Pomalé načítání videí na Youtube
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: Pomalé načítání videí na Youtube
Stále pomalé.
- stell
- VIP in memoriam

- Příspěvky: 5175
- Registrován: 09 Pro 2007 09:27
- Místo/Bydliště: SK-REVUCA
- Kontaktovat uživatele:
Re: Pomalé načítání videí na Youtube
podla tohto navodu vymaz vo vsetkych prehliadacoch cache a súbory cookie
http://support.google.com/youtube/bin/a ... wer=105801
Potom odskusaj to vo FireFox a napis.
http://support.google.com/youtube/bin/a ... wer=105801
Potom odskusaj to vo FireFox a napis.
Re: Pomalé načítání videí na Youtube
Mám si nainstalovat firefox ?
- stell
- VIP in memoriam

- Příspěvky: 5175
- Registrován: 09 Pro 2007 09:27
- Místo/Bydliště: SK-REVUCA
- Kontaktovat uživatele:
Re: Pomalé načítání videí na Youtube
ano nainstaluj, a uvidime
Re: Pomalé načítání videí na Youtube
Vymazáno, mozilla firefox nainstalována, ale nepomohlo.
- stell
- VIP in memoriam

- Příspěvky: 5175
- Registrován: 09 Pro 2007 09:27
- Místo/Bydliště: SK-REVUCA
- Kontaktovat uživatele:
Re: Pomalé načítání videí na Youtube
TDSSKILLER
Stiahnite si ho prosím jeden z týchto súborov a uložte na plochu:
http://support.kaspersky.com/downloads/ ... killer.exe
http://support.kaspersky.com/downloads/ ... killer.zip (aj rozbaliť na ploche)
Spustenie aplikácie: 2x-klik na >TDSSKiller.exe
Spustenie kontroly: Start Scan
Ak je infikovaný súbor detekovaný, bude predvolená akcia Cure, kliknite na "Continue".
Ak podozrivý [suspicious] súbor je detekovaný, bude predvolená akcia Skip, kliknite na "Continue".
Môže vás požiadať, aby ste reštartovali počítač na dokončenie procesu. Kliknite na "Reboot Now".
Správa je k dispozícii vo vašom koreňovom adresári (zvyčajne C:\ zložka) vo forme "TDSSKiller. _log.txt".
Stiahnite si ho prosím jeden z týchto súborov a uložte na plochu:
http://support.kaspersky.com/downloads/ ... killer.exe
http://support.kaspersky.com/downloads/ ... killer.zip (aj rozbaliť na ploche)
Spustenie aplikácie: 2x-klik na >TDSSKiller.exe
Spustenie kontroly: Start Scan
Ak je infikovaný súbor detekovaný, bude predvolená akcia Cure, kliknite na "Continue".
Ak podozrivý [suspicious] súbor je detekovaný, bude predvolená akcia Skip, kliknite na "Continue".
Môže vás požiadať, aby ste reštartovali počítač na dokončenie procesu. Kliknite na "Reboot Now".
Správa je k dispozícii vo vašom koreňovom adresári (zvyčajne C:\ zložka) vo forme "TDSSKiller. _log.txt".
Re: Pomalé načítání videí na Youtube
Nic to nenašlo..hodím Vám sem report
15:01:09.0994 2440 TDSS rootkit removing tool 2.7.32.0 Apr 23 2012 19:12:34
15:01:10.0215 2440 ============================================================
15:01:10.0215 2440 Current date / time: 2012/04/24 15:01:10.0215
15:01:10.0215 2440 SystemInfo:
15:01:10.0215 2440
15:01:10.0215 2440 OS Version: 6.1.7601 ServicePack: 1.0
15:01:10.0215 2440 Product type: Workstation
15:01:10.0215 2440 ComputerName: OEM-PC
15:01:10.0215 2440 UserName: OEM
15:01:10.0215 2440 Windows directory: C:\Windows
15:01:10.0215 2440 System windows directory: C:\Windows
15:01:10.0215 2440 Running under WOW64
15:01:10.0215 2440 Processor architecture: Intel x64
15:01:10.0215 2440 Number of processors: 4
15:01:10.0215 2440 Page size: 0x1000
15:01:10.0215 2440 Boot type: Normal boot
15:01:10.0215 2440 ============================================================
15:01:11.0497 2440 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1F8B1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000040
15:01:11.0611 2440 ============================================================
15:01:11.0611 2440 \Device\Harddisk0\DR0:
15:01:11.0619 2440 MBR partitions:
15:01:11.0619 2440 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
15:01:11.0619 2440 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x746D3800
15:01:11.0619 2440 ============================================================
15:01:11.0718 2440 C: <-> \Device\Harddisk0\DR0\Partition1
15:01:11.0718 2440 ============================================================
15:01:11.0718 2440 Initialize success
15:01:11.0718 2440 ============================================================
15:01:15.0671 0736 ============================================================
15:01:15.0671 0736 Scan started
15:01:15.0671 0736 Mode: Manual;
15:01:15.0671 0736 ============================================================
15:01:16.0827 0736 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\DRIVERS\1394ohci.sys
15:01:16.0833 0736 1394ohci - ok
15:01:16.0862 0736 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
15:01:16.0869 0736 ACPI - ok
15:01:16.0886 0736 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
15:01:16.0888 0736 AcpiPmi - ok
15:01:17.0246 0736 AdobeARMservice (11a52cf7b265631deeb24c6149309eff) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
15:01:17.0249 0736 AdobeARMservice - ok
15:01:17.0414 0736 AdobeFlashPlayerUpdateSvc (459ac130c6ab892b1cd5d7544626efc5) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
15:01:17.0421 0736 AdobeFlashPlayerUpdateSvc - ok
15:01:17.0457 0736 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\drivers\adp94xx.sys
15:01:17.0463 0736 adp94xx - ok
15:01:17.0483 0736 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\drivers\adpahci.sys
15:01:17.0487 0736 adpahci - ok
15:01:17.0502 0736 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\drivers\adpu320.sys
15:01:17.0504 0736 adpu320 - ok
15:01:17.0529 0736 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
15:01:17.0531 0736 AeLookupSvc - ok
15:01:17.0613 0736 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
15:01:17.0633 0736 AFD - ok
15:01:17.0675 0736 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
15:01:17.0678 0736 agp440 - ok
15:01:17.0698 0736 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
15:01:17.0700 0736 ALG - ok
15:01:17.0720 0736 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
15:01:17.0721 0736 aliide - ok
15:01:17.0801 0736 AMD External Events Utility (1ea72552bc6ab3a5d02e16a3004b3b97) C:\Windows\system32\atiesrxx.exe
15:01:17.0806 0736 AMD External Events Utility - ok
15:01:17.0868 0736 AMD FUEL Service - ok
15:01:17.0950 0736 AMD Reservation Manager (dd27f6c3de9bfe50635c721e09edc5dd) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
15:01:17.0956 0736 AMD Reservation Manager - ok
15:01:17.0970 0736 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
15:01:17.0971 0736 amdide - ok
15:01:17.0980 0736 amdiox64 (6a2eeb0c4133b20773bb3dd0b7b377b4) C:\Windows\system32\DRIVERS\amdiox64.sys
15:01:17.0981 0736 amdiox64 - ok
15:01:17.0986 0736 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\drivers\amdk8.sys
15:01:17.0987 0736 AmdK8 - ok
15:01:18.0280 0736 amdkmdag (bfa9657adf7ddc29242a6e0e88de36fa) C:\Windows\system32\DRIVERS\atikmdag.sys
15:01:18.0460 0736 amdkmdag - ok
15:01:18.0575 0736 amdkmdap (8c493027d9b2399283e724e9862ebb42) C:\Windows\system32\DRIVERS\atikmpag.sys
15:01:18.0581 0736 amdkmdap - ok
15:01:18.0614 0736 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
15:01:18.0616 0736 AmdPPM - ok
15:01:18.0645 0736 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
15:01:18.0648 0736 amdsata - ok
15:01:18.0677 0736 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\drivers\amdsbs.sys
15:01:18.0682 0736 amdsbs - ok
15:01:18.0700 0736 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
15:01:18.0701 0736 amdxata - ok
15:01:18.0707 0736 AODDriver4.0 - ok
15:01:18.0727 0736 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
15:01:18.0728 0736 AppID - ok
15:01:18.0734 0736 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
15:01:18.0735 0736 AppIDSvc - ok
15:01:18.0783 0736 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
15:01:18.0785 0736 Appinfo - ok
15:01:18.0791 0736 AppleCharger (301aa64f9643bc453d90a66c4c0e7204) C:\Windows\system32\DRIVERS\AppleCharger.sys
15:01:18.0792 0736 AppleCharger - ok
15:01:18.0800 0736 AppleChargerSrv (95ef7247c50c7241fdae39a9b3aff4ae) C:\Windows\system32\AppleChargerSrv.exe
15:01:18.0803 0736 AppleChargerSrv - ok
15:01:18.0823 0736 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\drivers\arc.sys
15:01:18.0825 0736 arc - ok
15:01:18.0839 0736 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\drivers\arcsas.sys
15:01:18.0840 0736 arcsas - ok
15:01:18.0917 0736 aswFsBlk (c7c69ed14a7ddecaf58e3dfd1fca6d37) C:\Windows\system32\drivers\aswFsBlk.sys
15:01:18.0919 0736 aswFsBlk - ok
15:01:18.0988 0736 aswMonFlt (ad5276449159ba8d5206c6094c764249) C:\Windows\system32\drivers\aswMonFlt.sys
15:01:18.0991 0736 aswMonFlt - ok
15:01:19.0050 0736 aswRdr (1e5ca4c89227df49c5fc779e7848ae8b) C:\Windows\System32\Drivers\aswrdr2.sys
15:01:19.0052 0736 aswRdr - ok
15:01:19.0156 0736 aswSnx (45ad1ed2a0ccd582e32b10535f5c42e9) C:\Windows\system32\drivers\aswSnx.sys
15:01:19.0169 0736 aswSnx - ok
15:01:19.0242 0736 aswSP (06fd751c1b15734e57df09614602be66) C:\Windows\system32\drivers\aswSP.sys
15:01:19.0244 0736 aswSP - ok
15:01:19.0290 0736 aswTdi (bf670f65762ff8da7615d7b80914c0f8) C:\Windows\system32\drivers\aswTdi.sys
15:01:19.0292 0736 aswTdi - ok
15:01:19.0311 0736 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
15:01:19.0313 0736 AsyncMac - ok
15:01:19.0327 0736 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
15:01:19.0328 0736 atapi - ok
15:01:19.0367 0736 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
15:01:19.0385 0736 AudioEndpointBuilder - ok
15:01:19.0391 0736 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
15:01:19.0396 0736 AudioSrv - ok
15:01:19.0420 0736 avast! Antivirus (a45aa986d9490a4e5b87563d9cd7b175) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
15:01:19.0420 0736 avast! Antivirus - ok
15:01:19.0490 0736 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
15:01:19.0494 0736 AxInstSV - ok
15:01:19.0535 0736 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\drivers\bxvbda.sys
15:01:19.0541 0736 b06bdrv - ok
15:01:19.0565 0736 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
15:01:19.0568 0736 b57nd60a - ok
15:01:19.0576 0736 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
15:01:19.0578 0736 BDESVC - ok
15:01:19.0581 0736 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
15:01:19.0582 0736 Beep - ok
15:01:19.0659 0736 BFE (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
15:01:19.0732 0736 BFE - ok
15:01:19.0789 0736 BITS (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll
15:01:19.0806 0736 BITS - ok
15:01:19.0839 0736 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
15:01:19.0840 0736 blbdrive - ok
15:01:19.0855 0736 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
15:01:19.0857 0736 bowser - ok
15:01:19.0860 0736 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\BrFiltLo.sys
15:01:19.0861 0736 BrFiltLo - ok
15:01:19.0864 0736 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\BrFiltUp.sys
15:01:19.0865 0736 BrFiltUp - ok
15:01:19.0878 0736 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
15:01:19.0880 0736 Browser - ok
15:01:19.0892 0736 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
15:01:19.0895 0736 Brserid - ok
15:01:19.0899 0736 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
15:01:19.0900 0736 BrSerWdm - ok
15:01:19.0903 0736 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
15:01:19.0904 0736 BrUsbMdm - ok
15:01:19.0907 0736 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
15:01:19.0908 0736 BrUsbSer - ok
15:01:19.0913 0736 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\drivers\bthmodem.sys
15:01:19.0915 0736 BTHMODEM - ok
15:01:19.0932 0736 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
15:01:19.0934 0736 bthserv - ok
15:01:19.0944 0736 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
15:01:19.0946 0736 cdfs - ok
15:01:19.0962 0736 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
15:01:19.0964 0736 cdrom - ok
15:01:19.0968 0736 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
15:01:19.0970 0736 CertPropSvc - ok
15:01:19.0973 0736 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\drivers\circlass.sys
15:01:19.0974 0736 circlass - ok
15:01:20.0001 0736 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
15:01:20.0005 0736 CLFS - ok
15:01:20.0063 0736 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:01:20.0067 0736 clr_optimization_v2.0.50727_32 - ok
15:01:20.0121 0736 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
15:01:20.0126 0736 clr_optimization_v2.0.50727_64 - ok
15:01:20.0371 0736 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:01:20.0376 0736 clr_optimization_v4.0.30319_32 - ok
15:01:20.0412 0736 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
15:01:20.0417 0736 clr_optimization_v4.0.30319_64 - ok
15:01:20.0424 0736 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\drivers\CmBatt.sys
15:01:20.0424 0736 CmBatt - ok
15:01:20.0434 0736 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
15:01:20.0434 0736 cmdide - ok
15:01:20.0485 0736 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
15:01:20.0490 0736 CNG - ok
15:01:20.0509 0736 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\drivers\compbatt.sys
15:01:20.0510 0736 Compbatt - ok
15:01:20.0539 0736 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\DRIVERS\CompositeBus.sys
15:01:20.0540 0736 CompositeBus - ok
15:01:20.0543 0736 COMSysApp - ok
15:01:20.0560 0736 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\drivers\crcdisk.sys
15:01:20.0561 0736 crcdisk - ok
15:01:20.0585 0736 CryptSvc (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
15:01:20.0588 0736 CryptSvc - ok
15:01:20.0622 0736 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
15:01:20.0630 0736 DcomLaunch - ok
15:01:20.0652 0736 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
15:01:20.0657 0736 defragsvc - ok
15:01:20.0669 0736 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
15:01:20.0671 0736 DfsC - ok
15:01:20.0739 0736 dg_ssudbus (388039f99ce8769024ee0438352aca99) C:\Windows\system32\DRIVERS\ssudbus.sys
15:01:20.0740 0736 dg_ssudbus - ok
15:01:20.0762 0736 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
15:01:20.0767 0736 Dhcp - ok
15:01:20.0780 0736 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
15:01:20.0781 0736 discache - ok
15:01:20.0794 0736 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\drivers\disk.sys
15:01:20.0795 0736 Disk - ok
15:01:20.0811 0736 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
15:01:20.0815 0736 Dnscache - ok
15:01:20.0831 0736 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
15:01:20.0835 0736 dot3svc - ok
15:01:20.0852 0736 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
15:01:20.0855 0736 DPS - ok
15:01:20.0920 0736 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
15:01:20.0922 0736 drmkaud - ok
15:01:20.0986 0736 dtsoftbus01 (400582b09e0bb557d0ec28a945150eeb) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
15:01:20.0992 0736 dtsoftbus01 - ok
15:01:21.0040 0736 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
15:01:21.0046 0736 DXGKrnl - ok
15:01:21.0067 0736 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
15:01:21.0070 0736 EapHost - ok
15:01:21.0193 0736 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\drivers\evbda.sys
15:01:21.0277 0736 ebdrv - ok
15:01:21.0352 0736 EFS (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
15:01:21.0354 0736 EFS - ok
15:01:21.0413 0736 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
15:01:21.0441 0736 ehRecvr - ok
15:01:21.0453 0736 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
15:01:21.0463 0736 ehSched - ok
15:01:21.0511 0736 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\drivers\elxstor.sys
15:01:21.0517 0736 elxstor - ok
15:01:21.0526 0736 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
15:01:21.0527 0736 ErrDev - ok
15:01:21.0553 0736 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
15:01:21.0559 0736 EventSystem - ok
15:01:21.0583 0736 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
15:01:21.0586 0736 exfat - ok
15:01:21.0618 0736 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
15:01:21.0621 0736 fastfat - ok
15:01:21.0652 0736 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
15:01:21.0670 0736 Fax - ok
15:01:21.0708 0736 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\drivers\fdc.sys
15:01:21.0709 0736 fdc - ok
15:01:21.0712 0736 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
15:01:21.0714 0736 fdPHost - ok
15:01:21.0723 0736 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
15:01:21.0725 0736 FDResPub - ok
15:01:21.0739 0736 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
15:01:21.0740 0736 FileInfo - ok
15:01:21.0747 0736 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
15:01:21.0748 0736 Filetrace - ok
15:01:21.0751 0736 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\drivers\flpydisk.sys
15:01:21.0752 0736 flpydisk - ok
15:01:21.0772 0736 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
15:01:21.0775 0736 FltMgr - ok
15:01:21.0837 0736 FontCache (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
15:01:21.0858 0736 FontCache - ok
15:01:21.0903 0736 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:01:21.0906 0736 FontCache3.0.0.0 - ok
15:01:21.0917 0736 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
15:01:21.0920 0736 FsDepends - ok
15:01:21.0947 0736 Fs_Rec (6bd9295cc032dd3077c671fccf579a7b) C:\Windows\system32\drivers\Fs_Rec.sys
15:01:21.0948 0736 Fs_Rec - ok
15:01:22.0010 0736 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
15:01:22.0016 0736 fvevol - ok
15:01:22.0040 0736 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\drivers\gagp30kx.sys
15:01:22.0043 0736 gagp30kx - ok
15:01:22.0086 0736 gdrv (7907e14f9bcf3a4689c9a74a1a873cb6) C:\Windows\gdrv.sys
15:01:22.0087 0736 gdrv - ok
15:01:22.0131 0736 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
15:01:22.0147 0736 gpsvc - ok
15:01:22.0289 0736 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:01:22.0293 0736 gupdate - ok
15:01:22.0330 0736 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:01:22.0333 0736 gupdatem - ok
15:01:22.0379 0736 hamachi (1e6438d4ea6e1174a3b3b1edc4de660b) C:\Windows\system32\DRIVERS\hamachi.sys
15:01:22.0381 0736 hamachi - ok
15:01:22.0556 0736 Hamachi2Svc (d483dbaef409e8ab7477c28615fcd853) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
15:01:22.0622 0736 Hamachi2Svc - ok
15:01:22.0664 0736 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
15:01:22.0666 0736 hcw85cir - ok
15:01:22.0707 0736 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
15:01:22.0711 0736 HdAudAddService - ok
15:01:22.0726 0736 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\DRIVERS\HDAudBus.sys
15:01:22.0728 0736 HDAudBus - ok
15:01:22.0731 0736 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\drivers\HidBatt.sys
15:01:22.0732 0736 HidBatt - ok
15:01:22.0738 0736 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\drivers\hidbth.sys
15:01:22.0739 0736 HidBth - ok
15:01:22.0756 0736 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\drivers\hidir.sys
15:01:22.0757 0736 HidIr - ok
15:01:22.0851 0736 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
15:01:22.0857 0736 hidserv - ok
15:01:22.0906 0736 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
15:01:22.0907 0736 HidUsb - ok
15:01:22.0922 0736 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
15:01:22.0925 0736 hkmsvc - ok
15:01:22.0946 0736 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
15:01:22.0951 0736 HomeGroupListener - ok
15:01:22.0976 0736 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
15:01:22.0981 0736 HomeGroupProvider - ok
15:01:23.0003 0736 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
15:01:23.0004 0736 HpSAMD - ok
15:01:23.0062 0736 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
15:01:23.0091 0736 HTTP - ok
15:01:23.0106 0736 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
15:01:23.0107 0736 hwpolicy - ok
15:01:23.0120 0736 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
15:01:23.0122 0736 i8042prt - ok
15:01:23.0163 0736 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
15:01:23.0173 0736 iaStorV - ok
15:01:23.0265 0736 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
15:01:23.0283 0736 idsvc - ok
15:01:23.0301 0736 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\drivers\iirsp.sys
15:01:23.0302 0736 iirsp - ok
15:01:23.0370 0736 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
15:01:23.0387 0736 IKEEXT - ok
15:01:23.0577 0736 IntcAzAudAddService (0adf714079ae174a39d69036143e4c50) C:\Windows\system32\drivers\RTKVHD64.sys
15:01:23.0593 0736 IntcAzAudAddService - ok
15:01:23.0625 0736 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
15:01:23.0626 0736 intelide - ok
15:01:23.0648 0736 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\drivers\intelppm.sys
15:01:23.0649 0736 intelppm - ok
15:01:23.0667 0736 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
15:01:23.0669 0736 IPBusEnum - ok
15:01:23.0673 0736 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:01:23.0675 0736 IpFilterDriver - ok
15:01:23.0708 0736 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
15:01:23.0714 0736 iphlpsvc - ok
15:01:23.0718 0736 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
15:01:23.0720 0736 IPMIDRV - ok
15:01:23.0755 0736 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
15:01:23.0757 0736 IPNAT - ok
15:01:23.0803 0736 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
15:01:23.0807 0736 IRENUM - ok
15:01:23.0860 0736 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
15:01:23.0862 0736 isapnp - ok
15:01:23.0891 0736 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
15:01:23.0899 0736 iScsiPrt - ok
15:01:24.0002 0736 JMB36X (f3a41ec4c6506e76e07a219b3a1df8d2) C:\Windows\SysWOW64\XSrvSetup.exe
15:01:24.0012 0736 JMB36X - ok
15:01:24.0084 0736 JRAID (1c368c1a2733dcc5b8e15420aa2b0f6d) C:\Windows\system32\DRIVERS\jraid.sys
15:01:24.0088 0736 JRAID - ok
15:01:24.0110 0736 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
15:01:24.0113 0736 kbdclass - ok
15:01:24.0134 0736 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys
15:01:24.0135 0736 kbdhid - ok
