svchost.exe dle Process Exploreru zatěžuje CPU na 25%

Zpráva

Rose · #1 Příspěvek od **Rose** » 30 črc 2012 10:17

Ahoj všem a prosím o radu.

z ničeho nic bezdůvodně mi začal proces svchost.exe zatěžovat CPU, předpokládám, že je to nějaká služba pod procesem běžící, ale ani díky Process Exploreru nevím co to způsobuje.
Tento proces mi nikdy nic nedělal.
Mám Visty Ultimate SP2, na čtyřjádrovém pentiu, PC staré asi cca 4 roky, disky 2x500 GB jednoplotnové serverové, RAM 4GB z toho cca rok a pul PC nebezelo. Jinak bezi stale relativne bez problemu.

Skenovala jsem Panda Cloud Cleanerem vysledek je tento:

Suspicious Policy. POLICY: HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED[SUPERHIDDEN] to be changed to: 0
Suspicious Policy. POLICY: HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED[START_SHOWMYPICS] to be changed to: 1
Suspicious Policy. POLICY: HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED[START_SHOWMYMUSIC] to be changed to: 1
Suspicious Policy. POLICY: HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED[START_SHOWMYDOCS] to be changed to: 1
Suspicious Policy. POLICY: HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED[START_SHOWMYCOMPUTER] to be changed to: 1

Netuším co to říká, a prosím případně o radu co s tím dál a jak zjistit co to způsobuje a to případně vypnout.

Děkuji a pěkný den.

Ještě přikládám 2 screeny z PE:

Rose · #2 Příspěvek od **Rose** » 30 črc 2012 10:38

Prosím zda na mě můžete polopatě, tomu co tu po mě chcete vůbec nerozumím.
OK cili PE je ten programek, no ty screeny mi nejsou pridat pres dropbox, mam jeste jiny takovy uloziste, tak to sem hned hodim jen to chvilu vezme to druhe cili prvni co chcete nevim co to je.

Rose · #3 Příspěvek od **Rose** » 30 črc 2012 10:46

Obrázky přiloženy s odkazem. Na to druhé se podívám nyní.

To skenovani tim programkem nejak trva zaseklo se to tak na 80% tech odhadem a nepokracuje to uz asi tak 2-3 minuty, to je normalní?

Rose · #4 Příspěvek od **Rose** » 30 črc 2012 10:58

Tak už hotovo - zde je log:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Nicole at 2012-07-30 11:47:38
Microsoft® Windows Vista™ Ultimate Service Pack 2
System drive C: has 50 GB (21%) free of 239 GB
Total RAM: 3582 MB (26% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:47:58, on 30.7.2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19154)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Windows\system32\conime.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\AVG Secure Search\vprot.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Program Files\AVG\AVG9\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe
C:\Windows\system32\taskmgr.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\System32\notepad.exe
C:\Windows\System32\mobsync.exe
C:\Windows\System32\notepad.exe
C:\Windows\System32\notepad.exe
C:\Windows\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\conime.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
D:\Download\ProcessExplorer\procexp.exe
C:\totalcmd\TOTALCMD.EXE
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Nicole\Downloads\RSIT.exe
C:\Program Files\trend micro\Nicole.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://oriflame.mydigest.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: RoboForm BHO - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe_ID0ENQBO] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [InCD] "C:\Program Files\Nero\Nero 9\InCD\InCD.exe"
O4 - HKLM\..\Run: [NBHGui] "C:\Program Files\Nero\Nero 9\InCD\NBHGui.exe"
O4 - HKLM\..\Run: [NeroRebootSetup] "C:\Users\Nicole\AppData\Local\Temp\nro.tmp\SetupX.exe" SC -Reboot PIINSTALLTYPE="4"
O4 - HKLM\..\Run: [NBAgent] "C:\Program Files\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe" /WinStart
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [ROC_roc_dec12] "C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12
O4 - HKLM\..\Run: [HF_G_Jul] "C:\Program Files\AVG Secure Search\HF_G_Jul.exe" /DoAction
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Google Update] "C:\Users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [365dni] C:\Program Files\365dníNET\365dniNET.exe
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe
O4 - HKCU\..\Run: [ReadyNAS Remote] C:\Program Files\NETGEAR ReadyNAS\Remote\bin\ReadyNASRemote.exe
O4 - HKCU\..\Run: [googletalk] C:\Users\Nicole\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
O4 - HKCU\..\Run: [iTV] C:\Program Files\iTV\iTV.exe
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Nicole\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil32_11_3_300_265_Plugin.exe -update plugin
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-171076164-4115729517-1122896547-1000\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'o')
O4 - HKUS\S-1-5-21-171076164-4115729517-1122896547-1000\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'o')
O4 - HKUS\S-1-5-21-171076164-4115729517-1122896547-1000\..\Run: [Google Update] "C:\Users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe" /c (User 'o')
O4 - HKUS\S-1-5-21-171076164-4115729517-1122896547-1000\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" (User 'o')
O4 - HKUS\S-1-5-21-171076164-4115729517-1122896547-1000\..\Run: [365dni] C:\Program Files\365dníNET\365dniNET.exe (User 'o')
O4 - HKUS\S-1-5-21-171076164-4115729517-1122896547-1000\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe (User 'o')
O4 - HKUS\S-1-5-21-171076164-4115729517-1122896547-1000\..\Run: [ReadyNAS Remote] C:\Program Files\NETGEAR ReadyNAS\Remote\bin\ReadyNASRemote.exe (User 'o')
O4 - HKUS\S-1-5-21-171076164-4115729517-1122896547-1000\..\Run: [googletalk] C:\Users\o\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart (User 'o')
O4 - HKUS\S-1-5-21-171076164-4115729517-1122896547-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser')
O4 - Startup: Facebook Messenger.lnk = C:\Users\Nicole\AppData\Local\Facebook\Messenger\2.1.4590.0\FacebookMessenger.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Generátor hesel - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComPasswordGenerator.html
O8 - Extra context menu item: Ikona RoboForm na liště úloh - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComTaskBarIcon.html
O8 - Extra context menu item: Nastavit políčka - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSetFields.html
O8 - Extra context menu item: Obnovit políčka - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComResetFields.html
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Přizpůsobit Menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: RF Nástrojová lišta - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: RoboForm Editor - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComEditIdent.html
O8 - Extra context menu item: RoboForm Nastavení - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComOptions.html
O8 - Extra context menu item: Sync RoboForm Data - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSync.html
O8 - Extra context menu item: Uložit formuláře - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Vyplnit formulář - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Vyčistit políčka - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComClearFields.html
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra button: Vyplnit formulář - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: Vyplnit formulář - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Uložit - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: Uložit formuláře - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Nastavení - {320AF880-6646-11D3-ABEE-C5DBF3571F4C} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: RoboForm Nastavení - {320AF880-6646-11D3-ABEE-C5DBF3571F4C} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: &Sync RoboForm - {320AF880-6646-11D3-ABEE-C5DBF3571F4D} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: Sync RoboForm Data - {320AF880-6646-11D3-ABEE-C5DBF3571F4D} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Přizpůsobit - {320AF880-6646-11D3-ABEE-C5DBF3571F4E} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: Přizpůsobit Menu - {320AF880-6646-11D3-ABEE-C5DBF3571F4E} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Generátor - {320AF880-6646-11D3-ABEE-C5DBF3571F50} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: Generátor hesel - {320AF880-6646-11D3-ABEE-C5DBF3571F50} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Lišta úloh - {320AF880-6646-11D3-ABEE-C5DBF3571F51} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: Ikona RoboForm na liště úloh - {320AF880-6646-11D3-ABEE-C5DBF3571F51} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Nastavit políčka - {320AF880-6646-11D3-ABEE-C5DBF3571F52} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: Nastavit políčka - {320AF880-6646-11D3-ABEE-C5DBF3571F52} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Obnovit políčka - {320AF880-6646-11D3-ABEE-C5DBF3571F53} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: Obnovit políčka - {320AF880-6646-11D3-ABEE-C5DBF3571F53} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Vyčistit políčka - {320AF880-6646-11D3-ABEE-C5DBF3571F54} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: Vyčistit políčka - {320AF880-6646-11D3-ABEE-C5DBF3571F54} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Editor - {45DB34C3-955C-11D3-ABEF-444553540001} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: RoboForm Editor - {45DB34C3-955C-11D3-ABEF-444553540001} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Show Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: RF Nástrojová lišta - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: leaf - {3C4A8A13-029E-430D-B8C1-46E834D20B31} - mscoree.dll (file missing)
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll
O20 - AppInit_DLLs: avgrsstx.dll C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe
O23 - Service: AVG E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: AVG Firewall (avgfws9) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgfws9.exe
O23 - Service: AVG9IDSAgent (AVGIDSAgent) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDSrv) - Nero AG - C:\Program Files\Nero\Nero 9\InCD\InCDSrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Nero Registry InCD Service (NeroRegInCDSrv) - Nero AG - C:\Program Files\Nero\Nero 9\InCD\NBHRegInCDSrv.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: vToolbarUpdater11.2.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe

--
End of file - 24147 bytes

======Scheduled tasks folder======

C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-171076164-4115729517-1122896547-1001Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-171076164-4115729517-1122896547-1001UA.job
C:\Windows\tasks\Google Software Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-171076164-4115729517-1122896547-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-171076164-4115729517-1122896547-1001UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\fbf8yau4.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://oriflame.mydigest.net/"
prefs.js - "extensions.enabledItems" - "{22119944-ED35-4ab1-910B-E619EA06A115}:6.10.1, {4176DFF4-4698-11DE-BEEB-45DA55D89593}:0.8.21, piclens@cooliris.com:1.12.3.50136, {CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B}:3.5, {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.5, feedly@devhd:5.5, {a7c6cf7f-112c-4500-a7ea-39801a327e5f}:1.0.10, {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.1.7, {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.3.2, {ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}:1.4.4, {5C46D283-ABDE-4dce-B83C-08881401921C}:2.1.6, googletube@googletube.com:2.0.2, {6e84150a-d526-41f1-a480-a67d3fed910d}:1.4.5.1, lockerzplayextended@flies:2.5.0, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {FC5BAC7D-D696-4ba6-B913-CF8F000C33DF}:5.0.9, {dd7515c0-0820-4234-806b-74197fa5955c}:1.4.1, personas@christopher.beard:1.6.2, quickdrag@mozilla.ktechcomputing.com:2.1.3.21, {ada4b710-8346-4b82-8199-5de2b400a6ae}:1.9.9.4.2, {CB03C4C2-AD8F-11DE-A8F9-FF7A56D89593}:2.30, {1a0c9ebe-ddf9-4b76-b8a3-675c77874d37}:4.0, videosurf_enhanced@videosurf.com:0.79, {3EC9C995-8072-4fc0-953E-4F30620D17F3}:2.0.0.4, wisestamp@wisestamp.com:2.8.5, {dc572301-7619-498c-a57d-39143191b318}:0.3.8.6, ietab@ip.cn:1.95.20100930, betterfacebook@mattkruse.com:5.931, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {28197867-b1ef-4140-8e3b-55c45b9c8460}:2.6.26, {d47a9f51-8281-43fa-f450-f28ef8735e9a}:2.1.1, {3112ca9c-de6d-4884-a869-9855de68056c}:7.1.20110512W, video.downloader.plugin@ffpimp.com:3.42, {30A7232F-77C9-4bd3-A812-3036704DB7AC}:3.3.61, {a6ca9b3b-5e52-4f47-85d8-cca35bb57596}:1.4.12, {E0B8C461-F8FB-49b4-8373-FE32E9252800}:5.0.0.177572, {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.2.145, {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}:6.0.31, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.10"
prefs.js - "keyword.URL" - "http://isearch.avg.com/search?cid=%7B23 ... &sap=ku&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{3f963a5b-e555-4543-90e2-c3908898db71}"=C:\Program Files\AVG\AVG9\Firefox
"avg@toolbar"=C:\ProgramData\AVG Secure Search\11.1.0.12\
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
"{22119944-ED35-4ab1-910B-E619EA06A115}"=C:\Program Files\Siber Systems\AI RoboForm\Firefox

