Sirefef p, Sirefef ab

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Roman91
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 13 Črc 2012 02:42

Sirefef p, Sirefef ab

#1 Příspěvek od Roman91 »

ahoj mam velky problem ted jsem v nouzovem rezimu protoze mi normal nejde vzdy po spusteni mi najede windows a po chvili mi skoci hlaska ze za 1min se restartuje z duvodu kriticke chyby. Mam microsoft esential security a ten mi tu havet najde ale nestihnu ji odebrat. V nouzovem rezimu sem pustil antivir a odstranil jsem to, co mi to naslo, uz jsem myslel ze mam klid ,ale po restartu mi to naslo zas to co predtim a zas restart tak porad dokola vzdy se tam obejvi i kdyz ho v nouzovem rezimu smazu.Pokazdy je to Serifef p, Serifef ab. Problem by mel byt tady aspon podle antivira:C:\Windows\assembly\GAC_32\Desktop.ini

Sem uz z toho v haji vzdy jsem si s virem poradil ale toto uz je na me moc.Nejhorsi je ze jsem ted v kanade kde nemam zadne DVD s windows ani s nicim jinym a nechci formatovat :(

prosim pomoc

malem jsem zapomel

Logfile of random's system information tool 1.09 (written by random/random)
Run by Roman at 2012-07-12 19:42:58
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 74 GB (17%) free of 432 GB
Total RAM: 8136 MB (85% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:43:01, on 12.7.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16447)
Boot mode: Safe mode with network support

Running processes:
C:\Program Files\trend micro\Roman.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
O4 - HKLM\..\Run: [UpdatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [ParetoLogic Anti-Virus PLUS] "C:\Program Files (x86)\ParetoLogic\PLAV\Pareto_AV.exe" -NM -hidesplash
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: KN StrongDC.lnk = C:\Program Files\KN_StrongDC\StrongDC.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: GamePark klient 2.lnk = C:\Program Files\GamePark2\gpcl.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://www.samsungsetup.com
O16 - DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} (SysInfo Class) - http://content.systemrequirementslab.co ... 4.26.0.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} (Battlefield Play4Free Updater) - https://battlefield.play4free.com/stati ... 0.66.2.cab
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} (SysInfo Class) - http://content.systemrequirementslab.co ... 4.26.0.cab
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - c:\PROGRA~2\mcafee\SITEAD~1\McSACore.exe
O23 - Service: mental ray 3.8 Satellite for Autodesk 3ds Max 2011 64-bit 64-bit (mi-raysat_3dsmax2011_64) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NitroPDFDriverCreatorReadSpool2 (NitroDriverReadSpool2) - Nitro PDF Software - C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
O23 - Service: NLS Service (nlsX86cc) - Nalpeiron Ltd. - C:\windows\SysWOW64\NLSSRV32.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PLAVService - ParetoLogic Inc. - C:\Program Files (x86)\Common Files\PLAV\PLAVservice.exe
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14321 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
winlogon.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\Explorer.EXE
ctfmon.exe
C:\windows\system32\wbem\wmiprvse.exe
"C:\Users\Roman\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\ParetoLogic Anti-Virus PLUS.job
C:\windows\tasks\ParetoLogic Anti-Virus PLUS_dbsummary.job
C:\windows\tasks\ParetoLogic Registration3.job
C:\windows\tasks\ParetoLogic Update Version3.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll [2012-02-17 348592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]
Babylon toolbar helper - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll [2011-08-14 270960]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-05-05 329504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll [2012-02-17 281600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-05-05 59168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll [2012-02-17 348592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll [2012-02-17 281600]
{98889811-442D-49dd-99D7-DC866BE87DBC} - Babylon Toolbar - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll [2011-08-14 237680]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2011-03-29 167960]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2011-03-29 391704]
"Persistence"=C:\windows\system32\igfxpers.exe [2011-03-29 418840]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-03-28 11786344]
"IntelWireless"=C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2011-01-05 1933584]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-03-20 2712360]
"OnekeyStudio"=C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [2011-06-21 789920]
"Lenovo EE Boot Optimizer"=C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [2011-06-21 206176]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2011-06-21 9753024]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2011-06-21 5908928]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 1271168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-01-12 283160]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2010-07-26 222504]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2011-01-28 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [2011-01-28 228448]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"AdobeCS4ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-13 611712]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2011-07-28 1259376]
"ParetoLogic Anti-Virus PLUS"=C:\Program Files (x86)\ParetoLogic\PLAV\Pareto_AV.exe [2012-02-07 4550960]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
GamePark klient 2.lnk - C:\Program Files\GamePark2\gpcl.exe

C:\Users\Roman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
KN StrongDC.lnk - C:\Program Files\KN_StrongDC\StrongDC.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2011-03-25 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"msacm.ac3filter"=ac3filter64.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2012-07-12 19:37:20 ----D---- C:\Program Files\trend micro
2012-07-12 19:37:19 ----D---- C:\rsit
2012-07-12 18:24:56 ----A---- C:\windows\system32\drivers\ximbaolh.sys
2012-07-12 18:21:58 ----D---- C:\ProgramData\PLAV
2012-07-12 18:21:19 ----D---- C:\ProgramData\ParetoLogic Anti-Virus PLUS
2012-07-12 18:17:40 ----D---- C:\ProgramData\ParetoLogic
2012-07-12 18:17:21 ----D---- C:\Program Files (x86)\ParetoLogic
2012-07-12 16:59:48 ----A---- C:\windows\ntbtlog.txt
2012-07-12 16:35:03 ----D---- C:\Program Files (x86)\Microsoft Security Client
2012-07-12 16:35:01 ----D---- C:\Program Files\Microsoft Security Client
2012-07-11 16:58:56 ----SHD---- C:\windows\SYSWOW64\%APPDATA%
2012-07-11 03:10:25 ----A---- C:\windows\system32\win32k.sys
2012-07-11 03:02:51 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2012-07-11 03:02:51 ----A---- C:\windows\system32\mshtmled.dll
2012-07-11 03:02:50 ----A---- C:\windows\SYSWOW64\urlmon.dll
2012-07-11 03:02:50 ----A---- C:\windows\SYSWOW64\url.dll
2012-07-11 03:02:50 ----A---- C:\windows\system32\urlmon.dll
2012-07-11 03:02:50 ----A---- C:\windows\system32\url.dll
2012-07-11 03:02:50 ----A---- C:\windows\system32\iertutil.dll
2012-07-11 03:02:49 ----A---- C:\windows\SYSWOW64\ieui.dll
2012-07-11 03:02:49 ----A---- C:\windows\SYSWOW64\iertutil.dll
2012-07-11 03:02:49 ----A---- C:\windows\system32\ieui.dll
2012-07-11 03:02:48 ----A---- C:\windows\SYSWOW64\wininet.dll
2012-07-11 03:02:48 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2012-07-11 03:02:48 ----A---- C:\windows\system32\ieUnatt.exe
2012-07-11 03:02:47 ----A---- C:\windows\SYSWOW64\jscript9.dll
2012-07-11 03:02:47 ----A---- C:\windows\system32\wininet.dll
2012-07-11 03:02:47 ----A---- C:\windows\system32\jsproxy.dll
2012-07-11 03:02:47 ----A---- C:\windows\system32\jscript9.dll
2012-07-11 03:02:46 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2012-07-11 03:02:46 ----A---- C:\windows\SYSWOW64\jscript.dll
2012-07-11 03:02:46 ----A---- C:\windows\system32\jscript.dll
2012-07-11 03:02:45 ----A---- C:\windows\SYSWOW64\mshtml.dll
2012-07-11 03:02:44 ----A---- C:\windows\system32\mshtml.dll
2012-07-11 03:02:43 ----A---- C:\windows\system32\ieframe.dll
2012-07-11 03:02:42 ----A---- C:\windows\SYSWOW64\ieframe.dll
2012-07-10 21:48:00 ----A---- C:\windows\SYSWOW64\msxml6.dll
2012-07-10 21:48:00 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2012-07-10 21:48:00 ----A---- C:\windows\SYSWOW64\msxml3.dll
2012-07-10 21:48:00 ----A---- C:\windows\system32\msxml6.dll
2012-07-10 21:48:00 ----A---- C:\windows\system32\msxml3r.dll
2012-07-10 21:48:00 ----A---- C:\windows\system32\msxml3.dll
2012-07-10 21:47:59 ----A---- C:\windows\SYSWOW64\shell32.dll
2012-07-10 21:47:59 ----A---- C:\windows\system32\shell32.dll
2012-07-10 21:47:58 ----A---- C:\windows\SYSWOW64\schannel.dll
2012-07-10 21:47:58 ----A---- C:\windows\SYSWOW64\secur32.dll
2012-07-10 21:47:58 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2012-07-10 21:47:58 ----A---- C:\windows\system32\schannel.dll
2012-07-10 21:47:58 ----A---- C:\windows\system32\ncrypt.dll
2012-07-10 21:47:58 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2012-07-10 21:47:58 ----A---- C:\windows\system32\drivers\ksecdd.sys
2012-07-10 21:47:58 ----A---- C:\windows\system32\drivers\cng.sys
2012-07-10 21:47:57 ----A---- C:\windows\SYSWOW64\sspicli.dll
2012-07-10 21:47:02 ----A---- C:\windows\SYSWOW64\cdosys.dll
2012-07-10 21:47:01 ----A---- C:\windows\system32\cdosys.dll
2012-07-02 14:43:32 ----D---- C:\Users\Roman\AppData\Roaming\Auslogics
2012-07-02 14:43:27 ----D---- C:\Program Files (x86)\Auslogics
2012-06-22 19:48:31 ----D---- C:\Users\Roman\AppData\Roaming\Atari
2012-06-22 19:35:15 ----A---- C:\windows\patchw32.dll
2012-06-13 16:25:25 ----A---- C:\windows\system32\rdrmemptylst.exe
2012-06-13 16:25:25 ----A---- C:\windows\system32\rdpwsx.dll
2012-06-13 16:25:25 ----A---- C:\windows\system32\rdpcorekmts.dll
2012-06-13 16:25:15 ----A---- C:\windows\system32\profsvc.dll
2012-06-13 16:25:14 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2012-06-13 16:25:14 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2012-06-13 16:25:14 ----A---- C:\windows\system32\ntoskrnl.exe
2012-06-13 16:24:57 ----A---- C:\windows\SYSWOW64\msi.dll
2012-06-13 16:24:57 ----A---- C:\windows\system32\msi.dll
2012-06-13 16:24:57 ----A---- C:\windows\system32\drivers\rdpwd.sys
2012-06-13 16:24:54 ----A---- C:\windows\SYSWOW64\crypt32.dll
2012-06-13 16:24:54 ----A---- C:\windows\system32\crypt32.dll
2012-06-13 16:24:53 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2012-06-13 16:24:53 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2012-06-13 16:24:53 ----A---- C:\windows\system32\cryptsvc.dll
2012-06-13 16:24:53 ----A---- C:\windows\system32\cryptnet.dll

