Samovolné vypínání noteboku

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zpráva
Autor
nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 Bře 2008 19:22
Místo/Bydliště: Kroměříž (ZL)

Samovolné vypínání noteboku

#1 Příspěvek od nom »

Logfile of random's system information tool 1.09 (written by random/random)
Run by HITTL ROMAN at 2012-01-02 15:37:24
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 160 GB (35%) free of 464 GB
Total RAM: 4091 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:37:42, on 2.1.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\HITTL ROMAN.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ˙ţ1
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra button: Unibet - {EF0124FD-AA19-45A0-A233-705CC28AA847} - C:\Microgaming\Poker\unibetpokerMPP\MPPoker.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs: C:\PROGRA~2\Google\GOOGLE~2\GO36F4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Autodesk Content Service - Unknown owner - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9957 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {EAD2053B-E6FD-41E3-B76E-27FF51F0F89F}
"C:\Program Files\Defraggler\df64.exe" C: /ts /user "HITTL ROMAN" /appPath "C:\Program Files\Defraggler" /shutdown
\??\C:\Windows\system32\conhost.exe "-2021340762-183862196312264310061459722024-689452647-1195654129-1567570808-1994854946
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe"
"C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"taskhost.exe"
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
WLIDSvcM.exe 2296
"C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-8f088d54-3a8a-479c-9a9d-f8986533b2d3 -SystemEventPortName:HostProcess-6092138a-dbc9-41d6-9562-cd7a171d6dab -IoCancelEventPortName:HostProcess-3db1f5ce-8dcc-4564-afcf-47dc7de2217d -NonStateChangingEventPortName:HostProcess-6fc8f0b9-75ae-4167-b0fb-0540eedb759a -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:fd3b60eb-e28b-409a-a1eb-ec7285cf0c35
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Inactive/Prefetch/ContentPrefetchPrerender1/PrerenderFromOmniboxHeuristic/ConservativeAlgorithm/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_http/WarmSocketImpact/warmest_socket/ --enable-print-preview --channel=3108.05425C00.1405186206 /prefetch:3
C:\Windows\system32\rundll32.exe "C:\PROGRA~2\Google\Chrome\APPLIC~1\160912~1.63\gcswf32.dll",BrokerMain browser=chrome
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Program Files (x86)\Google\Chrome\Application\16.0.912.63\gcswf32.dll" --lang=cs --channel=3108.058921C0.1721822343 --flash-broker=5104 /prefetch:4
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Users\HITTL ROMAN\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Defraggler Volume C Task.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla\Firefox\Profiles\e1a9hhyo.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://my.daemon-search.com/|http://start.icq.com/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26, {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29, {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.13, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.25"
prefs.js - "keyword.URL" - "http://www.google.com/search?sourceid=n ... t&hl=cs&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18]
"Description"=Veetle TV Core
"Path"=C:\Program Files (x86)\Veetle\plugins\npVeetle.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18]
"Description"=Veetle TV Player
"Path"=C:\Program Files (x86)\Veetle\Player\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@wolfram.com/Mathematica]
"Description"=Wolfram Mathematica Plug-in
"Path"=C:\Program Files (x86)\Common Files\Wolfram Research\Browser\8.0.1.2063897\npmathplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
GoogleDesktopMozilla.dll
GoogleDesktopMozillaStub.js
GoogleDesktopMozillaStub.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
googledesktop.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla\Firefox\Profiles\e1a9hhyo.default\extensions\
{e4a8a97b-f2ed-450b-b12d-ee082ba24781}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~2\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-07-27 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DDA57003-0068-4ed2-9D32-4D1EC707D94D}]
Microsoft Web Test Recorder 10.0 Helper - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2010-03-19 61360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePower Management]
C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-06-11 861216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AthBtTray]
C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2010-07-29 377504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtherosBtStack]
C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2010-07-29 594080]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray]
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2010-06-28 265984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]
I:\Anime\BitLord\BitLord.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisTecPMMUpdate]
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2010-03-11 407920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisUpdate]
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2010-03-11 201584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\egui]
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2918656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-05-05 30192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
C:\Program Files (x86)\Launch Manager\LManager.exe [2010-08-10 975952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2011-12-24 460872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Default Manager]
C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2010-05-10 439568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mwlDaemon]
C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [2010-05-27 349552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Online Backup]
C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-01 1155928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PLFSetI]
C:\Windows\PLFSetI.exe [2010-11-20 206208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-21 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Startup Protector]
C:\Program Files (x86)\Startup Protector\StartupProtector.exe [2007-07-22 1921024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SuiteTray]
C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-05-27 337264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-10 1890088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Wakoopa]
C:\Users\HITTL ROMAN\AppData\Local\Wakoopa\Wakoopa.exe [2011-08-31 1409376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinArranger]
C:\Program Files (x86)\ManageBytes\WinArranger\WinArranger.exe [2005-10-10 214016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^HITTL ROMAN^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-06-07 1195520]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"msacm.ac3filter"=ac3filter64.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -
.txt - open - C:\Windows\NOTEPAD.EXE %1

======List of files/folders created in the last 1 month======

2012-01-02 15:37:24 ----D---- C:\rsit
2012-01-01 20:16:13 ----A---- C:\Windows\SYSWOW64\system.sys
2012-01-01 20:16:13 ----A---- C:\Windows\SYSWOW64\sys3.sys
2012-01-01 20:16:13 ----A---- C:\Windows\SYSWOW64\sys2.sys
2012-01-01 20:16:12 ----D---- C:\Program Files (x86)\Startup Protector
2012-01-01 20:16:12 ----A---- C:\Windows\SYSWOW64\killsp.bat
2012-01-01 12:06:44 ----D---- C:\ProgramData\Friends Games
2011-12-31 21:03:10 ----D---- C:\Windows\pss
2011-12-29 14:51:08 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\dvdcss
2011-12-28 22:55:02 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Photo DVD Maker
2011-12-28 22:55:02 ----D---- C:\ProgramData\Anvsoft
2011-12-28 22:53:07 ----D---- C:\Program Files (x86)\AnvSoft
2011-12-28 22:41:34 ----D---- C:\Program Files\AnvSoft
2011-12-28 22:11:53 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Vso
2011-12-28 22:11:53 ----A---- C:\Users\HITTL ROMAN\AppData\Roaming\pcouffin.sys
2011-12-28 22:11:53 ----A---- C:\Users\HITTL ROMAN\AppData\Roaming\inst.exe
2011-12-28 21:54:23 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DCF
2011-12-21 20:42:30 ----A---- C:\Windows\SYSWOW64\RICHED.DLL
2011-12-20 00:42:40 ----A---- C:\Windows\system32\dfboottime.exe
2011-12-20 00:25:42 ----D---- C:\Program Files\Speccy
2011-12-20 00:23:49 ----D---- C:\Program Files\Recuva
2011-12-19 09:16:20 ----A---- C:\Windows\system32\drivers\97667536.sys
2011-12-19 06:45:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Malwarebytes
2011-12-19 06:45:14 ----D---- C:\ProgramData\Malwarebytes
2011-12-19 06:45:10 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-12-19 06:45:10 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-12-18 07:49:50 ----SHD---- C:\Windows\SYSWOW64\%APPDATA%
2011-12-17 18:00:12 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-12-17 18:00:12 ----A---- C:\Windows\system32\tzres.dll
2011-12-17 15:38:58 ----D---- C:\Program Files (x86)\Sifrovani
2011-12-16 08:23:50 ----A---- C:\Windows\system32\GDIPFONTCACHEV1.DAT
2011-12-15 16:21:18 ----A---- C:\Users\HITTL ROMAN\AppData\Roaming\bitlord_log.txt
2011-12-15 09:55:06 ----D---- C:\Program Files (x86)\TMbot
2011-12-14 22:33:40 ----D---- C:\ProgramData\Spybot - Search & Destroy
2011-12-14 22:33:40 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2011-12-14 22:15:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\TuneUp Software
2011-12-14 22:09:52 ----SHD---- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2011-12-14 22:05:00 ----D---- C:\ProgramData\TuneUp Software
2011-12-14 20:38:15 ----RD---- C:\Backup
2011-12-14 20:34:48 ----RD---- C:\Program Files (x86)\Skype
2011-12-14 18:30:37 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-12-14 18:30:37 ----A---- C:\Windows\system32\mshtmled.dll
2011-12-14 18:30:36 ----A---- C:\Windows\SYSWOW64\url.dll
2011-12-14 18:30:36 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-12-14 18:30:36 ----A---- C:\Windows\system32\url.dll
2011-12-14 18:30:36 ----A---- C:\Windows\system32\iertutil.dll
2011-12-14 18:30:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-12-14 18:30:35 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-12-14 18:30:35 ----A---- C:\Windows\system32\urlmon.dll
2011-12-14 18:30:35 ----A---- C:\Windows\system32\ieui.dll
2011-12-14 18:30:34 ----A---- C:\Windows\system32\jsproxy.dll
2011-12-14 18:30:33 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-12-14 18:30:33 ----A---- C:\Windows\system32\wininet.dll
2011-12-14 18:30:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-12-14 18:30:32 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-12-14 18:30:32 ----A---- C:\Windows\system32\jscript9.dll
2011-12-14 18:30:32 ----A---- C:\Windows\system32\jscript.dll
2011-12-14 18:30:31 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-12-14 18:30:31 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-12-14 18:30:28 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-12-14 18:30:28 ----A---- C:\Windows\system32\mshtml.dll
2011-12-14 18:30:27 ----A---- C:\Windows\system32\ieframe.dll
2011-12-14 13:24:50 ----D---- C:\f63502f75a76bf61f7d8ce2d823393
2011-12-14 13:01:07 ----A---- C:\Windows\system32\win32k.sys
2011-12-14 13:01:05 ----A---- C:\Windows\system32\EncDec.dll
2011-12-14 13:01:04 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-12-14 11:00:27 ----D---- C:\b5502a7e1fdc90134be248b8f06a
2011-12-14 10:48:22 ----AH---- C:\msg.vbs
2011-12-14 10:48:16 ----A---- C:\9455.txt
2011-12-14 10:48:16 ----A---- C:\9394.txt
2011-12-14 10:48:16 ----A---- C:\8525.txt
2011-12-14 10:48:16 ----A---- C:\8112.txt
2011-12-14 10:48:16 ----A---- C:\7602.txt
2011-12-14 10:48:16 ----A---- C:\7487.txt
2011-12-14 10:48:16 ----A---- C:\6596.txt
2011-12-14 10:48:16 ----A---- C:\5495.txt
2011-12-14 10:48:16 ----A---- C:\5108.txt
2011-12-14 10:48:16 ----A---- C:\32071.txt
2011-12-14 10:48:16 ----A---- C:\31730.txt
2011-12-14 10:48:16 ----A---- C:\31294.txt
2011-12-14 10:48:16 ----A---- C:\31233.txt
2011-12-14 10:48:16 ----A---- C:\31162.txt
2011-12-14 10:48:16 ----A---- C:\31063.txt
2011-12-14 10:48:16 ----A---- C:\29769.txt
2011-12-14 10:48:16 ----A---- C:\2971.txt
2011-12-14 10:48:16 ----A---- C:\2843.txt
2011-12-14 10:48:16 ----A---- C:\28425.txt
2011-12-14 10:48:16 ----A---- C:\27824.txt
2011-12-14 10:48:16 ----A---- C:\26731.txt
2011-12-14 10:48:16 ----A---- C:\26539.txt
2011-12-14 10:48:16 ----A---- C:\24730.txt
2011-12-14 10:48:16 ----A---- C:\24181.txt
2011-12-14 10:48:16 ----A---- C:\23123.txt
2011-12-14 10:48:16 ----A---- C:\23065.txt
2011-12-14 10:48:16 ----A---- C:\22621.txt
2011-12-14 10:48:16 ----A---- C:\22189.txt
2011-12-14 10:48:16 ----A---- C:\21883.txt
2011-12-14 10:48:16 ----A---- C:\2143.txt
2011-12-14 10:48:16 ----A---- C:\20863.txt
2011-12-14 10:48:16 ----A---- C:\19708.txt
2011-12-14 10:48:16 ----A---- C:\18942.txt
2011-12-14 10:48:16 ----A---- C:\18367.txt
2011-12-14 10:48:16 ----A---- C:\18338.txt
2011-12-14 10:48:16 ----A---- C:\18335.txt
2011-12-14 10:48:16 ----A---- C:\1797.txt
2011-12-14 10:48:16 ----A---- C:\16968.txt
2011-12-14 10:48:16 ----A---- C:\16476.txt
2011-12-14 10:48:16 ----A---- C:\16353.txt
2011-12-14 10:48:16 ----A---- C:\16045.txt
2011-12-14 10:48:16 ----A---- C:\16040.txt
2011-12-14 10:48:16 ----A---- C:\15590.txt
2011-12-14 10:48:16 ----A---- C:\13476.txt
2011-12-14 10:48:16 ----A---- C:\1307.txt
2011-12-14 10:48:16 ----A---- C:\13005.txt
2011-12-14 10:48:16 ----A---- C:\12831.txt
2011-12-14 10:48:16 ----A---- C:\11573.txt
2011-12-14 10:48:16 ----A---- C:\11402.txt
2011-12-14 10:48:16 ----A---- C:\10172.txt
2011-12-14 01:19:52 ----A---- C:\Windows\SYSWOW64\GPhotos.scr
2011-12-13 21:17:39 ----A---- C:\Windows\system32\csrsrv.dll
2011-12-13 18:18:25 ----D---- C:\ProgramData\PreEmptive Solutions
2011-12-13 17:29:10 ----D---- C:\ProgramData\VS
2011-12-13 17:13:22 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-12-13 17:13:22 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-12-13 17:13:17 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-12-13 17:13:17 ----A---- C:\Windows\system32\msls31.dll
2011-12-13 17:13:16 ----A---- C:\Windows\system32\msrating.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\pngfilt.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\occache.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\mshta.exe
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieUnatt.exe
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieakui.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieaksie.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\admparse.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-12-13 17:13:13 ----A---- C:\Windows\system32\mshtmler.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\msfeedssync.exe
2011-12-13 17:13:13 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\imgutil.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\iesysprep.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\iepeers.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\ieakeng.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-12-13 17:13:09 ----A---- C:\Windows\system32\dxtrans.dll
2011-12-13 17:13:09 ----A---- C:\Windows\system32\dxtmsft.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iesetup.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iernonce.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iedkcs32.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ieapfltr.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ieapfltr.dat
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ie4uinit.exe
2011-12-13 17:13:08 ----A---- C:\Windows\system32\icardie.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\wextract.exe
2011-12-13 17:13:07 ----A---- C:\Windows\system32\webcheck.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\vbscript.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\msfeeds.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\licmgr10.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\inseng.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\iexpress.exe
2011-12-13 16:58:20 ----A---- C:\Windows\SYSWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 16:58:20 ----A---- C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 16:58:19 ----A---- C:\Windows\system32\SQSRVRES.DLL
2011-12-13 16:54:07 ----D---- C:\Program Files\Microsoft.NET
2011-12-13 16:44:03 ----A---- C:\Windows\system32\shell32.dll
2011-12-13 16:43:54 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-12-10 19:25:08 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2011-12-10 19:25:07 ----D---- C:\Program Files (x86)\Xvid
2011-12-10 19:25:07 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2011-12-10 19:24:54 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2011-12-10 19:24:52 ----D---- C:\Program Files (x86)\ffdshow
2011-12-10 19:24:29 ----D---- C:\Program Files (x86)\Haali
2011-12-10 19:24:18 ----A---- C:\Windows\SYSWOW64\CoreAAC-uninstall.exe
2011-12-10 19:24:03 ----D---- C:\Program Files (x86)\AC3Filter
2011-12-10 19:23:33 ----D---- C:\Program Files (x86)\AviSynth 2.5
2011-12-10 19:22:48 ----D---- C:\Program Files (x86)\Avi2Dvd
2011-12-10 19:06:42 ----D---- C:\ProgramData\DVD Shrink
2011-12-10 19:06:41 ----D---- C:\Program Files (x86)\DVD Shrink