15:01:24.0160 0736 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
15:01:24.0166 0736 KeyIso - ok
15:01:24.0184 0736 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
15:01:24.0185 0736 KSecDD - ok
15:01:24.0197 0736 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
15:01:24.0199 0736 KSecPkg - ok
15:01:24.0210 0736 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
15:01:24.0211 0736 ksthunk - ok
15:01:24.0252 0736 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
15:01:24.0258 0736 KtmRm - ok
15:01:24.0288 0736 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll
15:01:24.0294 0736 LanmanServer - ok
15:01:24.0314 0736 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
15:01:24.0319 0736 LanmanWorkstation - ok
15:01:24.0389 0736 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
15:01:24.0392 0736 lltdio - ok
15:01:24.0427 0736 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
15:01:24.0442 0736 lltdsvc - ok
15:01:24.0450 0736 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
15:01:24.0452 0736 lmhosts - ok
15:01:24.0483 0736 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\drivers\lsi_fc.sys
15:01:24.0485 0736 LSI_FC - ok
15:01:24.0497 0736 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\drivers\lsi_sas.sys
15:01:24.0499 0736 LSI_SAS - ok
15:01:24.0518 0736 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\drivers\lsi_sas2.sys
15:01:24.0519 0736 LSI_SAS2 - ok
15:01:24.0534 0736 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\drivers\lsi_scsi.sys
15:01:24.0534 0736 LSI_SCSI - ok
15:01:24.0564 0736 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
15:01:24.0566 0736 luafv - ok
15:01:24.0632 0736 MBAMProtector (dbc08862a71459e74f7538b432c114cc) C:\Windows\system32\drivers\mbam.sys
15:01:24.0635 0736 MBAMProtector - ok
15:01:24.0749 0736 MBAMService (ba400ed640bca1eae5c727ae17c10207) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
15:01:24.0754 0736 MBAMService - ok
15:01:24.0832 0736 mcdbus (79d51e7f5926e8ce1b3ebecebae28cff) C:\Windows\system32\DRIVERS\mcdbus.sys
15:01:24.0834 0736 mcdbus - ok
15:01:24.0867 0736 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
15:01:24.0870 0736 Mcx2Svc - ok
15:01:24.0881 0736 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\drivers\megasas.sys
15:01:24.0883 0736 megasas - ok
15:01:24.0906 0736 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\drivers\MegaSR.sys
15:01:24.0909 0736 MegaSR - ok
15:01:24.0980 0736 Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
15:01:24.0985 0736 Microsoft Office Groove Audit Service - ok
15:01:25.0013 0736 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
15:01:25.0020 0736 MMCSS - ok
15:01:25.0024 0736 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
15:01:25.0025 0736 Modem - ok
15:01:25.0043 0736 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
15:01:25.0044 0736 monitor - ok
15:01:25.0078 0736 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
15:01:25.0079 0736 mouclass - ok
15:01:25.0136 0736 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
15:01:25.0139 0736 mouhid - ok
15:01:25.0158 0736 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
15:01:25.0161 0736 mountmgr - ok
15:01:25.0186 0736 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
15:01:25.0188 0736 mpio - ok
15:01:25.0211 0736 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
15:01:25.0213 0736 mpsdrv - ok
15:01:25.0253 0736 MpsSvc (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
15:01:25.0268 0736 MpsSvc - ok
15:01:25.0276 0736 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
15:01:25.0278 0736 MRxDAV - ok
15:01:25.0311 0736 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
15:01:25.0313 0736 mrxsmb - ok
15:01:25.0349 0736 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:01:25.0355 0736 mrxsmb10 - ok
15:01:25.0380 0736 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:01:25.0384 0736 mrxsmb20 - ok
15:01:25.0404 0736 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
15:01:25.0406 0736 msahci - ok
15:01:25.0437 0736 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
15:01:25.0441 0736 msdsm - ok
15:01:25.0454 0736 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
15:01:25.0459 0736 MSDTC - ok
15:01:25.0489 0736 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
15:01:25.0491 0736 Msfs - ok
15:01:25.0498 0736 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
15:01:25.0499 0736 mshidkmdf - ok
15:01:25.0505 0736 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
15:01:25.0505 0736 msisadrv - ok
15:01:25.0536 0736 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
15:01:25.0540 0736 MSiSCSI - ok
15:01:25.0541 0736 msiserver - ok
15:01:25.0590 0736 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
15:01:25.0592 0736 MSKSSRV - ok
15:01:25.0611 0736 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
15:01:25.0613 0736 MSPCLOCK - ok
15:01:25.0632 0736 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
15:01:25.0633 0736 MSPQM - ok
15:01:25.0664 0736 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
15:01:25.0669 0736 MsRPC - ok
15:01:25.0684 0736 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
15:01:25.0685 0736 mssmbios - ok
15:01:25.0695 0736 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
15:01:25.0696 0736 MSTEE - ok
15:01:25.0699 0736 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\drivers\MTConfig.sys
15:01:25.0700 0736 MTConfig - ok
15:01:25.0750 0736 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
15:01:25.0752 0736 Mup - ok
15:01:25.0776 0736 napagent (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
15:01:25.0784 0736 napagent - ok
15:01:25.0826 0736 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
15:01:25.0830 0736 NativeWifiP - ok
15:01:25.0934 0736 NAUpdate (9d1cce440552500ded3a62f9d779cdb4) C:\Program Files (x86)\Nero\Update\NASvc.exe
15:01:25.0943 0736 NAUpdate - ok
15:01:26.0024 0736 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
15:01:26.0073 0736 NDIS - ok
15:01:26.0141 0736 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
15:01:26.0142 0736 NdisCap - ok
15:01:26.0193 0736 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
15:01:26.0194 0736 NdisTapi - ok
15:01:26.0228 0736 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
15:01:26.0229 0736 Ndisuio - ok
15:01:26.0257 0736 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
15:01:26.0259 0736 NdisWan - ok
15:01:26.0271 0736 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
15:01:26.0272 0736 NDProxy - ok
15:01:26.0308 0736 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
15:01:26.0309 0736 NetBIOS - ok
15:01:26.0331 0736 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
15:01:26.0333 0736 NetBT - ok
15:01:26.0356 0736 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
15:01:26.0357 0736 Netlogon - ok
15:01:26.0435 0736 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
15:01:26.0451 0736 Netman - ok
15:01:26.0484 0736 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
15:01:26.0492 0736 netprofm - ok
15:01:26.0528 0736 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
15:01:26.0531 0736 NetTcpPortSharing - ok
15:01:26.0579 0736 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\drivers\nfrd960.sys
15:01:26.0579 0736 nfrd960 - ok
15:01:26.0740 0736 NitroReaderDriverReadSpool2 (d333a5fb3beafd554fb8ff5fd5bf762e) C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
15:01:26.0748 0736 NitroReaderDriverReadSpool2 - ok
15:01:26.0825 0736 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
15:01:26.0839 0736 NlaSvc - ok
15:01:26.0854 0736 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
15:01:26.0856 0736 Npfs - ok
15:01:26.0867 0736 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
15:01:26.0870 0736 nsi - ok
15:01:26.0873 0736 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
15:01:26.0874 0736 nsiproxy - ok
15:01:26.0954 0736 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
15:01:26.0977 0736 Ntfs - ok
15:01:27.0061 0736 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
15:01:27.0063 0736 Null - ok
15:01:27.0088 0736 nusb3hub (785298579b5f9b4032152dfbb992fdb6) C:\Windows\system32\DRIVERS\nusb3hub.sys
15:01:27.0091 0736 nusb3hub - ok
15:01:27.0119 0736 nusb3xhc (df2750481b4964814467c974f2b0eef1) C:\Windows\system32\DRIVERS\nusb3xhc.sys
15:01:27.0122 0736 nusb3xhc - ok
15:01:27.0197 0736 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
15:01:27.0202 0736 nvraid - ok
15:01:27.0237 0736 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
15:01:27.0242 0736 nvstor - ok
15:01:27.0283 0736 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
15:01:27.0287 0736 nv_agp - ok
15:01:27.0360 0736 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
15:01:27.0382 0736 odserv - ok
15:01:27.0406 0736 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
15:01:27.0409 0736 ohci1394 - ok
15:01:27.0549 0736 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
15:01:27.0554 0736 ose - ok
15:01:27.0592 0736 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
15:01:27.0602 0736 p2pimsvc - ok
15:01:27.0636 0736 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
15:01:27.0643 0736 p2psvc - ok
15:01:27.0649 0736 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\drivers\parport.sys
15:01:27.0651 0736 Parport - ok
15:01:27.0679 0736 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
15:01:27.0680 0736 partmgr - ok
15:01:27.0702 0736 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
15:01:27.0707 0736 PcaSvc - ok
15:01:27.0718 0736 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
15:01:27.0720 0736 pci - ok
15:01:27.0737 0736 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
15:01:27.0738 0736 pciide - ok
15:01:27.0747 0736 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\drivers\pcmcia.sys
15:01:27.0750 0736 pcmcia - ok
15:01:27.0759 0736 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
15:01:27.0760 0736 pcw - ok
15:01:27.0797 0736 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
15:01:27.0817 0736 PEAUTH - ok
15:01:27.0892 0736 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
15:01:27.0899 0736 PerfHost - ok
15:01:28.0002 0736 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
15:01:28.0031 0736 pla - ok
15:01:28.0088 0736 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
15:01:28.0126 0736 PlugPlay - ok
15:01:28.0172 0736 PnkBstrA - ok
15:01:28.0177 0736 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
15:01:28.0181 0736 PNRPAutoReg - ok
15:01:28.0194 0736 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
15:01:28.0199 0736 PNRPsvc - ok
15:01:28.0241 0736 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
15:01:28.0246 0736 PolicyAgent - ok
15:01:28.0264 0736 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
15:01:28.0268 0736 Power - ok
15:01:28.0316 0736 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
15:01:28.0318 0736 PptpMiniport - ok
15:01:28.0324 0736 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\drivers\processr.sys
15:01:28.0327 0736 Processor - ok
15:01:28.0351 0736 ProfSvc (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
15:01:28.0356 0736 ProfSvc - ok
15:01:28.0384 0736 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
15:01:28.0386 0736 ProtectedStorage - ok
15:01:28.0442 0736 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
15:01:28.0446 0736 Psched - ok
15:01:28.0519 0736 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\drivers\ql2300.sys
15:01:28.0550 0736 ql2300 - ok
15:01:28.0609 0736 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\drivers\ql40xx.sys
15:01:28.0611 0736 ql40xx - ok
15:01:28.0629 0736 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
15:01:28.0649 0736 QWAVE - ok
15:01:28.0672 0736 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
15:01:28.0673 0736 QWAVEdrv - ok
15:01:28.0677 0736 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
15:01:28.0678 0736 RasAcd - ok
15:01:28.0721 0736 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
15:01:28.0724 0736 RasAgileVpn - ok
15:01:28.0739 0736 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
15:01:28.0743 0736 RasAuto - ok
15:01:28.0759 0736 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
15:01:28.0761 0736 Rasl2tp - ok
15:01:28.0781 0736 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
15:01:28.0788 0736 RasMan - ok
15:01:28.0802 0736 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
15:01:28.0804 0736 RasPppoe - ok
15:01:28.0879 0736 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
15:01:28.0880 0736 RasSstp - ok
15:01:28.0908 0736 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
15:01:28.0912 0736 rdbss - ok
15:01:28.0915 0736 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\drivers\rdpbus.sys
15:01:28.0916 0736 rdpbus - ok
15:01:28.0924 0736 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
15:01:28.0925 0736 RDPCDD - ok
15:01:28.0944 0736 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
15:01:28.0945 0736 RDPENCDD - ok
15:01:28.0982 0736 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
15:01:28.0984 0736 RDPREFMP - ok
15:01:29.0030 0736 RDPWD (6d76e6433574b058adcb0c50df834492) C:\Windows\system32\drivers\RDPWD.sys
15:01:29.0036 0736 RDPWD - ok
15:01:29.0105 0736 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
15:01:29.0111 0736 rdyboost - ok
15:01:29.0144 0736 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
15:01:29.0147 0736 RemoteAccess - ok
15:01:29.0171 0736 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
15:01:29.0176 0736 RemoteRegistry - ok
15:01:29.0195 0736 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
15:01:29.0199 0736 RpcEptMapper - ok
15:01:29.0220 0736 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
15:01:29.0222 0736 RpcLocator - ok
15:01:29.0250 0736 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
15:01:29.0256 0736 RpcSs - ok
15:01:29.0266 0736 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
15:01:29.0268 0736 rspndr - ok
15:01:29.0332 0736 RTHDMIAzAudService (d6d381b76056c668679723938f06f16c) C:\Windows\system32\drivers\RtHDMIVX.sys
15:01:29.0334 0736 RTHDMIAzAudService - ok
15:01:29.0398 0736 RTL8167 (4fbda07ef0a3097ce14c5cabf723b278) C:\Windows\system32\DRIVERS\Rt64win7.sys
15:01:29.0402 0736 RTL8167 - ok
15:01:29.0456 0736 s1018bus (301fba4594fb5c0a469299a65106b4aa) C:\Windows\system32\DRIVERS\s1018bus.sys
15:01:29.0458 0736 s1018bus - ok
15:01:29.0517 0736 s1018mdfl (d1d7c744f79710357e60fc04d125ed01) C:\Windows\system32\DRIVERS\s1018mdfl.sys
15:01:29.0520 0736 s1018mdfl - ok
15:01:29.0552 0736 s1018mdm (7dbe12cccd837d4266b2ddd80a329c09) C:\Windows\system32\DRIVERS\s1018mdm.sys
15:01:29.0557 0736 s1018mdm - ok
15:01:29.0634 0736 s1018mgmt (065ff5e62d2d18a6d93fd925546cd549) C:\Windows\system32\DRIVERS\s1018mgmt.sys
15:01:29.0638 0736 s1018mgmt - ok
15:01:29.0685 0736 s1018nd5 (5101d815bdf0d667e3d5f0ea727caaee) C:\Windows\system32\DRIVERS\s1018nd5.sys
15:01:29.0685 0736 s1018nd5 - ok
15:01:29.0762 0736 s1018obex (13f220c65b444ac9bda49dacfc3230bb) C:\Windows\system32\DRIVERS\s1018obex.sys
15:01:29.0766 0736 s1018obex - ok
15:01:29.0790 0736 s1018unic (ce7d8bce80211d8a35f6bd7a87791860) C:\Windows\system32\DRIVERS\s1018unic.sys
15:01:29.0793 0736 s1018unic - ok
15:01:29.0812 0736 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
15:01:29.0814 0736 SamSs - ok
15:01:29.0832 0736 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
15:01:29.0834 0736 sbp2port - ok
15:01:29.0843 0736 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
15:01:29.0848 0736 SCardSvr - ok
15:01:29.0865 0736 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
15:01:29.0866 0736 scfilter - ok
15:01:29.0917 0736 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
15:01:29.0939 0736 Schedule - ok
15:01:29.0956 0736 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
15:01:29.0957 0736 SCPolicySvc - ok
15:01:30.0017 0736 ScreamBAudioSvc (8b56bdce6a303dde63d63440d1cf9ad1) C:\Windows\system32\drivers\ScreamingBAudio64.sys
15:01:30.0019 0736 ScreamBAudioSvc - ok
15:01:30.0041 0736 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
15:01:30.0046 0736 SDRSVC - ok
15:01:30.0079 0736 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
15:01:30.0080 0736 secdrv - ok
15:01:30.0084 0736 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
15:01:30.0088 0736 seclogon - ok
15:01:30.0103 0736 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
15:01:30.0107 0736 SENS - ok
15:01:30.0111 0736 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
15:01:30.0114 0736 SensrSvc - ok
15:01:30.0133 0736 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\drivers\serenum.sys
15:01:30.0134 0736 Serenum - ok
15:01:30.0147 0736 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\drivers\serial.sys
15:01:30.0149 0736 Serial - ok
15:01:30.0178 0736 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\drivers\sermouse.sys
15:01:30.0180 0736 sermouse - ok
15:01:30.0211 0736 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
15:01:30.0216 0736 SessionEnv - ok
15:01:30.0219 0736 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
15:01:30.0221 0736 sffdisk - ok
15:01:30.0224 0736 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
15:01:30.0225 0736 sffp_mmc - ok
15:01:30.0229 0736 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
15:01:30.0230 0736 sffp_sd - ok
15:01:30.0233 0736 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\drivers\sfloppy.sys
15:01:30.0234 0736 sfloppy - ok
15:01:30.0259 0736 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
15:01:30.0263 0736 SharedAccess - ok
15:01:30.0292 0736 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
15:01:30.0297 0736 ShellHWDetection - ok
15:01:30.0333 0736 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\drivers\SiSRaid2.sys
15:01:30.0336 0736 SiSRaid2 - ok
15:01:30.0364 0736 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\drivers\sisraid4.sys
15:01:30.0368 0736 SiSRaid4 - ok
15:01:30.0407 0736 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
15:01:30.0411 0736 Smb - ok
15:01:30.0511 0736 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
15:01:30.0520 0736 SNMPTRAP - ok
15:01:30.0539 0736 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
15:01:30.0541 0736 spldr - ok
15:01:30.0568 0736 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
15:01:30.0590 0736 Spooler - ok
15:01:30.0711 0736 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
15:01:30.0793 0736 sppsvc - ok
15:01:30.0879 0736 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
15:01:30.0889 0736 sppuinotify - ok
15:01:30.0948 0736 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
15:01:30.0969 0736 srv - ok
15:01:30.0993 0736 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
15:01:30.0998 0736 srv2 - ok
15:01:31.0014 0736 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
15:01:31.0017 0736 srvnet - ok
15:01:31.0071 0736 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
15:01:31.0083 0736 SSDPSRV - ok
15:01:31.0100 0736 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
15:01:31.0110 0736 SstpSvc - ok
15:01:31.0155 0736 ssudmdm (ad42ca614e086bcadbd53fffc404ac24) C:\Windows\system32\DRIVERS\ssudmdm.sys
15:01:31.0158 0736 ssudmdm - ok
15:01:31.0234 0736 ssudobex (a23bc4049f6a1820bc82eab492950890) C:\Windows\system32\DRIVERS\ssudobex.sys
15:01:31.0237 0736 ssudobex - ok
15:01:31.0339 0736 Steam Client Service - ok
15:01:31.0355 0736 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\drivers\stexstor.sys
15:01:31.0358 0736 stexstor - ok
15:01:31.0437 0736 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
15:01:31.0461 0736 stisvc - ok
15:01:31.0477 0736 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
15:01:31.0478 0736 swenum - ok
15:01:31.0634 0736 SwitchBoard (f577910a133a592234ebaad3f3afa258) C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
15:01:31.0638 0736 SwitchBoard - ok
15:01:31.0665 0736 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
15:01:31.0676 0736 swprv - ok
15:01:31.0755 0736 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
15:01:31.0801 0736 SysMain - ok
15:01:31.0874 0736 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
15:01:31.0879 0736 TabletInputService - ok
15:01:31.0956 0736 tap0901t (b08740047145b9bce15bf75ca0f9718a) C:\Windows\system32\DRIVERS\tap0901t.sys
15:01:31.0959 0736 tap0901t - ok
15:01:31.0990 0736 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
15:01:32.0016 0736 TapiSrv - ok
15:01:32.0040 0736 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
15:01:32.0050 0736 TBS - ok
15:01:32.0166 0736 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
15:01:32.0187 0736 Tcpip - ok
15:01:32.0356 0736 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
15:01:32.0375 0736 TCPIP6 - ok
15:01:32.0412 0736 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
15:01:32.0414 0736 tcpipreg - ok
15:01:32.0423 0736 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
15:01:32.0425 0736 TDPIPE - ok
15:01:32.0455 0736 TDTCP (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
15:01:32.0456 0736 TDTCP - ok
15:01:32.0475 0736 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
15:01:32.0477 0736 tdx - ok
15:01:32.0484 0736 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\DRIVERS\termdd.sys
15:01:32.0485 0736 TermDD - ok
15:01:32.0520 0736 TermService (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
15:01:32.0538 0736 TermService - ok
15:01:32.0543 0736 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
15:01:32.0547 0736 Themes - ok
15:01:32.0566 0736 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
15:01:32.0569 0736 THREADORDER - ok
15:01:32.0583 0736 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
15:01:32.0588 0736 TrkWks - ok
15:01:32.0614 0736 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
15:01:32.0616 0736 TrustedInstaller - ok
15:01:32.0629 0736 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
15:01:32.0630 0736 tssecsrv - ok
15:01:32.0668 0736 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
15:01:32.0670 0736 TsUsbFlt - ok