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.265 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
"Description"=
"Path"=C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\\npsitesafety.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_33]
"Description"=
"Path"=C:\Windows\system32\npdeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6]
"Description"=Yahoo Messenger State Plugin
"Path"=C:\Program Files\Yahoo!\Shared\npYState.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5]
"Description"=Office Live Update v1.5
"Path"=C:\Program Files\Microsoft\Office Live\npOLW.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pack.google.com/Google Updater;version=14]
"Description"=Google Updater
"Path"=C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.448]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448]
"Description"=6.0.12.448
"Path"=C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.19]
"Description"=Veetle TV Core
"Path"=C:\Program Files\Veetle\plugins\npVeetle.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18]
"Description"=Veetle TV Player
"Path"=C:\Program Files\Veetle\Player\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
avg-secure-search.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\fbf8yau4.default\extensions\
googletube@googletube.com
ietab@ip.cn
lockerzplayextended@flies
personas@christopher.beard
piclens@cooliris.com
videosurf_enhanced@videosurf.com
webmynd@yourentirelife.com
{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
{1018e4d6-728f-4b20-ad56-37578a4de76b}
{20a82645-c095-46ed-80e3-08825760534b}
{3112ca9c-de6d-4884-a869-9855de68056c}
{72c9fdff-bccd-4fac-a08e-857103c6e721}
{a6ca9b3b-5e52-4f47-85d8-cca35bb57596}
{ada4b710-8346-4b82-8199-5de2b400a6ae}
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
{CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B}
{d47a9f51-8281-43fa-f450-f28ef8735e9a}
{E0B8C461-F8FB-49b4-8373-FE32E9252800}
{FC5BAC7D-D696-4ba6-B913-CF8F000C33DF}

C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\fbf8yau4.default\searchplugins\
videosurf.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{724d43a9-0d85-11d4-9908-00400523e39a}]
RoboForm Toolbar Helper - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2012-05-03 3694592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-07-13 329520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Security Toolbar - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll [2012-07-10 2074208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2012-03-16 192112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll [2012-01-10 1003576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-07-13 59184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]
{724d43a0-0d85-11d4-9908-00400523e39a} - &RoboForm Toolbar - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2012-05-03 3694592]
{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG Security Toolbar - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll [2012-07-10 2074208]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2012-03-16 192112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2007-03-21 36864]
"LogitechCommunicationsManager"=C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe [2007-02-08 488984]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam10\QuickCam10.exe [2007-02-08 774168]
"{0228e555-4f9c-4e35-a3ec-b109a192b4c2}"=C:\Program Files\Google\Gmail Notifier\gnotify.exe [2005-07-15 479232]
"googletalk"=C:\Program Files\Google\Google Talk\googletalk.exe [2007-01-01 3739648]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2012-01-26 2077536]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2010-07-21 30192]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"Adobe Acrobat Speed Launcher"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
""= []
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]
"Adobe_ID0ENQBO"=C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE [2008-08-15 378224]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"InCD"=C:\Program Files\Nero\Nero 9\InCD\InCD.exe [2009-05-08 1116696]
"NBHGui"=C:\Program Files\Nero\Nero 9\InCD\NBHGui.exe [2009-05-08 1593880]
"NeroRebootSetup"=C:\Users\Nicole\AppData\Local\Temp\nro.tmp\SetupX.exe SC -Reboot PIINSTALLTYPE=4 []
"NBAgent"=C:\Program Files\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe [2009-09-01 1086760]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2011-07-07 10754664]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-07-29 1259376]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-05-30 59280]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2011-10-24 421888]
"vProt"=C:\Program Files\AVG Secure Search\vprot.exe [2012-07-10 1107552]
"ROC_roc_dec12"=C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe [2012-01-16 928096]
"HF_G_Jul"=C:\Program Files\AVG Secure Search\HF_G_Jul.exe [2012-07-19 36960]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2012-06-07 421776]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2010-04-16 3872080]
"Google Update"=C:\Users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe [2010-02-10 135664]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-02-11 39408]
"365dni"=C:\Program Files\365dníNET\365dniNET.exe [2007-01-06 753664]
"AnyDVD"=C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe [2010-02-13 3214272]
"ReadyNAS Remote"=C:\Program Files\NETGEAR ReadyNAS\Remote\bin\ReadyNASRemote.exe [2010-03-29 354888]
"googletalk"=C:\Users\Nicole\AppData\Roaming\Google\Google Talk\googletalk.exe [2007-01-01 3739648]
"iTV"=C:\Program Files\iTV\iTV.exe [2012-01-15 669184]
"RoboForm"=C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2012-05-10 109296]
"Facebook Update"=C:\Users\Nicole\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-13 138096]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\Windows\system32\Macromed\Flash\FlashUtil32_11_3_300_265_Plugin.exe [2012-07-13 686280]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Facebook Messenger.lnk - C:\Users\Nicole\AppData\Local\Facebook\Messenger\2.1.4590.0\FacebookMessenger.exe
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="avgrsstx.dll C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll [2007-07-20 233888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
"{93994DE8-8239-4655-B1D1-5F4E91300429}"=C:\Program Files\DVD Region+CSS Free\DVDShell.dll [2004-06-08 49152]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\xchat\xchat.exe"="C:\Program Files\xchat\xchat.exe:*:Enabled:XChat IRC Client"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"VIDC.I420"=lvcodec2.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"msacm.siren"=sirenacm.dll
"VIDC.ACDV"=ACDV.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.FFDS"=ff_vfw.dll
"vidc.XVID"=xvidvfw.dll
"msacm.ac3filter"=ac3filter.acm
"msacm.avis"=ff_acm.acm
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux6"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-07-30 11:47:39 ----D---- C:\Program Files\trend micro
2012-07-30 11:47:38 ----D---- C:\rsit
2012-07-30 10:23:15 ----A---- C:\Windows\system32\drivers\pavboot.sys
2012-07-30 10:21:55 ----D---- C:\Program Files\Panda Security
2012-07-29 07:43:38 ----D---- C:\$AVG
2012-07-24 23:20:12 ----D---- C:\Windows\LastGood
2012-07-20 00:32:10 ----A---- C:\Windows\system32\GEARAspi.dll
2012-07-20 00:32:10 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2012-07-20 00:30:39 ----D---- C:\Program Files\iPod
2012-07-20 00:30:38 ----D---- C:\Program Files\iTunes
2012-07-20 00:29:16 ----D---- C:\Program Files\Bonjour
2012-07-13 00:58:15 ----A---- C:\Windows\system32\npdeployJava1.dll
2012-07-13 00:58:14 ----A---- C:\Windows\system32\javaws.exe
2012-07-13 00:58:14 ----A---- C:\Windows\system32\javaw.exe
2012-07-13 00:58:14 ----A---- C:\Windows\system32\java.exe
2012-07-08 00:05:37 ----D---- C:\ProgramData\Mozilla
2012-07-08 00:05:36 ----D---- C:\Program Files\Mozilla Maintenance Service

======List of files/folders modified in the last 1 month======

2012-07-30 11:47:47 ----D---- C:\Windows\Temp
2012-07-30 11:47:39 ----RD---- C:\Program Files
2012-07-30 11:35:04 ----D---- C:\Users\Nicole\AppData\Roaming\Dropbox
2012-07-30 10:49:40 ----D---- C:\Windows\system32\drivers
2012-07-30 09:55:01 ----D---- C:\Users\Nicole\AppData\Roaming\uTorrent
2012-07-30 09:29:47 ----D---- C:\Windows\system32\drivers\Avg
2012-07-30 08:40:22 ----SHD---- C:\Windows\Installer
2012-07-30 07:39:53 ----D---- C:\Users\Nicole\AppData\Roaming\ImgBurn
2012-07-30 06:05:07 ----D---- C:\Users\Nicole\AppData\Roaming\365dni
2012-07-29 18:53:36 ----SHD---- C:\System Volume Information
2012-07-29 10:29:26 ----D---- C:\Program Files\uTorrent
2012-07-29 10:26:40 ----D---- C:\Windows\Prefetch
2012-07-29 02:23:39 ----D---- C:\Users\Nicole\AppData\Roaming\Skype
2012-07-29 01:05:57 ----D---- C:\Users\Nicole\AppData\Roaming\vlc
2012-07-28 22:06:53 ----D---- C:\Windows\System32
2012-07-28 22:06:53 ----D---- C:\Windows\inf
2012-07-28 22:06:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-07-27 08:24:07 ----SHD---- C:\Config.Msi
2012-07-24 23:20:12 ----D---- C:\Windows
2012-07-22 00:00:31 ----D---- C:\Windows\system32\catroot2
2012-07-21 04:40:06 ----D---- C:\Users\Nicole\AppData\Roaming\Mozilla
2012-07-20 00:33:10 ----D---- C:\Users\Nicole\AppData\Roaming\Apple Computer
2012-07-20 00:32:11 ----D---- C:\Windows\system32\catroot
2012-07-20 00:32:10 ----DC---- C:\Windows\system32\DRVSTORE
2012-07-20 00:30:38 ----D---- C:\Program Files\Common Files\Apple
2012-07-20 00:23:08 ----D---- C:\Program Files\iTV
2012-07-13 00:57:56 ----A---- C:\Windows\system32\deployJava1.dll
2012-07-13 00:56:06 ----D---- C:\Windows\winsxs
2012-07-13 00:41:04 ----D---- C:\Windows\system32\Tasks
2012-07-13 00:41:03 ----D---- C:\Windows\Tasks
2012-07-13 00:41:00 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2012-07-10 15:04:09 ----D---- C:\ProgramData\AVG Secure Search
2012-07-10 15:04:05 ----D---- C:\Program Files\AVG Secure Search
2012-07-08 00:05:37 ----HD---- C:\ProgramData
2012-07-08 00:05:31 ----D---- C:\Program Files\Mozilla Firefox
2012-07-03 05:37:03 ----D---- C:\Users\Nicole\AppData\Roaming\mIRC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSErHrvtx;AVG9IDSErHr; C:\Windows\System32\Drivers\AVGIDSvx.sys [2010-06-22 25168]
R0 AvgRkx86;avgrkx86.sys; C:\Windows\System32\Drivers\avgrkx86.sys [2010-05-26 52872]
R0 fvevol;BitLocker Drive Encryption Filter Driver; C:\Windows\System32\DRIVERS\fvevol.sys [2009-04-11 143848]
R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2008-11-04 83296]
R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6x.sys [2010-02-11 24856]
R1 AvgLdx86;AVG AVI Loader Driver x86; C:\Windows\System32\Drivers\avgldx86.sys [2010-06-22 216400]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\Windows\System32\Drivers\avgmfx86.sys [2011-09-13 29712]
R1 AvgTdiX;AVG Network Redirector; C:\Windows\System32\Drivers\avgtdix.sys [2011-09-07 243152]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-12-18 26024]
R1 InCDRec;Nero UDF File System Recognizer Driver; C:\Windows\system32\DRIVERS\InCDRec.sys [2009-05-08 19096]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files\UltraISO\drivers\ISODrive.sys [2009-02-10 82320]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-08-14 74720]
R3 AnyDVD;AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [2009-12-19 104512]
R3 AVGIDSDrivervtx;AVG9IDSDriver; \??\C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSDriver.sys [2010-06-22 122448]
R3 AVGIDSFiltervtx;AVG9IDSFilter; \??\C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSFilter.sys [2010-06-22 30288]
R3 AVGIDSShimvtx;AVG9IDSShim; \??\C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSShim.sys [2010-06-22 27216]
R3 CamDrL;Logitech QuickCam Pro 3000(CamDrl); C:\Windows\system32\DRIVERS\Camdrl.sys [2007-02-03 1075360]
R3 Dot4;Ovladač MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-21 131584]
R3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-21 16384]
R3 dot4usb;Filtr Dot4USB Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-21 36864]
R3 Fwleaf;NETGEAR Firewall Driver; C:\Windows\system32\DRIVERS\fwleaf.sys [2010-03-29 23624]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 InCDFs;Nero UDF File System Driver; C:\Windows\system32\DRIVERS\InCDFs.sys [2009-05-08 129944]
R3 InCDPass;Nero InCDPass Driver; C:\Windows\system32\DRIVERS\InCDPass.sys [2009-05-08 48280]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2011-07-07 3531176]
R3 leafnets;Leaf Networks Adapter; C:\Windows\system32\DRIVERS\leafnets.sys [2010-02-20 55296]
R3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\Windows\system32\DRIVERS\LVMVDrv.sys [2007-02-06 1964064]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\Windows\system32\DRIVERS\LVPr2Mon.sys [2007-02-06 25632]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBSta.sys [2007-02-03 41504]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2011-05-21 10589800]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-02-12 47360]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2010-06-23 259176]
R3 tap0901;TAP-Win32 Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2010-04-23 26112]
R3 usbaudio;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S0 Pavboot;Panda boot driver; C:\Windows\system32\Drivers\pavboot.sys [2012-05-09 26696]
S3 adusbser;AnyDATA USB Device for Legacy Serial Communication; C:\Windows\system32\DRIVERS\adusbser.sys [2007-11-14 100992]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 ENTECH;ENTECH; \??\C:\Windows\system32\DRIVERS\ENTECH.sys [2007-09-07 27672]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-08-05 54632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 LVcKap;Logitech AEC Driver; C:\Windows\system32\DRIVERS\LVcKap.sys [2007-02-06 1691808]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NPF;Netgroup Packet Filter; C:\Windows\system32\drivers\npf.sys [2010-02-10 42512]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 27192]
S3 rt61x86;Ralink RT61 Wireless Driver for Windows Vista; C:\Windows\system32\DRIVERS\netr61.sys [2006-08-25 274432]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2012-04-25 43520]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WPRO_40_1123;WinPcap Packet Driver (WPRO_40_1123); C:\Windows\system32\drivers\WPRO_40_1123.sys []
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-05-24 55184]
R2 avg9emc;AVG E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2010-07-21 921952]
R2 avg9wd;AVG WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-06-22 308136]
R2 avgfws9;AVG Firewall; C:\Program Files\AVG\AVG9\avgfws9.exe [2010-11-25 2331544]
R2 AVGIDSAgent;AVG9IDSAgent; C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe [2010-06-22 5897808]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 InCDSrv;InCD Helper; C:\Program Files\Nero\Nero 9\InCD\InCDSrv.exe [2009-05-08 1493528]
R2 LVPrcSrv;Process Monitor; c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe [2007-02-06 109344]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-06-18 935208]
R2 NeroRegInCDSrv;Nero Registry InCD Service; C:\Program Files\Nero\Nero 9\InCD\NBHRegInCDSrv.exe [2009-05-08 109080]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-05-21 615528]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-21 2214504]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [2009-09-01 87344]
R2 vToolbarUpdater11.2.0;vToolbarUpdater11.2.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe [2012-07-10 935008]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2012-06-07 821648]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-11 135664]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-10-06 194104]
S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [2007-02-06 105248]
S3 Adobe Version Cue CS4;Adobe Version Cue CS4; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe [2011-11-10 167264]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-02-11 655624]
S3 fsssvc;Služba Windows Live Zabezpečení rodiny; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-04-28 704872]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2010-07-21 30192]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-11 135664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-07-08 113120]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