======List of files/folders modified in the last 1 month======

2012-01-02 15:37:39 ----D---- C:\Windows\Temp
2012-01-02 15:37:29 ----D---- C:\Program Files\trend micro
2012-01-02 15:31:32 ----D---- C:\Windows\system32\config
2012-01-02 13:39:12 ----D---- C:\Windows\system32\Tasks
2012-01-02 12:45:57 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Skype
2012-01-02 10:55:09 ----SHD---- C:\System Volume Information
2012-01-01 20:18:07 ----RD---- C:\Program Files (x86)
2012-01-01 20:16:13 ----RASHD---- C:\Windows\SysWOW64
2012-01-01 19:06:34 ----SHD---- C:\Windows\Installer
2012-01-01 19:06:32 ----SHD---- C:\Config.Msi
2012-01-01 19:06:30 ----D---- C:\Program Files (x86)\WebKeySoft
2012-01-01 19:04:18 ----D---- C:\Windows\system32\catroot2
2012-01-01 12:14:30 ----AD---- C:\ProgramData\Temp
2012-01-01 12:06:44 ----HD---- C:\ProgramData
2012-01-01 00:25:06 ----D---- C:\Program Files (x86)\Common Files
2012-01-01 00:18:09 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\SoftGrid Client
2011-12-31 22:12:35 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\CodeLite
2011-12-31 21:13:46 ----D---- C:\Windows\System32
2011-12-31 21:13:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-12-31 21:13:45 ----D---- C:\Windows\inf
2011-12-31 21:03:10 ----D---- C:\Windows
2011-12-31 14:28:16 ----D---- C:\Windows\system32\drivers
2011-12-31 12:58:57 ----D---- C:\Windows\Prefetch
2011-12-31 12:55:23 ----D---- C:\Windows\system32\catroot
2011-12-31 12:29:09 ----D---- C:\Windows\system32\drivers\UMDF
2011-12-31 08:26:35 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-12-28 22:41:34 ----RD---- C:\Program Files
2011-12-26 21:38:04 ----HD---- C:\Program Files (x86)\Temp
2011-12-26 21:37:56 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-12-26 21:37:48 ----D---- C:\Windows\system32\DriverStore
2011-12-26 21:08:07 ----D---- C:\Windows\system32\NDF
2011-12-25 18:27:05 ----D---- C:\Program Files (x86)\VirtuaGirl HD
2011-12-25 18:26:37 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DAEMON Tools Lite
2011-12-25 18:03:06 ----D---- C:\Program Files (x86)\Google
2011-12-25 15:14:07 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-12-24 07:23:46 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mumble
2011-12-21 19:57:29 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\vlc
2011-12-20 00:21:36 ----D---- C:\Program Files\Defraggler
2011-12-19 09:04:15 ----D---- C:\Windows\SYSWOW64\drivers
2011-12-18 13:42:35 ----D---- C:\SURFCAM
2011-12-18 13:40:23 ----RSD---- C:\Windows\Fonts
2011-12-18 13:00:00 ----SD---- C:\Users\HITTL ROMAN\AppData\Roaming\Microsoft
2011-12-18 10:29:16 ----D---- C:\Windows\Microsoft.NET
2011-12-18 07:43:34 ----RSD---- C:\Windows\assembly
2011-12-18 07:25:21 ----A---- C:\Windows\system32\MRT.exe
2011-12-18 07:24:52 ----D---- C:\Windows\winsxs
2011-12-18 07:24:34 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-12-18 07:24:34 ----D---- C:\Windows\system32\cs-CZ
2011-12-17 12:00:24 ----D---- C:\Program Files (x86)\Opera
2011-12-17 11:58:00 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Opera
2011-12-16 22:39:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\BitLord
2011-12-16 22:32:14 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Aegisub
2011-12-15 12:54:22 ----D---- C:\Program Files (x86)\Trillian
2011-12-15 12:43:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\ICQ
2011-12-14 23:15:00 ----D---- C:\Windows\system32\drivers\etc
2011-12-14 21:49:51 ----D---- C:\Windows\Tasks
2011-12-14 21:49:51 ----D---- C:\Windows\system32\wfp
2011-12-14 21:49:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Ventrilo
2011-12-14 21:49:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mp3tag
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\gtk-2.0
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\GHISLER
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Audacity
2011-12-14 21:49:33 ----RD---- C:\Users
2011-12-14 21:49:01 ----D---- C:\Windows\registration
2011-12-14 21:48:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Virtual Mechanics
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Trillian
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Sun
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Sony
2011-12-14 21:48:48 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\OpenOffice.org
2011-12-14 21:48:48 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\OpenCandy
2011-12-14 21:48:42 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla
2011-12-14 21:48:26 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Autodesk
2011-12-14 21:48:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Adobe
2011-12-14 20:58:45 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Wireshark
2011-12-14 20:58:44 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\TS3Client
2011-12-14 20:58:42 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\SolidWorks
2011-12-14 20:58:22 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Notebook Hardware Control
2011-12-14 20:58:02 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mount&Blade Warband
2011-12-14 20:57:22 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DWGEditor
2011-12-14 20:57:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\BatteryBar
2011-12-14 20:34:47 ----D---- C:\ProgramData\Skype
2011-12-14 20:16:52 ----D---- C:\Windows\system32\LogFiles
2011-12-14 19:17:34 ----D---- C:\Program Files (x86)\Internet Explorer
2011-12-14 19:17:33 ----D---- C:\Program Files\Internet Explorer
2011-12-14 19:17:32 ----D---- C:\Windows\SYSWOW64\migration
2011-12-14 19:17:25 ----D---- C:\Windows\system32\migration
2011-12-14 18:40:37 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-12-14 13:09:50 ----D---- C:\Program Files\CCleaner
2011-12-14 12:54:43 ----SHD---- C:\Recovery
2011-12-14 12:54:27 ----D---- C:\Windows\system32\Recovery
2011-12-14 12:54:18 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\WinRAR
2011-12-14 09:11:27 ----D---- C:\ProgramData\boost_interprocess
2011-12-13 21:01:57 ----D---- C:\Windows\SYSWOW64\en-US
2011-12-13 21:01:56 ----D---- C:\Windows\system32\en-US
2011-12-13 21:01:56 ----D---- C:\Windows\PolicyDefinitions
2011-12-13 18:24:51 ----D---- C:\Program Files\MSBuild
2011-12-13 18:24:47 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 10.0
2011-12-13 17:29:51 ----D---- C:\Program Files (x86)\Microsoft SDKs
2011-12-13 17:17:29 ----D---- C:\Windows\Logs
2011-12-13 16:54:06 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-12-13 16:51:14 ----D---- C:\Program Files\Microsoft SQL Server
2011-12-13 16:51:14 ----D---- C:\Program Files (x86)\Microsoft SQL Server

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 97667536;97667536; C:\Windows\system32\DRIVERS\97667536.sys [2011-12-19 460888]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-23 16440]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-01-13 513080]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2011-11-25 88480]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 125296]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2011-11-25 46400]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-04-21 6406144]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-20 188928]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-05-11 2229608]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-07-29 28832]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-05-14 384040]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2011-12-10 23152]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2010-04-20 18432]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-06-17 246376]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2010-01-27 231328]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2010-09-14 760168]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2010-09-14 268648]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2010-09-14 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2010-09-14 22376]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-12-10 301104]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2010-07-09 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 SentinelFilter;SentinelFilter; \??\C:\Windows\syswow64 []
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-07-29 36000]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-07-29 51872]
S3 Bridge;@%SystemRoot%\system32\bridgeres.dll,-3; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-07-29 295072]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-07-29 201376]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-07-29 51872]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-07-29 154272]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-07-29 270496]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthMtpEnum;Modul pro výčet zařízení Bluetooth MTP; C:\Windows\system32\DRIVERS\BthMtpEnum.sys [2009-07-14 64512]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena Messenger\Room\safedrv.sys []
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-12-02 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-12-02 27136]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-12-02 9216]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2010-12-02 9216]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2010-12-22 154256]
S3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]
S3 VSPerfDrv100;Performance Tools Driver 10.0; \??\C:\Program Files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2011-01-18 68440]
S4 RsFx0105;RsFx0105 Driver; C:\Windows\system32\DRIVERS\RsFx0105.sys [2011-09-22 311144]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-21 202752]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2010-07-29 52896]
R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2011-09-22 58345832]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-01 2804568]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-01-15 66872]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2011-01-15 107832]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-07-27 249136]
R2 SentinelKeysServer;Sentinel Keys Server; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [2006-08-22 316992]
R2 SentinelProtectionServer;Sentinel Protection Server; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [2006-12-21 206400]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-09-14 508264]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2011-09-22 154984]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-09-14 219496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 42360]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-06-14 1431888]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-11-20 655624]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-05-05 30192]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 MWLService;MyWinLocker Service; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-01-13 1255736]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2011-09-22 431464]
S4 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2011-09-22 255336]

-----------------EOF-----------------

nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 Bře 2008 19:22
Místo/Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#2 Příspěvek od nom »

Zde přidávám info a prosím o radu :
Počítač běžně funguje ,ale zhruba po hodině se vždy vypne prosím o radu stává se to zhruba 14 dnů.

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Samovolné vypínání noteboku

#3 Příspěvek od motji »

Dobrý večer :)
Vypne nebo restartuje?
Při jaké činnosti?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 Bře 2008 19:22
Místo/Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#4 Příspěvek od nom »

Vypne a většinou mam spuštěný prohlížeč + nějáké PDF ale dělá to i bez toho aniž bych něco pustil skoušel sem ho nechat naběhnout a běžet ale po hodině a něco se sam od sebe vynul a v časových ulohách sem to nikde nemohl najít programy po spuštění sem vypnul už nevím co s tím dál

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Samovolné vypínání noteboku

#5 Příspěvek od motji »

Tyto soubory znáte?
C:\9455.txt
C:\9394.txt
C:\8525.txt
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 Bře 2008 19:22
Místo/Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#6 Příspěvek od nom »

Neznám ale jsou to prázdné txt soubory ale na C je jich něják moc na to že o nich nevím mam je smazat ?

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Samovolné vypínání noteboku

#7 Příspěvek od motji »

Máte jich tam hodně :D , to datum Vám nic neříká?