15:01:32.0679 0736 TsUsbGD (9cc2ccae8a84820eaecb886d477cbcb8) C:\Windows\system32\drivers\TsUsbGD.sys
15:01:32.0681 0736 TsUsbGD - ok
15:01:32.0725 0736 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
15:01:32.0728 0736 tunnel - ok
15:01:32.0829 0736 TunngleService (9911a023bf2948eef5c7394bc8efbc6d) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
15:01:32.0844 0736 TunngleService - ok
15:01:32.0866 0736 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\drivers\uagp35.sys
15:01:32.0868 0736 uagp35 - ok
15:01:33.0008 0736 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
15:01:33.0016 0736 udfs - ok
15:01:33.0047 0736 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
15:01:33.0051 0736 UI0Detect - ok
15:01:33.0070 0736 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
15:01:33.0072 0736 uliagpkx - ok
15:01:33.0097 0736 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\DRIVERS\umbus.sys
15:01:33.0098 0736 umbus - ok
15:01:33.0102 0736 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\drivers\umpass.sys
15:01:33.0103 0736 UmPass - ok
15:01:33.0129 0736 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
15:01:33.0136 0736 upnphost - ok
15:01:33.0173 0736 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
15:01:33.0175 0736 usbccgp - ok
15:01:33.0181 0736 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
15:01:33.0183 0736 usbcir - ok
15:01:33.0203 0736 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
15:01:33.0205 0736 usbehci - ok
15:01:33.0229 0736 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
15:01:33.0233 0736 usbhub - ok
15:01:33.0253 0736 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\DRIVERS\usbohci.sys
15:01:33.0254 0736 usbohci - ok
15:01:33.0288 0736 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
15:01:33.0290 0736 usbprint - ok
15:01:33.0322 0736 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
15:01:33.0325 0736 usbscan - ok
15:01:33.0357 0736 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:01:33.0361 0736 USBSTOR - ok
15:01:33.0390 0736 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
15:01:33.0391 0736 usbuhci - ok
15:01:33.0403 0736 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
15:01:33.0407 0736 UxSms - ok
15:01:33.0436 0736 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
15:01:33.0438 0736 VaultSvc - ok
15:01:33.0450 0736 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
15:01:33.0451 0736 vdrvroot - ok
15:01:33.0484 0736 vds (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
15:01:33.0506 0736 vds - ok
15:01:33.0553 0736 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
15:01:33.0554 0736 vga - ok
15:01:33.0566 0736 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
15:01:33.0567 0736 VgaSave - ok
15:01:33.0577 0736 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
15:01:33.0580 0736 vhdmp - ok
15:01:33.0588 0736 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
15:01:33.0590 0736 viaide - ok
15:01:33.0610 0736 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
15:01:33.0612 0736 volmgr - ok
15:01:33.0642 0736 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
15:01:33.0646 0736 volmgrx - ok
15:01:33.0673 0736 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
15:01:33.0677 0736 volsnap - ok
15:01:33.0718 0736 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\drivers\vsmraid.sys
15:01:33.0721 0736 vsmraid - ok
15:01:33.0792 0736 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
15:01:33.0831 0736 VSS - ok
15:01:33.0918 0736 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
15:01:33.0921 0736 vwifibus - ok
15:01:33.0955 0736 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
15:01:33.0979 0736 W32Time - ok
15:01:33.0992 0736 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\drivers\wacompen.sys
15:01:33.0993 0736 WacomPen - ok
15:01:34.0056 0736 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
15:01:34.0060 0736 WANARP - ok
15:01:34.0099 0736 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
15:01:34.0102 0736 Wanarpv6 - ok
15:01:34.0233 0736 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
15:01:34.0251 0736 WatAdminSvc - ok
15:01:34.0312 0736 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
15:01:34.0329 0736 wbengine - ok
15:01:34.0366 0736 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
15:01:34.0371 0736 WbioSrvc - ok
15:01:34.0390 0736 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
15:01:34.0395 0736 wcncsvc - ok
15:01:34.0405 0736 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
15:01:34.0408 0736 WcsPlugInService - ok
15:01:34.0427 0736 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\drivers\wd.sys
15:01:34.0428 0736 Wd - ok
15:01:34.0460 0736 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
15:01:34.0466 0736 Wdf01000 - ok
15:01:34.0482 0736 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
15:01:34.0485 0736 WdiServiceHost - ok
15:01:34.0488 0736 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
15:01:34.0490 0736 WdiSystemHost - ok
15:01:34.0514 0736 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
15:01:34.0519 0736 WebClient - ok
15:01:34.0540 0736 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
15:01:34.0545 0736 Wecsvc - ok
15:01:34.0556 0736 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
15:01:34.0560 0736 wercplsupport - ok
15:01:34.0619 0736 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
15:01:34.0624 0736 WerSvc - ok
15:01:34.0639 0736 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
15:01:34.0640 0736 WfpLwf - ok
15:01:34.0644 0736 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
15:01:34.0645 0736 WIMMount - ok
15:01:34.0672 0736 WinDefend - ok
15:01:34.0678 0736 WinHttpAutoProxySvc - ok
15:01:34.0725 0736 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
15:01:34.0728 0736 Winmgmt - ok
15:01:34.0806 0736 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
15:01:34.0839 0736 WinRM - ok
15:01:34.0935 0736 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
15:01:34.0936 0736 WinUsb - ok
15:01:34.0999 0736 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
15:01:35.0025 0736 Wlansvc - ok
15:01:35.0250 0736 wlidsvc (7e47c328fc4768cb8beafbcfafa70362) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
15:01:35.0296 0736 wlidsvc - ok
15:01:35.0345 0736 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
15:01:35.0346 0736 WmiAcpi - ok
15:01:35.0372 0736 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
15:01:35.0375 0736 wmiApSrv - ok
15:01:35.0391 0736 WMPNetworkSvc - ok
15:01:35.0409 0736 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
15:01:35.0413 0736 WPCSvc - ok
15:01:35.0424 0736 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
15:01:35.0430 0736 WPDBusEnum - ok
15:01:35.0443 0736 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
15:01:35.0444 0736 ws2ifsl - ok
15:01:35.0458 0736 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
15:01:35.0463 0736 wscsvc - ok
15:01:35.0466 0736 WSearch - ok
15:01:35.0563 0736 wuauserv (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
15:01:35.0613 0736 wuauserv - ok
15:01:35.0650 0736 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
15:01:35.0652 0736 WudfPf - ok
15:01:35.0667 0736 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
15:01:35.0669 0736 WUDFRd - ok
15:01:35.0681 0736 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
15:01:35.0686 0736 wudfsvc - ok
15:01:35.0712 0736 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
15:01:35.0719 0736 WwanSvc - ok
15:01:35.0785 0736 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
15:01:35.0853 0736 \Device\Harddisk0\DR0 - ok
15:01:35.0853 0736 Boot (0x1200) (2dd59566d6c5535ee0b6f9c247699754) \Device\Harddisk0\DR0\Partition0
15:01:35.0864 0736 \Device\Harddisk0\DR0\Partition0 - ok
15:01:35.0881 0736 Boot (0x1200) (70e677235867a7658818616956043aa0) \Device\Harddisk0\DR0\Partition1
15:01:35.0882 0736 \Device\Harddisk0\DR0\Partition1 - ok
15:01:35.0883 0736 ============================================================
15:01:35.0883 0736 Scan finished
15:01:35.0883 0736 ============================================================
15:01:35.0891 1344 Detected object count: 0
15:01:35.0891 1344 Actual detected object count: 0
15:01:09.0994 2440 TDSS rootkit removing tool 2.7.32.0 Apr 23 2012 19:12:34
15:01:10.0215 2440 ============================================================
15:01:10.0215 2440 Current date / time: 2012/04/24 15:01:10.0215
15:01:10.0215 2440 SystemInfo:
15:01:10.0215 2440
15:01:10.0215 2440 OS Version: 6.1.7601 ServicePack: 1.0
15:01:10.0215 2440 Product type: Workstation
15:01:10.0215 2440 ComputerName: OEM-PC
15:01:10.0215 2440 UserName: OEM
15:01:10.0215 2440 Windows directory: C:\Windows
15:01:10.0215 2440 System windows directory: C:\Windows
15:01:10.0215 2440 Running under WOW64
15:01:10.0215 2440 Processor architecture: Intel x64
15:01:10.0215 2440 Number of processors: 4
15:01:10.0215 2440 Page size: 0x1000
15:01:10.0215 2440 Boot type: Normal boot
15:01:10.0215 2440 ============================================================
15:01:11.0497 2440 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1F8B1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000040
15:01:11.0611 2440 ============================================================
15:01:11.0611 2440 \Device\Harddisk0\DR0:
15:01:11.0619 2440 MBR partitions:
15:01:11.0619 2440 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
15:01:11.0619 2440 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x746D3800
15:01:11.0619 2440 ============================================================
15:01:11.0718 2440 C: <-> \Device\Harddisk0\DR0\Partition1
15:01:11.0718 2440 ============================================================
15:01:11.0718 2440 Initialize success
15:01:11.0718 2440 ============================================================
15:01:15.0671 0736 ============================================================
15:01:15.0671 0736 Scan started
15:01:15.0671 0736 Mode: Manual;
15:01:15.0671 0736 ============================================================
15:01:16.0827 0736 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\DRIVERS\1394ohci.sys
15:01:16.0833 0736 1394ohci - ok
15:01:16.0862 0736 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
15:01:16.0869 0736 ACPI - ok
15:01:16.0886 0736 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
15:01:16.0888 0736 AcpiPmi - ok
15:01:17.0246 0736 AdobeARMservice (11a52cf7b265631deeb24c6149309eff) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
15:01:17.0249 0736 AdobeARMservice - ok
15:01:17.0414 0736 AdobeFlashPlayerUpdateSvc (459ac130c6ab892b1cd5d7544626efc5) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
15:01:17.0421 0736 AdobeFlashPlayerUpdateSvc - ok
15:01:17.0457 0736 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\drivers\adp94xx.sys
15:01:17.0463 0736 adp94xx - ok
15:01:17.0483 0736 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\drivers\adpahci.sys
15:01:17.0487 0736 adpahci - ok
15:01:17.0502 0736 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\drivers\adpu320.sys
15:01:17.0504 0736 adpu320 - ok
15:01:17.0529 0736 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
15:01:17.0531 0736 AeLookupSvc - ok
15:01:17.0613 0736 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
15:01:17.0633 0736 AFD - ok
15:01:17.0675 0736 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
15:01:17.0678 0736 agp440 - ok
15:01:17.0698 0736 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
15:01:17.0700 0736 ALG - ok
15:01:17.0720 0736 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
15:01:17.0721 0736 aliide - ok
15:01:17.0801 0736 AMD External Events Utility (1ea72552bc6ab3a5d02e16a3004b3b97) C:\Windows\system32\atiesrxx.exe
15:01:17.0806 0736 AMD External Events Utility - ok
15:01:17.0868 0736 AMD FUEL Service - ok
15:01:17.0950 0736 AMD Reservation Manager (dd27f6c3de9bfe50635c721e09edc5dd) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
15:01:17.0956 0736 AMD Reservation Manager - ok
15:01:17.0970 0736 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
15:01:17.0971 0736 amdide - ok
15:01:17.0980 0736 amdiox64 (6a2eeb0c4133b20773bb3dd0b7b377b4) C:\Windows\system32\DRIVERS\amdiox64.sys
15:01:17.0981 0736 amdiox64 - ok
15:01:17.0986 0736 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\drivers\amdk8.sys
15:01:17.0987 0736 AmdK8 - ok
15:01:18.0280 0736 amdkmdag (bfa9657adf7ddc29242a6e0e88de36fa) C:\Windows\system32\DRIVERS\atikmdag.sys
15:01:18.0460 0736 amdkmdag - ok
15:01:18.0575 0736 amdkmdap (8c493027d9b2399283e724e9862ebb42) C:\Windows\system32\DRIVERS\atikmpag.sys
15:01:18.0581 0736 amdkmdap - ok
15:01:18.0614 0736 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
15:01:18.0616 0736 AmdPPM - ok
15:01:18.0645 0736 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
15:01:18.0648 0736 amdsata - ok
15:01:18.0677 0736 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\drivers\amdsbs.sys
15:01:18.0682 0736 amdsbs - ok
15:01:18.0700 0736 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
15:01:18.0701 0736 amdxata - ok
15:01:18.0707 0736 AODDriver4.0 - ok
15:01:18.0727 0736 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
15:01:18.0728 0736 AppID - ok
15:01:18.0734 0736 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
15:01:18.0735 0736 AppIDSvc - ok
15:01:18.0783 0736 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
15:01:18.0785 0736 Appinfo - ok
15:01:18.0791 0736 AppleCharger (301aa64f9643bc453d90a66c4c0e7204) C:\Windows\system32\DRIVERS\AppleCharger.sys
15:01:18.0792 0736 AppleCharger - ok
15:01:18.0800 0736 AppleChargerSrv (95ef7247c50c7241fdae39a9b3aff4ae) C:\Windows\system32\AppleChargerSrv.exe
15:01:18.0803 0736 AppleChargerSrv - ok
15:01:18.0823 0736 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\drivers\arc.sys
15:01:18.0825 0736 arc - ok
15:01:18.0839 0736 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\drivers\arcsas.sys
15:01:18.0840 0736 arcsas - ok
15:01:18.0917 0736 aswFsBlk (c7c69ed14a7ddecaf58e3dfd1fca6d37) C:\Windows\system32\drivers\aswFsBlk.sys
15:01:18.0919 0736 aswFsBlk - ok
15:01:18.0988 0736 aswMonFlt (ad5276449159ba8d5206c6094c764249) C:\Windows\system32\drivers\aswMonFlt.sys
15:01:18.0991 0736 aswMonFlt - ok
15:01:19.0050 0736 aswRdr (1e5ca4c89227df49c5fc779e7848ae8b) C:\Windows\System32\Drivers\aswrdr2.sys
15:01:19.0052 0736 aswRdr - ok
15:01:19.0156 0736 aswSnx (45ad1ed2a0ccd582e32b10535f5c42e9) C:\Windows\system32\drivers\aswSnx.sys
15:01:19.0169 0736 aswSnx - ok
15:01:19.0242 0736 aswSP (06fd751c1b15734e57df09614602be66) C:\Windows\system32\drivers\aswSP.sys
15:01:19.0244 0736 aswSP - ok
15:01:19.0290 0736 aswTdi (bf670f65762ff8da7615d7b80914c0f8) C:\Windows\system32\drivers\aswTdi.sys
15:01:19.0292 0736 aswTdi - ok
15:01:19.0311 0736 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
15:01:19.0313 0736 AsyncMac - ok
15:01:19.0327 0736 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
15:01:19.0328 0736 atapi - ok
15:01:19.0367 0736 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
15:01:19.0385 0736 AudioEndpointBuilder - ok
15:01:19.0391 0736 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
15:01:19.0396 0736 AudioSrv - ok
15:01:19.0420 0736 avast! Antivirus (a45aa986d9490a4e5b87563d9cd7b175) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
15:01:19.0420 0736 avast! Antivirus - ok
15:01:19.0490 0736 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
15:01:19.0494 0736 AxInstSV - ok
15:01:19.0535 0736 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\drivers\bxvbda.sys
15:01:19.0541 0736 b06bdrv - ok
15:01:19.0565 0736 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
15:01:19.0568 0736 b57nd60a - ok
15:01:19.0576 0736 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
15:01:19.0578 0736 BDESVC - ok
15:01:19.0581 0736 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
15:01:19.0582 0736 Beep - ok
15:01:19.0659 0736 BFE (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
15:01:19.0732 0736 BFE - ok
15:01:19.0789 0736 BITS (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll
15:01:19.0806 0736 BITS - ok
15:01:19.0839 0736 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
15:01:19.0840 0736 blbdrive - ok
15:01:19.0855 0736 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
15:01:19.0857 0736 bowser - ok
15:01:19.0860 0736 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\BrFiltLo.sys
15:01:19.0861 0736 BrFiltLo - ok
15:01:19.0864 0736 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\BrFiltUp.sys
15:01:19.0865 0736 BrFiltUp - ok
15:01:19.0878 0736 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
15:01:19.0880 0736 Browser - ok
15:01:19.0892 0736 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
15:01:19.0895 0736 Brserid - ok
15:01:19.0899 0736 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
15:01:19.0900 0736 BrSerWdm - ok
15:01:19.0903 0736 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
15:01:19.0904 0736 BrUsbMdm - ok
15:01:19.0907 0736 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
15:01:19.0908 0736 BrUsbSer - ok
15:01:19.0913 0736 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\drivers\bthmodem.sys
15:01:19.0915 0736 BTHMODEM - ok
15:01:19.0932 0736 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
15:01:19.0934 0736 bthserv - ok
15:01:19.0944 0736 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
15:01:19.0946 0736 cdfs - ok
15:01:19.0962 0736 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
15:01:19.0964 0736 cdrom - ok
15:01:19.0968 0736 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
15:01:19.0970 0736 CertPropSvc - ok
15:01:19.0973 0736 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\drivers\circlass.sys
15:01:19.0974 0736 circlass - ok
15:01:20.0001 0736 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
15:01:20.0005 0736 CLFS - ok
15:01:20.0063 0736 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:01:20.0067 0736 clr_optimization_v2.0.50727_32 - ok
15:01:20.0121 0736 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
15:01:20.0126 0736 clr_optimization_v2.0.50727_64 - ok
15:01:20.0371 0736 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:01:20.0376 0736 clr_optimization_v4.0.30319_32 - ok
15:01:20.0412 0736 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
15:01:20.0417 0736 clr_optimization_v4.0.30319_64 - ok
15:01:20.0424 0736 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\drivers\CmBatt.sys
15:01:20.0424 0736 CmBatt - ok
15:01:20.0434 0736 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
15:01:20.0434 0736 cmdide - ok
15:01:20.0485 0736 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
15:01:20.0490 0736 CNG - ok
15:01:20.0509 0736 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\drivers\compbatt.sys
15:01:20.0510 0736 Compbatt - ok
15:01:20.0539 0736 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\DRIVERS\CompositeBus.sys
15:01:20.0540 0736 CompositeBus - ok
15:01:20.0543 0736 COMSysApp - ok
15:01:20.0560 0736 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\drivers\crcdisk.sys
15:01:20.0561 0736 crcdisk - ok
15:01:20.0585 0736 CryptSvc (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
15:01:20.0588 0736 CryptSvc - ok
15:01:20.0622 0736 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
15:01:20.0630 0736 DcomLaunch - ok
15:01:20.0652 0736 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
15:01:20.0657 0736 defragsvc - ok
15:01:20.0669 0736 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
15:01:20.0671 0736 DfsC - ok
15:01:20.0739 0736 dg_ssudbus (388039f99ce8769024ee0438352aca99) C:\Windows\system32\DRIVERS\ssudbus.sys
15:01:20.0740 0736 dg_ssudbus - ok
15:01:20.0762 0736 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
15:01:20.0767 0736 Dhcp - ok
15:01:20.0780 0736 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
15:01:20.0781 0736 discache - ok
15:01:20.0794 0736 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\drivers\disk.sys
15:01:20.0795 0736 Disk - ok
15:01:20.0811 0736 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
15:01:20.0815 0736 Dnscache - ok
15:01:20.0831 0736 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
15:01:20.0835 0736 dot3svc - ok
15:01:20.0852 0736 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
15:01:20.0855 0736 DPS - ok
15:01:20.0920 0736 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
15:01:20.0922 0736 drmkaud - ok
15:01:20.0986 0736 dtsoftbus01 (400582b09e0bb557d0ec28a945150eeb) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
15:01:20.0992 0736 dtsoftbus01 - ok
15:01:21.0040 0736 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
15:01:21.0046 0736 DXGKrnl - ok
15:01:21.0067 0736 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
15:01:21.0070 0736 EapHost - ok
15:01:21.0193 0736 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\drivers\evbda.sys
15:01:21.0277 0736 ebdrv - ok
15:01:21.0352 0736 EFS (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
15:01:21.0354 0736 EFS - ok
15:01:21.0413 0736 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
15:01:21.0441 0736 ehRecvr - ok
15:01:21.0453 0736 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
15:01:21.0463 0736 ehSched - ok
15:01:21.0511 0736 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\drivers\elxstor.sys
15:01:21.0517 0736 elxstor - ok
15:01:21.0526 0736 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
15:01:21.0527 0736 ErrDev - ok
15:01:21.0553 0736 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
15:01:21.0559 0736 EventSystem - ok
15:01:21.0583 0736 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
15:01:21.0586 0736 exfat - ok
15:01:21.0618 0736 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
15:01:21.0621 0736 fastfat - ok
15:01:21.0652 0736 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
15:01:21.0670 0736 Fax - ok
15:01:21.0708 0736 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\drivers\fdc.sys
15:01:21.0709 0736 fdc - ok
15:01:21.0712 0736 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
15:01:21.0714 0736 fdPHost - ok
