prosím o kontrolu logu, Zatížený procesor

mikes1962 · Příspěvekod **mikes1962** » 09 led 2014 17:56

gfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:56:19, on 9.1.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SlimDrivers\SlimDrivers.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.glarysoft.com/?src=iehome
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
O4 - HKLM\..\Run: [Nvtmru] "C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [GUDelayStartup] C:\Program Files\Glary Utilities 4\StartupManager.exe -delayrun
O4 - HKCU\..\Run: [Glary Memory Optimizer] C:\Program Files\Glary Utilities 4\memdefrag.exe /autostart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [UpdateMyDrivers] C:\Program Files\SmartTweak\UpdateMyDrivers\UpdateMyDrivers.exe /ot /as /ss
O4 - HKCU\..\Run: [SpeedUpMyComputer] C:\Program Files\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe /ot /as /ss
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [SlimDrivers] "C:\Program Files\SlimDrivers\SlimDrivers.exe" -boot
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-602162358-1614895754-682003330-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

--
End of file - 4646 bytes

Reklama

Příspěvekod **memphisto** » 09 led 2014 18:34

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

mikes1962 · Příspěvekod **mikes1962** » 10 led 2014 16:04

ADWCLEANER :

# AdwCleaner v3.016 - Report created 10/01/2014 at 15:42:04
# Updated 23/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Mikes - MIKES-PC
# Running from : C:\Documents and Settings\Mikes\Dokumenty\Downloads\adwcleaner.exe
# Option : Scan

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Found C:\Documents and Settings\All Users\Data aplikací\RegClean
Folder Found C:\Documents and Settings\Mikes\Local Settings\Data aplikací\eSupport.com

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

***** [ Browsers ] *****

-\\ Internet Explorer v6.0.2900.5512

Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://isearch.glarysoft.com/?src=iehome

-\\ Google Chrome v32.0.1700.72

[ File : C:\Documents and Settings\Mikes\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [1046 octets] - [10/01/2014 15:42:04]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1106 octets] ##########

MALWAREBYTES ANTI-MALWARE :

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2014.01.10.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 6.0.2900.5512
Mikes :: MIKES-PC [administrátor]

Ochrana: Povolena

10.1.2014 15:50:17
mbam-log-2014-01-10 (15-50-17).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 193287
Uplynulý čas: 9 minut, 24 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

Příspěvekod **memphisto** » 10 led 2014 17:15

V adw nech vše smazat a dodej log

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

mikes1962 · Příspěvekod **mikes1962** » 10 led 2014 17:55

# AdwCleaner v3.016 - Report created 10/01/2014 at 17:39:20
# Updated 23/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Mikes - MIKES-PC
# Running from : C:\Documents and Settings\Mikes\Dokumenty\Downloads\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\RegClean
Folder Deleted : C:\Documents and Settings\Mikes\Local Settings\Data aplikací\eSupport.com

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

***** [ Browsers ] *****

-\\ Internet Explorer v6.0.2900.5512

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]

-\\ Google Chrome v32.0.1700.72

[ File : C:\Documents and Settings\Mikes\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [1186 octets] - [10/01/2014 15:42:04]
AdwCleaner[R1].txt - [1246 octets] - [10/01/2014 17:37:49]
AdwCleaner[S0].txt - [1137 octets] - [10/01/2014 17:39:20]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1197 octets] ##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Microsoft Windows XP x86
Ran by Mikes on p 10.01.2014 at 17:49:48,62
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\speedupmycomputer

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\smarttweak
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\caphyon

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\WINDOWS\system32\ai_recyclebin"

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p 10.01.2014 at 17:57:43,76
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

mikes1962 · Příspěvekod **mikes1962** » 10 led 2014 19:24

tak je to v pořádku nebo jak?

:)

Příspěvekod **jaro3** » 11 led 2014 11:21

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.