======List of files/folders modified in the last 1 month======

2012-07-12 19:37:20 ----RD---- C:\Program Files
2012-07-12 19:37:15 ----D---- C:\windows\Temp
2012-07-12 19:21:41 ----D---- C:\windows\system32\catroot2
2012-07-12 19:20:34 ----D---- C:\windows\system32\config
2012-07-12 19:19:31 ----A---- C:\windows\system32\services.exe
2012-07-12 19:19:30 ----D---- C:\windows\System32
2012-07-12 19:17:27 ----D---- C:\windows\system32\drivers
2012-07-12 18:27:41 ----D---- C:\windows\inf
2012-07-12 18:27:41 ----A---- C:\windows\system32\PerfStringBackup.INI
2012-07-12 18:21:58 ----HD---- C:\ProgramData
2012-07-12 18:21:56 ----D---- C:\windows\Tasks
2012-07-12 18:21:56 ----D---- C:\windows\system32\Tasks
2012-07-12 18:21:30 ----D---- C:\windows\system32\catroot
2012-07-12 18:17:40 ----D---- C:\Program Files (x86)\Common Files
2012-07-12 18:17:37 ----D---- C:\windows\system32\DriverStore
2012-07-12 18:17:21 ----RD---- C:\Program Files (x86)
2012-07-12 16:59:48 ----AD---- C:\Windows
2012-07-12 16:35:08 ----SHD---- C:\windows\Installer
2012-07-12 16:35:04 ----D---- C:\windows\SysWOW64
2012-07-12 16:35:04 ----A---- C:\windows\SYSWOW64\PerfStringBackup.INI
2012-07-12 16:31:28 ----SHD---- C:\System Volume Information
2012-07-12 16:23:43 ----A---- C:\windows\SYSWOW64\log.txt
2012-07-12 16:15:24 ----D---- C:\windows\Prefetch
2012-07-11 03:29:31 ----D---- C:\windows\winsxs
2012-07-11 03:27:07 ----D---- C:\windows\SYSWOW64\migration
2012-07-11 03:27:07 ----D---- C:\windows\system32\migration
2012-07-11 03:27:07 ----D---- C:\Program Files\Internet Explorer
2012-07-11 03:27:07 ----D---- C:\Program Files (x86)\Internet Explorer
2012-07-11 03:10:21 ----D---- C:\ProgramData\Microsoft Help
2012-07-11 03:10:01 ----A---- C:\windows\win.ini
2012-07-11 03:04:03 ----D---- C:\windows\debug
2012-07-11 03:04:01 ----A---- C:\windows\system32\MRT.exe
2012-07-11 03:03:54 ----RSD---- C:\windows\assembly
2012-07-10 18:08:06 ----D---- C:\Program Files (x86)\Electronic Arts
2012-07-10 17:39:22 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-07-10 17:39:21 ----D---- C:\ProgramData\Ubisoft
2012-07-10 17:37:41 ----D---- C:\Program Files (x86)\Heroes of Newerth
2012-07-10 17:36:49 ----D---- C:\Program Files (x86)\TI Education
2012-07-10 17:36:47 ----RSD---- C:\windows\Fonts
2012-07-10 17:36:16 ----D---- C:\Program Files (x86)\Sega
2012-07-09 19:54:52 ----A---- C:\windows\SYSWOW64\PnkBstrB.exe
2012-07-04 22:47:25 ----D---- C:\Users\Roman\AppData\Roaming\DivX
2012-07-03 17:26:01 ----D---- C:\Users\Roman\AppData\Roaming\Skype
2012-07-02 14:35:02 ----D---- C:\game
2012-07-02 14:34:54 ----D---- C:\TDU_BonusPack_Install
2012-06-27 17:20:56 ----D---- C:\Users\Roman\AppData\Roaming\DAEMON Tools Lite
2012-06-27 17:20:49 ----D---- C:\Users\Roman\AppData\Roaming\uTorrent
2012-06-27 17:20:48 ----D---- C:\Users\Roman\AppData\Roaming\TS3Client
2012-06-27 17:19:42 ----D---- C:\windows\Logs
2012-06-24 01:18:26 ----D---- C:\Users\Roman\AppData\Roaming\Nitro PDF
2012-06-23 22:16:57 ----D---- C:\ProgramData\TmForever
2012-06-22 19:25:57 ----D---- C:\ProgramData\Media Center Programs
2012-06-22 19:24:05 ----D---- C:\Users\Roman\AppData\Roaming\InstallShield
2012-06-18 19:18:47 ----D---- C:\ProgramData\Autodesk
2012-06-17 13:28:03 ----D---- C:\windows\system32\wdi
2012-06-16 13:22:02 ----D---- C:\windows\rescache
2012-06-14 21:37:19 ----D---- C:\windows\Microsoft.NET
2012-06-14 21:24:37 ----D---- C:\windows\SYSWOW64\cs-CZ
2012-06-14 21:24:36 ----D---- C:\windows\system32\cs-CZ

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 fbfmon;fbfmon; C:\windows\system32\drivers\fbfmon.sys [2011-06-21 57952]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2011-01-12 439320]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2011-06-21 39008]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2012-05-15 28992]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 rxvbus;Rxvbus; C:\windows\system32\DRIVERS\rxvbus.sys [2010-06-01 37312]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-08-26 270912]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\windows\system32\DRIVERS\klim6.sys [2010-08-09 27736]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 59904]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2011-06-21 29792]
R3 DelayMan;ACPI DelayMan Filter Service; C:\windows\system32\DRIVERS\delayman.sys [2011-06-21 20064]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\k57nd60a.sys [2011-03-31 412712]
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\windows\system32\DRIVERS\NETwNs64.sys [2011-01-04 8507392]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2011-03-20 1413168]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 17920]
S0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2012-03-20 203888]
S0 rxvstor;Rxvstor; C:\windows\system32\DRIVERS\rxvstor.sys [2010-02-26 151872]
S1 BPntDrv;BPntDrv; C:\windows\system32\drivers\BPntDrv.sys [2011-06-21 13408]
S1 kl1;kl1; C:\windows\system32\DRIVERS\kl1.sys [2010-08-09 460888]
S1 KLIF;Kaspersky Lab Driver; C:\windows\system32\DRIVERS\klif.sys [2010-05-28 354320]
S1 winioex;winioex; C:\windows\system32\drivers\winioex.sys [2011-06-21 15456]
S2 adfs;adfs; C:\windows\system32\drivers\adfs.sys [2008-06-26 88632]
S2 cpuz135;cpuz135; \??\C:\windows\system32\drivers\cpuz135_x64.sys [2010-12-27 21992]
S2 mbmiodrvr;mbmiodrvr; \??\C:\windows\syswow64\mbmiodrvr.sys [2004-04-10 4608]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-13 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-13 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2011-04-27 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-27 80384]
S3 BTWAMPFL;btwampfl; C:\windows\system32\DRIVERS\btwampfl.sys [2010-12-14 349224]
S3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2010-12-14 106536]
S3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\DRIVERS\btwavdt.sys [2010-12-14 138280]
S3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2010-12-14 39464]
S3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2010-12-14 21416]
S3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-01-28 31088]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2011-03-25 12262336]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2011-03-29 2819560]
S3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
S3 JMCR;JMCR; C:\windows\system32\DRIVERS\jmcr.sys [2010-12-12 174168]
S3 massfilter;Mass Storage Filter Driver; C:\windows\system32\drivers\massfilter.sys [2010-02-22 11776]
S3 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-13 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-13 158720]
S3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 rtsuvc;Lenovo EasyCamera; C:\windows\system32\DRIVERS\rtsuvc.sys [2011-03-23 8199016]
S3 sdbus;sdbus; C:\windows\system32\DRIVERS\sdbus.sys [2010-11-20 109056]
S3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
S3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
S3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
S3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 31232]
S3 wdkmd;Intel WiDi KMD; C:\windows\system32\DRIVERS\WDKMD.sys [2010-11-30 42392]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 12600]
S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2010-12-14 953632]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-01-05 1515792]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-06-21 136176]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-12 13336]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-20 325656]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\McSACore.exe [2012-01-13 103440]
S2 mi-raysat_3dsmax2011_64;mental ray 3.8 Satellite for Autodesk 3ds Max 2011 64-bit 64-bit; C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe [2010-03-09 86016]
S2 NitroDriverReadSpool2;NitroPDFDriverCreatorReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [2011-10-25 341280]
S2 nlsX86cc;NLS Service; C:\windows\SysWOW64\NLSSRV32.EXE [2011-09-24 68928]
S2 NVSvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2012-05-15 889664]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-05-15 1262400]
S2 PnkBstrA;PnkBstrA; C:\windows\syswow64\PnkBstrA.exe [2012-06-06 76888]
S2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-01-05 836880]
S2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
S2 TeamViewer7;TeamViewer 7; C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-03-19 2666880]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-12-14 1431888]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-12-13 1045256]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-06-21 136176]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-01-05 340240]
S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-11-10 774144]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-19 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PLAVService;PLAVService; C:\Program Files (x86)\Common Files\PLAV\PLAVservice.exe [2012-02-07 601008]
S3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2011-08-27 1255736]

-----------------EOF-----------------

Roman91
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 13 Črc 2012 02:42

Re: Sirefef p, Sirefef ab

#2 Příspěvek od Roman91 »

No tak ted uz to nechapu vubec najednou po restartu je vse v poradku delal jsem test antivirem asi 5x a nic to nenaslo, to je nejaky divny ,ale porad mam pocit ze je pocitac nejaky pomalejsi a hlavne nejde zmenit nastaveni firewallu ani zapnout

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15925
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Sirefef p, Sirefef ab

#3 Příspěvek od JaRon »

ahoj,
vloz logy TDSSKiller + MBAM
,,, a bude jasnejsie :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Roman91
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 13 Črc 2012 02:42

Re: Sirefef p, Sirefef ab

#4 Příspěvek od Roman91 »

tady je vypis z TDsskiller nikdy jsem s nim nedelal tak doufam ze to je ten spravny vypis

