.sys
19:23:55.0397 0x1344 intelide - ok
19:23:55.0491 0x1344 [ 224191001E78C89DFA78924C3EA595FF, E4EC9CAAEEEAEB30E13F4A8023AF687F29514667380DDFD638BBFFF1D5FC2563 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
19:23:55.0507 0x1344 intelppm - ok
19:23:55.0631 0x1344 [ 9AC218C6E6105477484C6FDBE7D409A4, FF30D09CD2A0F5BBEC309E953370F194B6F26BF4227E627B594AAA48B0F5D3C2 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
19:23:55.0725 0x1344 IPBusEnum - ok
19:23:55.0756 0x1344 [ 62C265C38769B864CB25B4BCF62DF6C3, CAF6BCE967104233E216464E4729B0275C3BD426D812F404AB0EE83A7F2063D8 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:23:55.0772 0x1344 IpFilterDriver - ok
19:23:55.0819 0x1344 [ 1998BD97F950680BB55F55A7244679C2, A4E8BB4C6B2AF4800BD5E0BA8725FD0927F8FB6751AEBF6DD16B59C414CCB9D8 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
19:23:55.0881 0x1344 iphlpsvc - ok
19:23:55.0897 0x1344 IpInIp - ok
19:23:55.0943 0x1344 [ B25AAF203552B7B3491139D582B39AD1, EA9C38F512F40FF12975A6719E6FE4D7EA93A4B2497103E0FDA5A4CD6033C0A6 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
19:23:55.0959 0x1344 IPMIDRV - ok
19:23:56.0006 0x1344 [ 8793643A67B42CEC66490B2A0CF92D68, 8B1ED1314E4C6623824DD6B9C15A0F7F996F4D243BF0B305421251BE40850907 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
19:23:56.0021 0x1344 IPNAT - ok
19:23:56.0037 0x1344 [ 109C0DFB82C3632FBD11949B73AEEAC9, 73B01426100256B7110DF0B74483AF1B62FC209612EEC29A7BF6DC31A7FBEFB6 ] IRENUM C:\Windows\system32\drivers\irenum.sys
19:23:56.0068 0x1344 IRENUM - ok
19:23:56.0099 0x1344 [ 6C70698A3E5C4376C6AB5C7C17FB0614, 10FBCBA5A74AF5D136B152FD4D3DFA2A1F2CEBC3F979D5BA6DB98B3DCB2F7A07 ] isapnp C:\Windows\system32\drivers\isapnp.sys
19:23:56.0115 0x1344 isapnp - ok
19:23:56.0177 0x1344 [ 232FA340531D940AAC623B121A595034, 90C93F04D8A0094EEBD118F10223605B8169DA5F24C466F503CED5C014BD17B1 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
19:23:56.0193 0x1344 iScsiPrt - ok
19:23:56.0224 0x1344 [ BCED60D16156E428F8DF8CF27B0DF150, 4934E9AB8A8A548548F0C63517F2BF4DE84B05E5C9C7C2AA6C1517B8F9C340D4 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
19:23:56.0240 0x1344 iteatapi - ok
19:23:56.0271 0x1344 [ 06FA654504A498C30ADCA8BEC4E87E7E, 651BC35A0A3D504573BBAB40DE81929BB18C9FC0CD7944FEAE0E99CD7658EA88 ] iteraid C:\Windows\system32\drivers\iteraid.sys
19:23:56.0287 0x1344 iteraid - ok
19:23:56.0318 0x1344 [ 37605E0A8CF00CBBA538E753E4344C6E, B9A9FFDCE45B0830E277CF322C28ACB49372C16144B0F676B283BE5DAE9A7F30 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
19:23:56.0333 0x1344 kbdclass - ok
19:23:56.0365 0x1344 [ EDE59EC70E25C24581ADD1FBEC7325F7, 41B37778E9A12675FC0DF74606AAF18C652EB88513B3C4889C5C512E14587CEE ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
19:23:56.0380 0x1344 kbdhid - ok
19:23:56.0411 0x1344 [ 27BD4AC228EF6C0D490617C32E86A672, A2259B4E78AE5D3158B0FC4F3694EEF9825B9FF782F09ED828E80E7B23E07D16 ] kbfiltr C:\Windows\system32\DRIVERS\kbfiltr.sys
19:23:56.0443 0x1344 kbfiltr - ok
19:23:56.0458 0x1344 [ A3E186B4B935905B829219502557314E, 7F58EAC6C12208D792C77014AC9D37AD1A7B2E73863C914F5DA831A72E1D52BB ] KeyIso C:\Windows\system32\lsass.exe
19:23:56.0536 0x1344 KeyIso - ok
19:23:56.0645 0x1344 [ 4A1445EFA932A3BAF5BDB02D7131EE20, 9DD262ED72DF268FE024063788F54124E320D0775D8DC0C5CAD099CD5F655DA2 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
19:23:56.0692 0x1344 KSecDD - ok
19:23:56.0755 0x1344 [ 8078F8F8F7A79E2E6B494523A828C585, BB399993166853F0C01B7508649ECD7E7473238267BA8333D0441128FE656347 ] KtmRm C:\Windows\system32\msdtckrm.dll
19:23:56.0848 0x1344 KtmRm - ok
19:23:56.0895 0x1344 [ 1BF5EEBFD518DD7298434D8C862F825D, F41C79410345C40B346EB5EDEA397ECD29ECB9B921AC3E19F9453E52A7B9288A ] LanmanServer C:\Windows\system32\srvsvc.dll
19:23:57.0035 0x1344 LanmanServer - ok
19:23:57.0098 0x1344 [ 1DB69705B695B987082C8BAEC0C6B34F, D395B272F6B69D4A9FC3CDEFD812EF0DBFECF3C1B1C787C7CC1E1A1B091B8DB3 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:23:57.0269 0x1344 LanmanWorkstation - ok
19:23:57.0347 0x1344 [ ABF90FC5A127F481219B873C1B8DFC1C, 465188183B2848C11743B2A6B987B307D30F636E4958E60766336479473DD121 ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
19:23:57.0363 0x1344 LightScribeService - ok
19:23:57.0394 0x1344 [ D1C5883087A0C3F1344D9D55A44901F6, 608D67357AFDDD538D2C12C93EB0793ECA4EB3AF2BAB779E881C41F50E4AB911 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
19:23:57.0425 0x1344 lltdio - ok
19:23:57.0472 0x1344 [ 2D5A428872F1442631D0959A34ABFF63, E532C6ECFFB936EFF744CA57BDC6394C89E797B6B0822D04F1F3F35D9BDDD4F0 ] lltdsvc C:\Windows\System32\lltdsvc.dll
19:23:57.0581 0x1344 lltdsvc - ok
19:23:57.0613 0x1344 [ 35D40113E4A5B961B6CE5C5857702518, 453097AEF46ED48107395D9A1696AAC259FD6CEA8A655D38C5E246FDDAB81664 ] lmhosts C:\Windows\System32\lmhsvc.dll
19:23:57.0691 0x1344 lmhosts - ok
19:23:57.0722 0x1344 [ C7E15E82879BF3235B559563D4185365, 98C9268ADF6BAEB0522BB84BE6C98D0D6D5EB4BD27BB61412D208232164C8435 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
19:23:57.0753 0x1344 LSI_FC - ok
19:23:57.0800 0x1344 [ EE01EBAE8C9BF0FA072E0FF68718920A, 655924440E611278998226299645BC72B3627A8A057286DC8D65A162CFBBE484 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
19:23:57.0815 0x1344 LSI_SAS - ok
19:23:57.0893 0x1344 [ 912A04696E9CA30146A62AFA1463DD5C, 1D336D47B9D1C8449F29CDB776C092235E3D70CE53D9440970533E376EB004D3 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
19:23:57.0909 0x1344 LSI_SCSI - ok
19:23:57.0940 0x1344 [ 8F5C7426567798E62A3B3614965D62CC, 659810257D942C5F4168E1247868CDA990F2324AC9ACAA9A6211F64B7AC9EC6E ] luafv C:\Windows\system32\drivers\luafv.sys
19:23:57.0971 0x1344 luafv - ok
19:23:58.0018 0x1344 [ 8039F480C192DD99FED4EBC71FFBF795, D02A1E4AAD5413B8F154E21C5B2C8FDD18F10A01197F44792BBDC1651E06F2A8 ] lullaby C:\Windows\system32\DRIVERS\lullaby.sys
19:23:58.0034 0x1344 lullaby - ok
19:23:58.0096 0x1344 [ D8C0B2EB928D57C928522EFF500C4BA8, B7261AB2DD262140489087C1A8F1A1DA5EE6373D453E5BC8A3F7B93A5540CE6C ] ManyCam C:\Windows\system32\DRIVERS\mcvidrv.sys
19:23:58.0112 0x1344 ManyCam - ok
19:23:58.0159 0x1344 [ 4470E3C1E0C3378E4CAB137893C12C3A, CA8E66356F0E671D5454E561E7EAD74DE25DCF53BE452369F96ECACFA8709489 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
19:23:58.0174 0x1344 MBAMProtector - ok
19:23:58.0330 0x1344 [ 65085456FD9A74D7F1A999520C299ECB, EA564BC913EF1B8A4CAA9242FC70F525B68CF1F3CA462F63B0B7215B93FE8530 ] MBAMScheduler C:\Users\shaleman\Desktop\Malwarebytes' Anti-Malware\mbamscheduler.exe
19:23:58.0346 0x1344 MBAMScheduler - ok
19:23:58.0439 0x1344 [ E0D7732F2D2E24B2DB3F67B6750295B8, AA5CA86AF1ACEC900F60339016B3DC55472DB40ADB99186005A7ABE67B7D66FC ] MBAMService C:\Users\shaleman\Desktop\Malwarebytes' Anti-Malware\mbamservice.exe
19:23:58.0471 0x1344 MBAMService - ok
19:23:58.0502 0x1344 [ DFAA87E30868FE4CB7D335837A4BF39C, 7BB65D4DC5CA2A4B4FE531F23E217CFA8BCFFE20E78BF18B04486345FC1E0B6E ] mcaudrv_simple C:\Windows\system32\drivers\mcaudrv.sys
19:23:58.0517 0x1344 mcaudrv_simple - ok
19:23:58.0595 0x1344 [ AEF9BABB8A506BC4CE0451A64AADED46, D5608A703EA7E97F11ED4D029B4B820440B0C9317DB7D7DC0152253CD723DC07 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
19:23:58.0689 0x1344 Mcx2Svc - ok
19:23:58.0736 0x1344 [ 0001CE609D66632FA17B84705F658879, D5F9758BDC2B733307B565A74B33F5581FB425A5A9F32CCFA307DA1569EBD6CD ] megasas C:\Windows\system32\drivers\megasas.sys
19:23:58.0751 0x1344 megasas - ok
19:23:58.0829 0x1344 [ C252F32CD9A49DBFC25ECF26EBD51A99, 47EC8F475AB62A00FAF989CD2C3ABDF2922588F75CC15C83CD99A62EF6400FB0 ] MegaSR C:\Windows\system32\drivers\megasr.sys
19:23:58.0876 0x1344 MegaSR - ok
19:23:58.0970 0x1344 [ 123271BD5237AB991DC5C21FDF8835EB, 004F8F9228EE291A0E36CE33078D572D61733516F9AA5CFC832AF204C6869E89 ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
19:23:58.0985 0x1344 Microsoft Office Groove Audit Service - ok
19:23:59.0017 0x1344 [ 1076FFCFFAAE8385FD62DFCB25AC4708, 8C5C106FCB018E019DEBA8E1A6AA170CD7A93293F27994F724EBC486238DA0AA ] MMCSS C:\Windows\system32\mmcss.dll
19:23:59.0110 0x1344 MMCSS - ok
19:23:59.0157 0x1344 [ E13B5EA0F51BA5B1512EC671393D09BA, 5B380D1B435D809CA201FD5ED075D42F3C6BA1A4EEDBC4040F7E3329F05A334A ] Modem C:\Windows\system32\drivers\modem.sys
19:23:59.0173 0x1344 Modem - ok
19:23:59.0219 0x1344 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8, 1E8031D51E074FDFB53E98E26DABF313B901C028D01196BFD402EED5D0A89595 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
19:23:59.0251 0x1344 monitor - ok
19:23:59.0282 0x1344 [ 5BF6A1326A335C5298477754A506D263, CC7F58E5955A448F6CE28D6D8EB98C7479E11F931B5C733CFE71A29B2E95923D ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
19:23:59.0297 0x1344 mouclass - ok