-----------------EOF-----------------

Rose · #5 Příspěvek od **Rose** » 30 črc 2012 11:36

A jaké ještě jiné screeny, ja jsem dala dva už nahoře, jeden je kde je ten svchost videt a druhy je jeho vlastnosti a nasledne threads, jestli to je jeste neco jineho tak kde to najdu?

Rose · #6 Příspěvek od **Rose** » 30 črc 2012 12:58

Knihovny u meho svchost, ktery dela problemy nejdou vypsat respektive kdyz na proces kliknu nic se nezobrazuje. Screeny dam oba at je to videt, druhy mam jiz hotovy.

Rose · #7 Příspěvek od **Rose** » 30 črc 2012 13:05

Nejde mi do jednoho prispevku dat vic jak jednu prilohu.. tak zde je druha.

Rose · #8 Příspěvek od **Rose** » 30 črc 2012 23:44

Tak to druhe az rano ja sem spala, sem nemocna, tak se omlouvam.

Když najedu na problematicky svchost a dam Ctrl +D nic to nedělá.

Zde jsou v příloze screeny, opět to nedělá asi co má, netuším proč. Tento proces je mi záhadou. Obr. 1 - kliknuti na proces v Thread a pak na Stack
Obr. 2 kliknuti na Suspend

Rose · #9 Příspěvek od **Rose** » 31 črc 2012 00:00

Zde je druhý screen.

Rose · #10 Příspěvek od **Rose** » 31 črc 2012 00:04

Zde je log z kasperky TDSSkiller:

01:01:34.0317 47816 TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32
01:01:36.0320 47816 ============================================================
01:01:36.0320 47816 Current date / time: 2012/07/31 01:01:36.0320
01:01:36.0320 47816 SystemInfo:
01:01:36.0320 47816
01:01:36.0320 47816 OS Version: 6.0.6002 ServicePack: 2.0
01:01:36.0320 47816 Product type: Workstation
01:01:36.0320 47816 ComputerName: NIKOLKY-POCITAC
01:01:36.0360 47816 UserName: Nicole
01:01:36.0360 47816 Windows directory: C:\Windows
01:01:36.0360 47816 System windows directory: C:\Windows
01:01:36.0360 47816 Processor architecture: Intel x86
01:01:36.0360 47816 Number of processors: 4
01:01:36.0360 47816 Page size: 0x1000
01:01:36.0360 47816 Boot type: Normal boot
01:01:36.0360 47816 ============================================================
01:01:44.0503 47816 Drive \Device\Harddisk0\DR0 - Size: 0x7470AFDE00 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
01:01:44.0528 47816 Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
01:01:44.0557 47816 ============================================================
01:01:44.0557 47816 \Device\Harddisk0\DR0:
01:01:44.0622 47816 MBR partitions:
01:01:44.0622 47816 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1D1E27F8
01:01:44.0622 47816 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1D1E3000, BlocksNum 0x1D1A0800
01:01:44.0622 47816 \Device\Harddisk1\DR1:
01:01:44.0622 47816 MBR partitions:
01:01:44.0622 47816 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1D1E27F8
01:01:44.0622 47816 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x1D1E3000, BlocksNum 0x1D1A0800
01:01:44.0622 47816 ============================================================
01:01:44.0860 47816 C: <-> \Device\Harddisk0\DR0\Partition0
01:01:44.0880 47816 G: <-> \Device\Harddisk1\DR1\Partition0
01:01:44.0912 47816 H: <-> \Device\Harddisk1\DR1\Partition1
01:01:45.0321 47816 D: <-> \Device\Harddisk0\DR0\Partition1
01:01:45.0392 47816 ============================================================
01:01:45.0392 47816 Initialize success
01:01:45.0392 47816 ============================================================
01:02:03.0163 40228 ============================================================
01:02:03.0163 40228 Scan started
01:02:03.0163 40228 Mode: Manual; SigCheck; TDLFS;
01:02:03.0163 40228 ============================================================
01:02:05.0247 40228 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
01:02:05.0359 40228 ACPI - ok
01:02:05.0397 40228 adfs (6d7f09cd92a9fef3a8efce66231fdd79) C:\Windows\system32\drivers\adfs.sys
01:02:05.0411 40228 adfs - ok
01:02:05.0529 40228 Adobe Version Cue CS4 (57a3b9a69f14414ace12afd6ba701773) C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
01:02:05.0546 40228 Adobe Version Cue CS4 - ok
01:02:05.0719 40228 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys
01:02:05.0743 40228 adp94xx - ok
01:02:05.0759 40228 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys
01:02:05.0795 40228 adpahci - ok
01:02:05.0820 40228 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys
01:02:05.0858 40228 adpu160m - ok
01:02:05.0880 40228 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys
01:02:05.0895 40228 adpu320 - ok
01:02:05.0950 40228 adusbser (d9fde4ee2b1b115a78014921b84da635) C:\Windows\system32\DRIVERS\adusbser.sys
01:02:06.0066 40228 adusbser - ok
01:02:06.0084 40228 AeLookupSvc (9d1fda9e086ba64e3c93c9de32461bcf) C:\Windows\System32\aelupsvc.dll
01:02:06.0123 40228 AeLookupSvc - ok
01:02:06.0204 40228 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
01:02:06.0282 40228 AFD - ok
01:02:06.0313 40228 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys
01:02:06.0341 40228 agp440 - ok
01:02:06.0358 40228 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
01:02:06.0373 40228 aic78xx - ok
01:02:06.0391 40228 ALG (a1545b731579895d8cc44fc0481c1192) C:\Windows\System32\alg.exe
01:02:06.0436 40228 ALG - ok
01:02:06.0453 40228 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys
01:02:06.0465 40228 aliide - ok
01:02:06.0480 40228 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys
01:02:06.0493 40228 amdagp - ok
01:02:06.0505 40228 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys
01:02:06.0517 40228 amdide - ok
01:02:06.0543 40228 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys
01:02:06.0588 40228 AmdK7 - ok
01:02:06.0606 40228 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys
01:02:06.0657 40228 AmdK8 - ok
01:02:06.0723 40228 AnyDVD (b8f9d3ae038810c6ea08e123cada765e) C:\Windows\system32\Drivers\AnyDVD.sys
01:02:06.0753 40228 AnyDVD - ok
01:02:06.0800 40228 Appinfo (c6d704c7f0434dc791aac37cac4b6e14) C:\Windows\System32\appinfo.dll
01:02:06.0872 40228 Appinfo - ok
01:02:06.0969 40228 Apple Mobile Device (f401929ee0cc92bfe7f15161ca535383) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
01:02:06.0981 40228 Apple Mobile Device - ok
01:02:07.0032 40228 AppMgmt (0fe769cae5855b53c90e23f85e7e89ff) C:\Windows\System32\appmgmts.dll
01:02:07.0079 40228 AppMgmt - ok
01:02:07.0107 40228 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys
01:02:07.0139 40228 arc - ok
01:02:07.0173 40228 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys
01:02:07.0187 40228 arcsas - ok
01:02:07.0206 40228 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
01:02:07.0239 40228 AsyncMac - ok
01:02:07.0286 40228 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
01:02:07.0300 40228 atapi - ok
01:02:07.0346 40228 AudioEndpointBuilder (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll
01:02:07.0402 40228 AudioEndpointBuilder - ok
01:02:07.0409 40228 Audiosrv (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll
01:02:07.0434 40228 Audiosrv - ok
01:02:07.0558 40228 AVG Security Toolbar Service (d45b7995761253a92ab071d576114f28) C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe
01:02:07.0585 40228 AVG Security Toolbar Service - ok
01:02:07.0649 40228 avg9emc (aa054cd537357f03d5ba6aba7562b35f) C:\Program Files\AVG\AVG9\avgemc.exe
01:02:07.0719 40228 avg9emc - ok
01:02:07.0773 40228 avg9wd (c4d15594db5be042d3346ea58df87d89) C:\Program Files\AVG\AVG9\avgwdsvc.exe
01:02:07.0786 40228 avg9wd - ok
01:02:07.0882 40228 Avgfwfd (26a4640a8f16f8ce39b93329c83bb15a) C:\Windows\system32\DRIVERS\avgfwd6x.sys
01:02:07.0905 40228 Avgfwfd - ok
01:02:08.0050 40228 avgfws9 (0f38e92d794df187ba060939c552484f) C:\Program Files\AVG\AVG9\avgfws9.exe
01:02:08.0191 40228 avgfws9 - ok
01:02:08.0488 40228 AVGIDSAgent (abc81401a433f90414168e027aa6cc48) C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
01:02:08.0723 40228 AVGIDSAgent - ok
01:02:08.0847 40228 AVGIDSDrivervtx (1bf5706111544aefe29f64783c22d8fb) C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSDriver.sys
01:02:08.0858 40228 AVGIDSDrivervtx - ok
01:02:08.0976 40228 AVGIDSErHrvtx (3efc8f7eae54b780d1e0730da23dad25) C:\Windows\system32\Drivers\AVGIDSvx.sys
01:02:08.0986 40228 AVGIDSErHrvtx - ok
01:02:09.0033 40228 AVGIDSFiltervtx (a19902063d7368864cc5708f4d1b1c97) C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSFilter.sys
01:02:09.0043 40228 AVGIDSFiltervtx - ok
01:02:09.0069 40228 AVGIDSShimvtx (034df5434a092e3bb963d1febff7aabf) C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSShim.sys
01:02:09.0078 40228 AVGIDSShimvtx - ok
01:02:09.0124 40228 AvgLdx86 (b8c187439d27aba430dd69fdcf1fa657) C:\Windows\System32\Drivers\avgldx86.sys
01:02:09.0138 40228 AvgLdx86 - ok
01:02:09.0208 40228 AvgMfx86 (80ff2b1b7eeda966394f0baa895bbf4b) C:\Windows\System32\Drivers\avgmfx86.sys
01:02:09.0218 40228 AvgMfx86 - ok
01:02:09.0256 40228 AvgRkx86 (5bbcd8646074a3af4ee9b321d12c2b64) C:\Windows\system32\Drivers\avgrkx86.sys
01:02:09.0268 40228 AvgRkx86 - ok
01:02:09.0299 40228 AvgTdiX (9a7a93388f503a34e7339ae7f9997449) C:\Windows\System32\Drivers\avgtdix.sys
01:02:09.0314 40228 AvgTdiX - ok
01:02:09.0345 40228 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
01:02:09.0402 40228 Beep - ok
01:02:09.0467 40228 BFE (c789af0f724fda5852fb9a7d3a432381) C:\Windows\System32\bfe.dll
01:02:09.0501 40228 BFE - ok
01:02:09.0560 40228 BITS (93952506c6d67330367f7e7934b6a02f) C:\Windows\System32\qmgr.dll
01:02:09.0776 40228 BITS - ok
01:02:09.0803 40228 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys
01:02:09.0870 40228 blbdrive - ok
01:02:09.0973 40228 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe
01:02:09.0990 40228 Bonjour Service - ok
01:02:10.0057 40228 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
01:02:10.0106 40228 bowser - ok
01:02:10.0132 40228 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
01:02:10.0170 40228 BrFiltLo - ok
01:02:10.0186 40228 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
01:02:10.0327 40228 BrFiltUp - ok
01:02:10.0351 40228 Browser (a3629a0c4226f9e9c72faaeebc3ad33c) C:\Windows\System32\browser.dll
01:02:10.0379 40228 Browser - ok
01:02:10.0443 40228 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
01:02:10.0624 40228 Brserid - ok
01:02:10.0643 40228 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
01:02:10.0714 40228 BrSerWdm - ok
01:02:10.0728 40228 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
01:02:10.0788 40228 BrUsbMdm - ok
01:02:10.0803 40228 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
01:02:10.0850 40228 BrUsbSer - ok
01:02:10.0889 40228 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
01:02:10.0961 40228 BTHMODEM - ok
01:02:11.0043 40228 CamDrL (0f5ca31bb3fdb5c1e63c170cfbecc93b) C:\Windows\system32\DRIVERS\Camdrl.sys
01:02:11.0084 40228 CamDrL - ok
01:02:11.0108 40228 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
01:02:11.0166 40228 cdfs - ok
01:02:11.0220 40228 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
01:02:11.0313 40228 cdrom - ok
01:02:11.0366 40228 CertPropSvc (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll
01:02:11.0419 40228 CertPropSvc - ok
01:02:11.0444 40228 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\drivers\circlass.sys
01:02:11.0483 40228 circlass - ok
01:02:11.0522 40228 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
01:02:11.0540 40228 CLFS - ok
01:02:11.0584 40228 clr_optimization_v2.0.50727_32 (8ee772032e2fe80a924f3b8dd5082194) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
01:02:11.0694 40228 clr_optimization_v2.0.50727_32 - ok
01:02:11.0773 40228 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
01:02:11.0795 40228 clr_optimization_v4.0.30319_32 - ok
01:02:11.0837 40228 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys
01:02:11.0849 40228 cmdide - ok
01:02:11.0874 40228 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\drivers\compbatt.sys
01:02:11.0901 40228 Compbatt - ok
01:02:11.0905 40228 COMSysApp - ok
01:02:11.0956 40228 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys
01:02:11.0969 40228 crcdisk - ok
01:02:11.0990 40228 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys
01:02:12.0040 40228 Crusoe - ok
01:02:12.0084 40228 CryptSvc (fb27772beaf8e1d28ccd825c09da939b) C:\Windows\system32\cryptsvc.dll
01:02:12.0129 40228 CryptSvc - ok
01:02:12.0160 40228 CSC (9bdb2e89be8d0ef37b1f25c3d3fc192c) C:\Windows\system32\drivers\csc.sys
01:02:12.0245 40228 CSC - ok
01:02:12.0296 40228 CscService (0a2095f92f6ae4fe6484d911b0c21e95) C:\Windows\System32\cscsvc.dll
01:02:12.0335 40228 CscService - ok
01:02:12.0408 40228 DcomLaunch (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll
01:02:12.0547 40228 DcomLaunch - ok
01:02:12.0635 40228 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
01:02:12.0773 40228 DfsC - ok
01:02:12.0879 40228 DFSR (2cc3dcfb533a1035b13dcab6160ab38b) C:\Windows\system32\DFSR.exe
01:02:13.0035 40228 DFSR - ok
01:02:13.0123 40228 Dhcp (9028559c132146fb75eb7acf384b086a) C:\Windows\System32\dhcpcsvc.dll
01:02:13.0179 40228 Dhcp - ok
01:02:13.0253 40228 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
01:02:13.0268 40228 disk - ok
01:02:13.0302 40228 Dnscache (57d762f6f5974af0da2be88a3349baaa) C:\Windows\System32\dnsrslvr.dll
01:02:13.0351 40228 Dnscache - ok
01:02:13.0387 40228 dot3svc (324fd74686b1ef5e7c19a8af49e748f6) C:\Windows\System32\dot3svc.dll
01:02:13.0440 40228 dot3svc - ok
01:02:13.0482 40228 Dot4 (4f59c172c094e1a1d46463a8dc061cbd) C:\Windows\system32\DRIVERS\Dot4.sys
01:02:13.0543 40228 Dot4 - ok
01:02:13.0575 40228 Dot4Print (80bf3ba09f6f2523c8f6b7cc6dbf7bd5) C:\Windows\system32\DRIVERS\Dot4Prt.sys
01:02:13.0644 40228 Dot4Print - ok
01:02:13.0658 40228 dot4usb (c55004ca6b419b6695970dfe849b122f) C:\Windows\system32\DRIVERS\dot4usb.sys
01:02:13.0719 40228 dot4usb - ok
01:02:13.0746 40228 DPS (a622e888f8aa2f6b49e9bc466f0e5def) C:\Windows\system32\dps.dll
01:02:13.0781 40228 DPS - ok
01:02:13.0840 40228 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
01:02:13.0862 40228 drmkaud - ok
01:02:13.0908 40228 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
01:02:13.0938 40228 DXGKrnl - ok
01:02:13.0960 40228 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys
01:02:14.0002 40228 E1G60 - ok
01:02:14.0044 40228 EapHost (c0b95e40d85cd807d614e264248a45b9) C:\Windows\System32\eapsvc.dll
01:02:14.0079 40228 EapHost - ok
01:02:14.0130 40228 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
01:02:14.0146 40228 Ecache - ok
01:02:14.0189 40228 ehRecvr (9be3744d295a7701eb425332014f0797) C:\Windows\ehome\ehRecvr.exe
01:02:14.0243 40228 ehRecvr - ok
01:02:14.0264 40228 ehSched (ad1870c8e5d6dd340c829e6074bf3c3f) C:\Windows\ehome\ehsched.exe
01:02:14.0336 40228 ehSched - ok
01:02:14.0353 40228 ehstart (c27c4ee8926e74aa72efcab24c5242c3) C:\Windows\ehome\ehstart.dll
01:02:14.0377 40228 ehstart - ok