17:28:04.0166 6092 TDSS rootkit removing tool 2.7.46.0 Jul 16 2012 22:10:11
17:28:04.0884 6092 ============================================================
17:28:04.0884 6092 Current date / time: 2012/07/18 17:28:04.0884
17:28:04.0884 6092 SystemInfo:
17:28:04.0884 6092
17:28:04.0884 6092 OS Version: 6.1.7601 ServicePack: 1.0
17:28:04.0884 6092 Product type: Workstation
17:28:04.0884 6092 ComputerName: ROMAN
17:28:04.0884 6092 UserName: Roman
17:28:04.0884 6092 Windows directory: C:\windows
17:28:04.0884 6092 System windows directory: C:\windows
17:28:04.0884 6092 Running under WOW64
17:28:04.0884 6092 Processor architecture: Intel x64
17:28:04.0884 6092 Number of processors: 4
17:28:04.0884 6092 Page size: 0x1000
17:28:04.0884 6092 Boot type: Normal boot
17:28:04.0884 6092 ============================================================
17:28:05.0570 6092 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
17:28:05.0570 6092 ============================================================
17:28:05.0570 6092 \Device\Harddisk0\DR0:
17:28:05.0570 6092 MBR partitions:
17:28:05.0570 6092 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x64000
17:28:05.0570 6092 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x64800, BlocksNum 0x34BA1000
17:28:05.0601 6092 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x34C06000, BlocksNum 0x39FD800
17:28:05.0601 6092 ============================================================
17:28:05.0679 6092 C: <-> \Device\Harddisk0\DR0\Partition1
17:28:05.0757 6092 D: <-> \Device\Harddisk0\DR0\Partition2
17:28:05.0757 6092 ============================================================
17:28:05.0757 6092 Initialize success
17:28:05.0757 6092 ============================================================
17:28:14.0072 5156 ============================================================
17:28:14.0072 5156 Scan started
17:28:14.0072 5156 Mode: Manual;
17:28:14.0072 5156 ============================================================
17:28:14.0681 5156 1394ohci (a87d604aea360176311474c87a63bb88) C:\windows\system32\drivers\1394ohci.sys
17:28:14.0681 5156 1394ohci - ok
17:28:14.0727 5156 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\windows\system32\drivers\ACPI.sys
17:28:14.0743 5156 ACPI - ok
17:28:14.0759 5156 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\windows\system32\drivers\acpipmi.sys
17:28:14.0774 5156 AcpiPmi - ok
17:28:14.0805 5156 ACPIVPC (5bbff8b826ec38d32c26334e079c7efc) C:\windows\system32\DRIVERS\AcpiVpc.sys
17:28:14.0805 5156 ACPIVPC - ok
17:28:14.0868 5156 adfs (2f0683fd2df1d92e891caca14b45a8c1) C:\windows\system32\drivers\adfs.sys
17:28:14.0868 5156 adfs - ok
17:28:14.0930 5156 AdobeARMservice (11a52cf7b265631deeb24c6149309eff) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
17:28:14.0930 5156 AdobeARMservice - ok
17:28:14.0993 5156 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\windows\system32\drivers\adp94xx.sys
17:28:15.0024 5156 adp94xx - ok
17:28:15.0086 5156 adpahci (597f78224ee9224ea1a13d6350ced962) C:\windows\system32\drivers\adpahci.sys
17:28:15.0102 5156 adpahci - ok
17:28:15.0133 5156 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\windows\system32\drivers\adpu320.sys
17:28:15.0133 5156 adpu320 - ok
17:28:15.0164 5156 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\windows\System32\aelupsvc.dll
17:28:15.0164 5156 AeLookupSvc - ok
17:28:15.0242 5156 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\windows\system32\drivers\afd.sys
17:28:15.0258 5156 AFD - ok
17:28:15.0273 5156 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\windows\system32\drivers\agp440.sys
17:28:15.0273 5156 agp440 - ok
17:28:15.0289 5156 ALG (3290d6946b5e30e70414990574883ddb) C:\windows\System32\alg.exe
17:28:15.0289 5156 ALG - ok
17:28:15.0351 5156 aliide (5812713a477a3ad7363c7438ca2ee038) C:\windows\system32\drivers\aliide.sys
17:28:15.0351 5156 aliide - ok
17:28:15.0351 5156 amdide (1ff8b4431c353ce385c875f194924c0c) C:\windows\system32\drivers\amdide.sys
17:28:15.0351 5156 amdide - ok
17:28:15.0383 5156 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\windows\system32\drivers\amdk8.sys
17:28:15.0383 5156 AmdK8 - ok
17:28:15.0398 5156 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\windows\system32\drivers\amdppm.sys
17:28:15.0414 5156 AmdPPM - ok
17:28:15.0429 5156 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\windows\system32\drivers\amdsata.sys
17:28:15.0445 5156 amdsata - ok
17:28:15.0461 5156 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\windows\system32\drivers\amdsbs.sys
17:28:15.0476 5156 amdsbs - ok
17:28:15.0492 5156 amdxata (540daf1cea6094886d72126fd7c33048) C:\windows\system32\drivers\amdxata.sys
17:28:15.0492 5156 amdxata - ok
17:28:15.0523 5156 AppID (89a69c3f2f319b43379399547526d952) C:\windows\system32\drivers\appid.sys
17:28:15.0523 5156 AppID - ok
17:28:15.0539 5156 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\windows\System32\appidsvc.dll
17:28:15.0539 5156 AppIDSvc - ok
17:28:15.0554 5156 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\windows\System32\appinfo.dll
17:28:15.0554 5156 Appinfo - ok
17:28:15.0585 5156 arc (c484f8ceb1717c540242531db7845c4e) C:\windows\system32\drivers\arc.sys
17:28:15.0585 5156 arc - ok
17:28:15.0601 5156 arcsas (019af6924aefe7839f61c830227fe79c) C:\windows\system32\drivers\arcsas.sys
17:28:15.0601 5156 arcsas - ok
17:28:15.0632 5156 AsyncMac (769765ce2cc62867468cea93969b2242) C:\windows\system32\DRIVERS\asyncmac.sys
17:28:15.0632 5156 AsyncMac - ok
17:28:15.0663 5156 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\windows\system32\drivers\atapi.sys
17:28:15.0663 5156 atapi - ok
17:28:15.0710 5156 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\windows\System32\Audiosrv.dll
17:28:15.0726 5156 AudioEndpointBuilder - ok
17:28:15.0741 5156 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\windows\System32\Audiosrv.dll
17:28:15.0741 5156 AudioSrv - ok
17:28:15.0773 5156 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\windows\System32\AxInstSV.dll
17:28:15.0773 5156 AxInstSV - ok
17:28:15.0882 5156 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\windows\system32\drivers\bxvbda.sys
17:28:15.0897 5156 b06bdrv - ok
17:28:15.0929 5156 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\windows\system32\DRIVERS\b57nd60a.sys
17:28:15.0944 5156 b57nd60a - ok
17:28:15.0960 5156 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\windows\System32\bdesvc.dll
17:28:15.0975 5156 BDESVC - ok
17:28:15.0975 5156 Beep (16a47ce2decc9b099349a5f840654746) C:\windows\system32\drivers\Beep.sys
17:28:15.0975 5156 Beep - ok
17:28:16.0038 5156 BITS (1ea7969e3271cbc59e1730697dc74682) C:\windows\System32\qmgr.dll
17:28:16.0085 5156 BITS - ok
17:28:16.0100 5156 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\windows\system32\DRIVERS\blbdrive.sys
17:28:16.0100 5156 blbdrive - ok
17:28:16.0131 5156 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\windows\system32\DRIVERS\bowser.sys
17:28:16.0131 5156 bowser - ok
17:28:16.0163 5156 BPntDrv (aaa4f992f879977a000fe8b8c730cd2c) C:\windows\system32\drivers\BPntDrv.sys
17:28:16.0163 5156 BPntDrv - ok
17:28:16.0194 5156 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\windows\system32\drivers\BrFiltLo.sys
17:28:16.0194 5156 BrFiltLo - ok
17:28:16.0209 5156 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\windows\system32\drivers\BrFiltUp.sys
17:28:16.0209 5156 BrFiltUp - ok
17:28:16.0241 5156 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\windows\System32\browser.dll
17:28:16.0256 5156 Browser - ok
17:28:16.0287 5156 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\windows\System32\Drivers\Brserid.sys
17:28:16.0287 5156 Brserid - ok
17:28:16.0319 5156 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\windows\System32\Drivers\BrSerWdm.sys
17:28:16.0319 5156 BrSerWdm - ok
17:28:16.0319 5156 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\windows\System32\Drivers\BrUsbMdm.sys
17:28:16.0319 5156 BrUsbMdm - ok
17:28:16.0334 5156 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\windows\System32\Drivers\BrUsbSer.sys
17:28:16.0334 5156 BrUsbSer - ok
17:28:16.0381 5156 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\windows\system32\drivers\BthEnum.sys
17:28:16.0381 5156 BthEnum - ok
17:28:16.0397 5156 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\windows\system32\DRIVERS\bthmodem.sys
17:28:16.0397 5156 BTHMODEM - ok
17:28:16.0428 5156 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\windows\system32\DRIVERS\bthpan.sys
17:28:16.0428 5156 BthPan - ok
17:28:16.0475 5156 BTHPORT (64c198198501f7560ee41d8d1efa7952) C:\windows\System32\Drivers\BTHport.sys
17:28:16.0490 5156 BTHPORT - ok
17:28:16.0521 5156 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\windows\system32\bthserv.dll
17:28:16.0521 5156 bthserv - ok
17:28:16.0537 5156 BTHUSB (f188b7394d81010767b6df3178519a37) C:\windows\System32\Drivers\BTHUSB.sys
17:28:16.0537 5156 BTHUSB - ok
17:28:16.0599 5156 BTWAMPFL (9de56fa4533e485ae5409d3c11747143) C:\windows\system32\DRIVERS\btwampfl.sys
17:28:16.0615 5156 BTWAMPFL - ok
17:28:16.0631 5156 btwaudio (f6135859a582a7294ba7a3336e08baa1) C:\windows\system32\drivers\btwaudio.sys
17:28:16.0646 5156 btwaudio - ok
17:28:16.0677 5156 btwavdt (3def2370e414b4e299673558ba171a51) C:\windows\system32\DRIVERS\btwavdt.sys
17:28:16.0677 5156 btwavdt - ok
17:28:16.0802 5156 btwdins (7987fffda812abc69047d1b029d446a2) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
17:28:16.0833 5156 btwdins - ok
17:28:16.0849 5156 btwl2cap (e8d2bcd080ea91e74775b9f5ea051f97) C:\windows\system32\DRIVERS\btwl2cap.sys
17:28:16.0849 5156 btwl2cap - ok
17:28:16.0865 5156 btwrchid (9937e0e4dfc0030560a6dfe9d3a94b39) C:\windows\system32\DRIVERS\btwrchid.sys
17:28:16.0880 5156 btwrchid - ok
17:28:16.0896 5156 cdfs (b8bd2bb284668c84865658c77574381a) C:\windows\system32\DRIVERS\cdfs.sys
17:28:16.0896 5156 cdfs - ok
17:28:16.0927 5156 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\windows\system32\DRIVERS\cdrom.sys
17:28:16.0943 5156 cdrom - ok
17:28:16.0974 5156 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\windows\System32\certprop.dll
17:28:16.0974 5156 CertPropSvc - ok
17:28:17.0005 5156 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\windows\system32\drivers\circlass.sys
17:28:17.0005 5156 circlass - ok
17:28:17.0052 5156 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\windows\system32\CLFS.sys
17:28:17.0067 5156 CLFS - ok
17:28:17.0161 5156 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:28:17.0161 5156 clr_optimization_v2.0.50727_32 - ok
17:28:17.0208 5156 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
17:28:17.0208 5156 clr_optimization_v2.0.50727_64 - ok