15:01:21.0723 0736 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
15:01:21.0725 0736 FDResPub - ok
15:01:21.0739 0736 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
15:01:21.0740 0736 FileInfo - ok
15:01:21.0747 0736 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
15:01:21.0748 0736 Filetrace - ok
15:01:21.0751 0736 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\drivers\flpydisk.sys
15:01:21.0752 0736 flpydisk - ok
15:01:21.0772 0736 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
15:01:21.0775 0736 FltMgr - ok
15:01:21.0837 0736 FontCache (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
15:01:21.0858 0736 FontCache - ok
15:01:21.0903 0736 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:01:21.0906 0736 FontCache3.0.0.0 - ok
15:01:21.0917 0736 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
15:01:21.0920 0736 FsDepends - ok
15:01:21.0947 0736 Fs_Rec (6bd9295cc032dd3077c671fccf579a7b) C:\Windows\system32\drivers\Fs_Rec.sys
15:01:21.0948 0736 Fs_Rec - ok
15:01:22.0010 0736 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
15:01:22.0016 0736 fvevol - ok
15:01:22.0040 0736 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\drivers\gagp30kx.sys
15:01:22.0043 0736 gagp30kx - ok
15:01:22.0086 0736 gdrv (7907e14f9bcf3a4689c9a74a1a873cb6) C:\Windows\gdrv.sys
15:01:22.0087 0736 gdrv - ok
15:01:22.0131 0736 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
15:01:22.0147 0736 gpsvc - ok
15:01:22.0289 0736 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:01:22.0293 0736 gupdate - ok
15:01:22.0330 0736 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:01:22.0333 0736 gupdatem - ok
15:01:22.0379 0736 hamachi (1e6438d4ea6e1174a3b3b1edc4de660b) C:\Windows\system32\DRIVERS\hamachi.sys
15:01:22.0381 0736 hamachi - ok
15:01:22.0556 0736 Hamachi2Svc (d483dbaef409e8ab7477c28615fcd853) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
15:01:22.0622 0736 Hamachi2Svc - ok
15:01:22.0664 0736 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
15:01:22.0666 0736 hcw85cir - ok
15:01:22.0707 0736 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
15:01:22.0711 0736 HdAudAddService - ok
15:01:22.0726 0736 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\DRIVERS\HDAudBus.sys
15:01:22.0728 0736 HDAudBus - ok
15:01:22.0731 0736 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\drivers\HidBatt.sys
15:01:22.0732 0736 HidBatt - ok
15:01:22.0738 0736 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\drivers\hidbth.sys
15:01:22.0739 0736 HidBth - ok
15:01:22.0756 0736 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\drivers\hidir.sys
15:01:22.0757 0736 HidIr - ok
15:01:22.0851 0736 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
15:01:22.0857 0736 hidserv - ok
15:01:22.0906 0736 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
15:01:22.0907 0736 HidUsb - ok
15:01:22.0922 0736 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
15:01:22.0925 0736 hkmsvc - ok
15:01:22.0946 0736 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
15:01:22.0951 0736 HomeGroupListener - ok
15:01:22.0976 0736 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
15:01:22.0981 0736 HomeGroupProvider - ok
15:01:23.0003 0736 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
15:01:23.0004 0736 HpSAMD - ok
15:01:23.0062 0736 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
15:01:23.0091 0736 HTTP - ok
15:01:23.0106 0736 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
15:01:23.0107 0736 hwpolicy - ok
15:01:23.0120 0736 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
15:01:23.0122 0736 i8042prt - ok
15:01:23.0163 0736 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
15:01:23.0173 0736 iaStorV - ok
15:01:23.0265 0736 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
15:01:23.0283 0736 idsvc - ok
15:01:23.0301 0736 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\drivers\iirsp.sys
15:01:23.0302 0736 iirsp - ok
15:01:23.0370 0736 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
15:01:23.0387 0736 IKEEXT - ok
15:01:23.0577 0736 IntcAzAudAddService (0adf714079ae174a39d69036143e4c50) C:\Windows\system32\drivers\RTKVHD64.sys
15:01:23.0593 0736 IntcAzAudAddService - ok
15:01:23.0625 0736 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
15:01:23.0626 0736 intelide - ok
15:01:23.0648 0736 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\drivers\intelppm.sys
15:01:23.0649 0736 intelppm - ok
15:01:23.0667 0736 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
15:01:23.0669 0736 IPBusEnum - ok
15:01:23.0673 0736 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:01:23.0675 0736 IpFilterDriver - ok
15:01:23.0708 0736 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
15:01:23.0714 0736 iphlpsvc - ok
15:01:23.0718 0736 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
15:01:23.0720 0736 IPMIDRV - ok
15:01:23.0755 0736 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
15:01:23.0757 0736 IPNAT - ok
15:01:23.0803 0736 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
15:01:23.0807 0736 IRENUM - ok
15:01:23.0860 0736 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
15:01:23.0862 0736 isapnp - ok
15:01:23.0891 0736 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
15:01:23.0899 0736 iScsiPrt - ok
15:01:24.0002 0736 JMB36X (f3a41ec4c6506e76e07a219b3a1df8d2) C:\Windows\SysWOW64\XSrvSetup.exe
15:01:24.0012 0736 JMB36X - ok
15:01:24.0084 0736 JRAID (1c368c1a2733dcc5b8e15420aa2b0f6d) C:\Windows\system32\DRIVERS\jraid.sys
15:01:24.0088 0736 JRAID - ok
15:01:24.0110 0736 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
15:01:24.0113 0736 kbdclass - ok
15:01:24.0134 0736 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys
15:01:24.0135 0736 kbdhid - ok
15:01:24.0160 0736 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
15:01:24.0166 0736 KeyIso - ok
15:01:24.0184 0736 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
15:01:24.0185 0736 KSecDD - ok
15:01:24.0197 0736 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
15:01:24.0199 0736 KSecPkg - ok
15:01:24.0210 0736 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
15:01:24.0211 0736 ksthunk - ok
15:01:24.0252 0736 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
15:01:24.0258 0736 KtmRm - ok
15:01:24.0288 0736 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll
15:01:24.0294 0736 LanmanServer - ok
15:01:24.0314 0736 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
15:01:24.0319 0736 LanmanWorkstation - ok
15:01:24.0389 0736 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
15:01:24.0392 0736 lltdio - ok
15:01:24.0427 0736 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
15:01:24.0442 0736 lltdsvc - ok
15:01:24.0450 0736 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
15:01:24.0452 0736 lmhosts - ok
15:01:24.0483 0736 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\drivers\lsi_fc.sys
15:01:24.0485 0736 LSI_FC - ok
15:01:24.0497 0736 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\drivers\lsi_sas.sys
15:01:24.0499 0736 LSI_SAS - ok
15:01:24.0518 0736 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\drivers\lsi_sas2.sys
15:01:24.0519 0736 LSI_SAS2 - ok
15:01:24.0534 0736 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\drivers\lsi_scsi.sys
15:01:24.0534 0736 LSI_SCSI - ok
15:01:24.0564 0736 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
15:01:24.0566 0736 luafv - ok
15:01:24.0632 0736 MBAMProtector (dbc08862a71459e74f7538b432c114cc) C:\Windows\system32\drivers\mbam.sys
15:01:24.0635 0736 MBAMProtector - ok
15:01:24.0749 0736 MBAMService (ba400ed640bca1eae5c727ae17c10207) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
15:01:24.0754 0736 MBAMService - ok
15:01:24.0832 0736 mcdbus (79d51e7f5926e8ce1b3ebecebae28cff) C:\Windows\system32\DRIVERS\mcdbus.sys
15:01:24.0834 0736 mcdbus - ok
15:01:24.0867 0736 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
15:01:24.0870 0736 Mcx2Svc - ok
15:01:24.0881 0736 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\drivers\megasas.sys
15:01:24.0883 0736 megasas - ok
15:01:24.0906 0736 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\drivers\MegaSR.sys
15:01:24.0909 0736 MegaSR - ok
15:01:24.0980 0736 Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
15:01:24.0985 0736 Microsoft Office Groove Audit Service - ok
15:01:25.0013 0736 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
15:01:25.0020 0736 MMCSS - ok
15:01:25.0024 0736 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
15:01:25.0025 0736 Modem - ok
15:01:25.0043 0736 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
15:01:25.0044 0736 monitor - ok
15:01:25.0078 0736 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
15:01:25.0079 0736 mouclass - ok
15:01:25.0136 0736 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
15:01:25.0139 0736 mouhid - ok
15:01:25.0158 0736 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
15:01:25.0161 0736 mountmgr - ok
15:01:25.0186 0736 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
15:01:25.0188 0736 mpio - ok
15:01:25.0211 0736 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
15:01:25.0213 0736 mpsdrv - ok
15:01:25.0253 0736 MpsSvc (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
15:01:25.0268 0736 MpsSvc - ok
15:01:25.0276 0736 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
15:01:25.0278 0736 MRxDAV - ok
15:01:25.0311 0736 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
15:01:25.0313 0736 mrxsmb - ok
15:01:25.0349 0736 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:01:25.0355 0736 mrxsmb10 - ok
15:01:25.0380 0736 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:01:25.0384 0736 mrxsmb20 - ok
15:01:25.0404 0736 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
15:01:25.0406 0736 msahci - ok
15:01:25.0437 0736 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
15:01:25.0441 0736 msdsm - ok
15:01:25.0454 0736 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
15:01:25.0459 0736 MSDTC - ok
15:01:25.0489 0736 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
15:01:25.0491 0736 Msfs - ok
15:01:25.0498 0736 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
15:01:25.0499 0736 mshidkmdf - ok
15:01:25.0505 0736 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
15:01:25.0505 0736 msisadrv - ok
15:01:25.0536 0736 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
15:01:25.0540 0736 MSiSCSI - ok
15:01:25.0541 0736 msiserver - ok
15:01:25.0590 0736 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
15:01:25.0592 0736 MSKSSRV - ok
15:01:25.0611 0736 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
15:01:25.0613 0736 MSPCLOCK - ok
15:01:25.0632 0736 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
15:01:25.0633 0736 MSPQM - ok
15:01:25.0664 0736 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
15:01:25.0669 0736 MsRPC - ok
15:01:25.0684 0736 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
15:01:25.0685 0736 mssmbios - ok
15:01:25.0695 0736 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
15:01:25.0696 0736 MSTEE - ok
15:01:25.0699 0736 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\drivers\MTConfig.sys
15:01:25.0700 0736 MTConfig - ok
15:01:25.0750 0736 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
15:01:25.0752 0736 Mup - ok
15:01:25.0776 0736 napagent (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
15:01:25.0784 0736 napagent - ok
15:01:25.0826 0736 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
15:01:25.0830 0736 NativeWifiP - ok
15:01:25.0934 0736 NAUpdate (9d1cce440552500ded3a62f9d779cdb4) C:\Program Files (x86)\Nero\Update\NASvc.exe
15:01:25.0943 0736 NAUpdate - ok
15:01:26.0024 0736 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
15:01:26.0073 0736 NDIS - ok
15:01:26.0141 0736 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
15:01:26.0142 0736 NdisCap - ok
15:01:26.0193 0736 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
15:01:26.0194 0736 NdisTapi - ok
15:01:26.0228 0736 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
15:01:26.0229 0736 Ndisuio - ok
15:01:26.0257 0736 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
15:01:26.0259 0736 NdisWan - ok
15:01:26.0271 0736 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
15:01:26.0272 0736 NDProxy - ok
15:01:26.0308 0736 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
15:01:26.0309 0736 NetBIOS - ok
15:01:26.0331 0736 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
15:01:26.0333 0736 NetBT - ok
15:01:26.0356 0736 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
15:01:26.0357 0736 Netlogon - ok
15:01:26.0435 0736 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
15:01:26.0451 0736 Netman - ok
15:01:26.0484 0736 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
15:01:26.0492 0736 netprofm - ok
15:01:26.0528 0736 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
15:01:26.0531 0736 NetTcpPortSharing - ok
15:01:26.0579 0736 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\drivers\nfrd960.sys
15:01:26.0579 0736 nfrd960 - ok
15:01:26.0740 0736 NitroReaderDriverReadSpool2 (d333a5fb3beafd554fb8ff5fd5bf762e) C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
15:01:26.0748 0736 NitroReaderDriverReadSpool2 - ok
15:01:26.0825 0736 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
15:01:26.0839 0736 NlaSvc - ok
15:01:26.0854 0736 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
15:01:26.0856 0736 Npfs - ok
15:01:26.0867 0736 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
15:01:26.0870 0736 nsi - ok
15:01:26.0873 0736 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
15:01:26.0874 0736 nsiproxy - ok
15:01:26.0954 0736 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
15:01:26.0977 0736 Ntfs - ok
15:01:27.0061 0736 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
15:01:27.0063 0736 Null - ok
15:01:27.0088 0736 nusb3hub (785298579b5f9b4032152dfbb992fdb6) C:\Windows\system32\DRIVERS\nusb3hub.sys
15:01:27.0091 0736 nusb3hub - ok
15:01:27.0119 0736 nusb3xhc (df2750481b4964814467c974f2b0eef1) C:\Windows\system32\DRIVERS\nusb3xhc.sys
15:01:27.0122 0736 nusb3xhc - ok
15:01:27.0197 0736 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
15:01:27.0202 0736 nvraid - ok
15:01:27.0237 0736 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
15:01:27.0242 0736 nvstor - ok
15:01:27.0283 0736 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
15:01:27.0287 0736 nv_agp - ok
15:01:27.0360 0736 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
15:01:27.0382 0736 odserv - ok
15:01:27.0406 0736 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
15:01:27.0409 0736 ohci1394 - ok
15:01:27.0549 0736 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
15:01:27.0554 0736 ose - ok
15:01:27.0592 0736 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
15:01:27.0602 0736 p2pimsvc - ok
15:01:27.0636 0736 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
15:01:27.0643 0736 p2psvc - ok
15:01:27.0649 0736 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\drivers\parport.sys
15:01:27.0651 0736 Parport - ok
15:01:27.0679 0736 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
15:01:27.0680 0736 partmgr - ok
15:01:27.0702 0736 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
15:01:27.0707 0736 PcaSvc - ok
15:01:27.0718 0736 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
15:01:27.0720 0736 pci - ok
15:01:27.0737 0736 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
15:01:27.0738 0736 pciide - ok
15:01:27.0747 0736 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\drivers\pcmcia.sys
15:01:27.0750 0736 pcmcia - ok
15:01:27.0759 0736 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
15:01:27.0760 0736 pcw - ok
15:01:27.0797 0736 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
15:01:27.0817 0736 PEAUTH - ok
15:01:27.0892 0736 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
15:01:27.0899 0736 PerfHost - ok
15:01:28.0002 0736 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
15:01:28.0031 0736 pla - ok
15:01:28.0088 0736 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
15:01:28.0126 0736 PlugPlay - ok
15:01:28.0172 0736 PnkBstrA - ok
15:01:28.0177 0736 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
15:01:28.0181 0736 PNRPAutoReg - ok
15:01:28.0194 0736 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
15:01:28.0199 0736 PNRPsvc - ok
15:01:28.0241 0736 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
15:01:28.0246 0736 PolicyAgent - ok
15:01:28.0264 0736 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
15:01:28.0268 0736 Power - ok
15:01:28.0316 0736 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
15:01:28.0318 0736 PptpMiniport - ok
15:01:28.0324 0736 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\drivers\processr.sys
15:01:28.0327 0736 Processor - ok
15:01:28.0351 0736 ProfSvc (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
15:01:28.0356 0736 ProfSvc - ok
15:01:28.0384 0736 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
15:01:28.0386 0736 ProtectedStorage - ok
15:01:28.0442 0736 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
15:01:28.0446 0736 Psched - ok
15:01:28.0519 0736 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\drivers\ql2300.sys
15:01:28.0550 0736 ql2300 - ok
15:01:28.0609 0736 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\drivers\ql40xx.sys
15:01:28.0611 0736 ql40xx - ok
15:01:28.0629 0736 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
15:01:28.0649 0736 QWAVE - ok
15:01:28.0672 0736 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
15:01:28.0673 0736 QWAVEdrv - ok
15:01:28.0677 0736 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
15:01:28.0678 0736 RasAcd - ok
15:01:28.0721 0736 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
15:01:28.0724 0736 RasAgileVpn - ok
15:01:28.0739 0736 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
15:01:28.0743 0736 RasAuto - ok
15:01:28.0759 0736 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
15:01:28.0761 0736 Rasl2tp - ok
15:01:28.0781 0736 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
15:01:28.0788 0736 RasMan - ok
15:01:28.0802 0736 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
15:01:28.0804 0736 RasPppoe - ok
15:01:28.0879 0736 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
15:01:28.0880 0736 RasSstp - ok
15:01:28.0908 0736 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
15:01:28.0912 0736 rdbss - ok
15:01:28.0915 0736 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\drivers\rdpbus.sys
15:01:28.0916 0736 rdpbus - ok
15:01:28.0924 0736 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
15:01:28.0925 0736 RDPCDD - ok
15:01:28.0944 0736 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
15:01:28.0945 0736 RDPENCDD - ok
15:01:28.0982 0736 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
15:01:28.0984 0736 RDPREFMP - ok
15:01:29.0030 0736 RDPWD (6d76e6433574b058adcb0c50df834492) C:\Windows\system32\drivers\RDPWD.sys
15:01:29.0036 0736 RDPWD - ok
15:01:29.0105 0736 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
15:01:29.0111 0736 rdyboost - ok
15:01:29.0144 0736 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
15:01:29.0147 0736 RemoteAccess - ok
15:01:29.0171 0736 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
15:01:29.0176 0736 RemoteRegistry - ok
15:01:29.0195 0736 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
15:01:29.0199 0736 RpcEptMapper - ok
15:01:29.0220 0736 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
15:01:29.0222 0736 RpcLocator - ok
15:01:29.0250 0736 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
15:01:29.0256 0736 RpcSs - ok
15:01:29.0266 0736 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
15:01:29.0268 0736 rspndr - ok
15:01:29.0332 0736 RTHDMIAzAudService (d6d381b76056c668679723938f06f16c) C:\Windows\system32\drivers\RtHDMIVX.sys
15:01:29.0334 0736 RTHDMIAzAudService - ok
15:01:29.0398 0736 RTL8167 (4fbda07ef0a3097ce14c5cabf723b278) C:\Windows\system32\DRIVERS\Rt64win7.sys
15:01:29.0402 0736 RTL8167 - ok
15:01:29.0456 0736 s1018bus (301fba4594fb5c0a469299a65106b4aa) C:\Windows\system32\DRIVERS\s1018bus.sys
15:01:29.0458 0736 s1018bus - ok
15:01:29.0517 0736 s1018mdfl (d1d7c744f79710357e60fc04d125ed01) C:\Windows\system32\DRIVERS\s1018mdfl.sys
15:01:29.0520 0736 s1018mdfl - ok
15:01:29.0552 0736 s1018mdm (7dbe12cccd837d4266b2ddd80a329c09) C:\Windows\system32\DRIVERS\s1018mdm.sys
15:01:29.0557 0736 s1018mdm - ok
15:01:29.0634 0736 s1018mgmt (065ff5e62d2d18a6d93fd925546cd549) C:\Windows\system32\DRIVERS\s1018mgmt.sys
15:01:29.0638 0736 s1018mgmt - ok
15:01:29.0685 0736 s1018nd5 (5101d815bdf0d667e3d5f0ea727caaee) C:\Windows\system32\DRIVERS\s1018nd5.sys
15:01:29.0685 0736 s1018nd5 - ok
15:01:29.0762 0736 s1018obex (13f220c65b444ac9bda49dacfc3230bb) C:\Windows\system32\DRIVERS\s1018obex.sys
15:01:29.0766 0736 s1018obex - ok
15:01:29.0790 0736 s1018unic (ce7d8bce80211d8a35f6bd7a87791860) C:\Windows\system32\DRIVERS\s1018unic.sys
15:01:29.0793 0736 s1018unic - ok
15:01:29.0812 0736 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
15:01:29.0814 0736 SamSs - ok
15:01:29.0832 0736 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
15:01:29.0834 0736 sbp2port - ok
15:01:29.0843 0736 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
15:01:29.0848 0736 SCardSvr - ok
15:01:29.0865 0736 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
15:01:29.0866 0736 scfilter - ok
15:01:29.0917 0736 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
15:01:29.0939 0736 Schedule - ok
15:01:29.0956 0736 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
15:01:29.0957 0736 SCPolicySvc - ok
15:01:30.0017 0736 ScreamBAudioSvc (8b56bdce6a303dde63d63440d1cf9ad1) C:\Windows\system32\drivers\ScreamingBAudio64.sys
15:01:30.0019 0736 ScreamBAudioSvc - ok
15:01:30.0041 0736 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
15:01:30.0046 0736 SDRSVC - ok
15:01:30.0079 0736 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
15:01:30.0080 0736 secdrv - ok
15:01:30.0084 0736 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
15:01:30.0088 0736 seclogon - ok