01:02:14.0418 40228 ElbyCDIO (44996a2addd2db7454f2ca40b67d8941) C:\Windows\system32\Drivers\ElbyCDIO.sys
01:02:14.0460 40228 ElbyCDIO - ok
01:02:14.0499 40228 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys
01:02:14.0520 40228 elxstor - ok
01:02:14.0572 40228 EMDMgmt (4e6b23dfc917ea39306b529b773950f4) C:\Windows\system32\emdmgmt.dll
01:02:14.0642 40228 EMDMgmt - ok
01:02:14.0667 40228 ENTECH (16ebd8bf1d5090923694cc972c7ce1b4) C:\Windows\system32\DRIVERS\ENTECH.sys
01:02:14.0679 40228 ENTECH - ok
01:02:14.0708 40228 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys
01:02:14.0736 40228 ErrDev - ok
01:02:14.0762 40228 EventSystem (67058c46504bc12d821f38cf99b7b28f) C:\Windows\system32\es.dll
01:02:14.0818 40228 EventSystem - ok
01:02:14.0847 40228 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
01:02:14.0909 40228 exfat - ok
01:02:14.0973 40228 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
01:02:15.0007 40228 fastfat - ok
01:02:15.0041 40228 Fax (dfba0f60fa301e5b1bfb1403a93ee23e) C:\Windows\system32\fxssvc.exe
01:02:15.0128 40228 Fax - ok
01:02:15.0156 40228 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys
01:02:15.0202 40228 fdc - ok
01:02:15.0236 40228 fdPHost (6629b5f0e98151f4afdd87567ea32ba3) C:\Windows\system32\fdPHost.dll
01:02:15.0290 40228 fdPHost - ok
01:02:15.0323 40228 FDResPub (89ed56dce8e47af40892778a5bd31fd2) C:\Windows\system32\fdrespub.dll
01:02:15.0429 40228 FDResPub - ok
01:02:15.0485 40228 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
01:02:15.0498 40228 FileInfo - ok
01:02:15.0510 40228 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
01:02:15.0549 40228 Filetrace - ok
01:02:15.0620 40228 FLEXnet Licensing Service (1f63900e2eb00101b9aca2b7a870704e) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
01:02:15.0659 40228 FLEXnet Licensing Service - ok
01:02:15.0713 40228 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
01:02:15.0753 40228 flpydisk - ok
01:02:15.0783 40228 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
01:02:15.0800 40228 FltMgr - ok
01:02:15.0861 40228 FontCache (8ce364388c8eca59b14b539179276d44) C:\Windows\system32\FntCache.dll
01:02:15.0988 40228 FontCache - ok
01:02:16.0043 40228 FontCache3.0.0.0 (c7fbdd1ed42f82bfa35167a5c9803ea3) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
01:02:16.0056 40228 FontCache3.0.0.0 - ok
01:02:16.0115 40228 fssfltr (b74b0578fd1d3f897e95f2a2b69ea051) C:\Windows\system32\DRIVERS\fssfltr.sys
01:02:16.0128 40228 fssfltr - ok
01:02:16.0252 40228 fsssvc (45b52394f9624237f33a8a3d73c0b221) C:\Program Files\Windows Live\Family Safety\fsssvc.exe
01:02:16.0307 40228 fsssvc - ok
01:02:16.0326 40228 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
01:02:16.0373 40228 Fs_Rec - ok
01:02:16.0415 40228 fvevol (fecf4c2e42440a8d132bf94eee3c3fc9) C:\Windows\system32\DRIVERS\fvevol.sys
01:02:16.0431 40228 fvevol - ok
01:02:16.0472 40228 Fwleaf (f7189d63cfe4309c5d3449e39ca2d219) C:\Windows\system32\DRIVERS\fwleaf.sys
01:02:16.0499 40228 Fwleaf - ok
01:02:16.0560 40228 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys
01:02:16.0573 40228 gagp30kx - ok
01:02:16.0621 40228 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
01:02:16.0631 40228 GEARAspiWDM - ok
01:02:16.0743 40228 GoogleDesktopManager-051210-111108 (9f5f2f0fb0a7f5aa9f16b9a7b6dad89f) C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
01:02:16.0755 40228 GoogleDesktopManager-051210-111108 - ok
01:02:16.0799 40228 gpsvc (cd5d0aeee35dfd4e986a5aa1500a6e66) C:\Windows\System32\gpsvc.dll
01:02:16.0844 40228 gpsvc - ok
01:02:16.0876 40228 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe
01:02:16.0887 40228 gupdate - ok
01:02:16.0929 40228 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe
01:02:16.0942 40228 gupdatem - ok
01:02:17.0035 40228 gusvc (408ddd80eede47175f6844817b90213e) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
01:02:17.0049 40228 gusvc - ok
01:02:17.0101 40228 HdAudAddService (3f90e001369a07243763bd5a523d8722) C:\Windows\system32\drivers\HdAudio.sys
01:02:17.0171 40228 HdAudAddService - ok
01:02:17.0211 40228 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
01:02:17.0326 40228 HDAudBus - ok
01:02:17.0381 40228 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
01:02:17.0430 40228 HidBth - ok
01:02:17.0451 40228 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
01:02:17.0518 40228 HidIr - ok
01:02:17.0543 40228 hidserv (84067081f3318162797385e11a8f0582) C:\Windows\system32\hidserv.dll
01:02:17.0576 40228 hidserv - ok
01:02:17.0611 40228 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
01:02:17.0670 40228 HidUsb - ok
01:02:17.0700 40228 hkmsvc (d8ad255b37da92434c26e4876db7d418) C:\Windows\system32\kmsvc.dll
01:02:17.0739 40228 hkmsvc - ok
01:02:17.0773 40228 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys
01:02:17.0787 40228 HpCISSs - ok
01:02:17.0828 40228 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
01:02:17.0902 40228 HTTP - ok
01:02:17.0928 40228 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys
01:02:17.0941 40228 i2omp - ok
01:02:17.0993 40228 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
01:02:18.0033 40228 i8042prt - ok
01:02:18.0051 40228 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys
01:02:18.0068 40228 iaStorV - ok
01:02:18.0135 40228 idsvc (98477b08e61945f974ed9fdc4cb6bdab) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
01:02:18.0169 40228 idsvc - ok
01:02:18.0189 40228 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
01:02:18.0201 40228 iirsp - ok
01:02:18.0233 40228 IKEEXT (9908d8a397b76cd8d31d0d383c5773c9) C:\Windows\System32\ikeext.dll
01:02:18.0295 40228 IKEEXT - ok
01:02:18.0357 40228 InCDFs (76abfdda65f55c748251113f0384f284) C:\Windows\system32\DRIVERS\InCDFs.sys
01:02:18.0370 40228 InCDFs - ok
01:02:18.0387 40228 InCDPass (57bb1728fa4c4d11e446c35c554a4f71) C:\Windows\system32\DRIVERS\InCDPass.sys
01:02:18.0398 40228 InCDPass - ok
01:02:18.0413 40228 InCDRec (d480fc3bd1ba022ad78f867f59464a4e) C:\Windows\system32\DRIVERS\InCDRec.sys
01:02:18.0423 40228 InCDRec - ok
01:02:18.0539 40228 InCDSrv (2c8d41fe25c92295a7ea5ee0abdf42ff) C:\Program Files\Nero\Nero 9\InCD\InCDSrv.exe
01:02:18.0600 40228 InCDSrv - ok
01:02:18.0808 40228 IntcAzAudAddService (7c5afed75cf690df0610df01a9561aeb) C:\Windows\system32\drivers\RTKVHDA.sys
01:02:18.0970 40228 IntcAzAudAddService - ok
01:02:19.0095 40228 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
01:02:19.0109 40228 intelide - ok
01:02:19.0140 40228 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
01:02:19.0186 40228 intelppm - ok
01:02:19.0218 40228 IPBusEnum (9ac218c6e6105477484c6fdbe7d409a4) C:\Windows\system32\ipbusenum.dll
01:02:19.0264 40228 IPBusEnum - ok
01:02:19.0293 40228 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
01:02:19.0332 40228 IpFilterDriver - ok
01:02:19.0384 40228 iphlpsvc (1998bd97f950680bb55f55a7244679c2) C:\Windows\System32\iphlpsvc.dll
01:02:19.0433 40228 iphlpsvc - ok
01:02:19.0436 40228 IpInIp - ok
01:02:19.0461 40228 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys
01:02:19.0503 40228 IPMIDRV - ok
01:02:19.0529 40228 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
01:02:19.0586 40228 IPNAT - ok
01:02:19.0657 40228 iPod Service (e6be7a41a28d8f2db174957454d32448) C:\Program Files\iPod\bin\iPodService.exe
01:02:19.0686 40228 iPod Service - ok
01:02:19.0700 40228 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
01:02:19.0749 40228 IRENUM - ok
01:02:19.0791 40228 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys
01:02:19.0804 40228 isapnp - ok
01:02:19.0840 40228 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
01:02:19.0857 40228 iScsiPrt - ok
01:02:19.0917 40228 ISODrive (0ae61463adda697a6291155ce6b08aaf) C:\Program Files\UltraISO\drivers\ISODrive.sys
01:02:19.0950 40228 ISODrive - ok
01:02:19.0973 40228 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
01:02:19.0986 40228 iteatapi - ok
01:02:20.0010 40228 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
01:02:20.0022 40228 iteraid - ok
01:02:20.0082 40228 JRAID (a324485106f133e751f4b7f47c4be3ea) C:\Windows\system32\DRIVERS\jraid.sys
01:02:20.0194 40228 JRAID - ok
01:02:20.0216 40228 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
01:02:20.0229 40228 kbdclass - ok
01:02:20.0259 40228 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys
01:02:20.0310 40228 kbdhid - ok
01:02:20.0331 40228 KeyIso (3978f3540329e16c0ac3bcf677e5669f) C:\Windows\system32\lsass.exe
01:02:20.0371 40228 KeyIso - ok
01:02:20.0396 40228 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys
01:02:20.0421 40228 KSecDD - ok
01:02:20.0462 40228 KtmRm (8078f8f8f7a79e2e6b494523a828c585) C:\Windows\system32\msdtckrm.dll
01:02:20.0512 40228 KtmRm - ok
01:02:20.0553 40228 LanmanServer (1bf5eebfd518dd7298434d8c862f825d) C:\Windows\system32\srvsvc.dll
01:02:20.0604 40228 LanmanServer - ok
01:02:20.0650 40228 LanmanWorkstation (1db69705b695b987082c8baec0c6b34f) C:\Windows\System32\wkssvc.dll
01:02:20.0726 40228 LanmanWorkstation - ok
01:02:20.0794 40228 leafnets (51674c5c2eeff3d155edab0f5ef9a4d2) C:\Windows\system32\DRIVERS\leafnets.sys
01:02:20.0855 40228 leafnets - ok
01:02:20.0890 40228 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
01:02:20.0934 40228 lltdio - ok
01:02:20.0984 40228 lltdsvc (2d5a428872f1442631d0959a34abff63) C:\Windows\System32\lltdsvc.dll
01:02:21.0027 40228 lltdsvc - ok
01:02:21.0116 40228 lmhosts (35d40113e4a5b961b6ce5c5857702518) C:\Windows\System32\lmhsvc.dll
01:02:21.0183 40228 lmhosts - ok
01:02:21.0210 40228 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys
01:02:21.0225 40228 LSI_FC - ok
01:02:21.0253 40228 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys
01:02:21.0271 40228 LSI_SAS - ok
01:02:21.0295 40228 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys
01:02:21.0309 40228 LSI_SCSI - ok
01:02:21.0322 40228 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
01:02:21.0382 40228 luafv - ok
01:02:21.0468 40228 LVcKap (9a3d4fc6b86e7e36473079ab76ac703d) C:\Windows\system32\DRIVERS\LVcKap.sys
01:02:21.0626 40228 LVcKap - ok
01:02:21.0887 40228 LVMVDrv (0acbc11f19320af6c19f2e20013d9095) C:\Windows\system32\DRIVERS\LVMVDrv.sys
01:02:21.0998 40228 LVMVDrv - ok
01:02:22.0044 40228 LVPr2Mon (12866641284ebb41e627bb53c04da959) C:\Windows\system32\DRIVERS\LVPr2Mon.sys
01:02:22.0073 40228 LVPr2Mon - ok
01:02:22.0157 40228 LVPrcSrv (995d0b52870c7a5caf3ea165fd674a35) c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
01:02:22.0167 40228 LVPrcSrv - ok
01:02:22.0202 40228 LVSrvLauncher (a005cee9be199c5e375faa559ca9a7a9) C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
01:02:22.0214 40228 LVSrvLauncher - ok
01:02:22.0228 40228 LVUSBSta (64bc29c3a0388bfc580bb8b1346f7659) C:\Windows\system32\drivers\LVUSBSta.sys
01:02:22.0239 40228 LVUSBSta - ok
01:02:22.0264 40228 Mcx2Svc (aef9babb8a506bc4ce0451a64aaded46) C:\Windows\system32\Mcx2Svc.dll
01:02:22.0319 40228 Mcx2Svc - ok
01:02:22.0419 40228 MDM (7cf1b716372b89568ae4c0fe769f5869) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
01:02:22.0443 40228 MDM ( UnsignedFile.Multi.Generic ) - warning
01:02:22.0443 40228 MDM - detected UnsignedFile.Multi.Generic (1)
01:02:22.0478 40228 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys
01:02:22.0490 40228 megasas - ok
01:02:22.0528 40228 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys
01:02:22.0550 40228 MegaSR - ok
01:02:22.0617 40228 Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
01:02:22.0630 40228 Microsoft Office Groove Audit Service - ok
01:02:22.0647 40228 MMCSS (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll
01:02:22.0684 40228 MMCSS - ok
01:02:22.0731 40228 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
01:02:22.0760 40228 Modem - ok
01:02:22.0787 40228 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
01:02:22.0824 40228 monitor - ok
01:02:22.0878 40228 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
01:02:22.0891 40228 mouclass - ok
01:02:22.0915 40228 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
01:02:22.0956 40228 mouhid - ok
01:02:22.0972 40228 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
01:02:22.0985 40228 MountMgr - ok
01:02:23.0028 40228 MozillaMaintenance (15d5398eed42c2504bb3d4fc875c15d1) C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
01:02:23.0042 40228 MozillaMaintenance - ok
01:02:23.0057 40228 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys
01:02:23.0072 40228 mpio - ok
01:02:23.0085 40228 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
01:02:23.0139 40228 mpsdrv - ok
01:02:23.0184 40228 MpsSvc (5de62c6e9108f14f6794060a9bdecaec) C:\Windows\system32\mpssvc.dll
01:02:23.0215 40228 MpsSvc - ok
01:02:23.0257 40228 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
01:02:23.0269 40228 Mraid35x - ok
01:02:23.0307 40228 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
01:02:23.0337 40228 MRxDAV - ok
01:02:23.0367 40228 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
01:02:23.0412 40228 mrxsmb - ok
01:02:23.0426 40228 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
01:02:23.0479 40228 mrxsmb10 - ok
01:02:23.0533 40228 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
01:02:23.0560 40228 mrxsmb20 - ok
01:02:23.0596 40228 msahci (28023e86f17001f7cd9b15a5bc9ae07d) C:\Windows\system32\drivers\msahci.sys
01:02:23.0608 40228 msahci - ok
01:02:23.0646 40228 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys
01:02:23.0660 40228 msdsm - ok
01:02:23.0717 40228 MSDTC (fd7520cc3a80c5fc8c48852bb24c6ded) C:\Windows\System32\msdtc.exe
01:02:23.0761 40228 MSDTC - ok