17:28:17.0301 5156 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:28:17.0301 5156 clr_optimization_v4.0.30319_32 - ok
17:28:17.0348 5156 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
17:28:17.0348 5156 clr_optimization_v4.0.30319_64 - ok
17:28:17.0379 5156 clwvd (50f92c943f18b070f166d019dfab3d9a) C:\windows\system32\DRIVERS\clwvd.sys
17:28:17.0379 5156 clwvd - ok
17:28:17.0411 5156 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\windows\system32\DRIVERS\CmBatt.sys
17:28:17.0411 5156 CmBatt - ok
17:28:17.0426 5156 cmdide (e19d3f095812725d88f9001985b94edd) C:\windows\system32\drivers\cmdide.sys
17:28:17.0426 5156 cmdide - ok
17:28:17.0504 5156 CNG (9ac4f97c2d3e93367e2148ea940cd2cd) C:\windows\system32\Drivers\cng.sys
17:28:17.0535 5156 CNG - ok
17:28:17.0567 5156 Compbatt (102de219c3f61415f964c88e9085ad14) C:\windows\system32\drivers\compbatt.sys
17:28:17.0567 5156 Compbatt - ok
17:28:17.0582 5156 CompositeBus (03edb043586cceba243d689bdda370a8) C:\windows\system32\DRIVERS\CompositeBus.sys
17:28:17.0582 5156 CompositeBus - ok
17:28:17.0598 5156 COMSysApp - ok
17:28:17.0645 5156 cpuz135 (76355d5eafdfa3e9b7580b9153de1f30) C:\windows\system32\drivers\cpuz135_x64.sys
17:28:17.0645 5156 cpuz135 - ok
17:28:17.0660 5156 crcdisk (1c827878a998c18847245fe1f34ee597) C:\windows\system32\drivers\crcdisk.sys
17:28:17.0660 5156 crcdisk - ok
17:28:17.0723 5156 CryptSvc (4f5414602e2544a4554d95517948b705) C:\windows\system32\cryptsvc.dll
17:28:17.0738 5156 CryptSvc - ok
17:28:17.0847 5156 cvhsvc (72794d112cbaff3bc0c29bf7350d4741) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
17:28:17.0847 5156 cvhsvc - ok
17:28:17.0894 5156 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\windows\system32\rpcss.dll
17:28:17.0925 5156 DcomLaunch - ok
17:28:17.0957 5156 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\windows\System32\defragsvc.dll
17:28:17.0972 5156 defragsvc - ok
17:28:18.0035 5156 DelayMan (ffd82c1c4abb5b0859eb081664dbda11) C:\windows\system32\DRIVERS\delayman.sys
17:28:18.0035 5156 DelayMan - ok
17:28:18.0066 5156 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\windows\system32\Drivers\dfsc.sys
17:28:18.0066 5156 DfsC - ok
17:28:18.0113 5156 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\windows\system32\dhcpcore.dll
17:28:18.0128 5156 Dhcp - ok
17:28:18.0144 5156 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\windows\system32\drivers\discache.sys
17:28:18.0144 5156 discache - ok
17:28:18.0175 5156 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\windows\system32\drivers\disk.sys
17:28:18.0175 5156 Disk - ok
17:28:18.0222 5156 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\windows\System32\dnsrslvr.dll
17:28:18.0222 5156 Dnscache - ok
17:28:18.0269 5156 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\windows\System32\dot3svc.dll
17:28:18.0269 5156 dot3svc - ok
17:28:18.0315 5156 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\windows\system32\dps.dll
17:28:18.0331 5156 DPS - ok
17:28:18.0347 5156 drmkaud (9b19f34400d24df84c858a421c205754) C:\windows\system32\drivers\drmkaud.sys
17:28:18.0347 5156 drmkaud - ok
17:28:18.0409 5156 dtsoftbus01 (d3d64cf7b2bceaa34a270f45a3fffb36) C:\windows\system32\DRIVERS\dtsoftbus01.sys
17:28:18.0409 5156 dtsoftbus01 - ok
17:28:18.0471 5156 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\windows\System32\drivers\dxgkrnl.sys
17:28:18.0471 5156 DXGKrnl - ok
17:28:18.0503 5156 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\windows\System32\eapsvc.dll
17:28:18.0503 5156 EapHost - ok
17:28:18.0674 5156 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\windows\system32\drivers\evbda.sys
17:28:18.0737 5156 ebdrv - ok
17:28:18.0877 5156 EFS (c118a82cd78818c29ab228366ebf81c3) C:\windows\System32\lsass.exe
17:28:18.0877 5156 EFS - ok
17:28:18.0971 5156 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\windows\ehome\ehRecvr.exe
17:28:19.0033 5156 ehRecvr - ok
17:28:19.0064 5156 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\windows\ehome\ehsched.exe
17:28:19.0095 5156 ehSched - ok
17:28:19.0158 5156 elxstor (0e5da5369a0fcaea12456dd852545184) C:\windows\system32\drivers\elxstor.sys
17:28:19.0173 5156 elxstor - ok
17:28:19.0189 5156 ErrDev (34a3c54752046e79a126e15c51db409b) C:\windows\system32\drivers\errdev.sys
17:28:19.0205 5156 ErrDev - ok
17:28:19.0251 5156 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\windows\system32\es.dll
17:28:19.0267 5156 EventSystem - ok
17:28:19.0423 5156 EvtEng (7ee9f35bc1dd0ce1a4976032f9ac5162) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
17:28:19.0470 5156 EvtEng - ok
17:28:19.0626 5156 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\windows\system32\drivers\exfat.sys
17:28:19.0641 5156 exfat - ok
17:28:19.0657 5156 fastfat (0adc83218b66a6db380c330836f3e36d) C:\windows\system32\drivers\fastfat.sys
17:28:19.0673 5156 fastfat - ok
17:28:19.0751 5156 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\windows\system32\fxssvc.exe
17:28:19.0782 5156 Fax - ok
17:28:19.0813 5156 fbfmon (0bdd7984db7aaff6dfefd11d82d473db) C:\windows\system32\drivers\fbfmon.sys
17:28:19.0813 5156 fbfmon - ok
17:28:19.0844 5156 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\windows\system32\drivers\fdc.sys
17:28:19.0844 5156 fdc - ok
17:28:19.0860 5156 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\windows\system32\fdPHost.dll
17:28:19.0860 5156 fdPHost - ok
17:28:19.0875 5156 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\windows\system32\fdrespub.dll
17:28:19.0875 5156 FDResPub - ok
17:28:19.0907 5156 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\windows\system32\drivers\fileinfo.sys
17:28:19.0907 5156 FileInfo - ok
17:28:19.0922 5156 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\windows\system32\drivers\filetrace.sys
17:28:19.0922 5156 Filetrace - ok
17:28:20.0063 5156 FLEXnet Licensing Service (d60ef46dc0e757fe5eb579db95b88954) C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
17:28:20.0109 5156 FLEXnet Licensing Service - ok
17:28:20.0265 5156 FLEXnet Licensing Service 64 (5cee6cd43ae5844c49300ea0b1e557ee) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
17:28:20.0468 5156 FLEXnet Licensing Service 64 - ok
17:28:20.0609 5156 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\windows\system32\drivers\flpydisk.sys
17:28:20.0609 5156 flpydisk - ok
17:28:20.0640 5156 FltMgr (da6b67270fd9db3697b20fce94950741) C:\windows\system32\drivers\fltmgr.sys
17:28:20.0655 5156 FltMgr - ok
17:28:20.0718 5156 FontCache (5c4cb4086fb83115b153e47add961a0c) C:\windows\system32\FntCache.dll
17:28:20.0765 5156 FontCache - ok
17:28:20.0843 5156 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
17:28:20.0843 5156 FontCache3.0.0.0 - ok
17:28:20.0858 5156 FsDepends (d43703496149971890703b4b1b723eac) C:\windows\system32\drivers\FsDepends.sys
17:28:20.0874 5156 FsDepends - ok
17:28:20.0921 5156 Fs_Rec (6bd9295cc032dd3077c671fccf579a7b) C:\windows\system32\drivers\Fs_Rec.sys
17:28:20.0921 5156 Fs_Rec - ok
17:28:20.0952 5156 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\windows\system32\DRIVERS\fvevol.sys
17:28:20.0967 5156 fvevol - ok
17:28:20.0983 5156 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\windows\system32\drivers\gagp30kx.sys
17:28:20.0983 5156 gagp30kx - ok
17:28:21.0045 5156 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\windows\System32\gpsvc.dll
17:28:21.0077 5156 gpsvc - ok
17:28:21.0155 5156 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
17:28:21.0170 5156 gupdate - ok
17:28:21.0186 5156 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
17:28:21.0186 5156 gupdatem - ok
17:28:21.0201 5156 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\windows\system32\drivers\hcw85cir.sys
17:28:21.0217 5156 hcw85cir - ok
17:28:21.0248 5156 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\windows\system32\drivers\HdAudio.sys
17:28:21.0264 5156 HdAudAddService - ok
17:28:21.0295 5156 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\windows\system32\DRIVERS\HDAudBus.sys
17:28:21.0295 5156 HDAudBus - ok
17:28:21.0311 5156 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\windows\system32\drivers\HidBatt.sys
17:28:21.0311 5156 HidBatt - ok
17:28:21.0342 5156 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\windows\system32\drivers\hidbth.sys
17:28:21.0342 5156 HidBth - ok
17:28:21.0357 5156 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\windows\system32\drivers\hidir.sys
17:28:21.0357 5156 HidIr - ok
17:28:21.0389 5156 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\windows\system32\hidserv.dll
17:28:21.0389 5156 hidserv - ok
17:28:21.0420 5156 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\windows\system32\DRIVERS\hidusb.sys
17:28:21.0420 5156 HidUsb - ok
17:28:21.0451 5156 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\windows\system32\kmsvc.dll
17:28:21.0451 5156 hkmsvc - ok
17:28:21.0498 5156 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\windows\system32\ListSvc.dll
17:28:21.0498 5156 HomeGroupListener - ok
17:28:21.0545 5156 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\windows\system32\provsvc.dll
17:28:21.0560 5156 HomeGroupProvider - ok
17:28:21.0576 5156 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\windows\system32\drivers\HpSAMD.sys
17:28:21.0576 5156 HpSAMD - ok
17:28:21.0638 5156 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\windows\system32\drivers\HTTP.sys
17:28:21.0669 5156 HTTP - ok
17:28:21.0685 5156 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\windows\system32\drivers\hwpolicy.sys
17:28:21.0685 5156 hwpolicy - ok
17:28:21.0701 5156 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\windows\system32\DRIVERS\i8042prt.sys
17:28:21.0701 5156 i8042prt - ok
17:28:21.0763 5156 iaStor (d469b77687e12fe43e344806740b624d) C:\windows\system32\DRIVERS\iaStor.sys
17:28:21.0763 5156 iaStor - ok
17:28:21.0825 5156 IAStorDataMgrSvc (983fc69644ddf0486c8dfea262948d1a) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
17:28:21.0825 5156 IAStorDataMgrSvc - ok
17:28:21.0872 5156 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\windows\system32\drivers\iaStorV.sys
17:28:21.0888 5156 iaStorV - ok
17:28:21.0981 5156 IDriverT (1cf03c69b49acb70c722df92755c0c8c) C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
17:28:21.0997 5156 IDriverT - ok
17:28:22.0137 5156 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
17:28:22.0169 5156 idsvc - ok
17:28:22.0761 5156 igfx (795c99dc4f574c97c03d0bb39cf099ee) C:\windows\system32\DRIVERS\igdkmd64.sys
17:28:22.0964 5156 igfx - ok
17:28:23.0105 5156 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\windows\system32\drivers\iirsp.sys
17:28:23.0105 5156 iirsp - ok