[shaleman]

tdss 2:
19:23:59.0329 0x1344 [ 93B8D4869E12CFBE663915502900876F, 7464DE60FAAD8793D855F1F86C3C865B3A3EE41C19A3E926D1BE4426E67F5EC2 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
19:23:59.0344 0x1344 mouhid - ok
19:23:59.0375 0x1344 [ BDAFC88AA6B92F7842416EA6A48E1600, 2CA8A7BB260016D6B7953980A94C45A3C5D41F7DC7E73EEFB1C18EA144749503 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
19:23:59.0391 0x1344 MountMgr - ok
19:23:59.0453 0x1344 [ E05FD9D5854A26A13D7F138F02BF2420, 89A6D90B8DB65565C1DAF9A1584C68989A1F4937D705182DA6E3B72E14A30DEA ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
19:23:59.0469 0x1344 MozillaMaintenance - ok
19:23:59.0531 0x1344 [ 511D011289755DD9F9A7579FB0B064E6, 1FD0D0D5B6E08FE06F7A5D0821BCD859B0F98A6DEA58AAB7FB6C95B64212FFC8 ] mpio C:\Windows\system32\drivers\mpio.sys
19:23:59.0547 0x1344 mpio - ok
19:23:59.0578 0x1344 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E, 62055C0DCEB69873B8961AB17DBD002F44319A44CB05EC3A61421A0C6D4736CD ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
19:23:59.0594 0x1344 mpsdrv - ok
19:23:59.0656 0x1344 [ 5DE62C6E9108F14F6794060A9BDECAEC, 655E6645CC4A1EDBE5F51F5F80C7B504DD956851E788A6E4E4E08CDCDCE160D9 ] MpsSvc C:\Windows\system32\mpssvc.dll
19:23:59.0765 0x1344 MpsSvc - ok
19:23:59.0812 0x1344 [ 4FBBB70D30FD20EC51F80061703B001E, 72907A0CA5CFF82F40C02A65CD8EFD51D7CFC33BE67DE572D1ACF4FD3B248F0A ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
19:23:59.0828 0x1344 Mraid35x - ok
19:23:59.0906 0x1344 [ 82CEA0395524AACFEB58BA1448E8325C, 16E37990A291C848DE35F48EA7E09AE5B258AE589EB08A3FA2C60DC1278DE182 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
19:23:59.0937 0x1344 MRxDAV - ok
19:23:59.0999 0x1344 [ 1E94971C4B446AB2290DEB71D01CF0C2, 4701AA1B419AEF735CB2DA34532B0F1844433272C36D79F4EB55807E39B923D1 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
19:24:00.0015 0x1344 mrxsmb - ok
19:24:00.0093 0x1344 [ 4FCCB34D793B116423209C0F8B7A3B03, 7A483AEB691ADBE82779F12F0BB1CCCBFFD7E92902EC1ADC99AB7D129F887143 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:24:00.0124 0x1344 mrxsmb10 - ok
19:24:00.0155 0x1344 [ C3CB1B40AD4A0124D617A1199B0B9D7C, B975A39DE6D324C6274B6E3B883F36082A958F028335CEB3A37F44481EB284B3 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:24:00.0171 0x1344 mrxsmb20 - ok
19:24:00.0218 0x1344 [ 28023E86F17001F7CD9B15A5BC9AE07D, FC7EAA592C5F796E3BCD7F7EF261709CD899B33FC8486E594A480F143D0D6320 ] msahci C:\Windows\system32\drivers\msahci.sys
19:24:00.0233 0x1344 msahci - ok
19:24:00.0280 0x1344 [ 4468B0F385A86ECDDAF8D3CA662EC0E7, EAEDC9CDD2EEC5000AF8190A4BE7729282576C3F88E64FDF57F455F5CECC81C9 ] msdsm C:\Windows\system32\drivers\msdsm.sys
19:24:00.0311 0x1344 msdsm - ok
19:24:00.0343 0x1344 [ FD7520CC3A80C5FC8C48852BB24C6DED, C3F3D7A07FAB9AF38A2A00BF0DF6EEE18CA8FE26277BEC9D8ADB793F2CD5EC1F ] MSDTC C:\Windows\System32\msdtc.exe
19:24:00.0421 0x1344 MSDTC - ok
19:24:00.0467 0x1344 [ A9927F4A46B816C92F461ACB90CF8515, 753284F726F9B4D3E7322C75532244CA43714F00717C2019391FB36DEE0738C0 ] Msfs C:\Windows\system32\drivers\Msfs.sys
19:24:00.0483 0x1344 Msfs - ok
19:24:00.0545 0x1344 [ 0F400E306F385C56317357D6DEA56F62, C48FA8193787359902D20D869F5F602CD66D3C5D061A58DDB72F51EED433C4BC ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
19:24:00.0577 0x1344 msisadrv - ok
19:24:00.0639 0x1344 [ 85466C0757A23D9A9AECDC0755203CB2, 79141B8DF9D7470466872AF03A85C3D3976512BFDBDB8B92A22225DC8EFD70A6 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
19:24:00.0701 0x1344 MSiSCSI - ok
19:24:00.0701 0x1344 msiserver - ok
19:24:00.0748 0x1344 [ D8C63D34D9C9E56C059E24EC7185CC07, D0CBFB8D57E6D908679DC0488ED659CA35B92626DEA890873E165F051A1AD2AE ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
19:24:00.0764 0x1344 MSKSSRV - ok
19:24:00.0811 0x1344 [ 1D373C90D62DDB641D50E55B9E78D65E, 1D4897A96EA54D6FAC7916D69B4E88CAE1397C38CC8FAE08554772808476357B ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
19:24:00.0842 0x1344 MSPCLOCK - ok
19:24:00.0904 0x1344 [ B572DA05BF4E098D4BBA3A4734FB505B, B7923F204CEADD0F62C2FE4B7CF8C56DAB70F88093B15C5692D0E61490CF4BAA ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
19:24:00.0935 0x1344 MSPQM - ok
19:24:01.0013 0x1344 [ B49456D70555DE905C311BCDA6EC6ADB, 8E40586B3A1FAE9996459E0261726C9DD6A8D5F575604868C45604613385C92F ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
19:24:01.0045 0x1344 MsRPC - ok
19:24:01.0091 0x1344 [ E384487CB84BE41D09711C30CA79646C, 520391DEE14D4D6C1EA99C7D31DD95D56B44D54CA3CD8E5C9855E9C0A04F026C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
19:24:01.0107 0x1344 mssmbios - ok
19:24:01.0123 0x1344 [ 7199C1EEC1E4993CAF96B8C0A26BD58A, DD02DF8ED7AF5BB88BD2A91F38CE4C52432CB8044BDCBC41C320CD22B10B8A3B ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
19:24:01.0154 0x1344 MSTEE - ok
19:24:01.0169 0x1344 [ 97AFFA9D95FFE20EEE6229BC6BE166CF, 6E13230AF96A3A5C518EFA21B9B1833E3DE9D6DA05A6E664E305EF18B162E1B9 ] MTsensor C:\Windows\system32\DRIVERS\ATKACPI.sys
19:24:01.0169 0x1344 MTsensor - ok
19:24:01.0216 0x1344 [ 6A57B5733D4CB702C8EA4542E836B96C, 080FB0B01E949D24CDD6876125B3A72DA9F88845D8B9A1A425BCA99E7ACF6821 ] Mup C:\Windows\system32\Drivers\mup.sys
19:24:01.0247 0x1344 Mup - ok
19:24:01.0279 0x1344 [ E4EAF0C5C1B41B5C83386CF212CA9584, 5946C3DCE65A0DB164169A1775DFCA544AF4E1895ADF6916BB1653F373F8D9AF ] napagent C:\Windows\system32\qagentRT.dll
19:24:01.0419 0x1344 napagent - ok
19:24:01.0466 0x1344 [ 85C44FDFF9CF7E72A40DCB7EC06A4416, DC37C99C458CA69B33BFD3894187089E947F4F9C01EC2ED024FA8614989E0956 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
19:24:01.0497 0x1344 NativeWifiP - ok
19:24:01.0575 0x1344 [ 1357274D1883F68300AEADD15D7BBB42, EE6352CBF0D9D633816F338159CDA27F1A805C3DDC3402D8605B50D8F3CD3300 ] NDIS C:\Windows\system32\drivers\ndis.sys
19:24:01.0622 0x1344 NDIS - ok
19:24:01.0653 0x1344 [ 0E186E90404980569FB449BA7519AE61, DE41791D9D3074007D6DD1D3933E7A2A13E3789D0AD4F029105B58279622FC1B ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
19:24:01.0684 0x1344 NdisTapi - ok
19:24:01.0700 0x1344 [ D6973AA34C4D5D76C0430B181C3CD389, 7C303F3D6BFF8B82E39998135B444837091AB1F9EB8F28D013E5EF45DB237EFC ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
19:24:01.0731 0x1344 Ndisuio - ok
19:24:01.0793 0x1344 [ 818F648618AE34F729FDB47EC68345C3, 5FC8F9237BD7FCE3C62D5BDDD49DC104BE2BECDC2FA8CDC1DB8F1891CBAA9140 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
19:24:01.0825 0x1344 NdisWan - ok
19:24:01.0856 0x1344 [ 71DAB552B41936358F3B541AE5997FB3, 30A8B3E33CBF04FC047254E404C0321F9028F2640036AA8AC1EA0A5E64551684 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
19:24:01.0887 0x1344 NDProxy - ok
19:24:01.0903 0x1344 [ BCD093A5A6777CF626434568DC7DBA78, 2A283DD93230361204EA0897864EAF0224CB8C02E025AE2E4237B07A598B3EBD ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
19:24:01.0934 0x1344 NetBIOS - ok
19:24:01.0981 0x1344 [ ECD64230A59CBD93C85F1CD1CAB9F3F6, 83650D756C1F2768A2AAAFC7924F2A4316ABAEB1708F4B05803CDDD699B5AB6F ] netbt C:\Windows\system32\DRIVERS\netbt.sys
19:24:02.0012 0x1344 netbt - ok
19:24:02.0043 0x1344 [ A3E186B4B935905B829219502557314E, 7F58EAC6C12208D792C77014AC9D37AD1A7B2E73863C914F5DA831A72E1D52BB ] Netlogon C:\Windows\system32\lsass.exe
19:24:02.0121 0x1344 Netlogon - ok
19:24:02.0168 0x1344 [ C8052711DAECC48B982434C5116CA401, 417DEB86D157DD3F0B4678410FE27FDD3E8FA04AB03AF398F6C02BF207070B35 ] Netman C:\Windows\System32\netman.dll
19:24:02.0277 0x1344 Netman - ok
19:24:02.0355 0x1344 [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetMsmqActivator c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
19:24:02.0371 0x1344 NetMsmqActivator - ok
19:24:02.0402 0x1344 [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetPipeActivator c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
19:24:02.0417 0x1344 NetPipeActivator - ok
19:24:02.0511 0x1344 [ 2EF3BBE22E5A5ACD1428EE387A0D0172, 55DB91EDD0339D2434C06445F8A716A48EA90925B0FF7EBF45BB79D4B54B80BF ] netprofm C:\Windows\System32\netprofm.dll
19:24:02.0620 0x1344 netprofm - ok
19:24:02.0698 0x1344 [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetTcpActivator c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
19:24:02.0714 0x1344 NetTcpActivator - ok
19:24:02.0729 0x1344 [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetTcpPortSharing c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
19:24:02.0745 0x1344 NetTcpPortSharing - ok
19:24:02.0792 0x1344 [ 2E7FB731D4790A1BC6270ACCEFACB36E, EE9A00B694E8A3A5842CDC56C7BA1364317AC8134E046A0059661D057094B1A3 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
19:24:02.0823 0x1344 nfrd960 - ok
19:24:02.0963 0x1344 [ 2997B15415F9BBE05B5A4C1C85E0C6A2, 5455536515FE740E18E090329FDCC40288724372AD18ACDB2CB4BB9D85CF681E ] NlaSvc C:\Windows\System32\nlasvc.dll
19:24:03.0057 0x1344 NlaSvc - ok
19:24:03.0135 0x1344 [ D36F239D7CCE1931598E8FB90A0DBC26, DF9397411D0CE5A87E3346D4E6E25BEC537A21BCE196CC55FD999CD08FC4A637 ] Npfs C:\Windows\system32\drivers\Npfs.sys
19:24:03.0166 0x1344 Npfs - ok
19:24:03.0244 0x1344 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD, 15CA178518EB3D457AA4C109D97A8490821590842AE4E9841703B5A55870C8F6 ] nsi C:\Windows\system32\nsisvc.dll
19:24:03.0353 0x1344 nsi - ok
19:24:03.0416 0x1344 [ 609773E344A97410CE4EBF74A8914FCF, 90B9CBD2B62854DD503DE4A910CB987D402368EB99882FE20FFB6DEACD70F2BD ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
19:24:03.0447 0x1344 nsiproxy - ok
19:24:03.0759 0x1344 [ 2C1121F2B87E9A6B12485DF53CD848C7, E580428F3BA7B201C6C7CFADF1F44A6ECA4F589EDB034DA14260136236195936 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
19:24:03.0837 0x1344 Ntfs - ok
19:24:03.0899 0x1344 [ E875C093AEC0C978A90F30C9E0DFBB72, D3A480CD7EF374EFBC1BB831B33B81534774DDDBB0FB338BEE1D444949FD8DE7 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
19:24:03.0931 0x1344 ntrigdigi - ok
19:24:03.0977 0x1344 [ C5DBBCDA07D780BDA9B685DF333BB41E, 3652893DFF05469A273C3073D8D0A9D6D6BBDEC7855FEA8EAB768F95BA674108 ] Null C:\Windows\system32\drivers\Null.sys
19:24:03.0993 0x1344 Null - ok