15:01:30.0103 0736 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
15:01:30.0107 0736 SENS - ok
15:01:30.0111 0736 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
15:01:30.0114 0736 SensrSvc - ok
15:01:30.0133 0736 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\drivers\serenum.sys
15:01:30.0134 0736 Serenum - ok
15:01:30.0147 0736 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\drivers\serial.sys
15:01:30.0149 0736 Serial - ok
15:01:30.0178 0736 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\drivers\sermouse.sys
15:01:30.0180 0736 sermouse - ok
15:01:30.0211 0736 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
15:01:30.0216 0736 SessionEnv - ok
15:01:30.0219 0736 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
15:01:30.0221 0736 sffdisk - ok
15:01:30.0224 0736 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
15:01:30.0225 0736 sffp_mmc - ok
15:01:30.0229 0736 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
15:01:30.0230 0736 sffp_sd - ok
15:01:30.0233 0736 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\drivers\sfloppy.sys
15:01:30.0234 0736 sfloppy - ok
15:01:30.0259 0736 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
15:01:30.0263 0736 SharedAccess - ok
15:01:30.0292 0736 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
15:01:30.0297 0736 ShellHWDetection - ok
15:01:30.0333 0736 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\drivers\SiSRaid2.sys
15:01:30.0336 0736 SiSRaid2 - ok
15:01:30.0364 0736 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\drivers\sisraid4.sys
15:01:30.0368 0736 SiSRaid4 - ok
15:01:30.0407 0736 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
15:01:30.0411 0736 Smb - ok
15:01:30.0511 0736 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
15:01:30.0520 0736 SNMPTRAP - ok
15:01:30.0539 0736 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
15:01:30.0541 0736 spldr - ok
15:01:30.0568 0736 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
15:01:30.0590 0736 Spooler - ok
15:01:30.0711 0736 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
15:01:30.0793 0736 sppsvc - ok
15:01:30.0879 0736 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
15:01:30.0889 0736 sppuinotify - ok
15:01:30.0948 0736 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
15:01:30.0969 0736 srv - ok
15:01:30.0993 0736 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
15:01:30.0998 0736 srv2 - ok
15:01:31.0014 0736 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
15:01:31.0017 0736 srvnet - ok
15:01:31.0071 0736 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
15:01:31.0083 0736 SSDPSRV - ok
15:01:31.0100 0736 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
15:01:31.0110 0736 SstpSvc - ok
15:01:31.0155 0736 ssudmdm (ad42ca614e086bcadbd53fffc404ac24) C:\Windows\system32\DRIVERS\ssudmdm.sys
15:01:31.0158 0736 ssudmdm - ok
15:01:31.0234 0736 ssudobex (a23bc4049f6a1820bc82eab492950890) C:\Windows\system32\DRIVERS\ssudobex.sys
15:01:31.0237 0736 ssudobex - ok
15:01:31.0339 0736 Steam Client Service - ok
15:01:31.0355 0736 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\drivers\stexstor.sys
15:01:31.0358 0736 stexstor - ok
15:01:31.0437 0736 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
15:01:31.0461 0736 stisvc - ok
15:01:31.0477 0736 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
15:01:31.0478 0736 swenum - ok
15:01:31.0634 0736 SwitchBoard (f577910a133a592234ebaad3f3afa258) C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
15:01:31.0638 0736 SwitchBoard - ok
15:01:31.0665 0736 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
15:01:31.0676 0736 swprv - ok
15:01:31.0755 0736 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
15:01:31.0801 0736 SysMain - ok
15:01:31.0874 0736 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
15:01:31.0879 0736 TabletInputService - ok
15:01:31.0956 0736 tap0901t (b08740047145b9bce15bf75ca0f9718a) C:\Windows\system32\DRIVERS\tap0901t.sys
15:01:31.0959 0736 tap0901t - ok
15:01:31.0990 0736 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
15:01:32.0016 0736 TapiSrv - ok
15:01:32.0040 0736 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
15:01:32.0050 0736 TBS - ok
15:01:32.0166 0736 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
15:01:32.0187 0736 Tcpip - ok
15:01:32.0356 0736 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
15:01:32.0375 0736 TCPIP6 - ok
15:01:32.0412 0736 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
15:01:32.0414 0736 tcpipreg - ok
15:01:32.0423 0736 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
15:01:32.0425 0736 TDPIPE - ok
15:01:32.0455 0736 TDTCP (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
15:01:32.0456 0736 TDTCP - ok
15:01:32.0475 0736 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
15:01:32.0477 0736 tdx - ok
15:01:32.0484 0736 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\DRIVERS\termdd.sys
15:01:32.0485 0736 TermDD - ok
15:01:32.0520 0736 TermService (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
15:01:32.0538 0736 TermService - ok
15:01:32.0543 0736 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
15:01:32.0547 0736 Themes - ok
15:01:32.0566 0736 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
15:01:32.0569 0736 THREADORDER - ok
15:01:32.0583 0736 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
15:01:32.0588 0736 TrkWks - ok
15:01:32.0614 0736 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
15:01:32.0616 0736 TrustedInstaller - ok
15:01:32.0629 0736 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
15:01:32.0630 0736 tssecsrv - ok
15:01:32.0668 0736 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
15:01:32.0670 0736 TsUsbFlt - ok
15:01:32.0679 0736 TsUsbGD (9cc2ccae8a84820eaecb886d477cbcb8) C:\Windows\system32\drivers\TsUsbGD.sys
15:01:32.0681 0736 TsUsbGD - ok
15:01:32.0725 0736 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
15:01:32.0728 0736 tunnel - ok
15:01:32.0829 0736 TunngleService (9911a023bf2948eef5c7394bc8efbc6d) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
15:01:32.0844 0736 TunngleService - ok
15:01:32.0866 0736 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\drivers\uagp35.sys
15:01:32.0868 0736 uagp35 - ok
15:01:33.0008 0736 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
15:01:33.0016 0736 udfs - ok
15:01:33.0047 0736 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
15:01:33.0051 0736 UI0Detect - ok
15:01:33.0070 0736 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
15:01:33.0072 0736 uliagpkx - ok
15:01:33.0097 0736 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\DRIVERS\umbus.sys
15:01:33.0098 0736 umbus - ok
15:01:33.0102 0736 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\drivers\umpass.sys
15:01:33.0103 0736 UmPass - ok
15:01:33.0129 0736 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
15:01:33.0136 0736 upnphost - ok
15:01:33.0173 0736 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
15:01:33.0175 0736 usbccgp - ok
15:01:33.0181 0736 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
15:01:33.0183 0736 usbcir - ok
15:01:33.0203 0736 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
15:01:33.0205 0736 usbehci - ok
15:01:33.0229 0736 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
15:01:33.0233 0736 usbhub - ok
15:01:33.0253 0736 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\DRIVERS\usbohci.sys
15:01:33.0254 0736 usbohci - ok
15:01:33.0288 0736 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
15:01:33.0290 0736 usbprint - ok
15:01:33.0322 0736 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
15:01:33.0325 0736 usbscan - ok
15:01:33.0357 0736 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:01:33.0361 0736 USBSTOR - ok
15:01:33.0390 0736 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
15:01:33.0391 0736 usbuhci - ok
15:01:33.0403 0736 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
15:01:33.0407 0736 UxSms - ok
15:01:33.0436 0736 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
15:01:33.0438 0736 VaultSvc - ok
15:01:33.0450 0736 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
15:01:33.0451 0736 vdrvroot - ok
15:01:33.0484 0736 vds (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
15:01:33.0506 0736 vds - ok
15:01:33.0553 0736 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
15:01:33.0554 0736 vga - ok
15:01:33.0566 0736 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
15:01:33.0567 0736 VgaSave - ok
15:01:33.0577 0736 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
15:01:33.0580 0736 vhdmp - ok
15:01:33.0588 0736 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
15:01:33.0590 0736 viaide - ok
15:01:33.0610 0736 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
15:01:33.0612 0736 volmgr - ok
15:01:33.0642 0736 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
15:01:33.0646 0736 volmgrx - ok
15:01:33.0673 0736 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
15:01:33.0677 0736 volsnap - ok
15:01:33.0718 0736 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\drivers\vsmraid.sys
15:01:33.0721 0736 vsmraid - ok
15:01:33.0792 0736 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
15:01:33.0831 0736 VSS - ok
15:01:33.0918 0736 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
15:01:33.0921 0736 vwifibus - ok
15:01:33.0955 0736 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
15:01:33.0979 0736 W32Time - ok
15:01:33.0992 0736 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\drivers\wacompen.sys
15:01:33.0993 0736 WacomPen - ok
15:01:34.0056 0736 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
15:01:34.0060 0736 WANARP - ok
15:01:34.0099 0736 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
15:01:34.0102 0736 Wanarpv6 - ok
15:01:34.0233 0736 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
15:01:34.0251 0736 WatAdminSvc - ok
15:01:34.0312 0736 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
15:01:34.0329 0736 wbengine - ok
15:01:34.0366 0736 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
15:01:34.0371 0736 WbioSrvc - ok
15:01:34.0390 0736 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
15:01:34.0395 0736 wcncsvc - ok
15:01:34.0405 0736 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
15:01:34.0408 0736 WcsPlugInService - ok
15:01:34.0427 0736 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\drivers\wd.sys
15:01:34.0428 0736 Wd - ok
15:01:34.0460 0736 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
15:01:34.0466 0736 Wdf01000 - ok
15:01:34.0482 0736 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
15:01:34.0485 0736 WdiServiceHost - ok
15:01:34.0488 0736 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
15:01:34.0490 0736 WdiSystemHost - ok
15:01:34.0514 0736 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
15:01:34.0519 0736 WebClient - ok
15:01:34.0540 0736 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
15:01:34.0545 0736 Wecsvc - ok
15:01:34.0556 0736 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
15:01:34.0560 0736 wercplsupport - ok
15:01:34.0619 0736 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
15:01:34.0624 0736 WerSvc - ok
15:01:34.0639 0736 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
15:01:34.0640 0736 WfpLwf - ok
15:01:34.0644 0736 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
15:01:34.0645 0736 WIMMount - ok
15:01:34.0672 0736 WinDefend - ok
15:01:34.0678 0736 WinHttpAutoProxySvc - ok
15:01:34.0725 0736 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
15:01:34.0728 0736 Winmgmt - ok
15:01:34.0806 0736 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
15:01:34.0839 0736 WinRM - ok
15:01:34.0935 0736 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
15:01:34.0936 0736 WinUsb - ok
15:01:34.0999 0736 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
15:01:35.0025 0736 Wlansvc - ok
15:01:35.0250 0736 wlidsvc (7e47c328fc4768cb8beafbcfafa70362) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
15:01:35.0296 0736 wlidsvc - ok
15:01:35.0345 0736 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
15:01:35.0346 0736 WmiAcpi - ok
15:01:35.0372 0736 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
15:01:35.0375 0736 wmiApSrv - ok
15:01:35.0391 0736 WMPNetworkSvc - ok
15:01:35.0409 0736 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
15:01:35.0413 0736 WPCSvc - ok
15:01:35.0424 0736 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
15:01:35.0430 0736 WPDBusEnum - ok
15:01:35.0443 0736 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
15:01:35.0444 0736 ws2ifsl - ok
15:01:35.0458 0736 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
15:01:35.0463 0736 wscsvc - ok
15:01:35.0466 0736 WSearch - ok
15:01:35.0563 0736 wuauserv (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
15:01:35.0613 0736 wuauserv - ok
15:01:35.0650 0736 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
15:01:35.0652 0736 WudfPf - ok
15:01:35.0667 0736 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
15:01:35.0669 0736 WUDFRd - ok
15:01:35.0681 0736 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
15:01:35.0686 0736 wudfsvc - ok
15:01:35.0712 0736 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
15:01:35.0719 0736 WwanSvc - ok
15:01:35.0785 0736 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
15:01:35.0853 0736 \Device\Harddisk0\DR0 - ok
15:01:35.0853 0736 Boot (0x1200) (2dd59566d6c5535ee0b6f9c247699754) \Device\Harddisk0\DR0\Partition0
15:01:35.0864 0736 \Device\Harddisk0\DR0\Partition0 - ok
15:01:35.0881 0736 Boot (0x1200) (70e677235867a7658818616956043aa0) \Device\Harddisk0\DR0\Partition1
15:01:35.0882 0736 \Device\Harddisk0\DR0\Partition1 - ok
15:01:35.0883 0736 ============================================================
15:01:35.0883 0736 Scan finished
15:01:35.0883 0736 ============================================================
15:01:35.0891 1344 Detected object count: 0
15:01:35.0891 1344 Actual detected object count: 0
- stell
- VIP in memoriam

- Příspěvky: 5175
- Registrován: 09 Pro 2007 09:27
- Místo/Bydliště: SK-REVUCA
- Kontaktovat uživatele:
Re: Pomalé načítání videí na Youtube
hm, no nic spust este raz combofix a log vloz sem
Re: Pomalé načítání videí na Youtube
ComboFix 12-04-24.02 - OEM 24.04.2012 15:16:44.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4094.2600 [GMT 2:00]
Spuštěný z: c:\users\OEM\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\OEM\AppData\Local\Temp\8aefdf3f-82dc-462e-be91-2ca1c43911cf\CliSecureRT.dll
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\system32\1.txt
c:\windows\SysWow64\muzapp.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-03-24 do 2012-04-24 )))))))))))))))))))))))))))))))
.
.
2012-04-24 13:34 . 2012-04-24 13:34 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-04-24 12:13 . 2012-04-24 12:13 -------- d-----w- C:\_OTL
2012-04-24 10:05 . 2012-04-13 08:46 8917360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A780E873-BC92-4B1D-80BE-278A8F84695B}\mpengine.dll
2012-04-22 11:44 . 2012-04-22 11:44 418464 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-04-22 11:44 . 2012-04-22 11:44 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-04-20 13:00 . 2012-04-20 13:00 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-04-19 22:01 . 2009-04-06 07:08 5174 ----a-w- c:\windows\SysWow64\nppt9x.vxd
2012-04-19 22:01 . 2009-04-06 07:08 4682 ----a-w- c:\windows\SysWow64\npptNT2.sys
2012-04-19 19:33 . 2012-04-19 19:56 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-04-18 10:45 . 2012-04-18 10:45 -------- d-----w- c:\users\OEM\AppData\Roaming\Malwarebytes
2012-04-18 10:45 . 2012-04-04 13:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-04-18 10:40 . 2012-04-18 10:45 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-04-18 10:40 . 2012-04-18 10:40 -------- d-----w- c:\programdata\Malwarebytes
2012-04-18 10:17 . 2012-04-18 10:17 -------- d-----w- C:\rsit
2012-04-18 10:17 . 2012-04-18 10:17 -------- d-----w- c:\program files\trend micro
2012-04-18 09:40 . 2012-04-18 09:40 -------- d--h--w- c:\programdata\Common Files
2012-04-15 10:32 . 2012-04-15 10:32 -------- d-----w- c:\users\OEM\AppData\Local\Native Instruments
2012-04-14 15:38 . 2012-04-14 15:38 -------- dc-h--w- c:\programdata\{13C5090D-8DAD-437E-B069-232C287DA432}
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\program files\Common Files\Native Instruments
2012-04-14 15:35 . 2012-04-14 15:35 -------- dc-h--w- c:\programdata\{C78336EC-F2EB-4640-99A4-DFE96581B90B}
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\program files\Native Instruments
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\programdata\Native Instruments
2012-04-14 15:30 . 2012-04-14 15:32 -------- d-----w- C:\Games things
2012-04-12 22:45 . 2012-03-06 06:53 5559152 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-04-12 22:45 . 2012-03-06 05:59 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-04-12 22:45 . 2012-03-06 05:59 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-04-12 22:43 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-04-12 22:43 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-04-12 22:43 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-04-12 22:42 . 2012-03-01 05:37 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-04-12 22:42 . 2012-03-01 06:38 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-04-12 22:42 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-04-12 22:42 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-04-12 19:01 . 2012-04-12 19:01 -------- d-----w- c:\users\OEM\AppData\Local\Facebook
2012-04-12 18:25 . 2012-02-28 06:34 1013248 ----a-w- c:\program files\Internet Explorer\iedvtool.dll
2012-04-12 18:25 . 2012-02-28 05:38 981504 ----a-w- c:\windows\SysWow64\wininet.dll
2012-04-12 18:25 . 2012-02-28 05:34 860672 ----a-w- c:\program files (x86)\Internet Explorer\iedvtool.dll
2012-04-12 12:19 . 2012-04-12 12:30 -------- d-----w- C:\Škola
2012-04-07 12:06 . 2012-04-07 12:06 1 ----a-w- c:\windows\SysWow64\SI.bin
2012-04-07 12:06 . 2001-09-05 04:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2012-04-07 12:06 . 2001-09-05 04:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll
2012-04-07 12:06 . 2001-09-05 04:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2012-04-07 12:06 . 2001-09-05 04:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-24 11:57 . 2011-04-20 17:46 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-04-24 11:57 . 2011-04-20 17:45 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2012-03-08 18:03 . 2012-03-08 17:29 525544 ----a-w- c:\windows\system32\deployJava1.dll
2012-03-06 19:51 . 2011-04-15 18:22 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-03-02 14:59 . 2011-04-15 13:32 25640 ----a-w- c:\windows\gdrv.sys
2012-02-29 19:21 . 2012-02-29 19:21 42392 ----a-w- c:\windows\SysWow64\xfcodec.dll
2012-02-29 19:21 . 2012-02-29 19:21 28056 ----a-w- c:\windows\system32\xfcodec64.dll
2012-02-23 16:23 . 2012-03-02 15:06 41184 ----a-w- c:\windows\avastSS.scr
2012-02-23 16:23 . 2012-03-02 15:06 201352 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-02-23 16:23 . 2011-04-15 16:57 258520 ----a-w- c:\windows\system32\aswBoot.exe
2012-02-23 16:12 . 2012-03-02 15:06 817496 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-02-23 16:12 . 2012-03-02 15:07 335704 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-02-23 16:11 . 2012-03-02 15:06 53080 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-02-23 16:10 . 2012-03-02 15:06 59224 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-02-23 16:10 . 2012-03-02 15:06 69976 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-02-23 16:10 . 2012-03-02 15:07 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-02-23 08:18 . 2010-11-21 03:27 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-02-20 21:53 . 2012-02-20 21:53 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-02-20 21:53 . 2012-02-20 21:53 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2012-02-18 13:03 . 2011-04-20 17:45 75064 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2012-02-18 10:53 . 2011-04-20 17:46 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2012-02-17 06:38 . 2012-03-14 14:17 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-02-17 05:34 . 2012-03-14 14:17 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-02-17 04:58 . 2012-03-14 14:17 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-02-17 04:57 . 2012-03-14 14:17 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-02-11 15:33 . 2012-02-11 15:33 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2012-02-11 15:33 . 2012-02-11 15:33 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2012-02-11 15:33 . 2012-02-11 15:33 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-02-11 15:33 . 2012-02-11 15:32 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-02-10 06:36 . 2012-03-14 14:17 1544192 ----a-w- c:\windows\system32\DWrite.dll
2012-02-10 05:38 . 2012-03-14 14:17 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-02-07 09:02 . 2012-02-07 09:02 1070352 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
2012-02-03 04:34 . 2012-03-14 14:17 3145728 ----a-w- c:\windows\system32\win32k.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Infium"="c:\qip infium jadrispack\qip.exe" [2011-03-22 6841728]
"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2011-07-02 3077528]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"KiesHelper"="c:\program files (x86)\Samsung\Kies\KiesHelper.exe" [2011-11-29 935312]
"KiesPDLR"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-11-29 21392]
"RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-01-19 43632]
"NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2009-11-20 106496]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-08 336384]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2011-11-29 3508624]
"SweetIM"="c:\program files (x86)\SweetIM\Messenger\SweetIM.exe" [2011-08-01 114992]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-02-23 4031368]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
.