01:02:23.0776 40228 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
01:02:23.0804 40228 Msfs - ok
01:02:23.0827 40228 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
01:02:23.0840 40228 msisadrv - ok
01:02:23.0881 40228 MSiSCSI (85466c0757a23d9a9aecdc0755203cb2) C:\Windows\system32\iscsiexe.dll
01:02:23.0938 40228 MSiSCSI - ok
01:02:23.0941 40228 msiserver - ok
01:02:23.0976 40228 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
01:02:24.0014 40228 MSKSSRV - ok
01:02:24.0027 40228 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
01:02:24.0056 40228 MSPCLOCK - ok
01:02:24.0060 40228 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
01:02:24.0116 40228 MSPQM - ok
01:02:24.0141 40228 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
01:02:24.0158 40228 MsRPC - ok
01:02:24.0170 40228 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
01:02:24.0183 40228 mssmbios - ok
01:02:24.0207 40228 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
01:02:24.0236 40228 MSTEE - ok
01:02:24.0269 40228 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
01:02:24.0283 40228 Mup - ok
01:02:24.0314 40228 napagent (e4eaf0c5c1b41b5c83386cf212ca9584) C:\Windows\system32\qagentRT.dll
01:02:24.0350 40228 napagent - ok
01:02:24.0423 40228 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
01:02:24.0446 40228 NativeWifiP - ok
01:02:24.0512 40228 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
01:02:24.0539 40228 NDIS - ok
01:02:24.0590 40228 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
01:02:24.0622 40228 NdisTapi - ok
01:02:24.0662 40228 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
01:02:24.0697 40228 Ndisuio - ok
01:02:24.0741 40228 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
01:02:24.0776 40228 NdisWan - ok
01:02:24.0803 40228 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
01:02:24.0843 40228 NDProxy - ok
01:02:25.0022 40228 Nero BackItUp Scheduler 4.0 (b90e093e7a7250906f1054418b5339c0) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
01:02:25.0068 40228 Nero BackItUp Scheduler 4.0 - ok
01:02:25.0131 40228 NeroRegInCDSrv (7743903910d79dcf6fd8c7224736e61e) C:\Program Files\Nero\Nero 9\InCD\NBHRegInCDSrv.exe
01:02:25.0141 40228 NeroRegInCDSrv - ok
01:02:25.0159 40228 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
01:02:25.0195 40228 NetBIOS - ok
01:02:25.0236 40228 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
01:02:25.0272 40228 netbt - ok
01:02:25.0295 40228 Netlogon (3978f3540329e16c0ac3bcf677e5669f) C:\Windows\system32\lsass.exe
01:02:25.0310 40228 Netlogon - ok
01:02:25.0337 40228 Netman (c8052711daecc48b982434c5116ca401) C:\Windows\System32\netman.dll
01:02:25.0369 40228 Netman - ok
01:02:25.0428 40228 netprofm (2ef3bbe22e5a5acd1428ee387a0d0172) C:\Windows\System32\netprofm.dll
01:02:25.0478 40228 netprofm - ok
01:02:25.0549 40228 NetTcpPortSharing (d6c4e4a39a36029ac0813d476fbd0248) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
01:02:25.0563 40228 NetTcpPortSharing - ok
01:02:25.0589 40228 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
01:02:25.0602 40228 nfrd960 - ok
01:02:25.0638 40228 NlaSvc (2997b15415f9bbe05b5a4c1c85e0c6a2) C:\Windows\System32\nlasvc.dll
01:02:25.0694 40228 NlaSvc - ok
01:02:25.0753 40228 NPF (243126da7ba441d7c7c3262dcf435a9c) C:\Windows\system32\drivers\npf.sys
01:02:25.0791 40228 NPF - ok
01:02:25.0825 40228 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
01:02:25.0856 40228 Npfs - ok
01:02:25.0869 40228 nsi (8bb86f0c7eea2bded6fe095d0b4ca9bd) C:\Windows\system32\nsisvc.dll
01:02:25.0902 40228 nsi - ok
01:02:25.0917 40228 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
01:02:25.0955 40228 nsiproxy - ok
01:02:26.0012 40228 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
01:02:26.0056 40228 Ntfs - ok
01:02:26.0078 40228 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
01:02:26.0137 40228 ntrigdigi - ok
01:02:26.0151 40228 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
01:02:26.0191 40228 Null - ok
01:02:26.0516 40228 nvlddmkm (847b1755f7757f825305a1ffe6dac3e9) C:\Windows\system32\DRIVERS\nvlddmkm.sys
01:02:26.0931 40228 nvlddmkm - ok
01:02:27.0029 40228 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys
01:02:27.0044 40228 nvraid - ok
01:02:27.0059 40228 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys
01:02:27.0072 40228 nvstor - ok
01:02:27.0123 40228 nvsvc (7c732aff202dcd06c3d262966d71604c) C:\Windows\system32\nvvsvc.exe
01:02:27.0174 40228 nvsvc - ok
01:02:27.0296 40228 nvUpdatusService (262d2fbf211a88dcb84249df0f6ef6e7) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
01:02:27.0399 40228 nvUpdatusService - ok
01:02:27.0525 40228 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys
01:02:27.0539 40228 nv_agp - ok
01:02:27.0542 40228 NwlnkFlt - ok
01:02:27.0546 40228 NwlnkFwd - ok
01:02:27.0654 40228 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
01:02:27.0693 40228 odserv - ok
01:02:27.0764 40228 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys
01:02:27.0798 40228 ohci1394 - ok
01:02:27.0831 40228 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
01:02:27.0861 40228 ose - ok
01:02:27.0914 40228 p2pimsvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
01:02:27.0954 40228 p2pimsvc - ok
01:02:27.0960 40228 p2psvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
01:02:27.0986 40228 p2psvc - ok
01:02:28.0050 40228 Parport (8a79fdf04a73428597e2caf9d0d67850) C:\Windows\system32\DRIVERS\parport.sys
01:02:28.0120 40228 Parport - ok
01:02:28.0142 40228 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
01:02:28.0157 40228 partmgr - ok
01:02:28.0243 40228 Parvdm (6c580025c81caf3ae9e3617c22cad00e) C:\Windows\system32\DRIVERS\parvdm.sys
01:02:28.0286 40228 Parvdm - ok
01:02:28.0408 40228 Pavboot (55d654258a9c509b671310c314bd30b4) C:\Windows\system32\Drivers\pavboot.sys
01:02:28.0418 40228 Pavboot - ok
01:02:28.0454 40228 PcaSvc (c6276ad11f4bb49b58aa1ed88537f14a) C:\Windows\System32\pcasvc.dll
01:02:28.0530 40228 PcaSvc - ok
01:02:28.0557 40228 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
01:02:28.0574 40228 pci - ok
01:02:28.0603 40228 pciide (1636d43f10416aeb483bc6001097b26c) C:\Windows\system32\drivers\pciide.sys
01:02:28.0616 40228 pciide - ok
01:02:28.0657 40228 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
01:02:28.0672 40228 pcmcia - ok
01:02:28.0725 40228 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\Windows\system32\Drivers\pcouffin.sys
01:02:28.0795 40228 pcouffin - ok
01:02:28.0839 40228 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
01:02:28.0944 40228 PEAUTH - ok
01:02:29.0022 40228 pla (b1689df169143f57053f795390c99db3) C:\Windows\system32\pla.dll
01:02:29.0133 40228 pla - ok
01:02:29.0232 40228 PLFlash DeviceIoControl Service (e406a33046228bd89f0c2db5c172f19c) C:\Windows\system32\IoctlSvc.exe
01:02:29.0243 40228 PLFlash DeviceIoControl Service - ok
01:02:29.0274 40228 PlugPlay (c5e7f8a996ec0a82d508fd9064a5569e) C:\Windows\system32\umpnpmgr.dll
01:02:29.0308 40228 PlugPlay - ok
01:02:29.0353 40228 PNRPAutoReg (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
01:02:29.0380 40228 PNRPAutoReg - ok
01:02:29.0387 40228 PNRPsvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
01:02:29.0414 40228 PNRPsvc - ok
01:02:29.0433 40228 PolicyAgent (d0494460421a03cd5225cca0059aa146) C:\Windows\System32\ipsecsvc.dll
01:02:29.0479 40228 PolicyAgent - ok
01:02:29.0518 40228 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
01:02:29.0581 40228 PptpMiniport - ok
01:02:29.0606 40228 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys
01:02:29.0635 40228 Processor - ok
01:02:29.0654 40228 ProfSvc (0508faa222d28835310b7bfca7a77346) C:\Windows\system32\profsvc.dll
01:02:29.0683 40228 ProfSvc - ok
01:02:29.0715 40228 ProtectedStorage (3978f3540329e16c0ac3bcf677e5669f) C:\Windows\system32\lsass.exe
01:02:29.0730 40228 ProtectedStorage - ok
01:02:29.0780 40228 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
01:02:29.0815 40228 PSched - ok
01:02:29.0877 40228 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys
01:02:29.0927 40228 ql2300 - ok
01:02:29.0959 40228 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
01:02:29.0973 40228 ql40xx - ok
01:02:30.0020 40228 QWAVE (e9ecae663f47e6cb43962d18ab18890f) C:\Windows\system32\qwave.dll
01:02:30.0052 40228 QWAVE - ok
01:02:30.0069 40228 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
01:02:30.0092 40228 QWAVEdrv - ok
01:02:30.0100 40228 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
01:02:30.0128 40228 RasAcd - ok
01:02:30.0140 40228 RasAuto (f6a452eb4ceadbb51c9e0ee6b3ecef0f) C:\Windows\System32\rasauto.dll
01:02:30.0171 40228 RasAuto - ok
01:02:30.0202 40228 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
01:02:30.0232 40228 Rasl2tp - ok
01:02:30.0270 40228 RasMan (75d47445d70ca6f9f894b032fbc64fcf) C:\Windows\System32\rasmans.dll
01:02:30.0323 40228 RasMan - ok
01:02:30.0349 40228 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
01:02:30.0389 40228 RasPppoe - ok
01:02:30.0415 40228 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
01:02:30.0443 40228 RasSstp - ok
01:02:30.0478 40228 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
01:02:30.0504 40228 rdbss - ok
01:02:30.0522 40228 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
01:02:30.0583 40228 RDPCDD - ok
01:02:30.0620 40228 rdpdr (943b18305eae3935598a9b4a3d560b4c) C:\Windows\system32\DRIVERS\rdpdr.sys
01:02:30.0658 40228 rdpdr - ok
01:02:30.0684 40228 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
01:02:30.0730 40228 RDPENCDD - ok
01:02:30.0795 40228 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
01:02:30.0830 40228 RDPWD - ok
01:02:30.0855 40228 RemoteAccess (bcdd6b4804d06b1f7ebf29e53a57ece9) C:\Windows\System32\mprdim.dll
01:02:30.0904 40228 RemoteAccess - ok
01:02:30.0934 40228 RemoteRegistry (9e6894ea18daff37b63e1005f83ae4ab) C:\Windows\system32\regsvc.dll
01:02:30.0974 40228 RemoteRegistry - ok
01:02:31.0017 40228 Revoflt (b9bb8e2093c1615ad6ea55ad96214354) C:\Windows\system32\DRIVERS\revoflt.sys
01:02:31.0042 40228 Revoflt - ok
01:02:31.0065 40228 RpcLocator (5123f83cbc4349d065534eeb6bbdc42b) C:\Windows\system32\locator.exe
01:02:31.0119 40228 RpcLocator - ok
01:02:31.0173 40228 RpcSs (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll
01:02:31.0204 40228 RpcSs - ok
01:02:31.0226 40228 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
01:02:31.0271 40228 rspndr - ok
01:02:31.0312 40228 rt61x86 (5c586011e654d95d2bb2d0f0121e3e31) C:\Windows\system32\DRIVERS\netr61.sys
01:02:31.0413 40228 rt61x86 - ok
01:02:31.0449 40228 RTL8169 (2d19a7469ea19993d0c12e627f4530bc) C:\Windows\system32\DRIVERS\Rtlh86.sys
01:02:31.0531 40228 RTL8169 - ok
01:02:31.0554 40228 SamSs (3978f3540329e16c0ac3bcf677e5669f) C:\Windows\system32\lsass.exe
01:02:31.0571 40228 SamSs - ok
01:02:31.0594 40228 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
01:02:31.0608 40228 sbp2port - ok
01:02:31.0644 40228 SCardSvr (77b7a11a0c3d78d3386398fbbea1b632) C:\Windows\System32\SCardSvr.dll
01:02:31.0672 40228 SCardSvr - ok
01:02:31.0721 40228 Schedule (1a58069db21d05eb2ab58ee5753ebe8d) C:\Windows\system32\schedsvc.dll
01:02:31.0762 40228 Schedule - ok
01:02:31.0793 40228 SCPolicySvc (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll
01:02:31.0814 40228 SCPolicySvc - ok
01:02:31.0835 40228 SDRSVC (716313d9f6b0529d03f726d5aaf6f191) C:\Windows\System32\SDRSVC.dll
01:02:31.0885 40228 SDRSVC - ok
01:02:31.0901 40228 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
01:02:31.0949 40228 secdrv - ok
01:02:31.0981 40228 seclogon (fd5199d4d8a521005e4b5ee7fe00fa9b) C:\Windows\system32\seclogon.dll
01:02:32.0013 40228 seclogon - ok
01:02:32.0019 40228 SENS (a9bbab5759771e523f55563d6cbe140f) C:\Windows\System32\sens.dll
01:02:32.0048 40228 SENS - ok
01:02:32.0092 40228 Serenum (ce9ec966638ef0b10b864ddedf62a099) C:\Windows\system32\DRIVERS\serenum.sys
01:02:32.0121 40228 Serenum - ok
01:02:32.0135 40228 Serial (6d663022db3e7058907784ae14b69898) C:\Windows\system32\DRIVERS\serial.sys
01:02:32.0177 40228 Serial - ok
01:02:32.0210 40228 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
01:02:32.0239 40228 sermouse - ok
01:02:32.0257 40228 SessionEnv (d2193326f729b163125610dbf3e17d57) C:\Windows\system32\sessenv.dll
01:02:32.0312 40228 SessionEnv - ok
01:02:32.0391 40228 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys
01:02:32.0427 40228 sffdisk - ok
01:02:32.0464 40228 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys
01:02:32.0507 40228 sffp_mmc - ok
01:02:32.0525 40228 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys
01:02:32.0557 40228 sffp_sd - ok
01:02:32.0569 40228 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
01:02:32.0618 40228 sfloppy - ok
01:02:32.0642 40228 SharedAccess (e1499bd0ff76b1b2fbbf1af339d91165) C:\Windows\System32\ipnathlp.dll
01:02:32.0689 40228 SharedAccess - ok
01:02:32.0735 40228 ShellHWDetection (c7230fbee14437716701c15be02c27b8) C:\Windows\System32\shsvcs.dll
01:02:32.0764 40228 ShellHWDetection - ok
01:02:32.0790 40228 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys
01:02:32.0804 40228 sisagp - ok
01:02:32.0816 40228 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys
01:02:32.0829 40228 SiSRaid2 - ok
01:02:32.0847 40228 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys
01:02:32.0861 40228 SiSRaid4 - ok
01:02:32.0977 40228 slsvc (862bb4cbc05d80c5b45be430e5ef872f) C:\Windows\system32\SLsvc.exe
01:02:33.0160 40228 slsvc - ok
01:02:33.0243 40228 SLUINotify (6edc422215cd78aa8a9cde6b30abbd35) C:\Windows\system32\SLUINotify.dll