19:24:04.0071 0x1344 [ 77F9F9A199B87FE3F852E12F5419240B, BE9C05F2AC12BB41EC71A596039F2116E5A0F454D32E5A618112296721001473 ] NVHDA C:\Windows\system32\drivers\nvhda32v.sys
19:24:04.0102 0x1344 NVHDA - ok
19:24:05.0147 0x1344 [ 2FA5434344AF84D73F66BA402FF78690, D244C9BA5C9A582C17AA5DE3BE78A2C177AC2CEE5EE6C0E62A52AED7C51B0FB1 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
19:24:05.0693 0x1344 nvlddmkm - ok
19:24:05.0771 0x1344 [ 2EDF9E7751554B42CBB60116DE727101, 37A0AA78E83DBB5A788F7F067EB71DDF6CCC72A66BB41B209E1A5E2F68F8AF9B ] nvraid C:\Windows\system32\drivers\nvraid.sys
19:24:05.0787 0x1344 nvraid - ok
19:24:05.0818 0x1344 [ ABED0C09758D1D97DB0042DBB2688177, 84B9BF886EF9181915E8AB6D971446BC681E6DE4485DBECD62838EAFA10E7F46 ] nvstor C:\Windows\system32\drivers\nvstor.sys
19:24:05.0849 0x1344 nvstor - ok
19:24:05.0927 0x1344 [ B785320CBCF5021DE9945C803696C511, 01D374F6F0EEA385A25DA375EDDD83F5F6F3FEC6D5C3F844AE2DDE75C451A623 ] nvsvc C:\Windows\system32\nvvsvc.exe
19:24:06.0052 0x1344 nvsvc - ok
19:24:06.0349 0x1344 [ D2B064796C369F82E96397F721C4A29D, 49A9E7DBCFFE5C8D0B22088193277366BAEA7D6CF51894BD4030F7C96275237B ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
19:24:06.0395 0x1344 nvUpdatusService - ok
19:24:06.0473 0x1344 [ 18BBDF913916B71BD54575BDB6EEAC0B, 5FBA165149AB09E869DCE35622E91CFC964BDD22B31A5E76CF12F1565402B207 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
19:24:06.0505 0x1344 nv_agp - ok
19:24:06.0520 0x1344 NwlnkFlt - ok
19:24:06.0536 0x1344 NwlnkFwd - ok
19:24:06.0676 0x1344 [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
19:24:06.0692 0x1344 odserv - ok
19:24:06.0739 0x1344 [ 6F310E890D46E246E0E261A63D9B36B4, 7050B0C43CC0DF2DDAD3EB8D2FF9EEE425A627C68654CBB154D55A4B1A47AA08 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
19:24:06.0770 0x1344 ohci1394 - ok
19:24:06.0848 0x1344 [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:24:06.0848 0x1344 ose - ok
19:24:07.0019 0x1344 [ 0C8E8E61AD1EB0B250B846712C917506, 8F23657B90BFFCD7273B93EDA2D3768F35C1C5A313F22AE33452BE3B2A550649 ] p2pimsvc C:\Windows\system32\p2psvc.dll
19:24:07.0160 0x1344 p2pimsvc - ok
19:24:07.0269 0x1344 [ 0C8E8E61AD1EB0B250B846712C917506, 8F23657B90BFFCD7273B93EDA2D3768F35C1C5A313F22AE33452BE3B2A550649 ] p2psvc C:\Windows\system32\p2psvc.dll
19:24:07.0409 0x1344 p2psvc - ok
19:24:07.0456 0x1344 [ 0FA9B5055484649D63C303FE404E5F4D, ABF357001A5E7B21621560E74FA538E2D899C5111A6AAC784B5B12D9D819C6CD ] Parport C:\Windows\system32\drivers\parport.sys
19:24:07.0487 0x1344 Parport - ok
19:24:07.0550 0x1344 [ B9C2B89F08670E159F7181891E449CD9, BD48CE95CF4B75D1FD5FD379B2A8727BC000F2B6748B77636C6BDB0B37B0344A ] partmgr C:\Windows\system32\drivers\partmgr.sys
19:24:07.0581 0x1344 partmgr - ok
19:24:07.0643 0x1344 [ 4F9A6A8A31413180D0FCB279AD5D8112, DCE48BC6E3447403521BB9FBF727E629DEE45B69B8AE8CFEE1A67FECAE3CB9D3 ] Parvdm C:\Windows\system32\drivers\parvdm.sys
19:24:07.0675 0x1344 Parvdm - ok
19:24:07.0706 0x1344 [ C6276AD11F4BB49B58AA1ED88537F14A, 409E956AF994640DF8D062E5E41F87A6EE7EEE0335C191B582722A49322357CE ] PcaSvc C:\Windows\System32\pcasvc.dll
19:24:07.0831 0x1344 PcaSvc - ok
19:24:07.0877 0x1344 [ 941DC1D19E7E8620F40BBC206981EFDB, 156142A8B587131D2D47074CBFD0A31F69B3C27A8C74C8C4F29DFE7B53BBA802 ] pci C:\Windows\system32\drivers\pci.sys
19:24:07.0909 0x1344 pci - ok
19:24:07.0955 0x1344 [ FC175F5DDAB666D7F4D17449A547626F, 7D6108213D1AD3F97A3B83E491BCCC7D6F5BC72C32A182BDDE8736851A26C8D2 ] pciide C:\Windows\system32\drivers\pciide.sys
19:24:07.0987 0x1344 pciide - ok
19:24:08.0033 0x1344 [ E6F3FB1B86AA519E7698AD05E58B04E5, 2C4B45DDD3B980C9DAA6F039CAEFCD6E84A4D5BB43AFBA73C0C42B5556C1303C ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
19:24:08.0065 0x1344 pcmcia - ok
19:24:08.0143 0x1344 [ 6349F6ED9C623B44B52EA3C63C831A92, 9EAA3ABD396870123107D6E1B758F56FDA378BD28B28DB8415AA470D24294F92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
19:24:08.0205 0x1344 PEAUTH - ok
19:24:08.0283 0x1344 [ 836C1EA14C8B7BE87B69747BDBBCAD7C, D2EDA5E2045809F33349FDF817CCD73E38FE035BA3E9E6C88D7B93BEDE86B752 ] phmcd C:\Windows\system32\DRIVERS\phmcd.sys
19:24:08.0299 0x1344 phmcd - ok
19:24:08.0626 0x1344 [ B1689DF169143F57053F795390C99DB3, 887B8C76B34CABC68067C0F27CC4EEF02457A53634C96FE5B0FE9B99453BDBEF ] pla C:\Windows\system32\pla.dll
19:24:08.0813 0x1344 pla - ok
19:24:08.0923 0x1344 [ C5E7F8A996EC0A82D508FD9064A5569E, 416A93816CDF12DD42DEA796D37E6E2000D3172AAAB20D3EAD3B715DACD4B61F ] PlugPlay C:\Windows\system32\umpnpmgr.dll
19:24:09.0079 0x1344 PlugPlay - ok
19:24:09.0203 0x1344 [ 0C8E8E61AD1EB0B250B846712C917506, 8F23657B90BFFCD7273B93EDA2D3768F35C1C5A313F22AE33452BE3B2A550649 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
19:24:09.0328 0x1344 PNRPAutoReg - ok
19:24:09.0484 0x1344 [ 0C8E8E61AD1EB0B250B846712C917506, 8F23657B90BFFCD7273B93EDA2D3768F35C1C5A313F22AE33452BE3B2A550649 ] PNRPsvc C:\Windows\system32\p2psvc.dll
19:24:09.0625 0x1344 PNRPsvc - ok
19:24:09.0749 0x1344 [ D0494460421A03CD5225CCA0059AA146, FC30E90522C63F2A66D89381705712D2CDF07B2E029DF40C2DEBB2353E763E90 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
19:24:09.0859 0x1344 PolicyAgent - ok
19:24:09.0890 0x1344 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1, 6E4B188A4BFDBBCA51347BCCE2873F2D0F858398851B9B5129CB9F36A02E4354 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
19:24:09.0921 0x1344 PptpMiniport - ok
19:24:09.0952 0x1344 [ 2027293619DD0F047C584CF2E7DF4FFD, B7C172CCD08D8A30483D27536355ED1E5009B33629355B426470AFBA8542B394 ] Processor C:\Windows\system32\drivers\processr.sys
19:24:09.0999 0x1344 Processor - ok
19:24:10.0046 0x1344 [ 0508FAA222D28835310B7BFCA7A77346, 3AE2340C6E365F137CC00D9560069501DD2724756EA9EBF7A6CDFFC91B43709C ] ProfSvc C:\Windows\system32\profsvc.dll
19:24:10.0171 0x1344 ProfSvc - ok
19:24:10.0202 0x1344 [ A3E186B4B935905B829219502557314E, 7F58EAC6C12208D792C77014AC9D37AD1A7B2E73863C914F5DA831A72E1D52BB ] ProtectedStorage C:\Windows\system32\lsass.exe
19:24:10.0280 0x1344 ProtectedStorage - ok
19:24:10.0327 0x1344 [ 99514FAA8DF93D34B5589187DB3AA0BA, 4DDE5EC0C721B22E1D7D55ED3514B60EA07435C232A3A931BB49C7F486B52C18 ] PSched C:\Windows\system32\DRIVERS\pacer.sys
19:24:10.0358 0x1344 PSched - ok
19:24:10.0373 0x1344 [ E42E3433DBB4CFFE8FDD91EAB29AEA8E, 20ABD8372B242FD356AC143E7EB56F93CFEA4988ED1B0C4434CB64C387D7F66C ] PxHelp20 C:\Windows\system32\Drivers\PxHelp20.sys
19:24:10.0405 0x1344 PxHelp20 - ok
19:24:10.0514 0x1344 [ 0A6DB55AFB7820C99AA1F3A1D270F4F6, 8B7D44A7698B95FE34CBBE4FAB2F01EC1F5BA86C2B19672F99767E650E99BF1C ] ql2300 C:\Windows\system32\drivers\ql2300.sys
19:24:10.0592 0x1344 ql2300 - ok
19:24:10.0623 0x1344 [ 81A7E5C076E59995D54BC1ED3A16E60B, A2988F065F93C41B3B389BFF3BB3FD69F768C2AF249C2356F315CC92E5C9E128 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
19:24:10.0670 0x1344 ql40xx - ok
19:24:10.0732 0x1344 [ E9ECAE663F47E6CB43962D18AB18890F, F1A05320CAED9E745AA36A6DA9B64C48AAEDE888B42B249840CEB31448F7F432 ] QWAVE C:\Windows\system32\qwave.dll
19:24:10.0857 0x1344 QWAVE - ok
19:24:10.0888 0x1344 [ 9F5E0E1926014D17486901C88ECA2DB7, 67CDFB99AB546DCEEF20507EAC07DD52FFB51BFDFE9416ABEDDC1201B60D720E ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
19:24:10.0919 0x1344 QWAVEdrv - ok
19:24:10.0966 0x1344 [ 147D7F9C556D259924351FEB0DE606C3, E41EBA5F3098C6CF2BE4C0060A5F4BF161C3677D983B7A0D70ACC12FC3CFEFD7 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
19:24:10.0997 0x1344 RasAcd - ok
19:24:11.0060 0x1344 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F, 6A410ABCCD2211EFF511CDBF22E4152B57D2996336EBE711DFF71904AF232DB2 ] RasAuto C:\Windows\System32\rasauto.dll
19:24:11.0185 0x1344 RasAuto - ok
19:24:11.0231 0x1344 [ A214ADBAF4CB47DD2728859EF31F26B0, A24F37F55E2C018B1B4FA2C568A01AAAAEA1220833ED24A93378386174A70A32 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
19:24:11.0278 0x1344 Rasl2tp - ok
19:24:11.0341 0x1344 [ 75D47445D70CA6F9F894B032FBC64FCF, 9112EA5D25F867136858524C7965ACCEDC02675D1E2985B950598D89CCF25E14 ] RasMan C:\Windows\System32\rasmans.dll
19:24:11.0481 0x1344 RasMan - ok
19:24:11.0528 0x1344 [ 509A98DD18AF4375E1FC40BC175F1DEF, CC7C278CA298CE102D871E34C176E73F903D6687D1E8B5AFAB8772C7DE1A60B1 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
19:24:11.0559 0x1344 RasPppoe - ok
19:24:11.0621 0x1344 [ 2005F4A1E05FA09389AC85840F0A9E4D, D8A664073FDE82F9AB324347024CDB7043635C84EB11C24C59AB384C52F0FD94 ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
19:24:11.0653 0x1344 RasSstp - ok
19:24:11.0715 0x1344 [ B14C9D5B9ADD2F84F70570BBBFAA7935, 3D533767A50554B86C769DF4D8841B3EA680B3807E85EA3533BDA9B649548269 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
19:24:11.0746 0x1344 rdbss - ok
19:24:11.0793 0x1344 [ 89E59BE9A564262A3FB6C4F4F1CD9899, 6F948FB0E73495CA60B7B19E758268495EC8A084C475EC59AD7940AA619570BB ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
19:24:11.0824 0x1344 RDPCDD - ok
19:24:11.0887 0x1344 [ FBC0BACD9C3D7F6956853F64A66E252D, 7672B10C7039295B152C02C96903E869FF2C0A88A2C3FA89BAE9F1D593B43569 ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
19:24:11.0918 0x1344 rdpdr - ok
19:24:11.0933 0x1344 [ 9D91FE5286F748862ECFFA05F8A0710C, 33F37F1B207151A5564BF051BBF16F35D8C5A0F426CCA078A51F125BF09E487B ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
19:24:11.0965 0x1344 RDPENCDD - ok
19:24:12.0027 0x1344 [ C127EBD5AFAB31524662C48DFCEB773A, 40A6B88FEAFF02D1B5C0CA32F290CF3D9B48B85D248C7532F30CC5C09BAA4D89 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
19:24:12.0074 0x1344 RDPWD - ok
19:24:12.0105 0x1344 [ BCDD6B4804D06B1F7EBF29E53A57ECE9, 8A961CCD0A0265E03D9952C733B593B02B5CF64E308D6B420276D2D6B20F86FC ] RemoteAccess C:\Windows\System32\mprdim.dll
19:24:12.0199 0x1344 RemoteAccess - ok
19:24:12.0230 0x1344 [ 9E6894EA18DAFF37B63E1005F83AE4AB, 5D6DF994D297C875D547C7B111A571AA90D582DAECADE18A53F65AD988819E67 ] RemoteRegistry C:\Windows\system32\regsvc.dll
19:24:12.0370 0x1344 RemoteRegistry - ok
19:24:12.0417 0x1344 [ 6482707F9F4DA0ECBAB43B2E0398A101, 7D57FC36577121D7E26A4F2D46DCA8725D55EC9F75B91DF994DB742BC4FB89C2 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
