Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Blue screen vždy po cca 10 minútach od zapnutia PC

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Emeron
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 17 črc 2012 09:27

Blue screen vždy po cca 10 minútach od zapnutia PC

#1 Příspěvek od Emeron »

Dobrý deň,

vyhadzuje mi blue screen asi každých 10 min asi nejaký vír prosím vás o pomoc prikladám log kým ma zase nevipne.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Orion at 2012-07-18 09:20:12
Microsoft Windows 7 Ultimate
System drive C: has 137 GB (44%) free of 310 GB
Total RAM: 3572 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:20:14, on 18. 7. 2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ASUS\AI Suite II\AsRoutineController.exe
C:\Program Files\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe
C:\Program Files\YourFileDownloader\YourFileUpdater.exe
C:\Program Files\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Program Files\EXPERTool\TBPanel.exe
C:\Program Files\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe
C:\Program Files\Anti-Vibrate Oscar Editor\OscarEditor.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\ASUS\AI Suite II\EPU\EPUHelp.exe
C:\Program Files\ASUS\AI Suite II\AI Suite II.exe
C:\Program Files\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
C:\Program Files\Opera\opera.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Users\Orion\Desktop\RSIT.exe
C:\Program Files\trend micro\Orion.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/bsprpc/{2055B ... D227356B16}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {0b7430e9-e659-4555-ac67-be3340aaa519} - (no file)
O2 - BHO: CrossriderApp0000435 - {11111111-1111-1111-1111-110011041135} - C:\Program Files\Codec-V\Codec-V.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Windows Live ID Sign-in Helper - {54055123-4E50-0B78-308C-669837415A51} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: ???????@Mail.Ru - {8984B388-A5BB-4DF7-B274-77B879E179DB} - (no file)
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [ASUS ShellProcess Execute] C:\Program Files\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\Update\realsched.exe" -osboot
O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files\Anti-Vibrate Oscar Editor\OscarEditor.exe" Minimum
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [TBPanel] "C:\Program Files\EXPERTool\TBPanel.exe" /A
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-4060915618-3275642364-3586104651-1005\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-4060915618-3275642364-3586104651-1005\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs:
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files\ASUS\AXSP\1.00.13\atkexComSvc.exe
O23 - Service: ASUS HM Com Service (asHmComSvc) - Unknown owner - C:\Program Files\ASUS\AAHM\1.00.13\aaHMSvc.exe
O23 - Service: ASUS System Control Service (AsSysCtrlService) - Unknown owner - C:\Program Files\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 9088 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Ad-Aware Antivirus Scheduled Scan.job
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\At1.job
C:\Windows\tasks\At2.job
C:\Windows\tasks\At3.job
C:\Windows\tasks\At4.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011041135}]
Codec-V - C:\Program Files\Codec-V\Codec-V.dll [2012-04-03 489472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]
Babylon toolbar helper - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll [2011-08-14 270960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2012-07-08 426736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{54055123-4E50-0B78-308C-669837415A51}]
Windows Live ID Sign-in Helper

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-05-04 453504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8984B388-A5BB-4DF7-B274-77B879E179DB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-05-04 157576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{98889811-442D-49dd-99D7-DC866BE87DBC} - Babylon Toolbar - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll [2011-08-14 237680]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-11-02 9808488]
"ASUS ShellProcess Execute"=C:\Program Files\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe [2010-09-28 252544]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"NUSB3MON"=C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-04-27 113288]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-11-05 283160]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-04-09 2029640]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-02-20 59240]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-17 252296]
"TkBellExe"=c:\program files\real\realplayer\Update\realsched.exe [2012-07-08 296096]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"GAINWARD"=C:\Program Files\EXPERTool\TBPanel.exe [2012-04-11 2040136]
"OscarEditor"=C:\Program Files\Anti-Vibrate Oscar Editor\OscarEditor.exe [2010-07-22 2636800]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2009-09-18 205976]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"MsnMsgr"=C:\Program Files\MSN Messenger\MsnMsgr.Exe /background []
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
"TBPanel"=C:\Program Files\EXPERTool\TBPanel.exe [2012-04-11 2040136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.VP60"=C:\Windows\system32\vp6vfw.dll
"vidc.VP61"=C:\Windows\system32\vp6vfw.dll
"VIDC.WMV3"=wmv9vcm.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-07-18 09:01:30 ----D---- C:\Program Files\trend micro
2012-07-18 09:01:29 ----D---- C:\rsit
2012-07-17 09:27:12 ----D---- C:\Program Files\NirSoft
2012-07-15 10:09:28 ----D---- C:\ProgramData\Rockstar Games
2012-07-15 10:09:28 ----D---- C:\Program Files\Rockstar Games
2012-07-08 22:37:42 ----D---- C:\Program Files\LucasArts
2012-07-08 16:54:33 ----D---- C:\Program Files\Apple Software Update
2012-07-08 16:43:50 ----D---- C:\Program Files\Common Files\xing shared
2012-07-08 16:43:47 ----A---- C:\Windows\system32\rmoc3260.dll
2012-07-08 16:43:31 ----A---- C:\Windows\system32\pncrt.dll
2012-07-08 16:41:22 ----D---- C:\Program Files\Common Files\Java
2012-07-08 16:41:02 ----D---- C:\Program Files\Oracle
2012-07-08 16:40:31 ----A---- C:\Windows\system32\npDeployJava1.dll
2012-07-08 16:40:31 ----A---- C:\Windows\system32\javaws.exe
2012-07-08 16:32:11 ----D---- C:\Users\Orion\AppData\Roaming\RealNetworks
2012-07-06 19:32:30 ----D---- C:\Program Files\BabylonToolbar
2012-07-06 19:32:06 ----D---- C:\Users\Orion\AppData\Roaming\YourFileDownloader
2012-07-06 19:32:06 ----D---- C:\Program Files\YourFileDownloader
2012-07-05 13:27:00 ----A---- C:\Windows\ntbtlog.txt

======List of files/folders modified in the last 1 month======

2012-07-18 09:20:12 ----D---- C:\Windows\Temp
2012-07-18 09:16:58 ----D---- C:\Windows\Minidump
2012-07-18 09:16:58 ----D---- C:\ProgramData\NVIDIA
2012-07-18 09:16:54 ----D---- C:\Windows
2012-07-18 09:01:30 ----RD---- C:\Program Files
2012-07-18 08:49:16 ----D---- C:\Windows\system32\config
2012-07-17 09:56:49 ----SD---- C:\ProgramData\Microsoft
2012-07-17 09:27:16 ----D---- C:\Windows\Prefetch
2012-07-15 22:28:09 ----SHD---- C:\System Volume Information
2012-07-15 18:39:09 ----SHD---- C:\Windows\Installer
2012-07-15 18:36:46 ----D---- C:\Users\Orion\AppData\Roaming\uTorrent
2012-07-15 10:28:32 ----RSD---- C:\Windows\assembly
2012-07-15 10:09:28 ----HD---- C:\ProgramData
2012-07-15 10:09:28 ----HD---- C:\Program Files\InstallShield Installation Information
2012-07-13 22:41:54 ----D---- C:\Windows\System32
2012-07-13 22:41:49 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2012-07-12 09:05:14 ----D---- C:\Windows\system32\catroot2
2012-07-08 17:05:02 ----D---- C:\Windows\Tasks
2012-07-08 17:05:02 ----D---- C:\Windows\system32\Tasks
2012-07-08 17:05:02 ----D---- C:\Program Files\Google
2012-07-08 16:43:50 ----D---- C:\Program Files\Common Files
2012-07-08 16:43:49 ----D---- C:\ProgramData\Real
2012-07-08 16:43:34 ----A---- C:\Windows\system32\pndx5032.dll
2012-07-08 16:43:34 ----A---- C:\Windows\system32\pndx5016.dll
2012-07-08 16:43:30 ----A---- C:\Windows\system32\msvcr71.dll
2012-07-08 16:43:30 ----A---- C:\Windows\system32\msvcp71.dll
2012-07-08 16:40:13 ----A---- C:\Windows\system32\javaw.exe
2012-07-08 16:40:13 ----A---- C:\Windows\system32\java.exe
2012-07-08 16:40:11 ----D---- C:\Program Files\Java
2012-07-06 19:32:31 ----A---- C:\user.js
2012-07-06 15:04:23 ----D---- C:\Windows\system32\directx

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-11-05 354840]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-04-07 722416]
R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2010-08-24 11456]
R1 AsUpIO;AsUpIO; C:\Windows\system32\drivers\AsUpIO.sys [2010-08-03 11832]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-04-09 107256]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files\UltraISO\drivers\ISODrive.sys [2010-01-29 82320]
R1 SbFw;SbFw; C:\Windows\system32\drivers\SbFw.sys [2011-04-05 221784]
R1 SbTis;SbTis; C:\Windows\system32\drivers\sbtis.sys [2011-04-05 78936]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2011-06-11 281760]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-04-09 113960]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2009-04-09 133000]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2009-04-09 38240]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2011-06-11 25888]
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-06-25 35088]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2009-04-09 33096]
R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2010-08-17 22040]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2010-11-02 3228712]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-09-30 61824]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-09-30 141568]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2012-01-17 148800]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2010-10-26 322664]
R3 SBFWIMCLMP;Sunbelt Software Firewall NDIS IM Filter Miniport; C:\Windows\system32\DRIVERS\SBFWIM.sys [2011-02-08 69208]
S1 SBRE;SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys []
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 a3ret5u5;a3ret5u5; C:\Windows\system32\drivers\a3ret5u5.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [2010-03-31 27760]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena\safedrv.sys []
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Service; C:\Windows\system32\DRIVERS\sbfwim.sys [2011-02-08 69208]
S3 sbhips;sbhips; C:\Windows\system32\drivers\sbhips.sys [2011-04-05 94040]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 TBPanel;TBPanel; C:\Windows\system32\drivers\TBPanel.sys [2007-03-16 12256]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 asComSvc;ASUS Com Service; C:\Program Files\ASUS\AXSP\1.00.13\atkexComSvc.exe [2010-11-03 918144]
R2 asHmComSvc;ASUS HM Com Service; C:\Program Files\ASUS\AAHM\1.00.13\aaHMSvc.exe [2010-12-02 915584]
R2 AsSysCtrlService;ASUS System Control Service; C:\Program Files\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [2010-10-21 586880]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-04-09 731840]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-11-05 13336]
R2 NVSvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-02-29 645440]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-03-01 2348352]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2011-11-17 66872]
R2 PnkBstrB;PnkBstrB; C:\Windows\system32\PnkBstrB.exe [2011-11-17 107832]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-02-29 382272]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-13 250056]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-04-09 20680]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2010-06-25 117264]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Emeron
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 17 črc 2012 09:27

Re: Blue screen vždy po cca 10 minútach od zapnutia PC

#2 Příspěvek od Emeron »

Myslím že sa to nejak ustálilo a mám čas pre bližší popis. Včera mi robilo to isté asi 5-6 krát mi po 10 minútach vyhodí blue screen a keď nespustím Operu ale priamo kontrolu antivírovým programom tak mi už BS nevyhodí po kontrole vôbec. Môžem pozerať filmy, počúvať hudbu, hrať hry, surfovať na nete a BS to nevyhodí. Pár dní predtým mi BS vyhodilo vždy pri rozbaľovaní rar súborov alebo komprimovaní do rar.