c:\users\OEM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MagicDisc.lnk - c:\program files (x86)\MagicDisc\MagicDisc.exe [2012-1-31 576000]
Xfire.lnk - c:\program files (x86)\Xfire\Xfire.exe [2012-2-29 3537304]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
GamePark klient 2.lnk - c:\program files\GamePark2\gpcl.exe [2012-1-7 442880]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 136176]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-22 253088]
R3 AODDriver4.0;AODDriver4.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 136176]
R3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\DRIVERS\s1018bus.sys [x]
R3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1018mdfl.sys [x]
R3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1018mdm.sys [x]
R3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1018mgmt.sys [x]
R3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1018nd5.sys [x]
R3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1018obex.sys [x]
R3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1018unic.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [x]
R3 ssudobex;SAMSUNG Mobile USB OBEX Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudobex.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe [2012-02-09 735080]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-03-08 365568]
S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
S2 JMB36X;JMB36X;c:\windows\SysWOW64\XSrvSetup.exe [2010-01-19 72304]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
S2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2;c:\program files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [2011-12-20 341800]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys [x]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2012-04-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-22 11:44]
.
2012-04-23 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000Core.job
- c:\users\OEM\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-04-12 19:01]
.
2012-04-24 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000UA.job
- c:\users\OEM\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-04-12 19:01]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 14:31]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 14:31]
.
2012-04-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000Core.job
- c:\users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-14 23:06]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000UA.job
- c:\users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-14 23:06]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-02-23 16:23 135408 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-06 10144288]
"Launch LGDCore"="c:\program files\Common Files\Logitech\G-series Software\LGDCore.exe" [2006-07-23 1783296]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
mLocal Page =
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\OEM\AppData\Roaming\Mozilla\Firefox\Profiles\sax073f2.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)
AddRemove-L2Exilium - c:\games\Lineage II PTS\Uninstal.exe
AddRemove-Windows Searchqu Toolbar - c:\program files (x86)\Windows iLivid Toolbar\uninstall.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-4202733675-3408207310-893904353-1000\Software\SecuROM\License information*]
"datasecu"=hex:29,7c,5d,4b,fd,51,80,ba,39,f6,99,f6,85,8f,84,e8,2b,d9,1b,a5,f4,
12,a5,42,79,0f,73,d8,b1,fa,8d,45,83,6a,15,a4,90,20,08,12,a9,65,4d,da,31,ad,\
"rkeysecu"=hex:08,54,75,71,15,52,4b,c3,e2,e3,f2,fb,f1,cd,2f,9b
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Celkový čas: 2012-04-24 15:51:56 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-04-24 13:51
ComboFix2.txt 2012-04-19 18:34
.
Před spuštěním: Volných bajtů: 479 666 515 968
Po spuštění: Volných bajtů: 479 038 054 400
.
- - End Of File - - 5D5ED738B8611C79C098FE8E63485E85
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4094.2600 [GMT 2:00]
Spuštěný z: c:\users\OEM\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\OEM\AppData\Local\Temp\8aefdf3f-82dc-462e-be91-2ca1c43911cf\CliSecureRT.dll
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\system32\1.txt
c:\windows\SysWow64\muzapp.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-03-24 do 2012-04-24 )))))))))))))))))))))))))))))))
.
.
2012-04-24 13:34 . 2012-04-24 13:34 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-04-24 12:13 . 2012-04-24 12:13 -------- d-----w- C:\_OTL
2012-04-24 10:05 . 2012-04-13 08:46 8917360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A780E873-BC92-4B1D-80BE-278A8F84695B}\mpengine.dll
2012-04-22 11:44 . 2012-04-22 11:44 418464 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-04-22 11:44 . 2012-04-22 11:44 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-04-20 13:00 . 2012-04-20 13:00 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-04-19 22:01 . 2009-04-06 07:08 5174 ----a-w- c:\windows\SysWow64\nppt9x.vxd
2012-04-19 22:01 . 2009-04-06 07:08 4682 ----a-w- c:\windows\SysWow64\npptNT2.sys
2012-04-19 19:33 . 2012-04-19 19:56 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-04-18 10:45 . 2012-04-18 10:45 -------- d-----w- c:\users\OEM\AppData\Roaming\Malwarebytes
2012-04-18 10:45 . 2012-04-04 13:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-04-18 10:40 . 2012-04-18 10:45 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-04-18 10:40 . 2012-04-18 10:40 -------- d-----w- c:\programdata\Malwarebytes
2012-04-18 10:17 . 2012-04-18 10:17 -------- d-----w- C:\rsit
2012-04-18 10:17 . 2012-04-18 10:17 -------- d-----w- c:\program files\trend micro
2012-04-18 09:40 . 2012-04-18 09:40 -------- d--h--w- c:\programdata\Common Files
2012-04-15 10:32 . 2012-04-15 10:32 -------- d-----w- c:\users\OEM\AppData\Local\Native Instruments
2012-04-14 15:38 . 2012-04-14 15:38 -------- dc-h--w- c:\programdata\{13C5090D-8DAD-437E-B069-232C287DA432}
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\program files\Common Files\Native Instruments
2012-04-14 15:35 . 2012-04-14 15:35 -------- dc-h--w- c:\programdata\{C78336EC-F2EB-4640-99A4-DFE96581B90B}
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\program files\Native Instruments
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\programdata\Native Instruments
2012-04-14 15:30 . 2012-04-14 15:32 -------- d-----w- C:\Games things
2012-04-12 22:45 . 2012-03-06 06:53 5559152 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-04-12 22:45 . 2012-03-06 05:59 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-04-12 22:45 . 2012-03-06 05:59 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-04-12 22:43 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-04-12 22:43 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-04-12 22:43 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-04-12 22:42 . 2012-03-01 05:37 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-04-12 22:42 . 2012-03-01 06:38 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-04-12 22:42 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-04-12 22:42 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-04-12 19:01 . 2012-04-12 19:01 -------- d-----w- c:\users\OEM\AppData\Local\Facebook
2012-04-12 18:25 . 2012-02-28 06:34 1013248 ----a-w- c:\program files\Internet Explorer\iedvtool.dll
2012-04-12 18:25 . 2012-02-28 05:38 981504 ----a-w- c:\windows\SysWow64\wininet.dll
2012-04-12 18:25 . 2012-02-28 05:34 860672 ----a-w- c:\program files (x86)\Internet Explorer\iedvtool.dll
2012-04-12 12:19 . 2012-04-12 12:30 -------- d-----w- C:\Škola
2012-04-07 12:06 . 2012-04-07 12:06 1 ----a-w- c:\windows\SysWow64\SI.bin
2012-04-07 12:06 . 2001-09-05 04:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2012-04-07 12:06 . 2001-09-05 04:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll
2012-04-07 12:06 . 2001-09-05 04:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2012-04-07 12:06 . 2001-09-05 04:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-24 11:57 . 2011-04-20 17:46 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-04-24 11:57 . 2011-04-20 17:45 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2012-03-08 18:03 . 2012-03-08 17:29 525544 ----a-w- c:\windows\system32\deployJava1.dll
2012-03-06 19:51 . 2011-04-15 18:22 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-03-02 14:59 . 2011-04-15 13:32 25640 ----a-w- c:\windows\gdrv.sys
2012-02-29 19:21 . 2012-02-29 19:21 42392 ----a-w- c:\windows\SysWow64\xfcodec.dll
2012-02-29 19:21 . 2012-02-29 19:21 28056 ----a-w- c:\windows\system32\xfcodec64.dll
2012-02-23 16:23 . 2012-03-02 15:06 41184 ----a-w- c:\windows\avastSS.scr
2012-02-23 16:23 . 2012-03-02 15:06 201352 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-02-23 16:23 . 2011-04-15 16:57 258520 ----a-w- c:\windows\system32\aswBoot.exe
2012-02-23 16:12 . 2012-03-02 15:06 817496 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-02-23 16:12 . 2012-03-02 15:07 335704 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-02-23 16:11 . 2012-03-02 15:06 53080 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-02-23 16:10 . 2012-03-02 15:06 59224 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-02-23 16:10 . 2012-03-02 15:06 69976 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-02-23 16:10 . 2012-03-02 15:07 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-02-23 08:18 . 2010-11-21 03:27 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-02-20 21:53 . 2012-02-20 21:53 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-02-20 21:53 . 2012-02-20 21:53 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2012-02-18 13:03 . 2011-04-20 17:45 75064 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2012-02-18 10:53 . 2011-04-20 17:46 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2012-02-17 06:38 . 2012-03-14 14:17 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-02-17 05:34 . 2012-03-14 14:17 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-02-17 04:58 . 2012-03-14 14:17 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-02-17 04:57 . 2012-03-14 14:17 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-02-11 15:33 . 2012-02-11 15:33 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2012-02-11 15:33 . 2012-02-11 15:33 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2012-02-11 15:33 . 2012-02-11 15:33 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-02-11 15:33 . 2012-02-11 15:32 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-02-10 06:36 . 2012-03-14 14:17 1544192 ----a-w- c:\windows\system32\DWrite.dll
2012-02-10 05:38 . 2012-03-14 14:17 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-02-07 09:02 . 2012-02-07 09:02 1070352 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
2012-02-03 04:34 . 2012-03-14 14:17 3145728 ----a-w- c:\windows\system32\win32k.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Infium"="c:\qip infium jadrispack\qip.exe" [2011-03-22 6841728]
"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2011-07-02 3077528]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"KiesHelper"="c:\program files (x86)\Samsung\Kies\KiesHelper.exe" [2011-11-29 935312]
"KiesPDLR"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-11-29 21392]
"RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-01-19 43632]
"NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2009-11-20 106496]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-08 336384]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2011-11-29 3508624]
"SweetIM"="c:\program files (x86)\SweetIM\Messenger\SweetIM.exe" [2011-08-01 114992]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-02-23 4031368]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
.
c:\users\OEM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MagicDisc.lnk - c:\program files (x86)\MagicDisc\MagicDisc.exe [2012-1-31 576000]
Xfire.lnk - c:\program files (x86)\Xfire\Xfire.exe [2012-2-29 3537304]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
GamePark klient 2.lnk - c:\program files\GamePark2\gpcl.exe [2012-1-7 442880]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 136176]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-22 253088]
R3 AODDriver4.0;AODDriver4.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 136176]
R3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\DRIVERS\s1018bus.sys [x]
R3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1018mdfl.sys [x]
R3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1018mdm.sys [x]
R3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1018mgmt.sys [x]
R3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1018nd5.sys [x]
R3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1018obex.sys [x]
R3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1018unic.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [x]
R3 ssudobex;SAMSUNG Mobile USB OBEX Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudobex.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe [2012-02-09 735080]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-03-08 365568]
S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
S2 JMB36X;JMB36X;c:\windows\SysWOW64\XSrvSetup.exe [2010-01-19 72304]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
S2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2;c:\program files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [2011-12-20 341800]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys [x]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2012-04-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-22 11:44]
.
2012-04-23 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000Core.job
- c:\users\OEM\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-04-12 19:01]
.
2012-04-24 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000UA.job
- c:\users\OEM\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-04-12 19:01]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 14:31]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 14:31]
.
2012-04-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000Core.job
- c:\users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-14 23:06]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000UA.job
- c:\users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-14 23:06]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-02-23 16:23 135408 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-06 10144288]
"Launch LGDCore"="c:\program files\Common Files\Logitech\G-series Software\LGDCore.exe" [2006-07-23 1783296]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
mLocal Page =
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\OEM\AppData\Roaming\Mozilla\Firefox\Profiles\sax073f2.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)
AddRemove-L2Exilium - c:\games\Lineage II PTS\Uninstal.exe
AddRemove-Windows Searchqu Toolbar - c:\program files (x86)\Windows iLivid Toolbar\uninstall.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-4202733675-3408207310-893904353-1000\Software\SecuROM\License information*]
"datasecu"=hex:29,7c,5d,4b,fd,51,80,ba,39,f6,99,f6,85,8f,84,e8,2b,d9,1b,a5,f4,
12,a5,42,79,0f,73,d8,b1,fa,8d,45,83,6a,15,a4,90,20,08,12,a9,65,4d,da,31,ad,\
"rkeysecu"=hex:08,54,75,71,15,52,4b,c3,e2,e3,f2,fb,f1,cd,2f,9b
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Celkový čas: 2012-04-24 15:51:56 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-04-24 13:51
ComboFix2.txt 2012-04-19 18:34
.
Před spuštěním: Volných bajtů: 479 666 515 968
Po spuštění: Volných bajtů: 479 038 054 400
.
- - End Of File - - 5D5ED738B8611C79C098FE8E63485E85
Re: Pomalé načítání videí na Youtube
ComboFix 12-04-24.02 - OEM 24.04.2012 15:16:44.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4094.2600 [GMT 2:00]
Spuštěný z: c:\users\OEM\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\OEM\AppData\Local\Temp\8aefdf3f-82dc-462e-be91-2ca1c43911cf\CliSecureRT.dll
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\system32\1.txt
c:\windows\SysWow64\muzapp.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-03-24 do 2012-04-24 )))))))))))))))))))))))))))))))
.
.
2012-04-24 13:34 . 2012-04-24 13:34 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-04-24 12:13 . 2012-04-24 12:13 -------- d-----w- C:\_OTL
2012-04-24 10:05 . 2012-04-13 08:46 8917360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A780E873-BC92-4B1D-80BE-278A8F84695B}\mpengine.dll
2012-04-22 11:44 . 2012-04-22 11:44 418464 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-04-22 11:44 . 2012-04-22 11:44 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-04-20 13:00 . 2012-04-20 13:00 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-04-19 22:01 . 2009-04-06 07:08 5174 ----a-w- c:\windows\SysWow64\nppt9x.vxd
2012-04-19 22:01 . 2009-04-06 07:08 4682 ----a-w- c:\windows\SysWow64\npptNT2.sys
2012-04-19 19:33 . 2012-04-19 19:56 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-04-18 10:45 . 2012-04-18 10:45 -------- d-----w- c:\users\OEM\AppData\Roaming\Malwarebytes
2012-04-18 10:45 . 2012-04-04 13:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-04-18 10:40 . 2012-04-18 10:45 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-04-18 10:40 . 2012-04-18 10:40 -------- d-----w- c:\programdata\Malwarebytes
2012-04-18 10:17 . 2012-04-18 10:17 -------- d-----w- C:\rsit
2012-04-18 10:17 . 2012-04-18 10:17 -------- d-----w- c:\program files\trend micro
2012-04-18 09:40 . 2012-04-18 09:40 -------- d--h--w- c:\programdata\Common Files
2012-04-15 10:32 . 2012-04-15 10:32 -------- d-----w- c:\users\OEM\AppData\Local\Native Instruments
2012-04-14 15:38 . 2012-04-14 15:38 -------- dc-h--w- c:\programdata\{13C5090D-8DAD-437E-B069-232C287DA432}
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\program files\Common Files\Native Instruments
2012-04-14 15:35 . 2012-04-14 15:35 -------- dc-h--w- c:\programdata\{C78336EC-F2EB-4640-99A4-DFE96581B90B}
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\program files\Native Instruments
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\programdata\Native Instruments
2012-04-14 15:30 . 2012-04-14 15:32 -------- d-----w- C:\Games things
2012-04-12 22:45 . 2012-03-06 06:53 5559152 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-04-12 22:45 . 2012-03-06 05:59 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-04-12 22:45 . 2012-03-06 05:59 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-04-12 22:43 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-04-12 22:43 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-04-12 22:43 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-04-12 22:42 . 2012-03-01 05:37 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-04-12 22:42 . 2012-03-01 06:38 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-04-12 22:42 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-04-12 22:42 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-04-12 19:01 . 2012-04-12 19:01 -------- d-----w- c:\users\OEM\AppData\Local\Facebook
2012-04-12 18:25 . 2012-02-28 06:34 1013248 ----a-w- c:\program files\Internet Explorer\iedvtool.dll
2012-04-12 18:25 . 2012-02-28 05:38 981504 ----a-w- c:\windows\SysWow64\wininet.dll
2012-04-12 18:25 . 2012-02-28 05:34 860672 ----a-w- c:\program files (x86)\Internet Explorer\iedvtool.dll
2012-04-12 12:19 . 2012-04-12 12:30 -------- d-----w- C:\Škola
2012-04-07 12:06 . 2012-04-07 12:06 1 ----a-w- c:\windows\SysWow64\SI.bin
2012-04-07 12:06 . 2001-09-05 04:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2012-04-07 12:06 . 2001-09-05 04:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll
2012-04-07 12:06 . 2001-09-05 04:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2012-04-07 12:06 . 2001-09-05 04:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-24 11:57 . 2011-04-20 17:46 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-04-24 11:57 . 2011-04-20 17:45 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2012-03-08 18:03 . 2012-03-08 17:29 525544 ----a-w- c:\windows\system32\deployJava1.dll
2012-03-06 19:51 . 2011-04-15 18:22 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-03-02 14:59 . 2011-04-15 13:32 25640 ----a-w- c:\windows\gdrv.sys
2012-02-29 19:21 . 2012-02-29 19:21 42392 ----a-w- c:\windows\SysWow64\xfcodec.dll
2012-02-29 19:21 . 2012-02-29 19:21 28056 ----a-w- c:\windows\system32\xfcodec64.dll
2012-02-23 16:23 . 2012-03-02 15:06 41184 ----a-w- c:\windows\avastSS.scr
2012-02-23 16:23 . 2012-03-02 15:06 201352 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-02-23 16:23 . 2011-04-15 16:57 258520 ----a-w- c:\windows\system32\aswBoot.exe
2012-02-23 16:12 . 2012-03-02 15:06 817496 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-02-23 16:12 . 2012-03-02 15:07 335704 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-02-23 16:11 . 2012-03-02 15:06 53080 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-02-23 16:10 . 2012-03-02 15:06 59224 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-02-23 16:10 . 2012-03-02 15:06 69976 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-02-23 16:10 . 2012-03-02 15:07 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-02-23 08:18 . 2010-11-21 03:27 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-02-20 21:53 . 2012-02-20 21:53 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-02-20 21:53 . 2012-02-20 21:53 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2012-02-18 13:03 . 2011-04-20 17:45 75064 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2012-02-18 10:53 . 2011-04-20 17:46 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2012-02-17 06:38 . 2012-03-14 14:17 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-02-17 05:34 . 2012-03-14 14:17 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-02-17 04:58 . 2012-03-14 14:17 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-02-17 04:57 . 2012-03-14 14:17 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-02-11 15:33 . 2012-02-11 15:33 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2012-02-11 15:33 . 2012-02-11 15:33 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2012-02-11 15:33 . 2012-02-11 15:33 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-02-11 15:33 . 2012-02-11 15:32 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-02-10 06:36 . 2012-03-14 14:17 1544192 ----a-w- c:\windows\system32\DWrite.dll
2012-02-10 05:38 . 2012-03-14 14:17 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-02-07 09:02 . 2012-02-07 09:02 1070352 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
2012-02-03 04:34 . 2012-03-14 14:17 3145728 ----a-w- c:\windows\system32\win32k.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Infium"="c:\qip infium jadrispack\qip.exe" [2011-03-22 6841728]
"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2011-07-02 3077528]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"KiesHelper"="c:\program files (x86)\Samsung\Kies\KiesHelper.exe" [2011-11-29 935312]
"KiesPDLR"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-11-29 21392]
"RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-01-19 43632]
"NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2009-11-20 106496]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-08 336384]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2011-11-29 3508624]
"SweetIM"="c:\program files (x86)\SweetIM\Messenger\SweetIM.exe" [2011-08-01 114992]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-02-23 4031368]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
.