mikes1962 · Příspěvekod **mikes1962** » 11 led 2014 14:19

14:15:07.0218 2788 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
14:15:08.0078 2788 ============================================================
14:15:08.0078 2788 Current date / time: 2014/01/11 14:15:08.0078
14:15:08.0078 2788 SystemInfo:
14:15:08.0078 2788
14:15:08.0078 2788 OS Version: 5.1.2600 ServicePack: 3.0
14:15:08.0078 2788 Product type: Workstation
14:15:08.0078 2788 ComputerName: MIKES-PC
14:15:08.0078 2788 UserName: Mikes
14:15:08.0078 2788 Windows directory: C:\WINDOWS
14:15:08.0078 2788 System windows directory: C:\WINDOWS
14:15:08.0078 2788 Processor architecture: Intel x86
14:15:08.0078 2788 Number of processors: 2
14:15:08.0078 2788 Page size: 0x1000
14:15:08.0078 2788 Boot type: Normal boot
14:15:08.0078 2788 ============================================================
14:15:09.0250 2788 Drive \Device\Harddisk0\DR0 - Size: 0x25432CDE00 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
14:15:09.0265 2788 ============================================================
14:15:09.0265 2788 \Device\Harddisk0\DR0:
14:15:09.0265 2788 MBR partitions:
14:15:09.0265 2788 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xC34F28D
14:15:09.0265 2788 ============================================================
14:15:09.0296 2788 C: <-> \Device\Harddisk0\DR0\Partition1
14:15:09.0296 2788 ============================================================
14:15:09.0296 2788 Initialize success
14:15:09.0296 2788 ============================================================
14:15:23.0250 2072 ============================================================
14:15:23.0250 2072 Scan started
14:15:23.0250 2072 Mode: Manual; SigCheck; TDLFS;
14:15:23.0250 2072 ============================================================
14:15:23.0671 2072 ================ Scan system memory ========================
14:15:23.0671 2072 System memory - ok
14:15:23.0671 2072 ================ Scan services =============================
14:15:24.0000 2072 Abiosdsk - ok
14:15:24.0000 2072 abp480n5 - ok
14:15:24.0031 2072 [ 4FE34F1F3126B61FCC6B2043AA8112C9 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
14:15:24.0406 2072 ACPI - ok
14:15:24.0437 2072 [ AFDFF022A01F0B11C776F0860C3B282F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
14:15:24.0578 2072 ACPIEC - ok
14:15:24.0578 2072 adpu160m - ok
14:15:24.0609 2072 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
14:15:24.0750 2072 aec - ok
14:15:24.0781 2072 [ 7618D5218F2A614672EC61A80D854A37 ] AFD C:\WINDOWS\System32\drivers\afd.sys
14:15:24.0812 2072 AFD - ok
14:15:24.0812 2072 Aha154x - ok
14:15:24.0812 2072 aic78u2 - ok
14:15:24.0828 2072 aic78xx - ok
14:15:24.0843 2072 [ E0A6FA244B8624D78FE5FF6F56A33BAE ] Alerter C:\WINDOWS\system32\alrsvc.dll
14:15:25.0000 2072 Alerter - ok
14:15:25.0015 2072 [ 88842DE939A827577BF24243699AC80A ] ALG C:\WINDOWS\System32\alg.exe
14:15:25.0156 2072 ALG - ok
14:15:25.0156 2072 AliIde - ok
14:15:25.0218 2072 [ 267FC636801EDC5AB28E14036349E3BE ] Ambfilt C:\WINDOWS\system32\drivers\Ambfilt.sys
14:15:25.0312 2072 Ambfilt - ok
14:15:25.0328 2072 amsint - ok
14:15:25.0343 2072 [ 6B8E7A90E576D4FE308F97C69060A171 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
14:15:25.0500 2072 AppMgmt - ok
14:15:25.0515 2072 asc - ok
14:15:25.0515 2072 asc3350p - ok
14:15:25.0515 2072 asc3550 - ok
14:15:25.0609 2072 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
14:15:25.0656 2072 aspnet_state - ok
14:15:25.0671 2072 [ 74202D5A696A412733B387BD18400E4C ] aswFsBlk C:\WINDOWS\system32\drivers\aswFsBlk.sys
14:15:25.0703 2072 aswFsBlk - ok
14:15:25.0718 2072 [ AA3397F034871DE76A74585774029580 ] aswMonFlt C:\WINDOWS\system32\drivers\aswMonFlt.sys
14:15:25.0734 2072 aswMonFlt - ok
14:15:25.0750 2072 [ 9F597676EDA29D6619C5E76F523892D7 ] aswRdr C:\WINDOWS\system32\drivers\aswRdr.sys
14:15:25.0781 2072 aswRdr - ok
14:15:25.0796 2072 [ F385467DF95D0A73775CB3B076B8B969 ] aswRvrt C:\WINDOWS\system32\drivers\aswRvrt.sys
14:15:25.0812 2072 aswRvrt - ok
14:15:25.0843 2072 [ BB27A67D7F465D2720D74B5223DD91E4 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
14:15:25.0875 2072 aswSnx - ok
14:15:25.0906 2072 [ 259E864BFB9268CD7CEFA5849A3B374B ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
14:15:25.0937 2072 aswSP - ok
14:15:25.0968 2072 [ AB499F3325E62E157F8E8302065B1B30 ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys
14:15:25.0984 2072 aswTdi - ok
14:15:26.0000 2072 [ BADA8FD627F1D0E22308211C33F0BDB5 ] aswVmm C:\WINDOWS\system32\drivers\aswVmm.sys
14:15:26.0015 2072 aswVmm - ok
14:15:26.0046 2072 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
14:15:26.0187 2072 AsyncMac - ok
14:15:26.0218 2072 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
14:15:26.0359 2072 atapi - ok
14:15:26.0359 2072 Atdisk - ok
14:15:26.0390 2072 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
14:15:26.0531 2072 Atmarpc - ok
14:15:26.0562 2072 [ DE31B88962A8645DBA5A37B993E7B0F1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
14:15:26.0718 2072 AudioSrv - ok
14:15:26.0750 2072 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
14:15:26.0890 2072 audstub - ok
14:15:27.0000 2072 [ 4D41D30E2FAB3307967C7A0B045DC874 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
14:15:27.0015 2072 avast! Antivirus - ok
14:15:27.0046 2072 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
14:15:27.0203 2072 Beep - ok
14:15:27.0234 2072 [ 19395D092FD85DDC2D9C7729CF5A2AC8 ] BITS C:\WINDOWS\system32\qmgr.dll
14:15:27.0390 2072 BITS - ok
14:15:27.0406 2072 BootDefragDriver - ok
14:15:27.0437 2072 [ 249276D3EF1E74B992299CB96099E4D7 ] Browser C:\WINDOWS\System32\browser.dll
14:15:27.0578 2072 Browser - ok