17:28:23.0167 5156 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\windows\System32\ikeext.dll
17:28:23.0229 5156 IKEEXT - ok
17:28:23.0370 5156 IntcAzAudAddService (1ce438b31551746ab450d8ffa403bdb5) C:\windows\system32\drivers\RTKVHD64.sys
17:28:23.0385 5156 IntcAzAudAddService - ok
17:28:23.0541 5156 IntcDAud (fc727061c0f47c8059e88e05d5c8e381) C:\windows\system32\DRIVERS\IntcDAud.sys
17:28:23.0557 5156 IntcDAud - ok
17:28:23.0573 5156 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\windows\system32\drivers\intelide.sys
17:28:23.0573 5156 intelide - ok
17:28:23.0588 5156 intelppm (ada036632c664caa754079041cf1f8c1) C:\windows\system32\DRIVERS\intelppm.sys
17:28:23.0588 5156 intelppm - ok
17:28:23.0619 5156 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\windows\system32\ipbusenum.dll
17:28:23.0635 5156 IPBusEnum - ok
17:28:23.0635 5156 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\windows\system32\DRIVERS\ipfltdrv.sys
17:28:23.0651 5156 IpFilterDriver - ok
17:28:23.0651 5156 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\windows\system32\drivers\IPMIDrv.sys
17:28:23.0666 5156 IPMIDRV - ok
17:28:23.0697 5156 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\windows\system32\drivers\ipnat.sys
17:28:23.0697 5156 IPNAT - ok
17:28:23.0713 5156 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\windows\system32\drivers\irenum.sys
17:28:23.0729 5156 IRENUM - ok
17:28:23.0729 5156 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\windows\system32\drivers\isapnp.sys
17:28:23.0729 5156 isapnp - ok
17:28:23.0760 5156 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\windows\system32\drivers\msiscsi.sys
17:28:23.0775 5156 iScsiPrt - ok
17:28:23.0822 5156 JMCR (e56417c56b6a7316b6f527c890a1860d) C:\windows\system32\DRIVERS\jmcr.sys
17:28:23.0822 5156 JMCR - ok
17:28:23.0869 5156 k57nd60a (376bc8e5f4a0ea0f0f16818bb1a95d4b) C:\windows\system32\DRIVERS\k57nd60a.sys
17:28:23.0869 5156 k57nd60a - ok
17:28:23.0916 5156 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\windows\system32\DRIVERS\kbdclass.sys
17:28:23.0916 5156 kbdclass - ok
17:28:23.0931 5156 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\windows\system32\drivers\kbdhid.sys
17:28:23.0931 5156 kbdhid - ok
17:28:23.0978 5156 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\windows\system32\lsass.exe
17:28:23.0978 5156 KeyIso - ok
17:28:24.0041 5156 kl1 (524503240d2ba280d97e2297102151ce) C:\windows\system32\DRIVERS\kl1.sys
17:28:24.0041 5156 kl1 - ok
17:28:24.0103 5156 KLIF (6ab7b4b65c5e201cb968dec20af10dcb) C:\windows\system32\DRIVERS\klif.sys
17:28:24.0103 5156 KLIF - ok
17:28:24.0150 5156 KSecDD (97a7070aea4c058b6418519e869a63b4) C:\windows\system32\Drivers\ksecdd.sys
17:28:24.0150 5156 KSecDD - ok
17:28:24.0197 5156 KSecPkg (26c43a7c2862447ec59deda188d1da07) C:\windows\system32\Drivers\ksecpkg.sys
17:28:24.0197 5156 KSecPkg - ok
17:28:24.0212 5156 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\windows\system32\drivers\ksthunk.sys
17:28:24.0212 5156 ksthunk - ok
17:28:24.0259 5156 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\windows\system32\msdtckrm.dll
17:28:24.0275 5156 KtmRm - ok
17:28:24.0321 5156 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\windows\system32\srvsvc.dll
17:28:24.0337 5156 LanmanServer - ok
17:28:24.0368 5156 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\windows\System32\wkssvc.dll
17:28:24.0384 5156 LanmanWorkstation - ok
17:28:24.0415 5156 LHDmgr (be166935083f9c38edfdc21b9a7a679b) C:\windows\system32\DRIVERS\LhdX64.sys
17:28:24.0415 5156 LHDmgr - ok
17:28:24.0446 5156 lltdio (1538831cf8ad2979a04c423779465827) C:\windows\system32\DRIVERS\lltdio.sys
17:28:24.0446 5156 lltdio - ok
17:28:24.0477 5156 lltdsvc (c1185803384ab3feed115f79f109427f) C:\windows\System32\lltdsvc.dll
17:28:24.0493 5156 lltdsvc - ok
17:28:24.0509 5156 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\windows\System32\lmhsvc.dll
17:28:24.0509 5156 lmhosts - ok
17:28:24.0602 5156 LMS (2ed1786b7542cda261029f6b526edf44) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
17:28:24.0618 5156 LMS - ok
17:28:24.0649 5156 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\windows\system32\drivers\lsi_fc.sys
17:28:24.0665 5156 LSI_FC - ok
17:28:24.0680 5156 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\windows\system32\drivers\lsi_sas.sys
17:28:24.0696 5156 LSI_SAS - ok
17:28:24.0711 5156 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\windows\system32\drivers\lsi_sas2.sys
17:28:24.0711 5156 LSI_SAS2 - ok
17:28:24.0727 5156 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\windows\system32\drivers\lsi_scsi.sys
17:28:24.0727 5156 LSI_SCSI - ok
17:28:24.0758 5156 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\windows\system32\drivers\luafv.sys
17:28:24.0758 5156 luafv - ok
17:28:24.0805 5156 massfilter (830708a5cc0a19196c1dc205bed5a3a8) C:\windows\system32\drivers\massfilter.sys
17:28:24.0805 5156 massfilter - ok
17:28:24.0914 5156 mbmiodrvr (2e1652d8ab971403eaaddc921800b1fa) C:\windows\syswow64\mbmiodrvr.sys
17:28:24.0914 5156 mbmiodrvr - ok
17:28:25.0008 5156 McAfee SiteAdvisor Service (be8c524313db75fa26fb2b0c0aaff88e) c:\PROGRA~2\mcafee\SITEAD~1\McSACore.exe
17:28:25.0023 5156 McAfee SiteAdvisor Service - ok
17:28:25.0055 5156 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\windows\system32\Mcx2Svc.dll
17:28:25.0055 5156 Mcx2Svc - ok
17:28:25.0086 5156 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\windows\system32\drivers\megasas.sys
17:28:25.0086 5156 megasas - ok
17:28:25.0117 5156 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\windows\system32\drivers\MegaSR.sys
17:28:25.0117 5156 MegaSR - ok
17:28:25.0148 5156 MEIx64 (a6518dcc42f7a6e999bb3bea8fd87567) C:\windows\system32\DRIVERS\HECIx64.sys
17:28:25.0148 5156 MEIx64 - ok
17:28:25.0304 5156 mi-raysat_3dsmax2011_64 (0af89452a8ce3928168f4e5b2208c68b) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
17:28:25.0304 5156 mi-raysat_3dsmax2011_64 - ok
17:28:25.0398 5156 Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
17:28:25.0398 5156 Microsoft Office Groove Audit Service - ok
17:28:25.0429 5156 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\windows\system32\mmcss.dll
17:28:25.0429 5156 MMCSS - ok
17:28:25.0445 5156 Modem (800ba92f7010378b09f9ed9270f07137) C:\windows\system32\drivers\modem.sys
17:28:25.0445 5156 Modem - ok
17:28:25.0491 5156 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\windows\system32\DRIVERS\monitor.sys
17:28:25.0491 5156 monitor - ok
17:28:25.0507 5156 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\windows\system32\DRIVERS\mouclass.sys
17:28:25.0507 5156 mouclass - ok
17:28:25.0523 5156 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\windows\system32\DRIVERS\mouhid.sys
17:28:25.0523 5156 mouhid - ok
17:28:25.0538 5156 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\windows\system32\drivers\mountmgr.sys
17:28:25.0538 5156 mountmgr - ok
17:28:25.0585 5156 MpFilter (94c66ededcdb6a126880472f9a704d8e) C:\windows\system32\DRIVERS\MpFilter.sys
17:28:25.0601 5156 MpFilter - ok
17:28:25.0616 5156 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\windows\system32\drivers\mpio.sys
17:28:25.0632 5156 mpio - ok
17:28:25.0647 5156 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\windows\system32\drivers\mpsdrv.sys
17:28:25.0647 5156 mpsdrv - ok
17:28:25.0679 5156 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\windows\system32\drivers\mrxdav.sys
17:28:25.0679 5156 MRxDAV - ok
17:28:25.0725 5156 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\windows\system32\DRIVERS\mrxsmb.sys
17:28:25.0725 5156 mrxsmb - ok
17:28:25.0772 5156 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\windows\system32\DRIVERS\mrxsmb10.sys
17:28:25.0772 5156 mrxsmb10 - ok
17:28:25.0803 5156 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\windows\system32\DRIVERS\mrxsmb20.sys
17:28:25.0819 5156 mrxsmb20 - ok
17:28:25.0835 5156 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\windows\system32\drivers\msahci.sys
17:28:25.0835 5156 msahci - ok
17:28:25.0850 5156 msdsm (db801a638d011b9633829eb6f663c900) C:\windows\system32\drivers\msdsm.sys
17:28:25.0866 5156 msdsm - ok
17:28:25.0897 5156 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\windows\System32\msdtc.exe
17:28:25.0897 5156 MSDTC - ok
17:28:25.0928 5156 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\windows\system32\drivers\Msfs.sys
17:28:25.0928 5156 Msfs - ok
17:28:25.0944 5156 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\windows\System32\drivers\mshidkmdf.sys
17:28:25.0944 5156 mshidkmdf - ok
17:28:25.0959 5156 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\windows\system32\drivers\msisadrv.sys
17:28:25.0959 5156 msisadrv - ok
17:28:25.0975 5156 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\windows\system32\iscsiexe.dll
17:28:25.0991 5156 MSiSCSI - ok
17:28:26.0006 5156 msiserver - ok
17:28:26.0022 5156 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\windows\system32\drivers\MSKSSRV.sys
17:28:26.0037 5156 MSKSSRV - ok
17:28:26.0147 5156 MsMpSvc (59faaf2c83c8169ea20f9e335e418907) c:\Program Files\Microsoft Security Client\MsMpEng.exe
17:28:26.0147 5156 MsMpSvc - ok
17:28:26.0147 5156 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\windows\system32\drivers\MSPCLOCK.sys
17:28:26.0162 5156 MSPCLOCK - ok
17:28:26.0162 5156 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\windows\system32\drivers\MSPQM.sys
17:28:26.0178 5156 MSPQM - ok
17:28:26.0209 5156 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\windows\system32\drivers\MsRPC.sys
17:28:26.0225 5156 MsRPC - ok
17:28:26.0240 5156 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\windows\system32\DRIVERS\mssmbios.sys
17:28:26.0240 5156 mssmbios - ok
17:28:26.0256 5156 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\windows\system32\drivers\MSTEE.sys
17:28:26.0256 5156 MSTEE - ok
17:28:26.0271 5156 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\windows\system32\drivers\MTConfig.sys
17:28:26.0271 5156 MTConfig - ok
17:28:26.0287 5156 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\windows\system32\Drivers\mup.sys
17:28:26.0287 5156 Mup - ok
17:28:26.0365 5156 MyWiFiDHCPDNS (0cf5580f27918ffd2e165ecafa734103) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
17:28:26.0381 5156 MyWiFiDHCPDNS - ok
17:28:26.0427 5156 napagent (582ac6d9873e31dfa28a4547270862dd) C:\windows\system32\qagentRT.dll
17:28:26.0443 5156 napagent - ok
17:28:26.0490 5156 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\windows\system32\DRIVERS\nwifi.sys
17:28:26.0505 5156 NativeWifiP - ok
17:28:26.0661 5156 NBService (87a00faedd703d8d2bdcb29ce5eeea6b) C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
17:28:26.0817 5156 NBService - ok