:arrow: Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 Bře 2008 19:22
Místo/Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#8 Příspěvek od nom »

mno ríká už to vidím to je +- den kdy my to začalo blbnout jinak už jdu na ten combofix

nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 Bře 2008 19:22
Místo/Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#9 Příspěvek od nom »

ComboFix 12-01-02.01 - HITTL ROMAN 02.01.2012 21:35:27.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4091.2486 [GMT 1:00]
Spuštěný z: c:\users\HITTL ROMAN\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Install.exe
C:\msg.vbs
c:\programdata\FullRemove.exe
c:\users\HITTL ROMAN\AppData\Roaming\inst.exe
c:\users\Public\Documents\NTIMMV9P.dll
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\system32\drivers\etc\hosts.ics
c:\windows\SysWow64\system.sys
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-12-02 do 2012-01-02 )))))))))))))))))))))))))))))))
.
.
2012-01-02 20:54 . 2012-01-02 20:54 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-01-02 20:54 . 2012-01-02 20:54 -------- d-----w- c:\users\Guest\AppData\Local\temp
2012-01-02 20:29 . 2012-01-02 20:29 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{993AF642-2A29-46CA-BFEE-40027464104B}\offreg.dll
2012-01-02 14:37 . 2012-01-02 14:37 -------- d-----w- C:\rsit
2012-01-01 19:16 . 2007-07-19 20:56 94208 ----a-w- c:\windows\SysWow64\sys3.sys
2012-01-01 19:16 . 2007-07-14 21:34 102400 ----a-w- c:\windows\SysWow64\sys2.sys
2012-01-01 19:16 . 2012-01-01 19:16 -------- d-----w- c:\program files (x86)\Startup Protector
2012-01-01 19:16 . 2007-07-19 20:44 36 ----a-w- c:\windows\SysWow64\killsp.bat
2012-01-01 19:10 . 2004-03-08 23:00 124688 ----a-w- c:\windows\SysWow64\mswinsck.ocx
2012-01-01 11:06 . 2012-01-01 11:06 -------- d-----w- c:\programdata\Friends Games
2011-12-30 18:08 . 2011-11-21 11:40 8822856 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{993AF642-2A29-46CA-BFEE-40027464104B}\mpengine.dll
2011-12-29 13:51 . 2011-12-29 13:51 -------- d-----w- c:\users\HITTL ROMAN\AppData\Roaming\dvdcss
2011-12-28 21:55 . 2011-12-28 21:55 -------- d-----w- c:\users\HITTL ROMAN\AppData\Roaming\Photo DVD Maker
2011-12-28 21:55 . 2011-12-28 21:55 -------- d-----w- c:\programdata\Anvsoft
2011-12-28 21:53 . 2011-12-28 21:53 -------- d-----w- c:\program files (x86)\AnvSoft
2011-12-28 21:41 . 2011-12-28 21:41 -------- d-----w- c:\program files\AnvSoft
2011-12-28 21:11 . 2011-12-29 13:39 -------- d-----w- c:\users\HITTL ROMAN\AppData\Roaming\Vso
2011-12-28 21:11 . 2011-12-29 13:39 82816 ----a-w- c:\users\HITTL ROMAN\AppData\Roaming\pcouffin.sys
2011-12-28 20:54 . 2011-12-28 20:54 -------- d-----w- c:\users\HITTL ROMAN\AppData\Roaming\DCF
2011-12-25 14:14 . 2011-12-21 07:39 121816 ----a-w- c:\program files (x86)\Mozilla Firefox\components\browsercomps.dll
2011-12-25 14:14 . 2011-12-21 07:39 97240 ----a-w- c:\program files (x86)\Mozilla Firefox\libEGL.dll
2011-12-25 14:14 . 2011-12-21 07:39 814040 ----a-w- c:\program files (x86)\Mozilla Firefox\mozsqlite3.dll
2011-12-25 14:14 . 2011-12-21 07:39 486360 ----a-w- c:\program files (x86)\Mozilla Firefox\libGLESv2.dll
2011-12-25 14:14 . 2011-12-21 07:39 43992 ----a-w- c:\program files (x86)\Mozilla Firefox\mozutils.dll
2011-12-25 14:14 . 2011-12-21 07:39 2124760 ----a-w- c:\program files (x86)\Mozilla Firefox\mozjs.dll
2011-12-25 14:14 . 2011-12-21 07:39 15832 ----a-w- c:\program files (x86)\Mozilla Firefox\mozalloc.dll
2011-12-25 14:14 . 2011-12-21 04:29 2106216 ----a-w- c:\program files (x86)\Mozilla Firefox\D3DCompiler_43.dll
2011-12-25 14:14 . 2011-12-21 04:29 1998168 ----a-w- c:\program files (x86)\Mozilla Firefox\d3dx9_43.dll
2011-12-25 14:14 . 2011-12-21 04:29 626688 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcr80.dll
2011-12-25 14:14 . 2011-12-21 04:29 548864 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcp80.dll
2011-12-25 14:14 . 2011-12-21 04:29 479232 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcm80.dll
2011-12-23 08:40 . 2011-12-23 08:40 -------- d-----w- c:\users\HITTL ROMAN\yBook
2011-12-21 19:42 . 1998-05-11 19:01 240944 ----a-w- c:\windows\SysWow64\RICHED.DLL
2011-12-19 23:42 . 2011-12-19 23:42 119808 ----a-w- c:\windows\system32\dfboottime.exe
2011-12-19 23:25 . 2011-12-19 23:39 -------- d-----w- c:\program files\Speccy
2011-12-19 23:23 . 2011-12-19 23:23 -------- d-----w- c:\program files\Recuva
2011-12-19 08:16 . 2011-12-19 09:25 460888 ----a-w- c:\windows\system32\drivers\97667536.sys
2011-12-19 05:45 . 2011-12-19 05:45 -------- d-----w- c:\users\HITTL ROMAN\AppData\Roaming\Malwarebytes
2011-12-19 05:45 . 2011-12-19 05:45 -------- d-----w- c:\programdata\Malwarebytes
2011-12-19 05:45 . 2011-12-31 15:17 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-12-19 05:45 . 2011-12-10 14:24 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-12-18 06:49 . 2011-12-18 06:49 -------- d-sh--w- c:\windows\SysWow64\%APPDATA%
2011-12-17 17:00 . 2011-11-05 05:32 2048 ----a-w- c:\windows\system32\tzres.dll
2011-12-17 17:00 . 2011-11-05 04:26 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2011-12-17 14:38 . 2011-12-17 14:39 -------- d-----w- c:\program files (x86)\Sifrovani
2011-12-16 16:20 . 2011-12-16 16:20 -------- d-----w- c:\users\Public\HittlWorkspace
2011-12-15 08:55 . 2012-01-02 15:47 -------- d-----w- c:\program files (x86)\TMbot
2011-12-14 21:33 . 2011-12-19 08:16 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2011-12-14 21:33 . 2011-12-14 21:39 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy
2011-12-14 21:15 . 2011-12-14 21:15 -------- d-----w- c:\users\HITTL ROMAN\AppData\Roaming\TuneUp Software
2011-12-14 21:09 . 2011-12-14 21:09 -------- d-sh--w- c:\programdata\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2011-12-14 21:05 . 2011-12-14 21:16 -------- d-----w- c:\programdata\TuneUp Software
2011-12-14 19:38 . 2011-12-14 20:49 -------- d-----r- C:\Backup
2011-12-14 19:34 . 2011-12-14 19:34 -------- d-----r- c:\program files (x86)\Skype
2011-12-14 12:24 . 2011-12-14 12:24 -------- d-----w- C:\f63502f75a76bf61f7d8ce2d823393
2011-12-14 12:01 . 2011-11-24 04:52 3145216 ----a-w- c:\windows\system32\win32k.sys
2011-12-14 12:01 . 2011-10-15 06:31 723456 ----a-w- c:\windows\system32\EncDec.dll
2011-12-14 12:01 . 2011-10-15 05:38 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
2011-12-14 10:00 . 2011-12-14 19:15 -------- d-----w- C:\b5502a7e1fdc90134be248b8f06a
2011-12-14 00:19 . 2011-12-14 00:19 4448256 ----a-w- c:\windows\SysWow64\GPhotos.scr
2011-12-13 20:17 . 2011-10-26 05:21 43520 ----a-w- c:\windows\system32\csrsrv.dll
2011-12-13 17:18 . 2011-12-13 17:18 -------- d-----w- c:\programdata\PreEmptive Solutions
2011-12-13 16:29 . 2011-12-13 16:29 -------- d-----w- c:\programdata\VS
2011-12-13 15:58 . 2011-09-22 20:06 109416 ----a-w- c:\windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 15:58 . 2011-09-22 16:18 73064 ----a-w- c:\windows\SysWow64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 15:58 . 2011-09-22 20:07 105832 ----a-w- c:\windows\system32\SQSRVRES.DLL
2011-12-13 15:54 . 2011-12-13 15:54 -------- d-----w- c:\program files\Microsoft.NET
2011-12-10 18:25 . 2009-06-07 15:25 77824 ----a-w- c:\windows\SysWow64\xvid.ax
2011-12-10 18:25 . 2009-06-07 15:16 819200 ----a-w- c:\windows\SysWow64\xvidcore.dll
2011-12-10 18:25 . 2011-12-10 18:25 -------- d-----w- c:\program files (x86)\Xvid
2011-12-10 18:25 . 2009-06-07 15:24 180224 ----a-w- c:\windows\SysWow64\xvidvfw.dll
2011-12-10 18:24 . 2010-03-02 23:00 85504 ----a-w- c:\windows\SysWow64\ff_vfw.dll
2011-12-10 18:24 . 2010-03-02 23:00 50688 ----a-w- c:\windows\SysWow64\ff_acm.acm
2011-12-10 18:24 . 2011-12-10 18:24 -------- d-----w- c:\program files (x86)\ffdshow
2011-12-10 18:24 . 2011-12-10 18:24 -------- d-----w- c:\program files (x86)\Haali
2011-12-10 18:24 . 2011-12-10 18:24 33019 ----a-w- c:\windows\SysWow64\CoreAAC-uninstall.exe
2011-12-10 18:24 . 2009-08-11 20:22 580096 ----a-w- c:\windows\system32\ac3filter64.acm
2011-12-10 18:24 . 2009-08-11 20:18 497664 ----a-w- c:\windows\SysWow64\ac3filter.acm
2011-12-10 18:24 . 2011-12-10 18:24 -------- d-----w- c:\program files (x86)\AC3Filter
2011-12-10 18:23 . 2011-12-10 18:23 -------- d-----w- c:\program files (x86)\AviSynth 2.5
2011-12-10 18:22 . 2011-12-10 22:40 -------- d-----w- c:\program files (x86)\Avi2Dvd
2011-12-10 18:06 . 2011-12-27 12:25 -------- d-----w- c:\programdata\DVD Shrink
2011-12-10 18:06 . 2011-12-10 18:06 -------- d-----w- c:\program files (x86)\DVD Shrink
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-18 06:51 . 2011-09-25 10:01 2480064 ----a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll
2011-12-01 15:11 . 2011-05-14 07:47 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-25 20:52 . 2011-11-25 20:32 88480 ----a-w- c:\windows\system32\drivers\atksgt.sys
2011-11-25 20:52 . 2011-11-25 20:32 46400 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2011-11-20 16:10 . 2011-11-20 16:10 152904 ----a-w- c:\windows\SysWow64\vghd.scr
2011-11-15 13:29 . 2011-01-28 14:19 270720 ------w- c:\windows\system32\MpSigStub.exe
2007-09-10 09:22 . 2011-02-12 08:36 3200960 ----a-w- c:\program files (x86)\Common Files\vcredist_x64.exe
2007-09-10 09:22 . 2011-02-12 08:36 2723264 ----a-w- c:\program files (x86)\Common Files\vcredist_x86.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~2\Google\GOOGLE~2\GoogleDesktopNetwork3.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ dfboottime \??\c:\windows\System32\dfboottime.cfg\0autocheck autochk *
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [x]
R3 ATHDFU;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [x]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [x]
R3 BthMtpEnum;Modul pro výčet zařízení Bluetooth MTP;c:\windows\system32\DRIVERS\BthMtpEnum.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-06-14 1431888]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files (x86)\Garena Messenger\Room\safedrv.sys [x]
R3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-05-05 30192]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [x]
R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\DRIVERS\vcsvad.sys [x]
R3 VSPerfDrv100;Performance Tools Driver 10.0;c:\program files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2011-01-18 68440]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
R4 RsFx0105;RsFx0105 Driver;c:\windows\system32\DRIVERS\RsFx0105.sys [x]
R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2011-09-22 431464]
S0 97667536;97667536;c:\windows\system32\DRIVERS\97667536.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2010-07-29 52896]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 SentinelKeysServer;Sentinel Keys Server;c:\program files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [2006-08-22 316992]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-09-14 508264]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-28 243232]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-09-14 219496]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-01-02 c:\windows\Tasks\Defraggler Volume C Task.job
- c:\program files\Defraggler\df64.exe [2011-11-08 09:12]
.
2012-01-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 16:38]
.
2012-01-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 16:38]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/
uLocal Page = c:\windows\system32\blank.htm
uDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://acer.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: DhcpNameServer = 192.168.1.1
CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\shell32.dll
FF - ProfilePath - c:\users\HITTL ROMAN\AppData\Roaming\Mozilla\Firefox\Profiles\e1a9hhyo.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://my.daemon-search.com/|http://start.icq.com/
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?sourceid=navclient&hl=cs&q=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-CoreAAC Audio Decoder - c:\windows\system32\CoreAAC-uninstall.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\SentinelFilter]
"ImagePath"="\??\c:\windows\System32"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1498072532-3510031312-3464764778-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1498072532-3510031312-3464764778-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-1498072532-3510031312-3464764778-1000\Software\SecuROM\License information*]
"datasecu"=hex:16,ab,fc,6b,45,d7,aa,12,01,fe,99,d8,38,b1,f6,a5,c5,c9,9f,b1,14,
e1,31,ae,fc,16,c7,fe,c0,b7,5a,84,81,89,6d,e7,3b,7e,38,e9,d7,d5,a2,f2,bc,7b,\
"rkeysecu"=hex:04,65,e3,37,bf,cb,2a,37,84,72,98,06,0a,41,45,ed
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-01-02 22:00:40
ComboFix-quarantined-files.txt 2012-01-02 21:00
.
Před spuštěním: Volných bajtů: 161 713 319 936
Po spuštění: Volných bajtů: 161 326 440 448
.
- - End Of File - - B29A43D161ED9E05B66F1080D1393EA3