14:15:27.0609 2072 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
14:15:27.0734 2072 cbidf2k - ok
14:15:27.0750 2072 cd20xrnt - ok
14:15:27.0765 2072 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
14:15:27.0906 2072 Cdaudio - ok
14:15:27.0937 2072 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
14:15:28.0078 2072 Cdfs - ok
14:15:28.0125 2072 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
14:15:28.0265 2072 Cdrom - ok
14:15:28.0265 2072 Changer - ok
14:15:28.0296 2072 [ E390DC1D7C461D7D56EC53402F329928 ] CiSvc C:\WINDOWS\system32\cisvc.exe
14:15:28.0437 2072 CiSvc - ok
14:15:28.0453 2072 [ 064507A8DFA8C5C7E2FFDDD3E6F424FA ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
14:15:28.0609 2072 ClipSrv - ok
14:15:28.0687 2072 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:15:28.0781 2072 clr_optimization_v2.0.50727_32 - ok
14:15:28.0812 2072 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:15:28.0859 2072 clr_optimization_v4.0.30319_32 - ok
14:15:28.0859 2072 CmdIde - ok
14:15:28.0875 2072 COMSysApp - ok
14:15:28.0875 2072 Cpqarray - ok
14:15:28.0906 2072 [ F3AB0933CBD166D271992F411C27CCAF ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
14:15:29.0046 2072 CryptSvc - ok
14:15:29.0062 2072 dac2w2k - ok
14:15:29.0062 2072 dac960nt - ok
14:15:29.0109 2072 [ C868F3AE15CF71A93F2AA3A32856D839 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
14:15:29.0265 2072 DcomLaunch - ok
14:15:29.0296 2072 [ 8C9A53E285AC5E6704844D0459EC85BE ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
14:15:29.0453 2072 Dhcp - ok
14:15:29.0484 2072 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
14:15:29.0625 2072 Disk - ok
14:15:29.0625 2072 dmadmin - ok
14:15:29.0671 2072 [ DB5FD2BF5B07DC54BFCB3664FF05BD7C ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
14:15:29.0828 2072 dmboot - ok
14:15:29.0843 2072 [ FFF1720AF51171F32F1EAD5CF71F2810 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
14:15:29.0984 2072 dmio - ok
14:15:30.0000 2072 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
14:15:30.0140 2072 dmload - ok
14:15:30.0171 2072 [ 2BFEFE9E865655A76982F050450B9591 ] dmserver C:\WINDOWS\System32\dmserver.dll
14:15:30.0312 2072 dmserver - ok
14:15:30.0343 2072 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
14:15:30.0484 2072 DMusic - ok
14:15:30.0500 2072 [ 0634B791684B84F4A331F3D3536FEEF8 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
14:15:30.0640 2072 Dnscache - ok
14:15:30.0671 2072 [ 4A3E2BD20157A0946751229E92EB8621 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
14:15:30.0828 2072 Dot3svc - ok
14:15:30.0828 2072 dpti2o - ok
14:15:30.0859 2072 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
14:15:30.0984 2072 drmkaud - ok
14:15:31.0015 2072 [ E6B7D1B24E16FB24CE1FEA964E144EBC ] dtsoftbus01 C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys
14:15:31.0046 2072 dtsoftbus01 - ok
14:15:31.0078 2072 [ 0887D9C2BE8D940778CAD1E3B85F2A41 ] EapHost C:\WINDOWS\System32\eapsvc.dll
14:15:31.0234 2072 EapHost - ok
14:15:31.0265 2072 [ A2A4912798F2BE706ABADD3D30800D16 ] ERSvc C:\WINDOWS\System32\ersvc.dll
14:15:31.0406 2072 ERSvc - ok
14:15:31.0437 2072 [ F0D2AE69035092BF22DAD6B50FAB85C2 ] Eventlog C:\WINDOWS\system32\services.exe
14:15:31.0593 2072 Eventlog - ok
14:15:31.0609 2072 [ 260C69FD67687B0DC062FC3D31655857 ] EventSystem C:\WINDOWS\system32\es.dll
14:15:31.0765 2072 EventSystem - ok
14:15:31.0828 2072 [ 898AD7D508F6ADE242D94752E09F4152 ] EverestDriver C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt
14:15:31.0843 2072 EverestDriver - ok
14:15:31.0859 2072 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
14:15:31.0984 2072 Fastfat - ok
14:15:32.0015 2072 [ B927443008910B412BEC72FC41C1BAD0 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
14:15:32.0156 2072 FastUserSwitchingCompatibility - ok
14:15:32.0171 2072 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
14:15:32.0312 2072 Fdc - ok
14:15:32.0328 2072 [ AC366695A0796560AA37215AD5762AAF ] Fips C:\WINDOWS\system32\drivers\Fips.sys
14:15:32.0468 2072 Fips - ok
14:15:32.0500 2072 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
14:15:32.0640 2072 Flpydisk - ok
14:15:32.0671 2072 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
14:15:32.0812 2072 FltMgr - ok
14:15:32.0859 2072 [ 993883524AA9CF1C90E1545411A9AC9C ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
14:15:32.0890 2072 FontCache3.0.0.0 - ok
14:15:32.0921 2072 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
14:15:33.0062 2072 Fs_Rec - ok
14:15:33.0093 2072 [ 4E664D8541DB4A66B73A24257E322E1F ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
14:15:33.0218 2072 Ftdisk - ok
14:15:33.0250 2072 [ D556CB79967E92B5CC69686D16C1D846 ] gdrv C:\WINDOWS\gdrv.sys
14:15:33.0265 2072 gdrv - ok
14:15:33.0296 2072 [ 77EBF3E9386DAA51551AF429052D88D0 ] giveio C:\WINDOWS\system32\giveio.sys
14:15:33.0312 2072 giveio ( UnsignedFile.Multi.Generic ) - warning
14:15:33.0312 2072 giveio - detected UnsignedFile.Multi.Generic (1)
14:15:33.0343 2072 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
14:15:33.0484 2072 Gpc - ok
14:15:33.0546 2072 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
14:15:33.0562 2072 gupdate - ok
14:15:33.0578 2072 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
14:15:33.0593 2072 gupdatem - ok
14:15:33.0640 2072 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
14:15:33.0781 2072 HDAudBus - ok
14:15:33.0843 2072 [ FCFE31FB75F8A6295B6B0AF87A626282 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
14:15:33.0984 2072 helpsvc - ok
14:15:34.0000 2072 [ 00E25EE90166B3E1BE6E74AEBF858306 ] HidServ C:\WINDOWS\System32\hidserv.dll
14:15:34.0156 2072 HidServ - ok