01:02:33.0280 40228 SLUINotify - ok
01:02:33.0357 40228 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
01:02:33.0386 40228 Smb - ok
01:02:33.0411 40228 SNMPTRAP (2a146a055b4401c16ee62d18b8e2a032) C:\Windows\System32\snmptrap.exe
01:02:33.0476 40228 SNMPTRAP - ok
01:02:33.0490 40228 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
01:02:33.0502 40228 spldr - ok
01:02:33.0532 40228 Spooler (8554097e5136c3bf9f69fe578a1b35f4) C:\Windows\System32\spoolsv.exe
01:02:33.0601 40228 Spooler - ok
01:02:33.0644 40228 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
01:02:33.0669 40228 srv - ok
01:02:33.0700 40228 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys
01:02:33.0728 40228 srv2 - ok
01:02:33.0749 40228 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys
01:02:33.0780 40228 srvnet - ok
01:02:33.0811 40228 SSDPSRV (03d50b37234967433a5ea5ba72bc0b62) C:\Windows\System32\ssdpsrv.dll
01:02:33.0849 40228 SSDPSRV - ok
01:02:33.0886 40228 SstpSvc (6f1a32e7b7b30f004d9a20afadb14944) C:\Windows\system32\sstpsvc.dll
01:02:33.0904 40228 SstpSvc - ok
01:02:33.0948 40228 stisvc (5de7d67e49b88f5f07f3e53c4b92a352) C:\Windows\System32\wiaservc.dll
01:02:33.0987 40228 stisvc - ok
01:02:34.0014 40228 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
01:02:34.0026 40228 swenum - ok
01:02:34.0065 40228 swprv (f21fd248040681cca1fb6c9a03aaa93d) C:\Windows\System32\swprv.dll
01:02:34.0110 40228 swprv - ok
01:02:34.0137 40228 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
01:02:34.0149 40228 Symc8xx - ok
01:02:34.0165 40228 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
01:02:34.0177 40228 Sym_hi - ok
01:02:34.0192 40228 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
01:02:34.0205 40228 Sym_u3 - ok
01:02:34.0252 40228 SysMain (9a51b04e9886aa4ee90093586b0ba88d) C:\Windows\system32\sysmain.dll
01:02:34.0311 40228 SysMain - ok
01:02:34.0334 40228 TabletInputService (2dca225eae15f42c0933e998ee0231c3) C:\Windows\System32\TabSvc.dll
01:02:34.0371 40228 TabletInputService - ok
01:02:34.0426 40228 tap0901 (6d1312007f70439ee08bdd0b7118f322) C:\Windows\system32\DRIVERS\tap0901.sys
01:02:34.0468 40228 tap0901 - ok
01:02:34.0501 40228 TapiSrv (d7673e4b38ce21ee54c59eeeb65e2483) C:\Windows\System32\tapisrv.dll
01:02:34.0528 40228 TapiSrv - ok
01:02:34.0538 40228 TBS (cb05822cd9cc6c688168e113c603dbe7) C:\Windows\System32\tbssvc.dll
01:02:34.0568 40228 TBS - ok
01:02:34.0628 40228 Tcpip (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\drivers\tcpip.sys
01:02:34.0679 40228 Tcpip - ok
01:02:34.0691 40228 Tcpip6 (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\DRIVERS\tcpip.sys
01:02:34.0722 40228 Tcpip6 - ok
01:02:34.0756 40228 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys
01:02:34.0814 40228 tcpipreg - ok
01:02:34.0848 40228 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
01:02:34.0886 40228 TDPIPE - ok
01:02:34.0938 40228 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
01:02:35.0027 40228 TDTCP - ok
01:02:35.0062 40228 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
01:02:35.0095 40228 tdx - ok
01:02:35.0124 40228 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
01:02:35.0152 40228 TermDD - ok
01:02:35.0280 40228 TermService (bb95da09bef6e7a131bff3ba5032090d) C:\Windows\System32\termsrv.dll
01:02:35.0346 40228 TermService - ok
01:02:35.0408 40228 Themes (c7230fbee14437716701c15be02c27b8) C:\Windows\system32\shsvcs.dll
01:02:35.0426 40228 Themes - ok
01:02:35.0458 40228 THREADORDER (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll
01:02:35.0486 40228 THREADORDER - ok
01:02:35.0509 40228 TrkWks (ec74e77d0eb004bd3a809b5f8fb8c2ce) C:\Windows\System32\trkwks.dll
01:02:35.0555 40228 TrkWks - ok
01:02:35.0599 40228 TrustedInstaller (97d9d6a04e3ad9b6c626b9931db78dba) C:\Windows\servicing\TrustedInstaller.exe
01:02:35.0638 40228 TrustedInstaller - ok
01:02:35.0669 40228 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
01:02:35.0710 40228 tssecsrv - ok
01:02:35.0739 40228 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
01:02:35.0816 40228 tunmp - ok
01:02:35.0919 40228 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
01:02:35.0974 40228 tunnel - ok
01:02:36.0010 40228 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys
01:02:36.0023 40228 uagp35 - ok
01:02:36.0060 40228 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
01:02:36.0086 40228 udfs - ok
01:02:36.0116 40228 UI0Detect (ecef404f62863755951e09c802c94ad5) C:\Windows\system32\UI0Detect.exe
01:02:36.0159 40228 UI0Detect - ok
01:02:36.0208 40228 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys
01:02:36.0223 40228 uliagpkx - ok
01:02:36.0261 40228 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys
01:02:36.0277 40228 uliahci - ok
01:02:36.0297 40228 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
01:02:36.0321 40228 UlSata - ok
01:02:36.0368 40228 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
01:02:36.0382 40228 ulsata2 - ok
01:02:36.0402 40228 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
01:02:36.0441 40228 umbus - ok
01:02:36.0486 40228 UmRdpService (8a66360f38f81e960e2367b428cbd5d9) C:\Windows\System32\umrdp.dll
01:02:36.0533 40228 UmRdpService - ok
01:02:36.0594 40228 upnphost (68308183f4ae0be7bf8ecd07cb297999) C:\Windows\System32\upnphost.dll
01:02:36.0635 40228 upnphost - ok
01:02:36.0677 40228 USBAAPL (eafe1e00739afe6c51487a050e772e17) C:\Windows\system32\Drivers\usbaapl.sys
01:02:36.0726 40228 USBAAPL - ok
01:02:36.0797 40228 usbaudio (32db9517628ff0d070682aab61e688f0) C:\Windows\system32\drivers\usbaudio.sys
01:02:36.0855 40228 usbaudio - ok
01:02:36.0889 40228 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
01:02:36.0951 40228 usbccgp - ok
01:02:36.0969 40228 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
01:02:37.0024 40228 usbcir - ok
01:02:37.0070 40228 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
01:02:37.0114 40228 usbehci - ok
01:02:37.0140 40228 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
01:02:37.0180 40228 usbhub - ok
01:02:37.0198 40228 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
01:02:37.0271 40228 usbohci - ok
01:02:37.0299 40228 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
01:02:37.0348 40228 usbprint - ok
01:02:37.0413 40228 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys
01:02:37.0468 40228 usbscan - ok
01:02:37.0494 40228 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
01:02:37.0517 40228 USBSTOR - ok
01:02:37.0542 40228 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys
01:02:37.0566 40228 usbuhci - ok
01:02:37.0621 40228 UxSms (1509e705f3ac1d474c92454a5c2dd81f) C:\Windows\System32\uxsms.dll
01:02:37.0646 40228 UxSms - ok
01:02:37.0690 40228 vds (cd88d1b7776dc17a119049742ec07eb4) C:\Windows\System32\vds.exe
01:02:37.0729 40228 vds - ok
01:02:37.0734 40228 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys
01:02:37.0816 40228 vga - ok
01:02:37.0823 40228 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
01:02:37.0853 40228 VgaSave - ok
01:02:37.0867 40228 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys
01:02:37.0880 40228 viaagp - ok
01:02:37.0890 40228 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys
01:02:37.0937 40228 ViaC7 - ok
01:02:37.0956 40228 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys
01:02:37.0968 40228 viaide - ok
01:02:37.0985 40228 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
01:02:37.0998 40228 volmgr - ok
01:02:38.0036 40228 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
01:02:38.0055 40228 volmgrx - ok
01:02:38.0094 40228 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
01:02:38.0112 40228 volsnap - ok
01:02:38.0128 40228 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys
01:02:38.0143 40228 vsmraid - ok
01:02:38.0197 40228 VSS (db3d19f850c6eb32bdcb9bc0836acddb) C:\Windows\system32\vssvc.exe
01:02:38.0277 40228 VSS - ok
01:02:38.0431 40228 vToolbarUpdater11.2.0 (8ed347bad8d1fb7c40b593bfb01786d2) C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe
01:02:38.0500 40228 vToolbarUpdater11.2.0 - ok
01:02:38.0616 40228 W32Time (96ea68b9eb310a69c25ebb0282b2b9de) C:\Windows\system32\w32time.dll
01:02:38.0657 40228 W32Time - ok
01:02:38.0687 40228 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
01:02:38.0742 40228 WacomPen - ok
01:02:38.0765 40228 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
01:02:38.0789 40228 Wanarp - ok
01:02:38.0793 40228 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
01:02:38.0815 40228 Wanarpv6 - ok
01:02:38.0867 40228 wbengine (20b23332885dfb93fe0185362ee811e9) C:\Windows\system32\wbengine.exe
01:02:38.0938 40228 wbengine - ok
01:02:38.0957 40228 wcncsvc (a3cd60fd826381b49f03832590e069af) C:\Windows\System32\wcncsvc.dll
01:02:38.0982 40228 wcncsvc - ok
01:02:38.0997 40228 WcsPlugInService (11bcb7afcdd7aadacb5746f544d3a9c7) C:\Windows\System32\WcsPlugInService.dll
01:02:39.0021 40228 WcsPlugInService - ok
01:02:39.0056 40228 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys
01:02:39.0069 40228 Wd - ok
01:02:39.0097 40228 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
01:02:39.0121 40228 Wdf01000 - ok
01:02:39.0171 40228 WdiServiceHost (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll
01:02:39.0212 40228 WdiServiceHost - ok
01:02:39.0215 40228 WdiSystemHost (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll
01:02:39.0245 40228 WdiSystemHost - ok
01:02:39.0276 40228 WebClient (04c37d8107320312fbae09926103d5e2) C:\Windows\System32\webclnt.dll
01:02:39.0308 40228 WebClient - ok
01:02:39.0359 40228 Wecsvc (ae3736e7e8892241c23e4ebbb7453b60) C:\Windows\system32\wecsvc.dll
01:02:39.0396 40228 Wecsvc - ok
01:02:39.0415 40228 wercplsupport (670ff720071ed741206d69bd995ea453) C:\Windows\System32\wercplsupport.dll
01:02:39.0451 40228 wercplsupport - ok
01:02:39.0487 40228 WerSvc (32b88481d3b326da6deb07b1d03481e7) C:\Windows\System32\WerSvc.dll
01:02:39.0520 40228 WerSvc - ok
01:02:39.0567 40228 WinDefend (4575aa12561c5648483403541d0d7f2b) C:\Program Files\Windows Defender\mpsvc.dll
01:02:39.0585 40228 WinDefend - ok
01:02:39.0590 40228 WinHttpAutoProxySvc - ok
01:02:39.0627 40228 Winmgmt (6b2a1d0e80110e3d04e6863c6e62fd8a) C:\Windows\system32\wbem\WMIsvc.dll
01:02:39.0651 40228 Winmgmt - ok
01:02:39.0710 40228 WinRM (7cfe68bdc065e55aa5e8421607037511) C:\Windows\system32\WsmSvc.dll
01:02:39.0823 40228 WinRM - ok
01:02:39.0879 40228 Wlansvc (c008405e4feeb069e30da1d823910234) C:\Windows\System32\wlansvc.dll
01:02:39.0938 40228 Wlansvc - ok
01:02:40.0063 40228 wlidsvc (5144ae67d60ec653f97ddf3feed29e77) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
01:02:40.0160 40228 wlidsvc - ok
01:02:40.0261 40228 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\drivers\wmiacpi.sys
01:02:40.0294 40228 WmiAcpi - ok
01:02:40.0354 40228 wmiApSrv (43be3875207dcb62a85c8c49970b66cc) C:\Windows\system32\wbem\WmiApSrv.exe
01:02:40.0377 40228 wmiApSrv - ok
01:02:40.0439 40228 WMPNetworkSvc (3978704576a121a9204f8cc49a301a9b) C:\Program Files\Windows Media Player\wmpnetwk.exe
01:02:40.0523 40228 WMPNetworkSvc - ok
01:02:40.0536 40228 WPCSvc (cfc5a04558f5070cee3e3a7809f3ff52) C:\Windows\System32\wpcsvc.dll
01:02:40.0589 40228 WPCSvc - ok
01:02:40.0623 40228 WPDBusEnum (801fbdb89d472b3c467eb112a0fc9246) C:\Windows\system32\wpdbusenum.dll
01:02:40.0670 40228 WPDBusEnum - ok
01:02:40.0719 40228 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
01:02:40.0765 40228 WpdUsb - ok
01:02:40.0886 40228 WPFFontCache_v0400 (dcf3e3edf5109ee8bc02fe6e1f045795) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
01:02:40.0923 40228 WPFFontCache_v0400 - ok
01:02:40.0927 40228 WPRO_40_1123 - ok
01:02:41.0005 40228 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
01:02:41.0038 40228 ws2ifsl - ok
01:02:41.0069 40228 wscsvc (1ca6c40261ddc0425987980d0cd2aaab) C:\Windows\System32\wscsvc.dll
01:02:41.0098 40228 wscsvc - ok
01:02:41.0101 40228 WSearch - ok
01:02:41.0211 40228 wuauserv (fc3ec24fce372c89423e015a2ac1a31e) C:\Windows\system32\wuaueng.dll
01:02:41.0290 40228 wuauserv - ok
01:02:41.0388 40228 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
01:02:41.0417 40228 WUDFRd - ok
01:02:41.0456 40228 wudfsvc (575a4190d989f64732119e4114045a4f) C:\Windows\System32\WUDFSvc.dll
01:02:41.0496 40228 wudfsvc - ok
01:02:41.0548 40228 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
01:02:41.0958 40228 \Device\Harddisk0\DR0 - ok
01:02:41.0981 40228 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk1\DR1
01:02:42.0173 40228 \Device\Harddisk1\DR1 - ok
01:02:42.0195 40228 Boot (0x1200) (1356f3a73b917d6ed9132ab00343f435) \Device\Harddisk0\DR0\Partition0
01:02:42.0197 40228 \Device\Harddisk0\DR0\Partition0 - ok
01:02:42.0211 40228 Boot (0x1200) (199b4e58347fcc7a5aacdc9ce31a50db) \Device\Harddisk0\DR0\Partition1
01:02:42.0214 40228 \Device\Harddisk0\DR0\Partition1 - ok
01:02:42.0217 40228 Boot (0x1200) (1356f3a73b917d6ed9132ab00343f435) \Device\Harddisk1\DR1\Partition0
01:02:42.0219 40228 \Device\Harddisk1\DR1\Partition0 - ok
01:02:42.0222 40228 Boot (0x1200) (199b4e58347fcc7a5aacdc9ce31a50db) \Device\Harddisk1\DR1\Partition1
01:02:42.0223 40228 \Device\Harddisk1\DR1\Partition1 - ok
01:02:42.0224 40228 ============================================================
01:02:42.0224 40228 Scan finished
01:02:42.0224 40228 ============================================================
01:02:42.0235 47752 Detected object count: 1
01:02:42.0235 47752 Actual detected object count: 1
01:03:05.0730 47752 MDM ( UnsignedFile.Multi.Generic ) - skipped by user
01:03:05.0730 47752 MDM ( UnsignedFile.Multi.Generic ) - User select action: Skip