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Samovolné vypínání noteboku

#10 Příspěvek od motji »

:arrow: Stáhněte TDSSKiller http://support.kaspersky.com/downloads/ ... killer.exe
- a uložte ho na plochu.
- 2x klikněte na ikonu programu a spusťte
- dejte volbu Spustit kontrolu - pak potvrdte start sken
- pokud program najde infikovaný soubor, ukáže se Vám předvolená akce Cure, v tom případě potvrdte tlačítko Continue
- pokud bude chtít program restartovat počítač, klikněte na tlačítko Reboot Now
- pokud si restart nevyžádá, klikněte na tlačítko Report. Měl vy na Vás vyskočit log, obsah logu zkopírujte do svého topicu.
- pokud se log nezobrazí, je uložený ve Vašem kořenovém adresáři.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 Bře 2008 19:22
Místo/Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#11 Příspěvek od nom »

22:24:50.0592 5880 TDSS rootkit removing tool 2.6.25.0 Dec 23 2011 14:51:16
22:24:50.0703 5880 ============================================================
22:24:50.0703 5880 Current date / time: 2012/01/02 22:24:50.0703
22:24:50.0703 5880 SystemInfo:
22:24:50.0703 5880
22:24:50.0703 5880 OS Version: 6.1.7601 ServicePack: 1.0
22:24:50.0703 5880 Product type: Workstation
22:24:50.0703 5880 ComputerName: NOMOVO-NOTEBOOK
22:24:50.0704 5880 UserName: HITTL ROMAN
22:24:50.0704 5880 Windows directory: C:\Windows
22:24:50.0704 5880 System windows directory: C:\Windows
22:24:50.0704 5880 Running under WOW64
22:24:50.0704 5880 Processor architecture: Intel x64
22:24:50.0704 5880 Number of processors: 4
22:24:50.0704 5880 Page size: 0x1000
22:24:50.0704 5880 Boot type: Normal boot
22:24:50.0704 5880 ============================================================
22:24:56.0826 5880 Initialize success
22:25:17.0508 3916 ============================================================
22:25:17.0508 3916 Scan started
22:25:17.0508 3916 Mode: Manual;
22:25:17.0508 3916 ============================================================
22:25:22.0809 3916 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
22:25:22.0811 3916 1394ohci - ok
22:25:23.0957 3916 97667536 (e656fe10d6d27794afa08136685a69e8) C:\Windows\system32\DRIVERS\97667536.sys
22:25:23.0961 3916 97667536 - ok
22:25:24.0646 3916 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
22:25:24.0648 3916 ACPI - ok
22:25:24.0796 3916 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
22:25:24.0796 3916 AcpiPmi - ok
22:25:24.0963 3916 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
22:25:24.0966 3916 adp94xx - ok
22:25:25.0178 3916 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
22:25:25.0181 3916 adpahci - ok
22:25:25.0332 3916 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
22:25:25.0334 3916 adpu320 - ok
22:25:25.0534 3916 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys
22:25:25.0537 3916 AFD - ok
22:25:25.0666 3916 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
22:25:25.0667 3916 agp440 - ok
22:25:25.0900 3916 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
22:25:25.0901 3916 aliide - ok
22:25:26.0032 3916 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
22:25:26.0032 3916 amdide - ok
22:25:26.0136 3916 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
22:25:26.0137 3916 AmdK8 - ok
22:25:26.0531 3916 amdkmdag (d3e6b2e1394d93fe9db0ba24814b0d8f) C:\Windows\system32\DRIVERS\atipmdag.sys
22:25:26.0572 3916 amdkmdag - ok
22:25:26.0822 3916 amdkmdap (cc4d915d786d3da973b2ea9b95d59a29) C:\Windows\system32\DRIVERS\atikmpag.sys
22:25:26.0823 3916 amdkmdap - ok
22:25:26.0887 3916 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
22:25:26.0887 3916 AmdPPM - ok
22:25:27.0084 3916 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
22:25:27.0085 3916 amdsata - ok
22:25:27.0208 3916 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
22:25:27.0209 3916 amdsbs - ok
22:25:27.0250 3916 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
22:25:27.0251 3916 amdxata - ok
22:25:27.0449 3916 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
22:25:27.0450 3916 AppID - ok
22:25:27.0582 3916 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
22:25:27.0582 3916 arc - ok
22:25:27.0717 3916 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
22:25:27.0718 3916 arcsas - ok
22:25:28.0006 3916 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
22:25:28.0007 3916 AsyncMac - ok
22:25:28.0082 3916 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
22:25:28.0083 3916 atapi - ok
22:25:28.0257 3916 AthBTPort (cbe61b4494165f458bd87e37181ee934) C:\Windows\system32\DRIVERS\btath_flt.sys
22:25:28.0257 3916 AthBTPort - ok
22:25:28.0340 3916 ATHDFU (4119870b90e1b5e7797d6433d21f9216) C:\Windows\system32\Drivers\AthDfu.sys
22:25:28.0341 3916 ATHDFU - ok
22:25:28.0663 3916 athr (e642491f64e58cd5bc8fb8b347dcf65f) C:\Windows\system32\DRIVERS\athrx.sys
22:25:28.0677 3916 athr - ok
22:25:28.0896 3916 AtiPcie (c07a040d6b5a42dd41ee386cf90974c8) C:\Windows\system32\DRIVERS\AtiPcie.sys
22:25:28.0897 3916 AtiPcie - ok
22:25:28.0990 3916 atksgt (b4bde3f758a34658a37dfed3d9783cd8) C:\Windows\system32\DRIVERS\atksgt.sys
22:25:28.0991 3916 atksgt - ok
22:25:29.0403 3916 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
22:25:29.0406 3916 b06bdrv - ok
22:25:29.0517 3916 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
22:25:29.0519 3916 b57nd60a - ok
22:25:29.0702 3916 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
22:25:29.0703 3916 Beep - ok
22:25:29.0798 3916 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
22:25:29.0798 3916 blbdrive - ok
22:25:29.0972 3916 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
22:25:29.0973 3916 bowser - ok
22:25:30.0031 3916 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
22:25:30.0032 3916 BrFiltLo - ok
22:25:30.0080 3916 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
22:25:30.0080 3916 BrFiltUp - ok
22:25:30.0304 3916 Bridge (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
22:25:30.0305 3916 Bridge - ok
22:25:30.0344 3916 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
22:25:30.0345 3916 BridgeMP - ok
22:25:30.0442 3916 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
22:25:30.0445 3916 Brserid - ok
22:25:30.0510 3916 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
22:25:30.0511 3916 BrSerWdm - ok
22:25:30.0652 3916 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
22:25:30.0652 3916 BrUsbMdm - ok
22:25:30.0664 3916 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
22:25:30.0665 3916 BrUsbSer - ok
22:25:30.0770 3916 BTATH_A2DP (2ecf188c1d4246efc6419f118f7b8ec6) C:\Windows\system32\drivers\btath_a2dp.sys
22:25:30.0772 3916 BTATH_A2DP - ok
22:25:30.0873 3916 BTATH_BUS (a83a91d07d1fe6bbe7a9db46ca00434b) C:\Windows\system32\DRIVERS\btath_bus.sys
22:25:30.0873 3916 BTATH_BUS - ok
22:25:31.0094 3916 BTATH_HCRP (c864ff85ee16d61c2bdd5ef76824625f) C:\Windows\system32\DRIVERS\btath_hcrp.sys
22:25:31.0096 3916 BTATH_HCRP - ok
22:25:31.0221 3916 BTATH_LWFLT (701c4fd9e8f2315bb1732e24093e7e8b) C:\Windows\system32\DRIVERS\btath_lwflt.sys
22:25:31.0222 3916 BTATH_LWFLT - ok
22:25:31.0329 3916 BTATH_RCP (724c8088c96efe7a3e63fec21d4681c0) C:\Windows\system32\DRIVERS\btath_rcp.sys
22:25:31.0330 3916 BTATH_RCP - ok
22:25:31.0546 3916 BtFilter (6e7427156de0f0601dc0df42caff971d) C:\Windows\system32\DRIVERS\btfilter.sys
22:25:31.0548 3916 BtFilter - ok
22:25:31.0654 3916 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys
22:25:31.0654 3916 BthEnum - ok
22:25:31.0849 3916 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
22:25:31.0850 3916 BTHMODEM - ok
22:25:31.0946 3916 BthMtpEnum (bdad7ca91f370e588ecc8c67b694300c) C:\Windows\system32\DRIVERS\BthMtpEnum.sys
22:25:31.0947 3916 BthMtpEnum - ok
22:25:32.0239 3916 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
22:25:32.0241 3916 BthPan - ok
22:25:32.0338 3916 BTHPORT (64c198198501f7560ee41d8d1efa7952) C:\Windows\System32\Drivers\BTHport.sys
22:25:32.0342 3916 BTHPORT - ok
22:25:32.0562 3916 BTHUSB (f188b7394d81010767b6df3178519a37) C:\Windows\System32\Drivers\BTHUSB.sys
22:25:32.0563 3916 BTHUSB - ok
22:25:32.0585 3916 catchme - ok
22:25:32.0759 3916 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
22:25:32.0760 3916 cdfs - ok
22:25:32.0909 3916 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys
22:25:32.0910 3916 cdrom - ok
22:25:33.0108 3916 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
22:25:33.0109 3916 circlass - ok
22:25:33.0215 3916 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
22:25:33.0218 3916 CLFS - ok
22:25:33.0515 3916 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
22:25:33.0515 3916 CmBatt - ok
22:25:33.0650 3916 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
22:25:33.0650 3916 cmdide - ok
22:25:33.0723 3916 CNG (d5fea92400f12412b3922087c09da6a5) C:\Windows\system32\Drivers\cng.sys
22:25:33.0726 3916 CNG - ok
22:25:33.0899 3916 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
22:25:33.0900 3916 Compbatt - ok
22:25:33.0987 3916 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
22:25:33.0987 3916 CompositeBus - ok
22:25:34.0169 3916 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
22:25:34.0169 3916 crcdisk - ok
22:25:34.0363 3916 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
22:25:34.0365 3916 DfsC - ok
22:25:34.0453 3916 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
22:25:34.0453 3916 discache - ok
22:25:34.0578 3916 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
22:25:34.0579 3916 Disk - ok
22:25:34.0722 3916 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
22:25:34.0723 3916 drmkaud - ok
22:25:35.0043 3916 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
22:25:35.0050 3916 DXGKrnl - ok
22:25:35.0219 3916 eamonm (aca3fe4f18a945b7bf2618a79f6f670b) C:\Windows\system32\DRIVERS\eamonm.sys
22:25:35.0220 3916 eamonm - ok
22:25:35.0428 3916 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
22:25:35.0450 3916 ebdrv - ok
22:25:35.0710 3916 ehdrv (6672438bdcbfd87250d22112d458294d) C:\Windows\system32\DRIVERS\ehdrv.sys
22:25:35.0712 3916 ehdrv - ok
22:25:35.0880 3916 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
22:25:35.0884 3916 elxstor - ok
22:25:36.0114 3916 epfwwfpr (954fade8e59f159b0a71d0cfcc99a76e) C:\Windows\system32\DRIVERS\epfwwfpr.sys
22:25:36.0116 3916 epfwwfpr - ok
22:25:36.0193 3916 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
22:25:36.0194 3916 ErrDev - ok
22:25:36.0425 3916 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
22:25:36.0427 3916 exfat - ok
22:25:36.0482 3916 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
22:25:36.0484 3916 fastfat - ok
22:25:36.0655 3916 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
22:25:36.0656 3916 fdc - ok
22:25:36.0757 3916 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
22:25:36.0758 3916 FileInfo - ok
22:25:36.0825 3916 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
22:25:36.0826 3916 Filetrace - ok
22:25:37.0500 3916 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
22:25:37.0501 3916 flpydisk - ok
22:25:38.0240 3916 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
22:25:38.0242 3916 FltMgr - ok
22:25:38.0890 3916 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
22:25:38.0891 3916 FsDepends - ok
22:25:39.0009 3916 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
22:25:39.0010 3916 Fs_Rec - ok
22:25:39.0191 3916 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
22:25:39.0193 3916 fvevol - ok
22:25:39.0389 3916 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
22:25:39.0390 3916 gagp30kx - ok
22:25:39.0517 3916 GGSAFERDriver - ok
22:25:39.0893 3916 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
22:25:39.0893 3916 hcw85cir - ok
22:25:39.0972 3916 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
22:25:39.0975 3916 HdAudAddService - ok
22:25:40.0485 3916 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
22:25:40.0487 3916 HDAudBus - ok
22:25:40.0571 3916 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
22:25:40.0572 3916 HidBatt - ok
22:25:40.0620 3916 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
22:25:40.0622 3916 HidBth - ok
22:25:40.0664 3916 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
22:25:40.0665 3916 HidIr - ok
22:25:40.0763 3916 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
22:25:40.0764 3916 HidUsb - ok
22:25:40.0937 3916 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
22:25:40.0938 3916 HpSAMD - ok
22:25:41.0063 3916 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
22:25:41.0068 3916 HTTP - ok
22:25:41.0230 3916 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