14:15:34.0187 2072 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
14:15:34.0343 2072 hidusb - ok
14:15:34.0359 2072 [ 7A6B320928F86BC851530D63C82965D9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
14:15:34.0500 2072 hkmsvc - ok
14:15:34.0500 2072 hpn - ok
14:15:34.0546 2072 [ F6AACF5BCE2893E0C1754AFEB672E5C9 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
14:15:34.0687 2072 HTTP - ok
14:15:34.0718 2072 [ 58FE2F2DA3BC5573F4A35B3760D3125F ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
14:15:34.0859 2072 HTTPFilter - ok
14:15:34.0875 2072 i2omgmt - ok
14:15:34.0875 2072 i2omp - ok
14:15:34.0890 2072 [ C528E27945367191E7BAE364930B6932 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
14:15:35.0031 2072 i8042prt - ok
14:15:35.0125 2072 [ E7CC3AEAED9893A88876744CD439F76C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
14:15:35.0171 2072 idsvc ( UnsignedFile.Multi.Generic ) - warning
14:15:35.0171 2072 idsvc - detected UnsignedFile.Multi.Generic (1)
14:15:35.0203 2072 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
14:15:35.0328 2072 Imapi - ok
14:15:35.0359 2072 [ F7B93AAFAD33B2320954C17E26C8D361 ] ImapiService C:\WINDOWS\system32\imapi.exe
14:15:35.0500 2072 ImapiService - ok
14:15:35.0500 2072 ini910u - ok
14:15:35.0640 2072 [ A916995CB503172020DA3C35E1227AC7 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
14:15:35.0812 2072 IntcAzAudAddService - ok
14:15:35.0828 2072 IntelIde - ok
14:15:35.0859 2072 [ 27B290D632AF2CF3CF40BFDDB7370985 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
14:15:36.0000 2072 intelppm - ok
14:15:36.0015 2072 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
14:15:36.0156 2072 Ip6Fw - ok
14:15:36.0171 2072 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
14:15:36.0312 2072 IpFilterDriver - ok
14:15:36.0328 2072 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
14:15:36.0453 2072 IpInIp - ok
14:15:36.0484 2072 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
14:15:36.0625 2072 IpNat - ok
14:15:36.0656 2072 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
14:15:36.0796 2072 IPSec - ok
14:15:36.0812 2072 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
14:15:36.0937 2072 IRENUM - ok
14:15:36.0968 2072 [ CC9F8A2D60AED1A51A3AC34C59B987AE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
14:15:37.0109 2072 isapnp - ok
14:15:37.0125 2072 [ 1B6162FE7F66B1A71A4B70F941C4AA9B ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
14:15:37.0265 2072 Kbdclass - ok
14:15:37.0296 2072 [ 86C8F23616C6C6E5B2776901C17B945B ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
14:15:37.0437 2072 kbdhid - ok
14:15:37.0468 2072 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
14:15:37.0609 2072 kmixer - ok
14:15:37.0640 2072 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
14:15:37.0671 2072 KSecDD - ok
14:15:37.0718 2072 [ 21920AC69594AB021237054FA728FE46 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
14:15:37.0859 2072 lanmanserver - ok
14:15:37.0890 2072 [ 5190783F51A2D7A8495202C664D7C963 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
14:15:38.0046 2072 lanmanworkstation - ok
14:15:38.0046 2072 lbrtfdc - ok
14:15:38.0078 2072 [ 0AB159F536E3E8F7F07113702A07CCA5 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
14:15:38.0203 2072 LmHosts - ok
14:15:38.0234 2072 [ 4470E3C1E0C3378E4CAB137893C12C3A ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
14:15:38.0250 2072 MBAMProtector - ok
14:15:38.0296 2072 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
14:15:38.0328 2072 MBAMScheduler - ok
14:15:38.0359 2072 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
14:15:38.0390 2072 MBAMService - ok
14:15:38.0421 2072 [ 221CD1C815B8A6B79389C3F5D1018DE8 ] Messenger C:\WINDOWS\System32\msgsvc.dll
14:15:38.0578 2072 Messenger - ok
14:15:38.0593 2072 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
14:15:38.0718 2072 mnmdd - ok
14:15:38.0765 2072 [ 9A57D046F88F4B69751B11FD40088A61 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
14:15:38.0906 2072 mnmsrvc - ok
14:15:38.0937 2072 [ 44032B0C6D9954D3FD26438330B99EE7 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
14:15:39.0078 2072 Modem - ok
14:15:39.0140 2072 [ C7D9F9717916B34C1B00DD4834AF485C ] Monfilt C:\WINDOWS\system32\drivers\Monfilt.sys
14:15:39.0187 2072 Monfilt - ok
14:15:39.0203 2072 [ 4CB582831DBDE63CE43B45D771218374 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
14:15:39.0359 2072 Mouclass - ok
14:15:39.0375 2072 [ BB269EBA740737AB749B214D568B6812 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
14:15:39.0531 2072 mouhid - ok
14:15:39.0546 2072 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
14:15:39.0687 2072 MountMgr - ok
14:15:39.0687 2072 mraid35x - ok
14:15:39.0703 2072 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
14:15:39.0843 2072 MRxDAV - ok
14:15:39.0875 2072 [ 68755F0FF16070178B54674FE5B847B0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
14:15:40.0046 2072 MRxSmb - ok
14:15:40.0078 2072 [ 6DB4D1521CABA9A5FFAB54ADE0AE867D ] MSDTC C:\WINDOWS\system32\msdtc.exe
14:15:40.0218 2072 MSDTC - ok
14:15:40.0250 2072 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
14:15:40.0390 2072 Msfs - ok
14:15:40.0390 2072 MSIServer - ok
14:15:40.0421 2072 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
14:15:40.0546 2072 MSKSSRV - ok
14:15:40.0578 2072 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
14:15:40.0703 2072 MSPCLOCK - ok
14:15:40.0718 2072 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
14:15:40.0859 2072 MSPQM - ok
14:15:40.0875 2072 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
14:15:41.0015 2072 mssmbios - ok