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Blue screen vždy po cca 10 minútach od zapnutia PC

#3 Příspěvek od motji »

Hezké dopoledne :)
a antivir při kontrole něco najde?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Emeron
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 17 črc 2012 09:27

Re: Blue screen vždy po cca 10 minútach od zapnutia PC

#4 Příspěvek od Emeron »

Áno včera mi to našlo 12 vírov a dnes 1 je to ten istý čo bol včera medzi tými 12 včera Win32/Packed.VMProtect.AAH trojský kůň

Emeron
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 17 črc 2012 09:27

Re: Blue screen vždy po cca 10 minútach od zapnutia PC

#5 Příspěvek od Emeron »

No teraz mi vyhodilo BS zase a vírus je odstránený. Išiel mi vkuse 2 hodiny a ako náhle som začal sťahovať cez operu tak po pár minútach mi vyhodilo BS a po reštarte bola opera úplne prázna žiadne otvorené listy úplne vybielená.

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Blue screen vždy po cca 10 minútach od zapnutia PC

#6 Příspěvek od motji »

v jakém souboru ten vir má být?

:arrow: Stáhněte TDSSKiller http://support.kaspersky.com/downloads/ ... killer.exe
- a uložte ho na plochu.
- 2x klikněte na ikonu programu a spusťte
- dejte volbu Spustit kontrolu - pak potvrdte start sken
- pokud program najde infikovaný soubor, ukáže se Vám předvolená akce Cure, v tom případě potvrdte tlačítko Continue
- pokud bude chtít program restartovat počítač, klikněte na tlačítko Reboot Now
- pokud si restart nevyžádá, klikněte na tlačítko Report. Měl vy na Vás vyskočit log, obsah logu zkopírujte do svého topicu.
- pokud se log nezobrazí, je uložený ve Vašem kořenovém adresáři.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Emeron
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 17 črc 2012 09:27

Re: Blue screen vždy po cca 10 minútach od zapnutia PC

#7 Příspěvek od Emeron »

Ten vír je .dll súbor ale NOD32 ho našiel a odstránil teraz je počítač čistý ale i tak mi vyhadzuje blue screen keď som dnes sťahoval z internetu a keď som včera komprimoval do rar súboru. BS to vyhadzuje tak rôzne neurčito pri rôznych operáciach ale i keď nič nerobím niekde musí byť ešte nejaký vír schovaný.

Urobil som to s TDSSKiller a našlo to len nejaký Locked file C:/Windows/system32/Drivers/sptd.sys a možnosti skip, copy to quarantine a delete dal som skip a report takýto:

20:50:26.0198 5244 TDSS rootkit removing tool 2.7.46.0 Jul 16 2012 22:10:11
20:50:26.0821 5244 ============================================================
20:50:26.0821 5244 Current date / time: 2012/07/18 20:50:26.0821
20:50:26.0821 5244 SystemInfo:
20:50:26.0821 5244
20:50:26.0821 5244 OS Version: 6.1.7600 ServicePack: 0.0
20:50:26.0821 5244 Product type: Workstation
20:50:26.0821 5244 ComputerName: ORION-PC
20:50:26.0821 5244 UserName: Orion
20:50:26.0821 5244 Windows directory: C:\Windows
20:50:26.0821 5244 System windows directory: C:\Windows
20:50:26.0821 5244 Processor architecture: Intel x86
20:50:26.0821 5244 Number of processors: 4
20:50:26.0821 5244 Page size: 0x1000
20:50:26.0821 5244 Boot type: Normal boot
20:50:26.0821 5244 ============================================================
20:50:27.0170 5244 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
20:50:27.0173 5244 ============================================================
20:50:27.0173 5244 \Device\Harddisk0\DR0:
20:50:27.0175 5244 MBR partitions:
20:50:27.0175 5244 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
20:50:27.0175 5244 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x25D46000
20:50:27.0175 5244 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x25D78800, BlocksNum 0x25D78000
20:50:27.0175 5244 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x4BAF0800, BlocksNum 0x27CB8000
20:50:27.0175 5244 ============================================================
20:50:27.0195 5244 C: <-> \Device\Harddisk0\DR0\Partition1
20:50:27.0392 5244 D: <-> \Device\Harddisk0\DR0\Partition2
20:50:27.0486 5244 E: <-> \Device\Harddisk0\DR0\Partition3
20:50:27.0486 5244 ============================================================
20:50:27.0486 5244 Initialize success
20:50:27.0486 5244 ============================================================
20:50:52.0839 3132 ============================================================
20:50:52.0839 3132 Scan started
20:50:52.0839 3132 Mode: Manual;
20:50:52.0839 3132 ============================================================
20:50:53.0073 3132 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\Windows\system32\DRIVERS\1394ohci.sys
20:50:53.0073 3132 1394ohci - ok
20:50:53.0104 3132 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\Windows\system32\DRIVERS\ACPI.sys
20:50:53.0104 3132 ACPI - ok
20:50:53.0130 3132 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\Windows\system32\DRIVERS\acpipmi.sys
20:50:53.0130 3132 AcpiPmi - ok
20:50:53.0195 3132 AdobeFlashPlayerUpdateSvc (5e1a953c6472e7bb644892a4d0df5e72) C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
20:50:53.0200 3132 AdobeFlashPlayerUpdateSvc - ok
20:50:53.0237 3132 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
20:50:53.0242 3132 adp94xx - ok
20:50:53.0257 3132 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
20:50:53.0262 3132 adpahci - ok
20:50:53.0300 3132 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
20:50:53.0302 3132 adpu320 - ok
20:50:53.0332 3132 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\Windows\System32\aelupsvc.dll
20:50:53.0332 3132 AeLookupSvc - ok
20:50:53.0382 3132 AFD (ddc040fdb01ef1712a6b13e52afb104c) C:\Windows\system32\drivers\afd.sys
20:50:53.0387 3132 AFD - ok
20:50:53.0410 3132 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\DRIVERS\agp440.sys
20:50:53.0410 3132 agp440 - ok
20:50:53.0410 3132 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
20:50:53.0426 3132 aic78xx - ok
20:50:53.0457 3132 ALG (18a54e132947cd98fea9accc57f98f13) C:\Windows\System32\alg.exe
20:50:53.0473 3132 ALG - ok
20:50:53.0488 3132 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\DRIVERS\aliide.sys
20:50:53.0488 3132 aliide - ok
20:50:53.0488 3132 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\DRIVERS\amdagp.sys
20:50:53.0488 3132 amdagp - ok
20:50:53.0488 3132 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\DRIVERS\amdide.sys
20:50:53.0488 3132 amdide - ok
20:50:53.0504 3132 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
20:50:53.0504 3132 AmdK8 - ok
20:50:53.0520 3132 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
20:50:53.0520 3132 AmdPPM - ok
20:50:53.0551 3132 amdsata (2101a86c25c154f8314b24ef49d7fbc2) C:\Windows\system32\DRIVERS\amdsata.sys
20:50:53.0551 3132 amdsata - ok
20:50:53.0551 3132 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
20:50:53.0551 3132 amdsbs - ok
20:50:53.0582 3132 amdxata (b81c2b5616f6420a9941ea093a92b150) C:\Windows\system32\DRIVERS\amdxata.sys
20:50:53.0582 3132 amdxata - ok
20:50:53.0582 3132 AppID (feb834c02ce1e84b6a38f953ca067706) C:\Windows\system32\drivers\appid.sys
20:50:53.0582 3132 AppID - ok
20:50:53.0613 3132 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\Windows\System32\appidsvc.dll
20:50:53.0613 3132 AppIDSvc - ok
20:50:53.0644 3132 Appinfo (7dead9e3f65dcb2794f2711003bbf650) C:\Windows\System32\appinfo.dll
20:50:53.0644 3132 Appinfo - ok
20:50:53.0676 3132 AppMgmt (a45d184df6a8803da13a0b329517a64a) C:\Windows\System32\appmgmts.dll
20:50:53.0676 3132 AppMgmt - ok
20:50:53.0691 3132 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
20:50:53.0691 3132 arc - ok
20:50:53.0691 3132 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
20:50:53.0691 3132 arcsas - ok
20:50:53.0832 3132 asComSvc (fb03a917c1294d3e6d671f24722e1ba3) C:\Program Files\ASUS\AXSP\1.00.13\atkexComSvc.exe
20:50:53.0832 3132 asComSvc - ok
20:50:53.0863 3132 asHmComSvc (a63173897ea1a73a75d0e65036de5b15) C:\Program Files\ASUS\AAHM\1.00.13\aaHMSvc.exe
20:50:53.0863 3132 asHmComSvc - ok
20:50:54.0003 3132 AsIO (419f3128e01b5ac038efd500314f62b8) C:\Windows\system32\drivers\AsIO.sys
20:50:54.0003 3132 AsIO - ok
20:50:54.0157 3132 aspnet_state (776acefa0ca9df0faa51a5fb2f435705) C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
20:50:54.0157 3132 aspnet_state - ok
20:50:54.0194 3132 AsSysCtrlService (5c31dfb196cb3a488a041881634d86d2) C:\Program Files\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
20:50:54.0199 3132 AsSysCtrlService - ok
20:50:54.0224 3132 AsUpIO (a9a565c669786c402752f609afdd0dd5) C:\Windows\system32\drivers\AsUpIO.sys
20:50:54.0224 3132 AsUpIO - ok
20:50:54.0232 3132 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
20:50:54.0234 3132 AsyncMac - ok
20:50:54.0292 3132 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\DRIVERS\atapi.sys
20:50:54.0292 3132 atapi - ok
20:50:54.0341 3132 atksgt (f0d933b42cd0594048e4d5200ae9e417) C:\Windows\system32\DRIVERS\atksgt.sys
20:50:54.0341 3132 atksgt - ok
20:50:54.0387 3132 AudioEndpointBuilder (510c873bfa135aa829f4180352772734) C:\Windows\System32\Audiosrv.dll
20:50:54.0403 3132 AudioEndpointBuilder - ok
20:50:54.0403 3132 Audiosrv (510c873bfa135aa829f4180352772734) C:\Windows\System32\Audiosrv.dll
20:50:54.0403 3132 Audiosrv - ok
20:50:54.0434 3132 AxInstSV (dd6a431b43e34b91a767d1ce33728175) C:\Windows\System32\AxInstSV.dll
20:50:54.0434 3132 AxInstSV - ok
20:50:54.0481 3132 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
20:50:54.0497 3132 b06bdrv - ok
20:50:54.0543 3132 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
20:50:54.0543 3132 b57nd60x - ok
20:50:54.0575 3132 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\Windows\System32\bdesvc.dll
20:50:54.0575 3132 BDESVC - ok
20:50:54.0590 3132 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
20:50:54.0590 3132 Beep - ok
20:50:54.0637 3132 BFE (85ac71c045ceb054ed48a7841aae0c11) C:\Windows\System32\bfe.dll
20:50:54.0637 3132 BFE - ok
20:50:54.0684 3132 BITS (53f476476f55a27f580661bde09c4ec4) C:\Windows\System32\qmgr.dll
20:50:54.0699 3132 BITS - ok
20:50:54.0715 3132 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
20:50:54.0715 3132 blbdrive - ok
20:50:54.0746 3132 bowser (fcafaef6798d7b51ff029f99a9898961) C:\Windows\system32\DRIVERS\bowser.sys
20:50:54.0746 3132 bowser - ok
20:50:54.0762 3132 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
20:50:54.0762 3132 BrFiltLo - ok
20:50:54.0777 3132 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
20:50:54.0777 3132 BrFiltUp - ok
20:50:54.0793 3132 Browser (598e1280e7ff3744f4b8329366cc5635) C:\Windows\System32\browser.dll
20:50:54.0793 3132 Browser - ok
20:50:54.0824 3132 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
20:50:54.0824 3132 Brserid - ok
20:50:54.0840 3132 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
20:50:54.0840 3132 BrSerWdm - ok
20:50:54.0871 3132 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
20:50:54.0871 3132 BrUsbMdm - ok
20:50:54.0887 3132 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
20:50:54.0887 3132 BrUsbSer - ok
20:50:54.0887 3132 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
20:50:54.0887 3132 BTHMODEM - ok
20:50:54.0933 3132 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\Windows\system32\bthserv.dll
20:50:54.0933 3132 bthserv - ok
20:50:54.0974 3132 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
20:50:54.0977 3132 cdfs - ok
20:50:55.0012 3132 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\Windows\system32\DRIVERS\cdrom.sys
20:50:55.0014 3132 cdrom - ok
20:50:55.0054 3132 CertPropSvc (628a9e30ec5e18dd5de6be4dbdc12198) C:\Windows\System32\certprop.dll
20:50:55.0057 3132 CertPropSvc - ok
20:50:55.0072 3132 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
20:50:55.0072 3132 circlass - ok
20:50:55.0092 3132 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
20:50:55.0094 3132 CLFS - ok
20:50:55.0197 3132 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:50:55.0197 3132 clr_optimization_v2.0.50727_32 - ok
20:50:55.0302 3132 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:50:55.0302 3132 clr_optimization_v4.0.30319_32 - ok
20:50:55.0318 3132 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
20:50:55.0318 3132 CmBatt - ok
20:50:55.0349 3132 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\DRIVERS\cmdide.sys
20:50:55.0349 3132 cmdide - ok
20:50:55.0380 3132 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
20:50:55.0380 3132 CNG - ok
20:50:55.0396 3132 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
20:50:55.0396 3132 Compbatt - ok
20:50:55.0427 3132 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\Windows\system32\DRIVERS\CompositeBus.sys
20:50:55.0427 3132 CompositeBus - ok
20:50:55.0427 3132 COMSysApp - ok
20:50:55.0505 3132 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
20:50:55.0505 3132 crcdisk - ok
20:50:55.0552 3132 CryptSvc (9c231178ce4fb385f4b54b0a9080b8a4) C:\Windows\system32\cryptsvc.dll
20:50:55.0552 3132 CryptSvc - ok
20:50:55.0614 3132 CSC (27c9490bdd0ae48911ab8cf1932591ed) C:\Windows\system32\drivers\csc.sys
20:50:55.0630 3132 CSC - ok
20:50:55.0661 3132 CscService (56fb5f222ea30d3d3fc459879772cb73) C:\Windows\System32\cscsvc.dll
20:50:55.0661 3132 CscService - ok
20:50:55.0708 3132 DcomLaunch (b82cd39e336973359d7c9bf911e8e84f) C:\Windows\system32\rpcss.dll
20:50:55.0708 3132 DcomLaunch - ok
20:50:55.0754 3132 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\Windows\System32\defragsvc.dll
20:50:55.0754 3132 defragsvc - ok
20:50:55.0817 3132 DfsC (8e09e52ee2e3ceb199ef3dd99cf9e3fb) C:\Windows\system32\Drivers\dfsc.sys
20:50:55.0817 3132 DfsC - ok
20:50:55.0848 3132 Dhcp (c56495fbd770712367cad35e5de72da6) C:\Windows\system32\dhcpcore.dll
20:50:55.0848 3132 Dhcp - ok