17:28:26.0895 5156 NDIS (c38b8ae57f78915905064a9a24dc1586) C:\windows\system32\drivers\ndis.sys
17:28:26.0942 5156 NDIS - ok
17:28:26.0958 5156 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\windows\system32\DRIVERS\ndiscap.sys
17:28:26.0958 5156 NdisCap - ok
17:28:26.0973 5156 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\windows\system32\DRIVERS\ndistapi.sys
17:28:26.0989 5156 NdisTapi - ok
17:28:26.0989 5156 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\windows\system32\DRIVERS\ndisuio.sys
17:28:26.0989 5156 Ndisuio - ok
17:28:27.0020 5156 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\windows\system32\DRIVERS\ndiswan.sys
17:28:27.0020 5156 NdisWan - ok
17:28:27.0036 5156 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\windows\system32\drivers\NDProxy.sys
17:28:27.0036 5156 NDProxy - ok
17:28:27.0051 5156 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\windows\system32\DRIVERS\netbios.sys
17:28:27.0051 5156 NetBIOS - ok
17:28:27.0083 5156 NetBT (09594d1089c523423b32a4229263f068) C:\windows\system32\DRIVERS\netbt.sys
17:28:27.0098 5156 NetBT - ok
17:28:27.0114 5156 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\windows\system32\lsass.exe
17:28:27.0114 5156 Netlogon - ok
17:28:27.0161 5156 Netman (847d3ae376c0817161a14a82c8922a9e) C:\windows\System32\netman.dll
17:28:27.0176 5156 Netman - ok
17:28:27.0223 5156 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\windows\System32\netprofm.dll
17:28:27.0239 5156 netprofm - ok
17:28:27.0301 5156 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
17:28:27.0317 5156 NetTcpPortSharing - ok
17:28:27.0660 5156 NETwNs64 (b9c587bdaa61a689883439d5ae6fe7f3) C:\windows\system32\DRIVERS\NETwNs64.sys
17:28:27.0785 5156 NETwNs64 - ok
17:28:27.0909 5156 nfrd960 (77889813be4d166cdab78ddba990da92) C:\windows\system32\drivers\nfrd960.sys
17:28:27.0925 5156 nfrd960 - ok
17:28:27.0956 5156 NisDrv (91b4e0273d2f6c24ef845f2b41311289) C:\windows\system32\DRIVERS\NisDrvWFP.sys
17:28:27.0972 5156 NisDrv - ok
17:28:28.0081 5156 NisSrv (10a43829a9e606af3eef25a1c1665923) c:\Program Files\Microsoft Security Client\NisSrv.exe
17:28:28.0097 5156 NisSrv - ok
17:28:28.0206 5156 NitroDriverReadSpool2 (c2a56a929e4423e0dd94486a11e23c7e) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
17:28:28.0221 5156 NitroDriverReadSpool2 - ok
17:28:28.0268 5156 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\windows\System32\nlasvc.dll
17:28:28.0284 5156 NlaSvc - ok
17:28:28.0362 5156 nlsX86cc (7bfa0c5d8a4a2f1c46a6a3a698bde3e5) C:\windows\SysWOW64\NLSSRV32.EXE
17:28:28.0362 5156 nlsX86cc - ok
17:28:28.0409 5156 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\windows\system32\drivers\Npfs.sys
17:28:28.0409 5156 Npfs - ok
17:28:28.0424 5156 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\windows\system32\nsisvc.dll
17:28:28.0424 5156 nsi - ok
17:28:28.0440 5156 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\windows\system32\drivers\nsiproxy.sys
17:28:28.0440 5156 nsiproxy - ok
17:28:28.0533 5156 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\windows\system32\drivers\Ntfs.sys
17:28:28.0580 5156 Ntfs - ok
17:28:28.0705 5156 Null (9899284589f75fa8724ff3d16aed75c1) C:\windows\system32\drivers\Null.sys
17:28:28.0705 5156 Null - ok
17:28:29.0331 5156 nvlddmkm (ba0b4889c40380a01ecdf84c227a89c9) C:\windows\system32\DRIVERS\nvlddmkm.sys
17:28:29.0398 5156 nvlddmkm - ok
17:28:29.0483 5156 nvpciflt (715d45ed30003fc70cfa0d9c6dd0b538) C:\windows\system32\DRIVERS\nvpciflt.sys
17:28:29.0483 5156 nvpciflt - ok
17:28:29.0516 5156 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\windows\system32\drivers\nvraid.sys
17:28:29.0526 5156 nvraid - ok
17:28:29.0563 5156 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\windows\system32\drivers\nvstor.sys
17:28:29.0578 5156 nvstor - ok
17:28:29.0658 5156 NVSvc (06633cf95bea62164c3bfca24bce6b11) C:\windows\system32\nvvsvc.exe
17:28:29.0681 5156 NVSvc - ok
17:28:29.0821 5156 nvUpdatusService (53b629ce436b110c5689c2f6439e567b) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
17:28:29.0848 5156 nvUpdatusService - ok
17:28:29.0933 5156 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\windows\system32\drivers\nv_agp.sys
17:28:29.0938 5156 nv_agp - ok
17:28:30.0046 5156 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
17:28:30.0056 5156 odserv - ok
17:28:30.0073 5156 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\windows\system32\drivers\ohci1394.sys
17:28:30.0076 5156 ohci1394 - ok
17:28:30.0118 5156 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:28:30.0128 5156 ose - ok
17:28:30.0376 5156 osppsvc (61bffb5f57ad12f83ab64b7181829b34) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
17:28:30.0468 5156 osppsvc - ok
17:28:30.0591 5156 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\windows\system32\pnrpsvc.dll
17:28:30.0601 5156 p2pimsvc - ok
17:28:30.0646 5156 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\windows\system32\p2psvc.dll
17:28:30.0661 5156 p2psvc - ok
17:28:30.0698 5156 Parport (0086431c29c35be1dbc43f52cc273887) C:\windows\system32\drivers\parport.sys
17:28:30.0703 5156 Parport - ok
17:28:30.0741 5156 partmgr (e9766131eeade40a27dc27d2d68fba9c) C:\windows\system32\drivers\partmgr.sys
17:28:30.0743 5156 partmgr - ok
17:28:30.0801 5156 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\windows\System32\pcasvc.dll
17:28:30.0808 5156 PcaSvc - ok
17:28:30.0828 5156 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\windows\system32\drivers\pci.sys
17:28:30.0831 5156 pci - ok
17:28:30.0851 5156 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\windows\system32\drivers\pciide.sys
17:28:30.0851 5156 pciide - ok
17:28:30.0873 5156 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\windows\system32\drivers\pcmcia.sys
17:28:30.0878 5156 pcmcia - ok
17:28:30.0893 5156 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\windows\system32\drivers\pcw.sys
17:28:30.0893 5156 pcw - ok
17:28:30.0936 5156 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\windows\system32\drivers\peauth.sys
17:28:30.0966 5156 PEAUTH - ok
17:28:31.0051 5156 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\windows\SysWow64\perfhost.exe
17:28:31.0053 5156 PerfHost - ok
17:28:31.0176 5156 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\windows\system32\pla.dll
17:28:31.0216 5156 pla - ok
17:28:31.0266 5156 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\windows\system32\umpnpmgr.dll
17:28:31.0281 5156 PlugPlay - ok
17:28:31.0303 5156 PnkBstrA - ok
17:28:31.0316 5156 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\windows\system32\pnrpauto.dll
17:28:31.0318 5156 PNRPAutoReg - ok
17:28:31.0348 5156 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\windows\system32\pnrpsvc.dll
17:28:31.0353 5156 PNRPsvc - ok
17:28:31.0398 5156 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\windows\System32\ipsecsvc.dll
17:28:31.0416 5156 PolicyAgent - ok
17:28:31.0448 5156 Power (6ba9d927dded70bd1a9caded45f8b184) C:\windows\system32\umpo.dll
17:28:31.0463 5156 Power - ok
17:28:31.0516 5156 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\windows\system32\DRIVERS\raspptp.sys
17:28:31.0521 5156 PptpMiniport - ok
17:28:31.0548 5156 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\windows\system32\drivers\processr.sys
17:28:31.0551 5156 Processor - ok
17:28:31.0598 5156 ProfSvc (53e83f1f6cf9d62f32801cf66d8352a8) C:\windows\system32\profsvc.dll
17:28:31.0613 5156 ProfSvc - ok
17:28:31.0648 5156 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\windows\system32\lsass.exe
17:28:31.0651 5156 ProtectedStorage - ok
17:28:31.0671 5156 Psched (0557cf5a2556bd58e26384169d72438d) C:\windows\system32\DRIVERS\pacer.sys
17:28:31.0673 5156 Psched - ok
17:28:31.0758 5156 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\windows\system32\drivers\ql2300.sys
17:28:31.0803 5156 ql2300 - ok
17:28:31.0906 5156 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\windows\system32\drivers\ql40xx.sys
17:28:31.0908 5156 ql40xx - ok
17:28:31.0941 5156 QWAVE (906191634e99aea92c4816150bda3732) C:\windows\system32\qwave.dll
17:28:31.0956 5156 QWAVE - ok
17:28:31.0966 5156 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\windows\system32\drivers\qwavedrv.sys
17:28:31.0968 5156 QWAVEdrv - ok
17:28:31.0981 5156 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\windows\system32\DRIVERS\rasacd.sys
17:28:31.0983 5156 RasAcd - ok
17:28:31.0996 5156 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\windows\system32\DRIVERS\AgileVpn.sys
17:28:31.0998 5156 RasAgileVpn - ok
17:28:32.0016 5156 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\windows\System32\rasauto.dll
17:28:32.0021 5156 RasAuto - ok
17:28:32.0041 5156 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\windows\system32\DRIVERS\rasl2tp.sys
17:28:32.0046 5156 Rasl2tp - ok
17:28:32.0076 5156 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\windows\System32\rasmans.dll
17:28:32.0091 5156 RasMan - ok
17:28:32.0108 5156 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\windows\system32\DRIVERS\raspppoe.sys
17:28:32.0111 5156 RasPppoe - ok
17:28:32.0128 5156 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\windows\system32\DRIVERS\rassstp.sys
17:28:32.0131 5156 RasSstp - ok
17:28:32.0166 5156 rdbss (77f665941019a1594d887a74f301fa2f) C:\windows\system32\DRIVERS\rdbss.sys
17:28:32.0178 5156 rdbss - ok
17:28:32.0188 5156 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\windows\system32\drivers\rdpbus.sys
17:28:32.0191 5156 rdpbus - ok
17:28:32.0201 5156 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\windows\system32\DRIVERS\RDPCDD.sys
17:28:32.0203 5156 RDPCDD - ok
17:28:32.0226 5156 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\windows\system32\drivers\rdpencdd.sys
17:28:32.0226 5156 RDPENCDD - ok
17:28:32.0241 5156 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\windows\system32\drivers\rdprefmp.sys
17:28:32.0241 5156 RDPREFMP - ok
17:28:32.0281 5156 RDPWD (e61608aa35e98999af9aaeeea6114b0a) C:\windows\system32\drivers\RDPWD.sys
17:28:32.0286 5156 RDPWD - ok
17:28:32.0308 5156 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\windows\system32\drivers\rdyboost.sys
17:28:32.0313 5156 rdyboost - ok
17:28:32.0446 5156 RegSrvc (aa9fd849c028ccb441a78061b57db734) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
17:28:32.0462 5156 RegSrvc - ok
17:28:32.0493 5156 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\windows\System32\mprdim.dll
17:28:32.0493 5156 RemoteAccess - ok
17:28:32.0524 5156 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\windows\system32\regsvc.dll
17:28:32.0524 5156 RemoteRegistry - ok