c:\users\OEM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MagicDisc.lnk - c:\program files (x86)\MagicDisc\MagicDisc.exe [2012-1-31 576000]
Xfire.lnk - c:\program files (x86)\Xfire\Xfire.exe [2012-2-29 3537304]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
GamePark klient 2.lnk - c:\program files\GamePark2\gpcl.exe [2012-1-7 442880]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 136176]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-22 253088]
R3 AODDriver4.0;AODDriver4.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 136176]
R3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\DRIVERS\s1018bus.sys [x]
R3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1018mdfl.sys [x]
R3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1018mdm.sys [x]
R3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1018mgmt.sys [x]
R3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1018nd5.sys [x]
R3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1018obex.sys [x]
R3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1018unic.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [x]
R3 ssudobex;SAMSUNG Mobile USB OBEX Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudobex.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe [2012-02-09 735080]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-03-08 365568]
S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
S2 JMB36X;JMB36X;c:\windows\SysWOW64\XSrvSetup.exe [2010-01-19 72304]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
S2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2;c:\program files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [2011-12-20 341800]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys [x]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2012-04-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-22 11:44]
.
2012-04-23 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000Core.job
- c:\users\OEM\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-04-12 19:01]
.
2012-04-24 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000UA.job
- c:\users\OEM\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-04-12 19:01]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 14:31]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 14:31]
.
2012-04-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000Core.job
- c:\users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-14 23:06]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000UA.job
- c:\users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-14 23:06]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-02-23 16:23 135408 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-06 10144288]
"Launch LGDCore"="c:\program files\Common Files\Logitech\G-series Software\LGDCore.exe" [2006-07-23 1783296]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
mLocal Page =
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\OEM\AppData\Roaming\Mozilla\Firefox\Profiles\sax073f2.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)
AddRemove-L2Exilium - c:\games\Lineage II PTS\Uninstal.exe
AddRemove-Windows Searchqu Toolbar - c:\program files (x86)\Windows iLivid Toolbar\uninstall.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-4202733675-3408207310-893904353-1000\Software\SecuROM\License information*]
"datasecu"=hex:29,7c,5d,4b,fd,51,80,ba,39,f6,99,f6,85,8f,84,e8,2b,d9,1b,a5,f4,
12,a5,42,79,0f,73,d8,b1,fa,8d,45,83,6a,15,a4,90,20,08,12,a9,65,4d,da,31,ad,\
"rkeysecu"=hex:08,54,75,71,15,52,4b,c3,e2,e3,f2,fb,f1,cd,2f,9b
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Celkový čas: 2012-04-24 15:51:56 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-04-24 13:51
ComboFix2.txt 2012-04-19 18:34
.
Před spuštěním: Volných bajtů: 479 666 515 968
Po spuštění: Volných bajtů: 479 038 054 400
.
- - End Of File - - 5D5ED738B8611C79C098FE8E63485E85
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4094.2600 [GMT 2:00]
Spuštěný z: c:\users\OEM\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\OEM\AppData\Local\Temp\8aefdf3f-82dc-462e-be91-2ca1c43911cf\CliSecureRT.dll
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\system32\1.txt
c:\windows\SysWow64\muzapp.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-03-24 do 2012-04-24 )))))))))))))))))))))))))))))))
.
.
2012-04-24 13:34 . 2012-04-24 13:34 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-04-24 12:13 . 2012-04-24 12:13 -------- d-----w- C:\_OTL
2012-04-24 10:05 . 2012-04-13 08:46 8917360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A780E873-BC92-4B1D-80BE-278A8F84695B}\mpengine.dll
2012-04-22 11:44 . 2012-04-22 11:44 418464 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-04-22 11:44 . 2012-04-22 11:44 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-04-20 13:00 . 2012-04-20 13:00 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-04-19 22:01 . 2009-04-06 07:08 5174 ----a-w- c:\windows\SysWow64\nppt9x.vxd
2012-04-19 22:01 . 2009-04-06 07:08 4682 ----a-w- c:\windows\SysWow64\npptNT2.sys
2012-04-19 19:33 . 2012-04-19 19:56 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-04-18 10:45 . 2012-04-18 10:45 -------- d-----w- c:\users\OEM\AppData\Roaming\Malwarebytes
2012-04-18 10:45 . 2012-04-04 13:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-04-18 10:40 . 2012-04-18 10:45 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-04-18 10:40 . 2012-04-18 10:40 -------- d-----w- c:\programdata\Malwarebytes
2012-04-18 10:17 . 2012-04-18 10:17 -------- d-----w- C:\rsit
2012-04-18 10:17 . 2012-04-18 10:17 -------- d-----w- c:\program files\trend micro
2012-04-18 09:40 . 2012-04-18 09:40 -------- d--h--w- c:\programdata\Common Files
2012-04-15 10:32 . 2012-04-15 10:32 -------- d-----w- c:\users\OEM\AppData\Local\Native Instruments
2012-04-14 15:38 . 2012-04-14 15:38 -------- dc-h--w- c:\programdata\{13C5090D-8DAD-437E-B069-232C287DA432}
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\program files\Common Files\Native Instruments
2012-04-14 15:35 . 2012-04-14 15:35 -------- dc-h--w- c:\programdata\{C78336EC-F2EB-4640-99A4-DFE96581B90B}
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\program files\Native Instruments
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\programdata\Native Instruments
2012-04-14 15:30 . 2012-04-14 15:32 -------- d-----w- C:\Games things
2012-04-12 22:45 . 2012-03-06 06:53 5559152 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-04-12 22:45 . 2012-03-06 05:59 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-04-12 22:45 . 2012-03-06 05:59 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-04-12 22:43 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-04-12 22:43 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-04-12 22:43 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-04-12 22:42 . 2012-03-01 05:37 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-04-12 22:42 . 2012-03-01 06:38 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-04-12 22:42 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-04-12 22:42 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-04-12 19:01 . 2012-04-12 19:01 -------- d-----w- c:\users\OEM\AppData\Local\Facebook
2012-04-12 18:25 . 2012-02-28 06:34 1013248 ----a-w- c:\program files\Internet Explorer\iedvtool.dll
2012-04-12 18:25 . 2012-02-28 05:38 981504 ----a-w- c:\windows\SysWow64\wininet.dll
2012-04-12 18:25 . 2012-02-28 05:34 860672 ----a-w- c:\program files (x86)\Internet Explorer\iedvtool.dll
2012-04-12 12:19 . 2012-04-12 12:30 -------- d-----w- C:\Škola
2012-04-07 12:06 . 2012-04-07 12:06 1 ----a-w- c:\windows\SysWow64\SI.bin
2012-04-07 12:06 . 2001-09-05 04:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2012-04-07 12:06 . 2001-09-05 04:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll
2012-04-07 12:06 . 2001-09-05 04:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2012-04-07 12:06 . 2001-09-05 04:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-24 11:57 . 2011-04-20 17:46 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-04-24 11:57 . 2011-04-20 17:45 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2012-03-08 18:03 . 2012-03-08 17:29 525544 ----a-w- c:\windows\system32\deployJava1.dll
2012-03-06 19:51 . 2011-04-15 18:22 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-03-02 14:59 . 2011-04-15 13:32 25640 ----a-w- c:\windows\gdrv.sys
2012-02-29 19:21 . 2012-02-29 19:21 42392 ----a-w- c:\windows\SysWow64\xfcodec.dll
2012-02-29 19:21 . 2012-02-29 19:21 28056 ----a-w- c:\windows\system32\xfcodec64.dll
2012-02-23 16:23 . 2012-03-02 15:06 41184 ----a-w- c:\windows\avastSS.scr
2012-02-23 16:23 . 2012-03-02 15:06 201352 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-02-23 16:23 . 2011-04-15 16:57 258520 ----a-w- c:\windows\system32\aswBoot.exe
2012-02-23 16:12 . 2012-03-02 15:06 817496 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-02-23 16:12 . 2012-03-02 15:07 335704 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-02-23 16:11 . 2012-03-02 15:06 53080 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-02-23 16:10 . 2012-03-02 15:06 59224 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-02-23 16:10 . 2012-03-02 15:06 69976 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-02-23 16:10 . 2012-03-02 15:07 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-02-23 08:18 . 2010-11-21 03:27 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-02-20 21:53 . 2012-02-20 21:53 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-02-20 21:53 . 2012-02-20 21:53 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2012-02-18 13:03 . 2011-04-20 17:45 75064 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2012-02-18 10:53 . 2011-04-20 17:46 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2012-02-17 06:38 . 2012-03-14 14:17 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-02-17 05:34 . 2012-03-14 14:17 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-02-17 04:58 . 2012-03-14 14:17 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-02-17 04:57 . 2012-03-14 14:17 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-02-11 15:33 . 2012-02-11 15:33 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2012-02-11 15:33 . 2012-02-11 15:33 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2012-02-11 15:33 . 2012-02-11 15:33 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-02-11 15:33 . 2012-02-11 15:32 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-02-10 06:36 . 2012-03-14 14:17 1544192 ----a-w- c:\windows\system32\DWrite.dll
2012-02-10 05:38 . 2012-03-14 14:17 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-02-07 09:02 . 2012-02-07 09:02 1070352 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
2012-02-03 04:34 . 2012-03-14 14:17 3145728 ----a-w- c:\windows\system32\win32k.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Infium"="c:\qip infium jadrispack\qip.exe" [2011-03-22 6841728]
"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2011-07-02 3077528]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"KiesHelper"="c:\program files (x86)\Samsung\Kies\KiesHelper.exe" [2011-11-29 935312]
"KiesPDLR"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-11-29 21392]
"RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-01-19 43632]
"NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2009-11-20 106496]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-08 336384]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2011-11-29 3508624]
"SweetIM"="c:\program files (x86)\SweetIM\Messenger\SweetIM.exe" [2011-08-01 114992]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-02-23 4031368]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
.
c:\users\OEM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MagicDisc.lnk - c:\program files (x86)\MagicDisc\MagicDisc.exe [2012-1-31 576000]
Xfire.lnk - c:\program files (x86)\Xfire\Xfire.exe [2012-2-29 3537304]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
GamePark klient 2.lnk - c:\program files\GamePark2\gpcl.exe [2012-1-7 442880]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 136176]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-22 253088]
R3 AODDriver4.0;AODDriver4.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 136176]
R3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\DRIVERS\s1018bus.sys [x]
R3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1018mdfl.sys [x]
R3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1018mdm.sys [x]
R3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1018mgmt.sys [x]
R3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1018nd5.sys [x]
R3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1018obex.sys [x]
R3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1018unic.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [x]
R3 ssudobex;SAMSUNG Mobile USB OBEX Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudobex.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe [2012-02-09 735080]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-03-08 365568]
S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
S2 JMB36X;JMB36X;c:\windows\SysWOW64\XSrvSetup.exe [2010-01-19 72304]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
S2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2;c:\program files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [2011-12-20 341800]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys [x]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2012-04-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-22 11:44]
.
2012-04-23 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000Core.job
- c:\users\OEM\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-04-12 19:01]
.
2012-04-24 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000UA.job
- c:\users\OEM\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-04-12 19:01]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 14:31]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 14:31]
.
2012-04-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000Core.job
- c:\users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-14 23:06]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000UA.job
- c:\users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-14 23:06]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-02-23 16:23 135408 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-06 10144288]
"Launch LGDCore"="c:\program files\Common Files\Logitech\G-series Software\LGDCore.exe" [2006-07-23 1783296]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
mLocal Page =
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\OEM\AppData\Roaming\Mozilla\Firefox\Profiles\sax073f2.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)
AddRemove-L2Exilium - c:\games\Lineage II PTS\Uninstal.exe
AddRemove-Windows Searchqu Toolbar - c:\program files (x86)\Windows iLivid Toolbar\uninstall.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-4202733675-3408207310-893904353-1000\Software\SecuROM\License information*]
"datasecu"=hex:29,7c,5d,4b,fd,51,80,ba,39,f6,99,f6,85,8f,84,e8,2b,d9,1b,a5,f4,
12,a5,42,79,0f,73,d8,b1,fa,8d,45,83,6a,15,a4,90,20,08,12,a9,65,4d,da,31,ad,\
"rkeysecu"=hex:08,54,75,71,15,52,4b,c3,e2,e3,f2,fb,f1,cd,2f,9b
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Celkový čas: 2012-04-24 15:51:56 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-04-24 13:51
ComboFix2.txt 2012-04-19 18:34
.
Před spuštěním: Volných bajtů: 479 666 515 968
Po spuštění: Volných bajtů: 479 038 054 400
.
- - End Of File - - 5D5ED738B8611C79C098FE8E63485E85
Re: Pomalé načítání videí na Youtube
Opět mi to píše chybu u každého programu, který chci spustit. Píše to: Pokus použít neplatnou operaci na klíč registru, který je označen pro odstranění.
Program mohu spustit jen přes správce a to mi před použitím CF nedělalo. Doufám, že to lze nějak napravit, jinak opět udělám obnovení systému...
Program mohu spustit jen přes správce a to mi před použitím CF nedělalo. Doufám, že to lze nějak napravit, jinak opět udělám obnovení systému...
- stell
- VIP in memoriam

- Příspěvky: 5175
- Registrován: 09 Pro 2007 09:27
- Místo/Bydliště: SK-REVUCA
- Kontaktovat uživatele:
Re: Pomalé načítání videí na Youtube
To je ok, niekedy combofix takto blbne restartuj pocitac do nudzoveho rezimu s pracou v sieti a spust to tam.
Re: Pomalé načítání videí na Youtube
No tak programy v pořádku, ale YT stále pomalé..
- stell
- VIP in memoriam

- Příspěvky: 5175
- Registrován: 09 Pro 2007 09:27
- Místo/Bydliště: SK-REVUCA
- Kontaktovat uživatele:
Re: Pomalé načítání videí na Youtube
Pri tejto akcii je nutné mať ComboFix na ploche.
Vypni>FIREWALL>Antivir>Antispyware>vsetko rezidentne.
Otvor Notepad (Poznámkový blok) a zkopíruj do neho celý tex:
Potom klik na Subor -> Uložiť ako.. .-> Ako je Názov souboru tak do toho riadku napiš:CFScript.txt
Typ súboru tak tam vyberies *]všetky súbory
A ulož ho na plochu> Pozor CFScript.txt>Neotvarat a nemoze byt ani>CFScript.txt.txt A Urobis Toto :

Log combo vloz sem.
potom stlac klaves Winlogo+R
a do okna vloz tento tect
log.txt vloz sem bude na ploche.
Preco nemas combofix na ploche, tak ako je v navode??
Vypni>FIREWALL>Antivir>Antispyware>vsetko rezidentne.
Otvor Notepad (Poznámkový blok) a zkopíruj do neho celý tex:
Kód: Vybrat vše
KILLALL::
RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
ClearJavaCache::Potom klik na Subor -> Uložiť ako.. .-> Ako je Názov souboru tak do toho riadku napiš:CFScript.txt
Typ súboru tak tam vyberies *]všetky súbory
A ulož ho na plochu> Pozor CFScript.txt>Neotvarat a nemoze byt ani>CFScript.txt.txt A Urobis Toto :

Log combo vloz sem.
potom stlac klaves Winlogo+R
a do okna vloz tento tect
Kód: Vybrat vše
cmd /c regedit /e "%userprofile%\plocha\log.txt" "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32"Preco nemas combofix na ploche, tak ako je v navode??
Re: Pomalé načítání videí na Youtube
ComboFix 12-04-24.02 - OEM 24.04.2012 19:52:26.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4094.2592 [GMT 2:00]
Spuštěný z: c:\users\OEM\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\OEM\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\OEM\AppData\Local\Temp\8aefdf3f-82dc-462e-be91-2ca1c43911cf\CliSecureRT.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-03-24 do 2012-04-24 )))))))))))))))))))))))))))))))
.
.