20:50:55.0864 3132 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
20:50:55.0864 3132 discache - ok
20:50:55.0895 3132 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
20:50:55.0895 3132 Disk - ok
20:50:55.0910 3132 Dnscache (d0722e963d3c6145446874241401b209) C:\Windows\System32\dnsrslvr.dll
20:50:55.0910 3132 Dnscache - ok
20:50:55.0926 3132 dot3svc (4408c85c21eea48eb0ce486baeef0502) C:\Windows\System32\dot3svc.dll
20:50:55.0926 3132 dot3svc - ok
20:50:55.0942 3132 DPS (7fa81c6e11caa594adb52084da73a1e5) C:\Windows\system32\dps.dll
20:50:55.0942 3132 DPS - ok
20:50:55.0973 3132 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
20:50:55.0973 3132 drmkaud - ok
20:50:56.0004 3132 DXGKrnl (39806cfeddcc55e686a49bccd2972f23) C:\Windows\System32\drivers\dxgkrnl.sys
20:50:56.0020 3132 DXGKrnl - ok
20:50:56.0035 3132 eamon (3b2e8f97b6869c29da023ee75bf585d5) C:\Windows\system32\DRIVERS\eamon.sys
20:50:56.0051 3132 eamon - ok
20:50:56.0066 3132 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\Windows\System32\eapsvc.dll
20:50:56.0066 3132 EapHost - ok
20:50:56.0191 3132 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
20:50:56.0222 3132 ebdrv - ok
20:50:56.0300 3132 EFS (f42309c4191c506b71db5d1126d26318) C:\Windows\System32\lsass.exe
20:50:56.0316 3132 EFS - ok
20:50:56.0347 3132 ehdrv (4fad054cbcaa296be7bd2cb77da9d9b4) C:\Windows\system32\DRIVERS\ehdrv.sys
20:50:56.0363 3132 ehdrv - ok
20:50:56.0425 3132 ehRecvr (3a74a6e33685662b125a3269b1f2114f) C:\Windows\ehome\ehRecvr.exe
20:50:56.0425 3132 ehRecvr - ok
20:50:56.0441 3132 ehSched (d389bff34f80caede417bf9d1507996a) C:\Windows\ehome\ehsched.exe
20:50:56.0441 3132 ehSched - ok
20:50:56.0534 3132 EhttpSrv (a292d2284353af1350a6a3c20d231098) C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
20:50:56.0534 3132 EhttpSrv - ok
20:50:56.0581 3132 ekrn (8791f03854611deac8d2967c1c958a7e) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
20:50:56.0581 3132 ekrn - ok
20:50:56.0675 3132 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
20:50:56.0675 3132 elxstor - ok
20:50:56.0722 3132 epfw (63c9dfc27c401bff6188a1ca68d0abb0) C:\Windows\system32\DRIVERS\epfw.sys
20:50:56.0722 3132 epfw - ok
20:50:56.0737 3132 Epfwndis (3b47010b2425b69826004767e59045ba) C:\Windows\system32\DRIVERS\Epfwndis.sys
20:50:56.0737 3132 Epfwndis - ok
20:50:56.0784 3132 epfwwfp (b379d66406fe395e8adc557ef6074d17) C:\Windows\system32\DRIVERS\epfwwfp.sys
20:50:56.0784 3132 epfwwfp - ok
20:50:56.0800 3132 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\DRIVERS\errdev.sys
20:50:56.0800 3132 ErrDev - ok
20:50:56.0846 3132 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\Windows\system32\es.dll
20:50:56.0846 3132 EventSystem - ok
20:50:56.0924 3132 EverestDriver (898ad7d508f6ade242d94752e09f4152) C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt
20:50:56.0924 3132 EverestDriver - ok
20:50:56.0940 3132 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
20:50:56.0956 3132 exfat - ok
20:50:56.0987 3132 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
20:50:57.0002 3132 fastfat - ok
20:50:57.0034 3132 Fax (f7ea23cc5e6bf2181f3f399d54f6efc1) C:\Windows\system32\fxssvc.exe
20:50:57.0034 3132 Fax - ok
20:50:57.0049 3132 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
20:50:57.0049 3132 fdc - ok
20:50:57.0065 3132 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\Windows\system32\fdPHost.dll
20:50:57.0065 3132 fdPHost - ok
20:50:57.0096 3132 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\Windows\system32\fdrespub.dll
20:50:57.0096 3132 FDResPub - ok
20:50:57.0147 3132 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
20:50:57.0149 3132 FileInfo - ok
20:50:57.0157 3132 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
20:50:57.0159 3132 Filetrace - ok
20:50:57.0169 3132 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
20:50:57.0169 3132 flpydisk - ok
20:50:57.0192 3132 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
20:50:57.0197 3132 FltMgr - ok
20:50:57.0249 3132 FontCache (b6512a85815fdc3d560c3705f5bdb93d) C:\Windows\system32\FntCache.dll
20:50:57.0252 3132 FontCache - ok
20:50:57.0312 3132 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
20:50:57.0314 3132 FontCache3.0.0.0 - ok
20:50:57.0334 3132 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
20:50:57.0337 3132 FsDepends - ok
20:50:57.0382 3132 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
20:50:57.0382 3132 Fs_Rec - ok
20:50:57.0418 3132 fvevol (5592f5dba26282d24d2b080eb438a4d7) C:\Windows\system32\DRIVERS\fvevol.sys
20:50:57.0418 3132 fvevol - ok
20:50:57.0433 3132 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
20:50:57.0433 3132 gagp30kx - ok
20:50:57.0449 3132 GGSAFERDriver - ok
20:50:57.0480 3132 gpsvc (8ba3c04702bf8f927ab36ae8313ca4ee) C:\Windows\System32\gpsvc.dll
20:50:57.0480 3132 gpsvc - ok
20:50:57.0496 3132 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
20:50:57.0496 3132 hcw85cir - ok
20:50:57.0543 3132 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\Windows\system32\drivers\HdAudio.sys
20:50:57.0543 3132 HdAudAddService - ok
20:50:57.0574 3132 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\Windows\system32\DRIVERS\HDAudBus.sys
20:50:57.0574 3132 HDAudBus - ok
20:50:57.0589 3132 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
20:50:57.0589 3132 HidBatt - ok
20:50:57.0605 3132 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
20:50:57.0605 3132 HidBth - ok
20:50:57.0621 3132 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
20:50:57.0621 3132 HidIr - ok
20:50:57.0636 3132 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\Windows\system32\hidserv.dll
20:50:57.0652 3132 hidserv - ok
20:50:57.0667 3132 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\Windows\system32\DRIVERS\hidusb.sys
20:50:57.0667 3132 HidUsb - ok
20:50:57.0699 3132 hkmsvc (741c2a45ca8407e374aaba3e330b7872) C:\Windows\system32\kmsvc.dll
20:50:57.0699 3132 hkmsvc - ok
20:50:57.0730 3132 HomeGroupListener (a768ca158bb06782a2835b907f4873c3) C:\Windows\system32\ListSvc.dll
20:50:57.0730 3132 HomeGroupListener - ok
20:50:57.0761 3132 HomeGroupProvider (fb08dec5ef43d0c66d83b8e9694e7549) C:\Windows\system32\provsvc.dll
20:50:57.0761 3132 HomeGroupProvider - ok
20:50:57.0808 3132 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\DRIVERS\HpSAMD.sys
20:50:57.0808 3132 HpSAMD - ok
20:50:57.0855 3132 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\Windows\system32\drivers\HTTP.sys
20:50:57.0855 3132 HTTP - ok
20:50:57.0870 3132 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\Windows\system32\drivers\hwpolicy.sys
20:50:57.0870 3132 hwpolicy - ok
20:50:57.0886 3132 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\DRIVERS\i8042prt.sys
20:50:57.0886 3132 i8042prt - ok
20:50:57.0917 3132 iaStor (f4037a3fedb92dd97c95f320766ea5c9) C:\Windows\system32\DRIVERS\iaStor.sys
20:50:57.0917 3132 iaStor - ok
20:50:57.0979 3132 IAStorDataMgrSvc (8fff9083252c16fe3960173722605e9e) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
20:50:57.0995 3132 IAStorDataMgrSvc - ok
20:50:58.0011 3132 iaStorV (934af4d7c5f457b9f0743f4299b77b67) C:\Windows\system32\DRIVERS\iaStorV.sys
20:50:58.0011 3132 iaStorV - ok
20:50:58.0056 3132 ICCWDT (8661b1d7706889463289a8660352f0f8) C:\Windows\system32\DRIVERS\ICCWDT.sys
20:50:58.0056 3132 ICCWDT - ok
20:50:58.0186 3132 IDriverT (1cf03c69b49acb70c722df92755c0c8c) C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
20:50:58.0189 3132 IDriverT - ok
20:50:58.0279 3132 idsvc (5af815eb5bc9802e5a064e2ba62bfc0c) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
20:50:58.0291 3132 idsvc - ok
20:50:58.0301 3132 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
20:50:58.0317 3132 iirsp - ok
20:50:58.0364 3132 IKEEXT (fac0ee6562b121b1399d6e855583f7a5) C:\Windows\System32\ikeext.dll
20:50:58.0379 3132 IKEEXT - ok
20:50:58.0504 3132 IntcAzAudAddService (da6ee479071883d263e75be7a67a70b8) C:\Windows\system32\drivers\RTKVHDA.sys
20:50:58.0520 3132 IntcAzAudAddService - ok
20:50:58.0644 3132 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\DRIVERS\intelide.sys
20:50:58.0644 3132 intelide - ok
20:50:58.0676 3132 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
20:50:58.0676 3132 intelppm - ok
20:50:58.0722 3132 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\Windows\system32\ipbusenum.dll
20:50:58.0722 3132 IPBusEnum - ok
20:50:58.0785 3132 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:50:58.0785 3132 IpFilterDriver - ok
20:50:58.0816 3132 iphlpsvc (477397b432a256a50ee7e4339eb9ea14) C:\Windows\System32\iphlpsvc.dll
20:50:58.0816 3132 iphlpsvc - ok
20:50:58.0847 3132 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\Windows\system32\DRIVERS\IPMIDrv.sys
20:50:58.0847 3132 IPMIDRV - ok
20:50:58.0894 3132 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
20:50:58.0894 3132 IPNAT - ok
20:50:58.0910 3132 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
20:50:58.0910 3132 IRENUM - ok
20:50:58.0968 3132 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\DRIVERS\isapnp.sys
20:50:58.0968 3132 isapnp - ok
20:50:59.0011 3132 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\Windows\system32\DRIVERS\msiscsi.sys
20:50:59.0013 3132 iScsiPrt - ok
20:50:59.0198 3132 ISODrive (2f03ceb28307983f3b36216d35ffa5aa) C:\Program Files\UltraISO\drivers\ISODrive.sys
20:50:59.0201 3132 ISODrive - ok
20:50:59.0216 3132 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
20:50:59.0216 3132 kbdclass - ok
20:50:59.0247 3132 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\Windows\system32\DRIVERS\kbdhid.sys
20:50:59.0247 3132 kbdhid - ok
20:50:59.0309 3132 KeyIso (f42309c4191c506b71db5d1126d26318) C:\Windows\system32\lsass.exe
20:50:59.0325 3132 KeyIso - ok
20:50:59.0341 3132 KSecDD (e36a061ec11b373826905b21be10948f) C:\Windows\system32\Drivers\ksecdd.sys
20:50:59.0341 3132 KSecDD - ok
20:50:59.0356 3132 KSecPkg (26c046977e85b95036453d7b88ba1820) C:\Windows\system32\Drivers\ksecpkg.sys
20:50:59.0356 3132 KSecPkg - ok
20:50:59.0403 3132 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\Windows\system32\msdtckrm.dll
20:50:59.0403 3132 KtmRm - ok
20:50:59.0465 3132 LanmanServer (bca92cb047a4326925ecef759dbaa233) C:\Windows\system32\srvsvc.dll
20:50:59.0465 3132 LanmanServer - ok
20:50:59.0497 3132 LanmanWorkstation (b9891f885dcf1f0513a51cb58493cb1f) C:\Windows\System32\wkssvc.dll
20:50:59.0497 3132 LanmanWorkstation - ok
20:50:59.0575 3132 lirsgt (f8a7212d0864ef5e9185fb95e6623f4d) C:\Windows\system32\DRIVERS\lirsgt.sys
20:50:59.0575 3132 lirsgt - ok
20:50:59.0575 3132 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
20:50:59.0575 3132 lltdio - ok
20:50:59.0606 3132 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\Windows\System32\lltdsvc.dll
20:50:59.0621 3132 lltdsvc - ok
20:50:59.0637 3132 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\Windows\System32\lmhsvc.dll
20:50:59.0637 3132 lmhosts - ok
20:50:59.0653 3132 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
20:50:59.0653 3132 LSI_FC - ok
20:50:59.0668 3132 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
20:50:59.0668 3132 LSI_SAS - ok
20:50:59.0668 3132 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
20:50:59.0668 3132 LSI_SAS2 - ok
20:50:59.0684 3132 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