19:24:12.0464 0x1344 RFCOMM - ok
19:24:12.0511 0x1344 [ A5B12A4B3B774432DB9B9FA221190E59, 1DAAB43A2429035BAB8403E5D24F50F82BD41B5B478B344C3C58D49F1E15C2AE ] rimmptsk C:\Windows\system32\DRIVERS\rimmptsk.sys
19:24:12.0542 0x1344 rimmptsk - ok
19:24:12.0557 0x1344 [ C398BCA91216755B098679A8DA8A2300, 1FDDC3D927509AB10C3B0B7900DCE78DEC6B1C3CAE80F78EFCFBB628673B2143 ] rimsptsk C:\Windows\system32\DRIVERS\rimsptsk.sys
19:24:12.0589 0x1344 rimsptsk - ok
19:24:12.0604 0x1344 [ 2A2554CB24506E0A0508FC395C4A1B42, B989AE65727C971D508E7284707258FCCC9213B510F4C2A257D3069A3DABE20B ] rismxdp C:\Windows\system32\DRIVERS\rixdptsk.sys
19:24:12.0635 0x1344 rismxdp - ok
19:24:12.0682 0x1344 [ 5123F83CBC4349D065534EEB6BBDC42B, 92A3F38EA924D83D601BB93E3750F9DBC2DD963FB7ACF2A0E776297E21815225 ] RpcLocator C:\Windows\system32\locator.exe
19:24:12.0760 0x1344 RpcLocator - ok
19:24:12.0885 0x1344 [ 3B5B4D53FEC14F7476CA29A20CC31AC9, EC02A412DA5FDE2C759A4A2C5904579E1CE7C4999CE87145812F354FC8F5E183 ] RpcSs C:\Windows\system32\rpcss.dll
19:24:13.0041 0x1344 RpcSs - ok
19:24:13.0072 0x1344 [ 9C508F4074A39E8B4B31D27198146FAD, 84913471E5A6C297B1EDABE45EF3FE7D2C4410EF04370F615109FD9E2690FFDB ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
19:24:13.0103 0x1344 rspndr - ok
19:24:13.0150 0x1344 [ 2D19A7469EA19993D0C12E627F4530BC, B59F0D4ACAA60ED95093FA561D4C5D87F26C9F6C646858772743038D97B2D6AB ] RTL8169 C:\Windows\system32\DRIVERS\Rtlh86.sys
19:24:13.0197 0x1344 RTL8169 - ok
19:24:13.0259 0x1344 [ FEFA32073D77BB9C741A63B6286479F6, 7E62CF6244ACC964C21248AF6A7010EA9BBE220345E2DF361E661A746C18CBD1 ] RzKLService C:\Program Files\Razer\Razer Game Booster\RzKLService.exe
19:24:13.0275 0x1344 RzKLService - ok
19:24:13.0275 0x1344 [ A3E186B4B935905B829219502557314E, 7F58EAC6C12208D792C77014AC9D37AD1A7B2E73863C914F5DA831A72E1D52BB ] SamSs C:\Windows\system32\lsass.exe
19:24:13.0353 0x1344 SamSs - ok
19:24:13.0384 0x1344 [ 3CE8F073A557E172B330109436984E30, CEC281C6076FAA1E34372CF419C6308E73811316606B8D0D9055B7D8952BDC88 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
19:24:13.0415 0x1344 sbp2port - ok
19:24:13.0447 0x1344 [ 77B7A11A0C3D78D3386398FBBEA1B632, A3D290AB793BDC2F84C7B963300DFCE81CFE082A0FFF7489E8E5B14714892C00 ] SCardSvr C:\Windows\System32\SCardSvr.dll
19:24:13.0587 0x1344 SCardSvr - ok
19:24:13.0649 0x1344 [ 1A58069DB21D05EB2AB58EE5753EBE8D, EED8111EB613F4C93D1638C74FDB0A6DC6694E1B108DCD0D794B5B5F9B8C6EE4 ] Schedule C:\Windows\system32\schedsvc.dll
19:24:13.0805 0x1344 Schedule - ok
19:24:13.0899 0x1344 [ 312EC3E37A0A1F2006534913E37B4423, 81B8F462336791D162DAFA8092C1F437638DA3022CA24A2458B9FE183FC18C5D ] SCPolicySvc C:\Windows\System32\certprop.dll
19:24:13.0915 0x1344 SCPolicySvc - ok
19:24:13.0946 0x1344 [ 8F36B54688C31EED4580129040C6A3D3, DC150689CBAEEC94B9DE0CA6A633FAD16CDDDC452521232E0C2A44BAE61E08D9 ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
19:24:13.0977 0x1344 sdbus - ok
19:24:14.0008 0x1344 [ 716313D9F6B0529D03F726D5AAF6F191, 44FE994A11631C1D99C73026340BACE39973C65A1281D87A61B481C9B5FAB251 ] SDRSVC C:\Windows\System32\SDRSVC.dll
19:24:14.0149 0x1344 SDRSVC - ok
19:24:14.0195 0x1344 [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv C:\Windows\system32\drivers\secdrv.sys
19:24:14.0227 0x1344 secdrv - ok
19:24:14.0242 0x1344 [ FD5199D4D8A521005E4B5EE7FE00FA9B, 0FB7A1D300C72B1ADC423CC57343C17853E5F8ACFE3EA2C42FAC2FF72E502FBE ] seclogon C:\Windows\system32\seclogon.dll
19:24:14.0383 0x1344 seclogon - ok
19:24:14.0398 0x1344 [ A9BBAB5759771E523F55563D6CBE140F, 415BF6F6A1E4C5F98DABF9C2EEAF8CA49730693046E5F94C7655683717EDAD75 ] SENS C:\Windows\System32\sens.dll
19:24:14.0539 0x1344 SENS - ok
19:24:14.0554 0x1344 [ 68E44E331D46F0FB38F0863A84CD1A31, 0778D85B6869CE2610820DC9724360538BFE832426E898AEBC34E53D2AB4322B ] Serenum C:\Windows\system32\drivers\serenum.sys
19:24:14.0585 0x1344 Serenum - ok
19:24:14.0617 0x1344 [ C70D69A918B178D3C3B06339B40C2E1B, 40BEEECA4C797A3355F4B01C57C2763C33028F27826315062320789A496D0810 ] Serial C:\Windows\system32\drivers\serial.sys
19:24:14.0663 0x1344 Serial - ok
19:24:14.0679 0x1344 [ 8AF3D28A879BF75DB53A0EE7A4289624, C870BEBB969DCD9170E64584D1CD329A193D9FC812A45EF3574891110CA68B45 ] sermouse C:\Windows\system32\drivers\sermouse.sys
19:24:14.0710 0x1344 sermouse - ok
19:24:14.0757 0x1344 [ D2193326F729B163125610DBF3E17D57, 82C894E24E2C139C884246A693AD37BBF0A4E9375B7F7A288EF1DB22F89434B9 ] SessionEnv C:\Windows\system32\sessenv.dll
19:24:14.0897 0x1344 SessionEnv - ok
19:24:14.0913 0x1344 [ 3EFA810BDCA87F6ECC24F9832243FE86, E50FEA94DB9851A46A8A71A8C061AC953A9D5B14585382B3F0FFC84931A0A68F ] sffdisk C:\Windows\system32\DRIVERS\sffdisk.sys
19:24:14.0944 0x1344 sffdisk - ok
19:24:14.0975 0x1344 [ E95D451F7EA3E583AEC75F3B3EE42DC5, B014BE4F9B0C79ECCE2537D1CF4AAD48ACB4C5AD3DACAC4444F0F465B9689921 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
19:24:15.0007 0x1344 sffp_mmc - ok
19:24:15.0022 0x1344 [ 9F66A46C55D6F1CCABC79BB7AFCCC545, 029115C69315D2298F7FC944A53EF7F120FF74919208EB5ABC190022176D9B16 ] sffp_sd C:\Windows\system32\DRIVERS\sffp_sd.sys
19:24:15.0053 0x1344 sffp_sd - ok
19:24:15.0069 0x1344 [ C33BFBD6E9E41FCD9FFEF9729E9FAED6, 490C29DC9E9FE8D5010E6DB18DE7DA808BCE84F014CFDEE0530735CBED788073 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
19:24:15.0100 0x1344 sfloppy - ok
19:24:15.0147 0x1344 [ E1499BD0FF76B1B2FBBF1AF339D91165, 9A8F0403467E75880D3070C4D862489A75134383BAF8E7C45F8C5E7DFB0605A5 ] SharedAccess C:\Windows\System32\ipnathlp.dll
19:24:15.0225 0x1344 SharedAccess - ok
19:24:15.0319 0x1344 [ C7230FBEE14437716701C15BE02C27B8, 8221DE73D77CF71C2857D78829E807D015D9CB8BDEE4BAFD6950BF0C718CC774 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
19:24:15.0459 0x1344 ShellHWDetection - ok
19:24:15.0490 0x1344 [ 1D76624A09A054F682D746B924E2DBC3, DC903DD466AB8899883253F09477B02E4E93A31C8B279F9F02BD555F1AA083B7 ] sisagp C:\Windows\system32\drivers\sisagp.sys
19:24:15.0521 0x1344 sisagp - ok
19:24:15.0568 0x1344 [ 43CB7AA756C7DB280D01DA9B676CFDE2, 08484CAEA0518C0A4CCCD292D8C803B27FEC453537EE1E4CEE74A7208356A474 ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
19:24:15.0615 0x1344 SiSRaid2 - ok
19:24:15.0631 0x1344 [ A99C6C8B0BAA970D8AA59DDC50B57F94, 97AC9DD6DC4F58AC60E819B999BB157663EE7C1739521D16768AA9AC00DAD012 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
19:24:15.0662 0x1344 SiSRaid4 - ok
19:24:16.0067 0x1344 [ 9F712B26EE3B0242DE997A42FD302E2C, 12663EB108F158282A965EE70980627C2F2332BA7944D7DE03B78E18BEB87D26 ] Skype C2C Service C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
19:24:16.0208 0x1344 Skype C2C Service - ok
19:24:16.0364 0x1344 [ F5BBEDF602C310B00036EB2DBF4348A5, AC2712E639F0C54BCF00EB4E90E805335871EA27AE8A45DFC53EDF28822318C4 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
19:24:16.0379 0x1344 SkypeUpdate - ok
19:24:16.0847 0x1344 [ 862BB4CBC05D80C5B45BE430E5EF872F, F4961B22C93E472C8C862421AA231CDDA9E40D3958741A1D666357F22CC3143D ] slsvc C:\Windows\system32\SLsvc.exe
19:24:17.0113 0x1344 slsvc - ok
19:24:17.0175 0x1344 [ 6EDC422215CD78AA8A9CDE6B30ABBD35, D8342BC3152859F4F7512E85ABEC61147DBCAB515458644728874E42F639D6CA ] SLUINotify C:\Windows\system32\SLUINotify.dll
19:24:17.0315 0x1344 SLUINotify - ok
19:24:17.0347 0x1344 [ 7B75299A4D201D6A6533603D6914AB04, 172BE3951F06B1991EF70B71EB91786D1EFC4E381C22BCA3A5F622CD59F3227E ] Smb C:\Windows\system32\DRIVERS\smb.sys
19:24:17.0393 0x1344 Smb - ok
19:24:17.0518 0x1344 [ C8A58FC905C9184FA70E37F71060C64D, 3D913E0F7B02EEAC15971DB15608912A96E4FD9BDFBF09E8F8FA4B6390A9B4DE ] smserial C:\Windows\system32\DRIVERS\smserial.sys
19:24:17.0596 0x1344 smserial - ok
19:24:17.0643 0x1344 [ 2A146A055B4401C16EE62D18B8E2A032, D0930FFA53951C92F56E1ECB41374F4C0AA01ECBF99F474513A21EAD579CFE47 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
19:24:17.0768 0x1344 SNMPTRAP - ok
19:24:17.0783 0x1344 SNP2UVC - ok
19:24:17.0893 0x1344 [ 3A4F2C0BB87A0895ABEBA341AA1E341B, 4DADEEF3C5D181502D6F4A00FBBF3B001FA626E49569FB330D7AE2955CC7DE08 ] Sony PC Companion C:\Program Files\Sony\Sony PC Companion\PCCService.exe
19:24:17.0908 0x1344 Sony PC Companion - ok
19:24:17.0939 0x1344 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF, E03BEE733F4C2A5F39946D4955679A290E22758DFCE4222EE69ABF64FC54EDF7 ] spldr C:\Windows\system32\drivers\spldr.sys
19:24:17.0971 0x1344 spldr - ok
19:24:18.0017 0x1344 [ 8554097E5136C3BF9F69FE578A1B35F4, 2578545CFD647FB18F217B33C8CB4F0184A35F548659494056E455020CC15FB0 ] Spooler C:\Windows\System32\spoolsv.exe
19:24:18.0173 0x1344 Spooler - ok
19:24:18.0236 0x1344 [ 0022CFFF1A41E5CE3A764050A7DDF22A, A5B3DE389043E60A677CF807F19EDFE2B07A849E83BA23E89E05AE85B43AECAE ] sptd C:\Windows\System32\Drivers\sptd.sys
19:24:18.0298 0x1344 sptd - ok
19:24:18.0423 0x1344 [ 41987F9FC0E61ADF54F581E15029AD91, A46E718648C2DD3B43FC3798932C966315893A59442A0686CE46C605B9E4641E ] srv C:\Windows\system32\DRIVERS\srv.sys
19:24:18.0470 0x1344 srv - ok
19:24:18.0517 0x1344 [ FF33AFF99564B1AA534F58868CBE41EF, EFBB005DA19E5B320009CBF93E686D8BFA6A50A23B5A5001C7C84C7D85EF7D49 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
19:24:18.0563 0x1344 srv2 - ok
19:24:18.0657 0x1344 [ 7605C0E1D01A08F3ECD743F38B834A44, 83A77E31004BCF83443F30EFC290E04BB1A2F332E8DFD614AB6E25B527C92299 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
19:24:18.0688 0x1344 srvnet - ok
19:24:18.0751 0x1344 [ 03D50B37234967433A5EA5BA72BC0B62, 7B61D6A4BF5D446A9473D058BC207FB6DA7C2FEFB8083F3B66CAC8907DBD8327 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
19:24:18.0891 0x1344 SSDPSRV - ok
19:24:18.0953 0x1344 [ 6F1A32E7B7B30F004D9A20AFADB14944, AA9D874A14CA4779E76701D2B02F4CCA92CD5917435FB4CACA149FCB2D1D4C4C ] SstpSvc C:\Windows\system32\sstpsvc.dll
19:24:19.0094 0x1344 SstpSvc - ok
19:24:19.0141 0x1344 Steam Client Service - ok
19:24:19.0219 0x1344 [ 00FCEC4DA4198F5F2B9BBD9225842568, 95CE48CC4238FB4D95E2EFFF195C38C321D3F7B513C779FDFBB3F77F9C72EA05 ] Stereo Service C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
19:24:19.0234 0x1344 Stereo Service - ok