22:25:41.0230 3916 hwpolicy - ok
22:25:41.0301 3916 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
22:25:41.0302 3916 i8042prt - ok
22:25:41.0571 3916 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
22:25:41.0574 3916 iaStorV - ok
22:25:41.0638 3916 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
22:25:41.0638 3916 iirsp - ok
22:25:41.0780 3916 IntcAzAudAddService - ok
22:25:41.0952 3916 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
22:25:41.0953 3916 intelide - ok
22:25:42.0028 3916 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
22:25:42.0029 3916 intelppm - ok
22:25:42.0231 3916 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
22:25:42.0232 3916 IpFilterDriver - ok
22:25:42.0362 3916 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
22:25:42.0363 3916 IPMIDRV - ok
22:25:42.0467 3916 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
22:25:42.0468 3916 IPNAT - ok
22:25:42.0633 3916 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
22:25:42.0634 3916 IRENUM - ok
22:25:42.0685 3916 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
22:25:42.0686 3916 isapnp - ok
22:25:42.0749 3916 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
22:25:42.0752 3916 iScsiPrt - ok
22:25:43.0002 3916 k57nd60a (37e053a2cf8f0082b689ed74106e0cec) C:\Windows\system32\DRIVERS\k57nd60a.sys
22:25:43.0005 3916 k57nd60a - ok
22:25:43.0156 3916 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
22:25:43.0157 3916 kbdclass - ok
22:25:43.0308 3916 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
22:25:43.0308 3916 kbdhid - ok
22:25:43.0381 3916 KSecDD (ccd53b5bd33ce0c889e830d839c8b66e) C:\Windows\system32\Drivers\ksecdd.sys
22:25:43.0382 3916 KSecDD - ok
22:25:43.0438 3916 KSecPkg (9ff918a261752c12639e8ad4208d2c2f) C:\Windows\system32\Drivers\ksecpkg.sys
22:25:43.0439 3916 KSecPkg - ok
22:25:43.0635 3916 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
22:25:43.0636 3916 ksthunk - ok
22:25:43.0880 3916 lirsgt (955982bf4421b77722196552b62e8dc2) C:\Windows\system32\DRIVERS\lirsgt.sys
22:25:43.0880 3916 lirsgt - ok
22:25:44.0079 3916 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
22:25:44.0079 3916 lltdio - ok
22:25:44.0198 3916 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
22:25:44.0199 3916 LSI_FC - ok
22:25:44.0277 3916 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
22:25:44.0278 3916 LSI_SAS - ok
22:25:44.0415 3916 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
22:25:44.0416 3916 LSI_SAS2 - ok
22:25:44.0471 3916 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
22:25:44.0472 3916 LSI_SCSI - ok
22:25:44.0569 3916 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
22:25:44.0570 3916 luafv - ok
22:25:44.0788 3916 MBAMProtector (79da94b35371b9e7104460c7693dcb2c) C:\Windows\system32\drivers\mbam.sys
22:25:44.0789 3916 MBAMProtector - ok
22:25:44.0874 3916 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
22:25:44.0874 3916 megasas - ok
22:25:44.0983 3916 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
22:25:44.0985 3916 MegaSR - ok
22:25:45.0312 3916 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
22:25:45.0313 3916 Modem - ok
22:25:45.0365 3916 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
22:25:45.0365 3916 monitor - ok
22:25:45.0504 3916 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
22:25:45.0505 3916 mouclass - ok
22:25:45.0618 3916 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
22:25:45.0619 3916 mouhid - ok
22:25:45.0753 3916 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
22:25:45.0754 3916 mountmgr - ok
22:25:45.0933 3916 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
22:25:45.0934 3916 mpio - ok
22:25:46.0081 3916 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
22:25:46.0082 3916 mpsdrv - ok
22:25:46.0251 3916 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
22:25:46.0253 3916 MRxDAV - ok
22:25:46.0392 3916 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
22:25:46.0393 3916 mrxsmb - ok
22:25:46.0526 3916 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
22:25:46.0528 3916 mrxsmb10 - ok
22:25:46.0649 3916 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
22:25:46.0650 3916 mrxsmb20 - ok
22:25:46.0793 3916 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
22:25:46.0794 3916 msahci - ok
22:25:46.0883 3916 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
22:25:46.0885 3916 msdsm - ok
22:25:47.0029 3916 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
22:25:47.0030 3916 Msfs - ok
22:25:47.0152 3916 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
22:25:47.0153 3916 mshidkmdf - ok
22:25:47.0221 3916 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
22:25:47.0222 3916 msisadrv - ok
22:25:47.0426 3916 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
22:25:47.0427 3916 MSKSSRV - ok
22:25:47.0475 3916 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
22:25:47.0475 3916 MSPCLOCK - ok
22:25:47.0771 3916 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
22:25:47.0771 3916 MSPQM - ok
22:25:47.0838 3916 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
22:25:47.0840 3916 MsRPC - ok
22:25:48.0004 3916 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
22:25:48.0005 3916 mssmbios - ok
22:25:48.0080 3916 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
22:25:48.0080 3916 MSTEE - ok
22:25:48.0297 3916 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
22:25:48.0298 3916 MTConfig - ok
22:25:48.0353 3916 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
22:25:48.0354 3916 Mup - ok
22:25:48.0500 3916 mwlPSDFilter (6ffecc25b39dc7652a0cec0ada9db589) C:\Windows\system32\DRIVERS\mwlPSDFilter.sys
22:25:48.0501 3916 mwlPSDFilter - ok
22:25:48.0579 3916 mwlPSDNServ (0befe32ca56d6ee89d58175725596a85) C:\Windows\system32\DRIVERS\mwlPSDNServ.sys
22:25:48.0580 3916 mwlPSDNServ - ok
22:25:48.0661 3916 mwlPSDVDisk (d43bc633b8660463e446e28e14a51262) C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys
22:25:48.0662 3916 mwlPSDVDisk - ok
22:25:48.0890 3916 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
22:25:48.0893 3916 NativeWifiP - ok
22:25:48.0993 3916 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
22:25:49.0000 3916 NDIS - ok
22:25:49.0249 3916 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
22:25:49.0250 3916 NdisCap - ok
22:25:49.0352 3916 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
22:25:49.0353 3916 NdisTapi - ok
22:25:49.0407 3916 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
22:25:49.0408 3916 Ndisuio - ok
22:25:49.0578 3916 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
22:25:49.0579 3916 NdisWan - ok
22:25:49.0644 3916 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
22:25:49.0645 3916 NDProxy - ok
22:25:49.0884 3916 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
22:25:49.0884 3916 NetBIOS - ok
22:25:49.0987 3916 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
22:25:49.0989 3916 NetBT - ok
22:25:50.0240 3916 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
22:25:50.0241 3916 nfrd960 - ok
22:25:50.0357 3916 nmwcd (903681bab213d5f84717c0fc42afb28a) C:\Windows\system32\drivers\ccdcmbx64.sys
22:25:50.0358 3916 nmwcd - ok
22:25:50.0548 3916 nmwcdc (ec4c5ebd003e0395bf4ea5a2efd13ce6) C:\Windows\system32\drivers\ccdcmbox64.sys
22:25:50.0549 3916 nmwcdc - ok
22:25:50.0603 3916 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
22:25:50.0604 3916 Npfs - ok
22:25:50.0700 3916 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
22:25:50.0701 3916 nsiproxy - ok
22:25:50.0956 3916 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
22:25:50.0967 3916 Ntfs - ok
22:25:51.0143 3916 NTIDrvr (ee3ba1024594d5d09e314f206b94069e) C:\Windows\system32\drivers\NTIDrvr.sys
22:25:51.0144 3916 NTIDrvr - ok
22:25:51.0207 3916 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
22:25:51.0208 3916 Null - ok
22:25:51.0278 3916 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
22:25:51.0279 3916 nvraid - ok
22:25:51.0716 3916 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
22:25:51.0717 3916 nvstor - ok
22:25:52.0429 3916 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
22:25:52.0430 3916 nv_agp - ok
22:25:53.0050 3916 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
22:25:53.0051 3916 ohci1394 - ok
22:25:53.0682 3916 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
22:25:53.0683 3916 Parport - ok
22:25:54.0525 3916 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
22:25:54.0526 3916 partmgr - ok
22:25:55.0417 3916 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
22:25:55.0418 3916 pci - ok
22:25:56.0007 3916 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
22:25:56.0008 3916 pciide - ok
22:25:56.0700 3916 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
22:25:56.0702 3916 pcmcia - ok
22:25:57.0435 3916 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
22:25:57.0436 3916 pcw - ok
22:25:58.0243 3916 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
22:25:58.0248 3916 PEAUTH - ok
22:25:59.0574 3916 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
22:25:59.0575 3916 PptpMiniport - ok
22:26:00.0045 3916 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
22:26:00.0045 3916 Processor - ok
22:26:00.0602 3916 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
22:26:00.0603 3916 Psched - ok
22:26:01.0782 3916 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
22:26:01.0792 3916 ql2300 - ok
22:26:02.0562 3916 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
22:26:02.0563 3916 ql40xx - ok
22:26:03.0207 3916 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
22:26:03.0208 3916 QWAVEdrv - ok
22:26:03.0743 3916 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
22:26:03.0744 3916 RasAcd - ok
22:26:04.0359 3916 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
22:26:04.0360 3916 RasAgileVpn - ok
22:26:04.0868 3916 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
22:26:04.0869 3916 Rasl2tp - ok
22:26:05.0728 3916 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
22:26:05.0729 3916 RasPppoe - ok
22:26:06.0614 3916 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
22:26:06.0615 3916 RasSstp - ok
22:26:07.0292 3916 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
22:26:07.0294 3916 rdbss - ok
22:26:08.0137 3916 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
22:26:08.0138 3916 rdpbus - ok
22:26:08.0950 3916 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
22:26:08.0950 3916 RDPCDD - ok
22:26:09.0638 3916 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
22:26:09.0639 3916 RDPENCDD - ok
22:26:10.0681 3916 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
22:26:10.0681 3916 RDPREFMP - ok
22:26:11.0640 3916 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
22:26:11.0642 3916 RDPWD - ok
22:26:12.0493 3916 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
22:26:12.0495 3916 rdyboost - ok
22:26:13.0546 3916 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
22:26:13.0547 3916 RFCOMM - ok
22:26:14.0448 3916 RsFx0105 (c9fe05a63c500abe3afa5786504c4d36) C:\Windows\system32\DRIVERS\RsFx0105.sys
22:26:14.0450 3916 RsFx0105 - ok
22:26:15.0335 3916 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
22:26:15.0336 3916 rspndr - ok
22:26:16.0172 3916 RSUSBSTOR (763ae0c6d9df4c24b7e2c26036a8188a) C:\Windows\system32\Drivers\RtsUStor.sys
22:26:16.0173 3916 RSUSBSTOR - ok
22:26:16.0654 3916 RTHDMIAzAudService (d6d381b76056c668679723938f06f16c) C:\Windows\system32\drivers\RtHDMIVX.sys
22:26:16.0656 3916 RTHDMIAzAudService - ok
22:26:17.0128 3916 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
22:26:17.0129 3916 sbp2port - ok
22:26:17.0911 3916 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
22:26:17.0912 3916 scfilter - ok
22:26:18.0987 3916 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
22:26:18.0987 3916 secdrv - ok
22:26:19.0412 3916 SentinelFilter - ok
22:26:19.0556 3916 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
22:26:19.0557 3916 Serenum - ok
22:26:20.0104 3916 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
22:26:20.0105 3916 Serial - ok
22:26:20.0632 3916 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
22:26:20.0633 3916 sermouse - ok
22:26:21.0018 3916 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
22:26:21.0019 3916 sffdisk - ok
22:26:21.0127 3916 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
22:26:21.0128 3916 sffp_mmc - ok
22:26:21.0204 3916 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
22:26:21.0205 3916 sffp_sd - ok
22:26:21.0295 3916 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