20:50:59.0684 3132 LSI_SCSI - ok
20:50:59.0715 3132 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
20:50:59.0715 3132 luafv - ok
20:50:59.0746 3132 Mcx2Svc (e2b0887816ed336685954e3d8fdaa51d) C:\Windows\system32\Mcx2Svc.dll
20:50:59.0746 3132 Mcx2Svc - ok
20:50:59.0762 3132 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
20:50:59.0762 3132 megasas - ok
20:50:59.0777 3132 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
20:50:59.0777 3132 MegaSR - ok
20:50:59.0824 3132 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll
20:50:59.0824 3132 MMCSS - ok
20:50:59.0855 3132 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
20:50:59.0855 3132 Modem - ok
20:50:59.0871 3132 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
20:50:59.0871 3132 monitor - ok
20:50:59.0871 3132 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
20:50:59.0871 3132 mouclass - ok
20:50:59.0887 3132 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
20:50:59.0887 3132 mouhid - ok
20:50:59.0902 3132 mountmgr (921c18727c5920d6c0300736646931c2) C:\Windows\system32\drivers\mountmgr.sys
20:50:59.0902 3132 mountmgr - ok
20:50:59.0918 3132 mpio (2af5997438c55fb79d33d015c30e1974) C:\Windows\system32\DRIVERS\mpio.sys
20:50:59.0918 3132 mpio - ok
20:50:59.0949 3132 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
20:50:59.0949 3132 mpsdrv - ok
20:50:59.0980 3132 MpsSvc (5cd996cecf45cbc3e8d109c86b82d69e) C:\Windows\system32\mpssvc.dll
20:50:59.0996 3132 MpsSvc - ok
20:51:00.0011 3132 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\Windows\system32\drivers\mrxdav.sys
20:51:00.0011 3132 MRxDAV - ok
20:51:00.0043 3132 mrxsmb (f4a054be78af7f410129c4b64b07dc9b) C:\Windows\system32\DRIVERS\mrxsmb.sys
20:51:00.0043 3132 mrxsmb - ok
20:51:00.0043 3132 mrxsmb10 (deffa295bd1895c6ed8e3078412ac60b) C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:51:00.0058 3132 mrxsmb10 - ok
20:51:00.0058 3132 mrxsmb20 (24d76abe5dcad22f19d105f76fdf0ce1) C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:51:00.0058 3132 mrxsmb20 - ok
20:51:00.0105 3132 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\Windows\system32\DRIVERS\msahci.sys
20:51:00.0105 3132 msahci - ok
20:51:00.0121 3132 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\Windows\system32\DRIVERS\msdsm.sys
20:51:00.0121 3132 msdsm - ok
20:51:00.0172 3132 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\Windows\System32\msdtc.exe
20:51:00.0172 3132 MSDTC - ok
20:51:00.0185 3132 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
20:51:00.0185 3132 Msfs - ok
20:51:00.0195 3132 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
20:51:00.0195 3132 mshidkmdf - ok
20:51:00.0242 3132 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\DRIVERS\msisadrv.sys
20:51:00.0242 3132 msisadrv - ok
20:51:00.0295 3132 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\Windows\system32\iscsiexe.dll
20:51:00.0295 3132 MSiSCSI - ok
20:51:00.0297 3132 msiserver - ok
20:51:00.0332 3132 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
20:51:00.0335 3132 MSKSSRV - ok
20:51:00.0347 3132 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
20:51:00.0347 3132 MSPCLOCK - ok
20:51:00.0370 3132 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
20:51:00.0372 3132 MSPQM - ok
20:51:00.0422 3132 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
20:51:00.0425 3132 MsRPC - ok
20:51:00.0435 3132 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys
20:51:00.0435 3132 mssmbios - ok
20:51:00.0442 3132 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
20:51:00.0442 3132 MSTEE - ok
20:51:00.0458 3132 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
20:51:00.0458 3132 MTConfig - ok
20:51:00.0474 3132 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
20:51:00.0474 3132 Mup - ok
20:51:00.0520 3132 napagent (80284f1985c70c86f0b5f86da2dfe1df) C:\Windows\system32\qagentRT.dll
20:51:00.0520 3132 napagent - ok
20:51:00.0583 3132 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
20:51:00.0598 3132 NativeWifiP - ok
20:51:00.0630 3132 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\Windows\system32\drivers\ndis.sys
20:51:00.0645 3132 NDIS - ok
20:51:00.0661 3132 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
20:51:00.0661 3132 NdisCap - ok
20:51:00.0708 3132 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
20:51:00.0708 3132 NdisTapi - ok
20:51:00.0723 3132 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\Windows\system32\DRIVERS\ndisuio.sys
20:51:00.0723 3132 Ndisuio - ok
20:51:00.0739 3132 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\Windows\system32\DRIVERS\ndiswan.sys
20:51:00.0739 3132 NdisWan - ok
20:51:00.0770 3132 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\Windows\system32\drivers\NDProxy.sys
20:51:00.0770 3132 NDProxy - ok
20:51:00.0786 3132 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
20:51:00.0786 3132 NetBIOS - ok
20:51:00.0801 3132 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\Windows\system32\DRIVERS\netbt.sys
20:51:00.0801 3132 NetBT - ok
20:51:00.0832 3132 Netlogon (f42309c4191c506b71db5d1126d26318) C:\Windows\system32\lsass.exe
20:51:00.0832 3132 Netlogon - ok
20:51:00.0924 3132 Netman (7cccfca7510684768da22092d1fa4db2) C:\Windows\System32\netman.dll
20:51:00.0924 3132 Netman - ok
20:51:01.0059 3132 NetMsmqActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
20:51:01.0062 3132 NetMsmqActivator - ok
20:51:01.0064 3132 NetPipeActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
20:51:01.0064 3132 NetPipeActivator - ok
20:51:01.0079 3132 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\Windows\System32\netprofm.dll
20:51:01.0082 3132 netprofm - ok
20:51:01.0127 3132 NetTcpActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
20:51:01.0127 3132 NetTcpActivator - ok
20:51:01.0132 3132 NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
20:51:01.0132 3132 NetTcpPortSharing - ok
20:51:01.0162 3132 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
20:51:01.0164 3132 nfrd960 - ok
20:51:01.0202 3132 NlaSvc (2226496e34bd40734946a054b1cd657f) C:\Windows\System32\nlasvc.dll
20:51:01.0207 3132 NlaSvc - ok
20:51:01.0267 3132 NPF (b48dc6abcd3aeff8618350ccbdc6b09a) C:\Windows\system32\drivers\npf.sys
20:51:01.0269 3132 NPF - ok
20:51:01.0277 3132 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
20:51:01.0279 3132 Npfs - ok
20:51:01.0297 3132 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\Windows\system32\nsisvc.dll
20:51:01.0299 3132 nsi - ok
20:51:01.0314 3132 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
20:51:01.0314 3132 nsiproxy - ok
20:51:01.0360 3132 Ntfs (3795dcd21f740ee799fb7223234215af) C:\Windows\system32\drivers\Ntfs.sys
20:51:01.0375 3132 Ntfs - ok
20:51:01.0469 3132 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
20:51:01.0469 3132 Null - ok
20:51:01.0485 3132 nusb3hub (ff6d3248e791e7a897bd8ea2fbacbcff) C:\Windows\system32\DRIVERS\nusb3hub.sys
20:51:01.0500 3132 nusb3hub - ok
20:51:01.0531 3132 nusb3xhc (b5eb7e275f2967026c6031897624bc51) C:\Windows\system32\DRIVERS\nusb3xhc.sys
20:51:01.0531 3132 nusb3xhc - ok
20:51:01.0594 3132 NVHDA (3d7fb57354703809b5f0c23287fac1d6) C:\Windows\system32\drivers\nvhda32v.sys
20:51:01.0594 3132 NVHDA - ok
20:51:01.0890 3132 nvlddmkm (e891b3979f0cf2740c1b073f834221fe) C:\Windows\system32\DRIVERS\nvlddmkm.sys
20:51:01.0968 3132 nvlddmkm - ok
20:51:02.0031 3132 nvraid (3f3d04b1d08d43c16ea7963954ec768d) C:\Windows\system32\DRIVERS\nvraid.sys
20:51:02.0031 3132 nvraid - ok
20:51:02.0046 3132 nvstor (c99f251a5de63c6f129cf71933aced0f) C:\Windows\system32\DRIVERS\nvstor.sys
20:51:02.0049 3132 nvstor - ok
20:51:02.0101 3132 NVSvc (ae2de8e165dcb93a66b21748e6f913df) C:\Windows\system32\nvvsvc.exe
20:51:02.0106 3132 NVSvc - ok
20:51:02.0274 3132 nvUpdatusService (c78581c14699c46fe0f0817416383134) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
20:51:02.0290 3132 nvUpdatusService - ok
20:51:02.0321 3132 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\DRIVERS\nv_agp.sys
20:51:02.0321 3132 nv_agp - ok
20:51:02.0321 3132 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\DRIVERS\ohci1394.sys
20:51:02.0321 3132 ohci1394 - ok
20:51:02.0415 3132 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
20:51:02.0415 3132 ose - ok
20:51:02.0637 3132 osppsvc (358a9cca612c68eb2f07ddad4ce1d8d7) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
20:51:02.0670 3132 osppsvc - ok
20:51:02.0732 3132 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll
20:51:02.0735 3132 p2pimsvc - ok
20:51:02.0767 3132 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\Windows\system32\p2psvc.dll
20:51:02.0772 3132 p2psvc - ok
20:51:02.0815 3132 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
20:51:02.0817 3132 Parport - ok
20:51:02.0827 3132 partmgr (ff4218952b51de44fe910953a3e686b9) C:\Windows\system32\drivers\partmgr.sys
20:51:02.0827 3132 partmgr - ok
20:51:02.0835 3132 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
20:51:02.0837 3132 Parvdm - ok
20:51:02.0865 3132 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\Windows\System32\pcasvc.dll
20:51:02.0867 3132 PcaSvc - ok
20:51:02.0882 3132 pci (c858cb77c577780ecc456a892e7e7d0f) C:\Windows\system32\DRIVERS\pci.sys
20:51:02.0885 3132 pci - ok
20:51:02.0900 3132 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\DRIVERS\pciide.sys
20:51:02.0902 3132 pciide - ok
20:51:02.0917 3132 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
20:51:02.0920 3132 pcmcia - ok
20:51:02.0937 3132 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
20:51:02.0937 3132 pcw - ok
20:51:02.0967 3132 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
20:51:02.0972 3132 PEAUTH - ok
20:51:03.0037 3132 PeerDistSvc (af4d64d2a57b9772cf3801950b8058a6) C:\Windows\system32\peerdistsvc.dll
20:51:03.0045 3132 PeerDistSvc - ok
20:51:03.0209 3132 pla (9c1bff7910c89a1d12e57343475840cb) C:\Windows\system32\pla.dll
20:51:03.0240 3132 pla - ok
20:51:03.0302 3132 PlugPlay (2cc2008f1296968fba162ed9f9afe328) C:\Windows\system32\umpnpmgr.dll
20:51:03.0302 3132 PlugPlay - ok
20:51:03.0365 3132 PnkBstrA (831883b107684301f48ace752c963984) C:\Windows\system32\PnkBstrA.exe
20:51:03.0365 3132 PnkBstrA - ok
20:51:03.0396 3132 PnkBstrB (e24106a5eaecddff00b25497049dd65f) C:\Windows\system32\PnkBstrB.exe
20:51:03.0412 3132 PnkBstrB - ok
20:51:03.0427 3132 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\Windows\system32\pnrpauto.dll
20:51:03.0427 3132 PNRPAutoReg - ok
20:51:03.0443 3132 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll
20:51:03.0443 3132 PNRPsvc - ok
20:51:03.0474 3132 PolicyAgent (48e1b75c6dc0232fd92baae4bd344721) C:\Windows\System32\ipsecsvc.dll
20:51:03.0490 3132 PolicyAgent - ok
20:51:03.0505 3132 Power (dbff83f709a91049621c1d35dd45c92c) C:\Windows\system32\umpo.dll
20:51:03.0505 3132 Power - ok
20:51:03.0552 3132 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
20:51:03.0568 3132 PptpMiniport - ok
20:51:03.0568 3132 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
20:51:03.0568 3132 Processor - ok
20:51:03.0630 3132 ProfSvc (630cf26f0227498b7d5a92b12548960f) C:\Windows\system32\profsvc.dll
20:51:03.0630 3132 ProfSvc - ok
20:51:03.0661 3132 ProtectedStorage (f42309c4191c506b71db5d1126d26318) C:\Windows\system32\lsass.exe
20:51:03.0677 3132 ProtectedStorage - ok