14:15:41.0046 2072 [ 2F625D11385B1A94360BFC70AAEFDEE1 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
14:15:41.0171 2072 Mup - ok
14:15:41.0203 2072 [ 6EA362E9DB03D44F6B996F4D8BE237E9 ] napagent C:\WINDOWS\System32\qagentrt.dll
14:15:41.0359 2072 napagent - ok
14:15:41.0375 2072 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
14:15:41.0515 2072 NDIS - ok
14:15:41.0546 2072 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
14:15:41.0578 2072 NdisTapi - ok
14:15:41.0625 2072 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
14:15:41.0750 2072 Ndisuio - ok
14:15:41.0765 2072 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
14:15:41.0906 2072 NdisWan - ok
14:15:41.0937 2072 [ 6215023940CFD3702B46ABC304E1D45A ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
14:15:42.0078 2072 NDProxy - ok
14:15:42.0125 2072 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
14:15:42.0250 2072 NetBIOS - ok
14:15:42.0281 2072 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
14:15:42.0421 2072 NetBT - ok
14:15:42.0468 2072 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDE C:\WINDOWS\system32\netdde.exe
14:15:42.0609 2072 NetDDE - ok
14:15:42.0625 2072 [ 933DE774986EC85E48210C44AB431DE6 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
14:15:42.0765 2072 NetDDEdsdm - ok
14:15:42.0796 2072 [ ED0A176354487CEED65B80A7148AB739 ] Netlogon C:\WINDOWS\system32\lsass.exe
14:15:42.0937 2072 Netlogon - ok
14:15:42.0968 2072 [ 72E1E9E2977BE08BDEEDB6D8FD9D4D40 ] Netman C:\WINDOWS\System32\netman.dll
14:15:43.0125 2072 Netman - ok
14:15:43.0187 2072 [ F9102685F97F9BA85F4A70AFCF722CFE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
14:15:43.0187 2072 NetTcpPortSharing ( UnsignedFile.Multi.Generic ) - warning
14:15:43.0187 2072 NetTcpPortSharing - detected UnsignedFile.Multi.Generic (1)
14:15:43.0218 2072 [ AAC97DAB5F8A0573CF10E0EAC42A7724 ] Nla C:\WINDOWS\System32\mswsock.dll
14:15:43.0375 2072 Nla - ok
14:15:43.0406 2072 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
14:15:43.0531 2072 Npfs - ok
14:15:43.0562 2072 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
14:15:43.0718 2072 Ntfs - ok
14:15:43.0750 2072 [ ED0A176354487CEED65B80A7148AB739 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
14:15:43.0875 2072 NtLmSsp - ok
14:15:43.0937 2072 [ 023DD70573D644F3D9C8B1258A7BFD08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
14:15:44.0093 2072 NtmsSvc - ok
14:15:44.0125 2072 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
14:15:44.0265 2072 Null - ok
14:15:44.0828 2072 [ D3D204F64E3D16E11D3C0EBD2753B77E ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
14:15:45.0171 2072 nv - ok
14:15:45.0218 2072 [ 47FEB587AAE06F6717FCABF8BCF184FD ] NVHDA C:\WINDOWS\system32\drivers\nvhda32.sys
14:15:45.0234 2072 NVHDA - ok
14:15:45.0296 2072 [ 903A40C958D471F9D30D29FA6D2800A4 ] NvNetworkService C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
14:15:45.0359 2072 NvNetworkService - ok
14:15:45.0375 2072 [ 2FC25B526E743A6D0FB06DF38E068B97 ] NVSvc C:\WINDOWS\system32\nvsvc32.exe
14:15:45.0406 2072 NVSvc - ok
14:15:45.0421 2072 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
14:15:45.0546 2072 NwlnkFlt - ok
14:15:45.0562 2072 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
14:15:45.0687 2072 NwlnkFwd - ok
14:15:45.0718 2072 [ 46F8DB73B4A53E543F8E371DC7C75BAE ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
14:15:45.0859 2072 Parport - ok
14:15:45.0890 2072 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
14:15:46.0015 2072 PartMgr - ok
14:15:46.0046 2072 [ 1FAE19D0457176318BBA4A8795656EBC ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
14:15:46.0203 2072 ParVdm - ok
14:15:46.0218 2072 [ 6CE351D149CB4BEFC702951E471E1730 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
14:15:46.0359 2072 PCI - ok
14:15:46.0375 2072 PCIDump - ok
14:15:46.0390 2072 [ 2DA4EC85E0EA7A45C6B2A05820492D5A ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
14:15:46.0515 2072 PCIIde - ok
14:15:46.0562 2072 [ 4FC31E6C19A5CE5198B1ABFF94CAE758 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
14:15:46.0703 2072 Pcmcia - ok
14:15:46.0718 2072 PDCOMP - ok
14:15:46.0718 2072 PDFRAME - ok
14:15:46.0718 2072 PDRELI - ok
14:15:46.0734 2072 PDRFRAME - ok
14:15:46.0734 2072 perc2 - ok
14:15:46.0734 2072 perc2hib - ok
14:15:46.0765 2072 [ F0D2AE69035092BF22DAD6B50FAB85C2 ] PlugPlay C:\WINDOWS\system32\services.exe
14:15:46.0906 2072 PlugPlay - ok
14:15:46.0937 2072 [ 205E1B699FD3F2F9B036EEA2EC30C620 ] PnkBstrA C:\WINDOWS\system32\PnkBstrA.exe
14:15:46.0953 2072 PnkBstrA - ok
14:15:46.0968 2072 [ ED0A176354487CEED65B80A7148AB739 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
14:15:47.0093 2072 PolicyAgent - ok
14:15:47.0125 2072 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
14:15:47.0265 2072 PptpMiniport - ok
14:15:47.0281 2072 [ ED0A176354487CEED65B80A7148AB739 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
14:15:47.0406 2072 ProtectedStorage - ok
14:15:47.0406 2072 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
14:15:47.0562 2072 PSched - ok
14:15:47.0578 2072 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
14:15:47.0703 2072 Ptilink - ok
14:15:47.0718 2072 ql1080 - ok
14:15:47.0718 2072 Ql10wnt - ok
14:15:47.0718 2072 ql12160 - ok
14:15:47.0734 2072 ql1240 - ok
14:15:47.0734 2072 ql1280 - ok
14:15:47.0765 2072 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
14:15:47.0906 2072 RasAcd - ok
14:15:47.0921 2072 [ 2B5E44EA009F2F374B980E1E9A70635D ] RasAuto C:\WINDOWS\System32\rasauto.dll
14:15:48.0062 2072 RasAuto - ok
14:15:48.0093 2072 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
14:15:48.0234 2072 Rasl2tp - ok