19:24:19.0359 0x1344 [ 5DE7D67E49B88F5F07F3E53C4B92A352, 6930A598C35646646ED0E91633797EFE139AE6CDD0012335BD1340754A22F997 ] stisvc C:\Windows\System32\wiaservc.dll
19:24:19.0531 0x1344 stisvc - ok
19:24:19.0562 0x1344 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56, 23CC47FA2D6E183D69DB0D3D3F3081A830D94A58FBC0A9A295B3A56C51E9486A ] swenum C:\Windows\system32\DRIVERS\swenum.sys
19:24:19.0593 0x1344 swenum - ok
19:24:19.0718 0x1344 [ F21FD248040681CCA1FB6C9A03AAA93D, 32FE765841A183A1F2C1ACACBBF8CDB11E7D4D4396F9C9F6CFF1B51C9B620ED3 ] swprv C:\Windows\System32\swprv.dll
19:24:19.0874 0x1344 swprv - ok
19:24:19.0936 0x1344 [ 192AA3AC01DF071B541094F251DEED10, 5C6EB56D1C39F3717EB754A1B37C8A618BA4F2107F64048E985D71FA04D1AD05 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
19:24:19.0983 0x1344 Symc8xx - ok
19:24:20.0014 0x1344 [ 8C8EB8C76736EBAF3B13B633B2E64125, A6C4845DDED81CCF4947612A4D6E42035136025BCD80812D2FF396927CAADEC5 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
19:24:20.0045 0x1344 Sym_hi - ok
19:24:20.0108 0x1344 [ 8072AF52B5FD103BBBA387A1E49F62CB, D336A7D008D145619E79043EBF5D0D455086BA1FEF89612BC2EA11CC363D82B0 ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
19:24:20.0139 0x1344 Sym_u3 - ok
19:24:20.0233 0x1344 [ 9A51B04E9886AA4EE90093586B0BA88D, 1666C29FBFA34174B506678C920636519051D03456A6DDCCD6FF708CAE5D9962 ] SysMain C:\Windows\system32\sysmain.dll
19:24:20.0389 0x1344 SysMain - ok
19:24:20.0482 0x1344 [ 2DCA225EAE15F42C0933E998EE0231C3, 67C7913E41854DFA3043426B7D59AA1FBBB9DE01A6E6904E40A696A7C61A5F98 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:24:20.0623 0x1344 TabletInputService - ok
19:24:20.0685 0x1344 [ D7673E4B38CE21EE54C59EEEB65E2483, 330D0AD13F5008D8569CE8E5EA0BBD69F54F59FEB54FD903FA18D2849CEC6AF0 ] TapiSrv C:\Windows\System32\tapisrv.dll
19:24:20.0825 0x1344 TapiSrv - ok
19:24:20.0841 0x1344 [ CB05822CD9CC6C688168E113C603DBE7, 9DB8945BDC702BB13E9DE477F2D3CCA4CE0E9E8CE9B54CE1A25375F2A2C93F0E ] TBS C:\Windows\System32\tbssvc.dll
19:24:20.0981 0x1344 TBS - ok
19:24:21.0091 0x1344 [ D18D53974FD715D50FC76F9FFE1C830D, 50424BD5950D8FC7724A6E48AE5A39D6E727FAF326C31657C69F1DE13C1450E3 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
19:24:21.0153 0x1344 Tcpip - ok
19:24:21.0215 0x1344 [ D18D53974FD715D50FC76F9FFE1C830D, 50424BD5950D8FC7724A6E48AE5A39D6E727FAF326C31657C69F1DE13C1450E3 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
19:24:21.0278 0x1344 Tcpip6 - ok
19:24:21.0387 0x1344 [ 608C345A255D82A6289C2D468EB41FD7, 74ECFDD45DC3EB3AFAEF9C42B546241AA1D6ACB2F6591A76DDB8BB1768545889 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
19:24:21.0418 0x1344 tcpipreg - ok
19:24:21.0465 0x1344 [ 5DCF5E267BE67A1AE926F2DF77FBCC56, E00C0A03AEE579B51B39930A72F39F4EFFE7CDA37187B0AE90F4E001AD15473B ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
19:24:21.0512 0x1344 TDPIPE - ok
19:24:21.0527 0x1344 [ 389C63E32B3CEFED425B61ED92D3F021, E4718E290678F00995E754AE66F1027D227BFAB9E1A1D2AC8E4EAD27DC50CB17 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
19:24:21.0559 0x1344 TDTCP - ok
19:24:21.0590 0x1344 [ 76B06EB8A01FC8624D699E7045303E54, EC30F244B48A35622ED3EE91792F6A1517C5A50770FAB3945E7A945EB7AF28A8 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
19:24:21.0637 0x1344 tdx - ok
19:24:21.0652 0x1344 [ 3CAD38910468EAB9A6479E2F01DB43C7, 9D18C71EDF39743A0A592BC0873909D2B75B5B177B2672A865D1EEC0BFD2F61C ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
19:24:21.0683 0x1344 TermDD - ok
19:24:21.0730 0x1344 [ BB95DA09BEF6E7A131BFF3BA5032090D, BAF6997F8D944F85F0553957677866C7F22E72AA434BA45FFFB6CC41041070DC ] TermService C:\Windows\System32\termsrv.dll
19:24:21.0902 0x1344 TermService - ok
19:24:21.0933 0x1344 [ C7230FBEE14437716701C15BE02C27B8, 8221DE73D77CF71C2857D78829E807D015D9CB8BDEE4BAFD6950BF0C718CC774 ] Themes C:\Windows\system32\shsvcs.dll
19:24:22.0073 0x1344 Themes - ok
19:24:22.0105 0x1344 [ 1076FFCFFAAE8385FD62DFCB25AC4708, 8C5C106FCB018E019DEBA8E1A6AA170CD7A93293F27994F724EBC486238DA0AA ] THREADORDER C:\Windows\system32\mmcss.dll
19:24:22.0183 0x1344 THREADORDER - ok
19:24:22.0214 0x1344 [ EC74E77D0EB004BD3A809B5F8FB8C2CE, 1E4BBC58D0E35D79C764CF1BA73602C5E29A5A2393D40332801D533E445C6667 ] TrkWks C:\Windows\System32\trkwks.dll
19:24:22.0370 0x1344 TrkWks - ok
19:24:22.0432 0x1344 [ 97D9D6A04E3AD9B6C626B9931DB78DBA, 8E42133ED5EE5EEC414A8B11C1035385C6141E445EA9677F947D20768F25A877 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:24:22.0432 0x1344 TrustedInstaller - ok
19:24:22.0479 0x1344 [ F4EAA7ECBCB25DE901C9B7F2CDCDA0B3, 1CBB5106A32362ABDEE73BF170E205FE64DDBF826C5F6DFFCCD229F220B9C85E ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
19:24:22.0510 0x1344 tssecsrv - ok
19:24:22.0557 0x1344 [ CAECC0120AC49E3D2F758B9169872D38, 80DB15ADF5F4FF78D0C7D5081B6C0E8F1E5125872B60D23C19DA8E62C9DAC9A8 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
19:24:22.0588 0x1344 tunmp - ok
19:24:22.0619 0x1344 [ 300DB877AC094FEAB0BE7688C3454A9C, 3B36AA191FBE25B1A61150EAA2BDF8BA286DC4C052F6E98B0ED8202135553D8C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
19:24:22.0651 0x1344 tunnel - ok
19:24:22.0682 0x1344 [ 7D33C4DB2CE363C8518D2DFCF533941F, C6A539AD31B0BD9F895E0A537783AA75D5760C8590D83BA832D59A9B090CA0E9 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
19:24:22.0713 0x1344 uagp35 - ok
19:24:22.0760 0x1344 [ D9728AF68C4C7693CB100B8441CBDEC6, A2CEE1EE4EF17106349F4E6967F504354801934179FBB3F10B9A4E3C30BC28CE ] udfs C:\Windows\system32\DRIVERS\udfs.sys
19:24:22.0807 0x1344 udfs - ok
19:24:22.0853 0x1344 [ ECEF404F62863755951E09C802C94AD5, 5D92062B3E371F196774EBFE840C78501E55A244DB2A49703C7AC0141C7DABF1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
19:24:22.0994 0x1344 UI0Detect - ok
19:24:23.0041 0x1344 [ B0ACFDC9E4AF279E9116C03E014B2B27, 455D30859E381361FF6EE8B01EDC22A2E66CD5EC22CA9F314E88009DB77A8BAF ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
19:24:23.0087 0x1344 uliagpkx - ok
19:24:23.0134 0x1344 [ 9224BB254F591DE4CA8D572A5F0D635C, C5E7B24587AC5A28ECA63300307AD95B8A846833340126AE378840A40E53C056 ] uliahci C:\Windows\system32\drivers\uliahci.sys
19:24:23.0181 0x1344 uliahci - ok
19:24:23.0212 0x1344 [ 8514D0E5CD0534467C5FC61BE94A569F, A6EFB967044F88335469DB3351587E31CEC659BB6A7D8ED45C68329232C31BB9 ] UlSata C:\Windows\system32\drivers\ulsata.sys
19:24:23.0243 0x1344 UlSata - ok
19:24:23.0275 0x1344 [ 38C3C6E62B157A6BC46594FADA45C62B, 44F87DC955CB4E35E0EB4C8B4E931472B33D97FE000C22370A06AD5EDCEFD0BA ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
19:24:23.0321 0x1344 ulsata2 - ok
19:24:23.0337 0x1344 [ 32CFF9F809AE9AED85464492BF3E32D2, 91AAA47AEF17F373276B01AC8FA823592A0C854541A7A9A3B78F2350DB964EBC ] umbus C:\Windows\system32\DRIVERS\umbus.sys
19:24:23.0384 0x1344 umbus - ok
19:24:23.0431 0x1344 [ 68308183F4AE0BE7BF8ECD07CB297999, 4444233CA3C42BEE50ED47553D4AE5A7C12D8F288D2FA4B2DAE1D9B9FEC1A72D ] upnphost C:\Windows\System32\upnphost.dll
19:24:23.0587 0x1344 upnphost - ok
19:24:23.0633 0x1344 [ AAB0B5F72D2D726FBFDC895A2902DE1D, 7824AF6E2ADEA23F208526F3A62AD1BACDBBDB23E58EB5806890B0761529C50F ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
19:24:23.0680 0x1344 usbccgp - ok
19:24:23.0711 0x1344 [ E9476E6C486E76BC4898074768FB7131, D14B8F69A511DC1F990A9C123C18689AFE59659BA8130D248D8D03E9BD2143B6 ] usbcir C:\Windows\system32\drivers\usbcir.sys
19:24:23.0743 0x1344 usbcir - ok
19:24:23.0789 0x1344 [ 153E8515CB86F8BB5D1A8B478EBF4BB2, 0F1F79BA7C32ACAAE69184A56E67D6E18E2E2F07E0BE23F266401431169DAE14 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
19:24:23.0821 0x1344 usbehci - ok
19:24:23.0852 0x1344 [ 2AE6BCEBD85D31317E433733DAF25888, 7B2C0E8703D0275A620160E479166EB7AA31B0F146507603535CEBF0BA4684A4 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
19:24:23.0899 0x1344 usbhub - ok
19:24:23.0930 0x1344 [ 38DBC7DD6CC5A72011F187425384388B, 456CFCD190035C3033709C8DC0F6DC4352BBF751D57C0C52DD04F8C301FEBACD ] usbohci C:\Windows\system32\drivers\usbohci.sys
19:24:23.0977 0x1344 usbohci - ok
19:24:23.0992 0x1344 [ B51E52ACF758BE00EF3A58EA452FE360, 79E629EC5DE8AB7F31B0EE9AE94C71E8F703FED5C09A816228726974F7790C85 ] usbprint C:\Windows\system32\drivers\usbprint.sys
19:24:24.0055 0x1344 usbprint - ok
19:24:24.0070 0x1344 [ BE3DA31C191BC222D9AD503C5224F2AD, 201FB0FDBF423342202686DC0D8A3221B7798AE04C04A649D3441C257C733CE8 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:24:24.0117 0x1344 USBSTOR - ok
19:24:24.0133 0x1344 [ 44056325428A8E4C755830426E29878F, 95F182047746D352B7DC2B22298D5E58738E1B787C110D1DE841C026FB8A67EB ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
19:24:24.0164 0x1344 usbuhci - ok
19:24:24.0211 0x1344 [ 73FF24E21B690625A58109637DDA0DF7, 62B1F9CD82678E2110D4BB5CC86EE8A7AB0757681443916620B6AAA1EF0DECEB ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
19:24:24.0257 0x1344 usbvideo - ok
19:24:24.0304 0x1344 [ 228F444F9AF0D3B9ECA9FC3F4FEB12F2, D29C9A0ED5602BCD529A0D7F538DFA8771B1CAC6F433AA686C3A4917DC596369 ] usb_rndisx C:\Windows\system32\DRIVERS\usb8023x.sys
19:24:24.0335 0x1344 usb_rndisx - ok
19:24:24.0398 0x1344 [ 1509E705F3AC1D474C92454A5C2DD81F, 7F525921A3513224F8B093A16E19B4235B300349A14B0B86EE11B7473BA53337 ] UxSms C:\Windows\System32\uxsms.dll
19:24:24.0538 0x1344 UxSms - ok
19:24:24.0601 0x1344 [ CD88D1B7776DC17A119049742EC07EB4, 6B68B9EDB8C6BCB2644F1F004D5743E928509D12107D996F390A24A72E0AA528 ] vds C:\Windows\System32\vds.exe
19:24:24.0772 0x1344 vds - ok
19:24:24.0835 0x1344 [ 87B06E1F30B749A114F74622D013F8D4, 06C06EF87F7DC668D23B50AA5F419F62474ACF90E325E167491BF290286D6594 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
19:24:24.0866 0x1344 vga - ok
19:24:24.0928 0x1344 [ 2E93AC0A1D8C79D019DB6C51F036636C, 8B6F3B4EE90691A22788915AD0F99D8EE617750430A34E7CEB9AB4FB4E581755 ] VgaSave C:\Windows\System32\drivers\vga.sys
19:24:24.0959 0x1344 VgaSave - ok
19:24:24.0991 0x1344 [ 5D7159DEF58A800D5781BA3A879627BC, 499A8E51FDE61AE0D7C1812D1E5B331211A36BD095A4992C629B93DE6D80F4E6 ] viaagp C:\Windows\system32\drivers\viaagp.sys
19:24:25.0037 0x1344 viaagp - ok