20:51:03.0708 3132 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
20:51:03.0708 3132 Psched - ok
20:51:03.0786 3132 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
20:51:03.0802 3132 ql2300 - ok
20:51:03.0833 3132 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
20:51:03.0833 3132 ql40xx - ok
20:51:03.0880 3132 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\Windows\system32\qwave.dll
20:51:03.0880 3132 QWAVE - ok
20:51:03.0895 3132 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
20:51:03.0895 3132 QWAVEdrv - ok
20:51:03.0911 3132 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
20:51:03.0911 3132 RasAcd - ok
20:51:03.0973 3132 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
20:51:03.0973 3132 RasAgileVpn - ok
20:51:04.0004 3132 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\Windows\System32\rasauto.dll
20:51:04.0004 3132 RasAuto - ok
20:51:04.0004 3132 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
20:51:04.0020 3132 Rasl2tp - ok
20:51:04.0051 3132 RasMan (0ce66ec736b7fc526d78f7624c7d2a94) C:\Windows\System32\rasmans.dll
20:51:04.0067 3132 RasMan - ok
20:51:04.0114 3132 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
20:51:04.0116 3132 RasPppoe - ok
20:51:04.0126 3132 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
20:51:04.0126 3132 RasSstp - ok
20:51:04.0149 3132 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\Windows\system32\DRIVERS\rdbss.sys
20:51:04.0154 3132 rdbss - ok
20:51:04.0161 3132 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
20:51:04.0164 3132 rdpbus - ok
20:51:04.0169 3132 RDPCDD (1e016846895b15a99f9a176a05029075) C:\Windows\system32\DRIVERS\RDPCDD.sys
20:51:04.0169 3132 RDPCDD - ok
20:51:04.0194 3132 RDPDR (c5ff95883ffef704d50c40d21cfb3ab5) C:\Windows\system32\drivers\rdpdr.sys
20:51:04.0194 3132 RDPDR - ok
20:51:04.0211 3132 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
20:51:04.0211 3132 RDPENCDD - ok
20:51:04.0219 3132 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
20:51:04.0219 3132 RDPREFMP - ok
20:51:04.0229 3132 RDPWD (801371ba9782282892d00aadb08ee367) C:\Windows\system32\drivers\RDPWD.sys
20:51:04.0231 3132 RDPWD - ok
20:51:04.0251 3132 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\Windows\system32\drivers\rdyboost.sys
20:51:04.0254 3132 rdyboost - ok
20:51:04.0271 3132 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\Windows\System32\mprdim.dll
20:51:04.0274 3132 RemoteAccess - ok
20:51:04.0284 3132 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\Windows\system32\regsvc.dll
20:51:04.0286 3132 RemoteRegistry - ok
20:51:04.0351 3132 rpcapd (b60f58f175de20a6739194e85b035178) C:\Program Files\WinPcap\rpcapd.exe
20:51:04.0354 3132 rpcapd - ok
20:51:04.0379 3132 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\Windows\System32\RpcEpMap.dll
20:51:04.0381 3132 RpcEptMapper - ok
20:51:04.0404 3132 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\Windows\system32\locator.exe
20:51:04.0404 3132 RpcLocator - ok
20:51:04.0420 3132 RpcSs (b82cd39e336973359d7c9bf911e8e84f) C:\Windows\system32\rpcss.dll
20:51:04.0420 3132 RpcSs - ok
20:51:04.0467 3132 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
20:51:04.0467 3132 rspndr - ok
20:51:04.0514 3132 RTL8167 (9c5da0bc3301dfca399056fd9adca413) C:\Windows\system32\DRIVERS\Rt86win7.sys
20:51:04.0514 3132 RTL8167 - ok
20:51:04.0545 3132 s3cap (5423d8437051e89dd34749f242c98648) C:\Windows\system32\DRIVERS\vms3cap.sys
20:51:04.0545 3132 s3cap - ok
20:51:04.0576 3132 SamSs (f42309c4191c506b71db5d1126d26318) C:\Windows\system32\lsass.exe
20:51:04.0576 3132 SamSs - ok
20:51:04.0638 3132 SbFw (9c9bcc79aef0aa97f16766c498002d36) C:\Windows\system32\drivers\SbFw.sys
20:51:04.0638 3132 SbFw - ok
20:51:04.0701 3132 SBFWIMCL (f27b38d70b7621378161d6f48be04d2c) C:\Windows\system32\DRIVERS\sbfwim.sys
20:51:04.0701 3132 SBFWIMCL - ok
20:51:04.0716 3132 SBFWIMCLMP (f27b38d70b7621378161d6f48be04d2c) C:\Windows\system32\DRIVERS\SBFWIM.sys
20:51:04.0716 3132 SBFWIMCLMP - ok
20:51:04.0748 3132 sbhips (53e5e7dc26bb920b97f258bbd52abfdc) C:\Windows\system32\drivers\sbhips.sys
20:51:04.0748 3132 sbhips - ok
20:51:04.0779 3132 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\Windows\system32\DRIVERS\sbp2port.sys
20:51:04.0794 3132 sbp2port - ok
20:51:04.0794 3132 SBRE - ok
20:51:04.0826 3132 SbTis (6468e2973e04525decc105947ddd0d34) C:\Windows\system32\drivers\sbtis.sys
20:51:04.0826 3132 SbTis - ok
20:51:04.0841 3132 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\Windows\System32\SCardSvr.dll
20:51:04.0857 3132 SCardSvr - ok
20:51:04.0857 3132 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\Windows\system32\DRIVERS\scfilter.sys
20:51:04.0857 3132 scfilter - ok
20:51:04.0888 3132 Schedule (3e8b0c453e25613a1f59762a5c42aa75) C:\Windows\system32\schedsvc.dll
20:51:04.0888 3132 Schedule - ok
20:51:04.0919 3132 SCPolicySvc (628a9e30ec5e18dd5de6be4dbdc12198) C:\Windows\System32\certprop.dll
20:51:04.0919 3132 SCPolicySvc - ok
20:51:04.0935 3132 SDRSVC (5fd90abdbfaee85986802622cbb03446) C:\Windows\System32\SDRSVC.dll
20:51:04.0935 3132 SDRSVC - ok
20:51:04.0966 3132 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
20:51:04.0966 3132 secdrv - ok
20:51:04.0982 3132 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\Windows\system32\seclogon.dll
20:51:04.0982 3132 seclogon - ok
20:51:05.0046 3132 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\Windows\System32\sens.dll
20:51:05.0046 3132 SENS - ok
20:51:05.0061 3132 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\Windows\system32\sensrsvc.dll
20:51:05.0063 3132 SensrSvc - ok
20:51:05.0086 3132 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
20:51:05.0086 3132 Serenum - ok
20:51:05.0106 3132 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
20:51:05.0106 3132 Serial - ok
20:51:05.0128 3132 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
20:51:05.0128 3132 sermouse - ok
20:51:05.0153 3132 SessionEnv (8f55ce568c543d5adf45c409d16718fc) C:\Windows\system32\sessenv.dll
20:51:05.0156 3132 SessionEnv - ok
20:51:05.0163 3132 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\DRIVERS\sffdisk.sys
20:51:05.0163 3132 sffdisk - ok
20:51:05.0173 3132 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\DRIVERS\sffp_mmc.sys
20:51:05.0173 3132 sffp_mmc - ok
20:51:05.0198 3132 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) C:\Windows\system32\DRIVERS\sffp_sd.sys
20:51:05.0198 3132 sffp_sd - ok
20:51:05.0203 3132 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
20:51:05.0203 3132 sfloppy - ok
20:51:05.0246 3132 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\Windows\System32\ipnathlp.dll
20:51:05.0251 3132 SharedAccess - ok
20:51:05.0283 3132 ShellHWDetection (cd2e48fa5b29ee2b3b5858056d246ef2) C:\Windows\System32\shsvcs.dll
20:51:05.0288 3132 ShellHWDetection - ok
20:51:05.0303 3132 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\DRIVERS\sisagp.sys
20:51:05.0303 3132 sisagp - ok
20:51:05.0319 3132 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
20:51:05.0319 3132 SiSRaid2 - ok
20:51:05.0319 3132 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
20:51:05.0319 3132 SiSRaid4 - ok
20:51:05.0335 3132 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
20:51:05.0335 3132 Smb - ok
20:51:05.0413 3132 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\Windows\System32\snmptrap.exe
20:51:05.0413 3132 SNMPTRAP - ok
20:51:05.0444 3132 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
20:51:05.0444 3132 spldr - ok
20:51:05.0537 3132 Spooler (49b6dd6ab3715b7a67965f17194e98a9) C:\Windows\System32\spoolsv.exe
20:51:05.0537 3132 Spooler - ok
20:51:05.0631 3132 sppsvc (4c287f9069fedbd791178876ee9de536) C:\Windows\system32\sppsvc.exe
20:51:05.0647 3132 sppsvc - ok
20:51:05.0725 3132 sppuinotify (d8e3e19eebdab49dd4a8d3062ead4ec7) C:\Windows\system32\sppuinotify.dll
20:51:05.0725 3132 sppuinotify - ok
20:51:05.0803 3132 sptd (a80cd850d69d996c832bea37e3a6aa1e) C:\Windows\system32\Drivers\sptd.sys
20:51:05.0803 3132 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: a80cd850d69d996c832bea37e3a6aa1e
20:51:05.0803 3132 sptd ( LockedFile.Multi.Generic ) - warning
20:51:05.0803 3132 sptd - detected LockedFile.Multi.Generic (1)
20:51:05.0834 3132 srv (2ba4ebc7dfba845a1edbe1f75913be33) C:\Windows\system32\DRIVERS\srv.sys
20:51:05.0834 3132 srv - ok
20:51:05.0881 3132 srv2 (dce7e10feaabd4cae95948b3de5340bb) C:\Windows\system32\DRIVERS\srv2.sys
20:51:05.0881 3132 srv2 - ok
20:51:05.0896 3132 srvnet (b5665baa2120b8a54e22e9cd07c05106) C:\Windows\system32\DRIVERS\srvnet.sys
20:51:05.0896 3132 srvnet - ok
20:51:05.0927 3132 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\Windows\System32\ssdpsrv.dll
20:51:05.0927 3132 SSDPSRV - ok
20:51:05.0958 3132 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\Windows\system32\sstpsvc.dll
20:51:05.0960 3132 SstpSvc - ok
20:51:06.0033 3132 StarWindServiceAE (b1691af4a072cb674d600db16dd7308e) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
20:51:06.0033 3132 StarWindServiceAE - ok
20:51:06.0160 3132 Stereo Service (fc0a58529a02b1eed55ddc58696b7908) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
20:51:06.0163 3132 Stereo Service - ok
20:51:06.0180 3132 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
20:51:06.0180 3132 stexstor - ok
20:51:06.0249 3132 StiSvc (a22825e7bb7018e8af3e229a5af17221) C:\Windows\System32\wiaservc.dll
20:51:06.0265 3132 StiSvc - ok
20:51:06.0296 3132 storflt (957e346ca948668f2496a6ccf6ff82cc) C:\Windows\system32\DRIVERS\vmstorfl.sys
20:51:06.0296 3132 storflt - ok
20:51:06.0327 3132 storvsc (d5751969dc3e4b88bf482ac8ec9fe019) C:\Windows\system32\DRIVERS\storvsc.sys
20:51:06.0327 3132 storvsc - ok
20:51:06.0374 3132 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys
20:51:06.0374 3132 swenum - ok
20:51:06.0421 3132 swprv (a28bd92df340e57b024ba433165d34d7) C:\Windows\System32\swprv.dll
20:51:06.0421 3132 swprv - ok
20:51:06.0468 3132 SysMain (04105c8da62353589c29bdaeb8d88bd8) C:\Windows\system32\sysmain.dll
20:51:06.0483 3132 SysMain - ok
20:51:06.0514 3132 TabletInputService (fcfb6c552fbc0da299799cbd50ad9fd4) C:\Windows\System32\TabSvc.dll
20:51:06.0514 3132 TabletInputService - ok
20:51:06.0546 3132 TapiSrv (2f46b0c70a4adc8c90cf825da3b4feaf) C:\Windows\System32\tapisrv.dll
20:51:06.0561 3132 TapiSrv - ok
20:51:06.0608 3132 TBPanel (04e1c782cf14b7282ebc633b0fd3ed16) C:\Windows\system32\drivers\TBPanel.sys
20:51:06.0608 3132 TBPanel - ok
20:51:06.0655 3132 TBS (b799d9fdb26111737f58288d8dc172d9) C:\Windows\System32\tbssvc.dll
20:51:06.0655 3132 TBS - ok
20:51:06.0702 3132 Tcpip (2cc3d75488abd3ec628bbb9a4fc84efc) C:\Windows\system32\drivers\tcpip.sys
20:51:06.0717 3132 Tcpip - ok
20:51:06.0826 3132 TCPIP6 (2cc3d75488abd3ec628bbb9a4fc84efc) C:\Windows\system32\DRIVERS\tcpip.sys
20:51:06.0826 3132 TCPIP6 - ok
20:51:06.0858 3132 tcpipreg (e64444523add154f86567c469bc0b17f) C:\Windows\system32\drivers\tcpipreg.sys
20:51:06.0858 3132 tcpipreg - ok
20:51:06.0873 3132 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\Windows\system32\drivers\tdpipe.sys
20:51:06.0873 3132 TDPIPE - ok
20:51:06.0889 3132 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\Windows\system32\drivers\tdtcp.sys
20:51:06.0889 3132 TDTCP - ok
20:51:06.0904 3132 tdx (cb39e896a2a83702d1737bfd402b3542) C:\Windows\system32\DRIVERS\tdx.sys