22:26:21.0296 3916 sfloppy - ok
22:26:21.0406 3916 Sftfs (a40abfdcb75f835fdf3ce0cc64e4250d) C:\Windows\system32\DRIVERS\Sftfslh.sys
22:26:21.0411 3916 Sftfs - ok
22:26:21.0622 3916 Sftplay (411769ed1cb12d2b44217734347bdb7a) C:\Windows\system32\DRIVERS\Sftplaylh.sys
22:26:21.0624 3916 Sftplay - ok
22:26:21.0659 3916 Sftredir (a14d0df34bbb00ea94da16193d0c7957) C:\Windows\system32\DRIVERS\Sftredirlh.sys
22:26:21.0660 3916 Sftredir - ok
22:26:21.0854 3916 Sftvol (393b22addd89979eb1c60898f51c3648) C:\Windows\system32\DRIVERS\Sftvollh.sys
22:26:21.0855 3916 Sftvol - ok
22:26:21.0996 3916 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
22:26:21.0997 3916 SiSRaid2 - ok
22:26:22.0100 3916 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
22:26:22.0101 3916 SiSRaid4 - ok
22:26:22.0145 3916 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
22:26:22.0146 3916 Smb - ok
22:26:22.0299 3916 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
22:26:22.0299 3916 spldr - ok
22:26:22.0532 3916 sptd (4b3f898dc1378ced2f35d04e5b0ce0df) C:\Windows\System32\Drivers\sptd.sys
22:26:22.0532 3916 Suspicious file (NoAccess): C:\Windows\System32\Drivers\sptd.sys. md5: 4b3f898dc1378ced2f35d04e5b0ce0df
22:26:22.0534 3916 sptd ( LockedFile.Multi.Generic ) - warning
22:26:22.0534 3916 sptd - detected LockedFile.Multi.Generic (1)
22:26:22.0713 3916 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
22:26:22.0716 3916 srv - ok
22:26:22.0893 3916 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
22:26:22.0896 3916 srv2 - ok
22:26:23.0009 3916 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
22:26:23.0011 3916 srvnet - ok
22:26:23.0190 3916 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
22:26:23.0191 3916 stexstor - ok
22:26:23.0292 3916 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
22:26:23.0293 3916 swenum - ok
22:26:23.0544 3916 SynTP (064a2530a4a7c7cec1be6a1945645be4) C:\Windows\system32\DRIVERS\SynTP.sys
22:26:23.0547 3916 SynTP - ok
22:26:23.0703 3916 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
22:26:23.0716 3916 Tcpip - ok
22:26:23.0992 3916 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
22:26:24.0004 3916 TCPIP6 - ok
22:26:24.0173 3916 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
22:26:24.0174 3916 tcpipreg - ok
22:26:24.0251 3916 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
22:26:24.0252 3916 TDPIPE - ok
22:26:24.0282 3916 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
22:26:24.0282 3916 TDTCP - ok
22:26:24.0513 3916 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
22:26:24.0514 3916 tdx - ok
22:26:24.0590 3916 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
22:26:24.0591 3916 TermDD - ok
22:26:24.0879 3916 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
22:26:24.0880 3916 tssecsrv - ok
22:26:24.0955 3916 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
22:26:24.0956 3916 TsUsbFlt - ok
22:26:25.0126 3916 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
22:26:25.0127 3916 tunnel - ok
22:26:25.0194 3916 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
22:26:25.0195 3916 uagp35 - ok
22:26:25.0344 3916 UBHelper (a17d5e1a6df4eab0a480f2c490de4c9d) C:\Windows\system32\drivers\UBHelper.sys
22:26:25.0345 3916 UBHelper - ok
22:26:25.0441 3916 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
22:26:25.0444 3916 udfs - ok
22:26:25.0660 3916 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
22:26:25.0661 3916 uliagpkx - ok
22:26:25.0758 3916 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
22:26:25.0759 3916 umbus - ok
22:26:25.0881 3916 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
22:26:25.0882 3916 UmPass - ok
22:26:26.0094 3916 upperdev (7168819f30fe9622284ea19bde7f8ab4) C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys
22:26:26.0094 3916 upperdev - ok
22:26:26.0264 3916 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
22:26:26.0265 3916 usbccgp - ok
22:26:26.0334 3916 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
22:26:26.0335 3916 usbcir - ok
22:26:26.0467 3916 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
22:26:26.0468 3916 usbehci - ok
22:26:26.0619 3916 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
22:26:26.0622 3916 usbhub - ok
22:26:26.0835 3916 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\DRIVERS\usbohci.sys
22:26:26.0836 3916 usbohci - ok
22:26:26.0944 3916 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
22:26:26.0945 3916 usbprint - ok
22:26:27.0135 3916 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
22:26:27.0136 3916 usbscan - ok
22:26:27.0336 3916 usbser (4acee387fa8fd39f83564fcd2fc234f2) C:\Windows\system32\drivers\usbser.sys
22:26:27.0337 3916 usbser - ok
22:26:27.0455 3916 UsbserFilt (66c25cb20b2974e0c0cfdab49fb72a02) C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys
22:26:27.0456 3916 UsbserFilt - ok
22:26:27.0500 3916 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
22:26:27.0501 3916 USBSTOR - ok
22:26:27.0548 3916 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
22:26:27.0549 3916 usbuhci - ok
22:26:27.0765 3916 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\system32\Drivers\usbvideo.sys
22:26:27.0767 3916 usbvideo - ok
22:26:27.0998 3916 VBoxNetAdp (9304501324486866f91b3ae4c420f206) C:\Windows\system32\DRIVERS\VBoxNetAdp.sys
22:26:28.0000 3916 VBoxNetAdp - ok
22:26:28.0109 3916 VBoxNetFlt - ok
22:26:28.0239 3916 VCSVADHWSer (3a4b01c2bdb07dfef29b0b369487503a) C:\Windows\system32\DRIVERS\vcsvad.sys
22:26:28.0240 3916 VCSVADHWSer - ok
22:26:28.0347 3916 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
22:26:28.0347 3916 vdrvroot - ok
22:26:28.0500 3916 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
22:26:28.0501 3916 vga - ok
22:26:28.0582 3916 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
22:26:28.0583 3916 VgaSave - ok
22:26:28.0789 3916 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
22:26:28.0791 3916 vhdmp - ok
22:26:28.0921 3916 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
22:26:28.0922 3916 viaide - ok
22:26:28.0973 3916 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
22:26:28.0974 3916 volmgr - ok
22:26:29.0044 3916 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
22:26:29.0047 3916 volmgrx - ok
22:26:29.0285 3916 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
22:26:29.0287 3916 volsnap - ok
22:26:29.0506 3916 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
22:26:29.0508 3916 vsmraid - ok
22:26:29.0686 3916 VSPerfDrv100 (ca64a8838b4674d14bdf88aba2f253ea) C:\Program Files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys
22:26:29.0687 3916 VSPerfDrv100 - ok
22:26:29.0858 3916 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
22:26:29.0859 3916 vwifibus - ok
22:26:29.0953 3916 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
22:26:29.0954 3916 vwififlt - ok
22:26:30.0231 3916 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
22:26:30.0232 3916 vwifimp - ok
22:26:30.0287 3916 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
22:26:30.0288 3916 WacomPen - ok
22:26:30.0421 3916 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
22:26:30.0422 3916 WANARP - ok
22:26:30.0428 3916 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
22:26:30.0429 3916 Wanarpv6 - ok
22:26:30.0577 3916 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
22:26:30.0578 3916 Wd - ok
22:26:30.0691 3916 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
22:26:30.0696 3916 Wdf01000 - ok
22:26:30.0847 3916 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
22:26:30.0848 3916 WfpLwf - ok
22:26:30.0998 3916 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
22:26:30.0999 3916 WIMMount - ok
22:26:31.0216 3916 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
22:26:31.0217 3916 WinUsb - ok
22:26:31.0373 3916 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
22:26:31.0373 3916 WmiAcpi - ok
22:26:31.0522 3916 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
22:26:31.0523 3916 ws2ifsl - ok
22:26:31.0738 3916 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
22:26:31.0739 3916 WudfPf - ok
22:26:31.0827 3916 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
22:26:31.0829 3916 WUDFRd - ok
22:26:31.0928 3916 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
22:26:31.0985 3916 \Device\Harddisk0\DR0 - ok
22:26:31.0991 3916 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk1\DR1
22:26:32.0031 3916 \Device\Harddisk1\DR1 - ok
22:26:32.0052 3916 Boot (0x1200) (916abd7ee94867b699126200098874ee) \Device\Harddisk0\DR0\Partition0
22:26:32.0096 3916 \Device\Harddisk0\DR0\Partition0 - ok
22:26:32.0117 3916 Boot (0x1200) (913329f2c81390da03d65bc594d4e27d) \Device\Harddisk0\DR0\Partition1
22:26:32.0118 3916 \Device\Harddisk0\DR0\Partition1 - ok
22:26:32.0124 3916 Boot (0x1200) (6ff6440caf09d067cd83a4a04245f25f) \Device\Harddisk1\DR1\Partition0
22:26:32.0125 3916 \Device\Harddisk1\DR1\Partition0 - ok
22:26:32.0126 3916 ============================================================
22:26:32.0126 3916 Scan finished
22:26:32.0126 3916 ============================================================
22:26:32.0137 3896 Detected object count: 1
22:26:32.0138 3896 Actual detected object count: 1
22:26:59.0270 3896 sptd ( LockedFile.Multi.Generic ) - skipped by user
22:26:59.0270 3896 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
22:27:35.0974 3016 ============================================================
22:27:35.0974 3016 Scan started
22:27:35.0974 3016 Mode: Manual;
22:27:35.0974 3016 ============================================================
22:27:39.0615 3016 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
22:27:39.0617 3016 1394ohci - ok
22:27:40.0150 3016 97667536 (e656fe10d6d27794afa08136685a69e8) C:\Windows\system32\DRIVERS\97667536.sys
22:27:40.0153 3016 97667536 - ok
22:27:40.0686 3016 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
22:27:40.0688 3016 ACPI - ok
22:27:41.0259 3016 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
22:27:41.0259 3016 AcpiPmi - ok
22:27:41.0962 3016 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
22:27:41.0966 3016 adp94xx - ok
22:27:42.0489 3016 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
22:27:42.0491 3016 adpahci - ok
22:27:43.0042 3016 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
22:27:43.0044 3016 adpu320 - ok
22:27:43.0686 3016 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys
22:27:43.0689 3016 AFD - ok
22:27:44.0407 3016 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
22:27:44.0408 3016 agp440 - ok
22:27:45.0030 3016 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
22:27:45.0030 3016 aliide - ok
22:27:45.0586 3016 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
22:27:45.0586 3016 amdide - ok
22:27:46.0133 3016 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
22:27:46.0133 3016 AmdK8 - ok
22:27:48.0283 3016 amdkmdag (d3e6b2e1394d93fe9db0ba24814b0d8f) C:\Windows\system32\DRIVERS\atipmdag.sys
22:27:48.0323 3016 amdkmdag - ok
22:27:49.0035 3016 amdkmdap (cc4d915d786d3da973b2ea9b95d59a29) C:\Windows\system32\DRIVERS\atikmpag.sys
22:27:49.0036 3016 amdkmdap - ok
22:27:49.0739 3016 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
22:27:49.0740 3016 AmdPPM - ok
22:27:50.0325 3016 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
22:27:50.0326 3016 amdsata - ok
22:27:50.0841 3016 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
22:27:50.0843 3016 amdsbs - ok
22:27:51.0591 3016 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
22:27:51.0591 3016 amdxata - ok
22:27:52.0168 3016 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
22:27:52.0169 3016 AppID - ok
22:27:52.0633 3016 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
22:27:52.0634 3016 arc - ok
22:27:53.0124 3016 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
22:27:53.0125 3016 arcsas - ok
22:27:53.0647 3016 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
22:27:53.0647 3016 AsyncMac - ok
22:27:54.0079 3016 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
22:27:54.0079 3016 atapi - ok
22:27:54.0775 3016 AthBTPort (cbe61b4494165f458bd87e37181ee934) C:\Windows\system32\DRIVERS\btath_flt.sys
22:27:54.0776 3016 AthBTPort - ok
22:27:55.0525 3016 ATHDFU (4119870b90e1b5e7797d6433d21f9216) C:\Windows\system32\Drivers\AthDfu.sys
22:27:55.0526 3016 ATHDFU - ok
22:27:56.0722 3016 athr (e642491f64e58cd5bc8fb8b347dcf65f) C:\Windows\system32\DRIVERS\athrx.sys
22:27:56.0736 3016 athr - ok
22:27:57.0426 3016 AtiPcie (c07a040d6b5a42dd41ee386cf90974c8) C:\Windows\system32\DRIVERS\AtiPcie.sys
22:27:57.0426 3016 AtiPcie - ok

nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 Bře 2008 19:22
Místo/Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#12 Příspěvek od nom »

22:27:58.0031 3016 atksgt (b4bde3f758a34658a37dfed3d9783cd8) C:\Windows\system32\DRIVERS\atksgt.sys
22:27:58.0032 3016 atksgt - ok
22:27:58.0689 3016 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
22:27:58.0692 3016 b06bdrv - ok
22:27:59.0359 3016 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
22:27:59.0361 3016 b57nd60a - ok
22:28:00.0000 3016 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
22:28:00.0000 3016 Beep - ok
22:28:00.0550 3016 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
22:28:00.0551 3016 blbdrive - ok
22:28:01.0303 3016 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
22:28:01.0323 3016 bowser - ok
22:28:01.0906 3016 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
22:28:01.0907 3016 BrFiltLo - ok
22:28:02.0240 3016 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
22:28:02.0240 3016 BrFiltUp - ok
22:28:02.0835 3016 Bridge (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
22:28:02.0836 3016 Bridge - ok
22:28:02.0932 3016 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
22:28:02.0933 3016 BridgeMP - ok
22:28:03.0622 3016 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
22:28:03.0624 3016 Brserid - ok
22:28:04.0306 3016 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
22:28:04.0307 3016 BrSerWdm - ok
22:28:04.0951 3016 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
22:28:04.0952 3016 BrUsbMdm - ok
22:28:05.0618 3016 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
22:28:05.0619 3016 BrUsbSer - ok
22:28:06.0115 3016 BTATH_A2DP (2ecf188c1d4246efc6419f118f7b8ec6) C:\Windows\system32\drivers\btath_a2dp.sys
22:28:06.0117 3016 BTATH_A2DP - ok
22:28:06.0781 3016 BTATH_BUS (a83a91d07d1fe6bbe7a9db46ca00434b) C:\Windows\system32\DRIVERS\btath_bus.sys
22:28:06.0782 3016 BTATH_BUS - ok
22:28:07.0706 3016 BTATH_HCRP (c864ff85ee16d61c2bdd5ef76824625f) C:\Windows\system32\DRIVERS\btath_hcrp.sys
22:28:07.0708 3016 BTATH_HCRP - ok
22:28:08.0263 3016 BTATH_LWFLT (701c4fd9e8f2315bb1732e24093e7e8b) C:\Windows\system32\DRIVERS\btath_lwflt.sys
22:28:08.0264 3016 BTATH_LWFLT - ok
22:28:08.0740 3016 BTATH_RCP (724c8088c96efe7a3e63fec21d4681c0) C:\Windows\system32\DRIVERS\btath_rcp.sys
22:28:08.0741 3016 BTATH_RCP - ok
22:28:09.0314 3016 BtFilter (6e7427156de0f0601dc0df42caff971d) C:\Windows\system32\DRIVERS\btfilter.sys
22:28:09.0316 3016 BtFilter - ok
22:28:09.0929 3016 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys
22:28:09.0929 3016 BthEnum - ok
22:28:10.0635 3016 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
22:28:10.0636 3016 BTHMODEM - ok
22:28:11.0199 3016 BthMtpEnum (bdad7ca91f370e588ecc8c67b694300c) C:\Windows\system32\DRIVERS\BthMtpEnum.sys
22:28:11.0200 3016 BthMtpEnum - ok
22:28:11.0348 3016 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
22:28:11.0349 3016 BthPan - ok
22:28:12.0069 3016 BTHPORT (64c198198501f7560ee41d8d1efa7952) C:\Windows\System32\Drivers\BTHport.sys
22:28:12.0073 3016 BTHPORT - ok
22:28:12.0704 3016 BTHUSB (f188b7394d81010767b6df3178519a37) C:\Windows\System32\Drivers\BTHUSB.sys
22:28:12.0705 3016 BTHUSB - ok
22:28:12.0707 3016 catchme - ok
22:28:13.0578 3016 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
22:28:13.0579 3016 cdfs - ok
22:28:14.0400 3016 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys
22:28:14.0402 3016 cdrom - ok
22:28:15.0250 3016 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
22:28:15.0255 3016 circlass - ok
22:28:15.0869 3016 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
22:28:15.0872 3016 CLFS - ok
22:28:16.0402 3016 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
22:28:16.0402 3016 CmBatt - ok
22:28:16.0882 3016 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
22:28:16.0882 3016 cmdide - ok
22:28:17.0393 3016 CNG (d5fea92400f12412b3922087c09da6a5) C:\Windows\system32\Drivers\cng.sys
22:28:17.0397 3016 CNG - ok
22:28:18.0164 3016 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
22:28:18.0165 3016 Compbatt - ok
22:28:19.0063 3016 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
22:28:19.0064 3016 CompositeBus - ok
22:28:19.0801 3016 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
22:28:19.0801 3016 crcdisk - ok
22:28:20.0617 3016 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
22:28:20.0618 3016 DfsC - ok
22:28:21.0284 3016 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
22:28:21.0285 3016 discache - ok
22:28:21.0977 3016 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
22:28:21.0978 3016 Disk - ok
22:28:22.0598 3016 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
22:28:22.0599 3016 drmkaud - ok
22:28:23.0531 3016 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
22:28:23.0537 3016 DXGKrnl - ok
22:28:24.0246 3016 eamonm (aca3fe4f18a945b7bf2618a79f6f670b) C:\Windows\system32\DRIVERS\eamonm.sys
22:28:24.0248 3016 eamonm - ok
22:28:24.0793 3016 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
22:28:24.0814 3016 ebdrv - ok
22:28:25.0120 3016 ehdrv (6672438bdcbfd87250d22112d458294d) C:\Windows\system32\DRIVERS\ehdrv.sys
22:28:25.0121 3016 ehdrv - ok
22:28:25.0490 3016 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
22:28:25.0494 3016 elxstor - ok
22:28:25.0635 3016 epfwwfpr (954fade8e59f159b0a71d0cfcc99a76e) C:\Windows\system32\DRIVERS\epfwwfpr.sys
22:28:25.0636 3016 epfwwfpr - ok
22:28:25.0725 3016 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
22:28:25.0725 3016 ErrDev - ok
22:28:25.0801 3016 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
22:28:25.0803 3016 exfat - ok
22:28:26.0058 3016 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
22:28:26.0060 3016 fastfat - ok
22:28:26.0129 3016 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
22:28:26.0130 3016 fdc - ok
22:28:26.0277 3016 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
22:28:26.0278 3016 FileInfo - ok
22:28:26.0346 3016 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
22:28:26.0347 3016 Filetrace - ok
22:28:26.0432 3016 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
22:28:26.0432 3016 flpydisk - ok
22:28:26.0616 3016 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
22:28:26.0619 3016 FltMgr - ok
22:28:26.0665 3016 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
22:28:26.0666 3016 FsDepends - ok
22:28:26.0762 3016 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
22:28:26.0763 3016 Fs_Rec - ok
22:28:26.0922 3016 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
22:28:26.0923 3016 fvevol - ok
22:28:26.0986 3016 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
22:28:26.0987 3016 gagp30kx - ok
22:28:27.0070 3016 GGSAFERDriver - ok
22:28:27.0290 3016 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
22:28:27.0291 3016 hcw85cir - ok
22:28:27.0358 3016 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
22:28:27.0361 3016 HdAudAddService - ok
22:28:27.0760 3016 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
22:28:27.0762 3016 HDAudBus - ok
22:28:27.0813 3016 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
22:28:27.0814 3016 HidBatt - ok
22:28:27.0870 3016 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
22:28:27.0871 3016 HidBth - ok
22:28:27.0880 3016 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
22:28:27.0881 3016 HidIr - ok
22:28:28.0005 3016 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
22:28:28.0006 3016 HidUsb - ok
22:28:28.0068 3016 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
22:28:28.0069 3016 HpSAMD - ok
22:28:28.0216 3016 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
22:28:28.0221 3016 HTTP - ok
22:28:28.0405 3016 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
22:28:28.0405 3016 hwpolicy - ok
22:28:28.0454 3016 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
22:28:28.0455 3016 i8042prt - ok
22:28:28.0590 3016 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
22:28:28.0593 3016 iaStorV - ok
22:28:28.0790 3016 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
22:28:28.0791 3016 iirsp - ok
22:28:28.0823 3016 IntcAzAudAddService - ok
22:28:28.0894 3016 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
22:28:28.0895 3016 intelide - ok
22:28:28.0905 3016 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
22:28:28.0906 3016 intelppm - ok
22:28:29.0128 3016 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
22:28:29.0129 3016 IpFilterDriver - ok
22:28:29.0182 3016 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
22:28:29.0183 3016 IPMIDRV - ok
22:28:29.0364 3016 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
22:28:29.0365 3016 IPNAT - ok
22:28:29.0542 3016 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
22:28:29.0542 3016 IRENUM - ok
22:28:29.0593 3016 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
22:28:29.0594 3016 isapnp - ok
22:28:29.0681 3016 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
22:28:29.0683 3016 iScsiPrt - ok
22:28:29.0900 3016 k57nd60a (37e053a2cf8f0082b689ed74106e0cec) C:\Windows\system32\DRIVERS\k57nd60a.sys
22:28:29.0902 3016 k57nd60a - ok
22:28:30.0064 3016 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
22:28:30.0065 3016 kbdclass - ok
22:28:30.0283 3016 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
22:28:30.0283 3016 kbdhid - ok
22:28:30.0411 3016 KSecDD (ccd53b5bd33ce0c889e830d839c8b66e) C:\Windows\system32\Drivers\ksecdd.sys
22:28:30.0412 3016 KSecDD - ok
22:28:30.0468 3016 KSecPkg (9ff918a261752c12639e8ad4208d2c2f) C:\Windows\system32\Drivers\ksecpkg.sys
22:28:30.0470 3016 KSecPkg - ok
22:28:30.0533 3016 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
22:28:30.0533 3016 ksthunk - ok
22:28:30.0777 3016 lirsgt (955982bf4421b77722196552b62e8dc2) C:\Windows\system32\DRIVERS\lirsgt.sys
22:28:30.0778 3016 lirsgt - ok
22:28:30.0820 3016 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
22:28:30.0821 3016 lltdio - ok
22:28:30.0906 3016 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
22:28:30.0908 3016 LSI_FC - ok
22:28:31.0557 3016 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
22:28:31.0558 3016 LSI_SAS - ok
22:28:31.0754 3016 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
22:28:31.0755 3016 LSI_SAS2 - ok
22:28:32.0135 3016 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
22:28:32.0136 3016 LSI_SCSI - ok
22:28:32.0244 3016 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
22:28:32.0245 3016 luafv - ok
22:28:32.0430 3016 MBAMProtector (79da94b35371b9e7104460c7693dcb2c) C:\Windows\system32\drivers\mbam.sys
22:28:32.0431 3016 MBAMProtector - ok
22:28:32.0527 3016 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
22:28:32.0528 3016 megasas - ok
22:28:33.0369 3016 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
22:28:33.0372 3016 MegaSR - ok
22:28:34.0133 3016 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
22:28:34.0134 3016 Modem - ok
22:28:34.0852 3016 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
22:28:34.0853 3016 monitor - ok
22:28:34.0991 3016 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
22:28:34.0992 3016 mouclass - ok
22:28:35.0350 3016 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
22:28:35.0351 3016 mouhid - ok
22:28:35.0918 3016 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
22:28:35.0919 3016 mountmgr - ok
22:28:36.0775 3016 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
22:28:36.0777 3016 mpio - ok
22:28:37.0312 3016 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
22:28:37.0313 3016 mpsdrv - ok
22:28:38.0278 3016 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
22:28:38.0279 3016 MRxDAV - ok
22:28:38.0901 3016 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
22:28:38.0903 3016 mrxsmb - ok
22:28:39.0816 3016 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
22:28:39.0819 3016 mrxsmb10 - ok
22:28:40.0503 3016 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
22:28:40.0504 3016 mrxsmb20 - ok
22:28:41.0125 3016 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
22:28:41.0125 3016 msahci - ok
22:28:41.0227 3016 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
22:28:41.0228 3016 msdsm - ok
22:28:41.0972 3016 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
22:28:41.0973 3016 Msfs - ok
22:28:42.0362 3016 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
22:28:42.0362 3016 mshidkmdf - ok
22:28:42.0764 3016 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
22:28:42.0764 3016 msisadrv - ok
22:28:43.0347 3016 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
22:28:43.0347 3016 MSKSSRV - ok
22:28:44.0340 3016 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
22:28:44.0340 3016 MSPCLOCK - ok
22:28:45.0169 3016 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
22:28:45.0169 3016 MSPQM - ok
22:28:46.0092 3016 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
22:28:46.0094 3016 MsRPC - ok
22:28:46.0380 3016 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
22:28:46.0381 3016 mssmbios - ok
22:28:46.0433 3016 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
22:28:46.0434 3016 MSTEE - ok
22:28:46.0506 3016 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
22:28:46.0507 3016 MTConfig - ok
22:28:46.0540 3016 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
22:28:46.0541 3016 Mup - ok
22:28:46.0621 3016 mwlPSDFilter (6ffecc25b39dc7652a0cec0ada9db589) C:\Windows\system32\DRIVERS\mwlPSDFilter.sys
22:28:46.0622 3016 mwlPSDFilter - ok
22:28:46.0733 3016 mwlPSDNServ (0befe32ca56d6ee89d58175725596a85) C:\Windows\system32\DRIVERS\mwlPSDNServ.sys
22:28:46.0734 3016 mwlPSDNServ - ok
22:28:46.0770 3016 mwlPSDVDisk (d43bc633b8660463e446e28e14a51262) C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys
22:28:46.0771 3016 mwlPSDVDisk - ok
22:28:47.0044 3016 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
22:28:47.0046 3016 NativeWifiP - ok
22:28:47.0147 3016 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
22:28:47.0154 3016 NDIS - ok
22:28:47.0470 3016 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
22:28:47.0470 3016 NdisCap - ok
22:28:47.0651 3016 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
22:28:47.0651 3016 NdisTapi - ok
22:28:48.0372 3016 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
22:28:48.0373 3016 Ndisuio - ok
22:28:48.0554 3016 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
22:28:48.0556 3016 NdisWan - ok
22:28:48.0642 3016 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
22:28:48.0643 3016 NDProxy - ok
22:28:48.0815 3016 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
22:28:48.0816 3016 NetBIOS - ok
22:28:48.0918 3016 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
22:28:48.0921 3016 NetBT - ok
22:28:49.0183 3016 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
22:28:49.0184 3016 nfrd960 - ok
22:28:49.0489 3016 nmwcd (903681bab213d5f84717c0fc42afb28a) C:\Windows\system32\drivers\ccdcmbx64.sys
22:28:49.0489 3016 nmwcd - ok
22:28:49.0591 3016 nmwcdc (ec4c5ebd003e0395bf4ea5a2efd13ce6) C:\Windows\system32\drivers\ccdcmbox64.sys
22:28:49.0591 3016 nmwcdc - ok