19:24:25.0069 0x1344 [ C4F3A691B5BAD343E6249BD8C2D45DEE, 19DE07AD6CD51036FA8A6B8EE82F34D7F5264FF3A12CBE6E52BD036D0303E319 ] ViaC7 C:\Windows\system32\drivers\viac7.sys
19:24:25.0115 0x1344 ViaC7 - ok
19:24:25.0162 0x1344 [ AADF5587A4063F52C2C3FED7887426FC, 0A74791A236FDAFCD045CFB79A159245B94F7C2033E0CD830C1B76F0F994E06D ] viaide C:\Windows\system32\drivers\viaide.sys
19:24:25.0193 0x1344 viaide - ok
19:24:25.0256 0x1344 [ 69503668AC66C77C6CD7AF86FBDF8C43, 2CE407674A58313737073F02B9A617460BBA84B36C3A16D98AE5ED45279F5006 ] volmgr C:\Windows\system32\drivers\volmgr.sys
19:24:25.0287 0x1344 volmgr - ok
19:24:25.0365 0x1344 [ 23E41B834759917BFD6B9A0D625D0C28, 9F60992805262F936E8DA33610FDF60A191ECAFC08BBF657C8F9A21833C8EFC5 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
19:24:25.0427 0x1344 volmgrx - ok
19:24:25.0459 0x1344 [ 786DB5771F05EF300390399F626BF30A, 4A07BE5AEDBA4C15C2F9A91250F0488A0B0305C67BB7A037508D5CBF86D4E1B7 ] volsnap C:\Windows\system32\drivers\volsnap.sys
19:24:25.0505 0x1344 volsnap - ok
19:24:25.0568 0x1344 [ 587253E09325E6BF226B299774B728A9, C9F46197819C2A095456393C518A9B00B59ECDC54F464D038AA7F8DCCDB93CCF ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
19:24:25.0615 0x1344 vsmraid - ok
19:24:25.0802 0x1344 [ DB3D19F850C6EB32BDCB9BC0836ACDDB, D81FF1CDA87A2FE83EFD5B3FE01EFF940952F8BAEE70BEA3B2F6EF30E2121704 ] VSS C:\Windows\system32\vssvc.exe
19:24:26.0020 0x1344 VSS - ok
19:24:26.0020 0x1344 vToolbarUpdater17.2.0 - ok
19:24:26.0145 0x1344 [ 96EA68B9EB310A69C25EBB0282B2B9DE, C76D3427F8A2953CB4D96BBA1523679CBE1BBF7FA821A35D2FBEB3E67AC6A10B ] W32Time C:\Windows\system32\w32time.dll
19:24:26.0317 0x1344 W32Time - ok
19:24:26.0348 0x1344 [ 48DFEE8F1AF7C8235D4E626F0C4FE031, A41D05BC0DA3C476C32E0A4DAF015DF7BADF28A03CE236D5596885FF1772F148 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
19:24:26.0379 0x1344 WacomPen - ok
19:24:26.0410 0x1344 [ 55201897378CCA7AF8B5EFD874374A26, 350ADDCEFAA33E301027CFEA8DDE703F6FBD6E53624598CB2E7B671B9E48F7CC ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
19:24:26.0473 0x1344 Wanarp - ok
19:24:26.0488 0x1344 [ 55201897378CCA7AF8B5EFD874374A26, 350ADDCEFAA33E301027CFEA8DDE703F6FBD6E53624598CB2E7B671B9E48F7CC ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
19:24:26.0519 0x1344 Wanarpv6 - ok
19:24:26.0582 0x1344 [ A3CD60FD826381B49F03832590E069AF, 213C5DB5E5D828264286FD7548527566D6160CCA780BC6853B7B28CECF329674 ] wcncsvc C:\Windows\System32\wcncsvc.dll
19:24:26.0753 0x1344 wcncsvc - ok
19:24:26.0831 0x1344 [ 11BCB7AFCDD7AADACB5746F544D3A9C7, 0370E20FD12ED713F94E5CD76F068F7A7A5E7F42416DD2A8A41249020DA7DA31 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
19:24:26.0987 0x1344 WcsPlugInService - ok
19:24:27.0050 0x1344 [ 78FE9542363F297B18C027B2D7E7C07F, 6BC3ED2A48EF41E1EE597FD58271DB12256EC013518663331CD0FBCB3FC415EE ] Wd C:\Windows\system32\drivers\wd.sys
19:24:27.0081 0x1344 Wd - ok
19:24:27.0221 0x1344 [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
19:24:27.0284 0x1344 Wdf01000 - ok
19:24:27.0362 0x1344 [ ABFC76B48BB6C96E3338D8943C5D93B5, B5B22D445724D58641A53276063A4AA2A98F07B93865C86E94661EB31BD63511 ] WdiServiceHost C:\Windows\system32\wdi.dll
19:24:27.0518 0x1344 WdiServiceHost - ok
19:24:27.0533 0x1344 [ ABFC76B48BB6C96E3338D8943C5D93B5, B5B22D445724D58641A53276063A4AA2A98F07B93865C86E94661EB31BD63511 ] WdiSystemHost C:\Windows\system32\wdi.dll
19:24:27.0689 0x1344 WdiSystemHost - ok
19:24:27.0767 0x1344 [ 04C37D8107320312FBAE09926103D5E2, 1C6726A9871CBACB240AFA93E57781515F01758D43693DDA395EA683D97234F0 ] WebClient C:\Windows\System32\webclnt.dll
19:24:27.0939 0x1344 WebClient - ok
19:24:28.0017 0x1344 [ AE3736E7E8892241C23E4EBBB7453B60, 0F998116CC07CD719CB237EAE53BB16B2EDD6973828B9C1055EB981AEA0453D1 ] Wecsvc C:\Windows\system32\wecsvc.dll
19:24:28.0173 0x1344 Wecsvc - ok
19:24:28.0235 0x1344 [ 670FF720071ED741206D69BD995EA453, 4B96F5E3545F69AE9EBC75DC4AB27B87306D656EE526AE39E7EC7E2B6F83F7FD ] wercplsupport C:\Windows\System32\wercplsupport.dll
19:24:28.0391 0x1344 wercplsupport - ok
19:24:28.0469 0x1344 [ 32B88481D3B326DA6DEB07B1D03481E7, 821FBAF147E525ED15EB9391B16A96C6D5464841258B11F277EFB57A3BD50E37 ] WerSvc C:\Windows\System32\WerSvc.dll
19:24:28.0625 0x1344 WerSvc - ok
19:24:28.0766 0x1344 [ 4575AA12561C5648483403541D0D7F2B, 2DBB7904285F16E879E1662C4CC4DFAA420D5EB24DDFC4BAC0B7616F5F44649A ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
19:24:28.0781 0x1344 WinDefend - ok
19:24:28.0797 0x1344 WinHttpAutoProxySvc - ok
19:24:28.0969 0x1344 [ 6B2A1D0E80110E3D04E6863C6E62FD8A, EE8BC7C378993EFE90273764C83119EBF331768CD7B24DE949233C74A51306C2 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
19:24:29.0218 0x1344 Winmgmt - ok
19:24:29.0390 0x1344 [ 7CFE68BDC065E55AA5E8421607037511, C2CE76D52AD4E31FC4216E94457DC16ABF65A5F3E883F0BD97AD387FB7574533 ] WinRM C:\Windows\system32\WsmSvc.dll
19:24:29.0655 0x1344 WinRM - ok
19:24:29.0764 0x1344 [ C008405E4FEEB069E30DA1D823910234, C392A7B5FEACB7D11A3A231C1AD65D533984E6E7429ECD3BFBF90A27E8DEB157 ] Wlansvc C:\Windows\System32\wlansvc.dll
19:24:29.0951 0x1344 Wlansvc - ok
19:24:30.0170 0x1344 [ 5144AE67D60EC653F97DDF3FEED29E77, F6238767284B2356A9F502E2ACCFAAC283FA13CBF238E98B5115A55179526B10 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
19:24:30.0248 0x1344 wlidsvc - ok
19:24:30.0279 0x1344 [ 2E7255D172DF0B8283CDFB7B433B864E, 60C786CF0EA4A29B309B9457F0496D5A0AF1F093FC2C5D88078865814B7DBBA3 ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
19:24:30.0326 0x1344 WmiAcpi - ok
19:24:30.0419 0x1344 [ 43BE3875207DCB62A85C8C49970B66CC, 27169F2E8A30807794407DA8F80611E4287F940AAE2A1F00F547901872FB9703 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
19:24:30.0435 0x1344 wmiApSrv - ok
19:24:30.0607 0x1344 [ 3978704576A121A9204F8CC49A301A9B, 936CC13B90A183613BDA4081556C96D48CA415B5F65D61E18CB5F2E51EEBE59F ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
19:24:30.0653 0x1344 WMPNetworkSvc - ok
19:24:30.0731 0x1344 [ CFC5A04558F5070CEE3E3A7809F3FF52, 45899E04000E21C4E009BE8B6149F199A5B2E0512C657A525770BF9DBFED7D2B ] WPCSvc C:\Windows\System32\wpcsvc.dll
19:24:30.0903 0x1344 WPCSvc - ok
19:24:30.0965 0x1344 [ 801FBDB89D472B3C467EB112A0FC9246, C24053FA12732089384D3AF06C676FF201D282FC5AD56A42B6EE8BAED4379CB2 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
19:24:31.0121 0x1344 WPDBusEnum - ok
19:24:31.0168 0x1344 [ DE9D36F91A4DF3D911626643DEBF11EA, 8029ECE76E29276BFB6ED3387AC560A9A779AAF683A4416E96334FAF7BDBADA0 ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys
19:24:31.0215 0x1344 WpdUsb - ok
19:24:31.0418 0x1344 [ FFB823D0043D93F3CF3BFFBA6CA355B1, 14E87395638CE16C2FAEA771BCFB39EC2446B3478B057EB2955656B12ED5783E ] WPFFontCache_v0400 c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
19:24:31.0480 0x1344 WPFFontCache_v0400 - ok
19:24:31.0527 0x1344 [ E3A3CB253C0EC2494D4A61F5E43A389C, 10BA8B102E31B961819E524FCA5FA817B588EC77FB26B4E176D0A5CFF11EDF79 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
19:24:31.0558 0x1344 ws2ifsl - ok
19:24:31.0605 0x1344 [ 1CA6C40261DDC0425987980D0CD2AAAB, 727C1E3A170316641F832A8D197EDA6D6EE1206E4ED7B741E5A4017B7F2F7B88 ] wscsvc C:\Windows\System32\wscsvc.dll
19:24:31.0777 0x1344 wscsvc - ok
19:24:31.0792 0x1344 WSearch - ok
19:24:32.0026 0x1344 [ FC3EC24FCE372C89423E015A2AC1A31E, 8D028182CF83667D3E4D148979972D208FA6D9B8540EE47A0A7831B770ECD257 ] wuauserv C:\Windows\system32\wuaueng.dll
19:24:32.0260 0x1344 wuauserv - ok
19:24:32.0323 0x1344 [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
19:24:32.0369 0x1344 WudfPf - ok
19:24:32.0416 0x1344 [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
19:24:32.0447 0x1344 WUDFRd - ok
19:24:32.0479 0x1344 [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc C:\Windows\System32\WUDFSvc.dll
19:24:32.0635 0x1344 wudfsvc - ok
19:24:32.0697 0x1344 [ 7D1F3B131D503EF43EE594B5A2B9B427, 307DEC572FBC171D68ED098D73CB6F06754F26E51F8F7DB48035A8CF97AB37D0 ] yukonwlh C:\Windows\system32\DRIVERS\yk60x86.sys
19:24:32.0744 0x1344 yukonwlh - ok
19:24:32.0759 0x1344 ================ Scan global ===============================
19:24:32.0791 0x1344 [ F31EEBC1A1C81FD04005489CC3DCDFE7, 098C35ACFCCE1686C5A6DB6057001CBF8B06A863A0802CB2E9D793F4795F8CEE ] C:\Windows\system32\basesrv.dll
19:24:32.0853 0x1344 [ A508314231C49AEE86987CEA3EAECAD1, D29BCFA967C23C7264592576D62D95FA8C687E8662D19DCCC73653A9EFB6340D ] C:\Windows\system32\winsrv.dll
19:24:33.0087 0x1344 [ A508314231C49AEE86987CEA3EAECAD1, D29BCFA967C23C7264592576D62D95FA8C687E8662D19DCCC73653A9EFB6340D ] C:\Windows\system32\winsrv.dll
19:24:33.0337 0x1344 [ D4E6D91C1349B7BFB3599A6ADA56851B, 8748091BF27F05D28D45688E04DD9229A4B2E159209A64F457703F66A8CECE4D ] C:\Windows\system32\services.exe
19:24:33.0477 0x1344 [ Global ] - ok
19:24:33.0477 0x1344 ================ Scan MBR ==================================
19:24:33.0508 0x1344 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
19:24:34.0257 0x1344 \Device\Harddisk0\DR0 - ok
19:24:34.0257 0x1344 ================ Scan VBR ==================================
19:24:34.0273 0x1344 [ D3DE6259DD94074981A4F9E6F234EB75 ] \Device\Harddisk0\DR0\Partition1
19:24:34.0273 0x1344 \Device\Harddisk0\DR0\Partition1 - ok
19:24:34.0288 0x1344 [ A5AD54FA75A3F388833D1CE86DE4DEAF ] \Device\Harddisk0\DR0\Partition2
19:24:34.0304 0x1344 \Device\Harddisk0\DR0\Partition2 - ok
19:24:34.0304 0x1344 Waiting for KSN requests completion. In queue: 78
19:24:35.0318 0x1344 Waiting for KSN requests completion. In queue: 78
19:24:36.0332 0x1344 Waiting for KSN requests completion. In queue: 78
19:24:37.0377 0x1344 AV detected via SS2: AVG Anti-Virus Free Edition 2012, C:\Program Files\AVG\AVG2012\avgwsc.exe ( 12.0.0.2222 ), 0x41000 ( enabled : updated )
19:24:37.0377 0x1344 Win FW state via NFP2: disabled
19:24:39.0779 0x1344 ============================================================
19:24:39.0779 0x1344 Scan finished
19:24:39.0779 0x1344 ============================================================
19:24:39.0795 0x1190 Detected object count: 0
19:24:39.0795 0x1190 Actual detected object count: 0