14:15:48.0265 2072 [ D57554C664B64604BD1EE13EA2C07E77 ] RasMan C:\WINDOWS\System32\rasmans.dll
14:15:48.0406 2072 RasMan - ok
14:15:48.0437 2072 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
14:15:48.0562 2072 RasPppoe - ok
14:15:48.0562 2072 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
14:15:48.0718 2072 Raspti - ok
14:15:48.0734 2072 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
14:15:48.0890 2072 Rdbss - ok
14:15:48.0906 2072 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
14:15:49.0046 2072 RDPCDD - ok
14:15:49.0078 2072 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
14:15:49.0218 2072 rdpdr - ok
14:15:49.0250 2072 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
14:15:49.0296 2072 RDPWD - ok
14:15:49.0312 2072 [ C0D9D9711CB74EE9BC66353D8CBDAB0E ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
14:15:49.0468 2072 RDSessMgr - ok
14:15:49.0500 2072 [ 611BFD220305BE3A85AE876EA47D4AA5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
14:15:49.0625 2072 redbook - ok
14:15:49.0656 2072 [ 127C26B5371651043450E52542099ABA ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
14:15:49.0796 2072 RemoteAccess - ok
14:15:49.0812 2072 [ 8F31505484A190D5B22274708799F4EC ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
14:15:49.0953 2072 RemoteRegistry - ok
14:15:49.0953 2072 [ 718B3BDC0BC3C2F7D065A53D26202AF9 ] RpcLocator C:\WINDOWS\system32\locator.exe
14:15:50.0109 2072 RpcLocator - ok
14:15:50.0140 2072 [ C868F3AE15CF71A93F2AA3A32856D839 ] RpcSs C:\WINDOWS\system32\rpcss.dll
14:15:50.0265 2072 RpcSs - ok
14:15:50.0296 2072 [ 09AB2E71E58B078038E3BFDBA7FFC984 ] RSVP C:\WINDOWS\system32\rsvp.exe
14:15:50.0453 2072 RSVP - ok
14:15:50.0500 2072 [ 9E66148B3F27EE5D88DC13F9DAD5A9AB ] RTLE8023xp C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
14:15:50.0515 2072 RTLE8023xp - ok
14:15:50.0546 2072 [ ED0A176354487CEED65B80A7148AB739 ] SamSs C:\WINDOWS\system32\lsass.exe
14:15:50.0671 2072 SamSs - ok
14:15:50.0703 2072 [ 410046E401EB11E1E6749E9DEEA41D4A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
14:15:50.0859 2072 SCardSvr - ok
14:15:50.0890 2072 [ 3FF232A7731621B8902D81D42418C93C ] Schedule C:\WINDOWS\system32\schedsvc.dll
14:15:51.0046 2072 Schedule - ok
14:15:51.0078 2072 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
14:15:51.0218 2072 Secdrv - ok
14:15:51.0250 2072 [ 477E2C3CC5E4A0D635BCB0EA8DCAC3C6 ] seclogon C:\WINDOWS\System32\seclogon.dll
14:15:51.0390 2072 seclogon - ok
14:15:51.0406 2072 [ A530B75C10C23C9AB28FDB6CE719E21F ] SENS C:\WINDOWS\system32\sens.dll
14:15:51.0562 2072 SENS - ok
14:15:51.0578 2072 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
14:15:51.0718 2072 serenum - ok
14:15:51.0718 2072 [ B842729337C9B921615C40D3C1A1AF96 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
14:15:51.0875 2072 Serial - ok
14:15:51.0921 2072 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
14:15:52.0062 2072 Sfloppy - ok
14:15:52.0093 2072 [ F58FACA9621D2DB01BD0927D9A0A208E ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
14:15:52.0250 2072 SharedAccess - ok
14:15:52.0265 2072 [ B927443008910B412BEC72FC41C1BAD0 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
14:15:52.0406 2072 ShellHWDetection - ok
14:15:52.0406 2072 Simbad - ok
14:15:52.0421 2072 Sparrow - ok
14:15:52.0453 2072 [ DC8D2952FB6FFBAEC67BD1B93A34DF11 ] speedfan C:\WINDOWS\system32\speedfan.sys
14:15:52.0484 2072 speedfan - ok
14:15:52.0515 2072 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
14:15:52.0656 2072 splitter - ok
14:15:52.0687 2072 [ CB1090BCA0E7B40D0B5B4E4D66531809 ] Spooler C:\WINDOWS\system32\spoolsv.exe
14:15:52.0828 2072 Spooler - ok
14:15:52.0843 2072 [ 94610C8653635E4459316A0050D55CE7 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
14:15:52.0984 2072 sr - ok
14:15:53.0015 2072 [ 35B91147124F64AC8081A2EDB9EA4DEE ] srservice C:\WINDOWS\system32\srsvc.dll
14:15:53.0171 2072 srservice - ok
14:15:53.0218 2072 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
14:15:53.0265 2072 Srv - ok
14:15:53.0281 2072 [ BECD5271DC4E3B7C3D035F790FCBC1E5 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
14:15:53.0437 2072 SSDPSRV - ok
14:15:53.0453 2072 [ 306521935042FC0A6988D528643619B3 ] StarOpen C:\WINDOWS\system32\drivers\StarOpen.sys
14:15:53.0468 2072 StarOpen ( UnsignedFile.Multi.Generic ) - warning
14:15:53.0468 2072 StarOpen - detected UnsignedFile.Multi.Generic (1)
14:15:53.0531 2072 [ C1CDD9275F6A115BB0AE1D55D8D27BA6 ] stisvc C:\WINDOWS\system32\wiaservc.dll
14:15:53.0687 2072 stisvc - ok
14:15:53.0718 2072 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
14:15:53.0859 2072 swenum - ok
14:15:53.0890 2072 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
14:15:54.0031 2072 swmidi - ok
14:15:54.0046 2072 SwPrv - ok
14:15:54.0046 2072 symc810 - ok
14:15:54.0062 2072 symc8xx - ok
14:15:54.0062 2072 sym_hi - ok
14:15:54.0078 2072 sym_u3 - ok
14:15:54.0093 2072 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
14:15:54.0234 2072 sysaudio - ok
14:15:54.0265 2072 [ CE06F01B88ACE199A1BF460CAC29C110 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
14:15:54.0406 2072 SysmonLog - ok
14:15:54.0453 2072 [ C2546CD7A398476F9DF5614B2AE160E8 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
14:15:54.0593 2072 TapiSrv - ok
14:15:54.0625 2072 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
14:15:54.0656 2072 Tcpip - ok
14:15:54.0687 2072 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
14:15:54.0812 2072 TDPIPE - ok
14:15:54.0828 2072 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
14:15:54.0968 2072 TDTCP - ok
14:15:55.0000 2072 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
14:15:55.0156 2072 TermDD - ok