17:28:32.0587 5156 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\windows\system32\DRIVERS\rfcomm.sys
17:28:32.0587 5156 RFCOMM - ok
17:28:32.0602 5156 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\windows\System32\RpcEpMap.dll
17:28:32.0602 5156 RpcEptMapper - ok
17:28:32.0618 5156 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\windows\system32\locator.exe
17:28:32.0634 5156 RpcLocator - ok
17:28:32.0665 5156 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\windows\system32\rpcss.dll
17:28:32.0665 5156 RpcSs - ok
17:28:32.0680 5156 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\windows\system32\DRIVERS\rspndr.sys
17:28:32.0696 5156 rspndr - ok
17:28:32.0727 5156 RTL8167 (baefee35d27a5440d35092ce10267bec) C:\windows\system32\DRIVERS\Rt64win7.sys
17:28:32.0727 5156 RTL8167 - ok
17:28:33.0117 5156 rtsuvc (558b39be7c496ac49e27dedcfab13a54) C:\windows\system32\DRIVERS\rtsuvc.sys
17:28:33.0148 5156 rtsuvc - ok
17:28:33.0289 5156 rxvbus (221339d9c56419cc20b7f32b1c10c248) C:\windows\system32\DRIVERS\rxvbus.sys
17:28:33.0289 5156 rxvbus - ok
17:28:33.0304 5156 rxvstor (ce14384ebb9bf18a7f5a3a993a11ac65) C:\windows\system32\DRIVERS\rxvstor.sys
17:28:33.0304 5156 rxvstor - ok
17:28:33.0351 5156 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\windows\system32\lsass.exe
17:28:33.0351 5156 SamSs - ok
17:28:33.0367 5156 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\windows\system32\drivers\sbp2port.sys
17:28:33.0382 5156 sbp2port - ok
17:28:33.0414 5156 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\windows\System32\SCardSvr.dll
17:28:33.0429 5156 SCardSvr - ok
17:28:33.0429 5156 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\windows\system32\DRIVERS\scfilter.sys
17:28:33.0445 5156 scfilter - ok
17:28:33.0507 5156 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\windows\system32\schedsvc.dll
17:28:33.0570 5156 Schedule - ok
17:28:33.0601 5156 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\windows\System32\certprop.dll
17:28:33.0601 5156 SCPolicySvc - ok
17:28:33.0632 5156 sdbus (111e0ebc0ad79cb0fa014b907b231cf0) C:\windows\system32\DRIVERS\sdbus.sys
17:28:33.0648 5156 sdbus - ok
17:28:33.0663 5156 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\windows\System32\SDRSVC.dll
17:28:33.0679 5156 SDRSVC - ok
17:28:33.0710 5156 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\windows\system32\drivers\secdrv.sys
17:28:33.0710 5156 secdrv - ok
17:28:33.0726 5156 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\windows\system32\seclogon.dll
17:28:33.0726 5156 seclogon - ok
17:28:33.0741 5156 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\windows\System32\sens.dll
17:28:33.0741 5156 SENS - ok
17:28:33.0757 5156 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\windows\system32\sensrsvc.dll
17:28:33.0757 5156 SensrSvc - ok
17:28:33.0772 5156 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\windows\system32\drivers\serenum.sys
17:28:33.0772 5156 Serenum - ok
17:28:33.0804 5156 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\windows\system32\drivers\serial.sys
17:28:33.0804 5156 Serial - ok
17:28:33.0835 5156 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\windows\system32\drivers\sermouse.sys
17:28:33.0850 5156 sermouse - ok
17:28:33.0866 5156 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\windows\system32\sessenv.dll
17:28:33.0882 5156 SessionEnv - ok
17:28:33.0897 5156 sffdisk (a554811bcd09279536440c964ae35bbf) C:\windows\system32\drivers\sffdisk.sys
17:28:33.0897 5156 sffdisk - ok
17:28:33.0913 5156 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\windows\system32\drivers\sffp_mmc.sys
17:28:33.0913 5156 sffp_mmc - ok
17:28:33.0928 5156 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\windows\system32\drivers\sffp_sd.sys
17:28:33.0928 5156 sffp_sd - ok
17:28:33.0928 5156 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\windows\system32\drivers\sfloppy.sys
17:28:33.0928 5156 sfloppy - ok
17:28:34.0006 5156 Sftfs (c6cc9297bd53e5229653303e556aa539) C:\windows\system32\DRIVERS\Sftfslh.sys
17:28:34.0006 5156 Sftfs - ok
17:28:34.0116 5156 sftlist (13693b6354dd6e72dc5131da7d764b90) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
17:28:34.0116 5156 sftlist - ok
17:28:34.0147 5156 Sftplay (390aa7bc52cee43f6790cdea1e776703) C:\windows\system32\DRIVERS\Sftplaylh.sys
17:28:34.0147 5156 Sftplay - ok
17:28:34.0162 5156 Sftredir (617e29a0b0a2807466560d4c4e338d3e) C:\windows\system32\DRIVERS\Sftredirlh.sys
17:28:34.0162 5156 Sftredir - ok
17:28:34.0178 5156 Sftvol (8f571f016fa1976f445147e9e6c8ae9b) C:\windows\system32\DRIVERS\Sftvollh.sys
17:28:34.0178 5156 Sftvol - ok
17:28:34.0209 5156 sftvsa (c3cddd18f43d44ab713cf8c4916f7696) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
17:28:34.0225 5156 sftvsa - ok
17:28:34.0272 5156 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\windows\System32\shsvcs.dll
17:28:34.0287 5156 ShellHWDetection - ok
17:28:34.0334 5156 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\windows\system32\drivers\SiSRaid2.sys
17:28:34.0334 5156 SiSRaid2 - ok
17:28:34.0350 5156 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\windows\system32\drivers\sisraid4.sys
17:28:34.0350 5156 SiSRaid4 - ok
17:28:34.0365 5156 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\windows\system32\DRIVERS\smb.sys
17:28:34.0365 5156 Smb - ok
17:28:34.0396 5156 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\windows\System32\snmptrap.exe
17:28:34.0396 5156 SNMPTRAP - ok
17:28:34.0412 5156 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\windows\system32\drivers\spldr.sys
17:28:34.0428 5156 spldr - ok
17:28:34.0459 5156 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\windows\System32\spoolsv.exe
17:28:34.0490 5156 Spooler - ok
17:28:34.0630 5156 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\windows\system32\sppsvc.exe
17:28:34.0693 5156 sppsvc - ok
17:28:34.0802 5156 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\windows\system32\sppuinotify.dll
17:28:34.0802 5156 sppuinotify - ok
17:28:34.0864 5156 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\windows\system32\DRIVERS\srv.sys
17:28:34.0880 5156 srv - ok
17:28:34.0911 5156 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\windows\system32\DRIVERS\srv2.sys
17:28:34.0927 5156 srv2 - ok
17:28:34.0958 5156 srvnet (27e461f0be5bff5fc737328f749538c3) C:\windows\system32\DRIVERS\srvnet.sys
17:28:34.0958 5156 srvnet - ok
17:28:34.0989 5156 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\windows\System32\ssdpsrv.dll
17:28:35.0005 5156 SSDPSRV - ok
17:28:35.0052 5156 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\windows\system32\sstpsvc.dll
17:28:35.0052 5156 SstpSvc - ok
17:28:35.0067 5156 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\windows\system32\drivers\stexstor.sys
17:28:35.0067 5156 stexstor - ok
17:28:35.0130 5156 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\windows\System32\wiaservc.dll
17:28:35.0161 5156 stisvc - ok
17:28:35.0176 5156 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\windows\system32\DRIVERS\swenum.sys
17:28:35.0176 5156 swenum - ok
17:28:35.0223 5156 swprv (e08e46fdd841b7184194011ca1955a0b) C:\windows\System32\swprv.dll
17:28:35.0254 5156 swprv - ok
17:28:35.0348 5156 SynTP (0cf653915ef33c2b6a98c7ef2f231d56) C:\windows\system32\DRIVERS\SynTP.sys
17:28:35.0364 5156 SynTP - ok
17:28:35.0520 5156 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\windows\system32\sysmain.dll
17:28:35.0566 5156 SysMain - ok
17:28:35.0644 5156 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\windows\System32\TabSvc.dll
17:28:35.0644 5156 TabletInputService - ok
17:28:35.0691 5156 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\windows\System32\tapisrv.dll
17:28:35.0707 5156 TapiSrv - ok
17:28:35.0722 5156 TBS (1be03ac720f4d302ea01d40f588162f6) C:\windows\System32\tbssvc.dll
17:28:35.0722 5156 TBS - ok
17:28:35.0863 5156 Tcpip (acb82bda8f46c84f465c1afa517dc4b9) C:\windows\system32\drivers\tcpip.sys
17:28:35.0910 5156 Tcpip - ok
17:28:36.0066 5156 TCPIP6 (acb82bda8f46c84f465c1afa517dc4b9) C:\windows\system32\DRIVERS\tcpip.sys
17:28:36.0081 5156 TCPIP6 - ok
17:28:36.0175 5156 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\windows\system32\drivers\tcpipreg.sys
17:28:36.0175 5156 tcpipreg - ok
17:28:36.0190 5156 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\windows\system32\drivers\tdpipe.sys
17:28:36.0190 5156 TDPIPE - ok
17:28:36.0222 5156 TDTCP (51c5eceb1cdee2468a1748be550cfbc8) C:\windows\system32\drivers\tdtcp.sys
17:28:36.0222 5156 TDTCP - ok
17:28:36.0253 5156 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\windows\system32\DRIVERS\tdx.sys
17:28:36.0253 5156 tdx - ok
17:28:36.0440 5156 TeamViewer7 (a4d2ce94b028ef1e437cf4ac3d8ff26c) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
17:28:36.0456 5156 TeamViewer7 - ok
17:28:36.0565 5156 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\windows\system32\DRIVERS\termdd.sys
17:28:36.0565 5156 TermDD - ok
17:28:36.0612 5156 TermService (2e648163254233755035b46dd7b89123) C:\windows\System32\termsrv.dll
17:28:36.0643 5156 TermService - ok
17:28:36.0658 5156 Themes (f0344071948d1a1fa732231785a0664c) C:\windows\system32\themeservice.dll
17:28:36.0658 5156 Themes - ok
17:28:36.0690 5156 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\windows\system32\mmcss.dll
17:28:36.0690 5156 THREADORDER - ok
17:28:36.0705 5156 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\windows\System32\trkwks.dll
17:28:36.0705 5156 TrkWks - ok
17:28:36.0752 5156 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\windows\servicing\TrustedInstaller.exe
17:28:36.0768 5156 TrustedInstaller - ok
17:28:36.0768 5156 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\windows\system32\DRIVERS\tssecsrv.sys
17:28:36.0783 5156 tssecsrv - ok
17:28:36.0799 5156 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\windows\system32\drivers\tsusbflt.sys
17:28:36.0799 5156 TsUsbFlt - ok
17:28:36.0814 5156 TsUsbGD (9cc2ccae8a84820eaecb886d477cbcb8) C:\windows\system32\drivers\TsUsbGD.sys
17:28:36.0814 5156 TsUsbGD - ok
17:28:36.0846 5156 tunnel (3566a8daafa27af944f5d705eaa64894) C:\windows\system32\DRIVERS\tunnel.sys
17:28:36.0861 5156 tunnel - ok
17:28:36.0877 5156 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\windows\system32\drivers\uagp35.sys
17:28:36.0877 5156 uagp35 - ok
17:28:36.0908 5156 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\windows\system32\DRIVERS\udfs.sys
17:28:36.0924 5156 udfs - ok
17:28:36.0955 5156 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\windows\system32\UI0Detect.exe
17:28:36.0955 5156 UI0Detect - ok
17:28:36.0970 5156 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\windows\system32\drivers\uliagpkx.sys