2012-04-24 17:58 . 2012-04-24 17:58 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-04-24 12:13 . 2012-04-24 12:13 -------- d-----w- C:\_OTL
2012-04-22 11:44 . 2012-04-22 11:44 418464 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-04-22 11:44 . 2012-04-22 11:44 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-04-20 13:00 . 2012-04-20 13:00 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-04-19 22:01 . 2009-04-06 07:08 5174 ----a-w- c:\windows\SysWow64\nppt9x.vxd
2012-04-19 22:01 . 2009-04-06 07:08 4682 ----a-w- c:\windows\SysWow64\npptNT2.sys
2012-04-19 19:33 . 2012-04-19 19:56 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-04-18 10:45 . 2012-04-18 10:45 -------- d-----w- c:\users\OEM\AppData\Roaming\Malwarebytes
2012-04-18 10:45 . 2012-04-04 13:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-04-18 10:40 . 2012-04-18 10:45 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-04-18 10:40 . 2012-04-18 10:40 -------- d-----w- c:\programdata\Malwarebytes
2012-04-18 10:17 . 2012-04-18 10:17 -------- d-----w- C:\rsit
2012-04-18 10:17 . 2012-04-18 10:17 -------- d-----w- c:\program files\trend micro
2012-04-18 09:40 . 2012-04-18 09:40 -------- d--h--w- c:\programdata\Common Files
2012-04-15 10:32 . 2012-04-15 10:32 -------- d-----w- c:\users\OEM\AppData\Local\Native Instruments
2012-04-14 15:38 . 2012-04-14 15:38 -------- dc-h--w- c:\programdata\{13C5090D-8DAD-437E-B069-232C287DA432}
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\program files\Common Files\Native Instruments
2012-04-14 15:35 . 2012-04-14 15:35 -------- dc-h--w- c:\programdata\{C78336EC-F2EB-4640-99A4-DFE96581B90B}
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\program files\Native Instruments
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\programdata\Native Instruments
2012-04-14 15:30 . 2012-04-14 15:32 -------- d-----w- C:\Games things
2012-04-12 22:45 . 2012-03-06 06:53 5559152 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-04-12 22:45 . 2012-03-06 05:59 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-04-12 22:45 . 2012-03-06 05:59 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-04-12 22:43 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-04-12 22:43 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-04-12 22:43 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-04-12 22:42 . 2012-03-01 05:37 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-04-12 22:42 . 2012-03-01 06:38 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-04-12 22:42 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-04-12 22:42 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-04-12 19:01 . 2012-04-12 19:01 -------- d-----w- c:\users\OEM\AppData\Local\Facebook
2012-04-12 18:25 . 2012-02-28 06:34 1013248 ----a-w- c:\program files\Internet Explorer\iedvtool.dll
2012-04-12 18:25 . 2012-02-28 05:38 981504 ----a-w- c:\windows\SysWow64\wininet.dll
2012-04-12 18:25 . 2012-02-28 05:34 860672 ----a-w- c:\program files (x86)\Internet Explorer\iedvtool.dll
2012-04-12 12:19 . 2012-04-12 12:30 -------- d-----w- C:\Škola
2012-04-07 12:06 . 2012-04-07 12:06 1 ----a-w- c:\windows\SysWow64\SI.bin
2012-04-07 12:06 . 2001-09-05 04:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2012-04-07 12:06 . 2001-09-05 04:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll
2012-04-07 12:06 . 2001-09-05 04:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2012-04-07 12:06 . 2001-09-05 04:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-24 11:57 . 2011-04-20 17:46 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-04-24 11:57 . 2011-04-20 17:45 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2012-04-13 08:46 . 2012-04-24 10:05 8917360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A780E873-BC92-4B1D-80BE-278A8F84695B}\mpengine.dll
2012-03-08 18:03 . 2012-03-08 17:29 525544 ----a-w- c:\windows\system32\deployJava1.dll
2012-03-06 23:15 . 2012-03-02 15:06 41184 ----a-w- c:\windows\avastSS.scr
2012-03-06 23:15 . 2012-03-02 15:06 201352 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-03-06 23:15 . 2011-04-15 16:57 258520 ----a-w- c:\windows\system32\aswBoot.exe
2012-03-06 23:04 . 2012-03-02 15:06 819032 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-03-06 23:04 . 2012-03-02 15:07 337240 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-03-06 23:02 . 2012-03-02 15:06 53080 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-03-06 23:01 . 2012-03-02 15:06 59224 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-03-06 23:01 . 2012-03-02 15:06 69976 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-03-06 23:01 . 2012-03-02 15:07 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-03-06 19:51 . 2011-04-15 18:22 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-03-02 14:59 . 2011-04-15 13:32 25640 ----a-w- c:\windows\gdrv.sys
2012-02-29 19:21 . 2012-02-29 19:21 42392 ----a-w- c:\windows\SysWow64\xfcodec.dll
2012-02-29 19:21 . 2012-02-29 19:21 28056 ----a-w- c:\windows\system32\xfcodec64.dll
2012-02-23 08:18 . 2010-11-21 03:27 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-02-20 21:53 . 2012-02-20 21:53 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-02-20 21:53 . 2012-02-20 21:53 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2012-02-18 13:03 . 2011-04-20 17:45 75064 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2012-02-18 10:53 . 2011-04-20 17:46 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2012-02-17 06:38 . 2012-03-14 14:17 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-02-17 05:34 . 2012-03-14 14:17 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-02-17 04:58 . 2012-03-14 14:17 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-02-17 04:57 . 2012-03-14 14:17 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-02-11 15:33 . 2012-02-11 15:33 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2012-02-11 15:33 . 2012-02-11 15:33 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2012-02-11 15:33 . 2012-02-11 15:33 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-02-11 15:33 . 2012-02-11 15:32 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-02-10 06:36 . 2012-03-14 14:17 1544192 ----a-w- c:\windows\system32\DWrite.dll
2012-02-10 05:38 . 2012-03-14 14:17 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-02-07 09:02 . 2012-02-07 09:02 1070352 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
2012-02-03 04:34 . 2012-03-14 14:17 3145728 ----a-w- c:\windows\system32\win32k.sys
.
.
((((((((((((((((((((((((((((( SnapShot@2012-04-24_13.49.05 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-07-14 04:54 . 2012-04-24 13:35 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-04-24 17:59 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2012-04-24 13:35 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-04-24 17:59 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-11-21 03:09 . 2012-04-24 17:47 63352 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-04-24 17:47 36948 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-04-15 13:20 . 2012-04-24 17:47 18876 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-4202733675-3408207310-893904353-1000_UserData.bin
- 2011-04-15 16:52 . 2012-04-24 13:37 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-04-15 16:52 . 2012-04-24 17:47 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-04-15 16:52 . 2012-04-24 13:37 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2011-04-15 16:52 . 2012-04-24 17:47 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-04-15 16:52 . 2012-04-24 13:37 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-04-15 16:52 . 2012-04-24 17:47 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-04-15 16:52 . 2012-04-24 13:37 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-04-15 16:52 . 2012-04-24 17:46 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-04-15 16:52 . 2012-04-24 13:37 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-04-15 16:52 . 2012-04-24 17:46 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-04-24 17:59 . 2012-04-24 17:59 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-04-24 13:34 . 2012-04-24 13:34 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-04-24 17:59 . 2012-04-24 17:59 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-04-24 13:34 . 2012-04-24 13:34 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-07-14 04:54 . 2012-04-24 17:59 229376 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-04-24 13:35 229376 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 05:01 . 2012-04-24 13:34 478052 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2012-04-24 17:58 478052 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-05-03 17:24 . 2012-04-24 17:58 888208 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-4202733675-3408207310-893904353-1000-8192.dat
- 2011-05-03 17:24 . 2012-04-24 13:34 888208 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-4202733675-3408207310-893904353-1000-8192.dat
- 2011-04-15 13:41 . 2012-04-24 13:34 3445472 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2011-04-15 13:41 . 2012-04-24 17:58 3445472 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Infium"="c:\qip infium jadrispack\qip.exe" [2011-03-22 6841728]
"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2011-07-02 3077528]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"KiesHelper"="c:\program files (x86)\Samsung\Kies\KiesHelper.exe" [2011-11-29 935312]
"KiesPDLR"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-11-29 21392]
"RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-01-19 43632]
"NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2009-11-20 106496]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-08 336384]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2011-11-29 3508624]
"SweetIM"="c:\program files (x86)\SweetIM\Messenger\SweetIM.exe" [2011-08-01 114992]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-06 4241512]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
.
c:\users\OEM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MagicDisc.lnk - c:\program files (x86)\MagicDisc\MagicDisc.exe [2012-1-31 576000]
Xfire.lnk - c:\program files (x86)\Xfire\Xfire.exe [2012-2-29 3537304]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
GamePark klient 2.lnk - c:\program files\GamePark2\gpcl.exe [2012-1-7 442880]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 136176]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-22 253088]
R3 AODDriver4.0;AODDriver4.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 136176]
R3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\DRIVERS\s1018bus.sys [x]
R3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1018mdfl.sys [x]
R3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1018mdm.sys [x]
R3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1018mgmt.sys [x]
R3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1018nd5.sys [x]
R3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1018obex.sys [x]
R3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1018unic.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [x]
R3 ssudobex;SAMSUNG Mobile USB OBEX Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudobex.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe [2012-02-09 735080]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-03-08 365568]
S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
S2 JMB36X;JMB36X;c:\windows\SysWOW64\XSrvSetup.exe [2010-01-19 72304]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
S2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2;c:\program files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [2011-12-20 341800]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys [x]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-04-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-22 11:44]
.
2012-04-23 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000Core.job
- c:\users\OEM\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-04-12 19:01]
.
2012-04-24 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000UA.job
- c:\users\OEM\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-04-12 19:01]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 14:31]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 14:31]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000Core.job
- c:\users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-14 23:06]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000UA.job
- c:\users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-14 23:06]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-06 23:15 135408 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-06 10144288]
"Launch LGDCore"="c:\program files\Common Files\Logitech\G-series Software\LGDCore.exe" [2006-07-23 1783296]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
mLocal Page =
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\OEM\AppData\Roaming\Mozilla\Firefox\Profiles\sax073f2.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-4202733675-3408207310-893904353-1000\Software\SecuROM\License information*]
"datasecu"=hex:29,7c,5d,4b,fd,51,80,ba,39,f6,99,f6,85,8f,84,e8,2b,d9,1b,a5,f4,
12,a5,42,79,0f,73,d8,b1,fa,8d,45,83,6a,15,a4,90,20,08,12,a9,65,4d,da,31,ad,\
"rkeysecu"=hex:08,54,75,71,15,52,4b,c3,e2,e3,f2,fb,f1,cd,2f,9b
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Celkový čas: 2012-04-24 20:03:43 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-04-24 18:03
ComboFix2.txt 2012-04-24 13:51
ComboFix3.txt 2012-04-19 18:34
.
Před spuštěním: Volných bajtů: 478 841 044 992
Po spuštění: Volných bajtů: 478 523 502 592
.
- - End Of File - - BFF81709CB73C240AEF543EBC184F63D
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4094.2592 [GMT 2:00]
Spuštěný z: c:\users\OEM\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\OEM\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\OEM\AppData\Local\Temp\8aefdf3f-82dc-462e-be91-2ca1c43911cf\CliSecureRT.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-03-24 do 2012-04-24 )))))))))))))))))))))))))))))))
.
.
2012-04-24 17:58 . 2012-04-24 17:58 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-04-24 12:13 . 2012-04-24 12:13 -------- d-----w- C:\_OTL
2012-04-22 11:44 . 2012-04-22 11:44 418464 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-04-22 11:44 . 2012-04-22 11:44 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-04-20 13:00 . 2012-04-20 13:00 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-04-19 22:01 . 2009-04-06 07:08 5174 ----a-w- c:\windows\SysWow64\nppt9x.vxd
2012-04-19 22:01 . 2009-04-06 07:08 4682 ----a-w- c:\windows\SysWow64\npptNT2.sys
2012-04-19 19:33 . 2012-04-19 19:56 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-04-18 10:45 . 2012-04-18 10:45 -------- d-----w- c:\users\OEM\AppData\Roaming\Malwarebytes
2012-04-18 10:45 . 2012-04-04 13:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-04-18 10:40 . 2012-04-18 10:45 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-04-18 10:40 . 2012-04-18 10:40 -------- d-----w- c:\programdata\Malwarebytes
2012-04-18 10:17 . 2012-04-18 10:17 -------- d-----w- C:\rsit
2012-04-18 10:17 . 2012-04-18 10:17 -------- d-----w- c:\program files\trend micro
2012-04-18 09:40 . 2012-04-18 09:40 -------- d--h--w- c:\programdata\Common Files
2012-04-15 10:32 . 2012-04-15 10:32 -------- d-----w- c:\users\OEM\AppData\Local\Native Instruments
2012-04-14 15:38 . 2012-04-14 15:38 -------- dc-h--w- c:\programdata\{13C5090D-8DAD-437E-B069-232C287DA432}
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\program files\Common Files\Native Instruments
2012-04-14 15:35 . 2012-04-14 15:35 -------- dc-h--w- c:\programdata\{C78336EC-F2EB-4640-99A4-DFE96581B90B}
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\program files\Native Instruments
2012-04-14 15:35 . 2012-04-14 15:35 -------- d-----w- c:\programdata\Native Instruments
2012-04-14 15:30 . 2012-04-14 15:32 -------- d-----w- C:\Games things
2012-04-12 22:45 . 2012-03-06 06:53 5559152 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-04-12 22:45 . 2012-03-06 05:59 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-04-12 22:45 . 2012-03-06 05:59 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-04-12 22:43 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-04-12 22:43 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-04-12 22:43 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-04-12 22:42 . 2012-03-01 05:37 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-04-12 22:42 . 2012-03-01 06:38 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-04-12 22:42 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-04-12 22:42 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-04-12 19:01 . 2012-04-12 19:01 -------- d-----w- c:\users\OEM\AppData\Local\Facebook
2012-04-12 18:25 . 2012-02-28 06:34 1013248 ----a-w- c:\program files\Internet Explorer\iedvtool.dll
2012-04-12 18:25 . 2012-02-28 05:38 981504 ----a-w- c:\windows\SysWow64\wininet.dll
2012-04-12 18:25 . 2012-02-28 05:34 860672 ----a-w- c:\program files (x86)\Internet Explorer\iedvtool.dll
2012-04-12 12:19 . 2012-04-12 12:30 -------- d-----w- C:\Škola
2012-04-07 12:06 . 2012-04-07 12:06 1 ----a-w- c:\windows\SysWow64\SI.bin
2012-04-07 12:06 . 2001-09-05 04:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2012-04-07 12:06 . 2001-09-05 04:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll
2012-04-07 12:06 . 2001-09-05 04:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2012-04-07 12:06 . 2001-09-05 04:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-24 11:57 . 2011-04-20 17:46 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-04-24 11:57 . 2011-04-20 17:45 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2012-04-13 08:46 . 2012-04-24 10:05 8917360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A780E873-BC92-4B1D-80BE-278A8F84695B}\mpengine.dll
2012-03-08 18:03 . 2012-03-08 17:29 525544 ----a-w- c:\windows\system32\deployJava1.dll
2012-03-06 23:15 . 2012-03-02 15:06 41184 ----a-w- c:\windows\avastSS.scr
2012-03-06 23:15 . 2012-03-02 15:06 201352 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-03-06 23:15 . 2011-04-15 16:57 258520 ----a-w- c:\windows\system32\aswBoot.exe
2012-03-06 23:04 . 2012-03-02 15:06 819032 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-03-06 23:04 . 2012-03-02 15:07 337240 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-03-06 23:02 . 2012-03-02 15:06 53080 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-03-06 23:01 . 2012-03-02 15:06 59224 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-03-06 23:01 . 2012-03-02 15:06 69976 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-03-06 23:01 . 2012-03-02 15:07 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-03-06 19:51 . 2011-04-15 18:22 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-03-02 14:59 . 2011-04-15 13:32 25640 ----a-w- c:\windows\gdrv.sys
2012-02-29 19:21 . 2012-02-29 19:21 42392 ----a-w- c:\windows\SysWow64\xfcodec.dll
2012-02-29 19:21 . 2012-02-29 19:21 28056 ----a-w- c:\windows\system32\xfcodec64.dll
2012-02-23 08:18 . 2010-11-21 03:27 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-02-20 21:53 . 2012-02-20 21:53 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-02-20 21:53 . 2012-02-20 21:53 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2012-02-18 13:03 . 2011-04-20 17:45 75064 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2012-02-18 10:53 . 2011-04-20 17:46 214520 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2012-02-17 06:38 . 2012-03-14 14:17 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-02-17 05:34 . 2012-03-14 14:17 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-02-17 04:58 . 2012-03-14 14:17 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-02-17 04:57 . 2012-03-14 14:17 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-02-11 15:33 . 2012-02-11 15:33 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2012-02-11 15:33 . 2012-02-11 15:33 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2012-02-11 15:33 . 2012-02-11 15:33 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-02-11 15:33 . 2012-02-11 15:32 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-02-10 06:36 . 2012-03-14 14:17 1544192 ----a-w- c:\windows\system32\DWrite.dll
2012-02-10 05:38 . 2012-03-14 14:17 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-02-07 09:02 . 2012-02-07 09:02 1070352 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
2012-02-03 04:34 . 2012-03-14 14:17 3145728 ----a-w- c:\windows\system32\win32k.sys
.
.
((((((((((((((((((((((((((((( SnapShot@2012-04-24_13.49.05 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-07-14 04:54 . 2012-04-24 13:35 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-04-24 17:59 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2012-04-24 13:35 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-04-24 17:59 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-11-21 03:09 . 2012-04-24 17:47 63352 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-04-24 17:47 36948 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-04-15 13:20 . 2012-04-24 17:47 18876 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-4202733675-3408207310-893904353-1000_UserData.bin
- 2011-04-15 16:52 . 2012-04-24 13:37 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-04-15 16:52 . 2012-04-24 17:47 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-04-15 16:52 . 2012-04-24 13:37 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2011-04-15 16:52 . 2012-04-24 17:47 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-04-15 16:52 . 2012-04-24 13:37 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-04-15 16:52 . 2012-04-24 17:47 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-04-15 16:52 . 2012-04-24 13:37 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-04-15 16:52 . 2012-04-24 17:46 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-04-15 16:52 . 2012-04-24 13:37 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-04-15 16:52 . 2012-04-24 17:46 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-04-24 17:59 . 2012-04-24 17:59 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-04-24 13:34 . 2012-04-24 13:34 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-04-24 17:59 . 2012-04-24 17:59 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-04-24 13:34 . 2012-04-24 13:34 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-07-14 04:54 . 2012-04-24 17:59 229376 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-04-24 13:35 229376 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 05:01 . 2012-04-24 13:34 478052 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2012-04-24 17:58 478052 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-05-03 17:24 . 2012-04-24 17:58 888208 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-4202733675-3408207310-893904353-1000-8192.dat
- 2011-05-03 17:24 . 2012-04-24 13:34 888208 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-4202733675-3408207310-893904353-1000-8192.dat
- 2011-04-15 13:41 . 2012-04-24 13:34 3445472 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2011-04-15 13:41 . 2012-04-24 17:58 3445472 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Infium"="c:\qip infium jadrispack\qip.exe" [2011-03-22 6841728]
"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2011-07-02 3077528]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"KiesHelper"="c:\program files (x86)\Samsung\Kies\KiesHelper.exe" [2011-11-29 935312]
"KiesPDLR"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-11-29 21392]
"RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-01-19 43632]
"NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2009-11-20 106496]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-08 336384]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2011-11-29 3508624]
"SweetIM"="c:\program files (x86)\SweetIM\Messenger\SweetIM.exe" [2011-08-01 114992]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-06 4241512]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
.
c:\users\OEM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MagicDisc.lnk - c:\program files (x86)\MagicDisc\MagicDisc.exe [2012-1-31 576000]
Xfire.lnk - c:\program files (x86)\Xfire\Xfire.exe [2012-2-29 3537304]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
GamePark klient 2.lnk - c:\program files\GamePark2\gpcl.exe [2012-1-7 442880]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 136176]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-22 253088]
R3 AODDriver4.0;AODDriver4.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 136176]
R3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\DRIVERS\s1018bus.sys [x]
R3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1018mdfl.sys [x]
R3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1018mdm.sys [x]
R3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1018mgmt.sys [x]
R3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1018nd5.sys [x]
R3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1018obex.sys [x]
R3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1018unic.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [x]
R3 ssudobex;SAMSUNG Mobile USB OBEX Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudobex.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe [2012-02-09 735080]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-03-08 365568]
S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
S2 JMB36X;JMB36X;c:\windows\SysWOW64\XSrvSetup.exe [2010-01-19 72304]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
S2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2;c:\program files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [2011-12-20 341800]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys [x]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-04-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-22 11:44]
.
2012-04-23 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000Core.job
- c:\users\OEM\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-04-12 19:01]
.
2012-04-24 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000UA.job
- c:\users\OEM\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-04-12 19:01]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 14:31]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-29 14:31]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000Core.job
- c:\users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-14 23:06]
.
2012-04-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4202733675-3408207310-893904353-1000UA.job
- c:\users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-14 23:06]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-06 23:15 135408 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-06 10144288]
"Launch LGDCore"="c:\program files\Common Files\Logitech\G-series Software\LGDCore.exe" [2006-07-23 1783296]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
mLocal Page =
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\OEM\AppData\Roaming\Mozilla\Firefox\Profiles\sax073f2.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-4202733675-3408207310-893904353-1000\Software\SecuROM\License information*]
"datasecu"=hex:29,7c,5d,4b,fd,51,80,ba,39,f6,99,f6,85,8f,84,e8,2b,d9,1b,a5,f4,
12,a5,42,79,0f,73,d8,b1,fa,8d,45,83,6a,15,a4,90,20,08,12,a9,65,4d,da,31,ad,\
"rkeysecu"=hex:08,54,75,71,15,52,4b,c3,e2,e3,f2,fb,f1,cd,2f,9b
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Celkový čas: 2012-04-24 20:03:43 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-04-24 18:03
ComboFix2.txt 2012-04-24 13:51
ComboFix3.txt 2012-04-19 18:34
.
Před spuštěním: Volných bajtů: 478 841 044 992
Po spuštění: Volných bajtů: 478 523 502 592
.
- - End Of File - - BFF81709CB73C240AEF543EBC184F63D


Přispějete na provoz fóra?