14:15:55.0187 2072 [ A75DD6FC3DBEE4FFF5EBC9F2C28BB66E ] TermService C:\WINDOWS\System32\termsrv.dll
14:15:55.0343 2072 TermService - ok
14:15:55.0375 2072 [ B927443008910B412BEC72FC41C1BAD0 ] Themes C:\WINDOWS\System32\shsvcs.dll
14:15:55.0515 2072 Themes - ok
14:15:55.0546 2072 [ CD0CC7B167D78043A41C98D4921EFB54 ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
14:15:55.0703 2072 TlntSvr - ok
14:15:55.0703 2072 TosIde - ok
14:15:55.0734 2072 [ 38853304CCB938D30E0C4CDE8D2C2A8A ] TrkWks C:\WINDOWS\system32\trkwks.dll
14:15:55.0875 2072 TrkWks - ok
14:15:55.0906 2072 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
14:15:56.0046 2072 Udfs - ok
14:15:56.0046 2072 ultra - ok
14:15:56.0078 2072 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
14:15:56.0234 2072 Update - ok
14:15:56.0265 2072 [ 651BD90DCEE5B7BDC74A2EB7C9266F9E ] upnphost C:\WINDOWS\System32\upnphost.dll
14:15:56.0421 2072 upnphost - ok
14:15:56.0437 2072 [ 20A0F6A11959E92908717D09E87D670D ] UPS C:\WINDOWS\System32\ups.exe
14:15:56.0578 2072 UPS - ok
14:15:56.0593 2072 [ 1B611611C28D2DF25BC057D79C6F13FC ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
14:15:56.0625 2072 usbccgp - ok
14:15:56.0640 2072 [ 4BAC8DF07F1D8434FC640E677A62204E ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
14:15:56.0671 2072 usbehci - ok
14:15:56.0703 2072 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
14:15:56.0843 2072 usbhub - ok
14:15:56.0875 2072 [ A32426D9B14A089EAA1D922E0C5801A9 ] usbstor C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
14:15:57.0015 2072 usbstor - ok
14:15:57.0046 2072 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
14:15:57.0171 2072 usbuhci - ok
14:15:57.0203 2072 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
14:15:57.0343 2072 VgaSave - ok
14:15:57.0359 2072 ViaIde - ok
14:15:57.0375 2072 [ 28A4B296B47782173C346E376CB374D1 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
14:15:57.0515 2072 VolSnap - ok
14:15:57.0578 2072 [ D6BA1A63D9E00933F1CD2A885573AFB2 ] VSS C:\WINDOWS\System32\vssvc.exe
14:15:57.0703 2072 VSS - ok
14:15:57.0734 2072 [ FA4E1CDBA256787F2149F4AAD07BC91F ] W32Time C:\WINDOWS\system32\w32time.dll
14:15:57.0890 2072 W32Time - ok
14:15:57.0906 2072 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
14:15:58.0031 2072 Wanarp - ok
14:15:58.0031 2072 WDICA - ok
14:15:58.0093 2072 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
14:15:58.0234 2072 wdmaud - ok
14:15:58.0265 2072 [ 47AE51048A82DFA1CD6B51D369F7E169 ] WebClient C:\WINDOWS\System32\webclnt.dll
14:15:58.0406 2072 WebClient - ok
14:15:58.0468 2072 [ E488332126E3B1182D2B8A0C35408EC6 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
14:15:58.0593 2072 winmgmt - ok
14:15:58.0640 2072 [ 6199B2AE3F9DB9CB6DB230471A1DC601 ] WmdmPmSN C:\WINDOWS\system32\mspmsnsv.dll
14:15:58.0796 2072 WmdmPmSN - ok
14:15:58.0828 2072 [ 6538D6BDE04B56737FE743C24D4CE83D ] Wmi C:\WINDOWS\System32\advapi32.dll
14:15:58.0984 2072 Wmi - ok
14:15:59.0015 2072 [ 23F6F03272F7E5679F1F050AED5ACEE6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
14:15:59.0156 2072 WmiApSrv - ok
14:15:59.0218 2072 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
14:15:59.0250 2072 WPFFontCache_v0400 - ok
14:15:59.0281 2072 [ 4C86D5FAF78194995AF9CC1075F65DD3 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
14:15:59.0437 2072 wscsvc - ok
14:15:59.0453 2072 [ C1364564800EE9784192145324A23308 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
14:15:59.0609 2072 wuauserv - ok
14:15:59.0640 2072 [ A27D4BA7264C0BF52F32D10405BEA1D4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
14:15:59.0812 2072 WZCSVC - ok
14:15:59.0843 2072 [ EAA4BB9EDB3FB10CF8979FE65E63658F ] xmlprov C:\WINDOWS\System32\xmlprov.dll
14:16:00.0000 2072 xmlprov - ok
14:16:00.0000 2072 ================ Scan global ===============================
14:16:00.0031 2072 [ F36278E42C8C5DF03CE17DAC8231C91C ] C:\WINDOWS\system32\basesrv.dll
14:16:00.0062 2072 [ 77A41C497ADB0C96D1E8DF6F71D843C0 ] C:\WINDOWS\system32\winsrv.dll
14:16:00.0078 2072 [ 77A41C497ADB0C96D1E8DF6F71D843C0 ] C:\WINDOWS\system32\winsrv.dll
14:16:00.0109 2072 [ F0D2AE69035092BF22DAD6B50FAB85C2 ] C:\WINDOWS\system32\services.exe
14:16:00.0109 2072 [Global] - ok
14:16:00.0125 2072 ================ Scan MBR ==================================
14:16:00.0140 2072 [ 413FC2A0C716421B3158746D63736515 ] \Device\Harddisk0\DR0
14:16:00.0359 2072 \Device\Harddisk0\DR0 - ok
14:16:00.0359 2072 ================ Scan VBR ==================================
14:16:00.0375 2072 [ FE3CA0BD42CF2E8FC52BE2C377EFFC09 ] \Device\Harddisk0\DR0\Partition1
14:16:00.0375 2072 \Device\Harddisk0\DR0\Partition1 - ok
14:16:00.0375 2072 ============================================================
14:16:00.0375 2072 Scan finished
14:16:00.0375 2072 ============================================================
14:16:00.0484 2860 Detected object count: 4
14:16:00.0484 2860 Actual detected object count: 4
14:17:09.0265 2860 C:\WINDOWS\system32\giveio.sys - copied to quarantine
14:17:09.0265 2860 giveio ( UnsignedFile.Multi.Generic ) - User select action: Quarantine
14:17:09.0406 2860 C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe - copied to quarantine
14:17:09.0406 2860 idsvc ( UnsignedFile.Multi.Generic ) - User select action: Quarantine
14:17:09.0484 2860 C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe - copied to quarantine
14:17:09.0484 2860 NetTcpPortSharing ( UnsignedFile.Multi.Generic ) - User select action: Quarantine
14:17:09.0546 2860 C:\WINDOWS\system32\drivers\StarOpen.sys - copied to quarantine
14:17:09.0546 2860 StarOpen ( UnsignedFile.Multi.Generic ) - User select action: Quarantine
14:17:13.0156 1060 Deinitialize success