20:51:06.0904 3132 tdx - ok
20:51:06.0920 3132 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\Windows\system32\DRIVERS\termdd.sys
20:51:06.0920 3132 TermDD - ok
20:51:06.0936 3132 TermService (a01e50a04d7b1960b33e92b9080e6a94) C:\Windows\System32\termsrv.dll
20:51:06.0951 3132 TermService - ok
20:51:06.0951 3132 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\Windows\system32\themeservice.dll
20:51:06.0951 3132 Themes - ok
20:51:06.0998 3132 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll
20:51:06.0998 3132 THREADORDER - ok
20:51:07.0014 3132 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\Windows\System32\trkwks.dll
20:51:07.0029 3132 TrkWks - ok
20:51:07.0092 3132 TrustedInstaller (41a4c781d2286208d397d72099304133) C:\Windows\servicing\TrustedInstaller.exe
20:51:07.0092 3132 TrustedInstaller - ok
20:51:07.0107 3132 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\Windows\system32\DRIVERS\tssecsrv.sys
20:51:07.0107 3132 tssecsrv - ok
20:51:07.0154 3132 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\Windows\system32\DRIVERS\tunnel.sys
20:51:07.0154 3132 tunnel - ok
20:51:07.0170 3132 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
20:51:07.0172 3132 uagp35 - ok
20:51:07.0205 3132 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\Windows\system32\DRIVERS\udfs.sys
20:51:07.0210 3132 udfs - ok
20:51:07.0240 3132 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\Windows\system32\UI0Detect.exe
20:51:07.0242 3132 UI0Detect - ok
20:51:07.0277 3132 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\DRIVERS\uliagpkx.sys
20:51:07.0277 3132 uliagpkx - ok
20:51:07.0312 3132 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\Windows\system32\DRIVERS\umbus.sys
20:51:07.0315 3132 umbus - ok
20:51:07.0340 3132 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
20:51:07.0340 3132 UmPass - ok
20:51:07.0417 3132 UmRdpService (8ecaca5454844f66386f7be4ae0d7cd1) C:\Windows\System32\umrdp.dll
20:51:07.0422 3132 UmRdpService - ok
20:51:07.0442 3132 upnphost (833fbb672460efce8011d262175fad33) C:\Windows\System32\upnphost.dll
20:51:07.0445 3132 upnphost - ok
20:51:07.0476 3132 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\Windows\system32\DRIVERS\usbccgp.sys
20:51:07.0476 3132 usbccgp - ok
20:51:07.0476 3132 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\DRIVERS\usbcir.sys
20:51:07.0476 3132 usbcir - ok
20:51:07.0538 3132 usbehci (1c333bfd60f2fed2c7ad5daf533cb742) C:\Windows\system32\DRIVERS\usbehci.sys
20:51:07.0538 3132 usbehci - ok
20:51:07.0569 3132 usbhub (ee6ef93ccfa94fae8c6ab298273d8ae2) C:\Windows\system32\DRIVERS\usbhub.sys
20:51:07.0569 3132 usbhub - ok
20:51:07.0585 3132 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\Windows\system32\DRIVERS\usbohci.sys
20:51:07.0585 3132 usbohci - ok
20:51:07.0632 3132 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
20:51:07.0632 3132 usbprint - ok
20:51:07.0710 3132 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys
20:51:07.0710 3132 usbscan - ok
20:51:07.0710 3132 USBSTOR (d8889d56e0d27e57ed4591837fe71d27) C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:51:07.0710 3132 USBSTOR - ok
20:51:07.0725 3132 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) C:\Windows\system32\DRIVERS\usbuhci.sys
20:51:07.0725 3132 usbuhci - ok
20:51:07.0757 3132 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\Windows\System32\uxsms.dll
20:51:07.0757 3132 UxSms - ok
20:51:07.0803 3132 VaultSvc (f42309c4191c506b71db5d1126d26318) C:\Windows\system32\lsass.exe
20:51:07.0803 3132 VaultSvc - ok
20:51:07.0803 3132 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\DRIVERS\vdrvroot.sys
20:51:07.0819 3132 vdrvroot - ok
20:51:07.0835 3132 vds (8c4e7c49d3641bc9e299e466a7f8867d) C:\Windows\System32\vds.exe
20:51:07.0850 3132 vds - ok
20:51:07.0866 3132 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
20:51:07.0866 3132 vga - ok
20:51:07.0881 3132 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
20:51:07.0881 3132 VgaSave - ok
20:51:07.0897 3132 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\Windows\system32\DRIVERS\vhdmp.sys
20:51:07.0897 3132 vhdmp - ok
20:51:07.0897 3132 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\DRIVERS\viaagp.sys
20:51:07.0897 3132 viaagp - ok
20:51:07.0913 3132 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
20:51:07.0913 3132 ViaC7 - ok
20:51:07.0928 3132 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\DRIVERS\viaide.sys
20:51:07.0928 3132 viaide - ok
20:51:07.0975 3132 vmbus (379b349f65f453d2a6e75ea6b7448e49) C:\Windows\system32\DRIVERS\vmbus.sys
20:51:07.0975 3132 vmbus - ok
20:51:07.0991 3132 VMBusHID (ec2bbab4b84d0738c6c83d2234dc36fe) C:\Windows\system32\DRIVERS\VMBusHID.sys
20:51:07.0991 3132 VMBusHID - ok
20:51:08.0006 3132 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\Windows\system32\DRIVERS\volmgr.sys
20:51:08.0006 3132 volmgr - ok
20:51:08.0069 3132 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
20:51:08.0069 3132 volmgrx - ok
20:51:08.0097 3132 volsnap (58df9d2481a56edde167e51b334d44fd) C:\Windows\system32\DRIVERS\volsnap.sys
20:51:08.0099 3132 volsnap - ok
20:51:08.0122 3132 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
20:51:08.0124 3132 vsmraid - ok
20:51:08.0172 3132 VSS (7ea2bcd94d9cfaf4c556f5cc94532a6c) C:\Windows\system32\vssvc.exe
20:51:08.0177 3132 VSS - ok
20:51:08.0187 3132 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys
20:51:08.0187 3132 vwifibus - ok
20:51:08.0234 3132 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\Windows\system32\w32time.dll
20:51:08.0239 3132 W32Time - ok
20:51:08.0257 3132 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
20:51:08.0257 3132 WacomPen - ok
20:51:08.0279 3132 WANARP (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
20:51:08.0282 3132 WANARP - ok
20:51:08.0284 3132 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
20:51:08.0284 3132 Wanarpv6 - ok
20:51:08.0344 3132 wbengine (7790b77fe1e5ee47dcc66247095bb4c9) C:\Windows\system32\wbengine.exe
20:51:08.0357 3132 wbengine - ok
20:51:08.0362 3132 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\Windows\System32\wbiosrvc.dll
20:51:08.0377 3132 WbioSrvc - ok
20:51:08.0393 3132 wcncsvc (d0f88aa11ee1a62bcc6d6a8a7783ca11) C:\Windows\System32\wcncsvc.dll
20:51:08.0393 3132 wcncsvc - ok
20:51:08.0408 3132 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\Windows\System32\WcsPlugInService.dll
20:51:08.0408 3132 WcsPlugInService - ok
20:51:08.0440 3132 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
20:51:08.0440 3132 Wd - ok
20:51:08.0486 3132 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
20:51:08.0502 3132 Wdf01000 - ok
20:51:08.0518 3132 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll
20:51:08.0518 3132 WdiServiceHost - ok
20:51:08.0518 3132 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll
20:51:08.0518 3132 WdiSystemHost - ok
20:51:08.0533 3132 WebClient (d87c7d2c517f82a5ab7a73e203063d9e) C:\Windows\System32\webclnt.dll
20:51:08.0549 3132 WebClient - ok
20:51:08.0549 3132 Wecsvc (760f0afe937a77cff27153206534f275) C:\Windows\system32\wecsvc.dll
20:51:08.0549 3132 Wecsvc - ok
20:51:08.0564 3132 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\Windows\System32\wercplsupport.dll
20:51:08.0564 3132 wercplsupport - ok
20:51:08.0596 3132 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\Windows\System32\WerSvc.dll
20:51:08.0596 3132 WerSvc - ok
20:51:08.0596 3132 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
20:51:08.0596 3132 WfpLwf - ok
20:51:08.0611 3132 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
20:51:08.0611 3132 WIMMount - ok
20:51:08.0689 3132 WinDefend (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll
20:51:08.0689 3132 WinDefend - ok
20:51:08.0705 3132 WinHttpAutoProxySvc - ok
20:51:08.0767 3132 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\Windows\system32\wbem\WMIsvc.dll
20:51:08.0783 3132 Winmgmt - ok
20:51:08.0861 3132 WinRM (c4f5d3901d1b41d602ddc196e0b95b51) C:\Windows\system32\WsmSvc.dll
20:51:08.0876 3132 WinRM - ok
20:51:08.0923 3132 WinUsb (30fc6e5448d0cbaaa95280eeef7fedae) C:\Windows\system32\DRIVERS\WinUsb.sys
20:51:08.0923 3132 WinUsb - ok
20:51:08.0986 3132 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\Windows\System32\wlansvc.dll
20:51:08.0986 3132 Wlansvc - ok
20:51:09.0169 3132 wlidsvc (5144ae67d60ec653f97ddf3feed29e77) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
20:51:09.0179 3132 wlidsvc - ok
20:51:09.0236 3132 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\DRIVERS\wmiacpi.sys
20:51:09.0236 3132 WmiAcpi - ok
20:51:09.0256 3132 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\Windows\system32\wbem\WmiApSrv.exe
20:51:09.0259 3132 wmiApSrv - ok
20:51:09.0307 3132 WMPNetworkSvc (77fbd400984cf72ba0fc4b3489d65f74) C:\Program Files\Windows Media Player\wmpnetwk.exe
20:51:09.0323 3132 WMPNetworkSvc - ok
20:51:09.0354 3132 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\Windows\System32\wpcsvc.dll
20:51:09.0354 3132 WPCSvc - ok
20:51:09.0370 3132 WPDBusEnum (b7f658a2ebc07129538ad9ab35212637) C:\Windows\system32\wpdbusenum.dll
20:51:09.0370 3132 WPDBusEnum - ok
20:51:09.0401 3132 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
20:51:09.0401 3132 ws2ifsl - ok
20:51:09.0417 3132 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\Windows\System32\wscsvc.dll
20:51:09.0417 3132 wscsvc - ok
20:51:09.0417 3132 WSearch - ok
20:51:09.0479 3132 wuauserv (a33408cc036f9c08142b11be5e93f0a1) C:\Windows\system32\wuaueng.dll
20:51:09.0510 3132 wuauserv - ok
20:51:09.0541 3132 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\Windows\system32\drivers\WudfPf.sys
20:51:09.0541 3132 WudfPf - ok
20:51:09.0557 3132 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\Windows\system32\DRIVERS\WUDFRd.sys
20:51:09.0557 3132 WUDFRd - ok
20:51:09.0588 3132 wudfsvc (ddee3682fe97037c45f4d7ab467cb8b6) C:\Windows\System32\WUDFSvc.dll
20:51:09.0604 3132 wudfsvc - ok
20:51:09.0624 3132 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\Windows\System32\wwansvc.dll
20:51:09.0629 3132 WwanSvc - ok
20:51:09.0676 3132 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
20:51:09.0779 3132 \Device\Harddisk0\DR0 - ok
20:51:09.0781 3132 Boot (0x1200) (341067cffb1e1e2373adccfcf49b7326) \Device\Harddisk0\DR0\Partition0
20:51:09.0784 3132 \Device\Harddisk0\DR0\Partition0 - ok
20:51:09.0796 3132 Boot (0x1200) (e13c978aed0dcfdbd8cdd4add1244b24) \Device\Harddisk0\DR0\Partition1
20:51:09.0799 3132 \Device\Harddisk0\DR0\Partition1 - ok
20:51:09.0819 3132 Boot (0x1200) (7bbb6ecc5fdb8ae54b7194d3785bab5c) \Device\Harddisk0\DR0\Partition2
20:51:09.0819 3132 \Device\Harddisk0\DR0\Partition2 - ok
20:51:09.0834 3132 Boot (0x1200) (320e3aa04c77fa8af42a1d255211ebb1) \Device\Harddisk0\DR0\Partition3
20:51:09.0834 3132 \Device\Harddisk0\DR0\Partition3 - ok
20:51:09.0836 3132 ============================================================
20:51:09.0836 3132 Scan finished
20:51:09.0836 3132 ============================================================
20:51:09.0844 5148 Detected object count: 1
20:51:09.0844 5148 Actual detected object count: 1
21:17:16.0134 5148 sptd ( LockedFile.Multi.Generic ) - skipped by user
21:17:16.0134 5148 sptd ( LockedFile.Multi.Generic ) - User select action: Skip