[shaleman]

combofix:
ComboFix 13-12-31.01 - shaleman 01.01.2014 14:51:18.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3070.2136 [GMT 1:00]
Spuštěný z: c:\users\shaleman\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Common Files\ASPG_icon.ico
c:\users\shaleman\AppData\Roaming\poclbm
c:\users\shaleman\AppData\Roaming\poclbm\poclbm.ini
c:\windows\msvcr71.dll
c:\windows\system32\drivers\etc\hosts.ics
c:\windows\system32\drivers\etc\lmhosts
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-12-01 do 2014-01-01 )))))))))))))))))))))))))))))))
.
.
2014-01-01 13:40 . 2014-01-01 13:40 63115 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\USERTILE.JS
2013-12-26 19:12 . 2013-12-26 19:12 -------- d-----w- c:\programdata\EA Core
2013-12-26 19:12 . 2013-12-26 19:12 -------- d-----w- c:\programdata\Electronic Arts
2013-12-26 19:12 . 2013-12-26 19:12 -------- d-----w- c:\programdata\EA Logs
2013-12-26 14:35 . 2013-12-26 14:35 -------- d-----w- c:\program files\SEGA
2013-12-26 11:50 . 2013-12-26 11:50 -------- d-----w- c:\windows\ERUNT
2013-12-26 08:54 . 2013-12-26 08:54 -------- d-----w- c:\users\shaleman\AppData\Roaming\Malwarebytes
2013-12-26 08:54 . 2013-12-26 08:54 -------- d-----w- c:\programdata\Malwarebytes
2013-12-26 08:54 . 2013-04-04 13:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-12-26 08:50 . 2013-12-26 12:01 -------- d-----w- C:\AdwCleaner
2013-12-22 19:11 . 2013-12-22 19:11 -------- d-----w- c:\users\shaleman\AppData\Roaming\The Creative Assembly
2013-12-22 16:58 . 2013-12-22 16:59 -------- d-----w- c:\users\shaleman\AppData\Local\SniperV2
2013-12-21 22:36 . 2013-12-21 22:36 -------- d-----w- c:\programdata\SEGA Corporation
2013-12-12 20:45 . 2013-12-12 21:48 -------- d-----w- c:\program files\Mozilla Thunderbird
2013-12-03 14:00 . 2013-12-03 14:11 -------- d-----w- c:\users\shaleman\AppData\Roaming\Litecoin
2013-12-02 16:18 . 2014-01-01 13:46 -------- d-----w- c:\users\shaleman\AppData\Roaming\Bitcoin
2013-12-02 16:17 . 2013-12-02 16:17 -------- d-----w- c:\program files\Bitcoin
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-31 07:50 . 2012-06-15 12:53 45056 ----a-w- c:\windows\system32\acovcnt.exe
2013-12-27 18:05 . 2013-12-26 12:43 194048 ----a-w- c:\windows\system32\drivers\yk60x86.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 40448 ----a-w- c:\windows\system32\drivers\WpdUsb.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 15872 ----a-w- c:\windows\system32\drivers\ws2ifsl.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 17976 ----a-w- c:\windows\system32\drivers\wmilib.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 11264 ----a-w- c:\windows\system32\drivers\wmiacpi.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 527064 ----a-w- c:\windows\system32\drivers\Wdf01000.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 62464 ----a-w- c:\windows\system32\drivers\wanarp.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 33280 ----a-w- c:\windows\system32\drivers\watchdog.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 22072 ----a-w- c:\windows\system32\drivers\wd.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 20608 ----a-w- c:\windows\system32\drivers\wacompen.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 130616 ----a-w- c:\windows\system32\drivers\vsmraid.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 224640 ----a-w- c:\windows\system32\drivers\volsnap.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 52792 ----a-w- c:\windows\system32\drivers\volmgr.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 292840 ----a-w- c:\windows\system32\drivers\volmgrx.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 20024 ----a-w- c:\windows\system32\drivers\viaide.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 110080 ----a-w- c:\windows\system32\drivers\videoprt.sys.bak
2013-12-27 18:05 . 2013-12-26 12:43 56888 ----a-w- c:\windows\system32\drivers\VIAAGP.SYS.bak
2013-12-27 18:05 . 2013-12-26 12:43 41472 ----a-w- c:\windows\system32\drivers\viac7.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 26112 ----a-w- c:\windows\system32\drivers\vgapnp.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 25088 ----a-w- c:\windows\system32\drivers\vga.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 23552 ----a-w- c:\windows\system32\drivers\usbuhci.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 134272 ----a-w- c:\windows\system32\drivers\usbvideo.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 65536 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS.bak
2013-12-27 18:05 . 2013-12-26 12:42 226304 ----a-w- c:\windows\system32\drivers\usbport.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 18944 ----a-w- c:\windows\system32\drivers\usbprint.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 197632 ----a-w- c:\windows\system32\drivers\usbhub.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 19456 ----a-w- c:\windows\system32\drivers\usbohci.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 6016 ----a-w- c:\windows\system32\drivers\usbd.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 39936 ----a-w- c:\windows\system32\drivers\usbehci.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 73216 ----a-w- c:\windows\system32\drivers\usbccgp.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 68608 ----a-w- c:\windows\system32\drivers\usbcir.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 25856 ----a-w- c:\windows\system32\drivers\USBCAMD2.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 25856 ----a-w- c:\windows\system32\drivers\USBCAMD.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 15872 ----a-w- c:\windows\system32\drivers\usb8023x.sys.bak
2013-12-27 18:05 . 2013-12-26 12:42 15872 ----a-w- c:\windows\system32\drivers\usb8023.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 7680 ----a-w- c:\windows\system32\drivers\umpass.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 34816 ----a-w- c:\windows\system32\drivers\umbus.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 98408 ----a-w- c:\windows\system32\drivers\ulsata.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 115816 ----a-w- c:\windows\system32\drivers\ulsata2.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 238648 ----a-w- c:\windows\system32\drivers\uliahci.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 60984 ----a-w- c:\windows\system32\drivers\ULIAGPKX.SYS.bak
2013-12-27 18:04 . 2013-12-26 12:42 226816 ----a-w- c:\windows\system32\drivers\udfs.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 59448 ----a-w- c:\windows\system32\drivers\UAGP35.SYS.bak
2013-12-27 18:04 . 2013-12-26 12:42 25088 ----a-w- c:\windows\system32\drivers\tunnel.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 24064 ----a-w- c:\windows\system32\drivers\tssecsrv.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 15360 ----a-w- c:\windows\system32\drivers\TUNMP.SYS.bak
2013-12-27 18:04 . 2013-12-26 12:42 72192 ----a-w- c:\windows\system32\drivers\tdx.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 53224 ----a-w- c:\windows\system32\drivers\termdd.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 29184 ----a-w- c:\windows\system32\drivers\tdtcp.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 17920 ----a-w- c:\windows\system32\drivers\tdpipe.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 20992 ----a-w- c:\windows\system32\drivers\tdi.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 905664 ----a-w- c:\windows\system32\drivers\tcpip.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 30720 ----a-w- c:\windows\system32\drivers\tcpipreg.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 34920 ----a-w- c:\windows\system32\drivers\sym_u3.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 24576 ----a-w- c:\windows\system32\drivers\tape.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 35944 ----a-w- c:\windows\system32\drivers\symc8xx.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 31848 ----a-w- c:\windows\system32\drivers\sym_hi.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 15288 ----a-w- c:\windows\system32\drivers\swenum.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 52992 ----a-w- c:\windows\system32\drivers\stream.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 146432 ----a-w- c:\windows\system32\drivers\srv2.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 122344 ----a-w- c:\windows\system32\drivers\Storport.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 305152 ----a-w- c:\windows\system32\drivers\srv.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 477240 ----a-w- c:\windows\system32\drivers\sptd.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 684032 ----a-w- c:\windows\system32\drivers\spsys.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 21048 ----a-w- c:\windows\system32\drivers\spldr.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 17408 ----a-w- c:\windows\system32\drivers\smclib.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 1010560 ----a-w- c:\windows\system32\drivers\smserial.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 66560 ----a-w- c:\windows\system32\drivers\smb.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 74808 ----a-w- c:\windows\system32\drivers\sisraid4.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 55864 ----a-w- c:\windows\system32\drivers\SISAGP.SYS.bak
2013-12-27 18:04 . 2013-12-26 12:42 41016 ----a-w- c:\windows\system32\drivers\sisraid2.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 13312 ----a-w- c:\windows\system32\drivers\sfloppy.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 12288 ----a-w- c:\windows\system32\drivers\sffp_mmc.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 11776 ----a-w- c:\windows\system32\drivers\sffp_sd.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 19968 ----a-w- c:\windows\system32\drivers\sermouse.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 13312 ----a-w- c:\windows\system32\drivers\sffdisk.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 83456 ----a-w- c:\windows\system32\drivers\serial.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 17920 ----a-w- c:\windows\system32\drivers\serenum.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 20480 ----a-w- c:\windows\system32\drivers\secdrv.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 89088 ----a-w- c:\windows\system32\drivers\sdbus.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 76392 ----a-w- c:\windows\system32\drivers\sbp2port.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 142904 ----a-w- c:\windows\system32\drivers\scsiport.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 259176 ----a-w- c:\windows\system32\drivers\Rtlh86.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 2158432 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 8192 ----a-w- c:\windows\system32\drivers\rootmdm.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 60416 ----a-w- c:\windows\system32\drivers\rspndr.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 33280 ----a-w- c:\windows\system32\drivers\rndismpx.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 38400 ----a-w- c:\windows\system32\drivers\rixdptsk.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 33280 ----a-w- c:\windows\system32\drivers\RNDISMP.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 113664 ----a-w- c:\windows\system32\drivers\rmcast.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 46592 ----a-w- c:\windows\system32\drivers\rimmptsk.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 43008 ----a-w- c:\windows\system32\drivers\rimsptsk.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 180736 ----a-w- c:\windows\system32\drivers\rdpwd.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 148992 ----a-w- c:\windows\system32\drivers\rfcomm.sys.bak
2013-12-27 18:04 . 2013-12-26 12:42 6144 ----a-w- c:\windows\system32\drivers\RDPENCDD.sys.bak
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 00:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-11-14 20584608]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-11-19 2598520]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
.
c:\users\shaleman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Bitcoin.lnk - c:\program files\Bitcoin\bitcoin-qt.exe -min [2011-1-30 22613504]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^Users^shaleman^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Automatické vypnutí počítače.lnk]
path=c:\users\shaleman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Automatické vypnutí počítače.lnk
backup=c:\windows\pss\Automatické vypnutí počítače.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
2009-03-11 10:24 3054136 ----a-w- c:\windows\AsScrPro.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
2008-06-25 02:01 159744 ----a-w- c:\program files\ASUS\ATK Media\DMedia.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKOSD2]
2008-07-15 18:29 7651328 ----a-w- c:\program files\ASUS\ATKOSD2\ATKOSD2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
2008-07-19 02:52 104936 ----a-w- c:\program files\CyberLink\Power2Go\CLMLSvc.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2012-04-17 15:19 3671872 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
2008-01-21 02:25 125952 ----a-w- c:\windows\ehome\ehtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
2013-03-13 14:45 30192 ----a-w- c:\program files\Google\Google Desktop Search\GoogleDesktop.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2012-06-15 19:39 116648 ----atw- c:\users\shaleman\AppData\Local\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2009-02-26 16:36 30040 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControlUser]
2008-01-12 05:40 98304 ----a-w- c:\program files\ASUS\ATK Hotkey\HControlUser.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
2008-06-09 17:16 2363392 ----a-w- c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2012-12-29 08:26 4129720 ----a-w- c:\windows\System32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2012-12-29 08:25 108984 ----a-w- c:\windows\System32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\P2Go_Menu]
2008-06-14 01:11 210216 ----a-w- c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2008-07-24 10:16 6265376 ----a-w- c:\windows\RtHDVCpl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2013-11-14 15:42 20584608 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
2008-07-24 10:16 1833504 ----a-w- c:\windows\SkyTel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion]
2013-05-29 10:34 449248 ----a-w- c:\program files\Sony\Sony PC Companion\PCCompanion.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2011-09-25 12:31 1242448 ----a-w- c:\program files\Steam\Steam.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
2008-01-21 02:23 1008184 ----a-w- c:\program files\Windows Defender\MSASCui.exe
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 17:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-01-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-23 19:49]
.
2014-01-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-07-21 18:38]
.
2014-01-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-07-21 18:38]
.
2014-01-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-487068628-1258197761-2129956018-1000Core.job
- c:\users\shaleman\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-15 19:39]
.
2014-01-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-487068628-1258197761-2129956018-1000UA.job
- c:\users\shaleman\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-15 19:39]
.
2014-01-01 c:\windows\Tasks\tluplzbhe.job
- c:\windows\system32\usbuix.dll [2013-02-22 08:13]
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://www.google.com
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 84.16.104.1 84.16.96.2
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-10 - (no file)
SafeBoot-WudfPf
SafeBoot-WudfRd
MSConfigStartUp-4StoryPrePatch - c:\program files\Gameforge4D\4Story_CZ\PrePatch.exe
MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe
MSConfigStartUp-ManyCam - c:\program files\manycam\bin\manycam.exe
MSConfigStartUp-SynTPEnh - c:\program files\Synaptics\SynTP\SynTPEnh.exe
MSConfigStartUp-vProt - c:\program files\avg secure search\vprot.exe
MSConfigStartUp-WinampAgent - c:\program files\Winamp\winampa.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2014-01-01 15:05
Windows 6.0.6002 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
.
C:\ADSM_PData_0150
.
sken byl úspešně dokončen
skryté soubory: 1
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TrueSight]
"ImagePath"="\??\"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{95B7759C-8C7F-4BF1-B163-73684A933233}"=hex:51,66,7a,6c,4c,1d,38,12,f2,76,a4,
91,4d,c2,9f,0e,ce,75,30,28,4f,cd,76,27
"{F9639E4A-801B-4843-AEE3-03D9DA199E77}"=hex:51,66,7a,6c,4c,1d,38,12,24,9d,70,
fd,29,ce,2d,0d,d1,f5,40,99,df,47,da,63
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=hex:51,66,7a,6c,4c,1d,38,12,11,7f,11,
d0,78,5b,08,05,de,bb,01,03,dd,4c,30,54
"{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}"=hex:51,66,7a,6c,4c,1d,38,12,f1,9d,97,
02,e5,86,37,08,c7,6b,3b,0b,78,35,a4,a7
"{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}"=hex:51,66,7a,6c,4c,1d,38,12,8f,de,00,
6a,5c,65,a0,03,f4,70,9f,cb,f6,31,2f,8d
"{72853161-30C5-4D22-B7F9-0BBC1D38A37E}"=hex:51,66,7a,6c,4c,1d,38,12,0f,32,96,
76,f7,7e,4c,08,c8,ef,48,fc,18,66,e7,6a
"{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07,
72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
"{2A541AE1-5BF6-4665-A8A3-CFA9672E4291}"=hex:51,66,7a,6c,4c,1d,38,12,8f,19,47,
2e,c4,15,0b,03,d7,b5,8c,e9,62,70,06,85
"{FF059E31-CC5A-4E2E-BF3B-96E929D65503}"=hex:51,66,7a,6c,4c,1d,38,12,5f,9d,16,
fb,68,82,40,0b,c0,2d,d5,a9,2c,88,11,17
"{BDEADE7F-C265-11D0-BCED-00A0C90AB50F}"=hex:51,66,7a,6c,4c,1d,38,12,11,dd,f9,
b9,57,8c,be,54,c3,fb,43,e0,cc,54,f1,1b
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
@Denied: (2) (LocalSystem)
"Timestamp"=hex:07,98,60,b7,d1,47,ce,01
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,91,cf,cb,3d,64,41,ec,4e,ab,e5,19,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,91,cf,cb,3d,64,41,ec,4e,ab,e5,19,\
.
[HKEY_USERS\S-1-5-21-487068628-1258197761-2129956018-1000\Software\SecuROM\License information*]
"datasecu"=hex:ba,52,ae,8c,8e,a7,97,31,78,56,61,54,0d,77,10,1d,a1,05,8b,34,9d,
0a,6d,dc,80,2d,ac,e7,bb,de,6d,1c,80,1b,f1,56,50,37,65,67,96,58,63,67,e3,66,\
"rkeysecu"=hex:fa,cd,0f,c4,24,bc,3f,87,27,0c,80,6b,ca,7a,73,1b
.
Celkový čas: 2014-01-01 15:09:24
ComboFix-quarantined-files.txt 2014-01-01 14:09
.
Před spuštěním: Volných bajtů: 42 959 298 560
Po spuštění: Volných bajtů: 42 707 734 528
.
- - End Of File - - EB25E6B29A22EFF60899B5627039AB0B
5C616939100B85E558DA92B899A0FC36