ogueKiller V8.8.0 [Dec 27 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Mikes [Práva správce]
Mód : Kontrola -- Datum : 01/11/2014 14:13:55
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 3 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> NALEZENO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0xc0000033] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts

127.0.0.1 localhost

¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST3160815AS +++++
--- User ---
[MBR] 94bbf64e6f9ad93fe6726e5a3204da7a
[BSP] e77ad5769f3cfd63055855c794d6a0ae : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 99998 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_S_01112014_141355.txt >>

mikes1962 · Příspěvekod **mikes1962** » 11 led 2014 16:46

takže???

Příspěvekod **Orcus** » 11 led 2014 22:38

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "

- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání- Finished "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

====================================================

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

mikes1962 · Příspěvekod **mikes1962** » 12 led 2014 11:53

aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2014-01-12 11:44:29
-----------------------------
11:44:29.687 OS Version: Windows 5.1.2600 Service Pack 3
11:44:29.687 Number of processors: 2 586 0x604
11:44:29.687 ComputerName: MIKES-PC UserName: Mikes
11:44:30.390 Initialize success
11:44:35.000 AVAST engine defs: 14011101
11:44:55.781 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T1L0-3
11:44:55.781 Disk 0 Vendor: ST3160815AS 4.AAB Size: 152626MB BusType: 3
11:44:55.906 Disk 0 MBR read successfully
11:44:55.906 Disk 0 MBR scan
11:44:55.906 Disk 0 Windows XP default MBR code
11:44:55.906 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 99998 MB offset 63
11:44:55.921 Disk 0 scanning sectors +204796620
11:44:55.984 Disk 0 scanning C:\WINDOWS\system32\drivers
11:45:25.968 Service scanning
11:45:41.328 Modules scanning
11:45:46.640 Disk 0 trace - called modules:
11:45:46.656 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
11:45:46.656 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8a807ab8]
11:45:46.671 3 CLASSPNP.SYS[b80e8fd7] -> nt!IofCallDriver -> \Device\00000062[0x8a8c59e8]
11:45:46.671 5 ACPI.sys[b7f7f620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T1L0-3[0x8a8c5d98]
11:45:47.203 AVAST engine scan C:\WINDOWS
11:45:54.140 AVAST engine scan C:\WINDOWS\system32
11:48:34.000 AVAST engine scan C:\WINDOWS\system32\drivers
11:49:09.765 AVAST engine scan C:\Documents and Settings\Mikes
11:51:02.703 AVAST engine scan C:\Documents and Settings\All Users
11:51:11.484 Scan finished successfully
11:51:42.843 Verifying
11:51:52.859 Disk 0 Windows 501 MBR fixed successfully
11:51:58.515 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Mikes\Plocha\MBR.dat"
11:51:58.531 The log file has been saved successfully to "C:\Documents and Settings\Mikes\Plocha\aswMBR.txt"

RogueKiller V8.8.0 [Dec 27 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Mikes [Práva správce]
Mód : Oprava zástupců -- Datum : 01/12/2014 11:44:11
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0xc0000033] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Atributy souboru opraveny: ¤¤¤
Plocha: Success 0 / Fail 0
Rychlé spuštění: Success 0 / Fail 0
Programy: Success 0 / Fail 0
Menu Start: Success 0 / Fail 0
Složka uživatele: Success 0 / Fail 0
Dokumenty: Success 0 / Fail 0
Oblíbené: Success 0 / Fail 0
Obrázky: Success 0 / Fail 0
Hudba: Success 0 / Fail 0
Videa: Success 0 / Fail 0
Místní disky: Success 155 / Fail 0
Záloha: [NOT FOUND]

Ovladače:
[A:] \Device\Floppy0 -- 0x2 --> Skipped
[C:] \Device\HarddiskVolume1 -- 0x3 --> Restored
[F:] \Device\CdRom0 -- 0x5 --> Skipped

¤¤¤ Nákaza : ¤¤¤

Dokončeno : << RKreport[0]_SC_01122014_114411.txt >>
RKreport[0]_D_01122014_114127.txt;RKreport[0]_D_01122014_114401.txt;RKreport[0]_H_01122014_114402.txt
RKreport[0]_S_01122014_114125.txt;RKreport[0]_S_01122014_114344.txt

mikes1962 · Příspěvekod **mikes1962** » 12 led 2014 11:54

nevím sice na co to tu davam 20x to samý ale když vám to pomůže

prosím o kontrolu logu, Zatížený procesor

prosím o kontrolu logu, Zatížený procesor

Re: prosím o kontrolu logu, Zatížený procesor

Re: prosím o kontrolu logu, Zatížený procesor

Re: prosím o kontrolu logu, Zatížený procesor

Re: prosím o kontrolu logu, Zatížený procesor

Re: prosím o kontrolu logu, Zatížený procesor

Re: prosím o kontrolu logu, Zatížený procesor

Re: prosím o kontrolu logu, Zatížený procesor

Re: prosím o kontrolu logu, Zatížený procesor

Re: prosím o kontrolu logu, Zatížený procesor

Re: prosím o kontrolu logu, Zatížený procesor

Re: prosím o kontrolu logu, Zatížený procesor

Kdo je online