17:28:36.0970 5156 uliagpkx - ok
17:28:37.0002 5156 umbus (dc54a574663a895c8763af0fa1ff7561) C:\windows\system32\DRIVERS\umbus.sys
17:28:37.0002 5156 umbus - ok
17:28:37.0017 5156 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\windows\system32\drivers\umpass.sys
17:28:37.0033 5156 UmPass - ok
17:28:37.0204 5156 UNS (7e5e1603d0ff2d240ae70295c5c3fefc) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
17:28:37.0251 5156 UNS - ok
17:28:37.0360 5156 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\windows\System32\upnphost.dll
17:28:37.0376 5156 upnphost - ok
17:28:37.0423 5156 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\windows\system32\DRIVERS\usbccgp.sys
17:28:37.0438 5156 usbccgp - ok
17:28:37.0454 5156 usbcir (af0892a803fdda7492f595368e3b68e7) C:\windows\system32\drivers\usbcir.sys
17:28:37.0454 5156 usbcir - ok
17:28:37.0470 5156 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\windows\system32\drivers\usbehci.sys
17:28:37.0470 5156 usbehci - ok
17:28:37.0501 5156 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\windows\system32\DRIVERS\usbhub.sys
17:28:37.0516 5156 usbhub - ok
17:28:37.0548 5156 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\windows\system32\drivers\usbohci.sys
17:28:37.0548 5156 usbohci - ok
17:28:37.0563 5156 usbprint (73188f58fb384e75c4063d29413cee3d) C:\windows\system32\DRIVERS\usbprint.sys
17:28:37.0579 5156 usbprint - ok
17:28:37.0594 5156 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\windows\system32\DRIVERS\USBSTOR.SYS
17:28:37.0594 5156 USBSTOR - ok
17:28:37.0610 5156 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\windows\system32\drivers\usbuhci.sys
17:28:37.0610 5156 usbuhci - ok
17:28:37.0657 5156 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\windows\system32\Drivers\usbvideo.sys
17:28:37.0672 5156 usbvideo - ok
17:28:37.0688 5156 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\windows\System32\uxsms.dll
17:28:37.0688 5156 UxSms - ok
17:28:37.0719 5156 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\windows\system32\lsass.exe
17:28:37.0719 5156 VaultSvc - ok
17:28:37.0750 5156 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\windows\system32\drivers\vdrvroot.sys
17:28:37.0750 5156 vdrvroot - ok
17:28:37.0782 5156 vds (8d6b481601d01a456e75c3210f1830be) C:\windows\System32\vds.exe
17:28:37.0813 5156 vds - ok
17:28:37.0828 5156 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\windows\system32\DRIVERS\vgapnp.sys
17:28:37.0828 5156 vga - ok
17:28:37.0844 5156 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\windows\System32\drivers\vga.sys
17:28:37.0844 5156 VgaSave - ok
17:28:37.0875 5156 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\windows\system32\drivers\vhdmp.sys
17:28:37.0891 5156 vhdmp - ok
17:28:37.0906 5156 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\windows\system32\drivers\viaide.sys
17:28:37.0906 5156 viaide - ok
17:28:37.0922 5156 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\windows\system32\drivers\volmgr.sys
17:28:37.0922 5156 volmgr - ok
17:28:37.0953 5156 volmgrx (a255814907c89be58b79ef2f189b843b) C:\windows\system32\drivers\volmgrx.sys
17:28:37.0969 5156 volmgrx - ok
17:28:38.0000 5156 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\windows\system32\drivers\volsnap.sys
17:28:38.0000 5156 volsnap - ok
17:28:38.0031 5156 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\windows\system32\drivers\vsmraid.sys
17:28:38.0031 5156 vsmraid - ok
17:28:38.0125 5156 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\windows\system32\vssvc.exe
17:28:38.0172 5156 VSS - ok
17:28:38.0281 5156 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\windows\system32\DRIVERS\vwifibus.sys
17:28:38.0281 5156 vwifibus - ok
17:28:38.0296 5156 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\windows\system32\DRIVERS\vwififlt.sys
17:28:38.0296 5156 vwififlt - ok
17:28:38.0312 5156 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\windows\system32\DRIVERS\vwifimp.sys
17:28:38.0312 5156 vwifimp - ok
17:28:38.0343 5156 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\windows\system32\w32time.dll
17:28:38.0374 5156 W32Time - ok
17:28:38.0390 5156 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\windows\system32\drivers\wacompen.sys
17:28:38.0390 5156 WacomPen - ok
17:28:38.0421 5156 WANARP (356afd78a6ed4457169241ac3965230c) C:\windows\system32\DRIVERS\wanarp.sys
17:28:38.0421 5156 WANARP - ok
17:28:38.0437 5156 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\windows\system32\DRIVERS\wanarp.sys
17:28:38.0437 5156 Wanarpv6 - ok
17:28:38.0530 5156 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\windows\system32\Wat\WatAdminSvc.exe
17:28:38.0577 5156 WatAdminSvc - ok
17:28:38.0655 5156 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\windows\system32\wbengine.exe
17:28:38.0686 5156 wbengine - ok
17:28:38.0780 5156 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\windows\System32\wbiosrvc.dll
17:28:38.0780 5156 WbioSrvc - ok
17:28:38.0811 5156 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\windows\System32\wcncsvc.dll
17:28:38.0827 5156 wcncsvc - ok
17:28:38.0842 5156 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\windows\System32\WcsPlugInService.dll
17:28:38.0842 5156 WcsPlugInService - ok
17:28:38.0874 5156 Wd (72889e16ff12ba0f235467d6091b17dc) C:\windows\system32\drivers\wd.sys
17:28:38.0874 5156 Wd - ok
17:28:38.0905 5156 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\windows\system32\drivers\Wdf01000.sys
17:28:38.0936 5156 Wdf01000 - ok
17:28:38.0952 5156 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\windows\system32\wdi.dll
17:28:38.0952 5156 WdiServiceHost - ok
17:28:38.0967 5156 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\windows\system32\wdi.dll
17:28:38.0967 5156 WdiSystemHost - ok
17:28:38.0998 5156 wdkmd (94dc2bf6cbaaa95e369c3756d3115a76) C:\windows\system32\DRIVERS\WDKMD.sys
17:28:38.0998 5156 wdkmd - ok
17:28:39.0014 5156 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\windows\System32\webclnt.dll
17:28:39.0030 5156 WebClient - ok
17:28:39.0061 5156 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\windows\system32\wecsvc.dll
17:28:39.0061 5156 Wecsvc - ok
17:28:39.0076 5156 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\windows\System32\wercplsupport.dll
17:28:39.0092 5156 wercplsupport - ok
17:28:39.0108 5156 WerSvc (6d137963730144698cbd10f202e9f251) C:\windows\System32\WerSvc.dll
17:28:39.0108 5156 WerSvc - ok
17:28:39.0139 5156 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\windows\system32\DRIVERS\wfplwf.sys
17:28:39.0139 5156 WfpLwf - ok
17:28:39.0154 5156 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\windows\system32\drivers\wimmount.sys
17:28:39.0154 5156 WIMMount - ok
17:28:39.0186 5156 winioex (fef576b25641012fa927b0a2703c51f9) C:\windows\system32\drivers\winioex.sys
17:28:39.0186 5156 winioex - ok
17:28:39.0248 5156 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\windows\system32\wbem\WMIsvc.dll
17:28:39.0264 5156 Winmgmt - ok
17:28:39.0373 5156 WinRM (bcb1310604aa415c4508708975b3931e) C:\windows\system32\WsmSvc.dll
17:28:39.0420 5156 WinRM - ok
17:28:39.0576 5156 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\windows\System32\wlansvc.dll
17:28:39.0622 5156 Wlansvc - ok
17:28:39.0700 5156 wlcrasvc (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
17:28:39.0700 5156 wlcrasvc - ok
17:28:39.0825 5156 wlidsvc (7e47c328fc4768cb8beafbcfafa70362) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
17:28:39.0872 5156 wlidsvc - ok
17:28:39.0950 5156 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\windows\system32\DRIVERS\wmiacpi.sys
17:28:39.0950 5156 WmiAcpi - ok
17:28:40.0028 5156 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\windows\system32\wbem\WmiApSrv.exe
17:28:40.0059 5156 wmiApSrv - ok
17:28:40.0075 5156 WMPNetworkSvc - ok
17:28:40.0106 5156 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\windows\System32\wpcsvc.dll
17:28:40.0106 5156 WPCSvc - ok
17:28:40.0122 5156 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\windows\system32\wpdbusenum.dll
17:28:40.0122 5156 WPDBusEnum - ok
17:28:40.0137 5156 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\windows\system32\drivers\ws2ifsl.sys
17:28:40.0137 5156 ws2ifsl - ok
17:28:40.0153 5156 WSearch - ok
17:28:40.0184 5156 wsvd (83575c43b2bfe9ab0661a7f957e843c0) C:\windows\system32\DRIVERS\wsvd.sys
17:28:40.0200 5156 wsvd - ok
17:28:40.0324 5156 wuauserv (d9ef901dca379cfe914e9fa13b73b4c4) C:\windows\system32\wuaueng.dll
17:28:40.0387 5156 wuauserv - ok
17:28:40.0465 5156 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\windows\system32\drivers\WudfPf.sys
17:28:40.0465 5156 WudfPf - ok
17:28:40.0496 5156 WUDFRd (cf8d590be3373029d57af80914190682) C:\windows\system32\DRIVERS\WUDFRd.sys
17:28:40.0512 5156 WUDFRd - ok
17:28:40.0527 5156 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\windows\System32\WUDFSvc.dll
17:28:40.0543 5156 wudfsvc - ok
17:28:40.0558 5156 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\windows\System32\wwansvc.dll
17:28:40.0574 5156 WwanSvc - ok
17:28:40.0605 5156 zfmvnddb - ok
17:28:40.0652 5156 ZTEusbmdm6k (d6959a4fc3b56afd9e31b0e71377c05f) C:\windows\system32\DRIVERS\ZTEusbmdm6k.sys
17:28:40.0652 5156 ZTEusbmdm6k - ok
17:28:40.0699 5156 ZTEusbnmea (d6959a4fc3b56afd9e31b0e71377c05f) C:\windows\system32\DRIVERS\ZTEusbnmea.sys
17:28:40.0699 5156 ZTEusbnmea - ok
17:28:40.0730 5156 ZTEusbser6k (d6959a4fc3b56afd9e31b0e71377c05f) C:\windows\system32\DRIVERS\ZTEusbser6k.sys
17:28:40.0730 5156 ZTEusbser6k - ok
17:28:40.0777 5156 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
17:28:40.0902 5156 \Device\Harddisk0\DR0 - ok
17:28:40.0902 5156 Boot (0x1200) (20029a40c9fbdfe5af6c0b4d457e2f58) \Device\Harddisk0\DR0\Partition0
17:28:40.0902 5156 \Device\Harddisk0\DR0\Partition0 - ok
17:28:40.0917 5156 Boot (0x1200) (370c9a435bb41689f0dae0b19b15e3aa) \Device\Harddisk0\DR0\Partition1
17:28:40.0933 5156 \Device\Harddisk0\DR0\Partition1 - ok
17:28:40.0948 5156 Boot (0x1200) (8b65aa630ad726e7fc1a276995fd3e83) \Device\Harddisk0\DR0\Partition2
17:28:40.0948 5156 \Device\Harddisk0\DR0\Partition2 - ok
17:28:40.0948 5156 ============================================================
17:28:40.0948 5156 Scan finished
17:28:40.0948 5156 ============================================================
17:28:40.0964 4252 Detected object count: 0
17:28:40.0964 4252 Actual detected object count: 0

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15925
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Sirefef p, Sirefef ab

#5 Příspěvek od JaRon »

log je cisty
este prescanuj s MBAM - log vloz
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Odpovědět