[Orcus]

Aktualizuj AVG 2012 na verzi 2014. Co problémy?

[shaleman]

AVG aktualizován na verzi 2014. AVG poté nalezl 269 chyb v registru, 299 chyb v neplatných souborech, 216 chyb v neplatných zástupcích.
Problémy však zůstaly. Ikony se stále nezobrazují a počítač se celý zpomalil a některé programy (např. GOM player) nefungují jak mají. Podle her bych řekl, že celý výkon počítače klesl.
Mám ho prohodit oknem a koupit nový? :)

[shaleman]

Po kontrole AVG nainstalován AVG TuneUp a přes něj provedena kontrola a oprava systému. Problém vyřešen. Děkuji za pomoc.

[Orcus]

OK, pokud Tuneup pomohl (vcelku se divím jelikož na něj lidi jen nadávali), vyčistíme nástroje, kterými jsme čistili:

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

====================================================

Vyčisti systém CCleanerem

====================================================

Stáhni si zde DelFix
http://general-changelog-team.fr/fr/dow ... e/9-delfix

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem. Jinak je zpráva zde:
v C: \ DelFix.txt

Poté můžeš téma označit zelenou fajfkou jako vyřešené.

[shaleman]

ještě jednou děkuji!

# DelFix v10.6 - Logfile created 13/01/2014 at 09:35:27
# Updated 11/11/2013 by Xplode
# Username : shaleman - SHALEMAN-PC
# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)

~ Removing disinfection tools ...

Deleted : C:\Qoobox
Deleted : C:\Windows\grep.exe
Deleted : C:\Windows\PEV.exe
Deleted : C:\Windows\NIRCMD.exe
Deleted : C:\Windows\MBR.exe
Deleted : C:\Windows\SED.exe
Deleted : C:\Windows\SWREG.exe
Deleted : C:\Windows\SWSC.exe
Deleted : C:\Windows\SWXCACLS.exe
Deleted : C:\Windows\Zip.exe
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis

~ Cleaning system restore ...


New restore point created !

########## - EOF - ##########