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Blue screen vždy po cca 10 minútach od zapnutia PC

#8 Příspěvek od motji »

To je driver od Daemonu, to je v pořádku.

:!: Zazálohujte si důležitá data, pro jistotu :)

:arrow: Stáhněte na plochu, ukončete všechna aktivní okna a spusťte ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe

-souhlaste s instalací konzole pro zotavení

- ComboFix je třeba spustit pod účtem s právy administrátora

- Před použitím vypněte všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary

- Po spuštění se zobrazí podmínky užití, potvrďte je stiskem tlačítka Ano

- Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujícího se okna :!:

- Po dokončení skenování, trvajícího maximálně 10 minut, by měl program vytvořit log - C:\ComboFix.txt, zkopírujte celý jeho obsah sem
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Emeron
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 17 črc 2012 09:27

Re: Blue screen vždy po cca 10 minútach od zapnutia PC

#9 Příspěvek od Emeron »

Takže som použil ComboFix, počítač mi zatiľ našťastie neexplodoval :D a vyhodilo mi to tento log prosím:

ComboFix 12-07-18.04 - Orion . 07. 2012 22:34:25.1.4 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.421.1029.18.3572.2516 [GMT 2:00]
Running from: c:\users\Orion\Desktop\ComboFix.exe
AV: ESET Smart Security 4.0 *Enabled/Updated* {CB0F8167-5331-BA19-698E-64816B6801A5}
FW: ESET personal firewall *Enabled* {F3340042-195E-BB41-42D1-CDB495BB46DE}
SP: ESET Smart Security 4.0 *Enabled/Updated* {706E6083-750B-B597-533E-5FF310EF4B18}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
* Resident AV is active
.
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\BrowserCompanion
c:\program files\BrowserCompanion\BCHelper.exe
c:\program files\BrowserCompanion\blabbers-ch.crx
c:\program files\BrowserCompanion\logo.ico
c:\program files\BrowserCompanion\sqlite3.dll
c:\users\Orion\AppData\Local\.#
c:\users\Orion\AppData\Local\TempDIR
c:\users\Orion\AppData\Local\TempDIR\BetterInstaller.exe
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\system32\tmp9A7A.tmp
c:\windows\system32\tmp9A7B.tmp
c:\windows\system32\tmpDF68.tmp
c:\windows\system32\tmpDF89.tmp
c:\windows\Tasks\At1.job
c:\windows\Tasks\At2.job
c:\windows\Tasks\At3.job
c:\windows\Tasks\At4.job
.
.
((((((((((((((((((((((((( Files Created from 2012-06-18 to 2012-07-18 )))))))))))))))))))))))))))))))
.
.
2012-07-18 15:57 . 2012-07-18 15:57 -------- d-----w- c:\users\Orion\AppData\Local\ElevatedDiagnostics
2012-07-18 07:01 . 2012-07-18 07:20 -------- d-----w- c:\program files\trend micro
2012-07-18 07:01 . 2012-07-18 07:03 -------- d-----w- C:\rsit
2012-07-17 07:27 . 2012-07-17 07:27 -------- d-----w- c:\program files\NirSoft
2012-07-15 08:09 . 2012-07-15 08:50 -------- d-----w- c:\program files\Rockstar Games
2012-07-15 08:09 . 2012-07-15 08:09 -------- d-----w- c:\programdata\Rockstar Games
2012-07-08 21:57 . 2012-07-08 21:57 -------- d-----w- c:\users\Orion\AppData\Local\LucasArts
2012-07-08 20:37 . 2012-07-08 20:37 -------- d-----w- c:\program files\LucasArts
2012-07-08 14:54 . 2012-07-08 14:54 -------- d-----w- c:\program files\Apple Software Update
2012-07-08 14:43 . 2012-07-08 14:43 -------- d-----w- c:\program files\Common Files\xing shared
2012-07-08 14:41 . 2012-07-08 14:41 -------- d-----w- c:\program files\Common Files\Java
2012-07-08 14:41 . 2012-07-08 14:41 -------- d-----w- c:\program files\Oracle
2012-07-08 14:40 . 2012-05-04 17:29 772504 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-07-08 14:32 . 2012-07-08 14:32 -------- d-----w- c:\users\Orion\AppData\Roaming\RealNetworks
2012-07-06 17:32 . 2012-07-06 17:32 -------- d-----w- c:\program files\YourFileDownloader
2012-07-06 17:32 . 2012-07-06 17:32 -------- d-----w- c:\users\Orion\AppData\Roaming\YourFileDownloader
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-13 20:41 . 2012-04-11 12:47 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-13 20:41 . 2011-07-02 07:48 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-08 14:43 . 2011-02-02 13:31 499712 ----a-w- c:\windows\system32\msvcp71.dll
2012-07-08 14:43 . 2011-02-02 13:31 348160 ----a-w- c:\windows\system32\msvcr71.dll
2012-05-04 17:29 . 2011-04-07 12:36 687504 ----a-w- c:\windows\system32\deployJava1.dll
2012-04-27 06:00 . 2012-05-12 14:21 545 ----a-w- c:\windows\UC.PIF
2012-04-27 06:00 . 2012-05-12 14:21 545 ----a-w- c:\windows\RAR.PIF
2012-04-27 06:00 . 2012-05-12 14:21 545 ----a-w- c:\windows\LHA.PIF
2012-04-27 06:00 . 2012-05-12 14:21 545 ----a-w- c:\windows\ARJ.PIF
2011-06-04 19:40 164352 --sh--w- c:\windows\System32\SC.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GAINWARD"="c:\program files\EXPERTool\TBPanel.exe" [2012-04-11 2040136]
"OscarEditor"="c:\program files\Anti-Vibrate Oscar Editor\OscarEditor.exe" [2010-07-22 2636800]
"AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\axcmd.exe" [2009-09-18 205976]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
"TBPanel"="c:\program files\EXPERTool\TBPanel.exe" [2012-04-11 2040136]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-11-02 9808488]
"ASUS ShellProcess Execute"="c:\program files\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe" [2010-09-28 252544]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"NUSB3MON"="c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-11-05 283160]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2009-04-09 2029640]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
"TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" [2012-07-08 296096]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [x]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
R3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [x]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files\Garena\safedrv.sys [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [x]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Service;c:\windows\system32\DRIVERS\sbfwim.sys [x]
R3 sbhips;sbhips;c:\windows\system32\drivers\sbhips.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [x]
S1 SbTis;SbTis;c:\windows\system32\drivers\sbtis.sys [x]
S2 asComSvc;ASUS Com Service;c:\program files\ASUS\AXSP\1.00.13\atkexComSvc.exe [x]
S2 asHmComSvc;ASUS HM Com Service;c:\program files\ASUS\AAHM\1.00.13\aaHMSvc.exe [x]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [x]
S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [x]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT);c:\windows\system32\DRIVERS\ICCWDT.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [x]
S3 SBFWIMCLMP;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\DRIVERS\SBFWIM.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - 25719806
*Deregistered* - 25719806
.
Contents of the 'Scheduled Tasks' folder
.
2012-07-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-11 20:41]
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
mStart Page = hxxp://www.bigseekpro.com/bsprpc/{2055BAEE-42F ... D227356B16}
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{0b7430e9-e659-4555-ac67-be3340aaa519} - (no file)
BHO-{54055123-4E50-0B78-308C-669837415A51} - (no file)
Toolbar-10 - (no file)
WebBrowser-{0B7430E9-E659-4555-AC67-BE3340AAA519} - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-4060915618-3275642364-3586104651-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:e6,7d,62,b9,37,5d,3a,46,67,29,c6,f3,e2,2f,b9,41,c0,f0,03,36,45,7e,ca,
03,54,a1,b6,40,00,0c,fc,a5,48,0a,85,58,28,05,ff,99,22,1a,2a,4e,66,1d,c6,07,\
"??"=hex:f7,26,36,5f,49,0b,36,91,59,2b,26,14,1f,2f,5b,f3
.
[HKEY_USERS\S-1-5-21-4060915618-3275642364-3586104651-1000\Software\SecuROM\License information*]
"datasecu"=hex:dd,81,22,44,0a,8d,aa,56,0e,e6,9b,d6,a8,ac,e7,30,85,78,40,87,3c,
67,bb,c6,af,3e,d2,eb,18,ee,45,5f,89,f2,e1,54,3f,92,b2,97,5d,3c,b0,7a,77,6d,\
"rkeysecu"=hex:46,10,31,81,e7,66,c6,3c,8d,30,71,5f,f2,d2,56,94
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-07-18 22:40:06
ComboFix-quarantined-files.txt 2012-07-18 20:40
.
Pre-Run: Volných bajtů: 144 665 239 552
Post-Run: Volných bajtů: 146 326 224 896
.
- - End Of File - - 0B4046145CBE5FBAB7C1E75F1CB89788

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Blue screen vždy po cca 10 minútach od zapnutia PC

#10 Příspěvek od motji »

Otestujte na www.virustotal.com
c:\windows\System32\SC.dll

(dejte procházet a do spodního okénka nakopírujte cestuk souboru)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Emeron
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 17 črc 2012 09:27

Re: Blue screen vždy po cca 10 minútach od zapnutia PC

#11 Příspěvek od Emeron »

motji veľmi pekne Vám ďakujem za ochotu pomôcť mi veľmi si vážim že, ste bola ochotná venovať mi svoj čas :worship: . Počítač potrebujem každodenne k normálnemu fungovaniu preto som sa rozhodol sformátovať a preinštalovať celý hard disk ako by som mal naháňať jeden vírus po počítači :D . Po preinštalovaní mi počítač nevykazuje žiadne problémy takže je už asi všetko v poriadku :closed: . Problém vyriešený idem si ja pekne užívať prázdniny :all_coholic:

S pozdravom Emeron :wub:

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Blue screen vždy po cca 10 minútach od zapnutia PC

#12 Příspěvek od motji »

A po combofixu to nebylo lepší?
Tak formát je taky řešení :D .
Není zač, mějte se hezky :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Odpovědět