22:28:50.0391 3016 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
22:28:50.0391 3016 Npfs - ok
22:28:50.0910 3016 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
22:28:50.0911 3016 nsiproxy - ok
22:28:51.0199 3016 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
22:28:51.0210 3016 Ntfs - ok
22:28:51.0364 3016 NTIDrvr (ee3ba1024594d5d09e314f206b94069e) C:\Windows\system32\drivers\NTIDrvr.sys
22:28:51.0365 3016 NTIDrvr - ok
22:28:51.0662 3016 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
22:28:51.0662 3016 Null - ok
22:28:51.0899 3016 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
22:28:51.0901 3016 nvraid - ok
22:28:52.0016 3016 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
22:28:52.0018 3016 nvstor - ok
22:28:52.0106 3016 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
22:28:52.0107 3016 nv_agp - ok
22:28:52.0439 3016 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
22:28:52.0440 3016 ohci1394 - ok
22:28:52.0559 3016 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
22:28:52.0560 3016 Parport - ok
22:28:52.0691 3016 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
22:28:52.0692 3016 partmgr - ok
22:28:53.0101 3016 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
22:28:53.0102 3016 pci - ok
22:28:53.0161 3016 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
22:28:53.0161 3016 pciide - ok
22:28:53.0350 3016 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
22:28:53.0352 3016 pcmcia - ok
22:28:53.0437 3016 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
22:28:53.0439 3016 pcw - ok
22:28:53.0797 3016 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
22:28:53.0802 3016 PEAUTH - ok
22:28:54.0461 3016 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
22:28:54.0463 3016 PptpMiniport - ok
22:28:54.0598 3016 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
22:28:54.0599 3016 Processor - ok
22:28:54.0734 3016 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
22:28:54.0735 3016 Psched - ok
22:28:55.0293 3016 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
22:28:55.0303 3016 ql2300 - ok
22:28:56.0227 3016 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
22:28:56.0228 3016 ql40xx - ok
22:28:56.0761 3016 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
22:28:56.0763 3016 QWAVEdrv - ok
22:28:57.0208 3016 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
22:28:57.0209 3016 RasAcd - ok
22:28:57.0635 3016 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
22:28:57.0636 3016 RasAgileVpn - ok
22:28:57.0722 3016 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
22:28:57.0723 3016 Rasl2tp - ok
22:28:57.0760 3016 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
22:28:57.0761 3016 RasPppoe - ok
22:28:57.0923 3016 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
22:28:57.0924 3016 RasSstp - ok
22:28:57.0992 3016 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
22:28:57.0994 3016 rdbss - ok
22:28:58.0213 3016 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
22:28:58.0214 3016 rdpbus - ok
22:28:58.0270 3016 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
22:28:58.0271 3016 RDPCDD - ok
22:28:58.0308 3016 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
22:28:58.0308 3016 RDPENCDD - ok
22:28:58.0368 3016 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
22:28:58.0368 3016 RDPREFMP - ok
22:28:58.0494 3016 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
22:28:58.0495 3016 RDPWD - ok
22:28:58.0581 3016 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
22:28:58.0582 3016 rdyboost - ok
22:28:58.0755 3016 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
22:28:58.0757 3016 RFCOMM - ok
22:28:58.0824 3016 RsFx0105 (c9fe05a63c500abe3afa5786504c4d36) C:\Windows\system32\DRIVERS\RsFx0105.sys
22:28:58.0827 3016 RsFx0105 - ok
22:28:59.0033 3016 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
22:28:59.0034 3016 rspndr - ok
22:28:59.0124 3016 RSUSBSTOR (763ae0c6d9df4c24b7e2c26036a8188a) C:\Windows\system32\Drivers\RtsUStor.sys
22:28:59.0126 3016 RSUSBSTOR - ok
22:28:59.0259 3016 RTHDMIAzAudService (d6d381b76056c668679723938f06f16c) C:\Windows\system32\drivers\RtHDMIVX.sys
22:28:59.0261 3016 RTHDMIAzAudService - ok
22:28:59.0337 3016 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
22:28:59.0338 3016 sbp2port - ok
22:28:59.0408 3016 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
22:28:59.0409 3016 scfilter - ok
22:28:59.0662 3016 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
22:28:59.0662 3016 secdrv - ok
22:28:59.0772 3016 SentinelFilter - ok
22:28:59.0931 3016 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
22:28:59.0932 3016 Serenum - ok
22:28:59.0942 3016 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
22:28:59.0943 3016 Serial - ok
22:29:00.0107 3016 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
22:29:00.0108 3016 sermouse - ok
22:29:00.0271 3016 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
22:29:00.0272 3016 sffdisk - ok
22:29:00.0336 3016 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
22:29:00.0336 3016 sffp_mmc - ok
22:29:00.0413 3016 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
22:29:00.0413 3016 sffp_sd - ok
22:29:00.0470 3016 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
22:29:00.0471 3016 sfloppy - ok
22:29:00.0681 3016 Sftfs (a40abfdcb75f835fdf3ce0cc64e4250d) C:\Windows\system32\DRIVERS\Sftfslh.sys
22:29:00.0686 3016 Sftfs - ok
22:29:00.0875 3016 Sftplay (411769ed1cb12d2b44217734347bdb7a) C:\Windows\system32\DRIVERS\Sftplaylh.sys
22:29:00.0877 3016 Sftplay - ok
22:29:00.0946 3016 Sftredir (a14d0df34bbb00ea94da16193d0c7957) C:\Windows\system32\DRIVERS\Sftredirlh.sys
22:29:00.0946 3016 Sftredir - ok
22:29:01.0018 3016 Sftvol (393b22addd89979eb1c60898f51c3648) C:\Windows\system32\DRIVERS\Sftvollh.sys
22:29:01.0019 3016 Sftvol - ok
22:29:01.0282 3016 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
22:29:01.0283 3016 SiSRaid2 - ok
22:29:01.0307 3016 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
22:29:01.0308 3016 SiSRaid4 - ok
22:29:01.0342 3016 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
22:29:01.0343 3016 Smb - ok
22:29:01.0563 3016 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
22:29:01.0563 3016 spldr - ok
22:29:01.0707 3016 sptd (4b3f898dc1378ced2f35d04e5b0ce0df) C:\Windows\System32\Drivers\sptd.sys
22:29:01.0707 3016 Suspicious file (NoAccess): C:\Windows\System32\Drivers\sptd.sys. md5: 4b3f898dc1378ced2f35d04e5b0ce0df
22:29:01.0709 3016 sptd ( LockedFile.Multi.Generic ) - warning
22:29:01.0709 3016 sptd - detected LockedFile.Multi.Generic (1)
22:29:01.0944 3016 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
22:29:01.0947 3016 srv - ok
22:29:02.0082 3016 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
22:29:02.0085 3016 srv2 - ok
22:29:02.0684 3016 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
22:29:02.0686 3016 srvnet - ok
22:29:03.0176 3016 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
22:29:03.0177 3016 stexstor - ok
22:29:03.0689 3016 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
22:29:03.0690 3016 swenum - ok
22:29:04.0357 3016 SynTP (064a2530a4a7c7cec1be6a1945645be4) C:\Windows\system32\DRIVERS\SynTP.sys
22:29:04.0359 3016 SynTP - ok
22:29:05.0551 3016 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
22:29:05.0563 3016 Tcpip - ok
22:29:06.0523 3016 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
22:29:06.0535 3016 TCPIP6 - ok
22:29:07.0148 3016 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
22:29:07.0149 3016 tcpipreg - ok
22:29:07.0748 3016 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
22:29:07.0749 3016 TDPIPE - ok
22:29:08.0261 3016 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
22:29:08.0261 3016 TDTCP - ok
22:29:08.0711 3016 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
22:29:08.0712 3016 tdx - ok
22:29:09.0289 3016 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
22:29:09.0290 3016 TermDD - ok
22:29:10.0033 3016 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
22:29:10.0034 3016 tssecsrv - ok
22:29:10.0620 3016 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
22:29:10.0621 3016 TsUsbFlt - ok
22:29:11.0235 3016 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
22:29:11.0240 3016 tunnel - ok
22:29:12.0170 3016 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
22:29:12.0171 3016 uagp35 - ok
22:29:12.0543 3016 UBHelper (a17d5e1a6df4eab0a480f2c490de4c9d) C:\Windows\system32\drivers\UBHelper.sys
22:29:12.0543 3016 UBHelper - ok
22:29:12.0974 3016 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
22:29:12.0977 3016 udfs - ok
22:29:13.0614 3016 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
22:29:13.0615 3016 uliagpkx - ok
22:29:14.0256 3016 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
22:29:14.0257 3016 umbus - ok
22:29:14.0813 3016 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
22:29:14.0813 3016 UmPass - ok
22:29:15.0325 3016 upperdev (7168819f30fe9622284ea19bde7f8ab4) C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys
22:29:15.0326 3016 upperdev - ok
22:29:15.0929 3016 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
22:29:15.0930 3016 usbccgp - ok
22:29:16.0355 3016 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
22:29:16.0356 3016 usbcir - ok
22:29:16.0866 3016 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
22:29:16.0866 3016 usbehci - ok
22:29:17.0624 3016 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
22:29:17.0626 3016 usbhub - ok
22:29:18.0267 3016 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\DRIVERS\usbohci.sys
22:29:18.0268 3016 usbohci - ok
22:29:18.0853 3016 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
22:29:18.0854 3016 usbprint - ok
22:29:19.0533 3016 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
22:29:19.0534 3016 usbscan - ok
22:29:19.0957 3016 usbser (4acee387fa8fd39f83564fcd2fc234f2) C:\Windows\system32\drivers\usbser.sys
22:29:19.0957 3016 usbser - ok
22:29:20.0442 3016 UsbserFilt (66c25cb20b2974e0c0cfdab49fb72a02) C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys
22:29:20.0443 3016 UsbserFilt - ok
22:29:21.0054 3016 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
22:29:21.0055 3016 USBSTOR - ok
22:29:21.0591 3016 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
22:29:21.0592 3016 usbuhci - ok
22:29:22.0075 3016 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\system32\Drivers\usbvideo.sys
22:29:22.0076 3016 usbvideo - ok
22:29:22.0563 3016 VBoxNetAdp (9304501324486866f91b3ae4c420f206) C:\Windows\system32\DRIVERS\VBoxNetAdp.sys
22:29:22.0565 3016 VBoxNetAdp - ok
22:29:22.0985 3016 VBoxNetFlt - ok
22:29:23.0560 3016 VCSVADHWSer (3a4b01c2bdb07dfef29b0b369487503a) C:\Windows\system32\DRIVERS\vcsvad.sys
22:29:23.0560 3016 VCSVADHWSer - ok
22:29:24.0212 3016 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
22:29:24.0212 3016 vdrvroot - ok
22:29:24.0731 3016 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
22:29:24.0732 3016 vga - ok
22:29:25.0292 3016 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
22:29:25.0293 3016 VgaSave - ok
22:29:25.0888 3016 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
22:29:25.0890 3016 vhdmp - ok
22:29:26.0354 3016 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
22:29:26.0354 3016 viaide - ok
22:29:26.0806 3016 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
22:29:26.0807 3016 volmgr - ok
22:29:27.0601 3016 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
22:29:27.0604 3016 volmgrx - ok
22:29:28.0173 3016 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
22:29:28.0175 3016 volsnap - ok
22:29:28.0710 3016 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
22:29:28.0711 3016 vsmraid - ok
22:29:29.0219 3016 VSPerfDrv100 (ca64a8838b4674d14bdf88aba2f253ea) C:\Program Files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys
22:29:29.0220 3016 VSPerfDrv100 - ok
22:29:29.0691 3016 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
22:29:29.0691 3016 vwifibus - ok
22:29:30.0241 3016 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
22:29:30.0242 3016 vwififlt - ok
22:29:30.0886 3016 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
22:29:30.0886 3016 vwifimp - ok
22:29:31.0553 3016 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
22:29:31.0554 3016 WacomPen - ok
22:29:32.0053 3016 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
22:29:32.0054 3016 WANARP - ok
22:29:32.0096 3016 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
22:29:32.0097 3016 Wanarpv6 - ok
22:29:32.0632 3016 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
22:29:32.0633 3016 Wd - ok
22:29:33.0157 3016 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
22:29:33.0162 3016 Wdf01000 - ok
22:29:33.0768 3016 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
22:29:33.0768 3016 WfpLwf - ok
22:29:34.0385 3016 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
22:29:34.0386 3016 WIMMount - ok
22:29:34.0981 3016 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
22:29:34.0982 3016 WinUsb - ok
22:29:35.0460 3016 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
22:29:35.0460 3016 WmiAcpi - ok
22:29:35.0987 3016 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
22:29:35.0988 3016 ws2ifsl - ok
22:29:36.0514 3016 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
22:29:36.0516 3016 WudfPf - ok
22:29:37.0162 3016 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
22:29:37.0163 3016 WUDFRd - ok
22:29:37.0226 3016 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
22:29:37.0494 3016 \Device\Harddisk0\DR0 - ok
22:29:37.0500 3016 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk1\DR1
22:29:37.0538 3016 \Device\Harddisk1\DR1 - ok
22:29:37.0541 3016 Boot (0x1200) (916abd7ee94867b699126200098874ee) \Device\Harddisk0\DR0\Partition0
22:29:37.0542 3016 \Device\Harddisk0\DR0\Partition0 - ok
22:29:37.0582 3016 Boot (0x1200) (913329f2c81390da03d65bc594d4e27d) \Device\Harddisk0\DR0\Partition1
22:29:37.0609 3016 \Device\Harddisk0\DR0\Partition1 - ok
22:29:37.0614 3016 Boot (0x1200) (6ff6440caf09d067cd83a4a04245f25f) \Device\Harddisk1\DR1\Partition0
22:29:37.0615 3016 \Device\Harddisk1\DR1\Partition0 - ok
22:29:37.0615 3016 ============================================================
22:29:37.0615 3016 Scan finished
22:29:37.0615 3016 ============================================================
22:29:37.0625 0324 Detected object count: 1
22:29:37.0625 0324 Actual detected object count: 1

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Samovolné vypínání noteboku

#13 Příspěvek od motji »

Zítra bych Vám napsala ještě nějaké pokyny, ale te odzkoušejte pc a napište, jak to s ním vypadá.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 Bře 2008 19:22
Místo/Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#14 Příspěvek od nom »

Zkusím ho nechat běžet přes noc a uvidíme

nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 Bře 2008 19:22
Místo/Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#15 Příspěvek od nom »

běžel celou noc aniž by se vypnul zatím to vypadá slibně skusím ho resetovat a opět necat běžet

Odpovědět