Rose · #11 Příspěvek od **Rose** » 31 črc 2012 10:36

Tak ještě na závěr, musela sem restart, a od té doby je klid, netuším co to způsobilo, a pokud z těch logů je něco patrné, tak budu ráda vědět důvod, protože pak to mohu napříště nějak ovlivnit. Děkuji v každém případě za Váš čas.

VIRY.CZ

svchost.exe dle Process Exploreru zatěžuje CPU na 25%

svchost.exe dle Process Exploreru zatěžuje CPU na 25%

Re: svchost.exe dle Process Exploreru zatěžuje CPU na 25%

Re: svchost.exe dle Process Exploreru zatěžuje CPU na 25%

Re: svchost.exe dle Process Exploreru zatěžuje CPU na 25%

Re: svchost.exe dle Process Exploreru zatěžuje CPU na 25%

Re: svchost.exe dle Process Exploreru zatěžuje CPU na 25%

Re: svchost.exe dle Process Exploreru zatěžuje CPU na 25%

Re: svchost.exe dle Process Exploreru zatěžuje CPU na 25%

Re: svchost.exe dle Process Exploreru zatěžuje CPU na 25%

Re: svchost.exe dle Process Exploreru zatěžuje CPU na 25%

Re: svchost.exe dle Process Exploreru zatěžuje CPU na 25%